2024 CVEs (page 231)
Page 231 of 385 — CVEs published in 2024, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-23711 | High | 7.8 | 2024-07-09 | In DevmemXIntUnreserveRange of devicemem_server.c, there is a possible arbitrary code execution due to a logic error in the code. This could lead to local esca… |
CVE-2024-23698 | High | 7.8 | 2024-07-09 | In RGXFWChangeOSidPriority of rgxfwutils.c, there is a possible arbitrary code execution due to a missing bounds check. This could lead to local escalation of… |
CVE-2024-23697 | High | 7.8 | 2024-07-09 | In RGXCreateHWRTData_aux of rgxta3d.c, there is a possible arbitrary code execution due to a use after free. This could lead to local escalation of privilege i… |
CVE-2024-23696 | High | 7.8 | 2024-07-09 | In RGXCreateZSBufferKM of rgxta3d.c, there is a possible arbitrary code execution due to a use after free. This could lead to local escalation of privilege in… |
CVE-2024-23695 | High | 7.8 | 2024-07-09 | In CacheOpPMRExec of cache_km.c, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege in the ke… |
CVE-2024-6501 | Low | 3.1 | 2024-07-09 | A flaw was found in NetworkManager. When a system running NetworkManager with DEBUG logs enabled and an interface eth1 configured with LLDP enabled, a maliciou… |
CVE-2024-40750 | Medium | 5.3 | 2024-07-09 | Linksys Velop Pro 6E 1.0.8 MX6200_1.0.8.215731 and 7 1.0.10.215314 devices send cleartext Wi-Fi passwords over the public Internet during app-based installatio… |
CVE-2024-39063 | High | 8.8 | 2024-07-09 | Lime Survey <= 6.5.12 is vulnerable to Cross Site Request Forgery (CSRF). The YII_CSRF_TOKEN is only checked when passed in the body of POST requests, but the… |
CVE-2024-37873 | Critical | 9.8 | 2024-07-09 | SQL injection vulnerability in view_payslip.php in Itsourcecode Payroll Management System Project In PHP With Source Code 1.0 allows remote attackers to execut… |
CVE-2024-37872 | High | 8.1 | 2024-07-09 | SQL injection vulnerability in process.php in Itsourcecode Billing System in PHP 1.0 allows remote attackers to execute arbitrary SQL commands via the username… |
CVE-2024-37871 | High | 8.2 | 2024-07-09 | SQL injection vulnerability in login.php in Itsourcecode Online Discussion Forum Project in PHP with Source Code 1.0 allows remote attackers to execute arbitra… |
CVE-2024-37830 | Medium | 6.1 | 2024-07-09 | An issue in Outline <= v0.76.1 allows attackers to redirect a victim user to a malicious site via intercepting and changing the state cookie. |
CVE-2024-34140 | Medium | 5.5 | 2024-07-09 | Bridge versions 14.0.4, 13.0.7, 14.1 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An atta… |
CVE-2024-34139 | High | 7.8 | 2024-07-09 | Bridge versions 14.0.4, 13.0.7, 14.1 and earlier are affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code execution… |
CVE-2024-29153 | High | 8.1 | 2024-07-09 | A vulnerability was discovered in Samsung Mobile Processor, Wearable Processor, and Modems with versions Exynos 9820, Exynos 9825, Exynos 980, Exynos 990, Exyn… |
CVE-2024-28068 | Medium | 5.3 | 2024-07-09 | A vulnerability was discovered in SS in Samsung Mobile Processor, Wearable Processor, and Modems with versions Exynos 9820, Exynos 9825, Exynos 980, Exynos 990… |
CVE-2024-27363 | Medium | 6.0 | 2024-07-09 | A vulnerability was discovered in Samsung Mobile Processor Exynos 850, Exynos 9610, Exynos 980, Exynos 1280, Exynos 1380, Exynos 1330, Exynos W920, and Exynos… |
CVE-2024-27361 | Medium | 5.1 | 2024-07-09 | A vulnerability was discovered in Samsung Mobile Processor Exynos 980, Exynos 990, Exynos 1080, Exynos 2100, Exynos 2200, Exynos 1280, Exynos 1380, and Exynos… |
CVE-2024-20785 | High | 7.8 | 2024-07-09 | InDesign Desktop versions ID19.3, ID18.5.2 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution… |
CVE-2024-20783 | High | 7.8 | 2024-07-09 | InDesign Desktop versions ID19.3, ID18.5.2 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution… |
CVE-2024-20782 | High | 7.8 | 2024-07-09 | InDesign Desktop versions ID19.3, ID18.5.2 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in th… |
CVE-2024-20781 | High | 7.8 | 2024-07-09 | InDesign Desktop versions ID19.3, ID18.5.2 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution… |
CVE-2024-40039 | High | 8.8 | 2024-07-09 | idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/userGroup_deal.php?mudi=del |
CVE-2024-40038 | Medium | 5.3 | 2024-07-09 | idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/userScore_deal.php?mudi=rev |
CVE-2024-40037 | High | 8.8 | 2024-07-09 | idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/userScore_deal.php?mudi=del |
CVE-2024-40036 | High | 8.8 | 2024-07-09 | idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/userGroup_deal.php?mudi=add&nohrefStr=close |
CVE-2024-40035 | Medium | 5.9 | 2024-07-09 | idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/userLevel_deal.php?mudi=add. |
CVE-2024-40034 | High | 8.8 | 2024-07-09 | idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/userLevel_deal.php?mudi=del |
CVE-2024-39899 | Medium | 5.3 | 2024-07-09 | PrivateBin is an online pastebin where the server has zero knowledge of pasted data. In v1.5, PrivateBin introduced the YOURLS server-side proxy. The idea was… |
CVE-2024-39897 | Medium | 4.3 | 2024-07-09 | zot is an OCI image registry. Prior to 2.1.0, the cache driver `GetBlob()` allows read access to any blob without access control check. If a Zot `accessControl… |
CVE-2024-39684 | High | 7.8 | 2024-07-09 | Tencent RapidJSON is vulnerable to privilege escalation due to an integer overflow in the `GenericReader::ParseNumber()` function of `include/rapidjson/reader… |
CVE-2024-38517 | High | 7.8 | 2024-07-09 | Tencent RapidJSON is vulnerable to privilege escalation due to an integer underflow in the `GenericReader::ParseNumber()` function of `include/rapidjson/reader… |
CVE-2024-37870 | Critical | 9.8 | 2024-07-09 | SQL injection vulnerability in processscore.php in Learning Management System Project In PHP With Source Code 1.0 allows attackers to execute arbitrary SQL com… |
CVE-2024-34123 | High | 7.0 | 2024-07-09 | Premiere Pro versions 23.6.5, 24.4.1 and earlier are affected by an Untrusted Search Path vulnerability that could lead to arbitrary code execution. An attacke… |
CVE-2024-6222 | High | 7.0 | 2024-07-09 | In Docker Desktop before v4.29.0, an attacker who has gained access to the Docker Desktop VM through a container breakout can further escape to the host by pas… |
CVE-2024-40742 | Medium | 6.1 | 2024-07-09 | A cross-site scripting (XSS) vulnerability in netbox v4.0.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the c… |
CVE-2024-40741 | Medium | 6.1 | 2024-07-09 | A cross-site scripting (XSS) vulnerability in netbox v4.0.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the c… |
CVE-2024-40740 | Medium | 6.1 | 2024-07-09 | A cross-site scripting (XSS) vulnerability in netbox v4.0.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the N… |
CVE-2024-40739 | Medium | 6.1 | 2024-07-09 | A cross-site scripting (XSS) vulnerability in netbox v4.0.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the N… |
CVE-2024-40738 | Medium | 6.1 | 2024-07-09 | A cross-site scripting (XSS) vulnerability in netbox v4.0.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the N… |
CVE-2024-40737 | Medium | 6.1 | 2024-07-09 | A cross-site scripting (XSS) vulnerability in netbox v4.0.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the N… |
CVE-2024-40736 | Medium | 6.1 | 2024-07-09 | A cross-site scripting (XSS) vulnerability in netbox v4.0.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the N… |
CVE-2024-40735 | Medium | 6.1 | 2024-07-09 | A cross-site scripting (XSS) vulnerability in netbox v4.0.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the N… |
CVE-2024-40734 | Medium | 6.1 | 2024-07-09 | A cross-site scripting (XSS) vulnerability in netbox v4.0.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the N… |
CVE-2024-40733 | Medium | 6.1 | 2024-07-09 | A cross-site scripting (XSS) vulnerability in netbox v4.0.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the N… |
CVE-2024-40732 | Medium | 6.1 | 2024-07-09 | A cross-site scripting (XSS) vulnerability in netbox v4.0.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the N… |
CVE-2024-40731 | Medium | 6.1 | 2024-07-09 | A cross-site scripting (XSS) vulnerability in netbox v4.0.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the N… |
CVE-2024-40730 | Medium | 6.1 | 2024-07-09 | A cross-site scripting (XSS) vulnerability in netbox v4.0.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the N… |
CVE-2024-40729 | Medium | 6.1 | 2024-07-09 | A cross-site scripting (XSS) vulnerability in netbox v4.0.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the N… |
CVE-2024-40728 | Medium | 6.1 | 2024-07-09 | A cross-site scripting (XSS) vulnerability in netbox v4.0.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the N… |
CVE-2024-40727 | Medium | 6.1 | 2024-07-09 | A cross-site scripting (XSS) vulnerability in netbox v4.0.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the N… |
CVE-2024-40726 | Medium | 6.1 | 2024-07-09 | A cross-site scripting (XSS) vulnerability in netbox v4.0.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the N… |
CVE-2024-39698 | High | 7.5 | 2024-07-09 | electron-updater allows for automatic updates for Electron apps. The file `packages/electron-updater/src/windowsExecutableCodeSignatureVerifier.ts` implements… |
CVE-2024-38972 | Medium | 6.1 | 2024-07-09 | A cross-site scripting (XSS) vulnerability in netbox v4.0.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the N… |
CVE-2024-38971 | Medium | 5.4 | 2024-07-09 | vaeThink 1.0.2 is vulnerable to stored Cross Site Scripting (XSS) in the system backend. |
CVE-2024-38970 | Medium | 4.9 | 2024-07-09 | vaeThink 1.0.2 is vulnerable to Information Disclosure via the system backend,access management administrator function. |
CVE-2024-31957 | Medium | 6.2 | 2024-07-09 | A vulnerability was discovered in Samsung Mobile Processors Exynos 2200 and Exynos 2400 where they lack a check for the validation of native handles, which can… |
CVE-2024-28067 | Medium | 5.3 | 2024-07-09 | A vulnerability in Samsung Exynos Modem 5300 allows a Man-in-the-Middle (MITM) attacker to downgrade the security mode of packets going to the victim, enabling… |
CVE-2024-27362 | Medium | 4.4 | 2024-07-09 | A vulnerability was discovered in Samsung Mobile Processors Exynos 1280, Exynos 2200, Exynos 1330, Exynos 1380, and Exynos 2400 where they do not properly chec… |
CVE-2024-27360 | Medium | 6.0 | 2024-07-09 | A vulnerability was discovered in Samsung Mobile Processors Exynos 850, Exynos 1080, Exynos 2100, Exynos 2200, Exynos 1280, Exynos 1380, Exynos 1330, and Exyno… |
CVE-2024-27183 | Medium | 6.1 | 2024-07-09 | XSS vulnerability in DJ-HelpfulArticles component for Joomla. |
CVE-2024-6237 | Medium | 6.5 | 2024-07-09 | A flaw was found in the 389 Directory Server. This flaw allows an unauthenticated user to cause a systematic server crash while sending a specific extended sea… |
CVE-2024-5652 | Medium | 6.1 | 2024-07-09 | In Docker Desktop on Windows before v4.31.0 allows a user in the docker-users group to cause a Windows Denial-of-Service through the exec-path Docker daemon co… |
CVE-2024-39171 | Critical | 9.8 | 2024-07-09 | Directory Travel in PHPVibe v11.0.46 due to incomplete blacklist checksums and directory checks, which can lead to code execution via writing specific statemen… |
CVE-2024-39118 | Medium | 5.5 | 2024-07-09 | Mommy Heather Advanced Backups up to v3.5.3 allows attackers to write arbitrary files via restoring a crafted back up. |
CVE-2024-38112 | High | 7.5 | 2024-07-09 | Windows MSHTML Platform Spoofing Vulnerability |
CVE-2024-38105 | Medium | 6.5 | 2024-07-09 | Windows Layer-2 Bridge Network Driver Denial of Service Vulnerability |
CVE-2024-38104 | High | 8.8 | 2024-07-09 | Windows Fax Service Remote Code Execution Vulnerability |
CVE-2024-38102 | Medium | 6.5 | 2024-07-09 | Windows Layer-2 Bridge Network Driver Denial of Service Vulnerability |
CVE-2024-38101 | Medium | 6.5 | 2024-07-09 | Windows Layer-2 Bridge Network Driver Denial of Service Vulnerability |
CVE-2024-38100 | High | 7.8 | 2024-07-09 | Windows File Explorer Elevation of Privilege Vulnerability |
CVE-2024-38099 | Medium | 5.9 | 2024-07-09 | Windows Remote Desktop Licensing Service Denial of Service Vulnerability |
CVE-2024-38095 | High | 7.5 | 2024-07-09 | .NET and Visual Studio Denial of Service Vulnerability |
CVE-2024-38094 | High | 7.2 | 2024-07-09 | Microsoft SharePoint Remote Code Execution Vulnerability |
CVE-2024-38092 | High | 8.8 | 2024-07-09 | Azure CycleCloud Elevation of Privilege Vulnerability |
CVE-2024-38091 | High | 7.5 | 2024-07-09 | Microsoft WS-Discovery Denial of Service Vulnerability |
CVE-2024-38089 | Critical | 9.1 | 2024-07-09 | Microsoft Defender for IoT Elevation of Privilege Vulnerability |
CVE-2024-38088 | High | 8.8 | 2024-07-09 | SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability |
CVE-2024-38087 | High | 8.8 | 2024-07-09 | SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability |
CVE-2024-38086 | Medium | 6.4 | 2024-07-09 | Azure Kinect SDK Remote Code Execution Vulnerability |
CVE-2024-38085 | High | 7.8 | 2024-07-09 | Windows Graphics Component Elevation of Privilege Vulnerability |
CVE-2024-38081 | High | 7.3 | 2024-07-09 | .NET, .NET Framework, and Visual Studio Elevation of Privilege Vulnerability |
CVE-2024-38080 | High | 7.8 | 2024-07-09 | Windows Hyper-V Elevation of Privilege Vulnerability |
CVE-2024-38079 | High | 7.8 | 2024-07-09 | Windows Graphics Component Elevation of Privilege Vulnerability |
CVE-2024-38078 | High | 7.5 | 2024-07-09 | Xbox Wireless Adapter Remote Code Execution Vulnerability |
CVE-2024-38077 | Critical | 9.8 | 2024-07-09 | Windows Remote Desktop Licensing Service Remote Code Execution Vulnerability |
CVE-2024-38076 | Critical | 9.8 | 2024-07-09 | Windows Remote Desktop Licensing Service Remote Code Execution Vulnerability |
CVE-2024-38074 | Critical | 9.8 | 2024-07-09 | Windows Remote Desktop Licensing Service Remote Code Execution Vulnerability |
CVE-2024-38073 | High | 7.5 | 2024-07-09 | Windows Remote Desktop Licensing Service Denial of Service Vulnerability |
CVE-2024-38072 | High | 7.5 | 2024-07-09 | Windows Remote Desktop Licensing Service Denial of Service Vulnerability |
CVE-2024-38071 | High | 7.5 | 2024-07-09 | Windows Remote Desktop Licensing Service Denial of Service Vulnerability |
CVE-2024-38070 | High | 7.8 | 2024-07-09 | Windows LockDown Policy (WLDP) Security Feature Bypass Vulnerability |
CVE-2024-38069 | High | 7.0 | 2024-07-09 | Windows Enroll Engine Security Feature Bypass Vulnerability |
CVE-2024-38068 | High | 7.5 | 2024-07-09 | Windows Online Certificate Status Protocol (OCSP) Server Denial of Service Vulnerability |
CVE-2024-38067 | High | 7.5 | 2024-07-09 | Windows Online Certificate Status Protocol (OCSP) Server Denial of Service Vulnerability |
CVE-2024-38066 | High | 7.8 | 2024-07-09 | Windows Win32k Elevation of Privilege Vulnerability |
CVE-2024-38065 | Medium | 6.8 | 2024-07-09 | Secure Boot Security Feature Bypass Vulnerability |
CVE-2024-38064 | High | 7.5 | 2024-07-09 | Windows TCP/IP Information Disclosure Vulnerability |
CVE-2024-38062 | High | 7.8 | 2024-07-09 | Windows Kernel-Mode Driver Elevation of Privilege Vulnerability |
CVE-2024-38061 | High | 7.5 | 2024-07-09 | DCOM Remote Cross-Session Activation Elevation of Privilege Vulnerability |