2024 CVEs (page 256)
Page 256 of 385 — CVEs published in 2024, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-32143 | Medium | 4.3 | 2024-06-11 | Missing Authorization vulnerability in Podlove Podlove Podcast Publisher.This issue affects Podlove Podcast Publisher: from n/a through 4.1.0. |
CVE-2024-30104 | High | 7.8 | 2024-06-11 | Microsoft Office Remote Code Execution Vulnerability |
CVE-2024-30103 | High | 8.8 | 2024-06-11 | Microsoft Outlook Remote Code Execution Vulnerability |
CVE-2024-30102 | High | 7.3 | 2024-06-11 | Microsoft Office Remote Code Execution Vulnerability |
CVE-2024-30101 | High | 7.5 | 2024-06-11 | Microsoft Office Remote Code Execution Vulnerability |
CVE-2024-30100 | High | 7.8 | 2024-06-11 | Microsoft SharePoint Server Remote Code Execution Vulnerability |
CVE-2024-30099 | High | 7.0 | 2024-06-11 | Windows Kernel Elevation of Privilege Vulnerability |
CVE-2024-30097 | High | 8.8 | 2024-06-11 | Microsoft Speech Application Programming Interface (SAPI) Remote Code Execution Vulnerability |
CVE-2024-30096 | Medium | 5.5 | 2024-06-11 | Windows Cryptographic Services Information Disclosure Vulnerability |
CVE-2024-30095 | High | 7.8 | 2024-06-11 | Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability |
CVE-2024-30094 | High | 7.8 | 2024-06-11 | Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability |
CVE-2024-30093 | High | 7.3 | 2024-06-11 | Windows Storage Elevation of Privilege Vulnerability |
CVE-2024-30091 | High | 7.8 | 2024-06-11 | Win32k Elevation of Privilege Vulnerability |
CVE-2024-30090 | High | 7.0 | 2024-06-11 | Microsoft Streaming Service Elevation of Privilege Vulnerability |
CVE-2024-30089 | High | 7.8 | 2024-06-11 | Microsoft Streaming Service Elevation of Privilege Vulnerability |
CVE-2024-30088 | High | 7.0 | 2024-06-11 | Windows Kernel Elevation of Privilege Vulnerability |
CVE-2024-30087 | High | 7.8 | 2024-06-11 | Win32k Elevation of Privilege Vulnerability |
CVE-2024-30086 | High | 7.8 | 2024-06-11 | Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability |
CVE-2024-30085 | High | 7.8 | 2024-06-11 | Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability |
CVE-2024-30084 | High | 7.0 | 2024-06-11 | Windows Kernel-Mode Driver Elevation of Privilege Vulnerability |
CVE-2024-30083 | High | 7.5 | 2024-06-11 | Windows Standards-Based Storage Management Service Denial of Service Vulnerability |
CVE-2024-30082 | High | 7.8 | 2024-06-11 | Win32k Elevation of Privilege Vulnerability |
CVE-2024-30080 | Critical | 9.8 | 2024-06-11 | Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability |
CVE-2024-30078 | High | 8.8 | 2024-06-11 | Windows Wi-Fi Driver Remote Code Execution Vulnerability |
CVE-2024-30077 | High | 8.0 | 2024-06-11 | Windows OLE Remote Code Execution Vulnerability |
CVE-2024-30076 | Medium | 6.8 | 2024-06-11 | Windows Container Manager Service Elevation of Privilege Vulnerability |
CVE-2024-30075 | High | 8.0 | 2024-06-11 | Windows Link Layer Topology Discovery Protocol Remote Code Execution Vulnerability |
CVE-2024-30074 | High | 8.0 | 2024-06-11 | Windows Link Layer Topology Discovery Protocol Remote Code Execution Vulnerability |
CVE-2024-30072 | High | 7.8 | 2024-06-11 | Microsoft Event Trace Log File Parsing Remote Code Execution Vulnerability |
CVE-2024-30070 | High | 7.5 | 2024-06-11 | DHCP Server Service Denial of Service Vulnerability |
CVE-2024-30069 | Medium | 4.7 | 2024-06-11 | Windows Remote Access Connection Manager Information Disclosure Vulnerability |
CVE-2024-30068 | High | 8.8 | 2024-06-11 | Windows Kernel Elevation of Privilege Vulnerability |
CVE-2024-30067 | Medium | 5.5 | 2024-06-11 | Winlogon Elevation of Privilege Vulnerability |
CVE-2024-30066 | Medium | 5.5 | 2024-06-11 | Winlogon Elevation of Privilege Vulnerability |
CVE-2024-30065 | Medium | 5.5 | 2024-06-11 | Windows Themes Denial of Service Vulnerability |
CVE-2024-30064 | High | 8.8 | 2024-06-11 | Windows Kernel Elevation of Privilege Vulnerability |
CVE-2024-30063 | Medium | 6.7 | 2024-06-11 | Windows Distributed File System (DFS) Remote Code Execution Vulnerability |
CVE-2024-30062 | High | 7.8 | 2024-06-11 | Windows Standards-Based Storage Management Service Remote Code Execution Vulnerability |
CVE-2024-30052 | Medium | 4.7 | 2024-06-11 | Visual Studio Remote Code Execution Vulnerability |
CVE-2024-29060 | Medium | 6.7 | 2024-06-11 | Visual Studio Elevation of Privilege Vulnerability |
CVE-2024-26330 | Medium | 6.5 | 2024-06-11 | An issue was discovered in Kape CyberGhostVPN 8.4.3.12823 on Windows. After a successful logout, user credentials remain in memory while the process is still o… |
CVE-2024-23518 | Medium | 4.3 | 2024-06-11 | Missing Authorization vulnerability in Navneil Naicker ACF Photo Gallery Field.This issue affects ACF Photo Gallery Field: from n/a through 2.6. |
CVE-2024-5813 | Medium | 5.9 | 2024-06-11 | A medium severity vulnerability in BIPS has been identified where an authenticated attacker with high privileges can access the SSH private keys via an informa… |
CVE-2024-5812 | Low | 3.3 | 2024-06-11 | A low severity vulnerability in BIPS has been identified where an attacker with high privileges or a compromised high privilege account can overwrite Read-Only… |
CVE-2024-36650 | High | 7.5 | 2024-06-11 | TOTOLINK AC1200 Wireless Dual Band Gigabit Router firmware A3100R V4.1.2cu.5247_B20211129, in the cgi function `setNoticeCfg` of the file `/lib/cste_modules/sy… |
CVE-2024-34822 | Medium | 5.3 | 2024-06-11 | Missing Authorization vulnerability in weDevs weMail.This issue affects weMail: from n/a through 1.14.2. |
CVE-2024-34821 | Medium | 5.3 | 2024-06-11 | Missing Authorization vulnerability in Anssi Laitila Contact List contact-list.This issue affects Contact List: from n/a through <= 2.9.87. |
CVE-2024-34819 | Medium | 5.3 | 2024-06-11 | Missing Authorization vulnerability in Moreconvert Team MC Woocommerce Wishlist smart-wishlist-for-more-convert.This issue affects MC Woocommerce Wishlist: fro… |
CVE-2024-34753 | Medium | 5.3 | 2024-06-11 | Missing Authorization vulnerability in SoftLab Radio Player.This issue affects Radio Player: from n/a through 2.0.73. |
CVE-2024-32144 | Medium | 5.4 | 2024-06-11 | Missing Authorization vulnerability in Welcart Inc. Welcart e-Commerce.This issue affects Welcart e-Commerce: from n/a through 2.9.14. |
CVE-2024-23521 | Medium | 5.3 | 2024-06-11 | Missing Authorization vulnerability in Happyforms.This issue affects Happyforms: from n/a through 1.25.10. |
CVE-2024-23503 | Medium | 4.3 | 2024-06-11 | Missing Authorization vulnerability in WPManageNinja LLC Ninja Tables.This issue affects Ninja Tables: from n/a through 5.0.6. |
CVE-2024-37296 | Medium | 5.3 | 2024-06-11 | The Aimeos HTML client provides Aimeos HTML components for e-commerce projects. Starting in version 2020.04.1 and prior to versions 2020.10.27, 2021.10.21, 202… |
CVE-2024-37295 | High | 7.2 | 2024-06-11 | Aimeos is an Open Source e-commerce framework for online shops. Starting in version 2024.01.1 and prior to version 2024.04.5, a user with administrative privil… |
CVE-2024-37294 | Medium | 5.5 | 2024-06-11 | Aimeos is an Open Source e-commerce framework for online shops. All SaaS and marketplace setups using Aimeos version from 2022/2023/2024 are affected by a pote… |
CVE-2024-37161 | Medium | 4.0 | 2024-06-11 | MeterSphere is an open source continuous testing platform. Prior to version 1.10.1-lts, the system's step editor stores cross-site scripting vulnerabilities. V… |
CVE-2024-35667 | Medium | 5.3 | 2024-06-11 | Missing Authorization vulnerability in WP EasyCart.This issue affects WP EasyCart: from n/a through 5.5.19. |
CVE-2024-35665 | Medium | 5.3 | 2024-06-11 | Missing Authorization vulnerability in namithjawahar Insert Post Ads.This issue affects Insert Post Ads: from n/a through 1.3.2. |
CVE-2024-35663 | Medium | 5.4 | 2024-06-11 | Missing Authorization vulnerability in HahnCreativeGroup WP Translate.This issue affects WP Translate: from n/a through 5.3.0. |
CVE-2024-35628 | Medium | 4.3 | 2024-06-11 | Missing Authorization vulnerability in Photo Gallery Team Photo Gallery by 10Web.This issue affects Photo Gallery by 10Web: from n/a through 1.8.25. |
CVE-2024-35235 | Medium | 4.4 | 2024-06-11 | OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems. In versions 2.4.8 and earlier, when starting the cupsd ser… |
CVE-2024-35168 | Medium | 4.3 | 2024-06-11 | Missing Authorization vulnerability in Discourse WP Discourse.This issue affects WP Discourse: from n/a through 2.5.1. |
CVE-2024-34826 | Medium | 6.3 | 2024-06-11 | Missing Authorization vulnerability in Saleswonder Team: Tobias CF7 WOW Styler cf7-styler.This issue affects CF7 WOW Styler: from n/a through <= 1.6.4. |
CVE-2024-34820 | Medium | 6.5 | 2024-06-11 | Missing Authorization vulnerability in If So Plugin If-So Dynamic Content Personalization.This issue affects If-So Dynamic Content Personalization: from n/a th… |
CVE-2024-32148 | Medium | 4.3 | 2024-06-11 | Missing Authorization vulnerability in Salesforce Pardot.This issue affects Pardot: from n/a through 2.1.0. |
CVE-2024-31495 | Medium | 4.3 | 2024-06-11 | A improper neutralization of special elements used in an sql command ('sql injection') in Fortinet FortiPortal versions 7.0.0 through 7.0.6 and version 7.2.0 a… |
CVE-2024-26010 | High | 7.5 | 2024-06-11 | A stack-based buffer overflow in Fortinet FortiPAM version 1.2.0, 1.1.0 through 1.1.2, 1.0.0 through 1.0.3, FortiWeb, FortiAuthenticator, FortiSwitchManager ve… |
CVE-2024-24703 | High | 8.6 | 2024-06-11 | Missing Authorization vulnerability in MultiVendorX WC Marketplace.This issue affects WC Marketplace: from n/a through 4.0.25. |
CVE-2024-23111 | Medium | 6.8 | 2024-06-11 | An improper neutralization of input during web page Generation ('Cross-site Scripting') vulnerability [CWE-79] in FortiOS version 7.4.3 and below, 7.2 all vers… |
CVE-2024-23110 | High | 7.8 | 2024-06-11 | A stack-based buffer overflow in Fortinet FortiOS version 7.4.0 through 7.4.2, 7.2.0 through 7.2.6, 7.0.0 through 7.0.13, 6.4.0 through 6.4.14, 6.2.0 through 6… |
CVE-2024-21754 | Low | 1.8 | 2024-06-11 | A use of password hash with insufficient computational effort vulnerability [CWE-916] affecting FortiOS version 7.4.3 and below, 7.2 all versions, 7.0 all vers… |
CVE-2024-5189 | Medium | 6.4 | 2024-06-11 | The Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders plugin for WordPress is vulnerable to Stored Cross-Site Scr… |
CVE-2024-35683 | Medium | 5.3 | 2024-06-11 | Missing Authorization vulnerability in Teplitsa of social technologies Leyka.This issue affects Leyka: from n/a through 3.31.1. |
CVE-2024-35671 | Medium | 4.3 | 2024-06-11 | Missing Authorization vulnerability in Minoji MJ Update History.This issue affects MJ Update History: from n/a through 1.0.4. |
CVE-2024-34442 | Medium | 5.3 | 2024-06-11 | Missing Authorization vulnerability in weDevs weDocs.This issue affects weDocs: from n/a through 2.1.4. |
CVE-2024-2013 | Critical | 10.0 | 2024-06-11 | An authentication bypass vulnerability exists in the FOXMAN-UN/UNEM server / API Gateway component that if exploited allows attackers without any access to in… |
CVE-2024-2012 | Critical | 9.1 | 2024-06-11 | vulnerability exists in the FOXMAN-UN/UNEM server / API Gateway that if exploited an attacker could use to allow unintended commands or code to be executed on… |
CVE-2024-2011 | High | 8.6 | 2024-06-11 | A heap-based buffer overflow vulnerability exists in the FOXMAN-UN/UNEM that if exploited will generally lead to a denial of service but can be used to execut… |
CVE-2024-28023 | Medium | 5.7 | 2024-06-11 | A vulnerability exists in the message queueing mechanism that if exploited can lead to the exposure of resources or functionality to unintended actors, possi… |
CVE-2024-28021 | High | 7.4 | 2024-06-11 | A vulnerability exists in the FOXMAN-UN/UNEM server that affects the message queueing mechanism’s certificate validation. If exploited an attacker could spoof… |
CVE-2024-5702 | High | 7.5 | 2024-06-11 | Memory corruption in the networking stack could have led to a potentially exploitable crash. This vulnerability affects Firefox < 125, Firefox ESR < 115.12, an… |
CVE-2024-5701 | Critical | 9.8 | 2024-06-11 | Memory safety bugs present in Firefox 126. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could h… |
CVE-2024-5700 | High | 7.0 | 2024-06-11 | Memory safety bugs present in Firefox 126, Firefox ESR 115.11, and Thunderbird 115.11. Some of these bugs showed evidence of memory corruption and we presume t… |
CVE-2024-5699 | Critical | 9.8 | 2024-06-11 | In violation of spec, cookie prefixes such as `__Secure` were being ignored if they were not correctly capitalized - by spec they should be checked with a case… |
CVE-2024-5698 | Medium | 6.1 | 2024-06-11 | By manipulating the fullscreen feature while opening a data-list, an attacker could have overlaid a text box over the address bar. This could have led to user… |
CVE-2024-5697 | Medium | 4.3 | 2024-06-11 | A website was able to detect when a user took a screenshot of a page using the built-in Screenshot functionality in Firefox. This vulnerability affects Firefox… |
CVE-2024-5696 | High | 8.6 | 2024-06-11 | By manipulating the text in an `<input>` tag, an attacker could have caused corrupt memory leading to a potentially exploitable crash. This vulnerability… |
CVE-2024-5695 | Critical | 9.8 | 2024-06-11 | If an out-of-memory condition occurs at a specific point using allocations in the probabilistic heap checker, an assertion could have been triggered, and in ra… |
CVE-2024-5694 | High | 7.5 | 2024-06-11 | An attacker could have caused a use-after-free in the JavaScript engine to read memory in the JavaScript string section of the heap. This vulnerability affects… |
CVE-2024-5693 | Medium | 6.1 | 2024-06-11 | Offscreen Canvas did not properly track cross-origin tainting, which could be used to access image data from another site in violation of same-origin policy. T… |
CVE-2024-5692 | Medium | 6.5 | 2024-06-11 | On Windows 10, when using the 'Save As' functionality, an attacker could have tricked the browser into saving the file with a disallowed extension such as `.ur… |
CVE-2024-5691 | Medium | 4.7 | 2024-06-11 | By tricking the browser with a `X-Frame-Options` header, a sandboxed iframe could have presented a button that, if clicked by a user, would bypass restrictions… |
CVE-2024-5690 | Medium | 4.3 | 2024-06-11 | By monitoring the time certain operations take, an attacker could have guessed which external protocol handlers were functional on a user's system. This vulner… |
CVE-2024-5689 | Medium | 4.3 | 2024-06-11 | In addition to detecting when a user was taking a screenshot (XXX), a website was able to overlay the 'My Shots' button that appeared, and direct the user to a… |
CVE-2024-5688 | High | 8.1 | 2024-06-11 | If a garbage collection was triggered at the right time, a use-after-free could have occurred during object transplant. This vulnerability affects Firefox < 12… |
CVE-2024-5687 | Medium | 5.3 | 2024-06-11 | If a specific sequence of actions is performed when opening a new tab, the triggering principal associated with the new tab may have been incorrect. The trigge… |
CVE-2024-2462 | | 2024-06-11 | Allow attackers to intercept or falsify data exchanges between the client and the server | |
CVE-2024-2461 | | 2024-06-11 | If exploited an attacker could traverse the file system to access files or directories that would otherwise be inaccessible | |
CVE-2024-36266 | Critical | 9.3 | 2024-06-11 | A vulnerability has been identified in PowerSys (All versions < V3.11). The affected application insufficiently protects responses to authentication requests… |
CVE-2024-35303 | High | 7.8 | 2024-06-11 | A vulnerability has been identified in Tecnomatix Plant Simulation V2302 (All versions < V2302.0012), Tecnomatix Plant Simulation V2404 (All versions < V2404.0… |