2024 CVEs (page 256)
Page 256 of 385 — CVEs published in 2024, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-35213 | Critical | 9.0 | 2024-06-11 | An improper input validation vulnerability in the SGI Image Codec of QNX SDP version(s) 6.6, 7.0, and 7.1 could allow an attacker to potentially cause a denial… |
CVE-2024-34406 | Medium | 5.3 | 2024-06-11 | Improper exception handling in McAfee Security: Antivirus VPN for Android before 8.3.0 could allow an attacker to cause a denial of service through the use of… |
CVE-2024-34405 | Critical | 9.1 | 2024-06-11 | Improper deep link validation in McAfee Security: Antivirus VPN for Android before 8.3.0 could allow an attacker to launch an arbitrary URL within the app. |
CVE-2024-28024 | Medium | 4.1 | 2024-06-11 | A vulnerability exists in the FOXMAN-UN/UNEM in which sensitive information is stored in cleartext within a resource that might be accessible to another contr… |
CVE-2024-28022 | Medium | 6.5 | 2024-06-11 | A vulnerability exists in the UNEM server / APIGateway that if exploited allows a malicious user to perform an arbitrary number of authentication attempts usin… |
CVE-2024-28020 | High | 8.0 | 2024-06-11 | A user/password reuse vulnerability exists in the FOXMAN-UN/UNEM application and server management. If exploited a malicious high-privileged user could use the… |
CVE-2024-5851 | Low | 3.5 | 2024-06-11 | A vulnerability classified as problematic has been found in playSMS up to 1.4.7. Affected is an unknown function of the file /index.php?app=main&inc=feature_sc… |
CVE-2024-4190 | High | 8.1 | 2024-06-11 | Stored Cross-Site Scripting (XSS) vulnerabilities have been identified in OpenText ArcSight Logger. The vulnerabilities could be remotely exploited. |
CVE-2024-36821 | Medium | 6.8 | 2024-06-11 | Insecure permissions in Linksys Velop WiFi 5 (WHW01v1) 1.1.13.202617 allows attackers to escalate privileges from Guest to root. |
CVE-2024-37325 | High | 8.1 | 2024-06-11 | Azure Science Virtual Machine (DSVM) Elevation of Privilege Vulnerability |
CVE-2024-37293 | High | 7.5 | 2024-06-11 | The AWS Deployment Framework (ADF) is a framework to manage and deploy resources across multiple AWS accounts and regions within an AWS Organization. ADF allow… |
CVE-2024-35265 | High | 7.0 | 2024-06-11 | Windows Perception Service Elevation of Privilege Vulnerability |
CVE-2024-35263 | Medium | 5.7 | 2024-06-11 | Microsoft Dynamics 365 (On-Premises) Information Disclosure Vulnerability |
CVE-2024-35255 | Medium | 5.5 | 2024-06-11 | Azure Identity Libraries and Microsoft Authentication Library Elevation of Privilege Vulnerability |
CVE-2024-35254 | High | 7.1 | 2024-06-11 | Azure Monitor Agent Elevation of Privilege Vulnerability |
CVE-2024-35253 | Medium | 4.4 | 2024-06-11 | Microsoft Azure File Sync Elevation of Privilege Vulnerability |
CVE-2024-35252 | High | 7.5 | 2024-06-11 | Azure Storage Movement Client Library Denial of Service Vulnerability |
CVE-2024-35250 | High | 7.8 | 2024-06-11 | Windows Kernel-Mode Driver Elevation of Privilege Vulnerability |
CVE-2024-35249 | High | 8.8 | 2024-06-11 | Microsoft Dynamics 365 Business Central Remote Code Execution Vulnerability |
CVE-2024-35248 | High | 7.3 | 2024-06-11 | Microsoft Dynamics 365 Business Central Elevation of Privilege Vulnerability |
CVE-2024-34815 | Medium | 5.4 | 2024-06-11 | Missing Authorization vulnerability in Javier Carazo Import and export users and customers import-users-from-csv-with-meta.This issue affects Import and export… |
CVE-2024-34804 | Medium | 5.4 | 2024-06-11 | Missing Authorization vulnerability in Tagembed.This issue affects Tagembed: from n/a through 5.8. |
CVE-2024-34799 | Medium | 6.5 | 2024-06-11 | Missing Authorization vulnerability in Repute Infosystems BookingPress.This issue affects BookingPress: from n/a through 1.0.82. |
CVE-2024-34768 | Medium | 5.3 | 2024-06-11 | Missing Authorization vulnerability in Fastly.This issue affects Fastly: from n/a through 1.2.25. |
CVE-2024-34763 | Medium | 5.3 | 2024-06-11 | Missing Authorization vulnerability in Saleswonder Team: Tobias Builder for WooCommerce reviews shortcodes – ReviewShort woo-product-reviews-shortcode.This iss… |
CVE-2024-34758 | Medium | 5.3 | 2024-06-11 | Missing Authorization vulnerability in Wpmet WP Fundraising Donation and Crowdfunding Platform.This issue affects WP Fundraising Donation and Crowdfunding Plat… |
CVE-2024-32146 | Medium | 4.3 | 2024-06-11 | Missing Authorization vulnerability in Aspose.Cloud Marketplace Aspose.Words Exporter.This issue affects Aspose.Words Exporter: from n/a through 6.3.1. |
CVE-2024-32143 | Medium | 4.3 | 2024-06-11 | Missing Authorization vulnerability in Podlove Podlove Podcast Publisher.This issue affects Podlove Podcast Publisher: from n/a through 4.1.0. |
CVE-2024-30104 | High | 7.8 | 2024-06-11 | Microsoft Office Remote Code Execution Vulnerability |
CVE-2024-30103 | High | 8.8 | 2024-06-11 | Microsoft Outlook Remote Code Execution Vulnerability |
CVE-2024-30102 | High | 7.3 | 2024-06-11 | Microsoft Office Remote Code Execution Vulnerability |
CVE-2024-30101 | High | 7.5 | 2024-06-11 | Microsoft Office Remote Code Execution Vulnerability |
CVE-2024-30100 | High | 7.8 | 2024-06-11 | Microsoft SharePoint Server Remote Code Execution Vulnerability |
CVE-2024-30099 | High | 7.0 | 2024-06-11 | Windows Kernel Elevation of Privilege Vulnerability |
CVE-2024-30097 | High | 8.8 | 2024-06-11 | Microsoft Speech Application Programming Interface (SAPI) Remote Code Execution Vulnerability |
CVE-2024-30096 | Medium | 5.5 | 2024-06-11 | Windows Cryptographic Services Information Disclosure Vulnerability |
CVE-2024-30095 | High | 7.8 | 2024-06-11 | Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability |
CVE-2024-30094 | High | 7.8 | 2024-06-11 | Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability |
CVE-2024-30093 | High | 7.3 | 2024-06-11 | Windows Storage Elevation of Privilege Vulnerability |
CVE-2024-30091 | High | 7.8 | 2024-06-11 | Win32k Elevation of Privilege Vulnerability |
CVE-2024-30090 | High | 7.0 | 2024-06-11 | Microsoft Streaming Service Elevation of Privilege Vulnerability |
CVE-2024-30089 | High | 7.8 | 2024-06-11 | Microsoft Streaming Service Elevation of Privilege Vulnerability |
CVE-2024-30088 | High | 7.0 | 2024-06-11 | Windows Kernel Elevation of Privilege Vulnerability |
CVE-2024-30087 | High | 7.8 | 2024-06-11 | Win32k Elevation of Privilege Vulnerability |
CVE-2024-30086 | High | 7.8 | 2024-06-11 | Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability |
CVE-2024-30085 | High | 7.8 | 2024-06-11 | Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability |
CVE-2024-30084 | High | 7.0 | 2024-06-11 | Windows Kernel-Mode Driver Elevation of Privilege Vulnerability |
CVE-2024-30083 | High | 7.5 | 2024-06-11 | Windows Standards-Based Storage Management Service Denial of Service Vulnerability |
CVE-2024-30082 | High | 7.8 | 2024-06-11 | Win32k Elevation of Privilege Vulnerability |
CVE-2024-30080 | Critical | 9.8 | 2024-06-11 | Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability |
CVE-2024-30078 | High | 8.8 | 2024-06-11 | Windows Wi-Fi Driver Remote Code Execution Vulnerability |
CVE-2024-30077 | High | 8.0 | 2024-06-11 | Windows OLE Remote Code Execution Vulnerability |
CVE-2024-30076 | Medium | 6.8 | 2024-06-11 | Windows Container Manager Service Elevation of Privilege Vulnerability |
CVE-2024-30075 | High | 8.0 | 2024-06-11 | Windows Link Layer Topology Discovery Protocol Remote Code Execution Vulnerability |
CVE-2024-30074 | High | 8.0 | 2024-06-11 | Windows Link Layer Topology Discovery Protocol Remote Code Execution Vulnerability |
CVE-2024-30072 | High | 7.8 | 2024-06-11 | Microsoft Event Trace Log File Parsing Remote Code Execution Vulnerability |
CVE-2024-30070 | High | 7.5 | 2024-06-11 | DHCP Server Service Denial of Service Vulnerability |
CVE-2024-30069 | Medium | 4.7 | 2024-06-11 | Windows Remote Access Connection Manager Information Disclosure Vulnerability |
CVE-2024-30068 | High | 8.8 | 2024-06-11 | Windows Kernel Elevation of Privilege Vulnerability |
CVE-2024-30067 | Medium | 5.5 | 2024-06-11 | Winlogon Elevation of Privilege Vulnerability |
CVE-2024-30066 | Medium | 5.5 | 2024-06-11 | Winlogon Elevation of Privilege Vulnerability |
CVE-2024-30065 | Medium | 5.5 | 2024-06-11 | Windows Themes Denial of Service Vulnerability |
CVE-2024-30064 | High | 8.8 | 2024-06-11 | Windows Kernel Elevation of Privilege Vulnerability |
CVE-2024-30063 | Medium | 6.7 | 2024-06-11 | Windows Distributed File System (DFS) Remote Code Execution Vulnerability |
CVE-2024-30062 | High | 7.8 | 2024-06-11 | Windows Standards-Based Storage Management Service Remote Code Execution Vulnerability |
CVE-2024-30052 | Medium | 4.7 | 2024-06-11 | Visual Studio Remote Code Execution Vulnerability |
CVE-2024-29060 | Medium | 6.7 | 2024-06-11 | Visual Studio Elevation of Privilege Vulnerability |
CVE-2024-26330 | Medium | 6.5 | 2024-06-11 | An issue was discovered in Kape CyberGhostVPN 8.4.3.12823 on Windows. After a successful logout, user credentials remain in memory while the process is still o… |
CVE-2024-23518 | Medium | 4.3 | 2024-06-11 | Missing Authorization vulnerability in Navneil Naicker ACF Photo Gallery Field.This issue affects ACF Photo Gallery Field: from n/a through 2.6. |
CVE-2024-5813 | Medium | 5.9 | 2024-06-11 | A medium severity vulnerability in BIPS has been identified where an authenticated attacker with high privileges can access the SSH private keys via an informa… |
CVE-2024-5812 | Low | 3.3 | 2024-06-11 | A low severity vulnerability in BIPS has been identified where an attacker with high privileges or a compromised high privilege account can overwrite Read-Only… |
CVE-2024-36650 | High | 7.5 | 2024-06-11 | TOTOLINK AC1200 Wireless Dual Band Gigabit Router firmware A3100R V4.1.2cu.5247_B20211129, in the cgi function `setNoticeCfg` of the file `/lib/cste_modules/sy… |
CVE-2024-34822 | Medium | 5.3 | 2024-06-11 | Missing Authorization vulnerability in weDevs weMail.This issue affects weMail: from n/a through 1.14.2. |
CVE-2024-34821 | Medium | 5.3 | 2024-06-11 | Missing Authorization vulnerability in Anssi Laitila Contact List contact-list.This issue affects Contact List: from n/a through <= 2.9.87. |
CVE-2024-34819 | Medium | 5.3 | 2024-06-11 | Missing Authorization vulnerability in Moreconvert Team MC Woocommerce Wishlist smart-wishlist-for-more-convert.This issue affects MC Woocommerce Wishlist: fro… |
CVE-2024-34753 | Medium | 5.3 | 2024-06-11 | Missing Authorization vulnerability in SoftLab Radio Player.This issue affects Radio Player: from n/a through 2.0.73. |
CVE-2024-32144 | Medium | 5.4 | 2024-06-11 | Missing Authorization vulnerability in Welcart Inc. Welcart e-Commerce.This issue affects Welcart e-Commerce: from n/a through 2.9.14. |
CVE-2024-23521 | Medium | 5.3 | 2024-06-11 | Missing Authorization vulnerability in Happyforms.This issue affects Happyforms: from n/a through 1.25.10. |
CVE-2024-23503 | Medium | 4.3 | 2024-06-11 | Missing Authorization vulnerability in WPManageNinja LLC Ninja Tables.This issue affects Ninja Tables: from n/a through 5.0.6. |
CVE-2024-37296 | Medium | 5.3 | 2024-06-11 | The Aimeos HTML client provides Aimeos HTML components for e-commerce projects. Starting in version 2020.04.1 and prior to versions 2020.10.27, 2021.10.21, 202… |
CVE-2024-37295 | High | 7.2 | 2024-06-11 | Aimeos is an Open Source e-commerce framework for online shops. Starting in version 2024.01.1 and prior to version 2024.04.5, a user with administrative privil… |
CVE-2024-37294 | Medium | 5.5 | 2024-06-11 | Aimeos is an Open Source e-commerce framework for online shops. All SaaS and marketplace setups using Aimeos version from 2022/2023/2024 are affected by a pote… |
CVE-2024-37161 | Medium | 4.0 | 2024-06-11 | MeterSphere is an open source continuous testing platform. Prior to version 1.10.1-lts, the system's step editor stores cross-site scripting vulnerabilities. V… |
CVE-2024-35667 | Medium | 5.3 | 2024-06-11 | Missing Authorization vulnerability in WP EasyCart.This issue affects WP EasyCart: from n/a through 5.5.19. |
CVE-2024-35665 | Medium | 5.3 | 2024-06-11 | Missing Authorization vulnerability in namithjawahar Insert Post Ads.This issue affects Insert Post Ads: from n/a through 1.3.2. |
CVE-2024-35663 | Medium | 5.4 | 2024-06-11 | Missing Authorization vulnerability in HahnCreativeGroup WP Translate.This issue affects WP Translate: from n/a through 5.3.0. |
CVE-2024-35628 | Medium | 4.3 | 2024-06-11 | Missing Authorization vulnerability in Photo Gallery Team Photo Gallery by 10Web.This issue affects Photo Gallery by 10Web: from n/a through 1.8.25. |
CVE-2024-35235 | Medium | 4.4 | 2024-06-11 | OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems. In versions 2.4.8 and earlier, when starting the cupsd ser… |
CVE-2024-35168 | Medium | 4.3 | 2024-06-11 | Missing Authorization vulnerability in Discourse WP Discourse.This issue affects WP Discourse: from n/a through 2.5.1. |
CVE-2024-34826 | Medium | 6.3 | 2024-06-11 | Missing Authorization vulnerability in Saleswonder Team: Tobias CF7 WOW Styler cf7-styler.This issue affects CF7 WOW Styler: from n/a through <= 1.6.4. |
CVE-2024-34820 | Medium | 6.5 | 2024-06-11 | Missing Authorization vulnerability in If So Plugin If-So Dynamic Content Personalization.This issue affects If-So Dynamic Content Personalization: from n/a th… |
CVE-2024-32148 | Medium | 4.3 | 2024-06-11 | Missing Authorization vulnerability in Salesforce Pardot.This issue affects Pardot: from n/a through 2.1.0. |
CVE-2024-31495 | Medium | 4.3 | 2024-06-11 | A improper neutralization of special elements used in an sql command ('sql injection') in Fortinet FortiPortal versions 7.0.0 through 7.0.6 and version 7.2.0 a… |
CVE-2024-26010 | High | 7.5 | 2024-06-11 | A stack-based buffer overflow in Fortinet FortiPAM version 1.2.0, 1.1.0 through 1.1.2, 1.0.0 through 1.0.3, FortiWeb, FortiAuthenticator, FortiSwitchManager ve… |
CVE-2024-24703 | High | 8.6 | 2024-06-11 | Missing Authorization vulnerability in MultiVendorX WC Marketplace.This issue affects WC Marketplace: from n/a through 4.0.25. |
CVE-2024-23111 | Medium | 6.8 | 2024-06-11 | An improper neutralization of input during web page Generation ('Cross-site Scripting') vulnerability [CWE-79] in FortiOS version 7.4.3 and below, 7.2 all vers… |
CVE-2024-23110 | High | 7.8 | 2024-06-11 | A stack-based buffer overflow in Fortinet FortiOS version 7.4.0 through 7.4.2, 7.2.0 through 7.2.6, 7.0.0 through 7.0.13, 6.4.0 through 6.4.14, 6.2.0 through 6… |
CVE-2024-21754 | Low | 1.8 | 2024-06-11 | A use of password hash with insufficient computational effort vulnerability [CWE-916] affecting FortiOS version 7.4.3 and below, 7.2 all versions, 7.0 all vers… |
CVE-2024-5189 | Medium | 6.4 | 2024-06-11 | The Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders plugin for WordPress is vulnerable to Stored Cross-Site Scr… |
CVE-2024-35683 | Medium | 5.3 | 2024-06-11 | Missing Authorization vulnerability in Teplitsa of social technologies Leyka.This issue affects Leyka: from n/a through 3.31.1. |