2024 CVEs (page 282)
Page 282 of 385 — CVEs published in 2024, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-4363 | Medium | 6.4 | 2024-05-15 | The Visual Portfolio, Photo Gallery & Post Grid plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘title_tag’ parameter in all versions… |
CVE-2024-0437 | Medium | 4.3 | 2024-05-15 | The Password Protected – Ultimate Plugin to Password Protect Your WordPress Content with Ease plugin for WordPress is vulnerable to Sensitive Information Expos… |
CVE-2024-4666 | Medium | 6.4 | 2024-05-14 | The Borderless – Widgets, Elements, Templates and Toolkit for Elementor & Gutenberg plugin for WordPress is vulnerable to Stored Cross-Site Scripting via multi… |
CVE-2024-31483 | Medium | 4.9 | 2024-05-14 | An authenticated sensitive information disclosure vulnerability exists in the CLI service accessed via the PAPI protocol. Successful exploitation of this vulne… |
CVE-2024-31482 | Medium | 5.3 | 2024-05-14 | An unauthenticated Denial-of-Service (DoS) vulnerability exists in the ANSI escape code service accessed via the PAPI protocol. Successful exploitation of this… |
CVE-2024-31481 | Medium | 5.3 | 2024-05-14 | Unauthenticated Denial of Service (DoS) vulnerabilities exist in the CLI service accessed via the PAPI protocol. Successful exploitation of these vulnerabiliti… |
CVE-2024-31480 | Medium | 5.3 | 2024-05-14 | Unauthenticated Denial of Service (DoS) vulnerabilities exist in the CLI service accessed via the PAPI protocol. Successful exploitation of these vulnerabiliti… |
CVE-2024-31479 | Medium | 5.3 | 2024-05-14 | Unauthenticated Denial of Service (DoS) vulnerabilities exist in the Central Communications service accessed via the PAPI protocol. Successful exploitation of… |
CVE-2024-31478 | Medium | 5.3 | 2024-05-14 | Multiple unauthenticated Denial-of-Service (DoS) vulnerabilities exists in the Soft AP daemon accessed via the PAPI protocol. Successful exploitation of these… |
CVE-2024-31477 | High | 7.2 | 2024-05-14 | Multiple authenticated command injection vulnerabilities exist in the command line interface. Successful exploitation of these vulnerabilities result in the ab… |
CVE-2024-31476 | High | 7.2 | 2024-05-14 | Multiple authenticated command injection vulnerabilities exist in the command line interface. Successful exploitation of these vulnerabilities result in the ab… |
CVE-2024-31475 | High | 8.2 | 2024-05-14 | There is an arbitrary file deletion vulnerability in the Central Communications service accessed by PAPI (Aruba's access point management protocol). Successful… |
CVE-2024-31474 | High | 8.2 | 2024-05-14 | There is an arbitrary file deletion vulnerability in the CLI service accessed by PAPI (Aruba's Access Point management protocol). Successful exploitation of th… |
CVE-2024-31473 | Critical | 9.8 | 2024-05-14 | There is a command injection vulnerability in the underlying deauthentication service that could lead to unauthenticated remote code execution by sending speci… |
CVE-2024-31472 | Critical | 9.8 | 2024-05-14 | There are command injection vulnerabilities in the underlying Soft AP Daemon service that could lead to unauthenticated remote code execution by sending specia… |
CVE-2024-31471 | Critical | 9.8 | 2024-05-14 | There is a command injection vulnerability in the underlying Central Communications service that could lead to unauthenticated remote code execution by sending… |
CVE-2024-31470 | Critical | 9.8 | 2024-05-14 | There is a buffer overflow vulnerability in the underlying SAE (Simultaneous Authentication of Equals) service that could lead to unauthenticated remote code e… |
CVE-2024-31469 | Critical | 9.8 | 2024-05-14 | There are buffer overflow vulnerabilities in the underlying Central Communications service that could lead to unauthenticated remote code execution by sending… |
CVE-2024-31468 | Critical | 9.8 | 2024-05-14 | There are buffer overflow vulnerabilities in the underlying Central Communications service that could lead to unauthenticated remote code execution by sending… |
CVE-2024-31467 | Critical | 9.8 | 2024-05-14 | There are buffer overflow vulnerabilities in the underlying CLI service that could lead to unauthenticated remote code execution by sending specially crafted p… |
CVE-2024-35175 | Medium | 5.3 | 2024-05-14 | sshpiper is a reverse proxy for sshd. Starting in version 1.0.50 and prior to version 1.3.0, the way the proxy protocol listener is implemented in sshpiper can… |
CVE-2024-31466 | Critical | 9.8 | 2024-05-14 | There are buffer overflow vulnerabilities in the underlying CLI service that could lead to unauthenticated remote code execution by sending specially crafted p… |
CVE-2024-4562 | Medium | 5.4 | 2024-05-14 | In WhatsUp Gold versions released before 2023.1.2 , an SSRF vulnerability exists in Whatsup Gold's Issue exists in the HTTP Monitoring functionality. D… |
CVE-2024-4561 | Medium | 4.2 | 2024-05-14 | In WhatsUp Gold versions released before 2023.1.2 , a blind SSRF vulnerability exists in Whatsup Gold's FaviconController that allows an attacker to send ar… |
CVE-2024-3044 | Medium | 6.5 | 2024-05-14 | Unchecked script execution in Graphic on-click binding in affected LibreOffice versions allows an attacker to create a document which without prompt will execu… |
CVE-2024-31556 | High | 7.8 | 2024-05-14 | An issue in Reportico Web before v.8.1.0 allows a local attacker to execute arbitrary code and obtain sensitive information via the sessionid function. |
CVE-2024-32465 | High | 7.3 | 2024-05-14 | Git is a revision control system. The Git project recommends to avoid working in untrusted repositories, and instead to clone it first with `git clone --no-loc… |
CVE-2024-32021 | Low | 3.9 | 2024-05-14 | Git is a revision control system. Prior to versions 2.45.1, 2.44.1, 2.43.4, 2.42.2, 2.41.1, 2.40.2, and 2.39.4, when cloning a local source repository that con… |
CVE-2024-3676 | High | 7.5 | 2024-05-14 | The Proofpoint Encryption endpoint of Proofpoint Enterprise Protection contains an Improper Input Validation vulnerability that allows an unauthenticated remot… |
CVE-2024-32020 | Low | 3.9 | 2024-05-14 | Git is a revision control system. Prior to versions 2.45.1, 2.44.1, 2.43.4, 2.42.2, 2.41.1, 2.40.2, and 2.39.4, local clones may end up hardlinking files into… |
CVE-2024-32004 | High | 8.1 | 2024-05-14 | Git is a revision control system. Prior to versions 2.45.1, 2.44.1, 2.43.4, 2.42.2, 2.41.1, 2.40.2, and 2.39.4, an attacker can prepare a local repository in s… |
CVE-2024-32002 | Critical | 9.0 | 2024-05-14 | Git is a revision control system. Prior to versions 2.45.1, 2.44.1, 2.43.4, 2.42.2, 2.41.1, 2.40.2, and 2.39.4, repositories with submodules can be crafted in… |
CVE-2024-2637 | High | 7.2 | 2024-05-14 | An Uncontrolled Search Path Element vulnerability in B&R Industrial Automation Scene Viewer, B&R Industrial Automation Automation Runtime, B&R Industrial Autom… |
CVE-2024-0862 | Medium | 5.0 | 2024-05-14 | The Proofpoint Encryption endpoint of Proofpoint Enterprise Protection contains a Server-Side Request Forgery vulnerability that allows an authenticated user t… |
CVE-2024-4778 | Critical | 9.8 | 2024-05-14 | Memory safety bugs present in Firefox 125. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could h… |
CVE-2024-4777 | High | 8.8 | 2024-05-14 | Memory safety bugs present in Firefox 125, Firefox ESR 115.10, and Thunderbird 115.10. Some of these bugs showed evidence of memory corruption and we presume t… |
CVE-2024-4776 | High | 8.2 | 2024-05-14 | A file dialog shown while in full-screen mode could have resulted in the window remaining disabled. This vulnerability affects Firefox < 126. |
CVE-2024-4775 | Medium | 5.9 | 2024-05-14 | An iterator stop condition was missing when handling WASM code in the built-in profiler, potentially leading to invalid memory access and undefined behavior. *… |
CVE-2024-4774 | Medium | 6.5 | 2024-05-14 | The `ShmemCharMapHashEntry()` code was susceptible to potentially undefined behavior by bypassing the move semantics for one of its data members. This vulnerab… |
CVE-2024-4773 | High | 7.5 | 2024-05-14 | When a network error occurred during page load, the prior content could have remained in view with a blank URL bar. This could have been used to obfuscate a sp… |
CVE-2024-4772 | Medium | 5.9 | 2024-05-14 | An HTTP digest authentication nonce value was generated using `rand()` which could lead to predictable values. This vulnerability affects Firefox < 126. |
CVE-2024-4771 | High | 8.6 | 2024-05-14 | A memory allocation check was missing which would lead to a use-after-free if the allocation failed. This could have triggered a crash or potentially be levera… |
CVE-2024-4770 | High | 8.8 | 2024-05-14 | When saving a page to PDF, certain font styles could have led to a potential use-after-free crash. This vulnerability affects Firefox < 126, Firefox ESR < 115… |
CVE-2024-4769 | Medium | 5.9 | 2024-05-14 | When importing resources using Web Workers, error messages would distinguish the difference between `application/javascript` responses and non-script responses… |
CVE-2024-4768 | Medium | 6.1 | 2024-05-14 | A bug in popup notifications' interaction with WebAuthn made it easier for an attacker to trick a user into granting permissions. This vulnerability affects Fi… |
CVE-2024-4767 | Medium | 4.3 | 2024-05-14 | If the `browser.privatebrowsing.autostart` preference is enabled, IndexedDB files were not properly deleted when the window was closed. This preference is disa… |
CVE-2024-4766 | Medium | 4.3 | 2024-05-14 | Different techniques existed to obscure the fullscreen notification in Firefox for Android. These could have led to potential user confusion and spoofing atta… |
CVE-2024-4765 | High | 8.1 | 2024-05-14 | Web application manifests were stored by using an insecure MD5 hash which allowed for a hash collision to overwrite another application's manifest. This could… |
CVE-2024-4764 | Critical | 9.8 | 2024-05-14 | Multiple WebRTC threads could have claimed a newly connected audio input leading to use-after-free. This vulnerability affects Firefox < 126. |
CVE-2024-4367 | High | 8.8 | 2024-05-14 | A type check was missing when handling fonts in PDF.js, which would allow arbitrary JavaScript execution in the PDF.js context. This vulnerability affects Fire… |
CVE-2024-33485 | Critical | 9.8 | 2024-05-14 | SQL Injection vulnerability in CASAP Automated Enrollment System using PHP/MySQLi with Source Code V1.0 allows a remote attacker to obtain sensitive informatio… |
CVE-2024-27110 | High | 8.4 | 2024-05-14 | Elevation of privilege vulnerability in GE HealthCare EchoPAC products |
CVE-2024-31491 | High | 8.8 | 2024-05-14 | A client-side enforcement of server-side security vulnerability in Fortinet FortiSandbox 4.4.0 through 4.4.4, FortiSandbox 4.2.1 through 4.2.6 allows attacker… |
CVE-2024-31488 | Medium | 6.8 | 2024-05-14 | An improper neutralization of inputs during web page generation vulnerability [CWE-79] in FortiNAC version 9.4.0 through 9.4.4, 9.2.0 through 9.2.8, 9.1.0 thro… |
CVE-2024-30059 | Medium | 6.1 | 2024-05-14 | Microsoft Intune for Android Mobile Application Management Tampering Vulnerability |
CVE-2024-30054 | Medium | 6.5 | 2024-05-14 | Microsoft Power BI Client JavaScript SDK Information Disclosure Vulnerability |
CVE-2024-30053 | Medium | 6.5 | 2024-05-14 | Azure Migrate Cross-Site Scripting Vulnerability |
CVE-2024-30051 | High | 7.8 | 2024-05-14 | Windows DWM Core Library Elevation of Privilege Vulnerability |
CVE-2024-30050 | Medium | 5.4 | 2024-05-14 | Windows Mark of the Web Security Feature Bypass Vulnerability |
CVE-2024-30049 | High | 7.8 | 2024-05-14 | Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability |
CVE-2024-30048 | High | 7.6 | 2024-05-14 | Dynamics 365 Customer Insights Spoofing Vulnerability |
CVE-2024-30047 | High | 7.6 | 2024-05-14 | Dynamics 365 Customer Insights Spoofing Vulnerability |
CVE-2024-30046 | Medium | 5.9 | 2024-05-14 | Visual Studio Denial of Service Vulnerability |
CVE-2024-30045 | Medium | 6.3 | 2024-05-14 | .NET and Visual Studio Remote Code Execution Vulnerability |
CVE-2024-30044 | High | 7.2 | 2024-05-14 | Microsoft SharePoint Server Remote Code Execution Vulnerability |
CVE-2024-30043 | Medium | 6.5 | 2024-05-14 | Microsoft SharePoint Server Information Disclosure Vulnerability |
CVE-2024-30042 | High | 7.8 | 2024-05-14 | Microsoft Excel Remote Code Execution Vulnerability |
CVE-2024-30041 | Medium | 5.4 | 2024-05-14 | Microsoft Bing Search Spoofing Vulnerability |
CVE-2024-30040 | High | 8.8 | 2024-05-14 | Windows MSHTML Platform Security Feature Bypass Vulnerability |
CVE-2024-30039 | Medium | 5.5 | 2024-05-14 | Windows Remote Access Connection Manager Information Disclosure Vulnerability |
CVE-2024-30038 | High | 7.8 | 2024-05-14 | Win32k Elevation of Privilege Vulnerability |
CVE-2024-30037 | Medium | 5.5 | 2024-05-14 | Windows Common Log File System Driver Elevation of Privilege Vulnerability |
CVE-2024-30036 | Medium | 6.5 | 2024-05-14 | Windows Deployment Services Information Disclosure Vulnerability |
CVE-2024-30035 | High | 7.8 | 2024-05-14 | Windows DWM Core Library Elevation of Privilege Vulnerability |
CVE-2024-30034 | Medium | 5.5 | 2024-05-14 | Windows Cloud Files Mini Filter Driver Information Disclosure Vulnerability |
CVE-2024-30033 | High | 7.0 | 2024-05-14 | Windows Search Service Elevation of Privilege Vulnerability |
CVE-2024-30032 | High | 7.8 | 2024-05-14 | Windows DWM Core Library Elevation of Privilege Vulnerability |
CVE-2024-30031 | High | 7.8 | 2024-05-14 | Windows CNG Key Isolation Service Elevation of Privilege Vulnerability |
CVE-2024-30030 | High | 7.8 | 2024-05-14 | Win32k Elevation of Privilege Vulnerability |
CVE-2024-30029 | High | 7.5 | 2024-05-14 | Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability |
CVE-2024-30028 | High | 7.8 | 2024-05-14 | Win32k Elevation of Privilege Vulnerability |
CVE-2024-30027 | High | 7.8 | 2024-05-14 | NTFS Elevation of Privilege Vulnerability |
CVE-2024-30025 | High | 7.8 | 2024-05-14 | Windows Common Log File System Driver Elevation of Privilege Vulnerability |
CVE-2024-30024 | High | 7.5 | 2024-05-14 | Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability |
CVE-2024-30023 | High | 7.5 | 2024-05-14 | Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability |
CVE-2024-30022 | High | 7.5 | 2024-05-14 | Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability |
CVE-2024-30021 | Medium | 6.8 | 2024-05-14 | Windows Mobile Broadband Driver Remote Code Execution Vulnerability |
CVE-2024-30020 | High | 8.1 | 2024-05-14 | Windows Cryptographic Services Remote Code Execution Vulnerability |
CVE-2024-30019 | Medium | 6.5 | 2024-05-14 | DHCP Server Service Denial of Service Vulnerability |
CVE-2024-30018 | High | 7.8 | 2024-05-14 | Windows Kernel Elevation of Privilege Vulnerability |
CVE-2024-30017 | High | 8.8 | 2024-05-14 | Windows Hyper-V Remote Code Execution Vulnerability |
CVE-2024-30016 | Medium | 5.5 | 2024-05-14 | Windows Cryptographic Services Information Disclosure Vulnerability |
CVE-2024-30015 | High | 7.5 | 2024-05-14 | Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability |
CVE-2024-30014 | High | 7.5 | 2024-05-14 | Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability |
CVE-2024-30012 | Medium | 6.8 | 2024-05-14 | Windows Mobile Broadband Driver Remote Code Execution Vulnerability |
CVE-2024-30011 | Medium | 6.5 | 2024-05-14 | Windows Hyper-V Denial of Service Vulnerability |
CVE-2024-30010 | High | 8.8 | 2024-05-14 | Windows Hyper-V Remote Code Execution Vulnerability |
CVE-2024-30009 | High | 8.8 | 2024-05-14 | Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability |
CVE-2024-30008 | Medium | 5.5 | 2024-05-14 | Windows DWM Core Library Information Disclosure Vulnerability |
CVE-2024-30007 | High | 8.8 | 2024-05-14 | Microsoft Brokering File System Elevation of Privilege Vulnerability |