2024 CVEs (page 32)
Page 32 of 385 — CVEs published in 2024, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-10083 | Medium | 5.5 | 2025-02-13 | CWE-20: Improper Input Validation vulnerability exists that could cause denial of service of engineering workstation when specific driver interface is invoked… |
CVE-2024-13770 | High | 8.1 | 2025-02-13 | The Puzzles | WP Magazine / Review with Store WordPress Theme + RTL theme for WordPress is vulnerable to PHP Object Injection in all versions up to, and includ… |
CVE-2024-13229 | Medium | 4.3 | 2025-02-13 | The Rank Math SEO – AI SEO Tools to Dominate SEO Rankings plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on… |
CVE-2024-13227 | Medium | 6.4 | 2025-02-13 | The Rank Math SEO – AI SEO Tools to Dominate SEO Rankings plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Rank Math API in a… |
CVE-2024-10763 | Critical | 9.8 | 2025-02-13 | The Campress theme for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 1.35 via the 'campress_woocommerce_get_ajax_produc… |
CVE-2024-13644 | Medium | 6.4 | 2025-02-13 | The DethemeKit For Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's De Gallery widget in all versions up to, and in… |
CVE-2024-8266 | Medium | 4.4 | 2025-02-13 | An issue was discovered in GitLab CE/EE affecting all versions starting from 17.1 prior to 17.6.0, which allows an attacker with maintainer role to trigger a p… |
CVE-2024-7102 | Critical | 9.6 | 2025-02-13 | An issue was discovered in GitLab CE/EE affecting all versions starting from 16.4 prior to 17.5.0 which allows an attacker to trigger a pipeline as another use… |
CVE-2024-51376 | High | 7.5 | 2025-02-12 | Directory Traversal vulnerability in yeqifu carRental v.1.0 allows a remote attacker to obtain sensitive information via the file/downloadFile.action?path= com… |
CVE-2024-34521 | Low | 3.5 | 2025-02-12 | A directory traversal vulnerability exists in the Mavenir SCE Application Provisioning Portal, version PORTAL-LBS-R_1_0_24_0, which allows an administrative us… |
CVE-2024-34520 | High | 8.8 | 2025-02-12 | An authorization bypass vulnerability exists in the Mavenir SCE Application Provisioning Portal, version PORTAL-LBS-R_1_0_24_0, which allows an authenticated '… |
CVE-2024-57605 | Medium | 5.4 | 2025-02-12 | Cross Site Scripting vulnerability in Daylight Studio Fuel CMS v.1.5.2 allows an attacker to escalate privileges via the /fuel/blocks/ and /fuel/pages componen… |
CVE-2024-57604 | Critical | 9.8 | 2025-02-12 | An issue in MaysWind ezBookkeeping 0.7.0 allows a remote attacker to escalate privileges via the token component. |
CVE-2024-57603 | Medium | 6.3 | 2025-02-12 | An issue in MaysWind ezBookkeeping 0.7.0 allows a remote attacker to escalate privileges via the lack of rate limiting. |
CVE-2024-57602 | Critical | 9.8 | 2025-02-12 | An issue in Alex Tselegidis EasyAppointments v.1.5.0 allows a remote attacker to escalate privileges via the index.php file. |
CVE-2024-57601 | Medium | 6.1 | 2025-02-12 | Cross Site Scripting vulnerability in Alex Tselegidis EasyAppointments v.1.5.0 allows a remote attacker to execute arbitrary code via the legal_settings parame… |
CVE-2024-56940 | High | 7.5 | 2025-02-12 | An issue in the profile image upload function of LearnDash v6.7.1 allows attackers to cause a Denial of Service (DoS) via excessive file uploads. |
CVE-2024-56939 | Medium | 5.4 | 2025-02-12 | LearnDash v6.7.1 was discovered to contain a stored cross-site scripting (XSS) vulnerability in the ld-comment-body class. |
CVE-2024-56938 | Medium | 5.4 | 2025-02-12 | LearnDash v6.7.1 was discovered to contain a stored cross-site scripting (XSS) vulnerability in the materials-content class. |
CVE-2024-51440 | High | 7.8 | 2025-02-12 | An issue in Nothing Tech Nothing OS v.2.6 allows a local attacker to escalate privileges via the NtBpfService component. |
CVE-2024-51123 | High | 7.5 | 2025-02-12 | An issue in Zertificon Z1 SecureMail Z1 SecureMail Gateway 4.44.2-7240-debian12 allows a remote attacker to obtain sensitive information via the /compose-pdf.x… |
CVE-2024-51122 | Medium | 6.1 | 2025-02-12 | Cross Site Scripting vulnerability in Zertificon Z1 SecureMail Z1 CertServer v.3.16.4-2516-debian12 alllows a remote attacker to execute arbitrary code via the… |
CVE-2024-47006 | Medium | 6.7 | 2025-02-12 | Uncontrolled search path for the Intel(R) RealSense D400 Series Universal Windows Platform (UWP) Driver for Windows(R) 10 all versions may allow an authenticat… |
CVE-2024-46923 | High | 7.5 | 2025-02-12 | An issue was discovered in Samsung Mobile Processor Exynos 2200, 1480, and 2400. The absence of a null check leads to a Denial of Service at amdgpu_cs_ib_fill… |
CVE-2024-46922 | High | 7.5 | 2025-02-12 | An issue was discovered in Samsung Mobile Processor Exynos 1480 and 2400. The absence of a null check leads to a Denial of Service at amdgpu_cs_parser_bos in t… |
CVE-2024-42492 | Medium | 6.7 | 2025-02-12 | Uncontrolled search path element in some BIOS and System Firmware Update Package for Intel(R) Server M50FCP family before version R01.02.0002 may allow a privi… |
CVE-2024-42419 | Medium | 6.7 | 2025-02-12 | Incorrect default permissions for some Intel(R) GPA and Intel(R) GPA Framework software installers may allow an authenticated user to potentially enable escala… |
CVE-2024-42410 | Medium | 6.5 | 2025-02-12 | Improper input validation in some Intel(R) Graphics Drivers may allow an authenticated user to potentially enable denial of service via local access. |
CVE-2024-42405 | Medium | 6.7 | 2025-02-12 | Uncontrolled search path for some Intel(R) Quartus(R) Prime Software before version 23.1.1 Patch 1.01std may allow an authenticated user to potentially enable… |
CVE-2024-41934 | Medium | 5.9 | 2025-02-12 | Improper access control in some Intel(R) GPA software before version 2024.3 may allow an authenticated user to potentially enable denial of service via local a… |
CVE-2024-41917 | High | 7.5 | 2025-02-12 | Time-of-check time-of-use race condition for some Intel(R) Battery Life Diagnostic Tool software before version 2.4.1 may allow an authenticated user to potent… |
CVE-2024-41168 | High | 7.4 | 2025-02-12 | Use after free in some Intel(R) PROSet/Wireless WiFi and Killerâ„¢ WiFi software for Windows before version 23.80 may allow an unauthenticated user to potentia… |
CVE-2024-41166 | Medium | 6.1 | 2025-02-12 | Stack-based buffer overflow in some Intel(R) PROSet/Wireless WiFi and Killerâ„¢ WiFi software for Windows before version 23.80 may allow an unauthenticated use… |
CVE-2024-40887 | Medium | 6.1 | 2025-02-12 | Race condition in some Intel(R) PROSet/Wireless WiFi and Killerâ„¢ WiFi software for Windows before version 23.80 may allow an unauthenticated user to potentia… |
CVE-2024-39813 | Medium | 6.7 | 2025-02-12 | Uncontrolled search path for some EPCT software before version 1.42.8.0 may allow an authenticated user to potentially enable escalation of privilege via local… |
CVE-2024-39805 | High | 7.8 | 2025-02-12 | Insufficient verification of data authenticity in some Intel(R) DSA software before version 23.4.39 may allow an authenticated user to potentially enable escal… |
CVE-2024-39797 | Medium | 6.5 | 2025-02-12 | Improper access control in some drivers for Intel(R) Ethernet Connection I219 Series before version 12.19.1.39 may allow an authenticated user to potentially e… |
CVE-2024-39779 | Medium | 4.7 | 2025-02-12 | Stack-based buffer overflow in some drivers for Intel(R) Ethernet Connection I219 Series before version 12.19.1.39 may allow an authenticated user to potential… |
CVE-2024-39606 | Medium | 6.1 | 2025-02-12 | Improper input validation in some Intel(R) PROSet/Wireless WiFi and Killerâ„¢ WiFi software for Windows before version 23.80 may allow an unauthenticated user… |
CVE-2024-39372 | Medium | 6.7 | 2025-02-12 | Uncontrolled search path for the Intel(R) XTU software for Windows before version 7.14.2.14 may allow an authenticated user to potentially enable escalation of… |
CVE-2024-39365 | Medium | 6.7 | 2025-02-12 | Uncontrolled search path for the FPGA Support Package for the Intel(R) oneAPI DPC++/C++ Compiler software for Windows before version 2024.2 may allow an authen… |
CVE-2024-39356 | High | 7.4 | 2025-02-12 | NULL pointer dereference in some Intel(R) PROSet/Wireless WiFi and Killerâ„¢ WiFi software for Windows before version 23.80 may allow an unauthenticated user t… |
CVE-2024-39355 | Medium | 6.5 | 2025-02-12 | Improper handling of physical or environmental conditions in some Intel(R) Processors may allow an authenticated user to enable denial of service via local acc… |
CVE-2024-39286 | Low | 3.3 | 2025-02-12 | Incorrect execution-assigned permissions in the Linux kernel mode driver for the Intel(R) 800 Series Ethernet Driver before version 1.15.4 may allow an authent… |
CVE-2024-39284 | Medium | 6.7 | 2025-02-12 | Uncontrolled search path for some Intel(R) Advisor software before version 2024.2 may allow an authenticated user to potentially enable escalation of privilege… |
CVE-2024-39279 | Medium | 6.5 | 2025-02-12 | Insufficient granularity of access control in UEFI firmware in some Intel(R) processors may allow a authenticated user to potentially enable denial of service… |
CVE-2024-39271 | Low | 2.6 | 2025-02-12 | Improper restriction of communication channel to intended endpoints in some Intel(R) PROSet/Wireless WiFi and Killerâ„¢ WiFi software before version 23.80 may… |
CVE-2024-38310 | High | 8.2 | 2025-02-12 | Improper access control in some Intel(R) Graphics Driver software installers may allow an authenticated user to potentially enable escalation of privilege via… |
CVE-2024-38307 | High | 7.7 | 2025-02-12 | Improper input validation in the firmware for some Intel(R) AMT and Intel(R) Standard Manageability may allow an authenticated user to potentially enable denia… |
CVE-2024-37355 | High | 8.8 | 2025-02-12 | Improper access control in some Intel(R) Graphics software may allow an authenticated user to potentially enable escalation of privilege via local access. |
CVE-2024-37020 | Low | 3.8 | 2025-02-12 | Sequence of processor instructions leads to unexpected behavior in the Intel(R) DSA V1.0 for some Intel(R) Xeon(R) Processors may allow an authenticated user t… |
CVE-2024-36293 | Medium | 6.5 | 2025-02-12 | Improper access control in the EDECCSSA user leaf function for some Intel(R) Processors with Intel(R) SGX may allow an authenticated user to potentially enable… |
CVE-2024-36291 | Medium | 6.7 | 2025-02-12 | Uncontrolled search path for some Intel(R) Chipset Software Installation Utility before version 10.1.19867.8574 may allow an authenticated user to potentially… |
CVE-2024-36285 | Medium | 5.6 | 2025-02-12 | Race condition in some Intel(R) PROSet/Wireless WiFi and Killerâ„¢ WiFi software for Windows before version 23.80 may allow an authenticated user to potentiall… |
CVE-2024-36283 | Medium | 6.7 | 2025-02-12 | Uncontrolled search path for the Intel(R) Thread Director Visualizer software before version 1.0.1 may allow an authenticated user to potentially enable escala… |
CVE-2024-36280 | Medium | 6.7 | 2025-02-12 | Uncontrolled search path for some Intel(R) High Level Synthesis Compiler software before version 24.2 may allow an authenticated user to potentially enable esc… |
CVE-2024-36274 | Medium | 6.5 | 2025-02-12 | Out-of-bounds write in the Intel(R) 800 Series Ethernet Driver for Intel(R) Ethernet Adapter Complete Driver Pack before versions 29.1 may allow an unauthentic… |
CVE-2024-36262 | High | 7.2 | 2025-02-12 | Race condition in some Intel(R) System Security Report and System Resources Defense firmware may allow a privileged user to potentially enable escalation of pr… |
CVE-2024-32942 | Medium | 6.7 | 2025-02-12 | Incorrect default permissions for some Intel(R) DSA installer for Windows before version 24.2.19.5 may allow an authenticated user to potentially enable escala… |
CVE-2024-32941 | High | 7.9 | 2025-02-12 | NULL pointer dereference for some Intel(R) MLC software before version v3.11b may allow an authenticated user to potentially enable denial of service via local… |
CVE-2024-32938 | Medium | 6.7 | 2025-02-12 | Uncontrolled search path for some Intel(R) MPI Library for Windows software before version 2021.13 may allow an authenticated user to potentially enable escala… |
CVE-2024-31858 | High | 7.8 | 2025-02-12 | Out-of-bounds write for some Intel(R) QuickAssist Technology software before version 2.2.0 may allow an authenticated user to potentially enable escalation of… |
CVE-2024-31157 | Medium | 5.3 | 2025-02-12 | Improper initialization in UEFI firmware OutOfBandXML module in some Intel(R) Processors may allow a privileged user to potentially enable information disclosu… |
CVE-2024-31155 | High | 7.5 | 2025-02-12 | Improper buffer restrictions in the UEFI firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via lo… |
CVE-2024-31153 | Medium | 5.0 | 2025-02-12 | Improper input validation for some Intel(R) QuickAssist Technology software before version 2.2.0 may allow an authenticated user to potentially enable denial o… |
CVE-2024-31068 | Medium | 5.3 | 2025-02-12 | Improper Finite State Machines (FSMs) in Hardware Logic for some Intel(R) Processors may allow privileged user to potentially enable denial of service via loca… |
CVE-2024-30211 | Medium | 6.0 | 2025-02-12 | Improper access control in some Intel(R) ME driver pack installer engines before version 2422.6.2.0 may allow an authenticated user to potentially enable escal… |
CVE-2024-29223 | Medium | 6.7 | 2025-02-12 | Uncontrolled search path for some Intel(R) QuickAssist Technology software before version 2.2.0 may allow an authenticated user to potentially enable escalatio… |
CVE-2024-29214 | High | 7.5 | 2025-02-12 | Improper input validation in UEFI firmware CseVariableStorageSmm for some Intel(R) Processors may allow a privileged user to potentially enable escalation of p… |
CVE-2024-28127 | High | 7.5 | 2025-02-12 | Improper input validation in UEFI firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via local acc… |
CVE-2024-28047 | Medium | 5.3 | 2025-02-12 | Improper input validation in UEFI firmware for some Intel(R) Processors may allow a privileged user to potentially enable information disclosure via local acce… |
CVE-2024-26021 | Low | 2.3 | 2025-02-12 | Improper initialization in the firmware for some Intel(R) AMT and Intel(R) Standard Manageability may allow a privileged user to potentially enable information… |
CVE-2024-25571 | Low | 2.3 | 2025-02-12 | Improper input validation in some Intel(R) SPS firmware before SPS_E5_06.01.04.059.0 may allow a privileged user to potentially enable denial of service via lo… |
CVE-2024-24852 | Medium | 6.7 | 2025-02-12 | Uncontrolled search path in some Intel(R) Ethernet Adapter Complete Driver Pack install before versions 29.1 may allow an authenticated user to potentially ena… |
CVE-2024-24582 | High | 7.5 | 2025-02-12 | Improper input validation in XmlCli feature for UEFI firmware for some Intel(R) processors may allow privileged user to potentially enable escalation of privil… |
CVE-2024-21859 | Medium | 5.3 | 2025-02-12 | Improper buffer restrictions in the UEFI firmware for some Intel(R) Processors may allow a privileged user to potentially enable information disclosure via loc… |
CVE-2024-21830 | Medium | 6.7 | 2025-02-12 | Uncontrolled search path in some Intel(R) VPL software before version 2023.4.0 may allow an authenticated user to potentially enable escalation of privilege vi… |
CVE-2024-12673 | High | 7.8 | 2025-02-12 | An improper privilege vulnerability was reported in a BIOS customization feature of Lenovo Vantage on SMB notebook devices which could allow a local attacker t… |
CVE-2024-6097 | Medium | 5.3 | 2025-02-12 | In Progress® Telerik® Reporting versions prior to 2025 Q1 (19.0.25.211), information disclosure is possible by a local threat actor through an absolute path vu… |
CVE-2024-11629 | High | 7.1 | 2025-02-12 | In Progress® Telerik® Document Processing Libraries, versions prior to 2025 Q1 (2025.1.205), using .NET Standard 2.0, the contents of a file at an arbitrary pa… |
CVE-2024-11628 | Medium | 4.1 | 2025-02-12 | In Progress® Telerik® Kendo UI for Vue versions v2.4.0 through v6.0.1, an attacker can introduce or modify properties within the global prototype chain which c… |
CVE-2024-9870 | Medium | 4.3 | 2025-02-12 | An external service interaction vulnerability in GitLab EE affecting all versions from 15.11 prior to 17.6.5, 17.7 prior to 17.7.4, and 17.8 prior to 17.8.2 al… |
CVE-2024-12629 | Medium | 4.1 | 2025-02-12 | In Progress® Telerik® KendoReact versions v3.5.0 through v9.4.0, an attacker can introduce or modify properties within the global prototype chain which can res… |
CVE-2024-11343 | High | 8.3 | 2025-02-12 | In Progress® Telerik® Document Processing Libraries, versions prior to 2025 Q1 (2025.1.205), unzipping an archive can lead to arbitrary file system access. |
CVE-2024-54160 | Medium | 6.4 | 2025-02-12 | dashboards-reporting (aka Dashboards Reports) before 2.19.0.0, as shipped in OpenSearch before 2.19, allows XSS because Markdown is not sanitized when previewi… |
CVE-2024-12379 | Medium | 6.5 | 2025-02-12 | A denial of service vulnerability in GitLab CE/EE affecting all versions from 14.1 prior to 17.6.5, 17.7 prior to 17.7.4, and 17.8 prior to 17.8.2 allows an at… |
CVE-2024-12251 | High | 7.8 | 2025-02-12 | In Progress Telerik UI for WinUI versions prior to 2025 Q1 (3.0.0), a command injection attack is possible through improper neutralization of hyperlink element… |
CVE-2024-57952 | High | 7.1 | 2025-02-12 | In the Linux kernel, the following vulnerability has been resolved: Revert "libfs: fix infinite directory reads for offset dir" The current directory offset… |
CVE-2024-57951 | High | 7.8 | 2025-02-12 | In the Linux kernel, the following vulnerability has been resolved: hrtimers: Handle CPU state correctly on hotplug Consider a scenario where a CPU transitio… |
CVE-2024-23563 | Low | 3.9 | 2025-02-12 | HCL Connections Docs is vulnerable to a sensitive information disclosure which could allow a user to obtain sensitive information they are not entitled to, cau… |
CVE-2024-10322 | Medium | 6.4 | 2025-02-12 | The Brizy – Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via REST API SVG File uploads in all versions up to, and including… |
CVE-2024-13532 | High | 7.5 | 2025-02-12 | The Small Package Quotes – Purolator Edition plugin for WordPress is vulnerable to SQL Injection via the 'edit_id' and 'dropship_edit_id' parameters in all ver… |
CVE-2024-13480 | High | 7.5 | 2025-02-12 | The LTL Freight Quotes – For Customers of FedEx Freight plugin for WordPress is vulnerable to SQL Injection via the 'edit_id' and 'dropship_edit_id' parameters… |
CVE-2024-13477 | High | 7.5 | 2025-02-12 | The LTL Freight Quotes – Unishippers Edition plugin for WordPress is vulnerable to SQL Injection via the 'edit_id' parameter in all versions up to, and includi… |
CVE-2024-12386 | High | 8.1 | 2025-02-12 | The WP Abstracts plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.7.3. This is due to missing nonce val… |
CVE-2024-10960 | Critical | 9.9 | 2025-02-12 | The Brizy – Page Builder plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'storeUploads' function in all… |
CVE-2024-32838 | High | 8.8 | 2025-02-12 | SQL Injection vulnerability in various API endpoints - offices, dashboards, etc. Apache Fineract versions 1.9 and before have a vulnerability that allows an au… |
CVE-2024-13531 | High | 7.5 | 2025-02-12 | The ShipEngine Shipping Quotes plugin for WordPress is vulnerable to SQL Injection via the 'edit_id' parameter in all versions up to, and including, 1.0.7 due… |
CVE-2024-13528 | High | 7.5 | 2025-02-12 | The Customer Email Verification for WooCommerce plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 2.9.5. This i… |
CVE-2024-13490 | High | 7.5 | 2025-02-12 | The LTL Freight Quotes – XPO Edition plugin for WordPress is vulnerable to SQL Injection via the 'edit_id' and 'dropship_edit_id' parameters in all versions up… |