2024 CVEs (page 32)
Page 32 of 385 — CVEs published in 2024, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-41166 | Medium | 6.1 | 2025-02-12 | Stack-based buffer overflow in some Intel(R) PROSet/Wireless WiFi and Killerâ„¢ WiFi software for Windows before version 23.80 may allow an unauthenticated use… |
CVE-2024-40887 | Medium | 6.1 | 2025-02-12 | Race condition in some Intel(R) PROSet/Wireless WiFi and Killerâ„¢ WiFi software for Windows before version 23.80 may allow an unauthenticated user to potentia… |
CVE-2024-39813 | Medium | 6.7 | 2025-02-12 | Uncontrolled search path for some EPCT software before version 1.42.8.0 may allow an authenticated user to potentially enable escalation of privilege via local… |
CVE-2024-39805 | High | 7.8 | 2025-02-12 | Insufficient verification of data authenticity in some Intel(R) DSA software before version 23.4.39 may allow an authenticated user to potentially enable escal… |
CVE-2024-39797 | Medium | 6.5 | 2025-02-12 | Improper access control in some drivers for Intel(R) Ethernet Connection I219 Series before version 12.19.1.39 may allow an authenticated user to potentially e… |
CVE-2024-39779 | Medium | 4.7 | 2025-02-12 | Stack-based buffer overflow in some drivers for Intel(R) Ethernet Connection I219 Series before version 12.19.1.39 may allow an authenticated user to potential… |
CVE-2024-39606 | Medium | 6.1 | 2025-02-12 | Improper input validation in some Intel(R) PROSet/Wireless WiFi and Killerâ„¢ WiFi software for Windows before version 23.80 may allow an unauthenticated user… |
CVE-2024-39372 | Medium | 6.7 | 2025-02-12 | Uncontrolled search path for the Intel(R) XTU software for Windows before version 7.14.2.14 may allow an authenticated user to potentially enable escalation of… |
CVE-2024-39365 | Medium | 6.7 | 2025-02-12 | Uncontrolled search path for the FPGA Support Package for the Intel(R) oneAPI DPC++/C++ Compiler software for Windows before version 2024.2 may allow an authen… |
CVE-2024-39356 | High | 7.4 | 2025-02-12 | NULL pointer dereference in some Intel(R) PROSet/Wireless WiFi and Killerâ„¢ WiFi software for Windows before version 23.80 may allow an unauthenticated user t… |
CVE-2024-39355 | Medium | 6.5 | 2025-02-12 | Improper handling of physical or environmental conditions in some Intel(R) Processors may allow an authenticated user to enable denial of service via local acc… |
CVE-2024-39286 | Low | 3.3 | 2025-02-12 | Incorrect execution-assigned permissions in the Linux kernel mode driver for the Intel(R) 800 Series Ethernet Driver before version 1.15.4 may allow an authent… |
CVE-2024-39284 | Medium | 6.7 | 2025-02-12 | Uncontrolled search path for some Intel(R) Advisor software before version 2024.2 may allow an authenticated user to potentially enable escalation of privilege… |
CVE-2024-39279 | Medium | 6.5 | 2025-02-12 | Insufficient granularity of access control in UEFI firmware in some Intel(R) processors may allow a authenticated user to potentially enable denial of service… |
CVE-2024-39271 | Low | 2.6 | 2025-02-12 | Improper restriction of communication channel to intended endpoints in some Intel(R) PROSet/Wireless WiFi and Killerâ„¢ WiFi software before version 23.80 may… |
CVE-2024-38310 | High | 8.2 | 2025-02-12 | Improper access control in some Intel(R) Graphics Driver software installers may allow an authenticated user to potentially enable escalation of privilege via… |
CVE-2024-38307 | High | 7.7 | 2025-02-12 | Improper input validation in the firmware for some Intel(R) AMT and Intel(R) Standard Manageability may allow an authenticated user to potentially enable denia… |
CVE-2024-37355 | High | 8.8 | 2025-02-12 | Improper access control in some Intel(R) Graphics software may allow an authenticated user to potentially enable escalation of privilege via local access. |
CVE-2024-37020 | Low | 3.8 | 2025-02-12 | Sequence of processor instructions leads to unexpected behavior in the Intel(R) DSA V1.0 for some Intel(R) Xeon(R) Processors may allow an authenticated user t… |
CVE-2024-36293 | Medium | 6.5 | 2025-02-12 | Improper access control in the EDECCSSA user leaf function for some Intel(R) Processors with Intel(R) SGX may allow an authenticated user to potentially enable… |
CVE-2024-36291 | Medium | 6.7 | 2025-02-12 | Uncontrolled search path for some Intel(R) Chipset Software Installation Utility before version 10.1.19867.8574 may allow an authenticated user to potentially… |
CVE-2024-36285 | Medium | 5.6 | 2025-02-12 | Race condition in some Intel(R) PROSet/Wireless WiFi and Killerâ„¢ WiFi software for Windows before version 23.80 may allow an authenticated user to potentiall… |
CVE-2024-36283 | Medium | 6.7 | 2025-02-12 | Uncontrolled search path for the Intel(R) Thread Director Visualizer software before version 1.0.1 may allow an authenticated user to potentially enable escala… |
CVE-2024-36280 | Medium | 6.7 | 2025-02-12 | Uncontrolled search path for some Intel(R) High Level Synthesis Compiler software before version 24.2 may allow an authenticated user to potentially enable esc… |
CVE-2024-36274 | Medium | 6.5 | 2025-02-12 | Out-of-bounds write in the Intel(R) 800 Series Ethernet Driver for Intel(R) Ethernet Adapter Complete Driver Pack before versions 29.1 may allow an unauthentic… |
CVE-2024-36262 | High | 7.2 | 2025-02-12 | Race condition in some Intel(R) System Security Report and System Resources Defense firmware may allow a privileged user to potentially enable escalation of pr… |
CVE-2024-32942 | Medium | 6.7 | 2025-02-12 | Incorrect default permissions for some Intel(R) DSA installer for Windows before version 24.2.19.5 may allow an authenticated user to potentially enable escala… |
CVE-2024-32941 | High | 7.9 | 2025-02-12 | NULL pointer dereference for some Intel(R) MLC software before version v3.11b may allow an authenticated user to potentially enable denial of service via local… |
CVE-2024-32938 | Medium | 6.7 | 2025-02-12 | Uncontrolled search path for some Intel(R) MPI Library for Windows software before version 2021.13 may allow an authenticated user to potentially enable escala… |
CVE-2024-31858 | High | 7.8 | 2025-02-12 | Out-of-bounds write for some Intel(R) QuickAssist Technology software before version 2.2.0 may allow an authenticated user to potentially enable escalation of… |
CVE-2024-31157 | Medium | 5.3 | 2025-02-12 | Improper initialization in UEFI firmware OutOfBandXML module in some Intel(R) Processors may allow a privileged user to potentially enable information disclosu… |
CVE-2024-31155 | High | 7.5 | 2025-02-12 | Improper buffer restrictions in the UEFI firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via lo… |
CVE-2024-31153 | Medium | 5.0 | 2025-02-12 | Improper input validation for some Intel(R) QuickAssist Technology software before version 2.2.0 may allow an authenticated user to potentially enable denial o… |
CVE-2024-31068 | Medium | 5.3 | 2025-02-12 | Improper Finite State Machines (FSMs) in Hardware Logic for some Intel(R) Processors may allow privileged user to potentially enable denial of service via loca… |
CVE-2024-30211 | Medium | 6.0 | 2025-02-12 | Improper access control in some Intel(R) ME driver pack installer engines before version 2422.6.2.0 may allow an authenticated user to potentially enable escal… |
CVE-2024-29223 | Medium | 6.7 | 2025-02-12 | Uncontrolled search path for some Intel(R) QuickAssist Technology software before version 2.2.0 may allow an authenticated user to potentially enable escalatio… |
CVE-2024-29214 | High | 7.5 | 2025-02-12 | Improper input validation in UEFI firmware CseVariableStorageSmm for some Intel(R) Processors may allow a privileged user to potentially enable escalation of p… |
CVE-2024-28127 | High | 7.5 | 2025-02-12 | Improper input validation in UEFI firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via local acc… |
CVE-2024-28047 | Medium | 5.3 | 2025-02-12 | Improper input validation in UEFI firmware for some Intel(R) Processors may allow a privileged user to potentially enable information disclosure via local acce… |
CVE-2024-26021 | Low | 2.3 | 2025-02-12 | Improper initialization in the firmware for some Intel(R) AMT and Intel(R) Standard Manageability may allow a privileged user to potentially enable information… |
CVE-2024-25571 | Low | 2.3 | 2025-02-12 | Improper input validation in some Intel(R) SPS firmware before SPS_E5_06.01.04.059.0 may allow a privileged user to potentially enable denial of service via lo… |
CVE-2024-24852 | Medium | 6.7 | 2025-02-12 | Uncontrolled search path in some Intel(R) Ethernet Adapter Complete Driver Pack install before versions 29.1 may allow an authenticated user to potentially ena… |
CVE-2024-24582 | High | 7.5 | 2025-02-12 | Improper input validation in XmlCli feature for UEFI firmware for some Intel(R) processors may allow privileged user to potentially enable escalation of privil… |
CVE-2024-21859 | Medium | 5.3 | 2025-02-12 | Improper buffer restrictions in the UEFI firmware for some Intel(R) Processors may allow a privileged user to potentially enable information disclosure via loc… |
CVE-2024-21830 | Medium | 6.7 | 2025-02-12 | Uncontrolled search path in some Intel(R) VPL software before version 2023.4.0 may allow an authenticated user to potentially enable escalation of privilege vi… |
CVE-2024-12673 | High | 7.8 | 2025-02-12 | An improper privilege vulnerability was reported in a BIOS customization feature of Lenovo Vantage on SMB notebook devices which could allow a local attacker t… |
CVE-2024-6097 | Medium | 5.3 | 2025-02-12 | In Progress® Telerik® Reporting versions prior to 2025 Q1 (19.0.25.211), information disclosure is possible by a local threat actor through an absolute path vu… |
CVE-2024-11629 | High | 7.1 | 2025-02-12 | In Progress® Telerik® Document Processing Libraries, versions prior to 2025 Q1 (2025.1.205), using .NET Standard 2.0, the contents of a file at an arbitrary pa… |
CVE-2024-11628 | Medium | 4.1 | 2025-02-12 | In Progress® Telerik® Kendo UI for Vue versions v2.4.0 through v6.0.1, an attacker can introduce or modify properties within the global prototype chain which c… |
CVE-2024-9870 | Medium | 4.3 | 2025-02-12 | An external service interaction vulnerability in GitLab EE affecting all versions from 15.11 prior to 17.6.5, 17.7 prior to 17.7.4, and 17.8 prior to 17.8.2 al… |
CVE-2024-12629 | Medium | 4.1 | 2025-02-12 | In Progress® Telerik® KendoReact versions v3.5.0 through v9.4.0, an attacker can introduce or modify properties within the global prototype chain which can res… |
CVE-2024-11343 | High | 8.3 | 2025-02-12 | In Progress® Telerik® Document Processing Libraries, versions prior to 2025 Q1 (2025.1.205), unzipping an archive can lead to arbitrary file system access. |
CVE-2024-54160 | Medium | 6.4 | 2025-02-12 | dashboards-reporting (aka Dashboards Reports) before 2.19.0.0, as shipped in OpenSearch before 2.19, allows XSS because Markdown is not sanitized when previewi… |
CVE-2024-12379 | Medium | 6.5 | 2025-02-12 | A denial of service vulnerability in GitLab CE/EE affecting all versions from 14.1 prior to 17.6.5, 17.7 prior to 17.7.4, and 17.8 prior to 17.8.2 allows an at… |
CVE-2024-12251 | High | 7.8 | 2025-02-12 | In Progress Telerik UI for WinUI versions prior to 2025 Q1 (3.0.0), a command injection attack is possible through improper neutralization of hyperlink element… |
CVE-2024-57952 | High | 7.1 | 2025-02-12 | In the Linux kernel, the following vulnerability has been resolved: Revert "libfs: fix infinite directory reads for offset dir" The current directory offset… |
CVE-2024-57951 | High | 7.8 | 2025-02-12 | In the Linux kernel, the following vulnerability has been resolved: hrtimers: Handle CPU state correctly on hotplug Consider a scenario where a CPU transitio… |
CVE-2024-23563 | Low | 3.9 | 2025-02-12 | HCL Connections Docs is vulnerable to a sensitive information disclosure which could allow a user to obtain sensitive information they are not entitled to, cau… |
CVE-2024-10322 | Medium | 6.4 | 2025-02-12 | The Brizy – Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via REST API SVG File uploads in all versions up to, and including… |
CVE-2024-13532 | High | 7.5 | 2025-02-12 | The Small Package Quotes – Purolator Edition plugin for WordPress is vulnerable to SQL Injection via the 'edit_id' and 'dropship_edit_id' parameters in all ver… |
CVE-2024-13480 | High | 7.5 | 2025-02-12 | The LTL Freight Quotes – For Customers of FedEx Freight plugin for WordPress is vulnerable to SQL Injection via the 'edit_id' and 'dropship_edit_id' parameters… |
CVE-2024-13477 | High | 7.5 | 2025-02-12 | The LTL Freight Quotes – Unishippers Edition plugin for WordPress is vulnerable to SQL Injection via the 'edit_id' parameter in all versions up to, and includi… |
CVE-2024-12386 | High | 8.1 | 2025-02-12 | The WP Abstracts plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.7.3. This is due to missing nonce val… |
CVE-2024-10960 | Critical | 9.9 | 2025-02-12 | The Brizy – Page Builder plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'storeUploads' function in all… |
CVE-2024-32838 | High | 8.8 | 2025-02-12 | SQL Injection vulnerability in various API endpoints - offices, dashboards, etc. Apache Fineract versions 1.9 and before have a vulnerability that allows an au… |
CVE-2024-13531 | High | 7.5 | 2025-02-12 | The ShipEngine Shipping Quotes plugin for WordPress is vulnerable to SQL Injection via the 'edit_id' parameter in all versions up to, and including, 1.0.7 due… |
CVE-2024-13528 | High | 7.5 | 2025-02-12 | The Customer Email Verification for WooCommerce plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 2.9.5. This i… |
CVE-2024-13490 | High | 7.5 | 2025-02-12 | The LTL Freight Quotes – XPO Edition plugin for WordPress is vulnerable to SQL Injection via the 'edit_id' and 'dropship_edit_id' parameters in all versions up… |
CVE-2024-13475 | High | 7.5 | 2025-02-12 | The Small Package Quotes – UPS Edition plugin for WordPress is vulnerable to SQL Injection via the 'edit_id' parameter in all versions up to, and including, 4… |
CVE-2024-13473 | High | 7.5 | 2025-02-12 | The LTL Freight Quotes – Worldwide Express Edition plugin for WordPress is vulnerable to SQL Injection via the 'dropship_edit_id' and 'edit_id' parameter in al… |
CVE-2024-13459 | Medium | 6.4 | 2025-02-12 | The FuseDesk plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'fusedesk_newcase' shortcode in all versions up to, and includi… |
CVE-2024-13456 | Medium | 6.4 | 2025-02-12 | The Easy Quiz Maker plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'wqt-question' shortcode in all versions up to, and incl… |
CVE-2024-13437 | Medium | 4.3 | 2025-02-12 | The Book a Room plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.9. This is due to missing or incorrect… |
CVE-2024-13435 | High | 7.5 | 2025-02-12 | The Ebook Downloader plugin for WordPress is vulnerable to SQL Injection via the 'download' parameter in all versions up to, and including, 1.0 due to insuffic… |
CVE-2024-13365 | Critical | 9.8 | 2025-02-12 | The Security & Malware scan by CleanTalk plugin for WordPress is vulnerable to arbitrary file uploads due to the plugin uploading and extracting .zip archives… |
CVE-2024-12296 | High | 8.8 | 2025-02-12 | The Apus Framework plugin for WordPress is vulnerable to unauthorized modification of data that can lead to privilege escalation due to a missing capability ch… |
CVE-2024-12213 | Critical | 9.8 | 2025-02-12 | The WP Job Board Pro plugin for WordPress is vulnerable to privilege escalation in all versions up to 2.3.16. This is due to the plugin allowing a user to supp… |
CVE-2024-13814 | Medium | 5.4 | 2025-02-12 | The The Global Gallery - WordPress Responsive Gallery plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including… |
CVE-2024-12315 | High | 7.5 | 2025-02-12 | The Export All Posts, Products, Orders, Refunds & Users plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and includi… |
CVE-2024-13821 | Medium | 5.3 | 2025-02-12 | The WP Booking Calendar plugin for WordPress is vulnerable to Unauthenticated Post-Confirmation Booking Manipulation in all versions up to, and including, 10.1… |
CVE-2024-13794 | Medium | 5.3 | 2025-02-12 | The WP Ghost (Hide My WP Ghost) – Security & Firewall plugin for WordPress is vulnerable to Login Page Dislcosure in all versions up to, and including, 5.3.02… |
CVE-2024-13714 | High | 8.8 | 2025-02-12 | The All-Images.ai – IA Image Bank and Custom Image creation plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in… |
CVE-2024-13601 | Medium | 4.3 | 2025-02-12 | The Majestic Support – The Leading-Edge Help Desk & Customer Support Plugin plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versi… |
CVE-2024-13600 | High | 7.5 | 2025-02-12 | The Majestic Support – The Leading-Edge Help Desk & Customer Support Plugin plugin for WordPress is vulnerable to Sensitive Information Exposure in all version… |
CVE-2024-13374 | Medium | 4.3 | 2025-02-12 | The WP Table Manager plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on thewptm_getFolders AJAX action in all versi… |
CVE-2024-13800 | High | 8.1 | 2025-02-12 | The ConvertPlus plugin for WordPress is vulnerable to unauthorized modification of data that can lead to a denial of service due to a missing capability check… |
CVE-2024-13769 | Medium | 6.4 | 2025-02-12 | The Puzzles | WP Magazine / Review with Store WordPress Theme + RTL theme for WordPress is vulnerable to Stored Cross-Site Scripting due to a missing capabilit… |
CVE-2024-13665 | Medium | 6.4 | 2025-02-12 | The Admire Extra plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'space' shortcode in all versions up to, and including, 1.6… |
CVE-2024-13658 | Medium | 6.4 | 2025-02-12 | The NGG Smart Image Search plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'hr_SIS_nextgen_searchbox' shortcode in all versi… |
CVE-2024-13656 | High | 8.1 | 2025-02-12 | The Click Mag - Viral WordPress News Magazine/Blog Theme theme for WordPress is vulnerable to unauthorized modification of data that can lead to a denial of se… |
CVE-2024-13654 | High | 8.1 | 2025-02-12 | The ZoxPress - The All-In-One WordPress News Theme theme for WordPress is vulnerable to unauthorized modification of data that can lead to a denial of service… |
CVE-2024-13653 | High | 8.8 | 2025-02-12 | The ZoxPress - The All-In-One WordPress News Theme theme for WordPress is vulnerable to unauthorized modification of data that can lead to privilege escalation… |
CVE-2024-13421 | Critical | 9.8 | 2025-02-12 | The Real Estate 7 WordPress theme for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 3.5.1. This is due to the plugin no… |
CVE-2024-12164 | Medium | 4.3 | 2025-02-12 | The WPSyncSheets Lite For WPForms – WPForms Google Spreadsheet Addon plugin for WordPress is vulnerable to unauthorized modification of data due to a missing c… |
CVE-2024-11746 | Medium | 6.4 | 2025-02-12 | The Discover the Best Woocommerce Product Brands Plugin for WordPress – Woocommerce Brands Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scrip… |
CVE-2024-13749 | Medium | 6.1 | 2025-02-12 | The StaffList plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.2.3. This is due to missing or incorrect… |
CVE-2024-13701 | Medium | 6.4 | 2025-02-12 | The Liveticker (by stklcode) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'liveticker' shortcode in all versions up to, a… |
CVE-2024-13554 | Medium | 5.3 | 2025-02-12 | The The Ultimate WordPress Toolkit – WP Extended plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on t… |
CVE-2024-13541 | Medium | 4.3 | 2025-02-12 | The aDirectory – WordPress Directory Listing Plugin plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the ad… |
CVE-2024-13539 | Medium | 5.3 | 2025-02-12 | The AForms Eats plugin for WordPress is vulnerable to Full Path Disclosure in all versions up to, and including, 1.3.1. This is due the /vendor/aura/payload-in… |