2024 CVEs (page 321)
Page 321 of 385 — CVEs published in 2024, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-26255 | Medium | 5.5 | 2024-04-09 | Windows Remote Access Connection Manager Information Disclosure Vulnerability |
CVE-2024-26254 | High | 7.5 | 2024-04-09 | Microsoft Virtual Machine Bus (VMBus) Denial of Service Vulnerability |
CVE-2024-26253 | Medium | 6.8 | 2024-04-09 | Windows rndismp6.sys Remote Code Execution Vulnerability |
CVE-2024-26252 | Medium | 6.8 | 2024-04-09 | Windows rndismp6.sys Remote Code Execution Vulnerability |
CVE-2024-26251 | Medium | 6.8 | 2024-04-09 | Microsoft SharePoint Server Spoofing Vulnerability |
CVE-2024-26250 | Medium | 6.7 | 2024-04-09 | Secure Boot Security Feature Bypass Vulnerability |
CVE-2024-26248 | High | 7.5 | 2024-04-09 | Windows Kerberos Elevation of Privilege Vulnerability |
CVE-2024-26245 | High | 7.8 | 2024-04-09 | Windows SMB Elevation of Privilege Vulnerability |
CVE-2024-26244 | High | 8.8 | 2024-04-09 | Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability |
CVE-2024-26243 | High | 7.0 | 2024-04-09 | Windows USB Print Driver Elevation of Privilege Vulnerability |
CVE-2024-26242 | High | 7.0 | 2024-04-09 | Windows Telephony Server Elevation of Privilege Vulnerability |
CVE-2024-26241 | High | 7.8 | 2024-04-09 | Win32k Elevation of Privilege Vulnerability |
CVE-2024-26240 | High | 8.0 | 2024-04-09 | Secure Boot Security Feature Bypass Vulnerability |
CVE-2024-26239 | High | 7.8 | 2024-04-09 | Windows Telephony Server Elevation of Privilege Vulnerability |
CVE-2024-26237 | High | 7.8 | 2024-04-09 | Windows Defender Credential Guard Elevation of Privilege Vulnerability |
CVE-2024-26236 | High | 7.0 | 2024-04-09 | Windows Update Stack Elevation of Privilege Vulnerability |
CVE-2024-26235 | High | 7.8 | 2024-04-09 | Windows Update Stack Elevation of Privilege Vulnerability |
CVE-2024-26234 | Medium | 6.7 | 2024-04-09 | Proxy Driver Spoofing Vulnerability |
CVE-2024-26233 | High | 7.2 | 2024-04-09 | Windows DNS Server Remote Code Execution Vulnerability |
CVE-2024-26232 | High | 7.3 | 2024-04-09 | Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability |
CVE-2024-26231 | High | 7.2 | 2024-04-09 | Windows DNS Server Remote Code Execution Vulnerability |
CVE-2024-26230 | High | 7.8 | 2024-04-09 | Windows Telephony Server Elevation of Privilege Vulnerability |
CVE-2024-26229 | High | 7.8 | 2024-04-09 | Windows CSC Service Elevation of Privilege Vulnerability |
CVE-2024-26228 | High | 7.8 | 2024-04-09 | Windows Cryptographic Services Security Feature Bypass Vulnerability |
CVE-2024-26227 | High | 7.2 | 2024-04-09 | Windows DNS Server Remote Code Execution Vulnerability |
CVE-2024-26226 | Medium | 6.5 | 2024-04-09 | Windows Distributed File System (DFS) Information Disclosure Vulnerability |
CVE-2024-26224 | High | 7.2 | 2024-04-09 | Windows DNS Server Remote Code Execution Vulnerability |
CVE-2024-26223 | High | 7.2 | 2024-04-09 | Windows DNS Server Remote Code Execution Vulnerability |
CVE-2024-26222 | High | 7.2 | 2024-04-09 | Windows DNS Server Remote Code Execution Vulnerability |
CVE-2024-26221 | High | 7.2 | 2024-04-09 | Windows DNS Server Remote Code Execution Vulnerability |
CVE-2024-26220 | Medium | 5.0 | 2024-04-09 | Windows Mobile Hotspot Information Disclosure Vulnerability |
CVE-2024-26219 | High | 7.5 | 2024-04-09 | HTTP.sys Denial of Service Vulnerability |
CVE-2024-26218 | High | 7.8 | 2024-04-09 | Windows Kernel Elevation of Privilege Vulnerability |
CVE-2024-26217 | Medium | 5.5 | 2024-04-09 | Windows Remote Access Connection Manager Information Disclosure Vulnerability |
CVE-2024-26216 | High | 7.3 | 2024-04-09 | Windows File Server Resource Management Service Elevation of Privilege Vulnerability |
CVE-2024-26215 | High | 7.5 | 2024-04-09 | DHCP Server Service Denial of Service Vulnerability |
CVE-2024-26214 | High | 8.8 | 2024-04-09 | Microsoft WDAC SQL Server ODBC Driver Remote Code Execution Vulnerability |
CVE-2024-26213 | High | 7.0 | 2024-04-09 | Microsoft Brokering File System Elevation of Privilege Vulnerability |
CVE-2024-26212 | High | 7.5 | 2024-04-09 | DHCP Server Service Denial of Service Vulnerability |
CVE-2024-26211 | High | 7.8 | 2024-04-09 | Windows Remote Access Connection Manager Elevation of Privilege Vulnerability |
CVE-2024-26210 | High | 8.8 | 2024-04-09 | Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability |
CVE-2024-26209 | Medium | 5.5 | 2024-04-09 | Microsoft Local Security Authority Subsystem Service Information Disclosure Vulnerability |
CVE-2024-26208 | High | 7.2 | 2024-04-09 | Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability |
CVE-2024-26207 | Medium | 5.5 | 2024-04-09 | Windows Remote Access Connection Manager Information Disclosure Vulnerability |
CVE-2024-26205 | High | 8.8 | 2024-04-09 | Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability |
CVE-2024-26202 | High | 7.2 | 2024-04-09 | DHCP Server Service Remote Code Execution Vulnerability |
CVE-2024-26200 | High | 8.8 | 2024-04-09 | Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability |
CVE-2024-26195 | High | 7.2 | 2024-04-09 | DHCP Server Service Remote Code Execution Vulnerability |
CVE-2024-26194 | High | 7.4 | 2024-04-09 | Secure Boot Security Feature Bypass Vulnerability |
CVE-2024-26193 | Medium | 6.4 | 2024-04-09 | Azure Migrate Remote Code Execution Vulnerability |
CVE-2024-26189 | High | 8.0 | 2024-04-09 | Secure Boot Security Feature Bypass Vulnerability |
CVE-2024-26183 | Medium | 6.5 | 2024-04-09 | Windows Kerberos Denial of Service Vulnerability |
CVE-2024-26180 | High | 8.0 | 2024-04-09 | Secure Boot Security Feature Bypass Vulnerability |
CVE-2024-26179 | High | 8.8 | 2024-04-09 | Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability |
CVE-2024-26175 | High | 7.8 | 2024-04-09 | Secure Boot Security Feature Bypass Vulnerability |
CVE-2024-26172 | Medium | 5.5 | 2024-04-09 | Windows DWM Core Library Information Disclosure Vulnerability |
CVE-2024-26171 | Medium | 6.7 | 2024-04-09 | Secure Boot Security Feature Bypass Vulnerability |
CVE-2024-26168 | Medium | 6.8 | 2024-04-09 | Secure Boot Security Feature Bypass Vulnerability |
CVE-2024-26158 | High | 7.8 | 2024-04-09 | Microsoft Install Service Elevation of Privilege Vulnerability |
CVE-2024-21447 | High | 7.8 | 2024-04-09 | Windows Authentication Elevation of Privilege Vulnerability |
CVE-2024-21424 | Medium | 6.5 | 2024-04-09 | Azure Compute Gallery Elevation of Privilege Vulnerability |
CVE-2024-21409 | High | 7.3 | 2024-04-09 | .NET, .NET Framework, and Visual Studio Remote Code Execution Vulnerability |
CVE-2024-21324 | High | 7.2 | 2024-04-09 | Microsoft Defender for IoT Elevation of Privilege Vulnerability |
CVE-2024-21323 | High | 8.8 | 2024-04-09 | Microsoft Defender for IoT Remote Code Execution Vulnerability |
CVE-2024-21322 | High | 7.2 | 2024-04-09 | Microsoft Defender for IoT Remote Code Execution Vulnerability |
CVE-2024-20693 | High | 7.8 | 2024-04-09 | Windows Kernel Elevation of Privilege Vulnerability |
CVE-2024-20689 | High | 7.1 | 2024-04-09 | Secure Boot Security Feature Bypass Vulnerability |
CVE-2024-20688 | High | 7.1 | 2024-04-09 | Secure Boot Security Feature Bypass Vulnerability |
CVE-2024-20685 | Medium | 5.9 | 2024-04-09 | Azure Private 5G Core Denial of Service Vulnerability |
CVE-2024-20678 | High | 8.8 | 2024-04-09 | Remote Procedure Call Runtime Remote Code Execution Vulnerability |
CVE-2024-20670 | High | 8.1 | 2024-04-09 | Outlook for Windows Spoofing Vulnerability |
CVE-2024-20669 | Medium | 6.7 | 2024-04-09 | Secure Boot Security Feature Bypass Vulnerability |
CVE-2024-20665 | Medium | 6.1 | 2024-04-09 | BitLocker Security Feature Bypass Vulnerability |
CVE-2024-3281 | High | 8.8 | 2024-04-09 | A vulnerability was discovered in the firmware builds after 8.0.2.3267 and prior to 8.1.3.1301 in CCX devices. A flaw in the firmware build process did not pro… |
CVE-2024-31868 | Medium | 6.1 | 2024-04-09 | Improper Encoding or Escaping of Output vulnerability in Apache Zeppelin. The attackers can modify helium.json and exposure XSS attacks to normal users. This… |
CVE-2024-31866 | Critical | 9.8 | 2024-04-09 | Improper Encoding or Escaping of Output vulnerability in Apache Zeppelin. The attackers can execute shell scripts or malicious code by overriding configuratio… |
CVE-2024-31865 | Medium | 6.5 | 2024-04-09 | Improper Input Validation vulnerability in Apache Zeppelin. The attackers can call updating cron API with invalid or improper privileges so that the notebook… |
CVE-2024-31864 | Critical | 9.8 | 2024-04-09 | Improper Control of Generation of Code ('Code Injection') vulnerability in Apache Zeppelin. The attacker can inject sensitive configuration or malicious code… |
CVE-2024-28235 | High | 8.3 | 2024-04-09 | Contao is an open source content management system. Starting in version 4.9.0 and prior to versions 4.13.40 and 5.3.4, when checking for broken links on protec… |
CVE-2024-31487 | Medium | 5.9 | 2024-04-09 | A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiSandbox 4.4.0 through 4.4.4, FortiSandbox 4.2.1… |
CVE-2024-23671 | High | 8.1 | 2024-04-09 | A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiSandbox 4.4.0 through 4.4.3, FortiSandbox 4.2.1… |
CVE-2024-23662 | Medium | 5.3 | 2024-04-09 | An exposure of sensitive information to an unauthorized actor in Fortinet FortiOS at least version at least 7.4.0 through 7.4.1 and 7.2.0 through 7.2.5 and 7.0… |
CVE-2024-21756 | High | 8.8 | 2024-04-09 | A improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet FortiSandbox 4.4.0 through 4.4.3, FortiS… |
CVE-2024-21755 | High | 8.8 | 2024-04-09 | A improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet FortiSandbox 4.4.0 through 4.4.3, FortiS… |
CVE-2024-28234 | Medium | 4.3 | 2024-04-09 | Contao is an open source content management system. Starting in version 2.0.0 and prior to versions 4.13.40 and 5.3.4, it is possible to inject CSS styles via… |
CVE-2024-28191 | Low | 3.1 | 2024-04-09 | Contao is an open source content management system. Starting in version 4.0.0 and prior to version 4.13.40 and 5.3.4, it is possible to inject insert tags in f… |
CVE-2024-28190 | Medium | 5.4 | 2024-04-09 | Contao is an open source content management system. Starting in version 4.0.0 and prior to version 4.13.40 and 5.3.4, users can inject malicious code in filena… |
CVE-2024-31544 | Medium | 5.4 | 2024-04-09 | A stored cross-site scripting (XSS) vulnerability in Computer Laboratory Management System v1.0 allows attackers to execute arbitrary JavaScript code by includ… |
CVE-2024-2224 | High | 8.1 | 2024-04-09 | Improper Limitation of a Pathname to a Restricted Directory (‘Path Traversal’) vulnerability in the UpdateServer component of Bitdefender GravityZone allows an… |
CVE-2024-2223 | High | 8.1 | 2024-04-09 | An Incorrect Regular Expression vulnerability in Bitdefender GravityZone Update Server allows an attacker to cause a Server Side Request Forgery and reconfigur… |
CVE-2024-31863 | Medium | 5.3 | 2024-04-09 | Authentication Bypass by Spoofing vulnerability by replacing to exsiting notes in Apache Zeppelin.This issue affects Apache Zeppelin: from 0.10.1 before 0.11.0… |
CVE-2024-3046 | High | 7.5 | 2024-04-09 | In Eclipse Kura LogServlet component included in versions 5.0.0 to 5.4.1, a specifically crafted request to the servlet can allow an unauthenticated user to re… |
CVE-2024-31862 | Medium | 5.3 | 2024-04-09 | Improper Input Validation vulnerability in Apache Zeppelin when creating a new note from Zeppelin's UI.This issue affects Apache Zeppelin: from 0.10.1 before 0… |
CVE-2024-31978 | High | 7.6 | 2024-04-09 | A vulnerability has been identified in SINEC NMS (All versions < V2.0 SP2). Affected devices allow authenticated users to export monitoring data. The correspon… |
CVE-2024-31860 | Medium | 6.5 | 2024-04-09 | Improper Input Validation vulnerability in Apache Zeppelin. By adding relative path indicators(E.g ..), attackers can see the contents for any files in the fi… |
CVE-2024-31370 | High | 8.5 | 2024-04-09 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in CodeIsAwesome AIKit aikit-wordpress-ai-writing-assistant-… |
CVE-2024-31369 | Medium | 5.4 | 2024-04-09 | Cross-Site Request Forgery (CSRF) vulnerability in PenciDesign Soledad.This issue affects Soledad: from n/a through 8.4.2. |
CVE-2024-31368 | Medium | 6.5 | 2024-04-09 | Missing Authorization vulnerability in PenciDesign Soledad.This issue affects Soledad: from n/a through 8.4.2. |
CVE-2024-31367 | High | 7.1 | 2024-04-09 | Missing Authorization vulnerability in PenciDesign Soledad.This issue affects Soledad: from n/a through 8.4.2. |
CVE-2024-30191 | High | 8.4 | 2024-04-09 | A vulnerability has been identified in SCALANCE W1748-1 M12 (6GK5748-1GY01-0AA0), SCALANCE W1748-1 M12 (6GK5748-1GY01-0TA0), SCALANCE W1788-1 M12 (6GK5788-1GY0… |