2024 CVEs (page 367)
Page 367 of 385 — CVEs published in 2024, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-21393 | High | 7.6 | 2024-02-13 | Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability |
CVE-2024-21391 | High | 8.8 | 2024-02-13 | Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability |
CVE-2024-21389 | High | 7.6 | 2024-02-13 | Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability |
CVE-2024-21386 | High | 7.5 | 2024-02-13 | .NET Denial of Service Vulnerability |
CVE-2024-21384 | High | 7.8 | 2024-02-13 | Microsoft Office OneNote Remote Code Execution Vulnerability |
CVE-2024-21381 | Medium | 6.8 | 2024-02-13 | Microsoft Azure Active Directory B2C Spoofing Vulnerability |
CVE-2024-21380 | High | 8.0 | 2024-02-13 | Microsoft Dynamics Business Central/NAV Information Disclosure Vulnerability |
CVE-2024-21379 | High | 7.8 | 2024-02-13 | Microsoft Word Remote Code Execution Vulnerability |
CVE-2024-21378 | High | 8.8 | 2024-02-13 | Microsoft Outlook Remote Code Execution Vulnerability |
CVE-2024-21377 | Medium | 5.5 | 2024-02-13 | Windows DNS Information Disclosure Vulnerability |
CVE-2024-21376 | Critical | 9.0 | 2024-02-13 | Microsoft Azure Kubernetes Service Confidential Container Remote Code Execution Vulnerability |
CVE-2024-21375 | High | 8.8 | 2024-02-13 | Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability |
CVE-2024-21374 | Medium | 5.0 | 2024-02-13 | Microsoft Teams for Android Information Disclosure Vulnerability |
CVE-2024-21372 | High | 8.8 | 2024-02-13 | Windows OLE Remote Code Execution Vulnerability |
CVE-2024-21371 | High | 7.0 | 2024-02-13 | Windows Kernel Elevation of Privilege Vulnerability |
CVE-2024-21370 | High | 8.8 | 2024-02-13 | Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability |
CVE-2024-21369 | High | 8.8 | 2024-02-13 | Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability |
CVE-2024-21368 | High | 8.8 | 2024-02-13 | Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability |
CVE-2024-21367 | High | 8.8 | 2024-02-13 | Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability |
CVE-2024-21366 | High | 8.8 | 2024-02-13 | Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability |
CVE-2024-21365 | High | 8.8 | 2024-02-13 | Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability |
CVE-2024-21364 | Critical | 9.3 | 2024-02-13 | Microsoft Azure Site Recovery Elevation of Privilege Vulnerability |
CVE-2024-21363 | High | 7.8 | 2024-02-13 | Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability |
CVE-2024-21362 | Medium | 5.5 | 2024-02-13 | Windows Kernel Security Feature Bypass Vulnerability |
CVE-2024-21361 | High | 8.8 | 2024-02-13 | Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability |
CVE-2024-21360 | High | 8.8 | 2024-02-13 | Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability |
CVE-2024-21359 | High | 8.8 | 2024-02-13 | Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability |
CVE-2024-21358 | High | 8.8 | 2024-02-13 | Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability |
CVE-2024-21357 | High | 8.1 | 2024-02-13 | Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability |
CVE-2024-21356 | Medium | 6.5 | 2024-02-13 | Windows Lightweight Directory Access Protocol (LDAP) Denial of Service Vulnerability |
CVE-2024-21355 | High | 7.0 | 2024-02-13 | Microsoft Message Queuing (MSMQ) Elevation of Privilege Vulnerability |
CVE-2024-21354 | High | 7.8 | 2024-02-13 | Microsoft Message Queuing (MSMQ) Elevation of Privilege Vulnerability |
CVE-2024-21353 | High | 8.8 | 2024-02-13 | Microsoft WDAC ODBC Driver Remote Code Execution Vulnerability |
CVE-2024-21352 | High | 8.8 | 2024-02-13 | Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability |
CVE-2024-21351 | High | 7.6 | 2024-02-13 | Windows SmartScreen Security Feature Bypass Vulnerability |
CVE-2024-21350 | High | 8.8 | 2024-02-13 | Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability |
CVE-2024-21349 | High | 8.8 | 2024-02-13 | Microsoft ActiveX Data Objects Remote Code Execution Vulnerability |
CVE-2024-21348 | High | 7.5 | 2024-02-13 | Internet Connection Sharing (ICS) Denial of Service Vulnerability |
CVE-2024-21347 | High | 7.5 | 2024-02-13 | Microsoft ODBC Driver Remote Code Execution Vulnerability |
CVE-2024-21346 | High | 7.8 | 2024-02-13 | Win32k Elevation of Privilege Vulnerability |
CVE-2024-21345 | High | 8.8 | 2024-02-13 | Windows Kernel Elevation of Privilege Vulnerability |
CVE-2024-21344 | Medium | 5.9 | 2024-02-13 | Windows Network Address Translation (NAT) Denial of Service Vulnerability |
CVE-2024-21343 | Medium | 5.9 | 2024-02-13 | Windows Network Address Translation (NAT) Denial of Service Vulnerability |
CVE-2024-21342 | High | 7.5 | 2024-02-13 | Windows DNS Client Denial of Service Vulnerability |
CVE-2024-21341 | Medium | 6.8 | 2024-02-13 | Windows Kernel Remote Code Execution Vulnerability |
CVE-2024-21340 | Medium | 4.6 | 2024-02-13 | Windows Kernel Information Disclosure Vulnerability |
CVE-2024-21339 | Medium | 6.4 | 2024-02-13 | Windows USB Generic Parent Driver Remote Code Execution Vulnerability |
CVE-2024-21338 | High | 7.8 | 2024-02-13 | Windows Kernel Elevation of Privilege Vulnerability |
CVE-2024-21329 | High | 7.3 | 2024-02-13 | Azure Connected Machine Agent Elevation of Privilege Vulnerability |
CVE-2024-21328 | High | 7.6 | 2024-02-13 | Dynamics 365 Sales Spoofing Vulnerability |
CVE-2024-21327 | High | 7.6 | 2024-02-13 | Microsoft Dynamics 365 Customer Engagement Cross-Site Scripting Vulnerability |
CVE-2024-21315 | High | 7.8 | 2024-02-13 | Microsoft Defender for Endpoint Protection Elevation of Privilege Vulnerability |
CVE-2024-21304 | Medium | 4.1 | 2024-02-13 | Trusted Compute Base Elevation of Privilege Vulnerability |
CVE-2024-20695 | Medium | 5.7 | 2024-02-13 | Skype for Business Information Disclosure Vulnerability |
CVE-2024-20684 | Medium | 6.5 | 2024-02-13 | Windows Hyper-V Denial of Service Vulnerability |
CVE-2024-20679 | Medium | 6.5 | 2024-02-13 | Azure Stack Hub Spoofing Vulnerability |
CVE-2024-20673 | High | 7.8 | 2024-02-13 | Microsoft Office Remote Code Execution Vulnerability |
CVE-2024-20667 | High | 7.5 | 2024-02-13 | Azure DevOps Server Remote Code Execution Vulnerability |
CVE-2024-22923 | Critical | 9.8 | 2024-02-13 | SQL injection vulnerability in adv radius v.2.2.5 allows a local attacker to execute arbitrary code via a crafted script. |
CVE-2024-23440 | High | 7.1 | 2024-02-13 | Vba32 Antivirus v3.36.0 is vulnerable to an Arbitrary Memory Read vulnerability. The 0x22200B IOCTL code of the Vba32m64.sys driver allows to read up to 0x802… |
CVE-2024-23439 | High | 7.1 | 2024-02-13 | Vba32 Antivirus v3.36.0 is vulnerable to an Arbitrary Memory Read vulnerability by triggering the 0x22201B, 0x22201F, 0x222023, 0x222027 ,0x22202B, 0x22202F, 0… |
CVE-2024-1163 | High | 7.1 | 2024-02-13 | The attacker may exploit a path traversal vulnerability leading to information disclosure. |
CVE-2024-1140 | Medium | 6.1 | 2024-02-13 | Twister Antivirus v8.17 is vulnerable to an Out-of-bounds Read vulnerability by triggering the 0x801120B8 IOCTL code of the filmfd.sys driver. |
CVE-2024-1096 | Medium | 5.5 | 2024-02-13 | Twister Antivirus v8.17 is vulnerable to a Denial of Service vulnerability by triggering the 0x80112067, 0x801120CB 0x801120CC 0x80112044, 0x8011204B, 0x801120… |
CVE-2024-24782 | Medium | 4.3 | 2024-02-13 | An unauthenticated attacker can send a ping request from one network to another through an error in the origin verification even though the ports are separated… |
CVE-2024-24781 | High | 7.5 | 2024-02-13 | An unauthenticated remote attacker can use an uncontrolled resource consumption vulnerability to DoS the affected devices through excessive traffic on a single… |
CVE-2024-1309 | Medium | 6.5 | 2024-02-13 | Uncontrolled Resource Consumption vulnerability in Honeywell Niagara Framework on Windows, Linux, QNX allows Content Spoofing.This issue affects Niagara Framew… |
CVE-2024-1160 | Medium | 5.4 | 2024-02-13 | The Bold Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Icon Link in all versions up to, and including, 4.8.0… |
CVE-2024-1159 | Medium | 6.4 | 2024-02-13 | The Bold Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's shortcode(s) in all versions up to, and including, 4.8… |
CVE-2024-1157 | Medium | 5.4 | 2024-02-13 | The Bold Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's button URL in all versions up to, and including, 4.8.0… |
CVE-2024-24925 | High | 7.8 | 2024-02-13 | A vulnerability has been identified in Simcenter Femap (All versions < V2306.0000). The affected application is vulnerable to uninitialized pointer access whil… |
CVE-2024-24924 | High | 7.8 | 2024-02-13 | A vulnerability has been identified in Simcenter Femap (All versions < V2306.0000). The affected application contains an out of bounds write past the end of an… |
CVE-2024-24923 | High | 7.8 | 2024-02-13 | A vulnerability has been identified in Simcenter Femap (All versions < V2401.0000), Simcenter Femap (All versions < V2306.0001). The affected applications cont… |
CVE-2024-24922 | High | 7.8 | 2024-02-13 | A vulnerability has been identified in Simcenter Femap (All versions < V2401.0000). The affected application contains an out of bounds write past the end of an… |
CVE-2024-24921 | High | 7.8 | 2024-02-13 | A vulnerability has been identified in Simcenter Femap (All versions < V2401.0000). The affected application is vulnerable to memory corruption while parsing s… |
CVE-2024-24920 | High | 7.8 | 2024-02-13 | A vulnerability has been identified in Simcenter Femap (All versions < V2401.0000). The affected application contains an out of bounds write past the end of an… |
CVE-2024-23816 | Critical | 9.8 | 2024-02-13 | A vulnerability has been identified in Location Intelligence Perpetual Large (9DE5110-8CA13-1AX0) (All versions < V4.3), Location Intelligence Perpetual Medium… |
CVE-2024-23813 | High | 7.3 | 2024-02-13 | A vulnerability has been identified in Polarion ALM (All versions < V2404.0). The REST API endpoints of doorsconnector of the affected product lacks proper aut… |
CVE-2024-23812 | High | 8.0 | 2024-02-13 | A vulnerability has been identified in SINEC NMS (All versions < V2.0 SP1). The affected application incorrectly neutralizes special elements when creating a r… |
CVE-2024-23811 | High | 8.8 | 2024-02-13 | A vulnerability has been identified in SINEC NMS (All versions < V2.0 SP1). The affected application allows users to upload arbitrary files via TFTP. This coul… |
CVE-2024-23810 | High | 8.8 | 2024-02-13 | A vulnerability has been identified in SINEC NMS (All versions < V2.0 SP1). The affected application is vulnerable to SQL injection. This could allow an unauth… |
CVE-2024-23804 | High | 7.8 | 2024-02-13 | A vulnerability has been identified in Tecnomatix Plant Simulation V2201 (All versions < V2201.0012), Tecnomatix Plant Simulation V2302 (All versions < V2302.0… |
CVE-2024-23803 | High | 7.8 | 2024-02-13 | A vulnerability has been identified in Tecnomatix Plant Simulation V2201 (All versions), Tecnomatix Plant Simulation V2302 (All versions < V2302.0007). The aff… |
CVE-2024-23802 | High | 7.8 | 2024-02-13 | A vulnerability has been identified in Tecnomatix Plant Simulation V2201 (All versions < V2201.0012), Tecnomatix Plant Simulation V2302 (All versions < V2302.0… |
CVE-2024-23801 | Low | 3.3 | 2024-02-13 | A vulnerability has been identified in Tecnomatix Plant Simulation V2201 (All versions), Tecnomatix Plant Simulation V2302 (All versions < V2302.0007). The aff… |
CVE-2024-23800 | Low | 3.3 | 2024-02-13 | A vulnerability has been identified in Tecnomatix Plant Simulation V2201 (All versions), Tecnomatix Plant Simulation V2302 (All versions < V2302.0007). The aff… |
CVE-2024-23799 | Low | 3.3 | 2024-02-13 | A vulnerability has been identified in Tecnomatix Plant Simulation V2201 (All versions), Tecnomatix Plant Simulation V2302 (All versions < V2302.0007). The aff… |
CVE-2024-23798 | High | 7.8 | 2024-02-13 | A vulnerability has been identified in Tecnomatix Plant Simulation V2201 (All versions < V2201.0012), Tecnomatix Plant Simulation V2302 (All versions < V2302.0… |
CVE-2024-23797 | High | 7.8 | 2024-02-13 | A vulnerability has been identified in Tecnomatix Plant Simulation V2201 (All versions < V2201.0012), Tecnomatix Plant Simulation V2302 (All versions < V2302.0… |
CVE-2024-23796 | High | 7.8 | 2024-02-13 | A vulnerability has been identified in Tecnomatix Plant Simulation V2201 (All versions < V2201.0012), Tecnomatix Plant Simulation V2302 (All versions < V2302.0… |
CVE-2024-23795 | High | 7.8 | 2024-02-13 | A vulnerability has been identified in Tecnomatix Plant Simulation V2201 (All versions < V2201.0012), Tecnomatix Plant Simulation V2302 (All versions < V2302.0… |
CVE-2024-22043 | Low | 3.3 | 2024-02-13 | A vulnerability has been identified in Parasolid V35.0 (All versions < V35.0.251), Parasolid V35.1 (All versions < V35.1.170). The affected applications contai… |
CVE-2024-22042 | High | 7.8 | 2024-02-13 | A vulnerability has been identified in Unicam FX (All versions). The windows installer agent used in affected product contains incorrect use of privileged APIs… |
CVE-2024-22454 | High | 8.8 | 2024-02-13 | Dell PowerProtect Data Manager, version 19.15 and prior versions, contain a weak password recovery mechanism for forgotten passwords. A remote unauthenticated… |
CVE-2024-22445 | High | 7.2 | 2024-02-13 | Dell PowerProtect Data Manager, version 19.15 and prior versions, contain an OS command injection vulnerability. A remote high privileged attacker could poten… |
CVE-2024-25914 | Medium | 4.3 | 2024-02-13 | Cross-Site Request Forgery (CSRF) vulnerability in Photoboxone SMTP Mail.This issue affects SMTP Mail: from n/a through 1.3.20. |
CVE-2024-21491 | Medium | 5.9 | 2024-02-13 | Versions of the package svix before 1.17.0 are vulnerable to Authentication Bypass due to an issue in the verify function where signatures of different lengths… |
CVE-2024-25643 | Medium | 4.3 | 2024-02-13 | The SAP Fiori app (My Overtime Request) - version 605, does not perform the necessary authorization checks for an authenticated user which may result in an esc… |
CVE-2024-24741 | Medium | 4.3 | 2024-02-13 | SAP Master Data Governance for Material Data - versions 618, 619, 620, 621, 622, 800, 801, 802, 803, 804, does not perform necessary authorization check for an… |
CVE-2024-22129 | Medium | 5.4 | 2024-02-13 | SAP Companion - version <3.1.38, has a URL with parameter that could be vulnerable to XSS attack. The attacker could send a malicious link to a user that would… |