2024 CVEs (page 367)
Page 367 of 385 — CVEs published in 2024, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-25121 | High | 7.1 | 2024-02-13 | TYPO3 is an open source PHP based web content management system released under the GNU GPL. In affected versions of TYPO3 entities of the File Abstraction Laye… |
CVE-2024-25120 | Medium | 4.3 | 2024-02-13 | TYPO3 is an open source PHP based web content management system released under the GNU GPL. The TYPO3-specific `t3://` URI scheme could be used to access resou… |
CVE-2024-25119 | Medium | 4.9 | 2024-02-13 | TYPO3 is an open source PHP based web content management system released under the GNU GPL. The plaintext value of `$GLOBALS['SYS']['encryptionKey']` was displ… |
CVE-2024-25118 | Medium | 4.3 | 2024-02-13 | TYPO3 is an open source PHP based web content management system released under the GNU GPL. Password hashes were being reflected in the editing forms of the TY… |
CVE-2024-24142 | Critical | 9.8 | 2024-02-13 | Sourcecodester School Task Manager 1.0 allows SQL Injection via the 'subject' parameter. |
CVE-2024-25122 | High | 7.1 | 2024-02-13 | sidekiq-unique-jobs is an open source project which prevents simultaneous Sidekiq jobs with the same unique arguments to run. Specially crafted GET request par… |
CVE-2024-24814 | High | 7.5 | 2024-02-13 | mod_auth_openidc is an OpenID Certified™ authentication and authorization module for the Apache 2.x HTTP server that implements the OpenID Connect Relying Part… |
CVE-2024-24751 | Medium | 4.3 | 2024-02-13 | sf_event_mgt is an event management and registration extension for the TYPO3 CMS based on ExtBase and Fluid. In affected versions the existing access control c… |
CVE-2024-1378 | Critical | 9.1 | 2024-02-13 | A command injection vulnerability was identified in GitHub Enterprise Server that allowed an attacker with an editor role in the Management Console to gain adm… |
CVE-2024-1374 | Critical | 9.1 | 2024-02-13 | A command injection vulnerability was identified in GitHub Enterprise Server that allowed an attacker with an editor role in the Management Console to gain adm… |
CVE-2024-1372 | Critical | 9.1 | 2024-02-13 | A command injection vulnerability was identified in GitHub Enterprise Server that allowed an attacker with an editor role in the Management Console to gain adm… |
CVE-2024-1369 | Critical | 9.1 | 2024-02-13 | A command injection vulnerability was identified in GitHub Enterprise Server that allowed an attacker with an editor role in the Management Console to gain adm… |
CVE-2024-1359 | Critical | 9.1 | 2024-02-13 | A command injection vulnerability was identified in GitHub Enterprise Server that allowed an attacker with an editor role in the Management Console to gain adm… |
CVE-2024-1355 | Critical | 9.1 | 2024-02-13 | A command injection vulnerability was identified in GitHub Enterprise Server that allowed an attacker with an editor role in the Management Console to gain adm… |
CVE-2024-1354 | High | 8.0 | 2024-02-13 | A command injection vulnerability was identified in GitHub Enterprise Server that allowed an attacker with an editor role in the Management Console to gain adm… |
CVE-2024-1084 | Medium | 6.5 | 2024-02-13 | Cross-site Scripting in the tag name pattern field in the tag protections UI in GitHub Enterprise Server allows a malicious website that requires user interact… |
CVE-2024-1082 | Medium | 6.3 | 2024-02-13 | A path traversal vulnerability was identified in GitHub Enterprise Server that allowed an attacker to gain unauthorized read permission to files by deploying a… |
CVE-2024-21420 | High | 8.8 | 2024-02-13 | Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability |
CVE-2024-21413 | Critical | 9.8 | 2024-02-13 | Microsoft Outlook Remote Code Execution Vulnerability |
CVE-2024-21412 | High | 8.1 | 2024-02-13 | Internet Shortcut Files Security Feature Bypass Vulnerability |
CVE-2024-21410 | Critical | 9.8 | 2024-02-13 | Microsoft Exchange Server Elevation of Privilege Vulnerability |
CVE-2024-21406 | High | 7.5 | 2024-02-13 | Windows Printing Service Spoofing Vulnerability |
CVE-2024-21405 | High | 7.0 | 2024-02-13 | Microsoft Message Queuing (MSMQ) Elevation of Privilege Vulnerability |
CVE-2024-21404 | High | 7.5 | 2024-02-13 | .NET Denial of Service Vulnerability |
CVE-2024-21403 | Critical | 9.0 | 2024-02-13 | Microsoft Azure Kubernetes Service Confidential Container Elevation of Privilege Vulnerability |
CVE-2024-21402 | High | 7.1 | 2024-02-13 | Microsoft Outlook Elevation of Privilege Vulnerability |
CVE-2024-21401 | Critical | 9.8 | 2024-02-13 | Microsoft Entra Jira Single-Sign-On Plugin Elevation of Privilege Vulnerability |
CVE-2024-21397 | Medium | 5.3 | 2024-02-13 | Microsoft Azure File Sync Elevation of Privilege Vulnerability |
CVE-2024-21396 | High | 7.6 | 2024-02-13 | Dynamics 365 Sales Spoofing Vulnerability |
CVE-2024-21395 | High | 8.2 | 2024-02-13 | Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability |
CVE-2024-21394 | High | 7.6 | 2024-02-13 | Dynamics 365 Field Service Spoofing Vulnerability |
CVE-2024-21393 | High | 7.6 | 2024-02-13 | Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability |
CVE-2024-21391 | High | 8.8 | 2024-02-13 | Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability |
CVE-2024-21389 | High | 7.6 | 2024-02-13 | Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability |
CVE-2024-21386 | High | 7.5 | 2024-02-13 | .NET Denial of Service Vulnerability |
CVE-2024-21384 | High | 7.8 | 2024-02-13 | Microsoft Office OneNote Remote Code Execution Vulnerability |
CVE-2024-21381 | Medium | 6.8 | 2024-02-13 | Microsoft Azure Active Directory B2C Spoofing Vulnerability |
CVE-2024-21380 | High | 8.0 | 2024-02-13 | Microsoft Dynamics Business Central/NAV Information Disclosure Vulnerability |
CVE-2024-21379 | High | 7.8 | 2024-02-13 | Microsoft Word Remote Code Execution Vulnerability |
CVE-2024-21378 | High | 8.8 | 2024-02-13 | Microsoft Outlook Remote Code Execution Vulnerability |
CVE-2024-21377 | Medium | 5.5 | 2024-02-13 | Windows DNS Information Disclosure Vulnerability |
CVE-2024-21376 | Critical | 9.0 | 2024-02-13 | Microsoft Azure Kubernetes Service Confidential Container Remote Code Execution Vulnerability |
CVE-2024-21375 | High | 8.8 | 2024-02-13 | Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability |
CVE-2024-21374 | Medium | 5.0 | 2024-02-13 | Microsoft Teams for Android Information Disclosure Vulnerability |
CVE-2024-21372 | High | 8.8 | 2024-02-13 | Windows OLE Remote Code Execution Vulnerability |
CVE-2024-21371 | High | 7.0 | 2024-02-13 | Windows Kernel Elevation of Privilege Vulnerability |
CVE-2024-21370 | High | 8.8 | 2024-02-13 | Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability |
CVE-2024-21369 | High | 8.8 | 2024-02-13 | Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability |
CVE-2024-21368 | High | 8.8 | 2024-02-13 | Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability |
CVE-2024-21367 | High | 8.8 | 2024-02-13 | Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability |
CVE-2024-21366 | High | 8.8 | 2024-02-13 | Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability |
CVE-2024-21365 | High | 8.8 | 2024-02-13 | Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability |
CVE-2024-21364 | Critical | 9.3 | 2024-02-13 | Microsoft Azure Site Recovery Elevation of Privilege Vulnerability |
CVE-2024-21363 | High | 7.8 | 2024-02-13 | Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability |
CVE-2024-21362 | Medium | 5.5 | 2024-02-13 | Windows Kernel Security Feature Bypass Vulnerability |
CVE-2024-21361 | High | 8.8 | 2024-02-13 | Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability |
CVE-2024-21360 | High | 8.8 | 2024-02-13 | Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability |
CVE-2024-21359 | High | 8.8 | 2024-02-13 | Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability |
CVE-2024-21358 | High | 8.8 | 2024-02-13 | Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability |
CVE-2024-21357 | High | 8.1 | 2024-02-13 | Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability |
CVE-2024-21356 | Medium | 6.5 | 2024-02-13 | Windows Lightweight Directory Access Protocol (LDAP) Denial of Service Vulnerability |
CVE-2024-21355 | High | 7.0 | 2024-02-13 | Microsoft Message Queuing (MSMQ) Elevation of Privilege Vulnerability |
CVE-2024-21354 | High | 7.8 | 2024-02-13 | Microsoft Message Queuing (MSMQ) Elevation of Privilege Vulnerability |
CVE-2024-21353 | High | 8.8 | 2024-02-13 | Microsoft WDAC ODBC Driver Remote Code Execution Vulnerability |
CVE-2024-21352 | High | 8.8 | 2024-02-13 | Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability |
CVE-2024-21351 | High | 7.6 | 2024-02-13 | Windows SmartScreen Security Feature Bypass Vulnerability |
CVE-2024-21350 | High | 8.8 | 2024-02-13 | Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability |
CVE-2024-21349 | High | 8.8 | 2024-02-13 | Microsoft ActiveX Data Objects Remote Code Execution Vulnerability |
CVE-2024-21348 | High | 7.5 | 2024-02-13 | Internet Connection Sharing (ICS) Denial of Service Vulnerability |
CVE-2024-21347 | High | 7.5 | 2024-02-13 | Microsoft ODBC Driver Remote Code Execution Vulnerability |
CVE-2024-21346 | High | 7.8 | 2024-02-13 | Win32k Elevation of Privilege Vulnerability |
CVE-2024-21345 | High | 8.8 | 2024-02-13 | Windows Kernel Elevation of Privilege Vulnerability |
CVE-2024-21344 | Medium | 5.9 | 2024-02-13 | Windows Network Address Translation (NAT) Denial of Service Vulnerability |
CVE-2024-21343 | Medium | 5.9 | 2024-02-13 | Windows Network Address Translation (NAT) Denial of Service Vulnerability |
CVE-2024-21342 | High | 7.5 | 2024-02-13 | Windows DNS Client Denial of Service Vulnerability |
CVE-2024-21341 | Medium | 6.8 | 2024-02-13 | Windows Kernel Remote Code Execution Vulnerability |
CVE-2024-21340 | Medium | 4.6 | 2024-02-13 | Windows Kernel Information Disclosure Vulnerability |
CVE-2024-21339 | Medium | 6.4 | 2024-02-13 | Windows USB Generic Parent Driver Remote Code Execution Vulnerability |
CVE-2024-21338 | High | 7.8 | 2024-02-13 | Windows Kernel Elevation of Privilege Vulnerability |
CVE-2024-21329 | High | 7.3 | 2024-02-13 | Azure Connected Machine Agent Elevation of Privilege Vulnerability |
CVE-2024-21328 | High | 7.6 | 2024-02-13 | Dynamics 365 Sales Spoofing Vulnerability |
CVE-2024-21327 | High | 7.6 | 2024-02-13 | Microsoft Dynamics 365 Customer Engagement Cross-Site Scripting Vulnerability |
CVE-2024-21315 | High | 7.8 | 2024-02-13 | Microsoft Defender for Endpoint Protection Elevation of Privilege Vulnerability |
CVE-2024-21304 | Medium | 4.1 | 2024-02-13 | Trusted Compute Base Elevation of Privilege Vulnerability |
CVE-2024-20695 | Medium | 5.7 | 2024-02-13 | Skype for Business Information Disclosure Vulnerability |
CVE-2024-20684 | Medium | 6.5 | 2024-02-13 | Windows Hyper-V Denial of Service Vulnerability |
CVE-2024-20679 | Medium | 6.5 | 2024-02-13 | Azure Stack Hub Spoofing Vulnerability |
CVE-2024-20673 | High | 7.8 | 2024-02-13 | Microsoft Office Remote Code Execution Vulnerability |
CVE-2024-20667 | High | 7.5 | 2024-02-13 | Azure DevOps Server Remote Code Execution Vulnerability |
CVE-2024-22923 | Critical | 9.8 | 2024-02-13 | SQL injection vulnerability in adv radius v.2.2.5 allows a local attacker to execute arbitrary code via a crafted script. |
CVE-2024-23440 | High | 7.1 | 2024-02-13 | Vba32 Antivirus v3.36.0 is vulnerable to an Arbitrary Memory Read vulnerability. The 0x22200B IOCTL code of the Vba32m64.sys driver allows to read up to 0x802… |
CVE-2024-23439 | High | 7.1 | 2024-02-13 | Vba32 Antivirus v3.36.0 is vulnerable to an Arbitrary Memory Read vulnerability by triggering the 0x22201B, 0x22201F, 0x222023, 0x222027 ,0x22202B, 0x22202F, 0… |
CVE-2024-1163 | High | 7.1 | 2024-02-13 | The attacker may exploit a path traversal vulnerability leading to information disclosure. |
CVE-2024-1140 | Medium | 6.1 | 2024-02-13 | Twister Antivirus v8.17 is vulnerable to an Out-of-bounds Read vulnerability by triggering the 0x801120B8 IOCTL code of the filmfd.sys driver. |
CVE-2024-1096 | Medium | 5.5 | 2024-02-13 | Twister Antivirus v8.17 is vulnerable to a Denial of Service vulnerability by triggering the 0x80112067, 0x801120CB 0x801120CC 0x80112044, 0x8011204B, 0x801120… |
CVE-2024-24782 | Medium | 4.3 | 2024-02-13 | An unauthenticated attacker can send a ping request from one network to another through an error in the origin verification even though the ports are separated… |
CVE-2024-24781 | High | 7.5 | 2024-02-13 | An unauthenticated remote attacker can use an uncontrolled resource consumption vulnerability to DoS the affected devices through excessive traffic on a single… |
CVE-2024-1309 | Medium | 6.5 | 2024-02-13 | Uncontrolled Resource Consumption vulnerability in Honeywell Niagara Framework on Windows, Linux, QNX allows Content Spoofing.This issue affects Niagara Framew… |
CVE-2024-1160 | Medium | 5.4 | 2024-02-13 | The Bold Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Icon Link in all versions up to, and including, 4.8.0… |
CVE-2024-1159 | Medium | 6.4 | 2024-02-13 | The Bold Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's shortcode(s) in all versions up to, and including, 4.8… |