2024 CVEs (page 383)
Page 383 of 385 — CVEs published in 2024, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-21669 | Critical | 9.9 | 2024-01-11 | Hyperledger Aries Cloud Agent Python (ACA-Py) is a foundation for building decentralized identity applications and services running in non-mobile environments… |
CVE-2024-21637 | High | 7.6 | 2024-01-11 | Authentik is an open-source Identity Provider. Authentik is a vulnerable to a reflected Cross-Site Scripting vulnerability via JavaScript-URIs in OpenID Connec… |
CVE-2024-22195 | Medium | 5.4 | 2024-01-11 | Jinja is an extensible templating engine. Special placeholders in the template allow writing code similar to Python syntax. It is possible to inject arbitrary… |
CVE-2024-22194 | Low | 2.2 | 2024-01-11 | cdo-local-uuid project provides a specialized UUID-generating function that can, on user request, cause a program to generate deterministic UUIDs. An informati… |
CVE-2024-22190 | High | 7.8 | 2024-01-11 | GitPython is a python library used to interact with Git repositories. There is an incomplete fix for CVE-2023-40590. On Windows, GitPython uses an untrusted se… |
CVE-2024-21667 | Medium | 6.5 | 2024-01-11 | pimcore/customer-data-framework is the Customer Management Framework for management of customer data within Pimcore. An authenticated and unauthorized user can… |
CVE-2024-21666 | Medium | 6.5 | 2024-01-11 | The Customer Management Framework (CMF) for Pimcore adds functionality for customer data management, segmentation, personalization and marketing automation. An… |
CVE-2024-21665 | Medium | 4.3 | 2024-01-11 | ecommerce-framework-bundle is the Pimcore Ecommerce Framework Bundle. An authenticated and unauthorized user can access the back-office orders list and be able… |
CVE-2024-21833 | High | 8.8 | 2024-01-11 | Multiple TP-LINK products allow a network-adjacent unauthenticated attacker with access to the product to execute arbitrary OS commands. The affected device, w… |
CVE-2024-21821 | High | 8.0 | 2024-01-11 | Multiple TP-LINK products allow a network-adjacent authenticated attacker with access to the product from the LAN port or Wi-Fi to execute arbitrary OS command… |
CVE-2024-21773 | High | 8.8 | 2024-01-11 | Multiple TP-LINK products allow a network-adjacent unauthenticated attacker with access to the product from the LAN port or Wi-Fi to execute arbitrary OS comma… |
CVE-2024-21638 | Critical | 9.1 | 2024-01-10 | Azure IPAM (IP Address Management) is a lightweight solution developed on top of the Azure platform designed to help Azure customers manage their IP Address sp… |
CVE-2024-0333 | Medium | 5.3 | 2024-01-10 | Insufficient data validation in Extensions in Google Chrome prior to 120.0.6099.216 allowed an attacker in a privileged network position to install a malicious… |
CVE-2024-0389 | Medium | 6.3 | 2024-01-10 | A vulnerability, which was classified as critical, was found in SourceCodester Student Attendance System 1.0. Affected is an unknown function of the file atten… |
CVE-2024-20715 | Medium | 5.5 | 2024-01-10 | Adobe Substance 3D Stager versions 2.1.3 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An… |
CVE-2024-20714 | Medium | 5.5 | 2024-01-10 | Adobe Substance 3D Stager versions 2.1.3 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An… |
CVE-2024-20713 | Medium | 5.5 | 2024-01-10 | Adobe Substance 3D Stager versions 2.1.3 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An… |
CVE-2024-20712 | Medium | 5.5 | 2024-01-10 | Adobe Substance 3D Stager versions 2.1.3 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An… |
CVE-2024-20711 | Medium | 5.5 | 2024-01-10 | Adobe Substance 3D Stager versions 2.1.3 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An… |
CVE-2024-20710 | Medium | 5.5 | 2024-01-10 | Adobe Substance 3D Stager versions 2.1.3 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An… |
CVE-2024-0310 | Medium | 6.1 | 2024-01-10 | A content-security-policy vulnerability in ENS Control browser extension prior to 10.7.0 Update 15 allows a remote attacker to alter the response header param… |
CVE-2024-21643 | High | 7.1 | 2024-01-10 | IdentityModel Extensions for .NET provide assemblies for web developers that wish to use federated identity providers for establishing the caller's identity. A… |
CVE-2024-0364 | Medium | 5.5 | 2024-01-10 | A vulnerability, which was classified as critical, was found in PHPGurukul Hospital Management System 1.0. This affects an unknown part of the file admin/query… |
CVE-2024-0363 | Medium | 5.5 | 2024-01-10 | A vulnerability, which was classified as critical, has been found in PHPGurukul Hospital Management System 1.0. Affected by this issue is some unknown function… |
CVE-2024-0362 | Medium | 5.5 | 2024-01-10 | A vulnerability classified as critical was found in PHPGurukul Hospital Management System 1.0. Affected by this vulnerability is an unknown functionality of th… |
CVE-2024-0361 | Medium | 5.5 | 2024-01-10 | A vulnerability classified as critical has been found in PHPGurukul Hospital Management System 1.0. Affected is an unknown function of the file admin/contact.p… |
CVE-2024-0360 | Medium | 5.5 | 2024-01-10 | A vulnerability was found in PHPGurukul Hospital Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file a… |
CVE-2024-0359 | High | 7.3 | 2024-01-10 | A vulnerability was found in code-projects Simple Online Hotel Reservation System 1.0. It has been declared as critical. This vulnerability affects unknown cod… |
CVE-2024-0358 | Medium | 5.3 | 2024-01-10 | A vulnerability was found in DeShang DSO2O up to 4.1.0. It has been classified as critical. This affects an unknown part of the file /install/install.php. The… |
CVE-2024-0357 | Medium | 5.5 | 2024-01-10 | A vulnerability was found in coderd-repos Eva 1.0.0 and classified as critical. Affected by this issue is some unknown functionality of the file /system/traceL… |
CVE-2024-0356 | Medium | 4.3 | 2024-01-10 | A vulnerability has been found in Mandelo ssm_shiro_blog 1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the f… |
CVE-2024-0355 | Medium | 5.5 | 2024-01-10 | A vulnerability, which was classified as critical, was found in PHPGurukul Dairy Farm Shop Management System up to 1.1. Affected is an unknown function of the… |
CVE-2024-0354 | Medium | 5.3 | 2024-01-10 | A vulnerability, which was classified as critical, has been found in unknown-o download-station up to 1.1.8. This issue affects some unknown processing of the… |
CVE-2024-0352 | High | 7.3 | 2024-01-09 | A vulnerability classified as critical was found in Likeshop up to 2.5.7.20210311. This vulnerability affects the function FileServer::userFormImage of the fil… |
CVE-2024-0351 | Low | 3.1 | 2024-01-09 | A vulnerability classified as problematic has been found in SourceCodester Engineers Online Portal 1.0. This affects an unknown part. The manipulation leads to… |
CVE-2024-0350 | Low | 3.1 | 2024-01-09 | A vulnerability was found in SourceCodester Engineers Online Portal 1.0. It has been rated as problematic. Affected by this issue is some unknown functionality… |
CVE-2024-0349 | Low | 3.7 | 2024-01-09 | A vulnerability was found in SourceCodester Engineers Online Portal 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown func… |
CVE-2024-0348 | Medium | 4.3 | 2024-01-09 | A vulnerability was found in SourceCodester Engineers Online Portal 1.0. It has been classified as problematic. Affected is an unknown function of the componen… |
CVE-2024-0347 | Low | 3.7 | 2024-01-09 | A vulnerability was found in SourceCodester Engineers Online Portal 1.0 and classified as problematic. This issue affects some unknown processing of the file s… |
CVE-2024-0346 | Low | 3.5 | 2024-01-09 | A vulnerability has been found in CodeAstro Vehicle Booking System 1.0 and classified as problematic. This vulnerability affects unknown code of the file usr/u… |
CVE-2024-0345 | Medium | 4.3 | 2024-01-09 | A vulnerability, which was classified as problematic, was found in CodeAstro Vehicle Booking System 1.0. This affects an unknown part of the file usr/usr-regis… |
CVE-2024-0344 | Medium | 5.5 | 2024-01-09 | A vulnerability, which was classified as critical, has been found in soxft TimeMail up to 1.1. Affected by this issue is some unknown functionality of the file… |
CVE-2024-21664 | Medium | 4.3 | 2024-01-09 | jwx is a Go module implementing various JWx (JWA/JWE/JWK/JWS/JWT, otherwise known as JOSE) technologies. Calling `jws.Parse` with a JSON serialized payload whe… |
CVE-2024-0343 | Medium | 4.3 | 2024-01-09 | A vulnerability classified as problematic was found in CodeAstro Simple House Rental System 5.6. Affected by this vulnerability is an unknown functionality of… |
CVE-2024-0342 | Medium | 6.3 | 2024-01-09 | A vulnerability classified as critical has been found in Inis up to 2.0.1. Affected is an unknown function of the file /app/api/controller/default/Sqlite.php… |
CVE-2024-21668 | Medium | 4.4 | 2024-01-09 | react-native-mmkv is a library that allows easy use of MMKV inside React Native applications. Before version 2.11.0, the react-native-mmkv logged the optional… |
CVE-2024-21319 | Medium | 6.8 | 2024-01-09 | Microsoft Identity Denial of service vulnerability |
CVE-2024-0341 | Low | 3.5 | 2024-01-09 | A vulnerability was found in Inis up to 2.0.1. It has been rated as problematic. This issue affects some unknown processing of the file /app/api/controller/def… |
CVE-2024-21325 | High | 7.8 | 2024-01-09 | Microsoft Printer Metadata Troubleshooter Tool Remote Code Execution Vulnerability |
CVE-2024-21320 | Medium | 6.5 | 2024-01-09 | Windows Themes Spoofing Vulnerability |
CVE-2024-21318 | High | 8.8 | 2024-01-09 | Microsoft SharePoint Server Remote Code Execution Vulnerability |
CVE-2024-21316 | Medium | 6.1 | 2024-01-09 | Windows Server Key Distribution Service Security Feature Bypass |
CVE-2024-21314 | Medium | 6.5 | 2024-01-09 | Microsoft Message Queuing Information Disclosure Vulnerability |
CVE-2024-21313 | Medium | 5.3 | 2024-01-09 | Windows TCP/IP Information Disclosure Vulnerability |
CVE-2024-21312 | High | 7.5 | 2024-01-09 | .NET Framework Denial of Service Vulnerability |
CVE-2024-21311 | Medium | 5.5 | 2024-01-09 | Windows Cryptographic Services Information Disclosure Vulnerability |
CVE-2024-21310 | High | 7.8 | 2024-01-09 | Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability |
CVE-2024-21309 | High | 7.8 | 2024-01-09 | Windows Kernel-Mode Driver Elevation of Privilege Vulnerability |
CVE-2024-21307 | High | 7.5 | 2024-01-09 | Remote Desktop Client Remote Code Execution Vulnerability |
CVE-2024-21306 | Medium | 5.7 | 2024-01-09 | Microsoft Bluetooth Driver Spoofing Vulnerability |
CVE-2024-21305 | Medium | 4.4 | 2024-01-09 | Hypervisor-Protected Code Integrity (HVCI) Security Feature Bypass Vulnerability |
CVE-2024-20700 | High | 7.5 | 2024-01-09 | Windows Hyper-V Remote Code Execution Vulnerability |
CVE-2024-20699 | Medium | 5.5 | 2024-01-09 | Windows Hyper-V Denial of Service Vulnerability |
CVE-2024-20698 | High | 7.8 | 2024-01-09 | Windows Kernel Elevation of Privilege Vulnerability |
CVE-2024-20697 | High | 7.3 | 2024-01-09 | Windows libarchive Remote Code Execution Vulnerability |
CVE-2024-20696 | High | 7.3 | 2024-01-09 | Windows libarchive Remote Code Execution Vulnerability |
CVE-2024-20694 | Medium | 5.5 | 2024-01-09 | Windows CoreMessaging Information Disclosure Vulnerability |
CVE-2024-20692 | Medium | 5.7 | 2024-01-09 | Microsoft Local Security Authority Subsystem Service Information Disclosure Vulnerability |
CVE-2024-20691 | Medium | 4.7 | 2024-01-09 | Windows Themes Information Disclosure Vulnerability |
CVE-2024-20690 | Medium | 6.5 | 2024-01-09 | Windows Nearby Sharing Spoofing Vulnerability |
CVE-2024-20687 | High | 7.5 | 2024-01-09 | Microsoft AllJoyn API Denial of Service Vulnerability |
CVE-2024-20686 | High | 7.8 | 2024-01-09 | Win32k Elevation of Privilege Vulnerability |
CVE-2024-20683 | High | 7.8 | 2024-01-09 | Win32k Elevation of Privilege Vulnerability |
CVE-2024-20682 | High | 7.8 | 2024-01-09 | Windows Cryptographic Services Remote Code Execution Vulnerability |
CVE-2024-20681 | High | 7.8 | 2024-01-09 | Windows Subsystem for Linux Elevation of Privilege Vulnerability |
CVE-2024-20680 | Medium | 6.5 | 2024-01-09 | Windows Message Queuing Client (MSMQC) Information Disclosure |
CVE-2024-20677 | High | 7.8 | 2024-01-09 | A security vulnerability exists in FBX that could lead to remote code execution. To mitigate this vulnerability, the ability to insert FBX files has been disab… |
CVE-2024-20676 | High | 8.0 | 2024-01-09 | Azure Storage Mover Remote Code Execution Vulnerability |
CVE-2024-20674 | High | 8.8 | 2024-01-09 | Windows Kerberos Security Feature Bypass Vulnerability |
CVE-2024-20672 | High | 7.5 | 2024-01-09 | .NET Denial of Service Vulnerability |
CVE-2024-20666 | Medium | 6.6 | 2024-01-09 | BitLocker Security Feature Bypass Vulnerability |
CVE-2024-20664 | Medium | 6.5 | 2024-01-09 | Microsoft Message Queuing Information Disclosure Vulnerability |
CVE-2024-20663 | Medium | 6.5 | 2024-01-09 | Windows Message Queuing Client (MSMQC) Information Disclosure |
CVE-2024-20662 | Medium | 4.9 | 2024-01-09 | Windows Online Certificate Status Protocol (OCSP) Information Disclosure Vulnerability |
CVE-2024-20661 | High | 7.5 | 2024-01-09 | Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability |
CVE-2024-20660 | Medium | 6.5 | 2024-01-09 | Microsoft Message Queuing Information Disclosure Vulnerability |
CVE-2024-20658 | High | 7.8 | 2024-01-09 | Microsoft Virtual Hard Disk Elevation of Privilege Vulnerability |
CVE-2024-20657 | High | 7.0 | 2024-01-09 | Windows Group Policy Elevation of Privilege Vulnerability |
CVE-2024-20656 | High | 7.8 | 2024-01-09 | Visual Studio Elevation of Privilege Vulnerability |
CVE-2024-20655 | Medium | 6.6 | 2024-01-09 | Microsoft Online Certificate Status Protocol (OCSP) Remote Code Execution Vulnerability |
CVE-2024-20654 | High | 8.0 | 2024-01-09 | Microsoft ODBC Driver Remote Code Execution Vulnerability |
CVE-2024-20653 | High | 7.8 | 2024-01-09 | Microsoft Common Log File System Elevation of Privilege Vulnerability |
CVE-2024-20652 | High | 8.1 | 2024-01-09 | Windows HTML Platforms Security Feature Bypass Vulnerability |
CVE-2024-0340 | Medium | 4.4 | 2024-01-09 | A vulnerability was found in vhost_new_msg in drivers/vhost/vhost.c in the Linux kernel, which does not properly initialize memory in messages passed between v… |
CVE-2024-0226 | Medium | 4.8 | 2024-01-09 | Synopsys Seeker versions prior to 2023.12.0 are vulnerable to a stored cross-site scripting vulnerability through a specially crafted payload. |
CVE-2024-0057 | Critical | 9.1 | 2024-01-09 | NET, .NET Framework, and Visual Studio Security Feature Bypass Vulnerability |
CVE-2024-0056 | High | 8.7 | 2024-01-09 | Microsoft.Data.SqlClient and System.Data.SqlClient SQL Data Provider Security Feature Bypass Vulnerability |
CVE-2024-22165 | Medium | 6.5 | 2024-01-09 | In Splunk Enterprise Security (ES) versions lower than 7.1.2, an attacker can create a malformed Investigation to perform a denial of service (DoS). The malfor… |
CVE-2024-22164 | Medium | 4.3 | 2024-01-09 | In Splunk Enterprise Security (ES) versions below 7.1.2, an attacker can use investigation attachments to perform a denial of service (DoS) to the Investigatio… |
CVE-2024-0213 | High | 8.2 | 2024-01-09 | A buffer overflow vulnerability in TA for Linux and TA for MacOS prior to 5.8.1 allows a local user to gain elevated permissions, or cause a Denial of Service… |