2024 CVEs (page 384)
Page 384 of 385 — CVEs published in 2024, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-20690 | Medium | 6.5 | 2024-01-09 | Windows Nearby Sharing Spoofing Vulnerability |
CVE-2024-20687 | High | 7.5 | 2024-01-09 | Microsoft AllJoyn API Denial of Service Vulnerability |
CVE-2024-20686 | High | 7.8 | 2024-01-09 | Win32k Elevation of Privilege Vulnerability |
CVE-2024-20683 | High | 7.8 | 2024-01-09 | Win32k Elevation of Privilege Vulnerability |
CVE-2024-20682 | High | 7.8 | 2024-01-09 | Windows Cryptographic Services Remote Code Execution Vulnerability |
CVE-2024-20681 | High | 7.8 | 2024-01-09 | Windows Subsystem for Linux Elevation of Privilege Vulnerability |
CVE-2024-20680 | Medium | 6.5 | 2024-01-09 | Windows Message Queuing Client (MSMQC) Information Disclosure |
CVE-2024-20677 | High | 7.8 | 2024-01-09 | A security vulnerability exists in FBX that could lead to remote code execution. To mitigate this vulnerability, the ability to insert FBX files has been disab… |
CVE-2024-20676 | High | 8.0 | 2024-01-09 | Azure Storage Mover Remote Code Execution Vulnerability |
CVE-2024-20674 | High | 8.8 | 2024-01-09 | Windows Kerberos Security Feature Bypass Vulnerability |
CVE-2024-20672 | High | 7.5 | 2024-01-09 | .NET Denial of Service Vulnerability |
CVE-2024-20666 | Medium | 6.6 | 2024-01-09 | BitLocker Security Feature Bypass Vulnerability |
CVE-2024-20664 | Medium | 6.5 | 2024-01-09 | Microsoft Message Queuing Information Disclosure Vulnerability |
CVE-2024-20663 | Medium | 6.5 | 2024-01-09 | Windows Message Queuing Client (MSMQC) Information Disclosure |
CVE-2024-20662 | Medium | 4.9 | 2024-01-09 | Windows Online Certificate Status Protocol (OCSP) Information Disclosure Vulnerability |
CVE-2024-20661 | High | 7.5 | 2024-01-09 | Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability |
CVE-2024-20660 | Medium | 6.5 | 2024-01-09 | Microsoft Message Queuing Information Disclosure Vulnerability |
CVE-2024-20658 | High | 7.8 | 2024-01-09 | Microsoft Virtual Hard Disk Elevation of Privilege Vulnerability |
CVE-2024-20657 | High | 7.0 | 2024-01-09 | Windows Group Policy Elevation of Privilege Vulnerability |
CVE-2024-20656 | High | 7.8 | 2024-01-09 | Visual Studio Elevation of Privilege Vulnerability |
CVE-2024-20655 | Medium | 6.6 | 2024-01-09 | Microsoft Online Certificate Status Protocol (OCSP) Remote Code Execution Vulnerability |
CVE-2024-20654 | High | 8.0 | 2024-01-09 | Microsoft ODBC Driver Remote Code Execution Vulnerability |
CVE-2024-20653 | High | 7.8 | 2024-01-09 | Microsoft Common Log File System Elevation of Privilege Vulnerability |
CVE-2024-20652 | High | 8.1 | 2024-01-09 | Windows HTML Platforms Security Feature Bypass Vulnerability |
CVE-2024-0340 | Medium | 4.4 | 2024-01-09 | A vulnerability was found in vhost_new_msg in drivers/vhost/vhost.c in the Linux kernel, which does not properly initialize memory in messages passed between v… |
CVE-2024-0226 | Medium | 4.8 | 2024-01-09 | Synopsys Seeker versions prior to 2023.12.0 are vulnerable to a stored cross-site scripting vulnerability through a specially crafted payload. |
CVE-2024-0057 | Critical | 9.1 | 2024-01-09 | NET, .NET Framework, and Visual Studio Security Feature Bypass Vulnerability |
CVE-2024-0056 | High | 8.7 | 2024-01-09 | Microsoft.Data.SqlClient and System.Data.SqlClient SQL Data Provider Security Feature Bypass Vulnerability |
CVE-2024-22165 | Medium | 6.5 | 2024-01-09 | In Splunk Enterprise Security (ES) versions lower than 7.1.2, an attacker can create a malformed Investigation to perform a denial of service (DoS). The malfor… |
CVE-2024-22164 | Medium | 4.3 | 2024-01-09 | In Splunk Enterprise Security (ES) versions below 7.1.2, an attacker can use investigation attachments to perform a denial of service (DoS) to the Investigatio… |
CVE-2024-0213 | High | 8.2 | 2024-01-09 | A buffer overflow vulnerability in TA for Linux and TA for MacOS prior to 5.8.1 allows a local user to gain elevated permissions, or cause a Denial of Service… |
CVE-2024-0206 | High | 7.1 | 2024-01-09 | A symbolic link manipulation vulnerability in Trellix Anti-Malware Engine prior to the January 2024 release allows an authenticated local user to potentially… |
CVE-2024-22370 | Medium | 4.6 | 2024-01-09 | In JetBrains YouTrack before 2023.3.22666 stored XSS via markdown was possible |
CVE-2024-22368 | Medium | 5.5 | 2024-01-09 | The Spreadsheet::ParseXLSX package before 0.28 for Perl can encounter an out-of-memory condition during parsing of a crafted XLSX document. This occurs because… |
CVE-2024-22125 | High | 7.4 | 2024-01-09 | Under certain conditions the Microsoft Edge browser extension (SAP GUI connector for Microsoft Edge) - version 1.0, allows an attacker to access highly sensiti… |
CVE-2024-22124 | Medium | 4.1 | 2024-01-09 | Under certain conditions, Internet Communication Manager (ICM) or SAP Web Dispatcher - versions KERNEL 7.22, KERNEL 7.53, KERNEL 7.54, KRNL64UC 7.22, KRNL64UC… |
CVE-2024-21738 | Medium | 4.1 | 2024-01-09 | SAP NetWeaver ABAP Application Server and ABAP Platform do not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting (XSS) vulnerabilit… |
CVE-2024-21737 | High | 8.4 | 2024-01-09 | In SAP Application Interface Framework File Adapter - version 702, a high privilege user can use a function module to traverse through various layers and execu… |
CVE-2024-21736 | Medium | 6.4 | 2024-01-09 | SAP S/4HANA Finance for (Advanced Payment Management) - versions SAPSCORE 128, S4CORE 107, does not perform necessary authorization checks. A function import c… |
CVE-2024-21735 | High | 7.3 | 2024-01-09 | SAP LT Replication Server - version S4CORE 103, S4CORE 104, S4CORE 105, S4CORE 106, S4CORE 107, S4CORE 108, does not perform necessary authorization checks. Th… |
CVE-2024-21734 | Low | 3.7 | 2024-01-09 | SAP Marketing (Contacts App) - version 160, allows an attacker with low privileges to trick a user to open malicious page which could lead to a very convincing… |
CVE-2024-21646 | Critical | 9.8 | 2024-01-09 | Azure uAMQP is a general purpose C library for AMQP 1.0. The UAMQP library is used by several clients to implement AMQP protocol communication. When clients u… |
CVE-2024-21663 | Critical | 9.9 | 2024-01-09 | Discord-Recon is a Discord bot created to automate bug bounty recon, automated scans and information gathering via a discord server. Discord-Recon is vulnerabl… |
CVE-2024-21651 | High | 7.5 | 2024-01-09 | XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. A user able to attach a file to a page can post a malf… |
CVE-2024-21648 | High | 8.0 | 2024-01-09 | XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. The rollback action is missing a right protection, a u… |
CVE-2024-21747 | High | 7.6 | 2024-01-08 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in weDevs WP ERP | Complete HR solution with recruitment & j… |
CVE-2024-21745 | Medium | 6.5 | 2024-01-08 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Laybuy Laybuy Payment Extension for WooCommerce allows St… |
CVE-2024-21744 | Medium | 6.5 | 2024-01-08 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Mapster Technology Inc. Mapster WP Maps allows Stored XSS… |
CVE-2024-21650 | Critical | 10.0 | 2024-01-08 | XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. XWiki is vulnerable to a remote code execution (RCE) a… |
CVE-2024-21647 | Medium | 5.9 | 2024-01-08 | Puma is a web server for Ruby/Rack applications built for parallelism. Prior to version 6.4.2, puma exhibited incorrect behavior when parsing chunked transfer… |
CVE-2024-21645 | Medium | 5.3 | 2024-01-08 | pyLoad is the free and open-source Download Manager written in pure Python. A log injection vulnerability was identified in `pyload` allowing any unauthenticat… |
CVE-2024-21644 | High | 7.5 | 2024-01-08 | pyLoad is the free and open-source Download Manager written in pure Python. Any unauthenticated user can browse to a specific URL to expose the Flask config, i… |
CVE-2024-0322 | Critical | 9.1 | 2024-01-08 | Out-of-bounds Read in GitHub repository gpac/gpac prior to 2.3-DEV. |
CVE-2024-0321 | Critical | 9.8 | 2024-01-08 | Stack-based Buffer Overflow in GitHub repository gpac/gpac prior to 2.3-DEV. |
CVE-2024-0308 | Medium | 6.3 | 2024-01-08 | A vulnerability was found in Inis up to 2.0.1. It has been rated as critical. This issue affects some unknown processing of the file app/api/controller/default… |
CVE-2024-0307 | High | 7.3 | 2024-01-08 | A vulnerability was found in Kashipara Dynamic Lab Management System up to 1.0. It has been declared as critical. This vulnerability affects unknown code of th… |
CVE-2024-0306 | High | 7.3 | 2024-01-08 | A vulnerability was found in Kashipara Dynamic Lab Management System up to 1.0. It has been classified as critical. This affects an unknown part of the file /a… |
CVE-2024-0305 | Medium | 5.3 | 2024-01-08 | A vulnerability was found in Guangzhou Yingke Electronic Technology Ncast up to 2017 and classified as problematic. Affected by this issue is some unknown func… |
CVE-2024-0304 | Medium | 6.3 | 2024-01-08 | A vulnerability has been found in Youke365 up to 1.5.3 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /app/… |
CVE-2024-0303 | Medium | 6.3 | 2024-01-08 | A vulnerability, which was classified as critical, was found in Youke365 up to 1.5.3. Affected is an unknown function of the file /app/api/controller/caiji.php… |
CVE-2024-22216 | Critical | 10.0 | 2024-01-08 | In default installations of Microchip maxView Storage Manager (for Adaptec Smart Storage Controllers) where Redfish server is configured for remote system mana… |
CVE-2024-0302 | Medium | 6.3 | 2024-01-08 | A vulnerability, which was classified as critical, has been found in fhs-opensource iparking 1.5.22.RELEASE. This issue affects some unknown processing of the… |
CVE-2024-0301 | Medium | 6.3 | 2024-01-08 | A vulnerability classified as critical was found in fhs-opensource iparking 1.5.22.RELEASE. This vulnerability affects the function getData of the file src/mai… |
CVE-2024-0300 | Medium | 6.3 | 2024-01-08 | A vulnerability was found in Byzoro Smart S150 Management Platform up to 20240101. It has been rated as critical. Affected by this issue is some unknown functi… |
CVE-2024-0299 | High | 7.3 | 2024-01-08 | A vulnerability was found in Totolink N200RE 9.3.5u.6139_B20201216. It has been declared as critical. Affected by this vulnerability is the function setTracero… |
CVE-2024-0298 | High | 7.3 | 2024-01-08 | A vulnerability was found in Totolink N200RE 9.3.5u.6139_B20201216. It has been classified as critical. Affected is the function setDiagnosisCfg of the file /c… |
CVE-2024-0297 | High | 7.3 | 2024-01-08 | A vulnerability was found in Totolink N200RE 9.3.5u.6139_B20201216 and classified as critical. This issue affects the function UploadFirmwareFile of the file /… |
CVE-2024-0296 | High | 7.3 | 2024-01-08 | A vulnerability has been found in Totolink N200RE 9.3.5u.6139_B20201216 and classified as critical. This vulnerability affects the function NTPSyncWithHost of… |
CVE-2024-0295 | High | 7.3 | 2024-01-08 | A vulnerability, which was classified as critical, was found in Totolink LR1200GB 9.1.0u.6619_B20230130. This affects the function setWanCfg of the file /cgi-b… |
CVE-2024-0294 | High | 7.3 | 2024-01-08 | A vulnerability, which was classified as critical, has been found in Totolink LR1200GB 9.1.0u.6619_B20230130. Affected by this issue is the function setUssd of… |
CVE-2024-0293 | Medium | 6.3 | 2024-01-08 | A vulnerability classified as critical was found in Totolink LR1200GB 9.1.0u.6619_B20230130. Affected by this vulnerability is the function setUploadSetting of… |
CVE-2024-0292 | Medium | 6.3 | 2024-01-08 | A vulnerability classified as critical has been found in Totolink LR1200GB 9.1.0u.6619_B20230130. Affected is the function setOpModeCfg of the file /cgi-bin/cs… |
CVE-2024-0291 | Medium | 6.3 | 2024-01-08 | A vulnerability was found in Totolink LR1200GB 9.1.0u.6619_B20230130. It has been rated as critical. This issue affects the function UploadFirmwareFile of the… |
CVE-2024-0290 | Medium | 6.3 | 2024-01-08 | A vulnerability, which was classified as critical, has been found in Kashipara Food Management System 1.0. This issue affects some unknown processing of the fi… |
CVE-2024-0289 | Medium | 6.3 | 2024-01-08 | A vulnerability classified as critical was found in Kashipara Food Management System 1.0. This vulnerability affects unknown code of the file stock_entry_submi… |
CVE-2024-0288 | Medium | 6.3 | 2024-01-08 | A vulnerability classified as critical has been found in Kashipara Food Management System 1.0. This affects an unknown part of the file rawstock_used_damaged_s… |
CVE-2024-0287 | Medium | 6.3 | 2024-01-07 | A vulnerability was found in Kashipara Food Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the f… |
CVE-2024-0286 | Medium | 4.3 | 2024-01-07 | A vulnerability, which was classified as problematic, was found in PHPGurukul Hospital Management System 1.0. This affects an unknown part of the file index.ph… |
CVE-2024-0284 | Low | 3.5 | 2024-01-07 | A vulnerability was found in Kashipara Food Management System up to 1.0. It has been rated as problematic. This issue affects some unknown processing of the fi… |
CVE-2024-0283 | Low | 3.5 | 2024-01-07 | A vulnerability was found in Kashipara Food Management System up to 1.0. It has been declared as problematic. This vulnerability affects unknown code of the fi… |
CVE-2024-0282 | Low | 3.5 | 2024-01-07 | A vulnerability was found in Kashipara Food Management System up to 1.0. It has been classified as problematic. This affects an unknown part of the file addmat… |
CVE-2024-0281 | Medium | 6.3 | 2024-01-07 | A vulnerability was found in Kashipara Food Management System up to 1.0 and classified as critical. Affected by this issue is some unknown functionality of the… |
CVE-2024-0280 | Medium | 6.3 | 2024-01-07 | A vulnerability has been found in Kashipara Food Management System up to 1.0 and classified as critical. Affected by this vulnerability is an unknown functiona… |
CVE-2024-0279 | Medium | 6.3 | 2024-01-07 | A vulnerability, which was classified as critical, was found in Kashipara Food Management System up to 1.0. Affected is an unknown function of the file item_li… |
CVE-2024-0278 | Medium | 6.3 | 2024-01-07 | A vulnerability, which was classified as critical, has been found in Kashipara Food Management System up to 1.0. This issue affects some unknown processing of… |
CVE-2024-0277 | Medium | 6.3 | 2024-01-07 | A vulnerability classified as critical was found in Kashipara Food Management System up to 1.0. This vulnerability affects unknown code of the file party_submi… |
CVE-2024-0276 | Medium | 6.3 | 2024-01-07 | A vulnerability classified as critical has been found in Kashipara Food Management System up to 1.0. This affects an unknown part of the file rawstock_used_dam… |
CVE-2024-0275 | Medium | 6.3 | 2024-01-07 | A vulnerability was found in Kashipara Food Management System up to 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of… |
CVE-2024-0274 | Medium | 6.3 | 2024-01-07 | A vulnerability was found in Kashipara Food Management System up to 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functio… |
CVE-2024-0273 | Medium | 6.3 | 2024-01-07 | A vulnerability was found in Kashipara Food Management System up to 1.0. It has been classified as critical. Affected is an unknown function of the file addwas… |
CVE-2024-0272 | Medium | 6.3 | 2024-01-07 | A vulnerability was found in Kashipara Food Management System up to 1.0 and classified as critical. This issue affects some unknown processing of the file addm… |
CVE-2024-0271 | Medium | 6.3 | 2024-01-07 | A vulnerability has been found in Kashipara Food Management System up to 1.0 and classified as critical. This vulnerability affects unknown code of the file ad… |
CVE-2024-0270 | Medium | 6.3 | 2024-01-07 | A vulnerability, which was classified as critical, was found in Kashipara Food Management System up to 1.0. This affects an unknown part of the file item_list_… |
CVE-2024-0268 | High | 7.3 | 2024-01-07 | A vulnerability, which was classified as critical, has been found in Kashipara Hospital Management System up to 1.0. Affected by this issue is some unknown fun… |
CVE-2024-0267 | High | 7.3 | 2024-01-07 | A vulnerability classified as critical was found in Kashipara Hospital Management System up to 1.0. Affected by this vulnerability is an unknown functionality… |
CVE-2024-0266 | Medium | 4.3 | 2024-01-07 | A vulnerability classified as problematic has been found in Project Worlds Online Lawyer Management System 1.0. Affected is an unknown function of the componen… |
CVE-2024-0265 | Medium | 6.3 | 2024-01-07 | A vulnerability was found in SourceCodester Clinic Queuing System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /i… |
CVE-2024-0264 | High | 7.3 | 2024-01-07 | A vulnerability was found in SourceCodester Clinic Queuing System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /L… |
CVE-2024-0263 | Medium | 5.3 | 2024-01-07 | A vulnerability was found in ACME Ultra Mini HTTPd 1.21. It has been classified as problematic. This affects an unknown part of the component HTTP GET Request… |
CVE-2024-0262 | Low | 2.4 | 2024-01-07 | A vulnerability was found in Online Job Portal 1.0 and classified as problematic. Affected by this issue is some unknown functionality of the file /Admin/News… |