2024 CVEs (page 76)
Page 76 of 385 — CVEs published in 2024, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-54491 | Low | 3.3 | 2024-12-12 | The issue was resolved by sanitizing logging. This issue is fixed in macOS Sequoia 15.2. A malicious application may be able to determine a user's current loca… |
CVE-2024-54490 | Medium | 5.5 | 2024-12-12 | This issue was addressed by enabling hardened runtime. This issue is fixed in macOS Sequoia 15.2. A local attacker may gain access to user's Keychain items. |
CVE-2024-54489 | High | 7.8 | 2024-12-12 | A path handling issue was addressed with improved validation. This issue is fixed in macOS Sequoia 15.2, macOS Sonoma 14.7.2, macOS Ventura 13.7.2. Running a m… |
CVE-2024-54486 | Medium | 6.5 | 2024-12-12 | The issue was addressed with improved checks. This issue is fixed in iOS 18.2 and iPadOS 18.2, iPadOS 17.7.3, macOS Sequoia 15.2, macOS Sonoma 14.7.2, macOS Ve… |
CVE-2024-54485 | Low | 2.4 | 2024-12-12 | The issue was addressed by adding additional logic. This issue is fixed in iOS 18.2 and iPadOS 18.2, iPadOS 17.7.3, macOS Sequoia 15.2. An attacker with physic… |
CVE-2024-54484 | Medium | 5.5 | 2024-12-12 | The issue was resolved by sanitizing logging. This issue is fixed in macOS Sequoia 15.2. An app may be able to access user-sensitive data. |
CVE-2024-54479 | High | 7.5 | 2024-12-12 | The issue was addressed with improved checks. This issue is fixed in Safari 18.2, iOS 18.2 and iPadOS 18.2, iPadOS 17.7.3, macOS Sequoia 15.2, tvOS 18.2, visio… |
CVE-2024-54477 | Medium | 5.5 | 2024-12-12 | The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.2, macOS Sonoma 14.7.2, macOS Ventura 13.7.2. An app may be able to acces… |
CVE-2024-54476 | Medium | 5.5 | 2024-12-12 | The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.2, macOS Sonoma 14.7.2, macOS Ventura 13.7.2. An app may be able to acces… |
CVE-2024-54474 | Medium | 5.5 | 2024-12-12 | The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.2, macOS Sonoma 14.7.2, macOS Ventura 13.7.2. An app may be able to acces… |
CVE-2024-54471 | Medium | 5.5 | 2024-12-12 | This issue was addressed with additional entitlement checks. This issue is fixed in macOS Sequoia 15.1, macOS Sonoma 14.7.1, macOS Ventura 13.7.1. A malicious… |
CVE-2024-54466 | Medium | 5.3 | 2024-12-12 | An authorization issue was addressed with improved state management. This issue is fixed in macOS Sequoia 15.2, macOS Sonoma 14.7.2, macOS Ventura 13.7.2. An e… |
CVE-2024-54465 | Critical | 9.8 | 2024-12-12 | A logic issue was addressed with improved state management. This issue is fixed in macOS Sequoia 15.2. An app may be able to elevate privileges. |
CVE-2024-53845 | | 2024-12-12 | ESPTouch is a connection protocol for internet of things devices. In the ESPTouchV2 protocol, while there is an option to use a custom AES key, there is no opt… | |
CVE-2024-53274 | Medium | 6.1 | 2024-12-12 | Habitica is an open-source habit-building program. Versions prior to 5.28.5 are vulnerable to reflected cross-site scripting. The `register` function in `home… |
CVE-2024-53273 | Medium | 6.1 | 2024-12-12 | Habitica is an open-source habit-building program. Versions prior to 5.28.5 are vulnerable to reflected cross-site scripting. The `register` function in `Regis… |
CVE-2024-53272 | Medium | 6.1 | 2024-12-12 | Habitica is an open-source habit-building program. Versions prior to 5.28.5 are vulnerable to reflected cross-site scripting. The `login` and `social media` fu… |
CVE-2024-44300 | Medium | 5.5 | 2024-12-12 | A logic issue was addressed with improved file handling. This issue is fixed in macOS Sequoia 15.2, macOS Sonoma 14.7.2, macOS Ventura 13.7.2. An app may be ab… |
CVE-2024-44299 | Critical | 9.8 | 2024-12-12 | The issue was addressed with improved bounds checks. This issue is fixed in iOS 18.1 and iPadOS 18.1, macOS Sequoia 15.1. An attacker may be able to cause unex… |
CVE-2024-44291 | High | 7.8 | 2024-12-12 | A logic issue was addressed with improved file handling. This issue is fixed in macOS Sequoia 15.2, macOS Sonoma 14.7.2, macOS Ventura 13.7.2. A malicious app… |
CVE-2024-44290 | Low | 3.3 | 2024-12-12 | This issue was addressed with improved redaction of sensitive information. This issue is fixed in iOS 18.1 and iPadOS 18.1, macOS Sequoia 15.1, watchOS 11.1. A… |
CVE-2024-44248 | Medium | 6.5 | 2024-12-12 | This issue was addressed through improved state management. This issue is fixed in macOS Sequoia 15.1, macOS Sonoma 14.7.2, macOS Ventura 13.7.2. A user with s… |
CVE-2024-44246 | Medium | 5.3 | 2024-12-12 | The issue was addressed with improved routing of Safari-originated requests. This issue is fixed in Safari 18.2, iOS 18.2 and iPadOS 18.2, iPadOS 17.7.3, macOS… |
CVE-2024-44245 | High | 7.1 | 2024-12-12 | The issue was addressed with improved memory handling. This issue is fixed in iOS 18.2 and iPadOS 18.2, iPadOS 17.7.3, macOS Sequoia 15.2, macOS Sonoma 14.7.2… |
CVE-2024-44243 | Medium | 5.5 | 2024-12-12 | A configuration issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.2, macOS Sonoma 14.7.3. An app may be able to modify… |
CVE-2024-44242 | Critical | 9.8 | 2024-12-12 | The issue was addressed with improved bounds checks. This issue is fixed in iOS 18.1 and iPadOS 18.1, macOS Sequoia 15.1. An attacker may be able to cause unex… |
CVE-2024-44241 | Critical | 9.8 | 2024-12-12 | The issue was addressed with improved bounds checks. This issue is fixed in iOS 18.1 and iPadOS 18.1, macOS Sequoia 15.1. An attacker may be able to cause unex… |
CVE-2024-44225 | High | 7.8 | 2024-12-12 | A logic issue was addressed with improved checks. This issue is fixed in iOS 18.2 and iPadOS 18.2, iPadOS 17.7.3, macOS Sequoia 15.2, macOS Sonoma 14.7.2, macO… |
CVE-2024-44224 | High | 7.8 | 2024-12-12 | A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.2, macOS Sonoma 14.7.2, macOS Ventura 13.7.2. A malicio… |
CVE-2024-44220 | Medium | 5.5 | 2024-12-12 | The issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.2, macOS Sonoma 14.7.2. Parsing a maliciously crafted video file… |
CVE-2024-44212 | Medium | 5.3 | 2024-12-12 | A cookie management issue was addressed with improved state management. This issue is fixed in Safari 18.1, iOS 18.1 and iPadOS 18.1, macOS Sequoia 15.1, tvOS… |
CVE-2024-44201 | Medium | 5.5 | 2024-12-12 | The issue was addressed with improved memory handling. This issue is fixed in iOS 18.1 and iPadOS 18.1, iPadOS 17.7.3, macOS Sequoia 15.1, macOS Sonoma 14.7.2… |
CVE-2024-44200 | Low | 3.3 | 2024-12-12 | This issue was addressed with improved redaction of sensitive information. This issue is fixed in iOS 18.1 and iPadOS 18.1, macOS Sequoia 15.1. An app may be a… |
CVE-2024-42407 | High | 8.5 | 2024-12-12 | Insertion of Sensitive Information into Log File (CWE-532) in the Gallagher Command Centre Alarm Transmitter feature could allow an authenticated Operator to v… |
CVE-2024-41146 | Medium | 4.6 | 2024-12-12 | Use of Multiple Resources with Duplicate Identifier (CWE-694) in the Controller 6000 and Controller 7000 Platforms could allow an attacker with physical access… |
CVE-2024-12536 | Low | 3.5 | 2024-12-12 | A vulnerability, which was classified as problematic, has been found in SourceCodester Kortex Lite Advocate Office Management System 1.0. Affected by this issu… |
CVE-2024-12503 | Low | 2.4 | 2024-12-12 | A vulnerability classified as problematic was found in ClassCMS 4.8. Affected by this vulnerability is an unknown functionality of the file /index.php/admin of… |
CVE-2024-12497 | High | 7.3 | 2024-12-12 | A vulnerability classified as critical has been found in 1000 Projects Attendance Tracking Management System 1.0. Affected is an unknown function of the file /… |
CVE-2024-12492 | Medium | 6.3 | 2024-12-12 | A vulnerability was found in code-projects Farmacia 1.0. It has been rated as critical. This issue affects some unknown processing of the file /visualizar-usua… |
CVE-2024-12490 | Medium | 6.3 | 2024-12-12 | A vulnerability was found in code-projects Online Class and Exam Scheduling System 1.0. It has been declared as critical. This vulnerability affects unknown co… |
CVE-2024-55884 | Critical | 9.0 | 2024-12-12 | In the Mullvad VPN client 2024.6 (Desktop), 2024.8 (iOS), and 2024.8-beta1 (Android), the exception-handling alternate stack can be exhausted, leading to heap-… |
CVE-2024-55587 | High | 8.8 | 2024-12-12 | python-libarchive through 4.2.1 allows directory traversal (to create files) in extract in zip.py for ZipFile.extractall and ZipFile.extract. |
CVE-2024-50339 | Medium | 5.3 | 2024-12-12 | GLPI is a free asset and IT management software package. Starting in version 9.5.0 and prior to version 10.0.17, an unauthenticated user can retrieve all the s… |
CVE-2024-49142 | High | 7.8 | 2024-12-12 | Microsoft Access Remote Code Execution Vulnerability |
CVE-2024-49138 | High | 7.8 | 2024-12-12 | Windows Common Log File System Driver Elevation of Privilege Vulnerability |
CVE-2024-49132 | High | 8.1 | 2024-12-12 | Windows Remote Desktop Services Remote Code Execution Vulnerability |
CVE-2024-49129 | High | 7.5 | 2024-12-12 | Windows Remote Desktop Gateway (RD Gateway) Denial of Service Vulnerability |
CVE-2024-49128 | High | 8.1 | 2024-12-12 | Sensitive data storage in improperly locked memory in Windows Remote Desktop Services allows an unauthorized attacker to execute code over a network. |
CVE-2024-49127 | High | 8.1 | 2024-12-12 | Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability |
CVE-2024-49126 | High | 8.1 | 2024-12-12 | Windows Local Security Authority Subsystem Service (LSASS) Remote Code Execution Vulnerability |
CVE-2024-49125 | High | 8.8 | 2024-12-12 | Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability |
CVE-2024-49124 | High | 8.1 | 2024-12-12 | Lightweight Directory Access Protocol (LDAP) Client Remote Code Execution Vulnerability |
CVE-2024-49123 | High | 8.1 | 2024-12-12 | Windows Remote Desktop Services Remote Code Execution Vulnerability |
CVE-2024-49122 | High | 8.1 | 2024-12-12 | Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability |
CVE-2024-49121 | High | 7.5 | 2024-12-12 | Windows Lightweight Directory Access Protocol (LDAP) Denial of Service Vulnerability |
CVE-2024-49120 | High | 8.1 | 2024-12-12 | Windows Remote Desktop Services Remote Code Execution Vulnerability |
CVE-2024-49119 | High | 8.1 | 2024-12-12 | Windows Remote Desktop Services Remote Code Execution Vulnerability |
CVE-2024-49118 | High | 8.1 | 2024-12-12 | Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability |
CVE-2024-49117 | High | 8.8 | 2024-12-12 | Windows Hyper-V Remote Code Execution Vulnerability |
CVE-2024-49116 | High | 8.1 | 2024-12-12 | Windows Remote Desktop Services Remote Code Execution Vulnerability |
CVE-2024-49115 | High | 8.1 | 2024-12-12 | Windows Remote Desktop Services Remote Code Execution Vulnerability |
CVE-2024-49114 | High | 7.8 | 2024-12-12 | Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability |
CVE-2024-49113 | High | 7.5 | 2024-12-12 | Windows Lightweight Directory Access Protocol (LDAP) Denial of Service Vulnerability |
CVE-2024-49112 | Critical | 9.8 | 2024-12-12 | Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability |
CVE-2024-49111 | Medium | 6.6 | 2024-12-12 | Wireless Wide Area Network Service (WwanSvc) Elevation of Privilege Vulnerability |
CVE-2024-49110 | Medium | 6.8 | 2024-12-12 | Windows Mobile Broadband Driver Elevation of Privilege Vulnerability |
CVE-2024-49109 | Medium | 6.6 | 2024-12-12 | Wireless Wide Area Network Service (WwanSvc) Elevation of Privilege Vulnerability |
CVE-2024-49108 | High | 8.1 | 2024-12-12 | Windows Remote Desktop Services Remote Code Execution Vulnerability |
CVE-2024-49107 | High | 7.3 | 2024-12-12 | WmsRepair Service Elevation of Privilege Vulnerability |
CVE-2024-49106 | High | 8.1 | 2024-12-12 | Windows Remote Desktop Services Remote Code Execution Vulnerability |
CVE-2024-49105 | High | 8.4 | 2024-12-12 | Remote Desktop Client Remote Code Execution Vulnerability |
CVE-2024-49104 | High | 8.8 | 2024-12-12 | Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability |
CVE-2024-49103 | Medium | 4.3 | 2024-12-12 | Windows Wireless Wide Area Network Service (WwanSvc) Information Disclosure Vulnerability |
CVE-2024-49102 | High | 8.8 | 2024-12-12 | Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability |
CVE-2024-49101 | Medium | 6.6 | 2024-12-12 | Wireless Wide Area Network Service (WwanSvc) Elevation of Privilege Vulnerability |
CVE-2024-49099 | Medium | 4.3 | 2024-12-12 | Windows Wireless Wide Area Network Service (WwanSvc) Information Disclosure Vulnerability |
CVE-2024-49098 | Medium | 4.3 | 2024-12-12 | Windows Wireless Wide Area Network Service (WwanSvc) Information Disclosure Vulnerability |
CVE-2024-49097 | High | 7.0 | 2024-12-12 | Windows PrintWorkflowUserSvc Elevation of Privilege Vulnerability |
CVE-2024-49096 | High | 7.5 | 2024-12-12 | Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability |
CVE-2024-49095 | High | 7.0 | 2024-12-12 | Windows PrintWorkflowUserSvc Elevation of Privilege Vulnerability |
CVE-2024-49094 | Medium | 6.6 | 2024-12-12 | Wireless Wide Area Network Service (WwanSvc) Elevation of Privilege Vulnerability |
CVE-2024-49093 | High | 8.8 | 2024-12-12 | Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability |
CVE-2024-49092 | Medium | 6.8 | 2024-12-12 | Windows Mobile Broadband Driver Elevation of Privilege Vulnerability |
CVE-2024-49091 | High | 7.2 | 2024-12-12 | Windows Domain Name Service Remote Code Execution Vulnerability |
CVE-2024-49090 | High | 7.8 | 2024-12-12 | Windows Common Log File System Driver Elevation of Privilege Vulnerability |
CVE-2024-49089 | High | 7.2 | 2024-12-12 | Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability |
CVE-2024-49088 | High | 7.8 | 2024-12-12 | Windows Common Log File System Driver Elevation of Privilege Vulnerability |
CVE-2024-49087 | Medium | 4.6 | 2024-12-12 | Windows Mobile Broadband Driver Information Disclosure Vulnerability |
CVE-2024-49086 | High | 8.8 | 2024-12-12 | Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability |
CVE-2024-49085 | High | 8.8 | 2024-12-12 | Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability |
CVE-2024-49084 | High | 7.0 | 2024-12-12 | Windows Kernel Elevation of Privilege Vulnerability |
CVE-2024-49083 | Medium | 6.8 | 2024-12-12 | Windows Mobile Broadband Driver Elevation of Privilege Vulnerability |
CVE-2024-49082 | Medium | 6.8 | 2024-12-12 | Windows File Explorer Information Disclosure Vulnerability |
CVE-2024-49081 | Medium | 6.6 | 2024-12-12 | Wireless Wide Area Network Service (WwanSvc) Elevation of Privilege Vulnerability |
CVE-2024-49080 | High | 8.8 | 2024-12-12 | Windows IP Routing Management Snapin Remote Code Execution Vulnerability |
CVE-2024-49079 | High | 7.8 | 2024-12-12 | Input Method Editor (IME) Remote Code Execution Vulnerability |
CVE-2024-49078 | Medium | 6.8 | 2024-12-12 | Windows Mobile Broadband Driver Elevation of Privilege Vulnerability |
CVE-2024-49077 | Medium | 6.8 | 2024-12-12 | Windows Mobile Broadband Driver Elevation of Privilege Vulnerability |
CVE-2024-49076 | High | 7.8 | 2024-12-12 | Windows Virtualization-Based Security (VBS) Enclave Elevation of Privilege Vulnerability |
CVE-2024-49075 | High | 7.5 | 2024-12-12 | Windows Remote Desktop Services Denial of Service Vulnerability |