Menu

Star on GitHub · 3.2k

2024

39,956 vulnerabilities published in 2024.

Results

19,870 of 39,956· Page 101/398
5.5
CVE-2024-47671

In the Linux kernel, the following vulnerability has been resolved: USB: usbtmc: prevent kernel-usb-infoleak The syzbo

5.5
CVE-2024-47666

In the Linux kernel, the following vulnerability has been resolved: scsi: pm80xx: Set phy->enable_completion only when

5.5
CVE-2024-47665

In the Linux kernel, the following vulnerability has been resolved: i3c: mipi-i3c-hci: Error out instead on BUG_ON() in

5.5
CVE-2024-47664

In the Linux kernel, the following vulnerability has been resolved: spi: hisi-kunpeng: Add verification for the max_fre

5.5
CVE-2024-47663

In the Linux kernel, the following vulnerability has been resolved: staging: iio: frequency: ad9834: Validate frequency

5.5
CVE-2024-47662

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Remove register from DCN35 DMCUB d

5.5
CVE-2024-47661

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Avoid overflow from uint32_t to ui

4.7
CVE-2024-47660

In the Linux kernel, the following vulnerability has been resolved: fsnotify: clear PARENT_WATCHED flags lazily In som

4.7
CVE-2024-46870

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Disable DMCUB timeout for DCN35 [

5.4
CVE-2024-46237

PHPGurukul Hospital Management System 4.0 is vulnerable to Cross Site Scripting (XSS) via the patname, pataddress, and m

5.5
CVE-2024-47420

Animate versions 23.0.7, 24.0.4 and earlier are affected by an out-of-bounds read vulnerability that could lead to discl

5.5
CVE-2024-47419

Animate versions 23.0.7, 24.0.4 and earlier are affected by an out-of-bounds read vulnerability that could lead to discl

5.5
CVE-2024-45145

Lightroom Desktop versions 7.4.1, 13.5, 12.5.1 and earlier are affected by an out-of-bounds read vulnerability that coul

5.5
CVE-2024-20787

Substance3D - Painter versions 10.0.1 and earlier are affected by an out-of-bounds read vulnerability that could lead to

6.4
CVE-2024-9451

The Embed PDF Viewer plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'height' and 'width' para

6.4
CVE-2024-9449

The Auto iFrame plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'tag' parameter in all version

6.2
CVE-2024-39440

In DRM service, there is a possible system crash due to null pointer dereference. This could lead to local denial of ser

6.2
CVE-2024-39439

In DRM service, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial o

6.5
CVE-2024-39438

In linkturbonative service, there is a possible command injection due to improper input validation. This could lead to l

6.5
CVE-2024-39437

In linkturbonative service, there is a possible command injection due to improper input validation. This could lead to l

6.5
CVE-2024-39436

In linkturbonative service, there is a possible command injection due to improper input validation. This could lead to l

4.8
CVE-2024-5968

The Photo Gallery by 10Web WordPress plugin before 1.8.28 does not properly sanitise and escape some of its Gallery set

6.5
CVE-2023-45872

An issue was discovered in Qt before 6.2.11 and 6.3.x through 6.6.x before 6.6.1. When a QML image refers to an image wh

6.1
CVE-2023-45361

An issue was discovered in VectorComponentUserLinks.php in the Vector Skin component in MediaWiki before 1.39.5 and 1.40

6.5
CVE-2023-45359

An issue was discovered in the Vector Skin component for MediaWiki before 1.39.5 and 1.40.x before 1.40.1. vector-toc-to

5.0
CVE-2024-42934

OpenIPMI before 2.0.36 has an out-of-bounds array access (for authentication type) in the ipmi_sim simulator, resulting

6.4
CVE-2024-7963

The CMSMasters Content Composer plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's multi

4.9
CVE-2024-36814

An arbitrary file read vulnerability in Adguard Home before v0.107.52 allows authenticated attackers to access arbitrary

4.2
CVE-2024-47822

Directus is a real-time API and App dashboard for managing SQL database content. Access tokens from query strings are no

4.8
CVE-2024-46410

PublicCMS V4.0.202406.d was discovered to contain a cross-site scripting (XSS) vulnerability via a crafted script to the

5.5
CVE-2024-43614

Relative path traversal in Microsoft Defender for Endpoint allows an authorized attacker to perform spoofing locally.

6.9
CVE-2024-43612

Power BI Report Server Spoofing Vulnerability

6.5
CVE-2024-43609

Microsoft Office Spoofing Vulnerability

5.7
CVE-2024-43604

Outlook for Android Elevation of Privilege Vulnerability

5.5
CVE-2024-43603

Visual Studio Collector Service Denial of Service Vulnerability

5.5
CVE-2024-43585

Code Integrity Guard Security Feature Bypass Vulnerability

6.5
CVE-2024-43573KEV

Windows MSHTML Platform Spoofing Vulnerability

5.6
CVE-2024-43571

Sudo for Windows Spoofing Vulnerability

6.4
CVE-2024-43570

Windows Kernel Elevation of Privilege Vulnerability

6.5
CVE-2024-43561

Windows Mobile Broadband Driver Denial of Service Vulnerability

6.5
CVE-2024-43559

Windows Mobile Broadband Driver Denial of Service Vulnerability

6.5
CVE-2024-43558

Windows Mobile Broadband Driver Denial of Service Vulnerability

6.5
CVE-2024-43557

Windows Mobile Broadband Driver Denial of Service Vulnerability

6.5
CVE-2024-43555

Windows Mobile Broadband Driver Denial of Service Vulnerability

5.5
CVE-2024-43554

Windows Kernel-Mode Driver Information Disclosure Vulnerability

6.5
CVE-2024-43547

Windows Kerberos Information Disclosure Vulnerability

5.6
CVE-2024-43546

Windows Cryptographic Information Disclosure Vulnerability

6.8
CVE-2024-43543

Windows Mobile Broadband Driver Remote Code Execution Vulnerability

6.5
CVE-2024-43542

Windows Mobile Broadband Driver Denial of Service Vulnerability

6.5
CVE-2024-43540

Windows Mobile Broadband Driver Denial of Service Vulnerability

Test your stack for 2024issues

CyberStrike tests your own apps and APIs, then verifies each finding before you see it.