Menu

Star on GitHub · 3.2k

2024

39,956 vulnerabilities published in 2024.

Results

14,319 of 39,956· Page 137/287
7.6
CVE-2024-35267

Azure DevOps Server Spoofing Vulnerability

7.6
CVE-2024-35266

Azure DevOps Server Spoofing Vulnerability

8.1
CVE-2024-35264

.NET and Visual Studio Remote Code Execution Vulnerability

7.8
CVE-2024-35261

Azure Network Watcher VM Extension Elevation of Privilege Vulnerability

8.8
CVE-2024-35256

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

7.5
CVE-2024-32987

Microsoft SharePoint Server Information Disclosure Vulnerability

7.5
CVE-2024-30105

.NET and Visual Studio Denial of Service Vulnerability

7.5
CVE-2024-30098

Windows Cryptographic Services Security Feature Bypass Vulnerability

7.1
CVE-2024-30081

Windows NTLM Spoofing Vulnerability

7.8
CVE-2024-30079

Windows Remote Access Connection Manager Elevation of Privilege Vulnerability

7.3
CVE-2024-30061

Microsoft Dynamics 365 (On-Premises) Information Disclosure Vulnerability

8.8
CVE-2024-30013

Windows MultiPoint Services Remote Code Execution Vulnerability

8.8
CVE-2024-28928

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

8.8
CVE-2024-28899

Secure Boot Security Feature Bypass Vulnerability

8.8
CVE-2024-21449

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

8.8
CVE-2024-21428

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

8.8
CVE-2024-21425

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

8.8
CVE-2024-21415

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

8.8
CVE-2024-21414

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

8.8
CVE-2024-21398

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

8.8
CVE-2024-21373

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

8.8
CVE-2024-21335

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

8.8
CVE-2024-21333

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

8.8
CVE-2024-21332

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

8.8
CVE-2024-21331

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

8.8
CVE-2024-21317

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

8.8
CVE-2024-21308

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

8.8
CVE-2024-21303

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

8.8
CVE-2024-20701

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

8.8
CVE-2024-27784

Multiple Exposure of sensitive information to an unauthorized actor weaknesses [CWE-200] vulnerability in Fortinet Forti

7.6
CVE-2024-27783

Multiple cross-site request forgery (CSRF) weaknesses [CWE-352] vulnerability in Fortinet FortiAIOps 2.0.0 may allow an

8.1
CVE-2024-27782

Multiple insufficient session expiration weaknesses [CWE-613] vulnerability in Fortinet FortiAIOps 2.0.0 may allow an at

8.8
CVE-2024-23663

An improper access control in Fortinet FortiExtender 4.1.1 - 4.1.9, 4.2.0 - 4.2.6, 5.3.2, 7.0.0 - 7.0.4, 7.2.0 - 7.2.4 a

7.4
CVE-2023-50178

An improper certificate validation vulnerability [CWE-295] in FortiADC 7.4.0, 7.2.0 through 7.2.3, 7.1 all versions, 7.0

8.8
CVE-2024-6615

Memory safety bugs present in Firefox 127 and Thunderbird 127. Some of these bugs showed evidence of memory corruption a

8.8
CVE-2024-6609

When almost out-of-memory an elliptic curve key which was never allocated could have been freed again. This vulnerabilit

8.8
CVE-2024-6607

It was possible to prevent a user from exiting pointerlock when pressing escape and to overlay customValidity notificati

8.2
CVE-2024-6606

Clipboard code failed to check the index on an array access. This could have led to an out-of-bounds read. This vulnerab

8.8
CVE-2024-6605

Firefox Android allowed immediate interaction with permission prompts. This could be used for tapjacking. This vulnerabi

7.5
CVE-2024-6604

Memory safety bugs present in Firefox 127, Firefox ESR 115.12, and Thunderbird 115.12. Some of these bugs showed evidenc

7.4
CVE-2024-6603

In an out-of-memory scenario an allocation could fail but free would have been called on the pointer afterwards leading

8.6
CVE-2024-39697

phonenumber is a library for parsing, formatting and validating international phone numbers. Since 0.3.4, the phonenumbe

8.5
CVE-2024-38363

Airbyte is a data integration platform for ELT pipelines. Airbyte connection builder docker image is vulnerable to RCE v

8.8
CVE-2024-37952

Improper Privilege Management vulnerability in themeenergy BookYourTravel allows Privilege Escalation.This issue affects

8.5
CVE-2024-37513

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Themewinter WPCafe allow

8.2
CVE-2024-22271

In Spring Cloud Function framework, versions 4.1.x prior to 4.1.2, 4.0.x prior to 4.0.8 an application is vulnerable to

7.5
CVE-2024-39888

A vulnerability has been identified in Mendix Encryption (All versions >= V10.0.0 < V10.0.2). Affected versions of the m

7.5
CVE-2024-39874

A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.2 SP1). The affected application

7.5
CVE-2024-39873

A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.2 SP1). The affected application

7.6
CVE-2024-39868

A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.2 SP1). Affected devices do not p

Test your stack for 2024issues

CyberStrike tests your own apps and APIs, then verifies each finding before you see it.