Menu

Star on GitHub · 3.2k

2024

39,956 vulnerabilities published in 2024.

Results

19,870 of 39,956· Page 185/398
5.3
CVE-2024-39899

PrivateBin is an online pastebin where the server has zero knowledge of pasted data. In v1.5, PrivateBin introduced the

4.3
CVE-2024-39897

zot is an OCI image registry. Prior to 2.1.0, the cache driver `GetBlob()` allows read access to any blob without access

6.1
CVE-2024-40742

A cross-site scripting (XSS) vulnerability in netbox v4.0.3 allows attackers to execute arbitrary web scripts or HTML vi

6.1
CVE-2024-40741

A cross-site scripting (XSS) vulnerability in netbox v4.0.3 allows attackers to execute arbitrary web scripts or HTML vi

6.1
CVE-2024-40740

A cross-site scripting (XSS) vulnerability in netbox v4.0.3 allows attackers to execute arbitrary web scripts or HTML vi

6.1
CVE-2024-40739

A cross-site scripting (XSS) vulnerability in netbox v4.0.3 allows attackers to execute arbitrary web scripts or HTML vi

6.1
CVE-2024-40738

A cross-site scripting (XSS) vulnerability in netbox v4.0.3 allows attackers to execute arbitrary web scripts or HTML vi

6.1
CVE-2024-40737

A cross-site scripting (XSS) vulnerability in netbox v4.0.3 allows attackers to execute arbitrary web scripts or HTML vi

6.1
CVE-2024-40736

A cross-site scripting (XSS) vulnerability in netbox v4.0.3 allows attackers to execute arbitrary web scripts or HTML vi

6.1
CVE-2024-40735

A cross-site scripting (XSS) vulnerability in netbox v4.0.3 allows attackers to execute arbitrary web scripts or HTML vi

6.1
CVE-2024-40734

A cross-site scripting (XSS) vulnerability in netbox v4.0.3 allows attackers to execute arbitrary web scripts or HTML vi

6.1
CVE-2024-40733

A cross-site scripting (XSS) vulnerability in netbox v4.0.3 allows attackers to execute arbitrary web scripts or HTML vi

6.1
CVE-2024-40732

A cross-site scripting (XSS) vulnerability in netbox v4.0.3 allows attackers to execute arbitrary web scripts or HTML vi

6.1
CVE-2024-40731

A cross-site scripting (XSS) vulnerability in netbox v4.0.3 allows attackers to execute arbitrary web scripts or HTML vi

6.1
CVE-2024-40730

A cross-site scripting (XSS) vulnerability in netbox v4.0.3 allows attackers to execute arbitrary web scripts or HTML vi

6.1
CVE-2024-40729

A cross-site scripting (XSS) vulnerability in netbox v4.0.3 allows attackers to execute arbitrary web scripts or HTML vi

6.1
CVE-2024-40728

A cross-site scripting (XSS) vulnerability in netbox v4.0.3 allows attackers to execute arbitrary web scripts or HTML vi

6.1
CVE-2024-40727

A cross-site scripting (XSS) vulnerability in netbox v4.0.3 allows attackers to execute arbitrary web scripts or HTML vi

6.1
CVE-2024-40726

A cross-site scripting (XSS) vulnerability in netbox v4.0.3 allows attackers to execute arbitrary web scripts or HTML vi

6.1
CVE-2024-38972

A cross-site scripting (XSS) vulnerability in netbox v4.0.3 allows attackers to execute arbitrary web scripts or HTML vi

5.4
CVE-2024-38971

vaeThink 1.0.2 is vulnerable to stored Cross Site Scripting (XSS) in the system backend.

4.9
CVE-2024-38970

vaeThink 1.0.2 is vulnerable to Information Disclosure via the system backend,access management administrator function.

6.2
CVE-2024-31957

A vulnerability was discovered in Samsung Mobile Processors Exynos 2200 and Exynos 2400 where they lack a check for the

5.3
CVE-2024-28067

A vulnerability in Samsung Exynos Modem 5300 allows a Man-in-the-Middle (MITM) attacker to downgrade the security mode o

4.4
CVE-2024-27362

A vulnerability was discovered in Samsung Mobile Processors Exynos 1280, Exynos 2200, Exynos 1330, Exynos 1380, and Exyn

6.0
CVE-2024-27360

A vulnerability was discovered in Samsung Mobile Processors Exynos 850, Exynos 1080, Exynos 2100, Exynos 2200, Exynos 12

6.1
CVE-2024-27183

XSS vulnerability in DJ-HelpfulArticles component for Joomla.

6.5
CVE-2024-6237

A flaw was found in the 389 Directory Server. This flaw allows an unauthenticated user to cause a systematic server cras

6.1
CVE-2024-5652

In Docker Desktop on Windows before v4.31.0 allows a user in the docker-users group to cause a Windows Denial-of-Service

5.5
CVE-2024-39118

Mommy Heather Advanced Backups up to v3.5.3 allows attackers to write arbitrary files via restoring a crafted back up.

6.5
CVE-2024-38105

Windows Layer-2 Bridge Network Driver Denial of Service Vulnerability

6.5
CVE-2024-38102

Windows Layer-2 Bridge Network Driver Denial of Service Vulnerability

6.5
CVE-2024-38101

Windows Layer-2 Bridge Network Driver Denial of Service Vulnerability

5.9
CVE-2024-38099

Windows Remote Desktop Licensing Service Denial of Service Vulnerability

6.4
CVE-2024-38086

Azure Kinect SDK Remote Code Execution Vulnerability

6.8
CVE-2024-38065

Secure Boot Security Feature Bypass Vulnerability

6.8
CVE-2024-38058

BitLocker Security Feature Bypass Vulnerability

5.5
CVE-2024-38056

Microsoft Windows Codecs Library Information Disclosure Vulnerability

5.5
CVE-2024-38055

Microsoft Windows Codecs Library Information Disclosure Vulnerability

6.6
CVE-2024-38049

Windows Distributed Transaction Coordinator Remote Code Execution Vulnerability

6.5
CVE-2024-38048

Windows Network Driver Interface Specification (NDIS) Denial of Service Vulnerability

5.5
CVE-2024-38041

Windows Kernel Information Disclosure Vulnerability

6.5
CVE-2024-38030

Windows Themes Spoofing Vulnerability

6.5
CVE-2024-38027

Windows Line Printer Daemon Service Denial of Service Vulnerability

6.5
CVE-2024-38020

Microsoft Outlook Spoofing Vulnerability

5.5
CVE-2024-38017

Microsoft Message Queuing Information Disclosure Vulnerability

6.7
CVE-2024-38013

Microsoft Windows Server Backup Elevation of Privilege Vulnerability

5.3
CVE-2024-35270

Windows iSCSI Service Denial of Service Vulnerability

4.7
CVE-2024-30071

Windows Remote Access Connection Manager Information Disclosure Vulnerability

6.1
CVE-2024-26279

The wrapper extensions do not correctly validate inputs, leading to XSS vectors.

Test your stack for 2024issues

CyberStrike tests your own apps and APIs, then verifies each finding before you see it.