Menu

Star on GitHub · 3.2k

2024

39,956 vulnerabilities published in 2024.

Results

19,870 of 39,956· Page 301/398
5.0
CVE-2024-26220

Windows Mobile Hotspot Information Disclosure Vulnerability

5.5
CVE-2024-26217

Windows Remote Access Connection Manager Information Disclosure Vulnerability

5.5
CVE-2024-26209

Microsoft Local Security Authority Subsystem Service Information Disclosure Vulnerability

5.5
CVE-2024-26207

Windows Remote Access Connection Manager Information Disclosure Vulnerability

6.4
CVE-2024-26193

Azure Migrate Remote Code Execution Vulnerability

6.5
CVE-2024-26183

Windows Kerberos Denial of Service Vulnerability

5.5
CVE-2024-26172

Windows DWM Core Library Information Disclosure Vulnerability

6.7
CVE-2024-26171

Secure Boot Security Feature Bypass Vulnerability

6.8
CVE-2024-26168

Secure Boot Security Feature Bypass Vulnerability

6.5
CVE-2024-21424

Azure Compute Gallery Elevation of Privilege Vulnerability

5.9
CVE-2024-20685

Azure Private 5G Core Denial of Service Vulnerability

6.7
CVE-2024-20669

Secure Boot Security Feature Bypass Vulnerability

6.1
CVE-2024-20665

BitLocker Security Feature Bypass Vulnerability

6.1
CVE-2024-31868

Improper Encoding or Escaping of Output vulnerability in Apache Zeppelin. The attackers can modify helium.json and expo

6.5
CVE-2024-31865

Improper Input Validation vulnerability in Apache Zeppelin. The attackers can call updating cron API with invalid or im

5.9
CVE-2024-31487

A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiSandbox

5.3
CVE-2024-23662

An exposure of sensitive information to an unauthorized actor in Fortinet FortiOS at least version at least 7.4.0 throug

6.7
CVE-2023-48784

A use of externally-controlled format string vulnerability [CWE-134] in FortiOS version 7.4.1 and below, version 7.2.7 a

6.7
CVE-2023-47542

A improper neutralization of special elements used in a template engine [CWE-1336] in FortiManager versions 7.4.1 and be

6.7
CVE-2023-47541

An improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiSandbox

6.7
CVE-2023-47540

An improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet

4.3
CVE-2024-28234

Contao is an open source content management system. Starting in version 2.0.0 and prior to versions 4.13.40 and 5.3.4, i

5.4
CVE-2024-28190

Contao is an open source content management system. Starting in version 4.0.0 and prior to version 4.13.40 and 5.3.4, us

5.4
CVE-2024-31544

A stored cross-site scripting (XSS) vulnerability in Computer Laboratory Management System v1.0 allows attackers to exec

5.3
CVE-2024-31863

Authentication Bypass by Spoofing vulnerability by replacing to exsiting notes in Apache Zeppelin.This issue affects Apa

5.3
CVE-2024-31862

Improper Input Validation vulnerability in Apache Zeppelin when creating a new note from Zeppelin's UI.This issue affect

5.3
CVE-2022-47894

Improper Input Validation vulnerability in Apache Zeppelin SAP.This issue affects Apache Zeppelin SAP: from 0.8.0 before

5.4
CVE-2021-28656

Cross-Site Request Forgery (CSRF) vulnerability in Credential page of Apache Zeppelin allows an attacker to submit malic

6.5
CVE-2024-31860

Improper Input Validation vulnerability in Apache Zeppelin. By adding relative path indicators(E.g ..), attackers can s

5.4
CVE-2024-31369

Cross-Site Request Forgery (CSRF) vulnerability in PenciDesign Soledad.This issue affects Soledad: from n/a through 8.4.

6.5
CVE-2024-31368

Missing Authorization vulnerability in PenciDesign Soledad.This issue affects Soledad: from n/a through 8.4.2.

6.1
CVE-2024-30190

A vulnerability has been identified in SCALANCE W1748-1 M12 (6GK5748-1GY01-0AA0), SCALANCE W1748-1 M12 (6GK5748-1GY01-0T

6.1
CVE-2024-30189

A vulnerability has been identified in SCALANCE W721-1 RJ45 (6GK5721-1FC00-0AA0) (All versions), SCALANCE W721-1 RJ45 (6

6.2
CVE-2023-50821

A vulnerability has been identified in SIMATIC PCS 7 V9.1 (All versions < V9.1 SP2 UC04), SIMATIC WinCC Runtime Professi

6.1
CVE-2024-1664

The Responsive Gallery Grid WordPress plugin before 2.3.11 does not sanitise and escape some of its settings, which coul

6.5
CVE-2024-30218

The ABAP Application Server of SAP NetWeaver as well as ABAP Platform allows an attacker to prevent legitimate users fro

4.3
CVE-2024-30217

Cash Management in SAP S/4 HANA does not perform necessary authorization checks for an authenticated user, resulting in

4.3
CVE-2024-30216

Cash Management in SAP S/4 HANA does not perform necessary authorization checks for an authenticated user, resulting in

4.8
CVE-2024-30215

The Resource Settings page allows a high privilege attacker to load exploitable payload to be stored and reflected whene

4.8
CVE-2024-30214

The application allows a high privilege attacker to append a malicious GET query parameter to Service invocations, which

6.5
CVE-2024-28167

SAP Group Reporting Data Collection does not perform necessary authorization checks for an authenticated user, resulting

5.3
CVE-2024-27898

SAP NetWeaver application, due to insufficient input validation, allows an attacker to send a crafted request from a vul

6.6
CVE-2024-23584

The NMAP Importer service​ may expose data store credentials to authorized users of the Windows Registry.

6.2
CVE-2024-23079

JGraphT Core v1.5.2 was discovered to contain a NullPointerException via the component org.jgrapht.alg.util.ToleranceDou

6.5
CVE-2024-0083

NVIDIA ChatRTX for Windows contains a vulnerability in the UI, where an attacker can cause a cross-site scripting error

5.5
CVE-2024-3466

A vulnerability was found in SourceCodester Laundry Management System 1.0. It has been declared as critical. Affected by

6.3
CVE-2024-3465

A vulnerability was found in SourceCodester Laundry Management System 1.0. It has been classified as critical. Affected

6.0
CVE-2024-27631

Cross Site Request Forgery vulnerability in GNU Savane v.3.12 and before allows a remote attacker to escalate privileges

6.3
CVE-2024-3464

A vulnerability was found in SourceCodester Laundry Management System 1.0 and classified as critical. This issue affects

6.6
CVE-2024-28224

Ollama before 0.1.29 has a DNS rebinding vulnerability that can inadvertently allow remote access to the full API, there

Test your stack for 2024issues

CyberStrike tests your own apps and APIs, then verifies each finding before you see it.