Menu

Star on GitHub · 3.2k

2024

39,956 vulnerabilities published in 2024.

Results

39,956· Page 375/800
6.1
CVE-2024-40733

A cross-site scripting (XSS) vulnerability in netbox v4.0.3 allows attackers to execute arbitrary web scripts or HTML vi

6.1
CVE-2024-40732

A cross-site scripting (XSS) vulnerability in netbox v4.0.3 allows attackers to execute arbitrary web scripts or HTML vi

6.1
CVE-2024-40731

A cross-site scripting (XSS) vulnerability in netbox v4.0.3 allows attackers to execute arbitrary web scripts or HTML vi

6.1
CVE-2024-40730

A cross-site scripting (XSS) vulnerability in netbox v4.0.3 allows attackers to execute arbitrary web scripts or HTML vi

6.1
CVE-2024-40729

A cross-site scripting (XSS) vulnerability in netbox v4.0.3 allows attackers to execute arbitrary web scripts or HTML vi

6.1
CVE-2024-40728

A cross-site scripting (XSS) vulnerability in netbox v4.0.3 allows attackers to execute arbitrary web scripts or HTML vi

6.1
CVE-2024-40727

A cross-site scripting (XSS) vulnerability in netbox v4.0.3 allows attackers to execute arbitrary web scripts or HTML vi

6.1
CVE-2024-40726

A cross-site scripting (XSS) vulnerability in netbox v4.0.3 allows attackers to execute arbitrary web scripts or HTML vi

7.5
CVE-2024-39698

electron-updater allows for automatic updates for Electron apps. The file `packages/electron-updater/src/windowsExecutab

6.1
CVE-2024-38972

A cross-site scripting (XSS) vulnerability in netbox v4.0.3 allows attackers to execute arbitrary web scripts or HTML vi

5.4
CVE-2024-38971

vaeThink 1.0.2 is vulnerable to stored Cross Site Scripting (XSS) in the system backend.

4.9
CVE-2024-38970

vaeThink 1.0.2 is vulnerable to Information Disclosure via the system backend,access management administrator function.

6.2
CVE-2024-31957

A vulnerability was discovered in Samsung Mobile Processors Exynos 2200 and Exynos 2400 where they lack a check for the

5.3
CVE-2024-28067

A vulnerability in Samsung Exynos Modem 5300 allows a Man-in-the-Middle (MITM) attacker to downgrade the security mode o

4.4
CVE-2024-27362

A vulnerability was discovered in Samsung Mobile Processors Exynos 1280, Exynos 2200, Exynos 1330, Exynos 1380, and Exyn

6.0
CVE-2024-27360

A vulnerability was discovered in Samsung Mobile Processors Exynos 850, Exynos 1080, Exynos 2100, Exynos 2200, Exynos 12

6.1
CVE-2024-27183

XSS vulnerability in DJ-HelpfulArticles component for Joomla.

9.8
CVE-2023-48194

Vulnerability in Tenda AC8v4 .V16.03.34.09 due to sscanf and the last digit of s8 being overwritten with \x0. After exec

6.5
CVE-2024-6237

A flaw was found in the 389 Directory Server. This flaw allows an unauthenticated user to cause a systematic server cras

6.1
CVE-2024-5652

In Docker Desktop on Windows before v4.31.0 allows a user in the docker-users group to cause a Windows Denial-of-Service

9.8
CVE-2024-39171

Directory Travel in PHPVibe v11.0.46 due to incomplete blacklist checksums and directory checks, which can lead to code

5.5
CVE-2024-39118

Mommy Heather Advanced Backups up to v3.5.3 allows attackers to write arbitrary files via restoring a crafted back up.

7.5
CVE-2024-38112KEV

Windows MSHTML Platform Spoofing Vulnerability

6.5
CVE-2024-38105

Windows Layer-2 Bridge Network Driver Denial of Service Vulnerability

8.8
CVE-2024-38104

Windows Fax Service Remote Code Execution Vulnerability

6.5
CVE-2024-38102

Windows Layer-2 Bridge Network Driver Denial of Service Vulnerability

6.5
CVE-2024-38101

Windows Layer-2 Bridge Network Driver Denial of Service Vulnerability

7.8
CVE-2024-38100

Windows File Explorer Elevation of Privilege Vulnerability

5.9
CVE-2024-38099

Windows Remote Desktop Licensing Service Denial of Service Vulnerability

7.5
CVE-2024-38095

.NET and Visual Studio Denial of Service Vulnerability

7.2
CVE-2024-38094KEV

Microsoft SharePoint Remote Code Execution Vulnerability

8.8
CVE-2024-38092

Azure CycleCloud Elevation of Privilege Vulnerability

7.5
CVE-2024-38091

Microsoft WS-Discovery Denial of Service Vulnerability

9.1
CVE-2024-38089

Microsoft Defender for IoT Elevation of Privilege Vulnerability

8.8
CVE-2024-38088

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

8.8
CVE-2024-38087

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

6.4
CVE-2024-38086

Azure Kinect SDK Remote Code Execution Vulnerability

7.8
CVE-2024-38085

Windows Graphics Component Elevation of Privilege Vulnerability

7.3
CVE-2024-38081

.NET, .NET Framework, and Visual Studio Elevation of Privilege Vulnerability

7.8
CVE-2024-38080KEV

Windows Hyper-V Elevation of Privilege Vulnerability

7.8
CVE-2024-38079

Windows Graphics Component Elevation of Privilege Vulnerability

7.5
CVE-2024-38078

Xbox Wireless Adapter Remote Code Execution Vulnerability

9.8
CVE-2024-38077

Windows Remote Desktop Licensing Service Remote Code Execution Vulnerability

9.8
CVE-2024-38076

Windows Remote Desktop Licensing Service Remote Code Execution Vulnerability

9.8
CVE-2024-38074

Windows Remote Desktop Licensing Service Remote Code Execution Vulnerability

7.5
CVE-2024-38073

Windows Remote Desktop Licensing Service Denial of Service Vulnerability

7.5
CVE-2024-38072

Windows Remote Desktop Licensing Service Denial of Service Vulnerability

7.5
CVE-2024-38071

Windows Remote Desktop Licensing Service Denial of Service Vulnerability

7.8
CVE-2024-38070

Windows LockDown Policy (WLDP) Security Feature Bypass Vulnerability

7.0
CVE-2024-38069

Windows Enroll Engine Security Feature Bypass Vulnerability

Test your stack for 2024issues

CyberStrike tests your own apps and APIs, then verifies each finding before you see it.