Menu

Star on GitHub · 3.2k

2024

39,956 vulnerabilities published in 2024.

Results

39,956· Page 673/800
7.0
CVE-2024-21433

Windows Print Spooler Elevation of Privilege Vulnerability

7.0
CVE-2024-21432

Windows Update Stack Elevation of Privilege Vulnerability

7.8
CVE-2024-21431

Hypervisor-Protected Code Integrity (HVCI) Security Feature Bypass Vulnerability

5.7
CVE-2024-21430

Windows USB Attached SCSI (UAS) Protocol Remote Code Execution Vulnerability

6.8
CVE-2024-21429

Windows USB Hub Driver Remote Code Execution Vulnerability

7.5
CVE-2024-21427

Windows Kerberos Security Feature Bypass Vulnerability

7.8
CVE-2024-21426

Microsoft SharePoint Server Remote Code Execution Vulnerability

7.5
CVE-2024-21421

Azure SDK Spoofing Vulnerability

7.6
CVE-2024-21419

Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability

7.8
CVE-2024-21418

Software for Open Networking in the Cloud (SONiC) Elevation of Privilege Vulnerability

8.8
CVE-2024-21411

Skype for Consumer Remote Code Execution Vulnerability

5.5
CVE-2024-21408

Windows Hyper-V Denial of Service Vulnerability

8.1
CVE-2024-21407

Windows Hyper-V Remote Code Execution Vulnerability

9.0
CVE-2024-21400

Microsoft Azure Kubernetes Service Confidential Container Elevation of Privilege Vulnerability

7.5
CVE-2024-21392

.NET and Visual Studio Denial of Service Vulnerability

7.1
CVE-2024-21390

Microsoft Authenticator Elevation of Privilege Vulnerability

9.8
CVE-2024-21334

Open Management Infrastructure (OMI) Remote Code Execution Vulnerability

7.8
CVE-2024-21330

Open Management Infrastructure (OMI) Elevation of Privilege Vulnerability

5.5
CVE-2024-20671

Microsoft Defender Security Feature Bypass Vulnerability

8.4
CVE-2024-27758

In RPyC before 6.0.0, when a server exposes a method that calls the attribute named __array__ for a client-provided netr

7.4
CVE-2024-1529

Vulnerability in CMS Made Simple 2.2.14, which does not sufficiently encode user-controlled input, resulting in a Cross-

7.4
CVE-2024-1528

CMS Made Simple version 2.2.14, does not sufficiently encode user-controlled input, resulting in a Cross-Site Scripting

9.8
CVE-2024-1527

Unrestricted file upload vulnerability in CMS Made Simple, affecting version 2.2.14. This vulnerability allows an authen

6.3
CVE-2024-1304

Cross-site scripting vulnerability in Badger Meter Monitool that affects versions up to 4.6.3 and earlier. This vulnerab

6.5
CVE-2024-1303

Incorrectly limiting the path to a restricted directory vulnerability in Badger Meter Monitool that affects versions up

7.3
CVE-2024-1302

Information exposure vulnerability in Badger Meter Monitool affecting versions up to 4.6.3 and earlier. A local attacker

9.8
CVE-2024-1301

SQL injection vulnerability in Badger Meter Monitool affecting versions 4.6.3 and earlier. A remote attacker could send

4.7
CVE-2024-2394

A vulnerability was found in SourceCodester Employee Management System 1.0. It has been rated as critical. Affected by t

8.0
CVE-2024-23112

An authorization bypass through user-controlled key vulnerability [CWE-639] in FortiOS version 7.4.0 through 7.4.1, 7.2.

4.3
CVE-2024-21761

An improper authorization vulnerability [CWE-285] in FortiPortal version 7.2.0, and versions 7.0.6 and below reports may

7.8
CVE-2024-1618

A search path or unquoted item vulnerability in Faronics Deep Freeze Server Standard, which affects versions 8.30.020.46

6.5
CVE-2024-1227

An open redirect vulnerability, the exploitation of which could allow an attacker to create a custom URL and redirect a

7.5
CVE-2024-1226

The software does not neutralize or incorrectly neutralizes certain characters before the data is included in outgoing H

9.8
CVE-2023-48788KEV

A improper neutralization of special elements used in an sql command ('sql injection') in Fortinet FortiClientEMS versio

9.6
CVE-2023-47534

A improper neutralization of formula elements in a csv file in Fortinet FortiClientEMS version 7.2.0 through 7.2.2, 7.0.

7.5
CVE-2023-46717

An improper authentication vulnerability [CWE-287] in FortiOS versions 7.4.1 and below, versions 7.2.6 and below, and ve

8.1
CVE-2023-42790

A stack-based buffer overflow vulnerability in Fortinet FortiOS 7.4.0 through 7.4.1, FortiOS 7.2.0 through 7.2.5, FortiO

9.8
CVE-2023-42789

A out-of-bounds write vulnerability in Fortinet FortiOS 7.4.0 through 7.4.1, FortiOS 7.2.0 through 7.2.5, FortiOS 7.0.0

6.7
CVE-2023-41842

A use of externally-controlled format string vulnerability [CWE-134] vulnerability in Fortinet allows a privileged atta

8.1
CVE-2023-36554

A improper access control in Fortinet FortiManager version 7.4.0, version 7.2.0 through 7.2.3, version 7.0.0 through 7.0

6.3
CVE-2024-2393

A vulnerability was found in SourceCodester CRUD without Page Reload 1.0. It has been declared as critical. Affected by

6.5
CVE-2024-2049

Server-Side Request Forgery (SSRF) in Citrix SD-WAN Standard/Premium Editions on or after 11.4.0 and before 11.4.4.46 al

9.8
CVE-2024-28553

Tenda AC18 V15.03.05.05 has a stack overflow vulnerability in the entrys parameter fromAddressNat function.

9.8
CVE-2024-28535

Tenda AC18 V15.03.05.05 has a stack overflow vulnerability in the mitInterface parameter of fromAddressNat function.

2.4
CVE-2024-2391

A vulnerability was found in EVE-NG 5.0.1-13 and classified as problematic. Affected by this issue is some unknown funct

7.8
CVE-2024-27907

A vulnerability has been identified in Simcenter Femap (All versions < V2306.0000). The affected application contains an

7.6
CVE-2024-22045

A vulnerability has been identified in SINEMA Remote Connect Client (All versions < V3.1 SP1). The product places sensit

7.5
CVE-2024-22044

A vulnerability has been identified in SENTRON 3KC ATC6 Expansion Module Ethernet (3KC9000-8TL75) (All versions). Affect

7.5
CVE-2024-22041

A vulnerability has been identified in Cerberus PRO EN Engineering Tool (All versions), Cerberus PRO EN Fire Panel FC72x

7.5
CVE-2024-22040

A vulnerability has been identified in Cerberus PRO EN Engineering Tool (All versions), Cerberus PRO EN Fire Panel FC72x

Test your stack for 2024issues

CyberStrike tests your own apps and APIs, then verifies each finding before you see it.