CVEs published October 8, 2024
234 CVEs were published on October 8, 2024: 10 critical, 127 high. 5 are now in CISA KEV.
- Published
- 234
- Critical
- 10
- High
- 127
- Medium
- 84
- Low
- 13
- Unrated
- 0
- Now in CISA KEV
- 5
- Fix available
- 167
Most affected products
- Microsoft Windows
- 67
- Microsoft Windows Server 2008 Service Pack · Microsoft… +2
- 17
- Siemens Teamcenter Visualization · Siemens Tecnomatix Plant…
- 14
- Samsung Mobile Devices
- 8
- Ivanti Avalanche
- 5
- JetBrains TeamCity
- 5
- OpenHarmony
- 5
- Microsoft Windows Server
- 4
- PHP Group PHP
- 4
- Siemens SINEC Security Monitor
- 4
Critical 10
- CVE-2024-43468Microsoft Configuration Manager Remote Code Execution VulnerabilityMicrosoft Configuration Manager
- CVE-2024-38124Windows Netlogon Elevation of Privilege VulnerabilityMicrosoft Windows Server 2008 Service Pack · Microsoft… +2
- CVE-2024-3057A flaw exists whereby a user can make a specific call to a FlashArray endpoint allowing privilege escalation.PureStorage FlashArray
- CVE-2024-8884CWE-200: Exposure of Sensitive Information to an Unauthorized Actor vulnerability exists that could cause exposure of credentials when attacSchneider Electric System Monitor application in Harmony In…
- CVE-2024-47553A vulnerability has been identified in SINEC Security Monitor (All versions < V4.9.0).Siemens SINEC Security Monitor
- CVE-2024-41798A vulnerability has been identified in SENTRON 7KM PAC3200 (All versions).Siemens SENTRON 7KM PAC3200
- CVE-2024-8943LatePoint <= 5.0.12 - Authentication BypassLatePoint Plugin
- CVE-2024-8911LatePoint <= 5.0.11 - Unauthenticated Arbitrary User Password Change via SQL InjectionLatePoint Plugin
- CVE-2024-44349A SQL injection vulnerability in login portal in AnteeoWMS before v4.7.34 allows unauthenticated attackers to execute arbitrary SQL commands
- CVE-2024-45918Fujian Kelixin Communication Command and Dispatch Platform <=7.6.6.4391 is vulnerable to SQL Injection via /client/get_gis_fence.php.
High 127
- CVE-2024-9603Type Confusion in V8 in Google Chrome prior to 129.0.6668.100 allowed a remote attacker to potentially exploit heap corruption via a craftedGoogle Chrome
- CVE-2024-9602Type Confusion in V8 in Google Chrome prior to 129.0.6668.100 allowed a remote attacker to perform an out of bounds memory write via a craftGoogle Chrome
- CVE-2024-9412Improper Authorization Vulnerability in Rockwell Automation Verve® Asset ManagerRockwell Automation Verve® Asset Manager
- CVE-2024-47773Anonymous cache poisoning via XHR requests in Discoursediscourse
- CVE-2024-47823Livewire Remote Code Execution (RCE) on File Uploadslivewire · livewire/livewire
- CVE-2024-43488Visual Studio Code extension for Arduino Remote Code Execution VulnerabilityMicrosoft Visual Studio Code
- CVE-2024-43611Windows Routing and Remote Access Service (RRAS) Remote Code Execution VulnerabilityMicrosoft Windows Server 2008 Service Pack · Microsoft… +2
- CVE-2024-43583Winlogon Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2024-43599Remote Desktop Client Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2024-43593Windows Routing and Remote Access Service (RRAS) Remote Code Execution VulnerabilityMicrosoft Windows Server 2008 Service Pack · Microsoft… +2
- CVE-2024-43592Windows Routing and Remote Access Service (RRAS) Remote Code Execution VulnerabilityMicrosoft Windows Server 2008 Service Pack · Microsoft… +2
- CVE-2024-43591Azure Command Line Integration (CLI) Elevation of Privilege VulnerabilityMicrosoft Azure CLI · Microsoft Azure Service Connector
- CVE-2024-43590Visual C++ Redistributable Installer Elevation of Privilege VulnerabilityMicrosoft Visual Studio · Microsoft Visual C++ Redistributa…
- CVE-2024-43589Windows Routing and Remote Access Service (RRAS) Remote Code Execution VulnerabilityMicrosoft Windows Server 2008 Service Pack · Microsoft… +2
- CVE-2024-43584Windows Scripting Engine Security Feature Bypass VulnerabilityMicrosoft Windows
- CVE-2024-43582Remote Desktop Protocol Server Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2024-43575Windows Hyper-V Denial of Service VulnerabilityMicrosoft Windows Server
- CVE-2024-43574Microsoft Speech Application Programming Interface (SAPI) Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2024-43572Microsoft Management Console Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2024-43567Windows Hyper-V Denial of Service VulnerabilityMicrosoft Windows Server
- CVE-2024-43565Windows Network Address Translation (NAT) Denial of Service VulnerabilityMicrosoft Windows
- CVE-2024-43564Windows Routing and Remote Access Service (RRAS) Remote Code Execution VulnerabilityMicrosoft Windows Server 2008 Service Pack · Microsoft… +2
- CVE-2024-43563Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2024-43562Windows Network Address Translation (NAT) Denial of Service VulnerabilityMicrosoft Windows
- CVE-2024-43560Microsoft Windows Storage Port Driver Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2024-43556Windows Graphics Component Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2024-43553NT OS Kernel Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2024-43552Windows Shell Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2024-43551Windows Storage Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2024-43550Windows Secure Channel Spoofing VulnerabilityMicrosoft Windows
- CVE-2024-43549Windows Routing and Remote Access Service (RRAS) Remote Code Execution VulnerabilityMicrosoft Windows Server 2008 Service Pack · Microsoft… +2
- CVE-2024-43545Windows Online Certificate Status Protocol (OCSP) Server Denial of Service VulnerabilityMicrosoft Windows Server 2008 Service Pack · Microsoft… +2
- CVE-2024-43544Microsoft Simple Certificate Enrollment Protocol Denial of Service VulnerabilityMicrosoft Windows Server 2008 Service Pack · Microsoft… +2
- CVE-2024-43528Windows Secure Kernel Mode Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2024-43522Windows Local Security Authority (LSA) Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2024-43521Windows Hyper-V Denial of Service VulnerabilityMicrosoft Windows Server
- CVE-2024-43517Microsoft ActiveX Data Objects Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2024-43514Windows Resilient File System (ReFS) Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2024-43511Windows Kernel Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2024-43509Windows Graphics Component Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2024-43501Windows Common Log File System Driver Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2024-43497DeepSpeed Remote Code Execution VulnerabilityMicrosoft DeepSpeed · deepspeed
- CVE-2024-43485.NET and Visual Studio Denial of Service VulnerabilityMicrosoft .NET · Microsoft Visual Studio +2
- CVE-2024-43484.NET, .NET Framework, and Visual Studio Denial of Service VulnerabilityMicrosoft .NET · Microsoft Visual Studio +2
- CVE-2024-43483.NET, .NET Framework, and Visual Studio Denial of Service VulnerabilityMicrosoft .NET · Microsoft Visual Studio +4
- CVE-2024-30092Windows Hyper-V Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2024-38212Windows Routing and Remote Access Service (RRAS) Remote Code Execution VulnerabilityMicrosoft Windows Server 2008 Service Pack · Microsoft… +2
- CVE-2024-43453Windows Routing and Remote Access Service (RRAS) Remote Code Execution VulnerabilityMicrosoft Windows Server 2008 Service Pack · Microsoft… +2
- CVE-2024-38262Windows Remote Desktop Licensing Service Remote Code Execution VulnerabilityMicrosoft Windows Server 2008 Service Pack · Microsoft… +2
- CVE-2024-38265Windows Routing and Remote Access Service (RRAS) Remote Code Execution VulnerabilityMicrosoft Windows Server 2008 Service Pack · Microsoft… +2
- CVE-2024-38129Windows Kerberos Elevation of Privilege VulnerabilityMicrosoft Windows Server 2022, 23H2 Edition
- CVE-2024-38029Microsoft OpenSSH for Windows Remote Code Execution VulnerabilityMicrosoft Windows Server 2022, 23H2 Edition
- CVE-2024-38149BranchCache Denial of Service VulnerabilityMicrosoft Windows
- CVE-2024-20659Windows Hyper-V Security Feature Bypass VulnerabilityMicrosoft Windows
- CVE-2024-43616Microsoft Office Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office
- CVE-2024-43615Microsoft OpenSSH for Windows Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2024-43607Windows Routing and Remote Access Service (RRAS) Remote Code Execution VulnerabilityMicrosoft Windows Server 2008 Service Pack · Microsoft… +2
- CVE-2024-43608Windows Routing and Remote Access Service (RRAS) Remote Code Execution VulnerabilityMicrosoft Windows Server 2008 Service Pack · Microsoft… +2
- CVE-2024-43601Visual Studio Code for Linux Remote Code Execution VulnerabilityMicrosoft Visual Studio Code for Linux
- CVE-2024-43581Microsoft OpenSSH for Windows Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2024-43576Microsoft Office Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office LTSC
- CVE-2024-43541Microsoft Simple Certificate Enrollment Protocol Denial of Service VulnerabilityMicrosoft Windows Server 2008 Service Pack · Microsoft… +2
- CVE-2024-43535Windows Kernel-Mode Driver Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2024-43533Remote Desktop Client Remote Code Execution VulnerabilityMicrosoft Remote Desktop client for Windows Desktop · Micro…
- CVE-2024-43532Remote Registry Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2024-43529Windows Print Spooler Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2024-43527Windows Kernel Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2024-43519Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2024-43518Windows Telephony Server Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2024-43515Internet Small Computer Systems Interface (iSCSI) Denial of Service VulnerabilityMicrosoft Windows
- CVE-2024-43506BranchCache Denial of Service VulnerabilityMicrosoft Windows
- CVE-2024-43505Microsoft Office Visio Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office
- CVE-2024-43504Microsoft Excel Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Excel +1
- CVE-2024-43503Microsoft SharePoint Elevation of Privilege VulnerabilityMicrosoft SharePoint Enterprise Server · Microsoft SharePoi…
- CVE-2024-43502Windows Kernel Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2024-38229.NET and Visual Studio Remote Code Execution VulnerabilityMicrosoft .NET · Microsoft Visual Studio +12
- CVE-2024-38261Windows Routing and Remote Access Service (RRAS) Remote Code Execution VulnerabilityMicrosoft Windows Server 2008 Service Pack · Microsoft… +2
- CVE-2024-38179Azure Stack Hyperconverged Infrastructure (HCI) Elevation of Privilege VulnerabilityMicrosoft Azure Stack HCI OS · Microsoft Azure Stack OS HCI
- CVE-2024-43516Windows Secure Kernel Mode Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2024-38097Azure Monitor Agent Elevation of Privilege VulnerabilityMicrosoft Azure Monitor
- CVE-2024-8626Logix Controllers Vulnerable to Denial-of-Service VulnerabilityRockwell Automation CompactLogix 5380 controllers · Rock… +3
- CVE-2024-47011Path Traversal in Ivanti Avalanche before version 6.4.5 allows a remote unauthenticated attacker to leak sensitive informationIvanti Avalanche
- CVE-2024-47010Path Traversal in Ivanti Avalanche before version 6.4.5 allows a remote unauthenticated attacker to bypass authentication.Ivanti Avalanche
- CVE-2024-47009Path Traversal in Ivanti Avalanche before version 6.4.5 allows a remote unauthenticated attacker to bypass authentication.Ivanti Avalanche
- CVE-2024-47008Server-side request forgery in Ivanti Avalanche before version 6.4.5 allows a remote unauthenticated attacker to leak sensitive information.Ivanti Avalanche
- CVE-2024-47007A NULL pointer dereference in WLAvalancheService.exe of Ivanti Avalanche before version 6.4.5 allows a remote unauthenticated attacker to caIvanti Avalanche
- CVE-2024-9167Under specific circumstances, insecure permissions in Ivanti Velocity License Server before version 5.2 allows a local authenticated attackeIvanti Velocity License Server
- CVE-2024-9381Path traversal in Ivanti CSA before version 5.0.2 allows a remote authenticated attacker with admin privileges to bypass restrictions.Ivanti CSA
- CVE-2024-9380An OS command injection vulnerability in the admin web console of Ivanti CSA before version 5.0.2 allows a remote authenticated attacker witIvanti CSA
- CVE-2024-9124Rockwell Automation PowerFlex 6000T CIP Security denial-of-service VulnerabilityRockwell Automation Drives - PowerFlex
- CVE-2024-7612Insecure permissions in Ivanti EPMM before 12.1.0.4 allow a local authenticated attacker to modify sensitive application components.Ivanti Endpoint Manager Mobile
- CVE-2024-8215Payload Injection Attack via Management REST interfacePayara Platform Payara Server
- CVE-2024-9005CWE-502: Deserialization of Untrusted Data vulnerability exists that could allow code to be remotely executed on the server when unsafely deSchneider Electric EcoStruxure Power Monitoring Expert
- CVE-2024-8422CWE-416: Use After Free vulnerability exists that could cause arbitrary code execution, denial of service and loss of confidentiality & inteSchneider Electric Zelio Soft
- CVE-2024-3506Camera Driver possible Buffer OverflowMilestone Systems XProtect VMS
- CVE-2024-47562A vulnerability has been identified in SINEC Security Monitor (All versions < V4.9.0).Siemens SINEC Security Monitor
- CVE-2024-47046A vulnerability has been identified in Simcenter Femap V2306 (All versions), Simcenter Femap V2401 (All versions), Simcenter Femap V2406 (AlSiemens Simcenter Femap
- CVE-2024-45475A vulnerability has been identified in Teamcenter Visualization V14.2 (All versions < V14.2.0.14), Teamcenter Visualization V14.3 (All versiSiemens Teamcenter Visualization · Siemens Tecnomatix Plant…
- CVE-2024-45474A vulnerability has been identified in Teamcenter Visualization V14.2 (All versions < V14.2.0.14), Teamcenter Visualization V14.3 (All versiSiemens Teamcenter Visualization · Siemens Tecnomatix Plant…
- CVE-2024-45473A vulnerability has been identified in Teamcenter Visualization V14.2 (All versions < V14.2.0.14), Teamcenter Visualization V14.3 (All versiSiemens Teamcenter Visualization · Siemens Tecnomatix Plant…
- CVE-2024-45472A vulnerability has been identified in Teamcenter Visualization V14.2 (All versions < V14.2.0.14), Teamcenter Visualization V14.3 (All versiSiemens Teamcenter Visualization · Siemens Tecnomatix Plant…
- CVE-2024-45471A vulnerability has been identified in Teamcenter Visualization V14.2 (All versions < V14.2.0.14), Teamcenter Visualization V14.3 (All versiSiemens Teamcenter Visualization · Siemens Tecnomatix Plant…
- CVE-2024-45470A vulnerability has been identified in Teamcenter Visualization V14.2 (All versions < V14.2.0.14), Teamcenter Visualization V14.3 (All versiSiemens Teamcenter Visualization · Siemens Tecnomatix Plant…
- CVE-2024-45469A vulnerability has been identified in Teamcenter Visualization V14.2 (All versions < V14.2.0.14), Teamcenter Visualization V14.3 (All versiSiemens Teamcenter Visualization · Siemens Tecnomatix Plant…
- CVE-2024-45468A vulnerability has been identified in Teamcenter Visualization V14.2 (All versions < V14.2.0.14), Teamcenter Visualization V14.3 (All versiSiemens Teamcenter Visualization · Siemens Tecnomatix Plant…
- CVE-2024-45467A vulnerability has been identified in Teamcenter Visualization V14.2 (All versions < V14.2.0.14), Teamcenter Visualization V14.3 (All versiSiemens Teamcenter Visualization · Siemens Tecnomatix Plant…
- CVE-2024-45466A vulnerability has been identified in Teamcenter Visualization V14.2 (All versions < V14.2.0.14), Teamcenter Visualization V14.3 (All versiSiemens Teamcenter Visualization · Siemens Tecnomatix Plant…
- CVE-2024-45465A vulnerability has been identified in Teamcenter Visualization V14.2 (All versions < V14.2.0.14), Teamcenter Visualization V14.3 (All versiSiemens Teamcenter Visualization · Siemens Tecnomatix Plant…
- CVE-2024-45464A vulnerability has been identified in Teamcenter Visualization V14.2 (All versions < V14.2.0.14), Teamcenter Visualization V14.3 (All versiSiemens Teamcenter Visualization · Siemens Tecnomatix Plant…
- CVE-2024-45463A vulnerability has been identified in Teamcenter Visualization V14.2 (All versions < V14.2.0.14), Teamcenter Visualization V14.3 (All versiSiemens Teamcenter Visualization · Siemens Tecnomatix Plant…
- CVE-2024-41981A vulnerability has been identified in Simcenter Femap V2306 (All versions), Simcenter Femap V2401 (All versions), Simcenter Femap V2406 (AlSiemens Simcenter Femap
- CVE-2024-41902A vulnerability has been identified in JT2Go (All versions < V2406.0003).Siemens JT2Go
- CVE-2023-52952A vulnerability has been identified in HiMed Cockpit 12 pro (J31032-K2017-H259) (All versions >= V11.5.1 < V11.6.2), HiMed Cockpit 14 pro+ (Siemens HiMed Cockpit 12 pro · Siemens HiMed Cockpit 14… +2
- CVE-2024-34669Out-of-bounds write in parsing h.263+ format in librtppayload.so prior to SMR Oct-2024 Release 1 allows remote attackers to execute arbitrarSamsung Mobile Devices
- CVE-2024-34668Out-of-bounds write in parsing h.263 format in librtppayload.so prior to SMR Oct-2024 Release 1 allows remote attackers to execute arbitrarySamsung Mobile Devices
- CVE-2024-34667Out-of-bounds write in parsing h.265 format in librtppayload.so prior to SMR Oct-2024 Release 1 allows remote attackers to execute arbitrarySamsung Mobile Devices
- CVE-2024-34666Out-of-bounds write in parsing h.264 format in a specific mode in librtppayload.so prior to SMR Oct-2024 Release 1 allows remote attackers tSamsung Mobile Devices
- CVE-2024-34665Out-of-bounds write in parsing h.264 format in librtppayload.so prior to SMR Oct-2024 Release 1 allows remote attackers to execute arbitrarySamsung Mobile Devices
- CVE-2024-7206Firmware extraction and Hardware SSL Pinning BypasseWeLink Zigbee Bridge Pro
- CVE-2024-21532All versions of the package ggit are vulnerable to Command Injection via the fetchTags(branch) API, which allows user input to specify the bggit
- CVE-2024-8927cgi.force_redirect configuration is bypassable due to the environment variable collisionPHP Group PHP
- CVE-2024-8926PHP CGI Parameter Injection Vulnerability (CVE-2024-4577 bypass)PHP Group PHP
- CVE-2024-37179Insecure File Operations vulnerability in SAP BusinessObjects Business Intelligence Platform (Web Intelligence)SAP_SE SAP BusinessObjects Business Intelligence Platform
- CVE-2024-25885An issue in the getcolor function in utils.py of xhtml2pdf v0.2.13 allows attackers to cause a Regular expression Denial of Service (ReDOS) xhtml2pdf
- CVE-2024-45230An issue was discovered in Django 5.1 before 5.1.1, 5.0 before 5.0.9, and 4.2 before 4.2.16.django
- CVE-2024-45880A command injection vulnerability exists in Motorola CX2L router v1.0.2 and below.
- CVE-2024-46539Insecure permissions in the Bluetooth Low Energy (BLE) component of Fire-Boltt Artillery Smart Watch NJ-R6E-10.3 allow attackers to cause a
Medium, low and unrated 97
- CVE-2024-27457Improper check for unusual or exceptional conditions in Intel(R) TDX Module firmware before version 1.5.06 may allow a privileged user to poIntel(R) TDX Module firmware
- CVE-2024-47780Information Disclosure in TYPO3 Page Treetypo3 · typo3/cms-backend
- CVE-2024-47822Directus inserts access token from query string into logsdirectus · @directus/api
- CVE-2024-43614Microsoft Defender for Endpoint for Linux Spoofing VulnerabilityMicrosoft Defender for Endpoint for Linux
- CVE-2024-43603Visual Studio Collector Service Denial of Service VulnerabilityMicrosoft Visual Studio 2015 Update · Microsoft Visual Stud…
- CVE-2024-43585Code Integrity Guard Security Feature Bypass VulnerabilityMicrosoft Windows
- CVE-2024-43571Sudo for Windows Spoofing VulnerabilityMicrosoft Windows
- CVE-2024-43570Windows Kernel Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2024-43561Windows Mobile Broadband Driver Denial of Service VulnerabilityMicrosoft Windows
- CVE-2024-43559Windows Mobile Broadband Driver Denial of Service VulnerabilityMicrosoft Windows
- CVE-2024-43558Windows Mobile Broadband Driver Denial of Service VulnerabilityMicrosoft Windows
- CVE-2024-43557Windows Mobile Broadband Driver Denial of Service VulnerabilityMicrosoft Windows
- CVE-2024-43555Windows Mobile Broadband Driver Denial of Service VulnerabilityMicrosoft Windows
- CVE-2024-43547Windows Kerberos Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2024-43546Windows Cryptographic Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2024-35215NULL pointer dereference in IP socket options processing of the Networking Stack in QNX Software Development Platform (SDP) version(s) 7.1 aBlackBerry QNX Software Development Platform
- CVE-2024-43536Windows Mobile Broadband Driver Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2024-43524Windows Mobile Broadband Driver Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2024-43523Windows Mobile Broadband Driver Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2024-43520Windows Kernel Denial of Service VulnerabilityMicrosoft Windows
- CVE-2024-43512Windows Standards-Based Storage Management Service Denial of Service VulnerabilityMicrosoft Windows Server 2012 R2 · Microsoft Windows Server
- CVE-2024-43456Windows Remote Desktop Services Tampering VulnerabilityMicrosoft Windows Server 2008 R2 Service Pack · Microsoft W…
- CVE-2024-37983Windows Resume Extensible Firmware Interface Security Feature Bypass VulnerabilityMicrosoft Windows
- CVE-2024-37979Windows Kernel Elevation of Privilege VulnerabilityMicrosoft Windows Server
- CVE-2024-37982Windows Resume Extensible Firmware Interface Security Feature Bypass VulnerabilityMicrosoft Windows
- CVE-2024-37976Windows Resume Extensible Firmware Interface Security Feature Bypass VulnerabilityMicrosoft Windows
- CVE-2024-43500Windows Resilient File System (ReFS) Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2024-43612Power BI Report Server Spoofing VulnerabilityMicrosoft Power BI Report Server - May
- CVE-2024-43609Microsoft Office Spoofing VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office
- CVE-2024-43604Outlook for Android Elevation of Privilege VulnerabilityMicrosoft Outlook for Android
- CVE-2024-43573Windows MSHTML Platform Spoofing VulnerabilityMicrosoft Windows
- CVE-2024-43554Windows Kernel-Mode Driver Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2024-43543Windows Mobile Broadband Driver Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2024-43542Windows Mobile Broadband Driver Denial of Service VulnerabilityMicrosoft Windows
- CVE-2024-43540Windows Mobile Broadband Driver Denial of Service VulnerabilityMicrosoft Windows
- CVE-2024-43538Windows Mobile Broadband Driver Denial of Service VulnerabilityMicrosoft Windows
- CVE-2024-43537Windows Mobile Broadband Driver Denial of Service VulnerabilityMicrosoft Windows
- CVE-2024-43534Windows Graphics Component Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2024-43526Windows Mobile Broadband Driver Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2024-43525Windows Mobile Broadband Driver Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2024-43513BitLocker Security Feature Bypass VulnerabilityMicrosoft Windows
- CVE-2024-43508Windows Graphics Component Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2024-43481Power BI Report Server Spoofing VulnerabilityMicrosoft Power BI Report Server - May
- CVE-2024-43480Azure Service Fabric for Linux Remote Code Execution VulnerabilityMicrosoft Azure Service Fabric for Linux
- CVE-2024-9622Resteasy-netty4-cdi: resteasy-netty4: resteasy-reactor-netty: http request smuggling leading to client timeouts in resteasy-netty4resteasy-netty4 · Red Hat JBoss Data Grid +2
- CVE-2024-9621Io.quarkiverse.cxf:quarkus-cxf: quarkus cxf may log user password and secret to application logquarkus-cxf · Red Hat Build of Apache Camel 4.4 for Quar… +1
- CVE-2024-9620Event-driven automation in ansible automation platform (aap): ansible event-driven automation (eda) lacks encryptionevent-driven-automation · Red Hat Ansible Automation Platfo…
- CVE-2024-9379SQL injection in the admin web console of Ivanti CSA before version 5.0.2 allows a remote authenticated attacker with admin privileges to ruIvanti CSA
- CVE-2024-47951In JetBrains TeamCity before 2024.07.3 stored XSS was possible via server global settingsJetBrains TeamCity
- CVE-2024-47950In JetBrains TeamCity before 2024.07.3 stored XSS was possible in Backup configuration settingsJetBrains TeamCity
- CVE-2024-47949In JetBrains TeamCity before 2024.07.3 path traversal allowed backup file write to arbitrary locationJetBrains TeamCity
- CVE-2024-47948In JetBrains TeamCity before 2024.07.3 path traversal leading to information disclosure was possible via server backupsJetBrains TeamCity
- CVE-2024-47161In JetBrains TeamCity before 2024.07.3 password could be exposed via Sonar runner REST APIJetBrains TeamCity
- CVE-2024-45330A use of externally-controlled format string in Fortinet FortiAnalyzer versions 7.4.0 through 7.4.3, 7.2.2 through 7.2.5 allows attacker to Fortinet FortiAnalyzer
- CVE-2024-33506An exposure of sensitive information to an unauthorized actor vulnerability [CWE-200] in FortiManager 7.4.2 and below, 7.2.5 and below, 7.0.Fortinet FortiManager
- CVE-2024-8431Photo Gallery, Images, Slider in Rbs Image Gallery <= 3.2.21 - Missing Authorization to Authenticated (Subscriber+) Private Gallery Title Disclosurerobosoft Robo Gallery – Photo & Image Slider
- CVE-2024-8482Royal Elementor Addons and Templates <= 1.3.986 - Authenticated (Contributor+) Stored Cross-Site Scripting via Team Member Widgetwproyal Royal Addons for Elementor – Addons and Templates K…
- CVE-2024-9207BuddyPress Docs <= 2.2.3 - Reflected Cross-Site Scriptingboonebgorges BuddyPress Docs
- CVE-2024-8488Survey Maker – Customer Satisfaction Questionnaire, Chat Survey, Calculation Form, Payment Forms <= 4.9.7 - Authenticated (Admin+) Stored Cross-Site Scriptingays-pro Survey Maker
- CVE-2024-8518CWE-20: Improper Input Validation vulnerability exists that could cause a crash of the Zelio Soft 2 application when a specially crafted proSchneider Electric Zelio Soft
- CVE-2024-8433Easy Mega Menu Plugin for WordPress – ThemeHunk <= 1.1.0 - Authenticated (Subscriber+) Stored Cross-Site ScriptingEasy Mega Menu for WordPress – ThemeHunk
- CVE-2024-8629WooCommerce Multilingual & Multicurrency with WPML <= 5.3.7 - Reflected Cross-Site Scriptingamirhelzer WPML Multilingual & Multicurrency for WooCommerce
- CVE-2024-47565A vulnerability has been identified in SINEC Security Monitor (All versions < V4.9.0).Siemens SINEC Security Monitor
- CVE-2024-47563A vulnerability has been identified in SINEC Security Monitor (All versions < V4.9.0).Siemens SINEC Security Monitor
- CVE-2024-47196A vulnerability has been identified in ModelSim (All versions < V2025.2), Questa (All versions < V2025.2).Siemens ModelSim · Siemens Questa
- CVE-2024-47195A vulnerability has been identified in ModelSim (All versions < V2024.3), Questa (All versions < V2024.3).Siemens ModelSim · Siemens Questa
- CVE-2024-47194A vulnerability has been identified in ModelSim (All versions < V2024.3), Questa (All versions < V2024.3).Siemens ModelSim · Siemens Questa
- CVE-2024-46887The web server of affected devices do not properly authenticate user request to the '/ClientArea/RuntimeInfoData.mwsl' endpoint.Siemens SIMATIC Drive Controller CPU 1504D TF · Siemens… +66
- CVE-2024-46886The web server of affected devices does not properly validate input that is used for a user redirection.Siemens SIMATIC Drive Controller CPU 1504D TF · Siemen… +103
- CVE-2024-45476A vulnerability has been identified in Teamcenter Visualization V14.2 (All versions < V14.2.0.14), Teamcenter Visualization V14.3 (All versiSiemens Teamcenter Visualization · Siemens Tecnomatix Plant…
- CVE-2022-4534Limit Login Attempts (Spam Protection) <= 5.3 - IP Address Spoofing to Protection Mechanism Bypasswp-buy Limit Login Attempts
- CVE-2024-47095Reflected Cross-Site Scripting in Follet School Solutions DestinyFollet School Solutions Destiny
- CVE-2024-8964Image Optimizer, Resizer and CDN – Sirv <= 7.2.9 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File UploadImage Optimizer, Resizer and CDN – Sirv
- CVE-2024-34672Improper input validation in SamsungVideoPlayer prior to versions 7.3.29.1 in Android 12, 7.3.36.1 in Android 13, and 7.3.41.230 in Android Samsung Mobile SamsungVideoPlayer
- CVE-2024-34671Use of implicit intent for sensitive communication in translation혻in Samsung Internet prior to version 26.0.3.1 allows local attackers to geSamsung Mobile Samsung Internet
- CVE-2024-34670Use of implicit intent for sensitive communication in Sound Assistant prior to version 6.1.0.9 allows local attackers to get sensitive inforSamsung Mobile Sound Assistant
- CVE-2024-34664Improper check for exception conditions in Knox Guard prior to SMR Oct-2024 Release 1 allows physical attackers to bypass Knox Guard in a muSamsung Mobile Devices
- CVE-2024-34663Integer overflow in libSEF.quram.so prior to SMR Oct-2024 Release 1 allows local attackers to write out-of-bounds memory.Samsung Mobile Devices
- CVE-2024-34662Improper access control in ActivityManager prior to SMR Oct-2024 Release 1 in select Android 12, 13 and SMR Sep-2024 Release 1 in select AndSamsung Mobile Devices
- CVE-2024-9021Relevanssi < 4.23.1 - Contributor+ Stored XSSRelevanssi
- CVE-2024-8983Custom Twitter Feeds < 2.2.3 - Admin+ Stored XSSCustom Twitter Feeds
- CVE-2024-9292Bridge Core <= 3.2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via ShortcodeQODE Bridge Core
- CVE-2024-21533All versions of the package ggit are vulnerable to Arbitrary Argument Injection via the clone() API, which allows specifying the remote URL ggit
- CVE-2024-9026PHP-FPM logs from children may be alteredPHP Group PHP
- CVE-2024-8925Erroneous parsing of multipart form dataPHP Group PHP
- CVE-2024-47594Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver Enterprise Portal (KMC)SAP_SE SAP NetWeaver Enterprise Portal
- CVE-2024-45282HTTP Verb Tampering in SAP S/4 HANA(Manage Bank Statements)SAP_SE SAP S/4 HANA
- CVE-2024-45278Cross-Site Scripting (XSS) vulnerability in SAP Commerce BackofficeSAP_SE SAP Commerce Backoffice
- CVE-2024-45277Prototype Pollution vulnerability in SAP HANA ClientSAP_SE SAP HANA Client · @sap/hana-client
- CVE-2024-45382Liteos_a has an Out-of-bounds Write vulnerabilityOpenHarmony
- CVE-2024-43697Liteos_a has an Improper Input Validation vulnerabilityOpenHarmony
- CVE-2024-43696Liteos_a has an Memory Leak vulnerabilityOpenHarmony
- CVE-2024-39831AccessTokenManager has an use after free vulnerabilityOpenHarmony
- CVE-2024-39806Liteos_a has an out-of-bounds Read vulnerabilityOpenHarmony
- CVE-2024-36814An arbitrary file read vulnerability in Adguard Home before v0.107.52 allows authenticated attackers to access arbitrary files as root on thgithub.com/AdguardTeam/AdGuardHome
- CVE-2024-45231An issue was discovered in Django v5.1.1, v5.0.9, and v4.2.16.django
- CVE-2024-46410PublicCMS V4.0.202406.d was discovered to contain a cross-site scripting (XSS) vulnerability via a crafted script to the Category Managment