Vulnerabilities published in 2024
52,042 vulnerabilities were published in 2024: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 387 of 521.
- CVE-2024-30146 HCL Domino Leap is affected by improper access control
- CVE-2024-30145 HCL Domino Volt and Domino Leap are affected by a cross-site scripting (XSS) vulnerability
- CVE-2024-30143 A path traversal vulnerability in HCL AppScan Traffic Recorder
- CVE-2024-30142 HCL BigFix Compliance is affected by a missing secure flag on a cookie
- CVE-2024-30141 HCL BigFix Compliance is vulnerable to the generation of error messages containing sensitive information
- CVE-2024-30140 HCL BigFix Compliance is affected by unvalidated redirects and forwards
- CVE-2024-3014 SourceCodester Simple Subscription Website Actions.php sql injection
- CVE-2024-30135 Sensitive Information Disclosure vulnerability affects DRYiCE AEX v10
- CVE-2024-30134 HCL Traveler for Microsoft Outlook (HTMO) is susceptible to an application modification vulnerability
- CVE-2024-30133 HCL Traveler for Microsoft Outlook (HTMO) is susceptible to a control flow vulnerability
- CVE-2024-30132 Missing default HTTP security headers affect HCL Nomad server on Domino
- CVE-2024-30130 HCL Nomad server on Domino is affected by a use of web browser cache containing sensitive information vulnerability
- CVE-2024-3013 Teledyne FLIR AX8 User Registration test_login.php improper authorization
- CVE-2024-30129 HCL Nomad server on Domino is affected by a host header injection vulnerability
- CVE-2024-30128 An open proxy vulnerability affects HCL Nomad server on Domino
- CVE-2024-30127 HCL Leap is affected by missing "no cache" headers
- CVE-2024-30126 HCL BigFix Compliance is affected by a missing X-Frame-Options Header vulnerability
- CVE-2024-30125 HCL BigFix Compliance is affected by an internal server error
- CVE-2024-30124 HCL Sametime is impacted by insecure services
- CVE-2024-30122 HCL Sametime is impacted by misconfigured security related HTTP headers
- CVE-2024-30120 HCL DRYiCE Optibot Reset Station is impacted by an Unused Parameter in the web application
- CVE-2024-3012 Tenda FH1205 GetParentControlInfo stack-based overflow
- CVE-2024-30119 HCL DRYiCE Optibot Reset Station is impacted by a missing Strict Transport Security Header
- CVE-2024-30118 HCL Connections is susceptible to a sensitive information disclosure vulnerability
- CVE-2024-30117 HCL BigFix Platform is affected by a DLL Hijack vulnerability
- CVE-2024-30115 HCL Domino Volt and Domino Leap are affected by a cross-site scripting (XSS) vulnerability
- CVE-2024-30114 HCL Leap is affected by a cross-site scripting (XSS) vulnerability
- CVE-2024-30113 HCL Leap is affected by a cross-site scripting (XSS) vulnerability
- CVE-2024-30112 HCL Connections is vulnerable to a cross-site scripting (XSS) vulnerability
- CVE-2024-30111 Missing Root Detection vulnerability affects DRYiCE AEX v10
- CVE-2024-30110 Lack of input validation vulnerability affects DRYiCE AEX v10
- CVE-2024-3011 Tenda FH1205 QuickIndex formQuickIndex stack-based overflow
- CVE-2024-30109 Lack of Clickjacking Protection vulnerability affects DRYiCE AEX v10
- CVE-2024-30107 HCL Connections is vulnerable to broken access control
- CVE-2024-30106 HCL Connections is vulnerable to an information disclosure vulnerability
- CVE-2024-30105 .NET and Visual Studio Denial of Service Vulnerability
- CVE-2024-30104 Microsoft Office Remote Code Execution Vulnerability
- CVE-2024-30103 Microsoft Outlook Remote Code Execution Vulnerability
- CVE-2024-30102 Microsoft Office Remote Code Execution Vulnerability
- CVE-2024-30101 Microsoft Office Remote Code Execution Vulnerability
- CVE-2024-30100 Microsoft SharePoint Server Remote Code Execution Vulnerability
- CVE-2024-3010 Tenda FH1205 setcfm formSetCfm stack-based overflow
- CVE-2024-30099 Windows Kernel Elevation of Privilege Vulnerability
- CVE-2024-30098 Windows Cryptographic Services Security Feature Bypass Vulnerability
- CVE-2024-30097 Microsoft Speech Application Programming Interface (SAPI) Remote Code Execution Vulnerability
- CVE-2024-30096 Windows Cryptographic Services Information Disclosure Vulnerability
- CVE-2024-30095 Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
- CVE-2024-30094 Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
- CVE-2024-30093 Windows Storage Elevation of Privilege Vulnerability
- CVE-2024-30092 Windows Hyper-V Remote Code Execution Vulnerability
- CVE-2024-30091 Win32k Elevation of Privilege Vulnerability
- CVE-2024-30090 Microsoft Streaming Service Elevation of Privilege Vulnerability
- CVE-2024-3009 Tenda FH1205 WriteFacMac formWriteFacMac command injection
- CVE-2024-30089 Microsoft Streaming Service Elevation of Privilege Vulnerability
- CVE-2024-30088 Microsoft Windows Kernel TOCTOU Race Condition
- CVE-2024-30087 Win32k Elevation of Privilege Vulnerability
- CVE-2024-30086 Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability
- CVE-2024-30085 Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability
- CVE-2024-30084 Windows Kernel-Mode Driver Elevation of Privilege Vulnerability
- CVE-2024-30083 Windows Standards-Based Storage Management Service Denial of Service Vulnerability
- CVE-2024-30082 Win32k Elevation of Privilege Vulnerability
- CVE-2024-30081 Windows NTLM Spoofing Vulnerability
- CVE-2024-30080 Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
- CVE-2024-3008 Tenda FH1205 execCommand formexeCommand stack-based overflow
- CVE-2024-30079 Windows Remote Access Connection Manager Elevation of Privilege Vulnerability
- CVE-2024-30078 Windows Wi-Fi Driver Remote Code Execution Vulnerability
- CVE-2024-30077 Windows OLE Remote Code Execution Vulnerability
- CVE-2024-30076 Windows Container Manager Service Elevation of Privilege Vulnerability
- CVE-2024-30075 Windows Link Layer Topology Discovery Protocol Remote Code Execution Vulnerability
- CVE-2024-30074 Windows Link Layer Topology Discovery Protocol Remote Code Execution Vulnerability
- CVE-2024-30073 Windows Security Zone Mapping Security Feature Bypass Vulnerability
- CVE-2024-30072 Microsoft Event Trace Log File Parsing Remote Code Execution Vulnerability
- CVE-2024-30071 Windows Remote Access Connection Manager Information Disclosure Vulnerability
- CVE-2024-30070 DHCP Server Service Denial of Service Vulnerability
- CVE-2024-3007 Tenda FH1205 NatStaticSetting fromNatStaticSetting stack-based overflow
- CVE-2024-30069 Windows Remote Access Connection Manager Information Disclosure Vulnerability
- CVE-2024-30068 Windows Kernel Elevation of Privilege Vulnerability
- CVE-2024-30067 Winlogon Elevation of Privilege Vulnerability
- CVE-2024-30066 Winlogon Elevation of Privilege Vulnerability
- CVE-2024-30065 Windows Themes Denial of Service Vulnerability
- CVE-2024-30064 Windows Kernel Elevation of Privilege Vulnerability
- CVE-2024-30063 Windows Distributed File System (DFS) Remote Code Execution Vulnerability
- CVE-2024-30062 Windows Standards-Based Storage Management Service Remote Code Execution Vulnerability
- CVE-2024-30061 Microsoft Dynamics 365 (On-Premises) Information Disclosure Vulnerability
- CVE-2024-30060 Azure Monitor Agent Elevation of Privilege Vulnerability
- CVE-2024-3006 Tenda FH1205 fromRouteStatic fromSetRouteStatic stack-based overflow
- CVE-2024-30059 Microsoft Intune for Android Mobile Application Management Tampering Vulnerability
- CVE-2024-30058 Microsoft Edge (Chromium-based) Spoofing Vulnerability
- CVE-2024-30057 Microsoft Edge for iOS Spoofing Vulnerability
- CVE-2024-30056 Microsoft Edge (Chromium-based) Information Disclosure Vulnerability
- CVE-2024-30055 Microsoft Edge (Chromium-based) Spoofing Vulnerability
- CVE-2024-30054 Microsoft Power BI Client JavaScript SDK Information Disclosure Vulnerability
- CVE-2024-30053 Azure Migrate Cross-Site Scripting Vulnerability
- CVE-2024-30052 Visual Studio Remote Code Execution Vulnerability
- CVE-2024-30051 Microsoft DWM Core Library Privilege Escalation
- CVE-2024-30050 Windows Mark of the Web Security Feature Bypass Vulnerability
- CVE-2024-3005 Cross-site scripting in LA-Studio Element Kit for Elementor
- CVE-2024-30049 Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability
- CVE-2024-30048 Dynamics 365 Customer Insights Spoofing Vulnerability
- CVE-2024-30047 Dynamics 365 Customer Insights Spoofing Vulnerability