Vulnerabilities published in 2024
52,042 vulnerabilities were published in 2024: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 417 of 521.
- CVE-2024-26194 Secure Boot Security Feature Bypass Vulnerability
- CVE-2024-26193 Azure Migrate Remote Code Execution Vulnerability
- CVE-2024-26192 Microsoft Edge (Chromium-based) Information Disclosure Vulnerability
- CVE-2024-26191 Microsoft SQL Server Native Scoring Remote Code Execution Vulnerability
- CVE-2024-26190 Microsoft QUIC Denial of Service Vulnerability
- CVE-2024-2619 Elementor Header & Footer Builder <= 1.6.26 - Authenticated (Author+) HTML Injection
- CVE-2024-26189 Secure Boot Security Feature Bypass Vulnerability
- CVE-2024-26188 Microsoft Edge (Chromium-based) Spoofing Vulnerability
- CVE-2024-26186 Microsoft SQL Server Native Scoring Remote Code Execution Vulnerability
- CVE-2024-26185 Windows Compressed Folder Tampering Vulnerability
- CVE-2024-26184 Secure Boot Security Feature Bypass Vulnerability
- CVE-2024-26183 Windows Kerberos Denial of Service Vulnerability
- CVE-2024-26182 Windows Kernel Elevation of Privilege Vulnerability
- CVE-2024-26181 Windows Kernel Denial of Service Vulnerability
- CVE-2024-26180 Secure Boot Security Feature Bypass Vulnerability
- CVE-2024-2618 Elementor Header & Footer Builder <= 1.6.26 - Authenticated (Contributor+) Stored Cross-Site Scripting
- CVE-2024-26179 Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
- CVE-2024-26178 Windows Kernel Elevation of Privilege Vulnerability
- CVE-2024-26177 Windows Kernel Information Disclosure Vulnerability
- CVE-2024-26176 Windows Kernel Elevation of Privilege Vulnerability
- CVE-2024-26175 Secure Boot Security Feature Bypass Vulnerability
- CVE-2024-26174 Windows Kernel Information Disclosure Vulnerability
- CVE-2024-26173 Windows Kernel Elevation of Privilege Vulnerability
- CVE-2024-26172 Windows DWM Core Library Information Disclosure Vulnerability
- CVE-2024-26171 Secure Boot Security Feature Bypass Vulnerability
- CVE-2024-26170 Windows Composite Image File System (CimFS) Elevation of Privilege Vulnerability
- CVE-2024-2617 Security feature bypass in RTU500 series CMU firmware
- CVE-2024-26169 Microsoft Windows Error Reporting Service Improper Privilege Management
- CVE-2024-26168 Secure Boot Security Feature Bypass Vulnerability
- CVE-2024-26167 Microsoft Edge for Android Spoofing Vulnerability
- CVE-2024-26166 Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
- CVE-2024-26165 Visual Studio Code Elevation of Privilege Vulnerability
- CVE-2024-26164 Microsoft Django Backend for SQL Server Remote Code Execution Vulnerability
- CVE-2024-26163 Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability
- CVE-2024-26162 Microsoft ODBC Driver Remote Code Execution Vulnerability
- CVE-2024-26161 Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
- CVE-2024-26160 Windows Cloud Files Mini Filter Driver Information Disclosure Vulnerability
- CVE-2024-2616 Memory corruption in Firefox ESR
- CVE-2024-26159 Microsoft ODBC Driver Remote Code Execution Vulnerability
- CVE-2024-26158 Microsoft Install Service Elevation of Privilege Vulnerability
- CVE-2024-26157 ETIC Telecom Remote Access Server (RAS) Cross-site Scripting
- CVE-2024-26156 ETIC Telecom Remote Access Server (RAS) Cross-site Scripting
- CVE-2024-26155 ETIC Telecom Remote Access Server (RAS) Cleartext Transmission of Sensitive Information
- CVE-2024-26154 ETIC Telecom Remote Access Server (RAS) Cross-site Scripting
- CVE-2024-26153 ETIC Telecom Remote Access Server (RAS) Cross-Site Request Forgery
- CVE-2024-26152 Label Studio vulnerable to Cross-site Scripting if `<Choices>` or `<Labels>` are used in labeling config
- CVE-2024-26151 Potentially untrusted input is rendered as HTML in final output
- CVE-2024-26150 `@backstage/backend-common` vulnerable to path traversal through symlinks
- CVE-2024-2615 Memory corruption in Firefox
- CVE-2024-26149 Vyper _abi_decode Memory Overflow
- CVE-2024-26148 Querybook's Stored Cross-Site Scripting vulnerability allows Privilege Elevation
- CVE-2024-26147 Helm's Missing YAML Content Leads To Panic
- CVE-2024-26146 Possible Denial of Service Vulnerability in Rack Header Parsing
- CVE-2024-26145 Uninvited user is able to join and mark the attendance of the the private event
- CVE-2024-26144 Possible Sensitive Session Information Leak in Active Storage
- CVE-2024-26143 Rails Possible XSS Vulnerability in Action Controller
- CVE-2024-26142 Rails possible ReDoS vulnerability in Accept header parsing in Action Dispatch
- CVE-2024-26141 Possible DoS Vulnerability with Range Header in Rack
- CVE-2024-26140 com.yetanalytics/lrs has Cross-site Scripting Vulnerability in Statement Browser
- CVE-2024-2614 Memory corruption in Firefox
- CVE-2024-26139 OpenCTI Authenticated Privilege Escalation
- CVE-2024-26138 License information is public, exposing instance id and license holder details
- CVE-2024-26136 kedi ElectronCord's Discord Token is public
- CVE-2024-26135 MeshCentral cross-site websocket hijacking (CSWSH) vulnerability
- CVE-2024-26134 CBOR2 decoder has potential buffer overflow
- CVE-2024-26133 EventStoreDB Projections Subsystem has potential password leak
- CVE-2024-26132 Element Android can be asked to share internal files.
- CVE-2024-26131 Element Android Intent Redirection
- CVE-2024-26130 cryptography NULL pointer dereference with pkcs12.serialize_key_and_certificates when called with a non-matching certificate and private key and an hmac_hash override
- CVE-2024-2613 Denial of service in Firefox
- CVE-2024-26129 Prestashop vulnerable to path disclosure in JavaScript variable
- CVE-2024-26128 baserCMS Cross-site Scripting vulnerability in Content Management
- CVE-2024-26127 Adobe Experience Manager | Improper Input Validation (CWE-20)
- CVE-2024-26126 Adobe Experience Manager | Improper Input Validation (CWE-20)
- CVE-2024-26125 Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)
- CVE-2024-26124 Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)
- CVE-2024-26123 Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)
- CVE-2024-26122 Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)
- CVE-2024-26121 Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)
- CVE-2024-26120 Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)
- CVE-2024-2612 Use after free in Firefox
- CVE-2024-26119 Adobe Experience Manager | Information Exposure (CWE-200)
- CVE-2024-26118 Adobe Experience Manager | Cross-site Scripting (Reflected XSS) (CWE-79)
- CVE-2024-26117 Adobe Experience Manager | Cross-site Scripting (Reflected XSS) (CWE-79)
- CVE-2024-26116 Adobe Experience Manager | Cross-site Scripting (Reflected XSS) (CWE-79)
- CVE-2024-26115 Adobe Experience Manager | Cross-site Scripting (Reflected XSS) (CWE-79)
- CVE-2024-26114 Adobe Experience Manager | Cross-site Scripting (Reflected XSS) (CWE-79)
- CVE-2024-26113 Adobe Experience Manager | Cross-site Scripting (Reflected XSS) (CWE-79)
- CVE-2024-26111 Adobe Experience Manager | Cross-site Scripting (Reflected XSS) (CWE-79)
- CVE-2024-26110 Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)
- CVE-2024-2611 Security feature bypass in Firefox
- CVE-2024-26107 Adobe Experience Manager | Cross-site Scripting (Reflected XSS) (CWE-79)
- CVE-2024-26106 Adobe Experience Manager | Cross-site Scripting (Reflected XSS) (CWE-79)
- CVE-2024-26105 Adobe Experience Manager | Cross-site Scripting (Reflected XSS) (CWE-79)
- CVE-2024-26104 Adobe Experience Manager | Cross-site Scripting (Reflected XSS) (CWE-79)
- CVE-2024-26103 Adobe Experience Manager | Cross-site Scripting (Reflected XSS) (CWE-79)
- CVE-2024-26102 Adobe Experience Manager | Cross-site Scripting (Reflected XSS) (CWE-79)
- CVE-2024-26101 Adobe Experience Manager | Cross-site Scripting (Reflected XSS) (CWE-79)
- CVE-2024-2610 Security feature bypass in Firefox
- CVE-2024-26098 Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)