Menu

Star on GitHub · 3.4k

2024

39,956 vulnerabilities published in 2024.

Results

19,870 of 39,956· Page 101/398
5.5
CVE-2024-47671

In the Linux kernel, the following vulnerability has been resolved: USB: usbtmc: prevent kernel-usb-infoleak The syzbo

5.5
CVE-2024-47666

In the Linux kernel, the following vulnerability has been resolved: scsi: pm80xx: Set phy->enable_completion only when

5.5
CVE-2024-47665

In the Linux kernel, the following vulnerability has been resolved: i3c: mipi-i3c-hci: Error out instead on BUG_ON() in

5.5
CVE-2024-47664

In the Linux kernel, the following vulnerability has been resolved: spi: hisi-kunpeng: Add verification for the max_fre

5.5
CVE-2024-47663

In the Linux kernel, the following vulnerability has been resolved: staging: iio: frequency: ad9834: Validate frequency

5.5
CVE-2024-47662

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Remove register from DCN35 DMCUB d

5.5
CVE-2024-47661

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Avoid overflow from uint32_t to ui

4.7
CVE-2024-47660

In the Linux kernel, the following vulnerability has been resolved: fsnotify: clear PARENT_WATCHED flags lazily In som

4.7
CVE-2024-46870

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Disable DMCUB timeout for DCN35 [

5.4
CVE-2024-46237

PHPGurukul Hospital Management System 4.0 is vulnerable to Cross Site Scripting (XSS) via the patname, pataddress, and m

5.5
CVE-2024-47420

Animate versions 23.0.7, 24.0.4 and earlier are affected by an out-of-bounds read vulnerability that could lead to discl

5.5
CVE-2024-47419

Animate versions 23.0.7, 24.0.4 and earlier are affected by an out-of-bounds read vulnerability that could lead to discl

5.5
CVE-2024-45145

Lightroom Desktop versions 7.4.1, 13.5, 12.5.1 and earlier are affected by an out-of-bounds read vulnerability that coul

5.5
CVE-2024-20787

Substance3D - Painter versions 10.0.1 and earlier are affected by an out-of-bounds read vulnerability that could lead to

6.4
CVE-2024-9451

The Embed PDF Viewer plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'height' and 'width' para

6.4
CVE-2024-9449

The Auto iFrame plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'tag' parameter in all version

6.2
CVE-2024-39440

In DRM service, there is a possible system crash due to null pointer dereference. This could lead to local denial of ser

6.2
CVE-2024-39439

In DRM service, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial o

6.5
CVE-2024-39438

In linkturbonative service, there is a possible command injection due to improper input validation. This could lead to l

6.5
CVE-2024-39437

In linkturbonative service, there is a possible command injection due to improper input validation. This could lead to l

6.5
CVE-2024-39436

In linkturbonative service, there is a possible command injection due to improper input validation. This could lead to l

4.8
CVE-2024-5968

The Photo Gallery by 10Web WordPress plugin before 1.8.28 does not properly sanitise and escape some of its Gallery set

6.5
CVE-2023-45872

An issue was discovered in Qt before 6.2.11 and 6.3.x through 6.6.x before 6.6.1. When a QML image refers to an image wh

6.1
CVE-2023-45361

An issue was discovered in VectorComponentUserLinks.php in the Vector Skin component in MediaWiki before 1.39.5 and 1.40

6.5
CVE-2023-45359

An issue was discovered in the Vector Skin component for MediaWiki before 1.39.5 and 1.40.x before 1.40.1. vector-toc-to

5.0
CVE-2024-42934

OpenIPMI before 2.0.36 has an out-of-bounds array access (for authentication type) in the ipmi_sim simulator, resulting

6.4
CVE-2024-7963

The CMSMasters Content Composer plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's multi

4.9
CVE-2024-36814

An arbitrary file read vulnerability in Adguard Home before v0.107.52 allows authenticated attackers to access arbitrary

4.2
CVE-2024-47822

Directus is a real-time API and App dashboard for managing SQL database content. Access tokens from query strings are no

4.8
CVE-2024-46410

PublicCMS V4.0.202406.d was discovered to contain a cross-site scripting (XSS) vulnerability via a crafted script to the

5.5
CVE-2024-43614

Relative path traversal in Microsoft Defender for Endpoint allows an authorized attacker to perform spoofing locally.

6.9
CVE-2024-43612

Power BI Report Server Spoofing Vulnerability

6.5
CVE-2024-43609

Microsoft Office Spoofing Vulnerability

5.7
CVE-2024-43604

Outlook for Android Elevation of Privilege Vulnerability

5.5
CVE-2024-43603

Visual Studio Collector Service Denial of Service Vulnerability

5.5
CVE-2024-43585

Code Integrity Guard Security Feature Bypass Vulnerability

6.5
CVE-2024-43573KEV

Windows MSHTML Platform Spoofing Vulnerability

5.6
CVE-2024-43571

Sudo for Windows Spoofing Vulnerability

6.4
CVE-2024-43570

Windows Kernel Elevation of Privilege Vulnerability

6.5
CVE-2024-43561

Windows Mobile Broadband Driver Denial of Service Vulnerability

6.5
CVE-2024-43559

Windows Mobile Broadband Driver Denial of Service Vulnerability

6.5
CVE-2024-43558

Windows Mobile Broadband Driver Denial of Service Vulnerability

6.5
CVE-2024-43557

Windows Mobile Broadband Driver Denial of Service Vulnerability

6.5
CVE-2024-43555

Windows Mobile Broadband Driver Denial of Service Vulnerability

5.5
CVE-2024-43554

Windows Kernel-Mode Driver Information Disclosure Vulnerability

6.5
CVE-2024-43547

Windows Kerberos Information Disclosure Vulnerability

5.6
CVE-2024-43546

Windows Cryptographic Information Disclosure Vulnerability

6.8
CVE-2024-43543

Windows Mobile Broadband Driver Remote Code Execution Vulnerability

6.5
CVE-2024-43542

Windows Mobile Broadband Driver Denial of Service Vulnerability

6.5
CVE-2024-43540

Windows Mobile Broadband Driver Denial of Service Vulnerability

Test your stack for 2024issues

CyberStrike tests your own apps and APIs, then verifies each finding before you see it.

LiveWatch live →