Menu

Star on GitHub · 3.4k

2024

39,956 vulnerabilities published in 2024.

Results

39,956· Page 375/800
6.1
CVE-2024-40733

A cross-site scripting (XSS) vulnerability in netbox v4.0.3 allows attackers to execute arbitrary web scripts or HTML vi

6.1
CVE-2024-40732

A cross-site scripting (XSS) vulnerability in netbox v4.0.3 allows attackers to execute arbitrary web scripts or HTML vi

6.1
CVE-2024-40731

A cross-site scripting (XSS) vulnerability in netbox v4.0.3 allows attackers to execute arbitrary web scripts or HTML vi

6.1
CVE-2024-40730

A cross-site scripting (XSS) vulnerability in netbox v4.0.3 allows attackers to execute arbitrary web scripts or HTML vi

6.1
CVE-2024-40729

A cross-site scripting (XSS) vulnerability in netbox v4.0.3 allows attackers to execute arbitrary web scripts or HTML vi

6.1
CVE-2024-40728

A cross-site scripting (XSS) vulnerability in netbox v4.0.3 allows attackers to execute arbitrary web scripts or HTML vi

6.1
CVE-2024-40727

A cross-site scripting (XSS) vulnerability in netbox v4.0.3 allows attackers to execute arbitrary web scripts or HTML vi

6.1
CVE-2024-40726

A cross-site scripting (XSS) vulnerability in netbox v4.0.3 allows attackers to execute arbitrary web scripts or HTML vi

7.5
CVE-2024-39698

electron-updater allows for automatic updates for Electron apps. The file `packages/electron-updater/src/windowsExecutab

6.1
CVE-2024-38972

A cross-site scripting (XSS) vulnerability in netbox v4.0.3 allows attackers to execute arbitrary web scripts or HTML vi

5.4
CVE-2024-38971

vaeThink 1.0.2 is vulnerable to stored Cross Site Scripting (XSS) in the system backend.

4.9
CVE-2024-38970

vaeThink 1.0.2 is vulnerable to Information Disclosure via the system backend,access management administrator function.

6.2
CVE-2024-31957

A vulnerability was discovered in Samsung Mobile Processors Exynos 2200 and Exynos 2400 where they lack a check for the

5.3
CVE-2024-28067

A vulnerability in Samsung Exynos Modem 5300 allows a Man-in-the-Middle (MITM) attacker to downgrade the security mode o

4.4
CVE-2024-27362

A vulnerability was discovered in Samsung Mobile Processors Exynos 1280, Exynos 2200, Exynos 1330, Exynos 1380, and Exyn

6.0
CVE-2024-27360

A vulnerability was discovered in Samsung Mobile Processors Exynos 850, Exynos 1080, Exynos 2100, Exynos 2200, Exynos 12

6.1
CVE-2024-27183

XSS vulnerability in DJ-HelpfulArticles component for Joomla.

9.8
CVE-2023-48194

Vulnerability in Tenda AC8v4 .V16.03.34.09 due to sscanf and the last digit of s8 being overwritten with \x0. After exec

6.5
CVE-2024-6237

A flaw was found in the 389 Directory Server. This flaw allows an unauthenticated user to cause a systematic server cras

6.1
CVE-2024-5652

In Docker Desktop on Windows before v4.31.0 allows a user in the docker-users group to cause a Windows Denial-of-Service

9.8
CVE-2024-39171

Directory Travel in PHPVibe v11.0.46 due to incomplete blacklist checksums and directory checks, which can lead to code

5.5
CVE-2024-39118

Mommy Heather Advanced Backups up to v3.5.3 allows attackers to write arbitrary files via restoring a crafted back up.

7.5
CVE-2024-38112KEV

Windows MSHTML Platform Spoofing Vulnerability

6.5
CVE-2024-38105

Windows Layer-2 Bridge Network Driver Denial of Service Vulnerability

8.8
CVE-2024-38104

Windows Fax Service Remote Code Execution Vulnerability

6.5
CVE-2024-38102

Windows Layer-2 Bridge Network Driver Denial of Service Vulnerability

6.5
CVE-2024-38101

Windows Layer-2 Bridge Network Driver Denial of Service Vulnerability

7.8
CVE-2024-38100

Windows File Explorer Elevation of Privilege Vulnerability

5.9
CVE-2024-38099

Windows Remote Desktop Licensing Service Denial of Service Vulnerability

7.5
CVE-2024-38095

.NET and Visual Studio Denial of Service Vulnerability

7.2
CVE-2024-38094KEV

Microsoft SharePoint Remote Code Execution Vulnerability

8.8
CVE-2024-38092

Azure CycleCloud Elevation of Privilege Vulnerability

7.5
CVE-2024-38091

Microsoft WS-Discovery Denial of Service Vulnerability

9.1
CVE-2024-38089

Microsoft Defender for IoT Elevation of Privilege Vulnerability

8.8
CVE-2024-38088

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

8.8
CVE-2024-38087

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

6.4
CVE-2024-38086

Azure Kinect SDK Remote Code Execution Vulnerability

7.8
CVE-2024-38085

Windows Graphics Component Elevation of Privilege Vulnerability

7.3
CVE-2024-38081

.NET, .NET Framework, and Visual Studio Elevation of Privilege Vulnerability

7.8
CVE-2024-38080KEV

Windows Hyper-V Elevation of Privilege Vulnerability

7.8
CVE-2024-38079

Windows Graphics Component Elevation of Privilege Vulnerability

7.5
CVE-2024-38078

Xbox Wireless Adapter Remote Code Execution Vulnerability

9.8
CVE-2024-38077

Windows Remote Desktop Licensing Service Remote Code Execution Vulnerability

9.8
CVE-2024-38076

Windows Remote Desktop Licensing Service Remote Code Execution Vulnerability

9.8
CVE-2024-38074

Windows Remote Desktop Licensing Service Remote Code Execution Vulnerability

7.5
CVE-2024-38073

Windows Remote Desktop Licensing Service Denial of Service Vulnerability

7.5
CVE-2024-38072

Windows Remote Desktop Licensing Service Denial of Service Vulnerability

7.5
CVE-2024-38071

Windows Remote Desktop Licensing Service Denial of Service Vulnerability

7.8
CVE-2024-38070

Windows LockDown Policy (WLDP) Security Feature Bypass Vulnerability

7.0
CVE-2024-38069

Windows Enroll Engine Security Feature Bypass Vulnerability

Test your stack for 2024issues

CyberStrike tests your own apps and APIs, then verifies each finding before you see it.

Watch the demo →