CVEs published in October 2024
3,640 vulnerabilities, 364 critical, 17 exploited.
- microsoft windows 10 version 1809, windows 10 version 21h2, windows 10 version 22h2 +16 more +18 moreWindows Mobile Broadband Driver Denial of Service Vulnerability6.5 Medium
- microsoft windows server 2008 service pack 2, windows server 2008 r2 service pack 1, windows server 2008 r2 service pack 1 (server core installation) +14 more +16 moreMicrosoft Simple Certificate Enrollment Protocol Denial of Service Vulnerability7.5 High
- microsoft windows 10 version 1809, windows 10 version 21h2, windows 10 version 22h2 +16 more +18 moreWindows Mobile Broadband Driver Denial of Service Vulnerability6.5 Medium
- microsoft windows 10 version 1809, windows 10 version 21h2, windows 10 version 22h2 +16 more +18 moreWindows Mobile Broadband Driver Denial of Service Vulnerability6.5 Medium
- microsoft windows 10 version 1809, windows 10 version 21h2, windows 10 version 22h2 +16 more +18 moreWindows Mobile Broadband Driver Denial of Service Vulnerability6.5 Medium
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +33 more +35 moreWindows Kernel-Mode Driver Elevation of Privilege Vulnerability7.0 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +33 more +35 moreWindows Graphics Component Information Disclosure Vulnerability6.5 Medium
- microsoft remote desktop client for windows desktop, windows 11 version 21h2, windows 11 version 22h2 +10 more +12 moreRemote Desktop Client Remote Code Execution Vulnerability8.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +33 more +35 moreRemote Registry Service Elevation of Privilege Vulnerability8.8 High
- microsoft windows 10 version 21h2, windows 10 version 22h2, windows 11 version 21h2 +13 more +15 moreWindows Print Spooler Elevation of Privilege Vulnerability7.3 High
- microsoft windows 11 version 24h2, windows 11 24h2 +1 moreWindows Kernel Elevation of Privilege Vulnerability7.8 High
- microsoft windows 10 version 1809, windows 10 version 21h2, windows 10 version 22h2 +16 more +18 moreWindows Mobile Broadband Driver Remote Code Execution Vulnerability6.8 Medium
- microsoft windows 10 version 1809, windows 10 version 21h2, windows 10 version 22h2 +16 more +18 moreWindows Mobile Broadband Driver Remote Code Execution Vulnerability6.8 Medium
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +33 more +35 moreMicrosoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability8.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +33 more +35 moreWindows Telephony Server Remote Code Execution Vulnerability8.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +33 more +35 moreInternet Small Computer Systems Interface (iSCSI) Denial of Service Vulnerability7.5 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +26 more +28 moreBitLocker Security Feature Bypass Vulnerability6.4 Medium
- microsoft windows 11 version 22h2, windows 11 version 22h3, windows 11 version 23h2 +6 more +8 moreWindows Graphics Component Information Disclosure Vulnerability5.5 Medium
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +30 more +32 moreBranchCache Denial of Service Vulnerability7.5 High
- microsoft office, 365 apps, 365 apps for enterprise +4 more +6 moreMicrosoft Office Visio Remote Code Execution Vulnerability7.8 High
- microsoft excel, 365 apps, 365 apps for enterprise +6 more +8 moreMicrosoft Excel Remote Code Execution Vulnerability7.8 High
- microsoft sharepoint enterprise server 2016, sharepoint server 2019, sharepoint server subscription edition +1 more +3 moreMicrosoft SharePoint Elevation of Privilege Vulnerability7.8 High
- microsoft windows 10 version 1809, windows 10 version 21h2, windows 10 version 22h2 +5 more +7 moreWindows Kernel Elevation of Privilege Vulnerability7.1 High
- microsoft power bi report server, power bi report server - may 2024 +1 morePower BI Report Server Spoofing Vulnerability6.5 Medium
- microsoft azure service fabric for linux, azure service fabric +1 moreAzure Service Fabric for Linux Remote Code Execution Vulnerability6.6 Medium
- microsoft windows server 2008 service pack 2, windows server 2008 r2 service pack 1, windows server 2008 r2 service pack 1 (server core installation) +14 more +16 moreWindows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability7.8 High
- microsoft azure stack hci os, azure stack os hci, azure stack hci +2 moreAzure Stack Hyperconverged Infrastructure (HCI) Elevation of Privilege Vulnerability8.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +23 more +25 moreWindows Secure Kernel Mode Elevation of Privilege Vulnerability7.8 High
- microsoft azure monitor, azure monitor agent +1 moreAzure Monitor Agent Elevation of Privilege Vulnerability7.1 High
- purestorage flasharrayA flaw exists whereby a user can make a specific call to a FlashArray endpoint allowing privilege...9.8 Critical
- rockwell automation 1756-en4tr, compact guardlogix® 5380 controllers, compactlogix 5380 controllers +8 more +10 moreLogix Controllers Vulnerable to Denial-of-Service Vulnerability8.7 High
- ivanti avalanchePath Traversal in Ivanti Avalanche before version 6.4.5 allows a remote unauthenticated attacker...7.5 High
- ivanti avalanchePath Traversal in Ivanti Avalanche before version 6.4.5 allows a remote unauthenticated attacker...7.3 High
- ivanti avalanchePath Traversal in Ivanti Avalanche before version 6.4.5 allows a remote unauthenticated attacker...7.3 High
- ivanti avalancheServer-side request forgery in Ivanti Avalanche before version 6.4.5 allows a remote...7.5 High
- ivanti avalancheA NULL pointer dereference in WLAvalancheService.exe of Ivanti Avalanche before version 6.4.5...7.5 High
- ivanti velocity license serverUnder specific circumstances, insecure permissions in Ivanti Velocity License Server before...7.8 High
- red hat jboss data grid 7, jboss enterprise application platform 7, jboss enterprise application platform 8 +1 more +3 moreResteasy-netty4-cdi: resteasy-netty4: resteasy-reactor-netty: http request smuggling leading to client timeouts in resteasy-netty45.3 Medium
- red hat build of apache camel 4.4 for quarkus 3.8Io.quarkiverse.cxf:quarkus-cxf: quarkus cxf may log user password and secret to application log5.3 Medium
- red hat ansible automation platform 2Event-driven automation in ansible automation platform (aap): ansible event-driven automation (eda) lacks encryption5.3 Medium
- ivanti csa (cloud services appliance), endpoint manager cloud services appliance +1 morePath traversal in Ivanti CSA before version 5.0.2 allows a remote authenticated attacker with...7.2 High
- ivanti cloud services appliance (csa), csa (cloud services appliance), endpoint manager cloud services appliance +2 moreAn OS command injection vulnerability in the admin web console of Ivanti CSA before version 5.0.2...7.2 High
- ivanti cloud services appliance (csa), csa (cloud services appliance), endpoint manager cloud services appliance +2 moreSQL injection in the admin web console of Ivanti CSA before version 5.0.2 allows a remote...6.5 Medium
- rockwell automation drives - powerflex 6000t, rockwellautomation powerflex 6000t firmware, powerflex 600t +2 moreRockwell Automation PowerFlex 6000T CIP Security denial-of-service Vulnerability8.2 High
- ivanti endpoint manager mobileInsecure permissions in Ivanti EPMM before 12.1.0.4 allow a local authenticated attacker to...8.8 High
- jetbrains teamcityIn JetBrains TeamCity before 2024.07.3 stored XSS was possible via server global settings3.5 Low
- jetbrains teamcityIn JetBrains TeamCity before 2024.07.3 stored XSS was possible in Backup configuration settings3.5 Low
- jetbrains teamcityIn JetBrains TeamCity before 2024.07.3 path traversal allowed backup file write to arbitrary...4.9 Medium
- jetbrains teamcityIn JetBrains TeamCity before 2024.07.3 path traversal leading to information disclosure was...4.9 Medium
- jetbrains teamcityIn JetBrains TeamCity before 2024.07.3 password could be exposed via Sonar runner REST API4.3 Medium
- Show moreLoading…