CVE-2024-28xxx records

Browse official CVE Program records with vulnerability descriptions, affected products, CVSS scores and source references. Browse by the year and numeric range in each CVE ID; publication and update dates appear on each record.

585 records · Page 1 of 6

• CVE-2024-28999: SolarWinds Platform Race Condition Vulnerability 6.4 Medium

  The SolarWinds Platform was determined to be affected by a Race Condition Vulnerability affecting the web console.

  Updated 2024-08-02
• CVE-2024-28996: SolarWinds Platform SWQL Injection Vulnerability 7.5 High

  The SolarWinds Platform was determined to be affected by a SWQL Injection Vulnerability. Attack complexity is high for this vulnerability.  

  Updated 2024-08-02
• CVE-2024-28995: SolarWinds Serv-U L Directory Transversal Vulnerability 8.6 High

  SolarWinds Serv-U was susceptible to a directory transversal vulnerability that would allow access to read sensitive files on the host machine.

  Updated 2025-10-21
• CVE-2024-28993: SolarWinds Access Rights Manager Directory Traversal and Information Disclosure Vulnerability 7.6 High

  The SolarWinds Access Rights Manager was susceptible to a Directory Traversal and Information Disclosure Vulnerability. This vulnerability allows an unauthenticated user to perform arbitrary file deletion and leak sensitive information.

  Updated 2024-08-02
• CVE-2024-28992: SolarWinds Access Rights Manager Directory Traversal and Information Disclosure Vulnerability 7.6 High

  The SolarWinds Access Rights Manager was susceptible to a Directory Traversal and Information Disclosure Vulnerability. This vulnerability allows an unauthenticated user to perform arbitrary file deletion and leak sensitive information.

  Updated 2024-08-02
• CVE-2024-28991: SolarWinds Access Rights Manager (ARM) Deserialization of Untrusted Data Remote Code Execution 9.0 Critical

  SolarWinds Access Rights Manager (ARM) was found to be susceptible to a remote code execution vulnerability. If exploited, this vulnerability would allow an authenticated user to abuse the service, resulting in remote code execution.

  Updated 2024-09-17
• CVE-2024-28990: SolarWinds Access Rights Manager (ARM) Hardcoded Credentials Authentication Bypass Vulnerability 6.3 Medium

  SolarWinds Access Rights Manager (ARM) was found to contain a hard-coded credential authentication bypass vulnerability. If exploited, this vulnerability would allow access to the RabbitMQ management console. We thank Trend Micro Zero Day Initiative (ZDI) for its ongoing partnership in coordinating with SolarWinds on responsible disclosure of this and other potential vulnerabilities.

  Updated 2024-09-12
• CVE-2024-28989: SolarWinds Web Help Desk Cryptographic Key Management Vulnerability 5.5 Medium

  SolarWinds Web Help Desk was found to have a hardcoded cryptographic key that could allow the disclosure of sensitive information from the software.

  Updated 2025-02-11
• CVE-2024-28988: SolarWinds Web Help Desk Java Deserialization Remote Code Execution Vulnerability 9.8 Critical

  SolarWinds Web Help Desk was found to be susceptible to a Java Deserialization Remote Code Execution vulnerability that, if exploited, would allow an attacker to run commands on the host machine. This vulnerability was found by the ZDI team after researching a previous vulnerability and providing this report. The ZDI team was able to discover an unauthenticated attack during their research. 

  Updated 2026-02-26
• CVE-2024-28987: SolarWinds Web Help Desk Hardcoded Credential Vulnerability 9.1 Critical

  The SolarWinds Web Help Desk (WHD) software is affected by a hardcoded credential vulnerability, allowing remote unauthenticated user to access internal functionality and modify data.

  Updated 2025-10-21
• CVE-2024-28986: SolarWinds Web Help Desk Java Deserialization Remote Code Execution Vulnerability 9.8 Critical

  SolarWinds Web Help Desk was found to be susceptible to a Java Deserialization Remote Code Execution vulnerability that, if exploited, would allow an attacker to run commands on the host machine. While it was reported as an unauthenticated vulnerability, SolarWinds has been unable to reproduce it without authentication after thorough testing.   However, out of an abundance of caution, we recomm

  Updated 2025-10-21
• CVE-2024-28984: Hitachi Vantara Pentaho Business Analytics Server - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') 8.8 High

  Hitachi Vantara Pentaho Business Analytics Server prior to versions 10.1.0.0 and 9.3.0.7, including 8.3.x allow a malicious URL to inject content into the Analyzer plugin interface.

  Updated 2024-08-02
• CVE-2024-28983: Hitachi Vantara Pentaho Business Analytics Server - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') 8.8 High

  Hitachi Vantara Pentaho Business Analytics Server prior to versions 10.1.0.0 and 9.3.0.7, including 8.3.x allow a malicious URL to inject content into the Analyzer plugin interface.

  Updated 2024-09-11
• CVE-2024-28982: Hitachi Vantara Pentaho Business Analytics Server - Improper Restriction of XML External Entity Reference 7.1 High

  Hitachi Vantara Pentaho Business Analytics Server versions before 10.1.0.0 and 9.3.0.7, including 8.3.x do not correctly protect the ACL service endpoint of the Pentaho User Console against XML External Entity Reference.

  Updated 2024-09-11
• CVE-2024-28981: Hitachi Vantara Pentaho Data Integration & Analytics - Insufficiently Protected Credentials 8.5 High

  Hitachi Vantara Pentaho Data Integration & Analytics versions before 10.1.0.0 and 9.3.0.8, including 8.3.x, discloses database passwords when searching metadata injectable fields.

  Updated 2024-09-12
• CVE-2024-28980: Dell RecoverPoint for VMs, version(s) 6.0.x contain(s) a Use of a Broken or Risky Cryptographic Algorithm vulnerability in the SSH. An unauthenticated attacker with remote access c 6.5 Medium

  Dell RecoverPoint for VMs, version(s) 6.0.x contain(s) a Use of a Broken or Risky Cryptographic Algorithm vulnerability in the SSH. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Remote execution.

  Updated 2024-12-13
• CVE-2024-28979: Dell OpenManage Enterprise, versions 4.1.0 and older, contains an Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability. A high privile 5.1 Medium

  Dell OpenManage Enterprise, versions 4.1.0 and older, contains an Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Script injection.

  Updated 2024-08-20
• CVE-2024-28978: Dell OpenManage Enterprise, versions 3.10 and 4.0, contains an Improper Access Control vulnerability. A high privileged remote attacker could potentially exploit this vulnerability 5.2 Medium

  Dell OpenManage Enterprise, versions 3.10 and 4.0, contains an Improper Access Control vulnerability. A high privileged remote attacker could potentially exploit this vulnerability, leading to unauthorized access to resources.

  Updated 2024-08-02
• CVE-2024-28977: Dell Repository Manager, versions 3.4.2 through 3.4.4,contains a Path Traversal vulnerability in logger module. A local attacker with low privileges could potentially exploit this 3.3 Low

  Dell Repository Manager, versions 3.4.2 through 3.4.4,contains a Path Traversal vulnerability in logger module. A local attacker with low privileges could potentially exploit this vulnerability to gain unauthorized read access to the files stored on the server filesystem with the privileges of the running web application.

  Updated 2024-08-02
• CVE-2024-28976: Dell Repository Manager, versions prior to 3.4.5, contains a Path Traversal vulnerability in API module. A local attacker with low privileges could potentially exploit this vulnera 8.8 High

  Dell Repository Manager, versions prior to 3.4.5, contains a Path Traversal vulnerability in API module. A local attacker with low privileges could potentially exploit this vulnerability to gain unauthorized write access to the files stored on the server filesystem with the privileges of the running web application.

  Updated 2024-08-21
• CVE-2024-28974: Dell Data Protection Advisor, version(s) 19.9, contain(s) an Inadequate Encryption Strength vulnerability. A low privileged attacker with remote access could potentially exploit th 7.6 High

  Dell Data Protection Advisor, version(s) 19.9, contain(s) an Inadequate Encryption Strength vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Denial of service.

  Updated 2024-08-02
• CVE-2024-28973: Dell PowerProtect DD, versions prior to 8.0, LTS 7.13.1.0, LTS 7.10.1.30, LTS 7.7.5.40 contain a Stored Cross-Site Scripting Vulnerability. A remote high privileged attacker could 5.9 Medium

  Dell PowerProtect DD, versions prior to 8.0, LTS 7.13.1.0, LTS 7.10.1.30, LTS 7.7.5.40 contain a Stored Cross-Site Scripting Vulnerability. A remote high privileged attacker could potentially exploit this vulnerability, leading to the storage of malicious HTML or JavaScript codes in a trusted application data store. When a high privileged victim user accesses the data store through their browsers,

  Updated 2024-08-02
• CVE-2024-28972: Dell InsightIQ, Verion 5.0.0, contains a use of a broken or risky cryptographic algorithm vulnerability. An unauthenticated remote attacker could potentially exploit this vulnerabi 5.9 Medium

  Dell InsightIQ, Verion 5.0.0, contains a use of a broken or risky cryptographic algorithm vulnerability. An unauthenticated remote attacker could potentially exploit this vulnerability, leading to information disclosure.

  Updated 2024-09-03
• CVE-2024-28971: Dell Update Manager Plugin, versions 1.4.0 through 1.5.0, contains a Plain-text Password Storage Vulnerability in Log file. A remote high privileged attacker could potentially expl 3.5 Low

  Dell Update Manager Plugin, versions 1.4.0 through 1.5.0, contains a Plain-text Password Storage Vulnerability in Log file. A remote high privileged attacker could potentially exploit this vulnerability, leading to the disclosure of certain user credentials. The attacker may be able to use the exposed credentials to access the vulnerable application with privileges of the compromised account.

  Updated 2024-08-02
• CVE-2024-28970: Dell Client BIOS contains an Out-of-bounds Write vulnerability. A local authenticated malicious user with admin privileges could potentially exploit this vulnerability, leading to 4.7 Medium

  Dell Client BIOS contains an Out-of-bounds Write vulnerability. A local authenticated malicious user with admin privileges could potentially exploit this vulnerability, leading to platform denial of service.

  Updated 2024-08-02
• CVE-2024-28969: Dell SCG, versions prior to 5.24.00.00, contain an Improper Access Control vulnerability in the SCG exposed for an internal update REST API (if enabled by Admin user from UI). A re 4.3 Medium

  Dell SCG, versions prior to 5.24.00.00, contain an Improper Access Control vulnerability in the SCG exposed for an internal update REST API (if enabled by Admin user from UI). A remote low privileged attacker could potentially exploit this vulnerability, leading to the execution of certain APIs applicable only for Admin Users on the application's backend database that could potentially allow an un

  Updated 2024-08-02
• CVE-2024-28968: Dell SCG, versions prior to 5.24.00.00, contain an Improper Access Control vulnerability in the SCG exposed for internal email and collection settings REST APIs (if enabled by Admi 5.4 Medium

  Dell SCG, versions prior to 5.24.00.00, contain an Improper Access Control vulnerability in the SCG exposed for internal email and collection settings REST APIs (if enabled by Admin user from UI). A remote low privileged attacker could potentially exploit this vulnerability, leading to the execution of certain APIs applicable only for Admin Users on the application's backend database that could po

  Updated 2024-08-02
• CVE-2024-28967: Dell SCG, versions prior to 5.24.00.00, contain an Improper Access Control vulnerability in the SCG exposed for an internal maintenance REST API (if enabled by Admin user from UI). 5.4 Medium

  Dell SCG, versions prior to 5.24.00.00, contain an Improper Access Control vulnerability in the SCG exposed for an internal maintenance REST API (if enabled by Admin user from UI). A remote low privileged attacker could potentially exploit this vulnerability, leading to the execution of certain APIs applicable only for Admin Users on the application's backend database that could potentially allow

  Updated 2024-08-02
• CVE-2024-28966: Dell SCG, versions prior to 5.24.00.00, contain an Improper Access Control vulnerability in the SCG exposed for an internal update REST API (if enabled by Admin user from UI). A re 5.4 Medium

  Dell SCG, versions prior to 5.24.00.00, contain an Improper Access Control vulnerability in the SCG exposed for an internal update REST API (if enabled by Admin user from UI). A remote low privileged attacker could potentially exploit this vulnerability, leading to the execution of certain APIs applicable only for Admin Users on the application's backend database that could potentially allow an un

  Updated 2024-08-02
• CVE-2024-28965: Dell SCG, versions prior to 5.24.00.00, contain an Improper Access Control vulnerability in the SCG exposed for an internal enable REST API (if enabled by Admin user from UI). A re 5.4 Medium

  Dell SCG, versions prior to 5.24.00.00, contain an Improper Access Control vulnerability in the SCG exposed for an internal enable REST API (if enabled by Admin user from UI). A remote low privileged attacker could potentially exploit this vulnerability, leading to the execution of certain Internal APIs applicable only for Admin Users on the application's backend database that could potentially al

  Updated 2024-08-02
• CVE-2024-28964: Dell Common Event Enabler, version 8.9.10.0 and prior, contain an insecure deserialization vulnerability in CAVATools. A local unauthenticated attacker could potentially exploit th 7.8 High

  Dell Common Event Enabler, version 8.9.10.0 and prior, contain an insecure deserialization vulnerability in CAVATools. A local unauthenticated attacker could potentially exploit this vulnerability, leading to arbitrary code execution in the context of the logged in user. Exploitation of this issue requires a victim to open a malicious file.

  Updated 2024-08-02
• CVE-2024-28963: Telemetry Dashboard v1.0.0.7 for Dell ThinOS 2402 contains a sensitive information disclosure vulnerability. An unauthenticated user with local access to the device could exploit t 6.2 Medium

  Telemetry Dashboard v1.0.0.7 for Dell ThinOS 2402 contains a sensitive information disclosure vulnerability. An unauthenticated user with local access to the device could exploit this vulnerability to read sensitive proxy settings information.

  Updated 2024-08-02
• CVE-2024-28962: Dell Command | Update, Dell Update, and Alienware Update UWP, versions prior to 5.4, contain an Exposed Dangerous Method or Function vulnerability. An unauthenticated attacker with 6.5 Medium

  Dell Command | Update, Dell Update, and Alienware Update UWP, versions prior to 5.4, contain an Exposed Dangerous Method or Function vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to denial of service.

  Updated 2024-08-06
• CVE-2024-28961: Dell OpenManage Enterprise, versions 4.0.0 and 4.0.1, contains a sensitive information disclosure vulnerability. A local low privileged malicious user could potentially exploit thi 6.3 Medium

  Dell OpenManage Enterprise, versions 4.0.0 and 4.0.1, contains a sensitive information disclosure vulnerability. A local low privileged malicious user could potentially exploit this vulnerability to obtain credentials leading to unauthorized access with elevated privileges. This could lead to further attacks, thus Dell recommends customers to upgrade at the earliest opportunity.

  Updated 2024-08-02
• CVE-2024-28960: An issue was discovered in Mbed TLS 2.18.0 through 2.28.x before 2.28.8 and 3.x before 3.6.0, and Mbed Crypto. The PSA Crypto API mishandles shared memory. 8.2 High

  An issue was discovered in Mbed TLS 2.18.0 through 2.28.x before 2.28.8 and 3.x before 3.6.0, and Mbed Crypto. The PSA Crypto API mishandles shared memory.

  Updated 2025-11-04
• CVE-2024-28957: Generation of predictable identifiers issue exists in Cente middleware TCP/IP Network Series. If this vulnerability is exploited, a remote unauthenticated attacker may interfere co 5.3 Medium

  Generation of predictable identifiers issue exists in Cente middleware TCP/IP Network Series. If this vulnerability is exploited, a remote unauthenticated attacker may interfere communications by predicting some packet header IDs of the device.

  Updated 2024-08-29
• CVE-2024-28956: Exposure of Sensitive Information in Shared Microarchitectural Structures during Transient Execution for some Intel(R) Processors may allow an authenticated user to potentially ena 5.7 Medium

  Exposure of Sensitive Information in Shared Microarchitectural Structures during Transient Execution for some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.

  Updated 2026-10-15
• CVE-2024-28955: Affected devices create coredump files when crashed, storing them with world-readable permission. Any local user of the device can examine the coredump files, and research the memo 5.9 Medium

  Affected devices create coredump files when crashed, storing them with world-readable permission. Any local user of the device can examine the coredump files, and research the memory contents. As for the details of affected product names, model numbers, and versions, refer to the information provided by the respective vendors listed under [References].

  Updated 2025-11-04
• CVE-2024-28954: Incorrect default permissions for some Intel(R) Graphics Driver installers may allow an authenticated user to potentially enable escalation of privilege via local access. 5.4 Medium

  Incorrect default permissions for some Intel(R) Graphics Driver installers may allow an authenticated user to potentially enable escalation of privilege via local access.

  Updated 2026-02-26
• CVE-2024-28953: Uncontrolled search path in some EMON software before version 11.44 may allow an authenticated user to potentially enable escalation of privilege via local access. 5.4 Medium

  Uncontrolled search path in some EMON software before version 11.44 may allow an authenticated user to potentially enable escalation of privilege via local access.

  Updated 2024-08-14
• CVE-2024-28952: Uncontrolled search path for some Intel(R) IPP software for Windows before version 2021.12.0 may allow an authenticated user to potentially enable escalation of privilege via local 5.4 Medium

  Uncontrolled search path for some Intel(R) IPP software for Windows before version 2021.12.0 may allow an authenticated user to potentially enable escalation of privilege via local access.

  Updated 2024-11-14
• CVE-2024-28951: Arkcompiler runtime has a use after free vulnerability 5.5 Medium

  in OpenHarmony v4.0.0 and prior versions allow a local attacker arbitrary code execution in pre-installed apps through use after free.

  Updated 2024-08-02
• CVE-2024-28950: Uncontrolled search path for some Intel(R) oneAPI Math Kernel Library software for Windows before version 2024.2 may allow an authenticated user to potentially enable escalation of 5.4 Medium

  Uncontrolled search path for some Intel(R) oneAPI Math Kernel Library software for Windows before version 2024.2 may allow an authenticated user to potentially enable escalation of privilege via local access.

  Updated 2024-11-14
• CVE-2024-28949: DoS via a large number of User Preferences 4.3 Medium

  Mattermost Server versions 9.5.x before 9.5.2, 9.4.x before 9.4.4, 9.3.x before 9.3.3, 8.1.x before 8.1.11 don't limit the number of user preferences which allows an attacker to send a large number of user preferences potentially causing denial of service.

  Updated 2024-09-03
• CVE-2024-28948: Advantech ADAM-5630 Cross-Site Request Forgery 8.5 High

  Advantech ADAM-5630 contains a cross-site request forgery (CSRF) vulnerability. It allows an attacker to partly circumvent the same origin policy, which is designed to prevent different websites from interfering with each other.

  Updated 2024-09-27
• CVE-2024-28947: Improper input validation in kernel mode driver for some Intel(R) Server Board S2600ST Family firmware before version 02.01.0017 may allow a privileged user to potentially enable e 7.1 High

  Improper input validation in kernel mode driver for some Intel(R) Server Board S2600ST Family firmware before version 02.01.0017 may allow a privileged user to potentially enable escalation of privilege via local access.

  Updated 2024-08-22
• CVE-2024-28945: Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability 8.8 High

  Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability

  Updated 2025-05-03
• CVE-2024-28944: Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability 8.8 High

  Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability

  Updated 2025-05-03
• CVE-2024-28943: Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability 8.8 High

  Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability

  Updated 2025-05-03
• CVE-2024-28942: Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability 8.8 High

  Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability

  Updated 2025-05-03
• CVE-2024-28941: Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability 8.8 High

  Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability

  Updated 2025-05-03
• CVE-2024-28940: Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability 8.8 High

  Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability

  Updated 2025-05-03
• CVE-2024-28939: Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability 8.8 High

  Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability

  Updated 2025-05-03
• CVE-2024-28938: Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability 8.8 High

  Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability

  Updated 2025-05-03
• CVE-2024-28937: Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability 8.8 High

  Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability

  Updated 2025-05-03
• CVE-2024-28936: Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability 8.8 High

  Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability

  Updated 2025-05-03
• CVE-2024-28935: Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability 8.8 High

  Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability

  Updated 2025-05-03
• CVE-2024-28934: Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability 8.8 High

  Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability

  Updated 2025-05-03
• CVE-2024-28933: Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability 8.8 High

  Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability

  Updated 2025-05-03
• CVE-2024-28932: Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability 8.8 High

  Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability

  Updated 2025-05-03
• CVE-2024-28931: Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability 8.8 High

  Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability

  Updated 2025-05-03
• CVE-2024-28930: Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability 8.8 High

  Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability

  Updated 2025-05-03
• CVE-2024-28929: Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability 8.8 High

  Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability

  Updated 2025-05-03
• CVE-2024-28928: SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability 8.8 High

  SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

  Updated 2025-12-09
• CVE-2024-28927: Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability 8.8 High

  Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability

  Updated 2025-05-03
• CVE-2024-28926: Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability 8.8 High

  Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability

  Updated 2025-05-03
• CVE-2024-28925: Secure Boot Security Feature Bypass Vulnerability 8.0 High

  Secure Boot Security Feature Bypass Vulnerability

  Updated 2025-05-03
• CVE-2024-28924: Secure Boot Security Feature Bypass Vulnerability 6.7 Medium

  Secure Boot Security Feature Bypass Vulnerability

  Updated 2025-05-03
• CVE-2024-28923: Secure Boot Security Feature Bypass Vulnerability 6.4 Medium

  Secure Boot Security Feature Bypass Vulnerability

  Updated 2025-05-03
• CVE-2024-28922: Secure Boot Security Feature Bypass Vulnerability 4.1 Medium

  Secure Boot Security Feature Bypass Vulnerability

  Updated 2025-05-03
• CVE-2024-28921: Secure Boot Security Feature Bypass Vulnerability 6.7 Medium

  Secure Boot Security Feature Bypass Vulnerability

  Updated 2025-05-03
• CVE-2024-28920: Secure Boot Security Feature Bypass Vulnerability 7.8 High

  Secure Boot Security Feature Bypass Vulnerability

  Updated 2025-05-03
• CVE-2024-28919: Secure Boot Security Feature Bypass Vulnerability 6.7 Medium

  Secure Boot Security Feature Bypass Vulnerability

  Updated 2025-05-03
• CVE-2024-28917: Azure Arc-enabled Kubernetes Extension Cluster-Scope Elevation of Privilege Vulnerability 6.2 Medium

  Azure Arc-enabled Kubernetes Extension Cluster-Scope Elevation of Privilege Vulnerability

  Updated 2025-05-03
• CVE-2024-28916: Xbox Gaming Services Elevation of Privilege Vulnerability 8.8 High

  Xbox Gaming Services Elevation of Privilege Vulnerability

  Updated 2025-05-03
• CVE-2024-28915: Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability 8.8 High

  Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability

  Updated 2025-05-03
• CVE-2024-28914: Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability 8.8 High

  Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability

  Updated 2025-05-03
• CVE-2024-28913: Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability 8.8 High

  Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability

  Updated 2025-05-03
• CVE-2024-28912: Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability 8.8 High

  Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability

  Updated 2025-05-03
• CVE-2024-28911: Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability 8.8 High

  Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability

  Updated 2025-05-03
• CVE-2024-28910: Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability 8.8 High

  Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability

  Updated 2025-05-03
• CVE-2024-28909: Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability 8.8 High

  Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability

  Updated 2025-05-03
• CVE-2024-28908: Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability 8.8 High

  Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability

  Updated 2025-05-03
• CVE-2024-28907: Microsoft Brokering File System Elevation of Privilege Vulnerability 7.8 High

  Microsoft Brokering File System Elevation of Privilege Vulnerability

  Updated 2025-05-03
• CVE-2024-28906: Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability 8.8 High

  Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability

  Updated 2025-05-03
• CVE-2024-28905: Microsoft Brokering File System Elevation of Privilege Vulnerability 7.8 High

  Microsoft Brokering File System Elevation of Privilege Vulnerability

  Updated 2025-05-03
• CVE-2024-28904: Microsoft Brokering File System Elevation of Privilege Vulnerability 7.8 High

  Microsoft Brokering File System Elevation of Privilege Vulnerability

  Updated 2025-05-03
• CVE-2024-28903: Secure Boot Security Feature Bypass Vulnerability 6.7 Medium

  Secure Boot Security Feature Bypass Vulnerability

  Updated 2025-05-03
• CVE-2024-28902: Windows Remote Access Connection Manager Information Disclosure Vulnerability 5.5 Medium

  Windows Remote Access Connection Manager Information Disclosure Vulnerability

  Updated 2025-05-03
• CVE-2024-28901: Windows Remote Access Connection Manager Information Disclosure Vulnerability 5.5 Medium

  Windows Remote Access Connection Manager Information Disclosure Vulnerability

  Updated 2025-05-03
• CVE-2024-28900: Windows Remote Access Connection Manager Information Disclosure Vulnerability 5.5 Medium

  Windows Remote Access Connection Manager Information Disclosure Vulnerability

  Updated 2025-05-03
• CVE-2024-28899: Secure Boot Security Feature Bypass Vulnerability 8.8 High

  Secure Boot Security Feature Bypass Vulnerability

  Updated 2026-02-10
• CVE-2024-28898: Secure Boot Security Feature Bypass Vulnerability 6.3 Medium

  Secure Boot Security Feature Bypass Vulnerability

  Updated 2025-05-03
• CVE-2024-28897: Secure Boot Security Feature Bypass Vulnerability 6.8 Medium

  Secure Boot Security Feature Bypass Vulnerability

  Updated 2025-05-03
• CVE-2024-28896: Secure Boot Security Feature Bypass Vulnerability 7.5 High

  Secure Boot Security Feature Bypass Vulnerability

  Updated 2025-05-03
• CVE-2024-28895: 'Yahoo! JAPAN' App for Android v2.3.1 to v3.161.1 and 'Yahoo! JAPAN' App for iOS v3.2.2 to v4.109.0 contain a cross-site scripting vulnerability. If this vulnerability is exploited 6.1 Medium

  'Yahoo! JAPAN' App for Android v2.3.1 to v3.161.1 and 'Yahoo! JAPAN' App for iOS v3.2.2 to v4.109.0 contain a cross-site scripting vulnerability. If this vulnerability is exploited, an arbitrary script may be executed on the WebView of 'Yahoo! JAPAN' App via other app installed on the user's device.

  Updated 2024-11-06
• CVE-2024-28894: Out-of-bounds read vulnerability caused by improper checking of the option length values in IPv6 headers exists in Cente middleware TCP/IP Network Series, which may allow an unauth 5.3 Medium

  Out-of-bounds read vulnerability caused by improper checking of the option length values in IPv6 headers exists in Cente middleware TCP/IP Network Series, which may allow an unauthenticated attacker to stop the device operations by sending a specially crafted packet.

  Updated 2024-08-02
• CVE-2024-28893: Certain HP software packages (SoftPaqs) are potentially vulnerable to arbitrary code execution when the SoftPaq configuration file has been modified after extraction. HP has releas 7.7 High

  Certain HP software packages (SoftPaqs) are potentially vulnerable to arbitrary code execution when the SoftPaq configuration file has been modified after extraction. HP has released updated software packages (SoftPaqs).

  Updated 2025-03-27
• CVE-2024-28892: An OS command injection vulnerability exists in the name parameter of GoCast 1.1.3. A specially crafted HTTP request can lead to arbitrary command execution. An attacker can make a 9.8 Critical

  An OS command injection vulnerability exists in the name parameter of GoCast 1.1.3. A specially crafted HTTP request can lead to arbitrary command execution. An attacker can make an unauthenticated HTTP request to trigger this vulnerability.

  Updated 2024-11-21
• CVE-2024-28891: Delta Electronics DIAEnergie SQL injection 8.8 High

  SQL injection vulnerability exists in the script Handler_CFG.ashx.

  Updated 2024-08-12

Search a CVE ID or check dependency files →