CVE-2024-38xxx records
Browse official CVE Program records with vulnerability descriptions, affected products, CVSS scores and source references. Browse by the year and numeric range in each CVE ID; publication and update dates appear on each record.
842 records · Page 9 of 9
- CVE-2024-38054: Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability 7.8 High
Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability
Updated Windows Layer-2 Bridge Network Driver Remote Code Execution Vulnerability
Updated- CVE-2024-38052: Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability 7.8 High
Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability
Updated Windows Graphics Component Remote Code Execution Vulnerability
UpdatedWindows Workstation Service Elevation of Privilege Vulnerability
Updated- CVE-2024-38049: Windows Distributed Transaction Coordinator Remote Code Execution Vulnerability 6.6 Medium
Windows Distributed Transaction Coordinator Remote Code Execution Vulnerability
Updated Windows Network Driver Interface Specification (NDIS) Denial of Service Vulnerability
UpdatedPowerShell Elevation of Privilege Vulnerability
UpdatedPowerShell Elevation of Privilege Vulnerability
UpdatedWindows TCP/IP Remote Code Execution Vulnerability
UpdatedDHCP Server Service Remote Code Execution Vulnerability
UpdatedPowerShell Elevation of Privilege Vulnerability
UpdatedWindows Kernel Information Disclosure Vulnerability
Updated- CVE-2024-38040: BUG-000167984 - Portal for ArcGIS has a Local file inclusion (LFI) vulnerability 7.5 High
There is a local file inclusion vulnerability in Esri Portal for ArcGIS 11.2 and below that may allow a remote, unauthenticated attacker to craft a URL that could potentially disclose sensitive configuration information by reading internal files.
Updated There is an HTML injection vulnerability in Esri Portal for ArcGIS versions 11.0 and below that may allow a remote, authenticated attacker to create a crafted link which when clicked could render arbitrary HTML in the victim’s browser (no stateful change made or customer data rendered).
UpdatedThere is a reflected XSS vulnerability in Esri Portal for ArcGIS versions 11.1 which may allow a remote, unauthenticated attacker to create a crafted link which when clicked could potentially execute arbitrary JavaScript code in the victim’s browser.
UpdatedThere is an unvalidated redirect vulnerability in Esri Portal for ArcGIS 11.0 and below that may allow a remote, unauthenticated attacker to craft a URL that could redirect a victim to an arbitrary website, simplifying phishing attacks.
UpdatedThere is a reflected XSS vulnerability in Esri Portal for ArcGIS versions 10.9.1 and below which may allow a remote, unauthenticated attacker to create a crafted link which when clicked could potentially execute arbitrary JavaScript code in the victim’s browser.
UpdatedWindows Filtering Platform Elevation of Privilege Vulnerability
UpdatedPowerShell Elevation of Privilege Vulnerability
UpdatedMicrosoft Xbox Remote Code Execution Vulnerability
UpdatedWindows Online Certificate Status Protocol (OCSP) Server Denial of Service Vulnerability
UpdatedWindows Themes Spoofing Vulnerability
UpdatedMicrosoft OpenSSH for Windows Remote Code Execution Vulnerability
UpdatedMicrosoft Windows Performance Data Helper Library Remote Code Execution Vulnerability
UpdatedWindows Line Printer Daemon Service Denial of Service Vulnerability
UpdatedMicrosoft Windows Performance Data Helper Library Remote Code Execution Vulnerability
UpdatedMicrosoft SharePoint Server Remote Code Execution Vulnerability
UpdatedMicrosoft SharePoint Server Remote Code Execution Vulnerability
UpdatedWindows Image Acquisition Elevation of Privilege Vulnerability
UpdatedMicrosoft Outlook Remote Code Execution Vulnerability
UpdatedMicrosoft Outlook Spoofing Vulnerability
UpdatedMicrosoft Windows Performance Data Helper Library Remote Code Execution Vulnerability
UpdatedMicrosoft SharePoint Server Remote Code Execution Vulnerability
UpdatedMicrosoft Message Queuing Information Disclosure Vulnerability
UpdatedMicrosoft Office Visio Remote Code Execution Vulnerability
Updated- CVE-2024-38015: Windows Remote Desktop Gateway (RD Gateway) Denial of Service Vulnerability 7.5 High
Windows Remote Desktop Gateway (RD Gateway) Denial of Service Vulnerability
Updated Windows Installer Elevation of Privilege Vulnerability
UpdatedMicrosoft Windows Server Backup Elevation of Privilege Vulnerability
UpdatedSecure Boot Security Feature Bypass Vulnerability
UpdatedSecure Boot Security Feature Bypass Vulnerability
UpdatedThe workflow component in Liferay Portal 7.3.2 through 7.4.3.111, and Liferay DXP 2023.Q4.0 through 2023.Q4.5, 2023.Q3.1 through 2023.Q3.8, 7.4 GA through update 92 and 7.3 GA through update 36 does not properly check user permissions before updating a workflow definition, which allows remote authenticated users to modify workflow definitions and execute arbitrary code (RCE) via the headless API.
Updated