CVE List - 2024 / November
Showing 1501 - 1600 of 4054 CVEs for November 2024 (Page 16 of 41)
| CVE ID | Date | Title |
|---|---|---|
| CVE-2024-43641 | 2024-11-12 | Windows Registry Elevation of Privilege Vulnerability |
| CVE-2024-43642 | 2024-11-12 | Windows SMB Denial of Service Vulnerability |
| CVE-2024-38203 | 2024-11-12 | Windows Package Library Manager Information Disclosure Vulnerability |
| CVE-2024-48993 | 2024-11-12 | SQL Server Native Client Remote Code Execution Vulnerability |
| CVE-2024-48997 | 2024-11-12 | SQL Server Native Client Remote Code Execution Vulnerability |
| CVE-2024-48998 | 2024-11-12 | SQL Server Native Client Remote Code Execution Vulnerability |
| CVE-2024-48999 | 2024-11-12 | SQL Server Native Client Remote Code Execution Vulnerability |
| CVE-2024-49000 | 2024-11-12 | SQL Server Native Client Remote Code Execution Vulnerability |
| CVE-2024-49001 | 2024-11-12 | SQL Server Native Client Remote Code Execution Vulnerability |
| CVE-2024-49002 | 2024-11-12 | SQL Server Native Client Remote Code Execution Vulnerability |
| CVE-2024-49003 | 2024-11-12 | SQL Server Native Client Remote Code Execution Vulnerability |
| CVE-2024-49004 | 2024-11-12 | SQL Server Native Client Remote Code Execution Vulnerability |
| CVE-2024-49005 | 2024-11-12 | SQL Server Native Client Remote Code Execution Vulnerability |
| CVE-2024-49007 | 2024-11-12 | SQL Server Native Client Remote Code Execution Vulnerability |
| CVE-2024-49006 | 2024-11-12 | SQL Server Native Client Remote Code Execution Vulnerability |
| CVE-2024-49008 | 2024-11-12 | SQL Server Native Client Remote Code Execution Vulnerability |
| CVE-2024-49009 | 2024-11-12 | SQL Server Native Client Remote Code Execution Vulnerability |
| CVE-2024-49010 | 2024-11-12 | SQL Server Native Client Remote Code Execution Vulnerability |
| CVE-2024-49011 | 2024-11-12 | SQL Server Native Client Remote Code Execution Vulnerability |
| CVE-2024-49012 | 2024-11-12 | SQL Server Native Client Remote Code Execution Vulnerability |
| CVE-2024-49013 | 2024-11-12 | SQL Server Native Client Remote Code Execution Vulnerability |
| CVE-2024-49014 | 2024-11-12 | SQL Server Native Client Remote Code Execution Vulnerability |
| CVE-2024-49015 | 2024-11-12 | SQL Server Native Client Remote Code Execution Vulnerability |
| CVE-2024-49016 | 2024-11-12 | SQL Server Native Client Remote Code Execution Vulnerability |
| CVE-2024-49017 | 2024-11-12 | SQL Server Native Client Remote Code Execution Vulnerability |
| CVE-2024-49018 | 2024-11-12 | SQL Server Native Client Remote Code Execution Vulnerability |
| CVE-2024-49019 | 2024-11-12 | Active Directory Certificate Services Elevation of Privilege Vulnerability |
| CVE-2024-49021 | 2024-11-12 | Microsoft SQL Server Remote Code Execution Vulnerability |
| CVE-2024-49026 | 2024-11-12 | Microsoft Excel Remote Code Execution Vulnerability |
| CVE-2024-49027 | 2024-11-12 | Microsoft Excel Remote Code Execution Vulnerability |
| CVE-2024-49028 | 2024-11-12 | Microsoft Excel Remote Code Execution Vulnerability |
| CVE-2024-49029 | 2024-11-12 | Microsoft Excel Remote Code Execution Vulnerability |
| CVE-2024-49030 | 2024-11-12 | Microsoft Excel Remote Code Execution Vulnerability |
| CVE-2024-49031 | 2024-11-12 | Microsoft Office Graphics Remote Code Execution Vulnerability |
| CVE-2024-49032 | 2024-11-12 | Microsoft Office Graphics Remote Code Execution Vulnerability |
| CVE-2024-49033 | 2024-11-12 | Microsoft Word Security Feature Bypass Vulnerability |
| CVE-2024-49039 | 2024-11-12 | Windows Task Scheduler Elevation of Privilege Vulnerability |
| CVE-2024-49048 | 2024-11-12 | TorchGeo Remote Code Execution Vulnerability |
| CVE-2024-49050 | 2024-11-12 | Visual Studio Code Python Extension Remote Code Execution Vulnerability |
| CVE-2024-49051 | 2024-11-12 | Microsoft PC Manager Elevation of Privilege Vulnerability |
| CVE-2024-11138 | 2024-11-12 | DedeCMS friendlink_add.php unrestricted upload |
| CVE-2024-8069 | 2024-11-12 | Limited remote code execution with privilege of a NetworkService Account access |
| CVE-2024-51720 | 2024-11-12 | Vulnerabilities in SecuSUITE Server Components Impact SecuSUITE |
| CVE-2024-51721 | 2024-11-12 | Vulnerabilities in SecuSUITE Server Components Impact SecuSUITE |
| CVE-2024-51722 | 2024-11-12 | Vulnerabilities in SecuSUITE Server Components Impact SecuSUITE |
| CVE-2024-47449 | 2024-11-12 | Audition | Out-of-bounds Read (CWE-125) |
| CVE-2024-8534 | 2024-11-12 | Memory safety vulnerability leading to memory corruption and Denial of Service |
| CVE-2024-47446 | 2024-11-12 | After Effects | Out-of-bounds Read (CWE-125) |
| CVE-2024-47442 | 2024-11-12 | After Effects | Out-of-bounds Write (CWE-787) |
| CVE-2024-47444 | 2024-11-12 | After Effects | Out-of-bounds Read (CWE-125) |
| CVE-2024-47445 | 2024-11-12 | After Effects | Out-of-bounds Read (CWE-125) |
| CVE-2024-47441 | 2024-11-12 | After Effects | Out-of-bounds Write (CWE-787) |
| CVE-2024-47443 | 2024-11-12 | After Effects | Out-of-bounds Write (CWE-787) |
| CVE-2024-8535 | 2024-11-12 | Authenticated user can access unintended user capabilities |
| CVE-2024-7516 | 2024-11-12 | Brocade Fabric OS before 9.2.2 does not enforce strict host key checking |
| CVE-2024-47458 | 2024-11-12 | Bridge | NULL Pointer Dereference (CWE-476) |
| CVE-2024-45147 | 2024-11-12 | Bridge | Out-of-bounds Read (CWE-125) |
| CVE-2024-49042 | 2024-11-12 | Azure Database for PostgreSQL Flexible Server Extension Elevation of Privilege Vulnerability |
| CVE-2024-43613 | 2024-11-12 | Azure Database for PostgreSQL Flexible Server Extension Elevation of Privilege Vulnerability |
| CVE-2024-36513 | 2024-11-12 | A privilege context switching error vulnerability [CWE-270] in FortiClient Windows version 7.2.4 and below, version 7.0.12 and below, 6.4 all versions may allow an authenticated user to escalate their privileges... |
| CVE-2024-23666 | 2024-11-12 | A client-side enforcement of server-side security in Fortinet FortiAnalyzer-BigData at least version 7.4.0 and 7.2.0 through 7.2.6 and 7.0.1 through 7.0.6 and 6.4.5 through 6.4.7 and 6.2.5, FortiManager version 7.4.0... |
| CVE-2023-50176 | 2024-11-12 | A session fixation in Fortinet FortiOS version 7.4.0 through 7.4.3 and 7.2.0 through 7.2.7 and 7.0.0 through 7.0.13 allows attacker to execute unauthorized code or commands via phishing SAML authentication... |
| CVE-2024-33510 | 2024-11-12 | An improper neutralization of special elements in output used by a downstream component ('Injection') vulnerability [CWE-74] in FortiOS version 7.4.3 and below, version 7.2.8 and below, version 7.0.16 and below;... |
| CVE-2024-36507 | 2024-11-12 | A untrusted search path in Fortinet FortiClientWindows versions 7.4.0, versions 7.2.4 through 7.2.0, versions 7.0.12 through 7.0.0 allows an attacker to run arbitrary code via DLL hijacking and social engineering. |
| CVE-2024-40592 | 2024-11-12 | An improper verification of cryptographic signature vulnerability [CWE-347] in FortiClient MacOS version 7.4.0, version 7.2.4 and below, version 7.0.10 and below, version 6.4.10 and below may allow a local authenticated... |
| CVE-2024-32117 | 2024-11-12 | An improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability [CWE-22] in Fortinet FortiManager version 7.4.0 through 7.4.2 and below 7.2.5, FortiAnalyzer version 7.4.0 through 7.4.2 and... |
| CVE-2023-47543 | 2024-11-12 | An authorization bypass through user-controlled key vulnerability [CWE-639] in Fortinet FortiPortal version 7.0.0 through 7.0.3 allows an authenticated attacker to interact with ressources of other organizations via HTTP or HTTPS... |
| CVE-2023-44255 | 2024-11-12 | An exposure of sensitive information to an unauthorized actor [CWE-200] in Fortinet FortiManager before 7.4.2, FortiAnalyzer before 7.4.2 and FortiAnalyzer-BigData before 7.2.5 may allow a privileged attacker with administrative read... |
| CVE-2024-32116 | 2024-11-12 | Multiple relative path traversal vulnerabilities [CWE-23] in Fortinet FortiManager version 7.4.0 through 7.4.2 and before 7.2.5, FortiAnalyzer version 7.4.0 through 7.4.2 and before 7.2.5 and FortiAnalyzer-BigData version 7.4.0 and before... |
| CVE-2024-32118 | 2024-11-12 | Multiple improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerabilities [CWE-78] in Fortinet FortiManager version 7.4.0 through 7.4.2 and before 7.2.5, Fortinet FortiAnalyzer version 7.4.0... |
| CVE-2024-35274 | 2024-11-12 | An improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability [CWE-22] in Fortinet FortiAnalyzer versions below 7.4.2, Fortinet FortiManager versions below 7.4.2 and Fortinet FortiAnalyzer-BigData version 7.4.0... |
| CVE-2024-26011 | 2024-11-12 | A missing authentication for critical function in Fortinet FortiManager version 7.4.0 through 7.4.2, 7.2.0 through 7.2.4, 7.0.0 through 7.0.11, 6.4.0 through 6.4.14, FortiPAM version 1.2.0, 1.1.0 through 1.1.2, 1.0.0 through... |
| CVE-2024-33505 | 2024-11-12 | A heap-based buffer overflow in Fortinet FortiAnalyzer version 7.4.0 through 7.4.2, 7.2.0 through 7.2.5, 7.0.0 through 7.0.12, 6.4.0 through 6.4.14, FortiManager version 7.4.0 through 7.4.2, 7.2.0 through 7.2.5, 7.0.0 through... |
| CVE-2024-36509 | 2024-11-12 | An exposure of sensitive system information to an unauthorized control sphere vulnerability [CWE-497] in FortiWeb version 7.6.0, version 7.4.3 and below, version 7.2.10 and below, version 7.0.10 and below, version... |
| CVE-2024-31496 | 2024-11-12 | A stack-based buffer overflow vulnerability [CWE-121] in Fortinet FortiManager version 7.4.0 through 7.4.2 and before 7.2.5, FortiAnalyzer version 7.4.0 through 7.4.2 and before 7.2.5 and FortiAnalyzer-BigData 7.4.0 and before 7.2.7... |
| CVE-2024-47456 | 2024-11-12 | Illustrator | Out-of-bounds Read (CWE-125) |
| CVE-2024-47453 | 2024-11-12 | Illustrator | Out-of-bounds Read (CWE-125) |
| CVE-2024-47452 | 2024-11-12 | Illustrator | Out-of-bounds Write (CWE-787) |
| CVE-2024-47450 | 2024-11-12 | Illustrator | Heap-based Buffer Overflow (CWE-122) |
| CVE-2024-47455 | 2024-11-12 | Illustrator | Out-of-bounds Read (CWE-125) |
| CVE-2024-47451 | 2024-11-12 | Illustrator | Out-of-bounds Write (CWE-787) |
| CVE-2024-45114 | 2024-11-12 | Illustrator | Out-of-bounds Write (CWE-787) |
| CVE-2024-47457 | 2024-11-12 | Illustrator | NULL Pointer Dereference (CWE-476) |
| CVE-2024-47454 | 2024-11-12 | Illustrator | Out-of-bounds Read (CWE-125) |
| CVE-2024-10217 | 2024-11-12 | TIBCO Hawk Stored-XSS Vulnerability |
| CVE-2024-10218 | 2024-11-12 | TIBCO Hawk Stored-XEE Vulnerability |
| CVE-2024-2207 | 2024-11-12 | Sound Research SECOMN64 Escalation of Privilege |
| CVE-2024-52301 | 2024-11-12 | Laravel allows environment manipulation via query string |
| CVE-2024-2208 | 2024-11-12 | Sound Research SECOMN64 Escalation of Privilege |
| CVE-2024-47426 | 2024-11-12 | Substance3D - Painter | Double Free (CWE-415) |
| CVE-2024-49516 | 2024-11-12 | Substance3D - Painter | Out-of-bounds Write (CWE-787) |
| CVE-2024-47438 | 2024-11-12 | Substance3D - Painter | Write-what-where Condition (CWE-123) |
| CVE-2024-47433 | 2024-11-12 | Substance3D - Painter | Out-of-bounds Write (CWE-787) |
| CVE-2024-47434 | 2024-11-12 | Substance3D - Painter | Out-of-bounds Write (CWE-787) |
| CVE-2024-47432 | 2024-11-12 | Substance3D - Painter | Out-of-bounds Write (CWE-787) |
| CVE-2024-47440 | 2024-11-12 | Substance3D - Painter | Out-of-bounds Read (CWE-125) |
| CVE-2024-49517 | 2024-11-12 | Substance3D - Painter | Heap-based Buffer Overflow (CWE-122) |
| CVE-2024-47435 | 2024-11-12 | Substance3D - Painter | Out-of-bounds Read (CWE-125) |
| CVE-2024-49519 | 2024-11-12 | Substance3D - Painter | Out-of-bounds Write (CWE-787) |
| CVE-2024-47439 | 2024-11-12 | Substance3D - Painter | NULL Pointer Dereference (CWE-476) |