CVEs published in September 2024

CVE-2024-6923Medium

Python Vulnerability in NetApp Products

CVE-2024-36902Medium

Linux Kernel Vulnerability in NetApp Products

CVE-2024-6594High

WatchGuard Firebox Single Sign-On Client Denial-of-Service

CVE-2024-6593Critical

WatchGuard Firebox Single Sign-On Agent Management Interface Authentication Bypass

CVE-2024-6592Critical

WatchGuard Firebox Single Sign-On Agent Protocol Authorization Bypass

CVE-2024-21545High

Proxmox Virtual Environment: Proxmox Virtual Environment is an open-source server management platform for enterprise virtualization.

CVE-2024-44540Medium

Ubiquiti AirMax firmware version firmware version 8 allows attackers with physical access to gain a privileged command shell

CVE-2024-42503High

ArubaOS: Authenticated command execution vulnerability exist in the ArubaOS command line interface (CLI).

CVE-2024-42502High

ArubaOS: Authenticated command injection vulnerability exists in the ArubaOS command line interface.

CVE-2024-42501High

ArubaOS: authenticated Path Traversal vulnerabilities exists in the ArubaOS.

CVE-2024-29847Critical

Deserialization of untrusted data in the agent portal of Ivanti EPM before 2022 SU6, or the 2024 September update allows a remote unauthenticated attacker to achieve remote code execution

CVE-2024-36934Medium

Linux Kernel Vulnerability in NetApp Products

CVE-2024-36933High

Linux Kernel Vulnerability in NetApp Products

CVE-2024-27398High

Linux Kernel Vulnerability in NetApp Products

CVE-2024-37980High

Microsoft SQL Server Elevation of Privilege Vulnerability

CVE-2024-43495High

Windows libarchive Remote Code Execution Vulnerability

CVE-2024-43487Medium

Windows Mark of the Web Security Feature Bypass Vulnerability

CVE-2024-30073High

Windows Security Zone Mapping Security Feature Bypass Vulnerability

CVE-2024-43475High

Microsoft Windows Admin Center Information Disclosure Vulnerability

CVE-2024-43466Medium

Microsoft SharePoint Server Denial of Service Vulnerability

CVE-2024-43461HighCISA KEV

Microsoft Windows MSHTML Platform Spoofing Vulnerability

CVE-2024-43458High

Windows Networking Information Disclosure Vulnerability

CVE-2024-43455High

Windows Remote Desktop Licensing Service Spoofing Vulnerability

CVE-2024-43454High

Windows Remote Desktop Licensing Service Remote Code Execution Vulnerability

CVE-2024-38119High

Windows Network Address Translation (NAT) Remote Code Execution Vulnerability

CVE-2024-38045High

Windows TCP/IP Remote Code Execution Vulnerability

CVE-2024-21416High

Windows TCP/IP Remote Code Execution Vulnerability

CVE-2024-38263High

Windows Remote Desktop Licensing Service Remote Code Execution Vulnerability

CVE-2024-38260High

Windows Remote Desktop Licensing Service Remote Code Execution Vulnerability

CVE-2024-38259High

Microsoft Management Console Remote Code Execution Vulnerability

CVE-2024-38258Medium

Windows Remote Desktop Licensing Service Information Disclosure Vulnerability

CVE-2024-38257High

Microsoft AllJoyn API Information Disclosure Vulnerability

CVE-2024-38248High

Windows Storage Elevation of Privilege Vulnerability

CVE-2024-38247High

Windows Graphics Component Elevation of Privilege Vulnerability

CVE-2024-38246High

Win32k Elevation of Privilege Vulnerability

CVE-2024-38245High

Kernel Streaming Service Driver Elevation of Privilege Vulnerability

CVE-2024-38244High

Kernel Streaming Service Driver Elevation of Privilege Vulnerability

CVE-2024-38243High

Kernel Streaming Service Driver Elevation of Privilege Vulnerability

CVE-2024-38239High

Windows Kerberos Elevation of Privilege Vulnerability

CVE-2024-38238High

Kernel Streaming Service Driver Elevation of Privilege Vulnerability

CVE-2024-38237High

Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability

CVE-2024-38235Medium

Windows Hyper-V Denial of Service Vulnerability

CVE-2024-38234Medium

Windows Networking Denial of Service Vulnerability

CVE-2024-38233High

Windows Networking Denial of Service Vulnerability

CVE-2024-38232High

Windows Networking Denial of Service Vulnerability

CVE-2024-38231Medium

Windows Remote Desktop Licensing Service Denial of Service Vulnerability

CVE-2024-38228High

Microsoft SharePoint Server Remote Code Execution Vulnerability

CVE-2024-38227High

Microsoft SharePoint Server Remote Code Execution Vulnerability

CVE-2024-38217MediumCISA KEV

Microsoft Windows Mark of the Web (MOTW) Protection Mechanism Failure Vulnerability

CVE-2024-38046High

PowerShell Elevation of Privilege Vulnerability

CVE-2024-38014HighCISA KEV

Microsoft Windows Installer Improper Privilege Management Vulnerability

CVE-2024-37341High

Microsoft SQL Server Elevation of Privilege Vulnerability

CVE-2024-37965High

Microsoft SQL Server Elevation of Privilege Vulnerability

CVE-2024-43474High

Microsoft SQL Server Information Disclosure Vulnerability

CVE-2024-43467High

Windows Remote Desktop Licensing Service Remote Code Execution Vulnerability

CVE-2024-43464High

Microsoft SharePoint Server Remote Code Execution Vulnerability

CVE-2024-38256Medium

Windows Kernel-Mode Driver Information Disclosure Vulnerability

CVE-2024-38254Medium

Windows Authentication Information Disclosure Vulnerability

CVE-2024-38253High

Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability

CVE-2024-38252High

Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability

CVE-2024-38250High

Windows Graphics Component Elevation of Privilege Vulnerability

CVE-2024-38249High

Windows Graphics Component Elevation of Privilege Vulnerability

CVE-2024-38242High

Kernel Streaming Service Driver Elevation of Privilege Vulnerability

CVE-2024-38241High

Kernel Streaming Service Driver Elevation of Privilege Vulnerability

CVE-2024-38240High

Windows Remote Access Connection Manager Elevation of Privilege Vulnerability

CVE-2024-38236High

DHCP Server Service Denial of Service Vulnerability

CVE-2024-38230Medium

Windows Standards-Based Storage Management Service Denial of Service Vulnerability

CVE-2024-38018High

Microsoft SharePoint Server Remote Code Execution Vulnerability

CVE-2024-26191High

Microsoft SQL Server Native Scoring Remote Code Execution Vulnerability

CVE-2024-26186High

Microsoft SQL Server Native Scoring Remote Code Execution Vulnerability

CVE-2024-37342High

Microsoft SQL Server Native Scoring Information Disclosure Vulnerability

CVE-2024-37337High

Microsoft SQL Server Native Scoring Information Disclosure Vulnerability

CVE-2024-37339High

Microsoft SQL Server Native Scoring Remote Code Execution Vulnerability

CVE-2024-37340High

Microsoft SQL Server Native Scoring Remote Code Execution Vulnerability

CVE-2024-37335High

Microsoft SQL Server Native Scoring Remote Code Execution Vulnerability

CVE-2024-37966High

Microsoft SQL Server Native Scoring Information Disclosure Vulnerability

CVE-2024-37338High

Microsoft SQL Server Native Scoring Remote Code Execution Vulnerability

CVE-2024-21753Medium

improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiClientEMS 7.2.0 through 7.2.4, FortiClientEMS 7.0 all versions, FortiClientEMS 6.4 all versions, FortiClientEMS 06.02 all versions, FortiClientEMS 6.2 all versions, FortiClientEMS 06.00 all versions, FortiClientEMS 6.0 all versions, FortiClientEMS 01.02.02 through 01.02.05 allows attacker to perform a denial of service, read or write a limited number of files via specially crafted HTTP requests

CVE-2024-38642High

QuMagie: improper certificate validation vulnerability has been reported to affect QuMagie.

CVE-2024-38641High

QTS: OS command injection vulnerability has been reported to affect several QNAP operating system versions.

CVE-2024-38640Medium

cross-site scripting (XSS) vulnerability has been reported to affect Download Station.

CVE-2024-32771Low

QTS: improper restriction of excessive authentication attempts vulnerability has been reported to affect several QNAP operating…

CVE-2024-32763High

QTS: buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions

CVE-2024-32762High

cross-site scripting (XSS) vulnerability has been reported to affect QuLog Center.

CVE-2024-27126Medium

cross-site scripting (XSS) vulnerability has been reported to affect Notes Station 3.

CVE-2024-27125Low

Helpdesk: cross-site scripting (XSS) vulnerability has been reported to affect Helpdesk.

CVE-2024-27122Medium

cross-site scripting (XSS) vulnerability has been reported to affect Notes Station 3.

CVE-2024-21906Medium

QTS: OS command injection vulnerability has been reported to affect several QNAP operating system versions.

CVE-2024-21904Medium

QTS: path traversal vulnerability has been reported to affect several QNAP operating system versions.

CVE-2024-21903Medium

QTS: OS command injection vulnerability has been reported to affect several QNAP operating system versions.

CVE-2024-21898High

QTS: OS command injection vulnerability has been reported to affect several QNAP operating system versions.

CVE-2024-21897High

QTS: cross-site scripting (XSS) vulnerability has been reported to affect several QNAP operating system versions.

CVE-2023-51368Medium

QTS: NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions.

CVE-2023-51367Medium

QTS: buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions

CVE-2023-51366High

QTS: path traversal vulnerability has been reported to affect several QNAP operating system versions.

CVE-2023-50366Medium

QTS: cross-site scripting (XSS) vulnerability has been reported to affect several QNAP operating system versions.

CVE-2023-50360High

Video Station: SQL injection vulnerability has been reported to affect Video Station.

CVE-2023-47563High

Video Station: OS command injection vulnerability has been reported to affect Video Station.

CVE-2023-45038Medium

Music Station: improper authentication vulnerability has been reported to affect Music Station.

CVE-2023-39300High

QTS: OS command injection vulnerability has been reported to affect legacy QTS.