CVEs published in October 2024

CVE-2024-20482Medium

Cisco Firepower Management Center: vulnerability in the web-based management interface of Cisco Secure Firewall Management Center (FMC) Software, formerly Firepower Management Center Software, could allow an authenticated, remote attacker to elevate privileges on an affected device

CVE-2024-46538Medium

cross-site scripting (XSS) vulnerability in pfsense v2.5.2 allows attackers to execute arbitrary web scripts or HTML

CVE-2024-45492Critical

Libexpat Vulnerability in NetApp Products

CVE-2024-45491Critical

Libexpat Vulnerability in NetApp Products

CVE-2024-45490High

Libexpat Vulnerability in NetApp Products

CVE-2024-36886High

Linux Kernel Vulnerability in NetApp Products

CVE-2024-47139Medium

stored cross-site scripting (XSS) vulnerability exists in an undisclosed page of the BIG-IQ Configuration utility

CVE-2024-45844High

BIG-IP monitor functionality may allow an attacker to bypass access control restrictions, regardless of the port lockdown settings

CVE-2024-9486Critical

Proxmox: security issue was discovered in the Kubernetes Image Builder versions <= v0.1.37 where default credentials are enabled during…

CVE-2024-45741Medium

In Splunk Enterprise versions below 9.2.3 and 9.1.6 and Splunk Cloud Platform versions below 9.2.2403.108 and 9.1.2312.205, a…

CVE-2024-45740Medium

In Splunk Enterprise versions below 9.2.3 and 9.1.6 and Splunk Cloud Platform versions below 9.2.2403, a low-privileged user…

CVE-2024-45739Medium

In Splunk Enterprise versions below 9.3.1, 9.2.3, and 9.1.6, the software potentially exposes plaintext passwords for local…

CVE-2024-45738Medium

In Splunk Enterprise versions below 9.3.1, 9.2.3, and 9.1.6, the software potentially exposes sensitive HTTP parameters to the…

CVE-2024-45737Medium

In Splunk Enterprise versions below 9.3.1, 9.2.3, and 9.1.6 and Splunk Cloud Platform versions below 9.2.2403.108, and…

CVE-2024-45736Medium

In Splunk Enterprise versions below 9.3.1, 9.2.3, and 9.1.6 and Splunk Cloud Platform versions below 9.2.2403.107, 9.1.2312.204…

CVE-2024-45735Medium

In Splunk Enterprise versions below 9.2.3 and 9.1.6, and Splunk Secure Gateway versions on Splunk Cloud Platform versions below…

CVE-2024-45734Medium

In Splunk Enterprise versions 9.3.0, 9.2.3, and 9.1.6, a low-privileged user that does not hold the "admin" or "power" Splunk…

CVE-2024-45733High

In Splunk Enterprise for Windows versions below 9.2.3 and 9.1.6, a low-privileged user that does not hold the "admin" or "power"…

CVE-2024-45732High

In Splunk Enterprise versions below 9.3.1, and 9.2.0 versions below 9.2.3, and Splunk Cloud Platform versions below…

CVE-2024-45731High

In Splunk Enterprise for Windows versions below 9.3.1, 9.2.3, and 9.1.6, a low-privileged user that does not hold the "admin" or…

CVE-2024-8088High

Python Vulnerability in NetApp Products

CVE-2024-43611High

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

CVE-2024-43583High

Winlogon Elevation of Privilege Vulnerability

CVE-2024-43599High

Remote Desktop Client Remote Code Execution Vulnerability

CVE-2024-43593High

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

CVE-2024-43592High

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

CVE-2024-43589High

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

CVE-2024-43585Medium

Code Integrity Guard Security Feature Bypass Vulnerability

CVE-2024-43584High

Windows Scripting Engine Security Feature Bypass Vulnerability

CVE-2024-43582High

Remote Desktop Protocol Server Remote Code Execution Vulnerability

CVE-2024-43575High

Windows Hyper-V Denial of Service Vulnerability

CVE-2024-43574High

Microsoft Speech Application Programming Interface (SAPI) Remote Code Execution Vulnerability

CVE-2024-43572HighCISA KEV

Microsoft Windows Management Console Remote Code Execution Vulnerability

CVE-2024-43570Medium

Windows Kernel Elevation of Privilege Vulnerability

CVE-2024-43567High

Windows Hyper-V Denial of Service Vulnerability

CVE-2024-43565High

Windows Network Address Translation (NAT) Denial of Service Vulnerability

CVE-2024-43564High

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

CVE-2024-43563High

Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

CVE-2024-43562High

Windows Network Address Translation (NAT) Denial of Service Vulnerability

CVE-2024-43561Medium

Windows Mobile Broadband Driver Denial of Service Vulnerability

CVE-2024-43560High

Microsoft Windows Storage Port Driver Elevation of Privilege Vulnerability

CVE-2024-43559Medium

Windows Mobile Broadband Driver Denial of Service Vulnerability

CVE-2024-43558Medium

Windows Mobile Broadband Driver Denial of Service Vulnerability

CVE-2024-43557Medium

Windows Mobile Broadband Driver Denial of Service Vulnerability

CVE-2024-43556High

Windows Graphics Component Elevation of Privilege Vulnerability

CVE-2024-43555Medium

Windows Mobile Broadband Driver Denial of Service Vulnerability

CVE-2024-43553High

NT OS Kernel Elevation of Privilege Vulnerability

CVE-2024-43552High

Windows Shell Remote Code Execution Vulnerability

CVE-2024-43551High

Windows Storage Elevation of Privilege Vulnerability

CVE-2024-43550High

Windows Secure Channel Spoofing Vulnerability

CVE-2024-43549High

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

CVE-2024-43547Medium

Windows Kerberos Information Disclosure Vulnerability

CVE-2024-43546Medium

Windows Cryptographic Information Disclosure Vulnerability

CVE-2024-43545High

Windows Online Certificate Status Protocol (OCSP) Server Denial of Service Vulnerability

CVE-2024-43544High

Microsoft Simple Certificate Enrollment Protocol Denial of Service Vulnerability

CVE-2024-43536Medium

Windows Mobile Broadband Driver Remote Code Execution Vulnerability

CVE-2024-43528High

Windows Secure Kernel Mode Elevation of Privilege Vulnerability

CVE-2024-43524Medium

Windows Mobile Broadband Driver Remote Code Execution Vulnerability

CVE-2024-43523Medium

Windows Mobile Broadband Driver Remote Code Execution Vulnerability

CVE-2024-43521High

Windows Hyper-V Denial of Service Vulnerability

CVE-2024-43520Medium

Windows Kernel Denial of Service Vulnerability

CVE-2024-43517High

Microsoft ActiveX Data Objects Remote Code Execution Vulnerability

CVE-2024-43514High

Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability

CVE-2024-43512Medium

Windows Standards-Based Storage Management Service Denial of Service Vulnerability

CVE-2024-43511High

Windows Kernel Elevation of Privilege Vulnerability

CVE-2024-43509High

Windows Graphics Component Elevation of Privilege Vulnerability

CVE-2024-43501High

Windows Common Log File System Driver Elevation of Privilege Vulnerability

CVE-2024-43456Medium

Windows Remote Desktop Services Tampering Vulnerability

CVE-2024-30092High

Windows Hyper-V Remote Code Execution Vulnerability

CVE-2024-38212High

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

CVE-2024-43453High

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

CVE-2024-38262High

Windows Remote Desktop Licensing Service Remote Code Execution Vulnerability

CVE-2024-38265High

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

CVE-2024-38124Critical

Windows Netlogon Elevation of Privilege Vulnerability

CVE-2024-38129High

Windows Kerberos Elevation of Privilege Vulnerability

CVE-2024-38029High

Microsoft OpenSSH for Windows Remote Code Execution Vulnerability

CVE-2024-38149High

BranchCache Denial of Service Vulnerability

CVE-2024-37983Medium

Windows Resume Extensible Firmware Interface Security Feature Bypass Vulnerability

CVE-2024-37979Medium

Windows Kernel Elevation of Privilege Vulnerability

CVE-2024-37982Medium

Windows Resume Extensible Firmware Interface Security Feature Bypass Vulnerability

CVE-2024-37976Medium

Windows Resume Extensible Firmware Interface Security Feature Bypass Vulnerability

CVE-2024-20659High

Windows Hyper-V Security Feature Bypass Vulnerability

CVE-2024-43500Medium

Windows Resilient File System (ReFS) Information Disclosure Vulnerability

CVE-2024-43615High

Microsoft OpenSSH for Windows Remote Code Execution Vulnerability

CVE-2024-43607High

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

CVE-2024-43608High

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

CVE-2024-43581High

Microsoft OpenSSH for Windows Remote Code Execution Vulnerability

CVE-2024-43573MediumCISA KEV

Microsoft Windows MSHTML Platform Spoofing Vulnerability

CVE-2024-43554Medium

Windows Kernel-Mode Driver Information Disclosure Vulnerability

CVE-2024-43543Medium

Windows Mobile Broadband Driver Remote Code Execution Vulnerability

CVE-2024-43542Medium

Windows Mobile Broadband Driver Denial of Service Vulnerability

CVE-2024-43541High

Microsoft Simple Certificate Enrollment Protocol Denial of Service Vulnerability

CVE-2024-43540Medium

Windows Mobile Broadband Driver Denial of Service Vulnerability

CVE-2024-43538Medium

Windows Mobile Broadband Driver Denial of Service Vulnerability

CVE-2024-43537Medium

Windows Mobile Broadband Driver Denial of Service Vulnerability

CVE-2024-43535High

Windows Kernel-Mode Driver Elevation of Privilege Vulnerability

CVE-2024-43534Medium

Windows Graphics Component Information Disclosure Vulnerability

CVE-2024-43533High

Remote Desktop Client Remote Code Execution Vulnerability

CVE-2024-43532High

Remote Registry Service Elevation of Privilege Vulnerability

CVE-2024-43529High

Windows Print Spooler Elevation of Privilege Vulnerability