High Severity Vulnerabilities

Found 12675 vulnerabilities at High severity.

Vulnerability Name

CVE

CWE

Severity

Microsoft SQL Server CVE-2024-0056 Vulnerability (CVE-2024-0056)

CVE-2024-0056

-

High

Plone CMS Improper Restriction of Rendered UI Layers or Frames Vulnerability (CVE-2024-0669)

CVE-2024-0669

CWE-1021

High

PostgreSQL CVE-2024-0985 Vulnerability (CVE-2024-0985)

CVE-2024-0985

-

High

Jboss EAP Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2024-10234)

CVE-2024-10234

CWE-707

High

PostgreSQL Externally Controlled Reference to a Resource in Another Sphere Vulnerability (CVE-2024-10979)

CVE-2024-10979

CWE-610

High

PHP Out-of-bounds Write Vulnerability (CVE-2024-11233)

CVE-2024-11233

CWE-787

High

PHP Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') Vulnerability (CVE-2024-11234)

CVE-2024-11234

CWE-138

High

PHP Use After Free Vulnerability (CVE-2024-11235)

CVE-2024-11235

CWE-416

High

Grafana CVE-2024-1442 Vulnerability (CVE-2024-1442)

CVE-2024-1442

-

High

Jboss EAP Uncontrolled Resource Consumption Vulnerability (CVE-2024-1635)

CVE-2024-1635

CWE-400

High

Oracle JRE CVE-2024-20918 Vulnerability (CVE-2024-20918)

CVE-2024-20918

-

High

WebLogic CVE-2024-20927 Vulnerability (CVE-2024-20927)

CVE-2024-20927

-

High

WebLogic CVE-2024-20931 Vulnerability (CVE-2024-20931)

CVE-2024-20931

-

High

Oracle JRE CVE-2024-20932 Vulnerability (CVE-2024-20932)

CVE-2024-20932

-

High

Oracle JRE CVE-2024-20952 Vulnerability (CVE-2024-20952)

CVE-2024-20952

-

High

WebLogic CVE-2024-21006 Vulnerability (CVE-2024-21006)

CVE-2024-21006

-

High

WebLogic Missing Authentication for Critical Function Vulnerability (CVE-2024-21007)

CVE-2024-21007

CWE-306

High

MySQL CVE-2024-21090 Vulnerability (CVE-2024-21090)

CVE-2024-21090

-

High

Oracle JRE Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2024-21147)

CVE-2024-21147

CWE-200

High

WebLogic CVE-2024-21175 Vulnerability (CVE-2024-21175)

CVE-2024-21175

-

High

WebLogic CVE-2024-21182 Vulnerability (CVE-2024-21182)

CVE-2024-21182

-

High

WebLogic CVE-2024-21183 Vulnerability (CVE-2024-21183)

CVE-2024-21183

-

High

Oracle Database Server CVE-2024-21184 Vulnerability (CVE-2024-21184)

CVE-2024-21184

-

High

WebLogic CVE-2024-21234 Vulnerability (CVE-2024-21234)

CVE-2024-21234

-

High

WebLogic CVE-2024-21260 Vulnerability (CVE-2024-21260)

CVE-2024-21260

-

High

MySQL CVE-2024-21272 Vulnerability (CVE-2024-21272)

CVE-2024-21272

-

High

WebLogic CVE-2024-21274 Vulnerability (CVE-2024-21274)

CVE-2024-21274

-

High

SharePoint CVE-2024-21318 Vulnerability (CVE-2024-21318)

CVE-2024-21318

-

High

SharePoint CVE-2024-21426 Vulnerability (CVE-2024-21426)

CVE-2024-21426

-

High

AngularJS Inefficient Regular Expression Complexity Vulnerability (CVE-2024-21490)

CVE-2024-21490

CWE-1333

High

Angular Inefficient Regular Expression Complexity Vulnerability (CVE-2024-21490)

CVE-2024-21490

CWE-1333

High

Opencart Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2024-21514)

CVE-2024-21514

CWE-138

High

Opencart Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2024-21518)

CVE-2024-21518

CWE-22

High

Opencart CVE-2024-21519 Vulnerability (CVE-2024-21519)

CVE-2024-21519

-

High

Craft CMS CVE-2024-21622 Vulnerability (CVE-2024-21622)

CVE-2024-21622

-

High

XWiki Improper Handling of Insufficient Privileges Vulnerability (CVE-2024-21648)

CVE-2024-21648

CWE-274

High

Atlassian Confluence Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2024-21672)

CVE-2024-21672

CWE-94

High

Atlassian Confluence Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2024-21673)

CVE-2024-21673

CWE-94

High

Atlassian Confluence Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2024-21674)

CVE-2024-21674

CWE-94

High

Atlassian Confluence Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2024-21677)

CVE-2024-21677

CWE-22

High

Atlassian Confluence Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2024-21678)

CVE-2024-21678

CWE-707

High

Atlassian Confluence CVE-2024-21683 Vulnerability (CVE-2024-21683)

CVE-2024-21683

-

High

Atlassian Confluence Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2024-21686)

CVE-2024-21686

CWE-707

High

Jetty Allocation of Resources Without Limits or Throttling Vulnerability (CVE-2024-22201)

CVE-2024-22201

CWE-770

High

Drupal Other Vulnerability (CVE-2024-22362)

CVE-2024-22362

-

High

Plone CMS Incorrect Default Permissions Vulnerability (CVE-2024-22889)

CVE-2024-22889

CWE-276

High

Envoy Proxy Use After Free Vulnerability (CVE-2024-23322)

CVE-2024-23322

CWE-416

High

Envoy Proxy CVE-2024-23324 Vulnerability (CVE-2024-23324)

CVE-2024-23324

-

High

Envoy Proxy Improper Handling of Exceptional Conditions Vulnerability (CVE-2024-23325)

CVE-2024-23325

CWE-755

High

Envoy Proxy Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling') Vulnerability (CVE-2024-23326)

CVE-2024-23326

-

High

Envoy Proxy NULL Pointer Dereference Vulnerability (CVE-2024-23327)

CVE-2024-23327

CWE-476

High

Plone CMS CVE-2024-23756 Vulnerability (CVE-2024-23756)

CVE-2024-23756

-

High

Jenkins Origin Validation Error Vulnerability (CVE-2024-23898)

CVE-2024-23898

CWE-346

High

Django CVE-2024-24680 Vulnerability (CVE-2024-24680)

CVE-2024-24680

-

High

GeoServer Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2024-24749)

CVE-2024-24749

CWE-22

High

Squid Uncontrolled Recursion Vulnerability (CVE-2024-25111)

CVE-2024-25111

CWE-674

High

TYPO3 CVE-2024-25121 Vulnerability (CVE-2024-25121)

CVE-2024-25121

-

High

Liferay Portal CVE-2024-25148 Vulnerability (CVE-2024-25148)

CVE-2024-25148

-

High

Liferay DXP CVE-2024-25148 Vulnerability (CVE-2024-25148)

CVE-2024-25148

-

High

Liferay Portal Improper Restriction of XML External Entity Reference Vulnerability (CVE-2024-25606)

CVE-2024-25606

CWE-611

High

Liferay DXP Improper Restriction of XML External Entity Reference Vulnerability (CVE-2024-25606)

CVE-2024-25606

CWE-611

High

Liferay DXP Use of Password Hash With Insufficient Computational Effort Vulnerability (CVE-2024-25607)

CVE-2024-25607

CWE-916

High

Liferay Portal Use of Password Hash With Insufficient Computational Effort Vulnerability (CVE-2024-25607)

CVE-2024-25607

CWE-916

High

Squid Other Vulnerability (CVE-2024-25617)

CVE-2024-25617

-

High

Moodle Allocation of Resources Without Limits or Throttling Vulnerability (CVE-2024-25978)

CVE-2024-25978

CWE-770

High

Moodle Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2024-25982)

CVE-2024-25982

CWE-352

High

Ruby on Rails Inefficient Regular Expression Complexity Vulnerability (CVE-2024-26142)

CVE-2024-26142

CWE-1333

High

Liferay Portal Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2024-26271)

CVE-2024-26271

CWE-352

High

Liferay DXP Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2024-26271)

CVE-2024-26271

CWE-352

High

Liferay DXP Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2024-26272)

CVE-2024-26272

CWE-352

High

Liferay Portal Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2024-26272)

CVE-2024-26272

CWE-352

High

Liferay Portal Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2024-26273)

CVE-2024-26273

CWE-352

High

Liferay DXP Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2024-26273)

CVE-2024-26273

CWE-352

High

phpMyFAQ Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2024-27299)

CVE-2024-27299

CWE-138

High

Apache HTTP Server Allocation of Resources Without Limits or Throttling Vulnerability (CVE-2024-27316)

CVE-2024-27316

CWE-770

High