Vulnerabilities (CVE)

Filtered by CWE-693
Total 207 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2024-38226 1 Microsoft 2 Office, Publisher 2024-09-12 N/A 7.3 HIGH
Microsoft Publisher Security Feature Bypass Vulnerability
CVE-2024-23499 1 Intel 1 Ethernet 800 Series Controllers Driver 2024-09-06 N/A 7.5 HIGH
Protection mechanism failure in Linux kernel mode driver for some Intel(R) Ethernet Network Controllers and Adapters E810 Series before version 28.3 may allow an unauthenticated user to potentially enable denial of service via network access.
CVE-2024-39836 1 Mattermost 1 Mattermost 2024-08-23 N/A 6.5 MEDIUM
Mattermost versions 9.9.x <= 9.9.1, 9.5.x <= 9.5.7, 9.10.x <= 9.10.0 and 9.8.x <= 9.8.2 fail to ensure that remote/synthetic users cannot create sessions or reset passwords, which allows the munged email addresses, created by shared channels, to be used to receive email notifications and to reset passwords, when they are valid, functional emails.
CVE-2024-38180 1 Microsoft 15 Windows 10 1507, Windows 10 1607, Windows 10 1809 and 12 more 2024-08-16 N/A 8.8 HIGH
Windows SmartScreen Security Feature Bypass Vulnerability
CVE-2024-24980 2024-08-14 N/A 6.1 MEDIUM
Protection mechanism failure in some 3rd, 4th, and 5th Generation Intel(R) Xeon(R) Processors may allow a privileged user to potentially enable escalation of privilege via local access.
CVE-2024-24983 2024-08-14 N/A 6.5 MEDIUM
Protection mechanism failure in firmware for some Intel(R) Ethernet Network Controllers and Adapters E810 Series before version 4.4 may allow an unauthenticated user to potentially enable denial of service via network access.
CVE-2024-38213 1 Microsoft 13 Windows 10 1507, Windows 10 1607, Windows 10 1809 and 10 more 2024-08-14 N/A 6.5 MEDIUM
Windows Mark of the Web Security Feature Bypass Vulnerability