Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

Filtering: Group: attack-types Clear
ID Title
CVE-2024-20339 Vulnerability in dos (CVE-2024-20339)
vulnerability in dos (CVE-2024-20339). Risk of unauthorized operations or information disclosure.
CVE-2024-20351 Vulnerability in dos (CVE-2024-20351)
vulnerability in dos (CVE-2024-20351). Risk of unauthorized operations or information disclosure.
CVE-2024-20330 Vulnerability in dos (CVE-2024-20330)
vulnerability in dos (CVE-2024-20330). Risk of unauthorized operations or information disclosure.
CVE-2024-20268 Vulnerability in dos (CVE-2024-20268)
vulnerability in dos (CVE-2024-20268). Risk of unauthorized operations or information disclosure.
CVE-2024-50066 Vulnerability in privilege-escalation (CVE-2024-50066)
vulnerability in privilege-escalation (CVE-2024-50066). Successful exploitation can lead to full system takeover.
CVE-2024-10234 Cross-Site Scripting (XSS) in redhat (CVE-2024-10234)
cross-site scripting in redhat (CVE-2024-10234). Confidential information can be exposed externally.
CVE-2024-9050 Code Injection in privilege-escalation (CVE-2024-9050)
code injection in privilege-escalation (CVE-2024-9050). Successful exploitation can lead to full system takeover. Exploitable via ``leftupdown``.
CVE-2024-40088 Cross-Site Scripting (XSS) in path-traversal (CVE-2024-40088)
cross-site scripting in path-traversal (CVE-2024-40088). Risk of unauthorized operations or information disclosure.
CVE-2024-47742 Path Traversal in path-traversal (CVE-2024-47742)
path traversal in path-traversal (CVE-2024-47742). Successful exploitation can lead to full system takeover.
CVE-2024-47678 Vulnerability in dos (CVE-2024-47678)
vulnerability in dos (CVE-2024-47678). Confidential information can be exposed externally.
CVE-2024-49604 Vulnerability in wordpress (CVE-2024-49604)
vulnerability in wordpress (CVE-2024-49604). Successful exploitation can lead to full system takeover.
CVE-2024-21536 Vulnerability in dos (CVE-2024-21536)
vulnerability in dos (CVE-2024-21536). Risk of unauthorized operations or information disclosure.
CVE-2024-9143 Out-of-Bounds Read in CVE-2024-9143 (CVE-2024-9143)
vulnerability in CVE-2024-9143 (CVE-2024-9143). Risk of unauthorized operations or information disclosure.
CVE-2024-46605 Cross-Site Scripting (XSS) in piwigo (CVE-2024-46605)
cross-site scripting in piwigo (CVE-2024-46605). Risk of unauthorized operations or information disclosure.
CVE-2024-46606 Cross-Site Scripting (XSS) in piwigo (CVE-2024-46606)
cross-site scripting in piwigo (CVE-2024-46606). Risk of unauthorized operations or information disclosure.
CVE-2024-21262 Authorization Flaw in c (CVE-2024-21262)
vulnerability in c (CVE-2024-21262). Risk of unauthorized operations or information disclosure.
CVE-2024-35584 SQL Injection in sqli (CVE-2024-35584)
SQL injection in sqli (CVE-2024-35584). Successful exploitation can lead to full system takeover.
CVE-2023-31493 Code Injection in zoneminder (CVE-2023-31493)
code injection in zoneminder (CVE-2023-31493). Confidential information can be exposed externally.
CVE-2023-50780 Vulnerability in apache (CVE-2023-50780)
vulnerability in apache (CVE-2023-50780). Successful exploitation can lead to full system takeover.
CVE-2024-46532 SQL Injection in sqli (CVE-2024-46532)
SQL injection in sqli (CVE-2024-46532). Successful exploitation can lead to full system takeover.
CVE-2024-4658 SQL Injection in sqli (CVE-2024-4658)
SQL injection in sqli (CVE-2024-4658). Risk of unauthorized operations or information disclosure.
CVE-2024-9286 SQL Injection in sqli (CVE-2024-9286)
SQL injection in sqli (CVE-2024-9286). Risk of unauthorized operations or information disclosure.
CVE-2024-25885 Vulnerability in xhtml2pdf (CVE-2024-25885)
vulnerability in xhtml2pdf (CVE-2024-25885). Risk of unauthorized operations or information disclosure.
CVE-2024-42831 Cross-Site Scripting (XSS) in CVE-2024-42831 (CVE-2024-42831)
cross-site scripting in CVE-2024-42831 (CVE-2024-42831). Risk of unauthorized operations or information disclosure.
CVE-2024-28709 Cross-Site Scripting (XSS) in limesurvey (CVE-2024-28709)
cross-site scripting in limesurvey (CVE-2024-28709). Risk of unauthorized operations or information disclosure.
CVE-2024-28710 Cross-Site Scripting (XSS) in limesurvey (CVE-2024-28710)
cross-site scripting in limesurvey (CVE-2024-28710). Risk of unauthorized operations or information disclosure.
CVE-2024-45932 Cross-Site Scripting (XSS) in webkul (CVE-2024-45932)
cross-site scripting in webkul (CVE-2024-45932). Risk of unauthorized operations or information disclosure.
CVE-2024-46446 Path Traversal in path-traversal (CVE-2024-46446)
path traversal in path-traversal (CVE-2024-46446). Successful exploitation can lead to full system takeover.
CVE-2024-45933 Code Injection in CVE-2024-45933 (CVE-2024-45933)
code injection in CVE-2024-45933 (CVE-2024-45933). Data can be tampered with by attackers.
CVE-2024-6400 Vulnerability in finrota (CVE-2024-6400)
vulnerability in finrota (CVE-2024-6400). Confidential information can be exposed externally.
CVE-2024-9440 Cross-Site Scripting (XSS) in slimselectjs (CVE-2024-9440)
cross-site scripting in slimselectjs (CVE-2024-9440). Risk of unauthorized operations or information disclosure.
CVE-2024-46084 Command Injection in scriptcase (CVE-2024-46084)
command injection in scriptcase (CVE-2024-46084). Successful exploitation can lead to full system takeover.
CVE-2024-3373 SQL Injection in sqli (CVE-2024-3373)
SQL injection in sqli (CVE-2024-3373). Risk of unauthorized operations or information disclosure.
CVE-2024-8607 SQL Injection in sqli (CVE-2024-8607)
SQL injection in sqli (CVE-2024-8607). Successful exploitation can lead to full system takeover.
CVE-2024-8608 Cross-Site Scripting (XSS) in oceanicsoft (CVE-2024-8608)
cross-site scripting in oceanicsoft (CVE-2024-8608). Risk of unauthorized operations or information disclosure.
CVE-2024-4657 Cross-Site Scripting (XSS) in CVE-2024-4657 (CVE-2024-4657)
cross-site scripting in CVE-2024-4657 (CVE-2024-4657). Risk of unauthorized operations or information disclosure.
CVE-2024-6594 Vulnerability in dos (CVE-2024-6594)
vulnerability in dos (CVE-2024-6594). Risk of unauthorized operations or information disclosure.
CVE-2023-46948 Cross-Site Scripting (XSS) in CVE-2023-46948 (CVE-2023-46948)
cross-site scripting in CVE-2023-46948 (CVE-2023-46948). Risk of unauthorized operations or information disclosure.
CVE-2024-7835 Cross-Site Scripting (XSS) in CVE-2024-7835 (CVE-2024-7835)
cross-site scripting in CVE-2024-7835 (CVE-2024-7835). Risk of unauthorized operations or information disclosure.
CVE-2024-7735 SQL Injection in sqli (CVE-2024-7735)
SQL injection in sqli (CVE-2024-7735). Risk of unauthorized operations or information disclosure.
CVE-2024-43489 Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
CVE-2024-43496 Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
CVE-2024-33109 Path Traversal in path-traversal (CVE-2024-33109)
path traversal in path-traversal (CVE-2024-33109). Confidential information can be exposed externally.
CVE-2024-38016 Microsoft Office Visio Remote Code Execution Vulnerability
Microsoft Office Visio Remote Code Execution Vulnerability
CVE-2024-8698 Vulnerability in privilege-escalation (CVE-2024-8698)
vulnerability in privilege-escalation (CVE-2024-8698). Confidential information can be exposed externally.
CVE-2024-7785 Cross-Site Scripting (XSS) in CVE-2024-7785 (CVE-2024-7785)
cross-site scripting in CVE-2024-7785 (CVE-2024-7785). Risk of unauthorized operations or information disclosure.
CVE-2024-5958 SQL Injection in sqli (CVE-2024-5958)
SQL injection in sqli (CVE-2024-5958). Successful exploitation can lead to full system takeover.
CVE-2024-6877 Cross-Site Scripting (XSS) in elizsoftware (CVE-2024-6877)
cross-site scripting in elizsoftware (CVE-2024-6877). Risk of unauthorized operations or information disclosure.
CVE-2024-5959 Cross-Site Scripting (XSS) in elizsoftware (CVE-2024-5959)
cross-site scripting in elizsoftware (CVE-2024-5959). Risk of unauthorized operations or information disclosure.
CVE-2020-0618 KEV [KEV] Unsafe Deserialization in Microsoft sql-server (CVE-2020-0618)
vulnerability in Microsoft sql-server (CVE-2020-0618). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.

🍪 About cookies

We use cookies to keep you logged in, remember your language, and improve the service.

Details →