Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| CVE-2024-20339 |
|
Vulnerability in dos (CVE-2024-20339)
vulnerability in dos (CVE-2024-20339). Risk of unauthorized operations or information disclosure.
|
| CVE-2024-20351 |
|
Vulnerability in dos (CVE-2024-20351)
vulnerability in dos (CVE-2024-20351). Risk of unauthorized operations or information disclosure.
|
| CVE-2024-20330 |
|
Vulnerability in dos (CVE-2024-20330)
vulnerability in dos (CVE-2024-20330). Risk of unauthorized operations or information disclosure.
|
| CVE-2024-20268 |
|
Vulnerability in dos (CVE-2024-20268)
vulnerability in dos (CVE-2024-20268). Risk of unauthorized operations or information disclosure.
|
| CVE-2024-50066 |
|
Vulnerability in privilege-escalation (CVE-2024-50066)
vulnerability in privilege-escalation (CVE-2024-50066). Successful exploitation can lead to full system takeover.
|
| CVE-2024-10234 |
|
Cross-Site Scripting (XSS) in redhat (CVE-2024-10234)
cross-site scripting in redhat (CVE-2024-10234). Confidential information can be exposed externally.
|
| CVE-2024-9050 |
|
Code Injection in privilege-escalation (CVE-2024-9050)
code injection in privilege-escalation (CVE-2024-9050). Successful exploitation can lead to full system takeover. Exploitable via ``leftupdown``.
|
| CVE-2024-40088 |
|
Cross-Site Scripting (XSS) in path-traversal (CVE-2024-40088)
cross-site scripting in path-traversal (CVE-2024-40088). Risk of unauthorized operations or information disclosure.
|
| CVE-2024-47742 |
|
Path Traversal in path-traversal (CVE-2024-47742)
path traversal in path-traversal (CVE-2024-47742). Successful exploitation can lead to full system takeover.
|
| CVE-2024-47678 |
|
Vulnerability in dos (CVE-2024-47678)
vulnerability in dos (CVE-2024-47678). Confidential information can be exposed externally.
|
| CVE-2024-49604 |
|
Vulnerability in wordpress (CVE-2024-49604)
vulnerability in wordpress (CVE-2024-49604). Successful exploitation can lead to full system takeover.
|
| CVE-2024-21536 |
|
Vulnerability in dos (CVE-2024-21536)
vulnerability in dos (CVE-2024-21536). Risk of unauthorized operations or information disclosure.
|
| CVE-2024-9143 |
|
Out-of-Bounds Read in CVE-2024-9143 (CVE-2024-9143)
vulnerability in CVE-2024-9143 (CVE-2024-9143). Risk of unauthorized operations or information disclosure.
|
| CVE-2024-46605 |
|
Cross-Site Scripting (XSS) in piwigo (CVE-2024-46605)
cross-site scripting in piwigo (CVE-2024-46605). Risk of unauthorized operations or information disclosure.
|
| CVE-2024-46606 |
|
Cross-Site Scripting (XSS) in piwigo (CVE-2024-46606)
cross-site scripting in piwigo (CVE-2024-46606). Risk of unauthorized operations or information disclosure.
|
| CVE-2024-21262 |
|
Authorization Flaw in c (CVE-2024-21262)
vulnerability in c (CVE-2024-21262). Risk of unauthorized operations or information disclosure.
|
| CVE-2024-35584 |
|
SQL Injection in sqli (CVE-2024-35584)
SQL injection in sqli (CVE-2024-35584). Successful exploitation can lead to full system takeover.
|
| CVE-2023-31493 |
|
Code Injection in zoneminder (CVE-2023-31493)
code injection in zoneminder (CVE-2023-31493). Confidential information can be exposed externally.
|
| CVE-2023-50780 |
|
Vulnerability in apache (CVE-2023-50780)
vulnerability in apache (CVE-2023-50780). Successful exploitation can lead to full system takeover.
|
| CVE-2024-46532 |
|
SQL Injection in sqli (CVE-2024-46532)
SQL injection in sqli (CVE-2024-46532). Successful exploitation can lead to full system takeover.
|
| CVE-2024-4658 |
|
SQL Injection in sqli (CVE-2024-4658)
SQL injection in sqli (CVE-2024-4658). Risk of unauthorized operations or information disclosure.
|
| CVE-2024-9286 |
|
SQL Injection in sqli (CVE-2024-9286)
SQL injection in sqli (CVE-2024-9286). Risk of unauthorized operations or information disclosure.
|
| CVE-2024-25885 |
|
Vulnerability in xhtml2pdf (CVE-2024-25885)
vulnerability in xhtml2pdf (CVE-2024-25885). Risk of unauthorized operations or information disclosure.
|
| CVE-2024-42831 |
|
Cross-Site Scripting (XSS) in CVE-2024-42831 (CVE-2024-42831)
cross-site scripting in CVE-2024-42831 (CVE-2024-42831). Risk of unauthorized operations or information disclosure.
|
| CVE-2024-28709 |
|
Cross-Site Scripting (XSS) in limesurvey (CVE-2024-28709)
cross-site scripting in limesurvey (CVE-2024-28709). Risk of unauthorized operations or information disclosure.
|
| CVE-2024-28710 |
|
Cross-Site Scripting (XSS) in limesurvey (CVE-2024-28710)
cross-site scripting in limesurvey (CVE-2024-28710). Risk of unauthorized operations or information disclosure.
|
| CVE-2024-45932 |
|
Cross-Site Scripting (XSS) in webkul (CVE-2024-45932)
cross-site scripting in webkul (CVE-2024-45932). Risk of unauthorized operations or information disclosure.
|
| CVE-2024-46446 |
|
Path Traversal in path-traversal (CVE-2024-46446)
path traversal in path-traversal (CVE-2024-46446). Successful exploitation can lead to full system takeover.
|
| CVE-2024-45933 |
|
Code Injection in CVE-2024-45933 (CVE-2024-45933)
code injection in CVE-2024-45933 (CVE-2024-45933). Data can be tampered with by attackers.
|
| CVE-2024-6400 |
|
Vulnerability in finrota (CVE-2024-6400)
vulnerability in finrota (CVE-2024-6400). Confidential information can be exposed externally.
|
| CVE-2024-9440 |
|
Cross-Site Scripting (XSS) in slimselectjs (CVE-2024-9440)
cross-site scripting in slimselectjs (CVE-2024-9440). Risk of unauthorized operations or information disclosure.
|
| CVE-2024-46084 |
|
Command Injection in scriptcase (CVE-2024-46084)
command injection in scriptcase (CVE-2024-46084). Successful exploitation can lead to full system takeover.
|
| CVE-2024-3373 |
|
SQL Injection in sqli (CVE-2024-3373)
SQL injection in sqli (CVE-2024-3373). Risk of unauthorized operations or information disclosure.
|
| CVE-2024-8607 |
|
SQL Injection in sqli (CVE-2024-8607)
SQL injection in sqli (CVE-2024-8607). Successful exploitation can lead to full system takeover.
|
| CVE-2024-8608 |
|
Cross-Site Scripting (XSS) in oceanicsoft (CVE-2024-8608)
cross-site scripting in oceanicsoft (CVE-2024-8608). Risk of unauthorized operations or information disclosure.
|
| CVE-2024-4657 |
|
Cross-Site Scripting (XSS) in CVE-2024-4657 (CVE-2024-4657)
cross-site scripting in CVE-2024-4657 (CVE-2024-4657). Risk of unauthorized operations or information disclosure.
|
| CVE-2024-6594 |
|
Vulnerability in dos (CVE-2024-6594)
vulnerability in dos (CVE-2024-6594). Risk of unauthorized operations or information disclosure.
|
| CVE-2023-46948 |
|
Cross-Site Scripting (XSS) in CVE-2023-46948 (CVE-2023-46948)
cross-site scripting in CVE-2023-46948 (CVE-2023-46948). Risk of unauthorized operations or information disclosure.
|
| CVE-2024-7835 |
|
Cross-Site Scripting (XSS) in CVE-2024-7835 (CVE-2024-7835)
cross-site scripting in CVE-2024-7835 (CVE-2024-7835). Risk of unauthorized operations or information disclosure.
|
| CVE-2024-7735 |
|
SQL Injection in sqli (CVE-2024-7735)
SQL injection in sqli (CVE-2024-7735). Risk of unauthorized operations or information disclosure.
|
| CVE-2024-43489 |
|
Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
|
| CVE-2024-43496 |
|
Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
|
| CVE-2024-33109 |
|
Path Traversal in path-traversal (CVE-2024-33109)
path traversal in path-traversal (CVE-2024-33109). Confidential information can be exposed externally.
|
| CVE-2024-38016 |
|
Microsoft Office Visio Remote Code Execution Vulnerability
Microsoft Office Visio Remote Code Execution Vulnerability
|
| CVE-2024-8698 |
|
Vulnerability in privilege-escalation (CVE-2024-8698)
vulnerability in privilege-escalation (CVE-2024-8698). Confidential information can be exposed externally.
|
| CVE-2024-7785 |
|
Cross-Site Scripting (XSS) in CVE-2024-7785 (CVE-2024-7785)
cross-site scripting in CVE-2024-7785 (CVE-2024-7785). Risk of unauthorized operations or information disclosure.
|
| CVE-2024-5958 |
|
SQL Injection in sqli (CVE-2024-5958)
SQL injection in sqli (CVE-2024-5958). Successful exploitation can lead to full system takeover.
|
| CVE-2024-6877 |
|
Cross-Site Scripting (XSS) in elizsoftware (CVE-2024-6877)
cross-site scripting in elizsoftware (CVE-2024-6877). Risk of unauthorized operations or information disclosure.
|
| CVE-2024-5959 |
|
Cross-Site Scripting (XSS) in elizsoftware (CVE-2024-5959)
cross-site scripting in elizsoftware (CVE-2024-5959). Risk of unauthorized operations or information disclosure.
|
| CVE-2020-0618 KEV |
|
[KEV] Unsafe Deserialization in Microsoft sql-server (CVE-2020-0618)
vulnerability in Microsoft sql-server (CVE-2020-0618). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
|