Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| CVE-2024-30094 |
|
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
|
| CVE-2024-30080 |
|
Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
|
| CVE-2024-30083 |
|
Windows Standards-Based Storage Management Service Denial of Service Vulnerability
Windows Standards-Based Storage Management Service Denial of Service Vulnerability
|
| CVE-2024-30074 |
|
Windows Link Layer Topology Discovery Protocol Remote Code Execution Vulnerability
Windows Link Layer Topology Discovery Protocol Remote Code Execution Vulnerability
|
| CVE-2024-30075 |
|
Windows Link Layer Topology Discovery Protocol Remote Code Execution Vulnerability
Windows Link Layer Topology Discovery Protocol Remote Code Execution Vulnerability
|
| CVE-2024-30077 |
|
Windows OLE Remote Code Execution Vulnerability
Windows OLE Remote Code Execution Vulnerability
|
| CVE-2024-30078 |
|
Windows Wi-Fi Driver Remote Code Execution Vulnerability
Windows Wi-Fi Driver Remote Code Execution Vulnerability
|
| CVE-2024-30072 |
|
Microsoft Event Trace Log File Parsing Remote Code Execution Vulnerability
Microsoft Event Trace Log File Parsing Remote Code Execution Vulnerability
|
| CVE-2024-30070 |
|
DHCP Server Service Denial of Service Vulnerability
DHCP Server Service Denial of Service Vulnerability
|
| CVE-2024-30065 |
|
Windows Themes Denial of Service Vulnerability
Windows Themes Denial of Service Vulnerability
|
| CVE-2024-30063 |
|
Windows Distributed File System (DFS) Remote Code Execution Vulnerability
Windows Distributed File System (DFS) Remote Code Execution Vulnerability
|
| CVE-2024-30052 |
|
Visual Studio Remote Code Execution Vulnerability
Visual Studio Remote Code Execution Vulnerability
|
| CVE-2024-30062 |
|
Windows Standards-Based Storage Management Service Remote Code Execution Vulnerability
Windows Standards-Based Storage Management Service Remote Code Execution Vulnerability
|
| CVE-2024-3166 |
|
Cross-Site Scripting (XSS) in mintplexlabs (CVE-2024-3166)
cross-site scripting in mintplexlabs (CVE-2024-3166). Successful exploitation can lead to full system takeover.
|
| CVE-2024-1100 |
|
SQL Injection in sqli (CVE-2024-1100)
SQL injection in sqli (CVE-2024-1100). Successful exploitation can lead to full system takeover.
|
| CVE-2024-1086 KEV |
|
[KEV] Use-After-Free in Linux kernel (CVE-2024-1086)
vulnerability in Linux kernel (CVE-2024-1086). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
|
| CVE-2024-35563 |
|
SQL Injection in sqli (CVE-2024-35563)
SQL injection in sqli (CVE-2024-35563). Successful exploitation can lead to full system takeover.
|
| CVE-2024-2199 |
|
Vulnerability in dos (CVE-2024-2199)
vulnerability in dos (CVE-2024-2199). Risk of unauthorized operations or information disclosure. Exploitable via ``userPassword``.
|
| CVE-2024-0851 |
|
SQL Injection in sqli (CVE-2024-0851)
SQL injection in sqli (CVE-2024-0851). Risk of unauthorized operations or information disclosure.
|
| CVE-2024-3822 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2024-3822)
cross-site scripting in wordpress (CVE-2024-3822). Risk of unauthorized operations or information disclosure.
|
| CVE-2024-3823 |
|
Cross-Site Request Forgery (CSRF) in wordpress (CVE-2024-3823)
vulnerability in wordpress (CVE-2024-3823). Risk of unauthorized operations or information disclosure.
|
| CVE-2024-3824 |
|
Cross-Site Request Forgery (CSRF) in wordpress (CVE-2024-3824)
vulnerability in wordpress (CVE-2024-3824). Risk of unauthorized operations or information disclosure.
|
| CVE-2024-26367 |
|
Cross-Site Scripting (XSS) in CVE-2024-26367 (CVE-2024-26367)
cross-site scripting in CVE-2024-26367 (CVE-2024-26367). Risk of unauthorized operations or information disclosure.
|
| CVE-2024-3727 |
|
Vulnerability in path-traversal (CVE-2024-3727)
vulnerability in path-traversal (CVE-2024-3727). Successful exploitation can lead to full system takeover.
|
| CVE-2024-30801 |
|
SQL Injection in sqli (CVE-2024-30801)
SQL injection in sqli (CVE-2024-30801). Data can be tampered with by attackers.
|
| CVE-2024-33601 |
|
Vulnerability in dos (CVE-2024-33601)
vulnerability in dos (CVE-2024-33601). Risk of unauthorized operations or information disclosure.
|
| CVE-2024-4029 |
|
Vulnerability in org.wildfly:wildfly-domain-http (CVE-2024-4029)
vulnerability in org.wildfly:wildfly-domain-http (CVE-2024-4029). Risk of unauthorized operations or information disclosure.
|
| CVE-2024-31828 |
|
Cross-Site Scripting (XSS) in lavalite (CVE-2024-31828)
cross-site scripting in lavalite (CVE-2024-31828). Risk of unauthorized operations or information disclosure.
|
| CVE-2024-1726 |
|
Vulnerability in dos (CVE-2024-1726)
vulnerability in dos (CVE-2024-1726). Risk of unauthorized operations or information disclosure.
|
| CVE-2024-1139 |
|
A credentials leak vulnerability was found in the cluster monitoring operator in OCP. This issue may allow a remote attacker who has basic login credentials to check the pod manifest to discover a re...
A credentials leak vulnerability was found in the cluster monitoring operator in OCP. This issue may allow a remote attacker who has basic login credentials to check the pod manifest to discover a repository pull secret.
|
| CVE-2023-6717 |
|
Cross-Site Scripting (XSS) in CVE-2023-6717 (CVE-2023-6717)
cross-site scripting in CVE-2023-6717 (CVE-2023-6717). Confidential information can be exposed externally.
|
| CVE-2023-6237 |
|
Vulnerability in dos (CVE-2023-6237)
vulnerability in dos (CVE-2023-6237). Risk of unauthorized operations or information disclosure.
|
| CVE-2024-20353 KEV |
|
[KEV] Vulnerability in Cisco adaptive-security-appliance-asa-and-firepower-threat-defense-ftd (CVE-2024-20353)
vulnerability in Cisco adaptive-security-appliance-asa-and-firepower-threat-defense-ftd (CVE-2024-20353). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
| CVE-2024-28722 |
|
Cross-Site Scripting (XSS) in CVE-2024-28722 (CVE-2024-28722)
cross-site scripting in CVE-2024-28722 (CVE-2024-28722). Risk of unauthorized operations or information disclosure.
|
| CVE-2024-32206 |
|
Cross-Site Scripting (XSS) in wuzhicms (CVE-2024-32206)
cross-site scripting in wuzhicms (CVE-2024-32206). Risk of unauthorized operations or information disclosure.
|
| CVE-2024-26898 |
|
Use-After-Free in dos (CVE-2024-26898)
vulnerability in dos (CVE-2024-26898). Successful exploitation can lead to full system takeover. Exploitable via ``skbtxq``.
|
| CVE-2024-26257 |
|
Microsoft Excel Remote Code Execution Vulnerability
Microsoft Excel Remote Code Execution Vulnerability
|
| CVE-2024-2511 |
|
Vulnerability in dos (CVE-2024-2511)
vulnerability in dos (CVE-2024-2511). Risk of unauthorized operations or information disclosure.
|
| CVE-2024-28755 |
|
Vulnerability in dos (CVE-2024-28755)
vulnerability in dos (CVE-2024-28755). Risk of unauthorized operations or information disclosure.
|
| CVE-2024-28836 |
|
Vulnerability in dos (CVE-2024-28836)
vulnerability in dos (CVE-2024-28836). Risk of unauthorized operations or information disclosure.
|
| CVE-2024-30166 |
|
Vulnerability in dos (CVE-2024-30166)
vulnerability in dos (CVE-2024-30166). Confidential information can be exposed externally.
|
| CVE-2024-22780 |
|
Cross-Site Scripting (XSS) in CVE-2024-22780 (CVE-2024-22780)
cross-site scripting in CVE-2024-22780 (CVE-2024-22780). Risk of unauthorized operations or information disclosure.
|
| CVE-2023-6191 |
|
SQL Injection in sqli (CVE-2023-6191)
SQL injection in sqli (CVE-2023-6191). Successful exploitation can lead to full system takeover.
|
| CVE-2023-6047 |
|
Cross-Site Scripting (XSS) in algoritimbilisim (CVE-2023-6047)
cross-site scripting in algoritimbilisim (CVE-2023-6047). Risk of unauthorized operations or information disclosure.
|
| CVE-2024-28714 |
|
SQL Injection in sqli (CVE-2024-28714)
SQL injection in sqli (CVE-2024-28714). Confidential information can be exposed externally.
|
| CVE-2024-31064 |
|
Cross-Site Scripting (XSS) in munyweki (CVE-2024-31064)
cross-site scripting in munyweki (CVE-2024-31064). Risk of unauthorized operations or information disclosure.
|
| CVE-2023-6153 |
|
Vulnerability in CVE-2023-6153 (CVE-2023-6153)
vulnerability in CVE-2023-6153 (CVE-2023-6153). Successful exploitation can lead to full system takeover.
|
| CVE-2023-6173 |
|
SQL Injection in sqli (CVE-2023-6173)
SQL injection in sqli (CVE-2023-6173). Successful exploitation can lead to full system takeover.
|
| CVE-2024-29644 |
|
Cross-Site Scripting (XSS) in dcatadmin (CVE-2024-29644)
cross-site scripting in dcatadmin (CVE-2024-29644). Risk of unauthorized operations or information disclosure.
|
| CVE-2024-2865 |
|
SQL Injection in sqli (CVE-2024-2865)
SQL injection in sqli (CVE-2024-2865). Successful exploitation can lead to full system takeover.
|