Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

Filtering: Group: attack-types Clear
ID Title
CVE-2024-30094 Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
CVE-2024-30080 Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
CVE-2024-30083 Windows Standards-Based Storage Management Service Denial of Service Vulnerability
Windows Standards-Based Storage Management Service Denial of Service Vulnerability
CVE-2024-30074 Windows Link Layer Topology Discovery Protocol Remote Code Execution Vulnerability
Windows Link Layer Topology Discovery Protocol Remote Code Execution Vulnerability
CVE-2024-30075 Windows Link Layer Topology Discovery Protocol Remote Code Execution Vulnerability
Windows Link Layer Topology Discovery Protocol Remote Code Execution Vulnerability
CVE-2024-30077 Windows OLE Remote Code Execution Vulnerability
Windows OLE Remote Code Execution Vulnerability
CVE-2024-30078 Windows Wi-Fi Driver Remote Code Execution Vulnerability
Windows Wi-Fi Driver Remote Code Execution Vulnerability
CVE-2024-30072 Microsoft Event Trace Log File Parsing Remote Code Execution Vulnerability
Microsoft Event Trace Log File Parsing Remote Code Execution Vulnerability
CVE-2024-30070 DHCP Server Service Denial of Service Vulnerability
DHCP Server Service Denial of Service Vulnerability
CVE-2024-30065 Windows Themes Denial of Service Vulnerability
Windows Themes Denial of Service Vulnerability
CVE-2024-30063 Windows Distributed File System (DFS) Remote Code Execution Vulnerability
Windows Distributed File System (DFS) Remote Code Execution Vulnerability
CVE-2024-30052 Visual Studio Remote Code Execution Vulnerability
Visual Studio Remote Code Execution Vulnerability
CVE-2024-30062 Windows Standards-Based Storage Management Service Remote Code Execution Vulnerability
Windows Standards-Based Storage Management Service Remote Code Execution Vulnerability
CVE-2024-3166 Cross-Site Scripting (XSS) in mintplexlabs (CVE-2024-3166)
cross-site scripting in mintplexlabs (CVE-2024-3166). Successful exploitation can lead to full system takeover.
CVE-2024-1100 SQL Injection in sqli (CVE-2024-1100)
SQL injection in sqli (CVE-2024-1100). Successful exploitation can lead to full system takeover.
CVE-2024-1086 KEV [KEV] Use-After-Free in Linux kernel (CVE-2024-1086)
vulnerability in Linux kernel (CVE-2024-1086). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
CVE-2024-35563 SQL Injection in sqli (CVE-2024-35563)
SQL injection in sqli (CVE-2024-35563). Successful exploitation can lead to full system takeover.
CVE-2024-2199 Vulnerability in dos (CVE-2024-2199)
vulnerability in dos (CVE-2024-2199). Risk of unauthorized operations or information disclosure. Exploitable via ``userPassword``.
CVE-2024-0851 SQL Injection in sqli (CVE-2024-0851)
SQL injection in sqli (CVE-2024-0851). Risk of unauthorized operations or information disclosure.
CVE-2024-3822 Cross-Site Scripting (XSS) in wordpress (CVE-2024-3822)
cross-site scripting in wordpress (CVE-2024-3822). Risk of unauthorized operations or information disclosure.
CVE-2024-3823 Cross-Site Request Forgery (CSRF) in wordpress (CVE-2024-3823)
vulnerability in wordpress (CVE-2024-3823). Risk of unauthorized operations or information disclosure.
CVE-2024-3824 Cross-Site Request Forgery (CSRF) in wordpress (CVE-2024-3824)
vulnerability in wordpress (CVE-2024-3824). Risk of unauthorized operations or information disclosure.
CVE-2024-26367 Cross-Site Scripting (XSS) in CVE-2024-26367 (CVE-2024-26367)
cross-site scripting in CVE-2024-26367 (CVE-2024-26367). Risk of unauthorized operations or information disclosure.
CVE-2024-3727 Vulnerability in path-traversal (CVE-2024-3727)
vulnerability in path-traversal (CVE-2024-3727). Successful exploitation can lead to full system takeover.
CVE-2024-30801 SQL Injection in sqli (CVE-2024-30801)
SQL injection in sqli (CVE-2024-30801). Data can be tampered with by attackers.
CVE-2024-33601 Vulnerability in dos (CVE-2024-33601)
vulnerability in dos (CVE-2024-33601). Risk of unauthorized operations or information disclosure.
CVE-2024-4029 Vulnerability in org.wildfly:wildfly-domain-http (CVE-2024-4029)
vulnerability in org.wildfly:wildfly-domain-http (CVE-2024-4029). Risk of unauthorized operations or information disclosure.
CVE-2024-31828 Cross-Site Scripting (XSS) in lavalite (CVE-2024-31828)
cross-site scripting in lavalite (CVE-2024-31828). Risk of unauthorized operations or information disclosure.
CVE-2024-1726 Vulnerability in dos (CVE-2024-1726)
vulnerability in dos (CVE-2024-1726). Risk of unauthorized operations or information disclosure.
CVE-2024-1139 A credentials leak vulnerability was found in the cluster monitoring operator in OCP. This issue may allow a remote attacker who has basic login credentials to check the pod manifest to discover a re...
A credentials leak vulnerability was found in the cluster monitoring operator in OCP. This issue may allow a remote attacker who has basic login credentials to check the pod manifest to discover a repository pull secret.
CVE-2023-6717 Cross-Site Scripting (XSS) in CVE-2023-6717 (CVE-2023-6717)
cross-site scripting in CVE-2023-6717 (CVE-2023-6717). Confidential information can be exposed externally.
CVE-2023-6237 Vulnerability in dos (CVE-2023-6237)
vulnerability in dos (CVE-2023-6237). Risk of unauthorized operations or information disclosure.
CVE-2024-20353 KEV [KEV] Vulnerability in Cisco adaptive-security-appliance-asa-and-firepower-threat-defense-ftd (CVE-2024-20353)
vulnerability in Cisco adaptive-security-appliance-asa-and-firepower-threat-defense-ftd (CVE-2024-20353). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
CVE-2024-28722 Cross-Site Scripting (XSS) in CVE-2024-28722 (CVE-2024-28722)
cross-site scripting in CVE-2024-28722 (CVE-2024-28722). Risk of unauthorized operations or information disclosure.
CVE-2024-32206 Cross-Site Scripting (XSS) in wuzhicms (CVE-2024-32206)
cross-site scripting in wuzhicms (CVE-2024-32206). Risk of unauthorized operations or information disclosure.
CVE-2024-26898 Use-After-Free in dos (CVE-2024-26898)
vulnerability in dos (CVE-2024-26898). Successful exploitation can lead to full system takeover. Exploitable via ``skbtxq``.
CVE-2024-26257 Microsoft Excel Remote Code Execution Vulnerability
Microsoft Excel Remote Code Execution Vulnerability
CVE-2024-2511 Vulnerability in dos (CVE-2024-2511)
vulnerability in dos (CVE-2024-2511). Risk of unauthorized operations or information disclosure.
CVE-2024-28755 Vulnerability in dos (CVE-2024-28755)
vulnerability in dos (CVE-2024-28755). Risk of unauthorized operations or information disclosure.
CVE-2024-28836 Vulnerability in dos (CVE-2024-28836)
vulnerability in dos (CVE-2024-28836). Risk of unauthorized operations or information disclosure.
CVE-2024-30166 Vulnerability in dos (CVE-2024-30166)
vulnerability in dos (CVE-2024-30166). Confidential information can be exposed externally.
CVE-2024-22780 Cross-Site Scripting (XSS) in CVE-2024-22780 (CVE-2024-22780)
cross-site scripting in CVE-2024-22780 (CVE-2024-22780). Risk of unauthorized operations or information disclosure.
CVE-2023-6191 SQL Injection in sqli (CVE-2023-6191)
SQL injection in sqli (CVE-2023-6191). Successful exploitation can lead to full system takeover.
CVE-2023-6047 Cross-Site Scripting (XSS) in algoritimbilisim (CVE-2023-6047)
cross-site scripting in algoritimbilisim (CVE-2023-6047). Risk of unauthorized operations or information disclosure.
CVE-2024-28714 SQL Injection in sqli (CVE-2024-28714)
SQL injection in sqli (CVE-2024-28714). Confidential information can be exposed externally.
CVE-2024-31064 Cross-Site Scripting (XSS) in munyweki (CVE-2024-31064)
cross-site scripting in munyweki (CVE-2024-31064). Risk of unauthorized operations or information disclosure.
CVE-2023-6153 Vulnerability in CVE-2023-6153 (CVE-2023-6153)
vulnerability in CVE-2023-6153 (CVE-2023-6153). Successful exploitation can lead to full system takeover.
CVE-2023-6173 SQL Injection in sqli (CVE-2023-6173)
SQL injection in sqli (CVE-2023-6173). Successful exploitation can lead to full system takeover.
CVE-2024-29644 Cross-Site Scripting (XSS) in dcatadmin (CVE-2024-29644)
cross-site scripting in dcatadmin (CVE-2024-29644). Risk of unauthorized operations or information disclosure.
CVE-2024-2865 SQL Injection in sqli (CVE-2024-2865)
SQL injection in sqli (CVE-2024-2865). Successful exploitation can lead to full system takeover.

🍪 About cookies

We use cookies to keep you logged in, remember your language, and improve the service.

Details →