Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| CVE-2024-20667 |
|
Azure DevOps Server Remote Code Execution Vulnerability
Azure DevOps Server Remote Code Execution Vulnerability
|
| CVE-2024-20684 |
|
Windows Hyper-V Denial of Service Vulnerability
Windows Hyper-V Denial of Service Vulnerability
|
| CVE-2024-1459 |
|
Vulnerability in path-traversal (CVE-2024-1459)
vulnerability in path-traversal (CVE-2024-1459). Risk of unauthorized operations or information disclosure.
|
| CVE-2024-21490 |
|
Vulnerability in angular (CVE-2024-21490)
vulnerability in angular (CVE-2024-21490). Risk of unauthorized operations or information disclosure.
|
| CVE-2023-6677 |
|
SQL Injection in sqli (CVE-2023-6677)
SQL injection in sqli (CVE-2023-6677). Successful exploitation can lead to full system takeover.
|
| CVE-2024-22365 |
|
Vulnerability in dos (CVE-2024-22365)
vulnerability in dos (CVE-2024-22365). Risk of unauthorized operations or information disclosure.
|
| CVE-2024-24398 |
|
Path Traversal in path-traversal (CVE-2024-24398)
path traversal in path-traversal (CVE-2024-24398). Successful exploitation can lead to full system takeover.
|
| CVE-2024-24396 |
|
Cross-Site Scripting (XSS) in stimulsoft (CVE-2024-24396)
cross-site scripting in stimulsoft (CVE-2024-24396). Risk of unauthorized operations or information disclosure.
|
| CVE-2024-23054 |
|
Vulnerability in plone (CVE-2024-23054)
vulnerability in plone (CVE-2024-23054). Successful exploitation can lead to full system takeover.
|
| CVE-2024-24397 |
|
Cross-Site Scripting (XSS) in stimulsoft (CVE-2024-24397)
cross-site scripting in stimulsoft (CVE-2024-24397). Risk of unauthorized operations or information disclosure.
|
| CVE-2024-24855 |
|
Vulnerability in dos (CVE-2024-24855)
vulnerability in dos (CVE-2024-24855). Risk of unauthorized operations or information disclosure.
|
| CVE-2024-24857 |
|
Vulnerability in dos (CVE-2024-24857)
vulnerability in dos (CVE-2024-24857). Data can be tampered with by attackers.
|
| CVE-2024-24859 |
|
Vulnerability in dos (CVE-2024-24859)
vulnerability in dos (CVE-2024-24859). Risk of unauthorized operations or information disclosure.
|
| CVE-2024-24858 |
|
Vulnerability in dos (CVE-2024-24858)
vulnerability in dos (CVE-2024-24858). Risk of unauthorized operations or information disclosure.
|
| CVE-2023-6673 |
|
Cross-Site Scripting (XSS) in nationalkeep (CVE-2023-6673)
cross-site scripting in nationalkeep (CVE-2023-6673). Risk of unauthorized operations or information disclosure.
|
| CVE-2023-6672 |
|
Cross-Site Scripting (XSS) in nationalkeep (CVE-2023-6672)
cross-site scripting in nationalkeep (CVE-2023-6672). Risk of unauthorized operations or information disclosure.
|
| CVE-2023-6676 |
|
Cross-Site Request Forgery (CSRF) in csrf (CVE-2023-6676)
vulnerability in csrf (CVE-2023-6676). Successful exploitation can lead to full system takeover.
|
| CVE-2024-22899 |
|
Code Injection in vinchin (CVE-2024-22899)
code injection in vinchin (CVE-2024-22899). Successful exploitation can lead to full system takeover.
|
| CVE-2024-22900 |
|
Command Injection in vinchin (CVE-2024-22900)
command injection in vinchin (CVE-2024-22900). Successful exploitation can lead to full system takeover.
|
| CVE-2024-22903 |
|
Command Injection in vinchin (CVE-2024-22903)
command injection in vinchin (CVE-2024-22903). Successful exploitation can lead to full system takeover.
|
| CVE-2023-46344 |
|
Cross-Site Scripting (XSS) in solar-log (CVE-2023-46344)
cross-site scripting in solar-log (CVE-2023-46344). Risk of unauthorized operations or information disclosure.
|
| CVE-2024-21399 |
|
Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
|
| CVE-2023-6246 |
|
Vulnerability in privilege-escalation (CVE-2023-6246)
vulnerability in privilege-escalation (CVE-2023-6246). Successful exploitation can lead to full system takeover.
|
| CVE-2024-23775 |
|
Vulnerability in dos (CVE-2024-23775)
vulnerability in dos (CVE-2024-23775). Risk of unauthorized operations or information disclosure.
|
| CVE-2023-6919 |
|
Vulnerability in c (CVE-2023-6919)
vulnerability in c (CVE-2023-6919). Confidential information can be exposed externally.
|
| CVE-2024-0727 |
|
Vulnerability in cryptography (CVE-2024-0727)
vulnerability in cryptography (CVE-2024-0727). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `42.0.2` or later.
|
| CVE-2024-23055 |
|
Vulnerability in plone (CVE-2024-23055)
vulnerability in plone (CVE-2024-23055). Risk of unauthorized operations or information disclosure. Exploitable via `Host header`.
|
| CVE-2023-52355 |
|
Out-of-Bounds Write in dos (CVE-2023-52355)
out-of-bounds write in dos (CVE-2023-52355). Risk of unauthorized operations or information disclosure.
|
| CVE-2023-52356 |
|
Vulnerability in dos (CVE-2023-52356)
vulnerability in dos (CVE-2023-52356). Risk of unauthorized operations or information disclosure.
|
| CVE-2023-40547 |
|
Out-of-Bounds Write in redhat (CVE-2023-40547)
out-of-bounds write in redhat (CVE-2023-40547). Successful exploitation can lead to full system takeover.
|
| CVE-2023-51927 |
|
SQL Injection in sqli (CVE-2023-51927)
SQL injection in sqli (CVE-2023-51927). Successful exploitation can lead to full system takeover.
|
| CVE-2024-23684 |
|
Vulnerability in com.upokecenter:cbor (CVE-2024-23684)
vulnerability in com.upokecenter:cbor (CVE-2024-23684). Risk of unauthorized operations or information disclosure. Exploitable via ``DecodeFromBytes``. Mitigation: upgrade to `4.5.1` or later.
|
| CVE-2024-0758 |
|
Cross-Site Scripting (XSS) in de.ipb-halle:molecularfaces (CVE-2024-0758)
cross-site scripting in de.ipb-halle:molecularfaces (CVE-2024-0758). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `0.3.0` or later.
|
| CVE-2024-0731 |
|
Vulnerability in dos (CVE-2024-0731)
vulnerability in dos (CVE-2024-0731). Risk of unauthorized operations or information disclosure.
|
| CVE-2024-0732 |
|
Vulnerability in dos (CVE-2024-0732)
vulnerability in dos (CVE-2024-0732). Risk of unauthorized operations or information disclosure.
|
| CVE-2023-51946 |
|
Cross-Site Scripting (XSS) in actidata (CVE-2023-51946)
cross-site scripting in actidata (CVE-2023-51946). Risk of unauthorized operations or information disclosure.
|
| CVE-2023-7153 |
|
Cross-Site Scripting (XSS) in macroturk (CVE-2023-7153)
cross-site scripting in macroturk (CVE-2023-7153). Risk of unauthorized operations or information disclosure.
|
| CVE-2023-5806 |
|
SQL Injection in sqli (CVE-2023-5806)
SQL injection in sqli (CVE-2023-5806). Successful exploitation can lead to full system takeover.
|
| CVE-2024-0639 |
|
Vulnerability in c (CVE-2024-0639)
vulnerability in c (CVE-2024-0639). Risk of unauthorized operations or information disclosure.
|
| CVE-2023-46952 |
|
Cross-Site Scripting (XSS) in abocms (CVE-2023-46952)
cross-site scripting in abocms (CVE-2023-46952). Risk of unauthorized operations or information disclosure. Exploitable via `Referer header`.
|
| CVE-2021-4432 |
|
Vulnerability in dos (CVE-2021-4432)
vulnerability in dos (CVE-2021-4432). Risk of unauthorized operations or information disclosure.
|
| CVE-2023-51810 |
|
SQL Injection in sqli (CVE-2023-51810)
SQL injection in sqli (CVE-2023-51810). Confidential information can be exposed externally.
|
| CVE-2024-0565 |
|
Vulnerability in c (CVE-2024-0565)
vulnerability in c (CVE-2024-0565). Successful exploitation can lead to full system takeover.
|
| CVE-2023-7070 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2023-7070)
cross-site scripting in wordpress (CVE-2023-7070). Risk of unauthorized operations or information disclosure.
|
| CVE-2023-46805 KEV |
|
[KEV] Authentication Bypass in Ivanti connect-secure-and-policy-secure (CVE-2023-46805)
authentication bypass in Ivanti connect-secure-and-policy-secure (CVE-2023-46805). Confidential information can be exposed externally. Listed in CISA KEV — actively exploited.
|
| CVE-2023-6129 |
|
Vulnerability in dos (CVE-2023-6129)
vulnerability in dos (CVE-2023-6129). Risk of unauthorized operations or information disclosure.
|
| CVE-2022-28975 |
|
Cross-Site Scripting (XSS) in infoblox (CVE-2022-28975)
cross-site scripting in infoblox (CVE-2022-28975). Risk of unauthorized operations or information disclosure.
|
| CVE-2023-27000 |
|
Cross-Site Scripting (XSS) in netscout (CVE-2023-27000)
cross-site scripting in netscout (CVE-2023-27000). Risk of unauthorized operations or information disclosure.
|
| CVE-2023-26999 |
|
XXE (XML External Entity) in dos (CVE-2023-26999)
vulnerability in dos (CVE-2023-26999). Successful exploitation can lead to full system takeover.
|
| CVE-2023-26998 |
|
Cross-Site Scripting (XSS) in netscout (CVE-2023-26998)
cross-site scripting in netscout (CVE-2023-26998). Risk of unauthorized operations or information disclosure.
|