Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

Filtering: Group: attack-types Clear
ID Title
CVE-2024-20667 Azure DevOps Server Remote Code Execution Vulnerability
Azure DevOps Server Remote Code Execution Vulnerability
CVE-2024-20684 Windows Hyper-V Denial of Service Vulnerability
Windows Hyper-V Denial of Service Vulnerability
CVE-2024-1459 Vulnerability in path-traversal (CVE-2024-1459)
vulnerability in path-traversal (CVE-2024-1459). Risk of unauthorized operations or information disclosure.
CVE-2024-21490 Vulnerability in angular (CVE-2024-21490)
vulnerability in angular (CVE-2024-21490). Risk of unauthorized operations or information disclosure.
CVE-2023-6677 SQL Injection in sqli (CVE-2023-6677)
SQL injection in sqli (CVE-2023-6677). Successful exploitation can lead to full system takeover.
CVE-2024-22365 Vulnerability in dos (CVE-2024-22365)
vulnerability in dos (CVE-2024-22365). Risk of unauthorized operations or information disclosure.
CVE-2024-24398 Path Traversal in path-traversal (CVE-2024-24398)
path traversal in path-traversal (CVE-2024-24398). Successful exploitation can lead to full system takeover.
CVE-2024-24396 Cross-Site Scripting (XSS) in stimulsoft (CVE-2024-24396)
cross-site scripting in stimulsoft (CVE-2024-24396). Risk of unauthorized operations or information disclosure.
CVE-2024-23054 Vulnerability in plone (CVE-2024-23054)
vulnerability in plone (CVE-2024-23054). Successful exploitation can lead to full system takeover.
CVE-2024-24397 Cross-Site Scripting (XSS) in stimulsoft (CVE-2024-24397)
cross-site scripting in stimulsoft (CVE-2024-24397). Risk of unauthorized operations or information disclosure.
CVE-2024-24855 Vulnerability in dos (CVE-2024-24855)
vulnerability in dos (CVE-2024-24855). Risk of unauthorized operations or information disclosure.
CVE-2024-24857 Vulnerability in dos (CVE-2024-24857)
vulnerability in dos (CVE-2024-24857). Data can be tampered with by attackers.
CVE-2024-24859 Vulnerability in dos (CVE-2024-24859)
vulnerability in dos (CVE-2024-24859). Risk of unauthorized operations or information disclosure.
CVE-2024-24858 Vulnerability in dos (CVE-2024-24858)
vulnerability in dos (CVE-2024-24858). Risk of unauthorized operations or information disclosure.
CVE-2023-6673 Cross-Site Scripting (XSS) in nationalkeep (CVE-2023-6673)
cross-site scripting in nationalkeep (CVE-2023-6673). Risk of unauthorized operations or information disclosure.
CVE-2023-6672 Cross-Site Scripting (XSS) in nationalkeep (CVE-2023-6672)
cross-site scripting in nationalkeep (CVE-2023-6672). Risk of unauthorized operations or information disclosure.
CVE-2023-6676 Cross-Site Request Forgery (CSRF) in csrf (CVE-2023-6676)
vulnerability in csrf (CVE-2023-6676). Successful exploitation can lead to full system takeover.
CVE-2024-22899 Code Injection in vinchin (CVE-2024-22899)
code injection in vinchin (CVE-2024-22899). Successful exploitation can lead to full system takeover.
CVE-2024-22900 Command Injection in vinchin (CVE-2024-22900)
command injection in vinchin (CVE-2024-22900). Successful exploitation can lead to full system takeover.
CVE-2024-22903 Command Injection in vinchin (CVE-2024-22903)
command injection in vinchin (CVE-2024-22903). Successful exploitation can lead to full system takeover.
CVE-2023-46344 Cross-Site Scripting (XSS) in solar-log (CVE-2023-46344)
cross-site scripting in solar-log (CVE-2023-46344). Risk of unauthorized operations or information disclosure.
CVE-2024-21399 Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
CVE-2023-6246 Vulnerability in privilege-escalation (CVE-2023-6246)
vulnerability in privilege-escalation (CVE-2023-6246). Successful exploitation can lead to full system takeover.
CVE-2024-23775 Vulnerability in dos (CVE-2024-23775)
vulnerability in dos (CVE-2024-23775). Risk of unauthorized operations or information disclosure.
CVE-2023-6919 Vulnerability in c (CVE-2023-6919)
vulnerability in c (CVE-2023-6919). Confidential information can be exposed externally.
CVE-2024-0727 Vulnerability in cryptography (CVE-2024-0727)
vulnerability in cryptography (CVE-2024-0727). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `42.0.2` or later.
CVE-2024-23055 Vulnerability in plone (CVE-2024-23055)
vulnerability in plone (CVE-2024-23055). Risk of unauthorized operations or information disclosure. Exploitable via `Host header`.
CVE-2023-52355 Out-of-Bounds Write in dos (CVE-2023-52355)
out-of-bounds write in dos (CVE-2023-52355). Risk of unauthorized operations or information disclosure.
CVE-2023-52356 Vulnerability in dos (CVE-2023-52356)
vulnerability in dos (CVE-2023-52356). Risk of unauthorized operations or information disclosure.
CVE-2023-40547 Out-of-Bounds Write in redhat (CVE-2023-40547)
out-of-bounds write in redhat (CVE-2023-40547). Successful exploitation can lead to full system takeover.
CVE-2023-51927 SQL Injection in sqli (CVE-2023-51927)
SQL injection in sqli (CVE-2023-51927). Successful exploitation can lead to full system takeover.
CVE-2024-23684 Vulnerability in com.upokecenter:cbor (CVE-2024-23684)
vulnerability in com.upokecenter:cbor (CVE-2024-23684). Risk of unauthorized operations or information disclosure. Exploitable via ``DecodeFromBytes``. Mitigation: upgrade to `4.5.1` or later.
CVE-2024-0758 Cross-Site Scripting (XSS) in de.ipb-halle:molecularfaces (CVE-2024-0758)
cross-site scripting in de.ipb-halle:molecularfaces (CVE-2024-0758). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `0.3.0` or later.
CVE-2024-0731 Vulnerability in dos (CVE-2024-0731)
vulnerability in dos (CVE-2024-0731). Risk of unauthorized operations or information disclosure.
CVE-2024-0732 Vulnerability in dos (CVE-2024-0732)
vulnerability in dos (CVE-2024-0732). Risk of unauthorized operations or information disclosure.
CVE-2023-51946 Cross-Site Scripting (XSS) in actidata (CVE-2023-51946)
cross-site scripting in actidata (CVE-2023-51946). Risk of unauthorized operations or information disclosure.
CVE-2023-7153 Cross-Site Scripting (XSS) in macroturk (CVE-2023-7153)
cross-site scripting in macroturk (CVE-2023-7153). Risk of unauthorized operations or information disclosure.
CVE-2023-5806 SQL Injection in sqli (CVE-2023-5806)
SQL injection in sqli (CVE-2023-5806). Successful exploitation can lead to full system takeover.
CVE-2024-0639 Vulnerability in c (CVE-2024-0639)
vulnerability in c (CVE-2024-0639). Risk of unauthorized operations or information disclosure.
CVE-2023-46952 Cross-Site Scripting (XSS) in abocms (CVE-2023-46952)
cross-site scripting in abocms (CVE-2023-46952). Risk of unauthorized operations or information disclosure. Exploitable via `Referer header`.
CVE-2021-4432 Vulnerability in dos (CVE-2021-4432)
vulnerability in dos (CVE-2021-4432). Risk of unauthorized operations or information disclosure.
CVE-2023-51810 SQL Injection in sqli (CVE-2023-51810)
SQL injection in sqli (CVE-2023-51810). Confidential information can be exposed externally.
CVE-2024-0565 Vulnerability in c (CVE-2024-0565)
vulnerability in c (CVE-2024-0565). Successful exploitation can lead to full system takeover.
CVE-2023-7070 Cross-Site Scripting (XSS) in wordpress (CVE-2023-7070)
cross-site scripting in wordpress (CVE-2023-7070). Risk of unauthorized operations or information disclosure.
CVE-2023-46805 KEV [KEV] Authentication Bypass in Ivanti connect-secure-and-policy-secure (CVE-2023-46805)
authentication bypass in Ivanti connect-secure-and-policy-secure (CVE-2023-46805). Confidential information can be exposed externally. Listed in CISA KEV — actively exploited.
CVE-2023-6129 Vulnerability in dos (CVE-2023-6129)
vulnerability in dos (CVE-2023-6129). Risk of unauthorized operations or information disclosure.
CVE-2022-28975 Cross-Site Scripting (XSS) in infoblox (CVE-2022-28975)
cross-site scripting in infoblox (CVE-2022-28975). Risk of unauthorized operations or information disclosure.
CVE-2023-27000 Cross-Site Scripting (XSS) in netscout (CVE-2023-27000)
cross-site scripting in netscout (CVE-2023-27000). Risk of unauthorized operations or information disclosure.
CVE-2023-26999 XXE (XML External Entity) in dos (CVE-2023-26999)
vulnerability in dos (CVE-2023-26999). Successful exploitation can lead to full system takeover.
CVE-2023-26998 Cross-Site Scripting (XSS) in netscout (CVE-2023-26998)
cross-site scripting in netscout (CVE-2023-26998). Risk of unauthorized operations or information disclosure.

🍪 About cookies

We use cookies to keep you logged in, remember your language, and improve the service.

Details →