Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| CVE-2024-37774 |
|
Cross-Site Request Forgery (CSRF) in csrf (CVE-2024-37774)
vulnerability in csrf (CVE-2024-37774). Successful exploitation can lead to full system takeover.
|
| CVE-2024-37775 |
|
Authorization Flaw in sunbirddcim (CVE-2024-37775)
vulnerability in sunbirddcim (CVE-2024-37775). Data can be tampered with by attackers.
|
| CVE-2024-35250 KEV |
|
[KEV] Vulnerability in Microsoft windows (CVE-2024-35250)
vulnerability in Microsoft windows (CVE-2024-35250). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
|
| CVE-2024-20767 KEV |
|
[KEV] Vulnerability in Adobe coldfusion (CVE-2024-20767)
vulnerability in Adobe coldfusion (CVE-2024-20767). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
| CVE-2024-12397 |
|
Vulnerability in CVE-2024-12397 (CVE-2024-12397)
vulnerability in CVE-2024-12397 (CVE-2024-12397). Confidential information can be exposed externally.
|
| CVE-2024-54508 |
|
Out-of-Bounds Read in apple (CVE-2024-54508)
vulnerability in apple (CVE-2024-54508). Risk of unauthorized operations or information disclosure.
|
| CVE-2024-49138 KEV |
|
[KEV] Vulnerability in Microsoft windows (CVE-2024-49138)
vulnerability in Microsoft windows (CVE-2024-49138). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
| CVE-2024-40582 |
|
Pentaminds CuroVMS v2.0.1 was discovered to contain exposed sensitive information.
Pentaminds CuroVMS v2.0.1 was discovered to contain exposed sensitive information.
|
| CVE-2024-12254 |
|
Vulnerability in CVE-2024-12254 (CVE-2024-12254)
vulnerability in CVE-2024-12254 (CVE-2024-12254). Risk of unauthorized operations or information disclosure.
|
| CVE-2024-54216 |
|
Vulnerability in path-traversal (CVE-2024-54216)
vulnerability in path-traversal (CVE-2024-54216). Confidential information can be exposed externally.
|
| CVE-2024-53141 |
|
Vulnerability in linux (CVE-2024-53141)
vulnerability in linux (CVE-2024-53141). Successful exploitation can lead to full system takeover.
|
| CVE-2024-53140 |
|
Vulnerability in linux (CVE-2024-53140)
vulnerability in linux (CVE-2024-53140). Successful exploitation can lead to full system takeover.
|
| CVE-2024-53135 |
|
Vulnerability in linux (CVE-2024-53135)
vulnerability in linux (CVE-2024-53135). Successful exploitation can lead to full system takeover.
|
| CVE-2024-53136 |
|
Vulnerability in linux (CVE-2024-53136)
vulnerability in linux (CVE-2024-53136). Risk of unauthorized operations or information disclosure.
|
| CVE-2024-53126 |
|
Vulnerability in linux (CVE-2024-53126)
vulnerability in linux (CVE-2024-53126). Confidential information can be exposed externally.
|
| CVE-2024-53127 |
|
Vulnerability in linux (CVE-2024-53127)
vulnerability in linux (CVE-2024-53127). Successful exploitation can lead to full system takeover.
|
| CVE-2024-53125 |
|
Vulnerability in linux (CVE-2024-53125)
vulnerability in linux (CVE-2024-53125). Successful exploitation can lead to full system takeover.
|
| CVE-2024-11667 KEV |
|
[KEV] Path Traversal in Zyxel multiple-firewalls (CVE-2024-11667)
path traversal in Zyxel multiple-firewalls (CVE-2024-11667). Confidential information can be exposed externally. Listed in CISA KEV — actively exploited.
|
| CVE-2023-45727 KEV |
|
[KEV] XXE (XML External Entity) in North grid north-grid (CVE-2023-45727)
vulnerability in North grid north-grid (CVE-2023-45727). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
| CVE-2024-53124 |
|
Vulnerability in c (CVE-2024-53124)
vulnerability in c (CVE-2024-53124). Risk of unauthorized operations or information disclosure.
|
| CVE-2024-53122 |
|
Vulnerability in linux (CVE-2024-53122)
vulnerability in linux (CVE-2024-53122). Risk of unauthorized operations or information disclosure.
|
| CVE-2024-53120 |
|
Vulnerability in linux (CVE-2024-53120)
vulnerability in linux (CVE-2024-53120). Risk of unauthorized operations or information disclosure.
|
| CVE-2024-53121 |
|
Vulnerability in c (CVE-2024-53121)
vulnerability in c (CVE-2024-53121). Successful exploitation can lead to full system takeover.
|
| CVE-2024-53106 |
|
Out-of-Bounds Write in linux (CVE-2024-53106)
out-of-bounds write in linux (CVE-2024-53106). Confidential information can be exposed externally.
|
| CVE-2024-53107 |
|
Vulnerability in linux (CVE-2024-53107)
vulnerability in linux (CVE-2024-53107). Successful exploitation can lead to full system takeover.
|
| CVE-2024-53108 |
|
Out-of-Bounds Read in linux (CVE-2024-53108)
vulnerability in linux (CVE-2024-53108). Confidential information can be exposed externally.
|
| CVE-2024-53109 |
|
Vulnerability in linux (CVE-2024-53109)
vulnerability in linux (CVE-2024-53109). Successful exploitation can lead to full system takeover.
|
| CVE-2024-53110 |
|
Vulnerability in linux (CVE-2024-53110)
vulnerability in linux (CVE-2024-53110). Confidential information can be exposed externally.
|
| CVE-2024-53111 |
|
Vulnerability in c (CVE-2024-53111)
vulnerability in c (CVE-2024-53111). Data can be tampered with by attackers. Exploitable via ``old_addr``.
|
| CVE-2024-53920 |
|
Code Injection in gnu (CVE-2024-53920)
code injection in gnu (CVE-2024-53920). Successful exploitation can lead to full system takeover.
|
| CVE-2024-8676 |
|
Vulnerability in CVE-2024-8676 (CVE-2024-8676)
vulnerability in CVE-2024-8676 (CVE-2024-8676). Confidential information can be exposed externally.
|
| CVE-2024-52336 |
|
Privilege Escalation in privilege-escalation (CVE-2024-52336)
vulnerability in privilege-escalation (CVE-2024-52336). Successful exploitation can lead to full system takeover. Exploitable via ``script_pre``.
|
| CVE-2024-53099 |
|
Out-of-Bounds Read in linux (CVE-2024-53099)
vulnerability in linux (CVE-2024-53099). Confidential information can be exposed externally.
|
| CVE-2024-53100 |
|
Vulnerability in c (CVE-2024-53100)
vulnerability in c (CVE-2024-53100). Successful exploitation can lead to full system takeover.
|
| CVE-2024-7837 |
|
SQL Injection in sqli (CVE-2024-7837)
SQL injection in sqli (CVE-2024-7837). Confidential information can be exposed externally.
|
| CVE-2024-51364 |
|
Unrestricted File Upload in CVE-2024-51364 (CVE-2024-51364)
vulnerability in CVE-2024-51364 (CVE-2024-51364). Successful exploitation can lead to full system takeover.
|
| CVE-2024-53090 |
|
Vulnerability in linux (CVE-2024-53090)
vulnerability in linux (CVE-2024-53090). Risk of unauthorized operations or information disclosure.
|
| CVE-2024-53091 |
|
Vulnerability in linux (CVE-2024-53091)
vulnerability in linux (CVE-2024-53091). Successful exploitation can lead to full system takeover.
|
| CVE-2024-53092 |
|
Vulnerability in linux (CVE-2024-53092)
vulnerability in linux (CVE-2024-53092). Successful exploitation can lead to full system takeover.
|
| CVE-2024-53093 |
|
Vulnerability in linux (CVE-2024-53093)
vulnerability in linux (CVE-2024-53093). Risk of unauthorized operations or information disclosure.
|
| CVE-2024-7026 |
|
SQL Injection in sqli (CVE-2024-7026)
SQL injection in sqli (CVE-2024-7026). Confidential information can be exposed externally.
|
| CVE-2024-21287 KEV |
|
[KEV] Authorization Flaw in Oracle agile-product-lifecycle-management-plm (CVE-2024-21287)
vulnerability in Oracle agile-product-lifecycle-management-plm (CVE-2024-21287). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
| CVE-2024-44309 KEV |
|
[KEV] Cross-Site Scripting (XSS) in Apple multiple-products (CVE-2024-44309)
cross-site scripting in Apple multiple-products (CVE-2024-44309). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
| CVE-2024-44308 KEV |
|
[KEV] Vulnerability in Apple multiple-products (CVE-2024-44308)
vulnerability in Apple multiple-products (CVE-2024-44308). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
| CVE-2024-38813 KEV |
|
[KEV] Vulnerability in Vmware vcenter-server (CVE-2024-38813)
vulnerability in Vmware vcenter-server (CVE-2024-38813). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
| CVE-2024-38812 KEV |
|
[KEV] Vulnerability in Vmware vcenter-server (CVE-2024-38812)
vulnerability in Vmware vcenter-server (CVE-2024-38812). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
| CVE-2024-53076 |
|
Vulnerability in linux (CVE-2024-53076)
vulnerability in linux (CVE-2024-53076). Successful exploitation can lead to full system takeover.
|
| CVE-2024-53079 |
|
Vulnerability in linux (CVE-2024-53079)
vulnerability in linux (CVE-2024-53079). Successful exploitation can lead to full system takeover.
|
| CVE-2024-53080 |
|
Vulnerability in linux (CVE-2024-53080)
vulnerability in linux (CVE-2024-53080). Successful exploitation can lead to full system takeover.
|
| CVE-2024-53082 |
|
Out-of-Bounds Read in linux (CVE-2024-53082)
vulnerability in linux (CVE-2024-53082). Successful exploitation can lead to full system takeover.
|