Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

ID Title
CVE-2024-47702 Vulnerability in c (CVE-2024-47702)
vulnerability in c (CVE-2024-47702). Successful exploitation can lead to full system takeover.
CVE-2024-47703 Vulnerability in linux (CVE-2024-47703)
vulnerability in linux (CVE-2024-47703). Successful exploitation can lead to full system takeover.
CVE-2024-47682 Vulnerability in linux (CVE-2024-47682)
vulnerability in linux (CVE-2024-47682). Risk of unauthorized operations or information disclosure.
CVE-2024-47690 Vulnerability in c (CVE-2024-47690)
vulnerability in c (CVE-2024-47690). Successful exploitation can lead to full system takeover.
CVE-2024-47675 Use-After-Free in linux (CVE-2024-47675)
vulnerability in linux (CVE-2024-47675). Successful exploitation can lead to full system takeover.
CVE-2024-47676 Use-After-Free in c (CVE-2024-47676)
vulnerability in c (CVE-2024-47676). Successful exploitation can lead to full system takeover.
CVE-2024-47679 Vulnerability in linux (CVE-2024-47679)
vulnerability in linux (CVE-2024-47679). Successful exploitation can lead to full system takeover.
CVE-2024-9537 KEV [KEV] Vulnerability in Sciencelogic sl1 (CVE-2024-9537)
vulnerability in Sciencelogic sl1 (CVE-2024-9537). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
CVE-2024-21536 Vulnerability in dos (CVE-2024-21536)
vulnerability in dos (CVE-2024-21536). Risk of unauthorized operations or information disclosure.
CVE-2024-40711 KEV [KEV] Unsafe Deserialization in Veeam backup-replication (CVE-2024-40711)
vulnerability in Veeam backup-replication (CVE-2024-40711). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
CVE-2024-35584 SQL Injection in sqli (CVE-2024-35584)
SQL injection in sqli (CVE-2024-35584). Successful exploitation can lead to full system takeover.
CVE-2024-47674 Vulnerability in linux (CVE-2024-47674)
vulnerability in linux (CVE-2024-47674). Successful exploitation can lead to full system takeover.
CVE-2024-30088 KEV [KEV] Vulnerability in Microsoft windows (CVE-2024-30088)
vulnerability in Microsoft windows (CVE-2024-30088). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
CVE-2024-28987 KEV [KEV] Vulnerability in Solarwinds web-help-desk (CVE-2024-28987)
vulnerability in Solarwinds web-help-desk (CVE-2024-28987). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
CVE-2023-50780 Vulnerability in apache (CVE-2023-50780)
vulnerability in apache (CVE-2023-50780). Successful exploitation can lead to full system takeover.
CVE-2024-48774 Vulnerability in CVE-2024-48774 (CVE-2024-48774)
vulnerability in CVE-2024-48774 (CVE-2024-48774). Confidential information can be exposed externally.
CVE-2024-48788 Vulnerability in CVE-2024-48788 (CVE-2024-48788)
vulnerability in CVE-2024-48788 (CVE-2024-48788). Confidential information can be exposed externally.
CVE-2024-48768 Vulnerability in CVE-2024-48768 (CVE-2024-48768)
vulnerability in CVE-2024-48768 (CVE-2024-48768). Confidential information can be exposed externally.
CVE-2024-48770 Vulnerability in CVE-2024-48770 (CVE-2024-48770)
vulnerability in CVE-2024-48770 (CVE-2024-48770). Confidential information can be exposed externally.
CVE-2024-48771 Vulnerability in CVE-2024-48771 (CVE-2024-48771)
vulnerability in CVE-2024-48771 (CVE-2024-48771). Confidential information can be exposed externally.
CVE-2024-48773 Vulnerability in CVE-2024-48773 (CVE-2024-48773)
vulnerability in CVE-2024-48773 (CVE-2024-48773). Confidential information can be exposed externally.
CVE-2024-48775 Vulnerability in CVE-2024-48775 (CVE-2024-48775)
vulnerability in CVE-2024-48775 (CVE-2024-48775). Confidential information can be exposed externally.
CVE-2024-48776 Vulnerability in CVE-2024-48776 (CVE-2024-48776)
vulnerability in CVE-2024-48776 (CVE-2024-48776). Confidential information can be exposed externally.
CVE-2024-48777 Vulnerability in CVE-2024-48777 (CVE-2024-48777)
vulnerability in CVE-2024-48777 (CVE-2024-48777). Confidential information can be exposed externally.
CVE-2024-46307 Vulnerability in sparkshop (CVE-2024-46307)
vulnerability in sparkshop (CVE-2024-46307). Data can be tampered with by attackers.
CVE-2024-9675 Path Traversal in github.com/containers/buildah (CVE-2024-9675)
path traversal in github.com/containers/buildah (CVE-2024-9675). Successful exploitation can lead to full system takeover. Exploitable via ``RUN``. Mitigation: upgrade to `1.38.0` or later.
CVE-2024-47667 Vulnerability in linux (CVE-2024-47667)
vulnerability in linux (CVE-2024-47667). Data can be tampered with by attackers.
CVE-2024-47668 Vulnerability in c (CVE-2024-47668)
vulnerability in c (CVE-2024-47668). Successful exploitation can lead to full system takeover.
CVE-2024-47669 Vulnerability in linux (CVE-2024-47669)
vulnerability in linux (CVE-2024-47669). Data can be tampered with by attackers.
CVE-2024-47670 Out-of-Bounds Write in linux (CVE-2024-47670)
out-of-bounds write in linux (CVE-2024-47670). Successful exploitation can lead to full system takeover.
CVE-2024-47658 Vulnerability in linux (CVE-2024-47658)
vulnerability in linux (CVE-2024-47658). Risk of unauthorized operations or information disclosure.
CVE-2024-9380 KEV [KEV] Command Injection in Ivanti cloud-services-appliance-csa (CVE-2024-9380)
command injection in Ivanti cloud-services-appliance-csa (CVE-2024-9380). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
CVE-2024-9379 KEV [KEV] SQL Injection in Ivanti cloud-services-appliance-csa (CVE-2024-9379)
SQL injection in Ivanti cloud-services-appliance-csa (CVE-2024-9379). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
CVE-2024-23113 KEV [KEV] Vulnerability in Fortinet multiple-products (CVE-2024-23113)
vulnerability in Fortinet multiple-products (CVE-2024-23113). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
CVE-2024-43590 Visual C++ Redistributable Installer Elevation of Privilege Vulnerability
Visual C++ Redistributable Installer Elevation of Privilege Vulnerability
CVE-2024-25885 Vulnerability in xhtml2pdf (CVE-2024-25885)
vulnerability in xhtml2pdf (CVE-2024-25885). Risk of unauthorized operations or information disclosure.
CVE-2024-43573 KEV [KEV] Cross-Site Scripting (XSS) in Microsoft windows (CVE-2024-43573)
cross-site scripting in Microsoft windows (CVE-2024-43573). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
CVE-2024-43572 KEV [KEV] Vulnerability in Microsoft windows (CVE-2024-43572)
vulnerability in Microsoft windows (CVE-2024-43572). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
CVE-2024-43047 KEV [KEV] Use-After-Free in Qualcomm multiple-chipsets (CVE-2024-43047)
vulnerability in Qualcomm multiple-chipsets (CVE-2024-43047). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
CVE-2024-6400 Vulnerability in finrota (CVE-2024-6400)
vulnerability in finrota (CVE-2024-6400). Confidential information can be exposed externally.
CVE-2023-37822 Vulnerability in eufy (CVE-2023-37822)
vulnerability in eufy (CVE-2023-37822). Confidential information can be exposed externally.
CVE-2024-45519 KEV [KEV] Vulnerability in Synacor zimbra-collaboration-suite-zcs (CVE-2024-45519)
vulnerability in Synacor zimbra-collaboration-suite-zcs (CVE-2024-45519). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
CVE-2024-29824 KEV [KEV] SQL Injection in Ivanti endpoint-manager-epm (CVE-2024-29824)
SQL injection in Ivanti endpoint-manager-epm (CVE-2024-29824). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
CVE-2024-46084 Command Injection in scriptcase (CVE-2024-46084)
command injection in scriptcase (CVE-2024-46084). Successful exploitation can lead to full system takeover.
CVE-2024-21489 Vulnerability in CVE-2024-21489 (CVE-2024-21489)
vulnerability in CVE-2024-21489 (CVE-2024-21489). Data can be tampered with by attackers.
CVE-2024-46869 Vulnerability in linux (CVE-2024-46869)
vulnerability in linux (CVE-2024-46869). Successful exploitation can lead to full system takeover.
CVE-2019-0344 KEV [KEV] Unsafe Deserialization in Sap commerce-cloud (CVE-2019-0344)
vulnerability in Sap commerce-cloud (CVE-2019-0344). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
CVE-2020-15415 KEV [KEV] OS Command Injection in Draytek multiple-vigor-routers (CVE-2020-15415)
OS command injection in Draytek multiple-vigor-routers (CVE-2020-15415). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
CVE-2023-25280 KEV [KEV] OS Command Injection in D-link dir-820-router (CVE-2023-25280)
OS command injection in D-link dir-820-router (CVE-2023-25280). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
CVE-2024-46854 Vulnerability in linux (CVE-2024-46854)
vulnerability in linux (CVE-2024-46854). Confidential information can be exposed externally.

🍪 About cookies

We use cookies to keep you logged in, remember your language, and improve the service.

Details →