Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| CVE-2024-47702 |
|
Vulnerability in c (CVE-2024-47702)
vulnerability in c (CVE-2024-47702). Successful exploitation can lead to full system takeover.
|
| CVE-2024-47703 |
|
Vulnerability in linux (CVE-2024-47703)
vulnerability in linux (CVE-2024-47703). Successful exploitation can lead to full system takeover.
|
| CVE-2024-47682 |
|
Vulnerability in linux (CVE-2024-47682)
vulnerability in linux (CVE-2024-47682). Risk of unauthorized operations or information disclosure.
|
| CVE-2024-47690 |
|
Vulnerability in c (CVE-2024-47690)
vulnerability in c (CVE-2024-47690). Successful exploitation can lead to full system takeover.
|
| CVE-2024-47675 |
|
Use-After-Free in linux (CVE-2024-47675)
vulnerability in linux (CVE-2024-47675). Successful exploitation can lead to full system takeover.
|
| CVE-2024-47676 |
|
Use-After-Free in c (CVE-2024-47676)
vulnerability in c (CVE-2024-47676). Successful exploitation can lead to full system takeover.
|
| CVE-2024-47679 |
|
Vulnerability in linux (CVE-2024-47679)
vulnerability in linux (CVE-2024-47679). Successful exploitation can lead to full system takeover.
|
| CVE-2024-9537 KEV |
|
[KEV] Vulnerability in Sciencelogic sl1 (CVE-2024-9537)
vulnerability in Sciencelogic sl1 (CVE-2024-9537). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
| CVE-2024-21536 |
|
Vulnerability in dos (CVE-2024-21536)
vulnerability in dos (CVE-2024-21536). Risk of unauthorized operations or information disclosure.
|
| CVE-2024-40711 KEV |
|
[KEV] Unsafe Deserialization in Veeam backup-replication (CVE-2024-40711)
vulnerability in Veeam backup-replication (CVE-2024-40711). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
| CVE-2024-35584 |
|
SQL Injection in sqli (CVE-2024-35584)
SQL injection in sqli (CVE-2024-35584). Successful exploitation can lead to full system takeover.
|
| CVE-2024-47674 |
|
Vulnerability in linux (CVE-2024-47674)
vulnerability in linux (CVE-2024-47674). Successful exploitation can lead to full system takeover.
|
| CVE-2024-30088 KEV |
|
[KEV] Vulnerability in Microsoft windows (CVE-2024-30088)
vulnerability in Microsoft windows (CVE-2024-30088). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
|
| CVE-2024-28987 KEV |
|
[KEV] Vulnerability in Solarwinds web-help-desk (CVE-2024-28987)
vulnerability in Solarwinds web-help-desk (CVE-2024-28987). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
| CVE-2023-50780 |
|
Vulnerability in apache (CVE-2023-50780)
vulnerability in apache (CVE-2023-50780). Successful exploitation can lead to full system takeover.
|
| CVE-2024-48774 |
|
Vulnerability in CVE-2024-48774 (CVE-2024-48774)
vulnerability in CVE-2024-48774 (CVE-2024-48774). Confidential information can be exposed externally.
|
| CVE-2024-48788 |
|
Vulnerability in CVE-2024-48788 (CVE-2024-48788)
vulnerability in CVE-2024-48788 (CVE-2024-48788). Confidential information can be exposed externally.
|
| CVE-2024-48768 |
|
Vulnerability in CVE-2024-48768 (CVE-2024-48768)
vulnerability in CVE-2024-48768 (CVE-2024-48768). Confidential information can be exposed externally.
|
| CVE-2024-48770 |
|
Vulnerability in CVE-2024-48770 (CVE-2024-48770)
vulnerability in CVE-2024-48770 (CVE-2024-48770). Confidential information can be exposed externally.
|
| CVE-2024-48771 |
|
Vulnerability in CVE-2024-48771 (CVE-2024-48771)
vulnerability in CVE-2024-48771 (CVE-2024-48771). Confidential information can be exposed externally.
|
| CVE-2024-48773 |
|
Vulnerability in CVE-2024-48773 (CVE-2024-48773)
vulnerability in CVE-2024-48773 (CVE-2024-48773). Confidential information can be exposed externally.
|
| CVE-2024-48775 |
|
Vulnerability in CVE-2024-48775 (CVE-2024-48775)
vulnerability in CVE-2024-48775 (CVE-2024-48775). Confidential information can be exposed externally.
|
| CVE-2024-48776 |
|
Vulnerability in CVE-2024-48776 (CVE-2024-48776)
vulnerability in CVE-2024-48776 (CVE-2024-48776). Confidential information can be exposed externally.
|
| CVE-2024-48777 |
|
Vulnerability in CVE-2024-48777 (CVE-2024-48777)
vulnerability in CVE-2024-48777 (CVE-2024-48777). Confidential information can be exposed externally.
|
| CVE-2024-46307 |
|
Vulnerability in sparkshop (CVE-2024-46307)
vulnerability in sparkshop (CVE-2024-46307). Data can be tampered with by attackers.
|
| CVE-2024-9675 |
|
Path Traversal in github.com/containers/buildah (CVE-2024-9675)
path traversal in github.com/containers/buildah (CVE-2024-9675). Successful exploitation can lead to full system takeover. Exploitable via ``RUN``. Mitigation: upgrade to `1.38.0` or later.
|
| CVE-2024-47667 |
|
Vulnerability in linux (CVE-2024-47667)
vulnerability in linux (CVE-2024-47667). Data can be tampered with by attackers.
|
| CVE-2024-47668 |
|
Vulnerability in c (CVE-2024-47668)
vulnerability in c (CVE-2024-47668). Successful exploitation can lead to full system takeover.
|
| CVE-2024-47669 |
|
Vulnerability in linux (CVE-2024-47669)
vulnerability in linux (CVE-2024-47669). Data can be tampered with by attackers.
|
| CVE-2024-47670 |
|
Out-of-Bounds Write in linux (CVE-2024-47670)
out-of-bounds write in linux (CVE-2024-47670). Successful exploitation can lead to full system takeover.
|
| CVE-2024-47658 |
|
Vulnerability in linux (CVE-2024-47658)
vulnerability in linux (CVE-2024-47658). Risk of unauthorized operations or information disclosure.
|
| CVE-2024-9380 KEV |
|
[KEV] Command Injection in Ivanti cloud-services-appliance-csa (CVE-2024-9380)
command injection in Ivanti cloud-services-appliance-csa (CVE-2024-9380). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
| CVE-2024-9379 KEV |
|
[KEV] SQL Injection in Ivanti cloud-services-appliance-csa (CVE-2024-9379)
SQL injection in Ivanti cloud-services-appliance-csa (CVE-2024-9379). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
| CVE-2024-23113 KEV |
|
[KEV] Vulnerability in Fortinet multiple-products (CVE-2024-23113)
vulnerability in Fortinet multiple-products (CVE-2024-23113). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
| CVE-2024-43590 |
|
Visual C++ Redistributable Installer Elevation of Privilege Vulnerability
Visual C++ Redistributable Installer Elevation of Privilege Vulnerability
|
| CVE-2024-25885 |
|
Vulnerability in xhtml2pdf (CVE-2024-25885)
vulnerability in xhtml2pdf (CVE-2024-25885). Risk of unauthorized operations or information disclosure.
|
| CVE-2024-43573 KEV |
|
[KEV] Cross-Site Scripting (XSS) in Microsoft windows (CVE-2024-43573)
cross-site scripting in Microsoft windows (CVE-2024-43573). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
| CVE-2024-43572 KEV |
|
[KEV] Vulnerability in Microsoft windows (CVE-2024-43572)
vulnerability in Microsoft windows (CVE-2024-43572). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
| CVE-2024-43047 KEV |
|
[KEV] Use-After-Free in Qualcomm multiple-chipsets (CVE-2024-43047)
vulnerability in Qualcomm multiple-chipsets (CVE-2024-43047). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
| CVE-2024-6400 |
|
Vulnerability in finrota (CVE-2024-6400)
vulnerability in finrota (CVE-2024-6400). Confidential information can be exposed externally.
|
| CVE-2023-37822 |
|
Vulnerability in eufy (CVE-2023-37822)
vulnerability in eufy (CVE-2023-37822). Confidential information can be exposed externally.
|
| CVE-2024-45519 KEV |
|
[KEV] Vulnerability in Synacor zimbra-collaboration-suite-zcs (CVE-2024-45519)
vulnerability in Synacor zimbra-collaboration-suite-zcs (CVE-2024-45519). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
| CVE-2024-29824 KEV |
|
[KEV] SQL Injection in Ivanti endpoint-manager-epm (CVE-2024-29824)
SQL injection in Ivanti endpoint-manager-epm (CVE-2024-29824). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
| CVE-2024-46084 |
|
Command Injection in scriptcase (CVE-2024-46084)
command injection in scriptcase (CVE-2024-46084). Successful exploitation can lead to full system takeover.
|
| CVE-2024-21489 |
|
Vulnerability in CVE-2024-21489 (CVE-2024-21489)
vulnerability in CVE-2024-21489 (CVE-2024-21489). Data can be tampered with by attackers.
|
| CVE-2024-46869 |
|
Vulnerability in linux (CVE-2024-46869)
vulnerability in linux (CVE-2024-46869). Successful exploitation can lead to full system takeover.
|
| CVE-2019-0344 KEV |
|
[KEV] Unsafe Deserialization in Sap commerce-cloud (CVE-2019-0344)
vulnerability in Sap commerce-cloud (CVE-2019-0344). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
| CVE-2020-15415 KEV |
|
[KEV] OS Command Injection in Draytek multiple-vigor-routers (CVE-2020-15415)
OS command injection in Draytek multiple-vigor-routers (CVE-2020-15415). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
| CVE-2023-25280 KEV |
|
[KEV] OS Command Injection in D-link dir-820-router (CVE-2023-25280)
OS command injection in D-link dir-820-router (CVE-2023-25280). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
| CVE-2024-46854 |
|
Vulnerability in linux (CVE-2024-46854)
vulnerability in linux (CVE-2024-46854). Confidential information can be exposed externally.
|