Vulnerabilities (CVE)

1,704 pages, showing 1,201–1,300, ordered by identifier.

CVE-2023-44221 — SonicWall SMA100 Appliances OS Command Injection Vulnerability SonicWall SMA100 appliances contain an OS command injection vulnerability in the SSL-VPN management interface that...
CVE-2023-44487 — HTTP/2 Rapid Reset Attack Vulnerability HTTP/2 contains a rapid reset vulnerability that allows for a distributed denial-of-service attack (DDoS).
CVE-2023-45249 — Acronis Cyber Infrastructure (ACI) Insecure Default Password Vulnerability Acronis Cyber Infrastructure (ACI) allows an unauthenticated user to execute commands remotely due to the use of...
CVE-2023-45727 — North Grid Proself Improper Restriction of XML External Entity (XXE) Reference Vulnerability North Grid Proself Enterprise/Standard, Gateway, and Mail Sanitize contain an improper restriction of XML External...
CVE-2023-46604 — Apache ActiveMQ Deserialization of Untrusted Data Vulnerability Apache ActiveMQ contains a deserialization of untrusted data vulnerability that may allow a remote attacker with...
CVE-2023-46747 — F5 BIG-IP Configuration Utility Authentication Bypass Vulnerability F5 BIG-IP Configuration utility contains an authentication bypass using an alternate path or channel vulnerability...
CVE-2023-46748 — F5 BIG-IP Configuration Utility SQL Injection Vulnerability F5 BIG-IP Configuration utility contains an SQL injection vulnerability that may allow an authenticated attacker...
CVE-2023-46805 — Ivanti Connect Secure and Policy Secure Authentication Bypass Vulnerability Ivanti Connect Secure (ICS, formerly known as Pulse Connect Secure) and Ivanti Policy Secure gateways contain an...
CVE-2023-47246 — SysAid Server Path Traversal Vulnerability SysAid Server (on-premises version) contains a path traversal vulnerability that leads to code execution.
CVE-2023-47565 — QNAP VioStor NVR OS Command Injection Vulnerability QNAP VioStar NVR contains an OS command injection vulnerability that allows authenticated users to execute commands...
CVE-2023-4762 — Google Chromium V8 Type Confusion Vulnerability Google Chromium V8 contains a type confusion vulnerability that allows a remote attacker to execute code via a...
CVE-2023-48365 — Qlik Sense HTTP Tunneling Vulnerability Qlik Sense contains an HTTP tunneling vulnerability that allows an attacker to escalate privileges and execute HTTP...
CVE-2023-4863 — Google Chromium WebP Heap-Based Buffer Overflow Vulnerability Google Chromium WebP contains a heap-based buffer overflow vulnerability that allows a remote attacker to perform an...
CVE-2023-48788 — Fortinet FortiClient EMS SQL Injection Vulnerability Fortinet FortiClient EMS contains a SQL injection vulnerability that allows an unauthenticated attacker to execute...
CVE-2023-49103 — ownCloud graphapi Information Disclosure Vulnerability ownCloud graphapi contains an information disclosure vulnerability that can reveal sensitive data stored in...
CVE-2023-49105 — ownCloud Improper Authentication Vulnerability ownCloud contains an improper authentication vulnerability that allows an attacker to access, modify, or delete any...
CVE-2023-4911 — GNU C Library Buffer Overflow Vulnerability GNU C Library's dynamic loader ld.so contains a buffer overflow vulnerability when processing the GLIBC_TUNABLES...
CVE-2023-4966 — Citrix NetScaler ADC and NetScaler Gateway Buffer Overflow Vulnerability Citrix NetScaler ADC and NetScaler Gateway contain a buffer overflow vulnerability that allows for sensitive...
CVE-2023-49897 — FXC AE1021, AE1021PE OS Command Injection Vulnerability FXC AE1021 and AE1021PE contain an OS command injection vulnerability that allows authenticated users to execute...
CVE-2023-50224 — TP-Link TL-WR841N Authentication Bypass by Spoofing Vulnerability TP-Link TL-WR841N contains an authentication bypass by spoofing vulnerability within the httpd service, which...
CVE-2023-52163 — Digiever DS-2105 Pro Missing Authorization Vulnerability Digiever DS-2105 Pro contains a missing authorization vulnerability which could allow for command injection via...
CVE-2023-5217 — Google Chromium libvpx Heap Buffer Overflow Vulnerability Google Chromium libvpx contains a heap buffer overflow vulnerability in vp8 encoding that allows a remote attacker...
CVE-2023-5631 — Roundcube Webmail Persistent Cross-Site Scripting (XSS) Vulnerability Roundcube Webmail contains a persistent cross-site scripting (XSS) vulnerability that allows a remote attacker to...
CVE-2023-6345 — Google Skia Integer Overflow Vulnerability Google Chromium Skia contains an integer overflow vulnerability that allows a remote attacker, who has compromised...
CVE-2023-6448 — Unitronics Vision PLC and HMI Insecure Default Password Vulnerability Unitronics Vision Series PLCs and HMIs ship with an insecure default password, which if left unchanged, can allow...
CVE-2023-6548 — Citrix NetScaler ADC and NetScaler Gateway Code Injection Vulnerability Citrix NetScaler ADC and NetScaler Gateway contain a code injection vulnerability that allows for authenticated...
CVE-2023-6549 — Citrix NetScaler ADC and NetScaler Gateway Buffer Overflow Vulnerability Citrix NetScaler ADC and NetScaler Gateway contain a buffer overflow vulnerability that allows for a...
CVE-2023-7024 — Google Chromium WebRTC Heap Buffer Overflow Vulnerability Google Chromium WebRTC, an open-source project providing web browsers with real-time communication, contains a heap...
CVE-2023-7028 — GitLab Community and Enterprise Editions Improper Access Control Vulnerability GitLab Community and Enterprise Editions contain an improper access control vulnerability. This allows an attacker...
CVE-2023-7101 — Spreadsheet::ParseExcel Remote Code Execution Vulnerability Spreadsheet::ParseExcel contains a remote code execution vulnerability due to passing unvalidated input from a file...
CVE-2024-0012 — Palo Alto Networks PAN-OS Management Interface Authentication Bypass Vulnerability Palo Alto Networks PAN-OS contains an authentication bypass vulnerability in the web-based management interface for...
CVE-2024-0519 — Google Chromium V8 Out-of-Bounds Memory Access Vulnerability Google Chromium V8 Engine contains an out-of-bounds memory access vulnerability that allows a remote attacker to...
CVE-2024-0769 — D-Link DIR-859 Router Path Traversal Vulnerability D-Link DIR-859 routers contain a path traversal vulnerability in the file /hedwig.cgi of the component HTTP POST...
CVE-2024-1086 — Linux Kernel Use-After-Free Vulnerability Linux kernel contains a use-after-free vulnerability in the netfilter: nf_tables component that allows an attacker...
CVE-2024-11120 — GeoVision Devices OS Command Injection Vulnerability Multiple GeoVision devices contain an OS command injection vulnerability that allows a remote, unauthenticated...
CVE-2024-11182 — MDaemon Email Server Cross-Site Scripting (XSS) Vulnerability MDaemon Email Server contains a cross-site scripting (XSS) vulnerability that allows a remote attacker to load...
CVE-2024-11667 — Zyxel Multiple Firewalls Path Traversal Vulnerability Multiple Zyxel firewalls contain a path traversal vulnerability in the web management interface that could allow an...
CVE-2024-11680 — ProjectSend Improper Authentication Vulnerability ProjectSend contains an improper authentication vulnerability that allows a remote, unauthenticated attacker to...
CVE-2024-1212 — Progress Kemp LoadMaster OS Command Injection Vulnerability Progress Kemp LoadMaster contains an OS command injection vulnerability that allows an unauthenticated, remote...
CVE-2024-12356 — BeyondTrust Privileged Remote Access (PRA) and Remote Support (RS) Command Injection Vulnerability BeyondTrust Privileged Remote Access (PRA) and Remote Support (RS) contain a command injection vulnerability, which...
CVE-2024-12686 — BeyondTrust Privileged Remote Access (PRA) and Remote Support (RS) OS Command Injection Vulnerability BeyondTrust Privileged Remote Access (PRA) and Remote Support (RS) contain an OS command injection vulnerability...
CVE-2024-12987 — DrayTek Vigor Routers OS Command Injection Vulnerability DrayTek Vigor2960, Vigor300B, and Vigor3900 routers contain an OS command injection vulnerability due to an unknown...
CVE-2024-13159 — Ivanti Endpoint Manager (EPM) Absolute Path Traversal Vulnerability Ivanti Endpoint Manager (EPM) contains an absolute path traversal vulnerability that allows a remote unauthenticated...
CVE-2024-13160 — Ivanti Endpoint Manager (EPM) Absolute Path Traversal Vulnerability Ivanti Endpoint Manager (EPM) contains an absolute path traversal vulnerability that allows a remote unauthenticated...
CVE-2024-13161 — Ivanti Endpoint Manager (EPM) Absolute Path Traversal Vulnerability Ivanti Endpoint Manager (EPM) contains an absolute path traversal vulnerability that allows a remote unauthenticated...
CVE-2024-1708 — ConnectWise ScreenConnect Path Traversal Vulnerability ConnectWise ScreenConnect contains a path traversal vulnerability which could allow an attacker to execute remote...
CVE-2024-1709 — ConnectWise ScreenConnect Authentication Bypass Vulnerability ConnectWise ScreenConnect contains an authentication bypass vulnerability that allows an attacker with network...
CVE-2024-20353 — Cisco ASA and FTD Denial of Service Vulnerability Cisco Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) contain an infinite loop vulnerability...
CVE-2024-20359 — Cisco ASA and FTD Privilege Escalation Vulnerability Cisco Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) contain a privilege escalation...
CVE-2024-20399 — Cisco NX-OS Command Injection Vulnerability Cisco NX-OS contains a command injection vulnerability in the command line interface (CLI) that could allow an...
CVE-2024-20439 — Cisco Smart Licensing Utility Static Credential Vulnerability Cisco Smart Licensing Utility contains a static credential vulnerability that allows an unauthenticated, remote...
CVE-2024-20481 — Cisco ASA and FTD Denial-of-Service Vulnerability Cisco Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) contain a missing release of resource...
CVE-2024-20767 — Adobe ColdFusion Improper Access Control Vulnerability Adobe ColdFusion contains an improper access control vulnerability that could allow an attacker to access or modify...
CVE-2024-20953 — Oracle Agile Product Lifecycle Management (PLM) Deserialization Vulnerability Oracle Agile Product Lifecycle Management (PLM) contains a deserialization vulnerability that allows a...
CVE-2024-21182 — Oracle WebLogic Server Unspecified Vulnerability Oracle WebLogic contains an unspecified vulnerability that could allow an unauthenticated attacker with network...
CVE-2024-21287 — Oracle Agile Product Lifecycle Management (PLM) Incorrect Authorization Vulnerability Oracle Agile Product Lifecycle Management (PLM) contains an incorrect authorization vulnerability in the Process...
CVE-2024-21338 — Microsoft Windows Kernel Exposed IOCTL with Insufficient Access Control Vulnerability Microsoft Windows Kernel contains an exposed IOCTL with insufficient access control vulnerability within the IOCTL...
CVE-2024-21351 — Microsoft Windows SmartScreen Security Feature Bypass Vulnerability Microsoft Windows SmartScreen contains a security feature bypass vulnerability that allows an attacker to bypass the...
CVE-2024-21410 — Microsoft Exchange Server Privilege Escalation Vulnerability Microsoft Exchange Server contains an unspecified vulnerability that allows for privilege escalation.
CVE-2024-21412 — Microsoft Windows Internet Shortcut Files Security Feature Bypass Vulnerability Microsoft Windows Internet Shortcut Files contains an unspecified vulnerability that allows for a security feature bypass.
CVE-2024-21413 — Microsoft Outlook Improper Input Validation Vulnerability Microsoft Outlook contains an improper input validation vulnerability that allows for remote code execution....
CVE-2024-21762 — Fortinet FortiOS Out-of-Bound Write Vulnerability Fortinet FortiOS contains an out-of-bound write vulnerability that allows a remote unauthenticated attacker to...
CVE-2024-21887 — Ivanti Connect Secure and Policy Secure Command Injection Vulnerability Ivanti Connect Secure (ICS, formerly known as Pulse Connect Secure) and Ivanti Policy Secure contain a command...
CVE-2024-21893 — Ivanti Connect Secure, Policy Secure, and Neurons Server-Side Request Forgery (SSRF) Vulnerability Ivanti Connect Secure (ICS, formerly known as Pulse Connect Secure), Ivanti Policy Secure, and Ivanti Neurons...
CVE-2024-23113 — Fortinet Multiple Products Format String Vulnerability Fortinet FortiOS, FortiPAM, FortiProxy, and FortiWeb contain a format string vulnerability that allows a remote,...
CVE-2024-23222 — Apple Multiple Products WebKit Type Confusion Vulnerability Apple iOS, iPadOS, macOS, tvOS, and Safari WebKit contain a type confusion vulnerability that leads to code...
CVE-2024-23225 — Apple Multiple Products Memory Corruption Vulnerability Apple iOS, iPadOS, macOS, tvOS, watchOS, and visionOS kernel contain a memory corruption vulnerability that allows...
CVE-2024-23296 — Apple Multiple Products Memory Corruption Vulnerability Apple iOS, iPadOS, macOS, tvOS, and watchOS RTKit contain a memory corruption vulnerability that allows an attacker...
CVE-2024-23692 — Rejetto HTTP File Server Improper Neutralization of Special Elements Used in a Template Engine Vulnerability Rejetto HTTP File Server contains an improper neutralization of special elements used in a template engine...
CVE-2024-23897 — Jenkins Command Line Interface (CLI) Path Traversal Vulnerability Jenkins Command Line Interface (CLI) contains a path traversal vulnerability that allows attackers limited read...
CVE-2024-24919 — Check Point Quantum Security Gateways Information Disclosure Vulnerability Check Point Quantum Security Gateways contain an unspecified information disclosure vulnerability. The vulnerability...
CVE-2024-26169 — Microsoft Windows Error Reporting Service Improper Privilege Management Vulnerability Microsoft Windows Error Reporting Service contains an improper privilege management vulnerability that allows a...
CVE-2024-27198 — JetBrains TeamCity Authentication Bypass Vulnerability JetBrains TeamCity contains an authentication bypass vulnerability that allows an attacker to perform admin actions.
CVE-2024-27199 — JetBrains TeamCity Relative Path Traversal Vulnerability JetBrains TeamCity contains a relative path traversal vulnerability that could allow limited admin actions to be performed.
CVE-2024-27348 — Apache HugeGraph-Server Improper Access Control Vulnerability Apache HugeGraph-Server contains an improper access control vulnerability that could allow a remote attacker to...
CVE-2024-27443 — Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability Zimbra Collaboration contains a cross-site scripting (XSS) vulnerability in the CalendarInvite feature of the Zimbra...
CVE-2024-28986 — SolarWinds Web Help Desk Deserialization of Untrusted Data Vulnerability SolarWinds Web Help Desk contains a deserialization of untrusted data vulnerability that could allow for remote code...
CVE-2024-28987 — SolarWinds Web Help Desk Hardcoded Credential Vulnerability SolarWinds Web Help Desk contains a hardcoded credential vulnerability that could allow a remote, unauthenticated...
CVE-2024-28995 — SolarWinds Serv-U Path Traversal Vulnerability SolarWinds Serv-U contains a path traversal vulnerability that allows an attacker access to read sensitive files on...
CVE-2024-29059 — Microsoft .NET Framework Information Disclosure Vulnerability Microsoft .NET Framework contains an information disclosure vulnerability that exposes the ObjRef URI to an...
CVE-2024-29745 — Android Pixel Information Disclosure Vulnerability Android Pixel contains an information disclosure vulnerability in the fastboot firmware used to support unlocking,...
CVE-2024-29748 — Android Pixel Privilege Escalation Vulnerability Android Pixel contains a privilege escalation vulnerability that allows an attacker to interrupt a factory reset...
CVE-2024-29824 — Ivanti Endpoint Manager (EPM) SQL Injection Vulnerability Ivanti Endpoint Manager (EPM) contains a SQL injection vulnerability in Core server that allows an unauthenticated...
CVE-2024-29988 — Microsoft SmartScreen Prompt Security Feature Bypass Vulnerability Microsoft SmartScreen Prompt contains a security feature bypass vulnerability that allows an attacker to bypass the...
CVE-2024-30040 — Microsoft Windows MSHTML Platform Security Feature Bypass Vulnerability Microsoft Windows MSHTML Platform contains an unspecified vulnerability that allows for a security feature bypass.
CVE-2024-30051 — Microsoft DWM Core Library Privilege Escalation Vulnerability Microsoft DWM Core Library contains a privilege escalation vulnerability that allows an attacker to gain SYSTEM privileges.
CVE-2024-30088 — Microsoft Windows Kernel TOCTOU Race Condition Vulnerability Microsoft Windows Kernel contains a time-of-check to time-of-use (TOCTOU) race condition vulnerability that could...
CVE-2024-32113 — Apache OFBiz Path Traversal Vulnerability Apache OFBiz contains a path traversal vulnerability that could allow for remote code execution.
CVE-2024-3272 — D-Link Multiple NAS Devices Use of Hard-Coded Credentials Vulnerability D-Link DNS-320L, DNS-325, DNS-327L, and DNS-340L contains a hard-coded credential that allows an attacker to conduct...
CVE-2024-3273 — D-Link Multiple NAS Devices Command Injection Vulnerability D-Link DNS-320L, DNS-325, DNS-327L, and DNS-340L contain a command injection vulnerability. When combined with...
CVE-2024-32896 — Android Pixel Privilege Escalation Vulnerability Android Pixel contains an unspecified vulnerability in the firmware that allows for privilege escalation.
CVE-2024-3393 — Palo Alto Networks PAN-OS Malicious DNS Packet Vulnerability Palo Alto Networks PAN-OS contains a vulnerability in parsing and logging malicious DNS packets in the DNS Security...
CVE-2024-3400 — Palo Alto Networks PAN-OS Command Injection Vulnerability Palo Alto Networks PAN-OS GlobalProtect feature contains a command injection vulnerability that allows an...
CVE-2024-34102 — Adobe Commerce and Magento Open Source Improper Restriction of XML External Entity Reference (XXE) Vulnerability Adobe Commerce and Magento Open Source contain an improper restriction of XML external entity reference (XXE)...
CVE-2024-35250 — Microsoft Windows Kernel-Mode Driver Untrusted Pointer Dereference Vulnerability Microsoft Windows Kernel-Mode Driver contains an untrusted pointer dereference vulnerability that allows a local...
CVE-2024-36401 — OSGeo GeoServer GeoTools Eval Injection Vulnerability OSGeo GeoServer GeoTools contains an improper neutralization of directives in dynamically evaluated code...
CVE-2024-36971 — Android Kernel Remote Code Execution Vulnerability Android contains an unspecified vulnerability in the kernel that allows for remote code execution. This...
CVE-2024-37079 — Broadcom VMware vCenter Server Out-of-bounds Write Vulnerability Broadcom VMware vCenter Server contains an out-of-bounds write vulnerability in the implementation of the DCERPC...
CVE-2024-37085 — VMware ESXi Authentication Bypass Vulnerability VMware ESXi contains an authentication bypass vulnerability. A malicious actor with sufficient Active Directory (AD)...
CVE-2024-37383 — RoundCube Webmail Cross-Site Scripting (XSS) Vulnerability RoundCube Webmail contains a cross-site scripting (XSS) vulnerability in the handling of SVG animate attributes that...

Browse by topic

Every page in the corpus, grouped. Search finds one page; this shows what else is here.