Vulnerabilities (CVE)

1,704 pages, showing 1,301–1,400, ordered by identifier.

CVE-2024-38014 — Microsoft Windows Installer Improper Privilege Management Vulnerability Microsoft Windows Installer contains an improper privilege management vulnerability that could allow an attacker to...
CVE-2024-38080 — Microsoft Windows Hyper-V Privilege Escalation Vulnerability Microsoft Windows Hyper-V contains a privilege escalation vulnerability that allows a local attacker with user...
CVE-2024-38094 — Microsoft SharePoint Deserialization Vulnerability Microsoft SharePoint contains a deserialization vulnerability that allows for remote code execution.
CVE-2024-38106 — Microsoft Windows Kernel Privilege Escalation Vulnerability Microsoft Windows Kernel contains an unspecified vulnerability that allows for privilege escalation, enabling a...
CVE-2024-38107 — Microsoft Windows Power Dependency Coordinator Privilege Escalation Vulnerability Microsoft Windows Power Dependency Coordinator contains an unspecified vulnerability that allows for privilege...
CVE-2024-38112 — Microsoft Windows MSHTML Platform Spoofing Vulnerability Microsoft Windows MSHTML Platform contains a spoofing vulnerability that has a high impact to confidentiality,...
CVE-2024-38178 — Microsoft Windows Scripting Engine Memory Corruption Vulnerability Microsoft Windows Scripting Engine contains a memory corruption vulnerability that allows unauthenticated attacker...
CVE-2024-38189 — Microsoft Project Remote Code Execution Vulnerability Microsoft Project contains an unspecified vulnerability that allows for remote code execution via a malicious file.
CVE-2024-38193 — Microsoft Windows Ancillary Function Driver for WinSock Privilege Escalation Vulnerability Microsoft Windows Ancillary Function Driver for WinSock contains an unspecified vulnerability that allows for...
CVE-2024-38213 — Microsoft Windows SmartScreen Security Feature Bypass Vulnerability Microsoft Windows SmartScreen contains a security feature bypass vulnerability that allows an attacker to bypass the...
CVE-2024-38217 — Microsoft Windows Mark of the Web (MOTW) Protection Mechanism Failure Vulnerability Microsoft Windows Mark of the Web (MOTW) contains a protection mechanism failure vulnerability that allows an...
CVE-2024-38226 — Microsoft Publisher Protection Mechanism Failure Vulnerability Microsoft Publisher contains a protection mechanism failure vulnerability that allows attacker to bypass Office...
CVE-2024-38475 — Apache HTTP Server Improper Escaping of Output Vulnerability Apache HTTP Server contains an improper escaping of output vulnerability in mod_rewrite that allows an attacker to...
CVE-2024-38812 — VMware vCenter Server Heap-Based Buffer Overflow Vulnerability VMware vCenter Server contains a heap-based buffer overflow vulnerability in the implementation of the DCERPC...
CVE-2024-38813 — VMware vCenter Server Privilege Escalation Vulnerability VMware vCenter contains an improper check for dropped privileges vulnerability. This vulnerability could allow an...
CVE-2024-38856 — Apache OFBiz Incorrect Authorization Vulnerability Apache OFBiz contains an incorrect authorization vulnerability that could allow remote code execution via a Groovy...
CVE-2024-39717 — Versa Director Dangerous File Type Upload Vulnerability The Versa Director GUI contains an unrestricted upload of file with dangerous type vulnerability that allows...
CVE-2024-39891 — Twilio Authy Information Disclosure Vulnerability Twilio Authy contains an information disclosure vulnerability in its API that allows an unauthenticated endpoint to...
CVE-2024-4040 — CrushFTP VFS Sandbox Escape Vulnerability CrushFTP contains an unspecified sandbox escape vulnerability that allows a remote attacker to escape the CrushFTP...
CVE-2024-40711 — Veeam Backup and Replication Deserialization Vulnerability Veeam Backup and Replication contains a deserialization vulnerability allowing an unauthenticated user to perform...
CVE-2024-40766 — SonicWall SonicOS Improper Access Control Vulnerability SonicWall SonicOS contains an improper access control vulnerability that could lead to unauthorized resource access...
CVE-2024-40890 — Zyxel DSL CPE OS Command Injection Vulnerability Multiple Zyxel DSL CPE devices contain a post-authentication command injection vulnerability in the CGI program that...
CVE-2024-40891 — Zyxel DSL CPE OS Command Injection Vulnerability Multiple Zyxel DSL CPE devices contain a post-authentication command injection vulnerability in the management...
CVE-2024-41710 — Mitel SIP Phones Argument Injection Vulnerability Mitel 6800 Series, 6900 Series, and 6900w Series SIP Phones, including the 6970 Conference Unit, contain an argument...
CVE-2024-41713 — Mitel MiCollab Path Traversal Vulnerability Mitel MiCollab contains a path traversal vulnerability that could allow an attacker to gain unauthorized and...
CVE-2024-42009 — RoundCube Webmail Cross-Site Scripting Vulnerability RoundCube Webmail contains a cross-site scripting vulnerability. This vulnerability could allow a remote attacker to...
CVE-2024-43047 — Qualcomm Multiple Chipsets Use-After-Free Vulnerability Multiple Qualcomm chipsets contain a use-after-free vulnerability due to memory corruption in DSP Services while...
CVE-2024-43093 — Android Framework Privilege Escalation Vulnerability Android Framework contains an unspecified vulnerability that allows for privilege escalation.
CVE-2024-43451 — Microsoft Windows NTLMv2 Hash Disclosure Spoofing Vulnerability Microsoft Windows contains an NTLMv2 hash spoofing vulnerability that could result in disclosing a user's NTLMv2...
CVE-2024-43461 — Microsoft Windows MSHTML Platform Spoofing Vulnerability Microsoft Windows MSHTML Platform contains a user interface (UI) misrepresentation of critical information...
CVE-2024-43468 — Microsoft Configuration Manager SQL Injection Vulnerability Microsoft Configuration Manager contains an SQL injection vulnerability. An unauthenticated attacker could exploit...
CVE-2024-43572 — Microsoft Windows Management Console Remote Code Execution Vulnerability Microsoft Windows Management Console contains unspecified vulnerability that allows for remote code execution.
CVE-2024-43573 — Microsoft Windows MSHTML Platform Spoofing Vulnerability Microsoft Windows MSHTML Platform contains an unspecified spoofing vulnerability which can lead to a loss of confidentiality.
CVE-2024-4358 — Progress Telerik Report Server Authentication Bypass by Spoofing Vulnerability Progress Telerik Report Server contains an authorization bypass by spoofing vulnerability that allows an attacker to...
CVE-2024-44308 — Apple Multiple Products Code Execution Vulnerability Apple iOS, macOS, and other Apple products contain an unspecified vulnerability when processing maliciously crafted...
CVE-2024-44309 — Apple Multiple Products Cross-Site Scripting (XSS) Vulnerability Apple iOS, macOS, and other Apple products contain an unspecified vulnerability when processing maliciously crafted...
CVE-2024-45195 — Apache OFBiz Forced Browsing Vulnerability Apache OFBiz contains a forced browsing vulnerability that allows a remote attacker to obtain unauthorized access.
CVE-2024-45519 — Synacor Zimbra Collaboration Suite (ZCS) Command Execution Vulnerability Synacor Zimbra Collaboration Suite (ZCS) contains an unspecified vulnerability in the postjournal service that may...
CVE-2024-4577 — PHP-CGI OS Command Injection Vulnerability PHP, specifically Windows-based PHP used in CGI mode, contains an OS command injection vulnerability that allows for...
CVE-2024-4610 — Arm Mali GPU Kernel Driver Use-After-Free Vulnerability Arm Bifrost and Valhall GPU kernel drivers contain a use-after-free vulnerability that allows a local,...
CVE-2024-4671 — Google Chromium Visuals Use-After-Free Vulnerability Google Chromium Visuals contains a use-after-free vulnerability that allows a remote attacker to exploit heap...
CVE-2024-47575 — Fortinet FortiManager Missing Authentication Vulnerability Fortinet FortiManager contains a missing authentication vulnerability in the fgfmd daemon that allows a remote,...
CVE-2024-4761 — Google Chromium V8 Out-of-Bounds Memory Write Vulnerability Google Chromium V8 Engine contains an unspecified out-of-bounds memory write vulnerability via a crafted HTML page....
CVE-2024-48248 — NAKIVO Backup and Replication Absolute Path Traversal Vulnerability NAKIVO Backup and Replication contains an absolute path traversal vulnerability that enables an attacker to read...
CVE-2024-4879 — ServiceNow Improper Input Validation Vulnerability ServiceNow Utah, Vancouver, and Washington DC Now Platform releases contain a jelly template injection vulnerability...
CVE-2024-4885 — Progress WhatsUp Gold Path Traversal Vulnerability Progress WhatsUp Gold contains a path traversal vulnerability that allows an unauthenticated attacker to achieve...
CVE-2024-49035 — Microsoft Partner Center Improper Access Control Vulnerability Microsoft Partner Center contains an improper access control vulnerability that allows an attacker to escalate privileges.
CVE-2024-49039 — Microsoft Windows Task Scheduler Privilege Escalation Vulnerability Microsoft Windows Task Scheduler contains a privilege escalation vulnerability that can allow an attacker-provided,...
CVE-2024-49138 — Microsoft Windows Common Log File System (CLFS) Driver Heap-Based Buffer Overflow Vulnerability Microsoft Windows Common Log File System (CLFS) driver contains a heap-based buffer overflow vulnerability that...
CVE-2024-4947 — Google Chromium V8 Type Confusion Vulnerability Google Chromium V8 contains a type confusion vulnerability that allows a remote attacker to execute code via a...
CVE-2024-4978 — Justice AV Solutions (JAVS) Viewer Installer Embedded Malicious Code Vulnerability Justice AV Solutions (JAVS) Viewer installer contains a malicious version of ffmpeg.exe, named fffmpeg.exe (SHA256:...
CVE-2024-50302 — Linux Kernel Use of Uninitialized Resource Vulnerability The Linux kernel contains a use of uninitialized resource vulnerability that allows an attacker to leak kernel...
CVE-2024-50603 — Aviatrix Controllers OS Command Injection Vulnerability Aviatrix Controllers contain an OS command injection vulnerability that could allow an unauthenticated attacker to...
CVE-2024-50623 — Cleo Multiple Products Unrestricted File Upload Vulnerability Cleo Harmony, VLTrader, and LexiCom, which are managed file transfer products, contain an unrestricted file upload...
CVE-2024-51378 — CyberPanel Incorrect Default Permissions Vulnerability CyberPanel contains an incorrect default permissions vulnerability that allows for authentication bypass and the...
CVE-2024-51567 — CyberPanel Incorrect Default Permissions Vulnerability CyberPanel contains an incorrect default permissions vulnerability that allows a remote, unauthenticated attacker to...
CVE-2024-5217 — ServiceNow Incomplete List of Disallowed Inputs Vulnerability ServiceNow Washington DC, Vancouver, and earlier Now Platform releases contain an incomplete list of disallowed...
CVE-2024-5274 — Google Chromium V8 Type Confusion Vulnerability Google Chromium V8 contains a type confusion vulnerability that allows a remote attacker to execute code via a...
CVE-2024-53104 — Linux Kernel Out-of-Bounds Write Vulnerability Linux kernel contains an out-of-bounds write vulnerability in the uvcparsestreaming component of the USB Video Class...
CVE-2024-53150 — Linux Kernel Out-of-Bounds Read Vulnerability Linux Kernel contains an out-of-bounds read vulnerability in the USB-audio driver that allows a local, privileged...
CVE-2024-53197 — Linux Kernel Out-of-Bounds Access Vulnerability Linux Kernel contains an out-of-bounds access vulnerability in the USB-audio driver that allows an attacker with...
CVE-2024-53704 — SonicWall SonicOS SSLVPN Improper Authentication Vulnerability SonicWall SonicOS contains an improper authentication vulnerability in the SSLVPN authentication mechanism that...
CVE-2024-54085 — AMI MegaRAC SPx Authentication Bypass by Spoofing Vulnerability AMI MegaRAC SPx contains an authentication bypass by spoofing vulnerability in the Redfish Host Interface. A...
CVE-2024-55550 — Mitel MiCollab Path Traversal Vulnerability Mitel MiCollab contains a path traversal vulnerability that could allow an authenticated attacker with...
CVE-2024-55591 — Fortinet FortiOS and FortiProxy Authentication Bypass Vulnerability Fortinet FortiOS and FortiProxy contain an authentication bypass vulnerability that may allow an unauthenticated,...
CVE-2024-55956 — Cleo Multiple Products Unauthenticated File Upload Vulnerability Cleo Harmony, VLTrader, and LexiCom, which are managed file transfer products, contain an unrestricted file upload...
CVE-2024-56145 — Craft CMS Code Injection Vulnerability Craft CMS contains a code injection vulnerability. Users with affected versions are vulnerable to remote code...
CVE-2024-57726 — SimpleHelp Missing Authorization Vulnerability SimpleHelp contains a missing authorization vulnerability that could allow low-privileged technicians to create API...
CVE-2024-57727 — SimpleHelp Path Traversal Vulnerability SimpleHelp remote support software contains multiple path traversal vulnerabilities that allow unauthenticated...
CVE-2024-57728 — SimpleHelp Path Traversal Vulnerability SimpleHelp contains a path traversal vulnerability that allows admin users to upload arbitrary files anywhere on the...
CVE-2024-57968 — Advantive VeraCore Unrestricted File Upload Vulnerability Advantive VeraCore contains an unrestricted file upload vulnerability that allows a remote unauthenticated attacker...
CVE-2024-58136 — Yiiframework Yii Improper Protection of Alternate Path Vulnerability Yii Framework contains an improper protection of alternate path vulnerability that may allow a remote attacker to...
CVE-2024-5910 — Palo Alto Networks Expedition Missing Authentication Vulnerability Palo Alto Networks Expedition contains a missing authentication vulnerability that allows an attacker with network...
CVE-2024-6047 — GeoVision Devices OS Command Injection Vulnerability Multiple GeoVision devices contain an OS command injection vulnerability that allows a remote, unauthenticated...
CVE-2024-6670 — Progress WhatsUp Gold SQL Injection Vulnerability Progress WhatsUp Gold contains a SQL injection vulnerability that allows an unauthenticated attacker to retrieve the...
CVE-2024-7262 — Kingsoft WPS Office Path Traversal Vulnerability Kingsoft WPS Office contains a path traversal vulnerability in promecefpluginhost.exe on Windows that allows an...
CVE-2024-7399 — Samsung MagicINFO 9 Server Path Traversal Vulnerability Samsung MagicINFO 9 Server contains a path traversal vulnerability that could allow an attacker to write arbitrary...
CVE-2024-7593 — Ivanti Virtual Traffic Manager Authentication Bypass Vulnerability Ivanti Virtual Traffic Manager contains an authentication bypass vulnerability that allows a remote, unauthenticated...
CVE-2024-7694 — TeamT5 ThreatSonar Anti-Ransomware Unrestricted Upload of File with Dangerous Type Vulnerability TeamT5 ThreatSonar Anti-Ransomware contains an unrestricted upload of file with dangerous type vulnerability....
CVE-2024-7965 — Google Chromium V8 Inappropriate Implementation Vulnerability Google Chromium V8 contains an inappropriate implementation vulnerability that allows a remote attacker to...
CVE-2024-7971 — Google Chromium V8 Type Confusion Vulnerability Google Chromium V8 contains a type confusion vulnerability that allows a remote attacker to exploit heap corruption...
CVE-2024-8068 — Citrix Session Recording Improper Privilege Management Vulnerability Citrix Session Recording contains an improper privilege management vulnerability that could allow for privilege...
CVE-2024-8069 — Citrix Session Recording Deserialization of Untrusted Data Vulnerability Citrix Session Recording contains a deserialization of untrusted data vulnerability that allows limited remote code...
CVE-2024-8190 — Ivanti Cloud Services Appliance OS Command Injection Vulnerability Ivanti Cloud Services Appliance (CSA) contains an OS command injection vulnerability in the administrative console...
CVE-2024-8956 — PTZOptics PT30X-SDI/NDI Cameras Authentication Bypass Vulnerability PTZOptics PT30X-SDI/NDI cameras contain an insecure direct object reference (IDOR) vulnerability that allows a...
CVE-2024-8957 — PTZOptics PT30X-SDI/NDI Cameras OS Command Injection Vulnerability PTZOptics PT30X-SDI/NDI cameras contain an OS command injection vulnerability that allows a remote, authenticated...
CVE-2024-8963 — Ivanti Cloud Services Appliance (CSA) Path Traversal Vulnerability Ivanti Cloud Services Appliance (CSA) contains a path traversal vulnerability that could allow a remote,...
CVE-2024-9379 — Ivanti Cloud Services Appliance (CSA) SQL Injection Vulnerability Ivanti Cloud Services Appliance (CSA) contains a SQL injection vulnerability in the admin web console in versions...
CVE-2024-9380 — Ivanti Cloud Services Appliance (CSA) OS Command Injection Vulnerability Ivanti Cloud Services Appliance (CSA) contains an OS command injection vulnerability in the administrative console...
CVE-2024-9463 — Palo Alto Networks Expedition OS Command Injection Vulnerability Palo Alto Networks Expedition contains an OS command injection vulnerability that allows an unauthenticated attacker...
CVE-2024-9465 — Palo Alto Networks Expedition SQL Injection Vulnerability Palo Alto Networks Expedition contains a SQL injection vulnerability that allows an unauthenticated attacker to...
CVE-2024-9474 — Palo Alto Networks PAN-OS Management Interface OS Command Injection Vulnerability Palo Alto Networks PAN-OS contains an OS command injection vulnerability that allows for privilege escalation...
CVE-2024-9537 — ScienceLogic SL1 Unspecified Vulnerability ScienceLogic SL1 (formerly EM7) is affected by an unspecified vulnerability involving an unspecified third-party component.
CVE-2024-9680 — Mozilla Firefox Use-After-Free Vulnerability Mozilla Firefox and Firefox ESR contain a use-after-free vulnerability in Animation timelines that allows for code...
CVE-2025-0108 — Palo Alto Networks PAN-OS Authentication Bypass Vulnerability Palo Alto Networks PAN-OS contains an authentication bypass vulnerability in its management web interface. This...
CVE-2025-0111 — Palo Alto Networks PAN-OS File Read Vulnerability Palo Alto Networks PAN-OS contains an external control of file name or path vulnerability. Successful exploitation...
CVE-2025-0282 — Ivanti Connect Secure, Policy Secure, and ZTA Gateways Stack-Based Buffer Overflow Vulnerability Ivanti Connect Secure, Policy Secure, and ZTA Gateways contain a stack-based buffer overflow which can lead to...
CVE-2025-0411 — 7-Zip Mark of the Web Bypass Vulnerability 7-Zip contains a protection mechanism failure vulnerability that allows remote attackers to bypass the...
CVE-2025-0994 — Trimble Cityworks Deserialization Vulnerability Trimble Cityworks contains a deserialization vulnerability. This could allow an authenticated user to perform a...
CVE-2025-10035 — Fortra GoAnywhere MFT Deserialization of Untrusted Data Vulnerability Fortra GoAnywhere MFT contains a deserialization of untrusted data vulnerability allows an actor with a validly...

Browse by topic

Every page in the corpus, grouped. Search finds one page; this shows what else is here.