[CVE_SUBSCRIPTIONS]

Receive alerts for specific vendors, products, or severities

📡 [FLUX RSS CVE]

Subscribe to the CVE feed

7 derniers jours

> FILTERS

> Last 7 Days

STATISTIQUES

Total CVE: 424899
> CVE-2024-28067 [MEDIUM 5.3]
A vulnerability in Samsung Exynos Modem 5300 allows a Man-in-the-Middle (MITM) attacker to downgrade the security mode of packets going to the victim, enabling the attacker to send messages to the victim in plaintext.
> CVE-2024-27362 [MEDIUM 4.4]
A vulnerability was discovered in Samsung Mobile Processors Exynos 1280, Exynos 2200, Exynos 1330, Exynos 1380, and Exynos 2400 where they do not properly check the length of the data, which can lead to a Information disclosure.
> CVE-2024-27360 [MEDIUM 6.0]
A vulnerability was discovered in Samsung Mobile Processors Exynos 850, Exynos 1080, Exynos 2100, Exynos 2200, Exynos 1280, Exynos 1380, Exynos 1330, and Exynos W930 where they do not properly check length of the data, which can lead to a Denial of Service.
> CVE-2024-27183 [MEDIUM 6.1]
XSS vulnerability in DJ-HelpfulArticles component for Joomla.
AFFECTED_PRODUCTS: Dj-Extensions Dj Helpfularticles
> CVE-2023-48194 [CRITICAL 9.8]
Vulnerability in Tenda AC8v4 .V16.03.34.09 due to sscanf and the last digit of s8 being overwritten with \x0. After executing set_client_qos, control over the gp register can be obtained.
AFFECTED_PRODUCTS: Tenda Ac8v4 Firmware
> CVE-2024-6237 [MEDIUM 6.5]
A flaw was found in the 389 Directory Server. This flaw allows an unauthenticated user to cause a systematic server crash while sending a specific extended search request, leading to a denial of service.
AFFECTED_PRODUCTS: Red Hat Enterprise Linux, Red Hat Directory Server
> CVE-2024-5652 [MEDIUM 6.1]
In Docker Desktop on Windows before v4.31.0 allows a user in the docker-users group to cause a Windows Denial-of-Service through the exec-path Docker daemon config option in Windows containers mode.
AFFECTED_PRODUCTS: Docker Desktop
> CVE-2024-39171 [CRITICAL 9.8]
Directory Travel in PHPVibe v11.0.46 due to incomplete blacklist checksums and directory checks, which can lead to code execution via writing specific statements to .htaccess and code to a file with a .png suffix.
AFFECTED_PRODUCTS: Phpvibe Phpvibe
> CVE-2024-39118 [MEDIUM 5.5]
Mommy Heather Advanced Backups up to v3.5.3 allows attackers to write arbitrary files via restoring a crafted back up.
AFFECTED_PRODUCTS: Mommyheather Advanced Backups
> CVE-2024-38112 [HIGH 7.5]
Windows MSHTML Platform Spoofing Vulnerability
AFFECTED_PRODUCTS: Microsoft Windows Server 2012, Microsoft Windows Server 2016, Microsoft Windows Server 2019 ... (+12)
> CVE-2024-38105 [MEDIUM 6.5]
Windows Layer-2 Bridge Network Driver Denial of Service Vulnerability
AFFECTED_PRODUCTS: Microsoft Windows Server 2012, Microsoft Windows Server 2016, Microsoft Windows Server 2019 ... (+10)
> CVE-2024-38104 [HIGH 8.8]
Windows Fax Service Remote Code Execution Vulnerability
AFFECTED_PRODUCTS: Microsoft Windows Server 2008, Microsoft Windows Server 2012, Microsoft Windows Server 2016 ... (+11)
> CVE-2024-38102 [MEDIUM 6.5]
Windows Layer-2 Bridge Network Driver Denial of Service Vulnerability
AFFECTED_PRODUCTS: Microsoft Windows Server 2012, Microsoft Windows Server 2016, Microsoft Windows Server 2019 ... (+10)
> CVE-2024-38101 [MEDIUM 6.5]
Windows Layer-2 Bridge Network Driver Denial of Service Vulnerability
AFFECTED_PRODUCTS: Microsoft Windows Server 2012, Microsoft Windows Server 2016, Microsoft Windows Server 2019 ... (+10)
> CVE-2024-38100 [HIGH 7.8]
Windows File Explorer Elevation of Privilege Vulnerability
AFFECTED_PRODUCTS: Microsoft Windows Server 2016, Microsoft Windows Server 2019, Microsoft Windows Server 2022 ... (+1)
> CVE-2024-38099 [MEDIUM 5.9]
Windows Remote Desktop Licensing Service Denial of Service Vulnerability
AFFECTED_PRODUCTS: Microsoft Windows Server 2008, Microsoft Windows Server 2012, Microsoft Windows Server 2016 ... (+3)
> CVE-2024-38095 [HIGH 7.5]
.NET and Visual Studio Denial of Service Vulnerability
AFFECTED_PRODUCTS: Microsoft .net, Microsoft Visual Studio 2022, Microsoft Visual Studio 2022 ... (+2)
> CVE-2024-38094 [HIGH 7.2]
Microsoft SharePoint Remote Code Execution Vulnerability
AFFECTED_PRODUCTS: Microsoft SharePoint Server, Microsoft SharePoint Server
> CVE-2024-38092 [HIGH 8.8]
Azure CycleCloud Elevation of Privilege Vulnerability
AFFECTED_PRODUCTS: Microsoft Azure Cyclecloud, Microsoft Azure Cyclecloud
> CVE-2024-38091 [HIGH 7.5]
Microsoft WS-Discovery Denial of Service Vulnerability
AFFECTED_PRODUCTS: Microsoft Windows Server 2008, Microsoft Windows Server 2012, Microsoft Windows Server 2016 ... (+11)
> CVE-2024-38089 [CRITICAL 9.1]
Microsoft Defender for IoT Elevation of Privilege Vulnerability
AFFECTED_PRODUCTS: Microsoft Defender For Iot
> CVE-2024-38088 [HIGH 8.8]
SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability
AFFECTED_PRODUCTS: Microsoft Sql Server 2019, Microsoft Sql Server 2019, Microsoft Sql Server 2022 ... (+5)
> CVE-2024-38087 [HIGH 8.8]
SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability
AFFECTED_PRODUCTS: Microsoft Sql Server 2019, Microsoft Sql Server 2019, Microsoft Sql Server 2022 ... (+5)
> CVE-2024-38086 [MEDIUM 6.4]
Azure Kinect SDK Remote Code Execution Vulnerability
AFFECTED_PRODUCTS: Microsoft Azure Kinect Software Development Kit
> CVE-2024-38085 [HIGH 7.8]
Windows Graphics Component Elevation of Privilege Vulnerability
AFFECTED_PRODUCTS: Microsoft Windows Server 2008, Microsoft Windows Server 2012, Microsoft Windows Server 2016 ... (+11)
> CVE-2024-38081 [HIGH 7.3]
.NET, .NET Framework, and Visual Studio Elevation of Privilege Vulnerability
AFFECTED_PRODUCTS: Microsoft .net Framework, Microsoft .net Framework, Microsoft .net Framework ... (+11)
> CVE-2024-38080 [HIGH 7.8]
Windows Hyper-V Elevation of Privilege Vulnerability
AFFECTED_PRODUCTS: Microsoft Windows 11 21h2, Microsoft Windows Server 2022, Microsoft Windows 11 22h2 ... (+2)
> CVE-2024-38079 [HIGH 7.8]
Windows Graphics Component Elevation of Privilege Vulnerability
AFFECTED_PRODUCTS: Microsoft Windows Server 2008, Microsoft Windows Server 2012, Microsoft Windows Server 2016 ... (+11)
> CVE-2024-38078 [HIGH 7.5]
Xbox Wireless Adapter Remote Code Execution Vulnerability
AFFECTED_PRODUCTS: Microsoft Windows 11 21h2, Microsoft Windows 11 22h2, Microsoft Windows 11 23h2
> CVE-2024-38077 [CRITICAL 9.8]
Windows Remote Desktop Licensing Service Remote Code Execution Vulnerability
AFFECTED_PRODUCTS: Microsoft Windows Server 2008, Microsoft Windows Server 2012, Microsoft Windows Server 2016 ... (+3)
> CVE-2024-38076 [CRITICAL 9.8]
Windows Remote Desktop Licensing Service Remote Code Execution Vulnerability
AFFECTED_PRODUCTS: Microsoft Windows Server 2016, Microsoft Windows Server 2019, Microsoft Windows Server 2022 ... (+1)
> CVE-2024-38074 [CRITICAL 9.8]
Windows Remote Desktop Licensing Service Remote Code Execution Vulnerability
AFFECTED_PRODUCTS: Microsoft Windows Server 2008, Microsoft Windows Server 2012, Microsoft Windows Server 2016 ... (+3)
> CVE-2024-38073 [HIGH 7.5]
Windows Remote Desktop Licensing Service Denial of Service Vulnerability
AFFECTED_PRODUCTS: Microsoft Windows Server 2008, Microsoft Windows Server 2012, Microsoft Windows Server 2016 ... (+3)
> CVE-2024-38072 [HIGH 7.5]
Windows Remote Desktop Licensing Service Denial of Service Vulnerability
AFFECTED_PRODUCTS: Microsoft Windows Server 2016, Microsoft Windows Server 2019, Microsoft Windows Server 2022 ... (+1)
> CVE-2024-38071 [HIGH 7.5]
Windows Remote Desktop Licensing Service Denial of Service Vulnerability
AFFECTED_PRODUCTS: Microsoft Windows Server 2008, Microsoft Windows Server 2012, Microsoft Windows Server 2016 ... (+3)
> CVE-2024-38070 [HIGH 7.8]
Windows LockDown Policy (WLDP) Security Feature Bypass Vulnerability
AFFECTED_PRODUCTS: Microsoft Windows Server 2016, Microsoft Windows Server 2019, Microsoft Windows 10 1507 ... (+9)
> CVE-2024-38069 [HIGH 7.0]
Windows Enroll Engine Security Feature Bypass Vulnerability
AFFECTED_PRODUCTS: Microsoft Windows Server 2016, Microsoft Windows Server 2019, Microsoft Windows 10 1507 ... (+9)
> CVE-2024-38068 [HIGH 7.5]
Windows Online Certificate Status Protocol (OCSP) Server Denial of Service Vulnerability
AFFECTED_PRODUCTS: Microsoft Windows Server 2008, Microsoft Windows Server 2012, Microsoft Windows Server 2016 ... (+11)
> CVE-2024-38067 [HIGH 7.5]
Windows Online Certificate Status Protocol (OCSP) Server Denial of Service Vulnerability
AFFECTED_PRODUCTS: Microsoft Windows Server 2008, Microsoft Windows Server 2012, Microsoft Windows Server 2016 ... (+3)
> CVE-2024-38066 [HIGH 7.8]
Windows Win32k Elevation of Privilege Vulnerability
AFFECTED_PRODUCTS: Microsoft Windows Server 2008, Microsoft Windows Server 2012, Microsoft Windows Server 2016 ... (+9)
> CVE-2024-38065 [MEDIUM 6.8]
Secure Boot Security Feature Bypass Vulnerability
AFFECTED_PRODUCTS: Microsoft Windows Server 2012, Microsoft Windows Server 2016, Microsoft Windows Server 2019 ... (+10)
> CVE-2024-38064 [HIGH 7.5]
Windows TCP/IP Information Disclosure Vulnerability
AFFECTED_PRODUCTS: Microsoft Windows Server 2008, Microsoft Windows Server 2012, Microsoft Windows Server 2016 ... (+11)
> CVE-2024-38062 [HIGH 7.8]
Windows Kernel-Mode Driver Elevation of Privilege Vulnerability
AFFECTED_PRODUCTS: Microsoft Windows Server 2016, Microsoft Windows Server 2019, Microsoft Windows 10 1607 ... (+8)
> CVE-2024-38061 [HIGH 7.5]
DCOM Remote Cross-Session Activation Elevation of Privilege Vulnerability
AFFECTED_PRODUCTS: Microsoft Windows Server 2008, Microsoft Windows Server 2012, Microsoft Windows Server 2016 ... (+11)
> CVE-2024-38060 [HIGH 8.8]
Windows Imaging Component Remote Code Execution Vulnerability
AFFECTED_PRODUCTS: Microsoft Windows Server 2008, Microsoft Windows Server 2012, Microsoft Windows Server 2016 ... (+11)
> CVE-2024-38059 [HIGH 7.8]
Win32k Elevation of Privilege Vulnerability
AFFECTED_PRODUCTS: Microsoft Windows 11 21h2, Microsoft Windows Server 2022, Microsoft Windows 10 21h2 ... (+4)
> CVE-2024-38058 [MEDIUM 6.8]
BitLocker Security Feature Bypass Vulnerability
AFFECTED_PRODUCTS: Microsoft Windows Server 2012, Microsoft Windows Server 2016, Microsoft Windows Server 2019 ... (+10)
> CVE-2024-38057 [HIGH 7.8]
Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability
AFFECTED_PRODUCTS: Microsoft Windows Server 2008, Microsoft Windows Server 2012, Microsoft Windows Server 2016 ... (+11)
> CVE-2024-38056 [MEDIUM 5.5]
Microsoft Windows Codecs Library Information Disclosure Vulnerability
AFFECTED_PRODUCTS: Microsoft Windows Server 2012, Microsoft Windows Server 2016, Microsoft Windows Server 2019 ... (+10)
> CVE-2024-38055 [MEDIUM 5.5]
Microsoft Windows Codecs Library Information Disclosure Vulnerability
AFFECTED_PRODUCTS: Microsoft Windows Server 2008, Microsoft Windows Server 2012, Microsoft Windows Server 2016 ... (+11)