[CVE_SUBSCRIPTIONS]

Receive alerts for specific vendors, products, or severities
📡 [FLUX RSS CVE]

Subscribe to the CVE feed

7 derniers jours

> FILTERS

> Last 7 Days

STATISTIQUES

Total CVE: 425032
> CVE-2024-4773 [HIGH 7.5]
[PUBLISHED: 2024-05-14] [EPSS 0.54%]
When a network error occurred during page load, the prior content could have remained in view with a blank URL bar. This could have been used to obfuscate a spoofed web site. This vulnerability affects Firefox < 126.
AFFECTED_PRODUCTS: Mozilla Firefox
> CVE-2024-4772 [MEDIUM 5.9]
[PUBLISHED: 2024-05-14] [EPSS 0.22%]
An HTTP digest authentication nonce value was generated using `rand()` which could lead to predictable values. This vulnerability affects Firefox < 126.
AFFECTED_PRODUCTS: Mozilla Firefox
> CVE-2024-4771 [HIGH 8.6]
[PUBLISHED: 2024-05-14] [EPSS 0.52%]
A memory allocation check was missing which would lead to a use-after-free if the allocation failed. This could have triggered a crash or potentially be leveraged to achieve code execution. This vulnerability affects Firefox < 126.
AFFECTED_PRODUCTS: Mozilla Firefox
> CVE-2024-4770 [HIGH 8.8]
[PUBLISHED: 2024-05-14] [EPSS 0.59%]
When saving a page to PDF, certain font styles could have led to a potential use-after-free crash. This vulnerability affects Firefox < 126, Firefox ESR < 115.11, and Thunderbird < 115.11.
AFFECTED_PRODUCTS: Mozilla Firefox, Mozilla Firefox, Mozilla Thunderbird
> CVE-2024-4769 [MEDIUM 5.9]
[PUBLISHED: 2024-05-14] [EPSS 0.37%]
When importing resources using Web Workers, error messages would distinguish the difference between `application/javascript` responses and non-script responses. This could have been abused to learn information cross-origin. This vulnerability affects Firefox < 126, Firefox ESR < 115.11, and Thunder...
AFFECTED_PRODUCTS: Mozilla Firefox, Mozilla Firefox, Debian Debian Linux ... (+1)
> CVE-2024-4768 [MEDIUM 6.1]
[PUBLISHED: 2024-05-14] [EPSS 0.54%]
A bug in popup notifications' interaction with WebAuthn made it easier for an attacker to trick a user into granting permissions. This vulnerability affects Firefox < 126, Firefox ESR < 115.11, and Thunderbird < 115.11.
AFFECTED_PRODUCTS: Mozilla Firefox, Mozilla Firefox, Debian Debian Linux ... (+1)
> CVE-2024-4767 [MEDIUM 4.3]
[PUBLISHED: 2024-05-14] [EPSS 0.49%]
If the `browser.privatebrowsing.autostart` preference is enabled, IndexedDB files were not properly deleted when the window was closed. This preference is disabled by default in Firefox. This vulnerability affects Firefox < 126, Firefox ESR < 115.11, and Thunderbird < 115.11.
AFFECTED_PRODUCTS: Mozilla Firefox, Mozilla Firefox, Debian Debian Linux ... (+1)
> CVE-2024-4766 [MEDIUM 4.3]
[PUBLISHED: 2024-05-14] [EPSS 0.39%]
Different techniques existed to obscure the fullscreen notification in Firefox for Android. These could have led to potential user confusion and spoofing attacks. *This bug only affects Firefox for Android. Other versions of Firefox are unaffected.* This vulnerability affects Firefox < 126.
AFFECTED_PRODUCTS: Mozilla Firefox
> CVE-2024-4765 [HIGH 8.1]
[PUBLISHED: 2024-05-14] [EPSS 0.27%]
Web application manifests were stored by using an insecure MD5 hash which allowed for a hash collision to overwrite another application's manifest. This could have been exploited to run arbitrary code in another application's context. *This issue only affects Firefox for Android. Other versions of...
AFFECTED_PRODUCTS: Mozilla Firefox
> CVE-2024-4764 [CRITICAL 9.8]
[PUBLISHED: 2024-05-14] [EPSS 0.57%]
Multiple WebRTC threads could have claimed a newly connected audio input leading to use-after-free. This vulnerability affects Firefox < 126.
AFFECTED_PRODUCTS: Mozilla Firefox
> CVE-2024-4367 [HIGH 8.8]
[PUBLISHED: 2024-05-14] [âš¡ EPSS 70.7%]
A type check was missing when handling fonts in PDF.js, which would allow arbitrary JavaScript execution in the PDF.js context. This vulnerability affects Firefox < 126, Firefox ESR < 115.11, and Thunderbird < 115.11.
AFFECTED_PRODUCTS: Mozilla Firefox, Mozilla Firefox, Debian Debian Linux ... (+3)
> CVE-2024-33485 [CRITICAL 9.8]
[PUBLISHED: 2024-05-14] [EPSS 0.71%]
SQL Injection vulnerability in CASAP Automated Enrollment System using PHP/MySQLi with Source Code V1.0 allows a remote attacker to obtain sensitive information via a crafted payload to the login.php component
> CVE-2024-27110 [HIGH 8.4]
[PUBLISHED: 2024-05-14] [EPSS 0.29%]
Elevation of privilege vulnerability in GE HealthCare EchoPAC products
> CVE-2024-31491 [HIGH 8.8]
[PUBLISHED: 2024-05-14] [EPSS 0.83%]
A client-side enforcement of server-side security in Fortinet FortiSandbox version 4.4.0 through 4.4.4 and 4.2.0 through 4.2.6 allows attacker to execute unauthorized code or commands via HTTP requests.
AFFECTED_PRODUCTS: Fortinet Fortisandbox, Fortinet Fortisandbox
> CVE-2024-31488 [MEDIUM 6.8]
[PUBLISHED: 2024-05-14] [EPSS 1.01%]
An improper neutralization of inputs during web page generation vulnerability [CWE-79] in FortiNAC version 9.4.0 through 9.4.4, 9.2.0 through 9.2.8, 9.1.0 through 9.1.10, 8.8.0 through 8.8.11, 8.7.0 through 8.7.6, 7.2.0 through 7.2.3 may allow a remote authenticated attacker to perform stored and re...
AFFECTED_PRODUCTS: Fortinet Fortinac, Fortinet Fortinac
> CVE-2024-30059 [MEDIUM 6.1]
[PUBLISHED: 2024-05-14] [EPSS 0.61%]
Microsoft Intune for Android Mobile Application Management Tampering Vulnerability
AFFECTED_PRODUCTS: Microsoft Intune Mobile Application Management
> CVE-2024-30054 [MEDIUM 6.5]
[PUBLISHED: 2024-05-14] [EPSS 1.75%]
Microsoft Power BI Client JavaScript SDK Information Disclosure Vulnerability
AFFECTED_PRODUCTS: Microsoft Powerbi Javascript
> CVE-2024-30053 [MEDIUM 6.5]
[PUBLISHED: 2024-05-14] [EPSS 0.95%]
Azure Migrate Cross-Site Scripting Vulnerability
AFFECTED_PRODUCTS: Microsoft Azure Migrate
> CVE-2024-30051 [HIGH 7.8]
[PUBLISHED: 2024-05-14] [âš  CISA_KEV] [EPSS 5.69%]
Windows DWM Core Library Elevation of Privilege Vulnerability
AFFECTED_PRODUCTS: Microsoft Windows Server 2016, Microsoft Windows Server 2019, Microsoft Windows 10 1507 ... (+10)
> CVE-2024-30050 [MEDIUM 5.4]
[PUBLISHED: 2024-05-14] [âš¡ EPSS 11.5%]
Windows Mark of the Web Security Feature Bypass Vulnerability
AFFECTED_PRODUCTS: Microsoft Windows Server 2008, Microsoft Windows Server 2012, Microsoft Windows Server 2016 ... (+13)
> CVE-2024-30049 [HIGH 7.8]
[PUBLISHED: 2024-05-14] [EPSS 0.71%]
Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability
AFFECTED_PRODUCTS: Microsoft Windows Server 2008, Microsoft Windows Server 2012, Microsoft Windows Server 2016 ... (+12)
> CVE-2024-30048 [HIGH 7.6]
[PUBLISHED: 2024-05-14] [EPSS 0.99%]
Dynamics 365 Customer Insights Spoofing Vulnerability
AFFECTED_PRODUCTS: Microsoft Dynamics 365 Customer Insights
> CVE-2024-30047 [HIGH 7.6]
[PUBLISHED: 2024-05-14] [EPSS 0.99%]
Dynamics 365 Customer Insights Spoofing Vulnerability
AFFECTED_PRODUCTS: Microsoft Dynamics 365 Customer Insights
> CVE-2024-30046 [MEDIUM 5.9]
[PUBLISHED: 2024-05-14] [EPSS 1.69%]
Visual Studio Denial of Service Vulnerability
AFFECTED_PRODUCTS: Microsoft .net, Microsoft .net, Microsoft Visual Studio 2022 ... (+3)
> CVE-2024-30045 [MEDIUM 6.3]
[PUBLISHED: 2024-05-14] [EPSS 1.25%]
.NET and Visual Studio Remote Code Execution Vulnerability
AFFECTED_PRODUCTS: Microsoft Powershell, Microsoft .net, Microsoft .net ... (+4)
> CVE-2024-30044 [HIGH 7.2]
[PUBLISHED: 2024-05-14] [âš¡ EPSS 80.8%]
Microsoft SharePoint Server Remote Code Execution Vulnerability
AFFECTED_PRODUCTS: Microsoft SharePoint Server, Microsoft SharePoint Server, Microsoft SharePoint Server
> CVE-2024-30043 [MEDIUM 6.5]
[PUBLISHED: 2024-05-14] [âš¡ EPSS 56.4%]
Microsoft SharePoint Server Information Disclosure Vulnerability
AFFECTED_PRODUCTS: Microsoft SharePoint Server, Microsoft SharePoint Server, Microsoft SharePoint Server
> CVE-2024-30042 [HIGH 7.8]
[PUBLISHED: 2024-05-14] [EPSS 2.14%]
Microsoft Excel Remote Code Execution Vulnerability
AFFECTED_PRODUCTS: Microsoft Office, Microsoft Excel, Microsoft Office Online Server ... (+2)
> CVE-2024-30041 [MEDIUM 5.4]
[PUBLISHED: 2024-05-14] [EPSS 0.73%]
Microsoft Bing Search Spoofing Vulnerability
AFFECTED_PRODUCTS: Microsoft Bing Search
> CVE-2024-30040 [HIGH 8.8]
[PUBLISHED: 2024-05-14] [âš  CISA_KEV] [EPSS 3.94%]
Windows MSHTML Platform Security Feature Bypass Vulnerability
AFFECTED_PRODUCTS: Microsoft Windows Server 2016, Microsoft Windows Server 2019, Microsoft Windows 10 1507 ... (+12)
> CVE-2024-30039 [MEDIUM 5.5]
[PUBLISHED: 2024-05-14] [EPSS 0.74%]
Windows Remote Access Connection Manager Information Disclosure Vulnerability
AFFECTED_PRODUCTS: Microsoft Windows Server 2008, Microsoft Windows Server 2012, Microsoft Windows Server 2016 ... (+13)
> CVE-2024-30038 [HIGH 7.8]
[PUBLISHED: 2024-05-14] [EPSS 2.55%]
Win32k Elevation of Privilege Vulnerability
AFFECTED_PRODUCTS: Microsoft Windows Server 2012, Microsoft Windows Server 2016, Microsoft Windows Server 2019 ... (+12)
> CVE-2024-30037 [MEDIUM 5.5]
[PUBLISHED: 2024-05-14] [EPSS 5.27%]
Windows Common Log File System Driver Elevation of Privilege Vulnerability
AFFECTED_PRODUCTS: Microsoft Windows Server 2008, Microsoft Windows Server 2012, Microsoft Windows Server 2016 ... (+13)
> CVE-2024-30036 [MEDIUM 6.5]
[PUBLISHED: 2024-05-14] [EPSS 2.29%]
Windows Deployment Services Information Disclosure Vulnerability
AFFECTED_PRODUCTS: Microsoft Windows Server 2008, Microsoft Windows Server 2012, Microsoft Windows Server 2016 ... (+2)
> CVE-2024-30035 [HIGH 7.8]
[PUBLISHED: 2024-05-14] [EPSS 3.54%]
Windows DWM Core Library Elevation of Privilege Vulnerability
AFFECTED_PRODUCTS: Microsoft Windows Server 2019, Microsoft Windows 11 21h2, Microsoft Windows Server 2022 ... (+6)
> CVE-2024-30034 [MEDIUM 5.5]
[PUBLISHED: 2024-05-14] [EPSS 6.88%]
Windows Cloud Files Mini Filter Driver Information Disclosure Vulnerability
AFFECTED_PRODUCTS: Microsoft Windows Server 2019, Microsoft Windows 11 21h2, Microsoft Windows Server 2022 ... (+6)
> CVE-2024-30033 [HIGH 7.0]
[PUBLISHED: 2024-05-14] [EPSS 0.96%]
Windows Search Service Elevation of Privilege Vulnerability
AFFECTED_PRODUCTS: Microsoft Windows 11 21h2, Microsoft Windows Server 2022, Microsoft Windows 10 21h2 ... (+1)
> CVE-2024-30032 [HIGH 7.8]
[PUBLISHED: 2024-05-14] [EPSS 4.52%]
Windows DWM Core Library Elevation of Privilege Vulnerability
AFFECTED_PRODUCTS: Microsoft Windows Server 2016, Microsoft Windows Server 2019, Microsoft Windows 10 1507 ... (+9)
> CVE-2024-30031 [HIGH 7.8]
[PUBLISHED: 2024-05-14] [EPSS 0.40%]
Windows CNG Key Isolation Service Elevation of Privilege Vulnerability
AFFECTED_PRODUCTS: Microsoft Windows Server 2008, Microsoft Windows Server 2012, Microsoft Windows Server 2016 ... (+13)
> CVE-2024-30030 [HIGH 7.8]
[PUBLISHED: 2024-05-14] [EPSS 0.71%]
Win32k Elevation of Privilege Vulnerability
AFFECTED_PRODUCTS: Microsoft Windows Server 2008
> CVE-2024-30029 [HIGH 7.5]
[PUBLISHED: 2024-05-14] [EPSS 1.49%]
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
AFFECTED_PRODUCTS: Microsoft Windows Server 2008, Microsoft Windows Server 2012, Microsoft Windows Server 2016 ... (+13)
> CVE-2024-30028 [HIGH 7.8]
[PUBLISHED: 2024-05-14] [EPSS 0.71%]
Win32k Elevation of Privilege Vulnerability
AFFECTED_PRODUCTS: Microsoft Windows Server 2008, Microsoft Windows Server 2012, Microsoft Windows Server 2016 ... (+13)
> CVE-2024-30027 [HIGH 7.8]
[PUBLISHED: 2024-05-14] [EPSS 0.64%]
NTFS Elevation of Privilege Vulnerability
AFFECTED_PRODUCTS: Microsoft Windows Server 2008, Microsoft Windows Server 2012, Microsoft Windows Server 2016 ... (+13)
> CVE-2024-30025 [HIGH 7.8]
[PUBLISHED: 2024-05-14] [EPSS 4.28%]
Windows Common Log File System Driver Elevation of Privilege Vulnerability
AFFECTED_PRODUCTS: Microsoft Windows Server 2008, Microsoft Windows Server 2012, Microsoft Windows Server 2016 ... (+13)
> CVE-2024-30024 [HIGH 7.5]
[PUBLISHED: 2024-05-14] [EPSS 1.54%]
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
AFFECTED_PRODUCTS: Microsoft Windows Server 2008, Microsoft Windows Server 2012, Microsoft Windows Server 2016 ... (+13)
> CVE-2024-30023 [HIGH 7.5]
[PUBLISHED: 2024-05-14] [EPSS 1.54%]
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
AFFECTED_PRODUCTS: Microsoft Windows Server 2008, Microsoft Windows Server 2012, Microsoft Windows Server 2016 ... (+13)
> CVE-2024-30022 [HIGH 7.5]
[PUBLISHED: 2024-05-14] [EPSS 1.54%]
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
AFFECTED_PRODUCTS: Microsoft Windows Server 2008, Microsoft Windows Server 2012, Microsoft Windows Server 2016 ... (+13)
> CVE-2024-30021 [MEDIUM 6.8]
[PUBLISHED: 2024-05-14] [EPSS 0.83%]
Windows Mobile Broadband Driver Remote Code Execution Vulnerability
AFFECTED_PRODUCTS: Microsoft Windows Server 2019, Microsoft Windows 11 21h2, Microsoft Windows Server 2022 ... (+6)
> CVE-2024-30020 [HIGH 8.1]
[PUBLISHED: 2024-05-14] [EPSS 1.30%]
Windows Cryptographic Services Remote Code Execution Vulnerability
AFFECTED_PRODUCTS: Microsoft Windows Server 2008, Microsoft Windows Server 2012, Microsoft Windows Server 2016 ... (+13)
> CVE-2024-30019 [MEDIUM 6.5]
[PUBLISHED: 2024-05-14] [EPSS 2.62%]
DHCP Server Service Denial of Service Vulnerability
AFFECTED_PRODUCTS: Microsoft Windows Server 2008, Microsoft Windows Server 2012, Microsoft Windows Server 2016 ... (+3)