CVE Database
Synced from NVD, cross-referenced against CISA KEV and EPSS · ordered by last update
| CVE ID | Score | Description |
|---|---|---|
| Exploit 2mo ago | 7.8 | Microsoft SharePoint Server Remote Code Execution Vulnerability |
| 2mo ago | 7 | Windows Kernel Elevation of Privilege Vulnerability |
| Exploit 2mo ago | 8.8 | Microsoft Speech Application Programming Interface (SAPI) Remote Code Execution Vulnerability |
| Exploit 2mo ago | 7.8 | Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability |
| Exploit 2mo ago | 7.8 | Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability |
| 2mo ago | 7.3 | Windows Storage Elevation of Privilege Vulnerability |
| 2mo ago | 7.8 | Win32k Elevation of Privilege Vulnerability |
| 2mo ago | 7 | Microsoft Streaming Service Elevation of Privilege Vulnerability |
| 2mo ago | 7.8 | Microsoft Streaming Service Elevation of Privilege Vulnerability |
| KEV 2mo ago | 7 | Windows Kernel Elevation of Privilege Vulnerability |
| 2mo ago | 7.8 | Win32k Elevation of Privilege Vulnerability |
| 2mo ago | 7.8 | Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability |
| 2mo ago | 7.8 | Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability |
| 2mo ago | 7 | Windows Kernel-Mode Driver Elevation of Privilege Vulnerability |
| 2mo ago | 7.5 | Windows Standards-Based Storage Management Service Denial of Service Vulnerability |
| 2mo ago | 7.8 | Win32k Elevation of Privilege Vulnerability |
| Exploit 2mo ago | 8.8 | Windows Wi-Fi Driver Remote Code Execution Vulnerability |
| Exploit 2mo ago | 8 | Windows OLE Remote Code Execution Vulnerability |
| Exploit 2mo ago | 8 | Windows Link Layer Topology Discovery Protocol Remote Code Execution Vulnerability |
| Exploit 2mo ago | 8 | Windows Link Layer Topology Discovery Protocol Remote Code Execution Vulnerability |
| Exploit 2mo ago | 7.8 | Microsoft Event Trace Log File Parsing Remote Code Execution Vulnerability |
| 2mo ago | 7.5 | DHCP Server Service Denial of Service Vulnerability |
| 2mo ago | 8.8 | Windows Kernel Elevation of Privilege Vulnerability |
| 2mo ago | 8.8 | Windows Kernel Elevation of Privilege Vulnerability |
| Exploit 2mo ago | 7.8 | Windows Standards-Based Storage Management Service Remote Code Execution Vulnerability |
| Exploit 2mo ago | 7.5 | TOTOLINK AC1200 Wireless Dual Band Gigabit Router firmware A3100R V4.1.2cu.5247_B20211129, in the cgi function `setNoticeCfg` of the file `/lib/cste_modules/system.so`, the length of the user input string `NoticeUrl` is not checked. This can lead to a buffer overflow, allowing attackers to construct malicious HTTP or MQTT requests to cause a denial-of-service attack. |
| 2mo ago | 8.6 | Missing Authorization vulnerability in Post SMTP Post SMTP Mailer/Email Log.This issue affects Post SMTP Mailer/Email Log: from n/a through 2.8.6. |
| Exploit 2mo ago | 7.2 | Aimeos is an Open Source e-commerce framework for online shops. Starting in version 2024.01.1 and prior to version 2024.04.5, a user with administrative privileges can upload files that look like images but contain PHP code which can then be executed in the context of the web server. Version 2024.04.5 fixes the issue. |
| 2mo ago | 7.5 | A stack-based buffer overflow in Fortinet FortiPAM version 1.2.0, 1.1.0 through 1.1.2, 1.0.0 through 1.0.3, FortiWeb, FortiAuthenticator, FortiSwitchManager version 7.2.0 through 7.2.3, 7.0.1 through 7.0.3, FortiOS version 7.4.0 through 7.4.3, 7.2.0 through 7.2.7, 7.0.0 through 7.0.14, 6.4.0 through 6.4.15, 6.2.0 through 6.2.16, 6.0.0 through 6.0.18, FortiProxy version 7.4.0 through 7.4.2, 7.2.0 through 7.2.9, 7.0.0 through 7.0.15, 2.0.0 through 2.0.13, 1.2.0 through 1.2.13, 1.1.0 through 1.1.6, 1.0.0 through 1.0.7 allows attacker to execute unauthorized code or commands via specially crafted packets. |
| 2mo ago | 8.6 | Missing Authorization vulnerability in MultiVendorX WC Marketplace.This issue affects WC Marketplace: from n/a through 4.0.25. |