|
cve-2024-45309
|
CVE-2024-45309 |
HIGH
|
8.7
|
24.53%
|
cvelistv5 |
|
|
cve-2024-45195
|
Apache OFBiz Forced Browsing Vulnerability |
HIGH
|
N/A
|
99.98%
|
cvelistv5 |
2025-02-04 |
|
cve-2024-44849
|
CVE-2024-44849 |
CRITICAL
|
9.8
|
46.29%
|
cvelistv5 |
|
|
cve-2024-4443
|
CVE-2024-4443 |
CRITICAL
|
9.8
|
10.36%
|
cvelistv5 |
|
|
cve-2024-44309
|
Apple Multiple Products Cross-Site Scripting (XSS) Vulnerability |
HIGH
|
N/A
|
22.59%
|
cvelistv5 |
2024-11-21 |
|
cve-2024-44308
|
Apple Multiple Products Code Execution Vulnerability |
HIGH
|
N/A
|
10.08%
|
cvelistv5 |
2024-11-21 |
|
cve-2024-4358
|
Progress Telerik Report Server Authentication Bypass by Spoofing Vulnerability |
CRITICAL
|
9.8
|
97.48%
|
cvelistv5 |
2024-06-13 |
|
cve-2024-43573
|
Microsoft Windows MSHTML Platform Spoofing Vulnerability |
HIGH
|
N/A
|
46.11%
|
cvelistv5 |
2024-10-08 |
|
cve-2024-43572
|
Microsoft Windows Management Console Remote Code Execution Vulnerability |
HIGH
|
N/A
|
66.70%
|
cvelistv5 |
2024-10-08 |
|
cve-2024-43468
|
Microsoft Configuration Manager SQL Injection Vulnerability |
HIGH
|
N/A
|
80.91%
|
cvelistv5 |
2026-02-12 |
|
cve-2024-43461
|
Microsoft Windows MSHTML Platform Spoofing Vulnerability |
HIGH
|
8.8
|
54.49%
|
cvelistv5 |
2024-09-16 |
|
cve-2024-43451
|
Microsoft Windows NTLMv2 Hash Disclosure Spoofing Vulnerability |
MEDIUM
|
6.5
|
84.11%
|
cvelistv5 |
2024-11-12 |
|
cve-2024-43360
|
CVE-2024-43360 |
CRITICAL
|
9.8
|
6.22%
|
cvelistv5 |
|
|
cve-2024-4325
|
CVE-2024-4325 |
HIGH
|
8.6
|
37.37%
|
cvelistv5 |
|
|
cve-2024-43093
|
Android Framework Privilege Escalation Vulnerability |
HIGH
|
7.3
|
0.71%
|
cvelistv5 |
2024-11-07 |
|
cve-2024-43047
|
Qualcomm Multiple Chipsets Use-After-Free Vulnerability |
HIGH
|
7.8
|
0.67%
|
cvelistv5 |
2024-10-08 |
|
cve-2024-42640
|
angular-base64-upload prior to v0.1.21 is vulnerable to unauthenticated remote code execution via demo/server.php. Exploiting this vulnerability allows an attacker to upload arbitrary content to the server, which can subsequently be accessed through demo/uploads. This leads to the execution of previously uploaded content and enables the attacker to achieve code execution on the server. NOTE: This vulnerability only affects products that are no longer supported by the maintainer. |
CRITICAL
|
9.8
|
45.10%
|
cvelistv5 |
2026-06-17 |
|
cve-2024-42009
|
RoundCube Webmail Cross-Site Scripting Vulnerability |
HIGH
|
N/A
|
82.88%
|
cvelistv5 |
2025-06-09 |
|
cve-2024-41713
|
Mitel MiCollab Path Traversal Vulnerability |
CRITICAL
|
9.1
|
98.11%
|
cvelistv5 |
2025-01-07 |
|
cve-2024-41710
|
Mitel SIP Phones Argument Injection Vulnerability |
MEDIUM
|
6.8
|
41.65%
|
cvelistv5 |
2025-02-12 |
|
cve-2024-40891
|
Zyxel DSL CPE OS Command Injection Vulnerability |
HIGH
|
8.8
|
21.54%
|
cvelistv5 |
2025-02-11 |
|
cve-2024-40890
|
Zyxel DSL CPE OS Command Injection Vulnerability |
HIGH
|
N/A
|
20.70%
|
cvelistv5 |
2025-02-11 |
|
cve-2024-40766
|
SonicWall SonicOS Improper Access Control Vulnerability |
CRITICAL
|
9.8
|
18.38%
|
cvelistv5 |
2024-09-09 |
|
cve-2024-40711
|
Veeam Backup and Replication Deserialization Vulnerability |
CRITICAL
|
9.8
|
90.37%
|
cvelistv5 |
2024-10-17 |
|
cve-2024-4040
|
CrushFTP VFS Sandbox Escape Vulnerability |
CRITICAL
|
9.8
|
99.54%
|
cvelistv5 |
2024-04-24 |
|
cve-2024-39914
|
CVE-2024-39914 |
CRITICAL
|
9.8
|
23.24%
|
cvelistv5 |
|
|
cve-2024-39891
|
Twilio Authy Information Disclosure Vulnerability |
MEDIUM
|
5.3
|
1.67%
|
cvelistv5 |
2024-07-23 |
|
cve-2024-39717
|
Versa Director Dangerous File Type Upload Vulnerability |
MEDIUM
|
6.6
|
4.01%
|
cvelistv5 |
2024-08-23 |
|
cve-2024-39713
|
CVE-2024-39713 |
HIGH
|
8.6
|
3.20%
|
cvelistv5 |
|
|
cve-2024-38856
|
Apache OFBiz Incorrect Authorization Vulnerability |
HIGH
|
8.1
|
99.43%
|
cvelistv5 |
2024-08-27 |
ndaal KEV