CVE Database

39716+ vulnerabilities with CVSS scores, EPSS exploit predictions, and CISA KEV status. Updated daily.

Filter: All CRITICAL HIGH MEDIUM LOW CISA KEV
Sort: Newest CVSS EPSS
CVE-2024-55658
7.5 HIGH

SiYuan is a personal knowledge management system. Prior to version 3.1.16, SiYuan's /api/export/exportResources endpoint is vulnerable to arbitary file read via path traversal. It is …

Dec 12, 2024
CVE-2024-55657
7.5 HIGH

SiYuan is a personal knowledge management system. Prior to version 3.1.16, an arbitrary file read vulnerability exists in Siyuan's `/api/template/render` endpoint. The absence of proper …

Dec 12, 2024
CVE-2024-54529
7.8 HIGH

A logic issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.2, macOS Sonoma 14.7.2, macOS Ventura 13.7.2. An app may …

Dec 12, 2024
CVE-2024-54528
7.1 HIGH

A logic issue was addressed with improved restrictions. This issue is fixed in macOS Sequoia 15.2, macOS Sonoma 14.7.2, macOS Ventura 13.7.2. An app may …

Dec 12, 2024
CVE-2024-54515
7.8 HIGH

A logic issue was addressed with improved restrictions. This issue is fixed in macOS Sequoia 15.2. A malicious app may be able to gain root …

Dec 12, 2024
CVE-2024-54514
8.6 HIGH

The issue was addressed with improved checks. This issue is fixed in iOS 18.2 and iPadOS 18.2, macOS Sequoia 15.2, macOS Sonoma 14.7.2, macOS Ventura …

Dec 12, 2024
CVE-2024-54508
7.5 HIGH

The issue was addressed with improved memory handling. This issue is fixed in Safari 18.2, iOS 18.2 and iPadOS 18.2, iPadOS 17.7.6, macOS Sequoia 15.2, …

Dec 12, 2024
CVE-2024-54505
8.8 HIGH

A type confusion issue was addressed with improved memory handling. This issue is fixed in Safari 18.2, iOS 18.2 and iPadOS 18.2, iPadOS 17.7.3, macOS …

Dec 12, 2024
CVE-2024-54498
8.8 HIGH

A path handling issue was addressed with improved validation. This issue is fixed in macOS Sequoia 15.2, macOS Sonoma 14.7.2, macOS Ventura 13.7.2. An app …

Dec 12, 2024
CVE-2024-54489
7.8 HIGH

A path handling issue was addressed with improved validation. This issue is fixed in macOS Sequoia 15.2, macOS Sonoma 14.7.2, macOS Ventura 13.7.2. Running a …

Dec 12, 2024
CVE-2024-54479
7.5 HIGH

The issue was addressed with improved checks. This issue is fixed in Safari 18.2, iOS 18.2 and iPadOS 18.2, iPadOS 17.7.3, macOS Sequoia 15.2, tvOS …

Dec 12, 2024
CVE-2024-44291
7.8 HIGH

A logic issue was addressed with improved file handling. This issue is fixed in macOS Sequoia 15.2, macOS Sonoma 14.7.2, macOS Ventura 13.7.2. A malicious …

Dec 12, 2024
CVE-2024-44245
7.1 HIGH

The issue was addressed with improved memory handling. This issue is fixed in iOS 18.2 and iPadOS 18.2, iPadOS 17.7.3, macOS Sequoia 15.2, macOS Sonoma …

Dec 12, 2024
CVE-2024-44225
7.8 HIGH

A logic issue was addressed with improved checks. This issue is fixed in iOS 18.2 and iPadOS 18.2, iPadOS 17.7.3, macOS Sequoia 15.2, macOS Sonoma …

Dec 12, 2024
CVE-2024-44224
7.8 HIGH

A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.2, macOS Sonoma 14.7.2, macOS Ventura 13.7.2. A malicious app …

Dec 12, 2024
CVE-2024-42407
8.5 HIGH

Insertion of Sensitive Information into Log File (CWE-532) in the Gallagher Command Centre Alarm Transmitter feature could allow an authenticated Operator to view some security …

Dec 12, 2024
CVE-2024-12497
7.3 HIGH

A vulnerability classified as critical has been found in 1000 Projects Attendance Tracking Management System 1.0. Affected is an unknown function of the file /admin/check_admin_login.php. …

Dec 12, 2024
CVE-2024-55587
8.8 HIGH

python-libarchive through 4.2.1 allows directory traversal (to create files) in extract in zip.py for ZipFile.extractall and ZipFile.extract.

Dec 12, 2024
CVE-2024-49142
7.8 HIGH

Microsoft Access Remote Code Execution Vulnerability

Dec 12, 2024
CVE-2024-49138
7.8 HIGH KEV

Windows Common Log File System Driver Elevation of Privilege Vulnerability

Dec 12, 2024
CVE-2024-49132
8.1 HIGH

Windows Remote Desktop Services Remote Code Execution Vulnerability

Dec 12, 2024
CVE-2024-49129
7.5 HIGH

Windows Remote Desktop Gateway (RD Gateway) Denial of Service Vulnerability

Dec 12, 2024
CVE-2024-49128
8.1 HIGH

Sensitive data storage in improperly locked memory in Windows Remote Desktop Services allows an unauthorized attacker to execute code over a network.

Dec 12, 2024
CVE-2024-49127
8.1 HIGH

Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability

Dec 12, 2024
CVE-2024-49126
8.1 HIGH

Windows Local Security Authority Subsystem Service (LSASS) Remote Code Execution Vulnerability

Dec 12, 2024
CVE-2024-49125
8.8 HIGH

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

Dec 12, 2024
CVE-2024-49124
8.1 HIGH

Lightweight Directory Access Protocol (LDAP) Client Remote Code Execution Vulnerability

Dec 12, 2024
CVE-2024-49123
8.1 HIGH

Windows Remote Desktop Services Remote Code Execution Vulnerability

Dec 12, 2024
CVE-2024-49122
8.1 HIGH

Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability

Dec 12, 2024
CVE-2024-49121
7.5 HIGH

Windows Lightweight Directory Access Protocol (LDAP) Denial of Service Vulnerability

Dec 12, 2024
CVE-2024-49120
8.1 HIGH

Windows Remote Desktop Services Remote Code Execution Vulnerability

Dec 12, 2024
CVE-2024-49119
8.1 HIGH

Windows Remote Desktop Services Remote Code Execution Vulnerability

Dec 12, 2024
CVE-2024-49118
8.1 HIGH

Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability

Dec 12, 2024
CVE-2024-49117
8.8 HIGH

Windows Hyper-V Remote Code Execution Vulnerability

Dec 12, 2024
CVE-2024-49116
8.1 HIGH

Windows Remote Desktop Services Remote Code Execution Vulnerability

Dec 12, 2024
CVE-2024-49115
8.1 HIGH

Windows Remote Desktop Services Remote Code Execution Vulnerability

Dec 12, 2024
CVE-2024-49114
7.8 HIGH

Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability

Dec 12, 2024
CVE-2024-49113
7.5 HIGH

Windows Lightweight Directory Access Protocol (LDAP) Denial of Service Vulnerability

Dec 12, 2024
CVE-2024-49108
8.1 HIGH

Windows Remote Desktop Services Remote Code Execution Vulnerability

Dec 12, 2024
CVE-2024-49107
7.3 HIGH

WmsRepair Service Elevation of Privilege Vulnerability

Dec 12, 2024
CVE-2024-49106
8.1 HIGH

Windows Remote Desktop Services Remote Code Execution Vulnerability

Dec 12, 2024
CVE-2024-49105
8.4 HIGH

Remote Desktop Client Remote Code Execution Vulnerability

Dec 12, 2024
CVE-2024-49104
8.8 HIGH

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

Dec 12, 2024
CVE-2024-49102
8.8 HIGH

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

Dec 12, 2024
CVE-2024-49097
7.0 HIGH

Windows PrintWorkflowUserSvc Elevation of Privilege Vulnerability

Dec 12, 2024
CVE-2024-49096
7.5 HIGH

Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability

Dec 12, 2024
CVE-2024-49095
7.0 HIGH

Windows PrintWorkflowUserSvc Elevation of Privilege Vulnerability

Dec 12, 2024
CVE-2024-49093
8.8 HIGH

Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability

Dec 12, 2024
CVE-2024-49091
7.2 HIGH

Windows Domain Name Service Remote Code Execution Vulnerability

Dec 12, 2024
CVE-2024-49090
7.8 HIGH

Windows Common Log File System Driver Elevation of Privilege Vulnerability

Dec 12, 2024

Scan your infrastructure for known CVEs

Free website and port scanning — find vulnerabilities before attackers do.