CVE Database

47326+ vulnerabilities with CVSS scores, EPSS exploit predictions, and CISA KEV status. Updated daily.

Filter: All CRITICAL HIGH MEDIUM LOW CISA KEV
Sort: Newest CVSS EPSS
CVE-2024-28114
8.1 HIGH

Peering Manager is a BGP session management tool. There is a Server Side Template Injection vulnerability that leads to Remote Code Execution in Peering Manager …

Mar 12, 2024
CVE-2023-5410
8.2 HIGH

A potential security vulnerability has been reported in the system BIOS of certain HP PC products, which might allow memory tampering. HP is releasing mitigation …

Mar 12, 2024
CVE-2024-27894
8.5 HIGH

The Pulsar Functions Worker includes a capability that permits authenticated users to create functions where the function's implementation is referenced by a URL. The supported …

Mar 12, 2024
CVE-2024-27317
8.4 HIGH

In Pulsar Functions Worker, authenticated users can upload functions in jar or nar files. These files, essentially zip files, are extracted by the Functions Worker. …

Mar 12, 2024
CVE-2024-27135
8.5 HIGH

Improper input validation in the Pulsar Function Worker allows a malicious authenticated user to execute arbitrary Java code on the Pulsar Function worker, outside of …

Mar 12, 2024
CVE-2022-34321
8.2 HIGH

Improper Authentication vulnerability in Apache Pulsar Proxy allows an attacker to connect to the /proxy-stats endpoint without authentication. The vulnerable endpoint exposes detailed statistics about …

Mar 12, 2024
CVE-2024-1138
8.8 HIGH

The FTL Server component of TIBCO Software Inc.'s TIBCO FTL - Enterprise Edition contains a vulnerability that allows a low privileged attacker with network access …

Mar 12, 2024
CVE-2024-28340
7.5 HIGH

An information leak in the currentsetting.htm component of Netgear CBR40 2.5.0.28, Netgear CBK40 2.5.0.28, and Netgear CBK43 2.5.0.28 allows attackers to obtain sensitive information without …

Mar 12, 2024
CVE-2024-28338
8.0 HIGH

A login bypass in TOTOLINK A8000RU V7.1cu.643_B20200521 allows attackers to login to Administrator accounts via providing a crafted session cookie.

Mar 12, 2024
CVE-2024-26204
7.5 HIGH

Outlook for Android Information Disclosure Vulnerability

Mar 12, 2024
CVE-2024-26203
7.3 HIGH

Azure Data Studio Elevation of Privilege Vulnerability

Mar 12, 2024
CVE-2024-26199
7.8 HIGH

Microsoft Office Elevation of Privilege Vulnerability

Mar 12, 2024
CVE-2024-26198
8.8 HIGH

Microsoft Exchange Server Remote Code Execution Vulnerability

Mar 12, 2024
CVE-2024-26190
7.5 HIGH

Microsoft QUIC Denial of Service Vulnerability

Mar 12, 2024
CVE-2024-26182
7.8 HIGH

Windows Kernel Elevation of Privilege Vulnerability

Mar 12, 2024
CVE-2024-26178
7.8 HIGH

Windows Kernel Elevation of Privilege Vulnerability

Mar 12, 2024
CVE-2024-26176
7.8 HIGH

Windows Kernel Elevation of Privilege Vulnerability

Mar 12, 2024
CVE-2024-26173
7.8 HIGH

Windows Kernel Elevation of Privilege Vulnerability

Mar 12, 2024
CVE-2024-26170
7.8 HIGH

Windows Composite Image File System (CimFS) Elevation of Privilege Vulnerability

Mar 12, 2024
CVE-2024-26169
7.8 HIGH KEV

Windows Error Reporting Service Elevation of Privilege Vulnerability

Mar 12, 2024
CVE-2024-26166
8.8 HIGH

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability

Mar 12, 2024
CVE-2024-26165
8.8 HIGH

Visual Studio Code Elevation of Privilege Vulnerability

Mar 12, 2024
CVE-2024-26164
8.8 HIGH

Microsoft Django Backend for SQL Server Remote Code Execution Vulnerability

Mar 12, 2024
CVE-2024-26162
8.8 HIGH

Microsoft ODBC Driver Remote Code Execution Vulnerability

Mar 12, 2024
CVE-2024-26161
8.8 HIGH

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability

Mar 12, 2024
CVE-2024-26159
8.8 HIGH

Microsoft ODBC Driver Remote Code Execution Vulnerability

Mar 12, 2024
CVE-2024-21451
8.8 HIGH

Microsoft ODBC Driver Remote Code Execution Vulnerability

Mar 12, 2024
CVE-2024-21450
8.8 HIGH

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability

Mar 12, 2024
CVE-2024-21446
7.8 HIGH

NTFS Elevation of Privilege Vulnerability

Mar 12, 2024
CVE-2024-21445
7.0 HIGH

Windows USB Print Driver Elevation of Privilege Vulnerability

Mar 12, 2024
CVE-2024-21444
8.8 HIGH

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability

Mar 12, 2024
CVE-2024-21443
7.3 HIGH

Windows Kernel Elevation of Privilege Vulnerability

Mar 12, 2024
CVE-2024-21442
7.8 HIGH

Windows USB Print Driver Elevation of Privilege Vulnerability

Mar 12, 2024
CVE-2024-21441
8.8 HIGH

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability

Mar 12, 2024
CVE-2024-21440
8.8 HIGH

Microsoft ODBC Driver Remote Code Execution Vulnerability

Mar 12, 2024
CVE-2024-21439
7.0 HIGH

Windows Telephony Server Elevation of Privilege Vulnerability

Mar 12, 2024
CVE-2024-21438
7.5 HIGH

Microsoft AllJoyn API Denial of Service Vulnerability

Mar 12, 2024
CVE-2024-21437
7.8 HIGH

Windows Graphics Component Elevation of Privilege Vulnerability

Mar 12, 2024
CVE-2024-21436
7.8 HIGH

Windows Installer Elevation of Privilege Vulnerability

Mar 12, 2024
CVE-2024-21435
8.8 HIGH

Windows OLE Remote Code Execution Vulnerability

Mar 12, 2024
CVE-2024-21434
7.8 HIGH

Microsoft Windows SCSI Class System File Elevation of Privilege Vulnerability

Mar 12, 2024
CVE-2024-21433
7.0 HIGH

Windows Print Spooler Elevation of Privilege Vulnerability

Mar 12, 2024
CVE-2024-21432
7.0 HIGH

Windows Update Stack Elevation of Privilege Vulnerability

Mar 12, 2024
CVE-2024-21431
7.8 HIGH

Hypervisor-Protected Code Integrity (HVCI) Security Feature Bypass Vulnerability

Mar 12, 2024
CVE-2024-21427
7.5 HIGH

Windows Kerberos Security Feature Bypass Vulnerability

Mar 12, 2024
CVE-2024-21426
7.8 HIGH

Microsoft SharePoint Server Remote Code Execution Vulnerability

Mar 12, 2024
CVE-2024-21421
7.5 HIGH

Azure SDK Spoofing Vulnerability

Mar 12, 2024
CVE-2024-21419
7.6 HIGH

Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability

Mar 12, 2024
CVE-2024-21418
7.8 HIGH

Software for Open Networking in the Cloud (SONiC) Elevation of Privilege Vulnerability

Mar 12, 2024
CVE-2024-21411
8.8 HIGH

Skype for Consumer Remote Code Execution Vulnerability

Mar 12, 2024

Scan your infrastructure for known CVEs

Free website and port scanning — find vulnerabilities before attackers do.