| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2024-38253 | Hig | 0.51 | 7.8 | 0.01 | Sep 10, 2024 | Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability | ||
| CVE-2024-38252 | Hig | 0.51 | 7.8 | 0.01 | Sep 10, 2024 | Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability | ||
| CVE-2024-38250 | Hig | 0.51 | 7.8 | 0.01 | Sep 10, 2024 | Windows Graphics Component Elevation of Privilege Vulnerability | ||
| CVE-2024-38249 | Hig | 0.51 | 7.8 | 0.01 | Sep 10, 2024 | Windows Graphics Component Elevation of Privilege Vulnerability | ||
| CVE-2024-38248 | Hig | 0.46 | 7.0 | 0.01 | Sep 10, 2024 | Windows Storage Elevation of Privilege Vulnerability | ||
| CVE-2024-38247 | Hig | 0.51 | 7.8 | 0.01 | Sep 10, 2024 | Windows Graphics Component Elevation of Privilege Vulnerability | ||
| CVE-2024-38246 | Hig | 0.46 | 7.0 | 0.01 | Sep 10, 2024 | Win32k Elevation of Privilege Vulnerability | ||
| CVE-2024-38245 | Hig | 0.51 | 7.8 | 0.01 | Sep 10, 2024 | Kernel Streaming Service Driver Elevation of Privilege Vulnerability | ||
| CVE-2024-38244 | Hig | 0.51 | 7.8 | 0.06 | Sep 10, 2024 | Kernel Streaming Service Driver Elevation of Privilege Vulnerability | ||
| CVE-2024-38243 | Hig | 0.51 | 7.8 | 0.01 | Sep 10, 2024 | Kernel Streaming Service Driver Elevation of Privilege Vulnerability | ||
| CVE-2024-38242 | Hig | 0.51 | 7.8 | 0.03 | Sep 10, 2024 | Kernel Streaming Service Driver Elevation of Privilege Vulnerability | ||
| CVE-2024-38241 | Hig | 0.51 | 7.8 | 0.06 | Sep 10, 2024 | Kernel Streaming Service Driver Elevation of Privilege Vulnerability | ||
| CVE-2024-38240 | Hig | 0.53 | 8.1 | 0.01 | Sep 10, 2024 | Windows Remote Access Connection Manager Elevation of Privilege Vulnerability | ||
| CVE-2024-38239 | Hig | 0.47 | 7.2 | 0.02 | Sep 10, 2024 | Windows Kerberos Elevation of Privilege Vulnerability | ||
| CVE-2024-38238 | Hig | 0.51 | 7.8 | 0.01 | Sep 10, 2024 | Kernel Streaming Service Driver Elevation of Privilege Vulnerability | ||
| CVE-2024-38237 | Hig | 0.51 | 7.8 | 0.03 | Sep 10, 2024 | Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability | ||
| CVE-2024-38236 | Hig | 0.49 | 7.5 | 0.02 | Sep 10, 2024 | DHCP Server Service Denial of Service Vulnerability | ||
| CVE-2024-38233 | Hig | 0.49 | 7.5 | 0.02 | Sep 10, 2024 | Windows Networking Denial of Service Vulnerability | ||
| CVE-2024-38232 | Hig | 0.49 | 7.5 | 0.02 | Sep 10, 2024 | Windows Networking Denial of Service Vulnerability | ||
| CVE-2024-38228 | Hig | 0.47 | 7.2 | 0.04 | Sep 10, 2024 | Microsoft SharePoint Server Remote Code Execution Vulnerability | ||
| CVE-2024-38227 | Hig | 0.47 | 7.2 | 0.08 | Sep 10, 2024 | Microsoft SharePoint Server Remote Code Execution Vulnerability | ||
| CVE-2024-38226 | Hig | 0.60 | 7.3 | 0.03 | KEV | Sep 10, 2024 | Microsoft Publisher Security Feature Bypass Vulnerability | |
| CVE-2024-38225 | Hig | 0.57 | 8.8 | 0.01 | Sep 10, 2024 | Microsoft Dynamics 365 Business Central Elevation of Privilege Vulnerability | ||
| CVE-2024-38216 | Hig | 0.53 | 8.2 | 0.01 | Sep 10, 2024 | Azure Stack Hub Elevation of Privilege Vulnerability | ||
| CVE-2024-38194 | Hig | 0.55 | 8.4 | 0.01 | Sep 10, 2024 | An authenticated attacker can exploit an improper authorization vulnerability in Azure Web Apps to elevate privileges over a network. | ||
| CVE-2024-38188 | Hig | 0.46 | 7.1 | 0.01 | Sep 10, 2024 | Azure Network Watcher VM Agent Elevation of Privilege Vulnerability | ||
| CVE-2024-38119 | Hig | 0.49 | 7.5 | 0.01 | Sep 10, 2024 | Windows Network Address Translation (NAT) Remote Code Execution Vulnerability | ||
| CVE-2024-38046 | Hig | 0.51 | 7.8 | 0.01 | Sep 10, 2024 | PowerShell Elevation of Privilege Vulnerability | ||
| CVE-2024-38045 | Hig | 0.53 | 8.1 | 0.01 | Sep 10, 2024 | Windows TCP/IP Remote Code Execution Vulnerability | ||
| CVE-2024-38018 | Hig | 0.61 | 8.8 | 0.51 | Sep 10, 2024 | Microsoft SharePoint Server Remote Code Execution Vulnerability | ||
| CVE-2024-38014 | Hig | 0.63 | 7.8 | 0.06 | KEV | Sep 10, 2024 | Windows Installer Elevation of Privilege Vulnerability | |
| CVE-2024-37980 | Hig | 0.57 | 8.8 | 0.01 | Sep 10, 2024 | Microsoft SQL Server Elevation of Privilege Vulnerability | ||
| CVE-2024-37966 | Hig | 0.46 | 7.1 | 0.02 | Sep 10, 2024 | Microsoft SQL Server Native Scoring Information Disclosure Vulnerability | ||
| CVE-2024-37965 | Hig | 0.57 | 8.8 | 0.02 | Sep 10, 2024 | Microsoft SQL Server Elevation of Privilege Vulnerability | ||
| CVE-2024-37342 | Hig | 0.46 | 7.1 | 0.02 | Sep 10, 2024 | Microsoft SQL Server Native Scoring Information Disclosure Vulnerability | ||
| CVE-2024-37341 | Hig | 0.57 | 8.8 | 0.01 | Sep 10, 2024 | Microsoft SQL Server Elevation of Privilege Vulnerability | ||
| CVE-2024-37340 | Hig | 0.57 | 8.8 | 0.02 | Sep 10, 2024 | Microsoft SQL Server Native Scoring Remote Code Execution Vulnerability | ||
| CVE-2024-37339 | Hig | 0.57 | 8.8 | 0.02 | Sep 10, 2024 | Microsoft SQL Server Native Scoring Remote Code Execution Vulnerability | ||
| CVE-2024-37338 | Hig | 0.57 | 8.8 | 0.02 | Sep 10, 2024 | Microsoft SQL Server Native Scoring Remote Code Execution Vulnerability | ||
| CVE-2024-37337 | Hig | 0.46 | 7.1 | 0.02 | Sep 10, 2024 | Microsoft SQL Server Native Scoring Information Disclosure Vulnerability | ||
| CVE-2024-37335 | Hig | 0.57 | 8.8 | 0.02 | Sep 10, 2024 | Microsoft SQL Server Native Scoring Remote Code Execution Vulnerability | ||
| CVE-2024-30073 | Hig | 0.51 | 7.8 | 0.01 | Sep 10, 2024 | Windows Security Zone Mapping Security Feature Bypass Vulnerability | ||
| CVE-2024-26191 | Hig | 0.57 | 8.8 | 0.02 | Sep 10, 2024 | Microsoft SQL Server Native Scoring Remote Code Execution Vulnerability | ||
| CVE-2024-26186 | Hig | 0.57 | 8.8 | 0.02 | Sep 10, 2024 | Microsoft SQL Server Native Scoring Remote Code Execution Vulnerability | ||
| CVE-2024-21416 | Hig | 0.53 | 8.1 | 0.01 | Sep 10, 2024 | Windows TCP/IP Remote Code Execution Vulnerability | ||
| CVE-2023-6841 | Hig | 0.49 | 7.5 | 0.01 | Sep 10, 2024 | A denial of service vulnerability was found in keycloak where the amount of attributes per object is not limited,an attacker by sending repeated HTTP requests could cause a resource exhaustion when the application send back rows with long attribute values. | ||
| CVE-2024-45592 | Hig | 0.46 | 8.2 | 0.00 | Sep 10, 2024 | auditor-bundle, formerly known as DoctrineAuditBundle, integrates auditor library into any Symfony 3.4+ application. Prior to version 5.2.6, there is an unescaped entity property enabling Javascript injection. This is possible because `%source_label%` in twig macro is not… | ||
| CVE-2024-45590 | Hig | 0.42 | 7.5 | 0.01 | Sep 10, 2024 | body-parser is Node.js body parsing middleware. body-parser <1.20.3 is vulnerable to denial of service when url encoding is enabled. A malicious actor using a specially crafted payload could flood the server with a large number of requests, resulting in denial of service. This… | ||
| CVE-2024-31960 | Hig | 0.51 | 7.8 | 0.00 | Sep 10, 2024 | An issue was discovered in Samsung Mobile Processor Exynos 1480, Exynos 2400. The xclipse amdgpu driver has a reference count bug. This can lead to a use after free. | ||
| CVE-2023-37233 | Hig | 0.57 | 8.8 | 0.00 | Sep 10, 2024 | Loftware Spectrum before 4.6 HF14 allows authenticated XXE attacks. |
- risk 0.51cvss 7.8epss 0.01
Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability
- risk 0.51cvss 7.8epss 0.01
Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability
- risk 0.51cvss 7.8epss 0.01
Windows Graphics Component Elevation of Privilege Vulnerability
- risk 0.51cvss 7.8epss 0.01
Windows Graphics Component Elevation of Privilege Vulnerability
- risk 0.46cvss 7.0epss 0.01
Windows Storage Elevation of Privilege Vulnerability
- risk 0.51cvss 7.8epss 0.01
Windows Graphics Component Elevation of Privilege Vulnerability
- risk 0.46cvss 7.0epss 0.01
Win32k Elevation of Privilege Vulnerability
- risk 0.51cvss 7.8epss 0.01
Kernel Streaming Service Driver Elevation of Privilege Vulnerability
- risk 0.51cvss 7.8epss 0.06
Kernel Streaming Service Driver Elevation of Privilege Vulnerability
- risk 0.51cvss 7.8epss 0.01
Kernel Streaming Service Driver Elevation of Privilege Vulnerability
- risk 0.51cvss 7.8epss 0.03
Kernel Streaming Service Driver Elevation of Privilege Vulnerability
- risk 0.51cvss 7.8epss 0.06
Kernel Streaming Service Driver Elevation of Privilege Vulnerability
- risk 0.53cvss 8.1epss 0.01
Windows Remote Access Connection Manager Elevation of Privilege Vulnerability
- risk 0.47cvss 7.2epss 0.02
Windows Kerberos Elevation of Privilege Vulnerability
- risk 0.51cvss 7.8epss 0.01
Kernel Streaming Service Driver Elevation of Privilege Vulnerability
- risk 0.51cvss 7.8epss 0.03
Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability
- risk 0.49cvss 7.5epss 0.02
DHCP Server Service Denial of Service Vulnerability
- risk 0.49cvss 7.5epss 0.02
Windows Networking Denial of Service Vulnerability
- risk 0.49cvss 7.5epss 0.02
Windows Networking Denial of Service Vulnerability
- risk 0.47cvss 7.2epss 0.04
Microsoft SharePoint Server Remote Code Execution Vulnerability
- risk 0.47cvss 7.2epss 0.08
Microsoft SharePoint Server Remote Code Execution Vulnerability
- risk 0.60cvss 7.3epss 0.03
Microsoft Publisher Security Feature Bypass Vulnerability
- risk 0.57cvss 8.8epss 0.01
Microsoft Dynamics 365 Business Central Elevation of Privilege Vulnerability
- risk 0.53cvss 8.2epss 0.01
Azure Stack Hub Elevation of Privilege Vulnerability
- risk 0.55cvss 8.4epss 0.01
An authenticated attacker can exploit an improper authorization vulnerability in Azure Web Apps to elevate privileges over a network.
- risk 0.46cvss 7.1epss 0.01
Azure Network Watcher VM Agent Elevation of Privilege Vulnerability
- risk 0.49cvss 7.5epss 0.01
Windows Network Address Translation (NAT) Remote Code Execution Vulnerability
- risk 0.51cvss 7.8epss 0.01
PowerShell Elevation of Privilege Vulnerability
- risk 0.53cvss 8.1epss 0.01
Windows TCP/IP Remote Code Execution Vulnerability
- risk 0.61cvss 8.8epss 0.51
Microsoft SharePoint Server Remote Code Execution Vulnerability
- risk 0.63cvss 7.8epss 0.06
Windows Installer Elevation of Privilege Vulnerability
- risk 0.57cvss 8.8epss 0.01
Microsoft SQL Server Elevation of Privilege Vulnerability
- risk 0.46cvss 7.1epss 0.02
Microsoft SQL Server Native Scoring Information Disclosure Vulnerability
- risk 0.57cvss 8.8epss 0.02
Microsoft SQL Server Elevation of Privilege Vulnerability
- risk 0.46cvss 7.1epss 0.02
Microsoft SQL Server Native Scoring Information Disclosure Vulnerability
- risk 0.57cvss 8.8epss 0.01
Microsoft SQL Server Elevation of Privilege Vulnerability
- risk 0.57cvss 8.8epss 0.02
Microsoft SQL Server Native Scoring Remote Code Execution Vulnerability
- risk 0.57cvss 8.8epss 0.02
Microsoft SQL Server Native Scoring Remote Code Execution Vulnerability
- risk 0.57cvss 8.8epss 0.02
Microsoft SQL Server Native Scoring Remote Code Execution Vulnerability
- risk 0.46cvss 7.1epss 0.02
Microsoft SQL Server Native Scoring Information Disclosure Vulnerability
- risk 0.57cvss 8.8epss 0.02
Microsoft SQL Server Native Scoring Remote Code Execution Vulnerability
- risk 0.51cvss 7.8epss 0.01
Windows Security Zone Mapping Security Feature Bypass Vulnerability
- risk 0.57cvss 8.8epss 0.02
Microsoft SQL Server Native Scoring Remote Code Execution Vulnerability
- risk 0.57cvss 8.8epss 0.02
Microsoft SQL Server Native Scoring Remote Code Execution Vulnerability
- risk 0.53cvss 8.1epss 0.01
Windows TCP/IP Remote Code Execution Vulnerability
- risk 0.49cvss 7.5epss 0.01
A denial of service vulnerability was found in keycloak where the amount of attributes per object is not limited,an attacker by sending repeated HTTP requests could cause a resource exhaustion when the application send back rows with long attribute values.
- risk 0.46cvss 8.2epss 0.00
auditor-bundle, formerly known as DoctrineAuditBundle, integrates auditor library into any Symfony 3.4+ application. Prior to version 5.2.6, there is an unescaped entity property enabling Javascript injection. This is possible because `%source_label%` in twig macro is not…
- risk 0.42cvss 7.5epss 0.01
body-parser is Node.js body parsing middleware. body-parser <1.20.3 is vulnerable to denial of service when url encoding is enabled. A malicious actor using a specially crafted payload could flood the server with a large number of requests, resulting in denial of service. This…
- risk 0.51cvss 7.8epss 0.00
An issue was discovered in Samsung Mobile Processor Exynos 1480, Exynos 2400. The xclipse amdgpu driver has a reference count bug. This can lead to a use after free.
- risk 0.57cvss 8.8epss 0.00
Loftware Spectrum before 4.6 HF14 allows authenticated XXE attacks.