| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2024-26203 | Hig | 0.48 | 7.3 | 0.01 | Mar 12, 2024 | Azure Data Studio Elevation of Privilege Vulnerability | ||
| CVE-2024-26199 | Hig | 0.51 | 7.8 | 0.01 | Mar 12, 2024 | Microsoft Office Elevation of Privilege Vulnerability | ||
| CVE-2024-26198 | Hig | 0.58 | 8.8 | 0.07 | Mar 12, 2024 | Microsoft Exchange Server Remote Code Execution Vulnerability | ||
| CVE-2024-26190 | Hig | 0.49 | 7.5 | 0.03 | Mar 12, 2024 | Microsoft QUIC Denial of Service Vulnerability | ||
| CVE-2024-26182 | Hig | 0.51 | 7.8 | 0.06 | Mar 12, 2024 | Windows Kernel Elevation of Privilege Vulnerability | ||
| CVE-2024-26178 | Hig | 0.51 | 7.8 | 0.01 | Mar 12, 2024 | Windows Kernel Elevation of Privilege Vulnerability | ||
| CVE-2024-26176 | Hig | 0.51 | 7.8 | 0.01 | Mar 12, 2024 | Windows Kernel Elevation of Privilege Vulnerability | ||
| CVE-2024-26173 | Hig | 0.51 | 7.8 | 0.01 | Mar 12, 2024 | Windows Kernel Elevation of Privilege Vulnerability | ||
| CVE-2024-26170 | Hig | 0.51 | 7.8 | 0.07 | Mar 12, 2024 | Windows Composite Image File System (CimFS) Elevation of Privilege Vulnerability | ||
| CVE-2024-26169 | Hig | 0.69 | 7.8 | 0.04 | KEV | Mar 12, 2024 | Windows Error Reporting Service Elevation of Privilege Vulnerability | |
| CVE-2024-26166 | Hig | 0.57 | 8.8 | 0.02 | Mar 12, 2024 | Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability | ||
| CVE-2024-26165 | Hig | 0.57 | 8.8 | 0.02 | Mar 12, 2024 | Visual Studio Code Elevation of Privilege Vulnerability | ||
| CVE-2024-26164 | Hig | 0.57 | 8.8 | 0.02 | Mar 12, 2024 | Microsoft Django Backend for SQL Server Remote Code Execution Vulnerability | ||
| CVE-2024-26162 | Hig | 0.57 | 8.8 | 0.02 | Mar 12, 2024 | Microsoft ODBC Driver Remote Code Execution Vulnerability | ||
| CVE-2024-26161 | Hig | 0.57 | 8.8 | 0.02 | Mar 12, 2024 | Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability | ||
| CVE-2024-26159 | Hig | 0.57 | 8.8 | 0.02 | Mar 12, 2024 | Microsoft ODBC Driver Remote Code Execution Vulnerability | ||
| CVE-2024-21451 | Hig | 0.57 | 8.8 | 0.02 | Mar 12, 2024 | Microsoft ODBC Driver Remote Code Execution Vulnerability | ||
| CVE-2024-21450 | Hig | 0.57 | 8.8 | 0.02 | Mar 12, 2024 | Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability | ||
| CVE-2024-21446 | Hig | 0.51 | 7.8 | 0.01 | Mar 12, 2024 | NTFS Elevation of Privilege Vulnerability | ||
| CVE-2024-21445 | Hig | 0.46 | 7.0 | 0.01 | Mar 12, 2024 | Windows USB Print Driver Elevation of Privilege Vulnerability | ||
| CVE-2024-21444 | Hig | 0.57 | 8.8 | 0.02 | Mar 12, 2024 | Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability | ||
| CVE-2024-21443 | Hig | 0.48 | 7.3 | 0.01 | Mar 12, 2024 | Windows Kernel Elevation of Privilege Vulnerability | ||
| CVE-2024-21442 | Hig | 0.51 | 7.8 | 0.01 | Mar 12, 2024 | Windows USB Print Driver Elevation of Privilege Vulnerability | ||
| CVE-2024-21441 | Hig | 0.57 | 8.8 | 0.02 | Mar 12, 2024 | Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability | ||
| CVE-2024-21440 | Hig | 0.57 | 8.8 | 0.02 | Mar 12, 2024 | Microsoft ODBC Driver Remote Code Execution Vulnerability | ||
| CVE-2024-21439 | Hig | 0.46 | 7.0 | 0.01 | Mar 12, 2024 | Windows Telephony Server Elevation of Privilege Vulnerability | ||
| CVE-2024-21438 | Hig | 0.49 | 7.5 | 0.03 | Mar 12, 2024 | Microsoft AllJoyn API Denial of Service Vulnerability | ||
| CVE-2024-21437 | Hig | 0.51 | 7.8 | 0.08 | Mar 12, 2024 | Windows Graphics Component Elevation of Privilege Vulnerability | ||
| CVE-2024-21436 | Hig | 0.51 | 7.8 | 0.01 | Mar 12, 2024 | Windows Installer Elevation of Privilege Vulnerability | ||
| CVE-2024-21435 | Hig | 0.57 | 8.8 | 0.02 | Mar 12, 2024 | Windows OLE Remote Code Execution Vulnerability | ||
| CVE-2024-21434 | Hig | 0.51 | 7.8 | 0.01 | Mar 12, 2024 | Microsoft Windows SCSI Class System File Elevation of Privilege Vulnerability | ||
| CVE-2024-21433 | Hig | 0.46 | 7.0 | 0.05 | Mar 12, 2024 | Windows Print Spooler Elevation of Privilege Vulnerability | ||
| CVE-2024-21432 | Hig | 0.46 | 7.0 | 0.01 | Mar 12, 2024 | Windows Update Stack Elevation of Privilege Vulnerability | ||
| CVE-2024-21431 | Hig | 0.51 | 7.8 | 0.01 | Mar 12, 2024 | Hypervisor-Protected Code Integrity (HVCI) Security Feature Bypass Vulnerability | ||
| CVE-2024-21427 | Hig | 0.49 | 7.5 | 0.02 | Mar 12, 2024 | Windows Kerberos Security Feature Bypass Vulnerability | ||
| CVE-2024-21426 | Hig | 0.51 | 7.8 | 0.04 | Mar 12, 2024 | Microsoft SharePoint Server Remote Code Execution Vulnerability | ||
| CVE-2024-21421 | Hig | 0.49 | 7.5 | 0.02 | Mar 12, 2024 | Azure SDK Spoofing Vulnerability | ||
| CVE-2024-21419 | Hig | 0.49 | 7.6 | 0.01 | Mar 12, 2024 | Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability | ||
| CVE-2024-21418 | Hig | 0.51 | 7.8 | 0.01 | Mar 12, 2024 | Software for Open Networking in the Cloud (SONiC) Elevation of Privilege Vulnerability | ||
| CVE-2024-21411 | Hig | 0.57 | 8.8 | 0.03 | Mar 12, 2024 | Skype for Consumer Remote Code Execution Vulnerability | ||
| CVE-2024-21407 | Hig | 0.54 | 8.1 | 0.16 | Mar 12, 2024 | Windows Hyper-V Remote Code Execution Vulnerability | ||
| CVE-2024-21392 | Hig | 0.42 | 7.5 | 0.03 | Mar 12, 2024 | .NET and Visual Studio Denial of Service Vulnerability | ||
| CVE-2024-21390 | Hig | 0.46 | 7.1 | 0.01 | Mar 12, 2024 | Microsoft Authenticator Elevation of Privilege Vulnerability | ||
| CVE-2024-21330 | Hig | 0.51 | 7.8 | 0.01 | Mar 12, 2024 | Open Management Infrastructure (OMI) Elevation of Privilege Vulnerability | ||
| CVE-2024-27758 | Hig | 0.48 | 8.4 | 0.01 | Mar 12, 2024 | In RPyC before 6.0.0, when a server exposes a method that calls the attribute named __array__ for a client-provided netref (e.g., np.array(client_netref)), a remote attacker can craft a class that results in remote code execution. | ||
| CVE-2024-1529 | Hig | 0.48 | 7.4 | 0.00 | Mar 12, 2024 | Vulnerability in CMS Made Simple 2.2.14, which does not sufficiently encode user-controlled input, resulting in a Cross-Site Scripting (XSS) vulnerability through /admin/adduser.php, in multiple parameters. This vulnerability could allow a remote attacker to send a specially… | ||
| CVE-2024-1528 | Hig | 0.48 | 7.4 | 0.00 | Mar 12, 2024 | CMS Made Simple version 2.2.14, does not sufficiently encode user-controlled input, resulting in a Cross-Site Scripting (XSS) vulnerability through /admin/moduleinterface.php, in multiple parameters. This vulnerability could allow a remote attacker to send a specially crafted… | ||
| CVE-2024-1302 | Hig | 0.47 | 7.3 | 0.00 | Mar 12, 2024 | Information exposure vulnerability in Badger Meter Monitool affecting versions up to 4.6.3 and earlier. A local attacker could change the application's file parameter to a log file obtaining all sensitive information such as database credentials. | ||
| CVE-2024-23112 | Hig | 0.52 | 8.0 | 0.01 | Mar 12, 2024 | An authorization bypass through user-controlled key vulnerability [CWE-639] in FortiOS version 7.4.0 through 7.4.1, 7.2.0 through 7.2.6, 7.0.1 through 7.0.13, 6.4.7 through 6.4.14, and FortiProxy version 7.4.0 through 7.4.2, 7.2.0 through 7.2.8, 7.0.0 through 7.0.14 SSL-VPN may… | ||
| CVE-2024-1618 | Hig | 0.51 | 7.8 | 0.00 | Mar 12, 2024 | A search path or unquoted item vulnerability in Faronics Deep Freeze Server Standard, which affects versions 8.30.020.4627 and earlier. This vulnerability affects the DFServ.exe file. An attacker with local user privileges could exploit this vulnerability to replace the… |
- risk 0.48cvss 7.3epss 0.01
Azure Data Studio Elevation of Privilege Vulnerability
- risk 0.51cvss 7.8epss 0.01
Microsoft Office Elevation of Privilege Vulnerability
- risk 0.58cvss 8.8epss 0.07
Microsoft Exchange Server Remote Code Execution Vulnerability
- risk 0.49cvss 7.5epss 0.03
Microsoft QUIC Denial of Service Vulnerability
- risk 0.51cvss 7.8epss 0.06
Windows Kernel Elevation of Privilege Vulnerability
- risk 0.51cvss 7.8epss 0.01
Windows Kernel Elevation of Privilege Vulnerability
- risk 0.51cvss 7.8epss 0.01
Windows Kernel Elevation of Privilege Vulnerability
- risk 0.51cvss 7.8epss 0.01
Windows Kernel Elevation of Privilege Vulnerability
- risk 0.51cvss 7.8epss 0.07
Windows Composite Image File System (CimFS) Elevation of Privilege Vulnerability
- risk 0.69cvss 7.8epss 0.04
Windows Error Reporting Service Elevation of Privilege Vulnerability
- risk 0.57cvss 8.8epss 0.02
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
- risk 0.57cvss 8.8epss 0.02
Visual Studio Code Elevation of Privilege Vulnerability
- risk 0.57cvss 8.8epss 0.02
Microsoft Django Backend for SQL Server Remote Code Execution Vulnerability
- risk 0.57cvss 8.8epss 0.02
Microsoft ODBC Driver Remote Code Execution Vulnerability
- risk 0.57cvss 8.8epss 0.02
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
- risk 0.57cvss 8.8epss 0.02
Microsoft ODBC Driver Remote Code Execution Vulnerability
- risk 0.57cvss 8.8epss 0.02
Microsoft ODBC Driver Remote Code Execution Vulnerability
- risk 0.57cvss 8.8epss 0.02
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
- risk 0.51cvss 7.8epss 0.01
NTFS Elevation of Privilege Vulnerability
- risk 0.46cvss 7.0epss 0.01
Windows USB Print Driver Elevation of Privilege Vulnerability
- risk 0.57cvss 8.8epss 0.02
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
- risk 0.48cvss 7.3epss 0.01
Windows Kernel Elevation of Privilege Vulnerability
- risk 0.51cvss 7.8epss 0.01
Windows USB Print Driver Elevation of Privilege Vulnerability
- risk 0.57cvss 8.8epss 0.02
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
- risk 0.57cvss 8.8epss 0.02
Microsoft ODBC Driver Remote Code Execution Vulnerability
- risk 0.46cvss 7.0epss 0.01
Windows Telephony Server Elevation of Privilege Vulnerability
- risk 0.49cvss 7.5epss 0.03
Microsoft AllJoyn API Denial of Service Vulnerability
- risk 0.51cvss 7.8epss 0.08
Windows Graphics Component Elevation of Privilege Vulnerability
- risk 0.51cvss 7.8epss 0.01
Windows Installer Elevation of Privilege Vulnerability
- risk 0.57cvss 8.8epss 0.02
Windows OLE Remote Code Execution Vulnerability
- risk 0.51cvss 7.8epss 0.01
Microsoft Windows SCSI Class System File Elevation of Privilege Vulnerability
- risk 0.46cvss 7.0epss 0.05
Windows Print Spooler Elevation of Privilege Vulnerability
- risk 0.46cvss 7.0epss 0.01
Windows Update Stack Elevation of Privilege Vulnerability
- risk 0.51cvss 7.8epss 0.01
Hypervisor-Protected Code Integrity (HVCI) Security Feature Bypass Vulnerability
- risk 0.49cvss 7.5epss 0.02
Windows Kerberos Security Feature Bypass Vulnerability
- risk 0.51cvss 7.8epss 0.04
Microsoft SharePoint Server Remote Code Execution Vulnerability
- risk 0.49cvss 7.5epss 0.02
Azure SDK Spoofing Vulnerability
- risk 0.49cvss 7.6epss 0.01
Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability
- risk 0.51cvss 7.8epss 0.01
Software for Open Networking in the Cloud (SONiC) Elevation of Privilege Vulnerability
- risk 0.57cvss 8.8epss 0.03
Skype for Consumer Remote Code Execution Vulnerability
- risk 0.54cvss 8.1epss 0.16
Windows Hyper-V Remote Code Execution Vulnerability
- risk 0.42cvss 7.5epss 0.03
.NET and Visual Studio Denial of Service Vulnerability
- risk 0.46cvss 7.1epss 0.01
Microsoft Authenticator Elevation of Privilege Vulnerability
- risk 0.51cvss 7.8epss 0.01
Open Management Infrastructure (OMI) Elevation of Privilege Vulnerability
- risk 0.48cvss 8.4epss 0.01
In RPyC before 6.0.0, when a server exposes a method that calls the attribute named __array__ for a client-provided netref (e.g., np.array(client_netref)), a remote attacker can craft a class that results in remote code execution.
- risk 0.48cvss 7.4epss 0.00
Vulnerability in CMS Made Simple 2.2.14, which does not sufficiently encode user-controlled input, resulting in a Cross-Site Scripting (XSS) vulnerability through /admin/adduser.php, in multiple parameters. This vulnerability could allow a remote attacker to send a specially…
- risk 0.48cvss 7.4epss 0.00
CMS Made Simple version 2.2.14, does not sufficiently encode user-controlled input, resulting in a Cross-Site Scripting (XSS) vulnerability through /admin/moduleinterface.php, in multiple parameters. This vulnerability could allow a remote attacker to send a specially crafted…
- risk 0.47cvss 7.3epss 0.00
Information exposure vulnerability in Badger Meter Monitool affecting versions up to 4.6.3 and earlier. A local attacker could change the application's file parameter to a log file obtaining all sensitive information such as database credentials.
- risk 0.52cvss 8.0epss 0.01
An authorization bypass through user-controlled key vulnerability [CWE-639] in FortiOS version 7.4.0 through 7.4.1, 7.2.0 through 7.2.6, 7.0.1 through 7.0.13, 6.4.7 through 6.4.14, and FortiProxy version 7.4.0 through 7.4.2, 7.2.0 through 7.2.8, 7.0.0 through 7.0.14 SSL-VPN may…
- risk 0.51cvss 7.8epss 0.00
A search path or unquoted item vulnerability in Faronics Deep Freeze Server Standard, which affects versions 8.30.020.4627 and earlier. This vulnerability affects the DFServ.exe file. An attacker with local user privileges could exploit this vulnerability to replace the…