| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2024-21369 | Hig | 0.57 | 8.8 | 0.02 | Feb 13, 2024 | Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability | ||
| CVE-2024-21368 | Hig | 0.57 | 8.8 | 0.02 | Feb 13, 2024 | Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability | ||
| CVE-2024-21367 | Hig | 0.57 | 8.8 | 0.02 | Feb 13, 2024 | Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability | ||
| CVE-2024-21366 | Hig | 0.57 | 8.8 | 0.02 | Feb 13, 2024 | Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability | ||
| CVE-2024-21365 | Hig | 0.57 | 8.8 | 0.02 | Feb 13, 2024 | Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability | ||
| CVE-2024-21363 | Hig | 0.51 | 7.8 | 0.01 | Feb 13, 2024 | Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability | ||
| CVE-2024-21361 | Hig | 0.57 | 8.8 | 0.02 | Feb 13, 2024 | Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability | ||
| CVE-2024-21360 | Hig | 0.57 | 8.8 | 0.02 | Feb 13, 2024 | Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability | ||
| CVE-2024-21359 | Hig | 0.57 | 8.8 | 0.02 | Feb 13, 2024 | Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability | ||
| CVE-2024-21358 | Hig | 0.57 | 8.8 | 0.02 | Feb 13, 2024 | Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability | ||
| CVE-2024-21357 | Hig | 0.55 | 8.1 | 0.27 | Feb 13, 2024 | Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability | ||
| CVE-2024-21355 | Hig | 0.46 | 7.0 | 0.00 | Feb 13, 2024 | Microsoft Message Queuing (MSMQ) Elevation of Privilege Vulnerability | ||
| CVE-2024-21354 | Hig | 0.51 | 7.8 | 0.01 | Feb 13, 2024 | Microsoft Message Queuing (MSMQ) Elevation of Privilege Vulnerability | ||
| CVE-2024-21353 | Hig | 0.57 | 8.8 | 0.02 | Feb 13, 2024 | Microsoft WDAC ODBC Driver Remote Code Execution Vulnerability | ||
| CVE-2024-21352 | Hig | 0.57 | 8.8 | 0.02 | Feb 13, 2024 | Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability | ||
| CVE-2024-21351 | Hig | 0.64 | 7.6 | 0.28 | KEV | Feb 13, 2024 | Windows SmartScreen Security Feature Bypass Vulnerability | |
| CVE-2024-21350 | Hig | 0.57 | 8.8 | 0.01 | Feb 13, 2024 | Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability | ||
| CVE-2024-21349 | Hig | 0.57 | 8.8 | 0.02 | Feb 13, 2024 | Microsoft ActiveX Data Objects Remote Code Execution Vulnerability | ||
| CVE-2024-21348 | Hig | 0.49 | 7.5 | 0.02 | Feb 13, 2024 | Internet Connection Sharing (ICS) Denial of Service Vulnerability | ||
| CVE-2024-21347 | Hig | 0.49 | 7.5 | 0.01 | Feb 13, 2024 | Microsoft ODBC Driver Remote Code Execution Vulnerability | ||
| CVE-2024-21346 | Hig | 0.51 | 7.8 | 0.04 | Feb 13, 2024 | Win32k Elevation of Privilege Vulnerability | ||
| CVE-2024-21345 | Hig | 0.59 | 8.8 | 0.20 | Feb 13, 2024 | Windows Kernel Elevation of Privilege Vulnerability | ||
| CVE-2024-21342 | Hig | 0.49 | 7.5 | 0.03 | Feb 13, 2024 | Windows DNS Client Denial of Service Vulnerability | ||
| CVE-2024-21338 | Hig | 0.76 | 7.8 | 0.62 | KEV | Feb 13, 2024 | Windows Kernel Elevation of Privilege Vulnerability | |
| CVE-2024-21329 | Hig | 0.48 | 7.3 | 0.01 | Feb 13, 2024 | Azure Connected Machine Agent Elevation of Privilege Vulnerability | ||
| CVE-2024-21328 | Hig | 0.50 | 7.6 | 0.01 | Feb 13, 2024 | Dynamics 365 Sales Spoofing Vulnerability | ||
| CVE-2024-21327 | Hig | 0.50 | 7.6 | 0.01 | Feb 13, 2024 | Microsoft Dynamics 365 Customer Engagement Cross-Site Scripting Vulnerability | ||
| CVE-2024-21315 | Hig | 0.51 | 7.8 | 0.01 | Feb 13, 2024 | Microsoft Defender for Endpoint Protection Elevation of Privilege Vulnerability | ||
| CVE-2024-20673 | Hig | 0.51 | 7.8 | 0.01 | Feb 13, 2024 | Microsoft Office Remote Code Execution Vulnerability | ||
| CVE-2024-20667 | Hig | 0.49 | 7.5 | 0.01 | Feb 13, 2024 | Azure DevOps Server Remote Code Execution Vulnerability | ||
| CVE-2024-23440 | Hig | 0.46 | 7.1 | 0.00 | Feb 13, 2024 | Vba32 Antivirus v3.36.0 is vulnerable to an Arbitrary Memory Read vulnerability. The 0x22200B IOCTL code of the Vba32m64.sys driver allows to read up to 0x802 of memory from ar arbitrary user-supplied pointer. | ||
| CVE-2024-23439 | Hig | 0.46 | 7.1 | 0.00 | Feb 13, 2024 | Vba32 Antivirus v3.36.0 is vulnerable to an Arbitrary Memory Read vulnerability by triggering the 0x22201B, 0x22201F, 0x222023, 0x222027 ,0x22202B, 0x22202F, 0x22203F, 0x222057 and 0x22205B IOCTL codes of the Vba32m64.sys driver. | ||
| CVE-2024-1163 | Hig | 0.39 | 7.1 | 0.00 | Feb 13, 2024 | The attacker may exploit a path traversal vulnerability leading to information disclosure. | ||
| CVE-2024-24781 | Hig | 0.49 | 7.5 | 0.01 | Feb 13, 2024 | An unauthenticated remote attacker can use an uncontrolled resource consumption vulnerability to DoS the affected devices through excessive traffic on a single ethernet port. | ||
| CVE-2023-6516 | Hig | 0.49 | 7.5 | 0.01 | Feb 13, 2024 | To keep its cache database efficient, `named` running as a recursive resolver occasionally attempts to clean up the database. It uses several methods, including some that are asynchronous: a small chunk of memory pointing to the cache element that can be cleaned up is first… | ||
| CVE-2023-5679 | Hig | 0.49 | 7.5 | 0.01 | Feb 13, 2024 | A bad interaction between DNS64 and serve-stale may cause `named` to crash with an assertion failure during recursive resolution, when both of these features are enabled. This issue affects BIND 9 versions 9.16.12 through 9.16.45, 9.18.0 through 9.18.21, 9.19.0 through 9.19.19,… | ||
| CVE-2023-5517 | Hig | 0.49 | 7.5 | 0.01 | Feb 13, 2024 | A flaw in query-handling code can cause `named` to exit prematurely with an assertion failure when: - `nxdomain-redirect ;` is configured, and - the resolver receives a PTR query for an RFC 1918 address that would normally result in an authoritative NXDOMAIN… | ||
| CVE-2023-4408 | Hig | 0.49 | 7.5 | 0.01 | Feb 13, 2024 | The DNS message parsing code in `named` includes a section whose computational complexity is overly high. It does not cause problems for typical DNS traffic, but crafted queries and responses may cause excessive CPU load on the affected `named` instance by exploiting this flaw.… | ||
| CVE-2024-24925 | Hig | 0.51 | 7.8 | 0.00 | Feb 13, 2024 | A vulnerability has been identified in Simcenter Femap (All versions < V2306.0000). The affected application is vulnerable to uninitialized pointer access while parsing specially crafted Catia MODEL files. An attacker could leverage this vulnerability to execute code in the… | ||
| CVE-2024-24924 | Hig | 0.51 | 7.8 | 0.00 | Feb 13, 2024 | A vulnerability has been identified in Simcenter Femap (All versions < V2306.0000). The affected application contains an out of bounds write past the end of an allocated buffer while parsing a specially crafted Catia MODEL file. This could allow an attacker to execute code in… | ||
| CVE-2024-24923 | Hig | 0.51 | 7.8 | 0.00 | Feb 13, 2024 | A vulnerability has been identified in Simcenter Femap (All versions < V2401.0000), Simcenter Femap (All versions < V2306.0001). The affected applications contain an out of bounds read past the end of an allocated structure while parsing specially crafted Catia MODEL files. This… | ||
| CVE-2024-24922 | Hig | 0.51 | 7.8 | 0.00 | Feb 13, 2024 | A vulnerability has been identified in Simcenter Femap (All versions < V2401.0000). The affected application contains an out of bounds write past the end of an allocated buffer while parsing a specially crafted Catia MODEL file. This could allow an attacker to execute code in… | ||
| CVE-2024-24921 | Hig | 0.51 | 7.8 | 0.00 | Feb 13, 2024 | A vulnerability has been identified in Simcenter Femap (All versions < V2401.0000). The affected application is vulnerable to memory corruption while parsing specially crafted Catia MODEL files. This could allow an attacker to execute code in the context of the current process.… | ||
| CVE-2024-24920 | Hig | 0.51 | 7.8 | 0.00 | Feb 13, 2024 | A vulnerability has been identified in Simcenter Femap (All versions < V2401.0000). The affected application contains an out of bounds write past the end of an allocated buffer while parsing a specially crafted Catia MODEL file. This could allow an attacker to execute code in… | ||
| CVE-2024-23813 | Hig | 0.47 | 7.3 | 0.01 | Feb 13, 2024 | A vulnerability has been identified in Polarion ALM (All versions < V2404.0). The REST API endpoints of doorsconnector of the affected product lacks proper authentication. An unauthenticated attacker could access the endpoints, and potentially execute code. | ||
| CVE-2024-23812 | Hig | 0.52 | 8.0 | 0.01 | Feb 13, 2024 | A vulnerability has been identified in SINEC NMS (All versions < V2.0 SP1). The affected application incorrectly neutralizes special elements when creating a report which could lead to command injection. | ||
| CVE-2024-23811 | Hig | 0.57 | 8.8 | 0.00 | Feb 13, 2024 | A vulnerability has been identified in SINEC NMS (All versions < V2.0 SP1). The affected application allows users to upload arbitrary files via TFTP. This could allow an attacker to upload malicious firmware images or other files, that could potentially lead to remote code… | ||
| CVE-2024-23810 | Hig | 0.57 | 8.8 | 0.01 | Feb 13, 2024 | A vulnerability has been identified in SINEC NMS (All versions < V2.0 SP1). The affected application is vulnerable to SQL injection. This could allow an unauthenticated remote attacker to execute arbitrary SQL queries on the server database. | ||
| CVE-2024-23804 | Hig | 0.51 | 7.8 | 0.00 | Feb 13, 2024 | A vulnerability has been identified in Tecnomatix Plant Simulation V2201 (All versions < V2201.0012), Tecnomatix Plant Simulation V2302 (All versions < V2302.0006). The affected applications contain a stack overflow vulnerability while parsing specially crafted PSOBJ files. This… | ||
| CVE-2024-23803 | Hig | 0.51 | 7.8 | 0.00 | Feb 13, 2024 | A vulnerability has been identified in Tecnomatix Plant Simulation V2201 (All versions), Tecnomatix Plant Simulation V2302 (All versions < V2302.0007). The affected application contains an out of bounds write past the end of an allocated buffer while parsing a specially crafted… |
- risk 0.57cvss 8.8epss 0.02
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
- risk 0.57cvss 8.8epss 0.02
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
- risk 0.57cvss 8.8epss 0.02
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
- risk 0.57cvss 8.8epss 0.02
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
- risk 0.57cvss 8.8epss 0.02
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
- risk 0.51cvss 7.8epss 0.01
Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
- risk 0.57cvss 8.8epss 0.02
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
- risk 0.57cvss 8.8epss 0.02
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
- risk 0.57cvss 8.8epss 0.02
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
- risk 0.57cvss 8.8epss 0.02
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
- risk 0.55cvss 8.1epss 0.27
Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability
- risk 0.46cvss 7.0epss 0.00
Microsoft Message Queuing (MSMQ) Elevation of Privilege Vulnerability
- risk 0.51cvss 7.8epss 0.01
Microsoft Message Queuing (MSMQ) Elevation of Privilege Vulnerability
- risk 0.57cvss 8.8epss 0.02
Microsoft WDAC ODBC Driver Remote Code Execution Vulnerability
- risk 0.57cvss 8.8epss 0.02
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
- risk 0.64cvss 7.6epss 0.28
Windows SmartScreen Security Feature Bypass Vulnerability
- risk 0.57cvss 8.8epss 0.01
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
- risk 0.57cvss 8.8epss 0.02
Microsoft ActiveX Data Objects Remote Code Execution Vulnerability
- risk 0.49cvss 7.5epss 0.02
Internet Connection Sharing (ICS) Denial of Service Vulnerability
- risk 0.49cvss 7.5epss 0.01
Microsoft ODBC Driver Remote Code Execution Vulnerability
- risk 0.51cvss 7.8epss 0.04
Win32k Elevation of Privilege Vulnerability
- risk 0.59cvss 8.8epss 0.20
Windows Kernel Elevation of Privilege Vulnerability
- risk 0.49cvss 7.5epss 0.03
Windows DNS Client Denial of Service Vulnerability
- risk 0.76cvss 7.8epss 0.62
Windows Kernel Elevation of Privilege Vulnerability
- risk 0.48cvss 7.3epss 0.01
Azure Connected Machine Agent Elevation of Privilege Vulnerability
- risk 0.50cvss 7.6epss 0.01
Dynamics 365 Sales Spoofing Vulnerability
- risk 0.50cvss 7.6epss 0.01
Microsoft Dynamics 365 Customer Engagement Cross-Site Scripting Vulnerability
- risk 0.51cvss 7.8epss 0.01
Microsoft Defender for Endpoint Protection Elevation of Privilege Vulnerability
- risk 0.51cvss 7.8epss 0.01
Microsoft Office Remote Code Execution Vulnerability
- risk 0.49cvss 7.5epss 0.01
Azure DevOps Server Remote Code Execution Vulnerability
- risk 0.46cvss 7.1epss 0.00
Vba32 Antivirus v3.36.0 is vulnerable to an Arbitrary Memory Read vulnerability. The 0x22200B IOCTL code of the Vba32m64.sys driver allows to read up to 0x802 of memory from ar arbitrary user-supplied pointer.
- risk 0.46cvss 7.1epss 0.00
Vba32 Antivirus v3.36.0 is vulnerable to an Arbitrary Memory Read vulnerability by triggering the 0x22201B, 0x22201F, 0x222023, 0x222027 ,0x22202B, 0x22202F, 0x22203F, 0x222057 and 0x22205B IOCTL codes of the Vba32m64.sys driver.
- risk 0.39cvss 7.1epss 0.00
The attacker may exploit a path traversal vulnerability leading to information disclosure.
- risk 0.49cvss 7.5epss 0.01
An unauthenticated remote attacker can use an uncontrolled resource consumption vulnerability to DoS the affected devices through excessive traffic on a single ethernet port.
- risk 0.49cvss 7.5epss 0.01
To keep its cache database efficient, `named` running as a recursive resolver occasionally attempts to clean up the database. It uses several methods, including some that are asynchronous: a small chunk of memory pointing to the cache element that can be cleaned up is first…
- risk 0.49cvss 7.5epss 0.01
A bad interaction between DNS64 and serve-stale may cause `named` to crash with an assertion failure during recursive resolution, when both of these features are enabled. This issue affects BIND 9 versions 9.16.12 through 9.16.45, 9.18.0 through 9.18.21, 9.19.0 through 9.19.19,…
- risk 0.49cvss 7.5epss 0.01
A flaw in query-handling code can cause `named` to exit prematurely with an assertion failure when: - `nxdomain-redirect ;` is configured, and - the resolver receives a PTR query for an RFC 1918 address that would normally result in an authoritative NXDOMAIN…
- risk 0.49cvss 7.5epss 0.01
The DNS message parsing code in `named` includes a section whose computational complexity is overly high. It does not cause problems for typical DNS traffic, but crafted queries and responses may cause excessive CPU load on the affected `named` instance by exploiting this flaw.…
- risk 0.51cvss 7.8epss 0.00
A vulnerability has been identified in Simcenter Femap (All versions < V2306.0000). The affected application is vulnerable to uninitialized pointer access while parsing specially crafted Catia MODEL files. An attacker could leverage this vulnerability to execute code in the…
- risk 0.51cvss 7.8epss 0.00
A vulnerability has been identified in Simcenter Femap (All versions < V2306.0000). The affected application contains an out of bounds write past the end of an allocated buffer while parsing a specially crafted Catia MODEL file. This could allow an attacker to execute code in…
- risk 0.51cvss 7.8epss 0.00
A vulnerability has been identified in Simcenter Femap (All versions < V2401.0000), Simcenter Femap (All versions < V2306.0001). The affected applications contain an out of bounds read past the end of an allocated structure while parsing specially crafted Catia MODEL files. This…
- risk 0.51cvss 7.8epss 0.00
A vulnerability has been identified in Simcenter Femap (All versions < V2401.0000). The affected application contains an out of bounds write past the end of an allocated buffer while parsing a specially crafted Catia MODEL file. This could allow an attacker to execute code in…
- risk 0.51cvss 7.8epss 0.00
A vulnerability has been identified in Simcenter Femap (All versions < V2401.0000). The affected application is vulnerable to memory corruption while parsing specially crafted Catia MODEL files. This could allow an attacker to execute code in the context of the current process.…
- risk 0.51cvss 7.8epss 0.00
A vulnerability has been identified in Simcenter Femap (All versions < V2401.0000). The affected application contains an out of bounds write past the end of an allocated buffer while parsing a specially crafted Catia MODEL file. This could allow an attacker to execute code in…
- risk 0.47cvss 7.3epss 0.01
A vulnerability has been identified in Polarion ALM (All versions < V2404.0). The REST API endpoints of doorsconnector of the affected product lacks proper authentication. An unauthenticated attacker could access the endpoints, and potentially execute code.
- risk 0.52cvss 8.0epss 0.01
A vulnerability has been identified in SINEC NMS (All versions < V2.0 SP1). The affected application incorrectly neutralizes special elements when creating a report which could lead to command injection.
- risk 0.57cvss 8.8epss 0.00
A vulnerability has been identified in SINEC NMS (All versions < V2.0 SP1). The affected application allows users to upload arbitrary files via TFTP. This could allow an attacker to upload malicious firmware images or other files, that could potentially lead to remote code…
- risk 0.57cvss 8.8epss 0.01
A vulnerability has been identified in SINEC NMS (All versions < V2.0 SP1). The affected application is vulnerable to SQL injection. This could allow an unauthenticated remote attacker to execute arbitrary SQL queries on the server database.
- risk 0.51cvss 7.8epss 0.00
A vulnerability has been identified in Tecnomatix Plant Simulation V2201 (All versions < V2201.0012), Tecnomatix Plant Simulation V2302 (All versions < V2302.0006). The affected applications contain a stack overflow vulnerability while parsing specially crafted PSOBJ files. This…
- risk 0.51cvss 7.8epss 0.00
A vulnerability has been identified in Tecnomatix Plant Simulation V2201 (All versions), Tecnomatix Plant Simulation V2302 (All versions < V2302.0007). The affected application contains an out of bounds write past the end of an allocated buffer while parsing a specially crafted…