| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2024-8232 | Hig | 0.50 | 7.5 | 0.13 | Sep 10, 2024 | SpiderControl SCADA Web Server has a vulnerability that could allow an attacker to upload specially crafted malicious files without authentication. | ||
| CVE-2024-45596 | Hig | 0.41 | 7.4 | 0.01 | Sep 10, 2024 | Directus is a real-time API and App dashboard for managing SQL database content. An unauthenticated user can access credentials of last authenticated user via OpenID or OAuth2 where the authentication URL did not include redirect query string. This happens because on that… | ||
| CVE-2024-44871 | Hig | 0.51 | 7.2 | 0.16 | Sep 10, 2024 | An arbitrary file upload vulnerability in the component /admin/index.php of moziloCMS v3.0 allows attackers to execute arbitrary code via uploading a crafted file. | ||
| CVE-2024-44667 | Hig | 0.52 | 8.0 | 0.01 | Sep 10, 2024 | Shenzhen Haichangxing Technology Co., Ltd HCX H822 4G LTE Router M7628NNxISPxUIv2_v1.0.1557.15.35_P0 is vulnerable to Incorrect Access Control. Unauthenticated factory mode reset and command injection leads to information exposure and root shell access. | ||
| CVE-2024-43495 | Hig | 0.48 | 7.3 | 0.01 | Sep 10, 2024 | Windows libarchive Remote Code Execution Vulnerability | ||
| CVE-2024-43492 | Hig | 0.51 | 7.8 | 0.00 | Sep 10, 2024 | Microsoft AutoUpdate (MAU) Elevation of Privilege Vulnerability | ||
| CVE-2024-43479 | Hig | 0.55 | 8.5 | 0.01 | Sep 10, 2024 | Microsoft Power Automate Desktop Remote Code Execution Vulnerability | ||
| CVE-2024-43476 | Hig | 0.49 | 7.6 | 0.01 | Sep 10, 2024 | Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability | ||
| CVE-2024-43475 | Hig | 0.48 | 7.3 | 0.02 | Sep 10, 2024 | Microsoft Windows Admin Center Information Disclosure Vulnerability | ||
| CVE-2024-43474 | Hig | 0.50 | 7.6 | 0.01 | Sep 10, 2024 | Microsoft SQL Server Information Disclosure Vulnerability | ||
| CVE-2024-43470 | Hig | 0.48 | 7.3 | 0.01 | Sep 10, 2024 | Azure Network Watcher VM Agent Elevation of Privilege Vulnerability | ||
| CVE-2024-43469 | Hig | 0.57 | 8.8 | 0.02 | Sep 10, 2024 | Azure CycleCloud Remote Code Execution Vulnerability | ||
| CVE-2024-43467 | Hig | 0.49 | 7.5 | 0.01 | Sep 10, 2024 | Windows Remote Desktop Licensing Service Remote Code Execution Vulnerability | ||
| CVE-2024-43465 | Hig | 0.51 | 7.8 | 0.01 | Sep 10, 2024 | Microsoft Excel Elevation of Privilege Vulnerability | ||
| CVE-2024-43464 | Hig | 0.50 | 7.2 | 0.36 | Sep 10, 2024 | Microsoft SharePoint Server Remote Code Execution Vulnerability | ||
| CVE-2024-43463 | Hig | 0.51 | 7.8 | 0.01 | Sep 10, 2024 | Microsoft Office Visio Remote Code Execution Vulnerability | ||
| CVE-2024-43461 | Hig | 0.73 | 8.8 | 0.54 | KEV | Sep 10, 2024 | Windows MSHTML Platform Spoofing Vulnerability | |
| CVE-2024-43458 | Hig | 0.50 | 7.7 | 0.02 | Sep 10, 2024 | Windows Networking Information Disclosure Vulnerability | ||
| CVE-2024-43457 | Hig | 0.51 | 7.8 | 0.01 | Sep 10, 2024 | Windows Setup and Deployment Elevation of Privilege Vulnerability | ||
| CVE-2024-43455 | Hig | 0.57 | 8.8 | 0.02 | Sep 10, 2024 | Windows Remote Desktop Licensing Service Spoofing Vulnerability | ||
| CVE-2024-43454 | Hig | 0.48 | 7.1 | 0.22 | Sep 10, 2024 | Windows Remote Desktop Licensing Service Remote Code Execution Vulnerability | ||
| CVE-2024-38263 | Hig | 0.49 | 7.5 | 0.01 | Sep 10, 2024 | Windows Remote Desktop Licensing Service Remote Code Execution Vulnerability | ||
| CVE-2024-38260 | Hig | 0.57 | 8.8 | 0.02 | Sep 10, 2024 | Windows Remote Desktop Licensing Service Remote Code Execution Vulnerability | ||
| CVE-2024-38259 | Hig | 0.57 | 8.8 | 0.02 | Sep 10, 2024 | Microsoft Management Console Remote Code Execution Vulnerability | ||
| CVE-2024-38257 | Hig | 0.49 | 7.5 | 0.04 | Sep 10, 2024 | Microsoft AllJoyn API Information Disclosure Vulnerability | ||
| CVE-2024-38253 | Hig | 0.51 | 7.8 | 0.01 | Sep 10, 2024 | Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability | ||
| CVE-2024-38252 | Hig | 0.51 | 7.8 | 0.01 | Sep 10, 2024 | Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability | ||
| CVE-2024-38250 | Hig | 0.51 | 7.8 | 0.01 | Sep 10, 2024 | Windows Graphics Component Elevation of Privilege Vulnerability | ||
| CVE-2024-38249 | Hig | 0.51 | 7.8 | 0.01 | Sep 10, 2024 | Windows Graphics Component Elevation of Privilege Vulnerability | ||
| CVE-2024-38248 | Hig | 0.46 | 7.0 | 0.01 | Sep 10, 2024 | Windows Storage Elevation of Privilege Vulnerability | ||
| CVE-2024-38247 | Hig | 0.51 | 7.8 | 0.01 | Sep 10, 2024 | Windows Graphics Component Elevation of Privilege Vulnerability | ||
| CVE-2024-38246 | Hig | 0.46 | 7.0 | 0.01 | Sep 10, 2024 | Win32k Elevation of Privilege Vulnerability | ||
| CVE-2024-38245 | Hig | 0.51 | 7.8 | 0.01 | Sep 10, 2024 | Kernel Streaming Service Driver Elevation of Privilege Vulnerability | ||
| CVE-2024-38244 | Hig | 0.51 | 7.8 | 0.06 | Sep 10, 2024 | Kernel Streaming Service Driver Elevation of Privilege Vulnerability | ||
| CVE-2024-38243 | Hig | 0.51 | 7.8 | 0.01 | Sep 10, 2024 | Kernel Streaming Service Driver Elevation of Privilege Vulnerability | ||
| CVE-2024-38242 | Hig | 0.51 | 7.8 | 0.03 | Sep 10, 2024 | Kernel Streaming Service Driver Elevation of Privilege Vulnerability | ||
| CVE-2024-38241 | Hig | 0.51 | 7.8 | 0.06 | Sep 10, 2024 | Kernel Streaming Service Driver Elevation of Privilege Vulnerability | ||
| CVE-2024-38240 | Hig | 0.53 | 8.1 | 0.01 | Sep 10, 2024 | Windows Remote Access Connection Manager Elevation of Privilege Vulnerability | ||
| CVE-2024-38239 | Hig | 0.47 | 7.2 | 0.02 | Sep 10, 2024 | Windows Kerberos Elevation of Privilege Vulnerability | ||
| CVE-2024-38238 | Hig | 0.51 | 7.8 | 0.01 | Sep 10, 2024 | Kernel Streaming Service Driver Elevation of Privilege Vulnerability | ||
| CVE-2024-38237 | Hig | 0.51 | 7.8 | 0.03 | Sep 10, 2024 | Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability | ||
| CVE-2024-38236 | Hig | 0.49 | 7.5 | 0.02 | Sep 10, 2024 | DHCP Server Service Denial of Service Vulnerability | ||
| CVE-2024-38233 | Hig | 0.49 | 7.5 | 0.02 | Sep 10, 2024 | Windows Networking Denial of Service Vulnerability | ||
| CVE-2024-38232 | Hig | 0.49 | 7.5 | 0.02 | Sep 10, 2024 | Windows Networking Denial of Service Vulnerability | ||
| CVE-2024-38228 | Hig | 0.47 | 7.2 | 0.04 | Sep 10, 2024 | Microsoft SharePoint Server Remote Code Execution Vulnerability | ||
| CVE-2024-38227 | Hig | 0.47 | 7.2 | 0.08 | Sep 10, 2024 | Microsoft SharePoint Server Remote Code Execution Vulnerability | ||
| CVE-2024-38226 | Hig | 0.60 | 7.3 | 0.03 | KEV | Sep 10, 2024 | Microsoft Publisher Security Feature Bypass Vulnerability | |
| CVE-2024-38225 | Hig | 0.57 | 8.8 | 0.01 | Sep 10, 2024 | Microsoft Dynamics 365 Business Central Elevation of Privilege Vulnerability | ||
| CVE-2024-38216 | Hig | 0.53 | 8.2 | 0.01 | Sep 10, 2024 | Azure Stack Hub Elevation of Privilege Vulnerability | ||
| CVE-2024-38194 | Hig | 0.55 | 8.4 | 0.01 | Sep 10, 2024 | An authenticated attacker can exploit an improper authorization vulnerability in Azure Web Apps to elevate privileges over a network. |
- risk 0.50cvss 7.5epss 0.13
SpiderControl SCADA Web Server has a vulnerability that could allow an attacker to upload specially crafted malicious files without authentication.
- risk 0.41cvss 7.4epss 0.01
Directus is a real-time API and App dashboard for managing SQL database content. An unauthenticated user can access credentials of last authenticated user via OpenID or OAuth2 where the authentication URL did not include redirect query string. This happens because on that…
- risk 0.51cvss 7.2epss 0.16
An arbitrary file upload vulnerability in the component /admin/index.php of moziloCMS v3.0 allows attackers to execute arbitrary code via uploading a crafted file.
- risk 0.52cvss 8.0epss 0.01
Shenzhen Haichangxing Technology Co., Ltd HCX H822 4G LTE Router M7628NNxISPxUIv2_v1.0.1557.15.35_P0 is vulnerable to Incorrect Access Control. Unauthenticated factory mode reset and command injection leads to information exposure and root shell access.
- risk 0.48cvss 7.3epss 0.01
Windows libarchive Remote Code Execution Vulnerability
- risk 0.51cvss 7.8epss 0.00
Microsoft AutoUpdate (MAU) Elevation of Privilege Vulnerability
- risk 0.55cvss 8.5epss 0.01
Microsoft Power Automate Desktop Remote Code Execution Vulnerability
- risk 0.49cvss 7.6epss 0.01
Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability
- risk 0.48cvss 7.3epss 0.02
Microsoft Windows Admin Center Information Disclosure Vulnerability
- risk 0.50cvss 7.6epss 0.01
Microsoft SQL Server Information Disclosure Vulnerability
- risk 0.48cvss 7.3epss 0.01
Azure Network Watcher VM Agent Elevation of Privilege Vulnerability
- risk 0.57cvss 8.8epss 0.02
Azure CycleCloud Remote Code Execution Vulnerability
- risk 0.49cvss 7.5epss 0.01
Windows Remote Desktop Licensing Service Remote Code Execution Vulnerability
- risk 0.51cvss 7.8epss 0.01
Microsoft Excel Elevation of Privilege Vulnerability
- risk 0.50cvss 7.2epss 0.36
Microsoft SharePoint Server Remote Code Execution Vulnerability
- risk 0.51cvss 7.8epss 0.01
Microsoft Office Visio Remote Code Execution Vulnerability
- risk 0.73cvss 8.8epss 0.54
Windows MSHTML Platform Spoofing Vulnerability
- risk 0.50cvss 7.7epss 0.02
Windows Networking Information Disclosure Vulnerability
- risk 0.51cvss 7.8epss 0.01
Windows Setup and Deployment Elevation of Privilege Vulnerability
- risk 0.57cvss 8.8epss 0.02
Windows Remote Desktop Licensing Service Spoofing Vulnerability
- risk 0.48cvss 7.1epss 0.22
Windows Remote Desktop Licensing Service Remote Code Execution Vulnerability
- risk 0.49cvss 7.5epss 0.01
Windows Remote Desktop Licensing Service Remote Code Execution Vulnerability
- risk 0.57cvss 8.8epss 0.02
Windows Remote Desktop Licensing Service Remote Code Execution Vulnerability
- risk 0.57cvss 8.8epss 0.02
Microsoft Management Console Remote Code Execution Vulnerability
- risk 0.49cvss 7.5epss 0.04
Microsoft AllJoyn API Information Disclosure Vulnerability
- risk 0.51cvss 7.8epss 0.01
Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability
- risk 0.51cvss 7.8epss 0.01
Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability
- risk 0.51cvss 7.8epss 0.01
Windows Graphics Component Elevation of Privilege Vulnerability
- risk 0.51cvss 7.8epss 0.01
Windows Graphics Component Elevation of Privilege Vulnerability
- risk 0.46cvss 7.0epss 0.01
Windows Storage Elevation of Privilege Vulnerability
- risk 0.51cvss 7.8epss 0.01
Windows Graphics Component Elevation of Privilege Vulnerability
- risk 0.46cvss 7.0epss 0.01
Win32k Elevation of Privilege Vulnerability
- risk 0.51cvss 7.8epss 0.01
Kernel Streaming Service Driver Elevation of Privilege Vulnerability
- risk 0.51cvss 7.8epss 0.06
Kernel Streaming Service Driver Elevation of Privilege Vulnerability
- risk 0.51cvss 7.8epss 0.01
Kernel Streaming Service Driver Elevation of Privilege Vulnerability
- risk 0.51cvss 7.8epss 0.03
Kernel Streaming Service Driver Elevation of Privilege Vulnerability
- risk 0.51cvss 7.8epss 0.06
Kernel Streaming Service Driver Elevation of Privilege Vulnerability
- risk 0.53cvss 8.1epss 0.01
Windows Remote Access Connection Manager Elevation of Privilege Vulnerability
- risk 0.47cvss 7.2epss 0.02
Windows Kerberos Elevation of Privilege Vulnerability
- risk 0.51cvss 7.8epss 0.01
Kernel Streaming Service Driver Elevation of Privilege Vulnerability
- risk 0.51cvss 7.8epss 0.03
Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability
- risk 0.49cvss 7.5epss 0.02
DHCP Server Service Denial of Service Vulnerability
- risk 0.49cvss 7.5epss 0.02
Windows Networking Denial of Service Vulnerability
- risk 0.49cvss 7.5epss 0.02
Windows Networking Denial of Service Vulnerability
- risk 0.47cvss 7.2epss 0.04
Microsoft SharePoint Server Remote Code Execution Vulnerability
- risk 0.47cvss 7.2epss 0.08
Microsoft SharePoint Server Remote Code Execution Vulnerability
- risk 0.60cvss 7.3epss 0.03
Microsoft Publisher Security Feature Bypass Vulnerability
- risk 0.57cvss 8.8epss 0.01
Microsoft Dynamics 365 Business Central Elevation of Privilege Vulnerability
- risk 0.53cvss 8.2epss 0.01
Azure Stack Hub Elevation of Privilege Vulnerability
- risk 0.55cvss 8.4epss 0.01
An authenticated attacker can exploit an improper authorization vulnerability in Azure Web Apps to elevate privileges over a network.