VYPR

CVEs

114,017 total · page 967 of 2,281

AllCriticalHighKEV
  • CVE-2024-30006HigMay 14, 2024
    Microsoft
    WDAC OLE DB provider for SQL Server
    risk 0.57cvss 8.8epss 0.02

    Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability

  • CVE-2024-29996HigMay 14, 2024
    Microsoft
    Windows Common Log File System Driver
    risk 0.51cvss 7.8epss 0.03

    Windows Common Log File System Driver Elevation of Privilege Vulnerability

  • CVE-2024-29994HigMay 14, 2024
    Microsoft
    Windows
    risk 0.51cvss 7.8epss 0.01

    Microsoft Windows SCSI Class System File Elevation of Privilege Vulnerability

  • CVE-2024-27109HigMay 14, 2024
    Gehealthcare
    EchoPAC
    risk 0.49cvss 7.6epss 0.00

    Insufficiently protected credentials in GE HealthCare EchoPAC products

  • CVE-2024-26238HigMay 14, 2024
    Microsoft
    PLUGScheduler
    risk 0.51cvss 7.8epss 0.01

    Microsoft PLUGScheduler Scheduled Task Elevation of Privilege Vulnerability

  • CVE-2024-23105HigMay 14, 2024
    Fortinet
    Fortiportal
    risk 0.49cvss 7.5epss 0.00

    A Use Of Less Trusted Source [CWE-348] vulnerability in Fortinet FortiPortal version 7.0.0 through 7.0.6 and version 7.2.0 through 7.2.1 allows an unauthenticated attack to bypass IP protection through crafted HTTP or HTTPS packets.

  • CVE-2024-1630HigMay 14, 2024
    Gehealthcare
    Common Service Desktop
    risk 0.50cvss 7.7epss 0.00

    Path traversal vulnerability in “getAllFolderContents” function of Common Service Desktop, a GE HealthCare ultrasound device component

  • CVE-2023-46714HigMay 14, 2024
    Fortinet
    Fortios
    risk 0.47cvss 7.2epss 0.01

    A stack-based buffer overflow [CWE-121] vulnerability in Fortinet FortiOS version 7.2.1 through 7.2.6 and version 7.4.0 through 7.4.1 allows a privileged attacker over the administrative interface to execute arbitrary code or commands via crafted HTTP or HTTPs requests.

  • CVE-2023-40720HigMay 14, 2024
    FortiVoiceEntreprise
    FortiVoiceEntreprise
    risk 0.46cvss 7.1epss 0.01

    An authorization bypass through user-controlled key vulnerability [CWE-639] in FortiVoiceEntreprise version 7.0.0 through 7.0.1 and before 6.4.8 allows an authenticated attacker to read the SIP configuration of other users via crafted HTTP or HTTPS requests.

  • CVE-2024-4761HigKEVMay 14, 2024
    Google
    Chrome
    risk 0.70cvss 8.8epss 0.11

    Out of bounds write in V8 in Google Chrome prior to 124.0.6367.207 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page. (Chromium security severity: High)

  • CVE-2024-3372HigMay 14, 2024
    MongoDB
    MongoDB
    risk 0.42cvss 7.5epss 0.01

    Improper validation of certain metadata input may result in the server not correctly serialising BSON. This can be performed pre-authentication and may cause unexpected application behavior including unavailability of serverStatus responses. This issue affects MongoDB Server…

  • CVE-2024-35010HigMay 14, 2024
    idcCMS
    idcCMS
    risk 0.57cvss 8.8epss 0.00

    idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/banner_deal.php?mudi=del&dataType=&dataTypeCN=%E5%9B%BE%E7%89%87%E5%B9%BF%E5%91%8A&theme=cs&dataID=6.

  • CVE-2024-35009HigMay 14, 2024
    idcCMS
    idcCMS
    risk 0.57cvss 8.8epss 0.00

    idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/share_switch.php?mudi=switch&dataType=&fieldName=state&fieldName2=state&tabName=banner&dataID=6.

  • CVE-2024-34950HigMay 14, 2024
    Dlink
    DIR-822
    risk 0.49cvss 7.5epss 0.05

    D-Link DIR-822+ v1.0.5 was discovered to contain a stack-based buffer overflow vulnerability in the SetNetworkTomographySettings module.

  • CVE-2024-34773HigMay 14, 2024
    Siemens Foundation
    Solid Edge
    risk 0.51cvss 7.8epss 0.00

    A vulnerability has been identified in Solid Edge (All versions < V224.0 Update 2). The affected applications contain a stack overflow vulnerability while parsing specially crafted PAR files. This could allow an attacker to execute code in the context of the current process.

  • CVE-2024-34772HigMay 14, 2024
    Siemens Foundation
    Solid Edge
    risk 0.51cvss 7.8epss 0.00

    A vulnerability has been identified in Solid Edge (All versions < V224.0 Update 4). The affected applications contain an out of bounds read past the end of an allocated structure while parsing specially crafted PAR files. This could allow an attacker to execute code in the…

  • CVE-2024-34771HigMay 14, 2024
    Siemens Foundation
    Solid Edge
    risk 0.51cvss 7.8epss 0.00

    A vulnerability has been identified in Solid Edge (All versions < V224.0 Update 2). The affected application is vulnerable to heap-based buffer overflow while parsing specially crafted PAR files. This could allow an attacker to execute code in the context of the current process.

  • CVE-2024-34714HigMay 14, 2024
    Hoppscotch
    Hoppscotch Extension
    risk 0.42cvss 7.6epss 0.00

    The Hoppscotch Browser Extension is a browser extension for Hoppscotch, a community-driven end-to-end open-source API development ecosystem. Due to an oversight during a change made to the extension in the commit d4e8e4830326f46ba17acd1307977ecd32a85b58, a critical check for the…

  • CVE-2024-34086HigMay 14, 2024
    Siemens Foundation
    Teamcenter Visualization
    risk 0.51cvss 7.8epss 0.00

    A vulnerability has been identified in JT2Go (All versions < V2312.0001), Teamcenter Visualization V14.1 (All versions < V14.1.0.13), Teamcenter Visualization V14.2 (All versions < V14.2.0.10), Teamcenter Visualization V14.3 (All versions < V14.3.0.7), Teamcenter Visualization…

  • CVE-2024-34085HigMay 14, 2024
    Siemens Foundation
    Teamcenter Visualization
    risk 0.51cvss 7.8epss 0.00

    A vulnerability has been identified in JT2Go (All versions < V2312.0001), Teamcenter Visualization V14.1 (All versions < V14.1.0.13), Teamcenter Visualization V14.2 (All versions < V14.2.0.10), Teamcenter Visualization V14.3 (All versions < V14.3.0.7), Teamcenter Visualization…

  • CVE-2024-33865HigMay 14, 2024
    linqi
    linqi
    risk 0.49cvss 7.5epss 0.01

    An issue was discovered in linqi before 1.4.0.1 on Windows. There is an NTLM hash leak via the /api/Cdn/GetFile and /api/DocumentTemplate/{GUID] endpoints.

  • CVE-2024-33577HigMay 14, 2024
    Siemens Foundation
    Simcenter Femap
    risk 0.51cvss 7.8epss 0.00

    A vulnerability has been identified in Simcenter Femap (All versions < V2406). The affected applications contain a stack overflow vulnerability while parsing specially strings as argument for one of the application binaries. This could allow an attacker to execute code in the…

  • CVE-2024-33493HigMay 14, 2024
    Siemens Foundation
    Solid Edge
    risk 0.51cvss 7.8epss 0.00

    A vulnerability has been identified in Solid Edge (All versions < V224.0 Update 5). The affected applications contain an out of bounds read past the end of an allocated structure while parsing specially crafted PAR files. This could allow an attacker to execute code in the…

  • CVE-2024-33492HigMay 14, 2024
    Siemens Foundation
    Solid Edge
    risk 0.51cvss 7.8epss 0.00

    A vulnerability has been identified in Solid Edge (All versions < V224.0 Update 5). The affected applications contain an out of bounds read past the end of an allocated structure while parsing specially crafted PAR files. This could allow an attacker to execute code in the…

  • CVE-2024-33491HigMay 14, 2024
    Siemens Foundation
    Solid Edge
    risk 0.51cvss 7.8epss 0.00

    A vulnerability has been identified in Solid Edge (All versions < V224.0 Update 5). The affected applications contain an out of bounds read past the end of an allocated structure while parsing specially crafted PAR files. This could allow an attacker to execute code in the…

  • CVE-2024-33490HigMay 14, 2024
    Siemens Foundation
    Solid Edge
    risk 0.51cvss 7.8epss 0.00

    A vulnerability has been identified in Solid Edge (All versions < V224.0 Update 5). The affected applications contain an out of bounds read past the end of an allocated structure while parsing specially crafted PAR files. This could allow an attacker to execute code in the…

  • CVE-2024-33489HigMay 14, 2024
    Siemens Foundation
    Solid Edge
    risk 0.51cvss 7.8epss 0.00

    A vulnerability has been identified in Solid Edge (All versions < V224.0 Update 5). The affected application is vulnerable to heap-based buffer overflow while parsing specially crafted PAR files. This could allow an attacker to execute code in the context of the current process.

  • CVE-2024-32977HigMay 14, 2024
    Octoprint
    Octoprint
    risk 0.39cvss 7.1epss 0.01

    OctoPrint provides a web interface for controlling consumer 3D printers. OctoPrint versions up until and including 1.10.0 contain a vulnerability that allows an unauthenticated attacker to completely bypass the authentication if the `autologinLocal` option is enabled within…

  • CVE-2024-32742HigMay 14, 2024
    Siemens Foundation
    CN 4100
    risk 0.49cvss 7.6epss 0.00

    A vulnerability has been identified in SIMATIC CN 4100 (All versions < V3.0). The affected device contains an unrestricted USB port. An attacker with local access to the device could potentially misuse the port for booting another operating system and gain complete read/write…

  • CVE-2024-32639HigMay 14, 2024
    Siemens Foundation
    Tecnomatix Plant Simulation
    risk 0.51cvss 7.8epss 0.00

    A vulnerability has been identified in Tecnomatix Plant Simulation V2302 (All versions < V2302.0011). The affected application contains an out of bounds write past the end of an allocated buffer while parsing a specially crafted MODEL file. This could allow an attacker to…

  • CVE-2024-32636HigMay 14, 2024
    Siemens Foundation
    Teamcenter Visualization
    risk 0.51cvss 7.8epss 0.00

    A vulnerability has been identified in JT2Go (All versions < V2312.0005), Teamcenter Visualization V14.2 (All versions < V14.2.0.12), Teamcenter Visualization V14.3 (All versions < V14.3.0.10), Teamcenter Visualization V2312 (All versions < V2312.0005). The affected applications…

  • CVE-2024-32635HigMay 14, 2024
    Siemens Foundation
    Teamcenter Visualization
    risk 0.51cvss 7.8epss 0.00

    A vulnerability has been identified in JT2Go (All versions < V2312.0005), Teamcenter Visualization V14.2 (All versions < V14.2.0.12), Teamcenter Visualization V14.3 (All versions < V14.3.0.10), Teamcenter Visualization V2312 (All versions < V2312.0005). The affected applications…

  • CVE-2024-32355HigMay 14, 2024
    Totolink
    X5000R
    risk 0.52cvss 8.0epss 0.02

    TOTOLINK X5000R V9.1.0cu.2350_B20230313 was discovered to contain a command injection vulnerability via the 'password' parameter in the setSSServer function.

  • CVE-2024-32352HigMay 14, 2024
    Totolink
    X5000R
    risk 0.57cvss 8.8epss 0.02

    TOTOLINK X5000R V9.1.0cu.2350_B20230313 was discovered to contain an authenticated remote command execution (RCE) vulnerability via the "ipsecL2tpEnable" parameter in the "cstecgi.cgi" binary.

  • CVE-2024-32351HigMay 14, 2024
    Totolink
    X5000R
    risk 0.57cvss 8.8epss 0.02

    TOTOLINK X5000R V9.1.0cu.2350_B20230313 was discovered to contain an authenticated remote command execution (RCE) vulnerability via the "mru" parameter in the "cstecgi.cgi" binary.

  • CVE-2024-32350HigMay 14, 2024
    Totolink
    X5000R
    risk 0.57cvss 8.8epss 0.02

    TOTOLINK X5000R V9.1.0cu.2350_B20230313 was discovered to contain an authenticated remote command execution (RCE) vulnerability via the "ipsecPsk" parameter in the "cstecgi.cgi" binary.

  • CVE-2024-32066HigMay 14, 2024
    Siemens Foundation
    Simcenter Femap
    risk 0.51cvss 7.8epss 0.00

    A vulnerability has been identified in Simcenter Femap (All versions < V2406). The affected applications contain an out of bounds read past the end of an allocated structure while parsing specially crafted IGS files. This could allow an attacker to execute code in the context of…

  • CVE-2024-32065HigMay 14, 2024
    Siemens Foundation
    Simcenter Femap
    risk 0.51cvss 7.8epss 0.00

    A vulnerability has been identified in Simcenter Femap (All versions < V2406). The affected applications contain an out of bounds read past the end of an allocated structure while parsing specially crafted IGS files. This could allow an attacker to execute code in the context of…

  • CVE-2024-32064HigMay 14, 2024
    Siemens Foundation
    Simcenter Femap
    risk 0.51cvss 7.8epss 0.00

    A vulnerability has been identified in Simcenter Femap (All versions < V2406). The affected applications contain an out of bounds read past the end of an allocated structure while parsing specially crafted IGS files. This could allow an attacker to execute code in the context of…

  • CVE-2024-32063HigMay 14, 2024
    Siemens Foundation
    Simcenter Femap
    risk 0.51cvss 7.8epss 0.00

    A vulnerability has been identified in Simcenter Femap (All versions < V2406). The affected application contains a type confusion vulnerability while parsing IGS files. This could allow an attacker to execute code in the context of the current process. (ZDI-CAN-21573)

  • CVE-2024-32062HigMay 14, 2024
    Siemens Foundation
    Simcenter Femap
    risk 0.51cvss 7.8epss 0.00

    A vulnerability has been identified in Simcenter Femap (All versions < V2406). The affected application contains a type confusion vulnerability while parsing IGS files. This could allow an attacker to execute code in the context of the current process. (ZDI-CAN-21568)

  • CVE-2024-32061HigMay 14, 2024
    Siemens Foundation
    Simcenter Femap
    risk 0.51cvss 7.8epss 0.00

    A vulnerability has been identified in Simcenter Femap (All versions < V2406). The affected applications contain an out of bounds read past the end of an allocated structure while parsing specially crafted IGS files. This could allow an attacker to execute code in the context of…

  • CVE-2024-32060HigMay 14, 2024
    Siemens Foundation
    Simcenter Femap
    risk 0.51cvss 7.8epss 0.00

    A vulnerability has been identified in Simcenter Femap (All versions < V2406). The affected applications contain an out of bounds read past the end of an allocated structure while parsing specially crafted IGS files. This could allow an attacker to execute code in the context of…

  • CVE-2024-32059HigMay 14, 2024
    Siemens Foundation
    Simcenter Femap
    risk 0.51cvss 7.8epss 0.00

    A vulnerability has been identified in Simcenter Femap (All versions < V2406). The affected applications contain an out of bounds read past the end of an allocated structure while parsing specially crafted IGS files. This could allow an attacker to execute code in the context of…

  • CVE-2024-32058HigMay 14, 2024
    Siemens Foundation
    Simcenter Femap
    risk 0.51cvss 7.8epss 0.00

    A vulnerability has been identified in Simcenter Femap (All versions < V2406). The affected application is vulnerable to memory corruption while parsing specially crafted IGS files. This could allow an attacker to execute code in the context of the current process.…

  • CVE-2024-32057HigMay 14, 2024
    Siemens Foundation
    Simcenter Femap
    risk 0.51cvss 7.8epss 0.00

    A vulnerability has been identified in Simcenter Femap (All versions < V2406). The affected application contains a type confusion vulnerability while parsing IGS files. This could allow an attacker to execute code in the context of the current process. (ZDI-CAN-21562)

  • CVE-2024-32055HigMay 14, 2024
    Siemens Foundation
    Simcenter Femap
    risk 0.51cvss 7.8epss 0.00

    A vulnerability has been identified in Simcenter Femap (All versions < V2406). The affected applications contain an out of bounds read past the end of an allocated structure while parsing specially crafted IGS files. This could allow an attacker to execute code in the context of…

  • CVE-2024-31980HigMay 14, 2024
    Parasolid
    Parasolid
    risk 0.51cvss 7.8epss 0.00

    A vulnerability has been identified in Parasolid V35.1 (All versions < V35.1.256), Parasolid V36.0 (All versions < V36.0.210), Parasolid V36.1 (All versions < V36.1.185). The affected application contains an out of bounds write past the end of an allocated buffer while parsing a…

  • CVE-2024-31485HigMay 14, 2024
    Siemens Foundation
    CPCI85 Central Processing/Communication
    risk 0.47cvss 7.2epss 0.02

    A vulnerability has been identified in CPCI85 Central Processing/Communication (All versions < V5.30), SICORE Base system (All versions < V1.3.0). The web interface of affected devices is vulnerable to command injection due to missing server side input sanitation. This could…

  • CVE-2024-31484HigMay 14, 2024
    Siemens Foundation
    CPCI85 Central Processing/Communication
    risk 0.51cvss 7.8epss 0.00

    A vulnerability has been identified in CPC80 Central Processing/Communication (All versions < V16.41), CPCI85 Central Processing/Communication (All versions < V5.30), CPCX26 Central Processing/Communication (All versions < V06.02), ETA4 Ethernet Interface IEC60870-5-104 (All…