2024

.NET and Visual Studio Denial of Service Vulnerability

.NET, .NET Framework, and Visual Studio Denial of Service Vulnerability

.NET, .NET Framework, and Visual Studio Denial of Service Vulnerability

Power BI Report Server Spoofing Vulnerability

Azure Service Fabric for Linux Remote Code Execution Vulnerability

Microsoft Configuration Manager Remote Code Execution Vulnerability

Windows Remote Desktop Services Tampering Vulnerability

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

Windows Remote Desktop Licensing Service Remote Code Execution Vulnerability

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

.NET and Visual Studio Remote Code Execution Vulnerability

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

Azure Stack Hyperconverged Infrastructure (HCI) Elevation of Privilege Vulnerability

BranchCache Denial of Service Vulnerability

Windows Kerberos Elevation of Privilege Vulnerability

Windows Netlogon Elevation of Privilege Vulnerability

Azure Monitor Agent Elevation of Privilege Vulnerability

Microsoft OpenSSH for Windows Remote Code Execution Vulnerability

Windows Resume Extensible Firmware Interface Security Feature Bypass Vulnerability

Windows Resume Extensible Firmware Interface Security Feature Bypass Vulnerability

Windows Kernel Elevation of Privilege Vulnerability

Windows Resume Extensible Firmware Interface Security Feature Bypass Vulnerability

NULL pointer dereference in IP socket options processing of the Networking Stack in QNX Software Development Platform (S

Windows Hyper-V Remote Code Execution Vulnerability

An issue in the getcolor function in utils.py of xhtml2pdf v0.2.13 allows attackers to cause a Regular expression Denial

Windows Hyper-V Security Feature Bypass Vulnerability

A vulnerability was found in the resteasy-netty4 library arising from improper handling of HTTP requests using smuggling

A vulnerability was found in Quarkus CXF. Passwords and other secrets may appear in the application log in spite of the

A flaw was found in Event-Driven Automation (EDA) in Ansible Automation Platform (AAP), which lacks encryption of sensit

Path traversal in Ivanti CSA before version 5.0.2 allows a remote authenticated attacker with admin privileges to bypass

An OS command injection vulnerability in the admin web console of Ivanti CSA before version 5.0.2 allows a remote authen

SQL injection in the admin web console of Ivanti CSA before version 5.0.2 allows a remote authenticated attacker with ad

Under specific circumstances, insecure permissions in Ivanti Velocity License Server before version 5.2 allows a local a

A denial-of-service vulnerability exists in the Rockwell Automation PowerFlex® 600T. If the device is overloaded with re

Due to a memory leak, a denial-of-service vulnerability exists in the Rockwell Automation affected products. A malicious

Insecure permissions in Ivanti EPMM before 12.1.0.4 allow a local authenticated attacker to modify sensitive application

Path Traversal in Ivanti Avalanche before version 6.4.5 allows a remote unauthenticated attacker to leak sensitive infor

Path Traversal in Ivanti Avalanche before version 6.4.5 allows a remote unauthenticated attacker to bypass authenticatio

Path Traversal in Ivanti Avalanche before version 6.4.5 allows a remote unauthenticated attacker to bypass authenticatio

Server-side request forgery in Ivanti Avalanche before version 6.4.5 allows a remote unauthenticated attacker to leak se

A NULL pointer dereference in WLAvalancheService.exe of Ivanti Avalanche before version 6.4.5 allows a remote unauthenti

Fujian Kelixin Communication Command and Dispatch Platform <=7.6.6.4391 is vulnerable to SQL Injection via /client/get_g

A SQL injection vulnerability in login portal in AnteeoWMS before v4.7.34 allows unauthenticated attackers to execute ar

A flaw exists whereby a user can make a specific call to a FlashArray endpoint allowing privilege escalation.

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Payara Plat

In JetBrains TeamCity before 2024.07.3 stored XSS was possible via server global settings

In JetBrains TeamCity before 2024.07.3 stored XSS was possible in Backup configuration settings

In JetBrains TeamCity before 2024.07.3 path traversal allowed backup file write to arbitrary location

In JetBrains TeamCity before 2024.07.3 path traversal leading to information disclosure was possible via server backups