2024

Microsoft Message Queuing (MSMQ) Elevation of Privilege Vulnerability

Microsoft WDAC ODBC Driver Remote Code Execution Vulnerability

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability

Windows SmartScreen Security Feature Bypass Vulnerability

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability

Microsoft ActiveX Data Objects Remote Code Execution Vulnerability

Internet Connection Sharing (ICS) Denial of Service Vulnerability

Microsoft ODBC Driver Remote Code Execution Vulnerability

Win32k Elevation of Privilege Vulnerability

Windows Kernel Elevation of Privilege Vulnerability

Windows Network Address Translation (NAT) Denial of Service Vulnerability

Windows Network Address Translation (NAT) Denial of Service Vulnerability

Windows DNS Client Denial of Service Vulnerability

Windows Kernel Remote Code Execution Vulnerability

Windows Kernel Information Disclosure Vulnerability

Windows USB Generic Parent Driver Remote Code Execution Vulnerability

Windows Kernel Elevation of Privilege Vulnerability

Azure Connected Machine Agent Elevation of Privilege Vulnerability

Dynamics 365 Sales Spoofing Vulnerability

Microsoft Dynamics 365 Customer Engagement Cross-Site Scripting Vulnerability

Microsoft Defender for Endpoint Protection Elevation of Privilege Vulnerability

Trusted Compute Base Elevation of Privilege Vulnerability

Skype for Business Information Disclosure Vulnerability

Windows Hyper-V Denial of Service Vulnerability

Azure Stack Hub Spoofing Vulnerability

Microsoft Office Remote Code Execution Vulnerability

Azure DevOps Server Remote Code Execution Vulnerability

Zimbra Collaboration before Kepler 9.0.0 Patch 38 GA allows DOM-based JavaScript injection in the Modern UI.

Insufficient verification of data authenticity in the configuration state machine may allow a local attacker to potentia

SQL injection vulnerability in adv radius v.2.2.5 allows a local attacker to execute arbitrary code via a crafted script

An issue was discovered in Zimbra Collaboration (ZCS) 8.8.15, 9.0, and 10.0. XSS, with resultant session stealing, can o

An issue was discovered in Zimbra Collaboration (ZCS) 8.8.15, 9.0, and 10.0. An attacker can send a PDF document through

An issue was discovered in Zimbra Collaboration (ZCS) 8.8.15, 9.0, and 10.0. Through the help document endpoint in webma

In Zimbra Collaboration (ZCS) 8.8.15 and 9.0, a closed account (with 2FA and generated passwords) can send e-mail messag

Vba32 Antivirus v3.36.0 is vulnerable to an Arbitrary Memory Read vulnerability. The 0x22200B IOCTL code of the Vba32m64

Vba32 Antivirus v3.36.0 is vulnerable to an Arbitrary Memory Read vulnerability by triggering the 0x22201B, 0x22201F, 0x

The attacker may exploit a path traversal vulnerability leading to information disclosure.

Twister Antivirus v8.17 is vulnerable to an Out-of-bounds Read vulnerability by triggering the 0x801120B8 IOCTL code of

Twister Antivirus v8.17 is vulnerable to a Denial of Service vulnerability by triggering the 0x80112067, 0x801120CB 0x80

An unauthenticated attacker can send a ping request from one network to another through an error in the origin verificat

An unauthenticated remote attacker can use an uncontrolled resource consumption vulnerability to DoS the affected device

Uncontrolled Resource Consumption vulnerability in Honeywell Niagara Framework on Windows, Linux, QNX allows Content Spo

To keep its cache database efficient, `named` running as a recursive resolver occasionally attempts to clean up the data

If a resolver cache has a very large number of ECS records stored for the same name, the process of cleaning the cache d

A bad interaction between DNS64 and serve-stale may cause `named` to crash with an assertion failure during recursive re

A flaw in query-handling code can cause `named` to exit prematurely with an assertion failure when: - `nxdomain-redir

The DNS message parsing code in `named` includes a section whose computational complexity is overly high. It does not ca

The Bold Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Icon Link in al

The Bold Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's shortcode(s) in

The Bold Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's button URL in a