Common Vulnerabilities and Exposures (CVE)

CVE-2024-38018

Sep 19, 2024 20:42:52 UTC

Microsoft SharePoint Server Remote Code Execution Vulnerability

CVE-2024-26191

Sep 19, 2024 20:42:51 UTC

Microsoft SQL Server Native Scoring Remote Code Execution Vulnerability

CVE-2024-26186

Sep 19, 2024 20:42:51 UTC

Microsoft SQL Server Native Scoring Remote Code Execution Vulnerability

CVE-2022-46869

Sep 19, 2024 20:42:50 UTC

Local privilege escalation during installation due to improper soft link handling. The following products are affected: Acronis Cyber Protect Home Office (Windows) before build 40278.

CVE-2024-37342

Sep 19, 2024 20:42:50 UTC

Microsoft SQL Server Native Scoring Information Disclosure Vulnerability

CVE-2024-37337

Sep 19, 2024 20:42:49 UTC

Microsoft SQL Server Native Scoring Information Disclosure Vulnerability

CVE-2024-37339

Sep 19, 2024 20:42:48 UTC

Microsoft SQL Server Native Scoring Remote Code Execution Vulnerability

CVE-2024-37340

Sep 19, 2024 20:42:48 UTC

Microsoft SQL Server Native Scoring Remote Code Execution Vulnerability

CVE-2024-37335

Sep 19, 2024 20:42:47 UTC

Microsoft SQL Server Native Scoring Remote Code Execution Vulnerability

CVE-2024-37966

Sep 19, 2024 20:42:47 UTC

Microsoft SQL Server Native Scoring Information Disclosure Vulnerability

CVE-2024-37338

Sep 19, 2024 20:42:46 UTC

Microsoft SQL Server Native Scoring Remote Code Execution Vulnerability

CVE-2023-40920

Sep 19, 2024 20:26:22 UTC

Prixan prixanconnect up to v1.62 was discovered to contain a SQL injection vulnerability via the component CartsGuruCatalogModuleFrontController::importProducts().

CVE-2023-39989

Sep 19, 2024 20:25:25 UTC

Cross-Site Request Forgery (CSRF) vulnerability in 99robots Header Footer Code Manager plugin <= 1.1.34 versions.

CVE-2024-8287

Sep 19, 2024 20:25:24 UTC

Anbox Management Service, in versions 1.17.0 through 1.23.0, does not validate the TLS certificate provided to it by the Anbox Stream Agent. An attacker must be able to machine-in-the-middle the Anbox Stream Agent from within an internal ne...

CVE-2023-4102

Sep 19, 2024 20:24:32 UTC

QSige login SSO does not have an access control mechanism to verify whether the user requesting a resource has sufficient permissions to do so. As a prerequisite, it is necessary to log into the application.