231585 matches found
CVE-2024-21369
Technical details for CVE-2024-21369 are not publicly provided in the supplied documents. Monitor for updates from Microsoft and vulnerability feeds.
CVE-2024-21366
CVE-2024-21366 affects the Microsoft WDAC OLE DB provider for SQL Server and is rated CVSS v3.1 base score 8.8 (High). The vulnerability has a network attack vector with no privileges required, but user interaction is required, and the impact is High on confidentiality, integrity, and availabilit...
CVE-2024-21361
Technical details for CVE-2024-21361 are not publicly provided in the supplied documents; monitor for updates.
CVE-2024-21358
Technical details about CVE-2024-21358 (Microsoft WDAC OLE DB provider for SQL Server remote code execution) are not provided in the supplied documents. Monitor for official updates from Microsoft and trusted security advisories for affected products, mitigations, and fixes.
CVE-2024-21360
Technical details for CVE-2024-21360 are not publicly provided in the supplied documents. Monitor for updates from Microsoft and the CVE entry.
CVE-2024-21354
Technical details for CVE-2024-21354 are not publicly provided in the connected documents. No vendor/product specifics or remediation are included. Monitor for updates.
CVE-2024-21357
Technical details for CVE-2024-21357 are not provided in the connected documents. Monitor for updates and new disclosures.
CVE-2024-21352
Technical details for CVE-2024-21352 are not publicly available in the provided documents; monitor for updates.
CVE-2024-21351
CVE-2024-21351 is a Windows SmartScreen Security Feature Bypass vulnerability. Public exploits exist; attackers could bypass SmartScreen and inject code, potentially gaining code execution, exposing data, or impacting availability. Relevant advisories note active exploitation and focus on applyin...
CVE-2024-21350
CVE-2024-21350 corresponds to a Remote Code Execution vulnerability in the Microsoft WDAC OLE DB provider for SQL Server. The entry lists a CVSS v3.1 base score of 8.8 (HIGH), with attack vector NETWORK, privileges required NONE, user interaction REQUIRED, and both confidentiality, integrity, and...
CVE-2024-21340
Technical details for CVE-2024-21340 are not provided in the supplied documents. Monitor for updates.
CVE-2024-21349
Technical details for CVE-2024-21349 (Microsoft ActiveX Data Objects remote code execution) are not provided in the connected documents; no affected versions, root cause, impact, or remediation are cited. Monitor for updates.
CVE-2024-21338
CVE-2024-21338 is a Windows kernel local privilege escalation caused by an exposed IOCTL with insufficient access control in the appid.sys component. The vulnerability enables local attackers with LOW privileges and no user interaction to escalate to kernel to access high-privilege operations (CV...
CVE-2024-21329
CVE-2024-21329 affects Microsoft Azure Connected Machine Agent. Connected docs identify an elevation-of-privilege issue in the Azure Connected Machine Agent (root cause described by PT-2024-1823 as a symbolic link tracking vulnerability). CVSS indicates local access with low attack complexity and...
CVE-2024-21327
CVE-2024-21327 is a Cross-Site Scripting vulnerability in Microsoft Dynamics 365 Customer Engagement (on-premises and related deployments). The NVD/NCSC/NASES sources indicate an XSS risk that can affect Dynamics 365 Customer Engagement V9.1 and Dynamics 365 on-premises 9.1, with Microsoft noting...
CVE-2024-20667
CVE-2024-20667 is an Azure DevOps Server remote code execution vulnerability. Connected docs confirm it affects Azure DevOps Server versions including 2022.1, 2019.1.2, and 2020.1.2, with root cause described as insufficient input validation (per PT-2024-1652). The vulnerability enables remote co...
Cross site scripting
An issue was discovered in Zimbra Collaboration ZCS 8.8.15, 9.0, and 10.0. Through the help document endpoint in webmail, an attacker can inject JavaScript or HTML code that leads to cross-site scripting XSS. Adding an adequate message to avoid malicious code will mitigate this issue...
Sql injection
SQL injection vulnerability in adv radius v.2.2.5 allows a local attacker to execute arbitrary code via a crafted script...