Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 11,766

Export CSV
CVE-2024-38228

Microsoft SharePoint Server Remote Code Execution Vulnerability

Microsoft SharePoint Server Remote Code Execution Vulnerability

CVSS 3.1 · 7.2 High EPSS 4.2% KEV · Not listed
Vendors
Microsoft
Products
Sharepoint Server
CVE-2024-38227

Microsoft SharePoint Server Remote Code Execution Vulnerability

Microsoft SharePoint Server Remote Code Execution Vulnerability

CVSS 3.1 · 7.2 High EPSS 8.2% KEV · Not listed
Vendors
Microsoft
Products
Sharepoint Server
CVE-2024-43464

Microsoft SharePoint Server Remote Code Execution Vulnerability

Microsoft SharePoint Server Remote Code Execution Vulnerability

CVSS 3.1 · 7.2 High EPSS 36.3% KEV · Not listed
Vendors
Microsoft
Products
Sharepoint Server
CVE-2024-38018

Microsoft SharePoint Server Remote Code Execution Vulnerability

Microsoft SharePoint Server Remote Code Execution Vulnerability

CVSS 3.1 · 8.8 High EPSS 51.2% KEV · Not listed
Vendors
Microsoft
Products
Sharepoint Server
CVE-2023-34251

Grav Server Side Template Injection vulnerability

Grav is a flat-file content management system. Versions prior to 1.7.42 are vulnerable to server side template injection. Remote code execution is possible by embedding malicious PHP code on the administrator screen by a user with page editing privileges. Version 1.7.42 contains a fix for this issue.

CVSS 3.1 · 10 Critical EPSS 2.3% KEV · Not listed
Vendors
Getgrav
Products
Grav
CVE-2024-8806

Cohesive Networks VNS3 Command Injection Remote Code Execution Vulnerability

Cohesive Networks VNS3 Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Cohesive Networks VNS3. Authentication is not required to exploit this vulnerability. The specific flaw exists within the web service, which listens on TCP port 8000 by default. The issue results from the lack of proper validation of a user-supplied string before using it to execute a system call. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-24160.

CVSS 3.1 · 9.8 Critical EPSS 1.7% KEV · Not listed
Vendors
Cohesive
Products
Vns3
CVE-2024-8807

Cohesive Networks VNS3 Command Injection Remote Code Execution Vulnerability

Cohesive Networks VNS3 Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Cohesive Networks VNS3. Authentication is not required to exploit this vulnerability. The specific flaw exists within the web service, which listens on TCP port 8000 by default. The issue results from the lack of proper validation of a user-supplied string before using it to execute a system call. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-24176.

CVSS 3.1 · 9.8 Critical EPSS 1.7% KEV · Not listed
Vendors
Cohesive
Products
Vns3