Latest CVE Feed

Following is the list of latest published vulnerabilities. You can filter the list based on the severity of the vulnerability, whether it is actively exploited (also known as CISA KEV List) or remotely exploitable. You can also sort the list based on the published date, last updated date, or CVSS score.

Latest Critical Actively Exploited Remotely Exploitable

7.8

HIGH

CVE-2024-38245

Kernel Streaming Service Driver Elevation of Privilege Vulnerability...

Affected Products : windows_server_2008 windows_server_2012 windows_server_2016 windows_server_2019 windows_10_1607 windows_10_1809 windows_10_21h2 windows_10_22h2 windows_server_2022 windows_11_21h2 +10 more products
Published: Sep. 10, 2024

Modified: Sep. 17, 2024
7.0

HIGH

CVE-2024-38246

Win32k Elevation of Privilege Vulnerability...

Affected Products : windows_10_21h2 windows_10_22h2 windows_server_2022 windows_11_21h2 windows_11_22h2 windows_11_23h2 windows_server_2022_23h2 windows_server_23h2 windows_11_24h2
Published: Sep. 10, 2024

Modified: Sep. 17, 2024
7.8

HIGH

CVE-2024-38247

Windows Graphics Component Elevation of Privilege Vulnerability...

Affected Products : windows_server_2008 windows_server_2012 windows_server_2016 windows_server_2019 windows_10_1607 windows_10_1809 windows_10_21h2 windows_10_22h2 windows_server_2022 windows_11_21h2 +9 more products
Published: Sep. 10, 2024

Modified: Sep. 17, 2024
7.0

HIGH

CVE-2024-38248

Windows Storage Elevation of Privilege Vulnerability...

Affected Products : windows_10_21h2 windows_10_22h2 windows_server_2022 windows_11_21h2 windows_11_22h2 windows_11_23h2 windows_server_2022_23h2 windows_server_23h2 windows_11_24h2
Published: Sep. 10, 2024

Modified: Sep. 17, 2024
7.8

HIGH

CVE-2024-38249

Windows Graphics Component Elevation of Privilege Vulnerability...

Affected Products : windows_server_2008 windows_server_2012 windows_server_2016 windows_server_2019 windows_10_1607 windows_10_1809 windows_10_21h2 windows_10_22h2 windows_server_2022 windows_11_21h2 +10 more products
Published: Sep. 10, 2024

Modified: Sep. 17, 2024
7.8

HIGH

CVE-2024-38250

Windows Graphics Component Elevation of Privilege Vulnerability...

Affected Products : windows_server_2008 windows_server_2012 windows_server_2016 office windows_server_2019 windows_10_1607 windows_10_1809 windows_10_21h2 windows_10_22h2 windows_server_2022 +12 more products
Published: Sep. 10, 2024

Modified: Sep. 17, 2024
7.8

HIGH

CVE-2024-43457

Windows Setup and Deployment Elevation of Privilege Vulnerability...

Affected Products : windows_11_24h2
Published: Sep. 10, 2024

Modified: Sep. 17, 2024
7.7

HIGH

CVE-2024-43458

Windows Networking Information Disclosure Vulnerability...

Affected Products : windows_server_2016 windows_10_1607 windows
Published: Sep. 10, 2024

Modified: Sep. 17, 2024
7.8

HIGH

CVE-2024-43463

Microsoft Office Visio Remote Code Execution Vulnerability...

Affected Products : office 365_apps office_long_term_servicing_channel visio
Published: Sep. 10, 2024

Modified: Sep. 17, 2024
7.5

HIGH

CVE-2024-43467

Windows Remote Desktop Licensing Service Remote Code Execution Vulnerability...

Affected Products : windows_server_2008 windows_server_2012 windows_server_2016 windows_server_2019 windows_server_2022 windows windows_server_2022_23h2 windows_server_23h2 windows_server_2012_r2 windows_server_2008_r2 +1 more products
Published: Sep. 10, 2024

Modified: Sep. 17, 2024
8.8

HIGH

CVE-2024-43469

Azure CycleCloud Remote Code Execution Vulnerability...

Affected Products : azure_cyclecloud
Published: Sep. 10, 2024

Modified: Sep. 17, 2024
8.7

HIGH

CVE-2024-6921

Cleartext Storage of Sensitive Information vulnerability in NAC Telecommunication Systems Inc. NACPremium allows Retrieve Embedded Sensitive Data.This issue affects NACPremium: through 01082024....

Affected Products : nacpremium
Published: Sep. 02, 2024

Modified: Sep. 17, 2024
6.1

MEDIUM

CVE-2024-6920

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NAC Telecommunication Systems Inc. NACPremium allows Stored XSS.This issue affects NACPremium: through 01082024....

Affected Products : nacpremium
Published: Sep. 02, 2024

Modified: Sep. 17, 2024
9.8

CRITICAL

CVE-2024-6919

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in NAC Telecommunication Systems Inc. NACPremium allows Blind SQL Injection.This issue affects NACPremium: through 01082024....

Affected Products : nacpremium
Published: Sep. 02, 2024

Modified: Sep. 17, 2024
7.2

HIGH

CVE-2024-38878

A vulnerability has been identified in Omnivise T3000 Application Server R9.2 (All versions), Omnivise T3000 R8.2 SP3 (All versions), Omnivise T3000 R8.2 SP4 (All versions). Affected devices allow authenticated users to export diagnostics data. The corres...

Affected Products : omnivise_t3000_application_server
Published: Aug. 02, 2024

Modified: Sep. 17, 2024
9.8

CRITICAL

CVE-2024-7314

anji-plus AJ-Report is affected by an authentication bypass vulnerability. A remote and unauthenticated attacker can append ";swagger-ui" to HTTP requests to bypass authentication and execute arbitrary Java on the victim server....

Affected Products : report
Published: Aug. 02, 2024

Modified: Sep. 17, 2024
5.9

MEDIUM

CVE-2024-39626

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in 5 Star Plugins Pretty Simple Popup Builder allows Stored XSS.This issue affects Pretty Simple Popup Builder: from n/a through 1.0.7....

Affected Products : pretty_simple_popup_builder
Published: Aug. 01, 2024

Modified: Sep. 17, 2024
8.5

HIGH

CVE-2024-38876

A vulnerability has been identified in Omnivise T3000 Application Server R9.2 (All versions), Omnivise T3000 Domain Controller R9.2 (All versions), Omnivise T3000 Product Data Management (PDM) R9.2 (All versions), Omnivise T3000 R8.2 SP3 (All versions), O...

Affected Products : omnivise_t3000_application_server omnivise_t3000_domain_controller omnivise_t3000_product_data_management omnivise_t3000_terminal_server omnivise_t3000_thin_client omnivise_t3000_whitelisting_server
Published: Aug. 02, 2024

Modified: Sep. 17, 2024
9.8

CRITICAL

CVE-2024-46451

TOTOLINK AC1200 T8 v4.1.5cu.861_B20230220 has a buffer overflow vulnerability in the setWiFiAclRules function via the desc parameter....

Affected Products : t8_firmware t8
Published: Sep. 16, 2024

Modified: Sep. 17, 2024
7.5

HIGH

CVE-2024-46424

TOTOLINK AC1200 T8 v4.1.5cu.861_B20230220 has a buffer overflow vulnerability in the UploadCustomModule function, which allows attackers to cause a Denial of Service (DoS) via the File parameter....

Affected Products : t8_firmware t8
Published: Sep. 16, 2024

Modified: Sep. 17, 2024

Showing 20 of 292862 Results

Browse by Apps

Latest CVE Feed

7.8

7.0

7.8

7.0

7.8

7.8

7.8

7.7

7.8

7.5

8.8

8.7

6.1

9.8

7.2

9.8

5.9

8.5

9.8

7.5

Theme Customizer

Layout

Vertical

Horizontal

Two Column

Color Scheme

Light

Dark

Layout Width

Fluid

Boxed

Layout Position

Topbar Color

Light

Dark

Sidebar Size

Default

Compact

Small (Icon View)

Small Hover View

Sidebar View

Default

Detached

Sidebar Color

Light

Dark

Gradient

Preloader

Enable

Disable