Browse All CVEs
50,486 vulnerabilities.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2024-38368 |
critical | 9.3 | 0.1485 | 2026-11-03 | trunk.cocoapods.org is the authentication server for the CoacoaPods dependency manager. A | |
CVE-2024-38200 |
medium | 6.5 | 0.2165 | 2026-11-03 | 1 PoC | Microsoft Office Spoofing Vulnerability |
CVE-2024-38100 |
high | 7.8 | 0.0452 | 2026-11-03 | Windows File Explorer Elevation of Privilege Vulnerability | |
CVE-2024-37385 |
critical | 9.8 | 0.0148 | 2026-11-03 | Roundcube Webmail before 1.5.7 and 1.6.x before 1.6.7 on Windows allows command injection | |
CVE-2024-37081 |
high | 7.8 | 0.0499 | 2026-11-03 | 3 PoC | The vCenter Server contains multiple local privilege escalation vulnerabilities due to mis |
CVE-2024-37051 |
critical | 9.3 | 0.0488 | 2026-11-03 | 2 PoC | GitHub access token could be exposed to third-party sites in JetBrains IDEs after version |
CVE-2024-36984 |
high | 8.8 | 0.0141 | 2026-11-03 | In Splunk Enterprise versions below 9.2.2, 9.1.5, and 9.0.10 on Windows, an authenticated | |
CVE-2024-36978 |
high | 7.8 | 0.0028 | 2026-11-03 | In the Linux kernel, the following vulnerability has been resolved: net: sched: sch_multi | |
CVE-2024-36104 |
critical | 9.1 | 0.8788 | 2026-11-03 | 2 PoC | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerabili |
CVE-2024-35286 |
critical | 9.8 | 0.6573 | 2026-11-03 | A vulnerability in NuPoint Messenger (NPM) of Mitel MiCollab through 9.8.0.33 allows an un | |
CVE-2024-35248 |
high | 7.3 | 0.0095 | 2026-11-03 | Microsoft Dynamics 365 Business Central Elevation of Privilege Vulnerability | |
CVE-2024-32030 |
high | 8.1 | 0.5105 | 2026-11-03 | 1 PoC | Kafka UI is an Open-Source Web UI for Apache Kafka Management. Kafka UI API allows users t |
CVE-2024-31449 |
high | 7.0 | 0.0446 | 2026-11-03 | 1 PoC | Redis is an open source, in-memory database that persists on disk. An authenticated user m |
CVE-2024-30104 |
high | 7.8 | 0.0151 | 2026-11-03 | Microsoft Office Remote Code Execution Vulnerability | |
CVE-2024-30103 |
high | 8.8 | 0.0342 | 2026-11-03 | Microsoft Outlook Remote Code Execution Vulnerability | |
CVE-2024-30090 |
high | 7.0 | 0.0198 | 2026-11-03 | 2 PoC | Microsoft Streaming Service Elevation of Privilege Vulnerability |
CVE-2024-2961 |
high | 7.3 | 0.8833 | 2026-11-03 | 17 PoC | The iconv() function in the GNU C Library versions 2.39 and older may overflow the output |
CVE-2024-29972 |
critical | 9.8 | 0.9035 | 2026-11-03 | 2 PoC | ** UNSUPPORTED WHEN ASSIGNED ** The command injection vulnerability in the CGI program "re |
CVE-2024-29847 |
critical | 9.8 | 0.5208 | 2026-11-03 | 1 PoC | Deserialization of untrusted data in the agent portal of Ivanti EPM before 2022 SU6, or th |
CVE-2024-29014 |
high | 8.8 | 0.0186 | 2026-11-03 | Vulnerability in SonicWall SMA100 NetExtender Windows (32 and 64-bit) client 10.2.339 and | |
CVE-2024-28074 |
critical | 9.6 | 0.1092 | 2026-11-03 | It was discovered that a previous vulnerability was not completely fixed with SolarWinds A | |
CVE-2024-27903 |
critical | 9.8 | 0.0892 | 2026-11-03 | OpenVPN plug-ins on Windows with OpenVPN 2.6.9 and earlier could be loaded from any direct | |
CVE-2024-27820 |
high | 8.8 | 0.0102 | 2026-11-03 | The issue was addressed with improved memory handling. This issue is fixed in Safari 17.5, | |
CVE-2024-27275 |
high | 7.4 | 0.0015 | 2026-11-03 | IBM i 7.2, 7.3, 7.4, and 7.5 contains a local privilege escalation vulnerability caused by | |
CVE-2024-26923 |
medium | 4.7 | 0.0021 | 2026-11-03 | In the Linux kernel, the following vulnerability has been resolved: af_unix: Fix garbage | |
CVE-2024-26230 |
high | 7.8 | 0.2411 | 2026-11-03 | 2 PoC | Windows Telephony Server Elevation of Privilege Vulnerability |
CVE-2024-24974 |
high | 7.5 | 0.0976 | 2026-11-03 | The interactive service in OpenVPN 2.6.9 and earlier allows the OpenVPN service pipe to be | |
CVE-2024-23472 |
critical | 9.6 | 0.1860 | 2026-11-03 | SolarWinds Access Rights Manager (ARM) is susceptible to Directory Traversal vulnerability | |
CVE-2024-23471 |
high | 8.8 | 0.0134 | 2026-11-03 | The SolarWinds Access Rights Manager was found to be susceptible to a Remote Code Executio | |
CVE-2024-23469 |
critical | 9.6 | 0.1787 | 2026-11-03 | SolarWinds Access Rights Manager (ARM) is susceptible to a Remote Code Execution vulnerabi | |
CVE-2024-23467 |
high | 8.8 | 0.0293 | 2026-11-03 | The SolarWinds Access Rights Manager was susceptible to a Directory Traversal and Informat | |
CVE-2024-23466 |
critical | 9.6 | 0.0254 | 2026-11-03 | SolarWinds Access Rights Manager (ARM) is susceptible to a Directory Traversal Remote Code | |
CVE-2024-23384 |
high | 8.4 | 0.0011 | 2026-11-03 | Memory corruption when the mapped pages in VBO are still mapped after reclaiming by shrink | |
CVE-2024-22274 |
high | 7.2 | 0.0251 | 2026-11-03 | 4 PoC | The vCenter Server contains an authenticated remote code execution vulnerability. A malici |
CVE-2024-20482 |
medium | 6.5 | 0.0049 | 2026-11-03 | A vulnerability in the web-based management interface of Cisco Secure Firewall Management | |
CVE-2024-20479 |
medium | 4.8 | 0.0029 | 2026-11-03 | A vulnerability in the web-based management interface of Cisco ISE could allow an authenti | |
CVE-2024-20443 |
medium | 5.4 | 0.0029 | 2026-11-03 | A vulnerability in the web-based management interface of Cisco ISE could allow an authenti | |
CVE-2024-20419 |
critical | 10.0 | 0.8092 | 2026-11-03 | A vulnerability in the authentication system of Cisco Smart Software Manager On-Prem (SSM | |
CVE-2024-20017 |
critical | 9.8 | 0.4661 | 2026-11-03 | 1 PoC | In wlan service, there is a possible out of bounds write due to improper input validation. |
CVE-2024-12108 |
critical | 9.6 | 0.0785 | 2026-11-03 | In WhatsUp Gold versions released before 2024.0.2, an attacker can gain access to the What | |
CVE-2024-10914 |
critical | 9.2 | 0.9754 | 2026-11-03 | 13 PoC | A vulnerability was found in D-Link DNS-320, DNS-320LW, DNS-325 and DNS-340L up to 2024102 |
CVE-2023-45624 |
high | 7.5 | 0.0087 | 2026-11-03 | An unauthenticated Denial-of-Service (DoS) vulnerability exists in the soft ap daemon acce | |
CVE-2023-41251 |
high | 7.2 | 0.0128 | 2026-11-03 | A stack-based buffer overflow vulnerability exists in the boa formRoute functionality of R | |
CVE-2023-38036 |
— | — | 0.0284 | 2026-11-03 | A security vulnerability within Ivanti Avalanche Manager before version 6.4.1 may allow an | |
CVE-2023-31322 |
high | 8.7 | 0.0014 | 2026-11-03 | Type confusion in the ASP could allow an attacker to pass a malformed argument to the Reli | |
CVE-2023-29348 |
high | 7.5 | 0.0208 | 2026-11-03 | Windows Remote Desktop Gateway (RD Gateway) Information Disclosure Vulnerability | |
CVE-2023-21748 |
high | 7.8 | 0.0087 | 2026-11-03 | Windows Kernel Elevation of Privilege Vulnerability | |
CVE-2023-21474 |
medium | 6.3 | 0.0011 | 2026-11-03 | Intent redirection vulnerability in SecSettings prior to SMR Apr-2022 Release 1 allows att | |
CVE-2023-0507 |
high | 7.3 | 0.1546 | 2026-11-03 | Grafana is an open-source platform for monitoring and observability. Starting with the 8 | |
CVE-2022-39324 |
medium | 6.7 | 0.0087 | 2026-11-03 | Grafana is an open-source platform for monitoring and observability. Prior to versions 8.5 |