Search
CVE Explorer
Search the full tracked CVE corpus across every vendor — by keyword, vendor, severity, CVSS band and publication date. Server-rendered; each filtered view has its own URL.
01
Filters
Submit to refine — state is held in the URL.
02
Results
35,255 matching · page 671/706Each CVE id links to its NVD record.
| CVE | Severity | CVSS | Summary | Published |
|---|---|---|---|---|
| CVE-2024-43633(opens NVD record) | Medium | 6.5 | Windows Hyper-V Denial of Service Vulnerability | Nov 12, 2024 |
| CVE-2024-43631(opens NVD record) | Medium | 6.7 | Windows Secure Kernel Mode Elevation of Privilege Vulnerability | Nov 12, 2024 |
| CVE-2024-43630(opens NVD record) | High | 7.8 | Windows Kernel Elevation of Privilege Vulnerability | Nov 12, 2024 |
| CVE-2024-43629(opens NVD record) | High | 7.8 | Windows DWM Core Library Elevation of Privilege Vulnerability | Nov 12, 2024 |
| CVE-2024-43628(opens NVD record) | High | 8.8 | Windows Telephony Service Remote Code Execution Vulnerability | Nov 12, 2024 |
| CVE-2024-43627(opens NVD record) | High | 8.8 | Windows Telephony Service Remote Code Execution Vulnerability | Nov 12, 2024 |
| CVE-2024-43626(opens NVD record) | High | 7.8 | Windows Telephony Service Elevation of Privilege Vulnerability | Nov 12, 2024 |
| CVE-2024-43625(opens NVD record) | High | 8.1 | Microsoft Windows VMSwitch Elevation of Privilege Vulnerability | Nov 12, 2024 |
| CVE-2024-43624(opens NVD record) | High | 8.8 | Windows Hyper-V Shared Virtual Disk Elevation of Privilege Vulnerability | Nov 12, 2024 |
| CVE-2024-43623(opens NVD record) | High | 7.8 | Windows NT OS Kernel Elevation of Privilege Vulnerability | Nov 12, 2024 |
| CVE-2024-43622(opens NVD record) | High | 8.8 | Windows Telephony Service Remote Code Execution Vulnerability | Nov 12, 2024 |
| CVE-2024-43621(opens NVD record) | High | 8.8 | Windows Telephony Service Remote Code Execution Vulnerability | Nov 12, 2024 |
| CVE-2024-43620(opens NVD record) | High | 8.8 | Windows Telephony Service Remote Code Execution Vulnerability | Nov 12, 2024 |
| CVE-2024-43602(opens NVD record) | Critical | 9.9 | Azure CycleCloud Remote Code Execution Vulnerability | Nov 12, 2024 |
| CVE-2024-43598(opens NVD record) | High | 8.1 | LightGBM Remote Code Execution Vulnerability | Nov 12, 2024 |
| CVE-2024-43530(opens NVD record) | High | 7.8 | Windows Update Stack Elevation of Privilege Vulnerability | Nov 12, 2024 |
| CVE-2024-43499(opens NVD record) | High | 7.5 | .NET and Visual Studio Denial of Service Vulnerability | Nov 12, 2024 |
| CVE-2024-43498(opens NVD record) | Critical | 9.8 | .NET and Visual Studio Remote Code Execution Vulnerability | Nov 12, 2024 |
| CVE-2024-43462(opens NVD record) | High | 8.8 | SQL Server Native Client Remote Code Execution Vulnerability | Nov 12, 2024 |
| CVE-2024-43459(opens NVD record) | High | 8.8 | SQL Server Native Client Remote Code Execution Vulnerability | Nov 12, 2024 |
| CVE-2024-43452(opens NVD record) | High | 7.5 | Windows Registry Elevation of Privilege Vulnerability | Nov 12, 2024 |
| CVE-2024-43451(opens NVD record) | Medium | 6.5 | NTLM Hash Disclosure Spoofing Vulnerability | Nov 12, 2024 |
| CVE-2024-43450(opens NVD record) | High | 7.5 | Windows DNS Spoofing Vulnerability | Nov 12, 2024 |
| CVE-2024-43449(opens NVD record) | Medium | 6.8 | Windows USB Video Class System Driver Elevation of Privilege Vulnerability | Nov 12, 2024 |
| CVE-2024-43447(opens NVD record) | High | 8.1 | Windows SMBv3 Server Remote Code Execution Vulnerability | Nov 12, 2024 |
| CVE-2024-38264(opens NVD record) | Medium | 5.9 | Microsoft Virtual Hard Disk (VHDX) Denial of Service Vulnerability | Nov 12, 2024 |
| CVE-2024-38255(opens NVD record) | High | 8.8 | SQL Server Native Client Remote Code Execution Vulnerability | Nov 12, 2024 |
| CVE-2024-38203(opens NVD record) | Medium | 6.2 | Windows Package Library Manager Information Disclosure Vulnerability | Nov 12, 2024 |
| CVE-2024-9843(opens NVD record) | Medium | 5.0 | A buffer over-read in Ivanti Secure Access Client before 22.7R4 allows a local unauthenticated attacker to cause a denial of service. | Nov 12, 2024 |
| CVE-2024-9842(opens NVD record) | High | 7.3 | Incorrect permissions in Ivanti Secure Access Client before version 22.7R4 allows a local authenticated attacker to create arbitrary folders. | Nov 12, 2024 |
| CVE-2024-8539(opens NVD record) | High | 7.1 | Improper authorization in Ivanti Secure Access Client before version 22.7R3 allows a local authenticated attacker to modify sensitive configuration files. | Nov 12, 2024 |
| CVE-2024-7571(opens NVD record) | High | 7.8 | Incorrect permissions in Ivanti Secure Access Client before 22.7R4 allows a local authenticated attacker to escalate their privileges. | Nov 12, 2024 |
| CVE-2024-49528(opens NVD record) | High | 7.8 | Animate versions 23.0.7, 24.0.4 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. | Nov 12, 2024 |
| CVE-2024-49527(opens NVD record) | Medium | 5.5 | Animate versions 23.0.7, 24.0.4 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file. | Nov 12, 2024 |
| CVE-2024-49526(opens NVD record) | High | 7.8 | Animate versions 23.0.7, 24.0.4 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. | Nov 12, 2024 |
| CVE-2024-49514(opens NVD record) | High | 7.8 | Photoshop Desktop versions 24.7.3, 25.11 and earlier are affected by an Integer Underflow (Wrap or Wraparound) vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. | Nov 12, 2024 |
| CVE-2024-11006(opens NVD record) | Critical | 9.1 | Command injection in Ivanti Connect Secure before version 22.7R2.1 (Not Applicable to 9.1Rx) and Ivanti Policy Secure before version 22.7R1.1 (Not Applicable to 9.1Rx) allows a remote authenticated attacker with admin privileges to achieve remote code execution. | Nov 12, 2024 |
| CVE-2024-11005(opens NVD record) | Critical | 9.1 | Command injection in Ivanti Connect Secure before version 22.7R2.1 (Not Applicable to 9.1Rx) and Ivanti Policy Secure before version 22.7R1.1 (Not Applicable to 9.1Rx) allows a remote authenticated attacker with admin privileges to achieve remote code execution. | Nov 12, 2024 |
| CVE-2024-11004(opens NVD record) | Medium | 6.1 | Reflected XSS in Ivanti Connect Secure before version 22.7R2.1 and Ivanti Policy Secure before version 22.7R1.1 allows a remote unauthenticated attacker to obtain admin privileges. User interaction is required. | Nov 12, 2024 |
| CVE-2024-9420(opens NVD record) | High | 8.8 | A use-after-free in Ivanti Connect Secure before version 22.7R2.3 and 9.1R18.9 and Ivanti Policy Secure before version 22.7R1.2 allows a remote authenticated attacker to achieve remote code execution | Nov 12, 2024 |
| CVE-2024-8495(opens NVD record) | High | 7.5 | A null pointer dereference in Ivanti Connect Secure before version 22.7R2.1 and Ivanti Policy Secure before version 22.7R1.1 allows a remote unauthenticated attacker to cause a denial of service. | Nov 12, 2024 |
| CVE-2024-50331(opens NVD record) | High | 7.5 | An out-of-bounds read vulnerability in Ivanti Avalanche before 6.4.6 allows a remote unauthenticated attacker to leak sensitive information in memory. | Nov 12, 2024 |
| CVE-2024-50330(opens NVD record) | Critical | 9.8 | SQL injection in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6 November Security Update allows a remote unauthenticated attacker to achieve remote code execution. | Nov 12, 2024 |
| CVE-2024-50329(opens NVD record) | High | 8.8 | Path traversal in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6 November Security Update allows a remote unauthenticated attacker to achieve remote code execution. User interaction is required. | Nov 12, 2024 |
| CVE-2024-50328(opens NVD record) | High | 7.2 | SQL injection in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6 November Security Update allows a remote authenticated attacker with admin privileges to achieve remote code execution. | Nov 12, 2024 |
| CVE-2024-50327(opens NVD record) | High | 7.2 | SQL injection in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6 November Security Update allows a remote authenticated attacker with admin privileges to achieve remote code execution. | Nov 12, 2024 |
| CVE-2024-50326(opens NVD record) | High | 7.2 | SQL injection in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6 November Security Update allows a remote authenticated attacker with admin privileges to achieve remote code execution. | Nov 12, 2024 |
| CVE-2024-50324(opens NVD record) | High | 7.2 | Path traversal in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6 November Security Update allows a remote authenticated attacker with admin privileges to achieve remote code execution. | Nov 12, 2024 |
| CVE-2024-50323(opens NVD record) | High | 7.8 | SQL injection in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6 November Security Update allows a local unauthenticated attacker to achieve code execution. User interaction is required. | Nov 12, 2024 |
| CVE-2024-50322(opens NVD record) | High | 7.8 | Path traversal in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6 November Security Update allows a local unauthenticated attacker to achieve code execution. User interaction is required. | Nov 12, 2024 |