CVE search
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
| 08/10/2024 |
| CVE-2024-38097 | HIGH7.1 | Azure Monitor Agent Elevation of Privilege Vulnerability | 08/10/2024 |
| CVE-2024-47604 | MEDIUM6.1 | NuGet Gallery is a package repository that powers nuget.org. The NuGetGallery has a security vulnerability in its handling of HTML element attributes, which allows an attacker to execute arbitrary HTML or Javascript code in a victim's browser. | 01/10/2024 |
| CVE-2024-47083 | HIGH7.5 | Power Platform Terraform Provider allows managing environments and other resources within Power Platform. Versions prior to 3.0.0 have an issue in the Power Platform Terraform Provider where sensitive information, specifically the `client_secret` used in the service principal authentication, may be exposed in logs. Thi | 25/09/2024 |
| CVE-2024-43496 | HIGH8.8 | Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability | 19/09/2024 |
| CVE-2024-43489 | HIGH8.8 | Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability | 19/09/2024 |
| CVE-2024-38221 | MEDIUM4.3 | Microsoft Edge (Chromium-based) Spoofing Vulnerability | 19/09/2024 |
| CVE-2024-38016 | HIGH7.8 | Microsoft Office Visio Remote Code Execution Vulnerability | 19/09/2024 |
| CVE-2024-45383 | MEDIUM5.0 | A mishandling of IRP requests vulnerability exists in the HDAudBus_DMA interface of Microsoft High Definition Audio Bus Driver 10.0.19041.3636 (WinBuild.160101.0800). A specially crafted application can issue multiple IRP Complete requests which leads to a local denial-of-service. An attacker can execute malicious scri | 12/09/2024 |
| CVE-2024-38222 | MEDIUM6.5 | Microsoft Edge (Chromium-based) Information Disclosure Vulnerability | 12/09/2024 |
| CVE-2024-43492 | HIGH7.8 | Microsoft AutoUpdate (MAU) Elevation of Privilege Vulnerability | 10/09/2024 |
| CVE-2024-43482 | MEDIUM6.5 | Microsoft Outlook for iOS Information Disclosure Vulnerability | 10/09/2024 |
| CVE-2024-43479 | HIGH8.5 | Microsoft Power Automate Desktop Remote Code Execution Vulnerability | 10/09/2024 |
| CVE-2024-43476 | MEDIUM5.4 | Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability | 10/09/2024 |
| CVE-2024-43474 | HIGH7.5 | Microsoft SQL Server Information Disclosure Vulnerability | 10/09/2024 |
| CVE-2024-43470 | HIGH7.3 | Azure Network Watcher VM Agent Elevation of Privilege Vulnerability | 10/09/2024 |