Search vulnerabilities

Expected end of text, found '–' (at char 40), (line:1, col:41)
Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 425,120

CVE-2022-24523

Microsoft Edge (Chromium-based) Spoofing Vulnerability

Microsoft Edge (Chromium-based) Spoofing Vulnerability

CVSS 3.1 · 4.3 Medium EPSS 1.4% KEV · Not listed
Vendors
Microsoft
Products
Edge Chromium
CVE-2022-23259

Microsoft Dynamics 365 On-Premises Remote Code Execution Vulnerability

Microsoft Dynamics 365 On-Premises Remote Code Execution Vulnerability

CVSS 3.1 · 8.8 High EPSS 2.9% KEV · Not listed
Vendors
Microsoft
Products
Dynamics 365
CVE-2024-56350

In JetBrains TeamCity before 2024.12 build credentials allowed unauthorized viewing of projects

CVSS 3.1 · 4.3 Medium EPSS < 1% KEV · Not listed
Vendors
Jetbrains
Products
Teamcity
CVE-2024-56351

In JetBrains TeamCity before 2024.12 access tokens were not revoked after removing user roles

CVSS 3.1 · 6.3 Medium EPSS < 1% KEV · Not listed
Vendors
Jetbrains
Products
Teamcity
CVE-2024-56352

In JetBrains TeamCity before 2024.12 stored XSS was possible via image name on the agent details page

CVSS 3.1 · 4.6 Medium EPSS < 1% KEV · Not listed
Vendors
Jetbrains
Products
Teamcity
CVE-2024-56353

In JetBrains TeamCity before 2024.12 backup file exposed user credentials and session cookies

CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed
Vendors
Jetbrains
Products
Teamcity
CVE-2024-56354

In JetBrains TeamCity before 2024.12 password field value were accessible to users with view settings permission

CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed
Vendors
Jetbrains
Products
Teamcity
CVE-2024-56355

In JetBrains TeamCity before 2024.12 missing Content-Type header in RemoteBuildLogController response could lead to XSS

CVSS 3.1 · 4.6 Medium EPSS < 1% KEV · Not listed
Vendors
Jetbrains
Products
Teamcity
CVE-2024-56356

In JetBrains TeamCity before 2024.12 insecure XMLParser configuration could lead to potential XXE attack

CVSS 3.1 · 5.9 Medium EPSS < 1% KEV · Not listed
Vendors
Jetbrains
Products
Teamcity
CVE-2023-48789

A client-side enforcement of server-side security in Fortinet FortiPortal version 6.0.0 through 6.0.14 allows attacker to improper access control via crafted HTTP requests.

CVSS 3.1 · 4.1 Medium EPSS < 1% KEV · Not listed
Vendors
Fortinet
Products
Fortiportal
CVE-2023-47543

An authorization bypass through user-controlled key vulnerability [CWE-639] in Fortinet FortiPortal version 7.0.0 through 7.0.3 allows an authenticated attacker to interact with ressources of other organizations via HTTP or HTTPS requests.

CVSS 3.1 · 5.1 Medium EPSS < 1% KEV · Not listed
Vendors
Fortinet
Products
Fortiportal
CVE-2022-23280

Microsoft Outlook for Mac Security Feature Bypass Vulnerability

Microsoft Outlook for Mac Security Feature Bypass Vulnerability

CVSS 3.1 · 5.3 Medium EPSS 2.4% KEV · Not listed
Vendors
Microsoft
Products
Outlook 2016