Search vulnerabilities

Expected end of text, found '/' (at char 46), (line:1, col:47)
Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 425,467

CVE-2024-43614

Microsoft Defender for Endpoint for Linux Spoofing Vulnerability

Relative path traversal in Microsoft Defender for Endpoint allows an authorized attacker to perform spoofing locally.

CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed
Vendors
Microsoft
Products
Defender For Endpoint
CVE-2024-43488

Visual Studio Code extension for Arduino Remote Code Execution Vulnerability

Missing authentication for critical function in Visual Studio Code extension for Arduino allows an unauthenticated attacker to perform remote code execution through network attack vector.

CVSS 3.1 · 8.8 High EPSS 1.2% KEV · Not listed
Vendors
Microsoft
Products
Visual Studio Code
CVE-2024-38190

Power Platform Information Disclosure Vulnerability

Missing authorization in Power Platform allows an unauthenticated attacker to view sensitive information through a network attack vector.

CVSS 3.1 · 8.6 High EPSS 1.1% KEV · Not listed
Vendors
Microsoft
Products
Power Platform
CVE-2024-38204

Imagine Cup site Information Disclosure Vulnerability

Improper access control in Imagine Cup allows an authorized attacker to elevate privileges over a network.

CVSS 3.1 · 7.5 High EPSS < 1% KEV · Not listed
Vendors
Microsoft
Products
Azure Functions
CVE-2024-43610

Copilot Studio Information Disclosure Vulnerability

Exposure of Sensitive Information to an Unauthorized Actor in Copilot Studio allows a unauthenticated attacker to view sensitive information through network attack vector

CVSS 3.1 · 7.4 High EPSS 1.0% KEV · Not listed
Vendors
Microsoft
Products
Copilot Studio