Vulnerabilities (CVE)

Filtered by NVD-CWE-noinfo
Total 31934 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2022-23256 1 Microsoft 1 Azure Data Explorer 2025-01-02 4.3 MEDIUM 4.3 MEDIUM
Azure Data Explorer Spoofing Vulnerability
CVE-2022-22018 1 Microsoft 1 Hevc Video Extensions 2025-01-02 6.8 MEDIUM N/A
HEVC Video Extensions Remote Code Execution Vulnerability
CVE-2022-22713 1 Microsoft 2 Windows 10, Windows Server 2025-01-02 1.9 LOW N/A
Windows Hyper-V Denial of Service Vulnerability
CVE-2022-24527 1 Microsoft 1 Endpoint Configuration Manager 2025-01-02 4.6 MEDIUM N/A
Microsoft Endpoint Configuration Manager Elevation of Privilege Vulnerability
CVE-2022-23267 2 Fedoraproject, Microsoft 6 Fedora, .net, .net Core and 3 more 2025-01-02 5.0 MEDIUM N/A
.NET and Visual Studio Denial of Service Vulnerability
CVE-2022-22019 1 Microsoft 10 Windows 10, Windows 11, Windows 7 and 7 more 2025-01-02 6.8 MEDIUM N/A
Remote Procedure Call Runtime Remote Code Execution Vulnerability
CVE-2022-22014 1 Microsoft 9 Windows 10, Windows 11, Windows 7 and 6 more 2025-01-02 6.5 MEDIUM N/A
Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability
CVE-2022-24466 1 Microsoft 5 Windows 10, Windows 11, Windows Server 2016 and 2 more 2025-01-02 2.3 LOW 4.1 MEDIUM
Windows Hyper-V Security Feature Bypass Vulnerability
CVE-2022-21972 1 Microsoft 11 Windows 10, Windows 11, Windows 7 and 8 more 2025-01-02 9.3 HIGH N/A
Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability
CVE-2022-22021 1 Microsoft 1 Edge Chromium 2025-01-02 5.1 MEDIUM N/A
Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
CVE-2024-29074 1 Openatom 1 Openharmony 2025-01-02 N/A 8.8 HIGH
in OpenHarmony v3.2.4 and prior versions allow a local attacker arbitrary code execution in any apps through improper input.
CVE-2024-11111 1 Google 1 Chrome 2025-01-02 N/A 4.3 MEDIUM
Inappropriate implementation in Autofill in Google Chrome prior to 131.0.6778.69 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium)
CVE-2024-11110 1 Google 1 Chrome 2025-01-02 N/A 6.5 MEDIUM
Inappropriate implementation in Extensions in Google Chrome prior to 131.0.6778.69 allowed a remote attacker to bypass site isolation via a crafted Chrome Extension. (Chromium security severity: High)
CVE-2024-11114 2 Google, Microsoft 2 Chrome, Windows 2025-01-02 N/A 8.3 HIGH
Inappropriate implementation in Views in Google Chrome on Windows prior to 131.0.6778.69 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Medium)
CVE-2024-11115 2 Apple, Google 2 Iphone Os, Chrome 2025-01-02 N/A 8.8 HIGH
Insufficient policy enforcement in Navigation in Google Chrome on iOS prior to 131.0.6778.69 allowed a remote attacker to perform privilege escalation via a series of UI gestures. (Chromium security severity: Medium)
CVE-2024-11116 1 Google 1 Chrome 2025-01-02 N/A 4.3 MEDIUM
Inappropriate implementation in Blink in Google Chrome prior to 131.0.6778.69 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium)
CVE-2024-11117 1 Google 1 Chrome 2025-01-02 N/A 4.3 MEDIUM
Inappropriate implementation in FileSystem in Google Chrome prior to 131.0.6778.69 allowed a remote attacker to bypass filesystem restrictions via a crafted HTML page. (Chromium security severity: Low)
CVE-2024-28234 1 Contao 1 Contao 2025-01-02 N/A 4.7 MEDIUM
Contao is an open source content management system. Starting in version 2.0.0 and prior to versions 4.13.40 and 5.3.4, it is possible to inject CSS styles via BBCode in comments. Installations are only affected if BBCode is enabled. Contao versions 4.13.40 and 5.3.4 have a patch for this issue. As a workaround, disable BBCode for comments.
CVE-2024-7256 1 Google 2 Android, Chrome 2025-01-02 N/A 8.8 HIGH
Insufficient data validation in Dawn in Google Chrome on Android prior to 127.0.6533.88 allowed a remote attacker to execute arbitrary code via a crafted HTML page. (Chromium security severity: High)
CVE-2024-7023 2 Google, Microsoft 2 Chrome, Windows 2025-01-02 N/A 8.8 HIGH
Insufficient data validation in Updater in Google Chrome prior to 128.0.6537.0 allowed a remote attacker to perform privilege escalation via a malicious file. (Chromium security severity: Medium)