9 July 2024

11 results · Clear filters · Feed

• High 7.4
  CVE-2024-31320 Public exploit

  In setSkipPrompt of AssociationRequest.java , there is a possible way to establish a companion device association witho…

  Google Android Android
  Jul 9, 2024
• High 7.8
  CVE-2024-31317 Public exploit

  In multiple functions of ZygoteProcess.java, there is a possible way to achieve code execution as any app via WRITE_SEC…

  Google Android Android
  Jul 9, 2024
• High 7.5
  CVE-2024-38112 Exploited Public exploit EPSS 84%

  Windows MSHTML Platform Spoofing Vulnerability

  Windows MSHTML Platform Spoofing Vulnerability

  Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
  Jul 9, 2024

  KEV Jul 9, 2024
• High 7.8
  CVE-2024-38080 Exploited Public exploit

  Windows Hyper-V Elevation of Privilege Vulnerability

  Windows Hyper-V Elevation of Privilege Vulnerability

  Microsoft Windows Server 2022 Windows 11 version 23H2 Windows 11 version 22H2 Windows
  Jul 9, 2024

  KEV Jul 9, 2024
• Critical 9.8
  CVE-2024-38077 Public exploit EPSS 84%

  Windows Remote Desktop Licensing Service Remote Code Execution Vulnerability

  Windows Remote Desktop Licensing Service Remote Code Execution Vulnerability

  Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows Server 2022 Windows
  Jul 9, 2024
• Medium 5.5
  CVE-2024-38041 Public exploit

  Windows Kernel Information Disclosure Vulnerability

  Windows Kernel Information Disclosure Vulnerability

  Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
  Jul 9, 2024
• Critical 9.0
  CVE-2024-3596 Public exploit EPSS 15%

  RADIUS Protocol under RFC2865 is vulnerable to forgery attacks.

  RADIUS Protocol under RFC 2865 is susceptible to forgery attacks by a local attacker who can modify any valid Response (Access-Accept, Access-Reject, or Access-Challenge) to any other response using a chosen-prefix collision attack against MD5 Response Authen…

  IETF RFC krb5 freeradius Debian Ubuntu Alpine
  Jul 9, 2024
• High 7.5
  CVE-2024-5633 Public exploit

  Longse model LBH30FE200W cameras, as well as products based on this device, provide an unrestricted access for an attac…

  Longse Technology Zamel LBH30FE200W ZMB-01/C
  Jul 9, 2024
• Medium 6.3
  CVE-2023-48194 Public exploit

  Vulnerability in Tenda AC8v4 .V16.03.34.09 due to sscanf and the last digit of s8 being overwritten with \x0. After exe…

  Jul 9, 2024
• Medium 5.4
  CVE-2024-39031 Public exploit

  Silverpeas Core Cross-site Scripting vulnerability

  In Silverpeas Core <= 6.3.5, in Mes Agendas, a user can create new events and add them to their calendar. Additionally, users can invite others from the same domain, including administrators, to these events. A standard user can inject an XSS payload into the…

  org.silverpeas.core:silverpeas-core-web org.silverpeas.core:silverpeas-core-rs Maven
  Jul 9, 2024
• High 7.8
  CVE-2024-39069 Public exploit

  An issue in ifood Order Manager v3.35.5 'Gestor de Peddios.exe' allows attackers to execute arbitrary code via a DLL hi…

  Jul 9, 2024