2024-04-09 - CVE Archive

CVE-2024-28941 Apr 09, 17:15 HIGH This Week

Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

RCE Buffer Overflow Heap Overflow Microsoft Sql Server 2019 +2

NVD

CVSS 3.1

8.8

EPSS

2.3%

CVE-2024-28940 Apr 09, 17:15 HIGH This Week

Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

RCE Buffer Overflow Heap Overflow Microsoft Sql Server 2019 +2

NVD

CVSS 3.1

8.8

EPSS

2.4%

CVE-2024-28939 Apr 09, 17:15 HIGH This Week

Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

RCE Information Disclosure Microsoft Sql Server 2019 Sql Server 2022 +1

NVD

CVSS 3.1

8.8

EPSS

2.3%

CVE-2024-28938 Apr 09, 17:15 HIGH This Week

Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

RCE Buffer Overflow Information Disclosure Microsoft Sql Server 2019 +4

NVD

CVSS 3.1

8.8

EPSS

2.3%

CVE-2024-28937 Apr 09, 17:15 HIGH This Week

Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

RCE Buffer Overflow Heap Overflow Microsoft Sql Server 2019 +4

NVD

CVSS 3.1

8.8

EPSS

2.3%

CVE-2024-28936 Apr 09, 17:15 HIGH This Week

Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

RCE Integer Overflow Microsoft Sql Server 2019 Sql Server 2022 +3

NVD

CVSS 3.1

8.8

EPSS

2.4%

CVE-2024-28935 Apr 09, 17:15 HIGH This Week

Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

RCE Buffer Overflow Heap Overflow Microsoft Sql Server 2019 +4

NVD

CVSS 3.1

8.8

EPSS

2.4%

CVE-2024-28934 Apr 09, 17:15 HIGH This Week

Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

RCE Buffer Overflow Microsoft Stack Overflow Sql Server 2019 +4

NVD

CVSS 3.1

8.8

EPSS

2.4%

CVE-2024-28933 Apr 09, 17:15 HIGH This Week

Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

RCE Integer Overflow Microsoft Sql Server 2019 Sql Server 2022 +3

NVD

CVSS 3.1

8.8

EPSS

2.4%

CVE-2024-28932 Apr 09, 17:15 HIGH This Week

Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

RCE Buffer Overflow Heap Overflow Microsoft Sql Server 2019 +4

NVD

CVSS 3.1

8.8

EPSS

2.4%

CVE-2024-28931 Apr 09, 17:15 HIGH This Week

Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

RCE Integer Overflow Microsoft Sql Server 2019 Sql Server 2022 +3

NVD

CVSS 3.1

8.8

EPSS

2.4%

CVE-2024-28930 Apr 09, 17:15 HIGH This Week

Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

RCE Integer Overflow Microsoft Sql Server 2019 Sql Server 2022 +3

NVD

CVSS 3.1

8.8

EPSS

2.4%

CVE-2024-28929 Apr 09, 17:15 HIGH This Week

Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

RCE Integer Overflow Microsoft Sql Server 2019 Sql Server 2022 +3

NVD

CVSS 3.1

8.8

EPSS

2.4%

CVE-2024-28927 Apr 09, 17:15 HIGH This Week

Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

RCE Buffer Overflow Heap Overflow Microsoft Sql Server 2019 +2

NVD

CVSS 3.1

8.8

EPSS

2.4%

CVE-2024-28926 Apr 09, 17:15 HIGH This Week

Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

RCE Buffer Overflow Heap Overflow Microsoft Sql Server 2019 +2

NVD

CVSS 3.1

8.8

EPSS

2.3%

CVE-2024-28915 Apr 09, 17:15 HIGH This Week

Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

RCE Buffer Overflow Heap Overflow Microsoft Sql Server 2019 +2

NVD

CVSS 3.1

8.8

EPSS

2.2%

CVE-2024-28914 Apr 09, 17:15 HIGH This Week

Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

RCE Buffer Overflow Heap Overflow Microsoft Sql Server 2019 +2

NVD

CVSS 3.1

8.8

EPSS

2.4%

CVE-2024-28913 Apr 09, 17:15 HIGH This Week

Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

RCE Buffer Overflow Heap Overflow Microsoft Sql Server 2019 +2

NVD

CVSS 3.1

8.8

EPSS

2.3%

CVE-2024-28912 Apr 09, 17:15 HIGH This Week

Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

RCE Buffer Overflow Heap Overflow Microsoft Sql Server 2019 +2

NVD

CVSS 3.1

8.8

EPSS

2.3%

CVE-2024-28911 Apr 09, 17:15 HIGH This Week

Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

RCE Buffer Overflow Heap Overflow Microsoft Sql Server 2019 +2

NVD

CVSS 3.1

8.8

EPSS

2.2%

CVE-2024-28910 Apr 09, 17:15 HIGH This Week

Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

RCE Buffer Overflow Heap Overflow Microsoft Sql Server 2019 +2

NVD

CVSS 3.1

8.8

EPSS

2.8%

CVE-2024-28909 Apr 09, 17:15 HIGH This Week

Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

RCE Buffer Overflow Heap Overflow Microsoft Sql Server 2019 +2

NVD

CVSS 3.1

8.8

EPSS

2.4%

CVE-2024-28908 Apr 09, 17:15 HIGH This Week

Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

RCE Buffer Overflow Heap Overflow Microsoft Sql Server 2019 +2

NVD

CVSS 3.1

8.8

EPSS

2.4%

CVE-2024-28906 Apr 09, 17:15 HIGH This Week

Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

RCE Buffer Overflow Heap Overflow Microsoft Sql Server 2019 +2

NVD

CVSS 3.1

8.8

EPSS

2.4%

CVE-2024-26244 Apr 09, 17:15 HIGH This Week

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

RCE Integer Overflow Microsoft Windows 10 1507 Windows 10 1607 +12

NVD

CVSS 3.1

8.8

EPSS

2.0%

CVE-2024-26214 Apr 09, 17:15 HIGH This Week

Microsoft WDAC SQL Server ODBC Driver Remote Code Execution Vulnerability. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

RCE Buffer Overflow Heap Overflow Microsoft Windows 10 1507 +13

NVD

CVSS 3.1

8.8

EPSS

2.0%

CVE-2024-26210 Apr 09, 17:15 HIGH This Week

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

RCE Buffer Overflow Heap Overflow Microsoft Windows 10 1507 +13

NVD

CVSS 3.1

8.8

EPSS

2.0%

CVE-2024-26205 Apr 09, 17:15 HIGH This Week

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

RCE Buffer Overflow Heap Overflow Microsoft Windows 10 1507 +13

NVD

CVSS 3.1

8.8

EPSS

1.8%

CVE-2024-26200 Apr 09, 17:15 HIGH This Week

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

RCE Buffer Overflow Heap Overflow Microsoft Windows 10 1507 +13

NVD

CVSS 3.1

8.8

EPSS

1.8%

CVE-2024-26179 Apr 09, 17:15 HIGH This Week

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

RCE Buffer Overflow Heap Overflow Microsoft Windows 10 1507 +13

NVD

CVSS 3.1

8.8

EPSS

1.8%

CVE-2024-21323 Apr 09, 17:15 HIGH This Week

Microsoft Defender for IoT Remote Code Execution Vulnerability. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

RCE Microsoft Defender For Iot

NVD

CVSS 3.1

8.8

EPSS

3.2%

CVE-2024-20678 Apr 09, 17:15 HIGH This Week

Remote Procedure Call Runtime Remote Code Execution Vulnerability. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

RCE Memory Corruption Microsoft Windows 10 1507 Windows 10 1607 +12

NVD

CVSS 3.1

8.8

EPSS

2.5%

CVE-2024-21756 Apr 09, 15:15 HIGH This Week

A improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet FortiSandbox 4.4.0 through 4.4.3, FortiSandbox 4.2.1 through 4.2.6, FortiSandbox. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Fortinet Command Injection Fortisandbox

NVD

CVSS 3.1

8.8

EPSS

2.2%

CVE-2024-21755 Apr 09, 15:15 HIGH This Week

A improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet FortiSandbox 4.4.0 through 4.4.3, FortiSandbox 4.2.1 through 4.2.6, FortiSandbox. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Fortinet Command Injection Fortisandbox

NVD

CVSS 3.1

8.8

EPSS

2.5%

CVE-2024-27899 Apr 09, 01:15 HIGH This Week

Self-Registration and Modify your own profile in User Admin Application of NetWeaver AS Java does not enforce proper security requirements for the content of the newly defined security answer. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Java Information Disclosure SAP

NVD

CVSS 3.1

8.8

EPSS

0.4%

CVE-2024-3313 Apr 09, 23:15 HIGH This Week

SUBNET Solutions Inc. Rated high severity (CVSS 8.6), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

Information Disclosure

NVD

CVSS 4.0

8.6

EPSS

0.3%

CVE-2023-6964 Apr 09, 19:15 HIGH This Week

The Gutenberg Blocks by Kadence Blocks - Page Builder Features plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 3.1.26 via the. Rated high severity (CVSS 8.5), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

WordPress SSRF Gutenberg Blocks With Ai Wordpress Plugin Kadencewp

NVD VulDB

CVSS 3.1

8.5

EPSS

0.3%

CVE-2024-31370 Apr 09, 09:15 HIGH This Week

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in CodeIsAwesome AIKit aikit-wordpress-ai-writing-assistant-using-gpt3.14.1. Rated high severity (CVSS 8.5), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

WordPress SQLi

NVD VulDB

CVSS 3.1

8.5

EPSS

0.2%

CVE-2024-0598 Apr 09, 19:15 MEDIUM POC PATCH This Month

The Gutenberg Blocks by Kadence Blocks - Page Builder Features plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the contact form message settings in all versions up to and. Rated medium severity (CVSS 4.4), this vulnerability is remotely exploitable. Public exploit code available.

WordPress XSS Gutenberg Blocks With Ai Wordpress Plugin Kadencewp

NVD VulDB

CVSS 3.1

4.4

EPSS

0.4%

CVE-2024-29989 Apr 09, 17:16 HIGH This Week

Azure Monitor Agent Elevation of Privilege Vulnerability. Rated high severity (CVSS 8.4), this vulnerability is low attack complexity. No vendor patch available.

Information Disclosure Microsoft Azure Monitor Agent

NVD

CVSS 3.1

8.4

EPSS

0.7%

CVE-2024-30191 Apr 09, 09:15 HIGH This Week

A vulnerability has been identified in SCALANCE W1748-1 M12 (6GK5748-1GY01-0AA0), SCALANCE W1748-1 M12 (6GK5748-1GY01-0TA0), SCALANCE W1788-1 M12 (6GK5788-1GY01-0AA0), SCALANCE W1788-2 EEC M12. Rated high severity (CVSS 8.4), this vulnerability is low attack complexity. No vendor patch available.

Authentication Bypass Siemens

NVD

CVSS 3.1

8.4

EPSS

0.2%

CVE-2024-2543 Apr 09, 19:15 MEDIUM POC PATCH This Month

The Permalink Manager Lite plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the 'get_uri_editor' function in all versions up to, and including,. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available.

WordPress Authentication Bypass Permalink Manager Lite Wordpress Plugin Permalink Manager Lite Project

NVD GitHub

CVSS 3.1

4.3

EPSS

0.4%

CVE-2024-3446 Apr 09, 20:15 HIGH This Week

A double free vulnerability was found in QEMU virtio devices (virtio-gpu, virtio-serial-bus, virtio-crypto), where the mem_reentrancy_guard flag insufficiently protects against DMA reentrancy issues. Rated high severity (CVSS 8.2), this vulnerability is low attack complexity. No vendor patch available.

RCE Denial Of Service

NVD

CVSS 3.1

8.2

EPSS

0.3%

CVE-2024-20670 Apr 09, 17:15 HIGH This Week

Outlook for Windows Spoofing Vulnerability. Rated high severity (CVSS 8.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Information Disclosure Microsoft Outlook

NVD

CVSS 3.1

8.1

EPSS

2.3%

CVE-2024-23671 Apr 09, 15:15 HIGH This Week

A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiSandbox 4.4.0 through 4.4.3, FortiSandbox 4.2.1 through 4.2.6, FortiSandbox 4.0.0. Rated high severity (CVSS 8.1), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Path Traversal Fortinet Fortisandbox

NVD

CVSS 3.1

8.1

EPSS

1.2%

CVE-2024-28925 Apr 09, 17:15 HIGH This Week

Secure Boot Security Feature Bypass Vulnerability. Rated high severity (CVSS 8.0), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

Buffer Overflow Microsoft Stack Overflow Windows 10 1507 Windows 10 1607 +12

NVD

CVSS 3.1

8.0

EPSS

1.2%

CVE-2024-26240 Apr 09, 17:15 HIGH This Week

Secure Boot Security Feature Bypass Vulnerability. Rated high severity (CVSS 8.0), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

Authentication Bypass Microsoft Windows 10 1507 Windows 10 1607 Windows 10 1809 +11

NVD

CVSS 3.1

8.0

EPSS

1.1%

CVE-2024-26189 Apr 09, 17:15 HIGH This Week

Secure Boot Security Feature Bypass Vulnerability. Rated high severity (CVSS 8.0), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

Authentication Bypass Microsoft Windows 10 1507 Windows 10 1607 Windows 10 1809 +10

NVD

CVSS 3.1

8.0

EPSS

1.4%

CVE-2024-26180 Apr 09, 17:15 HIGH This Week

Secure Boot Security Feature Bypass Vulnerability. Rated high severity (CVSS 8.0), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

Buffer Overflow Microsoft Stack Overflow Windows 10 1507 Windows 10 1607 +11

NVD

CVSS 3.1

8.0

EPSS

1.5%

CVE-2024-26257 Apr 09, 17:15 HIGH This Week

Microsoft Excel Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Microsoft 365 Apps Office Long Term Servicing Channel

NVD

CVSS 3.1

7.8

EPSS

0.5%