Vulnérabilités
Aggrégat CVE / GHSA / KEV / OSV — filtrage par étiquette et catégorie.
| ID | Titre | |
|---|---|---|
| CVE-2024-30040 KEV |
|
[KEV] Vulnérabilité dans Microsoft windows (CVE-2024-30040)
vulnérabilité dans Microsoft windows (CVE-2024-30040). Risque d'opérations non autorisées ou de divulgation. Inscrit au CISA KEV — exploitation active confirmée.
|
| CVE-2024-30051 KEV |
|
[KEV] Vulnérabilité dans Microsoft dwm-core-library (CVE-2024-30051)
vulnérabilité dans Microsoft dwm-core-library (CVE-2024-30051). Risque d'opérations non autorisées ou de divulgation. Inscrit au CISA KEV — exploitation active confirmée.
|
| CVE-2024-29988 KEV |
|
[KEV] Vulnérabilité dans Microsoft smartscreen-prompt (CVE-2024-29988)
vulnérabilité dans Microsoft smartscreen-prompt (CVE-2024-29988). Risque d'opérations non autorisées ou de divulgation. Inscrit au CISA KEV — exploitation active confirmée.
|
| CVE-2022-38028 KEV |
|
[KEV] Vulnérabilité dans Microsoft windows (CVE-2022-38028)
vulnérabilité dans Microsoft windows (CVE-2022-38028). Risque d'opérations non autorisées ou de divulgation. Inscrit au CISA KEV — exploitation active confirmée.
|
| CVE-2024-3566 |
|
Injection de commande dans node (CVE-2024-3566)
injection de commande dans node (CVE-2024-3566). L'exploitation peut entraîner la prise de contrôle totale du système. Exploitable via ``cmd.exe``. Atténuation : mise à jour vers `18.19.0` ou plus.
|
| CVE-2024-26257 |
|
Microsoft Excel Remote Code Execution Vulnerability
Microsoft Excel Remote Code Execution Vulnerability
|
| CVE-2023-24955 KEV |
|
[KEV] Injection de code dans Microsoft sharepoint-server (CVE-2023-24955)
injection de code dans Microsoft sharepoint-server (CVE-2023-24955). Risque d'opérations non autorisées ou de divulgation. Inscrit au CISA KEV — exploitation active confirmée.
|
| CVE-2024-26196 |
|
Microsoft Edge for Android (Chromium-based) Information Disclosure Vulnerability
Microsoft Edge for Android (Chromium-based) Information Disclosure Vulnerability
|
| CVE-2024-21338 KEV |
|
[KEV] Vulnérabilité dans Microsoft windows (CVE-2024-21338)
vulnérabilité dans Microsoft windows (CVE-2024-21338). L'exploitation peut entraîner la prise de contrôle totale du système. Inscrit au CISA KEV — exploitation active confirmée.
|
| CVE-2023-29360 KEV |
|
[KEV] Vulnérabilité dans Microsoft streaming-service (CVE-2023-29360)
vulnérabilité dans Microsoft streaming-service (CVE-2023-29360). Risque d'opérations non autorisées ou de divulgation. Inscrit au CISA KEV — exploitation active confirmée.
|
| CVE-2024-26188 |
|
Microsoft Edge (Chromium-based) Spoofing Vulnerability
Microsoft Edge (Chromium-based) Spoofing Vulnerability
|
| CVE-2024-26192 |
|
Microsoft Edge (Chromium-based) Information Disclosure Vulnerability
Microsoft Edge (Chromium-based) Information Disclosure Vulnerability
|
| CVE-2024-21423 |
|
Microsoft Edge (Chromium-based) Information Disclosure Vulnerability
Microsoft Edge (Chromium-based) Information Disclosure Vulnerability
|
| CVE-2024-21410 KEV |
|
[KEV] Contournement d'authentification dans Microsoft exchange-server (CVE-2024-21410)
contournement d'authentification dans Microsoft exchange-server (CVE-2024-21410). Risque d'opérations non autorisées ou de divulgation. Inscrit au CISA KEV — exploitation active confirmée.
|
| CVE-2024-21420 |
|
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
|
| CVE-2024-21404 |
|
.NET Denial of Service Vulnerability
.NET Denial of Service Vulnerability
|
| CVE-2024-21405 |
|
Microsoft Message Queuing (MSMQ) Elevation of Privilege Vulnerability
Microsoft Message Queuing (MSMQ) Elevation of Privilege Vulnerability
|
| CVE-2024-21406 |
|
Windows Printing Service Spoofing Vulnerability
Windows Printing Service Spoofing Vulnerability
|
| CVE-2024-21397 |
|
Microsoft Azure File Sync Elevation of Privilege Vulnerability
Microsoft Azure File Sync Elevation of Privilege Vulnerability
|
| CVE-2024-21401 |
|
Microsoft Entra Jira Single-Sign-On Plugin Elevation of Privilege Vulnerability
Microsoft Entra Jira Single-Sign-On Plugin Elevation of Privilege Vulnerability
|
| CVE-2024-21403 |
|
Microsoft Azure Kubernetes Service Confidential Container Elevation of Privilege Vulnerability
Microsoft Azure Kubernetes Service Confidential Container Elevation of Privilege Vulnerability
|
| CVE-2024-21391 |
|
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
|
| CVE-2024-21393 |
|
Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability
Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability
|
| CVE-2024-21394 |
|
Dynamics 365 Field Service Spoofing Vulnerability
Dynamics 365 Field Service Spoofing Vulnerability
|
| CVE-2024-21395 |
|
Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability
Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability
|
| CVE-2024-21396 |
|
Dynamics 365 Sales Spoofing Vulnerability
Dynamics 365 Sales Spoofing Vulnerability
|
| CVE-2024-21380 |
|
Microsoft Dynamics Business Central/NAV Information Disclosure Vulnerability
Microsoft Dynamics Business Central/NAV Information Disclosure Vulnerability
|
| CVE-2024-21381 |
|
Microsoft Azure Active Directory B2C Spoofing Vulnerability
Microsoft Azure Active Directory B2C Spoofing Vulnerability
|
| CVE-2024-21384 |
|
Microsoft Office OneNote Remote Code Execution Vulnerability
Microsoft Office OneNote Remote Code Execution Vulnerability
|
| CVE-2024-21386 |
|
.NET Denial of Service Vulnerability
.NET Denial of Service Vulnerability
|
| CVE-2024-21389 |
|
Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability
Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability
|
| CVE-2024-21374 |
|
Microsoft Teams for Android Information Disclosure Vulnerability
Microsoft Teams for Android Information Disclosure Vulnerability
|
| CVE-2024-21375 |
|
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
|
| CVE-2024-21376 |
|
Microsoft Azure Kubernetes Service Confidential Container Remote Code Execution Vulnerability
Microsoft Azure Kubernetes Service Confidential Container Remote Code Execution Vulnerability
|
| CVE-2024-21377 |
|
Windows DNS Information Disclosure Vulnerability
Windows DNS Information Disclosure Vulnerability
|
| CVE-2024-21378 |
|
Microsoft Outlook Remote Code Execution Vulnerability
Microsoft Outlook Remote Code Execution Vulnerability
|
| CVE-2024-21379 |
|
Microsoft Word Remote Code Execution Vulnerability
Microsoft Word Remote Code Execution Vulnerability
|
| CVE-2024-21367 |
|
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
|
| CVE-2024-21368 |
|
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
|
| CVE-2024-21369 |
|
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
|
| CVE-2024-21370 |
|
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
|
| CVE-2024-21371 |
|
Windows Kernel Elevation of Privilege Vulnerability
Windows Kernel Elevation of Privilege Vulnerability
|
| CVE-2024-21372 |
|
Windows OLE Remote Code Execution Vulnerability
Windows OLE Remote Code Execution Vulnerability
|
| CVE-2024-21361 |
|
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
|
| CVE-2024-21362 |
|
Windows Kernel Security Feature Bypass Vulnerability
Windows Kernel Security Feature Bypass Vulnerability
|
| CVE-2024-21363 |
|
Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
|
| CVE-2024-21364 |
|
Microsoft Azure Site Recovery Elevation of Privilege Vulnerability
Microsoft Azure Site Recovery Elevation of Privilege Vulnerability
|
| CVE-2024-21365 |
|
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
|
| CVE-2024-21366 |
|
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
|
| CVE-2024-21355 |
|
Microsoft Message Queuing (MSMQ) Elevation of Privilege Vulnerability
Microsoft Message Queuing (MSMQ) Elevation of Privilege Vulnerability
|