Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability CVSSv3.1 8.8 (HIGH) · EPSS 76th percentile
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability CVSSv3.1 8.8 (HIGH) · EPSS 73th percentile
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability CVSSv3.1 8.8 (HIGH) · EPSS 74th percentile
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability CVSSv3.1 8.8 (HIGH) · EPSS 74th percentile
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability CVSSv3.1 8.8 (HIGH) · EPSS 76th percentile
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability CVSSv3.1 8.8 (HIGH) · EPSS 76th percentile
Microsoft Azure Site Recovery Elevation of Privilege Vulnerability CVSSv3.1 9.3 (CRITICAL) · EPSS 46th percentile
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability CVSSv3.1 8.8 (HIGH) · EPSS 74th percentile
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability CVSSv3.1 8.8 (HIGH) · EPSS 76th percentile
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability CVSSv3.1 8.8 (HIGH) · EPSS 74th percentile
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability CVSSv3.1 8.8 (HIGH) · EPSS 76th percentile
Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability CVSSv3.1 8.1 (HIGH) · EPSS 98th percentile
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability CVSSv3.1 8.8 (HIGH) · EPSS 74th percentile
Windows SmartScreen Security Feature Bypass Vulnerability CVSSv3.1 7.6 (HIGH) · EPSS 98th percentile
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability CVSSv3.1 8.8 (HIGH) · EPSS 72th percentile
Microsoft ActiveX Data Objects Remote Code Execution Vulnerability CVSSv3.1 8.8 (HIGH) · EPSS 74th percentile
Windows Kernel Elevation of Privilege Vulnerability CVSSv3.1 7.8 (HIGH) · EPSS 99th percentile
Deserialization of Untrusted Data vulnerability in WP Swings Coupon Referral Program coupon-referral-program allows Object Injection.This issue affects Coupon Referral Program: from n/a through < 1.8.4. CVSSv3.1 10.0 (CRITICAL)
The Awesome Support – WordPress HelpDesk & Support Plugin plugin for WordPress is vulnerable to union-based SQL Injection via the 'q' parameter of the wpas_get_users action in all versions up to, and including, 6.1.7 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated attackers, with subscriber-level access and above, to append additional SQL queries into already ex CVSSv3.1 8.8 (HIGH) · EPSS 48th percentile
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Oduyo Financial Technology Online Collection allows SQL Injection. This issue affects Online Collection: before v.1.0.2. CVSSv3.1 9.8 (CRITICAL) · EPSS 20th percentile
Authorization Bypass Through User-Controlled Key vulnerability in Software Engineering Consultancy Machine Equipment Limited Company Hearing Tracking System allows Authentication Abuse. This issue affects Hearing Tracking System: before for IOS 7.0, for Android Latest release 1.0. CVSSv3.1 8.8 (HIGH) · EPSS 13th percentile
An issue was discovered in MISP before 2.4.184. A client does not need to use POST to start an export generation process. This is related to app/Controller/JobsController.php and app/View/Events/export.ctp. CVSSv3.1 9.8 (CRITICAL) · EPSS 52th percentile
An issue was discovered in MISP before 2.4.184. Organisation logo upload is insecure because of a lack of checks for the file extension and MIME type. CVSSv3.1 9.8 (CRITICAL) · EPSS 51th percentile
A out-of-bounds write in Fortinet FortiOS versions 7.4.0 through 7.4.2, 7.2.0 through 7.2.6, 7.0.0 through 7.0.13, 6.4.0 through 6.4.14, 6.2.0 through 6.2.15, 6.0.0 through 6.0.17, FortiProxy versions 7.4.0 through 7.4.2, 7.2.0 through 7.2.8, 7.0.0 through 7.0.14, 2.0.0 through 2.0.13, 1.2.0 through 1.2.13, 1.1.0 through 1.1.6, 1.0.0 through 1.0.7 allows attacker to execute unauthorized code or commands via specifically crafted requests CVSSv3.1 9.8 (CRITICAL) · EPSS 100th percentile
An issue in Dlink DIR-816A2 v.1.10CNB05 allows a remote attacker to execute arbitrary code via the wizardstep4_ssid_2 parameter in the sub_42DA54 function. CVSSv3.1 9.8 (CRITICAL) · EPSS 82th percentile