Threat and Vulnerability Intelligence Database

Example Searches:

CVE-2023-36434	Windows IIS Server Elevation of Privilege Vulnerability Description: Windows IIS Server Elevation of Privilege Vulnerability CVSS: CRITICAL (9.8) EPSS Score: 0.05% Source: CVE December 11th, 2024 (4 months ago)
CVE-2023-35349	Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability Description: Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability CVSS: CRITICAL (9.8) EPSS Score: 0.22% Source: CVE December 11th, 2024 (4 months ago)
CVE-2024-43468	Microsoft Configuration Manager Remote Code Execution Vulnerability Description: Microsoft Configuration Manager Remote Code Execution Vulnerability CVSS: CRITICAL (9.8) EPSS Score: 0.05% Source: CVE December 9th, 2024 (4 months ago)
CVE-2024-43498	.NET and Visual Studio Remote Code Execution Vulnerability Description: .NET and Visual Studio Remote Code Execution Vulnerability CVSS: CRITICAL (9.8) EPSS Score: 0.16% Source: CVE November 27th, 2024 (5 months ago)
CVE-2024-49038	Microsoft Copilot Studio Elevation Of Privilege Vulnerability Description: Improper neutralization of input during web page generation ('Cross-site Scripting') in Copilot Studio by an unauthorized attacker leads to elevation of privilege over a network. CVSS: CRITICAL (9.3) EPSS Score: 0.17% Source: CVE November 27th, 2024 (5 months ago)
CVE-2024-43639	Windows KDC Proxy Remote Code Execution Vulnerability Description: Windows KDC Proxy Remote Code Execution Vulnerability CVSS: CRITICAL (9.8) EPSS Score: 0.16% Source: CVE November 27th, 2024 (5 months ago)
CVE-2024-43602	Azure CycleCloud Remote Code Execution Vulnerability Description: Azure CycleCloud Remote Code Execution Vulnerability CVSS: CRITICAL (9.9) EPSS Score: 0.07% Source: CVE November 27th, 2024 (5 months ago)
CVE-2023-31222	Medtronic Paceart MSMQ Deserialization of Untrusted Data Description: Deserialization of untrusted data in Microsoft Messaging Queuing Service in Medtronic's Paceart Optima versions 1.11 and earlier on Windows allows an unauthorized user to impact a healthcare delivery organization’s Paceart Optima system cardiac device causing data to be deleted, stolen, or modified, or the Paceart Optima system being used for further network penetration via network connectivity. CVSS: CRITICAL (9.8) EPSS Score: 0.11% Source: CVE November 27th, 2024 (5 months ago)