CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
CVE-2024-7593 Technical Vulnerability Analysis & Patch Advisory (CVSS 9.8)
[Affected Scope] Systems running unpatched versions impacted by CVE-2024-7593
[Impact] Incorrect implementation of an authentication algorithm in Ivanti vTM other than versions 22.2R1 or 22.7R2 allows a remote unauthenticated a...
[Mitigation] Apply vendor security patches and restrict external network exposure.
Microsoft SharePoint Server Elevation of Privilege Vulnerability (CVE-2023-29357) Security Advisory
[Affected Scope] Microsoft SharePoint Server 2019 and SharePoint Server Subscription Edition.
[Impact] An unauthenticated attacker can send a specially crafted JWT token to bypass authentication, gain administrator privileges, and potentially chain it with RCE vulnerabilities.
[Mitigation] Apply the official Microsoft Cumulative Update (CU) immediately and restrict unauthorized access at the network and IIS levels prior to patching.