Archive
2 February 2024
Vulnerabilities first published on this day (UTC), newest first.
153 results · Feed
-
Medium 5.9
IBM PowerSC information disclosure
IBM PowerSC 1.3, 2.0, and 2.1 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 275117.
-
High 8.3
Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
-
Medium 6.1
IBM PowerSC HTML injection
IBM PowerSC 1.3, 2.0, and 2.1 is vulnerable to HTML injection. A remote attacker could inject malicious HTML code, which when viewed, would be executed in the victim's Web browser within the security context of the hosting site. IBM X-Force ID: 275113.
-
High 7.5
IBM PowerSC information Disclosure
IBM PowerSC 1.3, 2.0, and 2.1 uses an inadequate account lockout setting that could allow a remote attacker to brute force account credentials. IBM X-Force ID: 275107.
-
Critical 9.8
An issue in Blurams Lumi Security Camera (A31C) v23.0406.435.4120 allows attackers to execute arbitrary code.
-
High 7.5
An issue in Software FX Chart FX 7 version 7.0.4962.20829 allows attackers to enumerate and read files from the local f…
-
High 7.8
An issue was discovered in the Archibus app 4.0.3 for iOS. It uses a local database that is synchronized with a Web cen…
-
Critical 9.8
Zoho ManageEngine ADAudit Plus through 7250 allows SQL Injection in the aggregate report feature.
-
Critical 9.8
Zoho ManageEngine ADAudit Plus through 7250 is vulnerable to SQL Injection in the report export option.
-
High 7.8
Graphviz 2.36.0 through 9.x before 10.0.1 has an out-of-bounds read via a crafted config6a file. NOTE: exploitability m…
-
Medium 5.4CVE-2023-46344 Public exploit
A vulnerability in Solar-Log Base 15 Firmware 6.0.1 Build 161, and possibly other Solar-Log Base products, allows an at…
-
Medium 5.4
A stored cross-site scripting (XSS) vulnerability in the NOC component of Nagios XI version up to and including 2024R1 …
-
High 7.5
Ylianst MeshCentral 1.1.16 suffers from Use of a Broken or Risky Cryptographic Algorithm.
Ylianst MeshCentral 1.1.16 suffers from Use of a Broken or Risky Cryptographic Algorithm.
-
Medium 6.8
An issue in Blurams Lumi Security Camera (A31C) v.2.3.38.12558 allows a physically proximate attackers to execute arbit…
-
Medium 6.1
Cross-site scripting (XSS) vulnerability in XunRuiCMS versions v4.6.2 and before, allows remote attackers to obtain sen…
-
High 8.8
Cross Site Request Forgery vulnerability in flusity-CMS v.2.33 allows a remote attacker to execute arbitrary code via t…
-
High 7.5
MRCMS 3.0 contains an Arbitrary File Read vulnerability in /admin/file/edit.do as the incoming path parameter is not fi…
-
Critical 9.8
JFinalCMS 5.0.0 is vulnerable to SQL injection via /admin/content/data.
-
Medium 6.1
MRCMS 3.0 contains a Cross-Site Scripting (XSS) vulnerability via /admin/system/saveinfo.do.
-
Critical 9.8
Aprktool before 2.9.3 on Windows allows ../ and /.. directory traversal.
-
High 8.8
Cross Site Request Forgery (CSRF) vulnerability in flusity-CMS v.2.33, allows remote attackers to execute arbitrary cod…
-
Critical 9.8CVE-2024-23746 Public exploit
Miro Desktop 0.8.18 on macOS allows local Electron code injection via a complex series of steps that might be usable in…
-
High 8.1
XenForo before 2.2.14 allows Directory Traversal (with write access) by an authenticated user who has permissions to ad…
-
Critical 9.8
Beetl Server-Side Template Injection vulnerability
Before Beetl v3.15.12, the rendering template has a server-side template injection (SSTI) vulnerability. When the incoming template is controllable, it will be filtered by the DefaultNativeSecurityManager blacklist. Because blacklist filtering is not strict, …
-
Critical 9.8
Vinchin Backup & Recovery v7.2 was discovered to be configured with default root credentials.
-
Critical 9.8
Vinchin Backup & Recovery v7.2 was discovered to use default MYSQL credentials.
-
High 8.8
Vinchin Backup & Recovery v7.2 was discovered to contain an authenticated remote code execution (RCE) vulnerability via…
-
Critical 9.8
An issue was discovered in GTB Central Console 15.17.1-30814.NG. The method setTermsHashAction at /opt/webapp/lib/PureA…
-
High 7.2
An issue was discovered in GTB Central Console 15.17.1-30814.NG. The method systemSettingsDnsDataAction at /opt/webapp/…
-
High 7.5
Directory Traversal Vulnerability in LiveConfig before v.2.5.2 allows a remote attacker to obtain sensitive information…
-
High 8.8
Directory Traversal vulnerability in Kihron ServerRPExposer v.1.0.2 and before allows a remote attacker to execute arbi…
-
High 8.8
Vinchin Backup & Recovery v7.2 was discovered to contain an authenticated remote code execution (RCE) vulnerability via…
-
High 8.8CVE-2024-22899 Public exploit
Vinchin Backup & Recovery v7.2 was discovered to contain an authenticated remote code execution (RCE) vulnerability via…