Archive
8 November 2024
Vulnerabilities first published on this day (UTC), newest first.
122 results · Feed
-
Medium 6.5
Dell PowerProtect DD, versions prior to 8.1.0.0, 7.13.1.10, 7.10.1.40, and 7.7.5.50, contains an access control vulnera…
-
Medium 6.8
Dell PowerProtect Data Domain, versions prior to 8.1.0.0, 7.13.1.10, 7.10.1.40, and 7.7.5.50, contains an escalation of…
-
Low 3.1
Dell PowerProtect DD, versions prior to 7.7.5.50, contains an Exposure of Sensitive Information to an Unauthorized Acto…
-
Critical 9.8
The pwrstudio web application of EV Charger (in the server in Circontrol Raption through 5.6.2) is vulnerable to OS com…
-
Critical 9.8
Trimble TM4Web 22.2.0 allows unauthenticated attackers to access /inc/tm_ajax.msw?func=UserfromUUID&uuid= to retrieve t…
-
Critical 9.3
dingfanzu CMS V1.0 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/doAdminAction…
-
Medium 5.4
hopetree izone lts c011b48 contains a Cross Site Scripting (XSS) vulnerability in the article comment function. In \app…
-
High 8.8
A vulnerability in a weak JWT token in Watcharr v1.43.0 and below allows attackers to perform privilege escalation usin…
-
High 8.8
SeaCms 13.1 is vulnerable to code injection in the notification module of the member message notification module in the…
-
Critical 9.1
hopetree izone lts c011b48 contains a server-side request forgery (SSRF) vulnerability in the active push function as \…
-
High 8.8
The theme.php file in SDCMS 2.8 has a command execution vulnerability that allows for the execution of system commands
-
Medium 5.5
vmir e8117 was discovered to contain a segmentation violation via the import_function function at /src/vmir_wasm_parser…
-
Medium 5.5
vmir e8117 was discovered to contain a segmentation violation via the function_prepare_parse function at /src/vmir_func…
-
Medium 5.5
vmir e8117 was discovered to contain a segmentation violation via the wasm_parse_block function at /src/vmir_wasm_parse…
-
High 7.8
vmir e8117 was discovered to contain a heap buffer overflow via the wasm_call function at /src/vmir_wasm_parser.c.
-
Medium 5.5
vmir e8117 was discovered to contain a segmentation violation via the export_function function at /src/vmir_wasm_parser…
-
Critical 9.8
vmir e8117 was discovered to contain a stack overflow via the init_local_vars function at /src/vmir_wasm_parser.c.
-
Medium 6.2
wac commit 385e1 was discovered to contain a heap overflow.
-
Medium 5.5
wac commit 385e1 was discovered to contain a heap overflow via the load_module function at /wac-asan/wa.c. This vulnera…
-
Medium 6.2
wac commit 385e1 was discovered to contain a heap overflow via the interpret function at /wac-asan/wa.c. This vulnerabi…
-
Medium 6.2
wac commit 385e1 was discovered to contain a heap overflow via the setup_call function at /wac-asan/wa.c. This vulnerab…
-
High 7.8
vmir e8117 was discovered to contain a heap buffer overflow via the wasm_parse_section_functions function at /src/vmir_…
-
High 7.5
-
High 8.4
pywasm3 contains a Use-After-Free in ForEachModule
wasm3 139076a contains a Use-After-Free in ForEachModule.
-
High 8.4
pywasm3 has an Invalid Memory Read, Leading to DoS and Potential Code Execution
wasm3 139076a suffers from Invalid Memory Read, leading to DoS and potential Code Execution.
-
High 8.4
wasm3 uncontrolled memory allocation vulnerability
wasm3 139076a contains memory leaks in Read_utf8.
-
High 7.5
wasm-micro-runtime (aka WebAssembly Micro Runtime or WAMR) 06df58f is vulnerable to NULL Pointer Dereference in functio…
-
Critical 9.8
sunniwell HT3300 before 1.0.0.B022.2 is vulnerable to Insecure Permissions. The /usr/local/bin/update program, which is…
-
Medium 6.5
Northern.tech Mender before 3.6.6 and 3.7.x before 3.7.7 allows SSRF.
-
Medium 5.3
Northern.tech Mender before 3.6.5 and 3.7.x before 3.7.5 has Incorrect Access Control.
-
Medium 6.1
An incorrect access control issue in HomeServe Home Repair' android app - 3.3.4 allows a physically proximate attacker …
-
Medium 6.1
An incorrect access control issue in Life: Personal Diary, Journal android app 17.5.0 allows a physically proximate att…
-
Medium 6.5CVE-2024-44765 Public exploit
An Improper Authorization (Access Control Misconfiguration) vulnerability in MGT-COMMERCE GmbH CloudPanel v2.0.0 to v2.…
-
High 8.8
An issue in bytecodealliance wasm-micro-runtime before v.b3f728c and fixed in commit 06df58f allows a remote attacker t…
-
Medium 5.4CVE-2024-51032 Public exploit
A Cross-site Scripting (XSS) vulnerability in manage_recipient.php of Sourcecodester Toll Tax Management System 1.0 all…
-
Medium 6.5CVE-2024-51030 Public exploit
A SQL injection vulnerability in manage_client.php and view_cab.php of Sourcecodester Cab Management System 1.0 allows …
-
Critical 9.8CVE-2024-51211 Scanner template
SQL injection vulnerability exists in OS4ED openSIS-Classic Version 9.1, specifically in the resetuserinfo.php file. Th…
-
High 7.2
File Upload vulnerability in Laravel CMS v.1.4.7 and before allows a remote attacker to execute arbitrary code via the …
-
Medium 4.7
07FLYCMS V1.3.9 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component http://erp.07fly.net:80…
-
Medium 6.5
An issue Hoosk v1.7.1 allows a remote attacker to execute arbitrary code via a crafted script to the config.php compone…