Archive
13 November 2024
Vulnerabilities first published on this day (UTC), newest first.
90 results · Clear filters · Feed
-
High 7.8
Insufficient validation in Ivanti Secure Access Client before 22.7R4 allows a local authenticated attacker to escalate …
-
High 7.2
SQL injection in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6 November Security Update allo…
-
High 7.5
An out of bounds read in Ivanti Connect Secure before version 22.7R2.3 allows a remote unauthenticated attacker to trig…
-
High 7.5
An issue in how XINJE XD5E-24R and XL5E-16T v3.5.3b handles TCP protocol messages allows attackers to cause a Denial of…
-
High 8.8
Tenda G3 v3.0 v15.11.0.20 was discovered to contain a command injection vulnerability via the formSetDebugCfg function.
-
High 8.8
Tenda G3 v3.0 v15.11.0.20 was discovered to contain a stack overflow via the formSetPortMapping function.
-
High 8.8
Tenda G3 v3.0 v15.11.0.20 was discovered to contain a command injection vulnerability via the formSetUSBPartitionUmount…
-
High 7.5
A full path disclosure in Cybele Software Thinfinity Workspace before v7.0.2.113 allows attackers to obtain the root pa…
-
High 8.1
Incorrect access control in Cybele Software Thinfinity Workspace before v7.0.3.109 allows attackers to gain access to a…
-
High 7.3
Cybele Software Thinfinity Workspace before v7.0.2.113 was discovered to contain an access control issue in the Create …