171
|
- |
|
-
|
-
|
An arbitrary file upload vulnerability in the Media Manager function of Closed-Loop Technology CLESS Server v4.5.2 allows attackers to execute arbitrary code via uploading a crafted PHP file to the u…
New
|
-
|
CVE-2024-40125
|
2024-09-20 22:35 |
2024-09-20 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
172
|
- |
|
-
|
-
|
Directory Traversal in the web interface of the Tiptel IP 286 with firmware version 2.61.13.10 allows attackers to overwrite arbitrary files on the phone via the Ringtone upload function.
New
|
-
|
CVE-2024-33109
|
2024-09-20 22:35 |
2024-09-20 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
173
|
6.1 |
MEDIUM
Network
|
jetbrains
|
intellij_idea
|
In JetBrains IntelliJ IDEA before 2024.1 hTML injection via the project name was possible
Update
|
CWE-79
Cross-site Scripting
|
CVE-2024-46970
|
2024-09-20 22:23 |
2024-09-16 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
174
|
- |
|
-
|
-
|
This vulnerability exists in Apex Softcell LD DP Back Office due to improper validation of certain parameters (cCdslClicentcode and cLdClientCode) in the API endpoint. An authenticated remote attacke…
New
|
CWE-359
Exposure of Private Personal Information to an Unauthorized Actor
|
CVE-2024-47085
|
2024-09-20 22:15 |
2024-09-19 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
175
|
5.0 |
MEDIUM
Network
|
nozominetworks
|
cmc guardian
|
An access control vulnerability was discovered in the Reports section due to a specific access restriction not being properly enforced for users with limited privileges.
If a logged-in user with r…
Update
|
CWE-863
Incorrect Authorization
|
CVE-2024-4465
|
2024-09-20 22:15 |
2024-09-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
176
|
6.5 |
MEDIUM
Network
|
mintplexlabs
|
anythingllm
|
mintplex-labs/anything-llm is affected by an uncontrolled resource consumption vulnerability in its upload file endpoint, leading to a denial of service (DOS) condition. Specifically, the server can …
Update
|
CWE-400
Uncontrolled Resource Consumption
|
CVE-2024-3153
|
2024-09-20 22:15 |
2024-06-7 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
177
|
- |
|
-
|
-
|
A Denial of Service (Dos) vulnerability in Nozomi Networks Guardian, caused by improper input validation in certain fields used in the Radius parsing functionality of our IDS, allows an unauthenticat…
Update
|
-
|
CVE-2024-0218
|
2024-09-20 22:15 |
2024-04-11 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
178
|
9.8 |
CRITICAL
Network
artistscope
|
artisbrowser
|
An issue in ArtistScope ArtisBrowser v.34.1.5 and before allows an attacker to bypass intended access restrictions via interaction with the com.artis.browser.IntentReceiverActivity component. NOTE: t…
Update
|
CWE-94
Code Injection
|
CVE-2023-49000
|
2024-09-20 22:15 |
2023-12-28 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
179
|
6.5 |
MEDIUM
Network
|
nozominetworks
|
cmc guardian
|
A SQL Injection vulnerability has been found in Nozomi Networks Guardian and CMC, due to improper input validation in certain parameters used in the Query functionality.
Authenticated users may be ab…
Update
|
CWE-89
SQL Injection
|
CVE-2023-2567
|
2024-09-20 22:15 |
2023-09-19 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
180
|
7.0 |
HIGH
Local
|
nozominetworks
|
cmc guardian
|
In certain conditions, depending on timing and the usage of the Chrome web browser, Guardian/CMC versions before 22.6.2 do not always completely invalidate the user session upon logout. Thus an authe…
Update
|
CWE-384
Session Fixation
|
CVE-2023-24477
|
2024-09-20 22:15 |
2023-08-9 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|