1861
|
- |
|
-
|
-
|
The authentication system of Securepoint UTM mishandles OTP keys. This allows the bypassing of second-factor verification (when OTP is enabled) in both the administration web interface and the user p…
|
-
|
CVE-2024-39340
|
2024-09-24 00:15 |
2024-07-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
1862
|
8.8 |
HIGH
Network
|
lunary
|
lunary
|
An Insecure Direct Object Reference (IDOR) vulnerability was identified in lunary-ai/lunary, affecting versions up to and including 1.2.2. This vulnerability allows unauthorized users to view, update…
|
CWE-639
Authorization Bypass Through User-Controlled Key
|
CVE-2024-5128
|
2024-09-24 00:11 |
2024-06-7 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
1863
|
7.8 |
HIGH
Local
|
microsoft
|
windows_server_2008 windows_server_2012 windows_10_1809 windows_server_2019 windows_server_2022 windows_11_21h2 windows_10_21h2 windows_11_22h2 windows_10_22h2 windows_11_2…
|
Windows Security Zone Mapping Security Feature Bypass Vulnerability
|
NVD-CWE-noinfo
|
CVE-2024-30073
|
2024-09-24 00:08 |
2024-09-11 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
1864
|
5.5 |
MEDIUM
Local
|
intel
|
raid_web_console
|
Improper access control in Intel(R) RAID Web Console all versions may allow an authenticated user to potentially enable information disclosure via local access.
|
NVD-CWE-noinfo
|
CVE-2024-28170
|
2024-09-23 23:49 |
2024-09-17 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
1865
|
5.5 |
MEDIUM
Local
|
intel
|
raid_web_console
|
NULL pointer dereference in Intel(R) RAID Web Console software for all versions may allow an authenticated user to potentially enable denial of service via local access.
|
CWE-476
NULL Pointer Dereference
|
CVE-2024-32666
|
2024-09-23 23:47 |
2024-09-17 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
1866
|
4.7 |
MEDIUM
Local
|
linux
|
linux_kernel
|
In the Linux kernel, the following vulnerability has been resolved:
ethtool: check device is present when getting link settings
A sysfs reader can race with a device reset or removal, attempting to…
|
NVD-CWE-noinfo
|
CVE-2024-46679
|
2024-09-23 23:47 |
2024-09-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
1867
|
5.5 |
MEDIUM
Local
|
linux
|
linux_kernel
|
In the Linux kernel, the following vulnerability has been resolved:
Bluetooth: btnxpuart: Fix random crash seen while removing driver
This fixes the random kernel crash seen while removing the driv…
|
NVD-CWE-noinfo
|
CVE-2024-46680
|
2024-09-23 23:45 |
2024-09-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
1868
|
5.7 |
MEDIUM
Adjacent
|
intel
|
raid_web_console
|
Improper access control in Intel(R) RAID Web Console software for all versions may allow an authenticated user to potentially enable denial of service via adjacent access.
|
NVD-CWE-noinfo
|
CVE-2024-32940
|
2024-09-23 23:44 |
2024-09-17 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
1869
|
5.5 |
MEDIUM
Local
|
linux
|
linux_kernel
|
In the Linux kernel, the following vulnerability has been resolved:
bonding: change ipsec_lock from spin lock to mutex
In the cited commit, bond->ipsec_lock is added to protect ipsec_list,
hence xd…
|
CWE-667
Improper Locking
|
CVE-2024-46678
|
2024-09-23 23:44 |
2024-09-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
1870
|
5.5 |
MEDIUM
Local
|
intel
|
raid_web_console
|
Uncaught exception in Intel(R) RAID Web Console software all versions may allow an authenticated user to potentially enable denial of service via local access.
|
NVD-CWE-Other
|
CVE-2024-33848
|
2024-09-23 23:43 |
2024-09-17 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|