2001
|
6.7 |
MEDIUM
Local
|
watchguard
|
epp_firmware edr_firmware epdr_firmware panda_ad360_firmware
|
An issue was discovered in WatchGuard EPDR 8.0.21.0002. It is possible to bypass the defensive capabilities by adding a registry key as SYSTEM.
|
CWE-639
Authorization Bypass Through User-Controlled Key
|
CVE-2023-26237
|
2024-09-20 06:35 |
2023-10-5 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
2002
|
7.8 |
HIGH
Local
|
acronis
|
cyber_protect_home_office
|
Local privilege escalation during installation due to improper soft link handling. The following products are affected: Acronis Cyber Protect Home Office (Windows) before build 40278.
|
CWE-610
Externally Controlled Reference to a Resource in Another Sphere
|
CVE-2022-46869
|
2024-09-20 06:15 |
2023-09-1 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
2003
|
9.8 |
CRITICAL
Network
pluck-cms
|
pluck
|
Pluck CMS 4.7.18 does not restrict failed login attempts, allowing attackers to execute a brute force attack.
|
CWE-307
mproper Restriction of Excessive Authentication Attempts
|
CVE-2024-43042
|
2024-09-20 06:01 |
2024-08-17 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
2004
|
8.8 |
HIGH
Network
|
churchcrm
|
churchcrm
|
ChurchCRM is an open-source church management system. Versions of the application prior to 5.9.2 are vulnerable to an authenticated SQL injection due to an improper sanitization of user input. Authen…
|
CWE-89
SQL Injection
|
CVE-2024-39304
|
2024-09-20 05:59 |
2024-07-27 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
2005
|
8.8 |
HIGH
Network
|
nuxt
|
nuxt
|
Nuxt is a free and open-source framework to create full-stack web applications and websites with Vue.js. Due to the insufficient validation of the `path` parameter in the NuxtTestComponentWrapper, an…
|
CWE-94
Code Injection
|
CVE-2024-34344
|
2024-09-20 05:58 |
2024-08-6 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
2006
|
7.5 |
HIGH
Network
nuxt
|
nuxt
|
Nuxt is a free and open-source framework to create full-stack web applications and websites with Vue.js. `nuxt/icon` provides an API to allow client side icon lookup. This endpoint is at `/api/_nuxt_…
|
CWE-918
Server-Side Request Forgery (SSRF)
|
CVE-2024-42352
|
2024-09-20 05:55 |
2024-08-6 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
2007
|
5.4 |
MEDIUM
Network
|
spiffyplugins
|
spiffy_calendar
|
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Spiffy Plugins Spiffy Calendar allows Stored XSS.This issue affects Spiffy Calendar: from …
|
CWE-79
Cross-site Scripting
|
CVE-2024-45457
|
2024-09-20 05:53 |
2024-09-15 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
2008
|
7.8 |
HIGH
Local
|
mongodb
|
mongodb c_driver php_driver
|
Incorrect validation of files loaded from a local untrusted directory may allow local privilege escalation if the underlying operating systems is Windows. This may result in the application executing…
|
NVD-CWE-noinfo
|
CVE-2024-7553
|
2024-09-20 05:46 |
2024-08-7 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
2009
|
4.7 |
MEDIUM
Local
|
linux
|
linux_kernel
|
In the Linux kernel, the following vulnerability has been resolved:
Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
Patch series "mm: Avoid possible overflows in dirt…
|
CWE-369
Divide By Zero
|
CVE-2024-42102
|
2024-09-20 05:38 |
2024-07-30 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
2010
|
9.8 |
CRITICAL
Network
pigcms
|
pigcms
|
pigcms up to 7.0 was discovered to contain an arbitrary file upload vulnerability.
|
CWE-434
Unrestricted Upload of File with Dangerous Type
|
CVE-2023-43269
|
2024-09-20 05:35 |
2023-10-6 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|