811
|
5.9 |
MEDIUM
Network
|
fortinet
|
forticlient
|
An improper certificate validation vulnerability [CWE-295] in FortiClientWindows 6.4 all versions, 7.0.0 through 7.0.7, FortiClientMac 6.4 all versions, 7.0 all versions, 7.2.0 through 7.2.4, FortiCl…
|
CWE-295
Improper Certificate Validation
|
CVE-2022-45856
|
2024-09-26 23:48 |
2024-09-11 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
812
|
3.5 |
LOW
Network
|
strapi
|
strapi
|
Strapi is an open-source content management system. Prior to version 4.19.1, a super admin can create a collection where an item in the collection has an association to another collection. When this …
|
CWE-639
Authorization Bypass Through User-Controlled Key
|
CVE-2024-29181
|
2024-09-26 23:48 |
2024-06-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
813
|
7.5 |
HIGH
Network
|
redhat
|
quay
|
A vulnerability was found in Quay. If an attacker can obtain the client ID for an application, they can use an OAuth token to authenticate despite not having access to the organization from which the…
|
NVD-CWE-Other
|
CVE-2024-5891
|
2024-09-26 23:45 |
2024-06-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
814
|
9.8 |
CRITICAL
Network
villatheme
|
woocommerce_photo_reviews
|
The WooCommerce Photo Reviews Premium plugin for WordPress is vulnerable to authentication bypass in all versions up to, and including, 1.3.13.2. This is due to the plugin not properly validating wha…
|
CWE-306
Missing Authentication for Critical Function
|
CVE-2024-8277
|
2024-09-26 23:39 |
2024-09-11 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
815
|
5.4 |
MEDIUM
Network
|
elementor
|
website_builder
|
The Elementor Website Builder – More than Just a Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the url parameter of multiple widgets in all versions up to, and in…
|
CWE-79
Cross-site Scripting
|
CVE-2024-5416
|
2024-09-26 23:37 |
2024-09-11 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
816
|
- |
|
-
|
-
|
Gigastone TR1 Travel Router R101 v1.0.2 is vulnerable to Command Injection. This allows an authenticated attacker to execute arbitrary commands on the device by sending a crafted HTTP request to the …
|
-
|
CVE-2024-44678
|
2024-09-26 23:35 |
2024-09-26 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
817
|
- |
|
-
|
-
|
An issue was discovered in AdaCore ada_web_services 20.0 allows an attacker to escalate privileges and steal sessions via the Random_String() function in the src/core/aws-utils.adb module.
|
-
|
CVE-2024-41708
|
2024-09-26 23:35 |
2024-09-26 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
818
|
- |
|
-
|
-
|
OpenSlides 4.0.15 verifies passwords by comparing password hashes using a function with content-dependent runtime. This can allow attackers to obtain information about the password hash using a timin…
|
-
|
CVE-2024-22893
|
2024-09-26 23:35 |
2024-09-26 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
819
|
9.8 |
CRITICAL
Network
apache
|
submarine
|
** UNSUPPORTED WHEN ASSIGNED ** Incorrect Authorization vulnerability in Apache Submarine Server Core.
This issue affects Apache Submarine Server Core: from 0.8.0.
As this project is retired, we do…
|
CWE-863
Incorrect Authorization
|
CVE-2024-36265
|
2024-09-26 23:35 |
2024-06-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
820
|
5.3 |
MEDIUM
Network
azmobileapps
|
color_phone
|
The com.cutestudio.colordialer application through 2.1.8-2 for Android allows a remote attacker to initiate phone calls without user consent, because of improper export of the com.cutestudio.dialer.a…
|
NVD-CWE-noinfo
|
CVE-2023-42468
|
2024-09-26 23:35 |
2023-09-14 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|