|
61
|
- |
|
-
|
-
|
Cross Site Scripting vulnerability in Leotheme Leo Product Search Module v.2.1.6 and earlier allows a remote attacker to execute arbitrary code via the q parameter of the product search function.
New
|
-
|
CVE-2024-42697
|
2024-09-21 03:35 |
2024-09-21 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
62
|
5.4 |
MEDIUM
Network
|
librenms
|
librenms
|
Cross-site Scripting (XSS) - Reflected in GitHub repository librenms/librenms prior to 23.9.0.
Update
|
CWE-79
Cross-site Scripting
|
CVE-2023-4979
|
2024-09-21 03:35 |
2023-09-15 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
63
|
8.8 |
HIGH
Network
|
conduit
|
conduit
|
Missing authorization in Client-Server API in Conduit <=0.7.0, allowing for any alias to be removed and added to another room, which can be used for privilege escalation by moving the #admins alias t…
Update
|
CWE-862
Missing Authorization
|
CVE-2024-6303
|
2024-09-21 03:34 |
2024-06-25 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
64
|
8.8 |
HIGH
Network
|
brainstormforce
|
pre-publish_checklist
|
Missing Authorization vulnerability in Brainstorm Force Pre-Publish Checklist.This issue affects Pre-Publish Checklist: from n/a through 1.1.1.
Update
|
CWE-862
Missing Authorization
|
CVE-2023-44151
|
2024-09-21 03:17 |
2024-06-19 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
65
|
3.8 |
LOW
Local
|
-
|
-
|
A flaw was found in QEMU, in the virtio-scsi, virtio-blk, and virtio-crypto devices. The size for virtqueue_push as set in virtio_scsi_complete_req / virtio_blk_req_complete / virito_crypto_req_compl…
New
|
CWE-200
Information Exposure
|
CVE-2024-8612
|
2024-09-21 03:15 |
2024-09-21 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
66
|
7.5 |
HIGH
Network
sitecore
|
experience_commerce
experience_platform
experience_manager
|
An issue was discovered in Sitecore Experience Platform (XP), Experience Manager (XM), and Experience Commerce (XC) 8.0 Initial Release through 10.4 Initial Release. An unauthenticated attacker can r…
Update
|
NVD-CWE-noinfo
|
CVE-2024-46938
|
2024-09-21 03:15 |
2024-09-16 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
|
67
|
- |
|
-
|
-
|
IBM Aspera Faspex 5.0.0 through 5.0.7 could allow a local user to obtain sensitive information due to improper encryption of certain data. IBM X-Force ID: 259671.
Update
|
CWE-327
Use of a Broken or Risky Cryptographic Algorithm
|
CVE-2023-37396
|
2024-09-21 03:15 |
2024-04-20 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
68
|
7.5 |
HIGH
Network
ibm
|
aspera_faspex
|
IBM Aspera Faspex 5.0.5 could allow a remote attacked to bypass IP restrictions due to improper access controls. IBM X-Force ID: 259649.
Update
|
CWE-291
|
CVE-2023-35906
|
2024-09-21 03:15 |
2023-09-5 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
|
69
|
4.9 |
MEDIUM
Network
|
misp
|
misp
|
app/Controller/UserLoginProfilesController.php in MISP before 2.4.198 does not prevent an org admin from viewing sensitive login fields of another org admin in the same org.
Update
|
CWE-863
Incorrect Authorization
|
CVE-2024-46918
|
2024-09-21 03:14 |
2024-09-16 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
70
|
6.5 |
MEDIUM
Network
|
litellm
|
litellm
|
berriai/litellm version 1.34.34 is vulnerable to improper access control in its team management functionality. This vulnerability allows attackers to perform unauthorized actions such as creating, up…
Update
|
NVD-CWE-noinfo
|
CVE-2024-5710
|
2024-09-21 03:04 |
2024-06-28 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
