681
|
- |
|
-
|
-
|
Unchecked return value can allow Apache Traffic Server to retain privileges on startup.
This issue affects Apache Traffic Server: from 9.2.0 through 9.2.5, from 10.0.0 through 10.0.1.
Users are rec…
|
CWE-252
Unchecked Return Value
|
CVE-2024-50306
|
2024-11-15 22:58 |
2024-11-14 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
682
|
- |
|
-
|
-
|
Valid Host header field can cause Apache Traffic Server to crash on some platforms.
This issue affects Apache Traffic Server: from 9.2.0 through 9.2.5.
Users are recommended to upgrade to version 9…
|
CWE-20
Improper Input Validation
|
CVE-2024-50305
|
2024-11-15 22:58 |
2024-11-14 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
683
|
- |
|
-
|
-
|
Boa web server - CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
|
CWE-22
Path Traversal
|
CVE-2024-47916
|
2024-11-15 22:58 |
2024-11-14 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
684
|
- |
|
-
|
-
|
VaeMendis - CWE-200: Exposure of Sensitive Information to an Unauthorized Actor
|
CWE-200
Information Exposure
|
CVE-2024-47915
|
2024-11-15 22:58 |
2024-11-14 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
685
|
- |
|
-
|
-
|
VaeMendis - CWE-352: Cross-Site Request Forgery (CSRF)
|
CWE-352
Origin Validation Error
|
CVE-2024-47914
|
2024-11-15 22:58 |
2024-11-14 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
686
|
- |
|
-
|
-
|
VaeMendis - CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
|
CWE-79
Cross-site Scripting
|
CVE-2024-45254
|
2024-11-15 22:58 |
2024-11-14 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
687
|
- |
|
-
|
-
|
Avigilon – CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
|
CWE-22
Path Traversal
|
CVE-2024-45253
|
2024-11-15 22:58 |
2024-11-14 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
688
|
- |
|
-
|
-
|
Improper Input Validation vulnerability in Apache Traffic Server.
This issue affects Apache Traffic Server: from 8.0.0 through 8.1.11, from 9.0.0 through 9.2.5.
Users are recommended to upgrade to …
|
CWE-20
Improper Input Validation
|
CVE-2024-38479
|
2024-11-15 22:58 |
2024-11-14 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
689
|
- |
|
-
|
-
|
A command injection vulnerability in Palo Alto Networks PAN-OS software enables an authenticated administrator to bypass system restrictions in the management plane and delete files on the firewall.
|
-
|
CVE-2024-2552
|
2024-11-15 22:58 |
2024-11-14 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
690
|
- |
|
-
|
-
|
A null pointer dereference vulnerability in Palo Alto Networks PAN-OS software enables an unauthenticated attacker to stop a core system service on the firewall by sending a crafted packet through th…
|
-
|
CVE-2024-2551
|
2024-11-15 22:58 |
2024-11-14 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|