|
201
|
- |
|
-
|
-
|
Directory Traversal in the web interface of the Tiptel IP 286 with firmware version 2.61.13.10 allows attackers to overwrite arbitrary files on the phone via the Ringtone upload function.
New
|
-
|
CVE-2024-33109
|
2024-09-20 22:35 |
2024-09-20 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
202
|
6.1 |
MEDIUM
Network
|
jetbrains
|
intellij_idea
|
In JetBrains IntelliJ IDEA before 2024.1 hTML injection via the project name was possible
Update
|
CWE-79
Cross-site Scripting
|
CVE-2024-46970
|
2024-09-20 22:23 |
2024-09-16 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
203
|
- |
|
-
|
-
|
This vulnerability exists in Apex Softcell LD DP Back Office due to improper validation of certain parameters (cCdslClicentcode and cLdClientCode) in the API endpoint. An authenticated remote attacke…
Update
|
CWE-359
Exposure of Private Personal Information to an Unauthorized Actor
|
CVE-2024-47085
|
2024-09-20 22:15 |
2024-09-19 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
204
|
5.0 |
MEDIUM
Network
|
nozominetworks
|
cmc
guardian
|
An access control vulnerability was discovered in the Reports section due to a specific access restriction not being properly enforced for users with limited privileges.
If a logged-in user with r…
Update
|
CWE-863
Incorrect Authorization
|
CVE-2024-4465
|
2024-09-20 22:15 |
2024-09-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
205
|
6.5 |
MEDIUM
Network
|
mintplexlabs
|
anythingllm
|
mintplex-labs/anything-llm is affected by an uncontrolled resource consumption vulnerability in its upload file endpoint, leading to a denial of service (DOS) condition. Specifically, the server can …
Update
|
CWE-400
Uncontrolled Resource Consumption
|
CVE-2024-3153
|
2024-09-20 22:15 |
2024-06-7 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
206
|
- |
|
-
|
-
|
A Denial of Service (Dos) vulnerability in Nozomi Networks Guardian, caused by improper input validation in certain fields used in the Radius parsing functionality of our IDS, allows an unauthenticat…
Update
|
-
|
CVE-2024-0218
|
2024-09-20 22:15 |
2024-04-11 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
207
|
9.8 |
CRITICAL
Network
artistscope
|
artisbrowser
|
An issue in ArtistScope ArtisBrowser v.34.1.5 and before allows an attacker to bypass intended access restrictions via interaction with the com.artis.browser.IntentReceiverActivity component. NOTE: t…
Update
|
CWE-94
Code Injection
|
CVE-2023-49000
|
2024-09-20 22:15 |
2023-12-28 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
|
208
|
6.5 |
MEDIUM
Network
|
nozominetworks
|
cmc
guardian
|
A SQL Injection vulnerability has been found in Nozomi Networks Guardian and CMC, due to improper input validation in certain parameters used in the Query functionality.
Authenticated users may be ab…
Update
|
CWE-89
SQL Injection
|
CVE-2023-2567
|
2024-09-20 22:15 |
2023-09-19 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
209
|
7.0 |
HIGH
Local
|
nozominetworks
|
cmc
guardian
|
In certain conditions, depending on timing and the usage of the Chrome web browser, Guardian/CMC versions before 22.6.2 do not always completely invalidate the user session upon logout. Thus an authe…
Update
|
CWE-384
Session Fixation
|
CVE-2023-24477
|
2024-09-20 22:15 |
2023-08-9 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
210
|
5.5 |
MEDIUM
Local
|
samsung
|
exynos_980_firmware
exynos_850_firmware
exynos_1080_firmware
exynos_1280_firmware
exynos_1380_firmware
exynos_1330_firmware
exynos_1480_firmware
exynos_w920_firmware
exynos_w9…
|
An issue was discovered in Samsung Mobile Processor Exynos Exynos 980, Exynos 850, Exynos 1080, Exynos 1280, Exynos 1380, Exynos 1330, Exynos 1480, Exynos W920, Exynos W930. In the function slsi_rx_b…
Update
|
CWE-787
Out-of-bounds Write
|
CVE-2024-27365
|
2024-09-20 22:09 |
2024-09-10 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
