1
|
- |
|
-
|
-
|
There is a difficult to exploit improper authentication issue in the Home application for Esri Portal for ArcGIS versions 10.8.1 through 11.2 on Windows and Linux, and ArcGIS Enterprise 11.1 and belo…
Update
|
CWE-323
Reusing a Nonce, Key Pair in Encryption
|
CVE-2024-25699
|
2024-09-20 12:15 |
2024-04-5 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
2
|
- |
|
-
|
-
|
A vulnerability, which was classified as critical, was found in code-projects Crud Operation System 1.0. Affected is an unknown function of the file updata.php. The manipulation of the argument sid l…
New
|
CWE-89
SQL Injection
|
CVE-2024-9011
|
2024-09-20 10:15 |
2024-09-20 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
3
|
- |
|
-
|
-
|
Path Traversal in the Ivanti CSA before 4.6 Patch 519 allows a remote unauthenticated attacker to access restricted functionality.
New
|
-
|
CVE-2024-8963
|
2024-09-20 10:00 |
2024-09-20 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
4
|
7.8 |
HIGH
Local
|
microsoft
|
windows_server_2016 windows_server_1803 windows_server_2019 windows_10_1809 windows_10_1703 windows_10_1709 windows_10_1803 windows_10_1607 windows_10_1507 windows_10_1903<…
|
An elevation of privilege vulnerability exists in the way the Task Scheduler Service validates certain file operations, aka 'Task Scheduler Elevation of Privilege Vulnerability'.
Update
|
CWE-59
Link Following
|
CVE-2019-1069
|
2024-09-20 10:00 |
2019-06-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
5
|
9.8 |
CRITICAL
Network
oracle
|
jdeveloper
|
Vulnerability in the Oracle JDeveloper product of Oracle Fusion Middleware (component: ADF Faces). Supported versions that are affected are 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability…
Update
|
NVD-CWE-noinfo
|
CVE-2022-21445
|
2024-09-20 10:00 |
2022-04-20 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
6
|
9.8 |
CRITICAL
Network
tenda
|
o6_firmware
|
Tenda O6 V3.0 firmware V1.0.0.7(2054) contains a stack overflow vulnerability in the formexeCommand function.
Update
|
CWE-787
Out-of-bounds Write
|
CVE-2024-46049
|
2024-09-20 09:39 |
2024-09-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
7
|
9.8 |
CRITICAL
Network
tenda
|
fh451_firmware
|
Tenda FH451 v1.0.0.9 has a command injection vulnerability in the formexeCommand function i
Update
|
CWE-77
Command Injection
|
CVE-2024-46048
|
2024-09-20 09:35 |
2024-09-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
8
|
7.5 |
HIGH
Network
tenda
|
fh451_firmware
|
Tenda FH451 v1.0.0.9 has a stack overflow vulnerability in the fromDhcpListClient function.
Update
|
CWE-787
Out-of-bounds Write
|
CVE-2024-46047
|
2024-09-20 09:35 |
2024-09-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
9
|
9.8 |
CRITICAL
Network
tenda
|
fh451_firmware
|
Tenda FH451 v1.0.0.9 has a stack overflow vulnerability located in the RouteStatic function.
Update
|
CWE-787
Out-of-bounds Write
|
CVE-2024-46046
|
2024-09-20 09:35 |
2024-09-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
10
|
9.8 |
CRITICAL
Network
tenda
|
ch22_firmware
|
Tenda CH22 V1.0.0.6(468) has a stack overflow vulnerability located in the frmL7PlotForm function.
Update
|
CWE-787
Out-of-bounds Write
|
CVE-2024-46045
|
2024-09-20 09:34 |
2024-09-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|