241
|
- |
|
-
|
-
|
Cross-Site Request Forgery (CSRF) vulnerability in Drupal Migrate Tools allows Cross Site Request Forgery.This issue affects Migrate Tools: from 0.0.0 before 6.0.3.
New
|
-
|
CVE-2024-13244
|
2025-01-11 02:15 |
2025-01-10 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
242
|
- |
|
-
|
-
|
Missing Authorization vulnerability in Drupal Entity Delete Log allows Forceful Browsing.This issue affects Entity Delete Log: from 0.0.0 before 1.1.1.
New
|
-
|
CVE-2024-13243
|
2025-01-11 02:15 |
2025-01-10 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
243
|
7.8 |
HIGH
Local
|
qualcomm
|
fastconnect_6900_firmware fastconnect_7800_firmware qam8295p_firmware qca6574au_firmware qca6696_firmware qcm8550_firmware qcs6490_firmware qcs8550_firmware video_collaboratio…
|
Memory corruption when input parameter validation for number of fences is missing for fence frame IOCTL calls,
Update
|
CWE-787
Out-of-bounds Write
|
CVE-2024-33041
|
2025-01-11 02:15 |
2025-01-6 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
244
|
7.8 |
HIGH
Local
|
qualcomm
|
fastconnect_6900_firmware fastconnect_7800_firmware qam8295p_firmware qca6574au_firmware qca6696_firmware qcm8550_firmware qcs6490_firmware qcs8550_firmware video_collaboratio…
|
Memory corruption while invoking IOCTL calls to unmap the DMA buffers.
Update
|
CWE-416
Use After Free
|
CVE-2024-33055
|
2025-01-11 02:01 |
2025-01-6 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
245
|
7.8 |
HIGH
Local
|
qualcomm
|
fastconnect_6900_firmware fastconnect_7800_firmware qcm8550_firmware qcs8550_firmware sg8275p_firmware sm8550p_firmware snapdragon_8_gen_2_mobile_firmware snapdragon_8_gen_3_mobi…
|
Memory corruption while processing frame command IOCTL calls.
Update
|
CWE-416
Use After Free
|
CVE-2024-33059
|
2025-01-11 01:53 |
2025-01-6 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
246
|
5.5 |
MEDIUM
Local
|
qualcomm
|
qcs8550_firmware sw5100_firmware sw5100p_firmware wcn3660b_firmware wcn3680b_firmware wcn3980_firmware wcn3988_firmware wsa8830_firmware wsa8835_firmware
|
Information disclosure while processing IOCTL call made for releasing a trusted VM process release or opening a channel without initializing the process.
Update
|
CWE-125
Out-of-bounds Read
|
CVE-2024-33061
|
2025-01-11 01:49 |
2025-01-6 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
247
|
- |
|
-
|
-
|
Tenda ac9 v1.0 firmware v15.03.05.19 is vulnerable to command injection in /goform/SetSambaCfg, which may lead to remote arbitrary code execution.
New
|
-
|
CVE-2025-22949
|
2025-01-11 01:15 |
2025-01-11 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
248
|
- |
|
-
|
-
|
WeGIA is a web manager for charitable institutions. A Reflected Cross-Site Scripting (XSS) vulnerability was identified in the configuracao_doacao.php endpoint of the WeGIA application. This vulnerab…
New
|
CWE-79
Cross-site Scripting
|
CVE-2025-22600
|
2025-01-11 01:15 |
2025-01-11 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
249
|
- |
|
-
|
-
|
WeGIA is a web manager for charitable institutions. A Reflected Cross-Site Scripting (XSS) vulnerability was identified in the home.php endpoint of the WeGIA application. This vulnerability allows at…
New
|
CWE-79
Cross-site Scripting
|
CVE-2025-22599
|
2025-01-11 01:15 |
2025-01-11 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
250
|
- |
|
-
|
-
|
WeGIA is a web manager for charitable institutions. A Stored Cross-Site Scripting (XSS) vulnerability was identified in the cadastrarSocio.php endpoint of the WeGIA application. This vulnerability al…
New
|
CWE-79
Cross-site Scripting
|
CVE-2025-22598
|
2025-01-11 01:15 |
2025-01-11 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|