561
|
4.4 |
MEDIUM
Local
|
apple
|
macos
|
This issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14.4. A maliciously crafted ZIP archive may bypass Gatekeeper checks.
Update
|
NVD-CWE-noinfo
|
CVE-2024-27853
|
2024-10-31 03:35 |
2024-07-30 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
562
|
5.5 |
MEDIUM
Local
|
jungo mitsubishielectric
|
windriver cpu_module_logging_configuration_tool cw_configurator data_transfer ezsocket fr_configurator_sw3 fr_configurator2 gt_got1000 gt_got2000 gt_softgot1000 gt_softg…
|
Denial of Service (DoS) vulnerability in Jungo WinDriver before 12.5.1 allows local attackers to cause a Windows blue screen error.
Update
|
NVD-CWE-noinfo
|
CVE-2024-22105
|
2024-10-31 03:35 |
2024-07-3 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
563
|
- |
|
-
|
-
|
HCL Connections is vulnerable to a cross-site scripting attack where an attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user which leads to executi…
Update
|
-
|
CVE-2024-30112
|
2024-10-31 03:35 |
2024-06-26 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
564
|
- |
|
-
|
-
|
Reflected Cross-Site Scripting (XSS) vulnerability in HadSky v7.6.3, allows remote attackers to execute arbitrary code and obtain sensitive information via the chklogin.php component .
Update
|
-
|
CVE-2024-30885
|
2024-10-31 03:35 |
2024-04-11 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
565
|
- |
|
-
|
-
|
An issue was discovered in Bento4 v1.6.0-641-2-g1529b83. There is a heap-use-after-free in AP4_UnknownAtom::~AP4_UnknownAtom at Ap4Atom.cpp, leading to a Denial of Service (DoS), as demonstrated by m…
Update
|
-
|
CVE-2024-30807
|
2024-10-31 03:35 |
2024-04-3 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
566
|
- |
|
-
|
-
|
Improper access control in the user interface in Devolutions Workspace 2024.1.0 and earlier allows an authenticated user to perform unintended actions via specific permissions
Update
|
-
|
CVE-2024-2241
|
2024-10-31 03:35 |
2024-03-7 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
567
|
- |
|
-
|
-
|
The MFA management features did not properly terminate existing user sessions when a user's MFA methods have been modified.
Update
|
-
|
CVE-2024-21722
|
2024-10-31 03:35 |
2024-02-29 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
568
|
7.5 |
HIGH
Network
rigol
|
mso5000_firmware
|
The web interface on the RIGOL MSO5000 digital oscilloscope with firmware 00.01.03.00.03 allows remote attackers to change the admin password via a zero-length pass0 to the webcontrol changepwd.cgi a…
Update
|
NVD-CWE-noinfo
|
CVE-2023-38379
|
2024-10-31 03:35 |
2023-07-17 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
569
|
6.1 |
MEDIUM
Network
|
projectworlds
|
simple_web-based_chat_application
|
A vulnerability was found in Project Worlds Simple Web-Based Chat Application 1.0 and classified as problematic. Affected by this issue is some unknown functionality of the file /index.php. The manip…
Update
|
CWE-79
Cross-site Scripting
|
CVE-2024-10433
|
2024-10-31 03:31 |
2024-10-28 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
570
|
7.1 |
HIGH
Local
|
apple
|
iphone_os ipados visionos tvos
|
This issue was addressed with improved handling of symlinks. This issue is fixed in iOS 18.1 and iPadOS 18.1, iOS 17.7.1 and iPadOS 17.7.1, visionOS 2.1, tvOS 18.1. Restoring a maliciously crafted ba…
Update
|
CWE-59
Link Following
|
CVE-2024-44258
|
2024-10-31 03:28 |
2024-10-29 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|