|
1261
|
7.8 |
HIGH
Local
|
dell
|
smartfabric_os10
|
Dell SmartFabric OS10 Software, version(s) 10.5.6.x, 10.5.5.x, 10.5.4.x, 10.5.3.x, contain(s) an Improper Privilege Management vulnerability. A low privileged attacker with local access could potenti…
|
NVD-CWE-noinfo
|
CVE-2024-49558
|
2024-11-16 02:35 |
2024-11-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
1262
|
8.8 |
HIGH
Network
|
anisha
|
job_recruitment
|
A vulnerability was found in code-projects Job Recruitment up to 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file admin.php. The manipulat…
|
CWE-89
SQL Injection
|
CVE-2024-11127
|
2024-11-16 02:29 |
2024-11-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
1263
|
7.5 |
HIGH
Network
eclipse
|
mosquitto
|
In Eclipse Mosquitto up to version 2.0.18a, an attacker can achieve memory leaking, segmentation fault or heap-use-after-free by sending specific sequences of "CONNECT", "DISCONNECT", "SUBSCRIBE", "U…
|
CWE-416
CWE-401
CWE-755
Use After Free
Missing Release of Memory after Effective Lifetime
Improper Handling of Exceptional Conditions
|
CVE-2024-8376
|
2024-11-16 02:21 |
2024-10-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
|
1264
|
5.4 |
MEDIUM
Network
|
nicheaddons
|
sales_page_addon
|
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in NicheAddons Sales Page Addon – Elementor & Beaver Builder allows Stored XSS.This issue aff…
|
CWE-79
Cross-site Scripting
|
CVE-2024-51585
|
2024-11-16 02:17 |
2024-11-10 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
1265
|
5.4 |
MEDIUM
Network
|
modernaweb
|
black_widgets_for_elementor
|
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Modernaweb Studio Black Widgets For Elementor allows Stored XSS.This issue affects Black W…
|
CWE-79
Cross-site Scripting
|
CVE-2024-51662
|
2024-11-16 02:16 |
2024-11-9 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
1266
|
5.4 |
MEDIUM
Network
|
rafelsanso
|
gmap_point_list
|
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Rafel Sansó Gmap Point List allows Stored XSS.This issue affects Gmap Point List: from n/a…
|
CWE-79
Cross-site Scripting
|
CVE-2024-51594
|
2024-11-16 02:15 |
2024-11-10 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
1267
|
4.3 |
MEDIUM
Network
|
github
|
enterprise_server
|
An information disclosure vulnerability was identified in GitHub Enterprise Server via attacker uploaded asset URL allowing the attacker to retrieve metadata information of a user who clicks on the U…
|
NVD-CWE-noinfo
|
CVE-2024-9539
|
2024-11-16 02:15 |
2024-10-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
1268
|
4.8 |
MEDIUM
Network
|
mendix
|
mendix
|
A vulnerability has been identified in Mendix Runtime V10 (All versions < V10.16.0 only if the basic authentication mechanism is used by the application), Mendix Runtime V10.12 (All versions < V10.12…
|
CWE-362
Race Condition
|
CVE-2024-50313
|
2024-11-16 02:12 |
2024-11-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
1269
|
4.4 |
MEDIUM
Local
|
lollms
|
lollms
|
A path traversal vulnerability exists in the api open_personality_folder endpoint of parisneo/lollms-webui. This vulnerability allows an attacker to read any folder in the personality_folder on the v…
|
CWE-23
Relative Path Traversal
|
CVE-2024-6985
|
2024-11-16 02:10 |
2024-10-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
1270
|
5.4 |
MEDIUM
Network
|
mysticalthemes
|
meta_store_elements
|
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in bnayawpguy Meta Store Elements allows DOM-Based XSS.This issue affects Meta Store Elements…
|
CWE-79
Cross-site Scripting
|
CVE-2024-51592
|
2024-11-16 02:04 |
2024-11-10 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
