|
1771
|
5.4 |
MEDIUM
Network
|
ampache
|
ampache
|
Ampache is a web based audio/video streaming application and file manager. The current implementation of token parsing does not adequately validate CSRF tokens when users send messages to one another…
|
CWE-352
Origin Validation Error
|
CVE-2024-51489
|
2024-11-15 00:46 |
2024-11-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
1772
|
9.0 |
CRITICAL
Network
|
ampache
|
ampache
|
Ampache is a web based audio/video streaming application and file manager. This vulnerability exists in the interface section of the Ampache menu, where users can change "Custom URL - Logo". This sec…
|
CWE-79
Cross-site Scripting
|
CVE-2024-51490
|
2024-11-15 00:30 |
2024-11-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
1773
|
7.5 |
HIGH
Network
metabase
|
metabase
|
Metabase is an open source data analytics platform. In affected versions a security issue has been discovered with the custom GeoJSON map (`admin->settings->maps->custom maps->add a map`) support and…
|
CWE-22
Path Traversal
|
CVE-2021-41277
|
2024-11-15 00:26 |
2021-11-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
|
1774
|
6.5 |
MEDIUM
Network
|
microsoft
|
windows_server_2008
windows_server_2012
windows_server_2025
windows_10_1809
windows_server_2019
windows_server_2022
windows_10_21h2
windows_11_22h2
windows_10_22h2
windows_…
|
NTLM Hash Disclosure Spoofing Vulnerability
|
NVD-CWE-noinfo
|
CVE-2024-43451
|
2024-11-15 00:24 |
2024-11-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
1775
|
9.8 |
CRITICAL
Network
codezips
|
hospital_appointment_system
|
A vulnerability has been found in Codezips Hospital Appointment System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /removeBranchResult.php. …
|
CWE-89
SQL Injection
|
CVE-2024-11057
|
2024-11-15 00:23 |
2024-11-11 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
|
1776
|
7.1 |
HIGH
Local
|
sap
|
host_agent
|
An attacker who gains local membership to sapsys group could replace local files usually protected by privileged access. On successful exploitation the attacker could cause high impact on confidentia…
|
NVD-CWE-noinfo
|
CVE-2024-47595
|
2024-11-15 00:21 |
2024-11-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
1777
|
8.8 |
HIGH
Network
|
tenda
|
ac10_firmware
|
A vulnerability, which was classified as critical, was found in Tenda AC10 16.03.10.13. Affected is the function FUN_0046AC38 of the file /goform/WifiExtraSet. The manipulation of the argument wpapsk…
|
CWE-119
CWE-121
Incorrect Access of Indexable Resource ('Range Error')
Stack-based Buffer Overflow
|
CVE-2024-11056
|
2024-11-15 00:21 |
2024-11-11 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
1778
|
8.8 |
HIGH
Local
|
microsoft
|
windows_server_2025
windows_10_1809
windows_server_2019
windows_server_2022
windows_10_21h2
windows_11_22h2
windows_10_22h2
windows_11_23h2
windows_server_2022_23h2
windows…
|
Windows Task Scheduler Elevation of Privilege Vulnerability
|
NVD-CWE-noinfo
|
CVE-2024-49039
|
2024-11-15 00:20 |
2024-11-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
1779
|
9.8 |
CRITICAL
Network
1000projects
|
beauty_parlour_management_system
|
A vulnerability, which was classified as critical, has been found in 1000 Projects Beauty Parlour Management System 1.0. This issue affects some unknown processing of the file /admin/admin-profile.ph…
|
CWE-89
SQL Injection
|
CVE-2024-11055
|
2024-11-15 00:18 |
2024-11-11 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
|
1780
|
6.1 |
MEDIUM
Network
|
10web
|
form_maker
|
The Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg without appropriate esc…
|
CWE-79
Cross-site Scripting
|
CVE-2024-10265
|
2024-11-15 00:17 |
2024-11-10 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
