|
313011
|
9.8 |
CRITICAL
Network
|
dlink
|
dir-846w_firmware
|
D-Link DIR-846W A1 FW100A43 was discovered to contain a remote command execution (RCE) vulnerability via the wl(0).(0)_ssid parameter. This vulnerability is exploited via a crafted POST request.
|
CWE-78
OS Command
|
CVE-2024-44342
|
2024-08-30 23:57 |
2024-08-28 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
313012
|
9.8 |
CRITICAL
Network
|
dlink
|
dir-846w_firmware
|
D-Link DIR-846W A1 FW100A43 was discovered to contain a remote command execution (RCE) vulnerability via the lan(0)_dhcps_staticlist parameter. This vulnerability is exploited via a crafted POST requ…
|
CWE-78
OS Command
|
CVE-2024-44341
|
2024-08-30 23:57 |
2024-08-28 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
313013
|
8.8 |
HIGH
Network
|
dlink
|
dir-846w_firmware
|
D-Link DIR-846W A1 FW100A43 was discovered to contain a remote command execution (RCE) vulnerability via keys smartqos_express_devices and smartqos_normal_devices in SetSmartQoSSettings.
|
CWE-78
OS Command
|
CVE-2024-44340
|
2024-08-30 23:56 |
2024-08-28 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
313014
|
9.8 |
CRITICAL
Network
|
dlink
|
dir-846w_firmware
|
D-Link DIR-846W A1 FW100A43 was discovered to contain a remote command execution (RCE) vulnerability via the tomography_ping_address parameter in /HNAP1/ interface.
|
CWE-78
OS Command
|
CVE-2024-41622
|
2024-08-30 23:55 |
2024-08-28 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
313015
|
6.5 |
MEDIUM
Network
|
ptc
|
thingworx
|
An Insecure Direct Object Reference (IDOR) in PTC ThingWorx v9.5.0 allows attackers to view sensitive information, including PII, regardless of access level.
|
CWE-639
Authorization Bypass Through User-Controlled Key
|
CVE-2024-40395
|
2024-08-30 23:35 |
2024-08-28 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
313016
|
- |
|
-
|
-
|
A flaw was found in the Fence Agents Remediation operator. This vulnerability can allow a Remote Code Execution (RCE) primitive by supplying an arbitrary command to execute in the --ssh-path/--telnet…
|
CWE-94
Code Injection
|
CVE-2024-5651
|
2024-08-30 23:15 |
2024-08-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
313017
|
6.5 |
MEDIUM
Network
|
gitlab
|
gitlab
|
An issue was discovered in GitLab CE/EE affecting all versions starting from 11.10 prior to 17.0.6, 17.1 prior to 17.1.4, and 17.2 prior to 17.2.2, with the processing logic for parsing invalid commi…
|
CWE-1333
Inefficient Regular Expression Complexity
|
CVE-2024-3114
|
2024-08-30 23:15 |
2024-08-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
313018
|
9.8 |
CRITICAL
Network
|
fortra
|
filecatalyst_workflow
|
The default credentials for the setup HSQL database (HSQLDB) for FileCatalyst Workflow are published in a vendor knowledgebase article. Misuse of these credentials could lead to a compromise of confi…
|
CWE-798
Use of Hard-coded Credentials
|
CVE-2024-6633
|
2024-08-30 23:11 |
2024-08-28 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
313019
|
7.2 |
HIGH
Network
|
fortra
|
filecatalyst_workflow
|
A vulnerability exists in FileCatalyst Workflow whereby a field accessible to the super admin can be used to perform an SQL injection attack which can lead to a loss of confidentiality, integrity, an…
|
CWE-89
SQL Injection
|
CVE-2024-6632
|
2024-08-30 23:07 |
2024-08-28 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
313020
|
9.8 |
CRITICAL
Network
|
brainlowcode
|
brain_low-code
|
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection'), CWE - 564 - SQL Injection: Hibernate vulnerability in Brain Information Technologies Inc. Brain Low-Code allows S…
|
CWE-89
SQL Injection
|
CVE-2024-7071
|
2024-08-30 22:56 |
2024-08-27 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|