|
314821
|
- |
|
-
|
-
|
Due to weak encoding of user-controlled inputs, eProcurement on SAP S/4HANA allows malicious scripts to be executed in the application, potentially leading to a Reflected Cross-Site Scripting (XSS) v…
|
CWE-79
Cross-site Scripting
|
CVE-2024-42378
|
2024-09-10 12:15 |
2024-09-10 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
314822
|
- |
|
-
|
-
|
The RFC enabled function module allows a low privileged user to delete the workplace favourites of any user. This vulnerability could be utilized to identify usernames and access information about ta…
|
CWE-862
Missing Authorization
|
CVE-2024-42371
|
2024-09-10 12:15 |
2024-09-10 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
314823
|
- |
|
-
|
-
|
Due to missing authorization checks, SAP BEx Analyzer allows an authenticated attacker to access information over the network which is otherwise restricted. On successful exploitation the attacker ca…
|
CWE-359 CWE-862
Exposure of Private Personal Information to an Unauthorized Actor Missing Authorization
|
CVE-2024-41729
|
2024-09-10 12:15 |
2024-09-10 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
314824
|
9.8 |
CRITICAL
Network
|
-
|
-
|
**UNSUPPORTED WHEN ASSIGNED** A command injection vulnerability in the export-cgi program of Zyxel NAS326 firmware versions through V5.21(AAZF.18)C0 and NAS542 firmware versions through V5.21(ABAG.15…
|
CWE-78
OS Command
|
CVE-2024-6342
|
2024-09-10 11:15 |
2024-09-10 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
314825
|
- |
|
-
|
-
|
Qualitor up to 8.24 is vulnerable to Remote Code Execution (RCE) via Arbitrary File Upload in checkAcesso.php.
|
-
|
CVE-2024-44849
|
2024-09-10 05:35 |
2024-09-10 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
314826
|
- |
|
-
|
-
|
D-Link DI-7003G v19.12.24A1, DI-7003GV2 v24.04.18D1, DI-7100G+V2 v24.04.18D1, DI-7100GV2 v24.04.18D1, DI-7200GV2 v24.04.18E1, DI-7300G+V2 v24.04.18D1, and DI-7400G+V2 v24.04.18D1 are vulnerable to Re…
|
-
|
CVE-2024-44335
|
2024-09-10 05:35 |
2024-09-10 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
314827
|
- |
|
-
|
-
|
D-Link DI-7003GV2 v24.04.18D1, DI-7100G+V2 v24.04.18D1, DI-7100GV2 v24.04.18D1, DI-7200GV2 v24.04.18E1, DI-7300G+V2 v24.04.18D1, and DI-7400G+V2 v24.04.18D1 are vulnerable to Remote Command Execution…
|
-
|
CVE-2024-44334
|
2024-09-10 05:35 |
2024-09-10 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
314828
|
- |
|
-
|
-
|
A vulnerability was found in Forklift Controller. There is no verification against the authorization header except to ensure it uses bearer authentication. Without an Authorization header and some f…
|
CWE-285
Improper Authorization
|
CVE-2024-8509
|
2024-09-10 04:15 |
2024-09-7 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
314829
|
- |
|
-
|
-
|
SeaCMS v13.1 was discovered to an arbitrary file read vulnerability via the component admin_safe.php.
|
-
|
CVE-2024-44720
|
2024-09-10 02:35 |
2024-09-10 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
314830
|
- |
|
-
|
-
|
A vulnerability that allows an attacker to access the NTLM hash of the Veeam Reporter Service service account. This attack requires user interaction and data collected from Veeam Backup & Replication.
|
-
|
CVE-2024-42019
|
2024-09-10 02:35 |
2024-09-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|