|
311801
|
8.8 |
HIGH
Network
|
advantech
|
adam-5630_firmware
|
Cookies of authenticated Advantech ADAM-5630 users remain as active valid cookies when a
session is closed. Forging requests with a legitimate cookie, even if
the session was terminated, allows an …
|
NVD-CWE-Other
|
CVE-2024-39275
|
2024-10-8 00:25 |
2024-09-28 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
311802
|
6.1 |
MEDIUM
Network
|
advantech
|
adam_5550-firmware
|
Advantech ADAM 5550's web application includes a "logs" page where all
the HTTP requests received are displayed to the user. The device doesn't
correctly neutralize malicious code when parsing HTTP…
|
CWE-79
Cross-site Scripting
|
CVE-2024-38308
|
2024-10-8 00:24 |
2024-09-28 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
311803
|
5.7 |
MEDIUM
Adjacent
|
advantech
|
adam-5630_firmware
|
Advantech ADAM-5630 shares user credentials plain text between the device and the user source device during the login process.
|
CWE-522
Insufficiently Protected Credentials
|
CVE-2024-34542
|
2024-10-8 00:20 |
2024-09-28 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
311804
|
5.7 |
MEDIUM
Adjacent
|
advantech
|
adam-5550_firmware
|
Advantech ADAM-5550 share user credentials with a low level of encryption, consisting of base 64 encoding.
|
CWE-522
Insufficiently Protected Credentials
|
CVE-2024-37187
|
2024-10-8 00:17 |
2024-09-28 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
311805
|
6.1 |
MEDIUM
Network
|
flatpress
|
flatpress
|
A cross-site scripting (XSS) vulnerability in Flatpress v1.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the email field.
|
CWE-79
Cross-site Scripting
|
CVE-2024-25412
|
2024-10-8 00:04 |
2024-09-28 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
311806
|
7.5 |
HIGH
Network
|
nasa
|
cryptolib
|
NASA CryptoLib v1.3.0 was discovered to contain an Out-of-Bounds read via the TM subsystem (crypto_tm.c).
|
CWE-125
Out-of-bounds Read
|
CVE-2024-44912
|
2024-10-8 00:00 |
2024-09-28 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
311807
|
7.5 |
HIGH
Network
|
nasa
|
cryptolib
|
NASA CryptoLib v1.3.0 was discovered to contain an Out-of-Bounds read via the TC subsystem (crypto_aos.c).
|
CWE-125
Out-of-bounds Read
|
CVE-2024-44911
|
2024-10-8 00:00 |
2024-09-28 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
311808
|
7.5 |
HIGH
Network
|
nasa
|
cryptolib
|
NASA CryptoLib v1.3.0 was discovered to contain an Out-of-Bounds read via the AOS subsystem (crypto_aos.c).
|
CWE-125
Out-of-bounds Read
|
CVE-2024-44910
|
2024-10-7 23:27 |
2024-09-28 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
311809
|
7.8 |
HIGH
Local
|
linux
|
linux_kernel
|
In the Linux kernel, the following vulnerability has been resolved:
drm/amd/display: Fix index may exceed array range within fpu_update_bw_bounding_box
[Why]
Coverity reports OVERRUN warning. soc.n…
|
CWE-129
Improper Validation of Array Index
|
CVE-2024-46811
|
2024-10-7 23:24 |
2024-09-27 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
311810
|
5.5 |
MEDIUM
Local
|
linux
|
linux_kernel
|
In the Linux kernel, the following vulnerability has been resolved:
drm/amd/display: added NULL check at start of dc_validate_stream
[Why]
prevent invalid memory access
[How]
check if dc and strea…
|
CWE-476
NULL Pointer Dereference
|
CVE-2024-46802
|
2024-10-7 23:21 |
2024-09-27 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|