|
312421
|
6.1 |
MEDIUM
Network
|
priority-software
|
priority
|
Priority - CWE-80: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)
|
CWE-79
Cross-site Scripting
|
CVE-2024-41697
|
2024-09-4 05:19 |
2024-08-20 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
312422
|
7.5 |
HIGH
Network
|
priority-software
|
priority
|
Priority – CWE-200: Exposure of Sensitive Information to an Unauthorized Actor
|
CWE-200
Information Exposure
|
CVE-2024-41698
|
2024-09-4 05:18 |
2024-08-20 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
312423
|
7.5 |
HIGH
Network
|
priority-software
|
priority
|
Priority – CWE-552: Files or Directories Accessible to External Parties
|
CWE-552
Files or Directories Accessible to External Parties
|
CVE-2024-41699
|
2024-09-4 05:17 |
2024-08-20 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
312424
|
7.5 |
HIGH
Network
|
mecodia
|
feripro
|
An Incorrect Access Control vulnerability in "/admin/programm/<program_id>/export/statistics" in Feripro <= v2.2.3 allows remote attackers to export an XLSX file with information about registrations …
|
NVD-CWE-Other
|
CVE-2024-41518
|
2024-09-4 05:15 |
2024-08-3 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
312425
|
- |
|
-
|
-
|
An issue in the js_localize.php function of LimeSurvey v6.6.2 and before allows attackers to execute arbitrary code via injecting a crafted payload into the lng parameter of the js_localize.php funct…
|
-
|
CVE-2024-42902
|
2024-09-4 04:40 |
2024-09-4 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
312426
|
- |
|
-
|
-
|
The Bare Metal Operator (BMO) implements a Kubernetes API for managing bare metal hosts in Metal3. The `BareMetalHost` (BMH) CRD allows the `userData`, `metaData`, and `networkData` for the provision…
|
-
|
CVE-2024-43803
|
2024-09-4 04:40 |
2024-09-4 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
312427
|
7.5 |
HIGH
Network
|
barix
|
sip_client_firmware
|
Barix – CWE-200 Exposure of Sensitive Information to an Unauthorized Actor
|
CWE-200
Information Exposure
|
CVE-2024-41700
|
2024-09-4 04:37 |
2024-08-20 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
312428
|
7.5 |
HIGH
Network
|
tenda
|
fh1201_firmware
|
Tenda FH1201 v1.2.0.14 (408) was discovered to contain a stack overflow via the wanmode parameter in the fromAdvSetWan function. This vulnerability allows attackers to cause a Denial of Service (DoS)…
|
CWE-787
Out-of-bounds Write
|
CVE-2024-42941
|
2024-09-4 04:35 |
2024-08-16 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
312429
|
7.5 |
HIGH
Network
|
tenda
|
fh1201_firmware
|
Tenda FH1201 v1.2.0.14 (408) was discovered to contain a stack overflow via the page parameter in the fromP2pListFilter function. This vulnerability allows attackers to cause a Denial of Service (DoS…
|
CWE-787
Out-of-bounds Write
|
CVE-2024-42940
|
2024-09-4 04:35 |
2024-08-16 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
312430
|
5.4 |
MEDIUM
Network
|
mayurik
|
best_house_rental_management_system
|
A Stored Cross Site Scripting (XSS) vulnerability was found in "manage_houses.php" in SourceCodester Best House Rental Management System v1.0. It allows remote attackers to execute arbitrary code via…
|
CWE-79
Cross-site Scripting
|
CVE-2024-40473
|
2024-09-4 04:35 |
2024-08-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|