|
312101
|
5.5 |
MEDIUM
Local
|
adobe
|
acrobat acrobat_dc acrobat_reader acrobat_reader_dc
|
Acrobat Reader versions 20.005.30636, 24.002.20964, 24.001.30123, 24.002.20991 and earlier are affected by a Use After Free vulnerability that could lead to disclosure of sensitive memory. An attacke…
|
CWE-416
Use After Free
|
CVE-2024-45107
|
2024-09-7 01:26 |
2024-09-5 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
312102
|
5.5 |
MEDIUM
Local
|
linux
|
linux_kernel
|
In the Linux kernel, the following vulnerability has been resolved:
xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration
re-enumerating full-speed devices after a failed address …
|
CWE-476
NULL Pointer Dereference
|
CVE-2024-45006
|
2024-09-7 01:26 |
2024-09-5 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
312103
|
5.3 |
MEDIUM
Network
|
trellix
|
intrusion_prevention_system_manager
|
This vulnerability allows unauthenticated remote attackers to bypass authentication and gain partial data access to the vulnerable Trellix IPS Manager with garbage data in response mostly
|
CWE-287
Improper Authentication
|
CVE-2024-5956
|
2024-09-7 01:25 |
2024-09-5 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
312104
|
7.5 |
HIGH
Network
|
trellix
|
intrusion_prevention_system_manager
|
This vulnerability allows unauthenticated remote attackers to bypass authentication and gain APIs access of the Manager.
|
CWE-287
Improper Authentication
|
CVE-2024-5957
|
2024-09-7 01:24 |
2024-09-5 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
312105
|
4.3 |
MEDIUM
Network
|
wpextended
|
wp_extended
|
The The Ultimate WordPress Toolkit – WP Extended plugin for WordPress is vulnerable to unauthorized modification of user names due to a missing capability check on the wpext_change_admin_name() funct…
|
CWE-862
Missing Authorization
|
CVE-2024-8121
|
2024-09-7 01:20 |
2024-09-4 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
312106
|
6.1 |
MEDIUM
Network
|
wpextended
|
wp_extended
|
The The Ultimate WordPress Toolkit – WP Extended plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the page parameter in all versions up to, and including, 3.0.8 due to insuffi…
|
CWE-79
Cross-site Scripting
|
CVE-2024-8119
|
2024-09-7 01:11 |
2024-09-4 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
312107
|
6.1 |
MEDIUM
Network
|
wpextended
|
wp_extended
|
The The Ultimate WordPress Toolkit – WP Extended plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘selected_option’ parameter in all versions up to, and including, 3.0.8 d…
|
CWE-79
Cross-site Scripting
|
CVE-2024-8117
|
2024-09-7 01:04 |
2024-09-4 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
312108
|
6.5 |
MEDIUM
Network
|
bitapps
|
bit_form
|
Incorrect Authorization vulnerability in Bit Apps Bit Form Pro bitformpro allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Bit Form Pro: from n/a through 2.6.4.
|
CWE-863
Incorrect Authorization
|
CVE-2024-43250
|
2024-09-7 01:02 |
2024-08-20 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
312109
|
7.8 |
HIGH
Local
|
samsung
|
notes
|
Path traversal in Samsung Notes prior to version 4.4.21.62 allows local attackers to execute arbitrary code.
|
CWE-22
Path Traversal
|
CVE-2024-34656
|
2024-09-7 00:57 |
2024-09-4 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
312110
|
5.5 |
MEDIUM
Local
|
linux
|
linux_kernel
|
In the Linux kernel, the following vulnerability has been resolved:
regulator: da9211: Use irq handler when ready
If the system does not come from reset (like when it is kexec()), the
regulator mig…
|
NVD-CWE-noinfo
|
CVE-2022-48891
|
2024-09-7 00:39 |
2024-08-21 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|