|
312081
|
5.3 |
MEDIUM
Network
|
mezz
|
justenoughitems
|
JustEnoughItems (JEI) 19.5.0.33 and before contains an Improper Validation of Specified Index, Position, or Offset in Input vulnerability. The specific issue is a failure to validate slot index in JE…
|
CWE-129
Improper Validation of Array Index
|
CVE-2024-41565
|
2024-09-20 01:19 |
2024-08-29 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
312082
|
7.3 |
HIGH
Local
|
openpolicyagent
|
open_policy_agent
|
A SMB force-authentication vulnerability exists in all versions of OPA for Windows prior to v0.68.0. The vulnerability exists because of improper input validation, allowing a user to pass an arbitrar…
|
CWE-294
Authentication Bypass by Capture-replay
|
CVE-2024-8260
|
2024-09-20 01:08 |
2024-08-30 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
312083
|
4.6 |
MEDIUM
Physics
|
ibm
|
maas360_mdm
|
IBM MaaS360 for Android 6.31 through 8.60 is using hard coded credentials that can be obtained by a user with physical access to the device.
|
CWE-798
Use of Hard-coded Credentials
|
CVE-2024-35118
|
2024-09-20 00:53 |
2024-08-30 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
312084
|
8.1 |
HIGH
Network
|
zohocorp
|
manageengine_exchange_reporter_plus
|
Zohocorp ManageEngine Exchange Reporter Plus versions before 5715 are vulnerable to SQL Injection in the reports module.
|
CWE-89
SQL Injection
|
CVE-2024-6204
|
2024-09-20 00:41 |
2024-08-31 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
312085
|
8.1 |
HIGH
Network
|
master-nan
|
sweet-cms
|
A vulnerability was found in master-nan Sweet-CMS up to 5f441e022b8876f07cde709c77b5be6d2f262e3f. It has been rated as problematic. This issue affects the function LogHandler of the file middleware/l…
|
CWE-117
Improper Output Neutralization for Logs
|
CVE-2024-8334
|
2024-09-20 00:39 |
2024-08-30 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
312086
|
9.8 |
CRITICAL
Network
|
openrapid
|
rapidcms
|
A vulnerability classified as critical has been found in OpenRapid RapidCMS up to 1.3.1. Affected is an unknown function of the file /resource/runlogon.php. The manipulation of the argument username …
|
CWE-89
SQL Injection
|
CVE-2024-8335
|
2024-09-20 00:31 |
2024-08-30 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
312087
|
8.1 |
HIGH
Network
|
eclipse
|
eclipse_dataspace_components
|
In Eclipse Dataspace Components, from version 0.5.0 and before version 0.9.0, the ConsumerPullTransferTokenValidationApiController does not check for token validity (expiry, not-before, issuance date…
|
CWE-287
Improper Authentication
|
CVE-2024-8642
|
2024-09-20 00:18 |
2024-09-11 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
312088
|
7.5 |
HIGH
Network
|
hoverfly
|
hoverfly
|
Hoverfly is a lightweight service virtualization/ API simulation / API mocking tool for developers and testers. The `/api/v2/simulation` POST handler allows users to create new simulation views from …
|
CWE-22
Path Traversal
|
CVE-2024-45388
|
2024-09-20 00:18 |
2024-09-3 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
312089
|
4.6 |
MEDIUM
Physics
|
idec
|
kit-fc6a-24-kc_firmware
kit-fc6a-24-pc_firmware
kit-fc6a-24-ra_firmware
kit-fc6a-24-ra-hg1g_firmware
kit-fc6a-24-ra-hg2g-5tn_firmware
kit-fc6a-24-ra-hg2g-5tt_firmware
kit-fc6a-24-rc…
|
Cleartext transmission of sensitive information vulnerability exists in multiple IDEC PLCs. If an attacker sends a specific command to PLC's serial communication port, user credentials may be obtaine…
|
CWE-319
Cleartext Transmission of Sensitive Information
|
CVE-2024-41927
|
2024-09-20 00:10 |
2024-09-4 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
312090
|
7.8 |
HIGH
Local
|
adobe
|
acrobat
acrobat_dc
acrobat_reader
acrobat_reader_dc
|
Acrobat Reader versions 24.002.21005, 24.001.30159, 20.005.30655, 24.003.20054 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context …
|
CWE-416
Use After Free
|
CVE-2024-41869
|
2024-09-20 00:09 |
2024-09-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
