CVE Alert: CVE-2024-54205
Vulnerability Summary: CVE-2024-54205 Cross-Site Request Forgery (CSRF) vulnerability in Paloma Paloma Widget allows Cross Site Request Forgery.This issue affects Paloma...
Vulnerability Summary: CVE-2024-54205 Cross-Site Request Forgery (CSRF) vulnerability in Paloma Paloma Widget allows Cross Site Request Forgery.This issue affects Paloma...
Vulnerability Summary: CVE-2024-54207 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Owen Cutajar & Hyder Jaffari...
Vulnerability Summary: CVE-2024-54206 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in URBAN BASE Z-Downloads allows Stored...
Vulnerability Summary: CVE-2024-54211 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Visualmodo Borderless allows Cross-Site Scripting...
Vulnerability Summary: CVE-2024-11738 A flaw was found in Rustls 0.23.13 and related APIs. This vulnerability allows denial of service (panic)...
Vulnerability Summary: CVE-2024-54213 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in zionbuilder.io WordPress Page Builder –...
Vulnerability Summary: CVE-2024-54214 Unrestricted Upload of File with Dangerous Type vulnerability in NotFound Revy allows Upload a Web Shell to...
Vulnerability Summary: CVE-2024-54212 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Noor alam Magical Addons For...
Vulnerability Summary: CVE-2024-50677 A cross-site scripting (XSS) vulnerability in OroPlatform CMS v5.1 allows attackers to execute arbitrary web scripts or...
Vulnerability Summary: CVE-2024-30129 The HTTP host header can be manipulated and cause the application to behave in unexpected ways. Any...
Vulnerability Summary: CVE-2024-42196 HCL Launch stores potentially sensitive information in log files that could be read by a local user...
Vulnerability Summary: CVE-2024-54137 liboqs is a C-language cryptographic library that provides implementations of post-quantum cryptography algorithms. A correctness error has...
Vulnerability Summary: CVE-2024-54141 phpMyFAQ is an open source FAQ web application for PHP 8.1+ and MySQL, PostgreSQL and other databases....
Vulnerability Summary: CVE-2024-11220 A local low-level user on the server machine with credentials to the running OAS services can create...
Vulnerability Summary: CVE-2024-54135 ClipBucket V5 provides open source video hosting with PHP. ClipBucket-v5 Version 2.0 to Version 5.5.1 Revision 199...
Vulnerability Summary: CVE-2024-54750 Ubiquiti U6-LR 6.6.65 was discovered to contain a hardcoded password vulnerability in /etc/shadow, which allows attackers to...
Vulnerability Summary: CVE-2024-47043 Ruijie Reyee OS versions 2.206.x up to but not including 2.320.x could enable an attacker to correlate...
Vulnerability Summary: CVE-2024-54136 ClipBucket V5 provides open source video hosting with PHP. ClipBucket-v5 Version 5.5.1 Revision 199 and below is...
Vulnerability Summary: CVE-2024-42494 Ruijie Reyee OS versions 2.206.x up to but not including 2.320.x contains a a feature that could...
Vulnerability Summary: CVE-2024-51727 Ruijie Reyee OS versions 2.206.x up to but not including 2.320.x contains a feature that could enable...
Vulnerability Summary: CVE-2024-52320 The affected product is vulnerable to a command injection. An unauthenticated attacker could send commands through a...
Vulnerability Summary: CVE-2024-48871 The affected product is vulnerable to a stack-based buffer overflow. An unauthenticated attacker could send a malicious...
Vulnerability Summary: CVE-2024-47547 Ruijie Reyee OS versions 2.206.x up to but not including 2.320.x contains a weak mechanism for its...
Vulnerability Summary: CVE-2024-46874 Ruijie Reyee OS versions 2.206.x up to but not including 2.320.x could allow MQTT clients connecting with...