CVE Alert: CVE-2024-25694
Vulnerability Summary: CVE-2024-25694 There is a stored Cross-site Scripting vulnerability in Esri Portal for ArcGIS Enterprise versions 10.8.1 – 10.9.1...
Vulnerability Summary: CVE-2024-25694 There is a stored Cross-site Scripting vulnerability in Esri Portal for ArcGIS Enterprise versions 10.8.1 – 10.9.1...
Vulnerability Summary: CVE-2024-38040 There is a local file inclusion vulnerability in Esri Portal for ArcGIS 11.2. 11.1, 11.0 and 10.9.1...
Vulnerability Summary: CVE-2024-25702 There is a stored Cross-site Scripting vulnerability in Esri Portal for ArcGIS Enterprise Sites versions 10.8.1 –...
Vulnerability Summary: CVE-2024-38037 There is an unvalidated redirect vulnerability in Esri Portal for ArcGIS 11.0 and 10.9.1 that may allow...
Vulnerability Summary: CVE-2024-8148 There is an unvalidated redirect vulnerability in Esri Portal for ArcGIS 10.8.1 - 11.2 that may allow...
Vulnerability Summary: CVE-2024-47911 In SonarSource SonarQube 10.4 through 10.5 before 10.6, a vulnerability was discovered in the authorizations/group-memberships API endpoint...
Vulnerability Summary: CVE-2024-8149 There is a reflected XSS vulnerability in Esri Portal for ArcGIS versions 11.1 and 11.2 which may...
Vulnerability Summary: CVE-2024-38038 There is a reflected XSS vulnerability in Esri Portal for ArcGIS versions 10.9.1, 10.8.1 and 10.7.1 which...
Vulnerability Summary: CVE-2024-47136 Out-of-bounds read vulnerability exists in Kostac PLC Programming Software (Former name: Koyo PLC Programming Software) Version 1.6.14.0...
Vulnerability Summary: CVE-2024-47135 Stack-based buffer overflow vulnerability exists in Kostac PLC Programming Software (Former name: Koyo PLC Programming Software) Version...
Vulnerability Summary: CVE-2024-47134 Out-of-bounds write vulnerability exists in Kostac PLC Programming Software (Former name: Koyo PLC Programming Software) Version 1.6.14.0...
Vulnerability Summary: CVE-2024-9313 Authd PAM module before version 0.3.5 can allow broker-managed users to impersonate any other user managed by...
Vulnerability Summary: CVE-2024-42504 A security vulnerability in HPE IceWall Agent products could be exploited remotely to cause a Cross-Site Request...
Vulnerability Summary: CVE-2024-8352 The Social Web Suite – Social Media Auto Post, Social Media Auto Publish plugin for WordPress is...
Vulnerability Summary: CVE-2024-8159 Deep Freeze 9.00.020.5760 is vulnerable to an out-of-bounds read vulnerability by triggering the 0x70014 IOCTL code of...
Vulnerability Summary: CVE-2024-47614 async-graphql is a GraphQL server library implemented in Rust. async-graphql before 7.0.10 does not limit the number...
Vulnerability Summary: CVE-2024-47617 Sulu is a PHP content management system. This vulnerability allows an attacker to inject arbitrary HTML/JavaScript code...
Vulnerability Summary: CVE-2024-9460 A vulnerability was found in Codezips Online Shopping Portal 1.0. It has been classified as critical. Affected...
Vulnerability Summary: CVE-2024-47561 Schema parsing in the Java SDK of Apache Avro 1.11.3 and previous versions allows bad actors to...
Vulnerability Summary: CVE-2024-9100 Zohocorp ManageEngine Analytics Plus versions before 5410 and Zoho Analytics On-Premise versions before 5410 are vulnerable to...
Vulnerability Summary: CVE-2024-25590 An attacker can publish a zone containing specific Resource Record Sets. Repeatedly processing and caching results for...
Vulnerability Summary: CVE-2024-41922 A directory traversal vulnerability exists in the log files download functionality of Veertu Anka Build 1.42.0. A...
Vulnerability Summary: CVE-2024-5803 The AVGUI.exe of AVG/Avast Antivirus before versions before 24.1 can allow a local attacker to escalate privileges...
Vulnerability Summary: CVE-2024-41163 A directory traversal vulnerability exists in the archive download functionality of Veertu Anka Build 1.42.0. A specially...