IBM QRadar Suite information dislosure | CVE-2023-47742
NAME__________IBM QRadar Suite information dislosurePlatforms Affected:IBM Cloud Pak for Security 1.10.0.0 IBM Cloud Pak for Security 1.10.11.0 IBM QRadar Suite...
CVE
Osclass index.php SQL injection | CVE-2024-27515
NAME__________Osclass index.php SQL injectionPlatforms Affected:Osclass Osclass 5.1.2Risk Level:6.5Exploitability:HighConsequences:Data Manipulation DESCRIPTION__________Osclass is vulnerable to SQL injection. A remote attacker could send...
dp-golang security bypass | CVE-2024-27294
NAME__________dp-golang security bypassPlatforms Affected:dp-golang dp-golang 1.2.6Risk Level:7.3Exploitability:UnprovenConsequences:Bypass Security DESCRIPTION__________dp-golang could allow a local authenticated attacker to bypass security restrictions, caused...
Sirv plugin for WordPress security bypass | CVE-2024-27950
NAME__________Sirv plugin for WordPress security bypassPlatforms Affected:WordPress WordPress WordPress Sirv Plugin for WordPress 7.2.0Risk Level:5.4Exploitability:UnprovenConsequences:Bypass Security DESCRIPTION__________Sirv plugin for WordPress...
Atahualpa Theme for WordPress cross-site request forgery | CVE-2024-27948
NAME__________Atahualpa Theme for WordPress cross-site request forgeryPlatforms Affected:WordPress WordPress WordPress Atahualpa theme for WordPress 3.7.24Risk Level:5.4Exploitability:UnprovenConsequences:Gain Access DESCRIPTION__________Atahualpa Theme for...
IBM QRadar Suite information disclosure | CVE-2024-22355
NAME__________IBM QRadar Suite information disclosurePlatforms Affected:IBM Cloud Pak for Security 1.10.0.0 IBM Cloud Pak for Security 1.10.11.0 IBM QRadar Suite...
Sirv plugin for WordPress server-side request forgery | CVE-2024-27949
NAME__________Sirv plugin for WordPress server-side request forgeryPlatforms Affected:WordPress WordPress WordPress Sirv Plugin for WordPress 7.2.0Risk Level:5.4Exploitability:UnprovenConsequences:Obtain Information DESCRIPTION__________Sirv plugin for...
IBM MQ Container information disclosure | CVE-2024-27255
NAME__________IBM MQ Container information disclosurePlatforms Affected:IBM MQ Operator 2.3.0 IBM MQ Operator 2.3.3 IBM MQ Operator 2.0.0 IBM MQ Operator...
IBM MQ denial of service | CVE-2024-25016
NAME__________IBM MQ denial of servicePlatforms Affected:Risk Level:7.5Exploitability:UnprovenConsequences:Denial of Service DESCRIPTION__________IBM MQ and IBM MQ Appliance 9.0, 9.1, 9.2, 9.3 LTS...
CodeAstro Membership Management System file upload | CVE-2024-25869
NAME__________CodeAstro Membership Management System file uploadPlatforms Affected:CodeAstro Membership Management System 1.0Risk Level:5.3Exploitability:HighConsequences:Data Manipulation DESCRIPTION__________CodeAstro Membership Management System could allow a...
CodeAstro Membership Management System SQL injection | CVE-2024-25867
NAME__________CodeAstro Membership Management System SQL injectionPlatforms Affected:CodeAstro Membership Management System 1.0Risk Level:6.5Exploitability:HighConsequences:Data Manipulation DESCRIPTION__________CodeAstro Membership Management System is vulnerable to...
Nagios XI SQL injection | CVE-2024-24401
NAME__________Nagios XI SQL injectionPlatforms Affected:Nagios Nagios XI 2024R1.01Risk Level:6.5Exploitability:UnprovenConsequences:Data Manipulation DESCRIPTION__________Nagios XI is vulnerable to SQL injection. A remote attacker...
D-Link DIR-823G denial of service | CVE-2024-27657
NAME__________D-Link DIR-823G denial of servicePlatforms Affected:D-Link DIR-823G 1.0.2B05Risk Level:5.3Exploitability:Proof of ConceptConsequences:Denial of Service DESCRIPTION__________D-Link DIR-823G is vulnerable to a denial...
Suricata denial of service | CVE-2024-23839
NAME__________Suricata denial of servicePlatforms Affected:Open Information Security Foundation Suricata 7.0.0 Open Information Security Foundation Suricata 7.0.2Risk Level:7.1Exploitability:UnprovenConsequences:Denial of Service DESCRIPTION__________Suricata...
Field Logic DataCube3 cross-site scripting | CVE-2024-25831
NAME__________Field Logic DataCube3 cross-site scriptingPlatforms Affected:Field Logic DataCube3 1.0Risk Level:5.4Exploitability:UnprovenConsequences:Cross-Site Scripting DESCRIPTION__________Field Logic DataCube3 is vulnerable to cross-site scripting, caused...
Field Logic DataCube3 file upload | CVE-2024-25832
NAME__________Field Logic DataCube3 file uploadPlatforms Affected:Field Logic DataCube3 1.0Risk Level:6.3Exploitability:UnprovenConsequences:Gain Access DESCRIPTION__________Field Logic DataCube3 could allow a remote authenticated attacker...
Suricata denial of service | CVE-2024-23836
NAME__________Suricata denial of servicePlatforms Affected:Open Information Security Foundation Suricata 7.0.0 Open Information Security Foundation Suricata 7.0.2Risk Level:7.5Exploitability:UnprovenConsequences:Denial of Service DESCRIPTION__________Suricata...
LibHTP denial of service | CVE-2024-23837
NAME__________LibHTP denial of servicePlatforms Affected:Open Information Security Foundation LibHTP 0.5.45Risk Level:7.5Exploitability:UnprovenConsequences:Denial of Service DESCRIPTION__________LibHTP is vulnerable to a denial of...
Suricata denial of service | CVE-2024-23835
NAME__________Suricata denial of servicePlatforms Affected:Open Information Security Foundation Suricata 7.0.0 Open Information Security Foundation Suricata 7.0.2Risk Level:7.5Exploitability:UnprovenConsequences:Denial of Service DESCRIPTION__________Suricata...
Field Logic DataCube3 information disclosure | CVE-2024-25830
NAME__________Field Logic DataCube3 information disclosurePlatforms Affected:Field Logic DataCube3 1.0Risk Level:5.3Exploitability:UnprovenConsequences:Obtain Information DESCRIPTION__________Field Logic DataCube3 could allow a remote attacker to...
Account Manager module for PrestaShop directory traversal | CVE-2024-25840
NAME__________Account Manager module for PrestaShop directory traversalPlatforms Affected:PrestaShop PrestaShop PrestaShop Account Manager module for PrestaShop 8.0.0 PrestaShop Account Manager module...
Nagios XI privilege escalation | CVE-2024-24402
NAME__________Nagios XI privilege escalationPlatforms Affected:Risk Level:4.3Exploitability:UnprovenConsequences:Gain Privileges DESCRIPTION__________Nagios XI could allow a remote authenticated attacker to gain elevated privileges on...
D-Link DIR-823G denial of service | CVE-2024-27655
NAME__________D-Link DIR-823G denial of servicePlatforms Affected:D-Link DIR-823G 1.0.2B05Risk Level:5.3Exploitability:Proof of ConceptConsequences:Denial of Service DESCRIPTION__________D-Link DIR-823G is vulnerable to a denial...
Docassemble open redirect | CVE-2024-27291
NAME__________Docassemble open redirectPlatforms Affected:Jonathan Pyle Docassemble 1.4.53 Jonathan Pyle Docassemble 1.4.96Risk Level:6.1Exploitability:UnprovenConsequences:Other DESCRIPTION__________Docassemble could allow a remote attacker to conduct...
