Click to open the Alert Filter

 
Year Month
Severity
Categories
Search by Alert Name
Page(s) : 1 ... 10 11 12 13 14 15 16 17 18 19 [20] 21 22 23 24 25 26 27 28 29 30 ... Result(s) : 267762

Alerts Feed Alerts

DATE NAME CATEGORIES DETAIL
N/A 2024-10-28 CVE-2024-51509 cve Tiki through 27.0 allows users who have certain permissions to insert a "Modules" (aka tiki-admin_modules.php) stored XSS payload in the Name.
N/A 2024-10-28 CVE-2024-39205 cve An issue in pyload-ng v0.5.0b3.dev85 running under python3.11 or below allows attackers to execute arbitrary code via a crafted HTTP request.
N/A 2024-10-28 CVE-2024-42930 cve PbootCMS 3.2.8 is vulnerable to URL Redirect.
N/A 2024-10-28 CVE-2024-48178 cve newbee-mall v1.0.0 is vulnerable to Server-Side Request Forgery (SSRF) via the goodsCoverImg parameter.
N/A 2024-10-28 CVE-2024-48195 cve Cross Site Scripting vulnerability in eyouCMS v.1.6.7 allows a remote attacker to obtain sensitive information via a crafted script to the post parameter.
N/A 2024-10-28 CVE-2024-48196 cve An issue in eyouCMS v.1.6.7 allows a remote attacker to obtain sensitive information via a crafted script to the post parameter.
N/A 2024-10-28 CVE-2024-48357 cve LyLme Spage 1.2.0 through 1.6.0 is vulnerable to SQL Injection via /admin/apply.php.
N/A 2024-10-28 CVE-2024-48465 cve The MRBS version 1.5.0 has an SQL injection vulnerability in the edit_entry_handler.php file, specifically in the rooms%5B%5D parameter
N/A 2024-10-28 CVE-2024-48825 cve Tenda AC7 v.15.03.06.44 ate_ifconfig_set has pre-authentication command injection allowing remote attackers to execute arbitrary code.
N/A 2024-10-28 CVE-2024-48826 cve Tenda AC7 v.15.03.06.44 ate_iwpriv_set has pre-authentication command injection allowing remote attackers to execute arbitrary code.
N/A 2024-10-28 CVE-2024-49755 cve Duende IdentityServer is an OpenID Connect and OAuth 2.x framework for ASP.NET Core. IdentityServer's local API authentication handler performs insufficient validation of t...
N/A 2024-10-28 CVE-2024-50434 cve Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Theme Horse NewsCard.This issue affects NewsCa...
N/A 2024-10-28 CVE-2024-50435 cve Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Theme Horse Meta News.This issue affects Meta ...
N/A 2024-10-28 CVE-2024-50436 cve Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Theme Horse Clean Retina.This issue affects Cl...
N/A 2024-10-28 CVE-2024-50453 cve Relative Path Traversal vulnerability in Webangon The Pack Elementor addons allows PHP Local File Inclusion.This issue affects The Pack Elementor addons: from n/a through 2.0.9.
N/A 2024-10-28 CVE-2024-50457 cve : Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Qode Interactive Qode Essential Addons.This ...
3.3 2024-10-28 CVE-2024-27849 cve A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in macOS Sequoia 15. An app may be able to read sensitive location inform...
3.3 2024-10-28 CVE-2024-40792 cve A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15. A malicious app may be able to change network settings.
2.4 2024-10-28 CVE-2024-40851 cve This issue was addressed by restricting options offered on a locked device. This issue is fixed in iOS 18.1 and iPadOS 18.1. An attacker with physical access may be able to acce...
3.3 2024-10-28 CVE-2024-40853 cve This issue was addressed by restricting options offered on a locked device. This issue is fixed in iOS 18 and iPadOS 18. An attacker may be able to use Siri to enable Auto-Answe...
Page(s) : 1 ... 10 11 12 13 14 15 16 17 18 19 [20] 21 22 23 24 25 26 27 28 29 30 ... Result(s) : 267762