CVEs published November 12, 2024
332 CVEs were published on November 12, 2024: 19 critical, 177 high. 4 are now in CISA KEV.
- Published
- 332
- Critical
- 19
- High
- 177
- Medium
- 125
- Low
- 11
- Unrated
- 0
- Now in CISA KEV
- 4
- Fix available
- 162
Most affected products
- Microsoft SQL Server
- 31
- Adobe Substance3D - Painter
- 22
- Microsoft Windows Server · Microsoft Windows
- 17
- Microsoft Windows
- 16
- Adobe Illustrator
- 9
- Ivanti Connect Secure · Ivanti Policy Secure
- 9
- Google Chrome
- 8
- Ivanti Endpoint Manager
- 8
- FreeBSD
- 7
- Adobe After Effects
- 6
Critical 19
- CVE-2024-10218TIBCO Hawk Stored-XEE VulnerabilityTIBCO Software TIBCO Hawk · TIBCO Software TIBCO Operationa…
- CVE-2024-10217TIBCO Hawk Stored-XSS VulnerabilityTIBCO Software TIBCO Hawk · TIBCO Software TIBCO Operationa…
- CVE-2024-43639Windows KDC Proxy Remote Code Execution VulnerabilityMicrosoft Windows Server
- CVE-2024-43498.NET and Visual Studio Remote Code Execution VulnerabilityMicrosoft PowerShell · Microsoft Visual Studio +2
- CVE-2024-43602Azure CycleCloud Remote Code Execution VulnerabilityMicrosoft Azure CycleCloud
- CVE-2024-10943FactoryTalk® Updater Authentication BypassRockwell Automation FactoryTalk Updater
- CVE-2024-49369Icinga 2 has a TLS Certificate Validation Bypass for JSON-RPC and HTTP API Connectionsicinga2
- CVE-2024-11005Command injection in Ivanti Connect Secure before version 22.7R2.1 (Not Applicable to 9.1Rx) and Ivanti Policy Secure before version 22.7R1.Ivanti Connect Secure · Ivanti Policy Secure
- CVE-2024-11006Command injection in Ivanti Connect Secure before version 22.7R2.1 (Not Applicable to 9.1Rx) and Ivanti Policy Secure before version 22.7R1.Ivanti Connect Secure · Ivanti Policy Secure
- CVE-2024-11007Command injection in Ivanti Connect Secure before version 22.7R2.1 (Not Applicable to 9.1Rx) and Ivanti Policy Secure before version 22.7R1.Ivanti Connect Secure · Ivanti Policy Secure
- CVE-2024-52297Tolgee's configuration all configuration properties leaked in public configuration DTOtolgee-platform
- CVE-2024-43415Decidim-Awesome: SQL injection in AdminAccountabilitydecidim-ice decidim-module-decidim_awesome · decidim-decidi…
- CVE-2024-50330SQL injection in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6 November Security Update allows a remote unauthentIvanti Endpoint Manager
- CVE-2024-8074Sensetive Data Exposure in Nomysoft Informatics' NomysemNomysoft Informatics Nomysem
- CVE-2024-46890A vulnerability has been identified in SINEC INS (All versions < V1.0 SP2 Update 3).Siemens SINEC INS
- CVE-2024-46888A vulnerability has been identified in SINEC INS (All versions < V1.0 SP2 Update 3).Siemens SINEC INS
- CVE-2024-44102A vulnerability has been identified in PP TeleControl Server Basic 1000 to 5000 V3.1 (6NH9910-0AA31-0AE1) (All versions < V3.1.2.1 with reduSiemens PP TeleControl Server Basic 1000 to 5000 · Siem… +11
- CVE-2024-10245Relais 2FA <= 1.0 - Authentication Bypassmobisoft974 Relais 2FA
- CVE-2023-52268The End-User Portal module before 1.0.65 for FreeScout sometimes allows an attacker to authenticate as an arbitrary user because a session t
High 177
- CVE-2024-49509InDesign Desktop | Heap-based Buffer Overflow (CWE-122)Adobe InDesign Desktop
- CVE-2024-49507InDesign Desktop | Heap-based Buffer Overflow (CWE-122)Adobe InDesign Desktop
- CVE-2024-49508InDesign Desktop | Heap-based Buffer Overflow (CWE-122)Adobe InDesign Desktop
- CVE-2024-11115Insufficient policy enforcement in Navigation in Google Chrome on iOS prior to 131.0.6778.69 allowed a remote attacker to perform privilege Google Chrome
- CVE-2024-11114Inappropriate implementation in Views in Google Chrome on Windows prior to 131.0.6778.69 allowed a remote attacker who had compromised the rGoogle Chrome
- CVE-2024-11113Use after free in Accessibility in Google Chrome prior to 131.0.6778.69 allowed a remote attacker who had compromised the renderer process tGoogle Chrome
- CVE-2024-11112Use after free in Media in Google Chrome on Windows prior to 131.0.6778.69 allowed a remote attacker to potentially exploit heap corruption Google Chrome
- CVE-2024-49525Substance3D - Painter | Heap-based Buffer Overflow (CWE-122)Adobe Substance3D - Painter
- CVE-2024-47427Substance3D - Painter | Out-of-bounds Write (CWE-787)Adobe Substance3D - Painter
- CVE-2024-49515Substance3D - Painter | Untrusted Search Path (CWE-426)Adobe Substance3D - Painter
- CVE-2024-49518Substance3D - Painter | Out-of-bounds Write (CWE-787)Adobe Substance3D - Painter
- CVE-2024-49520Substance3D - Painter | Out-of-bounds Write (CWE-787)Adobe Substance3D - Painter
- CVE-2024-47429Substance3D - Painter | Out-of-bounds Write (CWE-787)Adobe Substance3D - Painter
- CVE-2024-47431Substance3D - Painter | Heap-based Buffer Overflow (CWE-122)Adobe Substance3D - Painter
- CVE-2024-47428Substance3D - Painter | Out-of-bounds Write (CWE-787)Adobe Substance3D - Painter
- CVE-2024-47430Substance3D - Painter | Out-of-bounds Write (CWE-787)Adobe Substance3D - Painter
- CVE-2024-49519Substance3D - Painter | Out-of-bounds Write (CWE-787)Adobe Substance3D - Painter
- CVE-2024-49517Substance3D - Painter | Heap-based Buffer Overflow (CWE-122)Adobe Substance3D - Painter
- CVE-2024-47432Substance3D - Painter | Out-of-bounds Write (CWE-787)Adobe Substance3D - Painter
- CVE-2024-47434Substance3D - Painter | Out-of-bounds Write (CWE-787)Adobe Substance3D - Painter
- CVE-2024-47433Substance3D - Painter | Out-of-bounds Write (CWE-787)Adobe Substance3D - Painter
- CVE-2024-49516Substance3D - Painter | Out-of-bounds Write (CWE-787)Adobe Substance3D - Painter
- CVE-2024-47426Substance3D - Painter | Double Free (CWE-415)Adobe Substance3D - Painter
- CVE-2024-2208Sound Research SECOMN64 Escalation of PrivilegeSound Research SECOMN64 Driver
- CVE-2024-52301Laravel allows environment manipulation via query stringlaravel framework · laravel/framework
- CVE-2024-45114Illustrator | Out-of-bounds Write (CWE-787)Adobe Illustrator
- CVE-2024-47451Illustrator | Out-of-bounds Write (CWE-787)Adobe Illustrator
- CVE-2024-47450Illustrator | Heap-based Buffer Overflow (CWE-122)Adobe Illustrator
- CVE-2024-47452Illustrator | Out-of-bounds Write (CWE-787)Adobe Illustrator
- CVE-2024-23666A client-side enforcement of server-side security in Fortinet FortiAnalyzer-BigData at least version 7.4.0 and 7.2.0 through 7.2.6 and 7.0Fortinet FortiManager · Fortinet FortiAnalyzer
- CVE-2024-36513A privilege context switching error vulnerability [CWE-270] in FortiClient Windows version 7.2.4 and below, version 7.0.12 and below, 6.4 alFortinet FortiClientWindows
- CVE-2024-43613Azure Database for PostgreSQL Flexible Server Extension Elevation of Privilege VulnerabilityMicrosoft Azure Database for PostgreSQL Flexible Server
- CVE-2024-49042Azure Database for PostgreSQL Flexible Server Extension Elevation of Privilege VulnerabilityMicrosoft Azure Database for PostgreSQL Flexible Server
- CVE-2024-7516Brocade Fabric OS before 9.2.2 does not enforce strict host key checkingBrocade Fabric OS
- CVE-2024-47443After Effects | Out-of-bounds Write (CWE-787)Adobe After Effects
- CVE-2024-47441After Effects | Out-of-bounds Write (CWE-787)Adobe After Effects
- CVE-2024-47442After Effects | Out-of-bounds Write (CWE-787)Adobe After Effects
- CVE-2024-8534Memory safety vulnerability leading to memory corruption and Denial of ServiceNetSclaer NetScaler ADC · NetScaler Gateway
- CVE-2024-51721Vulnerabilities in SecuSUITE Server Components Impact SecuSUITEBlackBerry SecuSUITE
- CVE-2024-49051Microsoft PC Manager Elevation of Privilege VulnerabilityMicrosoft PC Manager
- CVE-2024-49050Visual Studio Code Python Extension Remote Code Execution VulnerabilityMicrosoft Python extension for Visual Studio Code
- CVE-2024-49048TorchGeo Remote Code Execution VulnerabilityMicrosoft TorchGeo · torchgeo
- CVE-2024-49039Windows Task Scheduler Elevation of Privilege VulnerabilityMicrosoft Windows Server · Microsoft Windows
- CVE-2024-49033Microsoft Word Security Feature Bypass VulnerabilityMicrosoft Office LTSC for Mac · Microsoft Office +2
- CVE-2024-49032Microsoft Office Graphics Remote Code Execution VulnerabilityMicrosoft Office LTSC for Mac · Microsoft Office +1
- CVE-2024-49031Microsoft Office Graphics Remote Code Execution VulnerabilityMicrosoft Office LTSC for Mac · Microsoft Office +1
- CVE-2024-49030Microsoft Excel Remote Code Execution VulnerabilityMicrosoft Office LTSC for Mac · Microsoft Office +2
- CVE-2024-49029Microsoft Excel Remote Code Execution VulnerabilityMicrosoft Office LTSC for Mac · Microsoft Office +2
- CVE-2024-49028Microsoft Excel Remote Code Execution VulnerabilityMicrosoft Office LTSC for Mac · Microsoft Office +2
- CVE-2024-49027Microsoft Excel Remote Code Execution VulnerabilityMicrosoft Office · Microsoft 365 Apps for Enterprise +1
- CVE-2024-49026Microsoft Excel Remote Code Execution VulnerabilityMicrosoft Office · Microsoft 365 Apps for Enterprise +1
- CVE-2024-49021Microsoft SQL Server Remote Code Execution VulnerabilityMicrosoft SQL Server
- CVE-2024-49019Active Directory Certificate Services Elevation of Privilege VulnerabilityMicrosoft Windows Server
- CVE-2024-49018SQL Server Native Client Remote Code Execution VulnerabilityMicrosoft SQL Server
- CVE-2024-49017SQL Server Native Client Remote Code Execution VulnerabilityMicrosoft SQL Server
- CVE-2024-49016SQL Server Native Client Remote Code Execution VulnerabilityMicrosoft SQL Server
- CVE-2024-49015SQL Server Native Client Remote Code Execution VulnerabilityMicrosoft SQL Server
- CVE-2024-49014SQL Server Native Client Remote Code Execution VulnerabilityMicrosoft SQL Server
- CVE-2024-49013SQL Server Native Client Remote Code Execution VulnerabilityMicrosoft SQL Server
- CVE-2024-49012SQL Server Native Client Remote Code Execution VulnerabilityMicrosoft SQL Server
- CVE-2024-49011SQL Server Native Client Remote Code Execution VulnerabilityMicrosoft SQL Server
- CVE-2024-49010SQL Server Native Client Remote Code Execution VulnerabilityMicrosoft SQL Server
- CVE-2024-49009SQL Server Native Client Remote Code Execution VulnerabilityMicrosoft SQL Server
- CVE-2024-49008SQL Server Native Client Remote Code Execution VulnerabilityMicrosoft SQL Server
- CVE-2024-49006SQL Server Native Client Remote Code Execution VulnerabilityMicrosoft SQL Server
- CVE-2024-49007SQL Server Native Client Remote Code Execution VulnerabilityMicrosoft SQL Server
- CVE-2024-49005SQL Server Native Client Remote Code Execution VulnerabilityMicrosoft SQL Server
- CVE-2024-49004SQL Server Native Client Remote Code Execution VulnerabilityMicrosoft SQL Server
- CVE-2024-49003SQL Server Native Client Remote Code Execution VulnerabilityMicrosoft SQL Server
- CVE-2024-49002SQL Server Native Client Remote Code Execution VulnerabilityMicrosoft SQL Server
- CVE-2024-49001SQL Server Native Client Remote Code Execution VulnerabilityMicrosoft SQL Server
- CVE-2024-49000SQL Server Native Client Remote Code Execution VulnerabilityMicrosoft SQL Server
- CVE-2024-48999SQL Server Native Client Remote Code Execution VulnerabilityMicrosoft SQL Server
- CVE-2024-48998SQL Server Native Client Remote Code Execution VulnerabilityMicrosoft SQL Server
- CVE-2024-48997SQL Server Native Client Remote Code Execution VulnerabilityMicrosoft SQL Server
- CVE-2024-48993SQL Server Native Client Remote Code Execution VulnerabilityMicrosoft SQL Server
- CVE-2024-43642Windows SMB Denial of Service VulnerabilityMicrosoft Windows Server · Microsoft Windows
- CVE-2024-43641Windows Registry Elevation of Privilege VulnerabilityMicrosoft Windows Server · Microsoft Windows
- CVE-2024-43640Windows Kernel-Mode Driver Elevation of Privilege VulnerabilityMicrosoft Windows Server · Microsoft Windows
- CVE-2024-43636Win32k Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2024-43635Windows Telephony Service Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2024-43629Windows DWM Core Library Elevation of Privilege VulnerabilityMicrosoft Windows Server · Microsoft Windows
- CVE-2024-43624Windows Hyper-V Shared Virtual Disk Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2024-43622Windows Telephony Service Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2024-43621Windows Telephony Service Remote Code Execution VulnerabilityMicrosoft Windows Server · Microsoft Windows
- CVE-2024-43620Windows Telephony Service Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2024-43598LightGBM Remote Code Execution VulnerabilityMicrosoft LightGBM · lightgbm
- CVE-2024-49056Airlift.microsoft.com Elevation of Privilege Vulnerabilityairlift.microsoft.com
- CVE-2024-49049Visual Studio Code Remote Extension Elevation of Privilege VulnerabilityMicrosoft Visual Studio Code Remote - SSH Extension
- CVE-2024-49046Windows Win32 Kernel Subsystem Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2024-49043Microsoft.SqlServer.XEvent.Configuration.dll Remote Code Execution VulnerabilityMicrosoft SQL Server
- CVE-2024-49040Microsoft Exchange Server Spoofing VulnerabilityMicrosoft Exchange Server 2019 Cumulative Update · Microsof…
- CVE-2024-48996SQL Server Native Client Remote Code Execution VulnerabilityMicrosoft SQL Server
- CVE-2024-48995SQL Server Native Client Remote Code Execution VulnerabilityMicrosoft SQL Server
- CVE-2024-48994SQL Server Native Client Remote Code Execution VulnerabilityMicrosoft SQL Server
- CVE-2024-43462SQL Server Native Client Remote Code Execution VulnerabilityMicrosoft SQL Server
- CVE-2024-43459SQL Server Native Client Remote Code Execution VulnerabilityMicrosoft SQL Server
- CVE-2024-38255SQL Server Native Client Remote Code Execution VulnerabilityMicrosoft SQL Server
- CVE-2024-43452Windows Registry Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2024-43450Windows DNS Spoofing VulnerabilityMicrosoft Windows Server
- CVE-2024-43447Windows SMBv3 Server Remote Code Execution VulnerabilityMicrosoft Windows Server
- CVE-2024-43644Windows Client-Side Caching Elevation of Privilege VulnerabilityMicrosoft Windows Server · Microsoft Windows
- CVE-2024-43630Windows Kernel Elevation of Privilege VulnerabilityMicrosoft Windows Server · Microsoft Windows
- CVE-2024-43628Windows Telephony Service Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2024-43627Windows Telephony Service Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2024-43626Windows Telephony Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2024-43625Microsoft Windows VMSwitch Elevation of Privilege VulnerabilityMicrosoft Windows Server · Microsoft Windows
- CVE-2024-43623Windows NT OS Kernel Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2024-43499.NET and Visual Studio Denial of Service VulnerabilityMicrosoft Visual Studio · Microsoft PowerShell +2
- CVE-2024-43530Windows Update Stack Elevation of Privilege VulnerabilityMicrosoft Windows Server · Microsoft Windows
- CVE-2024-21976Improper input validation in the NPU driver could allow an attacker to supply a specially crafted pointer potentially leading to arbitrary cAMD Ryzen™ AI Software
- CVE-2024-21975Improper input validation in the NPU driver could allow an attacker to supply a specially crafted pointer potentially leading to arbitrary cAMD Ryzen™ AI Software
- CVE-2024-21974Improper input validation in the NPU driver could allow an attacker to supply a specially crafted pointer potentially leading to arbitrary cAMD Ryzen™ AI Software
- CVE-2024-21958Incorrect default permissions in the AMD Provisioning Console installation directory could allow an attacker to achieve privilege escalationAMD Provisioning Console (APC) Software
- CVE-2024-21957Incorrect default permissions in the AMD Management Console installation directory could allow an attacker to achieve privilege escalation pAMD Management Console
- CVE-2024-21946Incorrect default permissions in the AMD RyzenTM Master Utility installation directory could allow an attacker to achieve privilege escalatiAMD Ryzen Master Utility for Overclocking Control
- CVE-2024-21945Incorrect default permissions in the AMD RyzenTM Master monitoring SDK installation directory could allow an attacker to achieve privilege eAMD Ryzen™ Master Monitoring SDK
- CVE-2024-21939Incorrect default permissions in the AMD Cloud Manageability Service (ACMS) Software installation directory could allow an attacker to achieAMD Cloud Manageability Service Software
- CVE-2024-21938Incorrect default permissions in the AMD Management Plugin for the Microsoft® System Center Configuration Manager (SCCM) installation directAMD Management Plug-In for SCCM
- CVE-2024-21937Incorrect default permissions in the AMD HIP SDK installation directory could allow an attacker to achieve privilege escalation potentially AMD Software: PRO Edition · AMD Software: Adrenalin Edit… +1
- CVE-2024-10945FactoryTalk® Updater Local Privilege EscalationRockwell Automation FactoryTalk Updater
- CVE-2024-10944FactoryTalk® Updater Remote Code ExecutionRockwell Automation FactoryTalk Updater
- CVE-2024-49514Photoshop Desktop | Integer Underflow (Wrap or Wraparound) (CWE-191)Adobe Photoshop Desktop
- CVE-2024-10923Improper Neutralization vulnerability has been discovered in OpenText™ ALM Octane Management.OpenText™ ALM Octane Management
- CVE-2024-49521Adobe Commerce | Server-Side Request Forgery (SSRF) (CWE-918)Adobe Commerce
- CVE-2024-49528Animate | Out-of-bounds Write (CWE-787)Adobe Animate
- CVE-2024-49526Animate | Use After Free (CWE-416)Adobe Animate
- CVE-2024-7571Incorrect permissions in Ivanti Secure Access Client before 22.7R4 allows a local authenticated attacker to escalate their privileges.Ivanti Secure Access Client
- CVE-2024-9842Incorrect permissions in Ivanti Secure Access Client before version 22.7R4 allows a local authenticated attacker to create arbitrary foldersIvanti Secure Access Client
- CVE-2024-8539Improper authorization in Ivanti Secure Access Client before version 22.7R3 allows a local authenticated attacker to modify sensitive configIvanti Secure Access Client
- CVE-2024-52010Zoraxy has an authenticated command injection in the Web SSH featuretobychui zoraxy · github.com/tobychui/zoraxy
- CVE-2024-8495A null pointer dereference in Ivanti Connect Secure before version 22.7R2.1 and Ivanti Policy Secure before version 22.7R1.1 allows a remoteIvanti Connect Secure · Ivanti Policy Secure
- CVE-2024-47907A stack-based buffer overflow in IPsec of Ivanti Connect Secure before version 22.7R2.3 allows a remote unauthenticated attacker to cause a Ivanti Connect Secure
- CVE-2024-47906Excessive binary privileges in Ivanti Connect Secure before version 22.7R2.3 (Not Applicable to 9.1Rx) and Ivanti Policy Secure before versiIvanti Connect Secure · Ivanti Policy Secure
- CVE-2024-9420A use-after-free in Ivanti Connect Secure before version 22.7R2.3 and 9.1R18.9 and Ivanti Policy Secure before version 22.7R1.2 allows a rIvanti Connect Secure · Ivanti Policy Secure
- CVE-2024-50329Path traversal in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6 November Security Update allows a remote unauthenIvanti Endpoint Manager
- CVE-2024-50328SQL injection in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6 November Security Update allows a remote authenticIvanti Endpoint Manager
- CVE-2024-50327SQL injection in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6 November Security Update allows a remote authenticIvanti Endpoint Manager
- CVE-2024-50326SQL injection in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6 November Security Update allows a remote authenticIvanti Endpoint Manager
- CVE-2024-50324Path traversal in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6 November Security Update allows a remote authentiIvanti Endpoint Manager
- CVE-2024-50323SQL injection in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6 November Security Update allows a local unauthentiIvanti Endpoint Manager
- CVE-2024-50322Path traversal in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6 November Security Update allows a local unauthentIvanti Endpoint Manager
- CVE-2024-50331An out-of-bounds read vulnerability in Ivanti Avalanche before 6.4.6 allows a remote unauthenticated attacker to leak sensitive information Ivanti Avalanche
- CVE-2024-50321An infinite loop in Ivanti Avalanche before 6.4.6 allows a remote unauthenticated attacker to cause a denial of service.Ivanti Avalanche
- CVE-2024-50320An infinite loop in Ivanti Avalanche before 6.4.6 allows a remote unauthenticated attacker to cause a denial of service.Ivanti Avalanche
- CVE-2024-50319An infinite loop in Ivanti Avalanche before 6.4.6 allows a remote unauthenticated attacker to cause a denial of service.Ivanti Avalanche
- CVE-2024-50318A null pointer dereference in Ivanti Avalanche before 6.4.6 allows a remote unauthenticated attacker to cause a denial of service.Ivanti Avalanche
- CVE-2024-50317A null pointer dereference in Ivanti Avalanche before 6.4.6 allows a remote unauthenticated attacker to cause a denial of service.Ivanti Avalanche
- CVE-2024-45289Unbounded allocation in ctl(4) CAM Target LayerFreeBSD
- CVE-2024-42442Runtime Service Access outside SMRAMAMI AptioV
- CVE-2024-37365FactoryTalk View ME Remote Code Execution Vulnerability via Project Save PathRockwell Automation FactoryTalk View Machine Edition
- CVE-2024-51564bhyve(8) infinite loop in the hda audio driverFreeBSD
- CVE-2024-50386Apache CloudStack: Directly downloaded templates can be used to abuse KVM-based infrastructureApache Software Foundation Apache CloudStack
- CVE-2024-50572A vulnerability has been identified in RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2) (All versions < V8.2), RUGGEDCOM RM1224 LTE(4G) NAM Siemens RUGGEDCOM RM1224 LTE(4G) EU · Siemens RUGGEDCOM… +18
- CVE-2024-50557A vulnerability has been identified in RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2) (All versions < V8.2), RUGGEDCOM RM1224 LTE(4G) NAM Siemens RUGGEDCOM RM1224 LTE(4G) EU · Siemens RUGGEDCOM… +12
- CVE-2024-50310A vulnerability has been identified in SIMATIC CP 1543-1 V4.0 (6GK7543-1AX10-0XE0) (All versions >= V4.0.44 < V4.0.50).Siemens SIMATIC CP 1543-1
- CVE-2024-47942A vulnerability has been identified in Solid Edge SE2024 (All versions < V224.0 Update 9).Siemens Solid Edge SE2024
- CVE-2024-47941A vulnerability has been identified in Solid Edge SE2024 (All versions < V224.0 Update 9).Siemens Solid Edge SE2024
- CVE-2024-47940A vulnerability has been identified in Solid Edge SE2024 (All versions < V224.0 Update 9).Siemens Solid Edge SE2024
- CVE-2024-47808A vulnerability has been identified in SINEC NMS (All versions < V3.0 SP1).Siemens SINEC NMS
- CVE-2024-47783A vulnerability has been identified in SIPORT (All versions < V3.4.0).Siemens SIPORT
- CVE-2024-29119A vulnerability has been identified in Spectrum Power 7 (All versions < V24Q3).Siemens Spectrum Power
- CVE-2023-32736A vulnerability has been identified in SIMATIC S7-PLCSIM V16 (All versions), SIMATIC S7-PLCSIM V17 (All versions), SIMATIC STEP 7 Safety V16Siemens SIMATIC S7-PLCSIM · Siemens SIMATIC STEP 7 Safe… +11
- CVE-2024-45827Improper neutralization of special elements used in an OS command ('OS Command Injection') issue exists in Mesh Wi-Fi router RP562B firmwareSoftBank Mesh Wi-Fi router RP562B
- CVE-2024-48837Dell SmartFabric OS10 Software, version(s) 10.5.6.x, 10.5.5.x, 10.5.4.x, 10.5.3.x, contain(s) an Execution with Unnecessary Privileges vulneDell SmartFabric OS10 Software
- CVE-2024-49557Dell SmartFabric OS10 Software, version(s) 10.5.6.x, 10.5.5.x, 10.5.4.x, 10.5.3.x, contain(s) an Improper Neutralization of Special ElementsDell SmartFabric OS10 Software
- CVE-2024-49558Dell SmartFabric OS10 Software, version(s) 10.5.6.x, 10.5.5.x, 10.5.4.x, 10.5.3.x, contain(s) an Improper Privilege Management vulnerabilityDell SmartFabric OS10 Software
- CVE-2024-49560Dell SmartFabric OS10 Software, version(s) 10.5.6.x, 10.5.5.x, 10.5.4.x, 10.5.3.x, contain(s) a command injection vulnerability.Dell SmartFabric OS10 Software
- CVE-2024-47590Cross-Site Scripting (XSS) vulnerability in SAP Web DispatcherSAP_SE SAP Web Dispatcher
- CVE-2021-27700SOCIFI Socifi Guest wifi as SAAS wifi portal is affected by Insecure Permissions.
- CVE-2021-27702Sercomm Router Etisalat Model S3- AC2100 is affected by Incorrect Access Control via the diagnostic utility in the router dashboard.
- CVE-2024-28726An issue in DLink DWR 2000M 5G CPE With Wifi 6 Ax1800 and Dlink DWR 5G CPE DWR-2000M_1.34ME allows a local attacker to execute arbitrary cod
- CVE-2024-28729An issue in DLink DWR 2000M 5G CPE With Wifi 6 Ax1800 and Dlink DWR 5G CPE DWR-2000M_1.34ME allows a local attacker to execute arbitrary cod
- CVE-2024-28731Cross Site Request Forgery vulnerability in DLink DWR 2000M 5G CPE With Wifi 6 Ax1800 and Dlink DWR 5G CPE DWR-2000M_1.34ME allows a local a
- CVE-2024-51093Stored Cross-Site Scripting (XSS) vulnerability in Snipe-IT - v7.0.13 allows an attacker to upload a malicious XML file containing JavaScripsnipe/snipe-it
- CVE-2024-51094An issue in Snipe-IT v.7.0.13 build 15514 allows a low-privileged attacker to modify their profile name and inject a malicious payload into
- CVE-2024-51179An issue in Open 5GS v.2.7.1 allows a remote attacker to cause a denial of service via the Network Function Virtualizations (NFVs) such as t
Medium, low and unrated 136
- CVE-2024-11168Improper validation of IPv6 and IPvFuture addressesPython Software Foundation CPython
- CVE-2024-49510InDesign Desktop | Out-of-bounds Read (CWE-125)Adobe InDesign Desktop
- CVE-2024-49512InDesign Desktop | Out-of-bounds Read (CWE-125)Adobe InDesign Desktop
- CVE-2024-49511InDesign Desktop | Out-of-bounds Read (CWE-125)Adobe InDesign Desktop
- CVE-2024-11117Inappropriate implementation in FileSystem in Google Chrome prior to 131.0.6778.69 allowed a remote attacker to bypass filesystem restrictioGoogle Chrome
- CVE-2024-11116Inappropriate implementation in Blink in Google Chrome prior to 131.0.6778.69 allowed a remote attacker who convinced a user to engage in spGoogle Chrome
- CVE-2024-11111Inappropriate implementation in Autofill in Google Chrome prior to 131.0.6778.69 allowed a remote attacker who convinced a user to engage inGoogle Chrome
- CVE-2024-11110Inappropriate implementation in Extensions in Google Chrome prior to 131.0.6778.69 allowed a remote attacker to bypass site isolation via a Google Chrome
- CVE-2024-47437Substance3D - Painter | Out-of-bounds Read (CWE-125)Adobe Substance3D - Painter
- CVE-2024-47436Substance3D - Painter | Out-of-bounds Read (CWE-125)Adobe Substance3D - Painter
- CVE-2024-47439Substance3D - Painter | NULL Pointer Dereference (CWE-476)Adobe Substance3D - Painter
- CVE-2024-47435Substance3D - Painter | Out-of-bounds Read (CWE-125)Adobe Substance3D - Painter
- CVE-2024-47440Substance3D - Painter | Out-of-bounds Read (CWE-125)Adobe Substance3D - Painter
- CVE-2024-47438Substance3D - Painter | Write-what-where Condition (CWE-123)Adobe Substance3D - Painter
- CVE-2024-2207Sound Research SECOMN64 Escalation of PrivilegeSound Research SECOMN64 Driver
- CVE-2024-47454Illustrator | Out-of-bounds Read (CWE-125)Adobe Illustrator
- CVE-2024-47457Illustrator | NULL Pointer Dereference (CWE-476)Adobe Illustrator
- CVE-2024-47455Illustrator | Out-of-bounds Read (CWE-125)Adobe Illustrator
- CVE-2024-47453Illustrator | Out-of-bounds Read (CWE-125)Adobe Illustrator
- CVE-2024-47456Illustrator | Out-of-bounds Read (CWE-125)Adobe Illustrator
- CVE-2024-31496A stack-based buffer overflow vulnerability [CWE-121] in Fortinet FortiManager version 7.4.0 through 7.4.2 and before 7.2.5, FortiAnalyzer vFortinet FortiManager · Fortinet FortiAnalyzer
- CVE-2024-36509An exposure of sensitive system information to an unauthorized control sphere vulnerability [CWE-497] in FortiWeb version 7.6.0, version 7.4Fortinet FortiWeb
- CVE-2024-33505A heap-based buffer overflow in Fortinet FortiAnalyzer version 7.4.0 through 7.4.2, 7.2.0 through 7.2.5, 7.0.0 through 7.0.12, 6.4.0 throughFortinet FortiAnalyzer · Fortinet FortiManager
- CVE-2024-26011A missing authentication for critical function vulnerability in Fortinet FortiManager 7.4.0 through 7.4.2, FortiManager 7.2.0 through 7.2.4,Fortinet FortiManager · Fortinet FortiOS +4
- CVE-2024-35274An improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability [CWE-22] in Fortinet FortiAnalyzer versions Fortinet FortiAnalyzer · Fortinet FortiManager
- CVE-2024-32118Multiple improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerabilities [CWE-78] in Fortinet ForFortinet FortiAnalyzer · Fortinet FortiManager
- CVE-2024-32116Multiple relative path traversal vulnerabilities [CWE-23] in Fortinet FortiManager version 7.4.0 through 7.4.2 and before 7.2.5, FortiAnalyzFortinet FortiAnalyzer · Fortinet FortiManager
- CVE-2023-44255An exposure of sensitive information to an unauthorized actor [CWE-200] in Fortinet FortiManager before 7.4.2, FortiAnalyzer before 7.4.2 anFortinet FortiManager · Fortinet FortiAnalyzer
- CVE-2023-47543An authorization bypass through user-controlled key vulnerability [CWE-639] in Fortinet FortiPortal version 7.0.0 through 7.0.3 allows an auFortinet FortiPortal
- CVE-2024-32117An improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability [CWE-22] in Fortinet FortiManager version 7.Fortinet FortiManager · Fortinet FortiAnalyzer
- CVE-2024-40592An improper verification of cryptographic signature vulnerability [CWE-347] in FortiClient MacOS version 7.4.0, version 7.2.4 and below, verFortinet FortiClientMac
- CVE-2024-36507A untrusted search path in Fortinet FortiClientWindows versions 7.4.0, versions 7.2.4 through 7.2.0, versions 7.0.12 through 7.0.0 allows anFortinet FortiClientWindows
- CVE-2024-33510An improper neutralization of special elements in output used by a downstream component ('Injection') vulnerability [CWE-74] in FortiOS versFortinet FortiOS · Fortinet FortiProxy
- CVE-2023-50176A session fixation vulnerability in Fortinet FortiOS 7.4.0 through 7.4.3, FortiOS 7.2.0 through 7.2.7, FortiOS 7.0.0 through 7.0.13 allows aFortinet FortiOS
- CVE-2024-45147Bridge | Out-of-bounds Read (CWE-125)Adobe Bridge
- CVE-2024-47458Bridge | NULL Pointer Dereference (CWE-476)Adobe Bridge
- CVE-2024-8535Authenticated user can access unintended user capabilitiesNetScaler ADC · NetScaler Gateway
- CVE-2024-47445After Effects | Out-of-bounds Read (CWE-125)Adobe After Effects
- CVE-2024-47444After Effects | Out-of-bounds Read (CWE-125)Adobe After Effects
- CVE-2024-47446After Effects | Out-of-bounds Read (CWE-125)Adobe After Effects
- CVE-2024-47449Audition | Out-of-bounds Read (CWE-125)Adobe Audition
- CVE-2024-51722Vulnerabilities in SecuSUITE Server Components Impact SecuSUITEBlackBerry SecuSUITE
- CVE-2024-51720Vulnerabilities in SecuSUITE Server Components Impact SecuSUITEBlackBerry SecuSUITE
- CVE-2024-8069Limited remote code execution with privilege of a NetworkService Account accessCitrix Session Recording
- CVE-2024-11138DedeCMS friendlink_add.php unrestricted uploadDedeCMS
- CVE-2024-38203Windows Package Library Manager Information Disclosure VulnerabilityMicrosoft Windows Server · Microsoft Windows
- CVE-2024-43633Windows Hyper-V Denial of Service VulnerabilityMicrosoft Windows
- CVE-2024-49044Visual Studio Elevation of Privilege VulnerabilityMicrosoft Visual Studio
- CVE-2024-38264Microsoft Virtual Hard Disk (VHDX) Denial of Service VulnerabilityMicrosoft Windows Server · Microsoft Windows
- CVE-2024-43451NTLM Hash Disclosure Spoofing VulnerabilityMicrosoft Windows Server · Microsoft Windows
- CVE-2024-43449Windows USB Video Class System Driver Elevation of Privilege VulnerabilityMicrosoft Windows Server · Microsoft Windows
- CVE-2024-43646Windows Secure Kernel Mode Elevation of Privilege VulnerabilityMicrosoft Windows Server · Microsoft Windows
- CVE-2024-43645Windows Defender Application Control (WDAC) Security Feature Bypass VulnerabilityMicrosoft Windows
- CVE-2024-43643Windows USB Video Class System Driver Elevation of Privilege VulnerabilityMicrosoft Windows Server · Microsoft Windows
- CVE-2024-43638Windows USB Video Class System Driver Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2024-43637Windows USB Video Class System Driver Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2024-43634Windows USB Video Class System Driver Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2024-43631Windows Secure Kernel Mode Elevation of Privilege VulnerabilityMicrosoft Windows Server · Microsoft Windows
- CVE-2024-8068Privilege escalation to NetworkService Account accessCitrix Session Recording
- CVE-2024-21949Improper validation of user input in the NPU driver could allow an attacker to provide a buffer with unexpected size, potentially leading toAMD Ryzen™ AI Software
- CVE-2024-50336matrix-js-sdk has insufficient MXC URI validation which allows client-side path traversalmatrix-org matrix-js-sdk · matrix-js-sdk
- CVE-2024-51750Element allows a malicious homeserver can modify events leading to unrenderable events or roomselement-hq element-web
- CVE-2024-51749Element's thumbnails can be abused to misrepresent the content of an attachmentelement-hq element-web
- CVE-2024-9999Multi-Factor Authentication Bypass in Progress WS_FTP ServerProgress Software WS_FTP Server
- CVE-2024-30133HCL Traveler for Microsoft Outlook (HTMO) is susceptible to a control flow vulnerabilityHCL Software HCL Traveler for Microsoft Outlook
- CVE-2024-49527Animate | Out-of-bounds Read (CWE-125)Adobe Animate
- CVE-2024-9843A buffer over-read in Ivanti Secure Access Client before 22.7R4 allows a local unauthenticated attacker to cause a denial of service.Ivanti Secure Access Client
- CVE-2024-11004Reflected XSS in Ivanti Connect Secure before version 22.7R2.1 and Ivanti Policy Secure before version 22.7R1.1 allows a remote unauthenticaIvanti Connect Secure · Ivanti Policy Secure
- CVE-2024-47909A stack-based buffer overflow in Ivanti Connect Secure before version 22.7R2.3 and Ivanti Policy Secure before version 22.7R1.2 allows a remIvanti Connect Secure · Ivanti Policy Secure
- CVE-2024-52296libosdp has a null pointer deref in osdp_reply_namegoToMain libosdp · libosdp
- CVE-2024-47905A stack-based buffer overflow in Ivanti Connect Secure before version 22.7R2.3 and Ivanti Policy Secure before version 22.7R1.2 allows a remIvanti Connect Secure · Ivanti Policy Secure
- CVE-2024-10971Improper access control in the Password History feature in Devolutions DVLS 2024.3.6 and earlier allows a malicious authenticated user to obDVLS
- CVE-2024-47535Denial of Service attack on windows app using Nettynetty · io.netty:netty-common
- CVE-2024-39281Unbounded allocation in ctl(4) CAM Target LayerFreeBSD
- CVE-2024-2315SMM arbitrary code execution in OverclockAMI AptioV
- CVE-2024-33658Buffer Overflow Vulnerability In OFBDAMI AptioV
- CVE-2024-33660Potential Firmware update without integrity checkAMI AptioV
- CVE-2024-11130ZZCMS msg.php cross site scriptingZZCMS
- CVE-2024-11127code-projects Job Recruitment admin.php sql injectioncode-projects Job Recruitment
- CVE-2024-51566bhyve(8) NVMe driver to guest-induced infinite loops.FreeBSD
- CVE-2024-51565bhyve(8) hda driver buffer over-readFreeBSD
- CVE-2024-51563bhyve(8) virtio_vq_recordon time-of-check to time-of-use raceFreeBSD
- CVE-2024-51562bhyve(8) nvme_opc_get_log_page buffer over-readFreeBSD
- CVE-2024-11126Digistar AG-30 Plus Login Page excessive authenticationDigistar AG-30 Plus
- CVE-2024-11125GetSimpleCMS profile.php cross-site request forgeryGetSimpleCMS
- CVE-2024-11124TimGeyssens UIOMatic uioMaticObject.r sql injectionTimGeyssens UIOMatic
- CVE-2024-11123上海灵当信息科技有限公司 Lingdang CRM pdf.php path traversal上海灵当信息科技有限公司 Lingdang CRM
- CVE-2024-50561A vulnerability has been identified in RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2) (All versions < V8.2), RUGGEDCOM RM1224 LTE(4G) NAM Siemens RUGGEDCOM RM1224 LTE(4G) EU · Siemens RUGGEDCOM… +18
- CVE-2024-50560A vulnerability has been identified in RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2) (All versions < V8.2), RUGGEDCOM RM1224 LTE(4G) NAM Siemens RUGGEDCOM RM1224 LTE(4G) EU · Siemens RUGGEDCOM… +18
- CVE-2024-50559A vulnerability has been identified in RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2) (All versions < V8.2), RUGGEDCOM RM1224 LTE(4G) NAM Siemens RUGGEDCOM RM1224 LTE(4G) EU · Siemens RUGGEDCOM… +12
- CVE-2024-50558A vulnerability has been identified in RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2) (All versions < V8.2), RUGGEDCOM RM1224 LTE(4G) NAM Siemens RUGGEDCOM RM1224 LTE(4G) EU · Siemens RUGGEDCOM… +12
- CVE-2024-50313A vulnerability has been identified in Mendix Runtime V10 (All versions < V10.16.0 only if the basic authentication mechanism is used by theSiemens Mendix Runtime
- CVE-2024-46894A vulnerability has been identified in SINEC INS (All versions < V1.0 SP2 Update 3).Siemens SINEC INS
- CVE-2024-46892A vulnerability has been identified in SINEC INS (All versions < V1.0 SP2 Update 3).Siemens SINEC INS
- CVE-2024-46891A vulnerability has been identified in SINEC INS (All versions < V1.0 SP2 Update 3).Siemens SINEC INS
- CVE-2024-46889A vulnerability has been identified in SINEC INS (All versions < V1.0 SP2 Update 3).Siemens SINEC INS
- CVE-2024-36140A vulnerability has been identified in OZW672 (All versions < V5.2), OZW772 (All versions < V5.2).Siemens OZW672 · Siemens OZW772
- CVE-2024-11122上海灵当信息科技有限公司 Lingdang CRM index.php unrestricted upload上海灵当信息科技有限公司 Lingdang CRM
- CVE-2024-11121上海灵当信息科技有限公司 Lingdang CRM index.php sql injection上海灵当信息科技有限公司 Lingdang CRM
- CVE-2024-10323JetWidgets For Elementor <= 1.0.18 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Uploadjetmonsters JetWidgets For Elementor
- CVE-2024-10179Slickstream: Engagement and Conversions <= 1.4.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via slick-grid Shortcodewpslickstream Slickstream: Engagement and Conversions
- CVE-2024-9836RSS Feed Widget < 3.0.0 - Contributor+ Stored XSSRSS Feed Widget
- CVE-2024-9835RSS Feed Widget < 3.0.1 - Reflected XSSRSS Feed Widget
- CVE-2024-47799Exposure of sensitive system information to an unauthorized control sphere issue exists in Mesh Wi-Fi router RP562B firmware version v1.0.2 SoftBank Mesh Wi-Fi router RP562B
- CVE-2024-10790Admin and Site Enhancements (ASE) <= 7.5.1 - Authenticated Stored Cross-Site Scripting via SVGqriouslad Admin and Site Enhancements
- CVE-2024-9357xili-tidy-tags <= 1.12.04 - Reflected Cross-Site Scriptingmichelwppi xili-tidy-tags
- CVE-2024-29075Active debug code vulnerability exists in Mesh Wi-Fi router RP562B firmware version v1.0.2 and earlier.SoftBank Mesh Wi-Fi router RP562B
- CVE-2024-11102SourceCodester Hospital Management System edit-doc.php cross site scriptingSourceCodester Hospital Management System
- CVE-2024-111011000 Projects Beauty Parlour Management System search-invoices.php sql injection1000 Projects Beauty Parlour Management System
- CVE-2024-48838Dell SmartFabric OS10 Software, version(s) 10.5.6.x, 10.5.5.x, 10.5.4.x, 10.5.3.x, contain(s) a Files or Directories Accessible to External Dell SmartFabric OS10 Software
- CVE-2024-111001000 Projects Beauty Parlour Management System index.php sql injection1000 Projects Beauty Parlour Management System
- CVE-2024-10538Happy Addons for Elementor <= 3.12.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Image Comparisonthehappymonster Happy Addons for Elementor
- CVE-2024-10685Contact Form 7 Redirect & Thank You Page <= 1.0.6 - Reflected Cross-Site Scriptingscottpaterson Business Essentials for Contact Form
- CVE-2024-10672Multiple Page Generator Plugin – MPG <= 4.0.2 - Authenticated (Editor+) Directory Traversal to Limited File Deletionthemeisle Multiple Page Generator Plugin – MPG
- CVE-2024-10695Futurio Extra <= 2.0.13 - Authenticated (Contributor+) Post Disclosurefuturiowp Futurio Extra
- CVE-2024-49395Mutt: neomutt: bcc email header field is indirectly leaked by cryptographic info blockmutt · Red Hat Enterprise Linux
- CVE-2024-49394Mutt: neomutt: in-reply-to email header field it not protected by cryptograpic signingmutt · Red Hat Enterprise Linux
- CVE-2024-11099code-projects Job Recruitment login.php sql injectioncode-projects Job Recruitment
- CVE-2024-11097SourceCodester Student Record Management System Main Menu infinite loopSourceCodester Student Record Management System
- CVE-2024-49393Mutt: neomutt: to and cc email header fields are not protected by cryptographic signingmutt · Red Hat Enterprise Linux
- CVE-2024-8882A buffer overflow vulnerability in the CGI program in the Zyxel GS1900-48 switch firmware version V2.80(AAHN.1)C0 and earlier could allow anZyxel GS1900-48 firmware
- CVE-2024-8881A post-authentication command injection vulnerability in the CGI program in the Zyxel GS1900-48 switch firmware version V2.80(AAHN.1)C0 and Zyxel GS1900-48 firmware
- CVE-2024-11096code-projects Task Manager newProject.php sql injectioncode-projects Task Manager
- CVE-2024-47595Local Privilege Escalation in SAP Host AgentSAP_SE SAP Host Agent
- CVE-2024-47593Information Disclosure Vulnerability in SAP NetWeaver Application Server for ABAP and ABAP PlatformSAP_SE SAP NetWeaver Application Server ABAP
- CVE-2024-47592Information Disclosure Vulnerability in SAP NetWeaver Application Server Java (Logon Application)SAP_SE SAP NetWeaver Application Server Java
- CVE-2024-47588Information Disclosure vulnerability in SAP NetWeaver Java (Software Update Manager)SAP_SE SAP NetWeaver Java
- CVE-2024-47587Missing authorization check in SAP Cash Management (Cash Operations)SAP_SE SAP Cash Management
- CVE-2024-47586NULL Pointer Dereference vulnerability in SAP NetWeaver Application Server for ABAP and ABAP PlatformSAP_SE SAP NetWeaver Application Server for ABAP and ABAP P…
- CVE-2024-42372Missing Authorization check in SAP NetWeaver AS Java (System Landscape Directory)SAP_SE SAP NetWeaver AS Java
- CVE-2021-27701SOCIFI Socifi Guest wifi as SAAS is affected by Cross Site Request Forgery (CSRF) via the Socifi wifi portal.
- CVE-2021-27703Sercomm Model Etisalat Model S3- AC2100 is affected by Cross Site Scripting (XSS) via the firmware update page.
- CVE-2021-27704Appspace 6.2.4 is affected by Incorrect Access Control via the Appspace Web Portal password reset page.
- CVE-2024-28728Cross Site Scripting vulnerability in DLink DWR 2000M 5G CPE With Wifi 6 Ax1800 and Dlink DWR 5G CPE DWR-2000M_1.34ME allows a local attacke
- CVE-2024-28730Cross Site Scripting vulnerability in DLink DWR 2000M 5G CPE With Wifi 6 Ax1800 and Dlink DWR 5G CPE DWR-2000M_1.34ME allows a local attacke
- CVE-2024-48075A Heap buffer overflow in the server-site handshake implementation in Real Time Logic SharkSSL from 09/09/24 and earlier allows a remote att