CVEs published November 18, 2024
184 CVEs were published on November 18, 2024: 21 critical, 65 high. 3 are now in CISA KEV.
- Published
- 184
- Critical
- 21
- High
- 65
- Medium
- 95
- Low
- 3
- Unrated
- 0
- Now in CISA KEV
- 3
- Fix available
- 43
Most affected products
- Cesanta Mongoose Web Server
- 10
- Siemens Teamcenter Visualization · Siemens Tecnomatix Plant…
- 10
- TRCore DVC
- 8
- Cisco Catalyst SD-WAN Manager
- 7
- WAGO CC100 0751-9x01 · WAGO PFC100 G2 0750-811x-xxxx-xx… +10
- 5
- moodle · moodle/moodle
- 4
- Apache Software Foundation Apache HertzBeat
- 3
- kernel · Red Hat Enterprise Linux
- 3
- MarkUsProject Markus
- 3
- WAGO CC100 0751-9x01 · WAGO PFC100 G2 0750-811x-xxxx-xx… +13
- 3
Critical 21
- CVE-2024-47533Cobbler allows anyone to connect to cobbler XML-RPC server with a known password and make changescobbler
- CVE-2024-0012PAN-OS: Authentication Bypass in the Management Web Interface (PAN-SA-2024-0015)Palo Alto Networks Cloud NGFW · Palo Alto Networks PAN-OS +1
- CVE-2024-52431WordPress WP Video Robot plugin <= 1.20.0 - SQL Injection vulnerabilityPressaholic WordPress Video Robot - The Ultimate Video Impo…
- CVE-2024-52430WordPress Lis Video Gallery plugin <= 0.2.1 - PHP Object Injection vulnerabilitybublick Lis Video Gallery
- CVE-2024-52432WordPress NIX Anti-Spam Light plugin <= 0.0.4 - PHP Object Injection vulnerabilityNIX Solutions NIX Anti-Spam Light
- CVE-2024-52433WordPress My Geo Posts Free plugin <= 1.2 - PHP Object Injection vulnerabilityMindstien Technologies My Geo Posts Free
- CVE-2024-52427WordPress Event Tickets with Ticket Scanner plugin <= 2.3.11 - Remote Code Execution (RCE) vulnerabilityVollstart Event Tickets with Ticket Scanner
- CVE-2024-52429WordPress WP Quick Setup plugin <= 2.0 - Arbitrary Plugin and Theme Installation to Remote Code Execution vulnerabilityAntonHoelstad WP Quick Setup
- CVE-2024-52434WordPress Popup by Supsystic plugin <= 1.10.29 - Remote Code Execution (RCE) vulnerabilityPopup by Supsystic
- CVE-2024-52316Apache Tomcat: Authentication bypass when using Jakarta Authentication APIApache Software Foundation Apache Tomcat · org.apache.tomca…
- CVE-2024-47208Apache OFBiz: URLs allowing remote use of Groovy expressions, leading to RCEApache Software Foundation Apache OFBiz
- CVE-2024-11315TRCore DVC - Arbitrary File Upload through Path TraversalTRCore DVC
- CVE-2024-11314TRCore DVC - Arbitrary File Upload through Path TraversalTRCore DVC
- CVE-2024-11313TRCore DVC - Arbitrary File Upload through Path TraversalTRCore DVC
- CVE-2024-11312TRCore DVC - Arbitrary File Upload through Path TraversalTRCore DVC
- CVE-2024-11311TRCore DVC - Arbitrary File Upload through Path TraversalTRCore DVC
- CVE-2015-20111miniupnp before 4c90b87, as used in Bitcoin Core before 0.12 and other products, lacks checks for snprintf return values, leading to a buffe
- CVE-2024-44756NUS-M9 ERP Management Software v3.0.0 was discovered to contain a SQL injection vulnerability via the usercode parameter at /UserWH/checkLog
- CVE-2024-50919Jpress until v5.1.1 has arbitrary file uploads on the windows platform, and the construction of non-standard file formats such as .jsp.
- CVE-2024-51051AVSCMS v8.2.0 was discovered to contain weak default credentials for the Administrator account.
- CVE-2024-51053An arbitrary file upload vulnerability in the component /main/fileupload.php of AVSCMS v8.2.0 allows attackers to execute arbitrary code via
High 65
- CVE-2024-21287Vulnerability in the Oracle Agile PLM Framework product of Oracle Supply Chain (component: Software Development Kit, Process Extension).Oracle Agile PLM Framework
- CVE-2024-52417WordPress ReConstruction theme <= 1.4.7 - Reflected Cross Site Scripting (XSS) vulnerabilityBoldThemes ReConstruction
- CVE-2024-52418WordPress Gameplan theme <= 1.5.10 - Reflected Cross Site Scripting (XSS) vulnerabilityCactusThemes Gameplan
- CVE-2024-52583WesHacks code includes links to Leostop tracking spyware infested filesDefinetlyNotAI WesHacks
- CVE-2024-52506Graylog can leak other users' reports via concurrent PDF report renderinggraylog2-server · org.graylog:graylog-parent
- CVE-2024-52303aiohttp memory leak when middleware is enabled when requesting a resource with a non-allowed methodaio-libs aiohttp · aiohttp
- CVE-2024-51743Arbitrary File Write leading up to remote code execution (instructor accounts)MarkUsProject Markus
- CVE-2024-51499MarkUs Arbitrary File Write leading up to remote code execution (student accounts)MarkUsProject Markus
- CVE-2024-48917XXE in PHPSpreadsheet's XLSX readerPHPOffice PhpSpreadsheet · phpoffice/phpspreadsheet +1
- CVE-2024-47873PhpSpreadsheet XmlScanner bypass leads to XXEPHPOffice PhpSpreadsheet · phpoffice/phpspreadsheet +1
- CVE-2024-43416GLPI vulnerable to enumeration of users' email addresses by unauthenticated userglpi-project glpi
- CVE-2020-26071Cisco SD-WAN vEdge Arbitrary File Creation VulnerabilityCisco Catalyst SD-WAN Manager · Cisco SD-WAN vContainer +2
- CVE-2020-27124Cisco Adaptive Security Appliance Software SSL/TLS Denial of Service VulnerabilityCisco Adaptive Security Appliance (ASA) Software
- CVE-2024-52424WordPress wp-login customizer plugin <= 1.0 - Cross Site Scripting (XSS) vulnerabilitysureshdsk wp-login customizer
- CVE-2020-26073Cisco SD-WAN vManage Directory Traversal VulnerabilityCisco Catalyst SD-WAN Manager
- CVE-2020-26074Cisco SD-WAN vManage Privilege Escalation VulnerabilityCisco Catalyst SD-WAN Manager
- CVE-2021-1285Multiple Cisco Products SNORT Ethernet Frame Decoder Denial of Service VulnerabilityCisco UTD SNORT IPS Engine Software
- CVE-2024-52574A vulnerability has been identified in Teamcenter Visualization V14.2 (All versions < V14.2.0.14), Teamcenter Visualization V14.3 (All versiSiemens Teamcenter Visualization · Siemens Tecnomatix Plant…
- CVE-2024-52573A vulnerability has been identified in Teamcenter Visualization V14.2 (All versions < V14.2.0.14), Teamcenter Visualization V14.3 (All versiSiemens Teamcenter Visualization · Siemens Tecnomatix Plant…
- CVE-2024-52572A vulnerability has been identified in Teamcenter Visualization V14.2 (All versions < V14.2.0.14), Teamcenter Visualization V14.3 (All versiSiemens Teamcenter Visualization · Siemens Tecnomatix Plant…
- CVE-2024-52571A vulnerability has been identified in Teamcenter Visualization V14.2 (All versions < V14.2.0.14), Teamcenter Visualization V14.3 (All versiSiemens Teamcenter Visualization · Siemens Tecnomatix Plant…
- CVE-2024-52570A vulnerability has been identified in Teamcenter Visualization V14.2 (All versions < V14.2.0.14), Teamcenter Visualization V14.3 (All versiSiemens Teamcenter Visualization · Siemens Tecnomatix Plant…
- CVE-2024-52569A vulnerability has been identified in Teamcenter Visualization V14.2 (All versions < V14.2.0.14), Teamcenter Visualization V14.3 (All versiSiemens Teamcenter Visualization · Siemens Tecnomatix Plant…
- CVE-2024-52568A vulnerability has been identified in Teamcenter Visualization V14.2 (All versions < V14.2.0.14), Teamcenter Visualization V14.3 (All versiSiemens Teamcenter Visualization · Siemens Tecnomatix Plant…
- CVE-2024-52567A vulnerability has been identified in Teamcenter Visualization V14.2 (All versions < V14.2.0.14), Teamcenter Visualization V14.3 (All versiSiemens Teamcenter Visualization · Siemens Tecnomatix Plant…
- CVE-2024-52566A vulnerability has been identified in Teamcenter Visualization V14.2 (All versions < V14.2.0.14), Teamcenter Visualization V14.3 (All versiSiemens Teamcenter Visualization · Siemens Tecnomatix Plant…
- CVE-2024-52565A vulnerability has been identified in Teamcenter Visualization V14.2 (All versions < V14.2.0.14), Teamcenter Visualization V14.3 (All versiSiemens Teamcenter Visualization · Siemens Tecnomatix Plant…
- CVE-2024-52435WordPress Premium Packages – Sell Digital Products Securely plugin <= 6.0.5 - SQL Injection vulnerabilityShahjada WPDM – Premium Packages
- CVE-2024-52436WordPress Post SMTP plugin <= 2.9.9 - SQL Injection vulnerabilitySaad Iqbal Post SMTP
- CVE-2024-52428WordPress Ads Booster by Ads Pro plugin <= 1.12 - Local File Inclusion vulnerabilityPeter Ads Booster by Ads Pro
- CVE-2024-8781Container Escape Vulnerability in TR7's Application Security Platform (ASP)TR7 Application Security Platform
- CVE-2024-11318IDOR vulnerability in AbsysNetBaratz Innovación AbsysNet
- CVE-2024-9526Stored XSS in Kubeflow Pipeline ViewKubeflow Pipeline View · github.com/kubeflow/pipelines
- CVE-2024-11303Path TraversalKorenix JetPort
- CVE-2024-3370SQLi in Egebilgi Software's Website TemplateEgebilgi Software Website Template
- CVE-2023-39179Kernel: ksmbd: read request out-of-bounds read information disclosure vulnerabilitykernel · Red Hat Enterprise Linux
- CVE-2024-41974WAGO: BACNet Service Property Modification Due to Permission Misconfiguration in Multiple DevicesWAGO CC100 0751-9x01 · WAGO PFC100 G2 0750-811x-xxxx-xx… +10
- CVE-2024-42386Use of Out-of-range Pointer Offset in Mongoose Web Server libraryCesanta Mongoose Web Server
- CVE-2024-41973WAGO: Remote Arbitrary File Write with Root Privileges in multiple DevicesWAGO CC100 0751-9x01 · WAGO PFC100 G2 0750-811x-xxxx-xx… +10
- CVE-2024-42384Integer Overflow or Wraparound in Mongoose Web Server libraryCesanta Mongoose Web Server
- CVE-2024-41971WAGO: Arbitrary File Overwrite in Multiple DevicesWAGO CC100 0751-9x01 · WAGO PFC100 G2 0750-811x-xxxx-xx… +10
- CVE-2024-41969WAGO: CODESYS V3 Configuration Authentication Bypass in Multiple DevicesWAGO CC100 0751-9x01 · WAGO PFC100 G2 0750-811x-xxxx-xx… +13
- CVE-2024-41967WAGO: Boot Mode Manipulation in Multiple DevicesWAGO CC100 0751-9x01 · WAGO PFC100 G2 0750-811x-xxxx-xx… +13
- CVE-2024-41151Apache HertzBeat: RCE by notice template injection vulnerabilityApache Software Foundation Apache HertzBeat
- CVE-2024-45791Apache HertzBeat: Exposure sensitive token via http GET method with query stringApache Software Foundation Apache HertzBeat
- CVE-2024-45505Apache HertzBeat: Exists Native Deser RCE and file writing vulnerabilitiesApache Software Foundation Apache HertzBeat
- CVE-2024-48962Apache OFBiz: Bypass SameSite restrictions with target redirection using URL parameters (SSTI and CSRF leading to RCE)Apache Software Foundation Apache OFBiz
- CVE-2024-49574SQL InjectionManageEngine ADAudit Plus
- CVE-2024-11310TRCore DVC - Arbitrary File Read through Path TraversalTRCore DVC
- CVE-2024-11309TRCore DVC - Arbitrary File Read through Path TraversalTRCore DVC
- CVE-2024-43704GPU DDK - PowerVR: PVRSRVAcquireProcessHandleBase can cause psProcessHandleBase reuse when PIDs are reusedImagination Technologies Graphics DDK
- CVE-2019-25220Bitcoin Core before 24.0.1 allows remote attackers to cause a denial of service (daemon crash) via a flood of low-difficulty header chains (
- CVE-2023-49952Mastodon 4.1.x before 4.1.17 and 4.2.x before 4.2.9 allows a bypass of rate limiting via a crafted HTTP request header.
- CVE-2024-28058In RSA NetWitness (NW) Platform before 12.5.1, even when an administrator revokes the access of a specific user with an active session, an i
- CVE-2024-44757An arbitrary file download vulnerability in the component /Basics/DownloadInpFile of NUS-M9 ERP Management Software v3.0.0 allows attackers
- CVE-2024-48292An issue in the wssrvc.exe service of QuickHeal Antivirus Pro Version v24.0 and Quick Heal Total Security v24.0 allows authenticated attacke
- CVE-2024-50804Insecure Permissions vulnerability in Micro-star International MSI Center Pro 2.1.37.0 allows a local attacker to execute arbitrary code via
- CVE-2024-52912Bitcoin Core before 0.21.0 allows a network split that is resultant from an integer overflow (calculating the time offset for newly connecti
- CVE-2024-52914In Bitcoin Core before 0.18.0, a node could be stalled for hours when processing the orphans of a crafted unconfirmed transaction.
- CVE-2024-52915Bitcoin Core before 0.20.0 allows remote attackers to cause a denial of service (memory consumption) via a crafted INV message.
- CVE-2024-52916Bitcoin Core before 0.15.0 allows a denial of service (OOM kill of a daemon process) via a flood of minimum difficulty headers.
- CVE-2024-52920Bitcoin Core before 0.20.0 allows remote attackers to cause a denial of service (infinite loop) via a malformed GETDATA message.
- CVE-2024-52940AnyDesk through 8.1.0 on Windows, when Allow Direct Connections is enabled, inadvertently exposes a public IP address within network traffic
- CVE-2024-52945An issue was discovered in Veritas NetBackup before 10.5.
- CVE-2024-52946An issue was discovered in LemonLDAP::NG before 2.20.1.
Medium, low and unrated 98
- CVE-2024-51939WordPress Stylish Internal Links plugin <= 1.9 - Cross Site Scripting (XSS) vulnerabilitySanthosh veer Stylish Internal Links
- CVE-2024-51940WordPress WP Responsive Video plugin <= 1.0 - Cross Site Scripting (XSS) vulnerabilitySohelwpexpert WP Responsive Video
- CVE-2024-52339WordPress Mage Front End Forms plugin <= 1.1.4 - Cross Site Scripting (XSS) vulnerabilityMaximilian Ruthe Mage Front End Forms
- CVE-2024-52340WordPress Photographer Connections plugin <= 1.3.1 - Cross Site Scripting (XSS) vulnerabilityMartyThornley Photographer Connections
- CVE-2024-52587Harden-Runner has command injection weaknesses in `setup.ts` and `arc-runner.ts`step-security harden-runner
- CVE-2024-52341WordPress OS Our Team plugin <= 1.7 - Cross Site Scripting (XSS) vulnerabilityOffshorent Solutions Pvt OS Our Team
- CVE-2024-52342WordPress OS BXSlider plugin <= 2.6 - Cross Site Scripting (XSS) vulnerabilityOffshorent Solutions Pvt OS BXSlider
- CVE-2024-52343WordPress OS Pricing Tables plugin <= 1.2 - Cross Site Scripting (XSS) vulnerabilityOffshorent Solutions Pvt OS Pricing Tables
- CVE-2024-52344WordPress Provide Forex Signals plugin <= 1.0 - Cross Site Scripting (XSS) vulnerabilityCodeies Pvt Provide Forex Signals
- CVE-2024-52345WordPress ra_qrcode plugin <= 2.1.0 - Cross Site Scripting (XSS) vulnerabilityRobertoAlicata ra_qrcode
- CVE-2024-52346WordPress SimpleGMaps plugin <= 1.0 - Cross Site Scripting (XSS) vulnerabilityJavierMendezPWG SimpleGMaps
- CVE-2024-52347WordPress Website remote Install vor Gravity, WPForms, Formidable, Ninja, Caldera plugin <= 4.0 - Cross Site Scripting (XSS) vulnerabilitywpwebsitecreator Website remote Install vor Gravity, WPForm…
- CVE-2024-52348WordPress AA Audio Player plugin <= 1.0 - Cross Site Scripting (XSS) vulnerabilityAA Extensions AA Audio Player
- CVE-2024-52349WordPress Awesome Tool Tip plugin <= 1.0 - Cross Site Scripting (XSS) vulnerabilityMd. Shiddikur Rahman Awesome Tool Tip
- CVE-2024-10486Google for WooCommerce <= 2.8.6 - Information Disclosure via Publicly Accessible PHP Info FileGoogle for WooCommerce
- CVE-2024-52389WordPress WP Job Portal plugin <= 2.2.0 - Cross Site Scripting (XSS) vulnerabilitywpjobportal WP Job Portal
- CVE-2024-52390WordPress CYAN Backup plugin <= 2.5.3 - Arbitrary File Download vulnerabilityGreg Ross CYAN Backup
- CVE-2024-52394WordPress Print PDF Generator and Publisher plugin <= 1.1.6 - Stored Cross Site Scripting (XSS) vulnerabilityverkkovaraani Print PDF Generator and Publisher
- CVE-2024-52585Autolab has HTML Injection VulnerabilityAutolab
- CVE-2024-52584Autolab has vulnerable submission endpointsAutolab
- CVE-2024-52304aiohttp vulnerable to request smuggling due to incorrect parsing of chunk extensionsaio-libs aiohttp · aiohttp
- CVE-2024-47820MarkUs vulnerable to Path TraversalMarkUsProject Markus
- CVE-2024-10390Elfsight Telegram Chat CC <= 1.1.0 - Missing Authorization to Authenticated (Subscriber+) Stored Cross-Site ScriptingElfsight Telegram Chat CC
- CVE-2020-26066Cisco SD-WAN vManage Software XML External Entity VulnerabilityCisco Catalyst SD-WAN Manager
- CVE-2020-26067Cisco Webex Teams Web Interface Cross-Site Scripting VulnerabilityCisco Webex Teams
- CVE-2024-52419WordPress Copy Anything to Clipboard plugin <= 4.0.3 - Cross Site Scripting (XSS) vulnerabilityClipboard Agency Copy Anything to Clipboard
- CVE-2020-26062Cisco Integrated Management Controller Username Enumeration VulnerabilityCisco Unified Computing System
- CVE-2020-26063Cisco Integrated Management Controller Software Authorization Bypass VulnerabilityCisco Unified Computing System
- CVE-2024-52422WordPress WP Githuber MD plugin <= 1.16.3 - Cross Site Scripting (XSS) vulnerabilityTerry L. WP Githuber MD
- CVE-2024-52423WordPress Themify Builder plugin <= 7.6.5 - Cross Site Scripting (XSS) vulnerabilitythemifyme Themify Builder
- CVE-2020-3420Cisco Unified Communications Manager Stored Cross-Site Scripting VulnerabilityCisco Unified Communications Manager
- CVE-2020-3431Cisco Small Business RV Series Routers Cross-Site Scripting VulnerabilityCisco Small Business RV Series Router Firmware
- CVE-2020-3525Cisco Identity Services Engine Password Disclosure to an Unauthorized Actor VulnerabilityCisco Identity Services Engine Software
- CVE-2020-3532Cisco Unified Communications Products Cross-Site Scripting VulnerabilityCisco Unity Connection · Cisco Unified Communications Manag…
- CVE-2020-3538Cisco Data Center Network Manager Path Traversal VulnerabilityCisco Data Center Network Manager
- CVE-2020-3539Cisco Data Center Network Manager Authorization Bypass VulnerabilityCisco Data Center Network Manager
- CVE-2020-3548Cisco Email Security Appliance Denial Of Service VulnerabilityCisco Secure Email
- CVE-2024-9474PAN-OS: Privilege Escalation (PE) Vulnerability in the Web Management InterfacePalo Alto Networks Cloud NGFW · Palo Alto Networks PAN-OS +1
- CVE-2021-1234Cisco SD-WAN vManage Information Disclosure VulnerabilitiesCisco Catalyst SD-WAN Manager
- CVE-2021-1132Cisco Network Services Orchestrator Path Traversal VulnerabilityCisco Network Services Orchestrator
- CVE-2021-1379Cisco IP Phones Cisco Discovery Protocol and Link Layer Discovery Protocol Remote Code Execution and Denial of Service VulnerabilitiesCisco IP Phones with Multiplatform Firmware · Cisco Sess… +1
- CVE-2021-1232Cisco SD-WAN vManage Information Disclosure VulnerabilityCisco Catalyst SD-WAN Manager
- CVE-2021-1410Cisco Webex Meetings Unauthorized Distribution List Update VulnerabilityCisco Webex Meetings
- CVE-2021-1425Cisco Cisco Email Security Appliance and Content Security Management Appliance Information Disclosure VulnerabilityCisco Secure Email and Web Manager
- CVE-2021-1424Cisco ASR 5000 Series Software (StarOS) ipsecmgr Process Denial of Service VulnerabilityCisco ASR 5000 Series Software
- CVE-2021-1440Cisco IOS XR Software BGP Resource Public Key Infrastructure Denial of Service VulnerabilityCisco IOS XR Software
- CVE-2021-1461Cisco SD-WAN Software Signature Verification Bypass VulnerabilityCisco Catalyst SD-WAN Manager · Cisco SD-WAN vEdge Router
- CVE-2021-1444Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software Web Services Interface Cross-Site Scripting VulnerabilityCisco Adaptive Security Appliance (ASA) Software
- CVE-2021-1462Cisco SD-WAN vManage Software Privilege Escalation VulnerabilityCisco Catalyst SD-WAN Manager
- CVE-2024-52425WordPress Drozd – Addons for Elementor plugin <= 1.1.1 - Stored Cross Site Scripting (XSS) vulnerabilityVladislav Urchenko Drozd – Addons for Elementor
- CVE-2024-52426WordPress Linear plugin <= 2.8.0 - Cross Site Scripting (XSS) vulnerabilityLinear Oy Linear
- CVE-2021-1465A vulnerability in the web-based management interface of Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to condCisco Catalyst SD-WAN Manager
- CVE-2024-37155OpenCTI May Bypass Introspection RestrictionOpenCTI-Platform opencti · pycti
- CVE-2024-11304Multiple Stored Cross-Site ScriptingSEH Computertechnik utnserver Pro · SEH Computertechnik… +1
- CVE-2024-52318Apache Tomcat: Incorrect JSP tag recycling leads to XSSApache Software Foundation Apache Tomcat · org.apache.to… +2
- CVE-2024-11319Stored XSS in Open Source Project "django-cms"django CMS Association django-cms · django-cms
- CVE-2024-52317Apache Tomcat: Request/response mix-up with HTTP/2Apache Software Foundation Apache Tomcat · org.apache.to… +1
- CVE-2024-48901Moodle: idor when fetching report schedulesmoodle · moodle/moodle
- CVE-2024-48898Moodle: some users can delete audiences of other reportsmoodle · moodle/moodle
- CVE-2024-48897Moodle: idor in edit/delete rss feedmoodle · moodle/moodle
- CVE-2024-48896Moodle: users' names returned in messaging error messagemoodle · moodle/moodle
- CVE-2024-11023Session Hijacking in Firebase JavaScript SDKFirebase JavaScript SDK · firebase
- CVE-2023-39180Kernel: ksmbd: read request memory leak denial-of-service vulnerabilitykernel · Red Hat Enterprise Linux
- CVE-2023-39176Kernel: ksmbd: transform header out-of-bounds read information disclosure vulnerabilitykernel · Red Hat Enterprise Linux
- CVE-2024-42392Improper Neutralization of Delimiters in Mongoose Web Server libraryCesanta Mongoose Web Server
- CVE-2024-42391Use of Out-of-range Pointer Offset in Mongoose Web Server libraryCesanta Mongoose Web Server
- CVE-2024-42390Use of Out-of-range Pointer Offset in Mongoose Web Server libraryCesanta Mongoose Web Server
- CVE-2024-42389Use of Out-of-range Pointer Offset in Mongoose Web Server libraryCesanta Mongoose Web Server
- CVE-2024-42388Use of Out-of-range Pointer Offset in Mongoose Web Server libraryCesanta Mongoose Web Server
- CVE-2024-42387Use of Out-of-range Pointer Offset in Mongoose Web Server libraryCesanta Mongoose Web Server
- CVE-2024-42385Improper Neutralization of Delimiters in Mongoose Web Server libraryCesanta Mongoose Web Server
- CVE-2024-41972WAGO: Arbitrary File Overwrite Leading to Privileged File Read in Multiple DevicesWAGO CC100 0751-9x01 · WAGO PFC100 G2 0750-811x-xxxx-xx… +10
- CVE-2024-41970WAGO: Unauthorized Diagnostic Data Exposure in Multiple DevicesWAGO CC100 0751-9x01 · WAGO PFC100 G2 0750-811x-xxxx-xx… +10
- CVE-2024-42383Use of Out-of-range Pointer Offset in Mongoose Web Server libraryCesanta Mongoose Web Server
- CVE-2024-41968WAGO: Docker Settings Manipulation in Multiple DevicesWAGO CC100 0751-9x01 · WAGO PFC100 G2 0750-811x-xxxx-xx… +13
- CVE-2024-22067ZTE NH8091 product has an improper permission control vulnerabilityZTE NH8091
- CVE-2024-5030CM Table Of Contents – WordPress TOC Plugin < 1.2.3 - Settings Reset via CSRFCM Table Of Contents
- CVE-2024-11308TRCore DVC - Use of Hard-coded Cryptographic KeyTRCore DVC
- CVE-2024-38828CVE-2024-38828: DoS via Spring MVC controller method with byte[] parameterSpring · org.springframework:spring-webmvc
- CVE-2024-11306Altenergy Power Control Software database improper authorizationAltenergy Power Control Software
- CVE-2024-11305Altenergy Power Control Software status_zigbee get_status_zigbee sql injectionAltenergy Power Control Software
- CVE-2024-33231Cross Site Scripting vulnerability in Ferozo Email version 1.1 allows a local attacker to execute arbitrary code via a crafted payload to th
- CVE-2024-48293Incorrect access control in QuickHeal Antivirus Pro 24.1.0.182 and earlier allows authenticated attackers with low-level privileges to arbit
- CVE-2024-48294A NULL pointer dereference in the component libPdfCore.dll of Wondershare PDF Reader v1.0.9.2544 allows attackers to cause a Denial of Servi
- CVE-2024-50848An XML External Entity (XXE) vulnerability in the Import object and Translation Memory import functionalities of WorldServer v11.8.2 to acce
- CVE-2024-50849A Stored Cross-Site Scripting (XSS) vulnerability in the "Rules" functionality of WorldServer v11.8.2 allows a remote authenticated attacker
- CVE-2024-52913In Bitcoin Core before 0.21.0, an attacker could prevent a node from seeing a specific unconfirmed transaction, because transaction re-reque
- CVE-2024-52917Bitcoin Core before 22.0 has a miniupnp infinite loop in which it allocates memory on the basis of random data received over the network, e.
- CVE-2024-52918Bitcoin-Qt in Bitcoin Core before 0.20.0 allows remote attackers to cause a denial of service (memory consumption and application crash) via
- CVE-2024-52919Bitcoin Core before 22.0 has a CAddrMan nIdCount integer overflow and resultant assertion failure (and daemon exit) via a flood of addr mess
- CVE-2024-52921In Bitcoin Core before 25.0, a peer can affect the download state of other peers by sending a mutated block.
- CVE-2024-52922In Bitcoin Core before 25.1, an attacker can cause a node to not download the latest block, because there can be minutes of delay when an an
- CVE-2024-52926Delinea Privilege Manager before 12.0.2 mishandles the security of the Windows agent.Delinea Privilege Manager
- CVE-2024-52941An issue was discovered in Veritas Enterprise Vault before 15.1 UPD882911, ZDI-CAN-24695.
- CVE-2024-52942An issue was discovered in Veritas Enterprise Vault before 15.1 UPD882911, ZDI-CAN-24696.
- CVE-2024-52943An issue was discovered in Veritas Enterprise Vault before 15.1 UPD882911, ZDI-CAN-24697.
- CVE-2024-52944An issue was discovered in Veritas Enterprise Vault before 15.1 UPD882911, ZDI-CAN-24698.
- CVE-2024-52947A cross-site scripting (XSS) vulnerability in LemonLDAP::NG before 2.20.1 allows remote attackers to inject arbitrary web script or HTML via