|
252621
|
- |
|
-
|
-
|
MXsecurity software versions v1.1.0 and prior are vulnerable because of the use of hard-coded credentials. This vulnerability could allow an attacker to tamper with sensitive data.
|
-
|
CVE-2024-4740
|
2024-10-18 18:15 |
2024-10-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
252622
|
9.8 |
CRITICAL
Network
|
-
|
-
|
SECOM WRTR-304GN-304TW-UPSC does not properly filter user input in the specific functionality. Unauthenticated remote attackers can exploit this vulnerability to inject and execute arbitrary system c…
|
CWE-78
OS Command
|
CVE-2024-10118
|
2024-10-18 13:15 |
2024-10-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
252623
|
5.9 |
MEDIUM
Network
|
-
|
-
|
Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
|
CWE-416
Use After Free
|
CVE-2024-49023
|
2024-10-18 10:15 |
2024-10-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
252624
|
5.9 |
MEDIUM
Network
|
-
|
-
|
Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
|
CWE-122
Heap-based Buffer Overflow
|
CVE-2024-43587
|
2024-10-18 10:15 |
2024-10-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
252625
|
- |
|
-
|
-
|
Improper access removal handling in firmware of some Solidigm DC Products may allow an attacker with physical access to gain unauthorized access.
|
-
|
CVE-2024-47976
|
2024-10-18 07:15 |
2024-10-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
252626
|
6.5 |
MEDIUM
Network
|
microsoft
|
office 365_apps office_long_term_servicing_channel
|
Microsoft Office Spoofing Vulnerability
|
NVD-CWE-noinfo
|
CVE-2024-43609
|
2024-10-18 06:18 |
2024-10-9 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
252627
|
7.8 |
HIGH
Local
|
microsoft
|
deepspeed
|
DeepSpeed Remote Code Execution Vulnerability
|
NVD-CWE-noinfo
|
CVE-2024-43497
|
2024-10-18 06:15 |
2024-10-9 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
252628
|
6.6 |
MEDIUM
Network
|
microsoft
|
azure_service_fabric
|
Azure Service Fabric for Linux Remote Code Execution Vulnerability
|
NVD-CWE-noinfo
|
CVE-2024-43480
|
2024-10-18 06:14 |
2024-10-9 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
252629
|
7.8 |
HIGH
Local
|
thinkst
|
opencanary
|
OpenCanary, a multi-protocol network honeypot, directly executed commands taken from its config file. Prior to version 0.9.4, where the config file is stored in an unprivileged user directory but the…
|
CWE-863
Incorrect Authorization
|
CVE-2024-48911
|
2024-10-18 06:13 |
2024-10-15 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
252630
|
8.8 |
HIGH
Network
|
dueclic
|
wp_2fa_with_telegram
|
The WP 2FA with Telegram plugin for WordPress is vulnerable to Authentication Bypass in versions up to, and including, 3.0. This is due to insufficient validation of the user-controlled key on the 'v…
|
CWE-639
Authorization Bypass Through User-Controlled Key
|
CVE-2024-9687
|
2024-10-18 06:11 |
2024-10-15 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|