|
248591
|
- |
|
-
|
-
|
wasm3 139076a suffers from Invalid Memory Read, leading to DoS and potential Code Execution.
|
-
|
CVE-2024-27528
|
2024-11-19 00:35 |
2024-11-9 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
248592
|
- |
|
-
|
-
|
07FLYCMS V1.3.9 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component http://erp.07fly.net:80/oa/OaSchedule/add.html.
|
-
|
CVE-2024-51157
|
2024-11-19 00:35 |
2024-11-9 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
248593
|
7.8 |
HIGH
Local
|
ivanti
|
secure_access_client
|
Insufficient validation in Ivanti Secure Access Client before 22.7R4 allows a local authenticated attacker to escalate their privileges.
|
NVD-CWE-noinfo
|
CVE-2024-37398
|
2024-11-19 00:23 |
2024-11-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
248594
|
4.9 |
MEDIUM
Network
|
ivanti
|
connect_secure policy_secure
|
A stack-based buffer overflow in Ivanti Connect Secure before version 22.7R2.3 and Ivanti Policy Secure before version 22.7R1.2 allows a remote authenticated attacker with admin privileges to cause a…
|
CWE-787
Out-of-bounds Write
|
CVE-2024-47909
|
2024-11-19 00:09 |
2024-11-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
248595
|
7.5 |
HIGH
Network
|
ivanti
|
connect_secure
|
A stack-based buffer overflow in IPsec of Ivanti Connect Secure before version 22.7R2.3 allows a remote unauthenticated attacker to cause a denial of service.
|
CWE-787
Out-of-bounds Write
|
CVE-2024-47907
|
2024-11-19 00:09 |
2024-11-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
248596
|
4.9 |
MEDIUM
Network
|
ivanti
|
connect_secure policy_secure
|
A stack-based buffer overflow in Ivanti Connect Secure before version 22.7R2.3 and Ivanti Policy Secure before version 22.7R1.2 allows a remote authenticated attacker with admin privileges to cause a…
|
CWE-787
Out-of-bounds Write
|
CVE-2024-47905
|
2024-11-19 00:08 |
2024-11-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
248597
|
7.5 |
HIGH
Network
|
ivanti
|
avalanche
|
An infinite loop in Ivanti Avalanche before 6.4.6 allows a remote unauthenticated attacker to cause a denial of service.
|
CWE-835
Loop with Unreachable Exit Condition ('Infinite Loop')
|
CVE-2024-50321
|
2024-11-19 00:06 |
2024-11-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
248598
|
7.5 |
HIGH
Network
|
ivanti
|
avalanche
|
An infinite loop in Ivanti Avalanche before 6.4.6 allows a remote unauthenticated attacker to cause a denial of service.
|
CWE-835
Loop with Unreachable Exit Condition ('Infinite Loop')
|
CVE-2024-50320
|
2024-11-19 00:06 |
2024-11-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
248599
|
7.5 |
HIGH
Network
|
ivanti
|
avalanche
|
An infinite loop in Ivanti Avalanche before 6.4.6 allows a remote unauthenticated attacker to cause a denial of service.
|
CWE-835
Loop with Unreachable Exit Condition ('Infinite Loop')
|
CVE-2024-50319
|
2024-11-19 00:06 |
2024-11-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
248600
|
7.5 |
HIGH
Network
|
ivanti
|
avalanche
|
A null pointer dereference in Ivanti Avalanche before 6.4.6 allows a remote unauthenticated attacker to cause a denial of service.
|
CWE-476
NULL Pointer Dereference
|
CVE-2024-50318
|
2024-11-19 00:06 |
2024-11-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|