|
248501
|
5.8 |
MEDIUM
Network
|
-
|
-
|
Multiple Cisco products are affected by a vulnerability in the Snort detection engine that could allow an unauthenticated, remote attacker to bypass a configured file policy for HTTP.
The vulnerabi…
|
CWE-693
Protection Mechanism Failure
|
CVE-2021-1494
|
2024-11-19 02:11 |
2024-11-16 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
248502
|
- |
|
-
|
-
|
A vulnerability in the web-based management interface of Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to read arbitrary files on the underlying file system of the …
|
CWE-59
Link Following
|
CVE-2021-1491
|
2024-11-19 02:11 |
2024-11-16 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
248503
|
- |
|
-
|
-
|
In JetBrains WebStorm before 2024.3 code execution in Untrusted Project mode was possible via type definitions installer script
|
CWE-349
Acceptance of Extraneous Untrusted Data With Trusted Data
|
CVE-2024-52555
|
2024-11-19 02:11 |
2024-11-16 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
248504
|
- |
|
-
|
-
|
Multiple parameters have SQL injection vulnerability in JEPaaS 7.2.8 via /je/login/btnLog/insertBtnLog, which could allow a remote user to submit a specially crafted query, allowing an attacker to re…
|
-
|
CVE-2024-51164
|
2024-11-19 02:11 |
2024-11-16 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
248505
|
- |
|
-
|
-
|
KASO v9.0 was discovered to contain a SQL injection vulnerability via the person_id parameter at /cardcase/editcard.jsp.
|
-
|
CVE-2024-50724
|
2024-11-19 02:11 |
2024-11-16 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
248506
|
- |
|
-
|
-
|
python_book V1.0 is vulnerable to Incorrect Access Control, which allows attackers to obtain sensitive information of users with different IDs by modifying the ID parameter.
|
-
|
CVE-2024-50650
|
2024-11-19 02:11 |
2024-11-16 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
248507
|
4.3 |
MEDIUM
Network
|
-
|
-
|
A vulnerability in the administrative web-based GUI configuration manager of Cisco Firepower Management Center (FMC) Software could allow an authenticated, remote attacker to access sensitive configu…
|
CWE-317
Cleartext Storage of Sensitive Information in GUI
|
CVE-2021-34751
|
2024-11-19 02:11 |
2024-11-16 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
248508
|
4.3 |
MEDIUM
Network
|
-
|
-
|
A vulnerability in the administrative web-based GUI configuration manager of Cisco Firepower Management Center Software could allow an authenticated, remote attacker to access sensitive configuration…
|
CWE-317
Cleartext Storage of Sensitive Information in GUI
|
CVE-2021-34750
|
2024-11-19 02:11 |
2024-11-16 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
248509
|
6.5 |
MEDIUM
Network
|
-
|
-
|
A vulnerability in the web UI of Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to inject arbitrary commands on an affected system and cause a denial of service (DoS…
|
CWE-88
Argument Injection
|
CVE-2021-1484
|
2024-11-19 02:11 |
2024-11-16 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
248510
|
6.4 |
MEDIUM
Network
|
-
|
-
|
A vulnerability in the web UI of Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to gain read and write access to information that is stored on an affected system.
T…
|
CWE-611
XXE
|
CVE-2021-1483
|
2024-11-19 02:11 |
2024-11-16 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|