|
248531
|
7.5 |
HIGH
Network
|
ivanti
|
avalanche
|
An infinite loop in Ivanti Avalanche before 6.4.6 allows a remote unauthenticated attacker to cause a denial of service.
|
CWE-835
Loop with Unreachable Exit Condition ('Infinite Loop')
|
CVE-2024-50319
|
2024-11-19 00:06 |
2024-11-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
248532
|
7.5 |
HIGH
Network
|
ivanti
|
avalanche
|
A null pointer dereference in Ivanti Avalanche before 6.4.6 allows a remote unauthenticated attacker to cause a denial of service.
|
CWE-476
NULL Pointer Dereference
|
CVE-2024-50318
|
2024-11-19 00:06 |
2024-11-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
248533
|
7.5 |
HIGH
Network
|
ivanti
|
avalanche
|
A null pointer dereference in Ivanti Avalanche before 6.4.6 allows a remote unauthenticated attacker to cause a denial of service.
|
CWE-476
NULL Pointer Dereference
|
CVE-2024-50317
|
2024-11-19 00:06 |
2024-11-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
248534
|
4.3 |
MEDIUM
Network
|
kognetiks
|
kognetiks_chatbot
|
The Kognetiks Chatbot for WordPress plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.1.8. This is due to missing or incorrect nonce validation …
|
CWE-352
Origin Validation Error
|
CVE-2024-11143
|
2024-11-19 00:03 |
2024-11-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
248535
|
6.1 |
MEDIUM
Network
|
kognetiks
|
kognetiks_chatbot
|
The Kognetiks Chatbot for WordPress plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'dir' parameter in all versions up to, and including, 2.1.7 due to insufficient input …
|
CWE-79
Cross-site Scripting
|
CVE-2024-10684
|
2024-11-19 00:03 |
2024-11-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
248536
|
4.3 |
MEDIUM
Network
|
kognetiks
|
kognetiks_chatbot
|
The Kognetiks Chatbot for WordPress plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the update_assistant() function in all versions up to,…
|
CWE-862
Missing Authorization
|
CVE-2024-10531
|
2024-11-19 00:02 |
2024-11-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
248537
|
4.3 |
MEDIUM
Network
|
kognetiks
|
kognetiks_chatbot
|
The Kognetiks Chatbot for WordPress plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the add_new_assistant() function in all versions up to…
|
CWE-862
Missing Authorization
|
CVE-2024-10530
|
2024-11-18 23:59 |
2024-11-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
248538
|
5.3 |
MEDIUM
Network
|
kognetiks
|
kognetiks_chatbot
|
The Kognetiks Chatbot for WordPress plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the delete_assistant() function in all versions up to,…
|
CWE-862
Missing Authorization
|
CVE-2024-10529
|
2024-11-18 23:59 |
2024-11-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
248539
|
- |
|
-
|
-
|
The theme.php file in SDCMS 2.8 has a command execution vulnerability that allows for the execution of system commands
|
-
|
CVE-2024-50809
|
2024-11-18 23:35 |
2024-11-9 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
248540
|
- |
|
-
|
-
|
An Improper Authorization (Access Control Misconfiguration) vulnerability in MGT-COMMERCE GmbH CloudPanel v2.0.0 to v2.4.2 allows low-privilege users to bypass access controls and gain unauthorized a…
|
-
|
CVE-2024-44765
|
2024-11-18 23:35 |
2024-11-9 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|