|
248951
|
6.5 |
MEDIUM
Network
|
appsmith
|
appsmith
|
AppSmith Community 1.8.3 before 1.46 allows SSRF via New DataSource for application/json requests to 169.254.169.254 to retrieve AWS metadata credentials.
|
CWE-918
Server-Side Request Forgery (SSRF)
|
CVE-2024-51408
|
2024-11-7 07:06 |
2024-11-4 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
248952
|
4.9 |
MEDIUM
Network
|
topdata
|
inner_rep_plus
|
A vulnerability was found in Topdata Inner Rep Plus WebServer 2.01. It has been classified as problematic. Affected is an unknown function of the file /InnerRepPlus.html of the component Operator Det…
|
CWE-549
Missing Password Field Masking
|
CVE-2024-10122
|
2024-11-7 07:05 |
2024-10-19 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
248953
|
- |
|
-
|
-
|
In agentscope <=v0.0.4, the file agentscope\web\workstation\workflow_utils.py has the function is_callable_expression. Within this function, the line result = eval(s) poses a security risk as it can …
|
-
|
CVE-2024-48050
|
2024-11-7 06:35 |
2024-11-5 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
248954
|
- |
|
-
|
-
|
U-Boot environment is read from unauthenticated partition.
|
-
|
CVE-2024-22013
|
2024-11-7 06:35 |
2024-09-17 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
248955
|
6.1 |
MEDIUM
Network
|
shibulijack
|
cj_change_howdy
|
Cross-Site Request Forgery (CSRF) vulnerability in Shibu Lijack a.K.A CyberJack CJ Change Howdy allows Stored XSS.This issue affects CJ Change Howdy: from n/a through 3.3.1.
|
CWE-352
Origin Validation Error
|
CVE-2024-49223
|
2024-11-7 05:55 |
2024-10-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
248956
|
6.1 |
MEDIUM
Network
|
julianweinert
|
cslider
|
Cross-Site Request Forgery (CSRF) vulnerability in Julian Weinert // cs&m cSlider allows Stored XSS.This issue affects cSlider: from n/a through 2.4.2.
|
CWE-352
Origin Validation Error
|
CVE-2024-49221
|
2024-11-7 05:54 |
2024-10-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
248957
|
9.8 |
CRITICAL
Network
|
madirisalmanaashish
|
adding_drop_down_roles_in_registration
|
Incorrect Privilege Assignment vulnerability in Madiri Salman Aashish Adding drop down roles in registration allows Privilege Escalation.This issue affects Adding drop down roles in registration: fro…
|
NVD-CWE-Other
|
CVE-2024-49217
|
2024-11-7 05:53 |
2024-10-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
248958
|
8.8 |
HIGH
Network
|
themexpo
|
rs-members
|
Incorrect Privilege Assignment vulnerability in themexpo RS-Members allows Privilege Escalation.This issue affects RS-Members: from n/a through 1.0.3.
|
NVD-CWE-Other
|
CVE-2024-49219
|
2024-11-7 05:45 |
2024-10-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
248959
|
6.1 |
MEDIUM
Network
|
cookie-scanner
|
cookie_scanner
|
Cross-Site Request Forgery (CSRF) vulnerability in Cookie Scanner – Nikel Schubert Cookie Scanner allows Stored XSS.This issue affects Cookie Scanner: from n/a through 1.1.
|
CWE-352
Origin Validation Error
|
CVE-2024-49220
|
2024-11-7 05:41 |
2024-10-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
248960
|
6.1 |
MEDIUM
Network
|
arifnezami
|
better_author_bio
|
Cross-Site Request Forgery (CSRF) vulnerability in Arif Nezami Better Author Bio allows Cross-Site Scripting (XSS).This issue affects Better Author Bio: from n/a through 2.7.10.11.
|
CWE-352
Origin Validation Error
|
CVE-2024-49229
|
2024-11-7 05:40 |
2024-10-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|