|
249261
|
5.3 |
MEDIUM
Network
|
mattermost
|
mattermost_desktop
|
Mattermost Desktop App versions <=5.8.0 fail to safeguard screen capture functionality which allows an attacker to silently capture high-quality screenshots via JavaScript APIs.
|
NVD-CWE-noinfo
|
CVE-2024-39772
|
2024-11-1 23:20 |
2024-09-17 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
249262
|
7.5 |
HIGH
Network
|
gaizhenbiao
|
chuanhuchatgpt
|
An arbitrary file read vulnerability exists in gaizhenbiao/chuanhuchatgpt version 20240628 due to insufficient validation when loading prompt template files. An attacker can read any file that matche…
|
CWE-22
Path Traversal
|
CVE-2024-7962
|
2024-11-1 23:19 |
2024-10-29 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
249263
|
5.4 |
MEDIUM
Network
|
ysoft
|
safeq
|
Multiple Stored Cross-Site Scripting vulnerabilities were discovered in Y Soft SAFEQ 6 Build 53. Multiple fields in the YSoft SafeQ web application can be used to inject malicious inputs that, due to…
|
CWE-79
Cross-site Scripting
|
CVE-2022-23861
|
2024-11-1 23:19 |
2024-10-23 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
249264
|
8.8 |
HIGH
Network
|
tenda
|
rx9_pro_firmware
|
A vulnerability, which was classified as critical, has been found in Tenda RX9 and RX9 Pro 22.03.02.20. Affected by this issue is the function sub_4337EC of the file /goform/SetNetControlList. The ma…
|
CWE-787
Out-of-bounds Write
|
CVE-2024-10283
|
2024-11-1 23:08 |
2024-10-24 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
249265
|
7.5 |
HIGH
Network
|
tenda
|
ac15_firmware ac7_firmware ac10u_firmware ac500_firmware ac18_firmware ac9_firmware ac1206_firmware ac6_firmware ac10_firmware ac8_firmware
|
A vulnerability was found in Tenda AC6, AC7, AC8, AC9, AC10, AC10U, AC15, AC18, AC500 and AC1206 up to 20241022. It has been rated as problematic. This issue affects the function websReadEvent of the…
|
CWE-476
NULL Pointer Dereference
|
CVE-2024-10280
|
2024-11-1 23:03 |
2024-10-23 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
249266
|
8.8 |
HIGH
Network
|
tenda
|
rx9_pro_firmware
|
A vulnerability classified as critical has been found in Tenda RX9 and RX9 Pro 22.03.02.10/22.03.02.20. Affected is the function sub_42EEE0 of the file /goform/SetStaticRouteCfg. The manipulation of …
|
CWE-787
Out-of-bounds Write
|
CVE-2024-10281
|
2024-11-1 22:52 |
2024-10-23 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
249267
|
8.8 |
HIGH
Network
|
tenda
|
rx9_pro_firmware
|
A vulnerability classified as critical was found in Tenda RX9 and RX9 Pro 22.03.02.10/22.03.02.20. Affected by this vulnerability is the function sub_42EA38 of the file /goform/SetVirtualServerCfg. T…
|
CWE-787
Out-of-bounds Write
|
CVE-2024-10282
|
2024-11-1 22:47 |
2024-10-24 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
249268
|
- |
|
-
|
-
|
Directory Traversal in /SASStudio/sasexec/sessions/{sessionID}/workspace/{InternalPath} in SAS Studio 9.4 allows remote attacker to access internal files by manipulating default path during file down…
|
-
|
CVE-2024-48735
|
2024-11-1 22:15 |
2024-10-31 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
249269
|
- |
|
-
|
-
|
In PyTorch <=2.4.1, the RemoteModule has Deserialization RCE. NOTE: this is disputed by multiple parties because this is intended behavior in PyTorch distributed computing.
|
-
|
CVE-2024-48063
|
2024-11-1 22:15 |
2024-10-30 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
249270
|
6.4 |
MEDIUM
Network
|
-
|
-
|
The Otter Blocks – Gutenberg Blocks, Page Builder for Gutenberg Editor & FSE plugin for WordPress is vulnerable to Stored Cross-Site Scripting via REST API SVG File uploads in all versions up to, and…
|
CWE-79
Cross-site Scripting
|
CVE-2024-10367
|
2024-11-1 21:57 |
2024-11-1 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|