|
250951
|
- |
|
-
|
-
|
Ivanti DSM < version 2024.2 allows authenticated users on the local machine to run code with elevated privileges due to insecure ACL via unspecified attack vector.
|
-
|
CVE-2024-29213
|
2024-10-22 02:10 |
2024-10-19 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
250952
|
- |
|
-
|
-
|
ACON is a widely-used library of tools for machine learning that focuses on adaptive correlation optimization. A potential vulnerability has been identified in the input validation process, which cou…
|
CWE-20
Improper Input Validation
|
CVE-2024-49361
|
2024-10-22 02:10 |
2024-10-19 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
250953
|
- |
|
-
|
-
|
In J2eeFAST <=2.7, the backend function has unsafe filtering, which allows an attacker to trigger certain sensitive functions resulting in arbitrary code execution.
|
-
|
CVE-2024-45944
|
2024-10-22 02:10 |
2024-10-19 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
250954
|
- |
|
-
|
-
|
Dell Secure Connect Gateway (SCG) 5.0 Appliance - SRS, version(s) 5.24, contains a Use of a Broken or Risky Cryptographic Algorithm vulnerability. A low privileged attacker with remote access could p…
|
CWE-327
Use of a Broken or Risky Cryptographic Algorithm
|
CVE-2024-48016
|
2024-10-22 02:10 |
2024-10-19 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
250955
|
- |
|
-
|
-
|
Dell Secure Connect Gateway (SCG) 5.0 Appliance - SRS, version(s) 5.24, contains an Improper Certificate Validation vulnerability. A low privileged attacker with remote access could potentially explo…
|
CWE-295
Improper Certificate Validation
|
CVE-2024-47241
|
2024-10-22 02:10 |
2024-10-19 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
250956
|
- |
|
-
|
-
|
secp256k1-node is a Node.js binding for an Optimized C library for EC operations on curve secp256k1. In `elliptic`-based version, `loadUncompressedPublicKey` has a check that the public key is on the…
|
CWE-354
Improper Validation of Integrity Check Value
|
CVE-2024-48930
|
2024-10-22 02:09 |
2024-10-22 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
250957
|
- |
|
-
|
-
|
A use-after-free vulnerability was found in the QEMU LSI53C895A SCSI Host Bus Adapter emulation. This issue can lead to a crash or VM escape.
|
-
|
CVE-2024-6519
|
2024-10-22 02:09 |
2024-10-22 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
250958
|
- |
|
-
|
-
|
Funadmin 5.0.2 is vulnerable to SQL Injection via the selectFields parameter in the index method of \backend\controller\auth\Auth.php.
|
-
|
CVE-2024-48231
|
2024-10-22 02:09 |
2024-10-21 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
250959
|
- |
|
-
|
-
|
A vulnerability, which was classified as critical, was found in code-projects Blood Bank System up to 1.0. Affected is an unknown function of the file /admin/massage.php. The manipulation of the argu…
|
CWE-89
SQL Injection
|
CVE-2024-10171
|
2024-10-22 02:09 |
2024-10-20 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
250960
|
- |
|
-
|
-
|
A vulnerability, which was classified as critical, has been found in code-projects Hospital Management System 1.0. This issue affects some unknown processing of the file get_doctor.php. The manipulat…
|
CWE-89
SQL Injection
|
CVE-2024-10170
|
2024-10-22 02:09 |
2024-10-20 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|