|
251171
|
- |
|
-
|
-
|
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WPManageNinja LLC Fluent Support allows SQL Injection.This issue affects Fluent Support: from n/a…
|
CWE-89
SQL Injection
|
CVE-2024-47304
|
2024-10-18 21:52 |
2024-10-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
251172
|
- |
|
-
|
-
|
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in easy.Jobs EasyJobs allows Reflected XSS.This issue affects EasyJobs: from n/a through 2.4.…
|
CWE-79
Cross-site Scripting
|
CVE-2024-43997
|
2024-10-18 21:52 |
2024-10-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
251173
|
- |
|
-
|
-
|
The affected product is vulnerable to an attacker being able to use commands without providing a password which may allow an attacker to leak information.
|
CWE-306
Missing Authentication for Critical Function
|
CVE-2024-49399
|
2024-10-18 21:52 |
2024-10-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
251174
|
- |
|
-
|
-
|
The affected product is vulnerable to unrestricted file uploads, which may allow an attacker to remotely execute code.
|
CWE-434
Unrestricted Upload of File with Dangerous Type
|
CVE-2024-49398
|
2024-10-18 21:52 |
2024-10-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
251175
|
- |
|
-
|
-
|
The affected product is vulnerable to a cross-site scripting attack which may allow an attacker to bypass authentication and takeover admin accounts.
|
CWE-79
Cross-site Scripting
|
CVE-2024-49397
|
2024-10-18 21:52 |
2024-10-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
251176
|
- |
|
-
|
-
|
The affected product is vulnerable due to insufficiently protected credentials, which may allow an attacker to impersonate Elvaco and send false information.
|
CWE-522
Insufficiently Protected Credentials
|
CVE-2024-49396
|
2024-10-18 21:52 |
2024-10-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
251177
|
- |
|
-
|
-
|
Tenda G3 v15.01.0.5(2848_755)_EN was discovered to contain a hardcoded password vulnerability in /etc_ro/shadow, which allows attackers to log in as root
|
-
|
CVE-2024-48192
|
2024-10-18 21:52 |
2024-10-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
251178
|
- |
|
-
|
-
|
In LAquis SCADA version 4.7.1.511, a cross-site scripting vulnerability could allow an attacker to inject arbitrary code into a web page. This could allow an attacker to steal cookies, redirect users…
|
CWE-79
Cross-site Scripting
|
CVE-2024-9414
|
2024-10-18 21:52 |
2024-10-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
251179
|
- |
|
-
|
-
|
A vulnerability was found in CoinGate Plugin up to 1.2.7 on PrestaShop. It has been rated as problematic. Affected by this issue is the function postProcess of the file modules/coingate/controllers/f…
|
-
|
CVE-2018-25104
|
2024-10-18 21:52 |
2024-10-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
251180
|
- |
|
-
|
-
|
PutongOJ is online judging software. Prior to version 2.1.0-beta.1, unprivileged users can escalate privileges by constructing requests. This can lead to unauthorized access, enabling users to perfor…
|
CWE-306
Missing Authentication for Critical Function
|
CVE-2024-48920
|
2024-10-18 21:52 |
2024-10-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|