|
251371
|
4.3 |
MEDIUM
Network
|
-
|
-
|
The Forminator Forms – Contact Form, Payment Form & Custom Form Builder plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.35.1. This is due to m…
|
CWE-352
Origin Validation Error
|
CVE-2024-9352
|
2024-10-18 21:52 |
2024-10-17 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
251372
|
- |
|
-
|
-
|
MXsecurity software versions v1.1.0 and prior are vulnerable because of the use of hard-coded credentials. This vulnerability could allow an attacker to tamper with sensitive data.
|
-
|
CVE-2024-4740
|
2024-10-18 18:15 |
2024-10-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
251373
|
9.8 |
CRITICAL
Network
|
-
|
-
|
SECOM WRTR-304GN-304TW-UPSC does not properly filter user input in the specific functionality. Unauthenticated remote attackers can exploit this vulnerability to inject and execute arbitrary system c…
|
CWE-78
OS Command
|
CVE-2024-10118
|
2024-10-18 13:15 |
2024-10-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
251374
|
5.9 |
MEDIUM
Network
|
-
|
-
|
Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
|
CWE-416
Use After Free
|
CVE-2024-49023
|
2024-10-18 10:15 |
2024-10-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
251375
|
5.9 |
MEDIUM
Network
|
-
|
-
|
Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
|
CWE-122
Heap-based Buffer Overflow
|
CVE-2024-43587
|
2024-10-18 10:15 |
2024-10-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
251376
|
- |
|
-
|
-
|
Improper access removal handling in firmware of some Solidigm DC Products may allow an attacker with physical access to gain unauthorized access.
|
-
|
CVE-2024-47976
|
2024-10-18 07:15 |
2024-10-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
251377
|
6.5 |
MEDIUM
Network
|
microsoft
|
office 365_apps office_long_term_servicing_channel
|
Microsoft Office Spoofing Vulnerability
|
NVD-CWE-noinfo
|
CVE-2024-43609
|
2024-10-18 06:18 |
2024-10-9 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
251378
|
7.8 |
HIGH
Local
|
microsoft
|
deepspeed
|
DeepSpeed Remote Code Execution Vulnerability
|
NVD-CWE-noinfo
|
CVE-2024-43497
|
2024-10-18 06:15 |
2024-10-9 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
251379
|
6.6 |
MEDIUM
Network
|
microsoft
|
azure_service_fabric
|
Azure Service Fabric for Linux Remote Code Execution Vulnerability
|
NVD-CWE-noinfo
|
CVE-2024-43480
|
2024-10-18 06:14 |
2024-10-9 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
251380
|
7.8 |
HIGH
Local
|
thinkst
|
opencanary
|
OpenCanary, a multi-protocol network honeypot, directly executed commands taken from its config file. Prior to version 0.9.4, where the config file is stored in an unprivileged user directory but the…
|
CWE-863
Incorrect Authorization
|
CVE-2024-48911
|
2024-10-18 06:13 |
2024-10-15 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|