|
256451
|
4.7 |
MEDIUM
Local
|
linux
|
linux_kernel
|
In the Linux kernel, the following vulnerability has been resolved:
gpio: pca953x: fix pca953x_irq_bus_sync_unlock race
Ensure that `i2c_lock' is held when setting interrupt latch and mask in
pca95…
|
CWE-667
Improper Locking
|
CVE-2024-42253
|
2024-09-6 22:38 |
2024-08-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
256452
|
5.5 |
MEDIUM
Local
|
linux
|
linux_kernel
|
In the Linux kernel, the following vulnerability has been resolved:
closures: Change BUG_ON() to WARN_ON()
If a BUG_ON() can be hit in the wild, it shouldn't be a BUG_ON()
For reference, this has …
|
CWE-617
Reachable Assertion
|
CVE-2024-42252
|
2024-09-6 22:37 |
2024-08-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
256453
|
9.1 |
CRITICAL
Network
|
huawei
|
emui
harmonyos
|
Directory traversal vulnerability in the cust module
Impact: Successful exploitation of this vulnerability will affect availability and confidentiality.
|
CWE-22
Path Traversal
|
CVE-2024-45443
|
2024-09-6 22:33 |
2024-09-4 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
256454
|
4.3 |
MEDIUM
Network
|
salesagility
|
suitecrm
|
SuiteCRM is an open-source customer relationship management (CRM) system. Prior to version 7.14.5 and 8.6.2, insufficient access control checks allow a threat actor to delete records via the API. Ver…
|
NVD-CWE-Other
|
CVE-2024-45392
|
2024-09-6 22:24 |
2024-09-6 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
256455
|
6.1 |
MEDIUM
Network
|
angeljudesuarez
|
event_management_system
|
Sourcecodehero Event Management System 1.0 allows Stored Cross-Site Scripting via parameters Full Name, Address, Email, and contact# in /clientdetails/admin/regester.php.
|
CWE-79
Cross-site Scripting
|
CVE-2024-44728
|
2024-09-6 22:23 |
2024-09-6 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
256456
|
6.1 |
MEDIUM
Network
|
1e
|
platform
|
The 1E Platform's component utilized the third-party Duende Identity Server, which suffered from an open redirect vulnerability, permitting an attacker to control the redirection path of end users.
…
|
CWE-601
Open Redirect
|
CVE-2024-7211
|
2024-09-6 22:23 |
2024-08-2 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
256457
|
5.5 |
MEDIUM
Local
|
linux
|
linux_kernel
|
In the Linux kernel, the following vulnerability has been resolved:
mm: page_ref: remove folio_try_get_rcu()
The below bug was reported on a non-SMP kernel:
[ 275.267158][ T4335] ------------[ cu…
|
CWE-617
Reachable Assertion
|
CVE-2024-42251
|
2024-09-6 22:21 |
2024-08-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
256458
|
9.8 |
CRITICAL
Network
|
angeljudesuarez
|
event_management_system
|
Sourcecodehero Event Management System1.0 is vulnerable to SQL Injection via the parameter 'username' in /event/admin/login.php.
|
CWE-89
SQL Injection
|
CVE-2024-44727
|
2024-09-6 22:15 |
2024-09-6 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
256459
|
9.1 |
CRITICAL
Network
|
mindsdb
|
mindsdb
|
MindsDB is a platform for building artificial intelligence from enterprise data. Prior to version 23.12.4.2, a threat actor can bypass the server-side request forgery protection on the whole website …
|
CWE-918
Server-Side Request Forgery (SSRF)
|
CVE-2024-24759
|
2024-09-6 22:06 |
2024-09-6 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
256460
|
8.1 |
HIGH
Network
|
ibm
|
aspera_faspex
|
IBM Aspera Faspex 5.0.0 through 5.0.9 could allow a user to bypass intended access restrictions and conduct resource modification.
|
NVD-CWE-noinfo
|
CVE-2024-45098
|
2024-09-6 22:01 |
2024-09-6 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
