|
256751
|
9.8 |
CRITICAL
Network
|
tenda
|
fh1206_firmware
|
An issue in the handler function in /goform/telnet of Tenda FH1206 v02.03.01.35 allows attackers to execute arbitrary commands via a crafted HTTP request.
|
NVD-CWE-noinfo
|
CVE-2024-42978
|
2024-09-4 03:35 |
2024-08-16 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
256752
|
7.5 |
HIGH
Network
|
tenda
|
fh1201_firmware
|
Tenda FH1201 v1.2.0.14 (408) was discovered to contain a stack overflow via the delno parameter in the fromPptpUserSetting function. This vulnerability allows attackers to cause a Denial of Service (…
|
CWE-787
Out-of-bounds Write
|
CVE-2024-42948
|
2024-09-4 03:35 |
2024-08-16 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
256753
|
9.6 |
CRITICAL
Network
|
vtiger
|
vtiger_crm
|
A reflected cross-site scripting (XSS) vulnerability in the parent parameter in the index page of vTiger CRM 7.4.0 allows attackers to execute arbitrary code in the context of a user's browser via in…
|
CWE-79
Cross-site Scripting
|
CVE-2024-44778
|
2024-09-4 03:34 |
2024-08-30 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
256754
|
9.6 |
CRITICAL
Network
|
vtiger
|
vtiger_crm
|
A reflected cross-site scripting (XSS) vulnerability in the viewname parameter in the index page of vTiger CRM 7.4.0 allows attackers to execute arbitrary code in the context of a user's browser via …
|
CWE-79
Cross-site Scripting
|
CVE-2024-44779
|
2024-09-4 03:33 |
2024-08-30 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
256755
|
9.6 |
CRITICAL
Network
|
vtiger
|
vtiger_crm
|
A reflected cross-site scripting (XSS) vulnerability in the tag parameter in the index page of vTiger CRM 7.4.0 allows attackers to execute arbitrary code in the context of a user's browser via injec…
|
CWE-79
Cross-site Scripting
|
CVE-2024-44777
|
2024-09-4 03:33 |
2024-08-30 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
256756
|
6.1 |
MEDIUM
Network
|
vtiger
|
vtiger_crm
|
An Open Redirect vulnerability in the page parameter of vTiger CRM v7.4.0 allows attackers to redirect users to a malicious site via a crafted URL.
|
CWE-601
Open Redirect
|
CVE-2024-44776
|
2024-09-4 03:33 |
2024-08-30 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
256757
|
6.1 |
MEDIUM
Network
|
dedebiz
|
dedebiz
|
A cross-site scripting (XSS) vulnerability in DedeBIZ v6.3.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload.
|
CWE-79
Cross-site Scripting
|
CVE-2024-44717
|
2024-09-4 03:32 |
2024-08-30 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
256758
|
6.1 |
MEDIUM
Network
|
dedebiz
|
dedebiz
|
A cross-site scripting (XSS) vulnerability in DedeBIZ v6.3.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload.
|
CWE-79
Cross-site Scripting
|
CVE-2024-44716
|
2024-09-4 03:32 |
2024-08-30 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
256759
|
5.4 |
MEDIUM
Network
|
dsgvo-for-wp
|
dsgvo_all_in_one_for_wp
|
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Michael Leithold DSGVO All in one for WP allows Stored XSS.This issue affects DSGVO All in…
|
CWE-79
Cross-site Scripting
|
CVE-2024-43964
|
2024-09-4 03:30 |
2024-08-30 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
256760
|
5.4 |
MEDIUM
Network
|
khoj
|
khoj
|
Khoj is an application that creates personal AI agents. The Automation feature allows a user to insert arbitrary HTML inside the task instructions, resulting in a Stored XSS. The q parameter for the …
|
CWE-79
Cross-site Scripting
|
CVE-2024-43396
|
2024-09-4 03:19 |
2024-08-21 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|