|
305721
|
- |
|
-
|
-
|
A vulnerability in system file transfer functions of Cisco SD-WAN vManage Software could allow an authenticated, local attacker to gain escalated privileges on the underlying operating system.
…
|
CWE-250
Execution with Unnecessary Privileges
|
CVE-2020-26074
|
2024-11-19 02:11 |
2024-11-19 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
305722
|
7.5 |
HIGH
Network
|
-
|
-
|
A vulnerability in the application data endpoints of Cisco SD-WAN vManage Software could allow an unauthenticated, remote attacker to gain access to sensitive information.
The vulnerability is …
|
CWE-35
Path Traversal: '.../...//'
|
CVE-2020-26073
|
2024-11-19 02:11 |
2024-11-19 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
305723
|
7.1 |
HIGH
Network
|
-
|
-
|
A low privileged remote attacker may modify the BACNet service properties due to incorrect permission assignment for critical resources which may lead to a DoS limited to BACNet communication.
|
CWE-732
Incorrect Permission Assignment for Critical Resource
|
CVE-2024-41974
|
2024-11-19 02:11 |
2024-11-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
305724
|
8.1 |
HIGH
Network
|
-
|
-
|
A low privileged remote attacker can specify an arbitrary file on the filesystem which may lead to an arbitrary file writes with root privileges.
|
CWE-35
Path Traversal: '.../...//'
|
CVE-2024-41973
|
2024-11-19 02:11 |
2024-11-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
305725
|
6.5 |
MEDIUM
Network
|
-
|
-
|
A low privileged remote attacker can overwrite an arbitrary file on the filesystem which may lead to an arbitrary file read with root privileges.
|
CWE-35
Path Traversal: '.../...//'
|
CVE-2024-41972
|
2024-11-19 02:11 |
2024-11-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
305726
|
8.1 |
HIGH
Network
|
-
|
-
|
A low privileged remote attacker can overwrite an arbitrary file on the filesystem leading to a DoS and data loss.
|
CWE-22
Path Traversal
|
CVE-2024-41971
|
2024-11-19 02:11 |
2024-11-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
305727
|
5.7 |
MEDIUM
Network
|
-
|
-
|
A low privileged remote attacker may gain access to forbidden diagnostic data due to incorrect permission assignment for critical resources.
|
CWE-732
Incorrect Permission Assignment for Critical Resource
|
CVE-2024-41970
|
2024-11-19 02:11 |
2024-11-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
305728
|
8.4 |
HIGH
Local
|
-
|
-
|
A vulnerability in the CLI of Cisco SD-WAN Software could allow an authenticated, local attacker to create or overwrite arbitrary files on an affected device, which could result in a denial of s…
|
CWE-22
Path Traversal
|
CVE-2020-26071
|
2024-11-19 02:11 |
2024-11-19 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
305729
|
- |
|
-
|
-
|
OpenCTI is an open source platform allowing organizations to manage their cyber threat intelligence knowledge and observables. Prior to version 6.1.9, the regex validation used to prevent Introspecti…
|
CWE-284
Improper Access Control
|
CVE-2024-37155
|
2024-11-19 02:11 |
2024-11-19 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
305730
|
- |
|
-
|
-
|
A flaw was found within the handling of SMB2_READ commands in the kernel ksmbd module. The issue results from not releasing memory after its effective lifetime. An attacker can leverage this to creat…
|
-
|
CVE-2023-39180
|
2024-11-19 02:11 |
2024-11-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|