|
309501
|
- |
|
-
|
-
|
NULL pointer dereference in IP socket options processing of the Networking Stack in QNX Software Development Platform (SDP) version(s) 7.1 and 7.0 could allow an attacker with local access to cause a…
|
-
|
CVE-2024-35215
|
2024-10-10 21:56 |
2024-10-9 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
309502
|
8.0 |
HIGH
Adjacent
|
-
|
-
|
Windows Hyper-V Remote Code Execution Vulnerability
|
CWE-20 CWE-829
Improper Input Validation Inclusion of Functionality from Untrusted Control Sphere
|
CVE-2024-30092
|
2024-10-10 21:56 |
2024-10-9 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
309503
|
- |
|
-
|
-
|
An issue in the getcolor function in utils.py of xhtml2pdf v0.2.13 allows attackers to cause a Regular expression Denial of Service (ReDOS) via supplying a crafted string.
|
-
|
CVE-2024-25885
|
2024-10-10 21:56 |
2024-10-9 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
309504
|
7.1 |
HIGH
Adjacent
|
-
|
-
|
Windows Hyper-V Security Feature Bypass Vulnerability
|
CWE-20
Improper Input Validation
|
CVE-2024-20659
|
2024-10-10 21:56 |
2024-10-9 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
309505
|
5.3 |
MEDIUM
Network
|
-
|
-
|
A vulnerability was found in the resteasy-netty4 library arising from improper handling of HTTP requests using smuggling techniques. When an HTTP smuggling request with an ASCII control character is …
|
CWE-444
HTTP Request Smuggling
|
CVE-2024-9622
|
2024-10-10 21:56 |
2024-10-9 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
309506
|
5.3 |
MEDIUM
Network
|
-
|
-
|
A vulnerability was found in Quarkus CXF. Passwords and other secrets may appear in the application log in spite of the user configuring them to be hidden. This issue requires some special configura…
|
CWE-532
Inclusion of Sensitive Information in Log Files
|
CVE-2024-9621
|
2024-10-10 21:56 |
2024-10-9 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
309507
|
5.3 |
MEDIUM
Network
|
-
|
-
|
A flaw was found in Event-Driven Automation (EDA) in Ansible Automation Platform (AAP), which lacks encryption of sensitive information. An attacker with network access could exploit this vulnerabili…
|
-
|
CVE-2024-9620
|
2024-10-10 21:56 |
2024-10-9 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
309508
|
- |
|
-
|
-
|
A flaw exists whereby a user can make a specific call to a FlashArray endpoint allowing privilege escalation.
|
-
|
CVE-2024-3057
|
2024-10-10 21:56 |
2024-10-9 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
309509
|
- |
|
-
|
-
|
A command injection vulnerability exists in Motorola CX2L router v1.0.2 and below. The vulnerability is present in the SetStationSettings function. The system directly invokes the system function to …
|
-
|
CVE-2024-45880
|
2024-10-10 21:56 |
2024-10-9 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
309510
|
- |
|
-
|
-
|
An exposure of sensitive information to an unauthorized actor vulnerability [CWE-200] in FortiManager 7.4.2 and below, 7.2.5 and below, 7.0.12 and below allows a remote authenticated attacker assigne…
|
CWE-200
Information Exposure
|
CVE-2024-33506
|
2024-10-10 21:56 |
2024-10-9 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|