|
307941
|
4.2 |
MEDIUM
Adjacent
|
jktyre
|
smart_tyre_car_\&_bike
|
An issue in SMART TYRE CAR & BIKE v4.2.0 allows attackers to perform a man-in-the-middle attack via Bluetooth communications.
|
CWE-294
Authentication Bypass by Capture-replay
|
CVE-2024-39081
|
2024-10-2 00:51 |
2024-09-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
307942
|
8.8 |
HIGH
Adjacent
|
circutor
|
q-smt_firmware
|
An attacker with access to the network where the CIRCUTOR Q-SMT is located in its firmware version 1.0.4, could obtain legitimate credentials or steal sessions due to the fact that the device only im…
|
NVD-CWE-Other
|
CVE-2024-8890
|
2024-10-2 00:46 |
2024-09-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
307943
|
9.8 |
CRITICAL
Network
|
doverfuelingsolutions
|
progauge_maglink_lx_console_firmware progauge_maglink_lx4_console_firmware
|
The web application for ProGauge MAGLINK LX4 CONSOLE contains an
administrative-level user account with a password that cannot be
changed.
|
CWE-798
Use of Hard-coded Credentials
|
CVE-2024-43423
|
2024-10-2 00:41 |
2024-09-25 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
307944
|
7.8 |
HIGH
Local
|
projectdiscovery
|
nuclei
|
Nuclei is a vulnerability scanner powered by YAML based templates. Starting in version 3.0.0 and prior to version 3.3.2, a vulnerability in Nuclei's template signature verification system could allow…
|
CWE-78
OS Command
|
CVE-2024-43405
|
2024-10-2 00:37 |
2024-09-5 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
307945
|
8.8 |
HIGH
Local
|
rust-lang
|
rust
|
Rust is a programming language. The fix for CVE-2024-24576, where `std::process::Command` incorrectly escaped arguments when invoking batch files on Windows, was incomplete. Prior to Rust version 1.8…
|
CWE-88
Argument Injection
|
CVE-2024-43402
|
2024-10-2 00:12 |
2024-09-5 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
307946
|
6.1 |
MEDIUM
Network
|
objectiv
|
simple_ldap_login
|
The Simple LDAP Login plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg without appropriate escaping on the URL in all versions up to, and including…
|
CWE-79
Cross-site Scripting
|
CVE-2024-8715
|
2024-10-1 23:37 |
2024-09-28 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
307947
|
7.5 |
HIGH
Network
|
huawei
|
harmonyos emui
|
Access permission verification vulnerability in the App Multiplier module
Impact: Successful exploitation of this vulnerability may affect service confidentiality.
|
NVD-CWE-noinfo
|
CVE-2024-9136
|
2024-10-1 23:28 |
2024-09-27 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
307948
|
7.5 |
HIGH
Network
|
huawei
|
emui harmonyos
|
Access permission verification vulnerability in the input method framework module
Impact: Successful exploitation of this vulnerability may affect availability.
|
NVD-CWE-noinfo
|
CVE-2024-47294
|
2024-10-1 23:27 |
2024-09-27 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
307949
|
7.5 |
HIGH
Network
|
huawei
|
harmonyos emui
|
Out-of-bounds write vulnerability in the HAL-WIFI module
Impact: Successful exploitation of this vulnerability may affect availability.
|
CWE-787
Out-of-bounds Write
|
CVE-2024-47293
|
2024-10-1 23:25 |
2024-09-27 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
307950
|
5.5 |
MEDIUM
Local
|
huawei
|
emui harmonyos
|
Path traversal vulnerability in the Bluetooth module
Impact: Successful exploitation of this vulnerability may affect service confidentiality.
|
CWE-22
Path Traversal
|
CVE-2024-47292
|
2024-10-1 23:23 |
2024-09-27 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|