|
306721
|
5.3 |
MEDIUM
Network
|
gradio_project
|
gradio
|
Gradio is an open-source Python package designed for quick prototyping. This vulnerability involves a **one-level read path traversal** in the `/custom_component` endpoint. Attackers can exploit this…
|
CWE-22
Path Traversal
|
CVE-2024-47166
|
2024-10-18 01:48 |
2024-10-11 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
306722
|
9.8 |
CRITICAL
Network
|
hdfgroup
|
hdf5
|
HDF5 library through 1.14.3 has memory corruption in H5A__close resulting in the corruption of the instruction pointer and causing denial of service or potential code execution.
|
CWE-787
Out-of-bounds Write
|
CVE-2024-32608
|
2024-10-18 01:47 |
2024-10-9 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
306723
|
5.4 |
MEDIUM
Network
|
gradio_project
|
gradio
|
Gradio is an open-source Python package designed for quick prototyping. This vulnerability relates to **CORS origin validation accepting a null origin**. When a Gradio server is deployed locally, the…
|
NVD-CWE-noinfo
|
CVE-2024-47165
|
2024-10-18 01:46 |
2024-10-11 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
306724
|
6.5 |
MEDIUM
Network
|
gradio_project
|
gradio
|
Gradio is an open-source Python package designed for quick prototyping. This vulnerability relates to the **bypass of directory traversal checks** within the `is_in_or_equal` function. This function,…
|
CWE-22
Path Traversal
|
CVE-2024-47164
|
2024-10-18 01:40 |
2024-10-11 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
306725
|
8.3 |
HIGH
Network
|
gradio_project
|
gradio
|
Gradio is an open-source Python package designed for quick prototyping. This vulnerability is related to **CORS origin validation**, where the Gradio server fails to validate the request origin when …
|
NVD-CWE-Other
|
CVE-2024-47084
|
2024-10-18 01:30 |
2024-10-11 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
306726
|
8.8 |
HIGH
Network
|
microchip
|
timeprovider_4100_firmware
|
Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection'), Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Microchip TimeProvider 4100 (Co…
|
CWE-78
OS Command
|
CVE-2024-9054
|
2024-10-18 00:19 |
2024-10-5 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
306727
|
6.5 |
MEDIUM
Adjacent
|
microchip
|
timeprovider_4100_firmware
|
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Microchip TimeProvider 4100 (Data plot modules) allows SQL Injection.This issue affects TimeProvi…
|
CWE-89
SQL Injection
|
CVE-2024-7801
|
2024-10-18 00:19 |
2024-10-5 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
306728
|
9.8 |
CRITICAL
Network
|
microchip
|
timeprovider_4100_firmware
|
Improper Authentication vulnerability in Microchip TimeProvider 4100 (login modules) allows Session Hijacking.This issue affects TimeProvider 4100: from 1.0 before 2.4.7.
|
CWE-287
Improper Authentication
|
CVE-2024-43685
|
2024-10-18 00:17 |
2024-10-5 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
306729
|
8.8 |
HIGH
Local
|
cisco
|
nx-os
|
A vulnerability in the Python interpreter of Cisco NX-OS Software could allow an authenticated, low-privileged, local attacker to escape the Python sandbox and gain unauthorized access to the underly…
|
NVD-CWE-Other
|
CVE-2024-20284
|
2024-10-18 00:03 |
2024-08-29 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
306730
|
7.2 |
HIGH
Network
|
codezips
|
tourist_management_system
|
A vulnerability was found in Codezips Tourist Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /admin/change-image.php. The manipulat…
|
CWE-434
Unrestricted Upload of File with Dangerous Type
|
CVE-2024-9816
|
2024-10-17 23:53 |
2024-10-11 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
