|
304271
|
5.3 |
MEDIUM
Network
|
expressjs
|
basic-auth-connect
|
basic-auth-connect is Connect's Basic Auth middleware in its own module. basic-auth-connect < 1.1.0 uses a timing-unsafe equality comparison that can leak timing information. This issue has been fixe…
|
NVD-CWE-Other
|
CVE-2024-47178
|
2024-11-16 03:05 |
2024-10-1 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
304272
|
6.1 |
MEDIUM
Network
|
clinical-genomics
|
scout
|
Scout is a web-based visualizer for VCF-files. Open redirect vulnerability allows performing phishing attacks on users by redirecting them to malicious page. /login API endpoint is vulnerable to open…
|
CWE-601
Open Redirect
|
CVE-2024-47530
|
2024-11-16 03:03 |
2024-10-1 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
304273
|
3.5 |
LOW
Network
|
clinical-genomics
|
scout
|
Scout is a web-based visualizer for VCF-files. Due to the lack of sanitization in the filename, it is possible bypass intended file extension and make users download malicious files with any extensio…
|
CWE-116
Improper Encoding or Escaping of Output
|
CVE-2024-47531
|
2024-11-16 03:02 |
2024-10-1 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
304274
|
6.5 |
MEDIUM
Network
|
zope
|
restrictedpython
|
RestrictedPython is a restricted execution environment for Python to run untrusted code. A user can gain access to protected (and potentially sensible) information indirectly via AttributeError.obj a…
|
NVD-CWE-noinfo
|
CVE-2024-47532
|
2024-11-16 02:59 |
2024-10-1 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
304275
|
4.8 |
MEDIUM
Network
|
zzcms
|
zzcms
|
A vulnerability was found in ZZCMS up to 2023. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /admin/msg.php. The manipulation of the argument keyw…
|
CWE-79
Cross-site Scripting
|
CVE-2024-11130
|
2024-11-16 02:57 |
2024-11-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
304276
|
7.8 |
HIGH
Local
|
dell
|
smartfabric_os10
|
Dell SmartFabric OS10 Software, version(s) 10.5.6.x, 10.5.5.x, 10.5.4.x, 10.5.3.x, contain(s) an Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability. A l…
|
CWE-77
Command Injection
|
CVE-2024-49557
|
2024-11-16 02:36 |
2024-11-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
304277
|
3.3 |
LOW
Local
|
dell
|
smartfabric_os10
|
Dell SmartFabric OS10 Software, version(s) 10.5.6.x, 10.5.5.x, 10.5.4.x, 10.5.3.x, contain(s) a Files or Directories Accessible to External Parties vulnerability. A low privileged attacker with local…
|
CWE-552
Files or Directories Accessible to External Parties
|
CVE-2024-48838
|
2024-11-16 02:36 |
2024-11-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
304278
|
7.8 |
HIGH
Local
|
dell
|
smartfabric_os10
|
Dell SmartFabric OS10 Software, version(s) 10.5.6.x, 10.5.5.x, 10.5.4.x, 10.5.3.x, contain(s) a command injection vulnerability. A low privileged attacker with local access could potentially exploit …
|
CWE-77
Command Injection
|
CVE-2024-49560
|
2024-11-16 02:35 |
2024-11-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
304279
|
7.8 |
HIGH
Local
|
dell
|
smartfabric_os10
|
Dell SmartFabric OS10 Software, version(s) 10.5.6.x, 10.5.5.x, 10.5.4.x, 10.5.3.x, contain(s) an Improper Privilege Management vulnerability. A low privileged attacker with local access could potenti…
|
NVD-CWE-noinfo
|
CVE-2024-49558
|
2024-11-16 02:35 |
2024-11-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
304280
|
8.8 |
HIGH
Network
|
anisha
|
job_recruitment
|
A vulnerability was found in code-projects Job Recruitment up to 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file admin.php. The manipulat…
|
CWE-89
SQL Injection
|
CVE-2024-11127
|
2024-11-16 02:29 |
2024-11-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|