|
304501
|
4.9 |
MEDIUM
Network
|
ivanti
|
connect_secure policy_secure
|
A stack-based buffer overflow in Ivanti Connect Secure before version 22.7R2.3 and Ivanti Policy Secure before version 22.7R1.2 allows a remote authenticated attacker with admin privileges to cause a…
|
CWE-787
Out-of-bounds Write
|
CVE-2024-47905
|
2024-11-19 00:08 |
2024-11-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
304502
|
7.5 |
HIGH
Network
|
ivanti
|
avalanche
|
An infinite loop in Ivanti Avalanche before 6.4.6 allows a remote unauthenticated attacker to cause a denial of service.
|
CWE-835
Loop with Unreachable Exit Condition ('Infinite Loop')
|
CVE-2024-50321
|
2024-11-19 00:06 |
2024-11-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
304503
|
7.5 |
HIGH
Network
|
ivanti
|
avalanche
|
An infinite loop in Ivanti Avalanche before 6.4.6 allows a remote unauthenticated attacker to cause a denial of service.
|
CWE-835
Loop with Unreachable Exit Condition ('Infinite Loop')
|
CVE-2024-50320
|
2024-11-19 00:06 |
2024-11-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
304504
|
7.5 |
HIGH
Network
|
ivanti
|
avalanche
|
An infinite loop in Ivanti Avalanche before 6.4.6 allows a remote unauthenticated attacker to cause a denial of service.
|
CWE-835
Loop with Unreachable Exit Condition ('Infinite Loop')
|
CVE-2024-50319
|
2024-11-19 00:06 |
2024-11-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
304505
|
7.5 |
HIGH
Network
|
ivanti
|
avalanche
|
A null pointer dereference in Ivanti Avalanche before 6.4.6 allows a remote unauthenticated attacker to cause a denial of service.
|
CWE-476
NULL Pointer Dereference
|
CVE-2024-50318
|
2024-11-19 00:06 |
2024-11-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
304506
|
7.5 |
HIGH
Network
|
ivanti
|
avalanche
|
A null pointer dereference in Ivanti Avalanche before 6.4.6 allows a remote unauthenticated attacker to cause a denial of service.
|
CWE-476
NULL Pointer Dereference
|
CVE-2024-50317
|
2024-11-19 00:06 |
2024-11-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
304507
|
4.3 |
MEDIUM
Network
|
kognetiks
|
kognetiks_chatbot
|
The Kognetiks Chatbot for WordPress plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.1.8. This is due to missing or incorrect nonce validation …
|
CWE-352
Origin Validation Error
|
CVE-2024-11143
|
2024-11-19 00:03 |
2024-11-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
304508
|
6.1 |
MEDIUM
Network
|
kognetiks
|
kognetiks_chatbot
|
The Kognetiks Chatbot for WordPress plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'dir' parameter in all versions up to, and including, 2.1.7 due to insufficient input …
|
CWE-79
Cross-site Scripting
|
CVE-2024-10684
|
2024-11-19 00:03 |
2024-11-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
304509
|
4.3 |
MEDIUM
Network
|
kognetiks
|
kognetiks_chatbot
|
The Kognetiks Chatbot for WordPress plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the update_assistant() function in all versions up to,…
|
CWE-862
Missing Authorization
|
CVE-2024-10531
|
2024-11-19 00:02 |
2024-11-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
304510
|
4.3 |
MEDIUM
Network
|
kognetiks
|
kognetiks_chatbot
|
The Kognetiks Chatbot for WordPress plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the add_new_assistant() function in all versions up to…
|
CWE-862
Missing Authorization
|
CVE-2024-10530
|
2024-11-18 23:59 |
2024-11-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|