|
307631
|
5.8 |
MEDIUM
Network
|
cisco
|
firepower_threat_defense
|
A vulnerability in the geolocation access control feature of Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to bypass an access control policy.
This …
|
NVD-CWE-noinfo
|
CVE-2024-20431
|
2024-11-5 23:47 |
2024-10-24 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
307632
|
8.8 |
HIGH
Network
|
tenda
|
ac15_firmware
|
A vulnerability was found in Tenda AC15 15.03.05.19 and classified as critical. This issue affects the function formSetDeviceName of the file /goform/SetOnlineDevName. The manipulation of the argumen…
|
CWE-787
Out-of-bounds Write
|
CVE-2024-10662
|
2024-11-5 23:30 |
2024-11-2 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
307633
|
8.8 |
HIGH
Network
|
tenda
|
ac15_firmware
|
A vulnerability has been found in Tenda AC15 15.03.05.19 and classified as critical. This vulnerability affects the function SetDlnaCfg of the file /goform/SetDlnaCfg. The manipulation of the argumen…
|
CWE-787
Out-of-bounds Write
|
CVE-2024-10661
|
2024-11-5 23:30 |
2024-11-2 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
307634
|
- |
|
-
|
-
|
ZoneMinder is a free, open source closed-circuit television software application. ZoneMinder v1.37.* <= 1.37.64 is vulnerable to boolean-based SQL Injection in function of web/ajax/event.php. This is…
|
CWE-89
SQL Injection
|
CVE-2024-51482
|
2024-11-5 23:15 |
2024-11-1 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
307635
|
8.8 |
HIGH
Network
|
esafenet
|
cdg
|
A vulnerability was found in ESAFENET CDG V5. It has been rated as critical. Affected by this issue is the function delCatelogs of the file /CDGServer3/document/Catelogs;logindojojs?command=DelCatelo…
|
CWE-89
SQL Injection
|
CVE-2024-9560
|
2024-11-5 22:05 |
2024-10-7 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
307636
|
5.5 |
MEDIUM
Local
|
huawei
|
harmonyos
emui
|
Page table protection configuration vulnerability in the trusted firmware module
Impact: Successful exploitation of this vulnerability may affect service confidentiality.
|
NVD-CWE-noinfo
|
CVE-2024-45448
|
2024-11-5 19:19 |
2024-09-4 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
307637
|
4.7 |
MEDIUM
Local
|
linux
|
linux_kernel
|
In the Linux kernel, the following vulnerability has been resolved:
vfs: Don't evict inode under the inode lru traversing context
The inode reclaiming process(See function prune_icache_sb) collects…
|
CWE-667
Improper Locking
|
CVE-2024-45003
|
2024-11-5 19:19 |
2024-09-5 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
307638
|
- |
|
-
|
-
|
In vdec, there is a possible out of bounds read due to improper structure design. This could lead to local information disclosure with System execution privileges needed. User interaction is not need…
|
-
|
CVE-2024-20122
|
2024-11-5 17:35 |
2024-11-4 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
307639
|
6.1 |
MEDIUM
Network
|
redhat
|
single_sign-on
openshift_container_platform
openshift_container_platform_for_power
openshift_container_platform_for_linuxone
openshift_container_platform_for_ibm_z
build_of_keycloak
|
A misconfiguration flaw was found in Keycloak. This issue can allow an attacker to redirect users to an arbitrary URL if a 'Valid Redirect URI' is set to http://localhost or http://127.0.0.1, enablin…
|
CWE-601
Open Redirect
|
CVE-2024-8883
|
2024-11-5 13:15 |
2024-09-20 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
307640
|
7.7 |
HIGH
Network
|
-
|
-
|
A flaw exists in the SAML signature validation method within the Keycloak XMLSignatureUtil class. The method incorrectly determines whether a SAML signature is for the full document or only for speci…
|
CWE-347
Improper Verification of Cryptographic Signature
|
CVE-2024-8698
|
2024-11-5 13:15 |
2024-09-20 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
