|
307311
|
8.1 |
HIGH
Network
|
-
|
-
|
A low privileged remote attacker can specify an arbitrary file on the filesystem which may lead to an arbitrary file writes with root privileges.
|
CWE-35
Path Traversal: '.../...//'
|
CVE-2024-41973
|
2024-11-19 02:11 |
2024-11-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
307312
|
6.5 |
MEDIUM
Network
|
-
|
-
|
A low privileged remote attacker can overwrite an arbitrary file on the filesystem which may lead to an arbitrary file read with root privileges.
|
CWE-35
Path Traversal: '.../...//'
|
CVE-2024-41972
|
2024-11-19 02:11 |
2024-11-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
307313
|
8.1 |
HIGH
Network
|
-
|
-
|
A low privileged remote attacker can overwrite an arbitrary file on the filesystem leading to a DoS and data loss.
|
CWE-22
Path Traversal
|
CVE-2024-41971
|
2024-11-19 02:11 |
2024-11-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
307314
|
5.7 |
MEDIUM
Network
|
-
|
-
|
A low privileged remote attacker may gain access to forbidden diagnostic data due to incorrect permission assignment for critical resources.
|
CWE-732
Incorrect Permission Assignment for Critical Resource
|
CVE-2024-41970
|
2024-11-19 02:11 |
2024-11-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
307315
|
8.4 |
HIGH
Local
|
-
|
-
|
A vulnerability in the CLI of Cisco SD-WAN Software could allow an authenticated, local attacker to create or overwrite arbitrary files on an affected device, which could result in a denial of s…
|
CWE-22
Path Traversal
|
CVE-2020-26071
|
2024-11-19 02:11 |
2024-11-19 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
307316
|
- |
|
-
|
-
|
OpenCTI is an open source platform allowing organizations to manage their cyber threat intelligence knowledge and observables. Prior to version 6.1.9, the regex validation used to prevent Introspecti…
|
CWE-284
Improper Access Control
|
CVE-2024-37155
|
2024-11-19 02:11 |
2024-11-19 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
307317
|
- |
|
-
|
-
|
A flaw was found within the handling of SMB2_READ commands in the kernel ksmbd module. The issue results from not releasing memory after its effective lifetime. An attacker can leverage this to creat…
|
-
|
CVE-2023-39180
|
2024-11-19 02:11 |
2024-11-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
307318
|
- |
|
-
|
-
|
A flaw was found within the handling of SMB2 read requests in the kernel ksmbd module. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the …
|
-
|
CVE-2023-39179
|
2024-11-19 02:11 |
2024-11-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
307319
|
- |
|
-
|
-
|
A flaw was found within the parsing of SMB2 requests that have a transform header in the kernel ksmbd module. The issue results from the lack of proper validation of user-supplied data, which can res…
|
-
|
CVE-2023-39176
|
2024-11-19 02:11 |
2024-11-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
307320
|
8.8 |
HIGH
Network
|
-
|
-
|
A low privileged remote attacker may modify the configuration of the CODESYS V3 service through a missing authentication vulnerability which could lead to full system access and/or DoS.
|
CWE-306
Missing Authentication for Critical Function
|
CVE-2024-41969
|
2024-11-19 02:11 |
2024-11-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|