|
306561
|
8.8 |
HIGH
Network
|
microsoft
|
sql_server_2016
sql_server_2017
sql_server_2019
|
SQL Server Native Client Remote Code Execution Vulnerability
|
NVD-CWE-noinfo
|
CVE-2024-48993
|
2024-11-20 04:06 |
2024-11-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
306562
|
5.4 |
MEDIUM
Network
|
k5n
|
webcalendar
|
A stored cross-site scripting (XSS) vulnerability exists in craigk5n/webcalendar version 1.3.0. The vulnerability occurs in the 'Report Name' input field while creating a new report. An attacker can …
|
CWE-79
Cross-site Scripting
|
CVE-2024-1097
|
2024-11-20 04:05 |
2024-11-15 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
306563
|
9.8 |
CRITICAL
Network
|
tp-link
|
vn020-f3v\(t\)_firmware
|
A vulnerability, which was classified as critical, has been found in TP-Link VN020 F3v(T) TT_V6.2.1021. Affected by this issue is some unknown functionality of the component DHCP DISCOVER Packet Pars…
|
CWE-787
Out-of-bounds Write
|
CVE-2024-11237
|
2024-11-20 04:04 |
2024-11-15 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
306564
|
6.1 |
MEDIUM
Network
|
pyload
|
pyload
|
An open redirection vulnerability exists in pyload/pyload version 0.5.0. The vulnerability is due to improper handling of the 'next' parameter in the login functionality. An attacker can exploit this…
|
CWE-601
Open Redirect
|
CVE-2024-1240
|
2024-11-20 04:04 |
2024-11-15 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
306565
|
5.3 |
MEDIUM
Network
|
landray
|
landray_ekp
|
A vulnerability, which was classified as critical, was found in Landray EKP up to 16.0. This affects the function delPreviewFile of the file /sys/ui/sys_ui_component/sysUiComponent.do?method=delPrevi…
|
CWE-22
Path Traversal
|
CVE-2024-11238
|
2024-11-20 04:01 |
2024-11-15 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
306566
|
7.2 |
HIGH
Network
|
eyoucms
|
eyoucms
|
A vulnerability classified as critical has been found in EyouCMS up to 1.6.7. Affected is an unknown function of the component Website Logo Handler. The manipulation leads to unrestricted upload. It …
|
CWE-434
Unrestricted Upload of File with Dangerous Type
|
CVE-2024-11211
|
2024-11-20 04:01 |
2024-11-15 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
306567
|
4.3 |
MEDIUM
Network
|
landray
|
landray_ekp
|
A vulnerability has been found in Landray EKP up to 16.0 and classified as critical. This vulnerability affects the function deleteFile of the file /sys/common/import.do?method=deleteFile of the comp…
|
CWE-22
Path Traversal
|
CVE-2024-11239
|
2024-11-20 04:00 |
2024-11-15 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
306568
|
5.4 |
MEDIUM
Network
|
eyoucms
|
eyoucms
|
A vulnerability was found in EyouCMS 1.51. It has been rated as critical. This issue affects the function editFile of the file application/admin/logic/FilemanagerLogic.php. The manipulation of the ar…
|
CWE-22
Path Traversal
|
CVE-2024-11210
|
2024-11-20 03:42 |
2024-11-15 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
306569
|
6.5 |
MEDIUM
Network
|
craftcms
|
craft_cms
|
Craft is a content management system (CMS). The dataUrl function can be exploited if an attacker has write permissions on system notification templates. This function accepts an absolute file path, r…
|
CWE-22
CWE-552
Path Traversal
Files or Directories Accessible to External Parties
|
CVE-2024-52292
|
2024-11-20 03:27 |
2024-11-14 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
306570
|
- |
|
-
|
-
|
In the Linux kernel, the following vulnerability has been resolved:
drm/xe: Fix possible exec queue leak in exec IOCTL
In a couple of places after an exec queue is looked up the exec IOCTL
returns …
|
-
|
CVE-2024-53087
|
2024-11-20 03:15 |
2024-11-20 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
