|
310091
|
9.8 |
CRITICAL
Network
|
codezips
|
sales_management_system
|
A vulnerability was found in Codezips Sales Management System 1.0. It has been classified as critical. Affected is an unknown function of the file /addstock.php. The manipulation of the argument prod…
|
CWE-89
SQL Injection
|
CVE-2024-10368
|
2024-10-31 01:46 |
2024-10-25 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
310092
|
9.8 |
CRITICAL
Network
|
codezips
|
sales_management_system
|
A vulnerability was found in Codezips Sales Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /addcustind.php. The manipulation of…
|
CWE-89
SQL Injection
|
CVE-2024-10370
|
2024-10-31 01:38 |
2024-10-25 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
310093
|
6.1 |
MEDIUM
Network
|
heateor
|
sassy_social_share
|
The Sassy Social Share plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'urls' parameter called via the 'heateor_sss_sharing_count' AJAX action in versions up to, and incl…
|
CWE-79
Cross-site Scripting
|
CVE-2022-4971
|
2024-10-31 01:37 |
2024-10-16 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
310094
|
7.5 |
HIGH
Network
|
apple
|
macos
|
A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in macOS Ventura 13.7.1, macOS Sonoma 14.7.1. An app may be able to read sensitive location inf…
|
NVD-CWE-noinfo
|
CVE-2024-44289
|
2024-10-31 01:35 |
2024-10-29 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
310095
|
- |
|
-
|
-
|
A logic issue was addressed with improved validation. This issue is fixed in macOS Ventura 13.7.1, macOS Sonoma 14.7.1. A sandboxed process may be able to circumvent sandbox restrictions.
|
-
|
CVE-2024-44270
|
2024-10-31 01:35 |
2024-10-29 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
310096
|
- |
|
-
|
-
|
The issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.7.1, macOS Sonoma 14.7.1. A malicious application may be able to modify protected parts of the file system.
|
-
|
CVE-2024-44267
|
2024-10-31 01:35 |
2024-10-29 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
310097
|
- |
|
-
|
-
|
A path handling issue was addressed with improved logic. This issue is fixed in visionOS 2.1, iOS 18.1 and iPadOS 18.1, macOS Ventura 13.7.1, macOS Sonoma 14.7.1, watchOS 11.1, tvOS 18.1. A malicious…
|
-
|
CVE-2024-44255
|
2024-10-31 01:35 |
2024-10-29 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
310098
|
5.5 |
MEDIUM
Local
|
apple
|
macos
|
The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15. An attacker may be able to view restricted content from the lock screen.
|
CWE-754
Improper Check for Unusual or Exceptional Conditions
|
CVE-2024-44174
|
2024-10-31 01:35 |
2024-10-29 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
310099
|
3.3 |
LOW
Local
|
apple
|
macos
|
A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15. A malicious app may be able to change network settings.
|
NVD-CWE-noinfo
|
CVE-2024-40792
|
2024-10-31 01:35 |
2024-10-29 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
310100
|
4.3 |
MEDIUM
Network
|
google
|
chrome
|
Inappropriate implementation in FedCM in Google Chrome prior to 128.0.6613.84 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium)
|
NVD-CWE-noinfo
|
CVE-2024-7976
|
2024-10-31 01:35 |
2024-08-22 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|