Rezultati pretraživanja za 'Od datuma: 20.07.2024.'
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2024-7987 | - | A remote code execution vulnerability exists in the Rockwell Automation ThinManager® ThinServer™ that allows a threat actor to execute arbitrary code with System privileges. To exploit this vulnerability and a threat actor must abuse the ThinServer™ | 2024-08-26 18:35:13 | 2024-08-26 15:15:09 |
| CVE-2024-5932 | 9.8 | The GiveWP – Donation Plugin and Fundraising Platform plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 3.14.1 via deserialization of untrusted input from the 'give_title' parameter. This makes it possib | 2024-08-26 18:34:13 | 2024-08-20 02:15:04 |
| CVE-2024-41773 | 6.5 | IBM Global Configuration Management 7.0.2 and 7.0.3 could allow an authenticated user to archive a global baseline due to improper access controls. | 2024-08-26 18:33:07 | 2024-08-20 20:15:08 |
| CVE-2024-43409 | 6.5 | Ghost is a Node.js content management system. Improper authentication on some endpoints used for member actions would allow an attacker to perform member-only actions, and read member information. This security vulnerability is present in Ghost v4.46 | 2024-08-26 18:31:26 | 2024-08-20 15:15:24 |
| CVE-2024-43406 | 8.8 | LF Edge eKuiper is a lightweight IoT data analytics and stream processing engine running on resource-constraint edge devices. A user could utilize and exploit SQL Injection to allow the execution of malicious SQL query via Get method in sqlKvStore. T | 2024-08-26 18:30:13 | 2024-08-20 15:15:24 |
| CVE-2024-43404 | 9.8 | MEGABOT is a fully customized Discord bot for learning and fun. The `/math` command and functionality of MEGABOT versions < 1.5.0 contains a remote code execution vulnerability due to a Python `eval()`. The vulnerability allows an attacker to inject | 2024-08-26 18:29:15 | 2024-08-20 15:15:23 |
| CVE-2024-43397 | 4.3 | Apollo is a configuration management system. A vulnerability exists in the synchronization configuration feature that allows users to craft specific requests to bypass permission checks. This exploit enables them to modify a namespace without the nec | 2024-08-26 18:28:42 | 2024-08-20 15:15:23 |
| CVE-2024-43377 | 4.3 | Umbraco CMS is an ASP.NET CMS. An authenticated user can access a few unintended endpoints. This issue is fixed in 14.1.2. | 2024-08-26 18:26:40 | 2024-08-20 15:15:23 |
| CVE-2024-43376 | 5.3 | Umbraco is an ASP.NET CMS. Some endpoints in the Management API can return stack trace information, even when Umbraco is not in debug mode. This vulnerability is fixed in 14.1.2. | 2024-08-26 18:24:06 | 2024-08-20 15:15:23 |
| CVE-2024-7782 | 6.5 | The Contact Form by Bit Form: Multi Step Form, Calculation Contact Form, Payment Contact Form & Custom Contact Form builder plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the iconRemove funct | 2024-08-26 18:21:12 | 2024-08-20 04:15:11 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/13951
Zapisa po stranici: