Svi - CERT CVE

Rezultati pretraživanja za 'Od datuma: 15.12.2024.'

ID CVSS Sažetak Zadnje ažurirano Objavljeno
CVE-2024-55949 - MinIO is a high-performance, S3 compatible object store, open sourced under GNU AGPLv3 license. Minio is subject to a privilege escalation in IAM import API, all users are impacted since MinIO commit `580d9db85e04f1b63cc2909af50f0ed08afa965f`. This i 2024-12-16 20:15:13
CVE-2024-12663 2.6 A vulnerability classified as problematic was found in funnyzpc Mee-Admin up to 1.6. This vulnerability affects unknown code of the file /mee/login of the component Login. The manipulation of the argument username leads to observable response discrep 2024-12-16 20:15:08
CVE-2024-6002 - Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. 2024-12-16 18:15:12
CVE-2024-6001 8.1 An improper certificate validation vulnerability was reported in LADM that could allow a network attacker with the ability to redirect an update request to a remote server and execute code with elevated privileges. 2024-12-16 17:15:14
CVE-2024-55969 9.1 DocIO in Syncfusion Essential Studio for ASP.NET MVC before 27.1.55 throws XMLException during the resaving of a DOCX document with an external reference XML, aka I640714. 2024-12-16 17:15:12
CVE-2024-55970 7.5 File Manager in Syncfusion Essential Studio for ASP.NET MVC before 27.1.55 has a traversal issue that is related to the request parameter, aka I644734. 2024-12-16 17:15:12
CVE-2024-4762 7.8 An improper validation vulnerability was reported in the firmware update mechanism of LADM and LDCC that could allow a local attacker to escalate privileges. 2024-12-16 17:15:10
CVE-2024-12668 8.2 Velocidex WinPmem versions below 4.1 suffer from an Out of Bounds Write vulnerability. By using an IO Control, a user space program can trick the driver into writing a 0 into any chosen memory location. In conjunction with information leakage from th 2024-12-16 17:15:09
CVE-2024-11144 7.5 The server lacks thread safety and can be crashed by anomalous data sent by an anonymous user from a remote network. The crash causes the FTP service to become unavailable, affecting all users and processes that rely on it for file transfers. If the 2024-12-16 17:15:07
CVE-2024-56003 4.3 Missing Authorization vulnerability in David Cramer Caldera SMTP Mailer.This issue affects Caldera SMTP Mailer: from n/a through 1.0.1. 2024-12-16 16:15:09
ID CVSS Sažetak Zadnje ažurirano Objavljeno
Stranica
/12893
Zapisa po stranici: