| Page(s) : 1 ... 1019 1020 1021 1022 1023 1024 1025 1026 1027 1028 [1029] 1030 1031 1032 1033 1034 1035 1036 1037 1038 1039 ... | Result(s) : 300771 |
Alerts
| DATE | NAME | CATEGORIES | DETAIL | |
|---|---|---|---|---|
| 4.3 | 2025-02-06 | CVE-2024-49795 | cve | IBM ApplinX 11.1 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website... |
| N/A | 2025-02-06 | CVE-2024-49796 | cve | IBM ApplinX 11.1 could allow a remote attacker to hijack the clicking action of the victim. By persuading a victim to visit a malicious Web site, a remote attacker could exploit... |
| N/A | 2025-02-06 | CVE-2024-49797 | cve | IBM ApplinX 11.1 could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict Transport Security. An attacker could exploi... |
| N/A | 2025-02-06 | CVE-2024-49798 | cve | IBM ApplinX 11.1 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used... |
| 6.5 | 2025-02-06 | CVE-2024-49800 | cve | IBM ApplinX 11.1 stores sensitive information in cleartext in memory that could be obtained by an authenticated user. |
| N/A | 2025-02-06 | CVE-2025-1066 | cve | OpenPLC_V3 contains an arbitrary file upload vulnerability, which could be leveraged for malvertising or phishing campaigns. |
| 6.5 | 2025-02-05 | CVE-2024-38316 | cve | IBM Aspera Shares 1.9.0 through 1.10.0 PL6 does not properly rate limit the frequency that an authenticated user can send emails, which could result in email flooding or a denia... |
| 4.8 | 2025-02-05 | CVE-2024-38317 | cve | IBM Aspera Shares 1.9.0 through 1.10.0 PL6 is vulnerable to cross-site scripting. This vulnerability allows a privileged user to embed arbitrary JavaScript code in the Web UI t... |
| 6.1 | 2025-02-05 | CVE-2024-38318 | cve | IBM Aspera Shares 1.9.0 through 1.10.0 PL6 is vulnerable to HTML injection. A remote attacker could inject malicious HTML code, which when viewed, would be executed in the victi... |
| 5.4 | 2025-02-05 | CVE-2024-56470 | cve | IBM Aspera Shares 1.9.0 through 1.10.0 PL6 is vulnerable to server-side request forgery (SSRF). This may allow an authenticated attacker to send unauthorized requests from the ... |
| 5.4 | 2025-02-05 | CVE-2024-56471 | cve | IBM Aspera Shares 1.9.0 through 1.10.0 PL6 is vulnerable to server-side request forgery (SSRF). This may allow an authenticated attacker to send unauthorized requests from the ... |
| 5.4 | 2025-02-05 | CVE-2024-56472 | cve | IBM Aspera Shares 1.9.0 through 1.10.0 PL6 is vulnerable to stored cross-site scripting. This vulnerability allows authenticated users to embed arbitrary JavaScript code in the... |
| 5.3 | 2025-02-05 | CVE-2024-56473 | cve | IBM Aspera Shares 1.9.0 through 1.10.0 PL6 could allow an attacker to spoof their IP address, which is written to log files, due to improper verification of 'Client-IP... |
| N/A | 2025-02-05 | CVE-2025-24372 | cve | CKAN is an open-source DMS (data management system) for powering data hubs and data portals. Using a specially crafted file, a user could potentially upload a file containing co... |
| 5.4 | 2025-02-05 | CVE-2025-24803 | cve | Mobile Security Framework (MobSF) is an automated, all-in-one mobile application (Android/iOS/Windows) pen-testing, malware analysis and security assessment framework. According... |
| 4.3 | 2025-02-05 | CVE-2025-24804 | cve | Mobile Security Framework (MobSF) is an automated, all-in-one mobile application (Android/iOS/Windows) pen-testing, malware analysis and security assessment framework. According... |
| 5.5 | 2025-02-05 | CVE-2025-24805 | cve | Mobile Security Framework (MobSF) is an automated, all-in-one mobile application (Android/iOS/Windows) pen-testing, malware analysis and security assessment framework. A local u... |
| N/A | 2025-02-05 | CVE-2020-36084 | cve | SQL Injection vulnerability in SourceCodester Responsive E-Learning System 1.0 allows remote attackers to inject sql query in /elearning/delete_teacher_students.php?id= paramete... |
| N/A | 2025-02-05 | CVE-2024-48394 | cve | A Time-of-Check to Time-of-Use (TOCTOU) vulnerability has been identified in the driver of the NDD Print solution, which could allow an unprivileged user to exploit this flaw an... |
| N/A | 2025-02-05 | CVE-2024-54853 | cve | A Stored Cross-Site Scripting (XSS) vulnerability was identified affecting Skybox Change Manager versions 13.2.170 and earlier that allows remote authenticated users to store ma... |
| Page(s) : 1 ... 1019 1020 1021 1022 1023 1024 1025 1026 1027 1028 [1029] 1030 1031 1032 1033 1034 1035 1036 1037 1038 1039 ... | Result(s) : 300771 |
