Click to open the Alert Filter

 
Year Month
Severity
Categories
Search by Alert Name
Page(s) : 1 ... 1335 1336 1337 1338 1339 1340 1341 1342 1343 1344 [1345] 1346 1347 1348 1349 1350 1351 1352 1353 1354 1355 ... Result(s) : 328192

Alerts Feed Alerts

DATE NAME CATEGORIES DETAIL
6.1 2025-01-07 CVE-2024-9208 cve The Enable Accessibility plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg & remove_query_arg without appropriate escaping on ...
N/A 2025-01-06 CVE-2024-54764 cve An access control issue in the component /login/hostinfo2.cgi of ipTIME A2004 v12.17.0 allows attackers to obtain sensitive information without authentication.
N/A 2025-01-06 CVE-2024-54767 cve An access control issue in the component /juis_boxinfo.xml of AVM FRITZ!Box 7530 AX v7.59 allows attackers to obtain sensitive information without authentication. NOTE: this is ...
N/A 2025-01-06 CVE-2024-55553 cve In FRRouting (FRR) before 10.3 from 6.0 onward, all routes are re-validated if the total size of an update received via RTR exceeds the internal socket's buffer size, defau...
N/A 2025-01-06 CVE-2025-21620 cve Deno is a JavaScript, TypeScript, and WebAssembly runtime with secure defaults. When you send a request with the Authorization header to one domain, and the response asks to red...
N/A 2025-01-06 CVE-2024-35498 cve A cross-site scripting (XSS) vulnerability in Grav v1.7.45 allows attackers to execute arbitrary web scripts or HTML via a crafted payload.
N/A 2025-01-06 CVE-2024-46209 cve A stored cross-site scripting (XSS) vulnerability in the component /media/test.html of REDAXO CMS v5.17.1 allows attackers to execute arbitrary web scripts or HTML via injecting...
N/A 2025-01-06 CVE-2024-55407 cve An issue in the DeviceloControl function of ITE Tech. Inc ITE IO Access v1.0.0.0 allows attackers to perform arbitrary port read and write actions via supplying crafted IOCTL re...
N/A 2025-01-06 CVE-2024-55408 cve An improper access control vulnerability in the AsusSAIO.sys driver may lead to the misuse of software functionality utilizing the driver when crafted IOCTL requests are supplied.
N/A 2025-01-06 CVE-2024-55074 cve The edit profile function of Grocy through 4.3.0 allows stored XSS and resultant privilege escalation by uploading a crafted HTML or SVG file, a different issue than CVE-2024-8370.
N/A 2025-01-06 CVE-2025-21617 cve Guzzle OAuth Subscriber signs Guzzle requests using OAuth 1.0. Prior to 0.8.1, Nonce generation does not use sufficient entropy nor a cryptographically secure pseudorandom sourc...
N/A 2025-01-06 CVE-2024-55075 cve Grocy through 4.3.0 allows remote attackers to obtain sensitive information via direct requests to pages that are not shown in the UI, such as calendar and recipes.
N/A 2025-01-06 CVE-2024-55076 cve Grocy through 4.3.0 has no CSRF protection, as demonstrated by changing the Administrator's password.
N/A 2025-01-06 CVE-2021-27285 cve An issue was discovered in Inspur ClusterEngine v4.0 that allows attackers to gain escalated Local privileges and execute arbitrary commands via /opt/tsce4/torque6/bin/getJobsBy...
N/A 2025-01-06 CVE-2024-46981 cve Redis is an open source, in-memory database that persists on disk. An authenticated user may use a specially crafted Lua script to manipulate the garbage collector and potential...
N/A 2025-01-06 CVE-2024-48455 cve An issue in Netis Wifi6 Router NX10 2.0.1.3643 and 2.0.1.3582 and Netis Wifi 11AC Router NC65 3.0.0.3749 and Netis Wifi 11AC Router NC63 3.0.0.3327 and 3.0.0.3503 and Netis Wifi...
N/A 2025-01-06 CVE-2024-48456 cve An issue in Netis Wifi6 Router NX10 2.0.1.3643 and 2.0.1.3582 and Netis Wifi 11AC Router NC65 3.0.0.3749 and Netis Wifi 11AC Router NC63 3.0.0.3327 and 3.0.0.3503 and Netis Wifi...
N/A 2025-01-06 CVE-2024-48457 cve An issue in Netis Wifi6 Router NX10 2.0.1.3643 and 2.0.1.3582 and Netis Wifi 11AC Router NC65 3.0.0.3749 and Netis Wifi 11AC Router NC63 3.0.0.3327 and 3.0.0.3503 and Netis Wifi...
N/A 2025-01-06 CVE-2024-51741 cve Redis is an open source, in-memory database that persists on disk. An authenticated with sufficient privileges may create a malformed ACL selector which, when accessed, triggers...
N/A 2025-01-06 CVE-2024-53931 cve The com.glitter.caller.screen (aka iCaller, Caller Theme & Dialer) application through 1.1 for Android enables any application (with no permissions) to place phone calls without...
Page(s) : 1 ... 1335 1336 1337 1338 1339 1340 1341 1342 1343 1344 [1345] 1346 1347 1348 1349 1350 1351 1352 1353 1354 1355 ... Result(s) : 328192