| Page(s) : 1 ... 9 10 11 12 13 14 15 16 17 18 [19] 20 21 22 23 24 25 26 27 28 29 ... | Result(s) : 9838 |
Alerts
| DATE | NAME | CATEGORIES | DETAIL | |
|---|---|---|---|---|
| 2.7 | 2024-09-26 | CVE-2024-4278 | cve | An information disclosure issue has been discovered in GitLab EE affecting all versions starting from 16.5 prior to 17.2.8, from 17.3 prior to 17.3.4, and from 17.4 prior to 17.... |
| 3.3 | 2024-09-26 | CVE-2023-52947 | cve | Missing authentication for critical function vulnerability in logout functionality in Synology Active Backup for Business Agent before 2.6.3-3101 allows local users to logout th... |
| 2.7 | 2024-09-25 | CVE-2024-8350 | cve | The Uncanny Groups for LearnDash plugin for WordPress is vulnerable to user group add due to a missing capability check on the /wp-json/ulgm_management/v1/add_user/ REST API end... |
| 2.7 | 2024-09-23 | CVE-2024-8263 | cve | An improper privilege management vulnerability allowed arbitrary workflows to be committed using an improperly scoped PAT through the use of nested tags. This vulnerability affe... |
| 3.3 | 2024-09-18 | CVE-2024-46792 | cve | In the Linux kernel, the following vulnerability has been resolved: riscv: misaligned: Restrict user access to kernel memory raw_copy_{to,from}_user() do not call access_ok(),... |
| 3.3 | 2024-09-18 | CVE-2024-46794 | cve | In the Linux kernel, the following vulnerability has been resolved: x86/tdx: Fix data leak in mmio_read() The mmio_read() function makes a TDVMCALL to retrieve MMIO data for a... |
| 3.3 | 2024-09-17 | CVE-2024-40791 | cve | A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in macOS Ventura 13.7, iOS 17.7 and iPadOS 17.7, iOS 18 and iPadOS 18, ma... |
| 2.4 | 2024-09-17 | CVE-2024-44180 | cve | The issue was addressed with improved checks. This issue is fixed in iOS 18 and iPadOS 18. An attacker with physical access may be able to access contacts from the lock screen. |
| 3.3 | 2024-09-17 | CVE-2024-40838 | cve | A privacy issue was addressed by moving sensitive data to a protected location. This issue is fixed in macOS Sequoia 15. A malicious app may be able to access notifications from... |
| 3.3 | 2024-09-17 | CVE-2024-40830 | cve | This issue was addressed with improved data protection. This issue is fixed in iOS 18 and iPadOS 18. An app may be able to enumerate a user's installed apps. |
| 2.4 | 2024-09-17 | CVE-2024-44139 | cve | The issue was addressed with improved checks. This issue is fixed in iOS 18 and iPadOS 18. An attacker with physical access may be able to access contacts from the lock screen. |
| 3.5 | 2024-09-12 | CVE-2024-6446 | cve | An issue has been discovered in GitLab affecting all versions starting from 17.1 to 17.1.7, 17.2 prior to 17.2.5 and 17.3 prior to 17.3.2. A crafted URL could be used to trick a... |
| 3.1 | 2024-09-12 | CVE-2024-36066 | cve | The CMP CLI client in KeyFactor EJBCA before 8.3.1 has only 6 octets of salt, and is thus not compliant with the security requirements of RFC 4211, and might make man-in-the-mid... |
| 2.7 | 2024-09-10 | CVE-2024-44114 | cve | SAP NetWeaver Application Server for ABAP and ABAP Platform allow users with high privileges to execute a program that reveals data over the network. This results in a minimal i... |
| 2.7 | 2024-09-10 | CVE-2024-41728 | cve | Due to missing authorization check, SAP NetWeaver Application Server for ABAP and ABAP Platform allows an attacker logged in as a developer to read objects contained in a packag... |
| 3.7 | 2024-09-10 | CVE-2024-36511 | cve | An improperly implemented security check for standard vulnerability [CWE-358] in FortiADC Web Application Firewall (WAF) 7.4.0 through 7.4.4, 7.2 all versions, 7.1 all versions,... |
| 2.7 | 2024-09-10 | CVE-2024-45323 | cve | An improper access control vulnerability [CWE-284] in FortiEDR Manager API 6.2.0 through 6.2.2, 6.0 all versions may allow in a shared environment context an authenticated admin... |
| 3.1 | 2024-09-09 | CVE-2024-8042 | cve | Rapid7 Insight Platform versions between November 2019 and August 14, 2024 suffer from missing authorization issues whereby an attacker can intercept local requests to set the n... |
| 2.4 | 2024-09-06 | CVE-2024-32771 | cve | An improper restriction of excessive authentication attempts vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability co... |
| 3.3 | 2024-09-04 | CVE-2024-34640 | cve | Improper access control vulnerability in BGProtectManager prior to SMR Sep-2024 Release 1 allows local attackers to bypass restriction of process expiration. |
| Page(s) : 1 ... 9 10 11 12 13 14 15 16 17 18 [19] 20 21 22 23 24 25 26 27 28 29 ... | Result(s) : 9838 |
