Page(s) : 1 ... 727 728 729 730 731 732 733 734 735 736 [737] 738 739 740 741 742 743 744 745 746 747 ... | Result(s) : 325831 |
Alerts
DATE | NAME | CATEGORIES | DETAIL | |
---|---|---|---|---|
7.8 | 2025-03-19 | CVE-2024-12136 | cve | Missing Critical Step in Authentication vulnerability in Elfatek Elektronics ANKA JPD-00028 allows Authentication Bypass.This issue affects ANKA JPD-00028: before V.01.01. |
N/A | 2025-03-19 | CVE-2024-12137 | cve | Authentication Bypass by Capture-replay vulnerability in Elfatek Elektronics ANKA JPD-00028 allows Session Hijacking.This issue affects ANKA JPD-00028: before V.01.01. |
9.8 | 2025-03-19 | CVE-2024-13790 | cve | The MinimogWP – The High Converting eCommerce WordPress Theme theme for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 3.7.0 via the '... |
N/A | 2025-03-19 | CVE-2025-27018 | cve | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Apache Airflow MySQL Provider. When user triggered a DAG with du... |
N/A | 2025-03-19 | CVE-2024-10441 | cve | Improper encoding or escaping of output vulnerability in the system plugin daemon in Synology BeeStation OS (BSM) before 1.1-65374 and Synology DiskStation Manager (DSM) before ... |
N/A | 2025-03-19 | CVE-2024-10444 | cve | Improper certificate validation vulnerability in the LDAP utilities in Synology DiskStation Manager (DSM) before 7.1.1-42962-8, 7.2.1-69057-7 and 7.2.2-72806-3 allows man-in-the... |
N/A | 2025-03-19 | CVE-2024-10445 | cve | Improper certificate validation vulnerability in the update functionality in Synology BeeStation OS (BSM) before 1.1-65374 and Synology DiskStation Manager (DSM) before 6.2.4-25... |
N/A | 2025-03-19 | CVE-2024-10442 | cve | Off-by-one error vulnerability in the transmission component in Synology Replication Service before 1.0.12-0066, 1.2.2-0353 and 1.3.0-0423 and Synology Unified Controller (DSMUC... |
N/A | 2025-03-19 | CVE-2024-11131 | cve | A vulnerability regarding out-of-bounds read is found in the video interface. This allows remote attackers to execute arbitrary code via unspecified vectors. The following model... |
N/A | 2025-03-18 | CVE-2025-30137 | cve | An issue was discovered in the G-Net GNET APK 2.6.2. Hardcoded credentials exist in in APK for ports 9091 and 9092. The GNET mobile application contains hardcoded credentials th... |
N/A | 2025-03-18 | CVE-2025-30138 | cve | An issue was discovered on G-Net Dashcam BB GONX devices. Managing Settings and Obtaining Sensitive Data and Sabotaging Car Battery can be performed by unauthorized persons. It ... |
N/A | 2025-03-18 | CVE-2025-30139 | cve | An issue was discovered on G-Net Dashcam BB GONX devices. Default credentials for SSID cannot be changed. It broadcasts a fixed SSID with default credentials that cannot be chan... |
N/A | 2025-03-18 | CVE-2025-30141 | cve | An issue was discovered on G-Net Dashcam BB GONX devices. One can Remotely Dump Video Footage and the Live Video Stream. It exposes API endpoints on ports 9091 and 9092 that all... |
N/A | 2025-03-18 | CVE-2025-30142 | cve | An issue was discovered on G-Net Dashcam BB GONX devices. Bypassing of Device Pairing can occur. It uses MAC address verification as the sole mechanism for recognizing paired de... |
8.8 | 2025-03-18 | CVE-2024-12563 | cve | The s2Member Pro plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 250214 via the 'template' attribute. This makes it po... |
N/A | 2025-03-18 | CVE-2024-57151 | cve | SQL Injection vulnerability in rainrocka xinhu v.2.6.5 and before allows a remote attacker to execute arbitrary code via the inputAction.php file and the saveAjax function |
N/A | 2025-03-18 | CVE-2025-30140 | cve | An issue was discovered on G-Net Dashcam BB GONX devices. A Public Domain name is Used for the Internal Domain Name. It uses an unregistered public domain name as an internal do... |
N/A | 2025-03-18 | CVE-2024-57169 | cve | A file upload bypass vulnerability exists in SOPlanning 1.53.00, specifically in /process/upload.php. This vulnerability allows remote attackers to bypass upload restrictions an... |
N/A | 2025-03-18 | CVE-2024-57170 | cve | SOPlanning 1.53.00 is vulnerable to a directory traversal issue in /process/upload.php. The "fichier_to_delete" parameter allows authenticated attackers to specify file paths co... |
N/A | 2025-03-18 | CVE-2025-25582 | cve | yimioa before v2024.07.04 was discovered to contain a SQL injection vulnerability via the selectNoticeList() method at /xml/OaNoticeMapper.xml. |
Page(s) : 1 ... 727 728 729 730 731 732 733 734 735 736 [737] 738 739 740 741 742 743 744 745 746 747 ... | Result(s) : 325831 |