Lucene search
+L

18224 matches found

NVD
NVD
•added 2024/10/20 9:15 a.m.•28 views

CVE-2024-49327

Unrestricted Upload of File with Dangerous Type vulnerability in bepitulaz Woostagram Connect woostagram-connect allows Upload a Web Shell to a Web Server.This issue affects Woostagram Connect: from n/a through = 1.0.2...

10CVSS0.00511EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2024/10/20 9:15 a.m.•27 views

CVE-2024-49327

Unrestricted Upload of File with Dangerous Type vulnerability in Asep Bagja Priandana Woostagram Connect allows Upload a Web Shell to a Web Server.This issue affects Woostagram Connect: from n/a through 1.0.2...

9.8CVSS5.8AI score0.00511EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/10/20 8:48 a.m.•16 views

CVE-2024-49327 WordPress Woostagram Connect plugin <= 1.0.2 - Arbitrary File Upload vulnerability

Unrestricted Upload of File with Dangerous Type vulnerability in Asep Bagja Priandana Woostagram Connect allows Upload a Web Shell to a Web Server.This issue affects Woostagram Connect: from n/a through 1.0.2...

10CVSS5.8AI score0.00511EPSS
SaveExploits0References1
CVE
CVE
•added 2024/10/20 8:48 a.m.•67 views

CVE-2024-49327

CVE-2024-49327 affects the WordPress plugin Woostagram Connect (versions

10CVSS5.8AI score0.00511EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2024/10/20 8:48 a.m.•50 views

CVE-2024-49327 WordPress Woostagram Connect plugin <= 1.0.2 - Arbitrary File Upload vulnerability

Unrestricted Upload of File with Dangerous Type vulnerability in bepitulaz Woostagram Connect woostagram-connect allows Upload a Web Shell to a Web Server.This issue affects Woostagram Connect: from n/a through = 1.0.2...

10CVSS0.00511EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2024/10/20 12:00 a.m.•27 views

WordPress plugin Woostagram Connect code issue vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A code issue...

10CVSS5.8AI score0.00511EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/10/20 12:00 a.m.•9 views

CVE-2024-49327: Unrestricted Upload of File with Dangerous Type

Unrestricted Upload of File with Dangerous Type vulnerability in bepitulaz Woostagram Connect woostagram-connect allows Upload a Web Shell to a Web Server.This issue affects Woostagram Connect: from n/a through = 1.0.2...

10CVSS5.9AI score0.00511EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2024/10/18 11:15 p.m.•10 views

CVE-2024-37404

Improper Input Validation in the admin portal of Ivanti Connect Secure before 22.7R2.1 and 9.1R18.9, or Ivanti Policy Secure before 22.7R1.1 allows a remote authenticated attacker to achieve remote code execution...

8.8CVSS8.7AI score0.70955EPSS
SaveExploits1References1
NVD
NVD
•added 2024/10/18 11:15 p.m.•50 views

CVE-2024-37404

Improper Input Validation in the admin portal of Ivanti Connect Secure before 22.7R2.1 and 9.1R18.9, or Ivanti Policy Secure before 22.7R1.1 allows a remote authenticated attacker to achieve remote code execution...

9.1CVSS0.70955EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2024/10/18 11:06 p.m.•56 views

CVE-2024-37404

Improper Input Validation in the admin portal of Ivanti Connect Secure before 22.7R2.1 and 9.1R18.9, or Ivanti Policy Secure before 22.7R1.1 allows a remote authenticated attacker to achieve remote code execution...

9.1CVSS0.70955EPSS
SaveExploits1References1
Vulnrichment
Vulnrichment
•added 2024/10/18 11:06 p.m.•24 views

CVE-2024-37404

Improper Input Validation in the admin portal of Ivanti Connect Secure before 22.7R2.1 and 9.1R18.9, or Ivanti Policy Secure before 22.7R1.1 allows a remote authenticated attacker to achieve remote code execution...

9.1CVSS8.7AI score0.70955EPSS
SaveExploits1References1
CVE
CVE
•added 2024/10/18 11:06 p.m.•181 views

CVE-2024-37404

CVE-2024-37404 affects Ivanti Connect Secure and Ivanti Policy Secure due to improper input validation in the admin portal, enabling remote code execution by an authenticated attacker. Affected: Ivanti Connect Secure 22.7R2.1/22.7R2.2 and 9.1R18.9; Ivanti Policy Secure 22.7R1.1 (and earlier). Roo...

9.1CVSS8.7AI score0.70955EPSS
SaveExploits1References1Affected Software2
NVD
NVD
•added 2024/10/18 5:15 p.m.•40 views

CVE-2024-48016

Dell Secure Connect Gateway SCG 5.0 Appliance - SRS, versions 5.24, contains a Use of a Broken or Risky Cryptographic Algorithm vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to information disclosure. The attacker may be able to...

8.8CVSS0.00166EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/10/18 4:34 p.m.•59 views

CVE-2024-48016

Dell Secure Connect Gateway SCG 5.0 Appliance - SRS, versions 5.24, contains a Use of a Broken or Risky Cryptographic Algorithm vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to information disclosure. The attacker may be able to...

4.6CVSS0.00166EPSS
SaveExploits0References1
CVE
CVE
•added 2024/10/18 4:34 p.m.•77 views

CVE-2024-48016

CVE-2024-48016 affects Dell Secure Connect Gateway (SCG) 5.0 Appliance – SRS, 5.24. Root cause: use of a broken/risky cryptographic algorithm. Impact: potential information disclosure via remote access by a low-privileged attacker; attacker could use exposed credentials to access the system with ...

8.8CVSS6AI score0.00166EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
•added 2024/10/18 4:34 p.m.•19 views

CVE-2024-48016

Dell Secure Connect Gateway SCG 5.0 Appliance - SRS, versions 5.24, contains a Use of a Broken or Risky Cryptographic Algorithm vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to information disclosure. The attacker may be able to...

4.6CVSS6AI score0.00166EPSS
SaveExploits0References1
CVE
CVE
•added 2024/10/18 4:28 p.m.•69 views

CVE-2024-47241

Dell Secure Connect Gateway (SCG) 5.0 Appliance — SRS 5.24 contains an Improper Certificate Validation vulnerability. A low-privileged, remote attacker could exploit a certificate validation error to gain unauthorized access and modify transmitted data. Affected: SCG 5.24 (SRS). Root cause: certi...

8.1CVSS6AI score0.00169EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2024/10/18 4:28 p.m.•40 views

CVE-2024-47241

Dell Secure Connect Gateway SCG 5.0 Appliance - SRS, versions 5.24, contains an Improper Certificate Validation vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to unauthorized access and modification of transmitted data...

5.5CVSS0.00169EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/10/18 4:28 p.m.•22 views

CVE-2024-47241

Dell Secure Connect Gateway SCG 5.0 Appliance - SRS, versions 5.24, contains an Improper Certificate Validation vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to unauthorized access and modification of transmitted data...

5.5CVSS6AI score0.00169EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2024/10/18 12:15 p.m.•20 views

CVE-2024-47240

Dell Secure Connect Gateway SCG 5.24 contains an Incorrect Default Permissions vulnerability. A local attacker with low privileges can access the file system and could potentially exploit this vulnerability to gain write access to unauthorized data and cause a version update failure condition...

6.3CVSS6AI score0.00203EPSS
SaveExploits0References1
Rows per page
Query Builder