Lucene search
+L

18047 matches found

Circl
Circl
•added 2024/11/05 2:01 p.m.•15 views

CVE-2024-10842

creationtimestamp| type| source ---|---|--- 2024-11-05 14:01:53+00:00| seen| https://infosec.exchange/users/cve/statuses/113430712331102235 2024-11-05 16:22:41+00:00| seen| https://t.me/cvedetector/9866...

5.1CVSS3.9AI score0.00413EPSS
SaveExploits1References2
Circl
Circl
•added 2024/11/05 2:01 p.m.•13 views

CVE-2024-10841

creationtimestamp| type| source ---|---|--- 2024-11-05 14:01:52+00:00| seen| https://infosec.exchange/users/cve/statuses/113430712316800351 2024-11-05 16:22:42+00:00| seen| https://t.me/cvedetector/9867...

8CVSS5.4AI score0.00422EPSS
SaveExploits1References2
Circl
Circl
•added 2024/11/05 11:37 a.m.•24 views

CVE-2024-9867

creationtimestamp| type| source ---|---|--- 2024-11-05 11:37:51+00:00| seen| https://infosec.exchange/users/cve/statuses/113430146007234353 2024-11-05 13:51:55+00:00| seen| https://t.me/cvedetector/9862...

5.4CVSS8.7AI score0.00263EPSS
SaveExploits0References2
Circl
Circl
•added 2024/11/05 11:21 a.m.•26 views

CVE-2024-51529

creationtimestamp| type| source ---|---|--- 2024-11-05 11:21:36+00:00| seen| https://infosec.exchange/users/cve/statuses/113430082111786301 2024-11-05 13:51:52+00:00| seen| https://t.me/cvedetector/9859...

5.5CVSS4.8AI score0.00108EPSS
SaveExploits0References2
OSV
OSV
•added 2024/11/05 6:15 a.m.•13 views

CVE-2024-9459

Zohocorp ManageEngine Exchange Reporter Plus versions 5718 and prior are vulnerable to authenticated SQL Injection in reports module...

8.8CVSS5.8AI score0.0445EPSS
SaveExploits0References1
NVD
NVD
•added 2024/11/05 6:15 a.m.•28 views

CVE-2024-9459

Zohocorp ManageEngine Exchange Reporter Plus versions 5718 and prior are vulnerable to authenticated SQL Injection in reports module...

8.8CVSS0.0445EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/11/05 5:44 a.m.•37 views

CVE-2024-9459 SQL Injection

Zohocorp ManageEngine Exchange Reporter Plus versions 5718 and prior are vulnerable to authenticated SQL Injection in reports module...

8.3CVSS0.0445EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/11/05 5:44 a.m.•32 views

CVE-2024-9459 SQL Injection

Zohocorp ManageEngine Exchange Reporter Plus versions 5718 and prior are vulnerable to authenticated SQL Injection in reports module...

8.3CVSS8.2AI score0.0445EPSS
SaveExploits0References1
CVE
CVE
•added 2024/11/05 5:44 a.m.•85 views

CVE-2024-9459

CVE-2024-9459 affects Zoho ManageEngine Exchange Reporter Plus up through version 5718 and earlier. The security issue is described as an authenticated SQL Injection in the reports module. The connected sources specifically list the affected software and version range, with remediation guidance r...

8.8CVSS8.6AI score0.0445EPSS
SaveExploits0References1Affected Software1
RedHat Linux
RedHat Linux
•added 2024/11/05 1:22 a.m.•17 views

kernel: lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc()

A flaw was found in the Linux kernel. A race condition in the genradixptralloc function, responsible for allocating nodes in the generic radix tree, can occur when increasing the tree depth. This race can lead to a preallocated node retaining a pointer to an old root instead of being properly...

7.8CVSS6.3AI score0.00169EPSS
SaveExploits0References5
CNNVD
CNNVD
•added 2024/11/05 12:00 a.m.•25 views

ZOHO ManageEngine Exchange Reporter Plus 安全漏洞

ZOHO ManageEngine Exchange Reporter Plus is a Web-based Exchange Server reporting software from ZOHO, Inc. A security vulnerability exists in ZOHO ManageEngine Exchange Reporter Plus 5718 and prior versions that stems from vulnerability to authenticated SQL injection in the reporting module...

8.8CVSS7.6AI score0.0445EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/11/05 12:00 a.m.•5 views

CVE-2024-9459: Improper Neutralization of Special Elements used in an SQL Command

Zohocorp ManageEngine Exchange Reporter Plus versions 5718 and prior are vulnerable to authenticated SQL Injection in reports module...

8.8CVSS5.8AI score0.0445EPSS
SaveExploits0References1
OSV
OSV
•added 2024/11/04 7:15 p.m.•19 views

CVE-2024-34891

Insufficiently protected credentials in DAV server settings in 1C-Bitrix Bitrix24 23.300.100 allows remote administrators to read Exchange account passwords via HTTP GET request...

6.8CVSS5.8AI score0.00294EPSS
SaveExploits1References2
NVD
NVD
•added 2024/11/04 7:15 p.m.•61 views

CVE-2024-34891

Insufficiently protected credentials in DAV server settings in 1C-Bitrix Bitrix24 23.300.100 allows remote administrators to read Exchange account passwords via HTTP GET request...

6.8CVSS0.00294EPSS
SaveExploits1References1
Vulnrichment
Vulnrichment
•added 2024/11/04 12:00 a.m.•13 views

CVE-2024-34891

Insufficiently protected credentials in DAV server settings in 1C-Bitrix Bitrix24 23.300.100 allows remote administrators to read Exchange account passwords via HTTP GET request...

6.9AI score0.00294EPSS
SaveExploits1References2
Cvelist
Cvelist
•added 2024/11/04 12:00 a.m.•41 views

CVE-2024-34891

Insufficiently protected credentials in DAV server settings in 1C-Bitrix Bitrix24 23.300.100 allows remote administrators to read Exchange account passwords via HTTP GET request...

0.00294EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/11/04 12:00 a.m.•8 views

CVE-2024-34891: Cleartext Storage of Sensitive Information

Insufficiently protected credentials in DAV server settings in 1C-Bitrix Bitrix24 23.300.100 allows remote administrators to read Exchange account passwords via HTTP GET request...

6.8CVSS6.8AI score0.00294EPSS
SaveExploits1References3
CNNVD
CNNVD
•added 2024/11/04 12:00 a.m.•19 views

Bitrix24 安全漏洞

Bitrix24 is a suite of enterprise social platforms from Bitrix USA. The platform includes features such as online communication, calendar management and CRM Customer Relationship Management. A security vulnerability exists in Bitrix24 version 23.300.100, which originates from a remote administrat...

6.8CVSS6.8AI score0.00294EPSS
SaveExploits1References2
CVE
CVE
•added 2024/11/04 12:00 a.m.•96 views

CVE-2024-34891

The 1C-Bitrix Bitrix24 platform, specifically version 23.300.100 , is vulnerable to the disclosure of sensitive information due to insufficiently protected credentials in DAV server settings . A remote administrator can exploit this flaw to read Exchange account passwords by sending an HTTP GET r...

6.8CVSS6.6AI score0.00294EPSS
SaveExploits1References1Affected Software1
Positive Technologies
Positive Technologies
•added 2024/11/04 12:00 a.m.•18 views

PT-2024-39647 · Zoho · Zoho Manageengine Exchange Reporter Plus

Name of the Vulnerable Software and Affected Versions: Zohocorp ManageEngine Exchange Reporter Plus versions 5718 and prior Description: The issue concerns an authenticated SQL Injection in the reports module. Recommendations: For versions 5718 and prior, update to a version later than 5718 to...

8.8CVSS8.3AI score0.0445EPSS
SaveExploits0References6
Rows per page
Query Builder