Lucene search
+L

22124 matches found

NVD
NVD
•added 2024/10/23 3:15 p.m.•27 views

CVE-2024-47903

A vulnerability has been identified in InterMesh 7177 Hybrid 2.0 Subscriber All versions V8.2.12, InterMesh 7707 Fire Subscriber All versions V7.2.12 only if the IP interface is enabled which is not the default configuration. The web server of affected devices allows to write arbitrary files to t...

9.1CVSS0.00371EPSS
SaveExploits0References1
OSV
OSV
•added 2024/10/23 3:15 p.m.•15 views

CVE-2024-47903

A vulnerability has been identified in InterMesh 7177 Hybrid 2.0 Subscriber All versions V8.2.12, InterMesh 7707 Fire Subscriber All versions V7.2.12 only if the IP interface is enabled which is not the default configuration. The web server of affected devices allows to write arbitrary files to t...

9.1CVSS5.8AI score0.00371EPSS
SaveExploits0References1
OSV
OSV
•added 2024/10/23 3:15 p.m.•13 views

CVE-2024-47901

A vulnerability has been identified in InterMesh 7177 Hybrid 2.0 Subscriber All versions V8.2.12, InterMesh 7707 Fire Subscriber All versions V7.2.12 only if the IP interface is enabled which is not the default configuration. The web server of affected devices does not sanitize the input paramete...

9.8CVSS6.3AI score0.01249EPSS
SaveExploits0References1
CVE
CVE
•added 2024/10/23 2:21 p.m.•74 views

CVE-2024-47903

InterMesh CVE-2024-47903 affects InterMesh 7177 Hybrid 2.0 Subscriber (all versions < V8.2.12) and InterMesh 7707 Fire Subscriber (all versions

9.1CVSS9.3AI score0.00371EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
•added 2024/10/23 2:21 p.m.•16 views

CVE-2024-47903

A vulnerability has been identified in InterMesh 7177 Hybrid 2.0 Subscriber All versions V8.2.12, InterMesh 7707 Fire Subscriber All versions V7.2.12 only if the IP interface is enabled which is not the default configuration. The web server of affected devices allows to write arbitrary files to t...

6.9CVSS6.9AI score0.00371EPSS
SaveExploits0References1
CVE
CVE
•added 2024/10/23 2:21 p.m.•67 views

CVE-2024-47902

CVE-2024-47902 affects Siemens InterMesh 7177 Hybrid 2.0 Subscriber (all versions < 8.2.12) and InterMesh 7707 Fire Subscriber (all versions

9.8CVSS9.6AI score0.00512EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2024/10/23 2:21 p.m.•38 views

CVE-2024-47902

A vulnerability has been identified in InterMesh 7177 Hybrid 2.0 Subscriber All versions V8.2.12, InterMesh 7707 Fire Subscriber All versions V7.2.12 only if the IP interface is enabled which is not the default configuration. The web server of affected devices does not authenticate GET requests...

7.2CVSS0.00512EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/10/23 2:21 p.m.•52 views

CVE-2024-47901

A vulnerability has been identified in InterMesh 7177 Hybrid 2.0 Subscriber All versions V8.2.12, InterMesh 7707 Fire Subscriber All versions V7.2.12 only if the IP interface is enabled which is not the default configuration. The web server of affected devices does not sanitize the input paramete...

10CVSS0.01249EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2024/10/23 12:00 a.m.•16 views

WordPress plugin Verbalize WP 代码问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A code issue...

10CVSS7.1AI score0.01499EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2024/10/23 12:00 a.m.•18 views

Siemens InterMesh 7177和Siemens InterMesh 7707 安全漏洞

InterMesh is a wireless alarm reporting system that uses mesh wireless network technology to transmit alarm signals. A security vulnerability exists in Siemens InterMesh Subscriber Devices, which can be exploited by an attacker to write arbitrary files to the web server's DocumentRoot directory...

9.1CVSS7AI score0.00371EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
•added 2024/10/23 12:00 a.m.•17 views

The vulnerability of the HTTP Daemon (httpd) on the Juniper Networks Junos OS allows a attacker to cause a service failure.

The vulnerability of the HTTP Daemon httpd component of the Juniper Networks Junos OS operating system is related to an uncontrolled consumption of resources. Exploiting this vulnerability could allow a malicious actor to cause service interruptions remotely...

7.8CVSS5.4AI score0.00599EPSS
SaveExploits0References5Affected Software1
Positive Technologies
Positive Technologies
•added 2024/10/23 12:00 a.m.•20 views

PT-2024-33604 · Unknown · Reneecussack 3D

Name of the Vulnerable Software and Affected Versions: ReneeCussack 3D Work In Progress versions n/a through 1.0.3 Description: The issue allows for the unrestricted upload of files with dangerous types, enabling an attacker to upload a web shell to a web server. Recommendations: For versions n/a...

9.9CVSS6.9AI score0.00522EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/10/23 12:00 a.m.•2 views

CVE-2024-20485: Improper Control of Generation of Code

A vulnerability in the VPN web server of Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an authenticated, local attacker to execute arbitrary code with root-level privileges. Administrator-level privileges are required to exploit this...

6.7CVSS6.7AI score0.00186EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/10/23 12:00 a.m.•4 views

CVE-2024-47902: Missing Authentication for Critical Function

A vulnerability has been identified in InterMesh 7177 Hybrid 2.0 Subscriber All versions V8.2.12, InterMesh 7707 Fire Subscriber All versions V7.2.12 only if the IP interface is enabled which is not the default configuration. The web server of affected devices does not authenticate GET requests...

9.8CVSS5.7AI score0.00512EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/10/23 12:00 a.m.•6 views

CVE-2024-47901: Improper Neutralization of Special Elements used in an OS Command

A vulnerability has been identified in InterMesh 7177 Hybrid 2.0 Subscriber All versions V8.2.12, InterMesh 7707 Fire Subscriber All versions V7.2.12 only if the IP interface is enabled which is not the default configuration. The web server of affected devices does not sanitize the input paramete...

10CVSS6.6AI score0.01249EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2024/10/23 12:00 a.m.•3 views

PT-2024-32879

Name of the Vulnerable Software and Affected Versions InterMesh 7177 Hybrid 2.0 Subscriber versions prior to 8.2.12 InterMesh 7707 Fire Subscriber versions prior to 7.2.12 Description A vulnerability has been identified that allows writing arbitrary files to the web server's DocumentRoot director...

9.1CVSS5.9AI score0.00371EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2024/10/23 12:00 a.m.•4 views

PT-2024-32878

Name of the Vulnerable Software and Affected Versions InterMesh 7177 Hybrid 2.0 Subscriber versions prior to 8.2.12 InterMesh 7707 Fire Subscriber versions prior to 7.2.12 Description A vulnerability has been identified where the web server of affected devices does not authenticate GET requests...

9.8CVSS5.7AI score0.00512EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
•added 2024/10/23 12:00 a.m.•5 views

PT-2024-32877

A vulnerability has been identified in InterMesh 7177 Hybrid 2.0 Subscriber All versions V8.2.12, InterMesh 7707 Fire Subscriber All versions V7.2.12 only if the IP interface is enabled which is not the default configuration. The web server of affected devices does not sanitize the input paramete...

10CVSS0.01249EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/10/23 12:00 a.m.•5 views

CVE-2024-49671: Unrestricted Upload of File with Dangerous Type

Unrestricted Upload of File with Dangerous Type vulnerability in Dogu Pekgoz AI Image Generator for Your Content & Featured Images – AI Postpix ai-postpix allows Upload a Web Shell to a Web Server.This issue affects AI Image Generator for Your Content & Featured Images – AI Postpix: from n/a...

9.9CVSS5.8AI score0.00522EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/10/23 12:00 a.m.•5 views

CVE-2024-49676: Unrestricted Upload of File with Dangerous Type

Unrestricted Upload of File with Dangerous Type vulnerability in Michael Bourne Custom Icons for Elementor custom-icons-for-elementor allows Upload a Web Shell to a Web Server.This issue affects Custom Icons for Elementor: from n/a through = 0.3.3...

6.6CVSS5.8AI score0.00324EPSS
SaveExploits0References1
Rows per page
Query Builder