344290 matches found
CVE-2024-45153 Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)
Adobe Experience Manager versions 6.5.20 and earlier are affected by a stored Cross-Site Scripting XSS vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser when they brow...
Security Bulletin: Vulnerability in Linux Kernel might affect IBM Storage Copy Data Management
Summary IBM Storage Copy Data Management can be affected by vulnerability in Linux Kernel. A local authenticated attacker could exploit the vulnerability to cause a denial of service condition as described by the CVEs in the "Vulnerability Details" section. Vulnerability Details...
CVE-2024-45252
Elsight – CWE-78: Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection'...
CVE-2024-45251
Elsight – CWE-78: Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection'...
CVE-2024-45249
Cavok – CWE-89: Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection'...
CVE-2024-45252 Elsight – CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
Elsight – CWE-78: Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection'...
CVE-2024-45252 Elsight – CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
Elsight – CWE-78: Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection'...
CVE-2024-45252
CVE-2024-45252: Elsight Halo contains an OS command injection vulnerability. The connected CNNVD entry attributes the flaw to improper handling of special elements in OS commands, affecting Halo version 11.7.1.5. The CVE is linked to CWE-78; CVSS3.1 vector in the Initial document indicates high i...
CVE-2024-45251 Elsight – CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
Elsight – CWE-78: Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection'...
CVE-2024-45251
Summary: CVE-2024-45251 affects Elsight Halo (drone operations management). The vulnerability is described as CWE-78: Improper Neutralization of Special Elements used in an OS Command (OS Command Injection). The incident is rooted in inadequate handling of OS commands, enabling potential command ...
CVE-2024-45251 Elsight – CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
Elsight – CWE-78: Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection'...
CVE-2024-45250 ZKteco – CWE 200 Exposure of Sensitive Information to an Unauthorized Actor
ZKteco – CWE 200 Exposure of Sensitive Information to an Unauthorized Actor...
CVE-2024-45249
Summary: CVE-2024-45249 is a SQL injection (CWE-89) affecting Cavok. The vulnerability arises from improper neutralization of special elements in SQL commands. The public records consistently describe Cavok’s SQL injection issue but do not provide concrete exploit details or affected version rang...
CVE-2024-45249 Cavok – CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
Cavok – CWE-89: Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection'...
CVE-2024-45249 Cavok – CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
Cavok – CWE-89: Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection'...
CVE-2024-45248 Multi-DNC – CWE-35: Path Traversal: '.../...//'
Multi-DNC – CWE-35: Path Traversal: '.../...//'...
CVE-2024-45246
CVE-2024-45246 concerns Diebold Nixdorf Vynamic View Console with an Uncontrolled Search Path Element (CWE-427). Public sources indicate affected versions are prior to 5.9.5 (CNNVD) and that the issue could enable arbitrary code execution and privilege escalation. The CNNVD description additional...
CVE-2024-45246 Diebold Nixdorf – CWE-427: Uncontrolled Search Path Element
Diebold Nixdorf – CWE-427: Uncontrolled Search Path Element...