17498 matches found
CVE-2020-27478
Cross Site Scripting vulnerability found in Simplcommerce v.40734964b0811f3cbaf64b6dac261683d256f961 thru 3103357200c70b4767986544e01b19dbf11505a7 allows a remote attacker to execute arbitrary code via a crafted script to the search bar feature...
CVE-2024-33308
An issue in TVS Motor Company Limited TVS Connet Android v.4.5.1 and iOS v.5.0.0 allows a remote attacker to escalate privileges via the Emergency Contact Feature. NOTE: this is disputed as discussed in the msn-official/CVE-Evidence repository...
kernel: KVM: nSVM: Check instead of asserting on nested TSC scaling support
In the Linux kernel, the following vulnerability has been resolved: KVM: nSVM: Check instead of asserting on nested TSC scaling support Check for nested TSC scaling support on nested SVM VMRUN instead of asserting that TSC scaling is exposed to L1 if L1's MSRAMD64TSCRATIO has diverged from KVM's...
CVE-2024-33308
The TVS Connet mobile application, developed by TVS Motor Company Limited, contains a vulnerability in versions Android v.4.5.1 and iOS v.5.0.0 . A remote attacker can exploit an issue in the Emergency Contact Feature to achieve privilege escalation . The vulnerability is associated with CWE-269 ...
CVE-2024-33308
An issue in TVS Motor Company Limited TVS Connet Android v.4.5.1 and iOS v.5.0.0 allows a remote attacker to escalate privileges via the Emergency Contact Feature. NOTE: this is disputed as discussed in the msn-official/CVE-Evidence repository...
Zscaler Client Connector 安全漏洞
Zscaler Client Connector is an application from zscaler. An application that is installed on a device to ensure that Internet traffic and access to an organization's internal applications are secure and in compliance with the organization's policies, even when not on the corporate network. A...
PT-2024-25198 · Unknown · Tvs Connet
Name of the Vulnerable Software and Affected Versions: TVS Connet versions 4.5.1 through 4.5.1 TVS Connet version 5.0.0 Description: An issue in TVS Connet allows a remote attacker to escalate privileges via the Emergency Contact Feature. This issue is disputed as discussed in the...
CVE-2024-33308: Improper Privilege Management
An issue in TVS Motor Company Limited TVS Connet Android v.4.5.1 and iOS v.5.0.0 allows a remote attacker to escalate privileges via the Emergency Contact Feature. NOTE: this is disputed as discussed in the msn-official/CVE-Evidence repository...
CVE-2024-33308
An issue in TVS Motor Company Limited TVS Connet Android v.4.5.1 and iOS v.5.0.0 allows a remote attacker to escalate privileges via the Emergency Contact Feature. NOTE: this is disputed as discussed in the msn-official/CVE-Evidence repository...
Microsoft SmartScreen Prompt Security Feature Bypass Vulnerability
Microsoft SmartScreen Prompt contains a security feature bypass vulnerability that allows an attacker to bypass the Mark of the Web MotW feature. This vulnerability can be chained with CVE-2023-38831 and CVE-2024-21412 to execute a malicious file...
DEBIAN-CVE-2022-48645
In the Linux kernel, the following vulnerability has been resolved: net: enetc: deny offload of tc-based TSN features on VF interfaces TSN features on the ENETC taprio, cbs, gate, police are configured through a mix of command BD ring messages and port registers: enetcportrd, enetcportwr. Port...
CVE-2024-32404
Server-Side Template Injection SSTI vulnerability in inducer relate before v.2024.1, allows remote attackers to execute arbitrary code via a crafted payload to the Markup Sandbox feature...
PT-2024-22887 · Entrust · E-Trust Horacius
Name of the Vulnerable Software and Affected Versions: e-trust Horacius versions 1.0 through 1.2 Description: The issue allows a local attacker to escalate privileges via the password reset function. It is described as an Insecure Permissions vulnerability, enabling unauthenticated privilege...
Microsoft Windows MHT File Mark-Of-The-Web Bypass Remote Code Execution Vulnerability
This vulnerability allows remote attackers to bypass the Mark-Of-The-Web security feature to execute arbitrary code on affected installations of Microsoft Windows. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. T...
Unspecified Vulnerability in Microsoft Edge (CNVD-2024-24957)
Microsoft Edge is a web browser from the American company Microsoft that comes with systems after Windows 10. A security vulnerability exists in Microsoft Edge. An attacker can exploit the vulnerability to be able to bypass certain features...
GHSA-PXHW-596R-RWQ5 vulnerabilities
Vulnerabilities for packages: spark-operator, argocd-image-updater, aws-ebs-csi-driver, aws-efs-csi-driver, kubernetes, kubernetes-dns-node-cache, aws-efs-csi-driver-fips, kubeflow-pipelines, argocd-image-updater-fips, local-static-provisioner, ip-masq-agent, rancher-webhook, nodetaint,...
PT-2024-7005
Name of the Vulnerable Software and Affected Versions Grafana versions prior to v11.0.6+security-01 Grafana versions prior to v11.1.7+security-01 Grafana versions prior to v11.2.2+security-01 Description The SQL Expressions experimental feature of Grafana allows for the evaluation of duckdb queri...
CVE-2024-3177 vulnerabilities
Vulnerabilities for packages: spark-operator, argocd-image-updater, aws-ebs-csi-driver, aws-efs-csi-driver, kubernetes, kubernetes-dns-node-cache, aws-efs-csi-driver-fips, kubeflow-pipelines, argocd-image-updater-fips, local-static-provisioner, ip-masq-agent, rancher-webhook, nodetaint,...
PT-2024-22868 · Mozilocms · Mozilocms
Name of the Vulnerable Software and Affected Versions: moziloCMS version 2.0 Description: The issue allows attackers to bypass file upload restrictions, potentially leading to unauthorized file execution or storage of malicious content. This is achieved by renaming files, which can result in the...