Lucene search
+L

20571 matches found

BDU FSTEC
BDU FSTEC
added 2024/04/19 12:00 a.m.12 views

The vulnerability of the WLAvalancheService component in the Avalanche mobile device management system allows a hacker to trigger a service failure.

The vulnerability of the WLAvalancheService component in the mobile device management system of Avalanche is related to pointer assignment errors. Exploiting this vulnerability could allow a remote attacker to cause service failures...

6.8CVSS6.8AI score0.01728EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/04/19 12:00 a.m.14 views

The vulnerability of the WLInfoRailService component in the Avalanche mobile device management system allows a hacker to execute arbitrary commands.

The vulnerability of the WLInfoRailService component in the Avalanche mobile device management system is related to buffer overflow in the dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

8.1CVSS8.2AI score0.03561EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/04/19 12:00 a.m.13 views

The vulnerability in the Avalanche mobile device management web component allows a hacker to delete any files they desire.

The vulnerability of the Avalanche mobile device management web component is related to incorrect restrictions on the path name to the restricted catalog. Exploiting this vulnerability could allow a malicious actor to delete any files they desire...

7.5CVSS7.1AI score0.01807EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/04/19 12:00 a.m.12 views

The vulnerability of the WLAvalancheService component in the mobile device management system of Avalanche allows a hacker to disclose protected information.

The vulnerability of the WLAvalancheService component in the mobile device management system of Avalanche relates to memory-walking attacks. Exploiting this vulnerability could allow a malicious actor to disclose sensitive information that is protected by the system...

5.3CVSS6.2AI score0.01884EPSS
SaveExploits0References2Affected Software1
CNNVD
CNNVD
added 2024/04/19 12:00 a.m.8 views

Ivanti Avalanche 安全漏洞

Ivanti Avalanche is a mobile device management MDM software platform designed to help organizations manage, maintain and secure their mobile devices. It supports a range of device types, including smartphones, tablets, and industrial devices. A heap overflow vulnerability exists in Ivanti Avalanc...

9.8CVSS7.5AI score0.04308EPSS
SaveExploits0References2
CNVD
CNVD
added 2024/04/19 12:00 a.m.27 views

Ivanti Avalanche Heap Overflow Vulnerability

Ivanti Avalanche is a mobile device management MDM software platform designed to help organizations manage, maintain and secure their mobile devices. It supports a range of device types, including smartphones, tablets, and industrial devices. A heap overflow vulnerability exists in Ivanti Avalanc...

9.8CVSS7.6AI score0.04308EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2024/04/19 12:00 a.m.13 views

The vulnerability in the Avalanche mobile device management web component allows a hacker to execute arbitrary commands with SYSTEM privileges.

The vulnerability of the Avalanche mobile device management web component is related to synchronization errors when using a common resource “Race Situation”. Exploiting this vulnerability allows an attacker who operates remotely to execute arbitrary commands with SYSTEM privileges...

9CVSS8AI score0.02373EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/04/19 12:00 a.m.11 views

The vulnerability of the WLAvalancheService component in the Avalanche mobile device management system allows a attacker to cause a service failure or execute arbitrary code.

The vulnerability of the WLAvalancheService component in the mobile device management system of Avalanche relates to memory-walking attacks. Exploiting this vulnerability can allow an attacker to cause service failures or execute arbitrary code...

7.5CVSS7.5AI score0.01789EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/04/19 12:00 a.m.14 views

The vulnerability in the Avalanche mobile device management web component allows a hacker to execute arbitrary commands with SYSTEM privileges.

The vulnerability of the Avalanche mobile device management web component is related to the unlimited loading of dangerous files. Exploiting this vulnerability allows a remote attacker to execute arbitrary code within the SYSTEM context...

9CVSS8.1AI score0.02715EPSS
SaveExploits0References2Affected Software1
OSV
OSV
added 2024/04/17 7:15 p.m.2 views

DEBIAN-CVE-2024-31583

Pytorch before version v2.2.0 was discovered to contain a use-after-free vulnerability in torch/csrc/jit/mobile/interpreter.cpp...

7.8CVSS7.4AI score0.00268EPSS
SaveExploits0References1
OSV
OSV
added 2024/04/17 7:15 p.m.9 views

AZL-39942 CVE-2024-31583 affecting package pytorch for versions less than 2.0.0-4

Pytorch before version v2.2.0 was discovered to contain a use-after-free vulnerability in torch/csrc/jit/mobile/interpreter.cpp...

7.8CVSS5.8AI score0.00268EPSS
SaveExploits0References1
PyPA
PyPA
added 2024/04/17 7:15 p.m.13 views

PYSEC-2024-251

Pytorch before version v2.2.0 was discovered to contain a use-after-free vulnerability in torch/csrc/jit/mobile/interpreter.cpp...

7.8CVSS7.3AI score0.00268EPSS
SaveExploits0References4Affected Software1
OSV
OSV
added 2024/04/17 7:15 p.m.6 views

UBUNTU-CVE-2024-31583

Pytorch before version v2.2.0 was discovered to contain a use-after-free vulnerability in torch/csrc/jit/mobile/interpreter.cpp...

7.8CVSS5.8AI score0.00268EPSS
SaveExploits0References5
OSV
OSV
added 2024/04/17 5:15 a.m.7 views

CVE-2024-2102

The Salon booking system WordPress plugin before 9.6.3 does not properly sanitize and escape the 'Mobile Phone' field and 'smsprefix' parameter when booking an appointment, allowing customers to conduct Stored Cross-Site Scripting attacks. The payload gets triggered when an admin visits the...

4.7CVSS5.8AI score0.00464EPSS
SaveExploits2References1
NVD
NVD
added 2024/04/17 5:15 a.m.23 views

CVE-2024-2101

The Salon booking system WordPress plugin before 9.6.3 does not properly sanitize and escape the 'Mobile Phone' field when booking an appointment, allowing customers to conduct Stored Cross-Site Scripting attacks. The payload gets triggered when an admin visits the 'Customers' page and the...

5.7CVSS5.6AI score0.00631EPSS
SaveExploits2References1
OSV
OSV
added 2024/04/17 5:15 a.m.9 views

CVE-2024-2101

The Salon booking system WordPress plugin before 9.6.3 does not properly sanitize and escape the 'Mobile Phone' field when booking an appointment, allowing customers to conduct Stored Cross-Site Scripting attacks. The payload gets triggered when an admin visits the 'Customers' page and the...

5.7CVSS7.3AI score0.00631EPSS
SaveExploits2References1
Cvelist
Cvelist
added 2024/04/17 5:00 a.m.27 views

CVE-2024-2101 WordPress Plugin Salon Booking System < 9.6.3 - Unauthenticated Stored Cross-Site Scripting (XSS)

The Salon booking system WordPress plugin before 9.6.3 does not properly sanitize and escape the 'Mobile Phone' field when booking an appointment, allowing customers to conduct Stored Cross-Site Scripting attacks. The payload gets triggered when an admin visits the 'Customers' page and the...

5.8AI score0.00631EPSS
SaveExploits2References1
CVE
CVE
added 2024/04/17 5:00 a.m.96 views

CVE-2024-2101

The CVE-2024-2101 in the Salon booking system WordPress plugin affects versions prior to 9.6.3. The issue is improper sanitization/escaping of the Mobile Phone field during appointment booking, enabling Stored Cross-Site Scripting (XSS) attacks that trigger when an admin visits the Customers page...

5.7CVSS8AI score0.00631EPSS
SaveExploits2References1Affected Software1
Vulnrichment
Vulnrichment
added 2024/04/17 5:00 a.m.13 views

CVE-2024-2101 WordPress Plugin Salon Booking System < 9.6.3 - Unauthenticated Stored Cross-Site Scripting (XSS)

The Salon booking system WordPress plugin before 9.6.3 does not properly sanitize and escape the 'Mobile Phone' field when booking an appointment, allowing customers to conduct Stored Cross-Site Scripting attacks. The payload gets triggered when an admin visits the 'Customers' page and the...

5.8AI score0.00631EPSS
SaveExploits2References1
CNNVD
CNNVD
added 2024/04/17 12:00 a.m.7 views

WordPress Plugin Salon booking system 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed using the PHP language, which supports personal blogs on PHP and MySQL servers.WordPress plugin is an...

5.7CVSS7.4AI score0.00631EPSS
SaveExploits2References2
Rows per page
Query Builder