Show filters
13,157 Total Results
Displaying 521-530 of 10,000
Refine your search criteria for more targeted results.
Sort by:
Attacker Value
Unknown
CVE-2024-39353
Disclosure Date: July 03, 2024 (last updated July 06, 2024)
Mattermost versions 9.5.x <= 9.5.5 and 9.8.0 fail to sanitize the RemoteClusterFrame payloads before audit logging them which allows a high privileged attacker with access to the audit logs to read message contents.
0
Attacker Value
Unknown
CVE-2024-6011
Disclosure Date: July 02, 2024 (last updated July 03, 2024)
The Cost Calculator Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘textarea.description’ parameter in all versions up to, and including, 3.2.12 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Administrator-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
0
Attacker Value
Unknown
CVE-2024-34587
Disclosure Date: July 02, 2024 (last updated July 06, 2024)
Improper input validation in parsing application information from RTCP packet in librtp.so prior to SMR Jul-2024 Release 1 allows remote attackers to execute arbitrary code with system privilege. User interaction is required for triggering this vulnerability.
0
Attacker Value
Unknown
CVE-2024-37134
Disclosure Date: July 02, 2024 (last updated July 04, 2024)
Dell PowerScale OneFS versions 8.2.2.x through 9.8.0.0 contain an improper privilege management vulnerability. A local high privileged attacker could potentially exploit this vulnerability to gain root-level access.
0
Attacker Value
Unknown
CVE-2024-37133
Disclosure Date: July 02, 2024 (last updated July 04, 2024)
Dell PowerScale OneFS versions 8.2.2.x through 9.8.0.0 contain an improper privilege management vulnerability. A local high privileged attacker could potentially exploit this vulnerability, leading to unauthorized gain of root-level access.
0
Attacker Value
Unknown
CVE-2024-37132
Disclosure Date: July 02, 2024 (last updated July 04, 2024)
Dell PowerScale OneFS versions 8.2.2.x through 9.8.0.0 contain an incorrect privilege assignment vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Denial of service and Elevation of privileges.
0
Attacker Value
Unknown
CVE-2024-37126
Disclosure Date: July 02, 2024 (last updated July 04, 2024)
Dell PowerScale OneFS versions 8.2.2.x through 9.8.0.0 contain an improper privilege management vulnerability. A local high privileged attacker could potentially exploit this vulnerability, leading to unauthorized gain of root-level access.
0
Attacker Value
Unknown
CVE-2024-32854
Disclosure Date: July 02, 2024 (last updated July 04, 2024)
Dell PowerScale OneFS versions 8.2.2.x through 9.8.0.0 contain an improper privilege management vulnerability. A local high privilege attacker could potentially exploit this vulnerability, leading to privilege escalation.
0
Attacker Value
Unknown
CVE-2024-0158
Disclosure Date: July 02, 2024 (last updated August 01, 2024)
Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with admin privileges may potentially exploit this vulnerability to modify a UEFI variable, leading to denial of service and escalation of privileges
0
Attacker Value
Unknown
CVE-2024-3999
Disclosure Date: July 02, 2024 (last updated July 04, 2024)
The EazyDocs WordPress plugin before 2.5.0 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup)
0