CVE-2024-9506 |
Improper regular expression in Vue's parseHTML function leads to a potential regular expression deni... |
|
2024-10-15 |
View Details |
CVE-2024-21247 |
Vulnerability in the MySQL Client product of Oracle MySQL (component: Client: mysqldump). Supported... |
LOW |
2024-10-15 |
View Details |
CVE-2024-48710 |
In TP-Link TL-WDR7660 1.0, the wlanTimerRuleJsonToBin function handles the parameter string name wit... |
|
2024-10-15 |
View Details |
CVE-2024-21219 |
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML). Supported versi... |
MEDIUM |
2024-10-15 |
View Details |
CVE-2024-38204 |
Improper Access Control in Imagine Cup allows an authorized attacker to elevate privileges over a ne... |
HIGH |
2024-10-15 |
View Details |
CVE-2024-21248 |
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Suppo... |
MEDIUM |
2024-10-15 |
View Details |
CVE-2024-48411 |
itsourcecode Online Tours and Travels Management System v1.0 is vulnerable to SQL Injection (SQLI) v... |
|
2024-10-15 |
View Details |
CVE-2024-21218 |
Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions t... |
MEDIUM |
2024-10-15 |
View Details |
CVE-2024-38190 |
Missing authorization in Power Platform allows an unauthenticated attacker to view sensitive informa... |
HIGH |
2024-10-15 |
View Details |
CVE-2024-47080 |
matrix-js-sdk is the Matrix Client-Server SDK for JavaScript and TypeScript. In matrix-js-sdk versio... |
|
2024-10-15 |
View Details |
CVE-2024-21249 |
Vulnerability in the PeopleSoft Enterprise FIN Expenses product of Oracle PeopleSoft (component: Exp... |
MEDIUM |
2024-10-15 |
View Details |
CVE-2024-44775 |
An issue in kmqtt v0.2.7 allows attackers to cause a Denial of Service(DoS) via a crafted request.... |
|
2024-10-15 |
View Details |
CVE-2024-21217 |
Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition produ... |
LOW |
2024-10-15 |
View Details |
CVE-2024-38139 |
Improper authentication in Microsoft Dataverse allows an authorized attacker to elevate privileges o... |
HIGH |
2024-10-15 |
View Details |
CVE-2024-41311 |
In Libheif 1.17.6, insufficient checks in ImageOverlay::parse() decoding a heif file containing an o... |
|
2024-10-15 |
View Details |
CVE-2024-21216 |
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). ... |
|
2024-10-15 |
View Details |
CVE-2024-45085 |
IBM WebSphere Application Server 8.5 is vulnerable to a denial of service, under certain configurati... |
MEDIUM |
2024-10-15 |
View Details |
CVE-2024-21250 |
Vulnerability in the Oracle Process Manufacturing Product Development product of Oracle E-Business S... |
HIGH |
2024-10-15 |
View Details |
CVE-2024-31955 |
An issue was discovered in Samsung eMMC with KLMAG2GE4A and KLM8G1WEMB firmware. Code bypass through... |
|
2024-10-15 |
View Details |
CVE-2024-21215 |
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). ... |
HIGH |
2024-10-15 |
View Details |
CVE-2024-10004 |
Opening an external link to an HTTP website when Firefox iOS was previously closed and had an HTTPS ... |
|
2024-10-15 |
View Details |
CVE-2024-21251 |
Vulnerability in the Java VM component of Oracle Database Server. Supported versions that are affec... |
LOW |
2024-10-15 |
View Details |
CVE-2024-35584 |
SQL injection vulnerability in Ajax.php, ForWindow.php, ForExport.php, Modules.php, functions/Hackin... |
|
2024-10-15 |
View Details |
CVE-2024-49195 |
Mbed TLS 3.5.x through 3.6.x before 3.6.2 has a buffer underrun in pkwrite when writing an opaque ke... |
|
2024-10-15 |
View Details |
CVE-2024-21214 |
Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Quer... |
HIGH |
2024-10-15 |
View Details |
CVE-2024-9966 |
Inappropriate implementation in Navigations in Google Chrome prior to 130.0.6723.58 allowed a remote... |
|
2024-10-15 |
View Details |
CVE-2024-48622 |
A cross-site scripting (XSS) issue in DomainMOD below v4.12.0 allows remote attackers to inject Java... |
|
2024-10-15 |
View Details |
CVE-2024-21252 |
Vulnerability in the Oracle Product Hub product of Oracle E-Business Suite (component: Item Catalog)... |
HIGH |
2024-10-15 |
View Details |
CVE-2024-44337 |
The package `github.com/gomarkdown/markdown` is a Go library for parsing Markdown text and rendering... |
|
2024-10-15 |
View Details |
CVE-2024-21213 |
Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions t... |
MEDIUM |
2024-10-15 |
View Details |
CVE-2024-9965 |
Insufficient data validation in DevTools in Google Chrome on Windows prior to 130.0.6723.58 allowed ... |
|
2024-10-15 |
View Details |
CVE-2024-48623 |
In queue\index.php of DomainMOD below v4.12.0, the list_id and domain_id parameters in the GET reque... |
|
2024-10-15 |
View Details |
CVE-2024-21253 |
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Suppo... |
LOW |
2024-10-15 |
View Details |
CVE-2024-21286 |
Vulnerability in the PeopleSoft Enterprise ELM Enterprise Learning Management product of Oracle Peop... |
MEDIUM |
2024-10-15 |
View Details |
CVE-2024-21212 |
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Health Monitor). Supp... |
MEDIUM |
2024-10-15 |
View Details |
CVE-2024-9964 |
Inappropriate implementation in Payments in Google Chrome prior to 130.0.6723.58 allowed a remote at... |
|
2024-10-15 |
View Details |
CVE-2024-48624 |
In segments\edit.php of DomainMOD below v4.12.0, the segid parameter in the GET request can be explo... |
|
2024-10-15 |
View Details |
CVE-2024-21254 |
Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: Web Server). Suppo... |
HIGH |
2024-10-15 |
View Details |
CVE-2024-21285 |
Vulnerability in the Oracle Banking Liquidity Management product of Oracle Financial Services Applic... |
HIGH |
2024-10-15 |
View Details |
CVE-2024-21211 |
Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition produ... |
LOW |
2024-10-15 |
View Details |
CVE-2024-9963 |
Insufficient data validation in Downloads in Google Chrome prior to 130.0.6723.58 allowed a remote a... |
|
2024-10-15 |
View Details |
CVE-2024-21255 |
Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: XMLP... |
|
2024-10-15 |
View Details |
CVE-2024-21284 |
Vulnerability in the Oracle Banking Liquidity Management product of Oracle Financial Services Applic... |
HIGH |
2024-10-15 |
View Details |
CVE-2024-21210 |
Vulnerability in Oracle Java SE (component: Hotspot). Supported versions that are affected are Orac... |
LOW |
2024-10-15 |
View Details |
CVE-2024-9962 |
Inappropriate implementation in Permissions in Google Chrome prior to 130.0.6723.58 allowed a remote... |
|
2024-10-15 |
View Details |
CVE-2024-21257 |
Vulnerability in the Oracle Hyperion BI+ product of Oracle Hyperion (component: UI and Visualization... |
LOW |
2024-10-15 |
View Details |
CVE-2024-21283 |
Vulnerability in the PeopleSoft Enterprise HCM Global Payroll Core product of Oracle PeopleSoft (com... |
HIGH |
2024-10-15 |
View Details |
CVE-2024-21209 |
Vulnerability in the MySQL Client product of Oracle MySQL (component: Client: mysqldump). Supported... |
LOW |
2024-10-15 |
View Details |
CVE-2024-9961 |
Use after free in ParcelTracking in Google Chrome on iOS prior to 130.0.6723.58 allowed a remote att... |
|
2024-10-15 |
View Details |
CVE-2024-21258 |
Vulnerability in the Oracle Installed Base product of Oracle E-Business Suite (component: User Inter... |
MEDIUM |
2024-10-15 |
View Details |