NA - CVE-2024-47651 - This vulnerability exists in Shilpi Client...
This vulnerability exists in Shilpi Client Dashboard due to improper handling of multiple parameters in the API endpoint. An authenticated remote attacker could exploit this vulnerability by...
NA - CVE-2024-6400 - Cleartext Storage of Sensitive Information...
Cleartext Storage of Sensitive Information vulnerability in Finrota Netahsilat allows Retrieve Embedded Sensitive Data.This issue solved in versions 1.21.10, 1.23.01, 1.23.08, 1.23.11 and 1.24.03.
NA - CVE-2024-47652 - This vulnerability exists in Shilpi Client...
This vulnerability exists in Shilpi Client Dashboard due to implementation of inadequate authentication mechanism in the login module wherein access to any users account is granted with just their...
NA - CVE-2024-47653 - This vulnerability exists in Shilpi Client...
This vulnerability exists in Shilpi Client Dashboard due to lack of authorization for modification and cancellation requests through certain API endpoints. An authenticated remote attacker could...
NA - CVE-2024-47654 - This vulnerability exists in Shilpi Client...
This vulnerability exists in Shilpi Client Dashboard due to lack of rate limiting and Captcha protection for OTP requests in certain API endpoint. An unauthenticated remote attacker could exploit...
NA - CVE-2024-47655 - This vulnerability exists in the Shilpi Client...
This vulnerability exists in the Shilpi Client Dashboard due to improper validation of files being uploaded other than the specified extension. An authenticated remote attacker could exploit this...
NA - CVE-2024-47656 - This vulnerability exists in Shilpi Client...
This vulnerability exists in Shilpi Client Dashboard due to missing restrictions for incorrect login attempts on its API based login. A remote attacker could exploit this vulnerability by...
NA - CVE-2024-47657 - This vulnerability exists in the Shilpi Net...
This vulnerability exists in the Shilpi Net Back Office due to improper access controls on certain API endpoints. An authenticated remote attacker could exploit this vulnerability by manipulating a...
NA - CVE-2024-47789 - ** UNSUPPORTED WHEN ASSIGNED ** This...
** UNSUPPORTED WHEN ASSIGNED ** This vulnerability exists in D3D Security IP Camera due to usage of weak authentication scheme of the HTTP header protocol where authorization tag contain a Base-64...
NA - CVE-2024-47790 - ** UNSUPPORTED WHEN ASSIGNED ** This...
** UNSUPPORTED WHEN ASSIGNED ** This vulnerability exists in D3D Security IP Camera due to usage of insecure Real-Time Streaming Protocol (RTSP) version for live video streaming. A remote attacker...