NA - CVE-2024-47529 - OpenC3 COSMOS provides the functionality needed...
OpenC3 COSMOS provides the functionality needed to send commands to and receive data from one or more embedded systems. OpenC3 COSMOS stores the password of a user unencrypted in the LocalStorage...
NA - CVE-2024-8733 - A potential security vulnerability
has been...
A potential security vulnerability has been identified in the HP One Agent for certain HP PC products, which might allow for escalation of privilege. HP is releasing software updates to mitigate...
NA - CVE-2024-24117 - Insecure Permissions vulnerability in Ruijie...
Insecure Permissions vulnerability in Ruijie RG-NBS2009G-P RGOS v.10.4(1)P2 Release (9736) allows a remote attacker to gain privileges via the login check state component.
NA - CVE-2024-28888 - A use-after-free vulnerability exists in the...
A use-after-free vulnerability exists in the way Foxit Reade 2024.1.0.23997 handles a checkbox field object. A specially crafted Javascript code inside a malicious PDF document can trigger this...
Critical - CVE-2024-45519 - The postjournal service in Zimbra Collaboration...
The postjournal service in Zimbra Collaboration (ZCS) before 8.8.15 Patch 46, 9 before 9.0.0 Patch 41, 10 before 10.0.9, and 10.1 before 10.1.1 sometimes allows unauthenticated users to execute...
NA - CVE-2024-47616 - Pomerium is an identity and context-aware...
Pomerium is an identity and context-aware access proxy. The Pomerium databroker service is responsible for managing all persistent Pomerium application state. Requests to the databroker service API...
NA - CVE-2024-47396 - Improper Neutralization of Input During Web...
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in moveaddons Move Addons for Elementor allows Stored XSS.This issue affects Move...
NA - CVE-2024-47560 - RevoWorks Cloud Client 3.0.91 and earlier...
RevoWorks Cloud Client 3.0.91 and earlier contains an incorrect authorization vulnerability. If this vulnerability is exploited, unintended processes may be executed in the sandbox environment....
NA - CVE-2024-9358 - A vulnerability has been found in ThingsBoard...
A vulnerability has been found in ThingsBoard up to 3.7.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the component HTTP RPC API. The manipulation...
NA - CVE-2024-9359 - A vulnerability was found in code-projects...
A vulnerability was found in code-projects Restaurant Reservation System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /addcompany.php. The...