NA - CVE-2024-30118 - HCL Connections is vulnerable to an information...
HCL Connections is vulnerable to an information disclosure vulnerability which could allow a user to obtain sensitive information they are not entitled to because of improperly handling the request...
NA - CVE-2024-38815 - VMware NSX contains a content spoofing...
VMware NSX contains a content spoofing vulnerability. An unauthenticated malicious actor may be able to craft a URL and redirect a victim to an attacker controlled domain leading to sensitive...
NA - CVE-2024-38817 - VMware NSX contains a command injection...
VMware NSX contains a command injection vulnerability. A malicious actor with access to the NSX Edge CLI terminal may be able to craft malicious payloads to execute arbitrary commands on the...
NA - CVE-2024-38818 - VMware NSX contains a local privilege...
VMware NSX contains a local privilege escalation vulnerability. An authenticated malicious actor may exploit this vulnerability to obtain permissions from a separate group role than previously...
High - CVE-2024-39515 - An Improper Validation of Consistency within...
An Improper Validation of Consistency within Input vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated network-based...
High - CVE-2024-39516 - An Out-of-Bounds Read vulnerability in
the...
An Out-of-Bounds Read vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated network-based attacker sending a...
High - CVE-2024-39525 - An Improper Handling of Exceptional Conditions...
An Improper Handling of Exceptional Conditions vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated network-based attacker...
NA - CVE-2024-7037 - In version v0.3.8 of open-webui/open-webui, the...
In version v0.3.8 of open-webui/open-webui, the endpoint /api/pipelines/upload is vulnerable to arbitrary file write and delete due to unsanitized file.filename concatenation with CACHE_DIR. This...
NA - CVE-2024-7041 - An Insecure Direct Object Reference (IDOR)...
An Insecure Direct Object Reference (IDOR) vulnerability exists in open-webui/open-webui version v0.3.8. The vulnerability occurs in the API endpoint...
NA - CVE-2024-48933 - A cross-site scripting (XSS) vulnerability in...
A cross-site scripting (XSS) vulnerability in LemonLDAP::NG before 2.19.3 allows remote attackers to inject arbitrary web script or HTML into the login page via a username if userControl has been...