NA - CVE-2024-34399 - **UNSUPPORTED WHEN ASSIGNED** An issue was...
**UNSUPPORTED WHEN ASSIGNED** An issue was discovered in BMC Remedy Mid Tier 7.6.04. An unauthenticated remote attacker is able to access any user account without using any password. NOTE: This...
NA - CVE-2024-45523 - An issue was discovered in Bravura Security...
An issue was discovered in Bravura Security Fabric versions 12.3.x before 12.3.5.32784, 12.4.x before 12.4.3.35110, 12.5.x before 12.5.2.35950, 12.6.x before 12.6.2.37183, and 12.7.x before...
NA - CVE-2024-45601 - Mesop is a Python-based UI framework designed...
Mesop is a Python-based UI framework designed for rapid web apps development. A vulnerability has been discovered and fixed in Mesop that could potentially allow unauthorized access to files on the...
NA - CVE-2024-46959 - runofast Indoor Security Camera for Baby...
runofast Indoor Security Camera for Baby Monitor has a default password of password for the root account. This allows access to the /stream1 URI via the rtsp:// protocol to receive the video and...
NA - CVE-2024-46978 - XWiki Platform is a generic wiki platform...
XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. It's possible for any user knowing the ID of a notification filter preference of...
NA - CVE-2024-46979 - XWiki Platform is a generic wiki platform...
XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. It's possible to get access to notification filters of any user by using a URL such as...
NA - CVE-2024-46986 - Camaleon CMS is a dynamic and advanced content...
Camaleon CMS is a dynamic and advanced content management system based on Ruby on Rails. An arbitrary file write vulnerability accessible via the upload method of the MediaController allows...
NA - CVE-2024-46987 - Camaleon CMS is a dynamic and advanced content...
Camaleon CMS is a dynamic and advanced content management system based on Ruby on Rails. A path traversal vulnerability accessible via MediaController's download_private_file method allows...
NA - CVE-2024-46989 - spicedb is an Open Source, Google...
spicedb is an Open Source, Google Zanzibar-inspired permissions database to enable fine-grained authorization for customer applications. Multiple caveats over the same indirect subject type on the...
Triangle Microworks TMW IEC 61850 Client source code libraries before 12.2.0 lack a buffer size check when processing received messages. The resulting buffer overflow can cause a crash, resulting...