NA - CVE-2024-38380 - This vulnerability occurs when user-supplied...
This vulnerability occurs when user-supplied input is improperly sanitized and then reflected back to the user's browser, allowing an attacker to execute arbitrary JavaScript in the context of...
NA - CVE-2024-38812 - The vCenter Server contains a heap-overflow...
The vCenter Server contains a heap-overflow vulnerability in the implementation of the DCERPC protocol. A malicious actor with network access to vCenter Server may trigger this vulnerability by...
NA - CVE-2024-38813 - The vCenter Server contains a privilege...
The vCenter Server contains a privilege escalation vulnerability. A malicious actor with network access to vCenter Server may trigger this vulnerability to escalate privileges to root by sending a...
NA - CVE-2024-42501 - An authenticated Path Traversal vulnerabilities...
An authenticated Path Traversal vulnerabilities exists in the ArubaOS. Successful exploitation of this vulnerability allows an attacker to install unsigned packages on the underlying operating...
NA - CVE-2024-42502 - Authenticated command injection vulnerability...
Authenticated command injection vulnerability exists in the ArubaOS command line interface. Successful exploitation of this vulnerability result in the ability to inject shell commands on the...
NA - CVE-2024-42503 - Authenticated command execution vulnerability...
Authenticated command execution vulnerability exist in the ArubaOS command line interface (CLI). Successful exploitation of this vulnerabilities result in the ability to run arbitrary commands as...
NA - CVE-2024-8796 - Under the default configuration,...
Under the default configuration, Devise-Two-Factor versions >= 2.2.0 & < 6.0.0 generate TOTP shared secrets that are 120 bits instead of the 128-bit minimum defined by RFC 4226. Using a shared...
NA - CVE-2024-8944 - A vulnerability, which was classified as...
A vulnerability, which was classified as critical, was found in code-projects Hospital Management System 1.0. This affects an unknown part of the file check_availability.php. The manipulation of...