|
cve-2024-36114
|
|
Decompressors can crash the JVM and leak memory conten…
|
airlift
|
aircompressor
|
2024-05-29T20:24:53.906Z |
2024-08-02T03:30:13.037Z |
|
cve-2024-36109
|
|
Cross-site Scripting with Markdown rendering in CoCalc
|
sagemathinc
|
cocalc
|
2024-05-28T18:40:55.068Z |
2024-08-02T03:30:13.042Z |
|
cve-2024-36122
|
|
Discourse doesn't limit reviewable user serializer payload
|
discourse
|
discourse
|
2024-07-03T19:10:45.955Z |
2024-08-02T03:30:13.046Z |
|
cve-2024-36113
|
|
Discourse missing authorization checks for suspending …
|
discourse
|
discourse
|
2024-07-03T19:07:27.133Z |
2024-08-02T03:30:13.048Z |
|
cve-2024-36103
|
N/A
|
OS command injection vulnerability in WRC-X5400GS…
|
ELECOM CO.,LTD.
|
WRC-X5400GS-B
|
2024-06-12T00:34:39.129Z |
2024-08-02T03:30:13.076Z |
|
cve-2024-36115
|
|
Stored Cross site scripting in Reposilite artifacts
|
dzikoysk
|
reposilite
|
2024-06-19T17:37:20.736Z |
2024-08-02T03:30:13.082Z |
|
cve-2024-36059
|
N/A
|
Directory Traversal vulnerability in Kalkitech AS…
|
n/a
|
n/a
|
2024-06-27T00:00:00.000Z |
2024-08-02T03:30:13.119Z |
|
cve-2024-36112
|
|
Nautobot dynamic-group-members doesn't enforce permiss…
|
nautobot
|
nautobot
|
2024-05-28T22:26:12.487Z |
2024-08-02T03:30:13.120Z |
|
cve-2024-36128
|
|
Directus is soft-locked by providing a string value to…
|
directus
|
directus
|
2024-06-03T14:59:45.507Z |
2024-08-02T03:30:13.147Z |
|
cve-2024-36129
|
|
OpenTelemetry Collector has a Denial of Service via Zi…
|
open-telemetry
|
opentelemetry-collector
|
2024-06-05T17:26:13.903Z |
2024-08-02T03:30:13.165Z |
|
cve-2024-36241
|
3.1 (v3.1)
|
/playbook add slash command allows viewing arbitrary p…
|
Mattermost
|
Mattermost
|
2024-05-26T13:32:18.865Z |
2024-08-02T03:30:13.174Z |
|
cve-2024-36257
|
2.7 (v3.1)
|
Lack of permission check when updating the profile pic…
|
Mattermost
|
Mattermost
|
2024-07-03T08:29:10.457Z |
2024-08-02T03:37:03.658Z |
|
cve-2024-36255
|
5.7 (v3.1)
|
Post actions can run playbook checklist task commands
|
Mattermost
|
Mattermost
|
2024-05-26T13:32:56.087Z |
2024-08-02T03:37:03.667Z |
|
cve-2024-36243
|
8.2 (v3.1)
|
Arkcompiler Ets Runtime has an out-of-bounds read vuln…
|
OpenHarmony
|
OpenHarmony
|
2024-07-02T08:13:41.186Z |
2024-08-02T03:37:03.674Z |
|
cve-2024-36252
|
N/A
|
Improper restriction of communication channel to …
|
RICOH COMPANY, LTD
|
Ricoh Streamline NX PC Client
|
2024-06-19T06:40:38.870Z |
2024-08-02T03:37:03.680Z |
|
cve-2024-36287
|
3.8 (v3.1)
|
Bypass of TCC restrictions on macOS
|
Mattermost
|
Mattermost
|
2024-06-14T08:39:08.132Z |
2024-08-02T03:37:03.683Z |
|
cve-2024-36364
|
6.5 (v3.1)
|
In JetBrains TeamCity before 2022.04.7, 2022.10.6…
|
JetBrains
|
TeamCity
|
2024-05-29T13:28:58.804Z |
2024-08-02T03:37:04.365Z |
|
cve-2024-36267
|
N/A
|
Path traversal vulnerability exists in Redmine DM…
|
Kontron
|
Redmine DMSF Plugin
|
2024-05-30T05:33:45.258Z |
2024-08-02T03:37:04.600Z |
|
cve-2024-36304
|
7.8 (v3.1)
|
A Time-of-Check Time-Of-Use vulnerability in the …
|
Trend Micro, Inc.
|
Trend Micro Apex One
|
2024-06-10T21:21:04.492Z |
2024-08-02T03:37:04.674Z |
|
cve-2024-36367
|
4.6 (v3.1)
|
In JetBrains TeamCity before 2022.04.7, 2022.10.6…
|
JetBrains
|
TeamCity
|
2024-05-29T13:29:00.772Z |
2024-08-02T03:37:04.680Z |
|
cve-2024-36278
|
3.3 (v3.1)
|
Arkcompiler Ets Runtime has a type confusion vulnerability
|
OpenHarmony
|
OpenHarmony
|
2024-07-02T08:13:50.234Z |
2024-08-02T03:37:04.690Z |
|
cve-2024-36307
|
4.7 (v3.1)
|
A security agent link following vulnerability in …
|
Trend Micro, Inc.
|
Trend Micro Apex One
|
2024-06-10T21:21:32.953Z |
2024-08-02T03:37:04.691Z |
|
cve-2024-36266
|
|
A vulnerability has been identified in PowerSys (…
|
Siemens
|
PowerSys
|
2024-06-11T11:15:59.201Z |
2024-08-02T03:37:04.767Z |
|
cve-2024-36391
|
9.1 (v3.1)
|
MileSight DeviceHub - CWE-320: Key Management Errors
|
MileSight
|
DeviceHub
|
2024-06-02T13:23:28.345Z |
2024-08-02T03:37:04.857Z |
|
cve-2024-36388
|
10 (v3.1)
|
MileSight DeviceHub - CWE-305 Missing Authentication f…
|
MileSight
|
DeviceHub
|
2024-06-02T13:14:46.927Z |
2024-08-02T03:37:04.924Z |
|
cve-2024-36393
|
9.9 (v3.1)
|
SysAid - CWE-89: Improper Neutralization of Special El…
|
Sysaid
|
SysAid
|
2024-06-06T08:18:52.667Z |
2024-08-02T03:37:04.931Z |
|
cve-2024-36423
|
|
GHSL-2023-246: Flowise xss in /api/v1/public-chatflows/id
|
FlowiseAI
|
Flowise
|
2024-07-01T18:17:18.155Z |
2024-08-02T03:37:04.950Z |
|
cve-2024-36389
|
9.8 (v3.1)
|
MileSight DeviceHub - CWE-330 Use of Insufficiently Ra…
|
MileSight
|
DeviceHub
|
2024-06-02T13:21:11.748Z |
2024-08-02T03:37:04.960Z |
|
cve-2024-36371
|
4.6 (v3.1)
|
In JetBrains TeamCity before 2023.05.6, 2023.11.5…
|
JetBrains
|
TeamCity
|
2024-05-29T13:29:03.238Z |
2024-08-02T03:37:04.980Z |
|
cve-2024-36410
|
|
SuiteCRM authenticated SQL Injection in EmailUIAjax me…
|
salesagility
|
SuiteCRM
|
2024-06-10T17:24:08.514Z |
2024-08-02T03:37:04.984Z |