Page 248 of 54239 results (0.071 seconds)

CVSS: 9.0EPSS: 0%CPEs: 1EXPL: 1

CVE-2024-6891 – Journyx Authenticated Remote Code Execution

https://notcve.org/view.php?id=CVE-2024-6891

07 Aug 2024 — Attackers with a valid username and password can exploit a python code injection vulnerability during the natural login flow. • https://packetstorm.news/files/id/180002 • CWE-94: Improper Control of Generation of Code ('Code Injection') CWE-95: Improper Neutralization of Directives in Dynamically Evaluated Code ('Eval Injection') •

CVSS: 4.8EPSS: 0%CPEs: 5EXPL: 0

CVE-2024-20479

https://notcve.org/view.php?id=CVE-2024-20479

07 Aug 2024 — A vulnerability in the web-based management interface of Cisco ISE could allow an authenticated, remote attacker to conduct an XSS attack against a user of the interface. ... An attacker could exploit this vulnerability by injecting malicious code into specific pages of the interface. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected interface or access sensitive, browser-based information. • https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ise-xss-V2bm9JCY • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •

CVSS: 5.5EPSS: 0%CPEs: 1EXPL: 0

CVE-2024-20443

https://notcve.org/view.php?id=CVE-2024-20443

07 Aug 2024 — A vulnerability in the web-based management interface of Cisco ISE could allow an authenticated, remote attacker to conduct an XSS attack against a user of the interface. ... An attacker could exploit this vulnerability by injecting malicious code into specific pages of the interface. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected interface or access sensitive, browser-based information. • https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ise-xss-V2bm9JCY • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •

CVSS: 5.5EPSS: 0%CPEs: 6EXPL: 0

CVE-2024-42240 – x86/bhi: Avoid warning in #DB handler due to BHI mitigation

https://notcve.org/view.php?id=CVE-2024-42240

07 Aug 2024 — A local attacker could use this to cause a denial of service or possibly execute arbitrary code. • https://git.kernel.org/stable/c/bd53ec80f21839cfd4d852a6088279d602d67e5b • CWE-99: Improper Control of Resource Identifiers ('Resource Injection') •

CVSS: 5.5EPSS: 0%CPEs: 8EXPL: 0

CVE-2024-42236 – usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()

https://notcve.org/view.php?id=CVE-2024-42236

07 Aug 2024 — A local attacker could use this to cause a denial of service or possibly execute arbitrary code. • https://git.kernel.org/stable/c/a444c3fc264119801575ab086e03fb4952f23fd0 •

CVSS: 9.0EPSS: 0%CPEs: 4EXPL: 5

CVE-2024-43044 – jenkins: Arbitrary file read vulnerability through agent connections can lead to RCE

https://notcve.org/view.php?id=CVE-2024-43044

07 Aug 2024 — The ClassLoaderProxy#fetchJar function may allow malicious agents or attackers with Agent/Connect permission to read arbitrary files from the Jenkins controller's file system due to insufficient path restrictions permissions, which could lead to Privilege Escalation and Remote Code Execution (RCE) An update for OpenShift Jenkins is now available for Red Hat Product OCP Tools 4.14. • https://github.com/v9d0g/CVE-2024-43044-POC • CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') •

CVSS: 7.8EPSS: 0%CPEs: 2EXPL: 0

CVE-2024-34623

https://notcve.org/view.php?id=CVE-2024-34623

07 Aug 2024 — Out-of-bounds write in applying connected information in Samsung Notes prior to version 4.4.21.62 allows local attackers to potentially execute arbitrary code with Samsung Notes privilege. • https://security.samsungmobile.com/serviceWeb.smsb?year=2024&month=08 •

CVSS: 7.8EPSS: 0%CPEs: 1EXPL: 0

CVE-2024-34622

https://notcve.org/view.php?id=CVE-2024-34622

07 Aug 2024 — Out-of-bounds write in appending paragraph in Samsung Notes prior to version 4.4.21.62 allows local attackers to potentially execute arbitrary code with Samsung Notes privilege. • https://security.samsungmobile.com/serviceWeb.smsb?year=2024&month=08 •

CVSS: 10.0EPSS: 0%CPEs: 2EXPL: 0

CVE-2024-34619

https://notcve.org/view.php?id=CVE-2024-34619

07 Aug 2024 — Improper input validation in librtp.so prior to SMR Aug-2024 Release 1 allows remote attackers to execute arbitrary code with system privilege. • https://security.samsungmobile.com/securityUpdate.smsb?year=2024&month=08 •

CVSS: 7.8EPSS: 0%CPEs: 1EXPL: 0

CVE-2024-34614

https://notcve.org/view.php?id=CVE-2024-34614

07 Aug 2024 — Out-of-bound write in libsmat.so prior to SMR Aug-2024 Release 1 allows local attackers to execute arbitrary code. • https://security.samsungmobile.com/securityUpdate.smsb?year=2024&month=08 •