Vulnerabilities
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2024-11-10 | CVE-2024-51584 | Cross-site Scripting vulnerability in Anasedreesi Marquee Elementor With Posts Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Anas Edreesi Marquee Elementor with Posts allows DOM-Based XSS.This issue affects Marquee Elementor with Posts: from n/a through 1.2.0. | 5.4 |
| 2024-11-10 | CVE-2024-11051 | SQL Injection vulnerability in Amttgroup Hotel Broadband Operating System A vulnerability was found in AMTT Hotel Broadband Operation System up to 3.0.3.151204. | 8.8 |
| 2024-11-10 | CVE-2024-11050 | Cross-site Scripting vulnerability in Amttgroup Hotel Broadband Operating System A vulnerability was found in AMTT Hotel Broadband Operation System up to 3.0.3.151204 and classified as problematic. | 5.4 |
| 2024-11-10 | CVE-2024-11049 | Forced Browsing vulnerability in Zkteco Zkbio Time 9.0.1 A vulnerability classified as problematic has been found in ZKTeco ZKBio Time 9.0.1. | 3.7 |
| 2024-11-10 | CVE-2024-11047 | Stack-based Buffer Overflow vulnerability in Dlink Di-8003 Firmware 16.07.16A1 A vulnerability was found in D-Link DI-8003 16.07.16A1. | 9.8 |
| 2024-11-10 | CVE-2024-11048 | Stack-based Buffer Overflow vulnerability in Dlink Di-8003 Firmware 16.07.16A1 A vulnerability was found in D-Link DI-8003 16.07.16A1. | 9.8 |
| 2024-11-10 | CVE-2024-11046 | Command Injection vulnerability in Dlink Di-8003 Firmware 16.07.16A1 A vulnerability was found in D-Link DI-8003 16.07.16A1. | 9.8 |
| 2024-11-09 | CVE-2024-36250 | Authentication Bypass by Capture-replay vulnerability in Mattermost Server Mattermost versions 9.11.x <= 9.11.2, and 9.5.x <= 9.5.10 fail to protect the mfa code against replay attacks, which allows an attacker to reuse the MFA code within ~30 seconds | 4.8 |
| 2024-11-09 | CVE-2024-42000 | Incorrect Authorization vulnerability in Mattermost Server Mattermost versions 9.10.x <= 9.10.2, 9.11.x <= 9.11.1, 9.5.x <= 9.5.9 and 10.0.x <= 10.0.0 fail to properly authorize the requests to /api/v4/channels which allows a User or System Manager, with "Read Groups" permission but with no access for channels to retrieve details about private channels that they were not a member of by sending a request to /api/v4/channels. | 4.3 |
| 2024-11-09 | CVE-2024-52032 | Unspecified vulnerability in Mattermost Server Mattermost versions 10.0.x <= 10.0.0 and 9.11.x <= 9.11.2 fail to properly query ElasticSearch when searching for the channel name in channel switcher which allows an attacker to get private channels names of channels that they are not a member of, when Elasticsearch v8 was enabled. | 4.3 |