Vulnerabilities

DATE CVE VULNERABILITY TITLE RISK
2024-12-12 CVE-2024-12489 Injection vulnerability in Fabian Online Class and Exam Scheduling System 1.0
A vulnerability was found in code-projects Online Class and Exam Scheduling System 1.0.
network
low complexity
fabian CWE-74
8.8
2024-12-11 CVE-2024-10251 Incorrect Default Permissions vulnerability in Ivanti Security Controls
Under specific circumstances, insecure permissions in Ivanti Security Controls before version 2024.4.1 allows a local authenticated attacker to achieve local privilege escalation.
local
low complexity
ivanti CWE-276
7.8
2024-12-11 CVE-2024-11597 Incorrect Default Permissions vulnerability in Ivanti Performance Manager 2023.3/2024.1/2024.3
Under specific circumstances, insecure permissions in Ivanti Performance Manager before version 2024.3 HF1, 2024.1 HF1, or 2023.3 HF1 allows a local authenticated attacker to achieve local privilege escalation.
local
low complexity
ivanti CWE-276
7.8
2024-12-11 CVE-2024-11598 Incorrect Default Permissions vulnerability in Ivanti Application Control 2023.3/2024.1/2024.3
Under specific circumstances, insecure permissions in Ivanti Application Control before version 2024.3 HF1, 2024.1 HF2, or 2023.3 HF3 allows a local authenticated attacker to achieve local privilege escalation.
local
low complexity
ivanti CWE-276
7.8
2024-12-11 CVE-2024-47760 Unspecified vulnerability in Glpi-Project Glpi
GLPI is a free asset and IT management software package.
network
low complexity
glpi-project
8.8
2024-12-11 CVE-2024-47761 Improper Authentication vulnerability in Glpi-Project Glpi
GLPI is a free asset and IT management software package.
network
low complexity
glpi-project CWE-287
7.2
2024-12-11 CVE-2024-48912 Unspecified vulnerability in Glpi-Project Glpi
GLPI is a free asset and IT management software package.
network
low complexity
glpi-project
8.1
2024-12-11 CVE-2024-8496 Incorrect Default Permissions vulnerability in Ivanti Workspace Control
Under specific circumstances, insecure permissions in Ivanti Workspace Control before version 10.18.40.0 allows a local authenticated attacker to achieve local privilege escalation.
local
low complexity
ivanti CWE-276
7.8
2024-12-11 CVE-2024-9845 Incorrect Default Permissions vulnerability in Ivanti Automation
Under specific circumstances, insecure permissions in Ivanti Automation before version 2024.4.0.1 allows a local authenticated attacker to achieve local privilege escalation.
local
low complexity
ivanti CWE-276
7.8
2024-12-11 CVE-2024-47758 Unspecified vulnerability in Glpi-Project Glpi
GLPI is a free asset and IT management software package.
network
low complexity
glpi-project
8.8