Vulnerabilities

DATE CVE VULNERABILITY TITLE RISK
2024-11-05 CVE-2024-49377 Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in Octoprint
OctoPrint provides a web interface for controlling consumer 3D printers.
network
low complexity
octoprint CWE-80
6.1
2024-11-05 CVE-2024-49772 SQL Injection vulnerability in Salesagility Suitecrm
SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) software application.
network
low complexity
salesagility CWE-89
8.8
2024-11-05 CVE-2024-49773 SQL Injection vulnerability in Salesagility Suitecrm
SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) software application.
network
low complexity
salesagility CWE-89
6.5
2024-11-05 CVE-2024-49774 Unspecified vulnerability in Salesagility Suitecrm
SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) software application.
network
low complexity
salesagility
7.2
2024-11-05 CVE-2024-50332 SQL Injection vulnerability in Salesagility Suitecrm
SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) software application.
network
low complexity
salesagility CWE-89
8.8
2024-11-05 CVE-2024-50333 Unspecified vulnerability in Salesagility Suitecrm
SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) software application.
network
low complexity
salesagility
8.8
2024-11-05 CVE-2024-50335 Cross-site Scripting vulnerability in Salesagility Suitecrm
SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) software application.
network
low complexity
salesagility CWE-79
5.4
2024-11-05 CVE-2024-51493 Missing Authentication for Critical Function vulnerability in Octoprint
OctoPrint provides a web interface for controlling consumer 3D printers.
network
low complexity
octoprint CWE-306
6.5
2024-11-05 CVE-2024-51740 Server-Side Request Forgery (SSRF) vulnerability in Combodo Itop
Combodo iTop is a simple, web based IT Service Management tool.
network
low complexity
combodo CWE-918
8.8
2024-11-05 CVE-2024-50098 Unspecified vulnerability in Linux Kernel
In the Linux kernel, the following vulnerability has been resolved: scsi: ufs: core: Set SDEV_OFFLINE when UFS is shut down There is a history of deadlock if reboot is performed at the beginning of booting.
local
low complexity
linux
5.5