Vulnerabilities > Low

DATE CVE VULNERABILITY TITLE RISK
2024-10-29 CVE-2024-10452 Authorization Bypass Through User-Controlled Key vulnerability in Grafana 10.4.0
Organization admins can delete pending invites created in an organization they are not part of.
network
low complexity
grafana CWE-639
2.7
2024-10-29 CVE-2024-48921 Incorrect Authorization vulnerability in Nirmata Kyverno
Kyverno is a policy engine designed for Kubernetes.
network
low complexity
nirmata CWE-863
2.7
2024-10-29 CVE-2024-41156 Improper Cross-boundary Removal of Sensitive Data vulnerability in Hitachienergy Tro610 Firmware, Tro620 Firmware and Tro670 Firmware
Profile files from TRO600 series radios are extracted in plain-text and encrypted file formats.
network
low complexity
hitachienergy CWE-212
2.7
2024-10-28 CVE-2024-27849 Information Exposure Through Log Files vulnerability in Apple Macos
A privacy issue was addressed with improved private data redaction for log entries.
local
low complexity
apple CWE-532
3.3
2024-10-28 CVE-2024-40792 Unspecified vulnerability in Apple Macos
A permissions issue was addressed with additional restrictions.
local
low complexity
apple
3.3
2024-10-28 CVE-2024-40851 Unspecified vulnerability in Apple Ipados
This issue was addressed by restricting options offered on a locked device.
low complexity
apple
2.4
2024-10-28 CVE-2024-40853 Unspecified vulnerability in Apple Iphone OS
This issue was addressed by restricting options offered on a locked device.
local
low complexity
apple
3.3
2024-10-28 CVE-2024-44123 Unspecified vulnerability in Apple Macos
A permissions issue was addressed with additional restrictions.
local
low complexity
apple
2.3
2024-10-28 CVE-2024-44222 Insecure Storage of Sensitive Information vulnerability in Apple Macos
This issue was addressed with improved redaction of sensitive information.
local
low complexity
apple CWE-922
3.3
2024-10-28 CVE-2024-44251 Unspecified vulnerability in Apple Ipados
This issue was addressed through improved state management.
low complexity
apple
2.4