CVE-2024-21529 : DSET UP TO 3.1.3 PROTOTYPE POLLUTION
Description Versions of the package dset before 3.1.4 are vulnerable to Prototype Pollution via the dset function due improper user
CVE-2024-43690 : GALLAGHER COMMAND CENTRE SERVER INCLUSION OF FUNCTIONALITY FROM UNTRUSTED CONTROL SPHERE
Description Inclusion of Functionality from Untrusted Control Sphere(CWE-829) in the Command Centre Server and Workstations may allow an attacker to
CVE-2024-8503 : VICIDIAL 2.14-917A SQL INJECTION
Description An unauthenticated attacker can leverage a time-based SQL injection vulnerability in VICIdial to enumerate database records. By default, VICIdial
CVE-2024-45409 : SAML-TOOLKITS RUBY-SAML UP TO 1.12.2/1.16.X SAML RESPONSE SIGNATURE VERIFICATION
Description The Ruby SAML library is for implementing the client side of a SAML authorization. Ruby-SAML in
CVE-2024-44107 : IVANTI WORKSPACE CONTROL UP TO 10.18.50.0 MANAGEMENT CONSOLE UNCONTROLLED SEARCH PATH
Description DLL hijacking in the management console of Ivanti Workspace Control version 10.18.0.0 and below allows a local authenticated attacker
CVE-2024-45590 : EXPRESSJS BODY-PARSER UP TO 1.20.2 AMPLIFICATION
Description body-parser is Node.js body parsing middleware. body-parser
CVE-2024-8232 : ININET SOLUTIONS SPIDERCONTROL SCADA WEB SERVER UP TO 2.09 FILE UNRESTRICTED UPLOAD
Description SpiderControl SCADA Web Server has a vulnerability that could allow an attacker to upload specially crafted malicious files without
CVE-2024-45593 : NIXOS NIX UP TO 2.24.5 NAR PATH TRAVERSAL
Description Nix is a package manager for Linux and other Unix systems. A bug in Nix 2.24 prior to 2.24.6
CVE-2024-31960 : SAMSUNG EXYNOS 1480/EXYNOS 2400 XCLIPSE AMDGPU DRIVER REFERENCE COUNT
Description An issue was discovered in Samsung Mobile Processor Exynos 1480, Exynos 2400. The xclipse amdgpu driver has a reference
CVE-2024-42423 : DELL WYSE PROPRIETARY OS 2311/2402 CITRIX WORKSPACE APP AUTHORIZATION
Description Citrix Workspace App version 23.9.0.24.4 on Dell ThinOS 2311 contains an Incorrect Authorization vulnerability when Citrix CEB is enabled