IT-Sentinel

> CVE-2024-45918 [CRITICAL 9.8]

[PUBLISHED: 2024-10-08] [EPSS 0.42%]

Fujian Kelixin Communication Command and Dispatch Platform <=7.6.6.4391 is vulnerable to SQL Injection via /client/get_gis_fence.php.

> CVE-2024-44349 [CRITICAL 9.8]

[PUBLISHED: 2024-10-08] [EPSS 5.78%] [🎯 NUCLEI]

A SQL injection vulnerability in login portal in AnteeoWMS before v4.7.34 allows unauthenticated attackers to execute arbitrary SQL commands via the username parameter and disclosure of some data in the underlying DB.

> CVE-2024-3057 [CRITICAL 9.8]

[PUBLISHED: 2024-10-08] [EPSS 0.42%]

A flaw exists whereby a user can make a specific call to a FlashArray endpoint allowing privilege escalation.

> CVE-2024-8215 [HIGH 8.4]

[PUBLISHED: 2024-10-08] [EPSS 0.45%]

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Payara Platform Payara Server (Admin Console modules) allows Remote Code Inclusion.This issue affects Payara Server: from 5.20.0 before 5.68.0, from 6.0.0 before 6.19.0, from 6.2022.1 before...

AFFECTED_PRODUCTS: Payara Payara, Payara Payara, Payara Payara ... (+1)

> CVE-2024-47951 [LOW 3.5]

[PUBLISHED: 2024-10-08] [EPSS 1.41%]

In JetBrains TeamCity before 2024.07.3 stored XSS was possible via server global settings

AFFECTED_PRODUCTS: Jetbrains TeamCity

> CVE-2024-47950 [LOW 3.5]

[PUBLISHED: 2024-10-08] [EPSS 1.41%]

In JetBrains TeamCity before 2024.07.3 stored XSS was possible in Backup configuration settings

AFFECTED_PRODUCTS: Jetbrains TeamCity

> CVE-2024-47949 [MEDIUM 4.9]

[PUBLISHED: 2024-10-08] [⚡ EPSS 32.1%]

In JetBrains TeamCity before 2024.07.3 path traversal allowed backup file write to arbitrary location

AFFECTED_PRODUCTS: Jetbrains TeamCity

> CVE-2024-47948 [MEDIUM 4.9]

[PUBLISHED: 2024-10-08] [EPSS 0.53%]

In JetBrains TeamCity before 2024.07.3 path traversal leading to information disclosure was possible via server backups

AFFECTED_PRODUCTS: Jetbrains TeamCity

> CVE-2024-47161 [MEDIUM 4.3]

[PUBLISHED: 2024-10-08] [EPSS 0.31%]

In JetBrains TeamCity before 2024.07.3 password could be exposed via Sonar runner REST API

AFFECTED_PRODUCTS: Jetbrains TeamCity

> CVE-2024-45231 [MEDIUM 5.3]

[PUBLISHED: 2024-10-08] [EPSS 0.79%]

An issue was discovered in Django v5.1.1, v5.0.9, and v4.2.16. The django.contrib.auth.forms.PasswordResetForm class, when used in a view implementing password reset flows, allows remote attackers to enumerate user e-mail addresses by sending password reset requests and observing the outcome (only w...

AFFECTED_PRODUCTS: Djangoproject Django, Djangoproject Django, Djangoproject Django

> CVE-2024-45230 [HIGH 7.5]

[PUBLISHED: 2024-10-08] [⚡ EPSS 25.8%]

An issue was discovered in Django 5.1 before 5.1.1, 5.0 before 5.0.9, and 4.2 before 4.2.16. The urlize() and urlizetrunc() template filters are subject to a potential denial-of-service attack via very large inputs with a specific sequence of characters.

AFFECTED_PRODUCTS: Djangoproject Django, Djangoproject Django, Djangoproject Django

> CVE-2024-45880 [HIGH 8.0]

[PUBLISHED: 2024-10-08] [EPSS 0.94%]

A command injection vulnerability exists in Motorola CX2L router v1.0.2 and below. The vulnerability is present in the SetStationSettings function. The system directly invokes the system function to execute commands for setting parameters such as MAC address without proper input filtering. This allo...

> CVE-2024-45330 [HIGH 7.2]

[PUBLISHED: 2024-10-08] [EPSS 0.63%]

A use of externally-controlled format string in Fortinet FortiAnalyzer versions 7.4.0 through 7.4.3, 7.2.2 through 7.2.5 allows attacker to escalate its privileges via specially crafted requests.

AFFECTED_PRODUCTS: Fortinet Fortianalyzer, Fortinet Fortianalyzer, Fortinet Fortianalyzer Cloud ... (+1)

> CVE-2024-33506 [LOW 3.3]

[PUBLISHED: 2024-10-08] [EPSS 0.45%]

An exposure of sensitive information to an unauthorized actor vulnerability [CWE-200] in FortiManager 7.4.2 and below, 7.2.5 and below, 7.0.12 and below allows a remote authenticated attacker assigned to an Administrative Domain (ADOM) to access device summary of unauthorized ADOMs via crafted HTTP...

AFFECTED_PRODUCTS: Fortinet FortiManager, Fortinet FortiManager

> CVE-2024-8482 [MEDIUM 6.4]

[PUBLISHED: 2024-10-08] [EPSS 0.44%]

The Royal Elementor Addons and Templates plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘url’ parameter in all versions up to, and including, 1.3.982 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contri...

AFFECTED_PRODUCTS: Royal-Elementor-Addons Royal Elementor Addons

> CVE-2024-8431 [MEDIUM 4.3]

[PUBLISHED: 2024-10-08] [EPSS 0.40%]

The Photo Gallery, Images, Slider in Rbs Image Gallery plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the ajaxGetGalleryJson() function in all versions up to, and including, 3.2.21. This makes it possible for authenticated attackers, with subsc...

> CVE-2024-9207 [MEDIUM 6.1]

[PUBLISHED: 2024-10-08] [EPSS 0.38%]

The BuddyPress Docs plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of remove_query_arg without appropriate escaping on the URL in all versions up to, and including, 2.2.3. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pag...

> CVE-2024-9005

[PUBLISHED: 2024-10-08] [EPSS 0.34%]

CWE-502: Deserialization of Untrusted Data vulnerability exists that could allow code to be remotely executed on the server when unsafely deserialized data is posted to the web server.

> CVE-2024-8884 [CRITICAL 9.8]

[PUBLISHED: 2024-10-08] [EPSS 0.58%]

CWE-200: Exposure of Sensitive Information to an Unauthorized Actor vulnerability exists that could cause exposure of credentials when attacker has access to application on network over http

> CVE-2024-8488 [MEDIUM 4.4]

[PUBLISHED: 2024-10-08] [EPSS 0.28%]

The Survey Maker plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Survey fields in all versions up to, and including, 4.9.7 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level permissions and ab...

AFFECTED_PRODUCTS: Ays-Pro Survey Maker

> CVE-2024-8629 [MEDIUM 6.1]

[PUBLISHED: 2024-10-08] [EPSS 0.44%]

The WooCommerce Multilingual & Multicurrency with WPML plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg without appropriate escaping on the URL in all versions up to, and including, 5.3.7. This makes it possible for unauthenticated attackers to inj...

> CVE-2024-8518 [LOW 3.3]

[PUBLISHED: 2024-10-08] [EPSS 0.16%]

CWE-20: Improper Input Validation vulnerability exists that could cause a crash of the Zelio Soft 2 application when a specially crafted project file is loaded by an application user.

> CVE-2024-8433 [MEDIUM 6.4]

[PUBLISHED: 2024-10-08] [EPSS 0.34%]

The Easy Mega Menu Plugin for WordPress – ThemeHunk plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘themehunk_megamenu_bg_image' parameter in all versions up to, and including, 1.1.0 due to insufficient input sanitization and output escaping. This makes it possible for aut...

> CVE-2024-8422 [HIGH 7.8]

[PUBLISHED: 2024-10-08] [EPSS 0.21%]

CWE-416: Use After Free vulnerability exists that could cause arbitrary code execution, denial of service and loss of confidentiality & integrity when application user opens a malicious Zelio Soft 2 project file.

AFFECTED_PRODUCTS: Schneider Electric Zelio Soft 2

> CVE-2024-3506 [MEDIUM 6.7]

[PUBLISHED: 2024-10-08] [EPSS 0.23%]

A possible buffer overflow in selected cameras' drivers from XProtect Device Pack can allow an attacker with access to internal network to execute commands on Recording Server under strict conditions.

> CVE-2024-8943 [CRITICAL 9.8]

[PUBLISHED: 2024-10-08] [EPSS 3.08%] [🎯 NUCLEI]

The LatePoint plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 5.0.12. This is due to insufficient verification on the user being supplied during the booking customer step. This makes it possible for unauthenticated attackers to log in as any existing us...

AFFECTED_PRODUCTS: Latepoint Latepoint

> CVE-2024-8911 [CRITICAL 9.8]

[PUBLISHED: 2024-10-08] [EPSS 2.90%] [🎯 NUCLEI]

The LatePoint plugin for WordPress is vulnerable to Arbitrary User Password Change via SQL Injection in versions up to, and including, 5.0.11. This is due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for...

AFFECTED_PRODUCTS: Latepoint Latepoint

> CVE-2024-47565 [MEDIUM 4.3]

[PUBLISHED: 2024-10-08] [EPSS 0.38%]

A vulnerability has been identified in Siemens SINEC Security Monitor (All versions < V4.9.0). The affected application does not properly validate that user input complies with a list of allowed values. This could allow an authenticated remote attacker to compromise the integrity of the configurati...

AFFECTED_PRODUCTS: Siemens Sinec Security Monitor

> CVE-2024-47563 [MEDIUM 5.3]

[PUBLISHED: 2024-10-08] [EPSS 0.55%]

A vulnerability has been identified in Siemens SINEC Security Monitor (All versions < V4.9.0). The affected application does not properly validate a file path that is supplied to an endpoint intended to create CSR files. This could allow an unauthenticated remote attacker to create files in writabl...

AFFECTED_PRODUCTS: Siemens Sinec Security Monitor

> CVE-2024-47562 [HIGH 8.8]

[PUBLISHED: 2024-10-08] [EPSS 0.27%]

A vulnerability has been identified in Siemens SINEC Security Monitor (All versions < V4.9.0). The affected application does not properly neutralize special elements in user input to the ```ssmctl-client``` command. This could allow an authenticated, lowly privileged local attacker to execute privi...

AFFECTED_PRODUCTS: Siemens Sinec Security Monitor

> CVE-2024-47553 [CRITICAL 9.9]

[PUBLISHED: 2024-10-08] [EPSS 0.85%]

A vulnerability has been identified in Siemens SINEC Security Monitor (All versions < V4.9.0). The affected application does not properly validate user input to the ```ssmctl-client``` command. This could allow an authenticated, lowly privileged remote attacker to execute arbitrary code with root p...

AFFECTED_PRODUCTS: Siemens Sinec Security Monitor

> CVE-2024-47196 [MEDIUM 6.7]

[PUBLISHED: 2024-10-08] [EPSS 0.15%]

A vulnerability has been identified in ModelSim (All versions < V2025.2), Questa (All versions < V2025.2). vsimk.exe in affected applications allows a specific tcl file to be loaded from the current working directory. This could allow an authenticated local attacker to inject arbitrary code and esca...

AFFECTED_PRODUCTS: Siemens Modelsim, Siemens Questa

> CVE-2024-47195 [MEDIUM 6.7]

[PUBLISHED: 2024-10-08] [EPSS 0.15%]

A vulnerability has been identified in ModelSim (All versions < V2024.3), Questa (All versions < V2024.3). gdb.exe in affected applications allows a specific executable file to be loaded from the current working directory. This could allow an authenticated local attacker to inject arbitrary code and...

AFFECTED_PRODUCTS: Siemens Modelsim, Siemens Questa

> CVE-2024-47194 [MEDIUM 6.7]

[PUBLISHED: 2024-10-08] [EPSS 0.15%]

A vulnerability has been identified in ModelSim (All versions < V2024.3), Questa (All versions < V2024.3). vish2.exe in affected applications allows a specific DLL file to be loaded from the current working directory. This could allow an authenticated local attacker to inject arbitrary code and esca...

AFFECTED_PRODUCTS: Siemens Modelsim, Siemens Questa

> CVE-2024-47046 [HIGH 7.8]

[PUBLISHED: 2024-10-08] [EPSS 0.24%]

A vulnerability has been identified in Simcenter Femap V2306 (All versions), Simcenter Femap V2401 (All versions), Simcenter Femap V2406 (All versions). The affected application is vulnerable to memory corruption while parsing specially crafted BDF files. This could allow an attacker to execute code...

AFFECTED_PRODUCTS: Siemens Simcenter Nastran

> CVE-2024-46887 [MEDIUM 5.3]

[PUBLISHED: 2024-10-08] [EPSS 0.56%]

The web server of affected devices do not properly authenticate user request to the '/ClientArea/RuntimeInfoData.mwsl' endpoint. This could allow an unauthenticated remote attacker to gain knowledge about current actual and configured maximum cycle times as well as about configured maximum communica...

> CVE-2024-46886 [MEDIUM 4.7]

[PUBLISHED: 2024-10-08] [EPSS 0.40%]

The web server of affected devices does not properly validate input that is used for a user redirection. This could allow an attacker to make the server redirect the legitimate user to an attacker-chosen URL. For a successful exploit, the legitimate user must actively click on an attacker-crafted li...

> CVE-2024-45476 [LOW 3.3]

[PUBLISHED: 2024-10-08] [EPSS 0.17%]

A vulnerability has been identified in Teamcenter Visualization V14.2 (All versions < V14.2.0.14), Teamcenter Visualization V14.3 (All versions < V14.3.0.12), Teamcenter Visualization V2312 (All versions < V2312.0008), Tecnomatix Plant Simulation V2302 (All versions < V2302.0016), Tecnomatix Plant S...