CVE-2024-7059

CVE-2024-7059

Título es
CVE-2024-7059

Mar, 05/11/2024 – 13:15

Tipo
CWE-470

Gravedad 2.0 Txt
Pendiente de análisis

Título en

CVE-2024-7059

Descripción en
A high-severity vulnerability that can lead to arbitrary code execution on the system hosting the Web SDK role was found in the Genetec Security Center product line.

05/11/2024
05/11/2024
Vector CVSS:4.0
CVSS:4.0/AV:N/AC:H/AT:P/PR:H/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Gravedad 4.0
8.90

Gravedad 4.0 txt
HIGH

Gravedad 3.1 Txt Gravedad 3.1 (CVSS 3.1 Base Score)
Pendiente de análisis

Referencias

  • https://resources.genetec.com/security-advisories/high-severity-vulnerability-affecting-security-center-web-sdk-role

  • https://ressources.genetec.com/bulletins-de-securite/vulnerabilite-de-haute-severite-affectant-le-role-sdk-web-de-security-center

    • Enviar en el boletín
    Off

    CVE-2024-10840

    CVE-2024-10840

    Título es
    CVE-2024-10840

    Mar, 05/11/2024 – 13:15

    Tipo
    CWE-707

    Gravedad v2.0
    3.30

    Gravedad 2.0 Txt
    LOW

    Título en

    CVE-2024-10840

    Descripción en
    A vulnerability classified as problematic has been found in romadebrian WEB-Sekolah 1.0. Affected is an unknown function of the file /Admin/akun_edit.php of the component Backend. The manipulation of the argument kode leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.

    05/11/2024
    05/11/2024
    Vector CVSS:4.0
    CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

    Vector CVSS:3.1
    CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:N

    Vector CVSS:2.0
    AV:N/AC:L/Au:M/C:N/I:P/A:N

    Gravedad 4.0
    5.10

    Gravedad 4.0 txt
    MEDIUM

    Gravedad 3.1 (CVSS 3.1 Base Score)
    2.40

    Gravedad 3.1 Txt Gravedad 3.1 (CVSS 3.1 Base Score)
    LOW

    Referencias

  • https://github.com/2537463005/a/blob/main/WEB-Sekolah%E5%90%8E%E5%8F%B0%E5%AD%98%E5%82%A8%E5%9E%8Bxss.md

  • https://vuldb.com/?ctiid_283086=

  • https://vuldb.com/?id_283086=

    • Enviar en el boletín
    Off

    CVE-2024-10263

    CVE-2024-10263

    Título es
    CVE-2024-10263

    Mar, 05/11/2024 – 13:15

    Tipo
    CWE-94

    Gravedad 2.0 Txt
    Pendiente de análisis

    Título en

    CVE-2024-10263

    Descripción en
    The Tickera – WordPress Event Ticketing plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 3.5.4.4. This is due to the software allowing users to execute an action that does not properly validate a value before running do_shortcode. This makes it possible for unauthenticated attackers to execute arbitrary shortcodes.

    05/11/2024
    05/11/2024
    Vector CVSS:3.1
    CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

    Gravedad 3.1 (CVSS 3.1 Base Score)
    7.30

    Gravedad 3.1 Txt Gravedad 3.1 (CVSS 3.1 Base Score)
    HIGH

    Referencias

  • https://plugins.trac.wordpress.org/changeset/3179272/tickera-event-ticketing-system

  • https://www.wordfence.com/threat-intel/vulnerabilities/id/6e5e9249-9705-4cfa-9c8e-2e002190562b?source=cve

    • Enviar en el boletín
    Off

    CVE-2024-10329

    CVE-2024-10329

    Título es
    CVE-2024-10329

    Mar, 05/11/2024 – 14:15

    Tipo
    CWE-200

    Gravedad 2.0 Txt
    Pendiente de análisis

    Título en

    CVE-2024-10329

    Descripción en
    The Ultimate Bootstrap Elements for Elementor plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.4.6 via the 'ube_get_page_templates' function. This makes it possible for authenticated attackers, with Contributor-level access and above, to extract sensitive data including the contents of templates that are private.

    05/11/2024
    05/11/2024
    Vector CVSS:3.1
    CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

    Gravedad 3.1 (CVSS 3.1 Base Score)
    4.30

    Gravedad 3.1 Txt Gravedad 3.1 (CVSS 3.1 Base Score)
    MEDIUM

    Referencias

  • https://plugins.trac.wordpress.org/browser/ultimate-bootstrap-elements-for-elementor/trunk/inc/functions/core.php#L239

  • https://plugins.trac.wordpress.org/changeset/3176562/

  • https://www.wordfence.com/threat-intel/vulnerabilities/id/3af83ec2-9ebb-4cca-8523-8fe9b1517825?source=cve

    • Enviar en el boletín
    Off

    CVE-2024-10842

    CVE-2024-10842

    Título es
    CVE-2024-10842

    Mar, 05/11/2024 – 14:15

    Tipo
    CWE-707

    Gravedad v2.0
    3.30

    Gravedad 2.0 Txt
    LOW

    Título en

    CVE-2024-10842

    Descripción en
    A vulnerability, which was classified as problematic, has been found in romadebrian WEB-Sekolah 1.0. Affected by this issue is some unknown functionality of the file /Admin/Proses_Edit_Akun.php of the component Backend. The manipulation of the argument Username_Baru/Password leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.

    05/11/2024
    05/11/2024
    Vector CVSS:4.0
    CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

    Vector CVSS:3.1
    CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:N

    Vector CVSS:2.0
    AV:N/AC:L/Au:M/C:N/I:P/A:N

    Gravedad 4.0
    5.10

    Gravedad 4.0 txt
    MEDIUM

    Gravedad 3.1 (CVSS 3.1 Base Score)
    2.40

    Gravedad 3.1 Txt Gravedad 3.1 (CVSS 3.1 Base Score)
    LOW

    Referencias

  • https://github.com/2537463005/a/blob/main/WEB-Sekolah%E5%90%8E%E5%8F%B0%E5%AD%98%E5%82%A8%E5%9E%8Bxss.md

  • https://vuldb.com/?ctiid_283088=

  • https://vuldb.com/?id_283088=

  • https://vuldb.com/?submit_429558=

    • Enviar en el boletín
    Off

    CVE-2024-10841

    CVE-2024-10841

    Título es
    CVE-2024-10841

    Mar, 05/11/2024 – 14:15

    Tipo
    CWE-707

    Gravedad v2.0
    6.50

    Gravedad 2.0 Txt
    MEDIUM

    Título en

    CVE-2024-10841

    Descripción en
    A vulnerability classified as critical was found in romadebrian WEB-Sekolah 1.0. Affected by this vulnerability is an unknown functionality of the file /Proses_Kirim.php of the component Mail Handler. The manipulation of the argument Name leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well.

    05/11/2024
    05/11/2024
    Vector CVSS:4.0
    CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

    Vector CVSS:3.1
    CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L

    Vector CVSS:2.0
    AV:N/AC:L/Au:S/C:P/I:P/A:P

    Gravedad 4.0
    5.30

    Gravedad 4.0 txt
    MEDIUM

    Gravedad 3.1 (CVSS 3.1 Base Score)
    5.50

    Gravedad 3.1 Txt Gravedad 3.1 (CVSS 3.1 Base Score)
    MEDIUM

    Referencias

  • https://github.com/2537463005/a/blob/main/WEB-Sekolah%E5%90%8E%E5%8F%B0%E5%AD%98%E5%82%A8%E5%9E%8Bxss.md

  • https://vuldb.com/?ctiid_283087=

  • https://vuldb.com/?id_283087=

    • Enviar en el boletín
    Off

    CVE-2024-51524

    CVE-2024-51524

    Título es
    CVE-2024-51524

    Mar, 05/11/2024 – 10:21

    Tipo
    CWE-264

    Gravedad 2.0 Txt
    Pendiente de análisis

    Título en

    CVE-2024-51524

    Descripción en
    Permission control vulnerability in the Wi-Fi module
    Impact: Successful exploitation of this vulnerability may affect service confidentiality.

    05/11/2024
    05/11/2024
    Vector CVSS:3.1
    CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

    Gravedad 3.1 (CVSS 3.1 Base Score)
    4.00

    Gravedad 3.1 Txt Gravedad 3.1 (CVSS 3.1 Base Score)
    MEDIUM

    Referencias

  • https://consumer.huawei.com/en/support/bulletin/2024/11/

    • Enviar en el boletín
    Off

    CVE-2024-51523

    CVE-2024-51523

    Título es
    CVE-2024-51523

    Mar, 05/11/2024 – 10:21

    Tipo
    CWE-840

    Gravedad 2.0 Txt
    Pendiente de análisis

    Título en

    CVE-2024-51523

    Descripción en
    Information management vulnerability in the Gallery module
    Impact: Successful exploitation of this vulnerability may affect service confidentiality.

    05/11/2024
    05/11/2024
    Vector CVSS:3.1
    CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N

    Gravedad 3.1 (CVSS 3.1 Base Score)
    7.10

    Gravedad 3.1 Txt Gravedad 3.1 (CVSS 3.1 Base Score)
    HIGH

    Referencias

  • https://consumer.huawei.com/en/support/bulletin/2024/11/

    • Enviar en el boletín
    Off

    CVE-2024-51526

    CVE-2024-51526

    Título es
    CVE-2024-51526

    Mar, 05/11/2024 – 10:21

    Tipo
    CWE-347

    Gravedad 2.0 Txt
    Pendiente de análisis

    Título en

    CVE-2024-51526

    Descripción en
    Permission control vulnerability in the hidebug module
    Impact: Successful exploitation of this vulnerability may affect service confidentiality.

    05/11/2024
    05/11/2024
    Vector CVSS:3.1
    CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

    Gravedad 3.1 (CVSS 3.1 Base Score)
    8.20

    Gravedad 3.1 Txt Gravedad 3.1 (CVSS 3.1 Base Score)
    HIGH

    Referencias

  • https://consumer.huawei.com/en/support/bulletin/2024/11/

    • Enviar en el boletín
    Off

    CVE-2024-51525

    CVE-2024-51525

    Título es
    CVE-2024-51525

    Mar, 05/11/2024 – 10:21

    Tipo
    CWE-264

    Gravedad 2.0 Txt
    Pendiente de análisis

    Título en

    CVE-2024-51525

    Descripción en
    Permission control vulnerability in the clipboard module
    Impact: Successful exploitation of this vulnerability may affect service confidentiality.

    05/11/2024
    05/11/2024
    Vector CVSS:3.1
    CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

    Gravedad 3.1 (CVSS 3.1 Base Score)
    6.20

    Gravedad 3.1 Txt Gravedad 3.1 (CVSS 3.1 Base Score)
    MEDIUM

    Referencias

  • https://consumer.huawei.com/en/support/bulletin/2024/11/

    • Enviar en el boletín
    Off