Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
vulnerabilities and exploits
(subscribe to this query)
NA
CVE-2024-24195
robdns commit d76d2e6 exists to contain a misaligned address at /src/zonefile-insertion.c.
NA
CVE-2024-24192
robdns commit d76d2e6 exists to contain a heap overflow via the component block->filename at /src/zonefile-insertion.c.
NA
CVE-2024-24194
robdns commit d76d2e6 exists to contain a NULL pointer dereference via the item->tokens component at /src/conf-parse.c.
NA
CVE-2024-36774
An arbitrary file upload vulnerability in Monstra CMS v3.0.4 allows malicious users to execute arbitrary code via uploading a crafted PHP file.
NA
CVE-2024-36795
Insecure permissions in Netgear WNR614 JNR1010V2/N300-V1.1.0.54_1.0.1 allows malicious users to access URLs and directories embedded within the firmware via unspecified vectors.
NA
CVE-2024-22074
Dynamsoft Service 1.8.1025 up to and including 1.8.2013, 1.7.0330 up to and including 1.7.2531, 1.6.0428 up to and including 1.6.1112, 1.5.0625 up to and including 1.5.3116, 1.4.0618 up to and including 1.4.1230, and 1.0.516 up to and including 1.3.0115 has Incorrect Access Contr...
NA
CVE-2024-3166
A Cross-Site Scripting (XSS) vulnerability exists in mintplex-labs/anything-llm, affecting both the desktop application version 1.2.0 and the latest version of the web application. The vulnerability arises from the application's feature to fetch and embed content from websit...
NA
CVE-2024-3234
The gaizhenbiao/chuanhuchatgpt application is vulnerable to a path traversal attack due to its use of an outdated gradio component. The application is designed to restrict user access to resources within the `web_assets` folder. However, the outdated version of gradio it employs ...
NA
CVE-2024-3402
A stored Cross-Site Scripting (XSS) vulnerability existed in version (20240121) of gaizhenbiao/chuanhuchatgpt due to inadequate sanitization and validation of model output data. Despite user-input validation efforts, the application fails to properly sanitize or validate the outp...
NA
CVE-2024-3408
man-group/dtale version 3.10.0 is vulnerable to an authentication bypass and remote code execution (RCE) due to improper input validation. The vulnerability arises from a hardcoded `SECRET_KEY` in the flask configuration, allowing malicious users to forge a session cookie if auth...
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-5248
CVE-2024-3110
CVE-2024-5552
CVE-2024-29415
HTML injection
CVE-2024-3095
TCP
type confusion
CVE-2024-1800
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
« PREV
1
2
3
4
5
6
7
NEXT »