Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
vulnerabilities and exploits
(subscribe to this query)
NA
CVE-2024-35311
Yubico YubiKey 5 Series prior to 5.7.0, Security Key Series prior to 5.7.0, YubiKey Bio Series prior to 5.6.4, and YubiKey 5 FIPS prior to 5.7.2 have Incorrect Access Control.
NA
CVE-2024-36427
The file-serving function in TARGIT Decision Suite 23.2.15007 allows authenticated malicious users to read or write to server files via a crafted file request. This can allow code execution via a .xview file.
NA
CVE-2024-35284
A vulnerability in the legacy chat component of Mitel MiContact Center Business up to and including 10.0.0.4 could allow an unauthenticated malicious user to conduct a reflected cross-site scripting (XSS) attack due to insufficient input validation.
NA
CVE-2024-4358
In Progress Telerik Report Server, version 2024 Q1 (10.0.24.305) or earlier, on IIS, an unauthenticated attacker can gain access to Telerik Report Server restricted functionality via an authentication bypass vulnerability.
NA
CVE-2024-36363
In JetBrains TeamCity prior to 2022.04.6, 2022.10.5, 2023.05.5, 2023.11.5 several Stored XSS in code inspection reports were possible
NA
CVE-2024-36369
In JetBrains TeamCity prior to 2022.04.6, 2022.10.5, 2023.05.5, 2023.11.5 stored XSS via issue tracker integration was possible
NA
CVE-2024-36377
In JetBrains TeamCity prior to 2024.03.2 certain TeamCity API endpoints did not check user permissions
NA
CVE-2024-36470
In JetBrains TeamCity prior to 2022.04.6, 2022.10.5, 2023.05.5, 2023.11.5 authentication bypass was possible in specific edge cases
NA
CVE-2024-36367
In JetBrains TeamCity prior to 2022.04.6, 2022.10.5, 2023.05.5, 2023.11.5 stored XSS via third-party reports was possible
NA
CVE-2024-36372
In JetBrains TeamCity prior to 2023.05.5 reflected XSS on the subscriptions page was possible
VMScore
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-4956
validation
CVE-2024-35221
remote attackers
CVE-2023-30309
CVE-2024-36112
CVE-2024-23109
CVE-2023-43850
stored XSS
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
« PREV
1
2
3
4
5
6
7
8
9
NEXT »