Threat and Vulnerability Intelligence Database

Example Searches:

CVE-2024-5716	Logsign Unified SecOps Platform Authentication Bypass Vulnerability Description: Logsign Unified SecOps Platform Authentication Bypass Vulnerability. This vulnerability allows remote attackers to bypass authentication on affected installations of Logsign Unified SecOps Platform. Authentication is not required to exploit this vulnerability. The specific flaw exists within the password reset mechanism. The issue results from the lack of restriction of excessive authentication attempts. An attacker can leverage this vulnerability to reset a user's password and bypass authentication on the system. Was ZDI-CAN-24164. CVSS: HIGH (8.6) EPSS Score: 0.05% Source: CVE November 27th, 2024 (5 months ago)
CVE-2024-53976	Description: Under certain circumstances, navigating to a webpage would result in the address missing from the location URL bar, making it unclear what the URL was for the loaded webpage. This vulnerability affects Firefox for iOS < 133. CVSS: MEDIUM (5.4) EPSS Score: 0.04% Source: CVE November 27th, 2024 (5 months ago)
CVE-2024-53975	Description: Accessing a non-secure HTTP site that uses a non-existent port may cause the SSL padlock icon in the location URL bar to, misleadingly, appear secure. This vulnerability affects Firefox for iOS < 133. CVSS: MEDIUM (5.4) EPSS Score: 0.04% Source: CVE November 27th, 2024 (5 months ago)
CVE-2024-53930	Description: WikiDocs before 1.0.65 allows stored XSS by authenticated users via data that comes after $$\\, which is mishandled by a KaTeX parser. CVSS: MEDIUM (5.4) EPSS Score: 0.04% Source: CVE November 27th, 2024 (5 months ago)
CVE-2024-53915	Description: An issue was discovered in the server in Veritas Enterprise Vault before 15.2, ZDI-CAN-24405. It allows remote attackers to execute arbitrary code because untrusted data, received on a .NET Remoting TCP port, is deserialized. CVSS: CRITICAL (9.8) EPSS Score: 0.07% Source: CVE November 27th, 2024 (5 months ago)
CVE-2024-53914	Description: An issue was discovered in the server in Veritas Enterprise Vault before 15.2, ZDI-CAN-24344. It allows remote attackers to execute arbitrary code because untrusted data, received on a .NET Remoting TCP port, is deserialized. CVSS: CRITICAL (9.8) EPSS Score: 0.07% Source: CVE November 27th, 2024 (5 months ago)
CVE-2024-53913	Description: An issue was discovered in the server in Veritas Enterprise Vault before 15.2, ZDI-CAN-24343. It allows remote attackers to execute arbitrary code because untrusted data, received on a .NET Remoting TCP port, is deserialized. CVSS: CRITICAL (9.8) EPSS Score: 0.07% Source: CVE November 27th, 2024 (5 months ago)
CVE-2024-53912	Description: An issue was discovered in the server in Veritas Enterprise Vault before 15.2, ZDI-CAN-24341. It allows remote attackers to execute arbitrary code because untrusted data, received on a .NET Remoting TCP port, is deserialized. CVSS: CRITICAL (9.8) EPSS Score: 0.07% Source: CVE November 27th, 2024 (5 months ago)
CVE-2024-53911	Description: An issue was discovered in the server in Veritas Enterprise Vault before 15.2, ZDI-CAN-24339. It allows remote attackers to execute arbitrary code because untrusted data, received on a .NET Remoting TCP port, is deserialized. CVSS: CRITICAL (9.8) EPSS Score: 0.07% Source: CVE November 27th, 2024 (5 months ago)
CVE-2024-53910	Description: An issue was discovered in the server in Veritas Enterprise Vault before 15.2, ZDI-CAN-24336. It allows remote attackers to execute arbitrary code because untrusted data, received on a .NET Remoting TCP port, is deserialized. CVSS: CRITICAL (9.8) EPSS Score: 0.07% Source: CVE November 27th, 2024 (5 months ago)