Search Results (8386 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2024-7912 2 Codeastro, Online Railway Reservation System Project 2 Online Railway Reservation System, Online Railway Reservation System 2024-08-19 5.3 Medium
A vulnerability was found in CodeAstro Online Railway Reservation System 1.0. It has been declared as problematic. This vulnerability affects unknown code of the file /admin/assets/. The manipulation leads to exposure of information through directory listing. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
CVE-2024-40704 1 Ibm 1 Infosphere Information Server 2024-08-15 4.9 Medium
IBM InfoSphere Information Server 11.7 could allow a privileged user to obtain sensitive information from authentication request headers. IBM X-Force ID: 298277.
CVE-2024-40464 1 Beego 1 Beego 2024-08-15 8.8 High
An issue in beego v.2.2.0 and before allows a remote attacker to escalate privileges via the sendMail function located in beego/core/logs/smtp.go file
CVE-2024-41683 1 Siemens 2 Location Intelligence, Location Intelligence Family 2024-08-14 5.3 Medium
A vulnerability has been identified in Location Intelligence family (All versions < V4.4). Affected products do not properly enforce a strong user password policy. This could facilitate a brute force attack against legitimate user passwords.
CVE-2024-41906 1 Siemens 1 Sinec Traffic Analyzer 2024-08-14 4.8 Medium
A vulnerability has been identified in SINEC Traffic Analyzer (6GK8822-1BG01-0BA0) (All versions < V2.0). The affected application does not properly handle cacheable HTTP responses in the web service. This could allow an attacker to read and modify data stored in the local cache.
CVE-2024-32931 1 Johnsoncontrols 1 Exacqvision Web Service 2024-08-09 5.7 Medium
Under certain circumstances the exacqVision Web Service can expose authentication token details within communications.