Lista CVE 2024/36xxx

CVE nel gruppo: 36xxx

CVE-2024-36066 (Clicca per dettagli)

CVE-2024-36068 (Clicca per dettagli)

CVE-2024-36070 (Clicca per dettagli)

CVE-2024-36071 (Clicca per dettagli)

CVE-2024-36072 (Clicca per dettagli)

CVE-2024-36073 (Clicca per dettagli)

CVE-2024-36074 (Clicca per dettagli)

CVE-2024-36075 (Clicca per dettagli)

CVE-2024-36076 (Clicca per dettagli)

CVE-2024-36077 (Clicca per dettagli)

CVE-2024-36078 (Clicca per dettagli)

CVE-2024-36079 (Clicca per dettagli)

CVE-2024-36080 (Clicca per dettagli)

CVE-2024-36081 (Clicca per dettagli)

CVE-2024-36082 (Clicca per dettagli)

CVE-2024-36103 (Clicca per dettagli)

CVE-2024-36104 (Clicca per dettagli)

CVE-2024-36105 (Apache OFBiz: Path traversal leading to a RCE)

CVE-2024-36106 (dbt allows Binding to an Unrestricted IP Address via socketsocket)

CVE-2024-36107 (Argo CD allows authenticated users to enumerate clusters by name)

CVE-2024-36108 (Information disclosure in minio)

CVE-2024-36109 (Multiple Broken Function-Level Authorization vulnerabilities in casgate)

CVE-2024-36110 (Cross-site Scripting with Markdown rendering in CoCalc)

CVE-2024-36111 (Cross-site scripting in ansibleguy-webui)

CVE-2024-36112 (KubePi’s JWT token validation has a defect)

CVE-2024-36113 (Nautobot dynamic-group-members doesn’t enforce permission restrictions on member objects)

CVE-2024-36114 (Discourse missing authorization checks for suspending admins/moderators)

CVE-2024-36115 (Decompressors can crash the JVM and leak memory content in Aircompressor)

CVE-2024-36116 (Stored Cross site scripting in Reposilite artifacts)

CVE-2024-36117 (Path traversal in Reposilite javadoc file expansion)

CVE-2024-36118 (Path traversal while serving Reposilite javadoc expanded files)

CVE-2024-36119 (Unauthorized viewing of workspace test cases in MeterSphere)

CVE-2024-36120 (Password confirmation stored in plain text via registration form in statamic/cms)

CVE-2024-36121 (javascript-deobfuscator crafted payload can lead to code execution)

CVE-2024-36122 ( netty-incubator-codec-ohttp’s BoringSSLAEADContext Repeats Nonces)

CVE-2024-36123 (Discourse doesn’t limit reviewable user serializer payload)

CVE-2024-36124 (Citizen has a Stored Cross-Site Scripting Vulnerability by editing MediaWiki:Tagline)

CVE-2024-36127 (iq80 Snappy has an out-of-bounds read when uncompressing data, leading to JVM crash)

CVE-2024-36128 (apko Exposure of HTTP basic auth credentials in log output)

CVE-2024-36129 (Directus is soft-locked by providing a string value to random string util)

CVE-2024-36130 (OpenTelemetry Collector has a Denial of Service via Zip/Decompression Bomb sent over HTTP or gRPC)

CVE-2024-36131 (Clicca per dettagli)

CVE-2024-36132 (Clicca per dettagli)

CVE-2024-36136 (Clicca per dettagli)

CVE-2024-36137 (Clicca per dettagli)

CVE-2024-36138 (Clicca per dettagli)

CVE-2024-36140 (Clicca per dettagli)

CVE-2024-36141 (Clicca per dettagli)

CVE-2024-36142 (Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79))

CVE-2024-36143 (Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79))

CVE-2024-36144 (Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79))

CVE-2024-36146 (Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79))

CVE-2024-36147 (Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79))

CVE-2024-36148 (Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79))

CVE-2024-36149 (Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79))

CVE-2024-36150 (Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79))

CVE-2024-36151 (Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79))

CVE-2024-36152 (Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79))

CVE-2024-36153 (Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79))

CVE-2024-36154 (Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79))

CVE-2024-36155 (Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79))

CVE-2024-36156 (Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79))

CVE-2024-36157 (Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79))

CVE-2024-36158 (Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79))

CVE-2024-36159 (Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79))

CVE-2024-36160 (Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79))

CVE-2024-36161 (Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79))

CVE-2024-36162 (Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79))

CVE-2024-36163 (Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79))

CVE-2024-36164 (Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79))

CVE-2024-36165 (Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79))

CVE-2024-36166 (Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79))

CVE-2024-36167 (Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79))

CVE-2024-36168 (Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79))

CVE-2024-36169 (Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79))

CVE-2024-36170 (Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79))

CVE-2024-36171 (Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79))

CVE-2024-36172 (Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79))

CVE-2024-36173 (Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79))

CVE-2024-36174 (Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79))