CVE-2024-47918

CVSS v3 Score
6.1
Medium

Vulnerability Description

Tiki Wiki CMS – CWE-80: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)

CVSS:6.1(Medium)

Arbitrary Command Injection in GitHub repository strapi/strapi prior to 4.1.0.

CWE-782022
CVSS:6.1(Medium)

A vulnerability in the cluster backup feature of Cisco Secure Firewall Management Center (FMC) Software, formerly Firepower Management Center Software, could allow an authenticated, remote attacker to...

CWE-782024
CVSS:6.0(Medium)

Fluid is an open source Kubernetes-native Distributed Dataset Orchestrator and Accelerator for data-intensive applications. An OS command injection vulnerability within the Fluid project's JuicefsRunt...

CWE-782023
CVSS:6.0(Medium)

A vulnerability in the CLI of Cisco ATA 190 Series Analog Telephone Adapter firmware could allow an authenticated, local attacker with high privileges to execute arbitrary commands as the root us...

CWE-782024
CVSS:6.0(Medium)

A vulnerability in the file creation process on the command line interface of AOS-8 Instant and AOS-10 AP could allow an authenticated remote attacker to perform remote code execution (RCE). Successfu...

CWE-782025
CVSS:5.9(Medium)

IBM InfoSphere Information Server 11.7 could allow a locally authenticated attacker to execute arbitrary commands on the system by sending a specially crafted request.

CWE-782022