2024 CVEs (page 381)
Page 381 of 385 — CVEs published in 2024, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-22627 | High | 7.2 | 2024-01-16 | Complete Supplier Management System v1.0 is vulnerable to SQL Injection via /Supply_Management_System/admin/edit_distributor.php?id=. |
CVE-2024-22626 | High | 7.2 | 2024-01-16 | Complete Supplier Management System v1.0 is vulnerable to SQL Injection via /Supply_Management_System/admin/edit_retailer.php?id=. |
CVE-2024-22625 | High | 7.2 | 2024-01-16 | Complete Supplier Management System v1.0 is vulnerable to SQL Injection via /Supply_Management_System/admin/edit_category.php?id=. |
CVE-2024-0579 | Medium | 6.3 | 2024-01-16 | A vulnerability classified as critical was found in Totolink X2000R 1.0.0-B20221212.1452. Affected by this vulnerability is the function formMapDelDevice of th… |
CVE-2024-0578 | High | 8.8 | 2024-01-16 | A vulnerability classified as critical has been found in Totolink LR1200GB 9.1.0u.6619_B20230130. Affected is the function UploadCustomModule of the file /cgi-… |
CVE-2024-0577 | High | 8.8 | 2024-01-16 | A vulnerability was found in Totolink LR1200GB 9.1.0u.6619_B20230130. It has been rated as critical. This issue affects the function setLanguageCfg of the file… |
CVE-2024-0576 | High | 8.8 | 2024-01-16 | A vulnerability was found in Totolink LR1200GB 9.1.0u.6619_B20230130. It has been declared as critical. This vulnerability affects the function setIpPortFilter… |
CVE-2024-0239 | Medium | 6.1 | 2024-01-16 | The Contact Form 7 Connector WordPress plugin before 1.2.3 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflect… |
CVE-2024-0238 | Medium | 6.1 | 2024-01-16 | The EventON Premium WordPress plugin before 4.5.6, EventON WordPress plugin before 2.2.8 do not have authorisation in an AJAX action, and does not ensure that… |
CVE-2024-0237 | Medium | 5.3 | 2024-01-16 | The EventON WordPress plugin through 4.5.8, EventON WordPress plugin before 2.2.7 do not have authorisation in some AJAX actions, allowing unauthenticated user… |
CVE-2024-0236 | Medium | 5.3 | 2024-01-16 | The EventON WordPress plugin before 4.5.5, EventON WordPress plugin before 2.2.7 do not have authorisation in an AJAX action, allowing unauthenticated users to… |
CVE-2024-0235 | Medium | 5.3 | 2024-01-16 | The EventON WordPress plugin before 4.5.5, EventON WordPress plugin before 2.2.7 do not have authorisation in an AJAX action, allowing unauthenticated users to… |
CVE-2024-0233 | Medium | 6.1 | 2024-01-16 | The EventON WordPress plugin before 4.5.5, EventON WordPress plugin before 2.2.7 do not properly sanitise and escape a parameter before outputting it back in p… |
CVE-2024-0187 | Medium | 6.1 | 2024-01-16 | The Community by PeepSo WordPress plugin before 6.3.1.2 does not sanitise and escape various parameters and generated URLs before outputting them back attribut… |
CVE-2024-0582 | High | 7.8 | 2024-01-16 | A memory leak flaw was found in the Linux kernel’s io_uring functionality in how a user registers a buffer ring with IORING_REGISTER_PBUF_RING, mmap() it, and… |
CVE-2024-0575 | High | 8.8 | 2024-01-16 | A vulnerability was found in Totolink LR1200GB 9.1.0u.6619_B20230130. It has been classified as critical. This affects the function setTracerouteCfg of the fil… |
CVE-2024-0574 | High | 8.8 | 2024-01-16 | A vulnerability was found in Totolink LR1200GB 9.1.0u.6619_B20230130 and classified as critical. Affected by this issue is the function setParentalRules of the… |
CVE-2024-0573 | High | 8.8 | 2024-01-16 | A vulnerability has been found in Totolink LR1200GB 9.1.0u.6619_B20230130 and classified as critical. Affected by this vulnerability is the function setDiagnos… |
CVE-2024-0581 | Medium | 4.0 | 2024-01-16 | An Uncontrolled Resource Consumption vulnerability has been found on Sandsprite Scdbg.exe, affecting version 1.0. This vulnerability allows an attacker to send… |
CVE-2024-0572 | High | 8.8 | 2024-01-16 | A vulnerability, which was classified as critical, was found in Totolink LR1200GB 9.1.0u.6619_B20230130. Affected is the function setOpModeCfg of the file /cgi… |
CVE-2024-0571 | High | 8.8 | 2024-01-16 | A vulnerability, which was classified as critical, has been found in Totolink LR1200GB 9.1.0u.6619_B20230130. This issue affects the function setSmsCfg of the… |
CVE-2024-0570 | High | 7.3 | 2024-01-16 | A vulnerability classified as critical was found in Totolink N350RT 9.3.5u.6265. This vulnerability affects unknown code of the file /cgi-bin/cstecgi.cgi of th… |
CVE-2024-0567 | High | 7.5 | 2024-01-16 | A vulnerability was found in GnuTLS, where a cockpit (which uses gnuTLS) rejects a certificate chain with distributed trust. This issue occurs when validating… |
CVE-2024-0232 | Medium | 4.7 | 2024-01-16 | A heap use-after-free issue has been identified in SQLite in the jsonParseAddNodeArray() function in sqlite3.c. This flaw allows a local attacker to leverage a… |
CVE-2024-0569 | Medium | 4.3 | 2024-01-16 | A vulnerability classified as problematic has been found in Totolink T8 4.1.5cu.833_20220905. This affects the function getSysStatusCfg of the file /cgi-bin/cs… |
CVE-2024-0553 | High | 7.5 | 2024-01-16 | A vulnerability was found in GnuTLS. The response times to malformed ciphertexts in RSA-PSK ClientKeyExchange differ from the response times of ciphertexts wit… |
CVE-2024-0556 | High | 7.1 | 2024-01-16 | A Weak Cryptography for Passwords vulnerability has been detected on WIC200 affecting version 1.1. This vulnerability allows a remote user to intercept the tra… |
CVE-2024-0555 | Medium | 4.6 | 2024-01-16 | A Cross-Site Request Forgery (CSRF) vulnerability has been found on WIC1200, affecting version 1.1. An authenticated user could lead another user into executin… |
CVE-2024-0554 | Medium | 5.5 | 2024-01-16 | A Cross-site scripting (XSS) vulnerability has been found on WIC1200, affecting version 1.1. An authenticated user could store a malicious javascript payload i… |
CVE-2024-21674 | High | 7.5 | 2024-01-16 | This High severity Remote Code Execution (RCE) vulnerability was introduced in version 7.13.0 of Confluence Data Center and Server. Remote Code Execution (RCE… |
CVE-2024-21673 | High | 8.8 | 2024-01-16 | This High severity Remote Code Execution (RCE) vulnerability was introduced in versions 7.13.0 of Confluence Data Center and Server. Remote Code Execution (RC… |
CVE-2024-21672 | High | 8.8 | 2024-01-16 | This High severity Remote Code Execution (RCE) vulnerability was introduced in version 2.1.0 of Confluence Data Center and Server. Remote Code Execution (RCE)… |
CVE-2024-22428 | High | 7.0 | 2024-01-16 | Dell iDRAC Service Module, versions 5.2.0.0 and prior, contain an Incorrect Default Permissions vulnerability. It may allow a local unprivileged user to escal… |
CVE-2024-22362 | High | 7.5 | 2024-01-16 | Drupal contains a vulnerability with improper handling of structural elements. If this vulnerability is exploited, an attacker may be able to cause a denial-of… |
CVE-2024-0565 | Medium | 6.8 | 2024-01-15 | An out-of-bounds memory read flaw was found in receive_encrypted_standard in fs/smb/client/smb2ops.c in the SMB Client sub-component in the Linux Kernel. This… |
CVE-2024-0562 | High | 7.8 | 2024-01-15 | A use-after-free flaw was found in the Linux Kernel. When a disk is removed, bdi_unregister is called to stop further write-back and waits for associated delay… |
CVE-2024-0558 | Medium | 4.7 | 2024-01-15 | A vulnerability has been found in DedeBIZ 6.3.0 and classified as critical. This vulnerability affects unknown code of the file /admin/makehtml_freelist_action… |
CVE-2024-0557 | Low | 2.4 | 2024-01-15 | A vulnerability, which was classified as problematic, was found in DedeBIZ 6.3.0. This affects an unknown part of the component Website Copyright Setting. The… |
CVE-2024-0320 | Medium | 5.4 | 2024-01-15 | Cross-Site Scripting in FireEye Malware Analysis (AX) affecting version 9.0.3.936530. This vulnerability allows an attacker to send a specially crafted JavaScr… |
CVE-2024-0319 | Medium | 5.4 | 2024-01-15 | Open Redirect vulnerability in FireEye HXTool affecting version 4.6, the exploitation of which could allow an attacker to redirect a legitimate user to a malic… |
CVE-2024-0318 | Medium | 5.4 | 2024-01-15 | Cross-Site Scripting in FireEye HXTool affecting version 4.6. This vulnerability allows an attacker to store a specially crafted JavaScript payload in the 'Pro… |
CVE-2024-0317 | Medium | 5.4 | 2024-01-15 | Cross-Site Scripting in FireEye EX, affecting version 9.0.3.936727. Exploitation of this vulnerability allows an attacker to send a specially crafted JavaScrip… |
CVE-2024-22207 | Medium | 5.3 | 2024-01-15 | fastify-swagger-ui is a Fastify plugin for serving Swagger UI. Prior to 2.1.0, the default configuration of `@fastify/swagger-ui` without `baseDir` set will l… |
CVE-2024-0316 | Medium | 6.8 | 2024-01-15 | Improper cleanup vulnerability in exceptions thrown in FireEye Endpoint Security, affecting version 5.2.0.958244. This vulnerability could allow an attacker to… |
CVE-2024-0315 | Medium | 6.6 | 2024-01-15 | Remote file inclusion vulnerability in FireEye Central Management affecting version 9.1.1.956704. This vulnerability allows an attacker to upload a malicious P… |
CVE-2024-0314 | Medium | 5.4 | 2024-01-15 | XSS vulnerability in FireEye Central Management affecting version 9.1.1.956704, which could allow an attacker to modify special HTML elements in the applicatio… |
CVE-2024-20721 | Medium | 5.5 | 2024-01-15 | Acrobat Reader T5 (MSFT Edge) versions 120.0.2210.91 and earlier are affected by an Improper Input Validation vulnerability. An unauthenticated attacker could… |
CVE-2024-20709 | Medium | 5.5 | 2024-01-15 | Acrobat Reader T5 (MSFT Edge) versions 120.0.2210.91 and earlier are affected by an Improper Input Validation vulnerability. An unauthenticated attacker could… |
CVE-2024-22028 | Medium | 4.6 | 2024-01-15 | Insufficient technical documentation issue exists in thermal camera TMC series all firmware versions. The user of the affected product is not aware of the inte… |
CVE-2024-0548 | Medium | 5.3 | 2024-01-15 | A vulnerability was found in FreeFloat FTP Server 1.0 and classified as problematic. Affected by this issue is some unknown functionality of the component SIZE… |
CVE-2024-0547 | Medium | 5.3 | 2024-01-15 | A vulnerability has been found in Ability FTP Server 2.34 and classified as problematic. Affected by this vulnerability is an unknown functionality of the comp… |
CVE-2024-0546 | Medium | 5.3 | 2024-01-15 | A vulnerability, which was classified as problematic, has been found in EasyFTP 1.7.0. This issue affects some unknown processing of the component LIST Command… |
CVE-2024-0545 | Medium | 5.3 | 2024-01-15 | A vulnerability classified as problematic was found in CodeCanyon RISE Ultimate Project Manager 3.5.3. This vulnerability affects unknown code of the file /ind… |
CVE-2024-0543 | Medium | 6.3 | 2024-01-15 | A vulnerability classified as critical has been found in CodeAstro Real Estate Management System up to 1.0. This affects an unknown part of the file propertyde… |
CVE-2024-0542 | High | 8.8 | 2024-01-15 | A vulnerability was found in Tenda W9 1.0.0.7(4456). It has been rated as critical. Affected by this issue is the function formWifiMacFilterGet of the componen… |
CVE-2024-0541 | High | 8.8 | 2024-01-15 | A vulnerability was found in Tenda W9 1.0.0.7(4456). It has been declared as critical. Affected by this vulnerability is the function formAddSysLogRule of the… |
CVE-2024-0540 | Medium | 6.3 | 2024-01-15 | A vulnerability was found in Tenda W9 1.0.0.7(4456). It has been classified as critical. Affected is the function formOfflineSet of the component httpd. The ma… |
CVE-2024-0539 | High | 8.8 | 2024-01-15 | A vulnerability was found in Tenda W9 1.0.0.7(4456) and classified as critical. This issue affects the function formQosManage_user of the component httpd. The… |
CVE-2024-0552 | Critical | 9.8 | 2024-01-15 | Intumit inc. SmartRobot's web framwork has a remote code execution vulnerability. An unauthorized remote attacker can exploit this vulnerability to execute arb… |
CVE-2024-0538 | High | 8.8 | 2024-01-15 | A vulnerability has been found in Tenda W9 1.0.0.7(4456) and classified as critical. This vulnerability affects the function formQosManage_auto of the componen… |
CVE-2024-0537 | High | 8.8 | 2024-01-15 | A vulnerability, which was classified as critical, was found in Tenda W9 1.0.0.7(4456). This affects the function setWrlBasicInfo of the component httpd. The m… |
CVE-2024-0536 | High | 8.8 | 2024-01-15 | A vulnerability, which was classified as critical, has been found in Tenda W9 1.0.0.7(4456). Affected by this issue is the function setWrlAccessList of the com… |
CVE-2024-0535 | High | 8.8 | 2024-01-15 | A vulnerability classified as critical was found in Tenda PA6 1.0.1.21. Affected by this vulnerability is the function cgiPortMapAdd of the file /portmap of th… |
CVE-2024-0534 | High | 7.2 | 2024-01-15 | A vulnerability classified as critical has been found in Tenda A15 15.13.07.13. Affected is an unknown function of the file /goform/SetOnlineDevName of the com… |
CVE-2024-0533 | High | 7.2 | 2024-01-15 | A vulnerability was found in Tenda A15 15.13.07.13. It has been rated as critical. This issue affects some unknown processing of the file /goform/SetOnlineDevN… |
CVE-2024-0532 | High | 7.2 | 2024-01-15 | A vulnerability was found in Tenda A15 15.13.07.13. It has been declared as critical. This vulnerability affects the function set_repeat5 of the file /goform/W… |
CVE-2024-0531 | High | 7.2 | 2024-01-15 | A vulnerability was found in Tenda A15 15.13.07.13. It has been classified as critical. This affects an unknown part of the file /goform/setBlackRule of the co… |
CVE-2024-0530 | Medium | 5.5 | 2024-01-15 | A vulnerability was found in CXBSoft Post-Office up to 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /apps/r… |
CVE-2024-0529 | Medium | 5.5 | 2024-01-15 | A vulnerability has been found in CXBSoft Post-Office up to 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the f… |
CVE-2024-0528 | Medium | 5.5 | 2024-01-15 | A vulnerability, which was classified as critical, was found in CXBSoft Post-Office 1.0. Affected is an unknown function of the file /admin/pages/update_go.php… |
CVE-2024-0527 | Medium | 6.3 | 2024-01-15 | A vulnerability, which was classified as critical, has been found in CXBSoft Url-shorting up to 1.3.1. This issue affects some unknown processing of the file /… |
CVE-2024-0526 | Medium | 5.5 | 2024-01-15 | A vulnerability classified as critical was found in CXBSoft Url-shorting up to 1.3.1. This vulnerability affects unknown code of the file /pages/short_to_long… |
CVE-2024-0525 | Medium | 5.5 | 2024-01-15 | A vulnerability classified as critical has been found in CXBSoft Url-shorting up to 1.3.1. This affects an unknown part of the file /pages/long_s_short.php of… |
CVE-2024-0524 | Medium | 5.5 | 2024-01-15 | A vulnerability was found in CXBSoft Url-shorting up to 1.3.1. It has been rated as critical. Affected by this issue is some unknown functionality of the file… |
CVE-2024-0523 | Medium | 6.3 | 2024-01-14 | A vulnerability was found in CmsEasy up to 7.7.7. It has been declared as critical. Affected by this vulnerability is the function getslide_child_action in the… |
CVE-2024-0522 | Medium | 4.3 | 2024-01-14 | A vulnerability was found in Allegro RomPager 4.01. It has been classified as problematic. Affected is an unknown function of the file usertable.htm?action=del… |
CVE-2024-0510 | High | 7.3 | 2024-01-13 | A vulnerability, which was classified as critical, has been found in HaoKeKeJi YiQiNiu up to 3.1. Affected by this issue is the function http_post of the file… |
CVE-2024-0505 | Medium | 5.5 | 2024-01-13 | A vulnerability was found in ZhongFuCheng3y Austin 1.0 and classified as critical. This issue affects the function getFile of the file com/java3y/austin/web/co… |
CVE-2024-0504 | Low | 3.5 | 2024-01-13 | A vulnerability has been found in code-projects Simple Online Hotel Reservation System 1.0 and classified as problematic. This vulnerability affects unknown co… |
CVE-2024-0503 | Low | 3.5 | 2024-01-13 | A vulnerability was found in code-projects Online FIR System 1.0. It has been classified as problematic. This affects an unknown part of the file registercompl… |
CVE-2024-0502 | Medium | 4.7 | 2024-01-13 | A vulnerability was found in SourceCodester House Rental Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality… |
CVE-2024-0501 | Low | 2.4 | 2024-01-13 | A vulnerability has been found in SourceCodester House Rental Management System 1.0 and classified as problematic. Affected by this vulnerability is an unknown… |
CVE-2024-0500 | Low | 2.4 | 2024-01-13 | A vulnerability, which was classified as problematic, was found in SourceCodester House Rental Management System 1.0. Affected is an unknown function of the co… |
CVE-2024-0499 | Low | 2.4 | 2024-01-13 | A vulnerability, which was classified as problematic, has been found in SourceCodester House Rental Management System 1.0. This issue affects some unknown proc… |
CVE-2024-0498 | Medium | 6.3 | 2024-01-13 | A vulnerability was found in Project Worlds Lawyer Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functi… |
CVE-2024-0497 | Medium | 6.3 | 2024-01-13 | A vulnerability was found in Campcodes Student Information System 1.0. It has been classified as critical. Affected is an unknown function of the file /classes… |
CVE-2024-0496 | Medium | 6.3 | 2024-01-13 | A vulnerability was found in Kashipara Billing Software 1.0 and classified as critical. This issue affects some unknown processing of the file item_list_edit.p… |
CVE-2024-0495 | Medium | 6.3 | 2024-01-13 | A vulnerability has been found in Kashipara Billing Software 1.0 and classified as critical. This vulnerability affects unknown code of the file party_submit.p… |
CVE-2024-0494 | Medium | 6.3 | 2024-01-13 | A vulnerability, which was classified as critical, was found in Kashipara Billing Software 1.0. This affects an unknown part of the file material_bill.php of t… |
CVE-2024-0493 | Medium | 6.3 | 2024-01-13 | A vulnerability, which was classified as critical, has been found in Kashipara Billing Software 1.0. Affected by this issue is some unknown functionality of th… |
CVE-2024-0492 | Medium | 6.3 | 2024-01-13 | A vulnerability classified as critical was found in Kashipara Billing Software 1.0. Affected by this vulnerability is an unknown functionality of the file buye… |
CVE-2024-0491 | Medium | 5.3 | 2024-01-13 | A vulnerability classified as problematic has been found in Huaxia ERP up to 3.1. Affected is an unknown function of the file src/main/java/com/jsh/erp/control… |
CVE-2024-0490 | Medium | 5.3 | 2024-01-13 | A vulnerability was found in Huaxia ERP up to 3.1. It has been rated as problematic. This issue affects some unknown processing of the file /user/getAllList. T… |
CVE-2024-0489 | Medium | 6.3 | 2024-01-13 | A vulnerability was found in code-projects Fighting Cock Information System 1.0. It has been declared as critical. This vulnerability affects unknown code of t… |
CVE-2024-0488 | Medium | 6.3 | 2024-01-13 | A vulnerability was found in code-projects Fighting Cock Information System 1.0. It has been classified as critical. This affects an unknown part of the file /… |
CVE-2024-0487 | Medium | 6.3 | 2024-01-13 | A vulnerability was found in code-projects Fighting Cock Information System 1.0 and classified as critical. Affected by this issue is some unknown functionalit… |
CVE-2024-0486 | Medium | 6.3 | 2024-01-13 | A vulnerability has been found in code-projects Fighting Cock Information System 1.0 and classified as critical. Affected by this vulnerability is an unknown f… |
CVE-2024-0485 | Medium | 6.3 | 2024-01-13 | A vulnerability, which was classified as critical, was found in code-projects Fighting Cock Information System 1.0. Affected is an unknown function of the file… |
CVE-2024-0484 | Medium | 6.3 | 2024-01-13 | A vulnerability, which was classified as critical, has been found in code-projects Fighting Cock Information System 1.0. This issue affects some unknown proces… |
CVE-2024-0483 | Medium | 6.3 | 2024-01-13 | A vulnerability classified as critical was found in Taokeyun up to 1.0.5. This vulnerability affects the function index of the file application/index/controlle… |