Archive
January 2024
Vulnerabilities first published in this month (UTC), newest first.
2,612 results · Feed
-
High 7.2
Tenda W6 httpd setcfm formSetCfm stack-based overflow
A vulnerability was found in Tenda W6 1.0.0.9(4122). It has been declared as critical. Affected by this vulnerability is the function formSetCfm of the file /goform/setcfm of the component httpd. The manipulation of the argument funcpara1 leads to stack-based…
-
High 7.2
Tenda i6 httpd WifiMacFilterGet formWifiMacFilterGet stack-based overflow
A vulnerability was found in Tenda i6 1.0.0.9(3857). It has been classified as critical. Affected is the function formWifiMacFilterGet of the file /goform/WifiMacFilterGet of the component httpd. The manipulation of the argument index leads to stack-based buf…
-
High 7.2
Tenda i6 httpd wifiSSIDset formwrlSSIDset stack-based overflow
A vulnerability was found in Tenda i6 1.0.0.9(3857) and classified as critical. This issue affects the function formwrlSSIDset of the file /goform/wifiSSIDset of the component httpd. The manipulation of the argument index leads to stack-based buffer overflow.…
-
High 7.2
Tenda i6 httpd setcfm formSetCfm stack-based overflow
A vulnerability has been found in Tenda i6 1.0.0.9(3857) and classified as critical. This vulnerability affects the function formSetCfm of the file /goform/setcfm of the component httpd. The manipulation of the argument funcpara1 leads to stack-based buffer o…
-
High 7.2
Tenda i6 httpd setAutoPing formSetAutoPing stack-based overflow
A vulnerability, which was classified as critical, was found in Tenda i6 1.0.0.9(3857). This affects the function formSetAutoPing of the file /goform/setAutoPing of the component httpd. The manipulation of the argument ping1 leads to stack-based buffer overfl…
-
Medium 5.4
Sichuan Yougou Technology KuERP Service.php del_sn_db path traversal
A vulnerability, which was classified as problematic, has been found in Sichuan Yougou Technology KuERP up to 1.0.4. Affected by this issue is the function del_sn_db of the file /application/index/controller/Service.php. The manipulation of the argument file …
-
Medium 6.3
Sichuan Yougou Technology KuERP common.php checklogin improper authentication
A vulnerability classified as critical was found in Sichuan Yougou Technology KuERP up to 1.0.4. Affected by this vulnerability is the function checklogin of the file /application/index/common.php. The manipulation of the argument App_User_id/App_user_Token l…
-
Medium 6.3
Sichuan Yougou Technology KuERP log neutralization for logs
A vulnerability classified as critical has been found in Sichuan Yougou Technology KuERP up to 1.0.4. Affected is an unknown function of the file /runtime/log. The manipulation leads to improper output neutralization for logs. The exploit has been disclosed t…
-
Critical 9.1
DeviceFarmer stf uses DES-ECB
DeviceFarmer stf v3.6.6 suffers from Use of a Broken or Risky Cryptographic Algorithm.
-
High 7.5
MeshCentral algorithm-downgrade issue
An algorithm-downgrade issue was discovered in Ylianst MeshCentral 1.1.16.
-
Critical 9.8
DoraCMS 2.1.8 is vulnerable to Use of Hard-coded Cryptographic Key.
-
High 7.2
Command injection in the ping utility on Buffalo LS210D 1.78-0.03 allows a remote authenticated attacker to inject arbi…
-
Medium 6.1CVE-2024-24135 Public exploit
Product Name and Product Code in the 'Add Product' section of Sourcecodester Product Inventory with Export to Excel 1.0…
-
High 7.2CVE-2024-24140 Public exploit
Sourcecodester Daily Habit Tracker App 1.0 allows SQL Injection via the parameter 'tracker.'
-
Critical 9.8CVE-2024-24141 Public exploit
Sourcecodester School Task Manager App 1.0 allows SQL Injection via the 'task' parameter.
-
High 7.2CVE-2024-24139 Public exploit
Sourcecodester Login System with Email Verification 1.0 allows SQL Injection via the 'user' parameter.
-
Medium 4.8CVE-2024-24134 Public exploit
Sourcecodester Online Food Menu 1.0 is vulnerable to Cross Site Scripting (XSS) via the 'Menu Name' and 'Description' f…
-
High 7.5
The POP3 service in YahooPOPs (aka YPOPs!) 1.6 allows a remote denial of service (reboot) via a long string to TCP port…
-
Medium 6.1CVE-2024-24136 Public exploit
The 'Your Name' field in the Submit Score section of Sourcecodester Math Game with Leaderboard v1.0 is vulnerable to Cr…
-
High 7.5CVE-2024-23747 Public exploit
The Moderna Sistemas ModernaNet Hospital Management System 2024 is susceptible to an Insecure Direct Object Reference (…
-
Medium 5.4
A stored cross-site scripting (XSS) vulnerability in /install.php?m=install&c=index&a=step3 of GreenCMS v2.3 allows att…
-
Medium 5.4
LightCMS v2.0 is vulnerable to Cross Site Scripting (XSS) in the Content Management - Articles field.
-
Medium 4.7
Issabel PBX Asterisk-Cli os command injection
A vulnerability was found in Issabel PBX 4.0.0. It has been rated as critical. This issue affects some unknown processing of the file /index.php?menu=asterisk_cli of the component Asterisk-Cli. The manipulation of the argument Command leads to os command inje…
-
Medium 5.4
Cross-site scripting vulnerability exists in a-blog cms Ver.3.1.x series versions prior to Ver.3.1.7, Ver.3.0.x series …
-
High 7.5
Kernel: icmpv6 router advertisement packets, aka linux tcp/ip remote code execution vulnerability
A race condition was found in the Linux Kernel. Under certain conditions, an unauthenticated attacker from an adjacent network could send an ICMPv6 router advertisement packet, causing arbitrary code execution.
-
Medium 6.6
Kernel: hugetlbfs: null pointer dereference in hugetlbfs_fill_super function
A null pointer dereference flaw was found in the hugetlbfs_fill_super function in the Linux kernel hugetlbfs (HugeTLB pages) functionality. This issue may allow a local user to crash the system or potentially escalate their privileges on the system.
-
Critical 9.8CVE-2024-23739 Public exploit
An issue in Discord for macOS version 0.0.291 and before, allows remote attackers to execute arbitrary code via the Run…
-
Unscored —CVE-2024-23742 Public exploit
An issue in Loom on macOS version 0.196.1 and before, allows remote attackers to execute arbitrary code via the RunAsNo…
-
Critical 9.8CVE-2024-23740 Public exploit
An issue in Kap for macOS version 3.6.0 and before, allows remote attackers to execute arbitrary code via the RunAsNode…
-
Low 3.3CVE-2024-23743 Public exploit
Notion through 3.1.0 on macOS might allow code execution because of RunAsNode and enableNodeClilnspectArguments. NOTE: …
-
Unscored —CVE-2024-23738 Public exploit
An issue in Postman version 10.22 and before on macOS allows a remote attacker to execute arbitrary code via the RunAsN…
-
Critical 9.8CVE-2024-23741 Public exploit
An issue in Hyper on macOS version 3.4.1 and before, allows remote attackers to execute arbitrary code via the RunAsNod…
-
Medium 6.3
obgm libcoap Configuration File coap_oscore.c get_split_entry stack-based overflow
A vulnerability was found in obgm libcoap 4.3.4. It has been rated as critical. Affected by this issue is the function get_split_entry of the file src/coap_oscore.c of the component Configuration File Handler. The manipulation leads to stack-based buffer over…
-
Medium 5.0
flink-extended ai-flow workflow_command.py cloudpickle.loads deserialization
A vulnerability was found in flink-extended ai-flow 0.3.1. It has been declared as critical. Affected by this vulnerability is the function cloudpickle.loads of the file \ai_flow\cli\commands\workflow_command.py. The manipulation leads to deserialization. The…
-
Medium 5.0
StanfordVL GibsonEnv pposgd_fuse.py cloudpickle.load deserialization
A vulnerability was found in StanfordVL GibsonEnv 0.3.1. It has been classified as critical. Affected is the function cloudpickle.load of the file gibson\utils\pposgd_fuse.py. The manipulation leads to deserialization. It is possible to launch the attack remo…
-
Low 3.5
CodeAstro Stock Management System Add Category index.php cross site scripting
A vulnerability was found in CodeAstro Stock Management System 1.0 and classified as problematic. This issue affects some unknown processing of the file /index.php of the component Add Category Handler. The manipulation of the argument Category Name/Category …
-
Medium 4.4
Fluent Forms <= 5.1.5 - Authenticated(Administrator+) Stored Cross-Site Scripting via imported form title
The Contact Form Plugin – Fastest Contact Form Builder Plugin for WordPress by Fluent Forms plugin for WordPress is vulnerable to Stored Cross-Site Scripting via imported form titles in all versions up to, and including, 5.1.5 due to insufficient input saniti…
-
Medium 6.4
Exclusive Addons for Elementor <= 2.6.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Link Anything
The Exclusive Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Link Anything functionality in all versions up to, and including, 2.6.8 due to insufficient input sanitization and output escaping. This makes it poss…
-
Medium 6.5
Backuply – Backup, Restore, Migrate and Clone <= 1.2.3 - Authenticated (Administrator+) Directory Traversal
The Backuply – Backup, Restore, Migrate and Clone plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 1.2.3 via the node_id parameter in the backuply_get_jstree function. This makes it possible for attackers with ad…
-
Medium 5.4
Form-Maker (twb_form-maker) <= 1.15.21 - Cross-Site Request Forgery to Limited Code Execution via Execute
The Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.15.21. This is due to missing or incorrect nonce validation on the 'execute' fu…