Archive
5 April 2024
Vulnerabilities first published on this day (UTC), newest first.
102 results · Feed
-
Low 3.5
SourceCodester Aplaya Beach Resort Online Reservation System index.php cross site scripting
A vulnerability classified as problematic has been found in SourceCodester Aplaya Beach Resort Online Reservation System 1.0. This affects an unknown part of the file admin/mod_reports/index.php. The manipulation of the argument end leads to cross site script…
-
High 7.3
SourceCodester Aplaya Beach Resort Online Reservation System sql injection
A vulnerability was found in SourceCodester Aplaya Beach Resort Online Reservation System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file admin/mod_settings/controller.php?action=add. The manipulation of th…
-
High 7.5
A denial of service vulnerability was reported in some Lenovo Printers that could allow an attacker to cause the device…
-
High 7.5
A vulnerability was reported in some Lenovo Printers that could allow an unauthenticated attacker to obtain the adminis…
-
Medium 5.3
A vulnerability was reported in some Lenovo Printers that could allow an unauthenticated attacker to reboot the printer…
-
Medium 4.9
A denial of service vulnerability was reported in the HTTPS service of some Lenovo Printers that could result in a syst…
-
Medium 4.9
A buffer overflow vulnerability was reported in the HTTPS service of some Lenovo Printers that could result in denial o…
-
Medium 6.3
An authentication bypass vulnerability was reported in Lenovo devices with Synaptics fingerprint readers that could all…
-
Medium 6.7
A potential vulnerability were reported in the BIOS of some Desktop, Smart Edge, and ThinkStation products that could a…
-
Medium 6.7
A potential vulnerability was reported in the BIOS update tool driver for some Desktop, Smart Edge, Smart Office, and T…
-
Medium 6.7
A potential memory leakage vulnerability was reported in some Lenovo Notebook products that may allow a local attacker …
-
Medium 6.5
A valid authenticated Lenovo XClarity Administrator (LXCA) user can potentially leverage an unauthenticated API endpoin…
-
High 7.3
SourceCodester Aplaya Beach Resort Online Reservation System sql injection
A vulnerability was found in SourceCodester Aplaya Beach Resort Online Reservation System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file admin/mod_users/controller.php?action=add. The manipulation…
-
Medium 4.4
In tmu_get_pi of tmu.c, there is a possible out of bounds read due to improper input validation. This could lead to loc…
-
High 7.8
In tmu_set_tr_num_thresholds of tmu.c, there is a possible out of bounds write due to a missing bounds check. This coul…
-
Medium 5.5
In tmu_get_tr_num_thresholds of tmu.c, there is a possible out of bounds read due to a missing bounds check. This could…
-
Medium 6.2
In TMU_IPC_GET_TABLE, there is a possible out of bounds read due to a missing bounds check. This could lead to local in…
-
Medium 6.7
In tmu_get_tr_thresholds, there is a possible out of bounds read due to a missing bounds check. This could lead to loca…
-
High 7.7
In tmu_set_control_temp_step of tmu.c, there is a possible out of bounds write due to a missing bounds check. This coul…
-
Critical 9.8
In afe_callback of q6afe.c, there is a possible out of bounds write due to a buffer overflow. This could lead to local …
-
High 7.3
there is a possible permission bypass due to Debug certs being allowlisted. This could lead to local escalation of priv…
-
Medium 5.9
In _dvfs_get_lv of dvfs.c, there is a possible out of bounds read due to a missing null check. This could lead to local…
-
High 8.4
In lpm_req_handler of lpm.c, there is a possible out of bounds write due to improper input validation. This could lead …
-
High 8.4
In tmu_set_tr_thresholds of tmu.c, there is a possible out of bounds write due to a missing bounds check. This could le…
-
Medium 5.5
In km_exp_did_inner of kmv.c, there is a possible out of bounds read due to a missing bounds check. This could lead to …
-
High 7.8CVE-2024-29748 Exploited
there is a possible way to bypass due to a logic error in the code. This could lead to local escalation of privilege wi…
KEV Apr 4, 2024 -
Medium 5.5
In asn1_ec_pkey_parse_p384 of asn1_common.c, there is a possible OOB Read due to a missing null check. This could lead …
-
Medium 5.5
In apply_minlock_constraint of dvfs.c, there is a possible out of bounds read due to a missing bounds check. This could…
-
High 7.4
In tmu_set_table of tmu.c, there is a possible out of bounds write due to a missing bounds check. This could lead to lo…
-
High 7.7
In tmu_set_temp_lut of tmu.c, there is a possible out of bounds write due to a missing bounds check. This could lead to…
-
High 7.8
In pblS2mpuResume of s2mpu.c, there is a possible mitigation bypass due to a logic error in the code. This could lead t…
-
Medium 5.5
In tmu_get_temp_lut of tmu.c, there is a possible out of bounds read due to a missing bounds check. This could lead to …
-
Medium 5.5CVE-2024-29745 Exploited
there is a possible Information Disclosure due to uninitialized data. This could lead to local information disclosure w…
KEV Apr 4, 2024 -
Medium 5.5
In tmu_get_gov_time_windows, there is a possible out of bounds read due to a missing bounds check. This could lead to l…
-
Medium 5.5
In gov_init, there is a possible out of bounds read due to a missing bounds check. This could lead to local information…
-
Medium 5.5
In asn1_ec_pkey_parse of asn1_common.c, there is a possible OOB read due to a missing null check. This could lead to lo…
-
Medium 5.9
In tmu_get_tr_stats of tmu.c, there is a possible out of bounds read due to a missing bounds check. This could lead to …
-
High 7.3
SourceCodester Aplaya Beach Resort Online Reservation System index.php sql injection
A vulnerability was found in SourceCodester Aplaya Beach Resort Online Reservation System 1.0. It has been classified as critical. Affected is an unknown function of the file admin/mod_users/index.php. The manipulation of the argument id leads to sql injectio…
-
Medium 6.7
GRUB2 does not call the module fini functions on exit, leading to Debian/Ubuntu's peimage GRUB2 module leaving UEFI sys…
-
High 7.3
SourceCodester Aplaya Beach Resort Online Reservation System index.php sql injection
A vulnerability was found in SourceCodester Aplaya Beach Resort Online Reservation System 1.0 and classified as critical. This issue affects some unknown processing of the file admin/mod_reports/index.php. The manipulation of the argument categ/end leads to s…