Archive
8 April 2024
Vulnerabilities first published on this day (UTC), newest first.
43 results · Clear filters · Feed
-
High 8.2
CVE
NVIDIA ChatRTX for Windows contains a vulnerability in the UI, where an attacker can cause improper privilege management by sending open file requests to the application. A successful exploit of this vulnerability might lead to local escalation of privileges,…
-
High 7.5CVE-2023-7164 Scanner template
BackWPup < 4.0.4 - Unauthenticated Backup Download
The BackWPup WordPress plugin before 4.0.4 does not prevent Directory Listing in its temporary backup folder, allowing unauthenticated attackers to download backups of a site's database.
-
High 8.8
Redon-Hub has incorrect permissions on all admin related commands
Redon Hub is a Roblox Product Delivery Bot, also known as a Hub. In all hubs before version 1.0.2, all commands are capable of being ran by all users, including admin commands. This allows users to receive products for free and delete/create/update products/t…
-
High 8.7
OpenText ArcSight Management Center and ArcSight Platform Stored XSS
A Stored Cross-Site Scripting (XSS) vulnerability has been identified in OpenText ArcSight Management Center and ArcSight Platform. The vulnerability could be remotely exploited.
-
High 7.3
SourceCodester Prison Management System login.php sql injection
A vulnerability was found in SourceCodester Prison Management System 1.0. It has been classified as critical. Affected is an unknown function of the file /Account/login.php. The manipulation leads to sql injection. It is possible to launch the attack remotely…
-
High 7.3
SourceCodester Prison Management System login.php sql injection
A vulnerability was found in SourceCodester Prison Management System 1.0 and classified as critical. This issue affects some unknown processing of the file /Admin/login.php. The manipulation leads to sql injection. The attack may be initiated remotely. The ex…
-
High 7.5
Input verification vulnerability in the call module. Impact: Successful exploitation of this vulnerability may affect s…
-
High 7.5
Input verification vulnerability in the log module. Impact: Successful exploitation of this vulnerability can affect in…
-
High 7.5
Vulnerability of permission control in the window module. Successful exploitation of this vulnerability may affect conf…
-
High 7.5
Out-of-bounds write vulnerability in the RSMC module. Impact: Successful exploitation of this vulnerability will affect…
-
High 7.4
Race condition vulnerability in the Wi-Fi module. Impact: Successful exploitation of this vulnerability will affect ava…
-
High 7.5
Input verification vulnerability in the power module. Impact: Successful exploitation of this vulnerability will affect…
-
High 7.5
Vulnerability of data verification errors in the kernel module. Impact: Successful exploitation of this vulnerability m…
-
High 7.5
Vulnerability of data verification errors in the kernel module. Impact: Successful exploitation of this vulnerability m…
-
High 7.5
Vulnerability of package name verification being bypassed in the Calendar app. Impact: Successful exploitation of this …
-
High 7.5
Vulnerability of undefined permissions in the Calendar app. Impact: Successful exploitation of this vulnerability will …
-
High 7.5
Vulnerability of permission verification in some APIs in the ActivityTaskManagerService module. Impact: Successful expl…
-
High 7.5
Authentication vulnerability in the API for app pre-loading. Impact: Successful exploitation of this vulnerability may …
-
High 7.5
Vulnerability of improper authentication in the Iaware module. Impact: Successful exploitation of this vulnerability wi…
-
High 7.5
Permission verification vulnerability in the Settings module. Impact: Successful exploitation of this vulnerability may…
-
High 7.5
Vulnerability of package name verification being bypassed in the HwIms module. Impact: Successful exploitation of this …
-
High 7.5
Permission control vulnerability in the clock module. Impact: Successful exploitation of this vulnerability will affect…
-
High 7.8
In ril service, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial …
-
High 7.5
In modem-ps-nas-ngmm, there is a possible undefined behavior due to incorrect error handling. This could lead to remote…
-
High 7.5
In Plaintext COUNTER CHECK message accepted before AS security activation, there is a possible missing permission check…
-
High 8.8
The password is empty in the initial configuration of ACERA 9010-08 firmware v02.04 and earlier, and ACERA 9010-24 firm…
-
High 7.3
SourceCodester Prison Management System Avatar add-admin.php unrestricted upload
A vulnerability was found in SourceCodester Prison Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /Admin/add-admin.php of the component Avatar Handler. The manipulation of the argument avatar leads…
-
High 7.5
Ryu Infinite Loop vulnerability
An issue was discovered in OFPMatch in parser.py in Faucet SDN Ryu version 4.34, allows remote attackers to cause a denial of service (DoS) (infinite loop).
-
High 8.8
In Unify CP IP Phone firmware 1.10.4.3, Weak Credentials are used (a hardcoded root password).
-
High 8.1
An issue discovered in web-flash v3.0 allows attackers to reset passwords for arbitrary users via crafted POST request …
-
High 7.5
In TOTOLINK EX200 V4.0.3c.7646_B20201211, an attacker can obtain sensitive information without authorization through th…
-
High 8.8
TOTOLINK EX200 V4.0.3c.7646_B20201211 allows attackers to bypass login through the Form_Login function.
-
High 8.0
TOTOLINK EX200 V4.0.3c.7646_B20201211 was discovered to contain a remote code execution (RCE) vulnerability via the lan…
-
High 8.8
TOTOLINK EX200 V4.0.3c.7646_B20201211 was discovered to contain a remote code execution (RCE) vulnerability via the Fil…
-
High 7.5CVE-2024-31817 EPSS 55%
In TOTOLINK EX200 V4.0.3c.7646_B20201211, an attacker can obtain sensitive information without authorization through th…
-
High 8.8
TOTOLINK EX200 V4.0.3c.7646_B20201211 was discovered to contain a remote code execution (RCE) vulnerability via the web…
-
High 8.4
TOTOLINK EX200 V4.0.3c.7646_B20201211 does not contain an authentication mechanism by default.
-
High 8.8
An issue in secdiskapp 1.5.1 (management program for NewQ Fingerprint Encryption Super Speed Flash Disk) allows attacke…
-
High 8.8CVE-2024-27632 Public exploit
An issue in GNU Savane v.3.12 and before allows a remote attacker to escalate privileges via the form_id in the form_he…
-
High 7.5CVE-2024-27630 Public exploit
Insecure Direct Object Reference (IDOR) in GNU Savane v.3.12 and before allows a remote attacker to delete arbitrary fi…