Skip to content
OpenAdvisories

Archive

12 April 2024

Vulnerabilities first published on this day (UTC), newest first.

4 results · Clear filters · Feed

  • Medium 6.3
    CVE-2024-3690 Public exploit

    PHPGurukul Small CRM Change Password sql injection

    A vulnerability classified as critical was found in PHPGurukul Small CRM 3.0. Affected by this vulnerability is an unknown functionality of the component Change Password Handler. The manipulation leads to sql injection. The attack can be launched remotely. Th…

  • Medium 4.8
    CVE-2024-31839 Public exploit Scanner template

    tiagorlampert CHAOS vulnerable to Cross Site Scripting

    Cross Site Scripting vulnerability in tiagorlampert CHAOS v.5.0.1 allows a remote attacker to escalate privileges via the sendCommandHandler function in the handler.go component.

  • Medium 5.5
    CVE-2024-22526 Public exploit

    Buffer Overflow vulnerability in bandisoft bandiview v7.0, allows local attackers to cause a denial of service (DoS) vi…

  • Medium 6.2
    CVE-2024-22734 Public exploit

    An issue was discovered in AMCS Group Trux Waste Management Software before version 7.19.0018.26912, allows local attac…