Archive
28 May 2024
Vulnerabilities first published on this day (UTC), newest first.
143 results · Feed
-
Medium 6.5
Incorrect access control in firmware upgrade function of web interface in Aten PE6208 2.3.228 and 2.4.232 allows remote…
-
High 8.0
Incorrect access control in the firewall management function of web interface in Aten PE6208 2.3.228 and 2.4.232 allows…
-
Medium 5.3
Incorrect access control in the outlet control function of web interface in Aten PE6208 2.3.228 and 2.4.232 allows remo…
-
Medium 5.3
Incorrect access control in logs management function of web interface in Aten PE6208 2.3.228 and 2.4.232 allows remote …
-
Critical 9.8
Aten PE6208 2.3.228 and 2.4.232 have default credentials for the privileged telnet account. The user is not asked to ch…
-
High 8.0
Aten PE6208 2.3.228 and 2.4.232 have default credentials for the privileged web interface account. The user is not aske…
-
High 7.3
Incorrect access control in the account management function of web interface in Aten PE6208 2.3.228 and 2.4.232 allows …
-
High 7.3
Incorrect access control in the account management function of web interface in Aten PE6208 2.3.228 and 2.4.232 allows …
-
High 8.1
A SQL injection vulnerability in /model/approve_petty_cash.php in campcodes Complete Web-Based School Management System…
-
High 7.5
silverstripe/taxonomy SQL Injection vulnerability
There is a vulnerability in silverstripe/taxonomy module that allows SQL injection. This affected controller (`TaxonomyDirectoryController`) is disabled by default and must be enabled by a developer for the exploit to be possible.
-
Medium 4.3
silverstripe/userforms file upload exposure on UserForms module
The [userforms module](https://github.com/silverstripe/silverstripe-userforms) allows CMS administrators to create public facing forms with file upload abilities. These files are uploaded into a predictable public path on the website, unless configured otherw…
-
Critical 9.9
Certain Anpviz products contain a hardcoded cryptographic key stored in the firmware of the device. This affects IPC-D2…
-
High 7.5
Certain Anpviz products allow unauthenticated users to download the running configuration of the device via a HTTP GET …
-
Medium 4.6
Certain Anpviz products allow unauthenticated users to modify or disable camera related settings such as microphone vol…
-
Critical 9.8
Certain Anpviz products allow unauthenticated users to download arbitrary files from the device's filesystem via a HTTP…
-
High 7.1
Amazon AWS Client VPN before 3.9.1 on macOS has a buffer overflow that could potentially allow a local actor to execute…
-
Medium 6.7
Amazon AWS Client VPN has a buffer overflow that could potentially allow a local actor to execute arbitrary commands wi…
-
Critical 9.8
CDG-Server-V5.6.2.126.139 and earlier was discovered to contain a SQL injection vulnerability via the permissionId para…
-
High 8.4
SUBNET Substation Server Reliance on Insufficiently Trustworthy Component
SUBNET Solutions Inc. has identified vulnerabilities in third-party components used in Substation Server.
-
Critical 9.8CVE-2024-34854 EPSS 13%
F-logic DataCube3 v1.0 is vulnerable to File Upload via `/admin/transceiver_schedule.php.`
-
Medium 6.3
F-logic DataCube3 v1.0 is affected by command injection due to improper string filtering at the command execution point…
-
Medium 5.9
TOTOLINK CP900L v4.1.5cu.798_B20221228 was discovered to contain a command injection vulnerability via the FileName par…
-
Low 2.7
TOTOLINK CP900L v4.1.5cu.798_B20221228 was discovered to contain a stack overflow via the desc parameter in the functio…
-
High 7.0CVE-2024-30212 Public exploit
Microchip Harmony 3 Core library allows read and write access to RAM via a SCSI READ or WRITE command
If a SCSI READ(10) command is initiated via USB using the largest LBA (0xFFFFFFFF) with it's default block size of 512 and a count of 1, the first 512 byte of the 0x80000000 memory area is returned to the user. If the block count is increased, the full RAM ca…
-
Critical 9.1
The TLS engine in Kwik commit 745fd4e2 does not track the current state of the connection. This vulnerability can allow…
-
Medium 6.5
In GNOME Shell through 45.7, a portal helper can be launched automatically (without user confirmation) based on network…
-
Critical 9.8
A SQL injection vulnerability in /model/get_timetable.php in campcodes Complete Web-Based School Management System 1.0 …
-
Medium 5.4
A SQL injection vulnerability in /model/get_teacher_timetable.php in campcodes Complete Web-Based School Management Sys…
-
Critical 9.8
A SQL injection vulnerability in /model/get_grade.php in campcodes Complete Web-Based School Management System 1.0 allo…
-
Critical 9.8
A SQL injection vulnerability in /model/get_student.php in campcodes Complete Web-Based School Management System 1.0 al…
-
Medium 6.3
A SQL injection vulnerability in /model/get_subject.php in campcodes Complete Web-Based School Management System 1.0 al…
-
Medium 5.4
A SQL injection vulnerability in /model/get_exam.php in campcodes Complete Web-Based School Management System 1.0 allow…
-
Medium 6.5
A SQL injection vulnerability in /model/get_student_subject.php in campcodes Complete Web-Based School Management Syste…
-
Critical 9.8
A SQL injection vulnerability in /model/get_subject_routing.php in campcodes Complete Web-Based School Management Syste…
-
Critical 9.8
A SQL injection vulnerability in /model/get_student1.php in campcodes Complete Web-Based School Management System 1.0 a…
-
Critical 9.8
A SQL injection vulnerability in /model/get_teacher.php in campcodes Complete Web-Based School Management System 1.0 al…
-
Medium 4.8
formwork Cross-site scripting vulnerability in Markdown fields
A cross-site scripting (XSS) vulnerability in the Edit function of Formwork before 1.13.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Content field.
-
High 7.5
A heap-based buffer overflow vulnerability exists in the Programming Software Connection FiBurn functionality of Automa…
-
High 8.2
A heap-based buffer overflow vulnerability exists in the Programming Software Connection CurrDir functionality of Autom…
-
High 8.2
A heap-based buffer overflow vulnerability exists in the Programming Software Connection CurrDir functionality of Autom…