Archive
May 2024
Vulnerabilities first published in this month (UTC), newest first.
5,272 results · Feed
-
Low 2.7
TOTOLINK CP900L v4.1.5cu.798_B20221228 was discovered to contain a stack overflow via the desc parameter in the functio…
-
High 7.0CVE-2024-30212 Public exploit
Microchip Harmony 3 Core library allows read and write access to RAM via a SCSI READ or WRITE command
If a SCSI READ(10) command is initiated via USB using the largest LBA (0xFFFFFFFF) with it's default block size of 512 and a count of 1, the first 512 byte of the 0x80000000 memory area is returned to the user. If the block count is increased, the full RAM ca…
-
Critical 9.1
The TLS engine in Kwik commit 745fd4e2 does not track the current state of the connection. This vulnerability can allow…
-
Medium 6.5
In GNOME Shell through 45.7, a portal helper can be launched automatically (without user confirmation) based on network…
-
Critical 9.8
A SQL injection vulnerability in /model/get_timetable.php in campcodes Complete Web-Based School Management System 1.0 …
-
Medium 5.4
A SQL injection vulnerability in /model/get_teacher_timetable.php in campcodes Complete Web-Based School Management Sys…
-
Critical 9.8
A SQL injection vulnerability in /model/get_grade.php in campcodes Complete Web-Based School Management System 1.0 allo…
-
Critical 9.8
A SQL injection vulnerability in /model/get_student.php in campcodes Complete Web-Based School Management System 1.0 al…
-
Medium 6.3
A SQL injection vulnerability in /model/get_subject.php in campcodes Complete Web-Based School Management System 1.0 al…
-
Medium 5.4
A SQL injection vulnerability in /model/get_exam.php in campcodes Complete Web-Based School Management System 1.0 allow…
-
Medium 6.5
A SQL injection vulnerability in /model/get_student_subject.php in campcodes Complete Web-Based School Management Syste…
-
Critical 9.8
A SQL injection vulnerability in /model/get_subject_routing.php in campcodes Complete Web-Based School Management Syste…
-
Critical 9.8
A SQL injection vulnerability in /model/get_student1.php in campcodes Complete Web-Based School Management System 1.0 a…
-
Critical 9.8
A SQL injection vulnerability in /model/get_teacher.php in campcodes Complete Web-Based School Management System 1.0 al…
-
Medium 4.8
formwork Cross-site scripting vulnerability in Markdown fields
A cross-site scripting (XSS) vulnerability in the Edit function of Formwork before 1.13.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Content field.
-
High 7.5
A heap-based buffer overflow vulnerability exists in the Programming Software Connection FiBurn functionality of Automa…
-
High 8.2
A heap-based buffer overflow vulnerability exists in the Programming Software Connection CurrDir functionality of Autom…
-
High 8.2
A heap-based buffer overflow vulnerability exists in the Programming Software Connection CurrDir functionality of Autom…
-
High 8.2
Several out-of-bounds write vulnerabilities exist in the Programming Software Connection FileSystem API functionality o…
-
High 8.2
Several out-of-bounds write vulnerabilities exist in the Programming Software Connection FileSystem API functionality o…
-
High 8.2
Several out-of-bounds write vulnerabilities exist in the Programming Software Connection FileSystem API functionality o…
-
High 8.2
Several out-of-bounds write vulnerabilities exist in the Programming Software Connection FileSystem API functionality o…
-
High 8.2
Several out-of-bounds write vulnerabilities exist in the Programming Software Connection FileSystem API functionality o…
-
High 8.2
Several out-of-bounds write vulnerabilities exist in the Programming Software Connection FileSystem API functionality o…
-
Critical 9.8
A stack-based buffer overflow vulnerability exists in the Programming Software Connection FileSelect functionality of A…
-
Critical 9.8
A stack-based buffer overflow vulnerability exists in the Programming Software Connection FileSelect functionality of A…
-
High 7.5
A read-what-where vulnerability exists in the Programming Software Connection IMM 01A1 Memory Read functionality of Aut…
-
Critical 9.1
A write-what-where vulnerability exists in the Programming Software Connection Remote Memory Diagnostics functionality …
-
Critical 9.8
A leftover debug code vulnerability exists in the Telnet Diagnostic Interface functionality of AutomationDirect P3-550E…
-
Critical 9.8
A code injection vulnerability exists in the scan_lib.bin functionality of AutomationDirect P3-550E 1.2.10.9. A special…
-
Critical 9.8
Douchat 4.0.5 suffers from an arbitrary file upload vulnerability via Public/Plugins/webuploader/server/preview.php.
-
Medium 6.5
ci solution CI-Out-of-Office Manager through 6.0.0.77 uses a Hard-coded Cryptographic Key.
-
Medium 5.3
TOTOLINK CP900L v4.1.5cu.798_B20221228 was discovered to contain a stack overflow via the desc parameter in the functio…
-
High 8.3
Type Confusion in V8 in Google Chrome prior to 125.0.6422.112 allowed a remote attacker to execute arbitrary code insid…
KEV May 28, 2024 -
High 8.8
TOTOLINK CP900L v4.1.5cu.798_B20221228 was discovered to contain a stack overflow via the password parameter in the fun…
-
Medium 5.4
Cross Site Request Forgery vulnerability in iManager
Cross-Site Request Forgery vulnerability has been discovered in OpenText™ iManager 3.2.6.0200. This could lead to sensitive information disclosure.
-
High 7.8
XML External Entity injection vulnerability in iManager
XML External Entity injection vulnerability found in OpenText™ iManager 3.2.6.0200. This could lead to remote code execution by parsing untrusted XML payload
-
Critical 9.8
TOTOLINK CP900L v4.1.5cu.798_B20221228 was discovered to contain a stack overflow via the desc parameter in the functio…
-
High 8.8CVE-2024-35397 EPSS 15%
TOTOLINK CP900L v4.1.5cu.798_B20221228 weas discovered to contain a command injection vulnerability in the NTPSyncWithH…
-
Medium 6.4
Improper fingerprint validation in the TeamViewer Client
Improper fingerprint validation in the TeamViewer Client (Full & Host) prior Version 15.54 for Windows and macOS allows an attacker with administrative user rights to further elevate privileges via executable sideloading.