Skip to content
OpenAdvisories

Archive

15 July 2024

Vulnerabilities first published on this day (UTC), newest first.

← June 2024 2024 / July /15 August 2024 →
  1. 1121
  2. 2135
  3. 360
  4. 438
  5. 566
  6. 624
  7. 74
  8. 866
  9. 9474
  10. 10122
  11. 1181
  12. 12201
  13. 1349
  14. 1411
  15. 1588
  16. 16255
  17. 1788
  18. 1849
  19. 1950
  20. 2083
  21. 2178
  22. 22136
  23. 2338
  24. 2485
  25. 2547
  26. 2672
  27. 2729
  28. 2827
  29. 29280
  30. 30171
  31. 31111
All Critical High Medium Low Exploited only Public exploit

51 results · Clear filters · Feed

  • Medium 6.5
    CVE-2024-39736

    IBM Datacap Navigator HTTP HOST header injection

    IBM Datacap Navigator 9.1.5, 9.1.6, 9.1.7, 9.1.8, and 9.1.9 is vulnerable to HTTP header injection, caused by improper validation of input by the HOST headers. This could allow an attacker to conduct various attacks against the vulnerable system, including cr…

    IBM Datacap Navigator
  • Medium 5.4
    CVE-2024-39737

    IBM Datacap Navigator information disclosure

    IBM Datacap Navigator 9.1.5, 9.1.6, 9.1.7, 9.1.8, and 9.1.9 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system.…

    IBM Datacap Navigator
  • Medium 5.4
    CVE-2024-39739

    IBM Datacap Navigator server-side request forgery

    IBM Datacap Navigator 9.1.5, 9.1.6, 9.1.7, 9.1.8, and 9.1.9 is vulnerable to server-side request forgery (SSRF). This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating…

    IBM Datacap Navigator
  • Medium 6.3
    CVE-2024-6736

    SourceCodester Employee and Visitor Gate Pass Logging System view_employee.php sql injection

    A vulnerability was found in SourceCodester Employee and Visitor Gate Pass Logging System 1.0. It has been rated as critical. This issue affects some unknown processing of the file view_employee.php. The manipulation of the argument id leads to sql injection.…

    SourceCodester Employee and Visitor Gate Pass Logging System
  • Medium 6.3
    CVE-2024-6735

    itsourcecode Tailoring Management System setgeneral.php sql injection

    A vulnerability was found in itsourcecode Tailoring Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file setgeneral.php. The manipulation of the argument sitename/email/mobile/sms/currency leads to sql i…

    itsourcecode Tailoring Management System
  • Medium 4.2
    CVE-2024-31946

    An issue was discovered in Stormshield Network Security (SNS) 3.7.0 through 3.7.41, 3.10.0 through 3.11.29, 4.0 through…

  • Medium 5.3
    CVE-2024-40555

    Tmall_demo v2024.07.03 was discovered to contain an arbitrary file upload vulnerability.

  • Medium 6.5
    CVE-2024-40416

    A vulnerability in /goform/SetVirtualServerCfg in the sub_6320C function in Tenda AX1806 1.0.0.1 firmware leads to stac…

  • Medium 4.9
    CVE-2024-40553

    Tmall_demo v2024.07.03 was discovered to contain an arbitrary file upload via the component uploadUserHeadImage.

  • Medium 4.2
    CVE-2024-37386

    An issue was discovered in Stormshield Network Security (SNS) 4.0.0 through 4.3.25, 4.4.0 through 4.7.5, and 4.8.0. Cer…

  • Medium 6.8
    CVE-2024-37016

    Mengshen Wireless Door Alarm M70 2024-05-24 allows Authentication Bypass via a Capture-Replay approach.