Skip to content
OpenAdvisories

Archive

28 July 2024

Vulnerabilities first published on this day (UTC), newest first.

← June 2024 2024 / July /28 August 2024 →
  1. 1121
  2. 2135
  3. 360
  4. 438
  5. 566
  6. 624
  7. 74
  8. 866
  9. 9474
  10. 10122
  11. 1181
  12. 12201
  13. 1349
  14. 1411
  15. 1588
  16. 16255
  17. 1788
  18. 1849
  19. 1950
  20. 2083
  21. 2178
  22. 22136
  23. 2338
  24. 2485
  25. 2547
  26. 2672
  27. 2729
  28. 2827
  29. 29280
  30. 30171
  31. 31111
All Critical High Medium Low Exploited only Public exploit

8 results · Clear filters · Feed

  • High 8.8
    CVE-2024-7173

    TOTOLINK A3600R cstecgi.cgi loginauth buffer overflow

    A vulnerability, which was classified as critical, has been found in TOTOLINK A3600R 4.1.2cu.5182_B20201102. Affected by this issue is the function loginauth of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument password/http_host leads to buffer…

    Toto Link A3600R
  • High 8.8
    CVE-2024-7172

    TOTOLINK A3600R getSaveConfig buffer overflow

    A vulnerability classified as critical was found in TOTOLINK A3600R 4.1.2cu.5182_B20201102. Affected by this vulnerability is the function getSaveConfig of the file /cgi-bin/cstecgi.cgi?action=save&setting. The manipulation of the argument http_host leads to …

    Toto Link A3600R
  • High 7.3
    CVE-2024-7164

    SourceCodester School Fees Payment System sql injection

    A vulnerability has been found in SourceCodester School Fees Payment System 1.0 and classified as critical. This vulnerability affects unknown code of the file /ajax.php?action=login. The manipulation of the argument username leads to sql injection. The attac…

    SourceCodester School Fees Payment System
  • High 8.8
    CVE-2024-7157

    TOTOLINK A3100R getSaveConfig buffer overflow

    A vulnerability was found in TOTOLINK A3100R 4.1.2cu.5050_B20200504. It has been classified as critical. This affects the function getSaveConfig of the file /cgi-bin/cstecgi.cgi?action=save&setting. The manipulation of the argument http_host leads to buffer o…

    Toto Link A3100R
  • High 7.8
    CVE-2024-42051

    The MSI installer for Splashtop Streamer for Windows before 3.6.2.0 uses a temporary folder with weak permissions durin…

  • High 7.8
    CVE-2024-42052

    The MSI installer for Splashtop Streamer for Windows before 3.5.8.0 uses a temporary folder with weak permissions durin…

  • High 7.0
    CVE-2024-42050

    The MSI installer for Splashtop Streamer for Windows before 3.7.0.0 uses a temporary folder with weak permissions durin…

  • High 7.8
    CVE-2024-42053

    The MSI installer for Splashtop Streamer for Windows before 3.6.0.0 uses a temporary folder with weak permissions durin…