Skip to content
OpenAdvisories

Archive

28 July 2024

Vulnerabilities first published on this day (UTC), newest first.

← June 2024 2024 / July /28 August 2024 →
  1. 1121
  2. 2135
  3. 360
  4. 438
  5. 566
  6. 624
  7. 74
  8. 866
  9. 9474
  10. 10122
  11. 1181
  12. 12201
  13. 1349
  14. 1411
  15. 1588
  16. 16255
  17. 1788
  18. 1849
  19. 1950
  20. 2083
  21. 2178
  22. 22136
  23. 2338
  24. 2485
  25. 2547
  26. 2672
  27. 2729
  28. 2827
  29. 29280
  30. 30171
  31. 31111
All Critical High Medium Low Exploited only Public exploit

14 results · Clear filters · Feed

  • Medium 6.3
    CVE-2024-7171

    TOTOLINK A3600R cstecgi.cgi NTPSyncWithHost os command injection

    A vulnerability classified as critical has been found in TOTOLINK A3600R 4.1.2cu.5182_B20201102. Affected is the function NTPSyncWithHost of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument hostTime leads to os command injection. It is possible…

    Toto Link A3600R
  • Medium 4.3
    CVE-2024-7169

    SourceCodester School Fees Payment System ajax.php cross-site request forgery

    A vulnerability classified as problematic has been found in SourceCodester School Fees Payment System 1.0. This affects an unknown part of the file /ajax.php. The manipulation leads to cross-site request forgery. It is possible to initiate the attack remotely…

    SourceCodester School Fees Payment System
  • Medium 6.3
    CVE-2024-7168

    SourceCodester School Fees Payment System manage_user.php sql injection

    A vulnerability was found in SourceCodester School Fees Payment System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /manage_user.php. The manipulation of the argument id leads to sql injection. The attac…

    SourceCodester School Fees Payment System
  • Medium 6.3
    CVE-2024-7167

    SourceCodester School Fees Payment System manage_course.php sql injection

    A vulnerability was found in SourceCodester School Fees Payment System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /manage_course.php. The manipulation of the argument id leads to sql injection…

    SourceCodester School Fees Payment System
  • Medium 6.3
    CVE-2024-7166

    SourceCodester School Fees Payment System receipt.php sql injection

    A vulnerability was found in SourceCodester School Fees Payment System 1.0. It has been classified as critical. Affected is an unknown function of the file /receipt.php. The manipulation of the argument ef_id leads to sql injection. It is possible to launch t…

    SourceCodester School Fees Payment System
  • Medium 6.3
    CVE-2024-7165

    SourceCodester School Fees Payment System view_payment.php sql injection

    A vulnerability was found in SourceCodester School Fees Payment System 1.0 and classified as critical. This issue affects some unknown processing of the file /view_payment.php. The manipulation of the argument ef_id leads to sql injection. The attack may be i…

    SourceCodester School Fees Payment System
  • Medium 4.3
    CVE-2024-7161

    SeaCMS Password Change cross-site request forgery

    A vulnerability classified as problematic was found in SeaCMS 13.0. Affected by this vulnerability is an unknown functionality of the file /member.php?action=chgpwdsubmit of the component Password Change Handler. The manipulation of the argument newpwd/newpwd…

  • Medium 6.3
    CVE-2024-7160

    TOTOLINK A3700R cstecgi.cgi setWanCfg command injection

    A vulnerability classified as critical has been found in TOTOLINK A3700R 9.1.2u.5822_B20200513. Affected is the function setWanCfg of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument hostName leads to command injection. It is possible to launch…

    Toto Link A3700R
  • Medium 5.5
    CVE-2024-7159

    TOTOLINK A3600R Telnet Service product.ini hard-coded password

    A vulnerability was found in TOTOLINK A3600R 4.1.2cu.5182_B20201102. It has been rated as critical. This issue affects some unknown processing of the file /web_cste/cgi-bin/product.ini of the component Telnet Service. The manipulation leads to use of hard-cod…

    Toto Link A3600R
  • Medium 6.3
    CVE-2024-7158

    TOTOLINK A3100R HTTP POST Request cstecgi.cgi setTelnetCfg command injection

    A vulnerability was found in TOTOLINK A3100R 4.1.2cu.5050_B20200504. It has been declared as critical. This vulnerability affects the function setTelnetCfg of the file /cgi-bin/cstecgi.cgi of the component HTTP POST Request Handler. The manipulation of the ar…

    Toto Link A3100R
  • Medium 5.3
    CVE-2024-7156 EPSS 12%

    TOTOLINK A3700R apmib Configuration ExportSettings.sh information disclosure

    A vulnerability was found in TOTOLINK A3700R 9.1.2u.5822_B20200513 and classified as problematic. Affected by this issue is some unknown functionality of the file /cgi-bin/ExportSettings.sh of the component apmib Configuration Handler. The manipulation leads …

    Toto Link A3700R
  • Medium 4.3
    CVE-2024-7154

    TOTOLINK A3700R Password Reset wizard.html access control

    A vulnerability, which was classified as problematic, was found in TOTOLINK A3700R 9.1.2u.5822_B20200513. Affected is an unknown function of the file /wizard.html of the component Password Reset Handler. The manipulation leads to improper access controls. It …

    Toto Link A3700R
  • Medium 6.1
    CVE-2024-42055

    Cervantes through 0.5-alpha allows stored XSS.

  • Medium 5.4
    CVE-2024-42054

    Cervantes through 0.5-alpha accepts insecure file uploads.