Skip to content
OpenAdvisories

Archive

6 August 2024

Vulnerabilities first published on this day (UTC), newest first.

← July 2024 2024 / August /6 September 2024 →
  1. 1129
  2. 266
  3. 321
  4. 413
  5. 5103
  6. 6160
  7. 7118
  8. 8112
  9. 966
  10. 1016
  11. 1122
  12. 12119
  13. 13226
  14. 14206
  15. 15122
  16. 1656
  17. 17135
  18. 1866
  19. 1972
  20. 20147
  21. 21177
  22. 22129
  23. 2378
  24. 2428
  25. 2524
  26. 26142
  27. 2767
  28. 2875
  29. 29135
  30. 3070
  31. 3118
All Critical High Medium Low Exploited only Public exploit

55 results · Clear filters · Feed

  • Medium 4.2
    CVE-2024-7009 EPSS 14%

    Calibre SQL Injection

    Unsanitized user-input in Calibre <= 7.15.0 allow users with permissions to perform full-text searches to achieve SQL injection on the SQLite database.

    Calibre Calibre calibre calibre Debian Ubuntu
  • Medium 5.4
    CVE-2024-7008 Scanner template EPSS 26%

    Calibre Reflected Cross-Site Scripting (XSS)

    Unsanitized user-input in Calibre <= 7.15.0 allow attackers to perform reflected cross-site scripting.

    Calibre Calibre calibre calibre Debian Ubuntu
  • Medium 6.3
    CVE-2024-7500

    itsourcecode Airline Reservation System admin_class.php save_settings unrestricted upload

    A vulnerability was found in itsourcecode Airline Reservation System 1.0. It has been rated as critical. Affected by this issue is the function save_settings of the file admin/admin_class.php. The manipulation of the argument img leads to unrestricted upload.…

    itsourcecode Airline Reservation System
  • Medium 6.3
    CVE-2024-7499

    itsourcecode Airline Reservation System flights.php sql injection

    A vulnerability was found in itsourcecode Airline Reservation System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file flights.php. The manipulation of the argument departure_airport_id leads to sql …

    itsourcecode Airline Reservation System
  • Medium 6.7
    CVE-2024-5963

    An unquoted executable path exists in Hitachi Device Manager

    Unquoted Executable Path vulnerability in Hitachi Device Manager on Windows (Device Manager Server component).This issue affects Hitachi Device Manager: before 8.8.7-00.

    Hitachi Hitachi Device Manager
  • Medium 6.3
    CVE-2024-7497

    itsourcecode Airline Reservation System index.php file inclusion

    A vulnerability was found in itsourcecode Airline Reservation System 1.0 and classified as critical. This issue affects some unknown processing of the file /admin/index.php. The manipulation of the argument page leads to file inclusion. The attack may be init…

    itsourcecode Airline Reservation System
  • Medium 6.3
    CVE-2024-7496

    itsourcecode Airline Reservation System index.php file inclusion

    A vulnerability has been found in itsourcecode Airline Reservation System 1.0 and classified as critical. This vulnerability affects unknown code of the file /index.php. The manipulation of the argument page leads to file inclusion. The attack can be initiate…

    itsourcecode Airline Reservation System
  • Medium 6.3
    CVE-2024-7495

    itsourcecode Laravel Accounting System HomeController.php unrestricted upload

    A vulnerability, which was classified as critical, was found in itsourcecode Laravel Accounting System 1.0. This affects an unknown part of the file app/Http/Controllers/HomeController.php. The manipulation of the argument image leads to unrestricted upload. …

    itsourcecode Laravel Accounting System
  • Medium 6.1
    CVE-2023-40819

    ID4Portais in version < V.2022.837.002a returns message parameter unsanitized in the response, resulting in a HTML Inje…

  • Medium 6.5
    CVE-2024-39229

    An issue in GL-iNet products AR750/AR750S/AR300M/AR300M16/MT300N-V2/B1300/MT1300/SFT1200/X750 v4.3.11, MT3000/MT2500/AX…

  • Medium 4.3
    CVE-2024-39226 EPSS 20%

    GL-iNet products AR750/AR750S/AR300M/AR300M16/MT300N-V2/B1300/MT1300/SFT1200/X750 v4.3.11, MT3000/MT2500/AXT1800/AX1800…

  • Medium 6.1
    CVE-2024-28740

    Cross Site Scripting vulnerability in Koha ILS 23.05 and before allows a remote attacker to execute arbitrary code via …

  • Medium 5.5
    CVE-2024-36424 Public exploit

    K7RKScan.sys in K7 Ultimate Security before 17.0.2019 allows local users to cause a denial of service (BSOD) because of…

  • Medium 6.1
    CVE-2024-41333

    A reflected cross-site scripting (XSS) vulnerability in Phpgurukul Tourism Management System v2.0 allows attackers to e…

  • Medium 6.3
    CVE-2024-42218

    1Password 8 before 8.10.38 for macOS allows local attackers to exfiltrate vault items by bypassing macOS-specific secur…