Archive
7 August 2024
Vulnerabilities first published on this day (UTC), newest first.
118 results · Feed
-
Medium 5.1
Improper handling of insufficient permission in KnoxDualDARPolicy prior to SMR Aug-2024 Release 1 allows local attacker…
-
Medium 5.1
Out-of-bound write in libsmat.so prior to SMR Aug-2024 Release 1 allows local attackers to cause memory corruption.
-
High 7.3
Out-of-bound write in libsmat.so prior to SMR Aug-2024 Release 1 allows local attackers to execute arbitrary code.
-
Medium 4.0
Improper access control in Galaxy Watch prior to SMR Aug-2024 Release 1 allows local attackers to access sensitive info…
-
High 7.3
Out-of-bound write in libcodec2secmp4vdec.so prior to SMR Aug-2024 Release 1 allows local attackers to execute arbitrar…
-
Medium 5.1
Improper access control in KnoxService prior to SMR Aug-2024 Release 1 allows local attackers to get sensitive informat…
-
Medium 5.1
Improper access control in ExtControlDeviceService prior to SMR Aug-2024 Release 1 allows local attackers to access pro…
-
Medium 6.2
Improper access control in VoiceNoteService prior to SMR Aug-2024 Release 1 allows local attackers to bypass restrictio…
-
Medium 6.2
Improper access control in PaymentManagerService prior to SMR Aug-2024 Release 1 allows local attackers to bypass restr…
-
Medium 6.2
Improper access control in SamsungNotesService prior to SMR Aug-2024 Release 1 allows local attackers to bypass restric…
-
Medium 6.2
Improper access control in SmartThingsService prior to SMR Aug-2024 Release 1 allows local attackers to bypass restrict…
-
Medium 6.2
Improper access control in SamsungHealthService prior to SMR Aug-2024 Release 1 allows local attackers to bypass restri…
-
Medium 6.2
Improper access control in LedCoverService prior to SMR Aug-2024 Release 1 allows local attackers to bypass restriction…
-
Critical 9.8
SourceCodester Computer Laboratory Management System 1.0 allows classes/Master.php id SQL Injection.
-
Critical 9.8
SourceCodester Computer Laboratory Management System 1.0 allows admin/category/view_category.php id SQL Injection.
-
High 7.5
An Incorrect Access Control vulnerability was found in /smsa/view_teachers.php in Kashipara Responsive School Managemen…
-
Critical 9.8
A SQL injection vulnerability in /smsa/teacher_login.php in Kashipara Responsive School Management System v1.0 allows a…
-
Medium 6.3
A Reflected Cross Site Scripting (XSS) vulnerability was found in " /smsa/teacher_login.php" in Kashipara Responsive Sc…
-
High 7.5
An Incorrect Access Control vulnerability was found in /smsa/view_subject.php in Kashipara Responsive School Management…
-
High 7.5
Django vulnerable to a denial-of-service attack
An issue was discovered in Django 5.0 before 5.0.8 and 4.2 before 4.2.15. The urlize() and urlizetrunc() template filters are subject to a potential denial-of-service attack via very large inputs with a specific sequence of characters.
-
Medium 5.3
An Incorrect Access Control vulnerability was found in /smsa/view_marks.php in Kashipara Responsive School Management S…
-
Medium 5.5
A Reflected Cross Site Scripting (XSS) vulnerability was found in /smsa/student_login.php in Kashipara Responsive Schoo…
-
Medium 5.3
An Incorrect Access Control vulnerability was found in /smsa/view_students.php in Kashipara Responsive School Managemen…
-
High 7.5
Django memory consumption vulnerability
An issue was discovered in Django 5.0 before 5.0.8 and 4.2 before 4.2.15. The floatformat template filter is subject to significant memory consumption when given a string representation of a number in scientific notation with a large exponent.
-
Medium 4.8
A Reflected Cross Site Scripting (XSS) vulnerability was found in " /smsa/admin_login.php" in Kashipara Responsive Scho…
-
Medium 5.9
A Stored Cross Site Scripting (XSS) vulnerability was found in "/smsa/add_class_submit.php" in Responsive School Manage…
-
Medium 6.5
An Incorrect Access Control vulnerability was found in /smsa/admin_teacher_register_approval.php and /smsa/admin_teache…
-
High 7.5
An Incorrect Access Control vulnerability was found in /smsa/view_class.php in Kashipara Responsive School Management S…
-
High 7.5
An Incorrect Access Control vulnerability was found in /smsa/add_subject.php and /smsa/add_subject_submit.php in Kaship…
-
High 8.4
An issue in the Hardware info module of IT Solutions Enjay CRM OS v1.0 allows attackers to escape the restricted termin…
-
Critical 9.1
An Incorrect Access Control vulnerability was found in /smsa/add_class.php and /smsa/add_class_submit.php in Kashipara …
-
Medium 5.3
An Incorrect Access Control vulnerability was found in /smsa/admin_student_register_approval.php and /smsa/admin_studen…
-
High 8.4
An issue in the Ping feature of IT Solutions Enjay CRM OS v1.0 allows attackers to escape the restricted terminal envir…
-
Medium 5.3
An Incorrect Access Control vulnerability was found in /smsa/admin_dashboard.php in Kashipara Responsive School Managem…
-
Medium 5.3
An IP Spoofing vulnerability has been discovered in Likeshop up to 2.5.7.20210811. This issue allows an attacker to rep…
-
High 7.5
Django vulnerable to denial-of-service attack
An issue was discovered in Django 5.0 before 5.0.8 and 4.2 before 4.2.15. The urlize and urlizetrunc template filters, and the AdminURLFieldWidget widget, are subject to a potential denial-of-service attack via certain inputs with a very large number of Unico…
-
Critical 9.8
Django SQL injection vulnerability
An issue was discovered in Django 5.0 before 5.0.8 and 4.2 before 4.2.15. QuerySet.values() and values_list() methods on models with a JSONField are subject to SQL injection in column aliases via a crafted JSON object key as a passed *arg.
-
High 8.8
Nagios NDOUtils before 2.1.4 allows privilege escalation from nagios to root because certain executable files are owned…