Skip to content
OpenAdvisories

Archive

8 August 2024

Vulnerabilities first published on this day (UTC), newest first.

11 results · Clear filters · Feed

  • Critical 10.0

    Vonets WiFi Bridges Stack-based Buffer Overflow

    Stack-based buffer overflow vulnerabilities affecting Vonets industrial wifi bridge relays and wifi bridge repeaters, software versions 3.3.23.6.9 and prior, enable an unauthenticated remote attacker to execute arbitrary code.

  • Critical 9.1

    Vonets WiFi Bridges Improper Check or Handling of Exceptional Conditions

    Improper check or handling of exceptional conditions vulnerability affecting Vonets industrial wifi bridge relays and wifi bridge repeaters, software versions 3.3.23.6.9 and prior, enable an unauthenticated remote attacker to cause a denial of service. A spec…

  • Critical 9.1

    Vonets WiFi Bridges Command Injection

    Multiple OS command injection vulnerabilities affecting Vonets industrial wifi bridge relays and wifi bridge repeaters, software versions 3.3.23.6.9 and prior, enable an authenticated remote attacker to execute arbitrary OS commands via various endpoint param…

  • Critical 9.1

    VR Overlay RCE

    VRCX is an assistant/companion application for VRChat. In versions prior to 2024.03.23, a CefSharp browser with over-permission and cross-site scripting via overlay notification can be combined to result in remote command execution. These vulnerabilities are …

  • Critical 9.5

    Remote Code Execution in Advanced Software Framework DHCP server

    Improper Input Validation vulnerability in Microchip Techology Advanced Software Framework example DHCP server can cause remote code execution through a buffer overflow. This vulnerability is associated with program files tinydhcpserver.C and program routines…

  • Critical 10.0

    Command injection in KAON AR2140 routers

    Firmware in KAON AR2140 routers, prior to versions 3.2.50 and 4.2.16, is vulnerable to a shell command injection via sending a crafted request to one of the endpoints. In order to exploit this vulnerability, one has to have access to the administrative portal…

  • Critical 9.3

    Vulnerability of uncaught exceptions in the Graphics module Impact: Successful exploitation of this vulnerability may a…

  • Critical 9.8

    Appointment Booking Calendar Plugin and Online Scheduling Plugin – BookingPress 1.1.6 - 1.1.7 - Authentication Bypass to Account Takeover

    The Appointment Booking Calendar Plugin and Online Scheduling Plugin – BookingPress plugin for WordPress is vulnerable to authentication bypass in versions 1.1.6 to 1.1.7. This is due to the plugin not properly verifying a user's identity prior to logging the…

  • Critical 9.8

    An Unrestricted file upload vulnerability was found in "/Membership/edit_member.php" of Kashipara Live Membership Syste…

  • Critical 9.8

    A SQL injection vulnerability in "/index.php" of Kashipara Live Membership System v1.0 allows remote attackers to execu…

  • Critical 9.8

    A SQL injection vulnerability in "/oahms/admin/forgot-password.php" in PHPGurukul Old Age Home Management System v1.0 a…