Skip to content
OpenAdvisories

Archive

12 August 2024

Vulnerabilities first published on this day (UTC), newest first.

← July 2024 2024 / August /12 September 2024 →
  1. 1129
  2. 266
  3. 321
  4. 413
  5. 5103
  6. 6160
  7. 7118
  8. 8112
  9. 966
  10. 1016
  11. 1122
  12. 12119
  13. 13226
  14. 14206
  15. 15122
  16. 1656
  17. 17135
  18. 1866
  19. 1972
  20. 20147
  21. 21177
  22. 22129
  23. 2378
  24. 2428
  25. 2524
  26. 26142
  27. 2767
  28. 2875
  29. 29135
  30. 3070
  31. 3118
All Critical High Medium Low Exploited only Public exploit

16 results · Clear filters · Feed

  • Critical 9.8
    CVE-2024-43360 Scanner template

    ZoneMinder Time-based SQL Injection

    ZoneMinder is a free, open source closed-circuit television software application. ZoneMinder is affected by a time-based SQL Injection vulnerability. This vulnerability is fixed in 1.36.34 and 1.37.61.

    ZoneMinder zoneminder zoneminder zoneminder Debian Ubuntu
  • Critical 10.0
    CVE-2024-42489

    Pro Macros Remote Code Execution via Viewpdf and similar macros

    Pro Macros provides XWiki rendering macros. Missing escaping in the Viewpdf macro allows any user with view right on the `CKEditor.HTMLConverter` page or edit or comment right on any page to perform remote code execution. Other macros like Viewppt are vulnera…

    xwikisas xwiki-pro-macros
  • Critical 10.0
    CVE-2024-42479

    llama.cpp allows write-what-where in rpc_server::set_tensor

    llama.cpp provides LLM inference in C/C++. The unsafe `data` pointer member in the `rpc_tensor` structure can cause arbitrary address writing. This vulnerability is fixed in b3561.

    ggerganov llama.cpp
  • Critical 10.0
    CVE-2024-6917

    RCE in Veribilim Software's Veribase Order Management

    Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in Veribilim Software Veribase Order Management allows OS Command Injection. This issue affects Veribase Order Management: before v4.010.2.

    Veribilim Software Veribase Order Management
  • Critical 9.8
    CVE-2024-38530

    Open eClass Platform allows Arbitrary File Upload in "modules/h5p/save.php"

    The Open eClass platform (formerly known as GUnet eClass) is a complete Course Management System. An arbitrary file upload vulnerability in the "save" functionality of the H5P module enables unauthenticated users to upload arbitrary files on the server's file…

    gunet openeclass
  • Critical 9.9
    CVE-2024-6684

    Authentication Bypass in GST Electronics' inohom Nova Panel N7

    Authentication Bypass Using an Alternate Path or Channel vulnerability in GST Electronics inohom Nova Panel N7 allows Authentication Bypass. This issue affects inohom Nova Panel N7: through 1.9.9.6. NOTE: The vendor was contacted and it was learned that the p…

    GST Electronics inohom Nova Panel N7
  • Critical 9.1
    CVE-2024-42167

    Command Injection in Organisationname

    The function "generate_app_certificates" in controllers/saml2/saml2.js of FIWARE Keyrock <= 8.4 does not neutralize special elements used in an OS Command properly. This allows an authenticated user with permissions to create applications to execute commands …

    FIWARE FIWARE Keyrock
  • Critical 9.1
    CVE-2024-42166

    Command Injection in Applicationname

    The function "generate_app_certificates" in lib/app_certificates.js of FIWARE Keyrock <= 8.4 does not neutralize special elements used in an OS Command properly. This allows an authenticated user with permissions to create applications to execute commands by …

    FIWARE FIWARE Keyrock
  • Critical 9.8
    CVE-2024-41651 Public exploit

    An issue in Prestashop v.8.1.7 and before allows a remote attacker to execute arbitrary code via the module upgrade fun…

  • Critical 9.8
    CVE-2024-41475

    Gnuboard g6 6.0.7 is vulnerable to Session hijacking due to a CORS misconfiguration.

  • Critical 9.8
    CVE-2024-42748

    In TOTOLINK X5000r v9.1.0cu.2350_b20230313, the file /cgi-bin/cstecgi.cgi contains an OS command injection vulnerabilit…

  • Critical 9.8
    CVE-2024-42546

    TOTOLINK A3100R V4.1.2cu.5050_B20200504 has a buffer overflow vulnerability in the password parameter in the loginauth …

  • Critical 9.8
    CVE-2024-42545

    TOTOLINK A3700R v9.1.2u.5822_B20200513 has a buffer overflow vulnerability in the ssid parameter in setWizardCfg functi…

  • Critical 9.8
    CVE-2024-42745

    In TOTOLINK X5000r v9.1.0cu.2350_b20230313, the file /cgi-bin/cstecgi.cgi contains an OS command injection vulnerabilit…

  • Critical 9.8
    CVE-2024-42547

    TOTOLINK A3100R V4.1.2cu.5050_B20200504 has a buffer overflow vulnerability in the http_host parameter in the loginauth…

  • Critical 9.8
    CVE-2024-42520

    TOTOLINK A3002R v4.0.0-B20230531.1404 contains a buffer overflow vulnerability in /bin/boa via formParentControl.