Skip to content
OpenAdvisories

Archive

20 August 2024

Vulnerabilities first published on this day (UTC), newest first.

← July 2024 2024 / August /20 September 2024 →
  1. 1129
  2. 266
  3. 321
  4. 413
  5. 5103
  6. 6160
  7. 7118
  8. 8112
  9. 966
  10. 1016
  11. 1122
  12. 12119
  13. 13226
  14. 14206
  15. 15122
  16. 1656
  17. 17135
  18. 1866
  19. 1972
  20. 20147
  21. 21177
  22. 22129
  23. 2378
  24. 2428
  25. 2524
  26. 26142
  27. 2767
  28. 2875
  29. 29135
  30. 3070
  31. 3118
All Critical High Medium Low Exploited only Public exploit

147 results · Feed

  • High 8.8
    CVE-2024-42619

    Pligg CMS v2.0.2 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/domain_manageme…

  • Medium 6.1
    CVE-2024-42560

    A cross-site scripting (XSS) vulnerability in the component update_page_details.php of Blood Bank And Donation Manageme…

  • High 8.8
    CVE-2024-42612

    Pligg CMS v2.0.2 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/domain_manageme…

  • High 8.8
    CVE-2024-42610

    Pligg CMS v2.0.2 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/admin_backup.ph…

  • High 8.8
    CVE-2024-42576

    A Cross-Site Request Forgery (CSRF) in the component edit_categorie.php of Warehouse Inventory System v2.0 allows attac…

  • High 7.5
    CVE-2024-42662

    An issue in apollocongif apollo v.2.2.0 allows a remote attacker to obtain sensitive information via a crafted request.

  • Critical 9.8
    CVE-2024-42574

    School Management System commit bae5aa was discovered to contain a SQL injection vulnerability via the medium parameter…

  • High 8.8
    CVE-2024-42621

    Pligg CMS v2.0.2 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/admin_editor.php

  • Critical 9.6
    CVE-2024-42581

    A Cross-Site Request Forgery (CSRF) in the component delete_group.php of Warehouse Inventory System v2.0 allows attacke…

  • High 8.8
    CVE-2024-42553

    A Cross-Site Request Forgery (CSRF) in the component admin_room_added.php of Hotel Management System commit 91caab8 all…

  • High 8.8
    CVE-2024-42611

    Pligg CMS v2.0.2 was discovered to contain a Cross-Site Request Forgery (CSRF) via admin/admin_page.php?link_id=1&mode=…

  • High 7.6
    CVE-2024-42564

    ERP commit 44bd04 was discovered to contain a SQL injection vulnerability via the id parameter at /index.php/basedata/i…

  • Critical 9.8
    CVE-2024-42919 Public exploit

    eScan Management Console 14.0.1400.2281 is vulnerable to Incorrect Access Control via acteScanAVReport.

  • High 8.8
    CVE-2024-42604

    Pligg CMS v2.0.2 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/admin_group.php…

  • High 8.8
    CVE-2024-42582

    A Cross-Site Request Forgery (CSRF) in the component delete_categorie.php of Warehouse Inventory System v2.0 allows att…

  • High 8.8
    CVE-2024-42555

    A Cross-Site Request Forgery (CSRF) in the component admin_room_removed.php of Hotel Management System commit 91caab8 a…

  • High 8.8
    CVE-2024-42579

    A Cross-Site Request Forgery (CSRF) in the component add_group.php of Warehouse Inventory System v2.0 allows attackers …

  • Critical 9.8
    CVE-2024-42568

    School Management System commit bae5aa was discovered to contain a SQL injection vulnerability via the transport parame…

  • High 8.8
    CVE-2024-42618

    Pligg CMS v2.0.2 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /module.php?module=kar…

  • Critical 9.8
    CVE-2024-42571

    School Management System commit bae5aa was discovered to contain a SQL injection vulnerability via the medium parameter…

  • High 8.8
    CVE-2024-42554

    Hotel Management System commit 91caab8 was discovered to contain a SQL injection vulnerability via the room_type parame…

  • Critical 9.8
    CVE-2024-42569

    School Management System commit bae5aa was discovered to contain a SQL injection vulnerability via the medium parameter…

  • Medium 6.7
    CVE-2024-42598

    SeaCMS 13.0 has a remote code execution vulnerability. The reason for this vulnerability is that although admin_editpla…

  • Critical 9.8
    CVE-2024-42556

    Hotel Management System commit 91caab8 was discovered to contain a SQL injection vulnerability via the room_type parame…

  • Medium 5.7
    CVE-2024-42603

    Pligg CMS v2.0.2 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/admin_backup.ph…

  • Critical 9.8
    CVE-2024-42562

    Pharmacy Management System commit a2efc8 was discovered to contain a SQL injection vulnerability via the invoice_number…

  • High 7.3
    CVE-2024-43688

    cron/entry.c in vixie cron before 9cc8ab1, as used in OpenBSD 7.4 and 7.5, allows a heap-based buffer underflow and mem…