Skip to content
OpenAdvisories

Archive

25 August 2024

Vulnerabilities first published on this day (UTC), newest first.

← July 2024 2024 / August /25 September 2024 →
  1. 1129
  2. 266
  3. 321
  4. 413
  5. 5103
  6. 6160
  7. 7118
  8. 8112
  9. 966
  10. 1016
  11. 1122
  12. 12119
  13. 13226
  14. 14206
  15. 15122
  16. 1656
  17. 17135
  18. 1866
  19. 1972
  20. 20147
  21. 21177
  22. 22129
  23. 2378
  24. 2428
  25. 2524
  26. 26142
  27. 2767
  28. 2875
  29. 29135
  30. 3070
  31. 3118
All Critical High Medium Low Exploited only Public exploit

11 results · Clear filters · Feed

  • Medium 4.7
    CVE-2024-8155

    ContiNew Admin tree sql injection

    A vulnerability classified as critical was found in ContiNew Admin 3.2.0. Affected by this vulnerability is the function top.continew.starter.extension.crud.controller.BaseController#tree of the file /api/system/dept/tree?sort=parentId%2Casc&sort=sort%2Casc. …

    ContiNew Admin
  • Medium 4.7
    CVE-2024-8150

    ContiNew Admin user sql injection

    A vulnerability was found in ContiNew Admin 3.2.0 and classified as critical. Affected by this issue is the function top.continew.starter.extension.crud.controller.BaseController#page of the file /api/system/user?deptId=1&page=1&size=10. The manipulation of t…

    ContiNew Admin
  • Medium 6.3
    CVE-2024-8147

    code-projects Pharmacy Management System index.php sql injection

    A vulnerability was found in code-projects Pharmacy Management System 1.0 and classified as critical. This issue affects some unknown processing of the file /index.php?action=editPharmacist. The manipulation of the argument id leads to sql injection. The atta…

    code-projects Pharmacy Management System
  • Medium 6.3
    CVE-2024-8146

    code-projects Pharmacy Management System index.php sql injection

    A vulnerability has been found in code-projects Pharmacy Management System 1.0 and classified as critical. This vulnerability affects unknown code of the file /index.php?action=editSalesman. The manipulation of the argument id leads to sql injection. The atta…

    code-projects Pharmacy Management System
  • Medium 4.3
    CVE-2024-42339

    CyberArk - CWE-200: Exposure of Sensitive Information to an Unauthorized Actor

    CyberArk - CWE-200: Exposure of Sensitive Information to an Unauthorized Actor

    cyberark CyberArk Identity Management
  • Medium 4.3
    CVE-2024-42338

    CyberArk - CWE-200: Exposure of Sensitive Information to an Unauthorized Actor

    CyberArk - CWE-200: Exposure of Sensitive Information to an Unauthorized Actor

    cyberark CyberArk Identity Management
  • Medium 4.3
    CVE-2024-42337

    CyberArk - CWE-200: Exposure of Sensitive Information to an Unauthorized Actor

    CyberArk - CWE-200: Exposure of Sensitive Information to an Unauthorized Actor

    cyberark CyberArk Identity Management
  • Medium 6.3
    CVE-2024-8139

    itsourcecode E-Commerce Website search_list.php sql injection

    A vulnerability has been found in itsourcecode E-Commerce Website 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file search_list.php. The manipulation of the argument user leads to sql injection. The attack …

    itsourcecode E-Commerce Website
  • Medium 6.3
    CVE-2024-8138

    code-projects Pharmacy Management System Parameter index.php editManager sql injection

    A vulnerability, which was classified as critical, was found in code-projects Pharmacy Management System 1.0. Affected is the function editManager of the file /index.php?action=editManager of the component Parameter Handler. The manipulation of the argument i…

    code-projects Pharmacy Management System
  • Medium 5.3
    CVE-2023-48957

    PureVPN Linux client 2.0.2-Productions fails to properly handle DNS queries, allowing them to bypass the VPN tunnel and…

  • Medium 5.3
    CVE-2024-45244 Public exploit

    Hyperledger Fabric does not verify request has a timestamp within the expected time window

    Hyperledger Fabric through 3.0.0 and 2.5.x through 2.5.9 do not verify that a request has a timestamp within the expected time window.

    github.com/hyperledger/fabric Go