Skip to content
OpenAdvisories

Archive

26 August 2024

Vulnerabilities first published on this day (UTC), newest first.

← July 2024 2024 / August /26 September 2024 →
  1. 1129
  2. 266
  3. 321
  4. 413
  5. 5103
  6. 6160
  7. 7118
  8. 8112
  9. 966
  10. 1016
  11. 1122
  12. 12119
  13. 13226
  14. 14206
  15. 15122
  16. 1656
  17. 17135
  18. 1866
  19. 1972
  20. 20147
  21. 21177
  22. 22129
  23. 2378
  24. 2428
  25. 2524
  26. 26142
  27. 2767
  28. 2875
  29. 29135
  30. 3070
  31. 3118
All Critical High Medium Low Exploited only Public exploit

142 results · Feed

  • High 8.0
    CVE-2024-44796

    A cross-site scripting (XSS) vulnerability in the component /auth/AzureRedirect.php of PicUploader commit fcf82ea allow…

  • Medium 5.4
    CVE-2024-44797

    A cross-site scripting (XSS) vulnerability in the component /managers/enable_requests.php of Gazelle commit 63b3370 all…

  • Medium 6.6
    CVE-2024-44556

    Tenda AX1806 v1.0.0.1 contains a stack overflow via the adv.iptv.stballvlans parameter in the function setIptvInfo.

  • High 8.0
    CVE-2024-44565

    Tenda AX1806 v1.0.0.1 contains a stack overflow via the serverName parameter in the function form_fast_setting_internet…

  • Medium 6.1
    CVE-2024-44793

    A cross-site scripting (XSS) vulnerability in the component /managers/multiple_freeleech.php of Gazelle commit 63b3370 …

  • High 8.0
    CVE-2024-44563

    Tenda AX1806 v1.0.0.1 contains a stack overflow via the iptv.stb.port parameter in the function setIptvInfo.

  • High 8.8
    CVE-2024-44558

    Tenda AX1806 v1.0.0.1 contains a stack overflow via the adv.iptv.stbpvid parameter in the function setIptvInfo.

  • Medium 6.6
    CVE-2024-44549

    Tenda AX1806 v1.0.0.1 contains a stack overflow via the iptv.stb.port parameter in the function formGetIptv.

  • Medium 6.6
    CVE-2024-44552

    Tenda AX1806 v1.0.0.1 contains a stack overflow via the adv.iptv.stballvlans parameter in the function formGetIptv.

  • High 7.5
    CVE-2024-41996

    Validating the order of the public keys in the Diffie-Hellman Key Agreement Protocol, when an approved safe prime is us…

  • Critical 9.8
    CVE-2024-41285

    A stack overflow in FAST FW300R v1.3.13 Build 141023 Rel.61347n allows attackers to execute arbitrary code or cause a D…

  • Critical 9.8
    CVE-2024-41444

    SeaCMS v12.9 has a SQL injection vulnerability in the key parameter of /js/player/dmplayer/dmku/index.php?ac=so.

  • Medium 6.1
    CVE-2024-42816

    FastAPI Admin cross-site scripting (XSS) vulnerability in the Create Product function

    A cross-site scripting (XSS) vulnerability in the Create Product function of fastapi-admin pro v0.1.4 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Product Name parameter.

    fastapi-admin PyPI
  • Low 3.5
    CVE-2024-42792

    A Cross-Site Request Forgery (CSRF) vulnerability was found in Kashipara Music Management System v1.0 via /music/ajax.p…

  • Medium 6.1
    CVE-2024-42790

    A Reflected Cross Site Scripting (XSS) vulnerability was found in "/music/index.php?page=test" in Kashipara Music Manag…

  • Medium 6.1
    CVE-2024-42787

    A Stored Cross Site Scripting (XSS) vulnerability was found in "/music/ajax.php?action=save_playlist" in Kashipara Musi…

  • Medium 5.4
    CVE-2024-42913

    RuoYi CMS v4.7.9 was discovered to contain a SQL injection vulnerability via the job_id parameter at /sasfs1.

  • High 8.8
    CVE-2024-42791

    A Cross-Site Request Forgery (CSRF) vulnerability was found in Kashipara Music Management System v1.0 via /music/ajax.p…

  • Medium 6.3
    CVE-2024-42789

    A Reflected Cross Site Scripting (XSS) vulnerability was found in "/music/controller.php?page=test" in Kashipara Music …

  • Medium 6.1
    CVE-2024-42818

    FastAPI Admin Cross-site Scripting vulnerability in the Config-Create function

    A cross-site scripting (XSS) vulnerability in the Config-Create function of fastapi-admin pro v0.1.4 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Product Name parameter.

    fastapi-admin PyPI
  • Medium 6.1
    CVE-2024-42788

    A Stored Cross Site Scripting (XSS) vulnerability was found in "/music/ajax.php?action=save_music" in Kashipara Music M…

  • Medium 4.1
    CVE-2024-42906

    TestLink before v.1.9.20 is vulnerable to Cross Site Scripting (XSS) via the pop-up on upload file. When uploading a fi…