Skip to content
OpenAdvisories

Archive

29 August 2024

Vulnerabilities first published on this day (UTC), newest first.

135 results · Feed

  • Critical 9.8

    RPi-Jukebox-RFID v2.7.0 was discovered to contain a remote code execution (RCE) vulnerability via htdocs\userScripts.php

  • Critical 9.8

    RPi-Jukebox-RFID v2.7.0 was discovered to contain a remote code execution (RCE) vulnerability via htdocs\inc.setWifi.php

  • Medium 6.1

    unmark 1.9.2 is vulnerable to Cross Site Scripting (XSS) via application/views/marks/add_by_url.php.

  • Medium 6.1
    CVE-2024-41358 Public exploit

    phpipam 1.6 is vulnerable to Cross Site Scripting (XSS) via app\admin\import-export\import-load-data.php.

  • Critical 9.8

    RPi-Jukebox-RFID v2.7.0 was discovered to contain a remote code execution (RCE) vulnerability via htdocs\inc.setWlanIpM…

  • Medium 6.1

    openflights commit 5234b5b is vulnerable to Cross-Site Scripting (XSS) via php/settings.php

  • Critical 9.8

    RPi-Jukebox-RFID v2.7.0 was discovered to contain a remote code execution (RCE) vulnerability via htdocs\manageFilesFol…

  • Medium 6.1

    bjyadmin commit a560fd5 is vulnerable to Cross Site Scripting (XSS) via Public/statics/umeditor1_2_3/php/imageUp.php

  • Medium 6.1

    Organizr v1.90 is vulnerable to Cross Site Scripting (XSS) via api.php.

  • Critical 9.8

    RPi-Jukebox-RFID v2.7.0 was discovered to contain a remote code execution (RCE) vulnerability via htdocs\api\playlist\a…

  • Medium 6.1

    openflights commit 5234b5b is vulnerable to Cross-Site Scripting (XSS) via php/alsearch.php

  • Medium 6.1

    bjyadmin commit a560fd5 is vulnerable to Cross Site Scripting (XSS) via Public/statics/umeditor1_2_3/php/getContent.php

  • Critical 9.8

    RPi-Jukebox-RFID v2.7.0 was discovered to contain a remote code execution (RCE) vulnerability via htdocs\trackEdit.php

  • Medium 6.1

    openflights commit 5234b5b is vulnerable to Cross-Site Scripting (XSS) via php/submit.php

  • Critical 9.8

    Organizr v1.90 was discovered to contain a SQL injection vulnerability via chat/setlike.php.