Skip to content
OpenAdvisories

Archive

23 September 2024

Vulnerabilities first published on this day (UTC), newest first.

← August 2024 2024 / September /23 October 2024 →
  1. 111
  2. 276
  3. 374
  4. 4176
  5. 568
  6. 674
  7. 751
  8. 827
  9. 957
  10. 10237
  11. 11115
  12. 12118
  13. 13152
  14. 1413
  15. 1529
  16. 16164
  17. 17107
  18. 18241
  19. 1961
  20. 2038
  21. 219
  22. 2220
  23. 2362
  24. 2474
  25. 25103
  26. 26119
  27. 27162
  28. 2829
  29. 299
  30. 3066
All Critical High Medium Low Exploited only Public exploit

62 results · Feed

  • Medium 6.3
    CVE-2024-9093

    SourceCodester Profile Registration without Reload Refresh GET Parameter del.php sql injection

    A vulnerability classified as critical has been found in SourceCodester Profile Registration without Reload Refresh 1.0. This affects an unknown part of the file del.php of the component GET Parameter Handler. The manipulation of the argument list leads to sq…

    SourceCodester Profile Registration without Reload Refresh
  • Low 3.5
    CVE-2024-9092

    SourceCodester Profile Registration without Reload Refresh Registration Form add.php cross site scripting

    A vulnerability was found in SourceCodester Profile Registration without Reload Refresh 1.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the file add.php of the component Registration Form. The manipulation of the…

    SourceCodester Profile Registration without Reload Refresh
  • Low 3.7
    CVE-2024-45453

    WordPress Maintenance Redirect plugin <= 2.0.1 - IP Bypass vulnerability

    Authentication Bypass by Spoofing vulnerability in Peter Hardy-vanDoorn Maintenance Redirect jf3-maintenance-mode.This issue affects Maintenance Redirect: from n/a through <= 2.0.1.

    Peter Hardy-vanDoorn Maintenance Redirect
  • Medium 6.5
    CVE-2024-44048

    WordPress Product Carousel Slider & Grid Ultimate for WooCommerce plugin <= 1.9.10 - Authenticated Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in wpWax Product Carousel Slider & Grid Ultimate for WooCommerce woo-product-carousel-slider-and-grid-ultimate.This issue affects Product Car…

    wpWax Product Carousel Slider & Grid Ultimate for WooCommerce Web / CMS
  • Medium 6.5
    CVE-2024-43996

    WordPress ElementsKit Pro plugin <= 3.6.0 - Local File Inclusion vulnerability

    Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in ElementsKit ElementsKit Pro allows PHP Local File Inclusion.This issue affects ElementsKit Pro: from n/a through 3.6.0.

    ElementsKit ElementsKit Pro
  • High 7.3
    CVE-2024-9091

    code-projects Student Record System index.php sql injection

    A vulnerability was found in code-projects Student Record System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /index.php. The manipulation of the argument regno leads to sql injection. The attac…

    code-projects Student Record System
  • Medium 5.4
    CVE-2023-46948 Public exploit

    A reflected Cross-Site Scripting (XSS) vulnerability was found on Temenos T24 Browser R19.40 that enables a remote atta…

  • Critical 9.8
    CVE-2024-34331

    A lack of code signature verification in Parallels Desktop for Mac v19.3.0 and below allows attackers to escalate privi…

  • Medium 6.7
    CVE-2024-39843

    A SQL injection vulnerability in Centreon 24.04.2 allows a remote high-privileged attacker to execute arbitrary SQL com…

  • Medium 5.9
    CVE-2024-39341

    Entrust Instant Financial Issuance (On Premise) Software (formerly known as Cardwizard) 6.10.0, 6.9.0, 6.9.1, 6.9.2, an…

  • High 7.2
    CVE-2024-39842

    A SQL injection vulnerability in Centreon 24.04.2 allows a remote high-privileged attacker to execute arbitrary SQL com…

  • Medium 6.6
    CVE-2024-39342

    Entrust Instant Financial Issuance (formerly known as Cardwizard) 6.10.0, 6.9.0, 6.9.1, 6.9.2, and 6.8.x and earlier us…

  • Medium 5.9
    CVE-2024-46241

    PHPGurukul Dairy Farm Shop Management System v1.1 is vulnerable to Cross-Site Scripting (XSS) via the pname parameter i…

  • High 7.6
    CVE-2024-46639

    A cross-site scripting (XSS) vulnerability in HelpDeskZ v2.0.2 allows attackers to execute arbitrary web scripts or HTM…

  • High 7.2
    CVE-2024-40442

    An issue in Doccano Open source annotation tools for machine learning practitioners v.1.8.4 and Doccano Auto Labeling P…

  • Medium 6.6
    CVE-2024-40441

    An issue in Doccano Open source annotation tools for machine learning practitioners v.1.8.4 and Doccano Auto Labeling P…

  • Medium 6.6
    CVE-2024-44540

    Ubiquiti AirMax firmware version firmware version 8 allows attackers with physical access to gain a privileged command …

  • High 7.6
    CVE-2024-41228

    A symlink following vulnerability in the pouch cp function of AliyunContainerService pouch v1.3.1 allows attackers to e…

  • High 7.5
    CVE-2024-42861 Public exploit

    An issue in IEEE 802.1AS linuxptp v.4.2 and before allowing a remote attacker to cause a denial of service via a crafte…

    linuxptp linuxptp linuxptp Debian Ubuntu Azure Linux
  • High 8.8
    CVE-2024-37779

    WoodWing Elvis DAM v6.98.1 was discovered to contain an authenticated remote command execution (RCE) vulnerability via …

  • Medium 6.1
    CVE-2024-47227

    iRedAdmin before 2.6 allows XSS, e.g., via order_name.

  • Critical 9.8
    CVE-2024-47222

    New Cloud MyOffice SDK Collaborative Editing Server 2.2.2 through 2.8 allows SSRF via manipulation of requests from ext…