Archive
7 October 2024
Vulnerabilities first published on this day (UTC), newest first.
53 results · Clear filters · Feed
-
Medium 4.4
In vdec, there is a possible out of bounds read due to a missing bounds check. This could lead to local information dis…
-
Medium 4.4
In vdec, there is a possible out of bounds read due to a missing bounds check. This could lead to local information dis…
-
Medium 6.7
In vdec, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of …
-
Medium 6.1
LimeSurvey Cross Site Scripting vulnerability
Cross Site Scripting vulnerability in LimeSurvey before 6.5.12+240611 allows a remote attacker to execute arbitrary code via a crafted script to the title and comment fields.
-
Medium 6.1
LimeSurvey Cross Site Scripting vulnerability
Cross Site Scripting vulnerability in LimeSurvey before 6.5.0+240319 allows a remote attacker to execute arbitrary code via a lack of input validation and output encoding in the Alert Widget's message component.
-
Medium 6.1
itsourcecode Placement Management System 1.0 is vulnerable to Cross Site Scripting (XSS) via the Full Name field in reg…
-
Medium 5.5
TP-Link WR740N V6 has a stack overflow vulnerability via the ssid parameter in /userRpm/popupSiteSurveyRpm.htm url.
-
Medium 6.5
IoT Haat Smart Plug IH-IN-16A-S IH-IN-16A-S v5.16.1 suffers from Insufficient Session Expiration. The lack of validatio…
-
Medium 4.9
BlueCMS 1.6 suffers from Arbitrary File Deletion via the file_name parameter in an /admin/database.php?act=del request.
-
Medium 6.5
A security flaw has been discovered in Solvait version 24.4.2 that allows an attacker to elevate their privileges. By m…
-
Medium 6.6
OnlineNewsSite v1.0 is vulnerable to Cross Site Scripting (XSS) which allows attackers to execute arbitrary code via th…
-
Medium 5.7
D-Link COVR-2600R FW101b05 is vulnerable to Buffer Overflow. In the function sub_24E28, the HTTP_REFERER is obtained th…
-
Medium 6.1CVE-2024-42831 Public exploit
A reflected cross-site scripting (XSS) vulnerability in Elaine's Realtime CRM Automation v6.18.17 allows attackers to e…