Skip to content
OpenAdvisories

Archive

13 October 2024

Vulnerabilities first published on this day (UTC), newest first.

← September 2024 2024 / October /13 November 2024 →
  1. 1110
  2. 292
  3. 363
  4. 489
  5. 582
  6. 685
  7. 7110
  8. 8234
  9. 9125
  10. 10119
  11. 11132
  12. 1222
  13. 1318
  14. 1477
  15. 15188
  16. 16185
  17. 17157
  18. 1879
  19. 1924
  20. 2068
  21. 21433
  22. 2283
  23. 23120
  24. 24111
  25. 25136
  26. 2644
  27. 2735
  28. 28193
  29. 29208
  30. 3096
  31. 3171
All Critical High Medium Low Exploited only Public exploit

5 results · Clear filters · Feed

  • Medium 4.7
    CVE-2024-9918

    HuangDou UTCMS sql.php RunSql sql injection

    A vulnerability has been found in HuangDou UTCMS V9 and classified as critical. This vulnerability affects the function RunSql of the file app/modules/ut-data/admin/sql.php. The manipulation of the argument sql leads to sql injection. The attack can be initia…

    HuangDou UTCMS
  • Medium 6.3
    CVE-2024-9917

    HuangDou UTCMS template_creat.php deserialization

    A vulnerability, which was classified as critical, was found in HuangDou UTCMS V9. This affects an unknown part of the file app/modules/ut-template/admin/template_creat.php. The manipulation of the argument content leads to deserialization. It is possible to …

    HuangDou UTCMS
  • Medium 5.5
    CVE-2024-9908

    D-Link DIR-619L B1 formSetMACFilter buffer overflow

    A vulnerability, which was classified as critical, was found in D-Link DIR-619L B1 2.06. Affected is the function formSetMACFilter of the file /goform/formSetMACFilter. The manipulation of the argument curTime leads to buffer overflow. The exploit has been di…

    D-Link DIR-619L B1 Network devices
  • Medium 6.3
    CVE-2024-9905

    SourceCodester Online Eyewear Shop sql injection

    A vulnerability, which was classified as critical, has been found in SourceCodester Online Eyewear Shop 1.0. This issue affects some unknown processing of the file /admin/?page=inventory/view_inventory&id=2. The manipulation of the argument id leads to sql in…

    SourceCodester Online Eyewear Shop
  • Medium 4.7
    CVE-2024-9904

    07FLYCMS/07FLY-CMS/07FlyCRM pictureUpload unrestricted upload

    A vulnerability classified as critical was found in 07FLYCMS, 07FLY-CMS and 07FlyCRM up to 1.2.0. This vulnerability affects the function pictureUpload of the file /admin/File/pictureUpload. The manipulation of the argument file leads to unrestricted upload. …