Skip to content
OpenAdvisories

Archive

19 October 2024

Vulnerabilities first published on this day (UTC), newest first.

← September 2024 2024 / October /19 November 2024 →
  1. 1110
  2. 292
  3. 363
  4. 489
  5. 582
  6. 685
  7. 7110
  8. 8234
  9. 9125
  10. 10119
  11. 11132
  12. 1222
  13. 1318
  14. 1477
  15. 15188
  16. 16185
  17. 17157
  18. 1879
  19. 1924
  20. 2068
  21. 21433
  22. 2283
  23. 23120
  24. 24111
  25. 25136
  26. 2644
  27. 2735
  28. 28193
  29. 29208
  30. 3096
  31. 3171
All Critical High Medium Low Exploited only Public exploit

5 results · Clear filters · Feed

  • High 7.3
    CVE-2024-10159

    PHPGurukul Boat Booking System My Profile Page profile.php sql injection

    A vulnerability classified as critical was found in PHPGurukul Boat Booking System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/profile.php of the component My Profile Page. The manipulation of the argument sadminusername…

    PHPGurukul Boat Booking System
  • High 7.3
    CVE-2024-10157

    PHPGurukul Boat Booking System Reset Your Password Page password-recovery.php sql injection

    A vulnerability was found in PHPGurukul Boat Booking System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /admin/password-recovery.php of the component Reset Your Password Page. The manipulation of the argument use…

    PHPGurukul Boat Booking System
  • High 7.3
    CVE-2024-10156

    PHPGurukul Boat Booking System Sign In Page index.php sql injection

    A vulnerability was found in PHPGurukul Boat Booking System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /admin/index.php of the component Sign In Page. The manipulation of the argument username leads to sql injec…

    PHPGurukul Boat Booking System
  • High 7.5
    CVE-2024-21536

    Denial of service in http-proxy-middleware

    Versions of the package http-proxy-middleware before 2.0.7, from 3.0.0 and before 3.0.3 are vulnerable to Denial of Service (DoS) due to an UnhandledPromiseRejection error thrown by micromatch. An attacker could kill the Node.js process and crash the server b…

    katib-suggestion-hyperopt katib-earlystopping katib-suggestion-hyperband katib-suggestion-pbt-enas Wolfi npm
  • High 8.8
    CVE-2024-10131

    Remote Code Execution in infiniflow/ragflow

    The `add_llm` function in `llm_app.py` in infiniflow/ragflow version 0.11.0 contains a remote code execution (RCE) vulnerability. The function uses user-supplied input `req['llm_factory']` and `req['llm_name']` to dynamically instantiate classes from various …

    InfiniFlow infiniflow/ragflow