Skip to content
OpenAdvisories

Archive

27 October 2024

Vulnerabilities first published on this day (UTC), newest first.

← September 2024 2024 / October /27 November 2024 →
  1. 1110
  2. 292
  3. 363
  4. 489
  5. 582
  6. 685
  7. 7110
  8. 8234
  9. 9125
  10. 10119
  11. 11132
  12. 1222
  13. 1318
  14. 1477
  15. 15188
  16. 16185
  17. 17157
  18. 1879
  19. 1924
  20. 2068
  21. 21433
  22. 2283
  23. 23120
  24. 24111
  25. 25136
  26. 2644
  27. 2735
  28. 28193
  29. 29208
  30. 3096
  31. 3171
All Critical High Medium Low Exploited only Public exploit

7 results · Clear filters · Feed

  • High 7.3
    CVE-2024-10432

    Project Worlds Simple Web-Based Chat Application index.php sql injection

    A vulnerability has been found in Project Worlds Simple Web-Based Chat Application 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /index.php. The manipulation of the argument username leads to sql inject…

    Project Worlds Simple Web-Based Chat Application
  • High 7.3
    CVE-2024-10431

    Codezips Pet Shop Management System deletebird.php sql injection

    A vulnerability, which was classified as critical, was found in Codezips Pet Shop Management System 1.0. Affected is an unknown function of the file /deletebird.php. The manipulation of the argument t1 leads to sql injection. It is possible to launch the atta…

    CodeZips Pet Shop Management System
  • High 7.3
    CVE-2024-10430

    Codezips Pet Shop Management System animalsupdate.php sql injection

    A vulnerability, which was classified as critical, has been found in Codezips Pet Shop Management System 1.0. This issue affects some unknown processing of the file /animalsupdate.php. The manipulation of the argument id leads to sql injection. The attack may…

    CodeZips Pet Shop Management System
  • High 7.2
    CVE-2024-10429 EPSS 18%

    WAVLINK WN530H4/WN530HG4/WN572HG3 internet.cgi set_ipv6 command injection

    A vulnerability classified as critical has been found in WAVLINK WN530H4, WN530HG4 and WN572HG3 up to 20221028. Affected is the function set_ipv6 of the file internet.cgi. The manipulation of the argument IPv6OpMode/IPv6IPAddr/IPv6WANIPAddr/IPv6GWAddr leads t…

    WAVLINK WN530H4 WN572HG3 WN530HG4
  • High 7.2
    CVE-2024-10428 EPSS 15%

    WAVLINK WN530H4/WN530HG4/WN572HG3 firewall.cgi set_ipv6 command injection

    A vulnerability was found in WAVLINK WN530H4, WN530HG4 and WN572HG3 up to 20221028. It has been rated as critical. This issue affects the function set_ipv6 of the file firewall.cgi. The manipulation of the argument dhcpGateway leads to command injection. The …

    WAVLINK WN530HG4 WN530H4 WN572HG3
  • High 8.8
    CVE-2024-50616

    Ironman PowerShell Universal 5.x before 5.0.12 allows an authenticated attacker to elevate their privileges and view jo…

  • High 7.2
    CVE-2024-50611

    CycloneDX cdxgen may execute code contained within build-related files

    CycloneDX cdxgen through 10.10.7, when run against an untrusted codebase, may execute code contained within build-related files such as build.gradle.kts, a similar issue to CVE-2022-24441. cdxgen is used by, for example, OWASP dep-scan. NOTE: this has been ch…

    @cyclonedx/cdxgen npm