Archive

13 November 2024

Vulnerabilities first published on this day (UTC), newest first.

← October 2024 2024 / November /13 December 2024 →

All Critical High Medium Low Exploited only Public exploit

7 results · Clear filters · Feed

Medium 5.3

CVE-2024-49379 Public exploit

Remote Code Execution (RCE) via Cross-Site Scripting (XSS) in Umbrel

Umbrel is a home server OS for self-hosting. The login functionality of Umbrel before version 1.2.2 contains a reflected cross-site scripting (XSS) vulnerability in use-auth.tsx. An attacker can specify a malicious redirect query parameter to trigger the vuln…

getumbrel umbrel

Nov 13, 2024
Medium 6.1

CVE-2024-50969 Public exploit

A Reflected cross-site scripting (XSS) vulnerability in browse.php of Code-projects Jonnys Liquor 1.0 allows remote att…

Nov 13, 2024
Medium 6.5

CVE-2024-50970 Public exploit

A SQL injection vulnerability in orderview1.php of Itsourcecode Online Furniture Shopping Project 1.0 allows remote att…

Nov 13, 2024
Medium 6.5

CVE-2024-50971 Public exploit

A SQL injection vulnerability in print.php of Itsourcecode Construction Management System 1.0 allows remote attackers t…

Nov 13, 2024
Medium 6.5

CVE-2024-50972 Public exploit

A SQL injection vulnerability in printtool.php of Itsourcecode Construction Management System 1.0 allows remote attacke…

Nov 13, 2024
Medium 4.3

CVE-2024-40443 Public exploit

SQL Injection vulnerability in Simple Laboratory Management System using PHP and MySQL v.1.0 allows a remote attacker t…

Nov 13, 2024
Medium 6.1

CVE-2024-42834 Public exploit

A stored cross-site scripting (XSS) vulnerability in the Create Customer API in Incognito Service Activation Center (SA…

Nov 13, 2024