Archive
26 December 2024
Vulnerabilities first published on this day (UTC), newest first.
66 results · Feed
-
High 7.3
code-projects Hospital Management System Login index.php sql injection
A vulnerability, which was classified as critical, has been found in code-projects Hospital Management System 1.0. Affected by this issue is some unknown functionality of the file /admin/index.php of the component Login. The manipulation of the argument usern…
-
High 7.3
code-projects Job Recruitment _all_edits.php edit_jobpost sql injection
A vulnerability classified as critical was found in code-projects Job Recruitment 1.0. Affected by this vulnerability is the function edit_jobpost of the file /_parse/_all_edits.php. The manipulation of the argument jobtype leads to sql injection. The attack …
-
Medium 5.3
Stored Cross-Site Scripting (XSS) in lgsl v7.0
LGSL (Live Game Server List) provides online status for games. Before 7.0.0, a stored cross-site scripting (XSS) vulnerability was identified in lgsl. The function lgsl_query_40 in lgsl_protocol.php has implemented an HTTP crawler. This function makes a reque…
-
High 8.6
Tabby has a TCC Bypass via Unnecessary Permissive Entitlements in Tabby
Tabby (formerly Terminus) is a highly configurable terminal emulator. Prior to 1.0.216, Tabby terminal emulator contains overly permissive entitlements that are unnecessary for its core functionality and plugin system, creating potential security vulnerabilit…
-
High 8.2
The Addressing GLPI plugin allows data enumeration through uncontrolled object instantiation
The Addressing GLPI plugin enables you to create IP reports for visualize IP addresses used and free on a given network.. Starting with 3.0.0 and before 3.0.3, a poor security check allows an unauthenticated attacker to determine whether data exists (by name)…
-
Medium 4.3
OpenCTI leaks support information due to inadequate access control
OpenCTI is an open-source cyber threat intelligence platform. Before 6.3.0, general users can access information that can only be accessed by users with access privileges to admin and support information (SETTINGS_SUPPORT). This is due to inadequate access co…
-
High 7.3
code-projects Job Recruitment _all_edits.php fln_update sql injection
A vulnerability classified as critical has been found in code-projects Job Recruitment 1.0. Affected is the function fln_update of the file /_parse/_all_edits.php. The manipulation of the argument fname/lname leads to sql injection. It is possible to launch t…
-
High 7.7
Fields GLPI plugin has an Authenticated SQL Injection
Fields is a GLPI plugin that allows users to add custom fields on GLPI items forms. Prior to 1.21.13, an authenticated user can perform a SQL injection when the plugin is active. The vulnerability is fixed in 1.21.13.
-
High 7.3
code-projects Job Recruitment _all_edits.php cn_update sql injection
A vulnerability was found in code-projects Job Recruitment 1.0. It has been rated as critical. This issue affects the function cn_update of the file /_parse/_all_edits.php. The manipulation of the argument cname/url leads to sql injection. The attack may be i…
-
Medium 5.3
Marp Core allows XSS by improper neutralization of HTML sanitization
@marp-team/marp-core is the core for Marp, which is the ecosystem to write your presentation with plain Markdown. Marp Core from v3.0.2 to v3.9.0 and v4.0.0, are vulnerable to cross-site scripting (XSS) due to improper neutralization of HTML sanitization. Mar…
-
High 7.3
1000 Projects Portfolio Management System MCA update_ex_detail.php sql injection
A vulnerability was found in 1000 Projects Portfolio Management System MCA 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /update_ex_detail.php. The manipulation of the argument q leads to sql injection. The attack …
-
High 7.3
1000 Projects Daily College Class Work Report Book login.php sql injection
A vulnerability was found in 1000 Projects Daily College Class Work Report Book 1.0. It has been classified as critical. This affects an unknown part of the file /login.php. The manipulation of the argument user leads to sql injection. It is possible to initi…
-
High 7.3
code-projects Job Recruitment _all_edits.php add_xp sql injection
A vulnerability was found in code-projects Job Recruitment 1.0 and classified as critical. Affected by this issue is the function add_xp of the file /_parse/_all_edits.php. The manipulation of the argument job_company leads to sql injection. The attack may be…
-
High 7.3
code-projects Job Recruitment _all_edits.php sql injection
A vulnerability has been found in code-projects Job Recruitment 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /_parse/_all_edits.php. The manipulation of the argument skillset leads to sql injection. Th…
-
High 7.3
1000 Projects Portfolio Management System MCA update_ach_details.php sql injection
A vulnerability, which was classified as critical, was found in 1000 Projects Portfolio Management System MCA 1.0. Affected is an unknown function of the file /update_ach_details.php. The manipulation of the argument q leads to sql injection. It is possible t…
-
High 7.3
1000 Projects Portfolio Management System MCA update_edu_details.php sql injection
A vulnerability, which was classified as critical, has been found in 1000 Projects Portfolio Management System MCA 1.0. This issue affects some unknown processing of the file /update_edu_details.php. The manipulation of the argument q leads to sql injection. …
-
High 7.3
1000 Projects Portfolio Management System MCA update_personal_details.php sql injection
A vulnerability classified as critical was found in 1000 Projects Portfolio Management System MCA 1.0. This vulnerability affects unknown code of the file /update_personal_details.php. The manipulation of the argument q leads to sql injection. The attack can …
-
High 8.1
Dell ECS, versions prior to 3.8.1.3 contains an arithmetic overflow vulnerability exists in retention period handling o…
-
Medium 6.9
Delinea addressed a reported case on Secret Server v11.7.31 (protocol handler version 6.0.3.26) where, within the proto…
-
High 7.3
1000 Projects Portfolio Management System MCA update_pro_details.php sql injection
A vulnerability classified as critical has been found in 1000 Projects Portfolio Management System MCA 1.0. This affects an unknown part of the file /update_pro_details.php. The manipulation of the argument q leads to sql injection. It is possible to initiate…
-
Medium 6.3
1000 Projects Portfolio Management System MCA add_achievement_details.php unrestricted upload
A vulnerability was found in 1000 Projects Portfolio Management System MCA 1.0 and classified as critical. This issue affects some unknown processing of the file /add_achievement_details.php. The manipulation of the argument ach_certy leads to unrestricted up…
-
Medium 4.3CVE-2024-12955 Public exploit
PHPGurukul Blood Bank & Donor Management System logout.php cross-site request forgery
A vulnerability has been found in PHPGurukul Blood Bank & Donor Management System 2.4 and classified as problematic. This vulnerability affects unknown code of the file /logout.php. The manipulation leads to cross-site request forgery. The attack can be initi…
-
Medium 6.3
1000 Projects Portfolio Management System MCA update_ach.php unrestricted upload
A vulnerability, which was classified as critical, was found in 1000 Projects Portfolio Management System MCA 1.0. This affects an unknown part of the file /update_ach.php. The manipulation of the argument ach_certy leads to unrestricted upload. It is possibl…
-
Medium 6.3
1000 Projects Portfolio Management System MCA update_pd_process.php unrestricted upload
A vulnerability, which was classified as critical, has been found in 1000 Projects Portfolio Management System MCA 1.0. Affected by this issue is some unknown functionality of the file /update_pd_process.php. The manipulation of the argument profile leads to …
-
Medium 6.3
melMass comfy_mtb Dependency endpoint.py run_command code injection
A vulnerability classified as critical was found in melMass comfy_mtb up to 0.1.4. Affected by this vulnerability is the function run_command of the file comfy_mtb/endpoint.py of the component Dependency Handler. The manipulation leads to code injection. The …
-
Medium 6.3
1000 Projects Portfolio Management System MCA add_personal_details.php unrestricted upload
A vulnerability classified as critical has been found in 1000 Projects Portfolio Management System MCA 1.0. Affected is an unknown function of the file /add_personal_details.php. The manipulation of the argument profile leads to unrestricted upload. It is pos…
-
Low 3.3
Some Honor products are affected by information leak vulnerability, successful exploitation could cause the information…
-
Low 3.3
Some Honor products are affected by incorrect privilege assignment vulnerability, successful exploitation could cause d…
-
Medium 4.0
Some Honor products are affected by incorrect privilege assignment vulnerability, successful exploitation could cause d…
-
Medium 6.3
code-projects/projectworlds Travel Management System subcat.php sql injection
A vulnerability was found in code-projects/projectworlds Travel Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /subcat.php. The manipulation of the argument catid leads to sql injection. The attack…
-
Low 2.9
Some Honor products are affected by incorrect privilege assignment vulnerability, successful exploitation could cause d…
-
Medium 5.5
Some Honor products are affected by information leak vulnerability, successful exploitation could cause the information…
-
Medium 5.5
Some Honor products are affected by information leak vulnerability, successful exploitation could cause the information…
-
Medium 6.2
Some Honor products are affected by information leak vulnerability, successful exploitation could cause the information…
-
Medium 6.3
code-projects Travel Management System package.php sql injection
A vulnerability was found in code-projects Travel Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /package.php. The manipulation of the argument subcatid leads to sql injection. The attack can be in…
-
Medium 4.0
Some Honor products are affected by information leak vulnerability, successful exploitation could cause the information…
-
Medium 6.2
Some Honor products are affected by information leak vulnerability, successful exploitation could cause the information…
-
Medium 6.2
Some Honor products are affected by information leak vulnerability, successful exploitation could cause the information…
-
Medium 6.3
Some Honor products are affected by file writing vulnerability, successful exploitation could cause code execution
-
Low 3.3
Information Leak Vulnerability in Honor Product
Some Honor products are affected by information leak vulnerability, successful exploitation could cause the information leak.