by Kastro CVE-2024-54794 · mitre
The archive.
Browse all tracked critical vulnerabilities, including records outside today's brief.
39,101 matching vulnerabilities · Page 373 of 783
mitre
CVE-2024-42936 · mitre
The mqlink.elf is service component in Ruijie RG-EW300N with firmware ReyeeOS 1.300.1422 is vulnerable to Remote Code Execution via a mod…
CVE-2024-57031 · mitre
WeGIA < 3.2.0 is vulnerable to SQL Injection in /funcionario/remuneracao.php via the id_funcionario parameter.
CVE-2024-57032 · mitre
WeGIA < 3.2.0 is vulnerable to Incorrect Access Control in controle/control.php.
CVE-2024-57034 · mitre
WeGIA < 3.2.0 is vulnerable to SQL Injection in query_geracao_auto.php via the query parameter.
CVE-2024-57035 · mitre
WeGIA v3.2.0 is vulnerable to SQL Injection viathe nextPage parameter in /controle/control.php.
CVE-2023-27112 · mitre
pearProjectApi v2.8.10 was discovered to contain a SQL injection vulnerability via the projectCode parameter at project.php.
CVE-2023-27113 · mitre
pearProjectApi v2.8.10 was discovered to contain a SQL injection vulnerability via the organizationCode parameter at project.php.
CVE-2024-24421 · mitre
A type confusion in the nas_message_decode function of Magma <= 1.8.0 (fixed in v1.9 commit 08472ba98b8321f802e95f5622fa90fec2dea486) all…
CVE-2024-55959 · mitre
Northern.tech Mender Client 4.x before 4.0.5 has Insecure Permissions.
code-projects
CVE-2025-0564 · code-projects Fantasy-Cricket
code-projects Fantasy-Cricket authenticate.php sql injection
CVE-2025-0527 · code-projects Admission Management System
code-projects Admission Management System signupconfirm.php sql injection
CVE-2025-0563 · code-projects Fantasy-Cricket
code-projects Fantasy-Cricket update.php sql injection
1000 Projects
CVE-2025-0533 · 1000 Projects Campaign Management System Platform for Women
1000 Projects Campaign Management System Platform for Women sc_login.php sql injection
CVE-2025-0534 · 1000 Projects Campaign Management System Platform for Women
1000 Projects Campaign Management System Platform for Women loginnew.php sql injection
CVE-2025-0536 · 1000 Projects Attendance Tracking Management System
1000 Projects Attendance Tracking Management System edit_action.php sql injection
Codezips
CVE-2025-0532 · Codezips Gym Management System
Codezips Gym Management System new_submit.php sql injection
CVE-2025-0562 · Codezips Gym Management System
Codezips Gym Management System health_status_entry.php sql injection
CVE-2025-0535 · Codezips Gym Management System
Codezips Gym Management System edit_mem_submit.php sql injection
CVE-2025-0541 · Codezips Gym Management System
Codezips Gym Management System edit_member.php sql injection
itsourcecode
CVE-2025-0561 · itsourcecode Farm Management System
itsourcecode Farm Management System add-pig.php sql injection
CVE-2025-0540 · itsourcecode Tailoring Management System
itsourcecode Tailoring Management System expadd.php sql injection
LabRedesCefetRJ
CVE-2025-23218 · LabRedesCefetRJ WeGIA
WeGIA has a SQL Injection endpoint 'adicionar_especie.php' parameter 'especie'
CVE-2025-23219 · LabRedesCefetRJ WeGIA
WeGIA has a SQL Injection endpoint 'adicionar_cor.php' parameter 'cor'
CVE-2025-23220 · LabRedesCefetRJ WeGIA
WeGIA has a SQL Injection endpoint 'adicionar_raca.php' parameter 'raca'
devycreates
CVE-2025-23202 · devycreates Bible-Module
Improper Input Validation in Bible Module for ROBLOX
radykal
CVE-2024-51818 · radykal Fancy Product Designer
WordPress Fancy Product Designer plugin <= 6.4.3 - Unauthenticated SQL Injection vulnerability
CVE-2024-51919 · radykal Fancy Product Designer
WordPress Fancy Product Designer plugin <= 6.4.3 - Unauthenticated Arbitrary File Upload vulnerability
TDuckCloud
spoonthemes
CVE-2024-13375 · spoonthemes Adifier System
Adifier System <= 3.1.7 - Unauthenticated Arbitrary Password Reset
Harsh
InspiryThemes
CVE-2024-32555 · InspiryThemes Easy Real Estate
WordPress Easy Real Estate plugin <= 2.2.6 - Privilege Escalation vulnerability
IBM
CVE-2024-41783 · IBM Sterling Secure Proxy
IBM Sterling Secure Proxy improper input validation
CVE-2024-47113 · IBM Voice Gateway
IBM ICP - Voice Gateway XML injection
CVE-2024-38337 · IBM Sterling Secure Proxy
IBM Sterling Secure Proxy improper input validation
CVE-2024-45647 · IBM Security Verify Access
IBM Security Verify Access unverified password change
Newtec/iDirect
CVE-2024-13502 · Newtec/iDirect NTC2218, NTC2250, NTC2299
A command injection in the NTC2218, NTC2250, NTC2299 modems' web interfaces allows to exeucte arbitrary shell commands.
CVE-2024-13503 · Newtec/iDirect NTC2218, NTC2250, NTC2299
Stack-Based Buffer Overflow in Newtec's update signaling causes RCE
reputeinfosystems
favethemes
CVE-2024-51888 · favethemes Homey Login Register
WordPress Homey Login Register Plugin <= 2.4.0 - Privilege Escalation vulnerability
Linux
Dmitry V. (CEO of "UKR Solution")
CVE-2025-22723 · Dmitry V. (CEO of "UKR Solution") Barcode Scanner with Inventory & Order Manager
WordPress Barcode Scanner and Inventory manager plugin <= 1.6.7 - Arbitrary File Upload vulnerability
dhananjaysingh
CVE-2025-22553 · dhananjaysingh Multiple Carousel