by Kastro CVE-2024-12884 · Codezips E-Commerce Website
The archive.
Browse all tracked critical vulnerabilities, including records outside today's brief.
39,101 matching vulnerabilities · Page 382 of 783
Codezips
CVE-2024-12791 · Codezips E-Commerce Site
Codezips E-Commerce Site signin.php sql injection
CVE-2024-12792 · Codezips E-Commerce Site
Codezips E-Commerce Site newadmin.php sql injection
CVE-2024-12794 · Codezips E-Commerce Site
Codezips E-Commerce Site editorder.php sql injection
CVE-2024-12788 · Codezips Technical Discussion Forum
Codezips Technical Discussion Forum signinpost.php sql injection
gogs
Microsoft
CVE-2024-42004 · Microsoft Teams (work or school)
A library injection vulnerability exists in Microsoft Teams (work or school) 24046.2813.2770.1094 for macOS.
CVE-2024-42220 · Microsoft Outlook
A library injection vulnerability exists in Microsoft Outlook 16.83.3 for macOS.
CVE-2024-43106 · Microsoft Excel
A library injection vulnerability exists in Microsoft Excel 16.83 for macOS.
CVE-2024-41145 · Microsoft Teams (work or school)
A library injection vulnerability exists in the WebView.app helper app of Microsoft Teams (work or school) 24046.2813.2770.1094 for macOS.
CVE-2024-41165 · Microsoft Word
A library injection vulnerability exists in Microsoft Word 16.83 for macOS.
mitre
CVE-2024-55509 · mitre
SQL injection vulnerability in CodeAstro Complaint Management System v.1.0 allows a remote attacker to execute arbitrary code and escalat…
CVE-2024-54983 · mitre
An issue in Quectel BC95-CNV V100R001C00SPC051 allows attackers to bypass authentication via a crafted NAS message.
CVE-2024-54984 · mitre
An issue in Quectel BG96 BG96MAR02A08M1G allows attackers to bypass authentication via a crafted NAS message.
CVE-2024-56431 · mitre
oc_huff_tree_unpack in huffdec.c in libtheora in Theora through 1.0 7180717 has an invalid negative left shift.
CVE-2024-55081 · mitre
An XML External Entity (XXE) injection vulnerability in the component /datagrip/upload of Chat2DB v0.3.5 allows attackers to execute arbi…
1000 Projects
CVE-2024-12787 · 1000 Projects Attendance Tracking Management System
1000 Projects Attendance Tracking Management System check_student_login.php sql injection
CVE-2024-12898 · 1000 Projects Attendance Tracking Management System
1000 Projects Attendance Tracking Management System faculty_action.php sql injection
CVE-2024-12899 · 1000 Projects Attendance Tracking Management System
1000 Projects Attendance Tracking Management System course_action.php sql injection
Apache Software Foundation
CVE-2024-45387 · Apache Software Foundation Apache Traffic Control
Apache Traffic Control: SQL Injection in Traffic Ops endpoint PUT deliveryservice_request_comments
CVE-2024-52046 · Apache Software Foundation Apache MINA
Apache MINA: MINA applications using unbounded deserialization may allow RCE
CVE-2024-43441 · Apache Software Foundation Apache HugeGraph-Server
Apache HugeGraph-Server: Fixed JWT Token(Secret)
CVE-2024-56337 · Apache Software Foundation Apache Tomcat
Apache Tomcat: RCE due to TOCTOU issue in JSP compilation - CVE-2024-50379 mitigation was incomplete
Fortinet
CVE-2021-26102 · Fortinet FortiWAN
A relative path traversal vulnerability (CWE-23) in FortiWAN version 4.5.7 and below, 4.4 all versions may allow a remote non-authenticat…
CVE-2021-32589 · Fortinet FortiManager
A Use After Free (CWE-416) vulnerability in FortiManager version 7.0.0, version 6.4.5 and below, version 6.2.7 and below, version 6.0.10…
itsourcecode
CVE-2024-12784 · itsourcecode Vehicle Management System
itsourcecode Vehicle Management System editbill.php sql injection
VulDB
Sophos
CVE-2024-12727 · Sophos Sophos Firewall
A pre-auth SQL injection vulnerability in the email protection feature of Sophos Firewall versions older than 21.0 MR1 (21.0.1) allows ac…
CVE-2024-12728 · Sophos Sophos Firewall
A weak credentials vulnerability potentially allows privileged system access via SSH to Sophos Firewall older than version 20.0 MR3 (20.0…
Webkul
Huawei
moaluko
CVE-2024-12571 · moaluko Store Locator for WordPress with Google Maps – LotsOfLocales
Store Locator <= 3.98.10 - Unauthenticated Local File Inclusion
libxml2
Arne Informatics
CVE-2024-8950 · Arne Informatics Piramit Automation
SQLi in Arne Informatics' Piramit Automation
rubengc
CVE-2024-12626 · rubengc AutomatorWP – Automator plugin for no-code automations, webhooks & custom integrations in WordPress
AutomatorWP <= 5.0.9 - Reflected Cross-Site Scripting via a-0-o-search_field_value
Sharp Corporation
CVE-2024-46873 · Sharp Corporation home 5G HR02
Multiple SHARP routers leave the hidden debug function enabled.
SUNNET Technology Co., Ltd.
CVE-2024-11984 · SUNNET Technology Co., Ltd. Corporate Training Management System
SUNNET Corporate Training Management System - Unrestricted Upload of File with Dangerous Type
TreasureHuntGame
CVE-2024-12894 · TreasureHuntGame TreasureHunt
TreasureHuntGame TreasureHunt acesso.php sql injection
CVE-2024-12895 · TreasureHuntGame TreasureHunt