by Kastro CVE-2024-41617 · moneymanagerex money_manager_ex_webapp
The archive.
Browse all tracked critical vulnerabilities, including records outside today's brief.
39,165 matching vulnerabilities · Page 404 of 784
moneymanagerex
OpenRefine
php
CVE-2024-48581 · php best_courier_management_system
File Upload vulnerability in Best courier management system in php v.1.0 allows a remote attacker to execute arbitrary code via the admin…
CVE-2024-48579 · php best_house_rental_management_system
SQL Injection vulnerability in Best House rental management system project in php v.1.0 allows a remote attacker to execute arbitrary cod…
CVE-2024-48580 · php best_courier_management_system
SQL Injection vulnerability in Best courier management system in php v.1.0 allows a remote attacker to execute arbitrary code via the ema…
maestroerror
CVE-2024-48514 · maestroerror php-heic-to-jpg
php-heic-to-jpg <= 1.0.5 is vulnerable to code injection (fixed in 1.0.6).
radix_iot
CVE-2024-37847 · radix_iot mango_os
An arbitrary file upload vulnerability in MangoOS before 5.1.4 and Mango API before 4.5.5 allows attackers to execute arbitrary code via…
CVE-2024-37846 · radix_iot mango_os
MangoOS before 5.2.0 was discovered to contain a Client-Side Template Injection (CSTI) vulnerability via the Platform Management Edit page.
activity-log.com
CVE-2024-49681 · activity-log.com WP Sessions Time Monitoring Full Automatic
WordPress WP Sessions Time Monitoring Full Automatic plugin <= 1.0.9 - SQL Injection vulnerability
Codezips
CVE-2024-10369 · Codezips Sales Management System
Codezips Sales Management System addcustcom.php sql injection
CVE-2024-10370 · Codezips Sales Management System
Codezips Sales Management System addcustind.php sql injection
CVE-2024-10368 · Codezips Sales Management System
Codezips Sales Management System addstock.php sql injection
ESAFENET
CVE-2024-10376 · ESAFENET CDG
ESAFENET CDG AutoSignService.java actionPassOrNotAutoSign sql injection
CVE-2024-10377 · ESAFENET CDG
ESAFENET CDG DecryptApplicationService.java actionPassDecryptApplication1 sql injection
CVE-2024-10378 · ESAFENET CDG
ESAFENET CDG CDGRenewApplicationService.java actionViewCDGRenewFile sql injection
mitre
SourceCodester
CVE-2024-10371 · SourceCodester Payroll Management System
SourceCodester Payroll Management System main login buffer overflow
CVE-2024-10349 · SourceCodester Best House Rental Management System
SourceCodester Best House Rental Management System ajax.php delete_tenant sql injection
CVE-2024-10335 · SourceCodester Garbage Collection Management System
SourceCodester Garbage Collection Management System login.php sql injection
htmldoc_project
code-projects
CVE-2024-10350 · code-projects Hospital Management System
code-projects Hospital Management System add-doctor.php sql injection
funadmin
CVE-2024-48218 · funadmin funadmin
Funadmin v5.0.2 has a SQL injection vulnerability in /curd/table/list.
CVE-2024-48222 · funadmin funadmin
Funadmin v5.0.2 has a SQL injection vulnerability in /curd/table/edit.
CVE-2024-48223 · funadmin funadmin
Funadmin v5.0.2 has a SQL injection vulnerability in /curd/table/fieldlist.
CVE-2024-48226 · funadmin funadmin
Funadmin 5.0.2 is vulnerable to SQL Injection in curd/table/savefield.
CVE-2024-48230 · funadmin funadmin
funadmin 5.0.2 is vulnerable to SQL Injection via the parentField parameter in the index method of \backend\controller\auth\Auth.php.
CVE-2024-48225 · funadmin funadmin
Funadmin v5.0.2 has an arbitrary file deletion vulnerability in /curd/index/delfile.
CVE-2024-48229 · funadmin funadmin
funadmin 5.0.2 has a SQL injection vulnerability in the Curd one click command mode plugin.
netdvr
CVE-2024-48538 · netdvr neye3c
Incorrect access control in the firmware update and download processes of Neye3C v4.5.2.0 allows attackers to access sensitive informatio…
CVE-2024-48539 · netdvr neye3c
Neye3C v4.5.2.0 was discovered to contain a hardcoded encryption key in the firmware update mechanism.
zzcms
wtcms_project
Cisco
CVE-2024-20329 · Cisco Cisco Adaptive Security Appliance (ASA) Software
Cisco Adaptive Security Appliance Software Remote Command Injection Vulnerability
CVE-2024-20424 · Cisco Cisco Firepower Management Center
A vulnerability in the web-based management interface of Cisco Secure Firewall Management Center (FMC) Software, formerly Firepower Manag…
CVE-2024-20412 · Cisco Cisco Firepower Threat Defense Software
A vulnerability in Cisco Firepower Threat Defense (FTD) Software for Cisco Firepower 1000, 2100, 3100, and 4200 Series could allow an una…
advancedcoding
CVE-2024-9488 · advancedcoding Comments – wpDiscuz
Comments – wpDiscuz <= 7.6.24 - Authentication Bypass via WordPress.com OAuth provider
hanzhou_haboo
cloud_smart_lock
CVE-2024-48548 · cloud_smart_lock cloud_smart_lock_firmware
The APK file in Cloud Smart Lock v2.0.1 has a leaked a URL that can call an API for binding physical devices.
SourceCodeHero
CVE-2024-10336 · SourceCodeHero Clothes Recommendation System
SourceCodeHero Clothes Recommendation System Admin Login Page index.php sql injection
appcheap
CVE-2024-9302 · appcheap App Builder – Create Native Android & iOS Apps On The Flight
App Builder – Create Native Android & iOS Apps On The Flight <= 5.3.7 - Privilege Escalation and Account Takeover via Weak OTP
Progress Software Corporation
CVE-2024-7763 · Progress Software Corporation WhatsUp Gold
WhatsUp Gold getReport Missing Authentication Authentication Bypass Vulnerability
Sharp Corporation
CVE-2024-47406 · Sharp Corporation Sharp Digital Full-color MFPs and Monochrome MFPs
Sharp and Toshiba Tec MFPs improperly process HTTP authentication requests, resulting in an authentication bypass vulnerability.
ovaledge
CVE-2022-30355 · ovaledge ovaledge
OvalEdge 5.2.8.0 and earlier is affected by an Account Takeover vulnerability via a POST request to /profile/updateProfile via the userId…
CVE-2022-30357 · ovaledge ovaledge