by Kastro CVE-2024-40766 · SonicWall SonicOS
The archive.
Browse all tracked critical vulnerabilities, including records outside today's brief.
39,165 matching vulnerabilities · Page 422 of 784
SonicWall
SolarWinds
LiteSpeed Technologies
CVE-2024-28000 · LiteSpeed Technologies LiteSpeed Cache
WordPress LiteSpeed Cache plugin <= 6.3.0.1 - Unauthenticated Privilege Escalation vulnerability
WPML
D-Link
dlink
uci
CVE-2024-45169 · uci idol_2
An issue was discovered in UCI IDOL 2 (aka uciIDOL or IDOL2) through 2.12.
CVE-2024-45167 · uci idol_2
An issue was discovered in UCI IDOL 2 (aka uciIDOL or IDOL2) through 2.12.
CVE-2024-45166 · uci idol_2
An issue was discovered in UCI IDOL 2 (aka uciIDOL or IDOL2) through 2.12.
CVE-2024-45168 · uci idol_2
An issue was discovered in UCI IDOL 2 (aka uciIDOL or IDOL2) through 2.12.
kashipara
CVE-2024-42765 · kashipara bus_ticket_reservation_system
A SQL injection vulnerability in "/login.php" of the Kashipara Bus Ticket Reservation System v1.0 allows remote attackers to execute arbi…
CVE-2024-42777 · kashipara music_management_system
An Unrestricted file upload vulnerability was found in "/music/ajax.php?action=signup" of Kashipara Music Management System v1.0, which a…
CVE-2024-42781 · kashipara music_management_system
A SQL injection vulnerability in "/music/ajax.php?action=login" of Kashipara Music Management System v1.0 allows remote attackers to exec…
CVE-2024-42784 · kashipara music_management_system
A SQL injection vulnerability in "/music/controller.php?page=view_music" in Kashipara Music Management System v1.0 allows an attacker to…
CVE-2024-42782 · kashipara music_management_system
A SQL injection vulnerability in "/music/ajax.php?action=find_music" in Kashipara Music Management System v1.0 allows an attacker to exec…
CVE-2024-42775 · kashipara hotel_management_system
An Incorrect Access Control vulnerability was found in /admin/add_room_controller.php in Kashipara Hotel Management System v1.0, which al…
CVE-2024-42783 · kashipara music_management_system
Kashipara Music Management System v1.0 is vulnerable to SQL Injection via /music/manage_playlist_items.php.
CVE-2024-42764 · kashipara bus_ticket_reservation_system
Kashipara Bus Ticket Reservation System v1.0 is vulnerable to Cross Site Request Forgery (CSRF) via /deleteTicket.php.
CVE-2024-42773 · kashipara hotel_management_system
An Incorrect Access Control vulnerability was found in /admin/edit_room_controller.php in Kashipara Hotel Management System v1.0, which a…
SourceCodester
CVE-2024-8086 · SourceCodester E-Commerce System
SourceCodester E-Commerce System Admin Login login.php sql injection
CVE-2024-8089 · SourceCodester E-Commerce System
SourceCodester E-Commerce System controller.php unrestricted upload
CVE-2024-8080 · SourceCodester Online Health Care System
SourceCodester Online Health Care System search.php sql injection
CVE-2024-8087 · SourceCodester E-Commerce System
SourceCodester E-Commerce System popup_Item.php sql injection
swissphone
CVE-2024-36439 · swissphone dical-red_4009
Swissphone DiCal-RED 4009 devices allow a remote attacker to gain access to the administrative web interface via the device password's ha…
CVE-2024-36445 · swissphone dical-red_4009
Swissphone DiCal-RED 4009 devices allow a remote attacker to gain a root shell via TELNET without authentication.
centreon
CVE-2024-32501 · centreon centreon
A SQL Injection vulnerability exists in the updateServiceHost functionality in Centreon Web 24.04.x before 24.04.3, 23.10.x before 23.10.…
CVE-2024-33852 · centreon centreon_web
A SQL Injection vulnerability exists in the Downtime component in Centreon Web 24.04.x before 24.04.3, 23.10.x before 23.10.13, 23.04.x b…
CVE-2024-33853 · centreon centreon_web
A SQL Injection vulnerability exists in the Timeperiod component in Centreon Web 24.04.x before 24.04.3, 23.10.x before 23.10.13, 23.04.x…
CVE-2024-33854 · centreon centreon_web
A SQL Injection vulnerability exists in the Graph Template component in Centreon Web 24.04.x before 24.04.3, 23.10.x before 23.10.13, 23.…
itsourcecode
CVE-2024-8081 · itsourcecode Payroll Management System
itsourcecode Payroll Management System login.php sql injection
mirai
TOTOLINK
CVE-2024-8077 · TOTOLINK AC1200 T8
TOTOLINK AC1200 T8 setTracerouteCfg os command injection
CVE-2024-8075 · TOTOLINK AC1200 T8
TOTOLINK AC1200 T8 setDiagnosisCfg os command injection
CVE-2024-8078 · TOTOLINK AC1200 T8
TOTOLINK AC1200 T8 setTracerouteCfg buffer overflow
CVE-2024-8079 · TOTOLINK AC1200 T8
TOTOLINK AC1200 T8 exportOvpn buffer overflow
CVE-2024-8076 · TOTOLINK AC1200 T8
TOTOLINK AC1200 T8 setDiagnosisCfg buffer overflow
trquoccuong
bdthemes
CVE-2024-5335 · bdthemes Ultimate Store Kit – Addon For WooCommerce, EDD and Elementor
Ultimate Store Kit Elementor Addons, Woocommerce Builder, EDD Builder, Elementor Store Builder, Product Grid, Product Table, Woocommerce Slider <= 1.6.4 - Unauthenticated PHP Object Injection
Linux
ezviz
openedx
CVE-2024-43782 · openedx openedx-translations
openedx-translations's Atlas translations for Open edX missing validation
Forcepoint
VeronaLabs
fort_validator_project
CVE-2024-45237 · fort_validator_project fort_validator
An issue was discovered in Fort before 1.6.3.
brandondove
CVE-2024-7568 · brandondove Favicon Generator (CLOSED)