by Kastro CVE-2024-6782 · Calibre Calibre
The archive.
Browse all tracked critical vulnerabilities, including records outside today's brief.
39,165 matching vulnerabilities · Page 428 of 784
Calibre
koha
CVE-2024-28739 · koha koha
An issue in Koha ILS 23.05 and before allows a remote attacker to execute arbitrary code via a crafted script to the format parameter.
CVE-2024-28740 · koha koha
Cross Site Scripting vulnerability in Koha ILS 23.05 and before allows a remote attacker to execute arbitrary code via the additonal-cont…
gl-inet
CVE-2024-39227 · gl-inet gl-mt2500
GL-iNet products AR750/AR750S/AR300M/AR300M16/MT300N-V2/B1300/MT1300/SFT1200/X750 v4.3.11, MT3000/MT2500/AXT1800/AX1800/A1300/X300B v4.5.…
CVE-2024-39225 · gl-inet mt6000_firmware
GL-iNet products AR750/AR750S/AR300M/AR300M16/MT300N-V2/B1300/MT1300/SFT1200/X750 v4.3.11, MT3000/MT2500/AXT1800/AX1800/A1300/X300B v4.5.…
CVE-2024-39228 · gl-inet x750_firmware
GL-iNet products AR750/AR750S/AR300M/AR300M16/MT300N-V2/B1300/MT1300/SFT1200/X750 v4.3.11, MT3000/MT2500/AXT1800/AX1800/A1300/X300B v4.5.…
Gitea
CVE-2024-6886 · Gitea Gitea Open Source Git Server
Inproper Sanitation of field leading to stored XSS
itsourcecode
CVE-2024-7498 · itsourcecode Airline Reservation System
itsourcecode Airline Reservation System Admin Login Page login.php login2 sql injection
CVE-2024-7500 · itsourcecode Airline Reservation System
itsourcecode Airline Reservation System admin_class.php save_settings unrestricted upload
CVE-2024-7505 · itsourcecode Bike Delivery System
itsourcecode Bike Delivery System contact_us_action.php sql injection
CVE-2024-7499 · itsourcecode Airline Reservation System
itsourcecode Airline Reservation System flights.php sql injection
CVE-2024-7495 · itsourcecode Laravel Accounting System
itsourcecode Laravel Accounting System HomeController.php unrestricted upload
sourcecodester
CVE-2024-34479 · sourcecodester computer_laboratory_management_system
SourceCodester Computer Laboratory Management System 1.0 allows classes/Master.php id SQL Injection.
mitre
dlink
Zscaler
CVE-2024-23483 · Zscaler Client Connector
Local Privilege Escalation via lack of input validation
Hewlett Packard Enterprise (HPE)
CVE-2024-42393 · Hewlett Packard Enterprise (HPE) Hpe Aruba Networking InstantOS and Aruba Access Points running ArubaOS 10
Unauthenticated Stack-Based Buffer Overflow Remote Command Execution (RCE) in the Soft AP Daemon Service Accessed by the PAPI Protocol
CVE-2024-42394 · Hewlett Packard Enterprise (HPE) HPE Aruba Networking InstantOS and Aruba Access Points running ArubaOS 10
Unauthenticated Stack-Based Buffer Overflow Remote Command Execution (RCE) in the Soft AP Daemon Service Accessed by the PAPI Protocol
CVE-2024-42395 · Hewlett Packard Enterprise (HPE) HPE Aruba Networking InstantOS and Aruba Access Points running ArubaOS 10
Unauthenticated Stack-Based Buffer Overflow Remote Command Execution (RCE) in the AP Certificate Management Service Accessed by the PAPI Protocol
Mozilla
CVE-2024-7519 · Mozilla Firefox
Insufficient checks when processing graphics shared memory could have led to memory corruption.
CVE-2024-7521 · Mozilla Firefox
Incomplete WebAssembly exception handing could have led to a use-after-free.
CVE-2024-7522 · Mozilla Firefox
Editor code failed to check an attribute value.
CVE-2024-7528 · Mozilla Firefox
Incorrect garbage collection interaction in IndexedDB could have led to a use-after-free.
CVE-2024-7525 · Mozilla Firefox
It was possible for a web extension with minimal permissions to create a `StreamFilter` which could be used to read and modify the respon…
CVE-2024-7530 · Mozilla Firefox
Incorrect garbage collection interaction could have led to a use-after-free.
CVE-2024-43111 · Mozilla Firefox for iOS
Long pressing on a download link could potentially allow Javascript commands to be executed within the browser This vulnerability affects…
Halo Service Solutions
CVE-2024-6202 · Halo Service Solutions HaloITSM
HaloITSM - SAML XML Signature Wrapping (XSW)
hms-networks
Janobe
CVE-2024-33960 · Janobe Janobe PayPal
SQL injection in Janobe products
CVE-2024-33957 · Janobe E-Negosyo System
SQL injection in Janobe E-Negosyo System
CVE-2024-33958 · Janobe E-Negosyo System
SQL injection in Janobe E-Negosyo System
CVE-2024-33959 · Janobe Janobe PayPal
SQL injection in Janobe products
CVE-2024-33961 · Janobe Janobe PayPal
SQL injection in Janobe products
CVE-2024-33962 · Janobe Janobe PayPal
SQL injection in Janobe products
CVE-2024-33963 · Janobe Janobe PayPal
SQL injection in Janobe products
CVE-2024-33964 · Janobe Janobe PayPal
SQL injection in Janobe products
CVE-2024-33965 · Janobe Janobe PayPal
SQL injection in Janobe products
CVE-2024-33966 · Janobe Janobe PayPal
SQL injection in Janobe products
CVE-2024-33967 · Janobe School Attendance Monitoring System
SQL injection in Janobe products
CVE-2024-33968 · Janobe School Attendance Monitoring System
SQL injection in Janobe products
CVE-2024-33969 · Janobe School Attendance Monitoring System
SQL injection in Janobe products
CVE-2024-33970 · Janobe School Attendance Monitoring System
SQL injection in Janobe products
CVE-2024-33971 · Janobe School Attendance Monitoring System
SQL injection in Janobe products
CVE-2024-33972 · Janobe School Attendance Monitoring System
SQL injection in Janobe products
CVE-2024-33973 · Janobe School Attendance Monitoring System
SQL injection in Janobe products
CVE-2024-33974 · Janobe School Attendance Monitoring System
SQL injection in Janobe products
privx
Hitachi
CVE-2024-5828 · Hitachi Hitachi Tuning Manager