by Kastro CVE-2024-29824 · Ivanti EPM
The archive.
Browse all tracked critical vulnerabilities, including records outside today's brief.
39,181 matching vulnerabilities · Page 447 of 784
Ivanti
CVE-2024-29822 · Ivanti EPM
An unspecified SQL Injection vulnerability in Core server of Ivanti EPM 2022 SU5 and prior allows an unauthenticated attacker within the…
CVE-2024-29823 · Ivanti EPM
An unspecified SQL Injection vulnerability in Core server of Ivanti EPM 2022 SU5 and prior allows an unauthenticated attacker within the…
CVE-2024-29825 · Ivanti EPM
An unspecified SQL Injection vulnerability in Core server of Ivanti EPM 2022 SU5 and prior allows an unauthenticated attacker within the…
CVE-2024-29826 · Ivanti EPM
An unspecified SQL Injection vulnerability in Core server of Ivanti EPM 2022 SU5 and prior allows an unauthenticated attacker within the…
CVE-2024-29827 · Ivanti EPM
An unspecified SQL Injection vulnerability in Core server of Ivanti EPM 2022 SU5 and prior allows an unauthenticated attacker within the…
Rejetto
qdrant
silverpeas
casgate
sourcecodester
CVE-2024-35469 · sourcecodester human_resource_management_system
A SQL injection vulnerability in /hrm/user/ in SourceCodester Human Resource Management System 1.0 allows attackers to execute arbitrary…
CVE-2024-36568 · sourcecodester gas_agency_management_system
Sourcecodester Gas Agency Management System v1.0 is vulnerable to SQL Injection via /gasmark/editbrand.php?id=.
dino_physics_school_assistant_project
CVE-2024-35349 · dino_physics_school_assistant_project dino_physics_school_assistant
A vulnerability has been discovered in Diño Physics School Assistant version 2.3.
CVE-2024-35350 · dino_physics_school_assistant_project dino_physics_school_assistant
A vulnerability has been discovered in Diño Physics School Assistant version 2.3.
fedora
Netentsec
CVE-2024-5589 · Netentsec NS-ASG Application Security Gateway
Netentsec NS-ASG Application Security Gateway sql injection
CVE-2024-5590 · Netentsec NS-ASG Application Security Gateway
Netentsec NS-ASG Application Security Gateway JSON Content uploadiscuser.php sql injection
mitre
phpgurukul
CVE-2024-34987 · phpgurukul online_fire_reporting_system
A SQL Injection vulnerability exists in the `ofrs/admin/index.php` script of PHPGurukul Online Fire Reporting System 1.2.
totolink
CVE-2024-36782 · totolink cp300\+
TOTOLINK CP300 V2.0.4-B20201102 was discovered to contain a hardcoded password vulnerability in /etc/shadow.sample, which allows attacker…
CVE-2024-36783 · totolink lr350_firmware
TOTOLINK LR350 V9.3.5u.6369_B20220309 was discovered to contain a command injection via the host_time parameter in the NTPSyncWithHost fu…
Seiko Solutions Inc.
CVE-2024-32850 · Seiko Solutions Inc. SkyBridge MB-A100/MB-A110
Improper neutralization of special elements used in a command ('Command Injection') exists in SkyBridge MB-A100/MB-A110 firmware Ver.
MediaTek, Inc.
CVE-2024-20067 · MediaTek, Inc. MT6813, MT6815, MT6835, MT6878, MT6897, MT6899, MT6986, MT6986D, MT6991, MT8792
In modem, there is a possible out of bounds write due to improper input invalidation.
WPDataTables
CVE-2024-3820 · WPDataTables wpDataTables (Premium)
wpDataTables - Tables & Table Charts (Premium) <= 6.3.1 - Unauthenticated SQL Injection
Fuji Electric
CVE-2024-34171 · Fuji Electric Monitouch V-SFT
Fuji Electric Monitouch V-SFT Stack-Based Buffer Overflow
keithcullen
MileSight
CVE-2024-27776 · MileSight DeviceHub
MileSight DeviceHub - CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2024-36388 · MileSight DeviceHub
MileSight DeviceHub - CWE-305 Missing Authentication for Critical Function
CVE-2024-36389 · MileSight DeviceHub
MileSight DeviceHub - CWE-330 Use of Insufficiently Random Values
CVE-2024-36391 · MileSight DeviceHub
MileSight DeviceHub - CWE-320: Key Management Errors
northern.tech
Yokogawa Rental & Lease Corporation
CVE-2024-36246 · Yokogawa Rental & Lease Corporation Unifier
Missing authorization vulnerability exists in Unifier and Unifier Cast.
Fortra
CVE-2024-4332 · Fortra Tripwire Enterprise
Improper Authentication in Tripwire Enterprise 9.1.0 APIs
LenelS2
phonecleaner
tomdever
CVE-2024-3200 · tomdever wpForo Forum
wpForo Forum <= 2.3.3 - Authenticated (Contributor+) SQL Injection
Baxter
CVE-2024-5176 · Baxter Welch Allyn Configuration Tool
Vulnerability in Welch Allyn Configuration Tool Software
CVE-2024-1275 · Baxter Welch Allyn Connex Spot Monitor
Vulnerability in Baxter Welch Allyn Connex Spot Monitor
linuxfoundation
WpDevArt
CVE-2023-24373 · WpDevArt Booking calendar, Appointment Booking System
WordPress Booking calendar, Appointment Booking System plugin <= 3.2.3 - Bypass vulnerability
Qualcomm, Inc.
CVE-2023-43551 · Qualcomm, Inc. Snapdragon
Improper Authentication in Multi-Mode Call Processor
CVE-2023-43538 · Qualcomm, Inc. Snapdragon
Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in TZ Secure OS
CVE-2023-43556 · Qualcomm, Inc. Snapdragon