by Kastro CVE-2024-25830 · f-logic datacube3
The archive.
Browse all tracked critical vulnerabilities, including records outside today's brief.
39,188 matching vulnerabilities · Page 475 of 784
f-logic
Progress
Apache Software Foundation
CVE-2024-25065 · Apache Software Foundation Apache OFBiz
Apache OFBiz: Path traversal allowing authentication bypass.
CVE-2024-23807 · Apache Software Foundation Apache Xerces C++
Apache Xerces C++: Use-after-free on external DTD scan
CVE-2023-51518 · Apache Software Foundation Apache James server
Apache James server: Privilege escalation via JMX pre-authentication deserialisation
CVE-2024-27905 · Apache Software Foundation Apache Aurora
Apache Aurora: padding oracle can allow construction an authentication cookie
livehelperchat
llama.cpp
CVE-2024-21802 · llama.cpp llama.cpp
A heap-based buffer overflow vulnerability exists in the GGUF library info->ne functionality of llama.cpp Commit 18c2e17.
CVE-2024-23605 · llama.cpp llama.cpp
A heap-based buffer overflow vulnerability exists in the GGUF library header.n_kv functionality of llama.cpp Commit 18c2e17.
CVE-2024-21825 · llama.cpp llama.cpp
A heap-based buffer overflow vulnerability exists in the GGUF library GGUF_TYPE_ARRAY/GGUF_TYPE_STRING parsing functionality of llama.cpp…
CVE-2024-21836 · llama.cpp llama.cpp
A heap-based buffer overflow vulnerability exists in the GGUF library header.n_tensors functionality of llama.cpp Commit 18c2e17.
CVE-2024-23496 · llama.cpp llama.cpp
A heap-based buffer overflow vulnerability exists in the GGUF library gguf_fread_str functionality of llama.cpp Commit 18c2e17.
simple_atudent_attendance_system
CVE-2023-51801 · simple_atudent_attendance_system simple_atudent_attendance_system
SQL Injection vulnerability in the Simple Student Attendance System v.1.0 allows a remote attacker to execute arbitrary code via a crafte…
SourceCodester
CVE-2024-1923 · SourceCodester Simple Student Attendance System
SourceCodester Simple Student Attendance System List of Classes Page ajax-api.php delete_student sql injection
CVE-2024-1927 · SourceCodester Web-Based Student Clearance System
SourceCodester Web-Based Student Clearance System login.php sql injection
CVE-2024-1926 · SourceCodester Free and Open Source Inventory Management System
SourceCodester Free and Open Source Inventory Management System search_sales_report.php sql injection
Surya2Developer
CVE-2024-1971 · Surya2Developer Online Shopping System
Surya2Developer Online Shopping System POST Parameter login.php sql injection
mintplex-labs
CVE-2024-0550 · mintplex-labs mintplex-labs/anything-llm
Privileged User using traversal to read system files
mitre
CVE-2024-25400 · mitre
Subrion CMS 4.2.1 is vulnerable to SQL Injection via ia.core.mysqli.php.
CVE-2024-25169 · mitre
An issue in Mezzanine v6.0.0 allows attackers to bypass access control mechanisms in the admin panel via a crafted request.
CVE-2024-25422 · mitre
SQL Injection vulnerability in SEMCMS v.4.8 allows a remote attacker to execute arbitrary code and obtain sensitive information via the S…
CVE-2023-49930 · mitre
An issue was discovered in Couchbase Server before 7.2.4.
phpgurukul
Skymoonlabs
wpdevteam
CVE-2024-1698 · wpdevteam NotificationX – FOMO, Live Sales Notification, WooCommerce Sales Popup, GDPR, Social Proof, Announcement Banner & Floating Notification Bar
NotificationX – Best FOMO, Social Proof, WooCommerce Sales Popup & Notification Bar Plugin With Elementor <= 2.8.2 - Unauthenticated SQL Injection
codeastro
Byzoro
CVE-2024-1918 · Byzoro Smart S42 Management Platform
Byzoro Smart S42 Management Platform userattestation.php unrestricted upload
couchbase
CVE-2023-49931 · couchbase couchbase_server
An issue was discovered in Couchbase Server before 7.2.4.
Linux
php
code-projects
CVE-2024-24095 · code-projects simple_stock_system
Code-projects Simple Stock System 1.0 is vulnerable to SQL Injection.
JoomUnited
CVE-2024-25909 · JoomUnited WP Media folder
WordPress WP Media folder Plugin <= 5.7.2 is vulnerable to Arbitrary File Upload
justinsainton
CVE-2024-1514 · justinsainton WP eCommerce
WP eCommerce <= 3.15.1 - Unauthenticated SQL Injection
Lexmark
CVE-2023-50737 · Lexmark various
An input validation vulnerability in the SE Menu allows an attacker to execute arbitrary code.
CVE-2023-50734 · Lexmark various
A vulnerability has been identified in the PostScript interpreter in various Lexmark devices.
CVE-2023-50735 · Lexmark various
A vulnerability has been identified in the PostScript interpreter in various Lexmark devices.
CVE-2023-50736 · Lexmark various
A vulnerability has been identified in the PostScript interpreter in various Lexmark devices.
SYSBASICS
CVE-2024-25925 · SYSBASICS WooCommerce Easy Checkout Field Editor, Fees & Discounts
WordPress WooCommerce Easy Checkout Field Editor, Fees & Discounts Plugin <= 3.5.12 is vulnerable to Arbitrary File Upload
communitydeveloper
CVE-2024-25843 · communitydeveloper import\/update_bulk_product_from_any_csv\/excel_file_pro
In the module "Import/Update Bulk Product from any Csv/Excel File Pro" (ba_importer) up to version 1.1.28 from Buy Addons for PrestaShop,…
dpgaspar
CVE-2024-25128 · dpgaspar Flask-AppBuilder
Flask-AppBuilder incorrect authentication when using auth type OpenID
Joel Starnes
CVE-2024-25927 · Joel Starnes postMash – custom post order