by Kastro CVE-2024-0986 · Issabel PBX
The archive.
Browse all tracked critical vulnerabilities, including records outside today's brief.
39,188 matching vulnerabilities · Page 484 of 784
Issabel
totolink
CVE-2024-24328 · totolink a3300r_firmware
TOTOLINK A3300R V17.0.0cu.557_B20221024 was discovered to contain a command injection vulnerability via the enable parameter in the setMa…
CVE-2024-24329 · totolink a3300r
TOTOLINK A3300R V17.0.0cu.557_B20221024 was discovered to contain a command injection vulnerability via the enable parameter in the setPo…
CVE-2024-24326 · totolink a3300r_firmware
TOTOLINK A3300R V17.0.0cu.557_B20221024 was discovered to contain a command injection vulnerability via the arpEnable parameter in the se…
CVE-2024-1001 · Totolink N200RE
Totolink N200RE cstecgi.cgi main stack-based overflow
snyk
hyper
mitre
CVE-2024-23739 · mitre
An issue in Discord for macOS version 0.0.291 and before, allows remote attackers to execute arbitrary code via the RunAsNode and enableN…
CVE-2024-24325 · mitre
TOTOLINK A3300R V17.0.0cu.557_B20221024 was discovered to contain a command injection vulnerability via the enable parameter in the setPa…
CVE-2024-24327 · mitre
TOTOLINK A3300R V17.0.0cu.557_B20221024 was discovered to contain a command injection vulnerability via the pppoePass parameter in the se…
CVE-2024-24331 · mitre
TOTOLINK A3300R V17.0.0cu.557_B20221024 was discovered to contain a command injection vulnerability via the enable parameter in the setWi…
CVE-2024-24332 · mitre
TOTOLINK A3300R V17.0.0cu.557_B20221024 was discovered to contain a command injection vulnerability via the url parameter in the setUrlFi…
CVE-2024-24333 · mitre
TOTOLINK A3300R V17.0.0cu.557_B20221024 was discovered to contain a command injection vulnerability via the desc parameter in the setWiFi…
CVE-2024-23740 · mitre
An issue in Kap for macOS version 3.6.0 and before, allows remote attackers to execute arbitrary code via the RunAsNode and enableNodeCli…
CVE-2024-24330 · mitre
TOTOLINK A3300R V17.0.0cu.557_B20221024 was discovered to contain a command injection vulnerability via the port or enable parameter in t…
CVE-2023-51982 · mitre
CrateDB 5.5.1 is contains an authentication bypass vulnerability in the Admin UI component.
CVE-2024-24324 · mitre
TOTOLINK A8000RU v7.1cu.643_B20200521 was discovered to contain a hardcoded password for root stored in /etc/shadow.
CVE-2024-23742 · mitre
An issue in Loom on macOS version 0.196.1 and before, allows remote attackers to execute arbitrary code via the RunAsNode and enableNodeC…
CVE-2024-22860 · mitre
Integer overflow vulnerability in FFmpeg before n6.1, allows remote attackers to execute arbitrary code via the jpegxl_anim_read_packet c…
CVE-2024-23738 · mitre
An issue in Postman version 10.22 and before on macOS allows a remote attacker to execute arbitrary code via the RunAsNode and enableNode…
CVE-2024-22862 · mitre
Integer overflow vulnerability in FFmpeg before n6.1, allows remote attackers to execute arbitrary code via the JJPEG XL Parser.
CVE-2023-52389 · mitre
UTF32Encoding.cpp in POCO has a Poco::UTF32Encoding integer overflow and resultant stack buffer overflow because Poco::UTF32Encoding::con…
CVE-2023-51840 · mitre
DoraCMS 2.1.8 is vulnerable to Use of Hard-coded Cryptographic Key.
CVE-2023-51837 · mitre
Ylianst MeshCentral 1.1.16 is vulnerable to Missing SSL Certificate Validation.
CVE-2023-51839 · mitre
DeviceFarmer stf v3.6.6 suffers from Use of a Broken or Risky Cryptographic Algorithm.
Tenda
CVE-2024-0990 · Tenda i6
Tenda i6 httpd setAutoPing formSetAutoPing stack-based overflow
CVE-2024-0993 · Tenda i6
Tenda i6 httpd WifiMacFilterGet formWifiMacFilterGet stack-based overflow
CVE-2024-0995 · Tenda W6
Tenda W6 httpd wifiSSIDset formwrlSSIDset stack-based overflow
CVE-2024-0996 · Tenda i9
Tenda i9 httpd setcfm formSetCfm stack-based overflow
CVE-2024-0991 · Tenda i6
Tenda i6 httpd setcfm formSetCfm stack-based overflow
CVE-2024-0992 · Tenda i6
Tenda i6 httpd wifiSSIDset formwrlSSIDset stack-based overflow
CVE-2024-0994 · Tenda W6
Tenda W6 httpd setcfm formSetCfm stack-based overflow
sni
remyandrade
CVE-2024-24141 · remyandrade school_task_manager
Sourcecodester School Task Manager App 1.0 allows SQL Injection via the 'task' parameter.
Sichuan Yougou Technology
CVE-2024-0988 · Sichuan Yougou Technology KuERP
Sichuan Yougou Technology KuERP common.php checklogin improper authentication
CVE-2024-0987 · Sichuan Yougou Technology KuERP
Sichuan Yougou Technology KuERP log neutralization for logs
CVE-2024-0989 · Sichuan Yougou Technology KuERP
Sichuan Yougou Technology KuERP Service.php del_sn_db path traversal
0xJacky
tenable
VulDB
Mitsubishi Electric Corporation
CVE-2023-6943 · Mitsubishi Electric Corporation EZSocket
Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection') vulnerability in Mitsubishi Electric Corporation EZSoc…
SE-elektronic GmbH
CVE-2024-1015 · SE-elektronic GmbH E-DDC3.3
Remote command execution vulnerability in SE-elektronic GmbH E-DDC3.3
SourceCodester
CVE-2024-1009 · SourceCodester Employee Management System
SourceCodester Employee Management System login.php sql injection
CVE-2024-1027 · SourceCodester Facebook News Feed Like