Total
258583 CVE
| CVE | Vendors | Products | Updated | CVSS v2 | CVSS v3 |
|---|---|---|---|---|---|
| CVE-2024-34989 | 2024-07-03 | N/A | 9.8 CRITICAL | ||
| In the module RSI PDF/HTML catalog evolution (prestapdf) <= 7.0.0 from RSI for PrestaShop, a guest can perform SQL injection via `PrestaPDFProductListModuleFrontController::queryDb().' | |||||
| CVE-2024-34988 | 2024-07-03 | N/A | 9.8 CRITICAL | ||
| SQL injection vulnerability in the module "Complete for Create a Quote in Frontend + Backend Pro" (askforaquotemodul) <= 1.0.51 from Buy Addons for PrestaShop allows attackers to view sensitive information and cause other impacts via methods `AskforaquotemodulcustomernewquoteModuleFrontController::run()`, `AskforaquotemoduladdproductnewquoteModuleFrontController::run()`, `AskforaquotemodulCouponcodeModuleFrontController::run()`, `AskforaquotemodulgetshippingcostModuleFrontController::run()`, `AskforaquotemodulgetstateModuleFrontController::run().` | |||||
| CVE-2024-34974 | 2024-07-03 | N/A | 8.2 HIGH | ||
| Tenda AC18 v15.03.05.19 is vulnerable to Buffer Overflow in the formSetPPTPServer function via the endIp parameter. | |||||
| CVE-2024-34959 | 2024-07-03 | N/A | 5.5 MEDIUM | ||
| DedeCMS V5.7.113 is vulnerable to Cross Site Scripting (XSS) via sys_data_replace.php. | |||||
| CVE-2024-34958 | 2024-07-03 | N/A | 6.5 MEDIUM | ||
| idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component admin/banner_deal.php?mudi=add | |||||
| CVE-2024-34955 | 2024-07-03 | N/A | 9.8 CRITICAL | ||
| Code-projects Budget Management 1.0 is vulnerable to SQL Injection via the delete parameter. | |||||
| CVE-2024-34954 | 2024-07-03 | N/A | 6.1 MEDIUM | ||
| Code-projects Budget Management 1.0 is vulnerable to Cross Site Scripting (XSS) via the budget parameter. | |||||
| CVE-2024-34953 | 2024-07-03 | N/A | 7.5 HIGH | ||
| An issue in taurusxin ncmdump v1.3.2 allows attackers to cause a Denial of Service (DoS) via memory exhaustion by supplying a crafted .ncm file | |||||
| CVE-2024-34950 | 2024-07-03 | N/A | 7.5 HIGH | ||
| D-Link DIR-822+ v1.0.5 was discovered to contain a stack-based buffer overflow vulnerability in the SetNetworkTomographySettings module. | |||||
| CVE-2024-34946 | 2024-07-03 | N/A | 6.5 MEDIUM | ||
| Tenda FH1206 V1.2.0.8(8155)_EN was discovered to contain a stack-based buffer overflow vulnerability via the page parameter at ip/goform/DhcpListClient. | |||||
| CVE-2024-34945 | 2024-07-03 | N/A | 9.8 CRITICAL | ||
| Tenda FH1206 V1.2.0.8(8155)_EN was discovered to contain a stack-based buffer overflow vulnerability via the PPW parameter at ip/goform/WizardHandle. | |||||
| CVE-2024-34943 | 2024-07-03 | N/A | 9.8 CRITICAL | ||
| Tenda FH1206 V1.2.0.8(8155)_EN was discovered to contain a stack-based buffer overflow vulnerability via the page parameter at ip/goform/NatStaticSetting. | |||||
| CVE-2024-34933 | 2024-07-03 | N/A | 6.3 MEDIUM | ||
| A SQL injection vulnerability in /model/update_grade.php in Campcodes Complete Web-Based School Management System 1.0 allows an attacker to execute arbitrary SQL commands via the admission_fee parameter. | |||||
| CVE-2024-34930 | 2024-07-03 | N/A | 5.3 MEDIUM | ||
| A SQL injection vulnerability in /model/all_events1.php in Campcodes Complete Web-Based School Management System 1.0 allows attacker to execute arbitrary SQL commands via the month parameter. | |||||
| CVE-2024-34928 | 2024-07-03 | N/A | 7.3 HIGH | ||
| A SQL injection vulnerability in /model/update_subject_routing.php in Campcodes Complete Web-Based School Management System 1.0 allows an attacker to execute arbitrary SQL commands via the grade parameter. | |||||
| CVE-2024-34927 | 2024-07-03 | N/A | 9.8 CRITICAL | ||
| A SQL injection vulnerability in /model/update_classroom.php in Campcodes Complete Web-Based School Management System 1.0 allows an attacker to execute arbitrary SQL commands via the name parameter. | |||||
| CVE-2024-34921 | 2024-07-03 | N/A | 8.8 HIGH | ||
| TOTOLINK X5000R v9.1.0cu.2350_B20230313 was discovered to contain a command injection via the disconnectVPN function. | |||||
| CVE-2024-34919 | 2024-07-03 | N/A | 9.8 CRITICAL | ||
| An arbitrary file upload vulnerability in the component \modstudent\controller.php of Pisay Online E-Learning System using PHP/MySQL v1.0 allows attackers to execute arbitrary code via uploading a crafted file. | |||||
| CVE-2024-34914 | 2024-07-03 | N/A | 5.3 MEDIUM | ||
| php-censor v2.1.4 and fixed in v.2.1.5 was discovered to utilize a weak hashing algorithm for its remember_key value. This allows attackers to bruteforce to bruteforce the remember_key value to gain access to accounts that have checked "remember me" when logging in. | |||||
| CVE-2024-34909 | 1 Kykms | 1 Kykms | 2024-07-03 | N/A | 5.4 MEDIUM |
| An arbitrary file upload vulnerability in KYKMS v1.0.1 and below allows attackers to execute arbitrary code via uploading a crafted PDF file. | |||||