| Page(s) : 1 ... 19 20 21 22 23 24 25 26 27 28 [29] 30 31 32 33 34 35 36 37 38 39 ... | Result(s) : 39741 |
Alerts
| DATE | NAME | CATEGORIES | DETAIL | |
|---|---|---|---|---|
| 9.8 | 2024-01-12 | CVE-2024-0473 | cve | A vulnerability classified as critical has been found in code-projects Dormitory Management System 1.0. Affected is an unknown function of the file comment.php. The manipulation... |
| 9.6 | 2024-01-12 | CVE-2024-21639 | cve | CEF (Chromium Embedded Framework ) is a simple framework for embedding Chromium-based browsers in other applications. `CefLayeredWindowUpdaterOSR::OnAllocatedSharedMemory` does ... |
| 9.8 | 2024-01-12 | CVE-2023-49253 | cve | Root user password is hardcoded into the device and cannot be changed in the user interface. |
| 9.8 | 2024-01-12 | CVE-2023-49255 | cve | The router console is accessible without authentication at "data" field, and while a user needs to be logged in in order to modify the configuration, the session state is shared... |
| 9.8 | 2024-01-12 | CVE-2023-49262 | cve | The authentication mechanism can be bypassed by overflowing the value of the Cookie "authentication" field, provided there is an active user session. |
| 9.8 | 2024-01-12 | CVE-2023-28897 | cve | The secret value used for access to critical UDS services of the MIB3 infotainment is hardcoded in the firmware. Vulnerability discovered on Škoda Superb III (3V3) - 2.0 TDI ma... |
| 9.8 | 2024-01-12 | CVE-2024-0460 | cve | A vulnerability was found in code-projects Faculty Management System 1.0 and classified as critical. This issue affects some unknown processing of the file /admin/pages/student-... |
| 9.8 | 2024-01-12 | CVE-2024-0461 | cve | A vulnerability was found in code-projects Online Faculty Clearance 1.0. It has been classified as critical. Affected is an unknown function of the file deactivate.php of the co... |
| 9.1 | 2024-01-12 | CVE-2024-21887 | cve | A command injection vulnerability in web components of Ivanti Connect Secure (9.x, 22.x) and Ivanti Policy Secure (9.x, 22.x) allows an authenticated administrator to send spec... |
| 9.8 | 2024-01-12 | CVE-2024-0462 | cve | A vulnerability was found in code-projects Online Faculty Clearance 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file... |
| 9.8 | 2024-01-12 | CVE-2024-0463 | cve | A vulnerability was found in code-projects Online Faculty Clearance 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /product... |
| 9.8 | 2024-01-12 | CVE-2023-49569 | cve | A path traversal vulnerability was discovered in go-git versions prior to v5.11. This vulnerability allows an attacker to create and amend files across the filesystem. In the wo... |
| 9.8 | 2024-01-12 | CVE-2023-52026 | cve | TOTOlink EX1800T V9.1.0cu.2112_B20220316 was discovered to contain a remote command execution (RCE) vulnerability via the telnet_enabled parameter of the setTelnetCfg interface |
| 9.8 | 2024-01-12 | CVE-2023-37117 | cve | A heap-use-after-free vulnerability was found in live555 version 2023.05.10 while handling the SETUP. |
| 9.8 | 2024-01-12 | CVE-2023-50919 | cve | An issue was discovered on GL.iNet devices before version 4.5.0. There is an NGINX authentication bypass via Lua string pattern matching. This affects A1300 4.4.6, AX1800 4.4.6,... |
| 9.8 | 2024-01-12 | CVE-2023-30014 | cve | SQL Injection vulnerability in oretnom23 Judging Management System v1.0, allows remote attackers to execute arbitrary code and obtain sensitive information via sub_event_id para... |
| 9.8 | 2024-01-12 | CVE-2023-30015 | cve | SQL Injection vulnerability in oretnom23 Judging Management System v1.0, allows remote attackers to execute arbitrary code and obtain sensitive information via txtsearch paramet... |
| 9.8 | 2024-01-12 | CVE-2023-30016 | cve | SQL Injection vulnerability in oretnom23 Judging Management System v1.0, allows remote attackers to execute arbitrary code and obtain sensitive information via sub_event_id para... |
| 9.8 | 2024-01-12 | CVE-2024-21591 | cve | An Out-of-bounds Write vulnerability in J-Web of Juniper Networks Junos OS on SRX Series and EX Series allows an unauthenticated, network-based attacker to cause a Denial of Se... |
| 9.8 | 2024-01-12 | CVE-2016-20021 | cve | In Gentoo Portage before 3.0.47, there is missing PGP validation of executed code: the standalone emerge-webrsync downloads a .gpgsig file but does not perform signature verific... |
| Page(s) : 1 ... 19 20 21 22 23 24 25 26 27 28 [29] 30 31 32 33 34 35 36 37 38 39 ... | Result(s) : 39741 |
