Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| CVE-2024-57483 |
|
Tenda i24 V2.0.0.5 is vulnerable to Buffer Overflow in the addWifiMacFilter function.
Tenda i24 V2.0.0.5 is vulnerable to Buffer Overflow in the addWifiMacFilter function.
|
| CVE-2024-57473 |
|
Vulnerability in h3c (CVE-2024-57473)
vulnerability in h3c (CVE-2024-57473). Successful exploitation can lead to full system takeover.
|
| CVE-2024-57482 |
|
Vulnerability in c (CVE-2024-57482)
vulnerability in c (CVE-2024-57482). Successful exploitation can lead to full system takeover.
|
| CVE-2024-57480 |
|
Vulnerability in h3c (CVE-2024-57480)
vulnerability in h3c (CVE-2024-57480). Successful exploitation can lead to full system takeover.
|
| CVE-2024-57471 |
|
Vulnerability in h3c (CVE-2024-57471)
vulnerability in h3c (CVE-2024-57471). Successful exploitation can lead to full system takeover.
|
| CVE-2024-57479 |
|
Vulnerability in h3c (CVE-2024-57479)
vulnerability in h3c (CVE-2024-57479). Successful exploitation can lead to full system takeover.
|
| CVE-2024-55591 KEV |
|
[KEV] Vulnerability in Fortinet fortios-and-fortiproxy (CVE-2024-55591)
vulnerability in Fortinet fortios-and-fortiproxy (CVE-2024-55591). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
|
| CVE-2024-46310 |
|
Vulnerability in CVE-2024-46310 (CVE-2024-46310)
vulnerability in CVE-2024-46310 (CVE-2024-46310). Confidential information can be exposed externally.
|
| CVE-2024-54724 |
|
Code Injection in CVE-2024-54724 (CVE-2024-54724)
code injection in CVE-2024-54724 (CVE-2024-54724). Successful exploitation can lead to full system takeover.
|
| CVE-2024-50660 |
|
Code Injection in ipublishmedia (CVE-2024-50660)
code injection in ipublishmedia (CVE-2024-50660). Successful exploitation can lead to full system takeover.
|
| CVE-2024-50658 |
|
Code Injection in ipublishmedia (CVE-2024-50658)
code injection in ipublishmedia (CVE-2024-50658). Successful exploitation can lead to full system takeover.
|
| CVE-2024-54879 |
|
Vulnerability in seacms (CVE-2024-54879)
vulnerability in seacms (CVE-2024-54879). Confidential information can be exposed externally.
|
| CVE-2024-8950 |
|
SQL Injection in sqli (CVE-2024-8950)
SQL injection in sqli (CVE-2024-8950). Successful exploitation can lead to full system takeover.
|
| CVE-2024-10244 |
|
SQL Injection in sqli (CVE-2024-10244)
SQL injection in sqli (CVE-2024-10244). Successful exploitation can lead to full system takeover.
|
| CVE-2024-8972 |
|
SQL Injection in sqli (CVE-2024-8972)
SQL injection in sqli (CVE-2024-8972). Successful exploitation can lead to full system takeover.
|
| CVE-2024-55875 |
|
Information Disclosure in org.http4k:http4k-format-xml (CVE-2024-55875)
vulnerability in org.http4k:http4k-format-xml (CVE-2024-55875). Successful exploitation can lead to full system takeover. Exploitable via ``DocumentBuilderFactory``. Mitigation: upgrade to `6.50.0.0` or later.
|
| CVE-2024-53480 |
|
SQL Injection in sqli (CVE-2024-53480)
SQL injection in sqli (CVE-2024-53480). Successful exploitation can lead to full system takeover. Exploitable via ``login.php``.
|
| CVE-2024-46442 |
|
Vulnerability in CVE-2024-46442 (CVE-2024-46442)
vulnerability in CVE-2024-46442 (CVE-2024-46442). Successful exploitation can lead to full system takeover.
|
| CVE-2024-53866 |
|
Vulnerability in pnpm (CVE-2024-53866)
vulnerability in pnpm (CVE-2024-53866). Successful exploitation can lead to full system takeover.
|
| CVE-2024-40583 |
|
Pentaminds CuroVMS v2.0.1 was discovered to contain exposed credentials.
Pentaminds CuroVMS v2.0.1 was discovered to contain exposed credentials.
|
| CVE-2024-8259 |
|
SQL Injection in sqli (CVE-2024-8259)
SQL injection in sqli (CVE-2024-8259). Successful exploitation can lead to full system takeover.
|
| CVE-2024-50942 |
|
SQL Injection in sqli (CVE-2024-50942)
SQL injection in sqli (CVE-2024-50942). Successful exploitation can lead to full system takeover.
|
| CVE-2024-52723 |
|
OS Command Injection in totolink (CVE-2024-52723)
OS command injection in totolink (CVE-2024-52723). Successful exploitation can lead to full system takeover.
|
| CVE-2024-51366 |
|
Unrestricted File Upload in CVE-2024-51366 (CVE-2024-51366)
vulnerability in CVE-2024-51366 (CVE-2024-51366). Successful exploitation can lead to full system takeover.
|
| CVE-2024-51367 |
|
Code Injection in CVE-2024-51367 (CVE-2024-51367)
code injection in CVE-2024-51367 (CVE-2024-51367). Successful exploitation can lead to full system takeover.
|
| CVE-2024-52714 |
|
Vulnerability in tenda (CVE-2024-52714)
vulnerability in tenda (CVE-2024-52714). Successful exploitation can lead to full system takeover.
|
| CVE-2024-10534 |
|
Vulnerability in dataprom (CVE-2024-10534)
vulnerability in dataprom (CVE-2024-10534). Successful exploitation can lead to full system takeover.
|
| CVE-2024-10035 |
|
Command Injection in privilege-escalation (CVE-2024-10035)
command injection in privilege-escalation (CVE-2024-10035). Successful exploitation can lead to full system takeover.
|
| CVE-2024-51063 |
|
SQL Injection in sqli (CVE-2024-51063)
SQL injection in sqli (CVE-2024-51063). Confidential information can be exposed externally.
|
| CVE-2024-51065 |
|
SQL Injection in sqli (CVE-2024-51065)
SQL injection in sqli (CVE-2024-51065). Successful exploitation can lead to full system takeover.
|
| CVE-2024-51064 |
|
SQL Injection in sqli (CVE-2024-51064)
SQL injection in sqli (CVE-2024-51064). Successful exploitation can lead to full system takeover.
|
| CVE-2024-51060 |
|
SQL Injection in sqli (CVE-2024-51060)
SQL injection in sqli (CVE-2024-51060). Confidential information can be exposed externally.
|
| CVE-2024-48539 |
|
Vulnerability in CVE-2024-48539 (CVE-2024-48539)
vulnerability in CVE-2024-48539 (CVE-2024-48539). Successful exploitation can lead to full system takeover.
|
| CVE-2024-48538 |
|
Vulnerability in CVE-2024-48538 (CVE-2024-48538)
vulnerability in CVE-2024-48538 (CVE-2024-48538). Successful exploitation can lead to full system takeover.
|
| CVE-2023-6441 |
|
SQL Injection in sqli (CVE-2023-6441)
SQL injection in sqli (CVE-2023-6441). Successful exploitation can lead to full system takeover.
|
| CVE-2024-40087 |
|
Vulnerability in viloliving (CVE-2024-40087)
vulnerability in viloliving (CVE-2024-40087). Successful exploitation can lead to full system takeover.
|
| CVE-2024-40089 |
|
Command Injection in viloliving (CVE-2024-40089)
command injection in viloliving (CVE-2024-40089). Successful exploitation can lead to full system takeover.
|
| CVE-2024-40086 |
|
Vulnerability in CVE-2024-40086 (CVE-2024-40086)
vulnerability in CVE-2024-40086 (CVE-2024-40086). Successful exploitation can lead to full system takeover.
|
| CVE-2024-40084 |
|
Vulnerability in viloliving (CVE-2024-40084)
vulnerability in viloliving (CVE-2024-40084). Successful exploitation can lead to full system takeover.
|
| CVE-2024-40085 |
|
Vulnerability in CVE-2024-40085 (CVE-2024-40085)
vulnerability in CVE-2024-40085 (CVE-2024-40085). Successful exploitation can lead to full system takeover.
|
| CVE-2024-40083 |
|
Vulnerability in CVE-2024-40083 (CVE-2024-40083)
vulnerability in CVE-2024-40083 (CVE-2024-40083). Successful exploitation can lead to full system takeover.
|
| CVE-2024-47685 |
|
Vulnerability in c (CVE-2024-47685)
vulnerability in c (CVE-2024-47685). Confidential information can be exposed externally.
|
| CVE-2024-49195 |
|
Out-of-Bounds Write in trustedfirmware (CVE-2024-49195)
out-of-bounds write in trustedfirmware (CVE-2024-49195). Successful exploitation can lead to full system takeover.
|
| CVE-2024-48772 |
|
Authorization Flaw in c (CVE-2024-48772)
vulnerability in c (CVE-2024-48772). Confidential information can be exposed externally.
|
| CVE-2024-48787 |
|
Authorization Flaw in CVE-2024-48787 (CVE-2024-48787)
vulnerability in CVE-2024-48787 (CVE-2024-48787). Confidential information can be exposed externally.
|
| CVE-2024-48784 |
|
Authorization Flaw in CVE-2024-48784 (CVE-2024-48784)
vulnerability in CVE-2024-48784 (CVE-2024-48784). Successful exploitation can lead to full system takeover.
|
| CVE-2024-48778 |
|
Authorization Flaw in CVE-2024-48778 (CVE-2024-48778)
vulnerability in CVE-2024-48778 (CVE-2024-48778). Confidential information can be exposed externally.
|
| CVE-2024-48786 |
|
Authorization Flaw in CVE-2024-48786 (CVE-2024-48786)
vulnerability in CVE-2024-48786 (CVE-2024-48786). Confidential information can be exposed externally.
|
| CVE-2024-48769 |
|
Authorization Flaw in CVE-2024-48769 (CVE-2024-48769)
vulnerability in CVE-2024-48769 (CVE-2024-48769). Confidential information can be exposed externally.
|
| CVE-2024-46532 |
|
SQL Injection in sqli (CVE-2024-46532)
SQL injection in sqli (CVE-2024-46532). Successful exploitation can lead to full system takeover.
|