Menu

Star on GitHub · 3.2k

2024

39,956 vulnerabilities published in 2024.

Results

39,956· Page 648/800
8.8
CVE-2024-2815

A vulnerability classified as critical has been found in Tenda AC15 15.03.20_multi. Affected is the function R7WebsSecur

8.8
CVE-2024-2814

A vulnerability was found in Tenda AC15 15.03.20_multi. It has been rated as critical. This issue affects the function f

8.8
CVE-2024-2813

A vulnerability was found in Tenda AC15 15.03.20_multi. It has been declared as critical. This vulnerability affects the

6.3
CVE-2024-2812

A vulnerability was found in Tenda AC15 15.03.05.18/15.03.20_multi. It has been classified as critical. This affects the

8.8
CVE-2024-2811

A vulnerability was found in Tenda AC15 15.03.20_multi and classified as critical. Affected by this issue is the functio

8.8
CVE-2024-2810

A vulnerability has been found in Tenda AC15 15.03.05.18/15.03.20_multi and classified as critical. Affected by this vul

8.8
CVE-2024-2809

A vulnerability, which was classified as critical, was found in Tenda AC15 15.03.05.18/15.03.20_multi. Affected is the f

8.8
CVE-2024-2808

A vulnerability, which was classified as critical, has been found in Tenda AC15 15.03.05.18/15.03.20_multi. This issue a

8.8
CVE-2024-2807

A vulnerability classified as critical was found in Tenda AC15 15.03.05.18/15.03.20_multi. This vulnerability affects th

8.8
CVE-2024-2806

A vulnerability classified as critical has been found in Tenda AC15 15.03.05.18/15.03.20_multi. This affects the functio

9.8
CVE-2024-29275

SQL injection vulnerability in SeaCMS version 12.9, allows remote unauthenticated attackers to execute arbitrary code an

6.1
CVE-2024-29273

There is Stored Cross-Site Scripting (XSS) in dzzoffice 2.02.1 SC UTF8 in uploadfile to index.php, with the XSS payload

6.5
CVE-2024-29272

Arbitrary File Upload vulnerability in VvvebJs before version 1.7.5, allows unauthenticated remote attackers to execute

6.1
CVE-2024-29271

Reflected Cross-Site Scripting (XSS) vulnerability in VvvebJs before version 1.7.7, allows remote attackers to execute a

8.3
CVE-2024-25808

Cross-site Request Forgery (CSRF) vulnerability in Lychee version 3.1.6, allows remote attackers to execute arbitrary co

8.8
CVE-2024-2805

A vulnerability was found in Tenda AC15 15.03.05.18/15.03.20_multi. It has been rated as critical. Affected by this issu

5.4
CVE-2024-26557

Codiad v2.8.4 allows reflected XSS via the components/market/dialog.php type parameter.

6.1
CVE-2024-25807

Cross Site Scripting (XSS) vulnerability in Lychee 3.1.6, allows remote attackers to execute arbitrary code and obtain s

3.5
CVE-2024-2780

A vulnerability was found in Campcodes Online Marriage Registration System 1.0. It has been declared as problematic. Thi

6.4
CVE-2024-2500

The ColorMag theme for WordPress is vulnerable to Stored Cross-Site Scripting via a user's Display Name in all versions

6.4
CVE-2024-2392

The Blocksy Companion plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Newsletter widg

4.3
CVE-2024-2080

The LiquidPoll – Polls, Surveys, NPS and Feedback Reviews plugin for WordPress is vulnerable to Sensitive Information Ex

9.8
CVE-2024-28441

File Upload vulnerability in magicflue v.7.0 and before allows a remote attacker to execute arbitrary code via a crafted

6.1
CVE-2024-0957

The WooCommerce PDF Invoices, Packing Slips, Delivery Notes and Shipping Labels plugin for WordPress is vulnerable to St

3.5
CVE-2024-2779

A vulnerability was found in Campcodes Online Marriage Registration System 1.0. It has been classified as problematic. T

3.5
CVE-2024-2778

A vulnerability was found in Campcodes Online Marriage Registration System 1.0 and classified as problematic. Affected b

6.3
CVE-2024-2777

A vulnerability has been found in Campcodes/PHPGurukul Online Marriage Registration System 1.0 and classified as critica

6.3
CVE-2024-2776

A vulnerability, which was classified as critical, was found in Campcodes Online Marriage Registration System 1.0. Affec

3.5
CVE-2024-2775

A vulnerability, which was classified as problematic, has been found in Campcodes Online Marriage Registration System 1.

6.3
CVE-2024-2774

A vulnerability classified as critical was found in Campcodes Online Marriage Registration System 1.0. This vulnerabilit

3.5
CVE-2024-2773

A vulnerability classified as problematic has been found in Campcodes Online Marriage Registration System 1.0. This affe

6.3
CVE-2024-2770

A vulnerability was found in Campcodes Complete Online Beauty Parlor Management System 1.0. It has been rated as critica

6.4
CVE-2024-2453

There is an SQL injection vulnerability in Advantech WebAccess/SCADA software that allows an authenticated attacker to

7.5
CVE-2024-29031

Meshery is an open source, cloud native manager that enables the design and management of Kubernetes-based infrastructur

6.5
CVE-2024-28863

node-tar is a Tar for Node.js. node-tar prior to version 6.2.1 has no limit on the number of sub-folders created in the

8.1
CVE-2024-28171

It is possible to perform a path traversal attack and write outside of the intended directory. If a file name is specif

4.6
CVE-2024-28045

Improper neutralization of input within the affected product could lead to cross-site scripting.

8.8
CVE-2024-28040

SQL injection vulnerability exists in GetDIAE_astListParameters.

8.1
CVE-2024-25567

Path traversal attack is possible and write outside of the intended directory and may access sensitive information. If

8.8
CVE-2024-23975

SQL injection vulnerability exists in GetDIAE_slogListParameters.

8.8
CVE-2024-23494

SQL injection vulnerability exists in GetDIAE_unListParameters.

4.9
CVE-2023-42954

A privilege escalation issue existed in FileMaker Server, potentially exposing sensitive information to front-end websit

6.3
CVE-2024-2769

A vulnerability was detected in Campcodes Complete Online Beauty Parlor Management System 1.0. The affected element is a

6.3
CVE-2024-2768

A vulnerability was found in Campcodes Complete Online Beauty Parlor Management System 1.0. It has been classified as cr

8.8
CVE-2024-28891

SQL injection vulnerability exists in the script Handler_CFG.ashx.

7.8
CVE-2024-28521

SQL Injection vulnerability in Netcome NS-ASG Application Security Gateway v.6.3.1 allows a local attacker to execute ar

8.8
CVE-2024-28119

Grav is an open-source, flat-file content management system. Prior to version 1.7.45, due to the unrestricted access to

8.8
CVE-2024-28118

Grav is an open-source, flat-file content management system. Prior to version 1.7.45, due to the unrestricted access to

8.8
CVE-2024-28117

Grav is an open-source, flat-file content management system. Prior to version 1.7.45, Grav validates accessible function

8.8
CVE-2024-28116

Grav is an open-source, flat-file content management system. Grav CMS prior to version 1.7.45 is vulnerable to a Server-

Test your stack for 2024issues

CyberStrike tests your own apps and APIs, then verifies each finding before you see it.