CVEs published November 5, 2024
211 CVEs were published on November 5, 2024: 14 critical, 70 high.
- Published
- 211
- Critical
- 14
- High
- 70
- Medium
- 115
- Low
- 7
- Unrated
- 5
- Now in CISA KEV
- 0
- Fix available
- 37
Most affected products
- Linux
- 50
- Huawei HarmonyOS
- 18
- Enel X JuiceBox Pro 3.0 22kW Cellular
- 11
- Hewlett Packard Enterprise (HPE) HPE Aruba Networking Acces…
- 6
- salesagility SuiteCRM
- 6
- OpenHarmony
- 4
- 2N Access Commander
- 3
- code-projects E-Health Care System
- 3
- Huawei HarmonyOS · Huawei EMUI
- 3
- romadebrian WEB-Sekolah
- 3
Critical 14
- CVE-2024-47460Unauthenticated Command Injection Vulnerability in the CLI Service Accessed by the PAPI ProtocolHewlett Packard Enterprise (HPE) HPE Aruba Networking Acces…
- CVE-2024-42509Unauthenticated Command Injection Vulnerability in the CLI Service Accessed by the PAPI ProtocolHewlett Packard Enterprise (HPE) HPE Aruba Networking Acces…
- CVE-2024-50106nfsd: fix race between laundromat and free_stateidLinux
- CVE-2023-29125Heap overflow in CM_main.exe binary in Enel X JuiceBoxEnel X JuiceBox Pro 3.0 22kW Cellular
- CVE-2023-29121Exposed TCF agent service in Enel X JuiceboxEnel X JuiceBox Pro 3.0 22kW Cellular
- CVE-2023-29120Unauthorized Remote Command Execution in Enel X JuiceboxEnel X JuiceBox Pro 3.0 22kW Cellular
- CVE-2023-29119Unauthorized SQLite InjectionEnel X JuiceBox Pro 3.0 22kW Cellular
- CVE-2023-29118Unauthorized SQLite Injection in Enel X JuiceboxEnel X JuiceBox Pro 3.0 22kW Cellular
- CVE-2024-10687Photos, Files, YouTube, Twitter, Instagram, TikTok, Ecommerce Contest Gallery – Upload, Vote, Sell via PayPal, Social Share Buttons <= 24.0.3 - Unauthenticated SQL Injectioncontest-gallery Contest Gallery – Upload & Vote Photos, Med…
- CVE-2024-48176Lylme Spage v1.9.5 is vulnerable to Incorrect Access Control.
- CVE-2024-48746An issue in Lens Visual integration with Power BI v.4.0.0.3 allows a remote attacker to execute arbitrary code via the Natural language proc
- CVE-2024-51115DCME-320 v7.4.12.90 was discovered to contain a command injection vulnerability.
- CVE-2024-51132An XML External Entity (XXE) vulnerability in HAPI FHIR before v6.4.0 allows attackers to access sensitive information or execute arbitrary ca.uhn.hapi.fhir:org.hl7.fhir.convertors · ca.uhn.hapi.f… +7
- CVE-2024-51358An issue in Linux Server Heimdall v.2.6.1 allows a remote attacker to execute arbitrary code via a crafted script to the Add new application
High 70
- CVE-2024-10028Everest Backup – WordPress Cloud Backup, Migration, Restore & Cloning Plugin <= 2.2.13 - Sensitive Invormation Disclosure via procstat Logeverestthemes Everest Backup – WordPress Cloud Backup, Migr…
- CVE-2024-47463Arbitrary File Creation Vulnerability in Instant AOS-8 and AOS-10 leads to Authenticated Remote Command Execution (RCE)Hewlett Packard Enterprise (HPE) HPE Aruba Networking Acces…
- CVE-2024-47462Arbitrary File Creation Vulnerability in Instant AOS-8 and AOS-10 leads to Authenticated Remote Command Execution (RCE)Hewlett Packard Enterprise (HPE) HPE Aruba Networking Acces…
- CVE-2024-47461Authenticated Arbitrary Remote Command Execution (RCE) in Instant AOS-8 and AOS-10Hewlett Packard Enterprise (HPE) HPE Aruba Networking Acces…
- CVE-2024-7995Autodesk VRED Design Privilege Escalation VulnerabilityAutodesk VRED Design
- CVE-2024-51735Stored Cross-site Scripting to RCE on Osmedeus Web Serverj3ssie osmedeus · github.com/j3ssie/osmedeus
- CVE-2024-50332Authenticated Blind SQL Injection in DeleteRelationShip in SuiteCRMsalesagility SuiteCRM
- CVE-2024-49774ModuleScanner flaws in SuiteCRMsalesagility SuiteCRM
- CVE-2024-49772Authenticated SQL injection in AM_ProjectTemplates controller in SuiteCRMsalesagility SuiteCRM
- CVE-2024-51739Users enumeration allowed through Rest API in Combodo iTopCombodo iTop
- CVE-2024-50132tracing/probes: Fix MAX_TRACE_ARGS limit handlingLinux
- CVE-2024-50131tracing: Consider the NULL character when validating the event lengthLinux
- CVE-2024-50130netfilter: bpf: must hold reference on net namespaceLinux
- CVE-2024-50129net: pse-pd: Fix out of bound for loopLinux
- CVE-2024-50128net: wwan: fix global oob in wwan_rtnl_policyLinux
- CVE-2024-50127net: sched: fix use-after-free in taprio_change()Linux
- CVE-2024-50126net: sched: use RCU read-side critical section in taprio_dump()Linux
- CVE-2024-50125Bluetooth: SCO: Fix UAF on sco_sock_timeoutLinux
- CVE-2024-50124Bluetooth: ISO: Fix UAF on iso_sock_timeoutLinux
- CVE-2024-50123bpf: Add the missing BPF_LINK_TYPE invocation for sockmapLinux
- CVE-2024-50121nfsd: cancel nfsd_shrinker_work using sync mode in nfs4_state_shutdown_netLinux
- CVE-2024-50119cifs: fix warning when destroy 'cifs_io_request_pool'Linux
- CVE-2024-50117drm/amd: Guard against bad data for ATIF ACPI methodLinux
- CVE-2024-50115KVM: nSVM: Ignore nCR3[4:0] when loading PDPTEs from memoryLinux
- CVE-2024-50114KVM: arm64: Unregister redistributor for failed vCPU creationLinux
- CVE-2024-50113firewire: core: fix invalid port index for parent deviceLinux
- CVE-2024-50112x86/lam: Disable ADDRESS_MASKING in most casesLinux
- CVE-2024-50101iommu/vt-d: Fix incorrect pci_for_each_dma_alias() for non-PCI devicesLinux
- CVE-2024-50099arm64: probes: Remove broken LDR (literal) uprobe supportLinux
- CVE-2024-50096nouveau/dmem: Fix vulnerability in migrate_to_ram upon copy errorLinux
- CVE-2024-50095RDMA/mad: Improve handling of timed out WRs of mad agentLinux
- CVE-2024-50094sfc: Don't invoke xdp_do_flush() from netpoll.Linux
- CVE-2024-50091dm vdo: don't refer to dedupe_context after releasing itLinux
- CVE-2024-50090drm/xe/oa: Fix overflow in oa batch bufferLinux
- CVE-2024-49522Substance3D - Painter | Out-of-bounds Write (CWE-787)Adobe Substance3D - Painter
- CVE-2024-9579Certain Poly Video Conference Devices – Potential Remote Code ExecutionHP Certain Poly Video Conference Devices
- CVE-2023-29117Authentication Bypass in JuiceBox Web Manager interfaceEnel X JuiceBox Pro 3.0 22kW Cellular
- CVE-2024-7059A high-severity vulnerability that can lead to arbitrary code execution on the system hosting the Web SDK role was found in the Genetec SecuGenetec Security Center
- CVE-2024-10263Tickera – WordPress Event Ticketing <= 3.5.4.4 - Unauthenticated Arbitrary Shortcode ExecutionTickera – Sell Tickets & Manage Events
- CVE-2023-52920bpf: support non-r10 register spill/fill to/from stack in precision trackingLinux
- CVE-2024-51526Permission control vulnerability in the hidebug module Impact: Successful exploitation of this vulnerability may affect service confidentialHuawei HarmonyOS
- CVE-2024-51523Information management vulnerability in the Gallery module Impact: Successful exploitation of this vulnerability may affect service confidenHuawei HarmonyOS
- CVE-2024-47253In 2N Access Commander versions 3.1.1.2 and prior, a Path Traversal vulnerability could allow an attacker with administrative privileges to 2N Access Commander
- CVE-2024-10711WooCommerce Report <= 1.5.1 - Cross-Site Request Forgery to Arbitrary Options Updateithemelandco REPORTiT – Advanced Reporting for WooCommerce
- CVE-2024-10114Social Login - WordPress / WooCommerce Plugin <= 2.7.7 - Authentication Bypass via WordPress.com OAuth providerWPWeb WooCommerce - Social Login
- CVE-2024-51510Out-of-bounds access vulnerability in the logo module Impact: Successful exploitation of this vulnerability may affect service confidentialiHuawei HarmonyOS · Huawei EMUI
- CVE-2024-47137Liteos_a has an out-of-bounds Write vulnerabilityOpenHarmony
- CVE-2024-47404Liteos_a has a double free vulnerabilityOpenHarmony
- CVE-2024-47797Liteos_a has an out-of-bounds Write vulnerabilityOpenHarmony
- CVE-2024-10097Loginizer Security and Loginizer <= 1.9.2 - Authentication Bypass via WordPress.com OAuth providerSoftaculous Loginizer Security · softaculous Loginizer
- CVE-2024-9459SQL InjectionManageEngine Exchange Reporter Plus
- CVE-2024-50993Netgear R8500 v1.0.2.160 was discovered to contain a command injection vulnerability in the sysNewPasswd parameter at admin_account.cgi.
- CVE-2024-51005Netgear R8500 v1.0.2.160 was discovered to contain a command injection vulnerability in the share_name parameter at usb_remote_smb_conf.cgi.
- CVE-2024-51008Netgear XR300 v1.0.3.78 was discovered to contain a command injection vulnerability in the system_name parameter at wiz_dyn.cgi.
- CVE-2024-51009Netgear R8500 v1.0.2.160 was discovered to contain a command injection vulnerability in the wan_gateway parameter at ether.cgi.
- CVE-2024-51010Netgear R8500 v1.0.2.160, XR300 v1.0.3.78, R7000P v1.3.3.154, and R6400 v2 1.0.4.128 were discovered to contain a command injection vulnerab
- CVE-2024-51021Netgear XR300 v1.0.3.78, R7000P v1.3.3.154, and R6400 v2 1.0.4.128 was discovered to contain a command injection vulnerability via the wan_g
- CVE-2024-51023D-Link DIR_823G 1.0.2B05 was discovered to contain a command injection vulnerability via the Address parameter in the SetNetworkTomographySe
- CVE-2024-51024D-Link DIR_823G 1.0.2B05 was discovered to contain a command injection vulnerability via the HostName parameter in the SetWanSettings functi
- CVE-2024-51116Tenda AC6 v2.0 V15.03.06.50 was discovered to contain a buffer overflow in the function 'formSetPPTPServer'.
- CVE-2024-51240An issue in the luci-mod-rpc package in OpenWRT Luci LTS allows for privilege escalation from an admin account to root via the JSON-RPC-API,
- CVE-2024-51379Stored Cross-Site Scripting (XSS) vulnerability discovered in JATOS v3.9.3.
- CVE-2024-51380Stored Cross-Site Scripting (XSS) vulnerability discovered in the Properties Component of JATOS v3.9.3.
- CVE-2024-51381Cross-Site Request Forgery (CSRF) vulnerability in JATOS v3.9.3 that allows attackers to perform actions reserved for administrators, includ
- CVE-2024-51382Cross-Site Request Forgery (CSRF) vulnerability in JATOS v3.9.3 allows an attacker to reset the administrator's password.
- CVE-2024-52018Netgear XR300 v1.0.3.78 was discovered to contain a command injection vulnerability in the system_name parameter at genie_dyn.cgi.
- CVE-2024-52019Netgear R8500 v1.0.2.160 was discovered to contain a command injection vulnerability in the wan_gateway parameter at genie_fix2.cgi.
- CVE-2024-52020Netgear R8500 v1.0.2.160 was discovered to contain a command injection vulnerability in the wan_gateway parameter at wiz_fix2.cgi.
- CVE-2024-52021Netgear R8500 v1.0.2.160 was discovered to contain a command injection vulnerability in the wan_gateway parameter at bsw_fix.cgi.
- CVE-2024-52022Netgear R8500 v1.0.2.160, XR300 v1.0.3.78, R7000P v1.3.3.154, and R6400 v2 1.0.4.128 were discovered to contain a command injection vulnerab
Medium, low and unrated 127
- CVE-2024-47464Authenticated Path Traversal Vulnerability Leads to a Remote Unauthorized Access to FilesHewlett Packard Enterprise (HPE) HPE Aruba Networking Acces…
- CVE-2024-51756cap-std doesn't fully sandbox all the Windows device filenamesbytecodealliance cap-std · cap-primitives +2
- CVE-2024-10084Contact Form 7 – Dynamic Text Extension <= 4.5 - Information Disclosure via Shortcodesevenspark Contact Form 7 – Dynamic Text Extension
- CVE-2024-51745Wasmtime doesn't fully sandbox all the Windows device filenamesbytecodealliance wasmtime · wasmtime
- CVE-2024-51752Refresh tokens are logged when the debug flag is enabled in @workos-inc/authkit-nextjsworkos authkit-nextjs · @workos-inc/authkit-nextjs
- CVE-2024-51753Refresh tokens are logged when the debug flag is enabled in @workos-inc/authkit-remixworkos authkit-remix · @workos-inc/authkit-remix
- CVE-2024-51746Use of incorrect Rekor entries during verification in gitsignsigstore gitsign · github.com/sigstore/gitsign
- CVE-2024-50335Authenticated XSS in "Publish Key" Field Allowing Unauthorized Administrator User Creation in SuiteCRMsalesagility SuiteCRM
- CVE-2024-50333RCE in ModuleBuilder in SuiteCRMsalesagility SuiteCRM
- CVE-2024-0134NVIDIA Container Toolkit and NVIDIA GPU Operator for Linux contain a UNIX vulnerability where a specially crafted container image can lead tNVIDIA Container Toolkit · NVIDIA GPU Operator
- CVE-2024-49773Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') in SuiteCRMsalesagility SuiteCRM
- CVE-2024-49377Jinja2 Templates are vulnerable to XSS attacks due to their configuration in OctoPrintOctoPrint
- CVE-2024-51493API key access in settings without reauthentication in OctoPrintOctoPrint
- CVE-2024-51740SSRF through arbitrary PHP class instantiation in the user portal in Combodo iTopCombodo iTop
- CVE-2024-50138bpf: Use raw_spinlock_t in ringbufLinux
- CVE-2024-50137reset: starfive: jh71x0: Fix accessing the empty member on JH7110 SoCLinux
- CVE-2024-50136net/mlx5: Unregister notifier on eswitch init failureLinux
- CVE-2024-50135nvme-pci: fix race condition between reset and nvme_dev_disable()Linux
- CVE-2024-50134drm/vboxvideo: Replace fake VLA at end of vbva_mouse_pointer_shape with real VLALinux
- CVE-2024-50133LoongArch: Don't crash in stack_top() for tasks without vDSOLinux
- CVE-2024-50122PCI: Hold rescan lock while adding devices during host probeLinux
- CVE-2024-50120smb: client: Handle kstrdup failures for passwordsLinux
- CVE-2024-50118btrfs: reject ro->rw reconfiguration if there are hard ro requirementsLinux
- CVE-2024-50116nilfs2: fix kernel bug due to missing clearing of buffer delay flagLinux
- CVE-2024-50111LoongArch: Enable IRQ if do_ale() triggered in irq-enabled contextLinux
- CVE-2024-50110xfrm: fix one more kernel-infoleak in algo dumpingLinux
- CVE-2024-50109md/raid10: fix null ptr dereference in raid10_size()Linux
- CVE-2024-50108drm/amd/display: Disable PSR-SU on Parade 08-01 TCON tooLinux
- CVE-2024-50107platform/x86/intel/pmc: Fix pmc_core_iounmap to call iounmap for valid addressesLinux
- CVE-2024-50105ASoC: qcom: sc7280: Fix missing Soundwire runtime stream allocLinux
- CVE-2024-50104ASoC: qcom: sdm845: add missing soundwire runtime stream allocLinux
- CVE-2024-50103ASoC: qcom: Fix NULL Dereference in asoc_qcom_lpass_cpu_platform_probe()Linux
- CVE-2024-50102x86: fix user address masking non-canonical speculation issueLinux
- CVE-2024-50100USB: gadget: dummy-hcd: Fix "task hung" problemLinux
- CVE-2024-50098scsi: ufs: core: Set SDEV_OFFLINE when UFS is shut downLinux
- CVE-2024-50097net: fec: don't save PTP state if PTP is unsupportedLinux
- CVE-2024-50093thermal: intel: int340x: processor: Fix warning during module unloadLinux
- CVE-2024-50092net: netconsole: fix wrong warningLinux
- CVE-2023-29126Insecure loose comparison in Enel X JuiceBoxEnel X JuiceBox Pro 3.0 22kW Cellular
- CVE-2023-29122Incorrect file ownership of privileged service's libraries in Enel X JuiceBoxEnel X JuiceBox Pro 3.0 22kW Cellular
- CVE-2023-29116PHP Information Disclosure in Enel X JuiceBoxEnel X JuiceBox Pro 3.0 22kW Cellular
- CVE-2023-29115Denial of Service via Web Management interface in Enel X JuiceBoxEnel X JuiceBox Pro 3.0 22kW Cellular
- CVE-2023-29114Unauthorized System Log Disclosure in Enel X JuiceBoxEnel X JuiceBox Pro 3.0 22kW Cellular
- CVE-2024-108451000 Projects Bookstore Management System book_detail.php sql injection1000 Projects Bookstore Management System
- CVE-2024-108441000 Projects Bookstore Management System search.php sql injection1000 Projects Bookstore Management System
- CVE-2024-10842romadebrian WEB-Sekolah Backend Proses_Edit_Akun.php cross site scriptingromadebrian WEB-Sekolah
- CVE-2024-10841romadebrian WEB-Sekolah Mail Proses_Kirim.php sql injectionromadebrian WEB-Sekolah
- CVE-2024-10329Ultimate Bootstrap Elements for Elementor <= 1.4.6 - Authenticated (Contributor+) Sensitive Information Exposureg5theme Ultimate Bootstrap Elements for Elementor
- CVE-2024-10840romadebrian WEB-Sekolah Backend akun_edit.php cross site scriptingromadebrian WEB-Sekolah
- CVE-2024-9867Element Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid & Carousel, Remote Arrows) <= 5.10.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Open Map Widgetbdthemes Element Pack – Widgets, Templates & Addons for Ele…
- CVE-2024-9657Element Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid & Carousel, Remote Arrows) <= 5.10.2 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scriptingbdthemes Element Pack – Widgets, Templates & Addons for Ele…
- CVE-2024-51530LaunchAnywhere vulnerability in the account module Impact: Successful exploitation of this vulnerability may affect service confidentiality.Huawei HarmonyOS
- CVE-2024-51529Data verification vulnerability in the battery module Impact: Successful exploitation of this vulnerability may affect function stability.Huawei HarmonyOS
- CVE-2024-9178XT Floating Cart for WooCommerce <= 2.8.2 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Uploadxplodedthemes XT Floating Cart for WooCommerce
- CVE-2024-10319140+ Widgets | Xpro Addons For Elementor – FREE <= 1.4.6 - Authenticated (Contributor+) Sensitive Information Exposure via Elementor TemplateXpro Addons — 140+ Widgets for Elementor
- CVE-2024-51528Vulnerability of improper log printing in the Super Home Screen module Impact: Successful exploitation of this vulnerability may affect servHuawei HarmonyOS · Huawei EMUI
- CVE-2024-9878Photo Gallery by 10Web <= 1.8.30 - Authenticated (Administrator+) Stored Cross-Site ScriptingPhoto Gallery by 10Web – Mobile-Friendly Image Gallery
- CVE-2024-7429Zotpress <= 7.3.12 - Missing Authorizationkseaborn Zotpress
- CVE-2024-51527Permission control vulnerability in the Gallery app Impact: Successful exploitation of this vulnerability may affect service confidentialityHuawei HarmonyOS · Huawei EMUI
- CVE-2024-51525Permission control vulnerability in the clipboard module Impact: Successful exploitation of this vulnerability may affect service confidentiHuawei HarmonyOS
- CVE-2024-47255In 2N Access Commander versions 3.1.1.2 and prior, a local attacker can escalate their privileges in the system which could allow for arbitr2N Access Commander
- CVE-2024-51524Permission control vulnerability in the Wi-Fi module Impact: Successful exploitation of this vulnerability may affect service confidentialitHuawei HarmonyOS
- CVE-2024-51522Vulnerability of improper device information processing in the device management module Impact: Successful exploitation of this vulnerabilitHuawei HarmonyOS
- CVE-2024-47254In 2N Access Commander versions 3.1.1.2 and prior, an Insufficient Verification of Data Authenticity vulnerability could allow an attacker 2N Access Commander
- CVE-2024-51521Input parameter verification vulnerability in the background service module Impact: Successful exploitation of this vulnerability may affectHuawei HarmonyOS
- CVE-2024-51520Vulnerability of input parameters not being verified in the HDC module Impact: Successful exploitation of this vulnerability may affect avaiHuawei HarmonyOS
- CVE-2024-51519Vulnerability of input parameters not being verified in the HDC module Impact: Successful exploitation of this vulnerability may affect avaiHuawei HarmonyOS
- CVE-2024-51518Vulnerability of message types not being verified in the advanced messaging modul Impact: Successful exploitation of this vulnerability may Huawei HarmonyOS
- CVE-2024-51517Vulnerability of improper memory access in the phone service module Impact: Successful exploitation of this vulnerability may affect availabHuawei HarmonyOS
- CVE-2024-51516Permission control vulnerability in the ability module Impact: Successful exploitation of this vulnerability may cause features to function Huawei HarmonyOS
- CVE-2024-51515Race condition vulnerability in the kernel network module Impact:Successful exploitation of this vulnerability may affect availability.Huawei HarmonyOS
- CVE-2024-51514Vulnerability of pop-up windows belonging to no app in the VPN module Impact: Successful exploitation of this vulnerability may affect servHuawei HarmonyOS
- CVE-2024-51513Vulnerability of processes not being fully terminated in the VPN module Impact: Successful exploitation of this vulnerability will affect poHuawei HarmonyOS
- CVE-2024-51512Vulnerability of parameter type not being verified in the WantAgent module Impact: Successful exploitation of this vulnerability may affect Huawei HarmonyOS
- CVE-2024-51511Vulnerability of parameter type not being verified in the WantAgent module Impact: Successful exploitation of this vulnerability may affect Huawei HarmonyOS
- CVE-2024-9667Seriously Simple Podcasting <= 3.5.0 - Reflected Cross-Site Scripting via add_query_arg Parameterpodcastmotor Seriously Simple Podcasting
- CVE-2024-9443Basticom Framework <= 1.5.0 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File UploadBasticom Framework
- CVE-2024-47402Liteos_a has an Out-of-bounds Read vulnerabilityOpenHarmony
- CVE-2024-9883Pods < 3.2.7.1 - Admin+ Stored XSSPods
- CVE-2024-9689Post From Frontend <= 1.0.0 - Post Deletion via CSRFPost From Frontend
- CVE-2024-7877Appointment Booking Calendar < 1.6.7.55 - Admin+ Stored XSSAppointment Booking Calendar — Simply Schedule Appointments…
- CVE-2024-7876Appointment Booking Calendar < 1.6.7.55 - Admin+ Stored XSSAppointment Booking Calendar — Simply Schedule Appointments…
- CVE-2024-5578Table of Contents Plus <= 2408 - Editor+ Stored XSSTable of Contents Plus
- CVE-2024-10340Shortcodes Blocks Creator Ultimate <= 2.1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcodecmorillas1 Shortcodes Blocks Creator Ultimate
- CVE-2024-10810code-projects E-Health Care System app_request.php sql injectioncode-projects E-Health Care System
- CVE-2024-10809code-projects E-Health Care System chat.php sql injectioncode-projects E-Health Care System
- CVE-2024-10808code-projects E-Health Care System req_detail.php sql injectioncode-projects E-Health Care System
- CVE-2024-10807PHPGurukul Hospital Management System search.php cross site scriptingPHPGurukul Hospital Management System
- CVE-2024-10806PHPGurukul Hospital Management System betweendates-detailsreports.php cross site scriptingPHPGurukul Hospital Management System
- CVE-2024-48312WebLaudos v20.8 (118) was discovered to contain a cross-site scripting (XSS) vulnerability via the login page.
- CVE-2024-50994Netgear R8500 v1.0.2.160 was discovered to contain multiple stack overflow vulnerabilities in the component ipv6_fix.cgi via the ipv6_wan_ip
- CVE-2024-50995Netgear R8500 v1.0.2.160 was discovered to contain a stack overflow via the share_name parameter at usb_remote_smb_conf.cgi.
- CVE-2024-50996Netgear R8500 v1.0.2.160, XR300 v1.0.3.78, R7000P v1.3.3.154, and R6400 v2 1.0.4.128 were discovered to contain a stack overflow via the bpa
- CVE-2024-50997Netgear R8500 v1.0.2.160, XR300 v1.0.3.78, R7000P v1.3.3.154, and R6400 v2 1.0.4.128 were discovered to contain a stack overflow via the ppt
- CVE-2024-50998Netgear R8500 v1.0.2.160 was discovered to contain multiple stack overflow vulnerabilities in the component openvpn.cgi via the openvpn_serv
- CVE-2024-50999Netgear R8500 v1.0.2.160 was discovered to contain a command injection vulnerability in the sysNewPasswd parameter at password.cgi.
- CVE-2024-51000Netgear R8500 v1.0.2.160 was discovered to contain multiple stack overflow vulnerabilities in the component wireless.cgi via the opmode, opm
- CVE-2024-51001Netgear R8500 v1.0.2.160 was discovered to contain a stack overflow via the sysDNSHost parameter at ddns.cgi.
- CVE-2024-51002Netgear R8500 v1.0.2.160, XR300 v1.0.3.78, R7000P v1.3.3.154, and R6400 v2 1.0.4.128 were discovered to contain a stack overflow via the l2t
- CVE-2024-51003Netgear R8500 v1.0.2.160, XR300 v1.0.3.78, R7000P v1.3.3.154, and R6400 v2 1.0.4.128 were discovered to multiple stack overflow vulnerabilit
- CVE-2024-51004Netgear R8500 v1.0.2.160 and R7000P v1.3.3.154 were discovered to multiple stack overflow vulnerabilities in the component usb_device.cgi vi
- CVE-2024-51006Netgear R8500 v1.0.2.160 was discovered to contain a stack overflow via the ipv6_static_ip parameter in the ipv6_tunnel function.
- CVE-2024-51007Netgear XR300 v1.0.3.78 was discovered to contain a stack overflow via the passphrase parameter at wireless.cgi.
- CVE-2024-51011Netgear XR300 v1.0.3.78, R7000P v1.3.3.154, and R6400 v2 1.0.4.128 was discovered to contain a stack overflow via the pppoe_localip paramete
- CVE-2024-51012Netgear R8500 v1.0.2.160 was discovered to contain a stack overflow via the ipv6_pri_dns parameter at ipv6_fix.cgi.
- CVE-2024-51013Netgear R7000P v1.3.3.154 was discovered to contain a stack overflow via the RADIUSAddr%d_wla parameter at wireless.cgi.
- CVE-2024-51014Netgear XR300 v1.0.3.78 was discovered to contain a stack overflow via the ssid_an parameter in bridge_wireless_main.cgi.
- CVE-2024-51015Netgear R7000P v1.3.3.154 was discovered to contain a command injection vulnerability via the device_name2 parameter at operation_mode.cgi.
- CVE-2024-51016Netgear XR300 v1.0.3.78 was discovered to contain a stack overflow via the addName%d parameter in usb_approve.cgi.
- CVE-2024-51017Netgear R7000P v1.3.3.154 was discovered to contain a stack overflow via the l2tp_user_netmask parameter at l2tp.cgi.
- CVE-2024-51018Netgear R7000P v1.3.3.154 was discovered to contain a stack overflow via the pptp_user_netmask parameter at pptp.cgi.
- CVE-2024-51019Netgear R7000P v1.3.3.154 was discovered to contain a stack overflow via the pppoe_localnetmask parameter at pppoe.cgi.
- CVE-2024-51020Netgear R7000P v1.3.3.154 was discovered to contain a stack overflow via the apn parameter at usbISP_detail_edit.cgi.
- CVE-2024-51022Netgear XR300 v1.0.3.78 was discovered to contain a stack overflow via the ssid parameter in bridge_wireless_main.cgi.
- CVE-2024-51362The LSC Smart Connect Indoor IP Camera V7.6.32 is vulnerable to an information disclosure issue where live camera footage can be accessed th
- CVE-2024-52013Netgear R8500 v1.0.2.160, XR300 v1.0.3.78, R7000P v1.3.3.154, and R6400 v2 1.0.4.128 were discovered to contain a stack overflow via the ppt
- CVE-2024-52014Netgear R8500 v1.0.2.160, XR300 v1.0.3.78, R7000P v1.3.3.154, and R6400 v2 1.0.4.128 were discovered to contain a stack overflow via the ppt
- CVE-2024-52015Netgear R8500 v1.0.2.160, XR300 v1.0.3.78, R7000P v1.3.3.154, and R6400 v2 1.0.4.128 were discovered to contain a stack overflow via the ppt
- CVE-2024-52016Netgear R8500 v1.0.2.160, XR300 v1.0.3.78, R7000P v1.3.3.154, and R6400 v2 1.0.4.128 were discovered to multiple stack overflow vulnerabilit
- CVE-2024-52017Netgear XR300 v1.0.3.78 was discovered to contain a stack overflow via the passphrase parameter at bridge_wireless_main.cgi.
- CVE-2024-52023Netgear XR300 v1.0.3.78, R7000P v1.3.3.154, and R6400 v2 1.0.4.128 was discovered to contain a stack overflow via the pppoe_localip paramete
- CVE-2024-52024Netgear XR300 v1.0.3.78, R7000P v1.3.3.154, and R6400 v2 1.0.4.128 was discovered to contain a stack overflow via the pppoe_localip paramete
- CVE-2024-52025Netgear XR300 v1.0.3.78, R7000P v1.3.3.154, and R6400 v2 1.0.4.128 was discovered to contain a stack overflow via the pppoe_localip paramete
- CVE-2024-52026Netgear XR300 v1.0.3.78, R7000P v1.3.3.154, and R6400 v2 1.0.4.128 was discovered to contain a stack overflow via the pppoe_localip paramete
- CVE-2024-52028Netgear R7000P v1.3.3.154 was discovered to contain a stack overflow via the pptp_user_netmask parameter at wiz_pptp.cgi.
- CVE-2024-52029Netgear R7000P v1.3.3.154 was discovered to contain a stack overflow via the pptp_user_netmask parameter at genie_pptp.cgi.
- CVE-2024-52030Netgear R7000P v1.3.3.154 was discovered to contain a stack overflow via the pptp_user_netmask parameter at ru_wan_flow.cgi.