[CVE_SUBSCRIPTIONS]

Receive alerts for specific vendors, products, or severities
📡 [FLUX RSS CVE]

Subscribe to the CVE feed

7 derniers jours

> FILTERS

> Last 7 Days

STATISTIQUES

Total CVE: 425103
> CVE-2024-2571 [HIGH 7.3]
[PUBLISHED: 2024-03-18] [EPSS 1.03%]
A vulnerability was found in SourceCodester Employee Task Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /manage-admin.php. The manipulation leads to execution after redirect. The attack can be initiated remotely. The exploit has been dis...
AFFECTED_PRODUCTS: Oretnom23 Employee Task Management System
> CVE-2023-40747 [HIGH 7.5]
[PUBLISHED: 2024-03-18] [EPSS 1.29%]
Directory traversal vulnerability exists in A.K.I Software's PMailServer/PMailServer2 products' CGIs included in Internal Simple Webserver. If this vulnerability is exploited, a remote attacker may access arbitrary files outside DocumentRoot.
> CVE-2023-40160 [LOW 3.7]
[PUBLISHED: 2024-03-18] [EPSS 0.99%]
Directory traversal vulnerability exists in Mailing List Search CGI (pmmls.exe) included in A.K.I Software's PMailServer/PMailServer2 products. If this vulnerability is exploited, a remote attacker may obtain arbitrary files on the server.
> CVE-2023-39933 [MEDIUM 4.3]
[PUBLISHED: 2024-03-18] [EPSS 0.45%]
Insufficient verification vulnerability exists in Broadcast Mail CGI (pmc.exe) included in A.K.I Software's PMailServer/PMailServer2 products. If this vulnerability is exploited, a user who can upload files through the product may execute an arbitrary executable file with the web server's execution...
> CVE-2023-39223 [MEDIUM 5.4]
[PUBLISHED: 2024-03-18] [EPSS 0.34%]
Stored cross-site scripting vulnerability exists in CGIs included in A.K.I Software's PMailServer/PMailServer2 products. If this vulnerability is exploited, an arbitrary script may be executed on a logged-in user's web browser.
> CVE-2024-2570 [HIGH 7.3]
[PUBLISHED: 2024-03-18] [EPSS 1.03%]
A vulnerability was found in SourceCodester Employee Task Management System 1.0. It has been classified as critical. This affects an unknown part of the file /edit-task.php. The manipulation leads to execution after redirect. It is possible to initiate the attack remotely. The exploit has been discl...
AFFECTED_PRODUCTS: Oretnom23 Employee Task Management System
> CVE-2024-2569 [HIGH 7.3]
[PUBLISHED: 2024-03-18] [EPSS 1.18%]
A vulnerability was found in SourceCodester Employee Task Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /admin-manage-user.php. The manipulation leads to execution after redirect. The attack may be launched remotely. The exploit ha...
AFFECTED_PRODUCTS: Oretnom23 Employee Task Management System
> CVE-2024-23139 [HIGH 7.8]
[PUBLISHED: 2024-03-18] [EPSS 0.45%]
A maliciously crafted ABC file, when parsed through Autodesk FBX, may force an Out-of-Bounds Write vulnerability. A malicious actor may leverage this vulnerability to cause a crash, cause data corruption, or execute arbitrary code in the context of the current process.
AFFECTED_PRODUCTS: Autodesk Fbx Review
> CVE-2024-23138 [HIGH 7.8]
[PUBLISHED: 2024-03-18] [EPSS 0.47%]
A maliciously crafted DWG file when parsed through Autodesk DWG TrueView can be used to cause a Stack-based Overflow. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process.
AFFECTED_PRODUCTS: Autodesk Autocad, Autodesk Autocad, Autodesk Autocad ... (+46)
> CVE-2024-2568 [MEDIUM 4.7]
[PUBLISHED: 2024-03-17] [EPSS 0.70%]
A vulnerability has been found in heyewei JFinalCMS 5.0.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin/div_data/delete?divId=9 of the component Custom Data Page. The manipulation leads to sql injection. The attack can be launched remotely....
AFFECTED_PRODUCTS: Heyewei Jfinalcms
> CVE-2024-2567 [LOW 1.8]
[PUBLISHED: 2024-03-17] [EPSS 0.21%]
** UNSUPPORTED WHEN ASSIGNED ** A vulnerability, which was classified as problematic, was found in jurecapuder AndroidWeatherApp 1.0.0 on Android. Affected is an unknown function of the file androidmanifest.xml of the component Backup File Handler. The manipulation leads to exposure of backup file t...
> CVE-2024-27961 [HIGH 7.1]
[PUBLISHED: 2024-03-17] [EPSS 0.33%]
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Codekraft AntiSpam for Contact Form 7 allows Reflected XSS.This issue affects AntiSpam for Contact Form 7: from n/a through 0.6.0.
> CVE-2024-27960 [HIGH 7.1]
[PUBLISHED: 2024-03-17] [EPSS 0.33%]
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in I Thirteen Web Solution Email Subscription Popup allows Stored XSS.This issue affects Email Subscription Popup: from n/a through 1.2.20.
AFFECTED_PRODUCTS: I13Websolution Email Subscription Popup
> CVE-2024-27959 [HIGH 7.1]
[PUBLISHED: 2024-03-17] [EPSS 0.37%]
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Wpexpertsio WC Shop Sync – Integrate Square and WooCommerce for Seamless Shop Management allows Reflected XSS.This issue affects WC Shop Sync – Integrate Square and WooCommerce for Seamless Shop Man...
AFFECTED_PRODUCTS: Wpexperts Wc Shop Sync
> CVE-2024-27958 [HIGH 7.1]
[PUBLISHED: 2024-03-17] [EPSS 0.45%]
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Themeisle Visualizer allows Reflected XSS.This issue affects Visualizer: from n/a through 3.10.5.
AFFECTED_PRODUCTS: Themeisle Visualizer
> CVE-2024-27957 [CRITICAL 10.0]
[PUBLISHED: 2024-03-17] [EPSS 0.61%]
Unrestricted Upload of File with Dangerous Type vulnerability in Pie Register.This issue affects Pie Register: from n/a through 3.8.3.1.
AFFECTED_PRODUCTS: Genetechsolutions Pie Register
> CVE-2024-25903 [MEDIUM 5.3]
[PUBLISHED: 2024-03-17] [EPSS 0.45%]
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in N-Media Frontend File Manager.This issue affects Frontend File Manager: from n/a through 22.7.
AFFECTED_PRODUCTS: Najeebmedia Frontend File Manager
> CVE-2024-25591 [MEDIUM 5.3]
[PUBLISHED: 2024-03-17] [EPSS 0.45%]
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Benjamin Rojas WP Editor.This issue affects WP Editor: from n/a through 1.2.7.
AFFECTED_PRODUCTS: Benjaminrojas Wp Editor
> CVE-2024-25933 [MEDIUM 5.3]
[PUBLISHED: 2024-03-17] [EPSS 0.45%]
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Pepro Dev. Group PeproDev Ultimate Invoice.This issue affects PeproDev Ultimate Invoice: from n/a through 1.9.7.
AFFECTED_PRODUCTS: Peprodev Peprodev Ultimate Invoice
> CVE-2024-24867 [MEDIUM 5.3]
[PUBLISHED: 2024-03-17] [EPSS 0.45%]
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Osamaesh WP Visitor Statistics (Real Time Traffic).This issue affects WP Visitor Statistics (Real Time Traffic): from n/a through 6.9.4.
AFFECTED_PRODUCTS: Plugins-Market Wp Visitor Statistics
> CVE-2024-2566 [HIGH 7.3]
[PUBLISHED: 2024-03-17] [EPSS 0.62%]
A vulnerability was found in Fujian Kelixin Communication Command and Dispatch Platform up to 20240313. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file api/client/get_extension_yl.php. The manipulation of the argument imei leads to sql injecti...
AFFECTED_PRODUCTS: Kelixin Communication Command And Dispatch Project Kelixin Communication Command And Dispatch
> CVE-2024-2565 [MEDIUM 6.3]
[PUBLISHED: 2024-03-17] [EPSS 0.60%]
A vulnerability was found in PandaXGO PandaX up to 20240310. It has been classified as critical. Affected is an unknown function of the file /apps/system/router/upload.go of the component File Extension Handler. The manipulation of the argument file leads to unrestricted upload. It is possible to la...
AFFECTED_PRODUCTS: Pandax Pandax
> CVE-2024-2564 [MEDIUM 6.3]
[PUBLISHED: 2024-03-17] [EPSS 0.51%]
A vulnerability was found in PandaXGO PandaX up to 20240310 and classified as critical. This issue affects the function ExportUser of the file /apps/system/api/user.go. The manipulation of the argument filename leads to path traversal: '../filedir'. The attack may be initiated remotely. The exploit...
AFFECTED_PRODUCTS: Pandax Pandax
> CVE-2024-2563 [MEDIUM 5.4]
[PUBLISHED: 2024-03-17] [EPSS 0.85%]
A vulnerability has been found in PandaXGO PandaX up to 20240310 and classified as critical. This vulnerability affects the function DeleteImage of the file /apps/system/router/upload.go. The manipulation of the argument fileName with the input ../../../../../../../../../tmp/1.txt leads to path trav...
AFFECTED_PRODUCTS: Pandax Pandax
> CVE-2024-2562 [MEDIUM 6.3]
[PUBLISHED: 2024-03-17] [EPSS 0.51%]
A vulnerability, which was classified as critical, was found in PandaXGO PandaX up to 20240310. This affects the function InsertRole of the file /apps/system/services/role_menu.go. The manipulation of the argument roleKey leads to sql injection. It is possible to initiate the attack remotely. The ex...
AFFECTED_PRODUCTS: Pandax Pandax
> CVE-2024-2561 [MEDIUM 6.3]
[PUBLISHED: 2024-03-17] [EPSS 6.08%]
A vulnerability, which was classified as critical, has been found in 74CMS 3.28.0. Affected by this issue is the function sendCompanyLogo of the file /controller/company/Index.php#sendCompanyLogo of the component Company Logo Handler. The manipulation of the argument imgBase64 leads to unrestricted...
AFFECTED_PRODUCTS: 74Cms 74cms
> CVE-2024-2560 [MEDIUM 4.3]
[PUBLISHED: 2024-03-17] [EPSS 0.41%]
A vulnerability classified as problematic was found in Tenda AC18 15.03.05.05. Affected by this vulnerability is the function fromSysToolRestoreSet of the file /goform/SysToolRestoreSet. The manipulation leads to cross-site request forgery. The attack can be launched remotely. The exploit has been d...
AFFECTED_PRODUCTS: Tenda Ac18 Firmware
> CVE-2024-2559 [MEDIUM 4.3]
[PUBLISHED: 2024-03-17] [EPSS 0.31%]
A vulnerability classified as problematic has been found in Tenda AC18 15.03.05.05. Affected is the function fromSysToolReboot of the file /goform/SysToolReboot. The manipulation leads to cross-site request forgery. It is possible to launch the attack remotely. The exploit has been disclosed to the...
AFFECTED_PRODUCTS: Tenda Ac18 Firmware
> CVE-2024-2558 [HIGH 8.8]
[PUBLISHED: 2024-03-17] [EPSS 1.28%]
A vulnerability was found in Tenda AC18 15.03.05.05. It has been rated as critical. This issue affects the function formexeCommand of the file /goform/execCommand. The manipulation of the argument cmdinput leads to stack-based buffer overflow. The attack may be initiated remotely. The exploit has be...
AFFECTED_PRODUCTS: Tenda Ac18 Firmware
> CVE-2024-2557 [MEDIUM 5.3]
[PUBLISHED: 2024-03-17] [EPSS 1.02%]
A vulnerability was found in kishor-23 Food Waste Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /admin/admin.php. The manipulation leads to improper authorization. The attack can be initiated remotely. The exploit has been disclosed to t...
AFFECTED_PRODUCTS: Kishor-23 Food Waste Management System
> CVE-2024-2556 [MEDIUM 6.3]
[PUBLISHED: 2024-03-17] [EPSS 0.63%]
A vulnerability was found in SourceCodester Employee Task Management System 1.0. It has been classified as critical. This affects an unknown part of the file attendance-info.php. The manipulation of the argument user_id leads to sql injection. It is possible to initiate the attack remotely. The expl...
AFFECTED_PRODUCTS: Oretnom23 Employee Task Management System
> CVE-2024-2555 [MEDIUM 6.3]
[PUBLISHED: 2024-03-17] [EPSS 0.61%]
A vulnerability was found in SourceCodester Employee Task Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file update-admin.php. The manipulation of the argument admin_id leads to sql injection. The attack may be launched remotely. The ex...
AFFECTED_PRODUCTS: Oretnom23 Employee Task Management System
> CVE-2024-2554 [MEDIUM 6.3]
[PUBLISHED: 2024-03-17] [EPSS 0.70%]
A vulnerability has been found in SourceCodester Employee Task Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file update-employee.php. The manipulation of the argument admin_id leads to sql injection. The attack can be launched re...
AFFECTED_PRODUCTS: Oretnom23 Employee Task Management System
> CVE-2024-2553 [LOW 3.5]
[PUBLISHED: 2024-03-17] [EPSS 0.65%]
A vulnerability, which was classified as problematic, was found in SourceCodester Product Review Rating System 1.0. Affected is an unknown function of the component Rate Product Handler. The manipulation of the argument Your Name/Comment leads to cross site scripting. It is possible to launch the at...
AFFECTED_PRODUCTS: Remyandrade Product Review\/rating System
> CVE-2024-2547 [HIGH 8.8]
[PUBLISHED: 2024-03-17] [EPSS 1.19%]
A vulnerability was found in Tenda AC18 15.03.05.05 and classified as critical. Affected by this issue is the function R7WebsSecurityHandler. The manipulation of the argument password leads to stack-based buffer overflow. The attack may be launched remotely. The exploit has been disclosed to the pub...
AFFECTED_PRODUCTS: Tenda Ac18 Firmware
> CVE-2024-2546 [HIGH 8.8]
[PUBLISHED: 2024-03-17] [EPSS 0.99%]
A vulnerability has been found in Tenda AC18 15.13.07.09 and classified as critical. Affected by this vulnerability is the function fromSetWirelessRepeat. The manipulation of the argument wpapsk_crypto5g leads to stack-based buffer overflow. The attack can be launched remotely. The exploit has been...
AFFECTED_PRODUCTS: Tenda Ac18 Firmware
> CVE-2024-2535 [LOW 3.5]
[PUBLISHED: 2024-03-17] [EPSS 0.42%]
A vulnerability has been found in MAGESH-K21 Online-College-Event-Hall-Reservation-System 1.0 and classified as problematic. This vulnerability affects unknown code of the file /admin/users.php. The manipulation of the argument id leads to cross site scripting. The attack can be initiated remotely....
AFFECTED_PRODUCTS: Magesh-K21 Online College Event Hall Reservation System
> CVE-2024-2534 [MEDIUM 6.3]
[PUBLISHED: 2024-03-17] [EPSS 0.55%]
A vulnerability, which was classified as critical, was found in MAGESH-K21 Online-College-Event-Hall-Reservation-System 1.0. This affects an unknown part of the file /admin/users.php. The manipulation of the argument user_id leads to sql injection. It is possible to initiate the attack remotely. The...
AFFECTED_PRODUCTS: Magesh-K21 Online College Event Hall Reservation System
> CVE-2024-2533 [LOW 3.5]
[PUBLISHED: 2024-03-16] [EPSS 0.45%]
A vulnerability, which was classified as problematic, has been found in MAGESH-K21 Online-College-Event-Hall-Reservation-System 1.0. Affected by this issue is some unknown functionality of the file /admin/update-users.php. The manipulation of the argument id leads to cross site scripting. The attack...
AFFECTED_PRODUCTS: Magesh-K21 Online College Event Hall Reservation System
> CVE-2024-2532 [MEDIUM 6.3]
[PUBLISHED: 2024-03-16] [EPSS 0.51%]
A vulnerability classified as critical was found in MAGESH-K21 Online-College-Event-Hall-Reservation-System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/update-users.php. The manipulation of the argument id leads to sql injection. The attack can be launched remo...
AFFECTED_PRODUCTS: Magesh-K21 Online College Event Hall Reservation System
> CVE-2024-2531 [MEDIUM 6.3]
[PUBLISHED: 2024-03-16] [EPSS 0.69%]
A vulnerability classified as critical has been found in MAGESH-K21 Online-College-Event-Hall-Reservation-System 1.0. Affected is an unknown function of the file /admin/update-rooms.php. The manipulation leads to unrestricted upload. It is possible to launch the attack remotely. The exploit has been...
AFFECTED_PRODUCTS: Magesh-K21 Online College Event Hall Reservation System
> CVE-2024-2530 [LOW 3.5]
[PUBLISHED: 2024-03-16] [EPSS 0.46%]
A vulnerability was found in MAGESH-K21 Online-College-Event-Hall-Reservation-System 1.0. It has been rated as problematic. This issue affects some unknown processing of the file /admin/update-rooms.php. The manipulation of the argument id leads to cross site scripting. The attack may be initiated r...
AFFECTED_PRODUCTS: Magesh-K21 Online College Event Hall Reservation System
> CVE-2024-2529 [MEDIUM 6.3]
[PUBLISHED: 2024-03-16] [EPSS 0.61%]
A vulnerability was found in MAGESH-K21 Online-College-Event-Hall-Reservation-System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /admin/rooms.php. The manipulation leads to unrestricted upload. The attack can be initiated remotely. The exploit has been...
AFFECTED_PRODUCTS: Magesh-K21 Online College Event Hall Reservation System
> CVE-2024-2528 [MEDIUM 6.3]
[PUBLISHED: 2024-03-16] [EPSS 0.51%]
A vulnerability was found in MAGESH-K21 Online-College-Event-Hall-Reservation-System 1.0. It has been classified as critical. This affects an unknown part of the file /admin/update-rooms.php. The manipulation of the argument room_id leads to sql injection. It is possible to initiate the attack remot...
AFFECTED_PRODUCTS: Magesh-K21 Online College Event Hall Reservation System
> CVE-2024-2527 [MEDIUM 6.3]
[PUBLISHED: 2024-03-16] [EPSS 0.63%]
A vulnerability was found in MAGESH-K21 Online-College-Event-Hall-Reservation-System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /admin/rooms.php. The manipulation of the argument room_id leads to sql injection. The attack may be launched remotely...
AFFECTED_PRODUCTS: Magesh-K21 Online College Event Hall Reservation System
> CVE-2024-2526 [LOW 3.5]
[PUBLISHED: 2024-03-16] [EPSS 0.54%]
A vulnerability has been found in MAGESH-K21 Online-College-Event-Hall-Reservation-System 1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /admin/rooms.php. The manipulation of the argument id leads to cross site scripting. The attack can be l...
AFFECTED_PRODUCTS: Magesh-K21 Online College Event Hall Reservation System
> CVE-2024-2525 [LOW 3.5]
[PUBLISHED: 2024-03-16] [EPSS 0.45%]
A vulnerability, which was classified as problematic, was found in MAGESH-K21 Online-College-Event-Hall-Reservation-System 1.0. Affected is an unknown function of the file /admin/receipt.php. The manipulation of the argument id leads to cross site scripting. It is possible to launch the attack remot...
AFFECTED_PRODUCTS: Magesh-K21 Online College Event Hall Reservation System
> CVE-2024-2524 [MEDIUM 6.3]
[PUBLISHED: 2024-03-16] [EPSS 0.51%]
A vulnerability, which was classified as critical, has been found in MAGESH-K21 Online-College-Event-Hall-Reservation-System 1.0. This issue affects some unknown processing of the file /admin/receipt.php. The manipulation of the argument room_id leads to sql injection. The attack may be initiated re...
AFFECTED_PRODUCTS: Magesh-K21 Online College Event Hall Reservation System
> CVE-2024-2523 [LOW 3.5]
[PUBLISHED: 2024-03-16] [EPSS 0.41%]
A vulnerability classified as problematic was found in MAGESH-K21 Online-College-Event-Hall-Reservation-System 1.0. This vulnerability affects unknown code of the file /admin/booktime.php. The manipulation of the argument id leads to cross site scripting. The attack can be initiated remotely. The ex...
AFFECTED_PRODUCTS: Magesh-K21 Online College Event Hall Reservation System
> CVE-2024-2522 [MEDIUM 6.3]
[PUBLISHED: 2024-03-16] [EPSS 0.49%]
A vulnerability classified as critical has been found in MAGESH-K21 Online-College-Event-Hall-Reservation-System 1.0. This affects an unknown part of the file /admin/booktime.php. The manipulation of the argument room_id leads to sql injection. It is possible to initiate the attack remotely. The exp...
AFFECTED_PRODUCTS: Magesh-K21 Online College Event Hall Reservation System