CVEs published in August 2024
2,982 vulnerabilities, 327 critical, 21 exploited.
- tenda fh1206 firmwareTenda FH1206 v02.03.01.35 was discovered to contain a stack overflow via the page parameter in...7.5 High
- tenda fh1206 firmwareTenda FH1206 v02.03.01.35 was discovered to contain a stack overflow via the page parameter in...7.5 High
- tenda fh1206 firmwareTenda FH1206 v02.03.01.35 was discovered to contain a stack overflow via the page parameter in...7.5 High
- tenda fh1206 firmwareTenda FH1206 v02.03.01.35 was discovered to contain a stack overflow via the Go parameter in the...7.5 High
- totolink lr350 firmwareIncorrect access control in TOTOLINK LR350 V9.3.5u.6369_B20220309 allows attackers to obtain the...9.8 Critical
- totolink n350rt firmwareIncorrect access control in TOTOLINK N350RT V9.3.5u.6139_B20201216 allows attackers to obtain the...9.8 Critical
- tenda fh1201 firmwareTenda FH1201 v1.2.0.14 (408) was discovered to contain a stack overflow via the page parameter in...7.5 High
- tenda fh1201 firmwareTenda FH1201 v1.2.0.14 (408) was discovered to contain a stack overflow via the page parameter in...7.5 High
- tenda fh1201 firmwareTenda FH1201 v1.2.0.14 (408) was discovered to contain a stack overflow via the PPW parameter in...7.5 High
- tenda fh1201 firmwareTenda FH1201 v1.2.0.14 (408) was discovered to contain a stack overflow via the page parameter in...7.5 High
- tenda fh1201 firmwareTenda FH1201 v1.2.0.14 (408) was discovered to contain a stack overflow via the mit_pptpusrpw...7.5 High
- tenda fh1201 firmwareTenda FH1201 v1.2.0.14 (408) was discovered to contain a stack overflow via the Go parameter in...7.5 High
- tenda fh1201 firmwareTenda FH1201 v1.2.0.14 (408) was discovered to contain a stack overflow via the qos parameter in...7.5 High
- tenda fh1201 firmwareTenda FH1201 v1.2.0.14 (408) was discovered to contain a stack overflow via the delno parameter...7.5 High
- tenda fh1201 firmwareAn issue in the handler function in /goform/telnet of Tenda FH1201 v1.2.0.14 (408) allows...9.8 Critical
- tenda fh1201 firmwareTenda FH1201 v1.2.0.14 (408) was discovered to contain a stack overflow via the page parameter in...7.5 High
- tenda fh1201 firmwareTenda FH1201 v1.2.0.14 (408) was discovered to contain a stack overflow via the page parameter in...7.5 High
- tenda fh1201 firmwareTenda FH1201 v1.2.0.14 (408) was discovered to contain a stack overflow via the page parameter in...7.5 High
- tenda fh1201 firmwareTenda FH1201 v1.2.0.14 (408) was discovered to contain a stack overflow via the PPPOEPassword...7.5 High
- tenda fh1201 firmwareTenda FH1201 v1.2.0.14 (408) was discovered to contain a stack overflow via the page parameter in...7.5 High
- tenda fh1201 firmwareTenda FH1201 v1.2.0.14 (408) was discovered to contain a stack overflow via the wanmode parameter...7.5 High
- tenda fh1201 firmwareTenda FH1201 v1.2.0.14 (408) was discovered to contain a stack overflow via the page parameter in...7.5 High
- projectworlds online examination systemProjectworlds Online Examination System v1.0 is vulnerable to SQL Injection via the subject...9.8 Critical
- asus rt-n15u firmwareCommand injection vulnerability in Asus RT-N15U 3.0.0.4.376_3754 allows a remote attacker to...9.8 Critical
- xuxueli xxl-jobImproper Preservation of Permissions in xxl-job8.8 High
- cysoft168 super easy enterprise management systemAn issue in Super easy enterprise management system v.1.0.0 and before allows a local attacker to...5.5 Medium
- cysoft168 super easy enterprise management system, berriai litellm +1 moreSQL Injection vulnerability in Super easy enterprise management system v.1.0.0 and before allows...7.8 High
- cysoft168 super easy enterprise management systemCross Site Scripting vulnerability in Super easy enterprise management system v.1.0.0 and before...6.1 Medium
- isellerpal enterprise resource management systemAn issue in Huizhi enterprise resource management system v.1.0 and before allows a local attacker...5.5 Medium
- isellerpal enterprise resource management systemFile Upload vulnerability in Huizhi enterprise resource management system v.1.0 and before allows...8.8 High
- stashapp stashSQL injection in github.com/stashapp/stash6.3 Medium
- gncchome gncc c2 firmwareAuthentication Bypass in GNCC's GC2 Indoor Security Camera 1080P allows an attacker with physical...6.8 Medium
- gncchome gc2, gncc c2 firmware +1 moreInformation Disclosure in GNCC's GC2 Indoor Security Camera 1080P allows an attacker with...4.6 Medium
- gncchome gncc c2 firmwareIdentical Hardcoded Root Password for All Devices in GNCC's GC2 Indoor Security Camera 1080P...6.8 Medium
- friendicaCross Site Scripting vulnerability in Friendica v.2023.12 allows a remote attacker to obtain...6.1 Medium
- friendicaInsecure Permissions vulnerability in Friendica v.2023.12 allows a remote attacker to obtain...9.8 Critical
- friendicaCross Site Scripting vulnerability in Friendica v.2023.12 allows a remote attacker to obtain...6.1 Medium
- friendicaCross Site Scripting vulnerability in Friendica v.2023.12 allows a remote attacker to obtain...6.1 Medium
- xiexe xsoverlayVulnerability in Xiexe XSOverlay before build 647 allows non-local websites to send the malicious...9.8 Critical
- terminalfour, terminalfour xml jdbc +1 moreXML External Entity (XXE) vulnerability in Terminalfour 8.0.0001 through 8.3.18 and XML JDBC...6.3 Medium
- terminalfour, terminalfour xml jdbc +1 moreXML External Entity (XXE) vulnerability in Terminalfour 8.0.0001 through 8.3.18 and XML JDBC...8.8 High
- terminalfourA Server-Side Request Forgery (SSRF) vulnerability in Terminalfour before 8.3.19 allows...6.5 Medium
- oretnom23 simple online bidding systemSourceCodester Simple Online Bidding System ajax.php sql injection5.3 Medium
- oretnom23 simple online bidding systemSourceCodester Simple Online Bidding System users.php improper authorization6.9 Medium
- hashicorp nomad, nomad enterprise +1 moreNomad Vulnerable to Allocation Directory Escape On Non-Existing File Paths Through Archive Unpacking5.8 Medium
- oretnom23 simple online bidding systemSourceCodester Simple Online Bidding System ajax.php sql injection6.9 Medium
- oretnom23 simple online bidding systemSourceCodester Simple Online Bidding System ajax.php sql injection6.9 Medium
- eugeny russh, warpgate project warpgate +1 moreRussh has an OOM Denial of Service due to allocation of untrusted amount7.5 High
- admerc vehicle management systemitsourcecode Vehicle Management System mybill.php sql injection5.3 Medium
- rems task progress trackerSourceCodester Task Progress Tracker add-task.php cross site scripting5.3 Medium
- Show moreLoading…