Lucene search

K

Zoom (for Android, IOS, Linux, MacOS, And Windows) Security Vulnerabilities

nvd
nvd

CVE-2024-6043

A vulnerability classified as critical has been found in SourceCodester Best House Rental Management System 1.0. This affects the function login of the file admin_class.php. The manipulation of the argument username leads to sql injection. It is possible to initiate the attack remotely. The...

7.3CVSS

EPSS

2024-06-17 01:15 AM
1
cve
cve

CVE-2024-6043

A vulnerability classified as critical has been found in SourceCodester Best House Rental Management System 1.0. This affects the function login of the file admin_class.php. The manipulation of the argument username leads to sql injection. It is possible to initiate the attack remotely. The...

7.3CVSS

7.6AI Score

EPSS

2024-06-17 01:15 AM
cve
cve

CVE-2024-6042

A vulnerability was found in itsourcecode Real Estate Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file property-detail.php. The manipulation of the argument id leads to sql injection. The attack may be launched remotely. The...

6.3CVSS

6.8AI Score

EPSS

2024-06-17 12:15 AM
1
nvd
nvd

CVE-2024-6042

A vulnerability was found in itsourcecode Real Estate Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file property-detail.php. The manipulation of the argument id leads to sql injection. The attack may be launched remotely. The...

6.3CVSS

EPSS

2024-06-17 12:15 AM
1
cvelist
cvelist

CVE-2024-6043 SourceCodester Best House Rental Management System admin_class.php login sql injection

A vulnerability classified as critical has been found in SourceCodester Best House Rental Management System 1.0. This affects the function login of the file admin_class.php. The manipulation of the argument username leads to sql injection. It is possible to initiate the attack remotely. The...

7.3CVSS

EPSS

2024-06-17 12:00 AM
cvelist
cvelist

CVE-2024-6042 itsourcecode Real Estate Management System property-detail.php sql injection

A vulnerability was found in itsourcecode Real Estate Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file property-detail.php. The manipulation of the argument id leads to sql injection. The attack may be launched remotely. The...

6.3CVSS

EPSS

2024-06-16 11:31 PM
1
nvd
nvd

CVE-2024-6041

A vulnerability was found in itsourcecode Gym Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file manage_user.php. The manipulation of the argument id leads to sql injection. The attack can be launched remotely. The...

6.3CVSS

EPSS

2024-06-16 11:15 PM
cve
cve

CVE-2024-6041

A vulnerability was found in itsourcecode Gym Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file manage_user.php. The manipulation of the argument id leads to sql injection. The attack can be launched remotely. The...

6.3CVSS

6.8AI Score

EPSS

2024-06-16 11:15 PM
2
cvelist
cvelist

CVE-2024-6041 itsourcecode Gym Management System manage_user.php sql injection

A vulnerability was found in itsourcecode Gym Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file manage_user.php. The manipulation of the argument id leads to sql injection. The attack can be launched remotely. The...

6.3CVSS

EPSS

2024-06-16 11:00 PM
1
cve
cve

CVE-2024-34451

Ghost through 5.85.1 allows remote attackers to bypass an authentication rate-limit protection mechanism by using many X-Forwarded-For headers with different values. NOTE: the vendor's position is that Ghost should be installed with a reverse proxy that allows only trusted X-Forwarded-For...

7.5AI Score

EPSS

2024-06-16 10:15 PM
nvd
nvd

CVE-2024-6039

A vulnerability, which was classified as critical, was found in Feng Office 3.11.1.2. Affected is an unknown function of the component Workspaces. The manipulation of the argument dim leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public....

6.3CVSS

EPSS

2024-06-16 10:15 PM
1
cve
cve

CVE-2024-6039

A vulnerability, which was classified as critical, was found in Feng Office 3.11.1.2. Affected is an unknown function of the component Workspaces. The manipulation of the argument dim leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public....

6.3CVSS

6.8AI Score

EPSS

2024-06-16 10:15 PM
2
nvd
nvd

CVE-2024-34451

Ghost through 5.85.1 allows remote attackers to bypass an authentication rate-limit protection mechanism by using many X-Forwarded-For headers with different values. NOTE: the vendor's position is that Ghost should be installed with a reverse proxy that allows only trusted X-Forwarded-For...

EPSS

2024-06-16 10:15 PM
4
cvelist
cvelist

CVE-2024-6039 Feng Office Workspaces sql injection

A vulnerability, which was classified as critical, was found in Feng Office 3.11.1.2. Affected is an unknown function of the component Workspaces. The manipulation of the argument dim leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public....

6.3CVSS

EPSS

2024-06-16 10:00 PM
2
wolfi
wolfi

CVE-2024-21068 vulnerabilities

Vulnerabilities for packages:...

3.7CVSS

4.8AI Score

0.001EPSS

2024-06-16 09:08 PM
35
wolfi
wolfi

CVE-2024-34145 vulnerabilities

Vulnerabilities for packages:...

7.5AI Score

0.0004EPSS

2024-06-16 09:08 PM
19
wolfi
wolfi

CVE-2023-30582 vulnerabilities

Vulnerabilities for packages:...

7.8AI Score

EPSS

2024-06-16 09:08 PM
153
wolfi
wolfi

CVE-2023-30584 vulnerabilities

Vulnerabilities for packages:...

7.9AI Score

EPSS

2024-06-16 09:08 PM
146
wolfi
wolfi

CVE-2023-32558 vulnerabilities

Vulnerabilities for packages:...

7.5CVSS

8.8AI Score

0.001EPSS

2024-06-16 09:08 PM
168
wolfi
wolfi

CVE-2023-39332 vulnerabilities

Vulnerabilities for packages:...

9.8CVSS

9.7AI Score

0.001EPSS

2024-06-16 09:08 PM
265
wolfi
wolfi

CVE-2022-28946 vulnerabilities

Vulnerabilities for packages:...

7.5CVSS

7.5AI Score

0.001EPSS

2024-06-16 09:08 PM
20
wolfi
wolfi

GHSA-X7F3-62PM-9P38 vulnerabilities

Vulnerabilities for packages:...

7.5AI Score

2024-06-16 09:08 PM
18
wolfi
wolfi

GHSA-H9P4-9JQG-J34H vulnerabilities

Vulnerabilities for packages:...

7.5AI Score

2024-06-16 09:08 PM
142
wolfi
wolfi

GHSA-95PR-FXF5-86GV vulnerabilities

Vulnerabilities for packages: slsa-verifier, flux-source-controller, zot, gitsign, policy-controller, neuvector-sigstore-interface, apko, kubescape, ko, wolfictl, tekton-chains, falco, melange, goreleaser, tkn, aactl, falcoctl, spire-server, skaffold, vexctl,...

7.5AI Score

2024-06-16 09:08 PM
65
wolfi
wolfi

GHSA-2C7C-3MJ9-8FQH vulnerabilities

Vulnerabilities for packages: argo-workflows, slsa-verifier, terragrunt, flux-source-controller, external-secrets-operator, argo-cd, traefik, flux-kustomize-controller, gitsign, oauth2-proxy, sops, kubescape, dex, fulcio, kyverno, tekton-chains, cert-manager, kots, cosign, falco,...

7.5AI Score

2024-06-16 09:08 PM
330
wolfi
wolfi

CVE-2024-27304 vulnerabilities

Vulnerabilities for packages: kine, argo-workflows, kube-bench, keda, k3s, step-ca, spicedb, kots, telegraf, amass, temporal-server, caddy, trillian, vault, src,...

9.8CVSS

9.7AI Score

0.0004EPSS

2024-06-16 09:08 PM
109
wolfi
wolfi

GHSA-232P-VWFF-86MP vulnerabilities

Vulnerabilities for packages: helm, apko, bom, ctop, up, ko,...

7.5AI Score

2024-06-16 09:08 PM
307
wolfi
wolfi

CVE-2023-46402 vulnerabilities

Vulnerabilities for packages: argo-workflows, flux-notification-controller, argo-cd, pulumi-kubernetes-operator,...

7.5CVSS

7.7AI Score

0.0005EPSS

2024-06-16 09:08 PM
299
wolfi
wolfi

GHSA-5QM6-J92F-79JP vulnerabilities

Vulnerabilities for packages:...

7.5AI Score

2024-06-16 09:08 PM
149
wolfi
wolfi

GHSA-797F-63WG-8CHV vulnerabilities

Vulnerabilities for packages: aws-cli-v2,...

7.5AI Score

2024-06-16 09:08 PM
78
wolfi
wolfi

GHSA-JM46-725R-HH9V vulnerabilities

Vulnerabilities for packages: aws-cli-v2,...

7.5AI Score

2024-06-16 09:08 PM
82
wolfi
wolfi

CVE-2022-3736 vulnerabilities

Vulnerabilities for packages:...

7.5CVSS

7.7AI Score

0.001EPSS

2024-06-16 09:08 PM
329
wolfi
wolfi

CVE-2023-4408 vulnerabilities

Vulnerabilities for packages:...

7.5CVSS

7.5AI Score

0.001EPSS

2024-06-16 09:08 PM
125
wolfi
wolfi

GHSA-V5QP-MX94-J49V vulnerabilities

Vulnerabilities for packages:...

7.5AI Score

2024-06-16 09:08 PM
112
wolfi
wolfi

CVE-2023-5680 vulnerabilities

Vulnerabilities for packages:...

5.3CVSS

7.2AI Score

0.0005EPSS

2024-06-16 09:08 PM
64
wolfi
wolfi

GHSA-7P63-JGG6-RGPV vulnerabilities

Vulnerabilities for packages:...

7.5AI Score

2024-06-16 09:08 PM
240
wolfi
wolfi

CVE-2024-3154 vulnerabilities

Vulnerabilities for packages: buildah,...

7.2CVSS

7.3AI Score

0.0004EPSS

2024-06-16 09:08 PM
54
wolfi
wolfi

GHSA-X84C-P2G9-RQV9 vulnerabilities

Vulnerabilities for packages: policy-controller, docker-compose, buf, helm-push, dagger, prometheus, tekton-pipelines, syft, grype, cri-tools, harbor-scanner-trivy, neuvector-scanner, wolfictl, k3d, melange, kaniko,...

7.5AI Score

2024-06-16 09:08 PM
45
wolfi
wolfi

CVE-2024-21626 vulnerabilities

Vulnerabilities for packages: kubernetes, ctop, ingress-nginx-controller, telegraf, grype, zot, nvidia-device-plugin, kubescape, datadog-agent, syft, nerdctl, wolfictl, kaniko, k9s, k3s, kots, skopeo, trivy, zarf, buildkitd, runc, newrelic-infrastructure-agent, cadvisor, docker, skaffold,...

8.6CVSS

9.2AI Score

0.051EPSS

2024-06-16 09:08 PM
263
wolfi
wolfi

CVE-2024-29131 vulnerabilities

Vulnerabilities for packages: trino, neo4j,...

7.2AI Score

0.0004EPSS

2024-06-16 09:08 PM
51
wolfi
wolfi

CVE-2024-5159 vulnerabilities

Vulnerabilities for packages:...

7.1AI Score

0.0004EPSS

2024-06-16 09:08 PM
24
wolfi
wolfi

CVE-2024-5274 vulnerabilities

Vulnerabilities for packages:...

8.8CVSS

7.1AI Score

0.003EPSS

2024-06-16 09:08 PM
19
wolfi
wolfi

CVE-2024-5493 vulnerabilities

Vulnerabilities for packages:...

7.2AI Score

0.0004EPSS

2024-06-16 09:08 PM
15
wolfi
wolfi

CVE-2024-5494 vulnerabilities

Vulnerabilities for packages:...

7.2AI Score

0.0004EPSS

2024-06-16 09:08 PM
15
wolfi
wolfi

GHSA-P8V3-5HQQ-7C5R vulnerabilities

Vulnerabilities for packages:...

7.5AI Score

2024-06-16 09:08 PM
20
wolfi
wolfi

CVE-2024-5830 vulnerabilities

Vulnerabilities for packages:...

7.2AI Score

0.0004EPSS

2024-06-16 09:08 PM
9
wolfi
wolfi

CVE-2024-5834 vulnerabilities

Vulnerabilities for packages:...

7.2AI Score

0.0004EPSS

2024-06-16 09:08 PM
7
wolfi
wolfi

CVE-2024-5836 vulnerabilities

Vulnerabilities for packages:...

7.2AI Score

0.0004EPSS

2024-06-16 09:08 PM
6
wolfi
wolfi

CVE-2024-5837 vulnerabilities

Vulnerabilities for packages:...

7.2AI Score

0.0004EPSS

2024-06-16 09:08 PM
7
wolfi
wolfi

CVE-2024-5841 vulnerabilities

Vulnerabilities for packages:...

7.2AI Score

0.0004EPSS

2024-06-16 09:08 PM
7
Total number of security vulnerabilities3047635