CVE-2024-4727

Campcodes Legal Case Management System 1.0 is affected by a cross-site scripting vulnerability in the /admin/court-type file, caused by manipulation of the argument court_name. This could enable remote attacker execution of scripts in a victim’s browser. The vulnerability is publicly disclosed (V...

CVE-2024-4726 Campcodes Legal Case Management System clients cross site scripting

A vulnerability was found in Campcodes Legal Case Management System 1.0 and classified as problematic. Affected by this issue is some unknown functionality of the file /admin/clients. The manipulation of the argument fname leads to cross site scripting. The attack may be launched remotely. The...

CVE-2024-4726 Campcodes Legal Case Management System clients cross site scripting

A vulnerability was found in Campcodes Legal Case Management System 1.0 and classified as problematic. Affected by this issue is some unknown functionality of the file /admin/clients. The manipulation of the argument fname leads to cross site scripting. The attack may be launched remotely. The...

CVE-2024-4726

The CVE-2024-4726 issue affects Campcodes Legal Case Management System 1.0. It involves an XSS vulnerability in the /admin/clients endpoint triggered by manipulating the f_name argument. The vulnerability is described as exploitable remotely, with public disclosure of the exploit. The connected s...

CVE-2024-4725 Campcodes Legal Case Management System client_user cross site scripting

A vulnerability has been found in Campcodes Legal Case Management System 1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /admin/clientuser. The manipulation of the argument fname leads to cross site scripting. The attack can be launched...

CVE-2024-4725 Campcodes Legal Case Management System client_user cross site scripting

A vulnerability has been found in Campcodes Legal Case Management System 1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /admin/clientuser. The manipulation of the argument fname leads to cross site scripting. The attack can be launched...

CVE-2024-4725

The CVE-2024-4725 entry describes a cross-site scripting vulnerability in Campcodes Legal Case Management System 1.0, triggered by manipulating the f_name parameter in the /admin/client_user endpoint. The issue is exploitable remotely, and public disclosure is noted. The affected component is an ...

CVE-2024-4724 Campcodes Legal Case Management System case-type cross site scripting

A vulnerability, which was classified as problematic, was found in Campcodes Legal Case Management System 1.0. Affected is an unknown function of the file /admin/case-type. The manipulation of the argument casetypename leads to cross site scripting. It is possible to launch the attack remotely. T...

CVE-2024-4723 Campcodes Legal Case Management System case-status cross site scripting

A vulnerability, which was classified as problematic, has been found in Campcodes Legal Case Management System 1.0. This issue affects some unknown processing of the file /admin/case-status. The manipulation of the argument casestatus leads to cross site scripting. The attack may be initiated...

CVE-2024-4723

CVE-2024-4723 affects Campcodes Legal Case Management System 1.0. The issue is a cross-site scripting vulnerability in the /admin/case-status handler caused by manipulation of the case_status parameter. Vectors are network-based with remote exploitation indicated; exploitation details have been d...

CVE-2024-4723 Campcodes Legal Case Management System case-status cross site scripting

A vulnerability, which was classified as problematic, has been found in Campcodes Legal Case Management System 1.0. This issue affects some unknown processing of the file /admin/case-status. The manipulation of the argument casestatus leads to cross site scripting. The attack may be initiated...

PT-2024-32500 · Unknown · Campcodes Legal Case Management System

Name of the Vulnerable Software and Affected Versions: Campcodes Legal Case Management System version 1.0 Description: A vulnerability was found in the system, affecting the /admin/court file, where the manipulation of the court name argument leads to cross-site scripting. The attack can be...

CVE-2024-4681 Campcodes Legal Case Management System Setting general-setting unrestricted upload

A vulnerability, which was classified as critical, was found in Campcodes Legal Case Management System 1.0. Affected is an unknown function of the file /admin/general-setting of the component Setting Handler. The manipulation of the argument favicon/logo leads to unrestricted upload. It is possib...

CVE-2024-4681

CVE-2024-4681 concerns Campcodes Legal Case Management System 1.0. The vulnerability affects the file/roadmap area: the unknown function in the Settings Handler at /admin/general-setting allows manipulation of the favicon/logo argument, resulting in unrestricted upload. This enables a remote atta...

CVE-2024-4681 Campcodes Legal Case Management System Setting general-setting unrestricted upload

A vulnerability, which was classified as critical, was found in Campcodes Legal Case Management System 1.0. Affected is an unknown function of the file /admin/general-setting of the component Setting Handler. The manipulation of the argument favicon/logo leads to unrestricted upload. It is possib...

PT-2024-4657

Name of the Vulnerable Software and Affected Versions Ollama versions prior to 0.1.34 Description Ollama has a flaw due to insufficient input validation, leading to a path traversal issue. This allows an attacker to overwrite arbitrary files on the server, potentially leading to remote code...

CVE-2023-40483

Maxon Cinema 4D SKP File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Maxon Cinema 4D. User interaction is required to exploit this vulnerability in that the target must visit a...

Medium: curl

Issue Overview: This flaw allows a malicious HTTP server to set "super cookies" in curl that are then passed back to more origins than what is otherwise allowed or possible. This allows a site to set cookies that then would get sent to different and unrelated sites and domains. It could do this b...

CVE-2024-27007

In the Linux kernel, the following vulnerability has been resolved: userfaultfd: change srcfolio after ensuring it's unpinned in UFFDIOMOVE Commit d7a08838ab74 "mm: userfaultfd: fix unexpected change to srcfolio when UFFDIOMOVE fails" moved the srcfolio-mapping, index changing to after clearing t...

CVE-2024-26998

In the Linux kernel, the following vulnerability has been resolved: serial: core: Clearing the circular buffer before NULLifying it The circular buffer is NULLified in uartttyportshutdown under the spin lock. However, the PM or other timer based callbacks may still trigger after this event withou...