CVE-2024-24958

Several out-of-bounds write vulnerabilities exist in the Programming Software Connection FileSystem API functionality of AutomationDirect P3-550E 1.2.10.9. Specially crafted network packets can lead to heap-based memory corruption. An attacker can send malicious packets to trigger these...

CVE-2024-21785

A leftover debug code vulnerability exists in the Telnet Diagnostic Interface functionality of AutomationDirect P3-550E 1.2.10.9. A specially crafted series of network requests can lead to unauthorized access. An attacker can send a sequence of requests to trigger this vulnerability...

CVE-2024-23315

A read-what-where vulnerability exists in the Programming Software Connection IMM 01A1 Memory Read functionality of AutomationDirect P3-550E 1.2.10.9. A specially crafted network packet can lead to a disclosure of sensitive information. An attacker can send an unauthenticated packet to trigger th...

CVE-2024-30212

The CVE-2024-30212 entry concerns Microchip Harmony 3 Core library (and related Red Hat/NVD entries) that allows remote RAM access via SCSI READ(10)/WRITE commands over USB when using the maximum LBA (0xFFFFFFFF) and default 512-byte blocks. The described行为 enables reading the first 512 bytes of ...

CVE-2024-22590

CVE-2024-22590 affects Kwik, specifically version 745fd4e2, where the TLS engine does not track the current connection state. This can allow Client Hello messages to be overwritten at any time, including after a connection has been established. The PT-2024-19495 entry provides explicit details on...

CVE-2024-36472

In CVE-2024-36472, GNOME Shell up to 45.7 allows a portal helper to be launched automatically (without user confirmation) based on crafted network responses from an attacker on the local network, which can then load untrusted JavaScript. This can lead to resource consumption or other impacts depe...

CVE-2024-33808

CVE-2024-33808 describes a SQL injection vulnerability in Campcodes Complete Web-Based School Management System 1.0, exploitable via the id parameter of /model/get_timetable.php. The root cause is improper handling of input in the timetable retrieval endpoint, allowing arbitrary SQL execution. Th...

CVE-2024-33807

CVE-2024-33807 : A SQL injection flaw in Campcodes’ Complete Web-Based School Management System v1.0 affects the endpoint /model/get_teacher_timetable.php. The vulnerability allows an attacker to inject arbitrary SQL through the grade parameter. Public sources in the connected documents consisten...

CVE-2024-33806

CVE-2024-33806 affects campcodes Complete Web-Based School Management System 1.0. The vulnerability is in the /model/get_grade.php endpoint, where the id parameter enables a SQL injection. The underlying root cause is improper input handling, allowing an attacker to execute arbitrary SQL commands...

CVE-2024-33805

The CVE-2024-33805 issue affects Campcodes Complete Web-Based School Management System 1.0, specifically the /model/get_student.php endpoint. A SQL injection via the id parameter is used to execute arbitrary SQL commands, enabling high-severity impact on confidentiality, integrity, and availabili...

CVE-2024-33804

CVE-2024-33804 affects campcodes Complete Web-Based School Management System 1.0. The vulnerability is a SQL injection in /model/get_subject.php through the id parameter, allowing a attacker to execute arbitrary SQL commands. Publicly available sources in the connected set consistently describe t...

CVE-2024-33803

CVE-2024-33803 affects Campcodes Complete Web-Based School Management System 1.0. A SQL injection exists in /model/get_exam.php via the id parameter, enabling arbitrary SQL commands as described in multiple sources. The vulnerability is documented with a CVSS v3.1 base score of 5.4 (Medium) with ...

CVE-2024-33802

CVE-2024-33802 describes an SQL injection in Campcodes Complete Web-Based School Management System 1.0. The vulnerability affects /model/get_student_subject.php and is exploitable via the index parameter, allowing an attacker to execute arbitrary SQL commands. Exploitation status is not provided ...

CVE-2024-33801

Affects: Campcodes Complete Web-Based School Management System v1.0. Vulnerable component: /model/get_subject_routing.php. Root cause: SQL injection via the id parameter that allows arbitrary SQL execution. Impact (per sources): high confidentiality, integrity, and availability implications; over...

CVE-2024-33800

CVE-2024-33800 affects Campcodes Complete Web-Based School Management System v1.0. A SQL injection is possible in the /model/get_student1.php endpoint, via the index parameter, enabling an attacker to execute arbitrary SQL commands. The vulnerability is documented across multiple sources (NVD/Red...

CVE-2024-33799

CVE-2024-33799 affects Campcodes Complete Web-Based School Management System 1.0, via the /model/get_teacher.php endpoint where the id parameter is used unsafely. The root cause is a SQL injection that allows an attacker to execute arbitrary SQL commands, enabling potentially complete compromise ...

CVE-2024-35621

Formwork CVE-2024-35621 is an XSS in the Edit function prior to 1.13.0, exploitable via a crafted payload in the Content field. Root cause: insufficient sanitization of markdown fields, enabling [removed] tags to reach public pages through editor content. Affected: Formwork before 1.13.0. Impact:...

CVE-2024-24946

AutomationDirect P3-550E firmware 1.2.10.9 is affected by a heap-based buffer overflow in the CurrDir handling of the Programming Software Connection service. A crafted, unauthenticated UDP packet can trigger memory corruption via a memset operation based on attacker-controlled length, offsetting...

CVE-2024-24851

CVE-2024-24851 affects the AutomationDirect Productivity2010 P3-550E CPU (FW 1.2.10.9) via the Programming Software Connection FiBurn heap-based buffer overflow. A specially crafted, unauthenticated UDP/packet can trigger memory corruption: the Talos advisory details a flow where an attacker can ...

CVE-2024-24947

CVE-2024-24947 affects AutomationDirect P3-550E CPU (FW 1.2.10.9) with a heap-based buffer overflow in the CurrDir handling of the Programming Software Connection. The root cause is a memset call using an attacker-controlled length, causing heap corruption at offset 0xb68c4 and potential DoS via ...