CVE-2024-4529

CVE-2024-4529 affects the WordPress Business Card plugin (

CVE-2024-5400

CVE-2024-5400 affects Openfind Mail2000, where a CGI parameter handling vulnerability enables OS command injection. Multiple sources describe that remote attackers with regular privileges can exploit improper filtering of specific CGI parameters to execute arbitrary system commands on the remote ...

CVE-2024-35291

Cross-site scripting vulnerability exists in Splunk Config Explorer versions prior to 1.7.16. If this vulnerability is exploited, an arbitrary script may be executed on the web browser of the user who is using the product...

CVE-2024-35291

Splunk Config Explorer contains a reflected XSS (CWE-79) in versions prior to 1.7.16. The issue arises from inadequate protection of the web page structure, allowing an arbitrary script to run in the victim’s browser when exploited. Affected: Splunk Config Explorer

CVE-2024-5396

The CVE-2024-5396 entry concerns itsourcecode Online Student Enrollment System 1.0, with a SQL injection in the file newfaculty.php. The vulnerability arises from manipulation of the name parameter, enabling remote exploitation. Multiple connected records corroborate this issue across CVE databas...

CVE-2024-5393

CVE-2024-5393 affects the itsourcecode Online Student Enrollment System 1.0. A SQL injection vulnerability exists in the file listofcourse.php where altering the parameter idno enables remote exploitation. Exploitation is publicly disclosed. The vulnerability impacts confidentiality, integrity, a...

CVE-2024-30658

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that there was not reasonable evidence to determine the existence of a vulnerability...

CVE-2024-5390

CVE-2024-5390 concerns the Online Student Enrollment System 1.0. The vulnerability exists in an unknown function within listofstudent.php, where manipulating the lname argument enables SQL injection. This can be exploited remotely, and public disclosures have occurred (VDB-266304). The connected ...

CVE-2024-5385

CVE-2024-5385 affects oretnom23 Online Car Wash Booking System 1.0. A cross-site scripting flaw exists in the /admin/?page=user/list endpoint triggered by manipulating the First Name/Last Name field with a script payload. The issue is exploitable remotely and involves user interaction. Documented...

CVE-2024-36426

The CVE-2024-36426 entry documents a vulnerability in TARGIT Decision Suite prior to Autumn 2023 (version 23.2.15007.0) where the session token is included in the URL, potentially transmitted over cleartext HTTP. Reported impact indicates high confidentiality risk (C: High while I and A are None)...

Debian: Security Advisory (DLA-3818-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora: Security Advisory for djvulibre (FEDORA-2024-e8b9bedd36)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2024-5383

A vulnerability classified as problematic has been found in lakernote EasyAdmin up to 20240324. This affects an unknown part of the file /sys/file/upload. The manipulation of the argument file leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been...

CVE-2024-36054

Hw64.sys in Marvin Test HW.exe before 5.0.5.0 allows unprivileged user-mode processes to arbitrarily read kernel memory and consequently gain all privileges via IOCTL 0x9c4064b8 via MmMapIoSpace and IOCTL 0x9c406490 via ZwMapViewOfSection...

CVE-2024-36056

Hw64.sys in Marvin Test HW.exe before 5.0.5.0 allows unprivileged user-mode processes to arbitrarily map physical memory via IOCTL 0x9c406490 for IoAllocateMdl, MmBuildMdlForNonPagedPool, and MmMapLockedPages, leading to NT AUTHORITY\SYSTEM privilege escalation...

CVE-2024-36055

Hw64.sys in Marvin Test HW.exe before 5.0.5.0 allows unprivileged user-mode processes to arbitrarily map physical memory with read/write access via the MmMapIoSpace API IOCTL 0x9c40a4f8, 0x9c40a4e8, 0x9c40a4c0, 0x9c40a4c4, 0x9c40a4ec, and seven others, leading to a denial of service BSOD...

CVE-2024-36054

CVE-2024-36054 affects Marvin Test HW.exe (Hw64.sys) prior to 5.0.5.0. The vulnerability arises from the driver exposing IOCTL 0x9c4064b8 (MmMapIoSpace) and IOCTL 0x9c406490 (ZwMapViewOfSection), allowing unprivileged user-mode processes to arbitrarily read kernel memory and thereby gain all priv...

CVE-2024-5381

CVE-2024-5381 affects itsourcecode Student Information Management System 1.0. The vulnerability exists in the file view.php via manipulation of the studentId parameter, causing SQL injection. Exploitation can be remote, and multiple sources report that the exploit has been disclosed publicly. Con...

CVE-2024-5376

CVE-2024-5376 affects Kashipara College Management System 1.0. The vulnerability is a cross-site scripting flaw in the file view_each_faculty.php, caused by manipulation of the id parameter. The attack vector is remote, and the exploit has been disclosed publicly per the initial report. Connected...

CVE-2024-5374

Kashipara College Management System 1.0 is affected by a cross-site scripting vulnerability in an unknown function of the file submit_new_faculty.php. Manipulating the address parameter enables remote exploitation, and public disclosure of the exploit is noted. The connected documents confirm the...