CVE-2024-4808

CVE-2024-4808 affects Kashipara College Management System 1.0, specifically the delete_faculty.php script. The vulnerability stems from an injectable id parameter in the deletion function, enabling SQL injection. Descriptions consistently state remote exploitation is possible and the vulnerabilit...

CVE-2024-4804

The CVE-2024-4804 entry concerns Kashipara College Management System 1.0. Affected is unknown functionality in edit_user.php where manipulating the id argument causes a SQL injection. The attack can be launched remotely and an exploit has been disclosed publicly. Public documents do not specify a...

CVE-2024-4802

CVE-2024-4802 affects Kashipara College Management System 1.0. The vulnerability is in the file submit_extracurricular_activity.php and arises from manipulation of the activity_datetime parameter, causing a SQL injection. Exploitation can be remote and public exploits have been disclosed. Some so...

CVE-2024-4799

CVE-2024-4799 affects Kashipara College Management System 1.0, exploiting a SQL injection in the file view_each_faculty.php via the id parameter. Attack can be initiated remotely and exploit has been publicly disclosed. Multiple connected sources confirm the vulnerable component and failure mode;...

CVE-2024-4797

The CVE-2024-4797 affects Campcodes Online Laundry Management System 1.0. The vulnerability resides in the /ajax.php endpoint where the arguments name/customer_name/username can be manipulated to trigger cross-site scripting. Exploitation can be performed remotely, and public exploitation informa...

CVE-2024-4796

CVE-2024-4796 affects Campcodes Online Laundry Management System 1.0. A vulnerability in the /manage_inv.php file’s id parameter enables SQL injection. The issue is exploitable remotely and an exploit has been publicly disclosed (VDB-263895). Multiple sources (NVD/NVD-derived records, CVE lists) ...

CVE-2024-4794

CVE-2024-4794 affects Campcodes Online Laundry Management System 1.0. Affected is the /manage_receiving.php file where altering the id parameter enables SQL injection. The vulnerability can be exploited remotely and the exploit has been disclosed publicly (VDB-263893). Multiple sources confirm a ...

CVE-2024-4793

The CVE-2024-4793 entry corresponds to Campcodes Online Laundry Management System 1.0, where an SQL injection is triggered by manipulating the id parameter in /manage_laundry.php. Affected function/filename is unspecified beyond that file and vulnerability is remote-accessible. The exploit has be...

CVE-2023-47711

IBM Security Guardium 11.3–12.0 is affected by CVE-2023-47711, where an authenticated user can upload files that trigger a denial of service. The IBM advisory lists fixes for 11.3, 11.4, 11.5, and 12.0 and provides patch links via Fix Central. There is no explicit exploit detail in the provided d...

CVE-2023-47712

CVE-2023-47712 affects IBM Security Guardium 11.3, 11.4, 11.5 and 12.0. The issue is privilege escalation due to improper permissions control, enabling a local user to gain elevated privileges. The IBM bulletin lists these versions as susceptible and provides remediation by applying security patc...

CVE-2023-47709

CVE-2023-47709 affects IBM Security Guardium versions 11.3, 11.4, 11.5 and 12.0. A remote authenticated attacker could execute arbitrary commands by sending a specially crafted request, due to a failure to neutralize certain elements in the OS command handling. The issue is confirmed in multiple ...

CVE-2024-28760

CVE-2024-28760 affects IBM App Connect Enterprise dashboard. Affected versions: 11.0.0.1–11.0.0.25 and 12.0.1.0–12.0.12.0. Root cause: improper restrictions of resource allocation in the Dashboard component, leading to a denial of service. Practical impact: DoS, with CVSS base score 4.3 (Network ...

CVE-2024-28761

IBM App Connect Enterprise (versions 11.0.0.1–11.0.0.25 and 12.0.1.0–12.0.12.0) is vulnerable to an HTML injection in the Admin API/Dashboard component. The issue arises from inadequate protection of the web page structure, enabling a remote attacker to inject HTML that executes in the victim’s b...

CVE-2023-52721

CVE-2023-52721 corresponds to a privilege-control vulnerability in Huawei HarmonyOS, specifically within the WindowManager module. The NVD entry describes a local, low-complexity issue (AV:L/AC:L/PR:L/UI:N/S:U) with the potential confidentiality impact (C:H) and no integrity/availability impact r...

CVE-2024-4046

CVE-2024-4046 affects Huawei HarmonyOS, specifically a cracking vulnerability in the OS security module. Public descriptions indicate impact to availability upon successful exploitation. Connected sources identify HarmonyOS/EMUI OS security module as the vulnerable component, but do not provide e...

CVE-2024-32999

Huawei HarmonyOS/OS security module is affected by CVE-2024-32999. The entry indicates a cracking vulnerability whose exploitation impacts availability. CVSS vectors from NVD and CISA-Red Hat records show local attack with low complexity and varying impact on confidentiality/integrity, and high a...

CVE-2024-32998

Summary of CVE-2024-32998 : A NULL pointer access vulnerability exists in the Huawei HarmonyOS alarm/clock modules. The issue is tied to the clock module and affects availability when exploited. Public sources consistently describe the vulnerability as impacting Huawei HarmonyOS/EMUI clock-relate...

CVE-2023-52720

CVE-2023-52720 involves a race condition in the soundtrigger module with availability impact. Connected documents identify the module as the vulnerable component but do not provide product/vendor/version specifics beyond Huawei/HarmonyOS context, nor any explicit exploit details or a published fi...

CVE-2024-32997

CVE-2024-32997 describes a race-condition vulnerability in Huawei HarmonyOS’s binder driver module. Affected components include HarmonyOS and Huawei EMUI environments relying on the Binder driver. Impact is listed as availability loss upon successful exploitation. Connected documents corroborate ...

CVE-2024-32996

The CVE-2024-32996 entry concerns Huawei HarmonyOS (account module) with a privilege-escalation issue that impacts availability. Connected sources consistently reference the account module and an availability impact, but none provide precise technical details such as the exact vulnerable componen...