CVE-2024-30055

CVE-2024-30055 affects Microsoft Edge (Chromium-based) and is a spoofing vulnerability in the Chromium components used by Edge. The available connected documents confirm affected product: Microsoft Edge (Chromium-based); vulnerability described as spoofing, with higher-level impact to spoof user ...

CVE-2024-22343

CVE-2024-22343 affects IBM TXSeries for Multiplatforms 8.2. The issue in the Administration Console allows web pages to be stored locally and read by another user on the same system. IBM X-Force ID: 280190; CVSS base score in IBM bulletin listed as 4.0. Affected product/version: IBM TXSeries for ...

CVE-2024-34310

CVE-2024-34310 affects Jin Fang Times Content Management System v3.2.3. The connected documents confirm a SQL injection vulnerability exploitable via the id parameter . The root cause is an injection flaw in how the id value is processed, leading to potential unauthorized database access or data ...

CVE-2023-38264

CVE-2023-38264 affects IBM SDK, Java Technology Edition ORB (7.1.0.0–7.1.5.21 and 8.0.0.0–8.0.8.21) due to improper enforcement of JEP 290 MaxRef and MaxDepth deserialization filters, enabling potential denial-of-service through unsafe deserialization. The Connected IBM advisories confirm multipl...

CVE-2023-37526

The CVE-2023-37526 entry concerns HCL DRYiCE Lucy (now AEX). A CORS misconfiguration in the mobile app could allow unauthorized access to application resources from any web domain and enable cache poisoning, per sources in NVD/CVE records. The root cause is a CORS misconfiguration in the app, wit...

CVE-2024-4725

The CVE-2024-4725 entry describes a cross-site scripting vulnerability in Campcodes Legal Case Management System 1.0, triggered by manipulating the f_name parameter in the /admin/client_user endpoint. The issue is exploitable remotely, and public disclosure is noted. The affected component is an ...

CVE-2024-27269

CVE-2024-27269 affects IBM QRadar SIEM 7.5.0 UP8 IF01; a privileged user could configure user management in a way that discloses unintended sensitive information across tenants. Remediation: upgrade to 7.5.0 UP8 IF02. CVSS 6.8 (MEDIUM); attack vector NETWORK, privileges required HIGH, confidentia...

CVE-2024-4723

CVE-2024-4723 affects Campcodes Legal Case Management System 1.0. The issue is a cross-site scripting vulnerability in the /admin/case-status handler caused by manipulation of the case_status parameter. Vectors are network-based with remote exploitation indicated; exploitation details have been d...

CVE-2024-34245

DedeCMS 5.7.114 is affected by an authenticated arbitrary file-read vulnerability in makehtml_js_action.php. The root cause is insufficient validation of a supplied path, enabling an attacker with basic access rights to read arbitrary server files. Impact is high on confidentiality (C:H in CVSS) ...

CVE-2024-4722

The CVE-2024-4722 affects Campcodes Complete Web-Based School Management System 1.0, specifically the index.php file where manipulating the category argument triggers cross-site scripting. The vulnerability can be exploited remotely and public details exist about it. Multiple sources corroborate ...

CVE-2024-28781

The CVE-2024-28781 entry covers Cross‑Site Scripting in IBM UrbanCode Deploy (UCD). Affected versions are 7.0–7.0.5.20, 7.1–7.1.2.16, 7.2–7.2.3.9, 7.3–7.3.2.4, and 8.0–8.0.0.1, where arbitrary JavaScript can be embedded in the Web UI, potentially altering functionality and exposing credentials wi...

CVE-2024-30801

CVE-2024-30801 affects Cloud Based Customer Service Management Platform, version 1.0.0. The vulnerability is in the Login.asp component and is described as a SQL Injection that can enable a local attacker to execute arbitrary code via a crafted payload. The issue is categorized as a SQL injection...

CVE-2024-4719

CVE-2024-4719 affects Campcodes Complete Web-Based School Management System 1.0. The vulnerability is a cross-site scripting flaw in the /model/delete_record.php page triggered by manipulating the page parameter, allowing remote exploitation. The exploit has been disclosed publicly (VDB-263797). ...

CVE-2024-33773

CVE-2024-33773 maps to a buffer overflow in /bin/boa on D-Link DIR-619L Rev.B 2.06B1, exploitable via the formWlanGuestSetup function and the webpage parameter. This allows remote authenticated users to trigger a DoS. Root cause is a memory corruption in the /bin/boa binary within the affected fi...

CVE-2024-31441

DataEase (pre-1.18.19) is affected by an ARBITRARY FILE READ vulnerability due to lack of restrictions on ClickHouse connection parameters. An attacker can exploit certain malicious parameters to read arbitrary files. A fix is available in v1.18.19; upgrading to this version is recommended. Publi...

CVE-2024-4232

CVE-2024-4232 affects Digisol Router DG-GR1321 (hardware 3.7L; firmware v3.2.02). The root cause is storing passwords in plaintext due to lack of encryption/hash in the firmware/database. Attack requires physical access: an attacker could extract the firmware, reverse‑engineer the binary data, an...

CVE-2024-4231

CVE-2024-4231 affects Digisol Router DG-GR1321 (Hardware 3.7L; Firmware v3.2.02). The root terminal is accessible via a serial interface without proper access control. An attacker with physical access could identify UART pins and gain a root shell, potentially accessing sensitive information. The...

CVE-2024-4715

CVE-2024-4715 : Campcodes Complete Web-Based School Management System 1.0 contains a cross-site scripting (XSS) vulnerability in the /model/update_grade.php page. The issue arises from manipulation of the name argument, enabling remote exploitation. Public disclosures exist (VDB-263793), with mul...

CVE-2024-4714

The CVE-2024-4714 issue affects Campcodes Complete Web-Based School Management System 1.0, with a cross-site scripting flaw in the /model/update_subject.php page. The vulnerability arises from manipulation of the name parameter, allowingXSS that can be triggered remotely. Documents consistently i...

CVE-2024-4713

CVE-2024-4713 impacts Campcodes Complete Web-Based School Management System 1.0. The vulnerability is a cross-site scripting flaw in the /view/all_teacher.php page, triggered by manipulating the page parameter. Exploitation can be carried out remotely, and public disclosure of the exploit is note...