CVE-2024-30706

CVE-2024-30706 entry is rejected/not used and does not represent an active vulnerability.

CVE-2024-0083

NVIDIA ChatRTX for Windows is affected by a UI-based cross-site scripting vulnerability (CVE-2024-0083) that can be triggered by network-delivered malicious scripts. The issue affects version 0.2 and earlier; exploitation could lead to code execution, denial of service, and information disclosure...

CVE-2024-0082

CVE-2024-0082 (NVIDIA ChatRTX for Windows) affects NVIDIA ChatRTX for Windows, describing a vulnerability in the UI that allows an attacker to cause improper privilege management by sending open file requests to the application, potentially enabling local privilege escalation, information disclos...

CVE-2024-3466

CVE-2024-3466 affects SourceCodester Laundry Management System 1.0, specifically the function laporan_filter in /application/controller/Pengeluaran.php. The root cause is input manipulation of the dari/sampai parameter leading to SQL injection. Impact is high: potential unauthorized data access o...

CVE-2024-3465

CVE-2024-3465 affects SourceCodester Laundry Management System 1.0. The vulnerable component is the laporan_filter function in /application/controller/Transaki.php, where manipulating the dari/sampai parameters leads to an SQL injection. The vulnerability can be exploited remotely, and the exploi...

CVE-2024-3464

SourceCodester Laundry Management System 1.0 contains a SQL injection in the laporan_filter function (file /application/controller/Pelanggan.php) via the jeniskelamin parameter. This allows remote exploitation with impact on confidentiality, integrity, and availability (CVE-2024-3464). Exploitati...

CVE-2024-3463

CVE-2024-3463 affects SourceCodester Laundry Management System v1.0, with a cross-site scripting flaw in the /karyawan/edit endpoint triggered by manipulating the karyawan parameter. The issue can be exploited remotely and has public exploitation details (VDB-259744). Connected sources corroborat...

CVE-2024-3457

The vulnerability CVE-2024-3457 affects Netentsec NS-ASG Application Security Gateway v6.3. The issue arises from a SQL injection in the parameter GroupId within the file /admin/config_ISCGroupNoCache.php, enabling remote attackers to manipulate input and potentially compromise data integrity, co...

CVE-2023-7164

BackWPup WordPress plugin before 4.0.4 exposes a directory listing vulnerability in its temporary backup folder, allowing unauthenticated attackers to download site backups (database files). Root cause: lack of access restrictions on the backup directory. Impact: potential data exposure of backup...

CVE-2024-3456

CVE-2024-3456 affects Netentsec NS-ASG Application Security Gateway 6.3. The vulnerability is a SQL injection in the file /admin/config_Anticrack.php triggered by manipulating the GroupId parameter. Attack may be conducted remotely and exploits have been disclosed publicly, per multiple sources. ...

CVE-2024-3445

CVE-2024-3445 affects SourceCodester Laundry Management System 1.0, with SQL injection in the /karyawan/laporan_filter file caused by manipulating the data_karyawan parameter. The vulnerability is exploitable remotely, and public disclosure is noted. Connected sources corroborate SQLi in data_kar...

CVE-2024-3444

The CVE-2024-3444 issue affects Wangshen SecGate 3600 up to 20240408. The vulnerability resides in an upload endpoint parameter, specifically the file path parameter /?g=net_pro_keyword_import_save with the reqfile argument, where manipulation leads to unrestricted file upload. It is exploitable ...

CVE-2024-3443

CVE-2024-3443 concerns SourceCodester Prison Management System 1.0. A cross-site scripting vulnerability exists in the /Employee/apply_leave.php file, caused by manipulating the txtstart_date/txtend_date parameters. Reports indicate the issue is exploitable remotely and that the public exploit ha...

CVE-2024-3442

CVE-2024-3442 affects SourceCodester Prison Management System 1.0, with the vulnerability located in /Employee/delete_leave.php. The issue enables SQL injection and can be triggered remotely, with public exploit disclosure noted. Multiple sources corroborate the flaw’s presence in the delete_leav...

CVE-2024-3441

The CVE-2024-3441 entry concerns SourceCodester Prison Management System 1.0, where an SQL injection vulnerability exists in /Employee/edit-profile.php. The issue is exploitable remotely and has been publicly disclosed. Connected documents corroborate the affected product/version and the SQLi fla...

CVE-2024-3440

CVE-2024-3440 affects SourceCodester Prison Management System 1.0, where an SQL injection in the /Admin/edit_profile.php endpoint enables remote exploitation. Public exploit/disclosure is indicated, with a high-severity impact profile (C/I/A: high). The vulnerability arises from an injectable inp...

CVE-2024-2834

CVE-2024-2834 affects OpenText ArcSight Management Center and ArcSight Platform with a Stored Cross-Site Scripting (XSS) vulnerability that could be remotely exploited. Distilled details from multiple sources indicate: vulnerable component/function is within ArcSight Management Center/ArcSight Pl...

CVE-2024-3439

The CVE-2024-3439 entry concerns SourceCodester Prison Management System 1.0, with a SQL injection in the /Account/login.php function. The vulnerability arises from manipulation of an unknown function in that file, enabling remote exploitation. Public disclosure of the exploit is noted. Multiple ...

CVE-2024-27897

CVE-2024-27897 describes an input verification vulnerability in the call module of Huawei HarmonyOS Wearables. The issue is that improper input handling in the call module could potentially expose service confidentiality. Affected component: the call module within Huawei HarmonyOS Wearables; sour...

CVE-2024-27896

CVE-2024-27896 is described across multiple feeds as an input verification vulnerability in Huawei HarmonyOS/EMUI log-module. The NVD entry lists a CVSS 3.1 base score of 7.5 (HIGH) with network attack vector and no user interaction, but integrity impact is HIGH. Connected records corroborate the...