CVE-2024-2999

CVE-2024-2999 affects Campcodes Online Art Gallery Management System 1.0. The vulnerability lies in the uname parameter of /admin/adminHome.php, where lack of input validation enables remote SQL injection. The issue is described as critical with public exploits disclosed and a known CVE entry (VD...

CVE-2024-2997

CVE-2024-2997 affects the Bdtask Multi-Store Inventory Management System (up to 20240320). The vulnerability is a cross-site scripting flaw triggered by manipulating the arguments Category Name, Model Name, Brand Name, or Unit Name, allowing remote exploitation and arbitrary script execution with...

CVE-2024-29892

ZITADEL is vulnerable where an action could set reserved claims (e.g., urn:zitadel:iam:user:resourceowner:name) via Go template-driven login UI rendering. The root cause: actions could modify claims that start with urn:zitadel:iam, which is now blocked by a protective check. The issue is fixed in...

CVE-2024-2993

CVE-2024-2993 pertains to Tenda FH1203 firmware (version 2.0.1.6). The vulnerability is in the function formQuickIndex of /goform/QuickIndex, where manipulation of the PPPOEPassword argument causes a stack-based buffer overflow. It is exploitable remotely, and public disclosures exist (VDB-258162...

CVE-2024-29891

CVE-2024-29891 concerns ZITADEL: improper Content-Type validation allows an attacker to upload HTML disguised as an image via the avatar upload, potentially taking over a victim’s account when they open the file in a browser during an active session. Affected behavior has been confirmed to reprod...

CVE-2024-2992

CVE-2024-2992 affects Tenda FH1203 version 2.0.1.6. The vulnerability is in the formSetCfm function of /goform/setcfm, where improper validation of the funcpara1 argument causes a stack-based buffer overflow. This can allow remote exploitation; multiple sources indicate the exploit has been discl...

CVE-2024-29888

Summary: CVE-2024-29888 affects Saleor (e-commerce platform). When using the delivery option “Pickup: Local stock only” under certain conditions, a customer could overwrite the warehouse address with their own, exposing the warehouse/pickup address as the click‑and‑collect address. This vulnerabi...

CVE-2024-2990

CVE-2024-2990 affects Tenda FH1203 2.0.1.6 . The vulnerability is in the function formexeCommand of the file /goform/execCommand where manipulation of the argument cmdinput causes a stack-based buffer overflow . It can be exploited remotely, and the exploit has been disclosed publicly. The connec...

CVE-2024-28247

Pi-hole Core (DNS sinkhole) is affected by CVE-2024-28247 due to an authenticated Arbitrary File Read via the file:// handling path. The issue allows an authenticated user to read internal server files, exploiting local-file update logic where non-domain lines printed from a provided file could r...

CVE-2024-23451

Summary: CVE-2024-23451 affects Elasticsearch 8.10.0 and earlier, with versions before 8.13.0 vulnerable to an incorrect API key–based authorization in Remote Cluster Security. A remote attacker with a valid API key (and using the custom transport protocol) can read arbitrary documents from a rem...

CVE-2024-2989

CVE-2024-2989 affects Tenda FH1203 with version 2.0.1.6. The vulnerability lies in the function fromNatStaticSetting of the file /goform/NatStaticSetting, where manipulating the argument page causes a stack-based buffer overflow. The issue can be exploited remotely and the public exploit has been...

CVE-2024-20307

CVE-2024-20307 : Cisco IOS and IOS XE Software are affected by a vulnerability in the IKEv1 fragmentation code that can allow an unauthenticated, remote attacker to cause a heap overflow and reboot the device (DoS). The issue arises because crafted fragmented IKEv1 packets are not properly reasse...

CVE-2023-0582

The CVE-2023-0582 entry describes an improper limitation of a pathname to a restricted directory (path traversal) in ForgeRock Access Management that enables authorization bypass. The issue affects ForgeRock Access Management versions prior to 7.3.0, prior to 7.2.1, prior to 7.1.4, and up to 7.0....

CVE-2024-20265

Cisco Access Point Software is reported affected by a boot‑process vulnerability that allows an unauthenticated, physical attacker to bypass Cisco Secure Boot and load a tampered image. Root cause: unnecessary boot‑time commands at the physical console enable bypass of Secure Boot validation chec...

CVE-2024-23450

CVE-2024-23450 describes an Elasticsearch denial of service where processing a document in a deeply nested ingest pipeline can crash the node (CWE-400). The NVD/CVSS data show CVSS v3.1 base score 7.5 (HIGH) with network attack vector and no user interaction. Connected IBM notices tie this CVE to...

CVE-2024-20309

CVE-2024-20309 affects Cisco IOS XE Software AUX port handling. The vulnerability arises from incorrect processing of specific ingress data when flow-control hardware on the AUX port is enabled, allowing an authenticated, local attacker to reverse-telnet to the AUX port and send data to cause a d...

CVE-2024-20278

CVE-2024-20278 is a Cisco IOS XE NETCONF vulnerability. The issue arises from improper validation of user-supplied input in the NETCONF feature, enabling an authenticated, remote attacker to escalate privileges from Administrator to root on an affected device. The documented impact includes privi...

CVE-2024-20306

CVE-2024-20306 affects Cisco IOS XE with a vulnerability in the Unified Threat Defense (UTD) configuration CLI. An authenticated, local attacker with level 15 privileges can craft CLI input to execute arbitrary commands as root on the underlying OS due to inadequate input validation. The issue is...

CVE-2024-20314

CVE-2024-20314 affects Cisco IOS XE Software with the SD-Access fabric edge node feature. The issue stems from improper handling of certain IPv4 packets, allowing an unauthenticated, remote attacker to induce high CPU utilization and halt traffic processing, causing a DoS on affected devices. Cis...

CVE-2024-20324

CVE-2024-20324 – Cisco IOS XE WLC Privilege Escalation : A vulnerability in the Cisco IOS XE CLI allows an authenticated, low-privileged, local attacker to access WLAN configuration details, including passwords, due to improper privilege checks. Exploitation uses the show and show tech wireless c...