CVE-2024-29862

The CVE describes a logic flaw in the Kerlink firewall used by ChirpStack components: the forwarder (chirpstack-mqtt-forwarder) and the gateway bridge (chirpstack-gateway-bridge) may incorrectly accept certain TCP packets when the TCP connection is not in the ESTABLISHED state. Affected versions ...

CVE-2024-28635

CVE-2024-28635 describes a Cross-Site Scripting (XSS) vulnerability in SurveyJS Survey Creator, version 1.9.132 and earlier, caused by improper handling of the title parameter in a form. The issue allows an attacker to execute arbitrary code and potentially access sensitive information via the fo...

CVE-2023-48902

The CVE-2023-48902 entry concerns tramyardg autoexpress 1.3.0, where an authentication bypass in uploadCarImages.php allows unauthenticated remote attackers to escalate privileges, update car data, delete vehicles, and upload images. The issue is supported by multiple sources: NVD/NVDB entries de...

CVE-2024-22724

OSCommerce v4 is affected by CVE-2024-22724. The issue allows local attackers to bypass file upload restrictions in the administrator profile photo upload feature and execute arbitrary code. Documents consistently describe a local, credentialed path to code execution via file upload, but do not p...

CVE-2024-28521

CVE-2024-28521 affects Netcome NS-ASG Application Security Gateway v6.3.1. A SQL injection in the loginid parameter of the /singlelogin.php component can allow a local attacker to execute arbitrary code and access sensitive information. The published sources consistently reference the same core f...

CVE-2024-29859

CVE-2024-29859 affects MISP prior to 2.4.187. The issue is in add_misp_export (app/Controller/EventsController.php) where there is an insufficient check for a valid file upload, constituting the root cause. Documented impact indicates potential exposure related to file uploads, with high-severity...

CVE-2023-48901

CVE-2023-48901 affects tramyardg Autoexpress v1.3.0. A SQL injection vulnerability exists in the details.php flow, where the getPhotosByCarId function uses the parameter id, enabling remote unauthenticated attackers to execute arbitrary SQL commands. The exploitation details and PoC are reference...

CVE-2024-29858

CVE-2024-29858 affects MISP prior to 2.4.187. The issue is in the uploadLogo function (app/Controller/OrganisationsController.php) which does not properly validate uploaded logos, i.e., it does not correctly check for a valid logo file. This could lead to unsafe logo uploads. Remediation: upgrade...

CVE-2024-29243

CVE-2024-29243 affects Shenzhen Libituo Technology Co., Ltd LBT-T300-mini v1.2.9, with a vulnerability in the VPN API endpoint (vpn_client_ip at /apply.cgi) that allows a buffer overflow. The Red Hat and CNNVD entries corroborate a buffer overflow condition; PT-Security notes a workaround: avoid ...

CVE-2024-29866

Datalust Seq is affected by an Incorrect Access Control vulnerability disclosed as CVE-2024-29866. Versions before 2023.4.11151 and before 2024.1.11146 allow a Project Owner or Organization Owner to escalate to System privileges. The issue is described consistently across sources, with a high-sev...

CVE-2024-29244

The CVE-2024-29244 affects Shenzhen Libituo Technology Co., Ltd LBT-T300-mini v1.2.9. It is a buffer overflow vulnerability triggered by the pin_code_3g parameter in the /apply.cgi endpoint. CVSSv3.1 base score is 5.3 (Medium) with Network attack vector, Low integrity impact, Low availability imp...

CVE-2024-28916

CVE-2024-28916 is documented as an elevation-of-privilege vulnerability affecting Xbox Gaming Services. The main affected product is Xbox Gaming Services; exploitation would grant higher privileges on the target system, with a local attack vector and no user interaction required per CVSS metrics....

CVE-2024-2469

CVE-2024-2469 affects GitHub Enterprise Server. An attacker with an Administrator role could achieve remote code execution that grants SSH root access. Affected versions include 3.8.0 and later; fixes were released in 3.8.17, 3.9.12, 3.10.9, 3.11.7 and 3.12.1. Documented impact is SSH root access...

CVE-2024-2720

The CVE-2024-2720 issue affects Campcodes Complete Online DJ Booking System 1.0, with a cross-site scripting vulnerability in the /admin/aboutus.php file. The root cause is manipulation of the pagetitle parameter, leading to XSS. The vulnerability is exploitable remotely and has publicly disclose...

CVE-2024-28868

CVE-2024-28868 affects Umbraco CMS: Umbraco 10.x with access to the native login screen is vulnerable to user enumeration unless upgraded from 10.8.4 to 10.8.5. A workaround is to disable the native login screen and rely on external logins. This is documented across multiple sources (NVD/NIST, Re...

CVE-2024-28231

CVE-2024-28231 affects eProsima Fast DDS. Prior to versions 2.14.0, 2.13.4, 2.12.3, 2.10.4, and 2.6.8, handling a DATA Submessage can trigger a heap overflow, remotely terminating the Fast DDS process. Root cause: the DATA Submessage payload_size is uint32_t and inputting a negative value (e.g., ...

CVE-2024-2716

CVE-2024-2716 affects Campcodes Complete Online DJ Booking System 1.0. The vulnerability is a cross-site scripting flaw in the /admin/contactus.php file, triggered by manipulating the email parameter. It can be exploited remotely and has been disclosed publicly (VDB-257469). Impact details in the...

CVE-2024-2715

CVE-2024-2715 affects Campcodes Complete Online DJ Booking System 1.0. The vulnerability is a cross-site scripting issue in the /admin/user-search.php file, triggered by manipulating the searchdata parameter. It can be exploited remotely, and public exploit information exists. Several connected s...

CVE-2024-2712

CVE-2024-2712 affects Campcodes Complete Online DJ Booking System 1.0. The vulnerability is a SQL injection in the /admin/user-search.php file, caused by manipulation of the searchdata parameter. It can be exploited remotely; exploitation details are public in multiple sources. Impact is describe...

CVE-2022-4963

CVE-2022-4963 affects Folio Spring Module Core up to version 1.1.5. The vulnerability is a SQL injection in the dropSchema function of HibernateSchemaService.java (Schema Name Handler). Root cause: improper handling in dropSchema leads to injection risk. Upgrading to version 2.0.0 addresses the i...