CVE-2024-1223

CVE-2024-1223 concerns PaperCut NG/MF. The vulnerability enables unauthorized enumeration of information via the device’s APIs when an attacker already knows a combination of usernames, device names, and an internal system key, and the system is in a specific runtime state. This is described cons...

CVE-2024-1221

CVE-2024-1221 affects PaperCut NG/MF on Linux and macOS. It describes improper access controls on the PaperCut API that can allow an attacker to cause related files on the server to be exposed via a crafted payload to an impacted API endpoint. The attacker is said to require some reconnaissance t...

CVE-2024-28423

Airflow-Diagrams v2.1.0 is affected by an arbitrary file upload vulnerability in the unsafe_load function (cli.py). The root cause is unsafe YAML loading, allowing an attacker to execute arbitrary code by uploading a crafted YAML file. Documents confirm the affected component and vulnerability pa...

CVE-2024-28383

CVE-2024-28383 affects Tenda AX12 v1.0 with firmware v22.03.01.16. Multiple sources (NVD, Red Hat advisory, CNVD, CNVD CNVD-2025-18353, CNNVD) describe a buffer/stack overflow in the sub_431CF0 function triggered by the ssid input. The vulnerability is reported as potentially allowing code execut...

CVE-2024-25653

Delinea PAM Secret Server 11.4 exposes a Broken Access Control in the Web UI Report functionality (Unlimited Admin Mode) that allows unprivileged users to view system reports and modify custom reports. Root cause: access control bypass within the Reports feature. Affected component: Report module...

CVE-2024-25651

CVE-2024-25651 affects Delinea PAM Secret Server 11.4. The authentication REST API is vulnerable to user enumeration: responses from the /oauth2/token endpoint differ for valid versus invalid usernames, allowing a remote attacker to determine valid users. Root cause: differing handling of authent...

CVE-2023-42286

Summary: CVE-2023-42286 affects eyoucms v1.6.4 and is a PHP file inclusion vulnerability in the template configuration that can lead to code execution or command execution when a crafted payload is processed. The CVSSv3.1 score is 9.8 (CRITICAL), with network attack vector, no privileges required...

CVE-2024-28388

The CVE-2024-28388 vulnerability affects SunnyToo stproductcomments module for PrestaShop up to version 1.0.5 and earlier, due to a SQL injection in StProductCommentClass::getListcomments. The issue can allow a remote attacker to escalate privileges and exfiltrate sensitive information, with CVSS...

CVE-2024-25228

Vinchin Backup and Recovery 7.2 and earlier is affected by an Authenticated Remote Code Execution (RCE) in the getVerifydiyResult function of ManoeuvreHandler.class.php. Sources confirm the vulnerability exists in versions 7.2 and earlier and stems from inadequate input validation, notably in the...

CVE-2024-28323

The vulnerability CVE-2024-28323 affects Phpgurukul User Registration & Login and User Management System v3.1. The bwdates-report-result.php script accepts user-provided date inputs without proper validation, enabling SQL injection via that input path. This could impact data integrity and confide...

CVE-2023-50677

NETGEAR DGND4000 router (firmware v1.1.00.15_1.00.15) is affected by CVE-2023-50677. The issue allows a remote attacker to escalate privileges via the next_file parameter to the /setup.cgi component, reported due to inadequate access control. Exploitation details, impact scope, and patch informat...

CVE-2024-28425

CVE-2024-28425 affects greykite v1.0.0, with an arbitrary file upload vulnerability in load_obj at /templates/pickle_utils.py that allows arbitrary code execution. CVSSv3.1: 7.5 (Network, High impact, high complexity, user interaction required). Documents indicate the issue could be mitigated by ...

CVE-2024-28418

CVE-2024-28418 affects Webedition CMS 9.2.2.0 with a file-upload vulnerability exploitable via /webEdition/we_cmd.php. The vulnerability is documented across multiple feeds; the primary technical detail is the file upload path. No explicit fix version is provided in the sources; one advisory note...

CVE-2024-28424

ZenML v0.55.4 is affected by an arbitrary file upload vulnerability in the load function of /materializers/cloudpickle_materializer.py, enabling remote code execution via a crafted file. This vulnerability is described consistently across multiple feeds (NVD, Red Hat, OSV, Nessus/NASL, CVE lists)...

CVE-2024-25652

Summary : CVE-2024-25652 affects Delinea PAM Secret Server 11.4. A user with the Administer Reports permission or access to the Report functionality via UNLIMITED ADMIN MODE can gain unauthorized access to remote sessions created by legitimate users, using information from the Custom Legacy Repor...

CVE-2024-28417

Webedition CMS 9.2.2.0 has a Stored XSS vulnerability via the /webEdition/we_cmd.php endpoint. The issue affects the webEdition CMS component (we_cmd.php) and requires user interaction; impact is described as low for confidentiality, integrity, and availability (CVSS 3.1 base score 6.3). Some sou...

CVE-2024-25139

CVE-2024-25139 affects TP-Link Omada ER605 firmware versions 1.0.1 through 2.2.3. The root cause is an overflow in the cloud-brd binary due to an integer/heap-related boundary condition, resulting in a heap-based buffer overflow that can enable code execution with root privileges in the cloud-brd...

CVE-2024-26475

The CVE-2024-26475 issue affects radare2: versions 0.9.7 through 5.8.6 are vulnerable to a local-denial-of-service via the grub_sfs_read_extent function. The vulnerability is addressed in version 5.8.8 and later. Impact is local and related to availability; no information about exploitation in th...

Hardcoded credentials

Use of Hard-coded Cryptographic Key vulnerability in OpenText™ Exceed Turbo X affecting versions 12.5.1 and 12.5.2. The vulnerability could compromise the cryptographic keys...

Cross site scripting

The Contact Form 7 plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘active-tab’ parameter in all versions up to, and including, 5.9 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web...