CVE-2024-24015

CVE-2024-24015 affects Novel-Plus up to version 4.3.0-RC1. The vulnerability is a SQL injection in /sys/user/exit triggered by crafted offset, limit, and sort parameters. The influence is described as high impact to confidentiality, integrity, and availability with CVSS v3.1 base score 9.8 (netwo...

CVE-2023-52239

CVE-2023-52239 affects Magic xpi Integration Platform 4.13.4. The XML parser is vulnerable to XML External Entity (XXE) attacks, e.g., via onItemImport. Impacts include potential disclosure or manipulation of downstream data where XML is processed; exploitation details are not fully provided in t...

CVE-2024-22365

CVE-2024-22365 affects Linux PAM (pam) where an unprivileged user in a non-mount-namespace can place a FIFO and a subsequent login attempts via pam_namespace block on openat() due to missing O_DIRECTORY in protect_dir(), causing a local denial of service. A fix is available in newer pam packages ...

CVE-2024-24112

XMall v1.1 is affected by a SQL injection via the orderDir parameter. Unauthenticated attackers can potentially exfiltrate data. The CVSSv3.1 base score is 9.8 (CRITICAL). Remediation: update Exrick XMall to a version newer than 1.1 (as indicated by sources in the connected documents).

CVE-2024-22852

CVE-2024-22852 affects the D-Link Go-RT-AC750 (GORTAC750_A1_FW_v101b03). The vulnerability is a stack-based buffer overflow in the function genacgi_main, which can let an attacker enable Telnet via a specially crafted payload. The issue is documented across multiple sources (NVD, Red Hat, CVE Lis...

CVE-2023-46359

The cPH2 Charging Station (Hardy Barth) product line, specifically v1.87.0 and earlier, exposes an OS command injection vulnerability via the connectivity check feature. An unauthenticated remote attacker can pass specially crafted arguments to trigger arbitrary command execution, potentially com...

CVE-2024-22519

OpenDroneID OSM 3.5.1 is affected by CVE-2024-22519. Attackers can impersonate other drones by sending crafted data packets. The reported impact includes high integrity risk with network-based access and no confidentiality gain; availability impact is low. Several sources (e.g., PT-2024-19462) no...

CVE-2024-24255

CVE-2024-24255 involves a race condition in PX4 Autopilot up to v1.14, affecting the geofence.cpp and mission_feasibility_checker.cpp components. The underlying issue can allow an attacker to push a drone into unintended missions. Public details in connected documents confirm the affected product...

CVE-2023-46360

The CVE-2023-46360 entry concerns Hardy Barth cPH2 eCharge Ladestation (v1.87.0 and earlier). Connected Red Hat/NVD records corroborate an Execution with Unnecessary Privileges vulnerability for this device, but do not provide a concrete root cause or a remediation path in the supplied documents....

CVE-2024-24680

The CVE-2024-24680 issue affects Django versions: 3.2 before 3.2.24, 4.2 before 4.2.10, and 5.0 before 5.0.2. The vulnerability lies in the intcomma template filter, which can be exploited to trigger a denial-of-service when processing very long strings. There is no exploit detail provided in the...

CVE-2024-24291

CVE-2024-24291 affects yzmcms v7.0, impacting the /member/index/login component. A crafted URL can redirect users to malicious sites. The CVSS v3.1 score is 6.1 (Medium) with user interaction required and no confirmed patch version in the provided sources. Some references note no available fix ye...

CVE-2024-24004

CVE-2024-24004 affects jshERP v3.3. The vulnerability arises in com.jsh.erp.controller.DepotHeadController.findInOutDetail() where safeSqlParse does not properly filter the column and order parameters, enabling SQL injection by crafting a malicious payload. Impact is described as high/critical (C...

CVE-2024-24002

jshERP v3.3 is affected by an SQL injection in the MaterialController.getListWithStock() function. The vulnerability stems from inadequate filtering of the column and order parameters, allowing crafted input to bypass the safeSqlParse protection. No exploitation details are provided in the availa...

CVE-2024-22853

CVE-2024-22853 affects the D-LINK Go-RT-AC750 device with firmware GORTAC750_A1_FW_v101b03, where a hardcoded Alphanetworks password allows remote attackers to obtain root access via a telnet session. Public details in the connected documents confirm the vulnerability type (hardcoded credentials)...

CVE-2024-24013

Summary: CVE-2024-24013 describes a SQL injection in Novel-Plus, affecting v4.3.0-RC1 and earlier, exploitable via the /novel/pay/list endpoint by supplying crafted offset, limit, and sort parameters. Available connected documents confirm the affected software/component and the underlying cause (...

Code injection

An issue in symphony v.3.6.3 and before allows a remote attacker to execute arbitrary code via the log4j component...

CVE-2024-0964

CVE-2024-0964 describes a local-file-inclusion vulnerability in Gradio caused by a vulnerable user-supplied JSON value in an API request. Affected software is the Gradio Python library (noted in multiple sources referencing gradio-app/gradio). The underlying issue is a path traversal/LFI risk tri...

Security feature bypass

The UserPro plugin for WordPress is vulnerable to Security Feature Bypass in all versions up to, and including, 5.1.6. This is due to the use of client-side restrictions to enforce the 'Disabled registration' Membership feature within the plugin's General settings. This makes it possible for...

Design/Logic Flaw

The WP Club Manager – WordPress Sports Club Plugin plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the settingssave function in all versions up to, and including, 2.2.10. This makes it possible for unauthenticated attackers to update th...

Design/Logic Flaw

The LearnDash LMS plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 4.10.1 via API. This makes it possible for unauthenticated attackers to obtain access to quizzes...