CVE-2024-33774

A buffer overflow vulnerability in /bin/boa on D-Link DIR-619L Rev.B 2.06B1 via formWlanSetupWizard allows remote authenticated users to trigger a denial of service DoS through the parameter "webpage."...

CVE-2024-24199

smartdns commit 54b4dc was discovered to contain a misaligned address at smartdns/src/dns.c...

CVE-2024-28063

Kiteworks Totemomail through 7.0.0 allows /responsiveUI/EnvelopeOpenServlet envelopeRecipient reflected XSS...

CVE-2024-37019

Northern.tech Mender Enterprise before 3.6.4 and 3.7.x before 3.7.4 has Weak Authentication...

CVE-2024-31810

TOTOLINK EX200 V4.0.3c.7646B20201211 was discovered to contain a hardcoded password for root at /etc/shadow.sample...

CVE-2024-31617

OpenLiteSpeed before 1.8.1 mishandles chunked encoding...

CVE-2024-35339

Tenda FH1206 V1.2.0.88155 was discovered to contain a command injection vulnerability via the mac parameter at ip/goform/WriteFacMac...

CVE-2024-35582

A cross-site scripting XSS vulnerability in Sourcecodester Laboratory Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Department input field...

CVE-2024-35559

idccms v1.35 was discovered to contain a Cross-Site Request Forgery CSRF via the component /admin/infoMovedeal.php?mudi=rev=close...

CVE-2024-35571

Tenda AX1806 v1.0.0.1 contains a stack overflow via the iptv.stb.mode parameter in the function formSetIptv...

CVE-2024-35553

idccms v1.35 was discovered to contain a Cross-Site Request Forgery CSRF via the component /admin/infoMovedeal.php?mudi=add=close...

CVE-2024-35009

idccms v1.35 was discovered to contain a Cross-Site Request Forgery CSRF via the component /admin/shareswitch.php?mudi=switch==state&fieldName2;=state=banner=6...

OSV-2025-114 Index-out-of-bounds in ada_fuzz_header.h

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=396172315 Crash type: Index-out-of-bounds Crash state: adafuzzheader.h...

CVE-2024-35324

Douchat 4.0.5 suffers from an arbitrary file upload vulnerability via Public/Plugins/webuploader/server/preview.php...

OSV-2025-113 Heap-buffer-overflow in snmp_log_options

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=395921931 Crash type: Heap-buffer-overflow READ 8 Crash state: snmplogoptions netsnmpparseargs snmpparseargsfuzzer.c...

CVE-2024-35356

A vulnerability has been discovered in Diño Physics School Assistant version 2.3. The vulnerability impacts an unidentified code within the file /classes/Master.php?f=saveitem. Manipulating the argument id can result in SQL injection...

CVE-2024-35082

J2EEFAST v2.7.0 was discovered to contain a SQL injection vulnerability via the findPage function in SysOperLogMapper.xml...

CVE-2024-35109

idccms v1.35 was discovered to contain a Cross-Site Request Forgery CSRF via the component /homeProdeal.php?mudi=add=close...

CVE-2024-35550

idccms v1.35 was discovered to contain a Cross-Site Request Forgery CSRF via the component /admin/infoWebdeal.php?mudi=rev...

CVE-2024-35433

ZKTeco ZKBio CVSecurity 6.1.1 is vulnerable to Incorrect Access Control. An authenticated user, without the permissions of managing users, can create a new admin user...