CVE-2024-3979

CVE-2024-3979 affects COVESA vsomeip up to version 3.4.10. The issue is a race condition in an unknown functionality, exploitable with local access; public exploit information is noted. Connected documents corroborate a local attack vector and a medium severity (CVSS 3.1: 4.4; CVSS 3.0: 4.4) with...

CVE-2024-3979 COVESA vsomeip race condition

A vulnerability, which was classified as problematic, has been found in COVESA vsomeip up to 3.4.10. Affected by this issue is some unknown functionality. The manipulation leads to race condition. An attack has to be approached locally. The exploit has been disclosed to the public and may be used...

CVE-2024-3979 COVESA vsomeip race condition

A vulnerability, which was classified as problematic, has been found in COVESA vsomeip up to 3.4.10. Affected by this issue is some unknown functionality. The manipulation leads to race condition. An attack has to be approached locally. The exploit has been disclosed to the public and may be used...

CVE-2024-3948 SourceCodester Home Clean Service System Photo student.add.php unrestricted upload

A vulnerability was found in SourceCodester Home Clean Service System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file \admin\student.add.php of the component Photo Handler. The manipulation leads to unrestricted upload. The attack may be launch...

CVE-2024-3948 SourceCodester Home Clean Service System Photo student.add.php unrestricted upload

A vulnerability was found in SourceCodester Home Clean Service System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file \admin\student.add.php of the component Photo Handler. The manipulation leads to unrestricted upload. The attack may be launch...

CVE-2024-3948

CVE-2024-3948 affects SourceCodester Home Clean Service System 1.0. The issue is described as a vulnerability in the Photo Handler component, specifically a flaw in the file cornered to the admin\student.add.php (noted as admin\student.add.php in the public description) that enables unrestricted ...

CVE-2024-3928

A vulnerability was found in Dromara open-capacity-platform 2.0.1. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /actuator/heapdump of the component auth-server. The manipulation leads to information disclosure. The attack can be...

CVE-2024-3932 Totara LMS User Selector cross-site request forgery

A vulnerability classified as problematic has been found in Totara LMS up to 18.7. This affects an unknown part of the component User Selector. The manipulation leads to cross-site request forgery. It is possible to initiate the attack remotely. The complexity of an attack is rather high. The...

CVE-2024-3932

Totara LMS (up to 18.7) has a cross-site request forgery in the User Selector component. The vulnerability can be triggered remotely with high attack complexity, and exploits have been disclosed publicly. Upgrading to 18.8 (or 13.46, 14.38, 15.33, 16.27, 17.21) addresses the issue. Note: Affected...

CVE-2024-3931 Totara LMS User Selector check.php cross site scripting

A vulnerability was found in Totara LMS up to 18.7. It has been rated as problematic. Affected by this issue is some unknown functionality of the file admin/roles/check.php of the component User Selector. The manipulation of the argument ID Number leads to cross site scripting. The attack may be...

CVE-2024-3928 Dromara open-capacity-platform auth-server heapdump information disclosure

A vulnerability was found in Dromara open-capacity-platform 2.0.1. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /actuator/heapdump of the component auth-server. The manipulation leads to information disclosure. The attack can be...

CVE-2024-3928

CVE-2024-3928 affects Dromara open-capacity-platform 2.0.1, specifically the auth-server exposes an information-disclosure vulnerability via the /actuator/heapdump endpoint. Root cause is an information disclosure pathway in that file/endpoint. The vulnerability is exploitable remotely, and publi...

CVE-2024-3928 Dromara open-capacity-platform auth-server heapdump information disclosure

A vulnerability was found in Dromara open-capacity-platform 2.0.1. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /actuator/heapdump of the component auth-server. The manipulation leads to information disclosure. The attack can be...

CVE-2024-3910

A vulnerability, which was classified as critical, has been found in Tenda AC500 2.0.1.91307. Affected by this issue is the function fromDhcpListClient of the file /goform/DhcpListClient. The manipulation of the argument page leads to stack-based buffer overflow. The attack may be launched...

CVE-2024-3910

A vulnerability, which was classified as critical, has been found in Tenda AC500 2.0.1.91307. Affected by this issue is the function fromDhcpListClient of the file /goform/DhcpListClient. The manipulation of the argument page leads to stack-based buffer overflow. The attack may be launched...

CVE-2024-3909

A vulnerability classified as critical was found in Tenda AC500 2.0.1.91307. Affected by this vulnerability is the function formexeCommand of the file /goform/execCommand. The manipulation of the argument cmdinput leads to stack-based buffer overflow. The attack can be launched remotely. The...

CVE-2024-3908

A vulnerability classified as critical has been found in Tenda AC500 2.0.1.91307. Affected is the function formWriteFacMac of the file /goform/WriteFacMac. The manipulation of the argument mac leads to command injection. It is possible to launch the attack remotely. The exploit has been disclosed...

CVE-2024-3909

A vulnerability classified as critical was found in Tenda AC500 2.0.1.91307. Affected by this vulnerability is the function formexeCommand of the file /goform/execCommand. The manipulation of the argument cmdinput leads to stack-based buffer overflow. The attack can be launched remotely. The...

CVE-2024-3910 Tenda AC500 DhcpListClient fromDhcpListClient stack-based overflow

A vulnerability, which was classified as critical, has been found in Tenda AC500 2.0.1.91307. Affected by this issue is the function fromDhcpListClient of the file /goform/DhcpListClient. The manipulation of the argument page leads to stack-based buffer overflow. The attack may be launched...

CVE-2024-3910 Tenda AC500 DhcpListClient fromDhcpListClient stack-based overflow

A vulnerability, which was classified as critical, has been found in Tenda AC500 2.0.1.91307. Affected by this issue is the function fromDhcpListClient of the file /goform/DhcpListClient. The manipulation of the argument page leads to stack-based buffer overflow. The attack may be launched...