Vulnerability database
Every flaw the U.S. government’s cybersecurity agency (CISA) has confirmed attackers are using, plus the new WordPress plugin and theme bugs published each day, sorted by what they mean for a small business. We refresh it twice a day. If you see something your website or office runs, tell us.
4,302 results · page 40 of 87
Oct 6, 2024A vulnerability was found in D-Link DIR-605L 2.13B01 BETA and classified as critical.CVE-2024-9549 · Network & remote access · D-Link · reported by VulDBHigh 8.7
A vulnerability was found in D-Link DIR-605L 2.13B01 BETA and classified as critical. This issue affects the function formEasySetupWizard/formEasySetupWizard2 of the file /goform/formEasySetupWizard. The manipulation of the argument curTime leads to buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.
- Product
- DIR-605L
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Oct 5, 2024A vulnerability was found in D-Link DIR-605L 2.13B01 BETA and classified as critical.CVE-2024-9533 · Network & remote access · D-Link · reported by VulDBHigh 8.7
A vulnerability was found in D-Link DIR-605L 2.13B01 BETA and classified as critical. This issue affects the function formDeviceReboot of the file /goform/formDeviceReboot. The manipulation of the argument next_page leads to buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.
- Product
- DIR-605L
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Oct 5, 2024A vulnerability has been found in D-Link DIR-605L 2.13B01 BETA and classified as critical.CVE-2024-9532 · Network & remote access · D-Link · reported by VulDBHigh 8.7
A vulnerability has been found in D-Link DIR-605L 2.13B01 BETA and classified as critical. This vulnerability affects the function formAdvanceSetup of the file /goform/formAdvanceSetup. The manipulation of the argument webpage leads to buffer overflow. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
- Product
- DIR-605L
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Oct 4, 2024A vulnerability was found in Netadmin Software NetAdmin IAM up to 3.5 and classified as problematic.CVE-2024-9513 · Other software · Netadmin Software · reported by VulDBMedium 6.3
A vulnerability was found in Netadmin Software NetAdmin IAM up to 3.5 and classified as problematic. Affected by this issue is some unknown functionality of the file /controller/api/Answer/ReturnUserQuestionsFilled of the component HTTP POST Request Handler. The manipulation of the argument username leads to information exposure through discrepancy. The attack may be launched remotely. The complexity of an attack is rather high. The exploitation is known to be difficult. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure is planning to release a fix in mid-October 2024.
- Product
- NetAdmin IAM
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Oct 1, 2024A vulnerability classified as problematic has been found in OFCMS 1.1.2.CVE-2024-9411 · Other software · ofcms_project · reported by VulDBMedium 5.3
A vulnerability classified as problematic has been found in OFCMS 1.1.2. This affects the function add of the file /admin/system/dict/add.json?sqlid=system.dict.save. The manipulation of the argument dict_value leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
- Product
- ofcms
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 30, 2024A vulnerability has been found in ThingsBoard up to 3.7.0 and classified as problematic.CVE-2024-9358 · Other software · Thingsboard · reported by VulDBMedium 6
A vulnerability has been found in ThingsBoard up to 3.7.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the component HTTP RPC API. The manipulation leads to resource consumption. The attack can be launched remotely. The complexity of an attack is rather high. The exploitation appears to be difficult. The exploit has been disclosed to the public and may be used. Upgrading to version 3.7.1 is able to address this issue. It is recommended to upgrade the affected component. The vendor was informed on 2024-07-24 about this vulnerability and announced the release of 3.7.1 for the second half of September 2024.
- Product
- Thingsboard
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 29, 2024A vulnerability classified as critical has been found in Intelbras InControl up to 2.21.56.CVE-2024-9325 · Other software · Intelbras · reported by VulDBHigh 8.5
A vulnerability classified as critical has been found in Intelbras InControl up to 2.21.56. This affects an unknown part of the file C:\Program Files (x86)\Intelbras\Incontrol Cliente\incontrol_webcam\incontrol-service-watchdog.exe. The manipulation leads to unquoted search path. It is possible to launch the attack on the local host. Upgrading to version 2.21.58 is able to address this issue. It is recommended to upgrade the affected component. The vendor was informed early on 2024-08-05 about this issue. The release of a fixed version 2.21.58 was announced for the end of August 2024 but then was postponed until 2024-09-20.
- Product
- InControl
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordbackend.intelbras.comdownload.cronos.intelbras.com.br
Sep 27, 2024A vulnerability, which was classified as critical, has been found in dingfanzu CMS up to 29d67d9044f6f93378e6eb6ff92272217ff7225c.CVE-2024-9294 · Other software · dingfanzu · reported by VulDBMedium 5.3
A vulnerability, which was classified as critical, has been found in dingfanzu CMS up to 29d67d9044f6f93378e6eb6ff92272217ff7225c. Affected by this issue is some unknown functionality of the file saveNewPwd.php. The manipulation of the argument username leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Continious delivery with rolling releases is used by this product. Therefore, no version details of affected nor updated releases are available.
- Product
- CMS
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 27, 2024A vulnerability classified as critical was found in skyselang yylAdmin up to 3.0.CVE-2024-9293 · Other software · skyselang · reported by VulDBMedium 5.3
A vulnerability classified as critical was found in skyselang yylAdmin up to 3.0. Affected by this vulnerability is the function list of the file /app/admin/controller/file/File.php of the component Backend. The manipulation of the argument is_disable leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
- Product
- yylAdmin
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 27, 2024A vulnerability classified as problematic has been found in kalvinGit kvf-admin up to f12a94dc1ebb7d1c51ee978a85e4c7ed75c620ff.CVE-2024-9291 · Other software · kalvinGit · reported by VulDBMedium 5.3
A vulnerability classified as problematic has been found in kalvinGit kvf-admin up to f12a94dc1ebb7d1c51ee978a85e4c7ed75c620ff. Affected is an unknown function of the file /ueditor/upload?configPath=ueditor/config.json&action=uploadfile of the component XML File Handler. The manipulation of the argument upfile leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. This product is using a rolling release to provide continious delivery. Therefore, no version details for affected nor updated releases are available. The GitHub repository of the project did not receive an update for more than two years.
- Product
- kvf-admin
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 27, 2024A vulnerability classified as problematic has been found in RelaxedJS ReLaXed up to 0.2.2.CVE-2024-9283 · Other software · RelaxedJS · reported by VulDBMedium 4.8
A vulnerability classified as problematic has been found in RelaxedJS ReLaXed up to 0.2.2. Affected is an unknown function of the component Pug to PDF Converter. The manipulation leads to cross site scripting. An attack has to be approached locally. The exploit has been disclosed to the public and may be used.
- Product
- ReLaXed
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recorddrive.google.comvuldb.com
Sep 27, 2024A vulnerability was found in bg5sbk MiniCMS up to 1.11 and classified as problematic.CVE-2024-9281 · Other software · bg5sbk · reported by VulDBMedium 6.9
A vulnerability was found in bg5sbk MiniCMS up to 1.11 and classified as problematic. This issue affects some unknown processing of the file post-edit.php. The manipulation leads to cross-site request forgery. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The initial researcher advisory mentions confusing version and file name information. The vendor was contacted early about this disclosure but did not respond in any way.
- Product
- MiniCMS
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 27, 2024A vulnerability has been found in kalvinGit kvf-admin up to f12a94dc1ebb7d1c51ee978a85e4c7ed75c620ff and classified as critical.CVE-2024-9280 · Other software · kalvinGit · reported by VulDBMedium 5.1
A vulnerability has been found in kalvinGit kvf-admin up to f12a94dc1ebb7d1c51ee978a85e4c7ed75c620ff and classified as critical. This vulnerability affects the function fileUpload of the file FileUploadKit.java. The manipulation of the argument file leads to unrestricted upload. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Continious delivery with rolling releases is used by this product. Therefore, no version details of affected nor updated releases are available.
- Product
- kvf-admin
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 27, 2024A vulnerability, which was classified as problematic, was found in funnyzpc Mee-Admin up to 1.6.CVE-2024-9279 · Other software · funnyzpc · reported by VulDBMedium 5.1
A vulnerability, which was classified as problematic, was found in funnyzpc Mee-Admin up to 1.6. This affects an unknown part of the file /mee/index of the component User Center. The manipulation of the argument User Nickname leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
- Product
- Mee-Admin
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 27, 2024A vulnerability, which was classified as critical, has been found in HuankeMao SCRM up to 0.0.3.CVE-2024-9278 · Other software · HuankeMao · reported by VulDBMedium 5.1
A vulnerability, which was classified as critical, has been found in HuankeMao SCRM up to 0.0.3. Affected by this issue is the function upload_domain_verification_file of the file WxkConfig.php of the component Administrator Backend. The manipulation of the argument domain_verification_file leads to unrestricted upload. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.
- Product
- SCRM
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 27, 2024A vulnerability classified as problematic was found in Langflow up to 1.0.18.CVE-2024-9277 · Other software · langflow · reported by VulDBMedium 5.1
A vulnerability classified as problematic was found in Langflow up to 1.0.18. Affected by this vulnerability is an unknown functionality of the file \src\backend\base\langflow\interface\utils.py of the component HTTP POST Request Handler. The manipulation of the argument remaining_text leads to inefficient regular expression complexity. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
- Product
- langflow
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordrumbling-slice-eb0.notion.sitevuldb.com
Sep 27, 2024A vulnerability classified as problematic has been found in TMsoft MyAuth Gateway 3.CVE-2024-9276 · Other software · TMsoft · reported by VulDBMedium 5.3
A vulnerability classified as problematic has been found in TMsoft MyAuth Gateway 3. Affected is an unknown function of the file /index.php. The manipulation of the argument console/nocache/cmd leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
- Product
- MyAuth Gateway
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 26, 2024A vulnerability, which was classified as problematic, has been found in Enpass Password Manager up to 6.9.5 on Windows.CVE-2024-9203 · Other software · Enpass · reported by VulDBLow 2
A vulnerability, which was classified as problematic, has been found in Enpass Password Manager up to 6.9.5 on Windows. This issue affects some unknown processing. The manipulation leads to cleartext storage of sensitive information in memory. An attack has to be approached locally. The complexity of an attack is rather high. The exploitation is known to be difficult. Upgrading to version 6.10.1 is able to address this issue. It is recommended to upgrade the affected component.
- Product
- Password Manager
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 25, 2024A vulnerability in the process that classifies traffic that is going to the Unified Threat Defense (UTD) component of Cisco IOS XE Software in controller mode cCVE-2024-20455 · Network & remote access · Cisco · reported by psirt@cisco.comHigh 8.6
A vulnerability in the process that classifies traffic that is going to the Unified Threat Defense (UTD) component of Cisco IOS XE Software in controller mode could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability exists because UTD improperly handles certain packets as those packets egress an SD-WAN IPsec tunnel. An attacker could exploit this vulnerability by sending crafted traffic through an SD-WAN IPsec tunnel that is configured on an affected device. A successful exploit could allow the attacker to cause the device to reload, resulting in a DoS condition. Note: SD-WAN tunnels that are configured with Generic Routing Encapsulation (GRE) are not affected by this vulnerability.
- Product
- Cisco IOS XE Software
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordsec.cloudapps.cisco.com
Sep 21, 2024A vulnerability classified as problematic has been found in dingfangzu up to 29d67d9044f6f93378e6eb6ff92272217ff7225c.CVE-2024-9077 · Other software · dingfangzu · reported by VulDBMedium 5.3
A vulnerability classified as problematic has been found in dingfangzu up to 29d67d9044f6f93378e6eb6ff92272217ff7225c. Affected is an unknown function of the file scripts/order.js of the component Order Checkout. The manipulation of the argument address-name leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. This product is using a rolling release to provide continious delivery. Therefore, no version details for affected nor updated releases are available. The vendor was contacted early about this disclosure but did not respond in any way.
- Product
- dingfangzu
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 20, 2024A vulnerability classified as problematic was found in Codezips Online Shopping Portal 1.0.CVE-2024-9038 · Other software · Codezips · reported by VulDBMedium 5.3
A vulnerability classified as problematic was found in Codezips Online Shopping Portal 1.0. Affected by this vulnerability is an unknown functionality of the file insert-product.php. The manipulation of the argument productimage1/productimage2/productimage3 leads to unrestricted upload. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
- Product
- Online Shopping Portal
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 20, 2024A vulnerability classified as critical has been found in Codezips Internal Marks Calculation 1.0.CVE-2024-9037 · Other software · Codezips · reported by VulDBMedium 6.9
A vulnerability classified as critical has been found in Codezips Internal Marks Calculation 1.0. Affected is an unknown function of the file index.php. The manipulation of the argument tid leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
- Product
- Internal Marks Calculation
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 20, 2024A vulnerability, which was classified as problematic, has been found in CodeCanyon CRMGo SaaS up to 7.2.CVE-2024-9031 · Other software · CodeCanyon · reported by VulDBMedium 5.3
A vulnerability, which was classified as problematic, has been found in CodeCanyon CRMGo SaaS up to 7.2. This issue affects some unknown processing of the file /project/task/{task_id}/show. The manipulation of the argument comment leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.
- Product
- CRMGo SaaS
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 20, 2024A vulnerability classified as problematic was found in CodeCanyon CRMGo SaaS 7.2.CVE-2024-9030 · Other software · CodeCanyon · reported by VulDBMedium 5.3
A vulnerability classified as problematic was found in CodeCanyon CRMGo SaaS 7.2. This vulnerability affects unknown code of the file /deal/{note_id}/note. The manipulation of the argument notes leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
- Product
- CRMGo SaaS
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 19, 2024A vulnerability classified as problematic has been found in jeanmarc77 123solar 1.8.4.5.CVE-2024-9007 · Other software · jeanmarc77 · reported by VulDBMedium 5.3
A vulnerability classified as problematic has been found in jeanmarc77 123solar 1.8.4.5. This affects an unknown part of the file /detailed.php. The manipulation of the argument date1 leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The patch is named 94bf9ab7ad0ccb7fbdc02f172f37f0e2ea08d48f. It is recommended to apply a patch to fix this issue.
- Product
- 123solar
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 19, 2024A vulnerability classified as critical has been found in D-Link DAR-7000 up to 20240912.CVE-2024-9004 · Network & remote access · D-Link · reported by VulDBMedium 5.3
A vulnerability classified as critical has been found in D-Link DAR-7000 up to 20240912. Affected is an unknown function of the file /view/DBManage/Backup_Server_commit.php. The manipulation of the argument host leads to os command injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. NOTE: This vulnerability only affects products that are no longer supported by the maintainer.
- Product
- DAR-7000
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordgithub.comsupportannouncement.us.dlink.com
Sep 17, 2024arduino-esp32 is an Arduino core for the ESP32, ESP32-S2, ESP32-S3, ESP32-C3, ESP32-C6 and ESP32-H2 microcontrollers.CVE-2024-45798 · Other software · espressif · reported by GitHubCritical 9.9
arduino-esp32 is an Arduino core for the ESP32, ESP32-S2, ESP32-S3, ESP32-C3, ESP32-C6 and ESP32-H2 microcontrollers. The `arduino-esp32` CI is vulnerable to multiple Poisoned Pipeline Execution (PPE) vulnerabilities. Code injection in `tests_results.yml` workflow (`GHSL-2024-169`) and environment Variable injection (`GHSL-2024-170`). These issue have been addressed but users are advised to verify the contents of the downloaded artifacts.
- Product
- arduino-esp32
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordcodeql.github.comgithub.com
Sep 17, 2024A vulnerability has been found in CodeCanyon RISE Ultimate Project Manager 3.7.0 and classified as critical.CVE-2024-8945 · Other software · CodeCanyon · reported by VulDBMedium 5.3
A vulnerability has been found in CodeCanyon RISE Ultimate Project Manager 3.7.0 and classified as critical. This vulnerability affects unknown code of the file /index.php/dashboard/save. The manipulation of the argument id leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. It is recommended to upgrade the affected component.
- Product
- RISE Ultimate Project Manager
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 15, 2024A vulnerability classified as critical has been found in playSMS 1.4.4/1.4.5/1.4.6/1.4.7.CVE-2024-8880 · Other software · playsms · reported by VulDBMedium 6.3
A vulnerability classified as critical has been found in playSMS 1.4.4/1.4.5/1.4.6/1.4.7. Affected is an unknown function of the file /playsms/index.php?app=main&inc=core_auth&route=forgot&op=forgot of the component Template Handler. The manipulation of the argument username/email/captcha leads to code injection. It is possible to launch the attack remotely. The complexity of an attack is rather high. The exploitability is told to be difficult. The exploit has been disclosed to the public and may be used. It is recommended to upgrade the affected component. The project maintainer was informed early about the issue. Investigation shows that playSMS up to 1.4.3 contained a fix but later versions re-introduced the flaw. As long as the latest version of the playsms/tpl package is used, the software is not affected. Version >=1.4.4 shall fix this issue for sure.
- Product
- playsms
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 15, 2024A vulnerability, which was classified as problematic, has been found in xiaohe4966 TpMeCMS up to 1.3.3.1.CVE-2024-8876 · Other software · xiaohe4966 · reported by VulDBMedium 5.3
A vulnerability, which was classified as problematic, has been found in xiaohe4966 TpMeCMS up to 1.3.3.1. Affected by this issue is some unknown functionality of the file /index/ajax/lang. The manipulation of the argument lang leads to path traversal. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 1.3.3.2 is able to address this issue. It is recommended to upgrade the affected component.
- Product
- TpMeCMS
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 15, 2024A vulnerability classified as critical was found in vedees wcms up to 0.3.2.CVE-2024-8875 · Other software · vedees · reported by VulDBMedium 5.3
A vulnerability classified as critical was found in vedees wcms up to 0.3.2. Affected by this vulnerability is an unknown functionality of the file /wex/finder.php. The manipulation of the argument p leads to path traversal. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
- Product
- wcms
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 15, 2024A vulnerability classified as critical has been found in TOTOLINK A720R 4.1.5.CVE-2024-8869 · Other software · TOTOLINK · reported by VulDBLow 2.3
A vulnerability classified as critical has been found in TOTOLINK A720R 4.1.5. Affected is the function exportOvpn. The manipulation leads to os command injection. It is possible to launch the attack remotely. The complexity of an attack is rather high. The exploitability is told to be difficult. The vendor was contacted early about this disclosure but did not respond in any way.
- Product
- A720R
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 14, 2024A vulnerability was found in composiohq composio up to 0.5.8 and classified as problematic.CVE-2024-8865 · Other software · composiohq · reported by VulDBMedium 5.1
A vulnerability was found in composiohq composio up to 0.5.8 and classified as problematic. Affected by this issue is the function path of the file composio\server\api.py. The manipulation of the argument file leads to path traversal. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
- Product
- composio
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordrumbling-slice-eb0.notion.sitevuldb.com
Sep 14, 2024A vulnerability has been found in composiohq composio up to 0.5.6 and classified as critical.CVE-2024-8864 · Other software · composiohq · reported by VulDBMedium 5.1
A vulnerability has been found in composiohq composio up to 0.5.6 and classified as critical. Affected by this vulnerability is the function Calculator of the file python/composio/tools/local/mathematical/actions/calculator.py. The manipulation leads to code injection. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
- Product
- composio
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordrumbling-slice-eb0.notion.sitevuldb.com
Sep 14, 2024A vulnerability, which was classified as problematic, was found in aimhubio aim up to 3.24.CVE-2024-8863 · Other software · aimhubio · reported by VulDBMedium 5.3
A vulnerability, which was classified as problematic, was found in aimhubio aim up to 3.24. Affected is the function dangerouslySetInnerHTML of the file textbox.tsx of the component Text Explorer. The manipulation of the argument query leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
- Product
- aim
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordrumbling-slice-eb0.notion.sitevuldb.com
Sep 14, 2024A vulnerability, which was classified as critical, has been found in h2oai h2o-3 3.46.0.4.CVE-2024-8862 · Other software · h2oai · reported by VulDBMedium 6.9
A vulnerability, which was classified as critical, has been found in h2oai h2o-3 3.46.0.4. This issue affects the function getConnectionSafe of the file /dtale/chart-data/1 of the component JDBC Connection Handler. The manipulation of the argument query leads to deserialization. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
- Product
- h2o-3
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordrumbling-slice-eb0.notion.sitevuldb.com
Sep 13, 2024A vulnerability classified as critical was found in QDocs Smart School Management System 7.0.0.CVE-2024-8784 · Other software · QDocs · reported by VulDBMedium 5.3
A vulnerability classified as critical was found in QDocs Smart School Management System 7.0.0. Affected by this vulnerability is an unknown functionality of the file /user/chat/mynewuser of the component Chat. The manipulation of the argument users[] with the input 1'+AND+(SELECT+3220+FROM+(SELECT(SLEEP(5)))ZNun)+AND+'WwBM'%3d'WwBM as part of POST Request Parameter leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 7.0.1 is able to address this issue. It is recommended to upgrade the affected component.
- Product
- Smart School Management System
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordcodecanyon.netgithub.com
Sep 13, 2024A vulnerability classified as problematic has been found in OpenTibiaBR MyAAC up to 0.8.16.CVE-2024-8783 · Other software · OpenTibiaBR · reported by VulDBMedium 5.3
A vulnerability classified as problematic has been found in OpenTibiaBR MyAAC up to 0.8.16. Affected is an unknown function of the file system/pages/forum/new_post.php of the component Post Reply Handler. The manipulation of the argument post_topic leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The patch is identified as bf6ae3df0d32fa22552bb44ca4f8489a6e78cc1c. It is recommended to apply a patch to fix this issue.
- Product
- MyAAC
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 13, 2024Classified Listing – Classified ads & Business Directory: Unauthorized accessCVE-2024-7888 · WordPress plugins & themes · reported by WordfenceMedium 6.3
The Classified Listing – Classified ads & Business Directory Plugin plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on several functions like export_forms(), import_forms(), update_fb_options(), and many more in all versions up to, and including, 3.1.7. This makes it possible for authenticated attackers, with subscriber-level access and above, to modify forms and various other settings.
- Product
- Classified Listing – Classified ads & Business Directory
- Affected
- up to 3.1.7
- What to do
- Affects up to 3.1.7. Update Classified Listing – Classified ads & Business Directory to the newest version and check its changelog mentions this fix; if there isn’t one yet, deactivate it until there is.
Full record and what to do →NVD recordplugins.trac.wordpress.orgplugins.trac.wordpress.org
Sep 12, 2024ESP-NOW Component provides a connectionless Wi-Fi communication protocol.CVE-2024-42484 · Other software · espressif · reported by GitHubMedium 6.5
ESP-NOW Component provides a connectionless Wi-Fi communication protocol. An Out-of-Bound (OOB) vulnerability was discovered in the implementation of the ESP-NOW group type message because there is no check for the addrs_num field of the group type message. This can result in memory corruption related attacks. Normally there are two fields in the group information that need to be checked, i.e., the addrs_num field and the addrs_list fileld. Since we only checked the addrs_list field, an attacker can send a group type message with an invalid addrs_num field, which will cause the message handled by the firmware to be much larger than the current buffer, thus causing a memory corruption issue that goes beyond the payload length.
- Product
- esp-now
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 12, 2024ESP-NOW Component provides a connectionless Wi-Fi communication protocol.CVE-2024-42483 · Other software · espressif · reported by GitHubMedium 6.5
ESP-NOW Component provides a connectionless Wi-Fi communication protocol. An replay attacks vulnerability was discovered in the implementation of the ESP-NOW because the caches is not differentiated by message types, it is a single, shared resource for all kinds of messages, whether they are broadcast or unicast, and regardless of whether they are ciphertext or plaintext. This can result an attacker to clear the cache of its legitimate entries, there by creating an opportunity to re-inject previously captured packets. This vulnerability is fixed in 2.5.2.
- Product
- esp-now
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 12, 2024An arbitrary code execution vulnerability exists in versions 0.0.8 and newer of the Refuel Autolabel library because of the way its multilabel classification taCVE-2024-27321 · Other software · Refuel · reported by 6f8de1f0-f67e-45a6-b68f-98777fdb759cHigh 7.8
An arbitrary code execution vulnerability exists in versions 0.0.8 and newer of the Refuel Autolabel library because of the way its multilabel classification tasks handle provided CSV files. If a user creates a multilabel classification task using a maliciously crafted CSV file containing Python code, the code will be passed to an eval function which executes it.
- Product
- autolabel
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 12, 2024An arbitrary code execution vulnerability exists in versions 0.0.8 and newer of the Refuel Autolabel library because of the way its classification tasks handle CVE-2024-27320 · Other software · Refuel · reported by 6f8de1f0-f67e-45a6-b68f-98777fdb759cHigh 7.8
An arbitrary code execution vulnerability exists in versions 0.0.8 and newer of the Refuel Autolabel library because of the way its classification tasks handle provided CSV files. If a victim user creates a classification task using a maliciously crafted CSV file containing Python code, the code will be passed to an eval function which executes it.
- Product
- autolabel
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 11, 2024A vulnerability was found in Shandong Star Measurement and Control Equipment Heating Network Wireless Monitoring System 5.6.2 and classified as critical.CVE-2024-8705 · Other software · Shandong Star Measurement and Control Equipment · reported by VulDBMedium 5.3
A vulnerability was found in Shandong Star Measurement and Control Equipment Heating Network Wireless Monitoring System 5.6.2 and classified as critical. Affected by this issue is the function GetDataKindByType of the file /DataSrvs/UCCGSrv.asmx. The manipulation leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.
- Product
- Heating Network Wireless Monitoring System
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 11, 2024A vulnerability, which was classified as problematic, was found in JFinalCMS up to 20240903.CVE-2024-8694 · Other software · jfinalcms_project · reported by VulDBMedium 5.1
A vulnerability, which was classified as problematic, was found in JFinalCMS up to 20240903. This affects the function update of the file /admin/template/update of the component com.cms.controller.admin.TemplateController. The manipulation of the argument fileName leads to path traversal. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
- Product
- jfinalcms
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 11, 2024A vulnerability, which was classified as problematic, has been found in Kaon CG3000 1.01.43.CVE-2024-8693 · Other software · Kaon · reported by VulDBMedium 5.1
A vulnerability, which was classified as problematic, has been found in Kaon CG3000 1.01.43. Affected by this issue is some unknown functionality of the component dhcpcd Command Handler. The manipulation of the argument -h with the input <script>alert('XSS')</script> leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
- Product
- CG3000
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 11, 2024A vulnerability classified as critical was found in TDuckCloud TDuckPro up to 6.3.CVE-2024-8692 · Other software · TDuckCloud · reported by VulDBMedium 6.9
A vulnerability classified as critical was found in TDuckCloud TDuckPro up to 6.3. Affected by this vulnerability is an unknown functionality. The manipulation leads to weak password recovery. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
- Product
- TDuckPro
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 8, 2024A vulnerability classified as critical was found in TOTOLINK AC1200 T8 4.1.5cu.861_B20230220.CVE-2024-8580 · Other software · TOTOLINK · reported by VulDBCritical 9.2
A vulnerability classified as critical was found in TOTOLINK AC1200 T8 4.1.5cu.861_B20230220. This vulnerability affects unknown code of the file /etc/shadow.sample. The manipulation leads to use of hard-coded password. The attack can be initiated remotely. The complexity of an attack is rather high. The exploitation appears to be difficult. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
- Product
- AC1200 T8
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 8, 2024A vulnerability classified as critical has been found in TOTOLINK AC1200 T8 4.1.5cu.861_B20230220.CVE-2024-8579 · Other software · TOTOLINK · reported by VulDBHigh 8.7
A vulnerability classified as critical has been found in TOTOLINK AC1200 T8 4.1.5cu.861_B20230220. This affects the function setWiFiRepeaterCfg of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument password leads to buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
- Product
- AC1200 T8
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 8, 2024A vulnerability was found in TOTOLINK AC1200 T8 4.1.5cu.861_B20230220 and classified as critical.CVE-2024-8575 · Other software · TOTOLINK · reported by VulDBHigh 8.7
A vulnerability was found in TOTOLINK AC1200 T8 4.1.5cu.861_B20230220 and classified as critical. This issue affects the function setWiFiScheduleCfg of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument desc leads to buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
- Product
- AC1200 T8
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Where this comes from: the exploited list is CISA’s Known Exploited Vulnerabilities catalog. Everything else is the whole National Vulnerability Database, where each record is published by the team that found the bug (Wordfence, Patchstack, WPScan, the vendors themselves and others); we show who. Exploit odds are FIRST’s EPSS, updated daily. Titles and categories are ours, so check the linked record before acting on a detail. For a write-up of the big ones, see our advisories. Every vendor, and every WordPress plugin and theme with a recorded flaw, also has its own page. All of it is free to reuse as JSON, CSV or RSS.
Weekly security brief
The flaws that hit local websites, every Friday.
One short email: what got exploited this week, which WordPress plugins broke, and what to check. Unsubscribe in one click.
Tell us what you're building.
A website, your marketing, a security check, an app, or the thing you've been running out of a spreadsheet for three years. A few lines is plenty.
Not ready to talk yet? Run the free website check and see what Google sees.