|
304681
|
8.8 |
HIGH
Network
|
vice
|
webopac
|
Webopac from Grand Vice info does not properly validate uploaded file types, allowing remote attackers with regular privileges to upload and execute webshells, which could lead to arbitrary code exec…
|
CWE-434
Unrestricted Upload of File with Dangerous Type
|
CVE-2024-11017
|
2024-11-19 03:47 |
2024-11-11 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
304682
|
7.7 |
HIGH
Network
|
adobe
|
commerce magento
|
Adobe Commerce versions 3.2.5 and earlier are affected by a Server-Side Request Forgery (SSRF) vulnerability that could lead to a security feature bypass. A low privileged attacker could exploit this…
|
CWE-918
Server-Side Request Forgery (SSRF)
|
CVE-2024-49521
|
2024-11-19 03:44 |
2024-11-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
304683
|
8.8 |
HIGH
Network
|
oretnom23
|
online_veterinary_appointment_system
|
A vulnerability classified as critical was found in SourceCodester Online Veterinary Appointment System 1.0. This vulnerability affects unknown code of the file /admin/services/view_service.php. The …
|
CWE-89
SQL Injection
|
CVE-2024-10990
|
2024-11-19 03:42 |
2024-11-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
304684
|
7.8 |
HIGH
Local
|
adobe
|
animate
|
Animate versions 23.0.7, 24.0.4 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue…
|
CWE-416
Use After Free
|
CVE-2024-49526
|
2024-11-19 03:41 |
2024-11-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
304685
|
8.8 |
HIGH
Network
|
codezips
|
online_institute_management_system
|
A vulnerability has been found in Codezips Online Institute Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /edit_user.php. Th…
|
CWE-434
Unrestricted Upload of File with Dangerous Type
|
CVE-2024-10994
|
2024-11-19 03:41 |
2024-11-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
304686
|
8.8 |
HIGH
Network
|
codezips
|
online_institute_management_system
|
A vulnerability, which was classified as critical, was found in Codezips Online Institute Management System 1.0. Affected is an unknown function of the file /manage_website.php. The manipulation of t…
|
CWE-434
Unrestricted Upload of File with Dangerous Type
|
CVE-2024-10993
|
2024-11-19 03:41 |
2024-11-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
304687
|
9.8 |
CRITICAL
Network
|
codezips
|
hospital_appointment_system
|
A vulnerability, which was classified as critical, has been found in Codezips Hospital Appointment System 1.0. This issue affects some unknown processing of the file /editBranchResult.php. The manipu…
|
CWE-89
SQL Injection
|
CVE-2024-10991
|
2024-11-19 03:41 |
2024-11-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
304688
|
5.5 |
MEDIUM
Local
|
adobe
|
animate
|
Animate versions 23.0.7, 24.0.4 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to byp…
|
CWE-125
Out-of-bounds Read
|
CVE-2024-49527
|
2024-11-19 03:39 |
2024-11-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
304689
|
- |
|
-
|
-
|
A cross-site scripting (XSS) vulnerability in LemonLDAP::NG before 2.20.1 allows remote attackers to inject arbitrary web script or HTML via the url parameter of the upgrade session confirmation page…
|
-
|
CVE-2024-52947
|
2024-11-19 03:35 |
2024-11-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
304690
|
- |
|
-
|
-
|
In Flagsmith before 2.134.1, the get_document endpoint is not correctly protected by permissions.
|
-
|
CVE-2024-52872
|
2024-11-19 03:35 |
2024-11-17 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|