-
CVE-2024-11846 – Apache Struts Reflected Cross-Site Scripting
CVE ID : CVE-2024-11846 Published : Jan. 1, 2025, 6:15 a.m. | 1 day, 3 hours ago Description : The does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin Severity: 0.0 | NA Visit the…
-
CVE-2025-0168 – Code-projects Job Recruitment SQL Injection Vulnerability
CVE ID : CVE-2025-0168 Published : Jan. 1, 2025, 2:15 p.m. | 19 hours, 37 minutes ago Description : A vulnerability classified as critical has been found in code-projects Job Recruitment 1.0. This affects an unknown part of the file /_parse/_feedback_system.php. The manipulation of the argument person leads to sql injection. It is possible to initiate the…
-
CVE-2024-56829 – Huang Yaoshi Pharmaceutical File Upload Vulnerability (Arbitrary File Write)
CVE ID : CVE-2024-56829 Published : Jan. 2, 2025, 4:15 a.m. | 5 hours, 37 minutes ago Description : Huang Yaoshi Pharmaceutical Management Software through 16.0 allows arbitrary file upload via a .asp filename in the fileName element of the UploadFile element in a SOAP request to /XSDService.asmx. Severity: 10.0 | CRITICAL Visit the link for more…
-
CVE-2025-22214 – Landray EIS Web Application SQL Injection
CVE ID : CVE-2025-22214 Published : Jan. 2, 2025, 4:15 a.m. | 5 hours, 37 minutes ago Description : Landray EIS 2001 through 2006 allows Message/fi_message_receiver.aspx?replyid= SQL injection. Severity: 4.3 | MEDIUM Visit the link for more details, such as CVSS details, affected products, timeline, and more…
-
CVE-2024-23435 – Apache Cassandra SQL Injection
CVE ID : CVE-2024-23435 Published : Jan. 1, 2025, 12:15 a.m. | 1 day, 9 hours ago Description : Rejected reason: To maintain compliance with CNA rules, we have rejected this CVE record because it has not been used. Severity: 0.0 | NA Visit the link for more details, such as CVSS details, affected products, timeline, and…
-
CVE-2024-23436 – Dell EMC iDRAC Local File Inclusion Vulnerability
CVE ID : CVE-2024-23436 Published : Jan. 1, 2025, 12:15 a.m. | 1 day, 9 hours ago Description : Rejected reason: To maintain compliance with CNA rules, we have rejected this CVE record because it has not been used. Severity: 0.0 | NA Visit the link for more details, such as CVSS details, affected products, timeline, and…
-
CVE-2024-23437 – Alexa Echo Sound Recognition Audio Buffer Overwrite Vulnerability
CVE ID : CVE-2024-23437 Published : Jan. 1, 2025, 12:15 a.m. | 1 day, 9 hours ago Description : Rejected reason: To maintain compliance with CNA rules, we have rejected this CVE record because it has not been used. Severity: 0.0 | NA Visit the link for more details, such as CVSS details, affected products, timeline, and…
-
CVE-2024-23438 – Apache Struts Server-Side Request Forgery (SSRF)
CVE ID : CVE-2024-23438 Published : Jan. 1, 2025, 12:15 a.m. | 1 day, 9 hours ago Description : Rejected reason: To maintain compliance with CNA rules, we have rejected this CVE record because it has not been used. Severity: 0.0 | NA Visit the link for more details, such as CVSS details, affected products, timeline, and…
-
CVE-2024-56020 – SvegliaT Buttons Cross-Site Scripting (XSS)
CVE ID : CVE-2024-56020 Published : Jan. 1, 2025, 12:15 a.m. | 1 day, 9 hours ago Description : Improper Neutralization of Input During Web Page Generation (‘Cross-site Scripting’) vulnerability in Mario Di Pasquale SvegliaT Buttons allows Stored XSS.This issue affects SvegliaT Buttons: from n/a through 1.3.0. Severity: 6.5 | MEDIUM Visit the link for more details,…
-
CVE-2024-23430 – Boeing Remote Code Execution
CVE ID : CVE-2024-23430 Published : Jan. 1, 2025, 12:15 a.m. | 1 day, 9 hours ago Description : Rejected reason: To maintain compliance with CNA rules, we have rejected this CVE record because it has not been used. Severity: 0.0 | NA Visit the link for more details, such as CVSS details, affected products, timeline, and…