6.9

CVSS4.0

CVE-2024-7505 - itsourcecode Bike Delivery System contact_us_action.php sql injection

A vulnerability, which was classified as critical, was found in itsourcecode Bike Delivery System 1.0. Affected is an unknown function of the file contact_us_action.php. The manipulation of the argument name leads to sql injection. It is possible to launch the attack remotely. The exploit has been …

πŸ“… Published: Aug. 6, 2024, 4 a.m. πŸ”„ Last Modified: Sept. 11, 2024, 7:53 p.m.

6.5

CVSS3.1

CVE-2024-28962 -

Dell Command | Update, Dell Update, and Alienware Update UWP, versions prior to 5.4, contain an Exposed Dangerous Method or Function vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to denial of service.

πŸ“… Published: Aug. 6, 2024, 3:59 a.m. πŸ”„ Last Modified: Aug. 19, 2024, 5:12 p.m.

4.2

CVSS3.1

CVE-2024-7009 - Calibre SQL Injection

Unsanitized user-input in Calibre <= 7.15.0 allow users with permissions to perform full-text searches to achieve SQL injection on the SQLite database.

πŸ“… Published: Aug. 6, 2024, 3:40 a.m. πŸ”„ Last Modified: Aug. 19, 2024, 5:18 p.m.

5.4

CVSS3.1

CVE-2024-7008 - Calibre Reflected Cross-Site Scripting (XSS)

Unsanitized user-input in Calibre <= 7.15.0 allow attackers to perform reflected cross-site scripting.

πŸ“… Published: Aug. 6, 2024, 3:40 a.m. πŸ”„ Last Modified: Aug. 19, 2024, 5:19 p.m.

9.8

CVSS3.1

CVE-2024-6782 - Calibre Remote Code Execution

Improper access control in Calibre 6.9.0 ~ 7.14.0 allow unauthenticated attackers to achieve remote code execution.

πŸ“… Published: Aug. 6, 2024, 3:39 a.m. πŸ”„ Last Modified: April 15, 2026, 12:35 a.m.

7.5

CVSS3.1

CVE-2024-6781 - Calibre Arbitrary File Read

Path traversal in Calibre <= 7.14.0 allow unauthenticated attackers to achieve arbitrary file read.

πŸ“… Published: Aug. 6, 2024, 3:38 a.m. πŸ”„ Last Modified: Aug. 19, 2024, 5:15 p.m.

5.3

CVSS4.0

CVE-2024-7500 - itsourcecode Airline Reservation System admin_class.php save_settings unrestricted upload

A vulnerability was found in itsourcecode Airline Reservation System 1.0. It has been rated as critical. Affected by this issue is the function save_settings of the file admin/admin_class.php. The manipulation of the argument img leads to unrestricted upload. The attack may be launched remotely. Th…

πŸ“… Published: Aug. 6, 2024, 3:31 a.m. πŸ”„ Last Modified: Sept. 11, 2024, 8:07 p.m.

5.3

CVSS4.0

CVE-2024-7499 - itsourcecode Airline Reservation System flights.php sql injection

A vulnerability was found in itsourcecode Airline Reservation System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file flights.php. The manipulation of the argument departure_airport_id leads to sql injection. The attack can be launched re…

πŸ“… Published: Aug. 6, 2024, 3 a.m. πŸ”„ Last Modified: Aug. 19, 2024, 4:51 p.m.

6.9

CVSS4.0

CVE-2024-7498 - itsourcecode Airline Reservation System Admin Login Page login.php login2 sql injection

A vulnerability was found in itsourcecode Airline Reservation System 1.0. It has been classified as critical. Affected is the function login/login2 of the file /admin/login.php of the component Admin Login Page. The manipulation of the argument username leads to sql injection. It is possible to lau…

πŸ“… Published: Aug. 6, 2024, 2:31 a.m. πŸ”„ Last Modified: Aug. 19, 2024, 4:50 p.m.

8.6

CVSS3.1

CVE-2024-5828 - EL Injection Vulnerability in Hitachi Tuning Manager

Expression Language Injection vulnerability in Hitachi Tuning Manager on Windows, Linux, Solaris allows Code Injection.This issue affects Hitachi Tuning Manager: before 8.8.7-00.

πŸ“… Published: Aug. 6, 2024, 2:21 a.m. πŸ”„ Last Modified: Jan. 8, 2025, 9:25 p.m.
Total resulsts: 349182
Page 8945 of 34,919
Β« previous page Β» next page
Filters