6.3

CVSS3.1

CVE-2024-35082 -

J2EEFAST v2.7.0 was discovered to contain a SQL injection vulnerability via the findPage function in SysOperLogMapper.xml.

📅 Published: May 23, 2024, 4:58 p.m. 🔄 Last Modified: April 16, 2025, 3:28 p.m.

6.8

CVSS3.1

CVE-2024-5143 -

A user with device administrative privileges can change existing SMTP server settings on the device, without having to re-enter SMTP server credentials. By redirecting send-to-email traffic to the new server, the original SMTP server credentials may potentially be exposed.

📅 Published: May 23, 2024, 4:58 p.m. 🔄 Last Modified: Jan. 26, 2026, 1:53 p.m.

9.8

CVSS3.1

CVE-2024-35084 -

J2EEFAST v2.7.0 was discovered to contain a SQL injection vulnerability via the findPage function in SysMsgPushMapper.xml.

📅 Published: May 23, 2024, 4:57 p.m. 🔄 Last Modified: April 16, 2025, 3:32 p.m.

5.4

CVSS3.1

CVE-2024-35085 -

J2EEFAST v2.7.0 was discovered to contain a SQL injection vulnerability via the findPage function in ProcessDefinitionMapper.xml.

📅 Published: May 23, 2024, 4:53 p.m. 🔄 Last Modified: April 16, 2025, 3:34 p.m.

7.6

CVSS3.1

CVE-2024-2301 -

Certain HP LaserJet Pro devices are potentially vulnerable to a Cross-Site Scripting (XSS) attack via the web management interface of the device.

📅 Published: May 23, 2024, 4:53 p.m. 🔄 Last Modified: Jan. 26, 2026, 2:02 p.m.

8.2

CVSS3.1

CVE-2024-35090 -

J2EEFAST v2.7.0 was discovered to contain a SQL injection vulnerability via the findPage function in SysUreportFileMapper.xml.

📅 Published: May 23, 2024, 4:52 p.m. 🔄 Last Modified: April 16, 2025, 3:35 p.m.

8.8

CVSS3.1

CVE-2024-35083 -

J2EEFAST v2.7.0 was discovered to contain a SQL injection vulnerability via the findPage function in SysLoginInfoMapper.xml.

📅 Published: May 23, 2024, 4:46 p.m. 🔄 Last Modified: April 16, 2025, 3:28 p.m.

8.6

CVSS3.1

CVE-2024-34936 -

A SQL injection vulnerability in /view/event1.php in Campcodes Complete Web-Based School Management System 1.0 allows an attacker to execute arbitrary SQL commands via the month parameter.

📅 Published: May 23, 2024, 4:34 p.m. 🔄 Last Modified: March 25, 2025, 5:19 p.m.

9.8

CVSS3.1

CVE-2024-34935 -

A SQL injection vulnerability in /view/conversation_history_admin.php in Campcodes Complete Web-Based School Management System 1.0 allows an attacker to execute arbitrary SQL commands via the conversation_id parameter.

📅 Published: May 23, 2024, 4:34 p.m. 🔄 Last Modified: March 25, 2025, 5:19 p.m.

9.8

CVSS3.1

CVE-2024-34934 -

A SQL injection vulnerability in /view/emarks_range_grade_update_form.php in Campcodes Complete Web-Based School Management System 1.0 allows an attacker to execute arbitrary SQL commands via the conversation_id parameter.

📅 Published: May 23, 2024, 4:33 p.m. 🔄 Last Modified: March 25, 2025, 5:19 p.m.
Total resulsts: 349182
Page 9688 of 34,919
« previous page » next page
Filters