8.8

CVSS3.1

CVE-2024-11949 - GFI Archiver Store Service Deserialization of Untrusted Data Remote Code Execution Vulnerability

GFI Archiver Store Service Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GFI Archiver. Authentication is required to exploit this vulnerability. The specific flaw exists withi…

πŸ“… Published: Dec. 11, 2024, 9:55 p.m. πŸ”„ Last Modified: Dec. 13, 2024, 7:28 p.m.

9.8

CVSS3.1

CVE-2024-11948 - GFI Archiver Telerik Web UI Remote Code Execution Vulnerability

GFI Archiver Telerik Web UI Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GFI Archiver. Authentication is not required to exploit this vulnerability. The specific flaw exists within the product installer. The …

πŸ“… Published: Dec. 11, 2024, 9:55 p.m. πŸ”„ Last Modified: Dec. 13, 2024, 7:32 p.m.

8.8

CVSS3.1

CVE-2024-11947 - GFI Archiver Core Service Deserialization of Untrusted Data Remote Code Execution Vulnerability

GFI Archiver Core Service Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GFI Archiver. Authentication is required to exploit this vulnerability. The specific flaw exists within…

πŸ“… Published: Dec. 11, 2024, 9:54 p.m. πŸ”„ Last Modified: Dec. 13, 2024, 7:33 p.m.

8.8

CVSS3.1

CVE-2024-11950 - XnSoft XnView Classic RWZ File Parsing Integer Underflow Remote Code Execution Vulnerability

XnSoft XnView Classic RWZ File Parsing Integer Underflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of XnSoft XnView Classic. User interaction is required to exploit this vulnerability in that the target must v…

πŸ“… Published: Dec. 11, 2024, 9:54 p.m. πŸ”„ Last Modified: Aug. 15, 2025, 6:31 p.m.

5.3

CVSS4.0

CVE-2024-12488 - code-projects Online Class and Exam Scheduling System subject_update.php sql injection

A vulnerability was found in code-projects Online Class and Exam Scheduling System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /pages/subject_update.php. The manipulation of the argument id leads to sql injection. The attack may be launched remot…

πŸ“… Published: Dec. 11, 2024, 9:31 p.m. πŸ”„ Last Modified: Dec. 12, 2024, 5:37 p.m.

5.3

CVSS4.0

CVE-2024-12487 - code-projects Online Class and Exam Scheduling System room_update.php sql injection

A vulnerability has been found in code-projects Online Class and Exam Scheduling System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /pages/room_update.php. The manipulation of the argument id leads to sql injection. The attack can be launch…

πŸ“… Published: Dec. 11, 2024, 9 p.m. πŸ”„ Last Modified: Dec. 12, 2024, 5:36 p.m.

5.3

CVSS4.0

CVE-2024-12486 - code-projects Online Class and Exam Scheduling System rank_update.php sql injection

A vulnerability, which was classified as critical, was found in code-projects Online Class and Exam Scheduling System 1.0. Affected is an unknown function of the file /pages/rank_update.php. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. Th…

πŸ“… Published: Dec. 11, 2024, 8:31 p.m. πŸ”„ Last Modified: Dec. 12, 2024, 5:35 p.m.

5.3

CVSS4.0

CVE-2024-12485 - code-projects Online Class and Exam Scheduling System department.php sql injection

A vulnerability, which was classified as critical, has been found in code-projects Online Class and Exam Scheduling System 1.0. This issue affects some unknown processing of the file /pages/department.php. The manipulation of the argument id leads to sql injection. The attack may be initiated remot…

πŸ“… Published: Dec. 11, 2024, 8:31 p.m. πŸ”„ Last Modified: Dec. 12, 2024, 5:34 p.m.

6.9

CVSS4.0

CVE-2024-12484 - Codezips Technical Discussion Forum signuppost.php sql injection

A vulnerability classified as critical was found in Codezips Technical Discussion Forum 1.0. This vulnerability affects unknown code of the file /signuppost.php. The manipulation of the argument Username leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to…

πŸ“… Published: Dec. 11, 2024, 8 p.m. πŸ”„ Last Modified: Dec. 12, 2024, 5:34 p.m.

6.3

CVSS4.0

CVE-2024-12483 - Dromara UJCMS User ID id authorization

A vulnerability classified as problematic has been found in Dromara UJCMS up to 9.6.3. This affects an unknown part of the file /users/id of the component User ID Handler. The manipulation leads to authorization bypass. It is possible to initiate the attack remotely. The complexity of an attack is …

πŸ“… Published: Dec. 11, 2024, 8 p.m. πŸ”„ Last Modified: Dec. 13, 2024, 5:12 p.m.
Total resulsts: 343448
Page 6945 of 34,345
Β« previous page Β» next page
Filters