Missing Authorization vulnerability in Envira Gallery Team Envira Photo Gallery allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Envira Photo Gallery: from n/...

CWE-8622024

CVE-2024-4389

HIGH

CVSS:8.8(High)

The Slider and Carousel slider by Depicter plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the uploadFile function in all versions up to, and includ...

CWE-4342024

CVE-2024-43847

HIGH

CVSS:8.8(High)

In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: fix invalid memory access while processing fragmented packets The monitor ring and the reo reinject ring share the sam...

NVD-CWE-Other2024

CVE-2024-43804

HIGH

CVSS:8.8(High)

Roxy-WI is a web interface for managing Haproxy, Nginx, Apache and Keepalived servers. An OS Command Injection vulnerability allows any authenticated user on the application to execute arbitrary code ...

CWE-782024

CVE-2024-43778

HIGH

CVSS:8.8(High)

OS command injection vulnerability in multiple digital video recorders provided by TAKENAKA ENGINEERING CO., LTD. allows a remote authenticated attacker to execute an arbitrary OS command on the devic...

CWE-782024

CVE-2024-43776

HIGH

CVSS:8.8(High)

SQL Injection in mock exam function of Easytest Online Test Platform ver.24E01 and earlier allow remote authenticated users to execute arbitrary SQL commands via the qlevel parameter.

CWE-892024

CVE-2024-43775

HIGH

CVSS:8.8(High)

SQL Injection in search course titles function of Easytest Online Test Platform ver.24E01 and earlier allow remote authenticated users to execute arbitrary SQL commands via the search parameter.

CWE-892024

CVE-2024-43774

HIGH

CVSS:8.8(High)

SQL Injection in download personal learning course function of Easytest Online Test Platform ver.24E01 and earlier allow remote authenticated users to execute arbitrary SQL commands via the uid parame...

CWE-892024

CVE-2024-43771

HIGH

CVSS:8.8(High)

In gatts_process_read_req of gatt_sr.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to remote (proximal/adjacent) code execution with no additional executio...

CWE-942024

CVE-2024-43770

HIGH

CVSS:8.8(High)

In gatts_process_find_info of gatt_sr.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to remote (proximal/adjacent) code execution with no additional executi...

CWE-942024

CVE-2024-43767

HIGH

CVSS:8.8(High)

In prepare_to_draw_into_mask of SkBlurMaskFilterImpl.cpp, there is a possible heap overflow due to improper input validation. This could lead to remote code execution with no additional execution priv...

CWE-942024

CVE-2024-43689

HIGH

CVSS:8.8(High)

Stack-based buffer overflow vulnerability exists in ELECOM wireless access points. By processing a specially crafted HTTP request, arbitrary code may be executed.

CWE-1212024

CVE-2024-43684

HIGH

CVSS:8.8(High)

Cross-Site Request Forgery (CSRF) vulnerability in Microchip TimeProvider 4100 allows Cross Site Request Forgery, Cross-Site Scripting (XSS).This issue affects TimeProvider 4100: from 1.0.

CWE-3522024