NVD - NVD Dashboard (2024)

CVE-2024-8762 - A vulnerability was found in code-projects Crud Operation System 1.0. It has been classified as critical. This affects an unknown part of the file /updatedata.php. The manipulation of the argument sid leads to sql injection. It is possible to init...read CVE-2024-8762
Published:September 12, 2024; 9:15:02 PM -0400

CVE-2024-8754 - An issue has been discovered in GitLab EE/CE affecting all versions from 16.9.7 prior to 17.1.7, 17.2 prior to 17.2.5, and 17.3 prior to 17.3.2. An improper input validation error allows attacker to squat on accounts via linking arbitrary unclaime...read CVE-2024-8754
Published:September 12, 2024; 1:15:06 PM -0400

CVE-2024-8640 - An issue has been discovered in GitLab EE affecting all versions starting from 16.11 prior to 17.1.7, from 17.2 prior to 17.2.5, and from 17.3 prior to 17.3.2. Due to incomplete input filtering, it was possible to inject commands into a connected ...read CVE-2024-8640
Published:September 12, 2024; 1:15:06 PM -0400

CVE-2024-8635 - A server-side request forgery issue has been discovered in GitLab EE affecting all versions starting from 16.8 prior to 17.1.7, from 17.2 prior to 17.2.5, and from 17.3 prior to 17.3.2. It was possible for an attacker to make requests to internal ...read CVE-2024-8635
Published:September 12, 2024; 1:15:06 PM -0400

CVE-2024-8631 - A privilege escalation issue has been discovered in GitLab EE affecting all versions starting from 16.6 prior to 17.1.7, from 17.2 prior to 17.2.5, and from 17.3 prior to 17.3.2. A user assigned the Admin Group Member custom role could have escala...read CVE-2024-8631
Published:September 12, 2024; 1:15:06 PM -0400

CVE-2024-8124 - An issue was discovered in GitLab CE/EE affecting all versions starting from 16.4 prior to 17.1.7, starting from 17.2 prior to 17.2.5, starting from 17.3 prior to 17.3.2 which could cause Denial of Service via sending a large `glm_source` parameter.
Published:September 12, 2024; 1:15:06 PM -0400

CVE-2024-6446 - An issue has been discovered in GitLab affecting all versions starting from 17.1 to 17.1.7, 17.2 prior to 17.2.5 and 17.3 prior to 17.3.2. A crafted URL could be used to trick a victim to trust an attacker controlled application.
Published:September 12, 2024; 1:15:05 PM -0400

CVE-2024-6389 - An issue was discovered in GitLab-CE/EE affecting all versions starting with 17.0 before 17.1.7, 17.2 before 17.2.5, and 17.3 before 17.3.2. An attacker as a guest user was able to access commit information via the release Atom endpoint, contrary ...read CVE-2024-6389
Published:September 12, 2024; 1:15:05 PM -0400

CVE-2024-5435 - An issue has been discovered discovered in GitLab EE/CE affecting all versions starting from 15.10 before 17.1.7, all versions starting from 17.2 before 17.2.5, all versions starting from 17.3 before 17.3.2 will disclose user password from reposit...read CVE-2024-5435
Published:September 12, 2024; 1:15:05 PM -0400

CVE-2024-4660 - An issue has been discovered in GitLab EE affecting all versions starting from 11.2 before 17.1.7, all versions starting from 17.2 before 17.2.5, all versions starting from 17.3 before 17.3.2. It was possible for a guest to read the source code of...read CVE-2024-4660
Published:September 12, 2024; 1:15:04 PM -0400

CVE-2024-4612 - An issue has been discovered in GitLab EE affecting all versions starting from 12.9 before 17.1.7, 17.2 before 17.2.5, and 17.3 before 17.3.2. Under certain conditions an open redirect vulnerability could allow for an account takeover by breaking ...read CVE-2024-4612
Published:September 12, 2024; 1:15:04 PM -0400

CVE-2024-2743 - An issue was discovered in GitLab-EE starting with version 13.3 before 17.1.7, 17.2 before 17.2.5, and 17.3 before 17.3.2 that would allow an attacker to modify an on-demand DAST scan without permissions and leak variables.
Published:September 12, 2024; 1:15:04 PM -0400

CVE-2024-7928 - A vulnerability, which was classified as problematic, has been found in FastAdmin up to 1.3.3.20220121. Affected by this issue is some unknown functionality of the file /index/ajax/lang. The manipulation of the argument lang leads to path traversa...read CVE-2024-7928
Published:August 19, 2024; 6:15:06 PM -0400

CVE-2024-43931 - Deserialization of Untrusted Data vulnerability in eyecix JobSearch allows Object Injection.This issue affects JobSearch: from n/a through 2.5.3.
Published:August 29, 2024; 11:15:29 AM -0400

CVE-2024-27122 - A cross-site scripting (XSS) vulnerability has been reported to affect Notes Station 3. If exploited, the vulnerability could allow authenticated users to inject malicious code via a network.We have already fixed the vulnerability in the followi...read CVE-2024-27122
Published:September 06, 2024; 1:15:14 PM -0400

CVE-2023-34974 - An OS command injection vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow users to execute commands via a network.QuTScloud, QVR, QES are not affected.We have already f...read CVE-2023-34974
Published:September 06, 2024; 1:15:11 PM -0400

CVE-2024-42037 - Vulnerability of uncaught exceptions in the Graphics moduleImpact: Successful exploitation of this vulnerability may affect service confidentiality.
Published:August 08, 2024; 6:15:08 AM -0400

CVE-2024-32762 - A cross-site scripting (XSS) vulnerability has been reported to affect QuLog Center. If exploited, the vulnerability could allow users to inject malicious code via a network.We have already fixed the vulnerability in the following versions:QuLo...read CVE-2024-32762
Published:September 06, 2024; 1:15:15 PM -0400

CVE-2024-42036 - Access permission verification vulnerability in the Notepad moduleImpact: Successful exploitation of this vulnerability may affect service confidentiality.
Published:August 08, 2024; 6:15:07 AM -0400

CVE-2024-43132 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WPWeb Elite Docket (WooCommerce Collections / Wishlist / Watchlist) allows SQL Injection.This issue affects Docket (WooCommerce Collections / Wis...read CVE-2024-43132
Published:August 29, 2024; 11:15:28 AM -0400