Latest CVE Feed
-
9.8
CRITICALCVE-2024-12935
A vulnerability classified as critical was found in code-projects Simple Admin Panel 1.0. This vulnerability affects unknown code of the file editItemForm.php. The manipulation of the argument record leads to sql injection. The attack can be initiated rem... Read more
Affected Products : simple_admin_panel- Published: Dec. 26, 2024
- Modified: Apr. 17, 2025
-
8.8
HIGHCVE-2024-12934
A vulnerability classified as critical has been found in code-projects Simple Admin Panel 1.0. This affects an unknown part of the file updateItemController.php. The manipulation of the argument p_desk leads to sql injection. It is possible to initiate th... Read more
Affected Products : simple_admin_panel- Published: Dec. 26, 2024
- Modified: Apr. 03, 2025
-
5.4
MEDIUMCVE-2024-12933
A vulnerability was found in code-projects Simple Admin Panel 1.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the file updateItemController.php. The manipulation of the argument p_name/p_desc leads to cross s... Read more
Affected Products : simple_admin_panel- Published: Dec. 26, 2024
- Modified: Apr. 03, 2025
-
9.3
CRITICALCVE-2024-12652
A Improper Control of Generation of Code ('Code Injection') vulnerability in groovy script function in SmartRobot′s Conversational AI Platform before v7.2.0 allows remote authenticated users to perform arbitrary system commands via Groovy code.... Read more
Affected Products :- Published: Dec. 26, 2024
- Modified: Dec. 26, 2024
-
5.3
MEDIUMCVE-2024-12932
A vulnerability was found in code-projects Simple Admin Panel 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file addSizeController.php. The manipulation of the argument size leads to cross site... Read more
Affected Products : simple_admin_panel- Published: Dec. 26, 2024
- Modified: Apr. 03, 2025
-
8.8
HIGHCVE-2024-12931
A vulnerability was found in code-projects Simple Admin Panel 1.0. It has been classified as critical. Affected is an unknown function of the file /addCatController.php. The manipulation of the argument size leads to sql injection. It is possible to launc... Read more
Affected Products : simple_admin_panel- Published: Dec. 26, 2024
- Modified: Apr. 03, 2025
-
5.3
MEDIUMCVE-2024-12930
A vulnerability was found in code-projects Simple Admin Panel 1.0 and classified as problematic. This issue affects some unknown processing of the file addCatController.php. The manipulation of the argument c_name leads to cross site scripting. The attack... Read more
Affected Products : simple_admin_panel- Published: Dec. 26, 2024
- Modified: Apr. 03, 2025
-
8.8
HIGHCVE-2024-12929
A vulnerability has been found in code-projects Student Management System 1.0.00 and classified as critical. This vulnerability affects unknown code of the file /addCatController.php. The manipulation of the argument size leads to sql injection. The attac... Read more
Affected Products : student_management_system- Published: Dec. 26, 2024
- Modified: Apr. 03, 2025
-
8.8
HIGHCVE-2024-12928
A vulnerability, which was classified as critical, was found in code-projects Simple Admin Panel 1.0. This affects an unknown part. The manipulation of the argument c_name leads to sql injection. It is possible to initiate the attack remotely. The exploit... Read more
Affected Products : simple_admin_panel- Published: Dec. 26, 2024
- Modified: Apr. 03, 2025
-
9.8
CRITICALCVE-2024-12927
A vulnerability, which was classified as critical, has been found in 1000 Projects Attendance Tracking Management System 1.0. Affected by this issue is some unknown functionality of the file /faculty/check_faculty_login.php. The manipulation of the argume... Read more
Affected Products : attendance_tracking_management_system- Published: Dec. 25, 2024
- Modified: Apr. 17, 2025
-
8.8
HIGHCVE-2024-12926
A vulnerability classified as critical was found in Codezips Project Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /pages/forms/advanced.php. The manipulation of the argument name leads to sql injection. The... Read more
Affected Products : project_management_system- Published: Dec. 25, 2024
- Modified: Apr. 03, 2025
-
6.5
MEDIUMCVE-2024-56430
OpenFHE through 1.2.3 has a NULL pointer dereference in BinFHEContext::EvalFloor in lib/binfhe-base-scheme.cpp.... Read more
Affected Products :- Published: Dec. 25, 2024
- Modified: Aug. 27, 2025
-
9.8
CRITICALCVE-2024-56431
oc_huff_tree_unpack in huffdec.c in libtheora in Theora through 1.0 7180717 has an invalid negative left shift. NOTE: this is disputed by third parties because there is no evidence of a security impact, e.g., an application would not crash.... Read more
- Published: Dec. 25, 2024
- Modified: Apr. 25, 2025
-
6.5
MEDIUMCVE-2024-52543
Dell NativeEdge, version(s) 2.1.0.0, contain(s) a Creation of Temporary File With Insecure Permissions vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Information disclosure.... Read more
Affected Products : nativeedge_orchestrator- Published: Dec. 25, 2024
- Modified: Jan. 29, 2025
-
5.4
MEDIUMCVE-2024-52534
Dell ECS, version(s) prior to ECS 3.8.1.3, contain(s) an Authentication Bypass by Capture-replay vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Session theft.... Read more
Affected Products : elastic_cloud_storage- Published: Dec. 25, 2024
- Modified: Jan. 21, 2025
-
7.5
HIGHCVE-2024-53291
Dell NativeEdge, version(s) 2.1.0.0, contain(s) an Exposure of Sensitive Information Through Metadata vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Information disclosure.... Read more
Affected Products : nativeedge_orchestrator- Published: Dec. 25, 2024
- Modified: Jan. 29, 2025
-
5.5
MEDIUMCVE-2024-52906
IBM AIX 7.2, 7.3, VIOS 3.1, and 4.1 could allow a non-privileged local user to exploit a vulnerability in the TCP/IP kernel extension to cause a denial of service.... Read more
- Published: Dec. 25, 2024
- Modified: Jul. 25, 2025
-
8.8
HIGHCVE-2024-52535
Dell SupportAssist for Home PCs versions 4.6.1 and prior and Dell SupportAssist for Business PCs versions 4.5.0 and prior, contain a symbolic link (symlink) attack vulnerability in the software remediation component. A low-privileged authenticated user co... Read more
- Published: Dec. 25, 2024
- Modified: Jan. 29, 2025
-
7.8
HIGHCVE-2024-47978
Dell NativeEdge, version(s) 2.1.0.0, contain(s) an Execution with Unnecessary Privileges vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges.... Read more
Affected Products : nativeedge_orchestrator- Published: Dec. 25, 2024
- Modified: Jan. 29, 2025
-
5.5
MEDIUMCVE-2024-47102
IBM AIX 7.2, 7.3, VIOS 3.1, and 4.1 could allow a non-privileged local user to exploit a vulnerability in the AIX perfstat kernel extension to cause a denial of service.... Read more
- Published: Dec. 25, 2024
- Modified: Jul. 25, 2025