CVE-2024-8146

CVE-2024-8146

Título es
CVE-2024-8146

Dom, 25/08/2024 – 08:15

Tipo
CWE-89

Gravedad v2.0
6.50

Gravedad 2.0 Txt
MEDIUM

Título en

CVE-2024-8146

Descripción en
A vulnerability has been found in code-projects Pharmacy Management System 1.0 and classified as critical. This vulnerability affects unknown code of the file /index.php?action=editSalesman. The manipulation of the argument id leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.

25/08/2024
25/08/2024
Vector CVSS:3.1
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

Vector CVSS:2.0
AV:N/AC:L/Au:S/C:P/I:P/A:P

Gravedad 3.1 (CVSS 3.1 Base Score)
6.30

Gravedad 3.1 Txt Gravedad 3.1 (CVSS 3.1 Base Score)
MEDIUM

Referencias

  • https://code-projects.org/

  • https://github.com/maqingnan/cve/blob/main/sql1.md

  • https://vuldb.com/?ctiid_275728=

  • https://vuldb.com/?id_275728=

  • https://vuldb.com/?submit_397417=

    • Enviar en el boletín
    Off

    CVE-2024-42340

    CVE-2024-42340

    Título es
    CVE-2024-42340

    Dom, 25/08/2024 – 08:15

    Tipo
    CWE-602

    Gravedad 2.0 Txt
    Pendiente de análisis

    Título en

    CVE-2024-42340

    Descripción en
    CyberArk – CWE-602: Client-Side Enforcement of Server-Side Security

    25/08/2024
    25/08/2024
    Vector CVSS:3.1
    CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L

    Gravedad 3.1 (CVSS 3.1 Base Score)
    8.30

    Gravedad 3.1 Txt Gravedad 3.1 (CVSS 3.1 Base Score)
    HIGH

    Referencias

  • https://www.gov.il/en/Departments/faq/cve_advisories

    • Enviar en el boletín
    Off

    CVE-2024-8147

    CVE-2024-8147

    Título es
    CVE-2024-8147

    Dom, 25/08/2024 – 09:15

    Tipo
    CWE-89

    Gravedad v2.0
    6.50

    Gravedad 2.0 Txt
    MEDIUM

    Título en

    CVE-2024-8147

    Descripción en
    A vulnerability was found in code-projects Pharmacy Management System 1.0 and classified as critical. This issue affects some unknown processing of the file /index.php?action=editPharmacist. The manipulation of the argument id leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.

    25/08/2024
    25/08/2024
    Vector CVSS:3.1
    CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

    Vector CVSS:2.0
    AV:N/AC:L/Au:S/C:P/I:P/A:P

    Gravedad 3.1 (CVSS 3.1 Base Score)
    6.30

    Gravedad 3.1 Txt Gravedad 3.1 (CVSS 3.1 Base Score)
    MEDIUM

    Referencias

  • https://code-projects.org/

  • https://github.com/maqingnan/cve/blob/main/sql2.md

  • https://vuldb.com/?ctiid_275729=

  • https://vuldb.com/?id_275729=

  • https://vuldb.com/?submit_397418=

    • Enviar en el boletín
    Off

    CVE-2024-8145

    CVE-2024-8145

    Título es
    CVE-2024-8145

    Dom, 25/08/2024 – 06:15

    Tipo
    CWE-80

    Gravedad v2.0
    3.30

    Gravedad 2.0 Txt
    LOW

    Título en

    CVE-2024-8145

    Descripción en
    A vulnerability, which was classified as problematic, has been found in ClassCMS 4.8. Affected by this issue is some unknown functionality of the file /index.php/admin of the component Article Handler. The manipulation of the argument Title leads to basic cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.

    25/08/2024
    25/08/2024
    Vector CVSS:3.1
    CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:N

    Vector CVSS:2.0
    AV:N/AC:L/Au:M/C:N/I:P/A:N

    Gravedad 3.1 (CVSS 3.1 Base Score)
    2.40

    Gravedad 3.1 Txt Gravedad 3.1 (CVSS 3.1 Base Score)
    LOW

    Referencias

  • https://github.com/acmglz/bug2_report/blob/main/classcms_url_jump.md

  • https://vuldb.com/?ctiid_275726=

  • https://vuldb.com/?id_275726=

  • https://vuldb.com/?submit_397219=

    • Enviar en el boletín
    Off

    CVE-2024-42337

    CVE-2024-42337

    Título es
    CVE-2024-42337

    Dom, 25/08/2024 – 07:15

    Tipo
    CWE-200

    Gravedad 2.0 Txt
    Pendiente de análisis

    Título en

    CVE-2024-42337

    Descripción en
    CyberArk – CWE-200: Exposure of Sensitive Information to an Unauthorized Actor

    25/08/2024
    25/08/2024
    Vector CVSS:3.1
    CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

    Gravedad 3.1 (CVSS 3.1 Base Score)
    4.30

    Gravedad 3.1 Txt Gravedad 3.1 (CVSS 3.1 Base Score)
    MEDIUM

    Referencias

  • https://www.gov.il/en/Departments/faq/cve_advisories

    • Enviar en el boletín
    Off

    CVE-2024-42338

    CVE-2024-42338

    Título es
    CVE-2024-42338

    Dom, 25/08/2024 – 07:15

    Tipo
    CWE-200

    Gravedad 2.0 Txt
    Pendiente de análisis

    Título en

    CVE-2024-42338

    Descripción en
    CyberArk – CWE-200: Exposure of Sensitive Information to an Unauthorized Actor

    25/08/2024
    25/08/2024
    Vector CVSS:3.1
    CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

    Gravedad 3.1 (CVSS 3.1 Base Score)
    4.30

    Gravedad 3.1 Txt Gravedad 3.1 (CVSS 3.1 Base Score)
    MEDIUM

    Referencias

  • https://www.gov.il/en/Departments/faq/cve_advisories

    • Enviar en el boletín
    Off

    CVE-2024-42339

    CVE-2024-42339

    Título es
    CVE-2024-42339

    Dom, 25/08/2024 – 07:15

    Tipo
    CWE-200

    Gravedad 2.0 Txt
    Pendiente de análisis

    Título en

    CVE-2024-42339

    Descripción en
    CyberArk – CWE-200: Exposure of Sensitive Information to an Unauthorized Actor

    25/08/2024
    25/08/2024
    Vector CVSS:3.1
    CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

    Gravedad 3.1 (CVSS 3.1 Base Score)
    4.30

    Gravedad 3.1 Txt Gravedad 3.1 (CVSS 3.1 Base Score)
    MEDIUM

    Referencias

  • https://www.gov.il/en/Departments/faq/cve_advisories

    • Enviar en el boletín
    Off

    CVE-2024-8138

    CVE-2024-8138

    Título es
    CVE-2024-8138

    Dom, 25/08/2024 – 01:15

    Tipo
    CWE-89

    Gravedad v2.0
    6.50

    Gravedad 2.0 Txt
    MEDIUM

    Título en

    CVE-2024-8138

    Descripción en
    A vulnerability, which was classified as critical, was found in code-projects Pharmacy Management System 1.0. Affected is the function editManager of the file /index.php?action=editManager of the component Parameter Handler. The manipulation of the argument id as part of String leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Continious delivery with rolling releases is used by this product. Therefore, no version details of affected nor updated releases are available.

    25/08/2024
    25/08/2024
    Vector CVSS:3.1
    CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

    Vector CVSS:2.0
    AV:N/AC:L/Au:S/C:P/I:P/A:P

    Gravedad 3.1 (CVSS 3.1 Base Score)
    6.30

    Gravedad 3.1 Txt Gravedad 3.1 (CVSS 3.1 Base Score)
    MEDIUM

    Referencias

  • https://code-projects.org/

  • https://github.com/SYQGITHUB/cve/blob/main/sql1.md

  • https://vuldb.com/?ctiid_275718=

  • https://vuldb.com/?id_275718=

  • https://vuldb.com/?submit_396817=

    • Enviar en el boletín
    Off

    CVE-2024-8139

    CVE-2024-8139

    Título es
    CVE-2024-8139

    Dom, 25/08/2024 – 01:15

    Tipo
    CWE-89

    Gravedad v2.0
    6.50

    Gravedad 2.0 Txt
    MEDIUM

    Título en

    CVE-2024-8139

    Descripción en
    A vulnerability has been found in itsourcecode E-Commerce Website 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file search_list.php. The manipulation of the argument user leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.

    25/08/2024
    25/08/2024
    Vector CVSS:3.1
    CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

    Vector CVSS:2.0
    AV:N/AC:L/Au:S/C:P/I:P/A:P

    Gravedad 3.1 (CVSS 3.1 Base Score)
    6.30

    Gravedad 3.1 Txt Gravedad 3.1 (CVSS 3.1 Base Score)
    MEDIUM

    Referencias

  • https://github.com/ppp-src/ha/issues/7

  • https://itsourcecode.com/

  • https://vuldb.com/?ctiid_275719=

  • https://vuldb.com/?id_275719=

  • https://vuldb.com/?submit_396842=

    • Enviar en el boletín
    Off

    CVE-2024-45244

    CVE-2024-45244

    Título es
    CVE-2024-45244

    Dom, 25/08/2024 – 02:15

    Gravedad 2.0 Txt
    Pendiente de análisis

    Título en

    CVE-2024-45244

    Descripción en
    Hyperledger Fabric through 2.5.9 does not verify that a request has a timestamp within the expected time window.

    25/08/2024
    25/08/2024
    Gravedad 3.1 Txt Gravedad 3.1 (CVSS 3.1 Base Score)
    Pendiente de análisis

    Referencias

  • https://github.com/hyperledger/fabric/commit/155457a6624b3c74b22e5729c35c8499bfe952cd

    • Enviar en el boletín
    Off