Vulnerabilities

DATE CVE VULNERABILITY TITLE RISK
2024-10-10 CVE-2024-9793 OS Command Injection vulnerability in Tenda Ac1206 Firmware 15.03.06.23
A vulnerability classified as critical was found in Tenda AC1206 up to 15.03.06.23.
network
low complexity
tenda CWE-78
critical
9.8
2024-10-10 CVE-2024-9794 Unrestricted Upload of File with Dangerous Type vulnerability in Codezips Online Shopping Portal 1.0
A vulnerability, which was classified as critical, has been found in Codezips Online Shopping Portal 1.0.
network
low complexity
codezips CWE-434
critical
9.8
2024-10-10 CVE-2024-9790 SQL Injection vulnerability in Lylme Spage 1.9.5
A vulnerability was found in LyLme_spage 1.9.5.
network
low complexity
lylme CWE-89
7.2
2024-10-10 CVE-2024-9792 Cross-site Scripting vulnerability in Dlink Dsl-2750U Firmware R5B017
A vulnerability classified as problematic has been found in D-Link DSL-2750U R5B017.
network
low complexity
dlink CWE-79
6.1
2024-10-10 CVE-2024-9787 Unspecified vulnerability in Ccontrols Basrouter Bacnet Basrt-B Firmware 2.7.2
A vulnerability, which was classified as problematic, was found in Contemporary Control System BASrouter BACnet BASRT-B 2.7.2.
network
low complexity
ccontrols
5.3
2024-10-10 CVE-2024-9788 SQL Injection vulnerability in Lylme Spage 1.9.5
A vulnerability has been found in LyLme_spage 1.9.5 and classified as critical.
network
low complexity
lylme CWE-89
7.2
2024-10-10 CVE-2024-9789 SQL Injection vulnerability in Lylme Spage 1.9.5
A vulnerability was found in LyLme_spage 1.9.5 and classified as critical.
network
low complexity
lylme CWE-89
7.2
2024-10-10 CVE-2024-9785 Classic Buffer Overflow vulnerability in Dlink Dir-619L Firmware 2.06B1
A vulnerability classified as critical was found in D-Link DIR-619L B1 2.06.
network
low complexity
dlink CWE-120
8.8
2024-10-10 CVE-2024-9786 Classic Buffer Overflow vulnerability in Dlink Dir-619L Firmware 2.06B1
A vulnerability, which was classified as critical, has been found in D-Link DIR-619L B1 2.06.
network
low complexity
dlink CWE-120
8.8
2024-10-10 CVE-2024-6530 Cross-site Scripting vulnerability in Gitlab
A cross-site scripting issue has been discovered in GitLab affecting all versions starting from 17.1 prior 17.2.9, starting from 17.3 prior to 17.3.5, and starting from 17.4 prior to 17.4.2.
network
low complexity
gitlab CWE-79
5.4