Vulnerabilities > Critical

DATE CVE VULNERABILITY TITLE RISK
2024-10-28 CVE-2024-50623 Unrestricted Upload of File with Dangerous Type vulnerability in Cleo Harmony, Lexicom and Vltrader
In Cleo Harmony before 5.8.0.21, VLTrader before 5.8.0.21, and LexiCom before 5.8.0.21, there is an unrestricted file upload and download that could lead to remote code execution.
network
low complexity
cleo CWE-434
critical
9.8
2024-10-27 CVE-2024-10430 SQL Injection vulnerability in Codezips PET Shop Management System 1.0
A vulnerability, which was classified as critical, has been found in Codezips Pet Shop Management System 1.0.
network
low complexity
codezips CWE-89
critical
9.8
2024-10-27 CVE-2024-10431 SQL Injection vulnerability in Codezips PET Shop Management System 1.0
A vulnerability, which was classified as critical, was found in Codezips Pet Shop Management System 1.0.
network
low complexity
codezips CWE-89
critical
9.8
2024-10-27 CVE-2024-10426 SQL Injection vulnerability in Codezips PET Shop Management System 1.0
A vulnerability was found in Codezips Pet Shop Management System 1.0.
network
low complexity
codezips CWE-89
critical
9.8
2024-10-27 CVE-2024-10427 SQL Injection vulnerability in Codezips PET Shop Management System 1.0
A vulnerability was found in Codezips Pet Shop Management System 1.0.
network
low complexity
codezips CWE-89
critical
9.8
2024-10-27 CVE-2024-10424 SQL Injection vulnerability in Projectworlds Student Project Allocation System 1.0
A vulnerability has been found in Project Worlds Student Project Allocation System 1.0 and classified as critical.
network
low complexity
projectworlds CWE-89
critical
9.8
2024-10-27 CVE-2024-10425 SQL Injection vulnerability in Projectworlds Student Project Allocation System 1.0
A vulnerability was found in Project Worlds Student Project Allocation System 1.0 and classified as critical.
network
low complexity
projectworlds CWE-89
critical
9.8
2024-10-27 CVE-2024-10422 SQL Injection vulnerability in Nurhodelta17 Attendance and Payroll System 1.0
A vulnerability, which was classified as critical, has been found in SourceCodester Attendance and Payroll System 1.0.
network
low complexity
nurhodelta17 CWE-89
critical
9.8
2024-10-27 CVE-2024-10423 SQL Injection vulnerability in Projectworlds Student Project Allocation System 1.0
A vulnerability, which was classified as critical, was found in Project Worlds Student Project Allocation System 1.0.
network
low complexity
projectworlds CWE-89
critical
9.8
2024-10-27 CVE-2024-10421 SQL Injection vulnerability in Nurhodelta17 Attendance and Payroll System 1.0
A vulnerability classified as critical was found in SourceCodester Attendance and Payroll System 1.0.
network
low complexity
nurhodelta17 CWE-89
critical
9.8