Vulnerabilities > Critical

DATE CVE VULNERABILITY TITLE RISK
2024-09-02 CVE-2024-43772 SQL Injection vulnerability in Easytest Online Test Platform
SQL Injection in download student learning course function of Easytest Online Test Platform ver.24E01 and earlier allow remote attackers to execute arbitrary SQL commands via the uid parameter.
network
low complexity
easytest CWE-89
critical
9.8
2024-09-02 CVE-2024-43773 SQL Injection vulnerability in Easytest Online Test Platform
SQL Injection in download class learning course function of Easytest Online Test Platform ver.24E01 and earlier allow remote attackers to execute arbitrary SQL commands via the cstr parameter.
network
low complexity
easytest CWE-89
critical
9.8
2024-09-02 CVE-2024-45522 Unspecified vulnerability in Linen
Linen before cd37c3e does not verify that the domain is linen.dev or www.linen.dev when resetting a password.
network
low complexity
linen
critical
9.8
2024-09-01 CVE-2024-45508 Out-of-bounds Write vulnerability in Htmldoc Project Htmldoc
HTMLDOC before 1.9.19 has an out-of-bounds write in parse_paragraph in ps-pdf.cxx because of an attempt to strip leading whitespace from a whitespace-only node.
network
low complexity
htmldoc-project CWE-787
critical
9.8
2024-09-01 CVE-2024-8368 SQL Injection vulnerability in Fabianros Hospital Management System 1.0
A vulnerability was found in code-projects Hospital Management System 1.0.
network
low complexity
fabianros CWE-89
critical
9.8
2024-08-31 CVE-2024-39747 Unspecified vulnerability in IBM Sterling Connect Direct web Services
IBM Sterling Connect:Direct Web Services 6.0, 6.1, 6.2, and 6.3 uses default credentials for potentially critical functionality.
network
low complexity
ibm
critical
9.8
2024-08-30 CVE-2024-8347 SQL Injection vulnerability in Oretnom23 Computer Laboratory Management System 1.0
A vulnerability classified as critical was found in SourceCodester Computer Laboratory Management System 1.0.
network
low complexity
oretnom23 CWE-89
critical
9.8
2024-08-30 CVE-2024-8348 SQL Injection vulnerability in Oretnom23 Computer Laboratory Management System 1.0
A vulnerability, which was classified as critical, has been found in SourceCodester Computer Laboratory Management System 1.0.
network
low complexity
oretnom23 CWE-89
critical
9.8
2024-08-30 CVE-2024-8346 SQL Injection vulnerability in Oretnom23 Computer Laboratory Management System 1.0
A vulnerability classified as critical has been found in SourceCodester Computer Laboratory Management System 1.0.
network
low complexity
oretnom23 CWE-89
critical
9.8
2024-08-30 CVE-2024-8345 SQL Injection vulnerability in Oretnom23 Music Gallery Site 1.0
A vulnerability was found in SourceCodester Music Gallery Site 1.0 and classified as critical.
network
low complexity
oretnom23 CWE-89
critical
9.8