Vulnerabilities > Critical

DATE CVE VULNERABILITY TITLE RISK
2024-08-29 CVE-2024-6670 SQL Injection vulnerability in Progress Whatsup Gold
In WhatsUp Gold versions released before 2024.0.0, a SQL Injection vulnerability allows an unauthenticated attacker to retrieve the users encrypted password.
network
low complexity
progress CWE-89
critical
 9.8
9.8
2024-08-29 CVE-2024-6671 SQL Injection vulnerability in Progress Whatsup Gold
In WhatsUp Gold versions released before 2024.0.0, if the application is configured with only a single user, a SQL Injection vulnerability allows an unauthenticated attacker to retrieve the users encrypted password.
network
low complexity
progress CWE-89
critical
 9.8
9.8
2024-08-29 CVE-2024-41361 Code Injection vulnerability in Sourcefabric Phoniebox 2.7.0
RPi-Jukebox-RFID v2.7.0 was discovered to contain a remote code execution (RCE) vulnerability via htdocs\manageFilesFolders.php
network
low complexity
sourcefabric CWE-94
critical
 9.8
9.8
2024-08-29 CVE-2024-41364 Code Injection vulnerability in Sourcefabric Phoniebox 2.7.0
RPi-Jukebox-RFID v2.7.0 was discovered to contain a remote code execution (RCE) vulnerability via htdocs\trackEdit.php
network
low complexity
sourcefabric CWE-94
critical
 9.8
9.8
2024-08-29 CVE-2024-41366 Code Injection vulnerability in Sourcefabric Phoniebox 2.7.0
RPi-Jukebox-RFID v2.7.0 was discovered to contain a remote code execution (RCE) vulnerability via htdocs\userScripts.php
network
low complexity
sourcefabric CWE-94
critical
 9.8
9.8
2024-08-29 CVE-2024-41367 Code Injection vulnerability in Sourcefabric Phoniebox 2.7.0
RPi-Jukebox-RFID v2.7.0 was discovered to contain a remote code execution (RCE) vulnerability via htdocs\api\playlist\appendFileToPlaylist.php
network
low complexity
sourcefabric CWE-94
critical
 9.8
9.8
2024-08-29 CVE-2024-41368 Code Injection vulnerability in Sourcefabric Phoniebox 2.7.0
RPi-Jukebox-RFID v2.7.0 was discovered to contain a remote code execution (RCE) vulnerability via htdocs\inc.setWlanIpMail.php
network
low complexity
sourcefabric CWE-94
critical
 9.8
9.8
2024-08-29 CVE-2024-41369 Unspecified vulnerability in Sourcefabric Phoniebox 2.7.0
RPi-Jukebox-RFID v2.7.0 was discovered to contain a remote code execution (RCE) vulnerability via htdocs\inc.setWifi.php
network
low complexity
sourcefabric
critical
 9.8
9.8
2024-08-29 CVE-2024-41370 SQL Injection vulnerability in Organizr 1.90
Organizr v1.90 was discovered to contain a SQL injection vulnerability via chat/setlike.php.
network
low complexity
organizr CWE-89
critical
 9.8
9.8
2024-08-29 CVE-2024-41372 SQL Injection vulnerability in Organizr 1.90
Organizr v1.90 was discovered to contain a SQL injection vulnerability via chat/settyping.php.
network
low complexity
organizr CWE-89
critical
 9.8
9.8