Vulnerabilities > Critical

DATE CVE VULNERABILITY TITLE RISK
2024-11-01 CVE-2024-37094 Unspecified vulnerability in Stylemixthemes Masterstudy LMS
Missing Authorization vulnerability in StylemixThemes MasterStudy LMS allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects MasterStudy LMS: from n/a through 3.2.12.
network
low complexity
stylemixthemes
critical
 9.8
9.8
2024-11-01 CVE-2024-10654 Authorization Bypass Through User-Controlled Key vulnerability in Totolink Lr350 Firmware 9.3.5U.6369B20220309
A vulnerability has been found in TOTOLINK LR350 up to 9.3.5u.6369 and classified as critical.
network
low complexity
totolink CWE-639
critical
 9.1
9.1
2024-11-01 CVE-2024-7456 SQL Injection vulnerability in Lunary 1.4.2
A SQL injection vulnerability exists in the `/api/v1/external-users` route of lunary-ai/lunary version v1.4.2.
network
low complexity
lunary CWE-89
critical
 9.8
9.8
2024-11-01 CVE-2024-10616 SQL Injection vulnerability in Tongda2000 Office Anywhere
A vulnerability classified as critical has been found in Tongda OA up to 11.9.
network
low complexity
tongda2000 CWE-89
critical
 9.8
9.8
2024-11-01 CVE-2024-10617 SQL Injection vulnerability in Tongda2000 Office Anywhere 11.10
A vulnerability classified as critical was found in Tongda OA up to 11.10.
network
low complexity
tongda2000 CWE-89
critical
 9.8
9.8
2024-11-01 CVE-2024-10618 SQL Injection vulnerability in Tongda2000 Office Anywhere 2017
A vulnerability, which was classified as critical, has been found in Tongda OA 2017 up to 11.10.
network
low complexity
tongda2000 CWE-89
critical
 9.8
9.8
2024-11-01 CVE-2024-10619 SQL Injection vulnerability in Tongda2000 Office Anywhere 2017
A vulnerability, which was classified as critical, was found in Tongda OA 2017 up to 11.10.
network
low complexity
tongda2000 CWE-89
critical
 9.8
9.8
2024-11-01 CVE-2024-10615 SQL Injection vulnerability in Tongda2000 Office Anywhere 2017
A vulnerability was found in Tongda OA 2017 up to 11.10.
network
low complexity
tongda2000 CWE-89
critical
 9.8
9.8
2024-11-01 CVE-2024-10607 SQL Injection vulnerability in Carmelogarcia Courier Management System 1.0
A vulnerability was found in code-projects Courier Management System 1.0.
network
low complexity
carmelogarcia CWE-89
critical
 9.8
9.8
2024-11-01 CVE-2024-10608 SQL Injection vulnerability in Carmelogarcia Courier Management System 1.0
A vulnerability was found in code-projects Courier Management System 1.0.
network
low complexity
carmelogarcia CWE-89
critical
 9.8
9.8