Vulnerabilities > High

DATE CVE VULNERABILITY TITLE RISK
2024-10-10 CVE-2024-9817 SQL Injection vulnerability in Blood Bank System Project Blood Bank System 1.0
A vulnerability was found in code-projects Blood Bank System 1.0.
network
low complexity
blood-bank-system-project CWE-89
8.8
2024-10-10 CVE-2024-47084 Unspecified vulnerability in Gradio Project Gradio
Gradio is an open-source Python package designed for quick prototyping.
network
low complexity
gradio-project
8.3
2024-10-10 CVE-2024-9815 Unrestricted Upload of File with Dangerous Type vulnerability in Codezips Tourist Management System 1.0
A vulnerability has been found in Codezips Tourist Management System 1.0 and classified as critical.
network
low complexity
codezips CWE-434
7.2
2024-10-10 CVE-2024-9816 Unrestricted Upload of File with Dangerous Type vulnerability in Codezips Tourist Management System 1.0
A vulnerability was found in Codezips Tourist Management System 1.0 and classified as critical.
network
low complexity
codezips CWE-434
7.2
2024-10-10 CVE-2024-9180 Unspecified vulnerability in Hashicorp Vault
A privileged Vault operator with write permissions to the root namespace’s identity endpoint could escalate their own or another user’s privileges to Vault’s root policy.
network
low complexity
hashicorp
7.2
2024-10-10 CVE-2024-47962 Out-of-bounds Write vulnerability in Deltaww Cncsoft-G2 2.1.0.10
Delta Electronics CNCSoft-G2 lacks proper validation of the length of user-supplied data prior to copying it to a fixed-length stack-based buffer.
local
low complexity
deltaww CWE-787
7.8
2024-10-10 CVE-2024-47963 Out-of-bounds Write vulnerability in Deltaww Cncsoft-G2 2.1.0.10
Delta Electronics CNCSoft-G2 lacks proper validation of user-supplied data, which can result in a write past the end of an allocated object.
local
low complexity
deltaww CWE-787
7.8
2024-10-10 CVE-2024-47964 Out-of-bounds Write vulnerability in Deltaww Cncsoft-G2 2.1.0.10
Delta Electronics CNCSoft-G2 lacks proper validation of the length of user-supplied data prior to copying it to a fixed-length heap-based buffer.
local
low complexity
deltaww CWE-787
7.8
2024-10-10 CVE-2024-47965 Out-of-bounds Read vulnerability in Deltaww Cncsoft-G2 2.1.0.10
Delta Electronics CNCSoft-G2 lacks proper validation of user-supplied data, which can result in a read past the end of an allocated buffer.
local
low complexity
deltaww CWE-125
7.8
2024-10-10 CVE-2024-47966 Use of Uninitialized Resource vulnerability in Deltaww Cncsoft-G2 2.1.0.10
Delta Electronics CNCSoft-G2 lacks proper initialization of memory prior to accessing it.
local
low complexity
deltaww CWE-908
7.8