Vulnerabilities > High

DATE CVE VULNERABILITY TITLE RISK
2024-12-09 CVE-2024-11608 Out-of-bounds Write vulnerability in Autodesk Revit
A maliciously crafted SKP file, when linked or imported into Autodesk Revit, can be used to cause a Heap-based Overflow.
local
low complexity
autodesk CWE-787
7.8
2024-12-09 CVE-2024-54922 SQL Injection vulnerability in Lopalopa E-Learning Management System 1.0
A SQL Injection was found in /admin/edit_user.php of kashipara E-learning Management System v1.0, which allows remote attackers to execute arbitrary SQL commands to get unauthorized database access via the firstname, lastname, and username parameters.
network
low complexity
lopalopa CWE-89
7.2
2024-12-09 CVE-2024-54930 SQL Injection vulnerability in Lopalopa E-Learning Management System 1.0
Kashipara E-learning Management System v1.0 is vulnerable to SQL Injection in /admin/delete_student.php.
network
low complexity
lopalopa CWE-89
7.2
2024-12-09 CVE-2024-54933 SQL Injection vulnerability in Lopalopa E-Learning Management System 1.0
Kashipara E-learning Management System v1.0 is vulnerable to SQL Injection in /admin/delete_content.php.
network
low complexity
lopalopa CWE-89
7.2
2024-12-09 CVE-2024-45760 Missing Authorization vulnerability in Dell Openmanage Server Administrator
Dell OpenManage Server Administrator, versions 11.0.1.0 and prior, contains an improper access control vulnerability.
network
low complexity
dell CWE-862
8.8
2024-12-09 CVE-2024-45761 Unspecified vulnerability in Dell Openmanage Server Administrator
Dell OpenManage Server Administrator, versions 11.0.1.0 and prior, contains an improper input validation vulnerability.
network
low complexity
dell
8.1
2024-12-09 CVE-2024-54926 SQL Injection vulnerability in Lopalopa E-Learning Management System 1.0
A SQL Injection vulnerability was found in /search_class.php of kashipara E-learning Management System v1.0, which allows remote attackers to execute arbitrary SQL commands to get unauthorized database access via the school_year parameter.
network
low complexity
lopalopa CWE-89
8.8
2024-12-09 CVE-2023-7298 Out-of-bounds Write vulnerability in Autodesk FBX Software Development KIT
A maliciously crafted FBX file, when parsed through Autodesk FBX SDK, may force an Out-of-Bounds Write vulnerability.
network
low complexity
autodesk CWE-787
8.8
2024-12-09 CVE-2024-49600 Unspecified vulnerability in Dell Power Manager
Dell Power Manager (DPM), versions prior to 3.17, contain an improper access control vulnerability.
local
low complexity
dell
7.8
2024-12-09 CVE-2024-54929 SQL Injection vulnerability in Lopalopa E-Learning Management System 1.0
KASHIPARA E-learning Management System v1.0 is vulnerable to SQL Injection in /admin/delete_subject.php.
network
low complexity
lopalopa CWE-89
7.2