Security Vulnerabilities - CVEs Published In August 2024
Organizr v1.90 was discovered to contain a SQL injection vulnerability via chat/setlike.php.
CVSS Score
9.8
EPSS Score
0.001
Published
2024-08-29
Organizr v1.90 is vulnerable to Cross Site Scripting (XSS) via api.php.
CVSS Score
6.1
EPSS Score
0.003
Published
2024-08-29
Organizr v1.90 was discovered to contain a SQL injection vulnerability via chat/settyping.php.
CVSS Score
9.8
EPSS Score
0.001
Published
2024-08-29
Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis Snap Deploy (Windows) before build 4569.
CVSS Score
6.7
EPSS Score
0.001
Published
2024-08-29
openflights commit 5234b5b is vulnerable to Cross-Site Scripting (XSS) via php/trip.php
CVSS Score
5.4
EPSS Score
0.002
Published
2024-08-29
openflights commit 5234b5b is vulnerable to Cross-Site Scripting (XSS) via php/submit.php
CVSS Score
5.4
EPSS Score
0.002
Published
2024-08-29
openflights commit 5234b5b is vulnerable to Cross-Site Scripting (XSS) via php/settings.php
CVSS Score
6.1
EPSS Score
0.002
Published
2024-08-29
openflights commit 5234b5b is vulnerable to Cross-Site Scripting (XSS) via php/alsearch.php
CVSS Score
6.1
EPSS Score
0.003
Published
2024-08-29
bjyadmin commit a560fd5 is vulnerable to Cross Site Scripting (XSS) via Public/statics/umeditor1_2_3/php/imageUp.php
CVSS Score
6.1
EPSS Score
0.004
Published
2024-08-29
bjyadmin commit a560fd5 is vulnerable to Cross Site Scripting (XSS) via Public/statics/umeditor1_2_3/php/getContent.php
CVSS Score
6.1
EPSS Score
0.004
Published
2024-08-29