Aggregator

Submit #468513 / VDB-290213

Submit #468511 / VDB-290212

Submit #468473 / VDB-290211

Submit #468391 / VDB-290210

A vulnerability has been found in Emlog Pro 2.4.3 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /admin/twitter.php of the component Subpage Handler. The manipulation leads to cross site scripting. This vulnerability is known as CVE-2024-13135. The attack can be launched remotely. Furthermore, there is an exploit available.

Submit #467929 / VDB-290209

A vulnerability, which was classified as critical, was found in ZeroWdd studentmanager 1.0. Affected is the function addTeacher/editTeacher of the file src/main/Java/com/wdd/studentmanager/controller/TeacherController. java. The manipulation of the argument file leads to unrestricted upload. This vulnerability is traded as CVE-2024-13134. It is possible to launch the attack remotely. Furthermore, there is an exploit available.

A vulnerability, which was classified as critical, has been found in ZeroWdd studentmanager 1.0. This issue affects the function addStudent/editStudent of the file src/main/Java/com/wdd/studentmanager/controller/StudentController. java. The manipulation of the argument file leads to unrestricted upload. The identification of this vulnerability is CVE-2024-13133. The attack may be initiated remotely. Furthermore, there is an exploit available.

Submit #467924 / VDB-247992

Submit #467916 / VDB-290208

A vulnerability classified as problematic was found in Emlog Pro up to 2.4.3. This vulnerability affects unknown code of the file /admin/article.php of the component Subpage Handler. The manipulation leads to cross site scripting. This vulnerability was named CVE-2024-13132. The attack can be initiated remotely. Furthermore, there is an exploit available.

Submit #467912 / VDB-290206

A vulnerability classified as problematic has been found in Dahua IPC-HFW1200S, IPC-HFW2300R-Z, IPC-HFW5220E-Z and IPC-HDW1200S up to 20241222. This affects an unknown part of the file /web_caps/webCapsConfig of the component Web Interface. The manipulation leads to information disclosure. This vulnerability is uniquely identified as CVE-2024-13131. It is possible to initiate the attack remotely. Furthermore, there is an exploit available. The vendor was contacted early about this disclosure but did not respond in any way. It is recommended to apply restrictive firewalling. The vendor was contacted early about this disclosure but did not respond in any way.

A vulnerability was found in Dahua IPC-HFW1200S, IPC-HFW2300R-Z, IPC-HFW5220E-Z and IPC-HDW1200S up to 20241222. It has been rated as problematic. Affected by this issue is some unknown functionality of the file ../mtd/Config/Sha1Account1 of the component Web Interface. The manipulation leads to path traversal: '../filedir'. This vulnerability is handled as CVE-2024-13130. The attack may be launched remotely. Furthermore, there is an exploit available. The vendor was contacted early about this disclosure but did not respond in any way. It is recommended to apply restrictive firewalling. The vendor was contacted early about this disclosure but did not respond in any way.

Submit #467714 / VDB-172106

Submit #464258 / VDB-290205

Submit #464260 / VDB-290204

A vulnerability was found in Provision-ISR SH-4050A-2, SH-4100A-2L(MM), SH-8100A-2L(MM), SH-16200A-2(1U), SH-16200A-5(1U) and NVR5-8200PX up to 20241220. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /server.js. The manipulation leads to information disclosure. This vulnerability is known as CVE-2025-0224. The attack can be launched remotely. Furthermore, there is an exploit available. It is recommended to apply restrictive firewalling.

Submit #467298 / VDB-273559