#vulnerability

Helpdeskz version 2.0.2 suffers from a persistent cross site scripting vulnerability.

SPIP version 4.2.11 suffers from a code execution vulnerability.

Loan Management System version 1.0 suffers from a remote SQL injection vulnerability that allows for authentication bypass.

Ubuntu Security Notice 6973-2 - It was discovered that a race condition existed in the Bluetooth subsystem in the Linux kernel, leading to a null pointer dereference vulnerability. A privileged local attacker could use this to possibly cause a denial of service. Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system.

SonicWall has released security updates to address a critical flaw impacting its firewalls that, if successfully exploited, could grant malicious actors unauthorized access to the devices. The vulnerability, tracked as CVE-2024-40766 (CVSS score: 9.3), has been described as an improper access control bug. "An improper access control vulnerability has been identified in the SonicWall SonicOS

Jobs Finder System version 1.0 suffers from a cross site scripting vulnerability.

Ubuntu Security Notice 6972-3 - Yuxuan Hu discovered that the Bluetooth RFCOMM protocol driver in the Linux Kernel contained a race condition, leading to a NULL pointer dereference. An attacker could possibly use this to cause a denial of service. It was discovered that a race condition existed in the Bluetooth subsystem in the Linux kernel, leading to a null pointer dereference vulnerability. A privileged local attacker could use this to possibly cause a denial of service.

HughesNet HT2000W Satellite Modem remote password reset exploit that leverages a path traversal vulnerability.

Human Resource Management System version 2024 version 1.0 suffers from a cross site scripting vulnerability.

Employee Record Management System version 1.0 suffers from a remote SQL injection vulnerability that allows for authentication bypass.