#vulnerability

SonicWall has released security updates to address a critical flaw impacting its firewalls that, if successfully exploited, could grant malicious actors unauthorized access to the devices. The vulnerability, tracked as CVE-2024-40766 (CVSS score: 9.3), has been described as an improper access control bug. "An improper access control vulnerability has been identified in the SonicWall SonicOS

Jobs Finder System version 1.0 suffers from a cross site scripting vulnerability.

Ubuntu Security Notice 6972-3 - Yuxuan Hu discovered that the Bluetooth RFCOMM protocol driver in the Linux Kernel contained a race condition, leading to a NULL pointer dereference. An attacker could possibly use this to cause a denial of service. It was discovered that a race condition existed in the Bluetooth subsystem in the Linux kernel, leading to a null pointer dereference vulnerability. A privileged local attacker could use this to possibly cause a denial of service.

HughesNet HT2000W Satellite Modem remote password reset exploit that leverages a path traversal vulnerability.

Human Resource Management System version 2024 version 1.0 suffers from a cross site scripting vulnerability.

Employee Record Management System version 1.0 suffers from a remote SQL injection vulnerability that allows for authentication bypass.

DETS Project version 1.0 suffers from a remote SQL injection vulnerability that allows for authentication bypass.

Aruba 501 version CN12G5W0XX suffers from a remote command execution vulnerability.

Bang Resto version 1.0 suffers from an information disclosure vulnerability.

School Log Management System version 1.0 appears to suffers from a remote SQL injection vulnerability that allows an attacker to achieve code execution.