Latest low severity Vulnerabilities

● CVE-2024-27312
Zoho ManageEngine PAM360 version 6601 is vulnerable to authorization vulnerability which allows a low-privileged user to perform admin actions. Note: This vulnerability affects only the PAM360 6600 ve...
● CVE-2024-4287
Improper Input Validation in mintplex-labs/anything-llm
● CVE-2023-49330
Zoho ManageEngine ADAudit Plus through 7251 allows SQL Injection while getting aggregate report data.
● CVE-2024-4323
Fluent Bit Memory Corruption Vulnerability
● CVE-2024-5137
PHPGurukul Directory Management System Searchbar admin-profile.php cross site scripting
● CVE-2024-5136
PHPGurukul Directory Management System search-directory.php. cross site scripting
● CVE-2024-3761
Missing Authorization on Delete Datasets in lunary-ai/lunary
● CVE-2024-5135
PHPGurukul Directory Management System index.php sql injection
● CVE-2024-1968
Authorization Header Leakage in scrapy/scrapy on Scheme Change Redirects
● CVE-2024-5134
SourceCodester Electricity Consumption Monitoring Tool delete-bill.php sql injection
● RHSA-2024:2913
Important: thunderbird security update
Red Hat Red Hat Enterprise Linux for Power, little endian
Red Hat Red Hat Enterprise Linux Server - Extended Life Cycle Support
Red Hat Red Hat Enterprise Linux Desktop
Red Hat Red Hat Enterprise Linux Server
Red Hat Red Hat Enterprise Linux Workstation
redhat/thunderbird<115.11.0-1.el7_9
and 4 more
● CVE-2024-5123
SourceCodester Event Registration System cross site scripting
● CVE-2024-5122
SourceCodester Event Registration System sql injection
● CVE-2024-5121
SourceCodester Event Registration System cross site scripting
● CVE-2024-5120
SourceCodester Event Registration System sql injection
● RHSA-2024:2911
Important: thunderbird security update
Red Hat Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions
Red Hat Red Hat Enterprise Linux Server - AUS
Red Hat Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions
Red Hat Red Hat Enterprise Linux Server - TUS
redhat/thunderbird<115.11.0-1.el8_4
redhat/thunderbird<115.11.0-1.el8_4
and 5 more
● CVE-2024-5119
SourceCodester Event Registration System sql injection
● CVE-2024-5118
SourceCodester Event Registration System login.php sql injection
● CVE-2024-5117
SourceCodester Event Registration System portal.php sql injection
● CVE-2024-5116
SourceCodester Online Examination System save.php sql injection
● CVE-2024-5115
Campcodes Complete Web-Based School Management System teacher_profile.php sql injection
● CVE-2024-5114
Campcodes Complete Web-Based School Management System teacher_attendance_history1.php sql injection
● CVE-2024-5113
Campcodes Complete Web-Based School Management System student_profile1.php sql injection
● CVE-2024-5112
Campcodes Complete Web-Based School Management System student_profile.php sql injection
● CVE-2024-5111
Campcodes Complete Web-Based School Management System student_payment_invoice1.php sql injection
● CVE-2024-5110
Campcodes Complete Web-Based School Management System student_payment_invoice.php sql injection
● CVE-2024-5109
Campcodes Complete Web-Based School Management System student_payment_history.php sql injection
● CVE-2024-5108
Campcodes Complete Web-Based School Management System student_payment_details4.php sql injection
● RHSA-2024:2903
Important: thunderbird security update
Red Hat Red Hat Enterprise Linux for Power, little endian - Extended Update Support
Red Hat Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions
Red Hat Red Hat Enterprise Linux for x86_64 - Extended Update Support
Red Hat Red Hat Enterprise Linux Server for ARM 64 - 4 years of updates
Red Hat Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions
Red Hat Red Hat Enterprise Linux Server - AUS
and 15 more
● RHSA-2024:2906
Important: firefox security update
Red Hat Red Hat Enterprise Linux for Power, little endian - Extended Update Support
Red Hat Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions
Red Hat Red Hat Enterprise Linux for x86_64 - Extended Update Support
Red Hat Red Hat Enterprise Linux Server - AUS
Red Hat Red Hat Enterprise Linux Server for ARM 64 - 4 years of updates
Red Hat Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions
and 19 more
● RHSA-2024:2907
Moderate: httpd:2.4 security update
redhat/httpd<2.4.37-47.module+el8.6.0+19809+6e655c60.7
redhat/httpd-filesystem<2.4.37-47.module+el8.6.0+19809+6e655c60.7
redhat/httpd-manual<2.4.37-47.module+el8.6.0+19809+6e655c60.7
redhat/httpd<2.4.37-47.module+el8.6.0+19809+6e655c60.7
redhat/httpd-debuginfo<2.4.37-47.module+el8.6.0+19809+6e655c60.7
redhat/httpd-debugsource<2.4.37-47.module+el8.6.0+19809+6e655c60.7
and 28 more
● RHSA-2024:2905
Important: thunderbird security update
Red Hat Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions
Red Hat Red Hat Enterprise Linux for ARM 64 - Extended Update Support
Red Hat Red Hat Enterprise Linux for x86_64 - Extended Update Support
Red Hat Red Hat Enterprise Linux for Power, little endian - Extended Update Support
Red Hat Red Hat Enterprise Linux Server - TUS
Red Hat Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions
and 13 more
● RHSA-2024:2904
Important: thunderbird security update
Red Hat Red Hat Enterprise Linux for Power, little endian - Extended Update Support
Red Hat Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions
Red Hat Red Hat Enterprise Linux Server for ARM 64 - 4 years of updates
Red Hat Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions
Red Hat Red Hat Enterprise Linux Server for IBM z Systems - 4 years of updates
Red Hat Red Hat Enterprise Linux for x86_64 - Extended Update Support
and 14 more
● RHSA-2024:2910
Important: nodejs security update
Red Hat Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions
Red Hat Red Hat Enterprise Linux for x86_64 - Extended Update Support
Red Hat Red Hat Enterprise Linux for Power, little endian - Extended Update Support
Red Hat Red Hat Enterprise Linux for IBM z Systems - Extended Update Support
Red Hat Red Hat Enterprise Linux Server for ARM 64 - 4 years of updates
Red Hat Red Hat Enterprise Linux Server for IBM z Systems - 4 years of updates
and 36 more
● RHSA-2024:2912
Important: thunderbird security update
Red Hat Red Hat Enterprise Linux for Power, little endian - Extended Update Support
Red Hat Red Hat Enterprise Linux for x86_64 - Extended Update Support
Red Hat Red Hat Enterprise Linux Server - AUS
Red Hat Red Hat Enterprise Linux for ARM 64 - Extended Update Support
Red Hat Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions
Red Hat Red Hat Enterprise Linux Server - TUS
and 14 more
● CVE-2024-5107
Campcodes Complete Web-Based School Management System student_payment_details2.php sql injection
● CVE-2024-5106
Campcodes Complete Web-Based School Management System student_payment_details3.php sql injection
● CVE-2024-5105
Campcodes Complete Web-Based School Management System student_payment_details.php sql injection
● CVE-2024-4284
Denial of Service in mintplex-labs/anything-llm
● CVE-2024-5104
Campcodes Complete Web-Based School Management System student_grade_wise.php sql injection
● CVE-2024-5103
Campcodes Complete Web-Based School Management System student_first_payment.php sql injection
● CVE-2024-36081
Westermo EDW-100 devices through 2024-05-03 allow an unauthenticated user to download a configuration file containing a cleartext password. NOTE: this is a serial-to-Ethernet converter that should not...
● CVE-2024-36080
Westermo EDW-100 devices through 2024-05-03 have a hidden root user account with a hardcoded password that cannot be changed. NOTE: this is a serial-to-Ethernet converter that should not be placed at ...
● CVE-2024-5101
SourceCodester Simple Inventory System updateproduct.php sql injection
● CVE-2024-5100
SourceCodester Simple Inventory System tableedit.php sql injection
● CVE-2024-5099
SourceCodester Simple Inventory System updateprice.php sql injection
● CVE-2024-5098
SourceCodester Simple Inventory System login.php sql injection
● CVE-2024-5097
SourceCodester Simple Inventory System tableedit.php#page=editprice cross-site request forgery
● CVE-2024-5096
Hipcam Device MAC Address wifi.mac information disclosure
● CVE-2024-5095
Victor Zsviot Camera MQTT Packet denial of service

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2024 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203