Total
396876 CVE
| CVE | Vendors | Products | Updated | CVSS v2 | CVSS v3 |
|---|---|---|---|---|---|
| CVE-2024-33430 | 1 Stsaz | 1 Phiola | 2026-06-17 | N/A | 8.8 HIGH |
| An issue in phiola/src/afilter/pcm_convert.h:513 of phiola v2.0-rc22 allows a remote attacker to execute arbitrary code via the a crafted .wav file. | |||||
| CVE-2024-33429 | 1 Stsaz | 1 Phiola | 2026-06-17 | N/A | 7.1 HIGH |
| Buffer-Overflow vulnerability at pcm_convert.h:513 of phiola v2.0-rc22 allows a remote attacker to execute arbitrary code via a crafted .wav file. | |||||
| CVE-2024-33428 | 1 Stsaz | 1 Phiola | 2026-06-17 | N/A | 8.8 HIGH |
| Buffer-Overflow vulnerability at conv.c:68 of stsaz phiola v2.0-rc22 allows a remote attacker to execute arbitrary code via the a crafted .wav file. | |||||
| CVE-2024-33424 | 1 Cmsimple | 1 Cmsimple | 2026-06-17 | N/A | 6.1 MEDIUM |
| A cross-site scripting (XSS) vulnerability in the Settings menu of CMSimple v5.15 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Downloads parameter under the Language section. | |||||
| CVE-2024-33423 | 1 Cmsimple | 1 Cmsimple | 2026-06-17 | N/A | 7.4 HIGH |
| Cross-Site Scripting (XSS) vulnerability in the Settings menu of CMSimple v5.15 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Logout parameter under the Language section. | |||||
| CVE-2024-33411 | 1 Campcodes | 1 Complete Web-based School Management System | 2026-06-17 | N/A | 9.8 CRITICAL |
| A SQL injection vulnerability in /model/get_admin_profile.php in Campcodes Complete Web-Based School Management System 1.0 allows attacker to execute arbitrary SQL commands via the my_index parameter. | |||||
| CVE-2024-33410 | 1 Campcodes | 1 Complete Web-based School Management System | 2026-06-17 | N/A | 8.1 HIGH |
| SQL injection vulnerability in /model/delete_range_grade.php in campcodes Complete Web-Based School Management System 1.0 allows attacker to execute arbitrary SQL commands via the id parameter. | |||||
| CVE-2024-33409 | 1 Campcodes | 1 Complete Web-based School Management System | 2026-06-17 | N/A | 9.8 CRITICAL |
| SQL injection vulnerability in index.php in campcodes Complete Web-Based School Management System 1.0 allows attacker to execute arbitrary SQL commands via the name parameter. | |||||
| CVE-2024-33408 | 1 Campcodes | 1 Complete Web-based School Management System | 2026-06-17 | N/A | 9.8 CRITICAL |
| A SQL injection vulnerability in /model/get_classroom.php in campcodes Complete Web-Based School Management System 1.0 allows attacker to execute arbitrary SQL commands via the id parameter. | |||||
| CVE-2024-33407 | 1 Campcodes | 1 Complete Web-based School Management System | 2026-06-17 | N/A | 5.9 MEDIUM |
| SQL injection vulnerability in /model/delete_record.php in campcodes Complete Web-Based School Management System 1.0 allows attacker to execute arbitrary SQL commands via the id parameter. | |||||
| CVE-2024-33406 | 1 Campcodes | 1 Complete Web-based School Management System | 2026-06-17 | N/A | 7.3 HIGH |
| SQL injection vulnerability in /model/delete_student_grade_subject.php in campcodes Complete Web-Based School Management System 1.0 allows attacker to execute arbitrary SQL commands via the index parameter. | |||||
| CVE-2024-33405 | 1 Campcodes | 1 Complete Web-based School Management System | 2026-06-17 | N/A | 8.6 HIGH |
| SQL injection vulnerability in add_friends.php in campcodes Complete Web-Based School Management System 1.0 allows attacker to execute arbitrary SQL commands via the friend_index parameter. | |||||
| CVE-2024-33404 | 1 Campcodes | 1 Complete Web-based School Management System | 2026-06-17 | N/A | 8.3 HIGH |
| A SQL injection vulnerability in /model/add_student_first_payment.php in campcodes Complete Web-Based School Management System 1.0 allows attacker to execute arbitrary SQL commands via the index parameter. | |||||
| CVE-2024-33403 | 1 Campcodes | 1 Complete Web-based School Management System | 2026-06-17 | N/A | 9.8 CRITICAL |
| A SQL injection vulnerability in /model/get_events.php in campcodes Complete Web-Based School Management System 1.0 allows attacker to execute arbitrary SQL commands via the event_id parameter. | |||||
| CVE-2024-33402 | 1 Campcodes | 1 Complete Web-based School Management System | 2026-06-17 | N/A | 8.1 HIGH |
| A SQL injection vulnerability in /model/approve_petty_cash.php in campcodes Complete Web-Based School Management System 1.0 allows attacker to execute arbitrary SQL commands via the id parameter. | |||||
| CVE-2024-33401 | 1 Dedecms | 1 Dedecms | 2026-06-17 | N/A | 4.4 MEDIUM |
| Cross Site Scripting vulnerability in DedeCMS v.5.7.113 allows a remote attacker to run arbitrary code via the mnum parameter. | |||||
| CVE-2024-33398 | 2026-06-17 | N/A | 7.5 HIGH | ||
| There is a ClusterRole in piraeus-operator v2.5.0 and earlier which has been granted list secrets permission, which allows an attacker to impersonate the service account bound to this ClusterRole and use its high-risk privileges to list confidential information across the cluster. | |||||
| CVE-2024-33396 | 2026-06-17 | N/A | 8.4 HIGH | ||
| An issue in karmada-io karmada v1.9.0 and before allows a local attacker to execute arbitrary code via a crafted command to get the token component. | |||||
| CVE-2024-33394 | 1 Kubevirt | 1 Kubevirt | 2026-06-17 | N/A | 5.9 MEDIUM |
| An issue in kubevirt kubevirt v1.2.0 and before allows a local attacker to execute arbitrary code via a crafted command to get the token component. | |||||
| CVE-2024-33393 | 2026-06-17 | N/A | 6.2 MEDIUM | ||
| An issue in spidernet-io spiderpool v.0.9.3 and before allows a local attacker to execute arbitrary code via a crafted command to get the token component. | |||||