Total
396904 CVE
| CVE | Vendors | Products | Updated | CVSS v2 | CVSS v3 |
|---|---|---|---|---|---|
| CVE-2024-32345 | 1 Cmsimple | 1 Cmsimple | 2026-06-17 | N/A | 7.2 HIGH |
| A cross-site scripting (XSS) vulnerability in the Settings menu of CMSimple v5.15 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Configuration parameter under the Language section. | |||||
| CVE-2024-32344 | 1 Cmsimple | 1 Cmsimple | 2026-06-17 | N/A | 6.8 MEDIUM |
| A cross-site scripting (XSS) vulnerability in the Settings menu of CMSimple v5.15 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Edit parameter under the Language section. | |||||
| CVE-2024-32343 | 1 Boidcms | 1 Boidcms | 2026-06-17 | N/A | 6.1 MEDIUM |
| A cross-site scripting (XSS) vulnerability in the Create Page of Boid CMS v2.1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Content parameter. | |||||
| CVE-2024-32342 | 1 Boidcms | 1 Boidcms | 2026-06-17 | N/A | 6.1 MEDIUM |
| A cross-site scripting (XSS) vulnerability in the Create Page of Boid CMS v2.1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Permalink parameter. | |||||
| CVE-2024-32341 | 1 Wondercms | 1 Wondercms | 2026-06-17 | N/A | 5.4 MEDIUM |
| Multiple cross-site scripting (XSS) vulnerabilities in the Home page of WonderCMS v3.4.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into any of the parameters. | |||||
| CVE-2024-32340 | 1 Wondercms | 1 Wondercms | 2026-06-17 | N/A | 9.6 CRITICAL |
| A cross-site scripting (XSS) vulnerability in the Settings section of WonderCMS v3.4.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the WEBSITE TITLE parameter under the Menu module. | |||||
| CVE-2024-32339 | 1 Wondercms | 1 Wondercms | 2026-06-17 | N/A | 6.1 MEDIUM |
| Multiple cross-site scripting (XSS) vulnerabilities in the HOW TO page of WonderCMS v3.4.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into any of the parameters. | |||||
| CVE-2024-32338 | 1 Wondercms | 1 Wondercms | 2026-06-17 | N/A | 5.4 MEDIUM |
| A cross-site scripting (XSS) vulnerability in the Settings section of WonderCMS v3.4.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the PAGE TITLE parameter under the Current Page module. | |||||
| CVE-2024-32337 | 1 Wondercms | 1 Wondercms | 2026-06-17 | N/A | 6.1 MEDIUM |
| A cross-site scripting (XSS) vulnerability in the Settings section of WonderCMS v3.4.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the ADMIN LOGIN URL parameter under the Security module. | |||||
| CVE-2024-32335 | 1 Totolink | 2 N300rt, N300rt Firmware | 2026-06-17 | N/A | 5.4 MEDIUM |
| TOTOLINK N300RT V2.1.8-B20201030.1539 contains a Store Cross-site scripting (XSS) vulnerability in Access Control under the Wireless Page. | |||||
| CVE-2024-32334 | 1 Totolink | 2 N300rt, N300rt Firmware | 2026-06-17 | N/A | 6.5 MEDIUM |
| TOTOLINK N300RT V2.1.8-B20201030.1539 contains a Store Cross-site scripting (XSS) vulnerability in IP/Port Filtering under the Firewall Page. | |||||
| CVE-2024-32333 | 1 Totolink | 2 N300rt, N300rt Firmware | 2026-06-17 | N/A | 4.3 MEDIUM |
| TOTOLINK N300RT V2.1.8-B20201030.1539 contains a Store Cross-site scripting (XSS) vulnerability in MAC Filtering under the Firewall Page. | |||||
| CVE-2024-32332 | 1 Totolink | 2 N300rt, N300rt Firmware | 2026-06-17 | N/A | 6.1 MEDIUM |
| TOTOLINK N300RT V2.1.8-B20201030.1539 contains a Store Cross-site scripting (XSS) vulnerability in WDS Settings under the Wireless Page. | |||||
| CVE-2024-32327 | 1 Totolink | 2 N300rt, N300rt Firmware | 2026-06-17 | N/A | 5.5 MEDIUM |
| TOTOLINK N300RT V2.1.8-B20201030.1539 contains a Store Cross-site scripting (XSS) vulnerability in Port Forwarding under the Firewall Page. | |||||
| CVE-2024-32326 | 1 Totolink | 2 Ex200, Ex200 Firmware | 2026-06-17 | N/A | 6.8 MEDIUM |
| TOTOLINK EX200 V4.0.3c.7646_B20201211 contains a Cross-site scripting (XSS) vulnerability through the key parameter in the setWiFiExtenderConfig function. | |||||
| CVE-2024-32325 | 1 Totolink | 2 Ex200, Ex200 Firmware | 2026-06-17 | N/A | 2.4 LOW |
| TOTOLINK EX200 V4.0.3c.7646_B20201211 contains a Cross-site scripting (XSS) vulnerability through the ssid parameter in the setWiFiExtenderConfig function. | |||||
| CVE-2024-32324 | 1 Szlbt | 2 Lbt-t300-t400, Lbt-t300-t400 Firmware | 2026-06-17 | N/A | 7.8 HIGH |
| Buffer Overflow vulnerability in Shenzhen Libituo Technology Co., Ltd LBT-T300-T400 v.3.2 allows a local attacker to execute arbitrary code via the vpn_client_ip variable of the config_vpn_pptp function in rc program. | |||||
| CVE-2024-32323 | 2026-06-17 | N/A | 8.1 HIGH | ||
| SQL Injection vulnerability in cnhcit.com Haichang OA v.1.0.0 allows a remote attacker to obtain sensitive information via the if parameter in hcit.project.rte.agents.UploadImages.class. | |||||
| CVE-2024-32320 | 1 Tenda | 2 Ac500, Ac500 Firmware | 2026-06-17 | N/A | 5.9 MEDIUM |
| Tenda AC500 V2.0.1.9(1307) firmware has a stack overflow vulnerability via the timeZone parameter in the formSetTimeZone function. | |||||
| CVE-2024-32318 | 1 Tenda | 2 Ac500, Ac500 Firmware | 2026-06-17 | N/A | 9.8 CRITICAL |
| Tenda AC500 V2.0.1.9(1307) firmware has a stack overflow vulnerability via the vlan parameter in the formSetVlanInfo function. | |||||