Vulnerabilities (CVE)

Total 396929 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2024-31611 1 Seacms 1 Seacms 2026-06-17 N/A 9.1 CRITICAL
SeaCMS 12.9 has a file deletion vulnerability via admin_template.php.
CVE-2024-31610 1 Code-projects 1 Simple School Management System 2026-06-17 N/A 6.3 MEDIUM
File Upload vulnerability in the function for employees to upload avatars in Code-Projects Simple School Management System v1.0 allows attackers to run arbitrary code via upload of crafted file.
CVE-2024-31609 1 Bosscms 1 Bosscms 2026-06-17 N/A 7.1 HIGH
Cross Site Scripting (XSS) vulnerability in BOSSCMS v3.10 allows attackers to run arbitrary code via the header code and footer code fields in code configuration.
CVE-2024-31601 2026-06-17 N/A 9.8 CRITICAL
An issue in Beijing Panabit Network Software Co., Ltd Panalog big data analysis platform v. 20240323 and before allows attackers to execute arbitrary code via the exportpdf.php component.
CVE-2024-31587 2026-06-17 N/A 6.5 MEDIUM
SecuSTATION Camera V2.5.5.3116-S50-SMA-B20160811A and lower allows an unauthenticated attacker to download device configuration files via a crafted request.
CVE-2024-31586 1 Oretnom23 1 Computer Laboratory Management System 2026-06-17 N/A 6.1 MEDIUM
A Cross Site Scripting (XSS) vulnerability exists in Computer Laboratory Management System version 1.0. This vulnerability allows a remote attacker to execute arbitrary code via the Borrower Name, Department, and Remarks parameters.
CVE-2024-31585 2 Fedoraproject, Ffmpeg 2 Fedora, Ffmpeg 2026-06-17 N/A 5.3 MEDIUM
FFmpeg version n5.1 to n6.1 was discovered to contain an Off-by-one Error vulnerability in libavfilter/avf_showspectrum.c. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input.
CVE-2024-31584 1 Linuxfoundation 1 Pytorch 2026-06-17 N/A 5.5 MEDIUM
Pytorch before v2.2.0 has an Out-of-bounds Read vulnerability via the component torch/csrc/jit/mobile/flatbuffer_loader.cpp.
CVE-2024-31583 1 Linuxfoundation 1 Pytorch 2026-06-17 N/A 7.8 HIGH
Pytorch before version v2.2.0 was discovered to contain a use-after-free vulnerability in torch/csrc/jit/mobile/interpreter.cpp.
CVE-2024-31582 2 Fedoraproject, Ffmpeg 2 Fedora, Ffmpeg 2026-06-17 N/A 7.8 HIGH
FFmpeg version n6.1 was discovered to contain a heap buffer overflow vulnerability in the draw_block_rectangle function of libavfilter/vf_codecview.c. This vulnerability allows attackers to cause undefined behavior or a Denial of Service (DoS) via crafted input.
CVE-2024-31581 2 Fedoraproject, Ffmpeg 2 Fedora, Ffmpeg 2026-06-17 N/A 9.8 CRITICAL
FFmpeg version n6.1 was discovered to contain an improper validation of array index vulnerability in libavcodec/cbs_h266_syntax_template.c. This vulnerability allows attackers to cause undefined behavior within the application.
CVE-2024-31580 1 Linuxfoundation 1 Pytorch 2026-06-17 N/A 4.0 MEDIUM
PyTorch before v2.2.0 was discovered to contain a heap buffer overflow vulnerability in the component /runtime/vararg_functions.cpp. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input.
CVE-2024-31578 2 Fedoraproject, Ffmpeg 2 Fedora, Ffmpeg 2026-06-17 N/A 7.5 HIGH
FFmpeg version n6.1.1 was discovered to contain a heap use-after-free via the av_hwframe_ctx_init function.
CVE-2024-31574 1 Twcms 1 Twcms 2026-06-17 N/A 5.0 MEDIUM
Cross Site Scripting vulnerability in TWCMS v.2.6 allows a local attacker to execute arbitrary code via a crafted script
CVE-2024-31573 2026-06-17 N/A 4.0 MEDIUM
XMLUnit for Java before 2.10.0, in the default configuration, might allow code execution via an untrusted stylesheet (used for an XSLT transformation), because XSLT extension functions are enabled.
CVE-2024-31570 1 Freeimage Project 1 Freeimage 2026-06-17 N/A 9.8 CRITICAL
libfreeimage in FreeImage 3.4.0 through 3.18.0 has a stack-based buffer overflow in the PluginXPM.cpp Load function via an XPM file.
CVE-2024-31556 2026-06-17 N/A 7.8 HIGH
An issue in Reportico Web before v.8.1.0 allows a local attacker to execute arbitrary code and obtain sensitive information via the sessionid function.
CVE-2024-31552 2026-06-17 N/A 7.1 HIGH
CuteHttpFileServer v.3.1 version has an arbitrary file download vulnerability, which allows attackers to download arbitrary files on the server and obtain sensitive information.
CVE-2024-31551 1 Cmseasy 1 Cmseasy 2026-06-17 N/A 7.5 HIGH
Directory Traversal vulnerability in lib/admin/image.admin.php in cmseasy v7.7.7.9 20240105 allows attackers to delete arbitrary files via crafted GET request.
CVE-2024-31547 1 Oretnom23 1 Computer Laboratory Management System 2026-06-17 N/A 9.1 CRITICAL
Computer Laboratory Management System v1.0 is vulnerable to SQL Injection via the "id" parameter of /admin/item/view_item.php.