Skip to content

CyberSecBulletin

CVEs published on August 4, 2024

10 vulnerabilities, ordered with the most urgent first.

9.1 Critical severity
Planning Analytics Local: Missing Authentication for Critical Functionality
CVE-2024-35143Aug 4, 2024IBM
9.8 Critical severity
eladmin: Improper Limitation of a Pathname to a Restricted Directory
CVE-2024-7458Aug 4, 2024Elunez
9.8 Critical severity
Placement Management System: Improper Neutralization of Special Elements used in an SQL Command
CVE-2024-7449Aug 4, 2024itsourcecode
9.8 Critical severity
Placement Management System: Improper Neutralization of Special Elements used in an SQL Command
CVE-2024-7451Aug 4, 2024itsourcecode
9.8 Critical severity
Placement Management System: Improper Neutralization of Special Elements used in an SQL Command
CVE-2024-7452Aug 4, 2024itsourcecode
9.8 Critical severity
Clinics Patient Management System: Improper Neutralization of Special Elements used in an SQL Command
CVE-2024-7454Aug 4, 2024SourceCodester
9.8 Critical severity
Tailoring Management System: Improper Neutralization of Special Elements used in an SQL Command
CVE-2024-7455Aug 4, 2024itsourcecode
8.8 High severity
Placement Management System: Unrestricted Upload of File with Dangerous Type
CVE-2024-7450Aug 4, 2024itsourcecode
8.8 High severity
Warehouse Inventory System: Cross-Site Request Forgery
CVE-2024-7459Aug 4, 2024Oswapp
8.8 High severity
Warehouse Inventory System: Cross-Site Request Forgery
CVE-2024-7460Aug 4, 2024Oswapp