| CVE ID | Title | Vendor | Product | Severity | CVSS Score | Published At | AI Analysis |
|---|---|---|---|---|---|---|---|
| CVE-2024-41944 | Sensitive Information Disclosure abusing SQL Injection in Xibo CMS proof of play report | xibosignage | xibo-cms | Medium | 6.5 | 2024-07-30 16:24:40 | Deep Dive |
| CVE-2024-41804 | Xibo allows Sensitive Information Disclosure abusing SQL Injection in Xibo CMS DataSet Column Formula | xibosignage | xibo-cms | Medium | 6.5 | 2024-07-30 15:51:54 | Deep Dive |
| CVE-2024-41802 | Xibo allows Sensitive Information Disclosure abusing SQL Injection in Xibo CMS DataSet Data Import | xibosignage | xibo-cms | High | 8.1 | 2024-07-30 15:49:52 | Deep Dive |
| CVE-2024-41803 | Xibo allows Sensitive Information Disclosure abusing SQL Injection in Xibo CMS DataSet Filter | xibosignage | xibo-cms | Medium | 4.9 | 2024-07-30 15:49:52 | Deep Dive |
| CVE-2024-7106 | Spina CMS media_folders cross-site request forgery | Spina | CMS | Medium | 4.3 | 2024-07-25 21:00:06 | Deep Dive |
| CVE-2024-41800 | Craft CMS Allows TOTP Token To Stay Valid After Use | craftcms | cms | Medium | 4.8 | 2024-07-25 16:12:59 | Deep Dive |
| CVE-2024-7065 | Spina CMS cross-site request forgery | Spina | CMS | Medium | 4.3 | 2024-07-24 09:31:04 | Deep Dive |
| CVE-2024-6947 | Flute CMS Notification ContentParser.php replaceContent code injection | Flute | CMS | Medium | 4.7 | 2024-07-21 09:00:07 | Deep Dive |
| CVE-2024-6946 | Flute CMS list code injection | Flute | CMS | Medium | 4.7 | 2024-07-21 08:31:04 | Deep Dive |
| CVE-2024-6945 | Flute CMS Avatar Upload Page ImagesController.php unrestricted upload | Flute | CMS | Medium | 6.3 | 2024-07-21 08:00:07 | Deep Dive |
| CVE-2024-21729 | [20240701] - Core - XSS in accessible media selection field | Joomla! Project | Joomla! CMS | - | - | 2024-07-09 16:15:51 | Deep Dive |
| CVE-2024-21730 | [20240702] - Core - Self-XSS in fancyselect list field layout | Joomla! Project | Joomla! CMS | - | - | 2024-07-09 16:15:50 | Deep Dive |
| CVE-2024-26279 | [20240704] - Core - XSS in Wrapper extensions | Joomla! Project | Joomla! CMS | - | - | 2024-07-09 16:15:48 | Deep Dive |
| CVE-2024-26278 | [20240705] - Core - XSS in com_fields default field value | Joomla! Project | Joomla! CMS | - | - | 2024-07-09 16:15:45 | Deep Dive |
| CVE-2024-21731 | [20240703] - Core - XSS in StringHelper::truncate method | Joomla! Project | Joomla! CMS | - | - | 2024-07-09 16:15:43 | Deep Dive |
| CVE-2024-4836 | LFI in sites managed by Edito CMS | Edito | Edito CMS | High | 7.5 | 2024-07-02 08:44:06 | Deep Dive |
| CVE-2024-3816 | SQLi in S@M CMS | Concept Intermedia | S@M CMS | - | - | 2024-06-28 12:45:30 | Deep Dive |
| CVE-2024-3801 | XSS in S@M CMS | Concept Intermedia | S@M CMS | - | - | 2024-06-28 12:44:39 | Deep Dive |
| CVE-2024-3800 | XSS in S@M CMS | Concept Intermedia | S@M CMS | - | - | 2024-06-28 12:43:49 | Deep Dive |
| CVE-2024-6179 | XSS vulnerability in LG SuperSign CMS | LG Electronics | SuperSign CMS | 中危 | - | 2024-06-20 01:53:12 | Deep Dive |