The archive.

CVE-2024-57224 · mitre

Linksys E7350 1.1.00.032 was discovered to contain a command injection vulnerability via the ifname parameter in the apcli_do_enr_pin_wps…

CVE-2024-57225 · mitre

Linksys E7350 1.1.00.032 was discovered to contain a command injection vulnerability via the devname parameter in the reset_wifi function.

CVE-2024-57686 · mitre

A Cross Site Scripting (XSS) vulnerability was found in /landrecordsys/admin/contactus.php in PHPGurukul Land Record System v1.0, which a…

CVE-2025-22946 · mitre

Tenda ac9 v1.0 firmware v15.03.05.19 contains a stack overflow vulnerability in /goform/SetOnlineDevName, which may lead to remote arbitr…

EPSS 0.9%public exploit CVSS 9.8

CVE-2025-22949 · mitre

Tenda ac9 v1.0 firmware v15.03.05.19 is vulnerable to command injection in /goform/SetSambaCfg, which may lead to remote arbitrary code e…

EPSS 2%CVSS 9.8

CVE-2024-29970 · mitre

Fortanix Enclave OS 3.36.1941-EM has an interface vulnerability that leads to state corruption via injected signals.

CVE-2024-29971 · mitre

Scontain SCONE 5.8.0 has an interface vulnerability that leads to state corruption via injected signals.

Tenda1 vulnerability on this pageMax CVSS 9.8Priority 55KEV 0

CVE-2025-0349 · Tenda AC6

Tenda AC6 GetParentControlInfo stack-based overflow

Arista Networks1 vulnerability on this pageMax CVSS 9.8Priority 50KEV 0

CVE-2024-9132 · Arista Networks Arista Edge Threat Management

The administrator is able to configure an insecure captive portal script

EPSS 0.7%public exploit CVSS 9.8

code-projects1 vulnerability on this pageMax CVSS 9.8Priority 50KEV 0

CVE-2025-0347 · code-projects Admission Management System

code-projects Admission Management System Login index.php sql injection

EPSS 0.7%public exploit CVSS 9.8

Atheos1 vulnerability on this pageMax CVSS 9.4Priority 49KEV 0

CVE-2025-22152 · Atheos Atheos

Improper Path Validation Enables Path Traversal in Multiple Components in Atheos

EPSS 0.6%public exploit CVSS 9.4

FastCGI1 vulnerability on this pageMax CVSS 9.3Priority 48KEV 0

CVE-2025-23016 · FastCGI fcgi

FastCGI fcgi2 (aka fcgi) 2.x through 2.4.4 has an integer overflow (and resultant heap-based buffer overflow) via crafted nameLen or valu…

EPSS 0.6%public exploit CVSS 9.3

Iocharger2 vulnerabilities on this pageMax CVSS 9.3Priority 44KEV 0

CVE-2024-43651 · Iocharger Iocharger firmware for AC models

Authenticated command injection in the <redacted> action leads to full remote code execution as root on the charging station

EPSS 2%CVSS 9.3

CVE-2024-43654 · Iocharger Iocharger firmware for AC models

Authenticated command injection in the <redacted> action leads to full remote code execution as root on the charging station

EPSS 2%CVSS 9.3

librdf1 vulnerability on this pageMax CVSS 9.3Priority 44KEV 0

CVE-2024-57823 · librdf Raptor RDF Syntax Library

In Raptor RDF Syntax Library through 2.0.16, there is an integer underflow when normalizing a URI with the turtle parser in raptor_uri_no…

EPSS 0.3%public exploit CVSS 9.3

IBM1 vulnerability on this pageMax CVSS 9.8Priority 43KEV 0

CVE-2024-41787 · IBM Engineering Requirements Management DOORS Next

IBM Engineering Requirements Management DOORS Next code execution

EPSS 1%CVSS 9.8

mdshuvo1 vulnerability on this pageMax CVSS 9.8Priority 43KEV 0

CVE-2024-11642 · mdshuvo Post Grid Master — Post Grids & AJAX Filters

Post Grid Master <= 3.4.12 - Missing Authorization to Unauthenticated Local PHP File Inclusion

EPSS 1%CVSS 9.8

stellarwp1 vulnerability on this pageMax CVSS 9.8Priority 43KEV 0

CVE-2024-12877 · stellarwp GiveWP – Donation Plugin and Fundraising Platform

GiveWP – Donation Plugin and Fundraising Platform <= 3.19.2 - Unauthenticated PHP Object Injection

EPSS 1%CVSS 9.8

Drupal12 vulnerabilities on this pageMax CVSS 9.8Priority 40KEV 0

CVE-2024-13258 · Drupal Drupal REST & JSON API Authentication

Drupal REST & JSON API Authentication - Moderately critical - Access bypass - SA-CONTRIB-2024-022

EPSS 0.7%CVSS 9.8

CVE-2024-13239 · Drupal Two-factor Authentication (TFA)

Two-factor Authentication (TFA) - Moderately critical - Access bypass - SA-CONTRIB-2024-003

EPSS 0.6%CVSS 9.8

CVE-2024-13264 · Drupal Opigno module

Opigno module - Critical - Arbitrary PHP code execution - SA-CONTRIB-2024-028

CVE-2024-13279 · Drupal Two-factor Authentication (TFA)

Two-factor Authentication (TFA) - Critical - Access bypass - SA-CONTRIB-2024-043

CVE-2024-13280 · Drupal Persistent Login

Persistent Login - Moderately critical - Access bypass - SA-CONTRIB-2024-044

EPSS 0.4%CVSS 9.8

CVE-2024-13285 · Drupal wkhtmltopdf

wkhtmltopdf - Highly critical - Unsupported - SA-CONTRIB-2024-049

CVE-2024-13242 · Drupal Swift Mailer (abandoned)

Swift Mailer - Moderately critical - Access bypass - SA-CONTRIB-2024-006

CVE-2024-13253 · Drupal Advanced PWA inc Push Notifications

Advanced PWA - Critical - Access bypass - SA-CONTRIB-2024-017

CVE-2024-13241 · Drupal Open Social

Open Social - Moderately critical - Information Disclosure - SA-CONTRIB-2024-005

CVE-2024-13277 · Drupal Smart IP Ban

Smart IP Ban - Critical - Access bypass - SA-CONTRIB-2024-041

CVE-2024-13278 · Drupal Diff

Diff - Moderately critical - Access bypass, Information Disclosure - SA-CONTRIB-2024-042

CVE-2024-13281 · Drupal Monster Menus

Monster Menus - Moderately critical - Access bypass, Information Disclosure - SA-CONTRIB-2024-045