The archive.

CVE-2024-40765 · SonicWall SonicOS

An Integer-based buffer overflow vulnerability in the SonicOS via IPSec allows a remote attacker in specific conditions to cause Denial o…

EPSS 0.8%CVSS 9.8

Ivanti1 vulnerability on this pageMax CVSS 9.0Priority 97KEV 1

CVE-2025-0282 · Ivanti Connect Secure

Ivanti Connect Secure, Policy Secure, and ZTA Gateways Stack-Based Buffer Overflow Vulnerability

KEV · due 15 Jan ransomware use EPSS 100%public exploit SSVC act CVSS 9.0

MacWarrior2 vulnerabilities on this pageMax CVSS 9.8Priority 53KEV 0

CVE-2025-21624 · MacWarrior clipbucket-v5

ClipBucket V5 Playlist Cover File Upload to Remote Code Execution

EPSS 1%public exploit CVSS 9.8

CVE-2025-21622 · MacWarrior clipbucket-v5

ClipBucket V5 Avatar URL Path Traversal to Arbitrary File Delete

EPSS 1.0%public exploit CVSS 9.1

code-projects5 vulnerabilities on this pageMax CVSS 9.8Priority 52KEV 0

CVE-2025-0298 · code-projects Online Book Shop

code-projects Online Book Shop process_login.php sql injection

EPSS 1.0%public exploit CVSS 9.8

CVE-2025-0296 · code-projects Online Book Shop

code-projects Online Book Shop booklist.php sql injection

EPSS 0.7%public exploit CVSS 9.8

CVE-2025-0299 · code-projects Online Book Shop

code-projects Online Book Shop search_result.php sql injection

CVE-2025-0335 · code-projects Online Bike Rental System

code-projects Online Bike Rental System Change Image unrestricted upload

CVE-2025-0340 · code-projects Cinema Seat Reservation System

code-projects Cinema Seat Reservation System deleteBooking.php sql injection

EPSS 0.7%CVSS 9.8

nilsonLazarin3 vulnerabilities on this pageMax CVSS 10.0Priority 51KEV 0

CVE-2025-22133 · nilsonLazarin WeGIA

WeGIA Allows Arbitrary File Upload with Remote Code Execution (RCE)

EPSS 0.8%public exploit CVSS 10.0

CVE-2025-22140 · nilsonLazarin WeGIA

WeGIA SQL Injection (Blind Time-Based) endpoint 'dependente_listar_um.php' parameter 'id_dependente'

EPSS 0.7%public exploit CVSS 9.4

CVE-2025-22141 · nilsonLazarin WeGIA

WeGIA SQL Injection (Blind Time-Based) endpoint 'verificar_recursos_cargo.php' parameter 'cargo'

EPSS 0.7%public exploit CVSS 9.4

Apache Software Foundation1 vulnerability on this pageMax CVSS 9.8Priority 49KEV 0

CVE-2024-54676 · Apache Software Foundation Apache OpenMeetings

Apache OpenMeetings: Deserialisation of untrusted data in cluster mode

EPSS 69%CVSS 9.8

Codezips1 vulnerability on this pageMax CVSS 9.8Priority 49KEV 0

CVE-2025-0336 · Codezips Project Management System

Codezips Project Management System teacher.php sql injection

Mozilla1 vulnerability on this pageMax CVSS 9.8Priority 49KEV 0

CVE-2025-0247 · Mozilla Firefox

Memory safety bugs fixed in Firefox 134 and Thunderbird 134

EPSS 11%CVSS 9.8

themeglow1 vulnerability on this pageMax CVSS 10.0Priority 49KEV 0

CVE-2024-43243 · themeglow JobBoard Job listing

WordPress JobBoard Job listing plugin <= 1.2.6 - Arbitrary File Upload vulnerability

EPSS 0.5%public exploit CVSS 10.0

ZeroWdd2 vulnerabilities on this pageMax CVSS 9.8Priority 49KEV 0

CVE-2024-13189 · ZeroWdd myblog

ZeroWdd myblog MyBlogMvcConfig.java permission

CVE-2024-13191 · ZeroWdd myblog

ZeroWdd myblog uploadController.java upload unrestricted upload

AmentoTech Private Limited1 vulnerability on this pageMax CVSS 9.8Priority 48KEV 0

CVE-2024-49222 · AmentoTech Private Limited WPGuppy

WordPress WPGuppy plugin <= 1.1.0 - PHP Object Injection vulnerability

EPSS 0.5%public exploit CVSS 9.8

CampCodes1 vulnerability on this pageMax CVSS 9.8Priority 48KEV 0

CVE-2025-0341 · CampCodes Computer Laboratory Management System

CampCodes Computer Laboratory Management System edit unrestricted upload

EPSS 0.5%public exploit CVSS 9.8

nickboss2 vulnerabilities on this pageMax CVSS 9.8Priority 48KEV 0

CVE-2024-11613 · nickboss Iptanus File Upload

WordPress File Upload <= 4.24.15 - Unauthenticated Remote Code Execution, Arbitrary File Read, and Arbitrary File Deletion

EPSS 4%CVSS 9.8

CVE-2024-11635 · nickboss Iptanus File Upload

WordPress File Upload <= 4.24.12 - Unuathenticated Remote Code Execution

donglight1 vulnerability on this pageMax CVSS 9.8Priority 47KEV 0

CVE-2024-13195 · donglight bookstore电商书城系统说明

donglight bookstore电商书城系统说明 HttpUtil.java getHtml server-side request forgery

EPSS 0.4%public exploit CVSS 9.8

silverplugins2171 vulnerability on this pageMax CVSS 9.3Priority 45KEV 0

CVE-2024-56290 · silverplugins217 Multiple Shipping And Billing Address For Woocommerce

WordPress Multiple Shipping And Billing Address For Woocommerce Plugin <= 1.2 - Unauthenticated SQL Injection vulnerability

EPSS 0.4%public exploit CVSS 9.3

sslplugins1 vulnerability on this pageMax CVSS 9.3Priority 45KEV 0

CVE-2024-56284 · sslplugins SSL Wireless SMS Notification

WordPress SSL Wireless SMS Notification Plugin <= 3.5.0 - SQL Injection vulnerability

EPSS 0.4%public exploit CVSS 9.3

Iocharger10 vulnerabilities on this pageMax CVSS 9.8Priority 44KEV 0

CVE-2024-43648 · Iocharger Iocharger firmware for AC models

Authenticated command injection via <redacted>.exe <redacted> parameter

CVE-2024-43649 · Iocharger Iocharger firmware for AC models

Authenticated command injection via <redacted>.exe <redacted> parameter

CVE-2024-43652 · Iocharger Iocharger firmware for AC chargers

Authenticated command injection in the <redacted> action leads to full remote code execution as root on the charging station

CVE-2024-43653 · Iocharger Iocharger firmware for AC models

Authenticated command injection in the <redacted> action leads to full remote code execution as root on the charging station

CVE-2024-43650 · Iocharger Iocharger firmware for AC models

Authenticated command injection in the <redacted> action leads to full remote code execution as root on the charging station

CVE-2024-43656 · Iocharger Iocharger firmware for AC models

A backup can be manipulated and then restored to create arbitrary files inside the <redacted> directory. A CGI script can be added to the web directory this way, allowing for full remote code execution.

CVE-2024-43657 · Iocharger Iocharger firmware for AC models

When uploading new firmware, a shell script inside a firmware file is executed during its processing. This can be used to craft a custom firmware file with a custom script with arbitrary code, which will then be executed on the charging station.

CVE-2024-43655 · Iocharger Iocharger firmware for AC models

Any authenticated users can execute OS commands as root using the <redacted>.sh CGI script.

EPSS 1%CVSS 9.3

CVE-2024-43663 · Iocharger Iocharger firmware for AC models

Buffer overflow vulnerabilities in CGI scripts lead to segfault

CVE-2024-43661 · Iocharger Iocharger firmware for AC models

Buffer overflow in <redacted>.so leads to DoS of OCPP service

EPSS 0.5%CVSS 9.8

mitre5 vulnerabilities on this pageMax CVSS 9.8Priority 43KEV 0

CVE-2023-28354 · mitre

An issue was discovered in Opsview Monitor Agent 6.8.

CVE-2024-46505 · mitre

Infoblox BloxOne v2.4 was discovered to contain a business logic flaw due to thick client vulnerabilities.

EPSS 0.3%public exploit CVSS 9.1

CVE-2024-55224 · mitre

An HTML injection vulnerability in Vaultwarden prior to v1.32.5 allows attackers to execute arbitrary code via injecting a crafted payloa…

EPSS 0.8%CVSS 9.6

CVE-2024-54724 · mitre

PHPYun before 7.0.2 is vulnerable to code execution through backdoor-restricted arbitrary file writing and file inclusion.

CVE-2024-55225 · mitre

An issue in the component src/api/identity.rs of Vaultwarden prior to v1.32.5 allows attackers to impersonate users, including Administra…

Smackcoders Inc.,1 vulnerability on this pageMax CVSS 9.1Priority 43KEV 0

CVE-2024-56278 · Smackcoders Inc., WP Ultimate Exporter

WordPress WP Ultimate Exporter plugin <= 2.9.1 - Remote Code Execution (RCE) vulnerability

EPSS 2%CVSS 9.1

scriptsbundle1 vulnerability on this pageMax CVSS 9.8Priority 40KEV 0

CVE-2024-11350 · scriptsbundle AdForest

AdForest <= 5.1.6 - Privilege Escalation via Password Reset/Account Takeover

EPSS 0.7%CVSS 9.8

hakeemnala1 vulnerability on this pageMax CVSS 9.8Priority 39KEV 0

CVE-2024-49649 · hakeemnala Build App Online

WordPress Build App Online plugin <= 1.0.23 - Local File Inclusion vulnerability

Linux1 vulnerability on this pageMax CVSS 9.8Priority 39KEV 0

CVE-2024-56779 · Linux Linux

nfsd: fix nfs4_openowner leak when concurrent nfsd4_open occur

stonith4041 vulnerability on this pageMax CVSS 9.8Priority 39KEV 0

CVE-2025-22137 · stonith404 pingvin-share

Arbitrary File Overwrite via HTTP POST in Pingvin Share