The archive.

CVE-2024-54662 · mitre

Dante 1.4.0 through 1.4.3 (fixed in 1.4.4) has incorrect access control for some sockd.conf configurations involving socksmethod.

CVE-2024-55513 · mitre

A vulnerability was found in Raisecom MSG1200, MSG2100E, MSG2200, and MSG2300 3.90.

CVE-2024-55516 · mitre

A vulnerability was found in Raisecom MSG1200, MSG2100E, MSG2200, and MSG2300 v3.90.

Iqonic Design1 vulnerability on this pageMax CVSS 9.8Priority 50KEV 0

CVE-2024-54280 · Iqonic Design WPBookit

WordPress WPBookit plugin <= 1.6.0 - SQL Injection vulnerability

EPSS 0.6%public exploit CVSS 9.8

Fortinet1 vulnerability on this pageMax CVSS 9.8Priority 49KEV 0

CVE-2023-34990 · Fortinet FortiWLM

A relative path traversal in Fortinet FortiWLM version 8.6.0 through 8.6.5 and 8.5.0 through 8.5.4 allows attacker to execute unauthorize…

EPSS 25%CVSS 9.8

straightvisions GmbH1 vulnerability on this pageMax CVSS 9.8Priority 47KEV 0

CVE-2024-54229 · straightvisions GmbH SV100 Companion

WordPress SV100 Companion plugin <= 2.0.02 - Privilege Escalation vulnerability

EPSS 0.4%public exploit CVSS 9.8

saiful.total1 vulnerability on this pageMax CVSS 9.8Priority 46KEV 0

CVE-2024-54363 · saiful.total Wp NssUser Register

WordPress Wp NssUser Register plugin <= 1.0.0 - Privilege Escalation vulnerability

SeedProd LLC1 vulnerability on this pageMax CVSS 9.1Priority 46KEV 0

CVE-2024-54285 · SeedProd LLC SeedProd Pro

WordPress SeedProd Pro plugin <= 6.18.10 - Remote Code Execution (RCE) vulnerability

EPSS 0.5%public exploit CVSS 9.1

denniskravetstns1 vulnerability on this pageMax CVSS 9.8Priority 45KEV 0

CVE-2024-56058 · denniskravetstns VRPConnector

WordPress VRPConnector plugin <= 2.0.1 - PHP Object Injection vulnerability

farinspace1 vulnerability on this pageMax CVSS 9.8Priority 45KEV 0

CVE-2024-56059 · farinspace Partners

WordPress Partners plugin <= 0.2.0 - PHP Object Injection vulnerability

Siemens1 vulnerability on this pageMax CVSS 9.8Priority 44KEV 0

CVE-2024-49775 · Siemens Opcenter Execution Foundation

A vulnerability has been identified in Opcenter Execution Foundation (All versions < V2501.0001), Opcenter Intelligence (All versions < V…

snyk1 vulnerability on this pageMax CVSS 9.8Priority 44KEV 0

CVE-2024-21546 · snyk

Versions of the package unisharp/laravel-filemanager before 2.9.1 are vulnerable to Remote Code Execution (RCE) through using a valid mim…

EPSS 1%CVSS 9.8

LightFTP1 vulnerability on this pageMax CVSS 9.2Priority 43KEV 0

CVE-2024-11144 · LightFTP LightFTP

Race Condition with LightFTP

EPSS 0.4%public exploit CVSS 9.2

ThemeHunk1 vulnerability on this pageMax CVSS 9.1Priority 43KEV 0

CVE-2024-54369 · ThemeHunk Zita Site Builder

WordPress Zita Site Builder plugin <= 1.0.2 - Arbitrary Plugin Installation and Activation vulnerability

EPSS 2%CVSS 9.1

wpweb1 vulnerability on this pageMax CVSS 9.8Priority 43KEV 0

CVE-2024-54383 · wpweb WooCommerce PDF Vouchers

WordPress WooCommerce - PDF Vouchers plugin < 4.9.9 - Broken Authentication vulnerability

EPSS 1%CVSS 9.8

Asseco Business Solutions S.A.2 vulnerabilities on this pageMax CVSS 9.8Priority 42KEV 0

CVE-2024-4995 · Asseco Business Solutions S.A. Wapro ERP Desktop

Protocol Downgrade in Wapro ERP Desktop

EPSS 0.9%CVSS 9.8

CVE-2024-4996 · Asseco Business Solutions S.A. Wapro ERP Desktop

Hardcoded Password in Wapro ERP Desktop

EPSS 0.6%CVSS 9.8

Microsoft2 vulnerabilities on this pageMax CVSS 9.8Priority 41KEV 0

CVE-2024-41138 · Microsoft Teams (work or school)

A library injection vulnerability exists in the com.microsoft.teams2.modulehost.app helper app of Microsoft Teams (work or school) 24046.…

EPSS 0.9%CVSS 9.8

CVE-2024-39804 · Microsoft PowerPoint

A library injection vulnerability exists in Microsoft PowerPoint 16.83 for macOS.

EPSS 0.9%CVSS 9.1

Progress Software1 vulnerability on this pageMax CVSS 9.8Priority 41KEV 0

CVE-2024-10095 · Progress Software Telerik UI for WPF

Progress UI for WPF format provider unsafe deserialization vulnerability

EPSS 0.8%CVSS 9.8

OPPO1 vulnerability on this pageMax CVSS 9.8Priority 40KEV 0

CVE-2024-1610 · OPPO OPPO Store APP

OPPO Store app include remote account token hijacking and sensitive information leakage

PlexTrac1 vulnerability on this pageMax CVSS 9.8Priority 40KEV 0

CVE-2024-12687 · PlexTrac PlexTrac

Insecure YAML Deserialization

Rockwell Automation3 vulnerabilities on this pageMax CVSS 9.3Priority 40KEV 0

CVE-2024-12372 · Rockwell Automation PM1k 1408-BC3A-485

Rockwell Automation PowerMonitor™ 1000 Denial of Service

EPSS 0.9%CVSS 9.3

CVE-2024-12371 · Rockwell Automation PM1k 1408-BC3A-485

Rockwell Automation PowerMonitor™ 1000 Remote Code Execution

EPSS 0.5%CVSS 9.3

CVE-2024-12373 · Rockwell Automation PM1k 1408-BC3A-485

Rockwell Automation PowerMonitor™ 1000 Denial of Service

EPSS 0.5%CVSS 9.3

Ultimate Member1 vulnerability on this pageMax CVSS 9.8Priority 40KEV 0

CVE-2024-54367 · Ultimate Member ForumWP

WordPress ForumWP plugin <= 2.1.0 - PHP Object Injection vulnerability

VibeThemes4 vulnerabilities on this pageMax CVSS 9.9Priority 40KEV 0

CVE-2024-56050 · VibeThemes WPLMS

WordPress WPLMS plugin < 1.9.9.5.3 - Subscriber+ Arbitrary File Upload vulnerability

EPSS 0.7%CVSS 9.9

CVE-2024-56052 · VibeThemes WPLMS

WordPress WPLMS plugin < 1.9.9.5.2 - Student+ Arbitrary File Upload vulnerability

EPSS 0.7%CVSS 9.9

CVE-2024-56057 · VibeThemes WPLMS

WordPress WPLMS plugin < 1.9.9.5.2 - Arbitrary File Upload vulnerability

EPSS 0.6%CVSS 9.9

CVE-2024-56054 · VibeThemes WPLMS

WordPress WPLMS plugin < 1.9.9.5.2 - Instructor+ Arbitrary File Upload vulnerability

EPSS 0.6%CVSS 9.1

WofficeIO1 vulnerability on this pageMax CVSS 9.8Priority 40KEV 0

CVE-2024-43234 · WofficeIO Woffice

WordPress Woffice theme <= 5.4.14 - Unauthenticated Account Takeover vulnerability