The archive.

CVE-2024-55663 · xwiki xwiki-platform

XWiki Platform has an SQL injection in getdocuments.vm with sort parameter

EPSS 0.8%CVSS 9.8

gstreamer16 vulnerabilities on this pageMax CVSS 9.8Priority 54KEV 0

CVE-2024-47539 · gstreamer gstreamer

GHSL-2024-195: GStreamer has an OOB-write in convert_to_s334_1a

CVE-2024-47538 · gstreamer gstreamer

GHSL-2024-115: GStreamer has a stack-buffer overflow in vorbis_handle_identification_packet

CVE-2024-47607 · gstreamer gstreamer

GHSL-2024-116: Stack-buffer overflow in gst_opus_dec_parse_header

CVE-2024-47615 · gstreamer gstreamer

GHSL-2024-117: GStreamer has an out-of-bounds write in Ogg demuxer

CVE-2024-47540 · gstreamer gstreamer

GHSL-2024-197: GStreamer uses uninitialized stack memory in Matroska/WebM demuxer

CVE-2024-47597 · gstreamer gstreamer

GHSL-2024-245: GStreamer has an OOB-read in qtdemux_parse_samples

CVE-2024-47600 · gstreamer gstreamer

GHSL-2024-248: GStreamer has an OOB-read in format_channel_mask

CVE-2024-47613 · gstreamer gstreamer

GHSL-2024-118: GStreamer has a null pointer dereference in gst_gdk_pixbuf_dec_flush

EPSS 0.9%public exploit CVSS 9.8

CVE-2024-47775 · gstreamer gstreamer

GHSL-2024-261: GStreamer has an OOB-read in parse_ds64

CVE-2024-47776 · gstreamer gstreamer

GHSL-2024-260: GStreamer has a OOB-read in gst_wavparse_cue_chunk

CVE-2024-47777 · gstreamer gstreamer

GHSL-2024-259: GStreamer has an OOB-read in gst_wavparse_smpl_chunk

CVE-2024-47598 · gstreamer gstreamer

GHSL-2024-246: GStreamer has an OOB-read in qtdemux_merge_sample_table

EPSS 0.9%public exploit CVSS 9.1

CVE-2024-47834 · gstreamer gstreamer

GHSL-2024-280: Gstreamer Use-After-Free read in Matroska CodecPrivate

EPSS 0.9%public exploit CVSS 9.1

CVE-2024-47606 · gstreamer gstreamer

GHSL-2024-166: GStreamer Integer overflows in MP4/MOV demuxer and memory allocator that can lead to out-of-bounds writes

EPSS 2%CVSS 9.8

CVE-2024-47537 · gstreamer gstreamer

GHSL-2024-094: GStreamer has an OOB-write in isomp4/qtdemux.c

EPSS 1.0%CVSS 9.8

CVE-2024-47774 · gstreamer gstreamer

GHSL-2024-262: GStreamer has an OOB-read in gst_avi_subtitle_parse_gab2_chunk

EPSS 0.8%CVSS 9.1

Codezips1 vulnerability on this pageMax CVSS 9.8Priority 52KEV 0

CVE-2024-12484 · Codezips Technical Discussion Forum

Codezips Technical Discussion Forum signuppost.php sql injection

EPSS 1.0%public exploit CVSS 9.8

mitre4 vulnerabilities on this pageMax CVSS 9.8Priority 52KEV 0

CVE-2024-54810 · mitre

A SQL Injection vulnerability was found in /preschool/admin/password-recovery.php in PHPGurukul Pre-School Enrollment System Project v1.0…

CVE-2024-55099 · mitre

A SQL Injection vulnerability was found in /admin/index.php in phpgurukul Online Nurse Hiring System v1.0, which allows remote attackers…

CVE-2024-54811 · mitre

A SQL injection vulnerability in /index.php in PHPGurukul Park Ticketing Management System v1.0 allows an attacker to execute arbitrary S…

EPSS 0.6%public exploit CVSS 9.8

CVE-2024-54842 · mitre

A SQL injection vulnerability was found in phpgurukul Online Nurse Hiring System v1.0 in /admin/password-recovery.php via the mobileno pa…

EPSS 0.5%public exploit CVSS 9.8

code-projects1 vulnerability on this pageMax CVSS 9.8Priority 51KEV 0

CVE-2024-12490 · code-projects Online Class and Exam Scheduling System

code-projects Online Class and Exam Scheduling System teacher_save.php sql injection

EPSS 0.8%public exploit CVSS 9.8

themehunk1 vulnerability on this pageMax CVSS 9.8Priority 49KEV 0

CVE-2024-10124 · themehunk Vayu Blocks – Website Builder for the Block Editor

Vayu Blocks – Gutenberg Blocks for WordPress & WooCommerce <= 1.1.1 - Missing Authorization to Unauthenticated Arbitrary Plugin Installation/Activation

EPSS 33%CVSS 9.8

Veeam1 vulnerability on this pageMax CVSS 9.9Priority 49KEV 0

CVE-2024-42448 · Veeam Service Provider Console

From the VSPC management agent machine, under condition that the management agent is authorized on the server, it is possible to perform…

EPSS 20%CVSS 9.9

glpi-project1 vulnerability on this pageMax CVSS 9.3Priority 47KEV 0

CVE-2024-50339 · glpi-project glpi

GLPI vulnerable to unauthenticated session hijacking

EPSS 19%CVSS 9.3

golang.org/x/crypto1 vulnerability on this pageMax CVSS 9.1Priority 45KEV 0

CVE-2024-45337 · golang.org/x/crypto golang.org/x/crypto/ssh

Misuse of connection.serverAuthenticate may cause authorization bypass in golang.org/x/crypto

EPSS 4%CVSS 9.1

GFI1 vulnerability on this pageMax CVSS 9.8Priority 44KEV 0

CVE-2024-11948 · GFI Archiver

GFI Archiver Telerik Web UI Remote Code Execution Vulnerability

EPSS 1%CVSS 9.8

Microsoft1 vulnerability on this pageMax CVSS 9.8Priority 44KEV 0

CVE-2024-49147 · Microsoft Microsoft Update Catalog

Microsoft Update Catalog Elevation of Privilege Vulnerability

EPSS 1%CVSS 9.8

ltdrdata2 vulnerabilities on this pageMax CVSS 10.0Priority 43KEV 0

CVE-2024-21574 · ltdrdata ComfyUI-Manager

The issue stems from a missing validation of the pip field in a POST request sent to the /customnode/install endpoint used to install cus…

EPSS 1%CVSS 10.0

CVE-2024-21575 · ltdrdata ComfyUI-Impact-Pack

ComfyUI-Impact-Pack is vulnerable to Path Traversal.

EPSS 1%CVSS 9.2

Apple7 vulnerabilities on this pageMax CVSS 9.8Priority 42KEV 0

CVE-2024-54534 · Apple Safari

The issue was addressed with improved memory handling.

EPSS 1%CVSS 9.8

CVE-2024-54492 · Apple iOS and iPadOS

This issue was addressed by using HTTPS when sending information over the network.

EPSS 0.9%CVSS 9.8

CVE-2024-54506 · Apple macOS

An out-of-bounds access issue was addressed with improved bounds checking.

EPSS 0.7%CVSS 9.8

CVE-2024-44241 · Apple iOS and iPadOS

The issue was addressed with improved bounds checks.

CVE-2024-44242 · Apple iOS and iPadOS

The issue was addressed with improved bounds checks.

CVE-2024-54465 · Apple macOS

A logic issue was addressed with improved state management.

CVE-2024-44299 · Apple iOS and iPadOS

The issue was addressed with improved bounds checks.

EPSS 0.5%CVSS 9.8

1000 Projects1 vulnerability on this pageMax CVSS 9.8Priority 41KEV 0

CVE-2024-12497 · 1000 Projects Attendance Tracking Management System

1000 Projects Attendance Tracking Management System check_admin_login.php sql injection

EPSS 0.9%CVSS 9.8

tarecord1 vulnerability on this pageMax CVSS 9.8Priority 41KEV 0

CVE-2024-11015 · tarecord Sign In With Google

Sign In With Google <= 1.8.0 - Authentication Bypass in authenticate_user

EPSS 0.8%CVSS 9.8

siyuan-note1 vulnerability on this pageMax CVSS 9.8Priority 40KEV 0

CVE-2024-55660 · siyuan-note siyuan

SiYuan has an SSTI via /api/template/renderSprig

TECNO1 vulnerability on this pageMax CVSS 9.8Priority 39KEV 0

CVE-2024-12603 · TECNO com.transsion.applock

A logic vulnerability in the the mobile application (com.transsion.applock) can lead to bypassing the application password.