The archive.

CVE-2024-54932 · mitre

Kashipara E-learning Management System v1.0 is vulnerable to SQL Injection in /admin/delete_department.php.

CVE-2024-54933 · mitre

Kashipara E-learning Management System v1.0 is vulnerable to SQL Injection in /admin/delete_content.php.

CVE-2024-54934 · mitre

Kashipara E-learning Management System v1.0 is vulnerable to SQL Injection in /admin/delete_class.php.

CVE-2024-54751 · mitre

COMFAST CF-WR630AX v2.7.0.2 was discovered to contain a hardcoded password vulnerability in /etc/shadow, which allows attackers to log in…

EPSS 0.4%public exploit CVSS 9.8

CVE-2024-46340 · mitre

TL-WR845N(UN)_V4_201214, TP-Link TL-WR845N(UN)_V4_200909, and TL-WR845N(UN)_V4_190219 was discovered to transmit user credentials in plai…

EPSS 0.3%public exploit CVSS 9.8

CVE-2024-53552 · mitre

CrushFTP 10 before 10.8.3 and 11 before 11.2.3 mishandles password reset, leading to account takeover.

CVE-2024-55884 · mitre

In the Mullvad VPN client 2024.6 (Desktop), 2024.8 (iOS), and 2024.8-beta1 (Android), the exception-handling alternate stack can be exhau…

EPSS 1%CVSS 9.0

CVE-2024-46442 · mitre

An issue in the BYD Dilink Headunit System v3.0 to v4.0 allows attackers to bypass authentication via a bruteforce attack.

CVE-2024-53480 · mitre

Phpgurukul's Beauty Parlour Management System v1.1 is vulnerable to SQL Injection in `login.php` via the `emailcont` parameter.

CVE-2024-55586 · mitre

Nette Database through 3.2.4 allows SQL injection in certain situations involving an untrusted filter that is directly passed to the wher…

CVE-2024-45494 · mitre

An issue was discovered in MSA FieldServer Gateway 5.0.0 through 6.5.2 (Fixed in 7.0.0).

CVE-2024-45493 · mitre

An issue was discovered in MSA FieldServer Gateway 5.0.0 through 6.5.2 (Fixed in 7.0.0).

supsystic1 vulnerability on this pageMax CVSS 9.8Priority 49KEV 0

CVE-2023-51353 · supsystic Popup by Supsystic

WordPress Popup by Supsystic plugin <= 1.10.19 - Broken Access Control vulnerability

EPSS 0.6%public exploit CVSS 9.8

Ivanti5 vulnerabilities on this pageMax CVSS 10.0Priority 48KEV 0

CVE-2024-11639 · Ivanti Cloud Services Application

An authentication bypass in the admin web console of Ivanti CSA before 5.0.3 allows a remote unauthenticated attacker to gain administrat…

EPSS 5%CVSS 10.0

CVE-2024-11773 · Ivanti Cloud Services Application

SQL injection in the admin web console of Ivanti CSA before version 5.0.3 allows a remote authenticated attacker with admin privileges to…

EPSS 23%CVSS 9.1

CVE-2024-11772 · Ivanti Cloud Services Application

Command injection in the admin web console of Ivanti CSA before version 5.0.3 allows a remote authenticated attacker with admin privilege…

EPSS 8%CVSS 9.1

CVE-2024-11633 · Ivanti Connect Secure

Argument injection in Ivanti Connect Secure before version 22.7R2.4 allows a remote authenticated attacker with admin privileges to achie…

EPSS 2%CVSS 9.1

CVE-2024-11634 · Ivanti Connect Secure

Command injection in Ivanti Connect Secure before version 22.7R2.3 and Ivanti Policy Secure before version 22.7R1.2 allows a remote authe…

EPSS 2%CVSS 9.1

SoftLab1 vulnerability on this pageMax CVSS 9.8Priority 48KEV 0

CVE-2023-32117 · SoftLab Integrate Google Drive

WordPress Integrate Google Drive plugin <= 1.1.99 - Unauthenticated Broken Access Control vulnerability

EPSS 7%CVSS 9.8

peerigon1 vulnerability on this pageMax CVSS 9.3Priority 45KEV 0

CVE-2024-54152 · peerigon angular-expressions

Angular Expressions - Remote Code Execution when using locals

EPSS 2%CVSS 9.3

Drupal3 vulnerabilities on this pageMax CVSS 9.8Priority 42KEV 0

CVE-2024-55636 · Drupal Drupal Core

Drupal core - Less critical - Gadget chain - SA-CORE-2024-006

EPSS 0.9%CVSS 9.8

CVE-2024-55638 · Drupal Drupal Core

Drupal core - Moderately critical - Gadget chain - SA-CORE-2024-008

EPSS 1.0%CVSS 9.8

CVE-2024-55637 · Drupal Drupal Core

Drupal core - Moderately critical - Gadget chain - SA-CORE-2024-007

Shopfiles Ltd1 vulnerability on this pageMax CVSS 9.8Priority 42KEV 0

CVE-2023-22701 · Shopfiles Ltd Ebook Store

WordPress Ebook Store plugin <= 5.775 - Broken Authentication vulnerability

EPSS 1%CVSS 9.8

Apache Software Foundation1 vulnerability on this pageMax CVSS 9.8Priority 41KEV 0

CVE-2024-53947 · Apache Software Foundation Apache Superset

Apache Superset: Improper SQL authorisation, parse not checking for specific postgres functions

Dell2 vulnerabilities on this pageMax CVSS 10.0Priority 41KEV 0

CVE-2024-37143 · Dell Dell PowerFlex appliance

Dell PowerFlex appliance versions prior to IC 46.381.00 and IC 46.376.00, Dell PowerFlex rack versions prior to RCM 3.8.1.0 (for RCM 3.8.…

EPSS 0.8%CVSS 10.0

CVE-2024-47484 · Dell Avamar

Dell Avamar, versions prior to 19.12 with patch 338905, excluding 19.10 and 19.10SP1 with patch 338869, contains an Improper Neutralizati…

EPSS 0.7%CVSS 9.8

Genetech1 vulnerability on this pageMax CVSS 10.0Priority 41KEV 0

CVE-2024-53822 · Genetech Pie Register Premium

WordPress Pie Register Premium plugin < 3.8.3.3 - Arbitrary File Upload vulnerability

EPSS 0.8%CVSS 10.0

SeventhQueen1 vulnerability on this pageMax CVSS 9.8Priority 41KEV 0

CVE-2024-43222 · SeventhQueen Sweet Date

WordPress Sweet Date theme <= 3.7.3 - Privilege Escalation vulnerability

Brainstorm Force1 vulnerability on this pageMax CVSS 9.8Priority 40KEV 0

CVE-2023-23834 · Brainstorm Force Spectra

WordPress Spectra – WordPress Gutenberg Blocks plugin <= 2.3.0 - Broken Access Control + CSRF on Activate_Plugin vulnerability

EPSS 0.7%CVSS 9.8

Schneider Electric1 vulnerability on this pageMax CVSS 9.8Priority 40KEV 0

CVE-2024-11737 · Schneider Electric Modicon Controllers M241 / M251

CWE-20: Improper Input Validation vulnerability exists that could lead to a denial of service and a loss of confidentiality, integrity of…

Adobe3 vulnerabilities on this pageMax CVSS 9.3Priority 39KEV 0

CVE-2024-54032 · Adobe Adobe Connect

Adobe Connect | Cross-site Scripting (Stored XSS) (CWE-79)

EPSS 0.8%CVSS 9.3

CVE-2024-54034 · Adobe Adobe Connect

Adobe Connect | Cross-site Scripting (Reflected XSS) (CWE-79)

EPSS 0.7%CVSS 9.3

CVE-2024-54036 · Adobe Adobe Connect

Adobe Connect | Cross-site Scripting (Stored XSS) (CWE-79)

EPSS 0.7%CVSS 9.3

Arm1 vulnerability on this pageMax CVSS 9.8Priority 39KEV 0

CVE-2024-5660 · Arm Cortex-A77

Use of Hardware Page Aggregation (HPA) and Stage-1 and/or Stage-2 translation on Cortex-A77, Cortex-A78, Cortex-A78C, Cortex-A78AE, Corte…

Roxnor1 vulnerability on this pageMax CVSS 9.8Priority 39KEV 0

CVE-2023-50903 · Roxnor Metform

WordPress Metform Elementor Contact Form Builder plugin <= 3.4.0 - Broken Access Control vulnerability

SAP_SE1 vulnerability on this pageMax CVSS 9.1Priority 39KEV 0

CVE-2024-47578 · SAP_SE SAP NetWeaver AS for JAVA (Adobe Document Services)

Multiple vulnerabilities in SAP NetWeaver AS for JAVA(Adobe Document Services)

EPSS 0.9%CVSS 9.1

Arraytics1 vulnerability on this pageMax CVSS 9.8Priority 38KEV 0

CVE-2023-47805 · Arraytics WPCafe

WordPress WPCafe plugin <= 2.2.22 - Broken Access Control vulnerability

NicheAddons1 vulnerability on this pageMax CVSS 9.8Priority 38KEV 0

CVE-2023-47826 · NicheAddons Restaurant & Cafe Addon for Elementor

WordPress Restaurant & Cafe Addon for Elementor plugin <= 1.5.3 - Broken Access Control vulnerability

perl1 vulnerability on this pageMax CVSS 9.8Priority 38KEV 0

CVE-2024-55564 · perl posix_2028

The POSIX::2008 package before 0.24 for Perl has a potential _execve50c env buffer overflow.