The archive.

CVE-2024-41649 · mitre

Insecure Permissions vulnerability in Open Robotics Robotic Operating System 2 ROS2 navigation2 v.humble allows an attacker to execute ar…

EPSS 0.7%public exploit CVSS 9.8

CVE-2024-44852 · mitre

Open Robotics Robotic Operating System 2 ROS2 navigation2 v.humble was discovered to contain a segmentation violation via the component t…

CVE-2024-46455 · mitre

unstructured v.0.14.2 and before is vulnerable to XML External Entity (XXE) via the XMLParser.

CVE-2024-54745 · mitre

WAVLINK WN701AE M01AE_V240305 was discovered to contain a hardcoded password vulnerability in /etc/shadow, which allows attackers to log…

CVE-2024-54920 · mitre

A SQL Injection vulnerability was found in /teacher_signup.php of kashipara E-learning Management System v1.0, which allows remote attack…

CVE-2024-54921 · mitre

A SQL Injection was found in /student_signup.php in kashipara E-learning Management System v1.0, which allows remote attackers to execute…

CVE-2024-54922 · mitre

A SQL Injection was found in /admin/edit_user.php of kashipara E-learning Management System v1.0, which allows remote attackers to execut…

CVE-2024-54923 · mitre

A SQL Injection vulnerability was found in /admin/edit_teacher.php in kashipara E-learning Management System v1.0, which allows remote at…

CVE-2024-54924 · mitre

A SQL Injection was found in /admin/edit_content.php in kashipara E-learning Management System v1.0, which allows remote attackers to exe…

CVE-2024-54925 · mitre

A SQL Injection was found in /remove_sent_message.php in kashipara E-learning Management System v1.0, which allows remote attackers to ex…

CVE-2024-54926 · mitre

A SQL Injection vulnerability was found in /search_class.php of kashipara E-learning Management System v1.0, which allows remote attacker…

CVE-2024-41648 · mitre

Insecure Permissions vulnerability in Open Robotics Robotic Operating System 2 ROS2 navigation2 v.humble allows an attacker to execute ar…

EPSS 0.5%public exploit CVSS 9.8

CVE-2024-41650 · mitre

Insecure Permissions vulnerability in Open Robotics Robotic Operating System 2 ROS2 navigation2 v.humble allows an attacker to execute ar…

EPSS 0.5%public exploit CVSS 9.8

CVE-2024-40583 · mitre

Pentaminds CuroVMS v2.0.1 was discovered to contain exposed credentials.

EPSS 0.5%public exploit CVSS 9.1

CVE-2024-53441 · mitre

An issue in the index.js decryptCookie function of cookie-encrypter v1.0.1 allows attackers to execute a bit flipping attack.

EPSS 0.3%public exploit CVSS 9.1

CVE-2024-48956 · mitre

Serviceware Processes 6.0 through 7.3 before 7.4 allows attackers without valid authentication to send a specially crafted HTTP request t…

EPSS 0.9%CVSS 9.8

CVE-2024-41647 · mitre

Insecure Permissions vulnerability in Open Robotics Robotic Operating System 2 ROS2 navigation2 v.humble allows an attacker to execute ar…

MacWarrior2 vulnerabilities on this pageMax CVSS 9.8Priority 51KEV 0

CVE-2024-54135 · MacWarrior clipbucket-v5

Untrusted Deserialization in ClipBucket-v5 Version 2.0 to 5.5.1 Revision 199

EPSS 0.8%public exploit CVSS 9.8

CVE-2024-54136 · MacWarrior clipbucket-v5

Untrusted Deserialization in ClipBucket-v5 Version 5.5.1 Revision 199 and Below

EPSS 0.7%public exploit CVSS 9.8

brandtoss2 vulnerabilities on this pageMax CVSS 9.8Priority 49KEV 0

CVE-2024-53805 · brandtoss WP Mailster

WordPress WP Mailster plugin <= 1.8.16.0 - Broken Access Control vulnerability

CVE-2024-53807 · brandtoss WP Mailster

WordPress WP Mailster plugin <= 1.8.16.0 - SQL Injection vulnerability

EPSS 0.5%CVSS 9.8

QNAP Systems Inc.6 vulnerabilities on this pageMax CVSS 10.0Priority 49KEV 0

CVE-2024-50387 · QNAP Systems Inc. SMB Service

SMB Service

EPSS 10%CVSS 10.0

CVE-2024-50388 · QNAP Systems Inc. HBS 3 Hybrid Backup Sync

HBS 3 Hybrid Backup Sync

EPSS 2%CVSS 9.8

CVE-2024-50393 · QNAP Systems Inc. QTS

QTS, QuTS hero

CVE-2024-48863 · QNAP Systems Inc. License Center

License Center

CVE-2024-50389 · QNAP Systems Inc. QuRouter

QuRouter

EPSS 0.8%CVSS 9.8

CVE-2024-48859 · QNAP Systems Inc. QTS

QTS, QuTS hero

EPSS 0.6%CVSS 9.1

wavlink1 vulnerability on this pageMax CVSS 9.8Priority 49KEV 0

CVE-2024-54747 · wavlink wn531p3_firmware

WAVLINK WN531P3 202383 was discovered to contain a hardcoded password vulnerability in /etc/shadow, which allows attackers to log in as r…

wphealth1 vulnerability on this pageMax CVSS 9.8Priority 49KEV 0

CVE-2024-12209 · wphealth WP Umbrella: Update Backup Restore & Monitoring

WP Umbrella: Update Backup Restore & Monitoring <= 2.17.0 - Unauthenticated Local File Inclusion

EPSS 23%CVSS 9.8

Planet Technology2 vulnerabilities on this pageMax CVSS 9.8Priority 46KEV 0

CVE-2024-52320 · Planet Technology Planet WGS-804HPT

Planet Technology Planet WGS-804HPT Command Injection

EPSS 2%CVSS 9.8

CVE-2024-48871 · Planet Technology Planet WGS-804HPT

Planet Technology Planet WGS-804HPT Stack-based Buffer Overflow

TP-Link1 vulnerability on this pageMax CVSS 9.8Priority 45KEV 0

CVE-2024-12344 · TP-Link VN020 F3v(T)

TP-Link VN020 F3v(T) FTP USER Command memory corruption

EPSS 2%CVSS 9.8

djangoproject1 vulnerability on this pageMax CVSS 9.8Priority 44KEV 0

CVE-2024-53908 · djangoproject django

An issue was discovered in Django 5.1 before 5.1.4, 5.0 before 5.0.10, and 4.2 before 4.2.17.

openwrt1 vulnerability on this pageMax CVSS 9.3Priority 44KEV 0

CVE-2024-54143 · openwrt asu

openwrt/asu allows build artifact poisoning via truncated SHA-256 hash and command injection

EPSS 2%CVSS 9.3

matthias-reuter1 vulnerability on this pageMax CVSS 9.8Priority 43KEV 0

CVE-2024-12155 · matthias-reuter SV100 Companion

SV100 Companion <= 2.0.02 - Missing Authorization to Unuathenticated Arbitrary Options Update

roninwp1 vulnerability on this pageMax CVSS 10.0Priority 41KEV 0

CVE-2024-54214 · roninwp Revy

WordPress Revy plugin <= 1.18 - Unauthenticated Arbitrary File Upload vulnerability

EPSS 0.7%CVSS 10.0

Ruijie4 vulnerabilities on this pageMax CVSS 9.9Priority 40KEV 0

CVE-2024-47547 · Ruijie Reyee OS

Ruijie Reyee OS Weak Password Recovery Mechanism for Forgotten Password

CVE-2024-52324 · Ruijie Reyee OS

Ruijie Reyee OS Use of Inherently Dangerous Function

CVE-2024-48874 · Ruijie Reyee OS

Ruijie Reyee OS Server-Side Request Forgery

EPSS 0.6%CVSS 9.8

CVE-2024-46874 · Ruijie Reyee OS

Ruijie Reyee OS Improper Handling of Insufficient Permissions or Privileges

EPSS 0.4%CVSS 9.9

Siemens1 vulnerability on this pageMax CVSS 9.8Priority 40KEV 0

CVE-2024-52335 · Siemens syngo.plaza VB30E

A vulnerability has been identified in syngo.plaza VB30E (All versions < VB30E_HF05).