The archive.

code-projects2 vulnerabilities on this pageMax CVSS 9.8Priority 51KEV 0

CVE-2024-11970 · code-projects Concert Ticket Ordering System

code-projects Concert Ticket Ordering System tour(cor).php sql injection

EPSS 0.8%public exploit CVSS 9.8

CVE-2024-12007 · code-projects Farmacia

code-projects Farmacia visualizar-produto.php sql injection

EPSS 0.5%public exploit CVSS 9.8

PHPGurukul4 vulnerabilities on this pageMax CVSS 9.8Priority 51KEV 0

CVE-2024-11964 · PHPGurukul Complaint Management system

PHPGurukul Complaint Management system index.php sql injection

CVE-2024-11965 · PHPGurukul Complaint Management system

PHPGurukul Complaint Management system reset-password.php sql injection

CVE-2024-11966 · PHPGurukul Complaint Management system

PHPGurukul Complaint Management system index.php sql injection

CVE-2024-11967 · PHPGurukul Complaint Management system

PHPGurukul Complaint Management system reset-password.php sql injection

EPSS 0.7%public exploit CVSS 9.8

umicat1 vulnerability on this pageMax CVSS 9.8Priority 51KEV 0

CVE-2024-48406 · umicat umicat

Buffer Overflow vulnerability in SunBK201 umicat through v.0.3.2 and fixed in v.0.3.3 allows an attacker to execute arbitrary code via th…

Cool Plugins1 vulnerability on this pageMax CVSS 9.8Priority 50KEV 0

CVE-2024-53739 · Cool Plugins Cryptocurrency Widgets For Elementor

WordPress Cryptocurrency Widgets For Elementor plugin <= 1.6.4 - Local File Inclusion vulnerability

EPSS 0.7%public exploit CVSS 9.8

AsyncHttpClient1 vulnerability on this pageMax CVSS 9.2Priority 49KEV 0

CVE-2024-53990 · AsyncHttpClient async-http-client

AsyncHttpClient (AHC) library's `CookieStore` replaces explicitly defined `Cookie`s

EPSS 0.7%public exploit CVSS 9.2

Progress Software Corporation2 vulnerabilities on this pageMax CVSS 9.8Priority 49KEV 0

CVE-2024-46909 · Progress Software Corporation WhatsUp Gold

WhatsUp Gold WriteDataFile Directory Traversal Remote Code Execution Vulnerability

EPSS 49%CVSS 9.8

CVE-2024-8785 · Progress Software Corporation WhatsUp Gold

WhatsUp Gold Registry Overwrite Remote Code Execution Vulnerability

EPSS 10%CVSS 9.8

siyuan4 vulnerabilities on this pageMax CVSS 9.8Priority 49KEV 0

zzcms1 vulnerability on this pageMax CVSS 9.8Priority 49KEV 0

CVE-2024-52724 · zzcms zzcms

ZZCMS 2023 was discovered to contain a SQL injection vulnerability in /q/show.php.

EPSS 0.6%public exploit CVSS 9.8

sandboxie-plus1 vulnerability on this pageMax CVSS 9.2Priority 46KEV 0

CVE-2024-49360 · sandboxie-plus Sandboxie

Path traversal in Sandboxie

EPSS 0.5%public exploit CVSS 9.2

Trellix1 vulnerability on this pageMax CVSS 9.8Priority 46KEV 0

CVE-2024-11482 · Trellix Trellix Enterprise Security Manager (ESM)

A vulnerability in ESM 11.6.10 allows unauthenticated access to the internal Snowservice API and enables remote code execution through co…

EPSS 3%CVSS 9.8

automattic1 vulnerability on this pageMax CVSS 9.1Priority 45KEV 0

CVE-2024-53900 · automattic mongoose

Mongoose before 8.8.3 can improperly use $where in match, leading to search injection.

EPSS 4%CVSS 9.1

SailPoint Technologies1 vulnerability on this pageMax CVSS 10.0Priority 42KEV 0

CVE-2024-10905 · SailPoint Technologies IdentityIQ

IdentityIQ Improper Access Control VulnerabilityIdentityIQ Improper Access Control Vulnerability

EPSS 0.9%CVSS 10.0

Samsung Mobile1 vulnerability on this pageMax CVSS 9.8Priority 42KEV 0

CVE-2024-49415 · Samsung Mobile Samsung Mobile Devices

Out-of-bound write in libsaped.so prior to SMR Dec-2024 Release 1 allows remote attackers to execute arbitrary code.

EPSS 0.9%CVSS 9.8

dcnglobal6 vulnerabilities on this pageMax CVSS 9.8Priority 41KEV 0

CVE-2024-52777 · dcnglobal dcme-320_firmware

DCME-320 <=7.4.12.90, DCME-520 <=9.25.5.11, DCME-320-L, <=9.3.5.26, and DCME-720 <=9.1.5.11 are vulnerable to Remote Code Execution via /…

CVE-2024-52778 · dcnglobal dcme-320_firmware

DCME-320 <=7.4.12.90, DCME-520 <=9.25.5.11, DCME-320-L <=9.3.5.26, and DCME-720 <=9.1.5.11 are vulnerable to Remote Code Execution via /f…

CVE-2024-52779 · dcnglobal dcme-320_firmware

DCME-320 <=7.4.12.90, DCME-520 <=9.25.5.11, DCME-320-L <=9.3.5.26, and DCME-720 <=9.1.5.11 are vulnerable to Remote Code Execution via /f…

CVE-2024-52780 · dcnglobal dcme-320_firmware

DCME-320 <=7.4.12.90, DCME-520 <=9.25.5.11, DCME-320-L <=9.3.5.26, and DCME-720 <=9.1.5.11 are vulnerable to Remote Code Execution via /f…

CVE-2024-52781 · dcnglobal dcme-320_firmware

DCME-320 <=7.4.12.90, DCME-520 <=9.25.5.11, DCME-320-L <=9.3.5.26, and DCME-720 <=9.1.5.11 are vulnerable to Remote Code Execution via /f…

CVE-2024-52782 · dcnglobal dcme-320_firmware

DCME-320 <=7.4.12.90, DCME-520 <=9.25.5.11, DCME-320-L <=9.3.5.26, and DCME-720 <=9.1.5.11 are vulnerable to Remote Code Execution via /f…

dest-unreach1 vulnerability on this pageMax CVSS 9.8Priority 41KEV 0

CVE-2024-54661 · dest-unreach socat

readline.sh in socat before1.8.0.2 relies on the /tmp/$USER/stderr2 file.

IBM6 vulnerabilities on this pageMax CVSS 9.8Priority 41KEV 0

CVE-2024-49803 · IBM Security Verify Access

IBM Security Verify Access Appliance command execution

CVE-2024-40691 · IBM Cognos Controller

IBM Cognos Controller file upload

EPSS 0.4%CVSS 9.8

CVE-2024-49805 · IBM Security Verify Access

IBM Security Verify Access Appliance hard coded credentials

CVE-2024-25019 · IBM Cognos Controller

IBM Cognos Controller file upload

CVE-2024-25020 · IBM Cognos Controller

IBM Cognos Controller file upload

CVE-2024-49806 · IBM Security Verify Access

IBM Security Verify Access Appliance hard coded credentials

Interinfo1 vulnerability on this pageMax CVSS 9.8Priority 41KEV 0

CVE-2024-11979 · Interinfo DreamMaker

Interinfo DreamMaker - Unrestricted File Upload through Path Traversal

nodemcu1 vulnerability on this pageMax CVSS 9.8Priority 41KEV 0

CVE-2024-36671 · nodemcu nodemcu

nodemcu before v3.0.0-release_20240225 was discovered to contain an integer overflow via the getnum function at /modules/struct.c.