Critical vulnerability archive — page 396

trendnet1 vulnerability on this pageMax CVSS 9.8Priority 58KEV 0

CVE-2024-50667 · trendnet tew-820ap

The boa httpd of Trendnet TEW-820AP 1.01.B01 has a stack overflow vulnerability in /boafrm/formIPv6Addr, /boafrm/formIpv6Setup, /boafrm/f…

EPSS 7%public exploit CVSS 9.8

sublimetext1 vulnerability on this pageMax CVSS 9.8Priority 54KEV 0

CVE-2024-25255 · sublimetext sublime_text_4

Sublime Text 4 was discovered to contain a command injection vulnerability via the New Build System module.

EPSS 1%public exploit CVSS 9.8

d-link5 vulnerabilities on this pageMax CVSS 9.8Priority 53KEV 0

schrodinger1 vulnerability on this pageMax CVSS 9.8Priority 53KEV 0

CVE-2024-50636 · schrodinger pymol

PyMOL 2.5.0 contains a vulnerability in its "Run Script" function, which allows the execution of arbitrary Python code embedded within .P…

EPSS 1%public exploit CVSS 9.8

powertac-server1 vulnerability on this pageMax CVSS 9.8Priority 52KEV 0

CVE-2024-51135 · powertac-server powertac-server

An XML External Entity (XXE) vulnerability in the component DocumentBuilderFactory of powertac-server v1.9.0 allows attackers to access s…

EPSS 1%public exploit CVSS 9.8

1000 Projects2 vulnerabilities on this pageMax CVSS 9.8Priority 50KEV 0

CVE-2024-11055 · 1000 Projects Beauty Parlour Management System

1000 Projects Beauty Parlour Management System admin-profile.php sql injection

EPSS 0.6%public exploit CVSS 9.8

CVE-2024-11100 · 1000 Projects Beauty Parlour Management System

1000 Projects Beauty Parlour Management System index.php sql injection

EPSS 0.6%public exploit CVSS 9.8

code-projects3 vulnerabilities on this pageMax CVSS 9.8Priority 50KEV 0

CVE-2024-11077 · code-projects Job Recruitment

code-projects Job Recruitment index.php sql injection

EPSS 0.7%public exploit CVSS 9.8

CVE-2024-11099 · code-projects Job Recruitment

code-projects Job Recruitment login.php sql injection

EPSS 0.6%public exploit CVSS 9.8

CVE-2024-11076 · code-projects Job Recruitment

code-projects Job Recruitment activation.php sql injection

EPSS 0.6%CVSS 9.8

kanboard2 vulnerabilities on this pageMax CVSS 9.1Priority 50KEV 0

CVE-2024-51748 · kanboard kanboard

Remote code execution through language setting in kanboard

EPSS 0.9%public exploit CVSS 9.1

CVE-2024-51747 · kanboard kanboard

Arbitrary File Read and Delete in kanboard

EPSS 0.8%public exploit CVSS 9.1

VibeThemes1 vulnerability on this pageMax CVSS 9.8Priority 49KEV 0

CVE-2024-10470 · VibeThemes WPLMS Learning Management System for WordPress, WordPress LMS

WPLMS Learning Management System for WordPress <= 4.962 - Unauthenticated Arbitrary File Read and Deletion

EPSS 35%CVSS 9.8

foundstone1 vulnerability on this pageMax CVSS 9.8Priority 48KEV 0

CVE-2024-25254 · foundstone superscan

SuperScan v4.1 was discovered to contain a buffer overflow via the Hostname/IP parameter.

EPSS 0.5%public exploit CVSS 9.8

phpgurukul1 vulnerability on this pageMax CVSS 9.8Priority 48KEV 0

CVE-2024-50989 · phpgurukul online_marriage_registration_system

A SQL injection vulnerability in /omrs/admin/search.php in PHPGurukul Online Marriage Registration System v1.0 allows an attacker to exec…

EPSS 0.5%public exploit CVSS 9.8

Project Worlds1 vulnerability on this pageMax CVSS 9.8Priority 48KEV 0

CVE-2024-11059 · Project Worlds Free Download Online Shopping System

Project Worlds Free Download Online Shopping System success.php sql injection

EPSS 0.5%public exploit CVSS 9.8

SourceCodester1 vulnerability on this pageMax CVSS 9.8Priority 48KEV 0

CVE-2024-11054 · SourceCodester Simple Music Cloud Community System

SourceCodester Simple Music Cloud Community System ajax.php unrestricted upload

EPSS 0.5%public exploit CVSS 9.8

Ateeq Rafeeq1 vulnerability on this pageMax CVSS 10.0Priority 46KEV 0

CVE-2024-51793 · Ateeq Rafeeq RepairBuddy

WordPress RepairBuddy plugin <= 3.8115 - Arbitrary File Upload vulnerability

EPSS 2%CVSS 10.0

eugenbobrowski1 vulnerability on this pageMax CVSS 9.8Priority 46KEV 0

CVE-2024-10586 · eugenbobrowski Debug Tool

Debug Tool <= 2.2 - Unauthenticated Arbitrary File Creation

EPSS 2%CVSS 9.8

Joshua Wolfe1 vulnerability on this pageMax CVSS 10.0Priority 45KEV 0

CVE-2024-51788 · Joshua Wolfe The Novel Design Store Directory

WordPress The Novel Design Store Directory plugin <= 4.3.0 - Arbitrary File Upload vulnerability

EPSS 1%CVSS 10.0

gnome1 vulnerability on this pageMax CVSS 9.8Priority 44KEV 0

CVE-2024-52533 · gnome glib

gio/gsocks4aproxy.c in GNOME GLib before 2.82.1 has an off-by-one error and resultant buffer overflow because SOCKS4_CONN_MSG_LEN is not…

EPSS 2%CVSS 9.8

metagauss1 vulnerability on this pageMax CVSS 9.8Priority 44KEV 0

CVE-2024-10508 · metagauss RegistrationMagic – Custom Registration Forms, User Registration, Payment, and User Login

RegistrationMagic – User Registration Plugin with Custom Registration Forms <= 6.0.2.6 - Unauthenticated Privilege Escalation via Password Recovery

EPSS 2%CVSS 9.8

engenius1 vulnerability on this pageMax CVSS 9.8Priority 43KEV 0

CVE-2024-36061 · engenius ews356_fit

EnGenius EWS356-FIT devices through 1.1.30 allow blind OS command injection.

EPSS 1%CVSS 9.8

vanquish3 vulnerabilities on this pageMax CVSS 9.8Priority 42KEV 0

CVE-2024-10625 · vanquish WooCommerce Support Ticket System

WooCommerce Support Ticket System <= 17.7 - Unauthenticated Arbitrary File Deletion

EPSS 1%CVSS 9.8

CVE-2024-10627 · vanquish WooCommerce Support Ticket System

WooCommerce Support Ticket System <= 17.7 - Unauthenticated Arbitrary File Upload

EPSS 0.9%CVSS 9.8

CVE-2024-10801 · vanquish WordPress User Extra Fields

WordPress User Extra Fields <= 16.5 - Unauthenticated Arbitrary File Upload

EPSS 0.9%CVSS 9.8

e-plugins1 vulnerability on this pageMax CVSS 9.8Priority 41KEV 0

CVE-2024-10547 · e-plugins WP Membership

WP Membership <= 1.6.2 - Unauthenticated Arbitrary File Upload

EPSS 0.9%CVSS 9.8

Grand Vice info3 vulnerabilities on this pageMax CVSS 9.8Priority 41KEV 0

CVE-2024-11018 · Grand Vice info Webopac

Grand Vice info Webopac - Arbitrary File Upload

EPSS 0.8%CVSS 9.8

CVE-2024-11016 · Grand Vice info Webopac

Grand Vice info Webopac - SQL Injection

EPSS 0.6%CVSS 9.8

CVE-2024-11020 · Grand Vice info Webopac7

Grand Vice info Webopac7 - SQL Injection

EPSS 0.5%CVSS 9.8

trustyplugins1 vulnerability on this pageMax CVSS 9.8Priority 41KEV 0

CVE-2024-10871 · trustyplugins Category AJAX Filter – Advanced Filter for Posts & Custom Post Types

Category Ajax Filter <= 2.8.2 - Unauthenticated Local File Inclusion

EPSS 0.8%CVSS 9.8

Codezips1 vulnerability on this pageMax CVSS 9.8Priority 40KEV 0

CVE-2024-11057 · Codezips Hospital Appointment System

Codezips Hospital Appointment System removeBranchResult.php sql injection

EPSS 0.6%CVSS 9.8

Dang Ngoc Binh1 vulnerability on this pageMax CVSS 10.0Priority 40KEV 0

CVE-2024-51792 · Dang Ngoc Binh Audio Record

WordPress Audio Record plugin <= 1.0 - Arbitrary File Upload vulnerability

EPSS 0.6%CVSS 10.0

Made I.T.1 vulnerability on this pageMax CVSS 10.0Priority 40KEV 0

CVE-2024-51791 · Made I.T. Forms

WordPress Forms plugin <= 2.8.0 - Arbitrary File Upload vulnerability

EPSS 0.6%CVSS 10.0

UjW0L1 vulnerability on this pageMax CVSS 10.0Priority 40KEV 0

CVE-2024-51789 · UjW0L Image Classify

WordPress Image Classify plugin <= 1.0.0 - Arbitrary File Upload vulnerability

EPSS 0.6%CVSS 10.0

ce21com2 vulnerabilities on this pageMax CVSS 9.8Priority 39KEV 0

CVE-2024-10285 · ce21com CE21 Suite

CE21 Suite <= 2.2.0 - JWT Token Disclosure

EPSS 0.6%CVSS 9.8

CVE-2024-10284 · ce21com CE21 Suite

CE21 Suite <= 2.2.0 - Authentication Bypass

EPSS 0.4%CVSS 9.8

HB WEBSOL1 vulnerability on this pageMax CVSS 10.0Priority 39KEV 0

CVE-2024-51790 · HB WEBSOL HB AUDIO GALLERY

WordPress HB AUDIO GALLERY plugin <= 3.0 - Arbitrary File Upload vulnerability

EPSS 0.5%CVSS 10.0

itsourcecode1 vulnerability on this pageMax CVSS 9.8Priority 39KEV 0

CVE-2024-11074 · itsourcecode Tailoring Management System

itsourcecode Tailoring Management System incadd.php sql injection

EPSS 0.6%CVSS 9.8

nouthemes1 vulnerability on this pageMax CVSS 9.8Priority 38KEV 0

CVE-2024-10589 · nouthemes Leopard - WordPress Offload Media

Leopard <= 3.1.1 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Options Update

EPSS 0.5%CVSS 9.8

weechat1 vulnerability on this pageMax CVSS 9.8Priority 38KEV 0

CVE-2024-46613 · weechat weechat

WeeChat before 4.4.2 has an integer overflow and resultant buffer overflow at core/core-string.c when there are more than two billion ite…

EPSS 0.5%CVSS 9.8

freescout_helpdesk1 vulnerability on this pageMax CVSS 9.1Priority 37KEV 0

CVE-2023-52268 · freescout_helpdesk freescout

The End-User Portal module before 1.0.65 for FreeScout sometimes allows an attacker to authenticate as an arbitrary user because a sessio…

EPSS 0.6%CVSS 9.1

powerjob1 vulnerability on this pageMax CVSS 9.8Priority 37KEV 0

CVE-2024-44546 · powerjob powerjob

Powerjob >= 3.20 is vulnerable to SQL injection via the version parameter.

EPSS 0.4%CVSS 9.8

ampache1 vulnerability on this pageMax CVSS 9.0Priority 36KEV 0

CVE-2024-51490 · ampache ampache

Stored Cross-Site Scripting in Ampache

EPSS 0.5%CVSS 9.0

google1 vulnerability on this pageMax CVSS 9.1Priority 34KEV 0

CVE-2024-46962 · google android

The SYQ com.downloader.video.fast (aka Master Video Downloader) application through 2.0 for Android allows an attacker to execute arbitra…

EPSS 0.4%CVSS 9.1

lemonldap-ng1 vulnerability on this pageMax CVSS 9.1Priority 34KEV 0

CVE-2021-35473 · lemonldap-ng lemonldap-ng

An issue was discovered in LemonLDAP::NG before 2.0.12.

EPSS 0.4%CVSS 9.1

The archive.