The archive.

CVE-2024-10430 · Codezips Pet Shop Management System

Codezips Pet Shop Management System animalsupdate.php sql injection

EPSS 0.7%public exploit CVSS 9.8

CVE-2024-10431 · Codezips Pet Shop Management System

Codezips Pet Shop Management System deletebird.php sql injection

EPSS 0.7%public exploit CVSS 9.8

CVE-2024-10426 · Codezips Pet Shop Management System

Codezips Pet Shop Management System animalsadd.php sql injection

CVE-2024-10427 · Codezips Pet Shop Management System

Codezips Pet Shop Management System deleteanimal.php sql injection

Scott Paterson1 vulnerability on this pageMax CVSS 9.8Priority 54KEV 0

CVE-2024-50492 · Scott Paterson ScottCart

WordPress ScottCart plugin <= 1.1 - Remote Code Execution (RCE) vulnerability

Tenda1 vulnerability on this pageMax CVSS 9.8Priority 54KEV 0

CVE-2024-10434 · Tenda AC1206

Tenda AC1206 ate ate_Tenda_mfg_check_usb3 stack-based overflow

RealMag7771 vulnerability on this pageMax CVSS 9.8Priority 53KEV 0

CVE-2024-50450 · RealMag777 MDTF

WordPress MDTF – Meta Data and Taxonomies Filter plugin <= 1.3.3.4 - Bypass Vulnerability vulnerability

Project Worlds4 vulnerabilities on this pageMax CVSS 9.8Priority 50KEV 0

CVE-2024-10432 · Project Worlds Simple Web-Based Chat Application

Project Worlds Simple Web-Based Chat Application index.php sql injection

CVE-2024-10423 · Project Worlds Student Project Allocation System

Project Worlds Student Project Allocation System Project Selection Page project_selection.php sql injection

CVE-2024-10424 · Project Worlds Student Project Allocation System

Project Worlds Student Project Allocation System Project Selection Page remove_project.php sql injection

CVE-2024-10425 · Project Worlds Student Project Allocation System

Project Worlds Student Project Allocation System Project Selection Page move_up_project.php sql injection

Acnoo2 vulnerabilities on this pageMax CVSS 9.8Priority 49KEV 0

CVE-2024-50486 · Acnoo Acnoo Flutter API

WordPress Acnoo Flutter API plugin <= 1.0.5 - Account Takeover vulnerability

CVE-2024-50487 · Acnoo MaanStore API

WordPress MaanStore API plugin <= 1.0.1 - Account Takeover vulnerability

code-projects1 vulnerability on this pageMax CVSS 9.8Priority 49KEV 0

CVE-2024-10418 · code-projects Blood Bank Management System

code-projects Blood Bank Management System infoAdd.php sql injection

jurredeklijn2 vulnerabilities on this pageMax CVSS 9.8Priority 49KEV 0

CVE-2024-9932 · jurredeklijn Wux Blog Editor

Wux Blog Editor <= 3.0.0 - Unauthenticated Arbitrary File Upload

EPSS 38%CVSS 9.8

CVE-2024-9931 · jurredeklijn Wux Blog Editor

Wux Blog Editor <= 3.0.0 - Authentication Bypass to Administrator

EPSS 0.6%CVSS 9.8

lylme2 vulnerabilities on this pageMax CVSS 9.8Priority 49KEV 0

CVE-2024-48356 · lylme lylme_spage

LyLme Spage <=1.6.0 is vulnerable to SQL Injection via /admin/group.php.

CVE-2024-48357 · lylme lylme_spage

LyLme Spage 1.2.0 through 1.6.0 is vulnerable to SQL Injection via /admin/apply.php.

realtyworkstation1 vulnerability on this pageMax CVSS 9.8Priority 49KEV 0

CVE-2024-50489 · realtyworkstation Realty Workstation

WordPress Realty Workstation plugin <= 1.0.45 - Account Takeover vulnerability

Rockwell Automation1 vulnerability on this pageMax CVSS 9.8Priority 49KEV 0

CVE-2024-10386 · Rockwell Automation FactoryTalk ThinManager

Rockwell Automation FactoryTalk ThinManager Authentication Vulnerability

EPSS 19%CVSS 9.8

SourceCodester5 vulnerabilities on this pageMax CVSS 9.8Priority 49KEV 0

CVE-2024-10450 · SourceCodester Kortex Lite Advocate Office Management System

SourceCodester Kortex Lite Advocate Office Management System POST Parameter edit_profile.php sql injection

CVE-2024-10413 · SourceCodester Online Hotel Reservation System

SourceCodester Online Hotel Reservation System update.php upload unrestricted upload

CVE-2024-10420 · SourceCodester Attendance and Payroll System

SourceCodester Attendance and Payroll System update.php upload unrestricted upload

CVE-2024-10421 · SourceCodester Attendance and Payroll System

SourceCodester Attendance and Payroll System overtime_row.php sql injection

EPSS 0.4%CVSS 9.8

CVE-2024-10422 · SourceCodester Attendance and Payroll System

SourceCodester Attendance and Payroll System overtime_add.php sql injection

EPSS 0.4%CVSS 9.8

mrbs1 vulnerability on this pageMax CVSS 9.8Priority 48KEV 0

CVE-2024-48465 · mrbs mrbs

The MRBS version 1.5.0 has an SQL injection vulnerability in the edit_entry_handler.php file, specifically in the rooms%5B%5D parameter

pyload1 vulnerability on this pageMax CVSS 9.1Priority 48KEV 0

CVE-2024-47821 · pyload pyload

pyLoad vulnerable to remote code execution by download to /.pyload/scripts using /flashgot API

EPSS 0.7%public exploit CVSS 9.1

Tareq Hasan1 vulnerability on this pageMax CVSS 9.8Priority 46KEV 0

CVE-2024-50483 · Tareq Hasan Meetup

WordPress Meetup plugin <= 0.1 - Broken Authentication vulnerability

EPSS 2%CVSS 9.8

watchtowerhq1 vulnerability on this pageMax CVSS 9.8Priority 46KEV 0

CVE-2024-9933 · watchtowerhq WatchTowerHQ

WatchTowerHQ <= 3.10.1 - Authentication Bypass to Administrator due to Missing Empty Value Check

EPSS 2%CVSS 9.8

Spring1 vulnerability on this pageMax CVSS 9.1Priority 43KEV 0

CVE-2024-38821 · Spring Spring

Authorization Bypass of Static Resources in WebFlux Applications

EPSS 2%CVSS 9.1

Swoop1 vulnerability on this pageMax CVSS 9.8Priority 43KEV 0

CVE-2024-50478 · Swoop 1-Click Login: Passwordless Authentication

WordPress 1-Click Login: Passwordless Authentication plugin 1.4.5 - Broken Authentication vulnerability

EPSS 1%CVSS 9.8

MicahBlu1 vulnerability on this pageMax CVSS 9.8Priority 42KEV 0

CVE-2024-50491 · MicahBlu RSVP ME

WordPress RSVP ME plugin <= 1.9.9 - SQL Injection vulnerability

EPSS 1%CVSS 9.8

jitsi1 vulnerability on this pageMax CVSS 9.8Priority 41KEV 0

CVE-2024-44081 · jitsi meet

In Jitsi Meet before 2.0.9779, the functionality to share a video file was implemented in an insecure way, resulting in clients loading v…

EPSS 0.7%CVSS 9.8

Matrix Comsec1 vulnerability on this pageMax CVSS 9.8Priority 41KEV 0

CVE-2024-10381 · Matrix Comsec Matrix Door Controller Cosec Vega FAXQ

Authentication Bypass Vulnerability in Matrix Door Controller

EPSS 0.9%CVSS 9.8

roxnor1 vulnerability on this pageMax CVSS 9.8Priority 41KEV 0

CVE-2024-9501 · roxnor Wp Social Login and Register Social Counter

Wp Social Login and Register Social Counter <= 3.0.7 - Authentication Bypass via WordPress.com OAuth provider

EPSS 0.8%CVSS 9.8

Apple3 vulnerabilities on this pageMax CVSS 9.6Priority 40KEV 0

CVE-2024-40867 · Apple iOS and iPadOS

A custom URL scheme handling issue was addressed with improved input validation.

EPSS 0.7%CVSS 9.6

CVE-2024-44217 · Apple iOS and iPadOS

A permissions issue was addressed by removing vulnerable code and adding additional checks.

EPSS 0.4%CVSS 9.1

CVE-2024-44256 · Apple macOS

The issue was addressed with improved input sanitization.

EPSS 0.2%CVSS 9.3

nunomorgadinho1 vulnerability on this pageMax CVSS 10.0Priority 39KEV 0

CVE-2024-50495 · nunomorgadinho Plugin Propagator

WordPress Plugin Propagator plugin <= 0.1 - Arbitrary File Upload vulnerability

EPSS 0.5%CVSS 10.0

skylarkcob1 vulnerability on this pageMax CVSS 9.8Priority 39KEV 0

CVE-2024-9930 · skylarkcob Extensions by HocWP Team

Extensions by HocWP Team <= 0.2.3.2 - Authentication Bypass

EPSS 0.6%CVSS 9.8

Sunnet1 vulnerability on this pageMax CVSS 9.8Priority 39KEV 0

CVE-2024-10440 · Sunnet eHRD CTMS

Sunnet eHRD CTMS - SQL Injection

webandprint1 vulnerability on this pageMax CVSS 10.0Priority 39KEV 0

CVE-2024-50496 · webandprint AR For WordPress

WordPress AR For WordPress plugin <= 6.6 - Arbitrary File Upload vulnerability

EPSS 0.5%CVSS 10.0

chenyenming1 vulnerability on this pageMax CVSS 9.8Priority 38KEV 0

CVE-2024-50479 · chenyenming Woocommerce Quote Calculator

WordPress Woocommerce Quote Calculator plugin <= 1.1 - SQL Injection vulnerability

wdesco1 vulnerability on this pageMax CVSS 9.8Priority 38KEV 0

CVE-2024-50497 · wdesco Advanced Online Ordering and Delivery Platform

WordPress Advanced Online Ordering and Delivery Platform plugin <= 2.0.0 - Local File Inclusion vulnerability