The archive.

keithcullen2 vulnerabilities on this pageMax CVSS 9.8Priority 53KEV 0

CVE-2024-40494 · keithcullen freecoap

Buffer Overflow in coap_msg.c in FreeCoAP allows remote attackers to execute arbitrary code or cause a denial of service (stack buffer ov…

CVE-2024-40493 · keithcullen freecoap

Null Pointer Dereference in `coap_client_exchange_blockwise2` function in Keith Cullen FreeCoAP 1.0 allows remote attackers to cause a de…

EPSS 0.8%public exploit CVSS 9.8

sourcecodester1 vulnerability on this pageMax CVSS 9.8Priority 53KEV 0

CVE-2024-44812 · sourcecodester online_complaint_site

SQL Injection vulnerability in Online Complaint Site v.1.0 allows a remote attacker to escalate privileges via the username and password…

xlightftpd1 vulnerability on this pageMax CVSS 9.8Priority 53KEV 0

CVE-2024-46483 · xlightftpd xlight_ftp_server

Xlight FTP Server <3.9.4.3 has an integer overflow vulnerability in the packet parsing logic of the SFTP server, which can lead to a heap…

0xJacky1 vulnerability on this pageMax CVSS 9.8Priority 49KEV 0

CVE-2024-49368 · 0xJacky nginx-ui

Unchecked logrotate settings lead to arbitrary command execution

EPSS 28%CVSS 9.8

ESAFENET3 vulnerabilities on this pageMax CVSS 9.8Priority 49KEV 0

CVE-2024-10277 · ESAFENET CDG

ESAFENET CDG UsbKeyAjax.java sql injection

EPSS 0.6%public exploit CVSS 9.8

CVE-2024-10278 · ESAFENET CDG

ESAFENET CDG ReUserOrganiseService.java sql injection

EPSS 0.6%public exploit CVSS 9.8

CVE-2024-10279 · ESAFENET CDG

ESAFENET CDG PrintPolicyService.java sql injection

EPSS 0.6%public exploit CVSS 9.8

zzcms2 vulnerabilities on this pageMax CVSS 9.8Priority 48KEV 0

CVE-2024-10291 · zzcms zzcms

ZZCMS phome.php Ebak_DotranExecutSQL sql injection

EPSS 0.5%public exploit CVSS 9.8

CVE-2024-10292 · zzcms zzcms

ZZCMS ChangeTable.php unrestricted upload

EPSS 0.5%public exploit CVSS 9.8

Trend Micro, Inc.2 vulnerabilities on this pageMax CVSS 9.8Priority 46KEV 0

CVE-2024-48904 · Trend Micro, Inc. Trend Micro Cloud Edge

An command injection vulnerability in Trend Micro Cloud Edge could allow a remote attacker to execute arbitrary code on affected appliances.

EPSS 2%CVSS 9.8

CVE-2024-46902 · Trend Micro, Inc. Trend Micro Deep Discovery Inspector

A vulnerability in Trend Micro Deep Discovery Inspector (DDI) versions 5.8 and above could allow an attacker to disclose sensitive inform…

EPSS 0.7%CVSS 9.1

christopherdewese10991 vulnerability on this pageMax CVSS 10.0Priority 45KEV 0

CVE-2024-49668 · christopherdewese1099 Verbalize WP

WordPress Verbalize WP plugin <= 1.0 - Arbitrary File Upload vulnerability

EPSS 1%CVSS 10.0

Siemens3 vulnerabilities on this pageMax CVSS 10.0Priority 44KEV 0

CVE-2024-47901 · Siemens InterMesh 7177 Hybrid 2.0 Subscriber

A vulnerability has been identified in InterMesh 7177 Hybrid 2.0 Subscriber (All versions < V8.2.12), InterMesh 7707 Fire Subscriber (All…

EPSS 1%CVSS 10.0

CVE-2024-47902 · Siemens InterMesh 7177 Hybrid 2.0 Subscriber

A vulnerability has been identified in InterMesh 7177 Hybrid 2.0 Subscriber (All versions < V8.2.12), InterMesh 7707 Fire Subscriber (All…

CVE-2024-47903 · Siemens InterMesh 7177 Hybrid 2.0 Subscriber

A vulnerability has been identified in InterMesh 7177 Hybrid 2.0 Subscriber (All versions < V8.2.12), InterMesh 7707 Fire Subscriber (All…

EPSS 0.4%CVSS 9.1

james-eggers1 vulnerability on this pageMax CVSS 9.9Priority 43KEV 0

CVE-2024-49653 · james-eggers Portfolleo

WordPress Portfolleo plugin <= 1.2 - Arbitrary File Upload vulnerability

EPSS 1%CVSS 9.9

ELECOM CO.,LTD.1 vulnerability on this pageMax CVSS 9.8Priority 42KEV 0

CVE-2024-43689 · ELECOM CO.,LTD. WAB-I1750-PS

Stack-based buffer overflow vulnerability exists in ELECOM wireless access points.

EPSS 0.9%CVSS 9.8

Linux11 vulnerabilities on this pageMax CVSS 9.8Priority 42KEV 0

CVE-2024-47685 · Linux Linux

netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()

EPSS 1%CVSS 9.1

CVE-2024-50033 · Linux Linux

slip: make slhc_remember() more robust against malicious packets

EPSS 0.8%CVSS 9.8

CVE-2024-47695 · Linux Linux

RDMA/rtrs-clt: Reset cid to con_num - 1 to stay in bounds

EPSS 0.7%CVSS 9.8

CVE-2024-49996 · Linux Linux

cifs: Fix buffer overflow when parsing NFS reparse points

EPSS 0.8%CVSS 9.4

CVE-2022-48985 · Linux Linux

net: mana: Fix race on per-CQ variable napi work_done

CVE-2022-49003 · Linux Linux

nvme: fix SRCU protection of nvme_ns_head list

CVE-2024-50046 · Linux Linux

NFSv4: Prevent NULL-pointer dereference in nfs42_complete_copies()

CVE-2024-47678 · Linux Linux

icmp: change the order of rate limits

EPSS 0.6%CVSS 9.4

CVE-2024-49855 · Linux Linux

nbd: fix race between timeout and normal completion

CVE-2024-50043 · Linux Linux

nfsd: fix possible badness in FREE_STATEID

CVE-2024-50047 · Linux Linux

smb: client: fix UAF in async decryption

Kieback & Peter1 vulnerability on this pageMax CVSS 9.8Priority 40KEV 0

CVE-2024-41717 · Kieback & Peter DDC4040e

Kieback&Peter DDC4000 Series Path Traversal

Alexander De Ridder1 vulnerability on this pageMax CVSS 9.9Priority 39KEV 0

CVE-2024-49669 · Alexander De Ridder INK Official

WordPress INK Official plugin <= 4.1.2 - Arbitrary File Upload vulnerability

EPSS 0.5%CVSS 9.9

dFactory1 vulnerability on this pageMax CVSS 9.8Priority 39KEV 0

CVE-2024-43924 · dFactory Responsive Lightbox

WordPress Responsive Lightbox & Gallery plugin <= 2.4.7 - Broken Access Control vulnerability

Dogu Pekgoz1 vulnerability on this pageMax CVSS 9.9Priority 39KEV 0

CVE-2024-49671 · Dogu Pekgoz AI Image Generator for Your Content & Featured Images – AI Postpix

WordPress AI Postpix plugin <= 1.1.8 - Arbitrary File Upload vulnerability

EPSS 0.5%CVSS 9.9

ecomerciar1 vulnerability on this pageMax CVSS 9.9Priority 39KEV 0

CVE-2024-49658 · ecomerciar Woocommerce Custom Profile Picture

WordPress Woocommerce Custom Profile Picture plugin <= 1.0 - Arbitrary File Upload vulnerability

EPSS 0.6%CVSS 9.9

learning_with_texts1 vulnerability on this pageMax CVSS 9.8Priority 39KEV 0

CVE-2024-48509 · learning_with_texts learning_with_texts

Learning with Texts (LWT) 2.0.3 is vulnerable to SQL Injection.

ProfilePress Team1 vulnerability on this pageMax CVSS 9.8Priority 39KEV 0

CVE-2024-9947 · ProfilePress Team ProfilePress Pro

ProfilePress - Pro <= 4.11.1 - Authentication Bypass via WordPress.com OAuth provider

Renata Bracichowicz1 vulnerability on this pageMax CVSS 9.9Priority 39KEV 0

CVE-2024-49652 · Renata Bracichowicz 3D Work In Progress

WordPress 3D Work In Progress plugin <= 1.0.3 - Arbitrary File Upload vulnerability

EPSS 0.5%CVSS 9.9

code-projects1 vulnerability on this pageMax CVSS 9.8Priority 38KEV 0

CVE-2024-10196 · code-projects Pharmacy Management System

code-projects Pharmacy Management System add_new_invoice.php sql injection