The archive.

CVE-2024-10137 · code-projects Pharmacy Management System

code-projects Pharmacy Management System manage_medicine.php sql injection

CVE-2024-10138 · code-projects Pharmacy Management System

code-projects Pharmacy Management System add_new_purchase.php sql injection

CVE-2024-10139 · code-projects Pharmacy Management System

code-projects Pharmacy Management System add_new_supplier.php sql injection

CVE-2024-10170 · code-projects Hospital Management System

code-projects Hospital Management System get_doctor.php sql injection

EPSS 0.4%CVSS 9.8

viloliving6 vulnerabilities on this pageMax CVSS 9.6Priority 51KEV 0

CVE-2024-40089 · viloliving vilo_5_mesh_wifi_system_firmware

A Command Injection vulnerability in Vilo 5 Mesh WiFi System <= 5.16.1.33 allows remote, authenticated attackers to execute arbitrary cod…

EPSS 1%public exploit CVSS 9.1

CVE-2024-40084 · viloliving vilo_5_mesh_wifi_system_firmware

A Buffer Overflow in the Boa webserver of Vilo 5 Mesh WiFi System <= 5.16.1.33 allows remote, unauthenticated attackers to execute arbitr…

EPSS 0.6%public exploit CVSS 9.6

CVE-2024-40085 · viloliving vilo_5_mesh_wifi_system_firmware

A Buffer Overflow vulnerability in the local_app_set_router_wan function of Vilo 5 Mesh WiFi System <= 5.16.1.33 allows remote, unauthent…

EPSS 0.6%public exploit CVSS 9.6

CVE-2024-40086 · viloliving vilo_5_mesh_wifi_system_firmware

A Buffer Overflow vulnerability in the local_app_set_router_wifi_SSID_PWD function of Vilo 5 Mesh WiFi System <= 5.16.1.33 allows remote,…

EPSS 0.6%public exploit CVSS 9.6

CVE-2024-40083 · viloliving vilo_5_mesh_wifi_system_firmware

A Buffer Overflow vulnerabilty in the local_app_set_router_token function of Vilo 5 Mesh WiFi System <= 5.16.1.33 allows remote, unauthen…

EPSS 0.4%public exploit CVSS 9.6

CVE-2024-40087 · viloliving vilo_5_mesh_wifi_system_firmware

Vilo 5 Mesh WiFi System <= 5.16.1.33 is vulnerable to Insecure Permissions.

EPSS 0.4%CVSS 9.6

Codezips3 vulnerabilities on this pageMax CVSS 9.8Priority 50KEV 0

CVE-2024-10165 · Codezips Sales Management System

Codezips Sales Management System deletecustcom.php sql injection

CVE-2024-10166 · Codezips Sales Management System

Codezips Sales Management System checkuser.php sql injection

CVE-2024-10167 · Codezips Sales Management System

Codezips Sales Management System deletecustind.php sql injection

EPSS 0.6%public exploit CVSS 9.8

PHPGurukul4 vulnerabilities on this pageMax CVSS 9.8Priority 50KEV 0

CVE-2024-10153 · PHPGurukul Boat Booking System

PHPGurukul Boat Booking System Book a Boat Page book-boat.php sql injection

CVE-2024-10154 · PHPGurukul Boat Booking System

PHPGurukul Boat Booking System Check Booking Status Page status.php sql injection

EPSS 0.6%public exploit CVSS 9.8

CVE-2024-10157 · PHPGurukul Boat Booking System

PHPGurukul Boat Booking System Reset Your Password Page password-recovery.php sql injection

CVE-2024-10156 · PHPGurukul Boat Booking System

PHPGurukul Boat Booking System Sign In Page index.php sql injection

EPSS 0.7%CVSS 9.8

wfh456782 vulnerabilities on this pageMax CVSS 9.8Priority 50KEV 0

CVE-2024-10120 · wfh45678 Radar

wfh45678 Radar upload unrestricted upload

CVE-2024-10121 · wfh45678 Radar

wfh45678 Radar Interface authorization

LiteSpeed Technologies1 vulnerability on this pageMax CVSS 9.8Priority 49KEV 0

CVE-2024-44000 · LiteSpeed Technologies LiteSpeed Cache

WordPress LiteSpeed Cache plugin < 6.5.0.1 - Unauthenticated Account Takeover via Cookie Leak vulnerability

EPSS 82%CVSS 9.8

SourceCodester1 vulnerability on this pageMax CVSS 9.8Priority 49KEV 0

CVE-2024-10163 · SourceCodester Sentiment Based Movie Rating System

SourceCodester Sentiment Based Movie Rating System movie_details.php sql injection

EPSS 0.6%public exploit CVSS 9.8

Ivanti1 vulnerability on this pageMax CVSS 9.1Priority 47KEV 0

CVE-2024-37404 · Ivanti Connect Secure

Improper Input Validation in the admin portal of Ivanti Connect Secure before 22.7R2.1 and 9.1R18.9, or Ivanti Policy Secure before 22.7R…

EPSS 71%CVSS 9.1

vivek2tamrakar2 vulnerabilities on this pageMax CVSS 10.0Priority 44KEV 0

CVE-2024-49328 · vivek2tamrakar WP REST API FNS

WordPress WP REST API FNS Plugin plugin <= 1.0.0 - Account Takeover vulnerability

EPSS 2%CVSS 9.8

CVE-2024-49329 · vivek2tamrakar WP REST API FNS

WordPress WP REST API FNS plugin <= 1.0.0 - Arbitrary File Upload vulnerability

redhopit1 vulnerability on this pageMax CVSS 10.0Priority 43KEV 0

CVE-2024-49607 · redhopit WP Dropbox Dropins

WordPress WP Dropbox Dropins plugin <= 1.0 - Arbitrary File Upload vulnerability

EPSS 1%CVSS 10.0

SECOM2 vulnerabilities on this pageMax CVSS 9.8Priority 42KEV 0

CVE-2024-10119 · SECOM WRTM326

SECOM WRTM326 - OS Command Injection

EPSS 1.0%CVSS 9.8

CVE-2024-10118 · SECOM WRTR-304GN-304TW-UPSC

SECOM WRTR-304GN-304TW-UPSC - OS Command Injection

EPSS 0.9%CVSS 9.8

bepitulaz1 vulnerability on this pageMax CVSS 10.0Priority 39KEV 0

CVE-2024-49327 · bepitulaz Woostagram Connect

WordPress Woostagram Connect plugin <= 1.0.2 - Arbitrary File Upload vulnerability

brx8r1 vulnerability on this pageMax CVSS 10.0Priority 39KEV 0

CVE-2024-49330 · brx8r Nice Backgrounds

WordPress Nice Backgrounds plugin <= 1.0 - Arbitrary File Upload vulnerability

Hikvision1 vulnerability on this pageMax CVSS 9.8Priority 39KEV 0

CVE-2024-47485 · Hikvision HikCentral Master Lite

There is a CSV injection vulnerability in some HikCentral Master Lite versions.

EPSS 0.6%CVSS 9.8

Jeroen Berkvens1 vulnerability on this pageMax CVSS 9.8Priority 39KEV 0

CVE-2024-49286 · Jeroen Berkvens SSV Events

WordPress SSV Events plugin <= 3.2.7 - Local File Inclusion to RCE vulnerability

EPSS 0.6%CVSS 9.8

N-Media1 vulnerability on this pageMax CVSS 9.8Priority 39KEV 0

CVE-2024-49604 · N-Media Simple User Registration

WordPress Simple User Registration plugin <= 6.7 - Broken Authentication vulnerability

paxmanpwnz1 vulnerability on this pageMax CVSS 10.0Priority 39KEV 0

CVE-2024-49611 · paxmanpwnz Product Website Showcase

WordPress Product Website Showcase plugin <= 1.0 - Arbitrary File Upload vulnerability

photokiteditor1 vulnerability on this pageMax CVSS 10.0Priority 39KEV 0

CVE-2024-49610 · photokiteditor photokit

WordPress photokit plugin <= 1.0 - Arbitrary File Upload vulnerability

smartdevth1 vulnerability on this pageMax CVSS 9.8Priority 39KEV 0

CVE-2024-49624 · smartdevth Advanced Advertising System

WordPress Advanced Advertising System plugin <= 1.3.1 - PHP Object Injection vulnerability

EPSS 0.6%CVSS 9.8

sovratecdev1 vulnerability on this pageMax CVSS 10.0Priority 39KEV 0

CVE-2024-49324 · sovratecdev Sovratec Case Management

WordPress Sovratec Case Management plugin <= 1.0.0 - Arbitrary File Upload vulnerability

Vasileios Kerasiotis1 vulnerability on this pageMax CVSS 10.0Priority 39KEV 0

CVE-2024-49326 · Vasileios Kerasiotis Affiliator

WordPress Affiliator plugin <= 2.1.3 - Arbitrary File Upload vulnerability

giveawayboost1 vulnerability on this pageMax CVSS 9.8Priority 38KEV 0

CVE-2024-49332 · giveawayboost Giveaway Boost

WordPress Giveaway Boost plugin <= 2.1.4 - PHP Object Injection vulnerability

Myriad Solutionz1 vulnerability on this pageMax CVSS 9.9Priority 38KEV 0

CVE-2024-49331 · Myriad Solutionz Property Lot Management System

WordPress Property Lot Management System plugin <= 4.2.38 - Arbitrary File Upload vulnerability

EPSS 0.5%CVSS 9.9

Piyush Patel1 vulnerability on this pageMax CVSS 9.8Priority 38KEV 0

CVE-2024-49626 · Piyush Patel Shipyaari Shipping Management

WordPress Shipyaari Shipping Management plugin <= 1.2 - PHP Object Injection vulnerability

sphoid1 vulnerability on this pageMax CVSS 9.8Priority 38KEV 0

CVE-2024-49625 · sphoid SiteBuilder Dynamic Components

WordPress SiteBuilder Dynamic Components plugin <= 1.0 - PHP Object Injection vulnerability