The archive.

RITTAL GmbH & Co. KG2 vulnerabilities on this pageMax CVSS 9.8Priority 51KEV 0

CVE-2024-47945 · RITTAL GmbH & Co. KG IoT Interface & CMC III Processing Unit

Predictable Session ID

EPSS 0.9%public exploit CVSS 9.8

CVE-2024-47943 · RITTAL GmbH & Co. KG IoT Interface & CMC III Processing Unit

Improper signature verification of firmware upgrade files

draytek1 vulnerability on this pageMax CVSS 9.8Priority 50KEV 0

CVE-2024-48153 · draytek vigor3900_firmware

DrayTek Vigor3900 1.5.1.3 allows attackers to inject malicious commands into mainfunction.cgi and execute arbitrary commands by calling t…

EPSS 0.7%public exploit CVSS 9.8

netease-youdao1 vulnerability on this pageMax CVSS 9.8Priority 50KEV 0

CVE-2024-7099 · netease-youdao netease-youdao/qanything

SQL Injection in netease-youdao/qanything

wavelog2 vulnerabilities on this pageMax CVSS 9.8Priority 50KEV 0

CVE-2024-48257 · wavelog wavelog

Wavelog 1.8.5 allows Oqrs_model.php get_worked_modes station_id SQL injectioin.

EPSS 0.7%public exploit CVSS 9.8

CVE-2024-48251 · wavelog wavelog

Wavelog 1.8.5 allows Activated_gridmap_model.php get_band_confirmed SQL injection via band, sat, propagation, or mode.

nickboss1 vulnerability on this pageMax CVSS 9.8Priority 49KEV 0

CVE-2024-9047 · nickboss Iptanus File Upload

WordPress File Upload <= 4.24.11 - Unauthenticated Path Traversal to Arbitrary File Read and Deletion in wfu_file_downloader.php

EPSS 93%CVSS 9.8

phpgurukul1 vulnerability on this pageMax CVSS 9.8Priority 49KEV 0

CVE-2024-48283 · phpgurukul user_registration_and_login_and_user_management_system

Phpgurukul User Registration & Login and User Management System 3.2 is vulnerable to SQL Injection in /admin//search-result.php via the s…

SourceCodester2 vulnerabilities on this pageMax CVSS 9.8Priority 49KEV 0

CVE-2024-9974 · SourceCodester Online Eyewear Shop

SourceCodester Online Eyewear Shop POST Request Master.php sql injection

CVE-2024-9973 · SourceCodester Online Eyewear Shop

SourceCodester Online Eyewear Shop Report Viewing Page page sql injection

automatic_systems1 vulnerability on this pageMax CVSS 9.8Priority 48KEV 0

CVE-2024-48823 · automatic_systems maintenance_slimlane

Local file inclusion in Automatic Systems Maintenance SlimLane 29565_d74ecce0c1081d50546db573a499941b10799fb7 allows a remote attacker to…

jepass1 vulnerability on this pageMax CVSS 9.8Priority 48KEV 0

CVE-2024-46535 · jepass jepass

Jepaas v7.2.8 was discovered to contain a SQL injection vulnerability via the orderSQL parameter at /homePortal/loadUserMsg.

makeplane1 vulnerability on this pageMax CVSS 9.3Priority 48KEV 0

CVE-2024-47830 · makeplane plane

Plane allows server side request forgery via /_next/image endpoint

EPSS 0.6%public exploit CVSS 9.3

magicbug2 vulnerabilities on this pageMax CVSS 9.8Priority 47KEV 0

CVE-2024-48253 · magicbug cloudlog

Cloudlog 2.6.15 allows Oqrs.php delete_oqrs_line id SQL injection.

EPSS 0.4%public exploit CVSS 9.8

CVE-2024-48255 · magicbug cloudlog

Cloudlog 2.6.15 allows Oqrs.php get_station_info station_id SQL injection.

EPSS 0.4%CVSS 9.8

Kubernetes1 vulnerability on this pageMax CVSS 9.8Priority 46KEV 0

CVE-2024-9486 · Kubernetes Image Builder

VM images built with Image Builder and Proxmox provider use default credentials

EPSS 2%CVSS 9.8

MB connect line2 vulnerabilities on this pageMax CVSS 9.8Priority 44KEV 0

CVE-2024-45274 · MB connect line mbNET.mini

MB connect line/Helmholz: Remote code execution via confnet service

EPSS 2%CVSS 9.8

CVE-2024-45275 · MB connect line mbNET.mini

MB connect line/Helmholz: Hardcoded user accounts with hard-coded passwords

cure531 vulnerability on this pageMax CVSS 10.0Priority 43KEV 0

CVE-2024-47875 · cure53 DOMPurify

DOMPurify nesting-based mXSS

EPSS 1%CVSS 10.0

Progress1 vulnerability on this pageMax CVSS 9.8Priority 43KEV 0

CVE-2024-8755 · Progress LoadMaster

Improper Input Validation vulnerability of Authenticated User in Progress LoadMaster allows : OS Command Injection.

EPSS 1%CVSS 9.8

GitLab1 vulnerability on this pageMax CVSS 9.6Priority 42KEV 0

CVE-2024-9164 · GitLab GitLab

Missing Authentication for Critical Function in GitLab

EPSS 1%CVSS 9.6

nagios1 vulnerability on this pageMax CVSS 9.1Priority 42KEV 0

CVE-2023-48082 · nagios xi

Nagios XI before 2024R1 was discovered to improperly handle API keys generation (randomly-generated), allowing attackers to possibly gene…

EPSS 2%CVSS 9.1

dycms1 vulnerability on this pageMax CVSS 9.8Priority 41KEV 0

CVE-2024-48782 · dycms dycms

File Upload vulnerability in DYCMS Open-Source Version v2.0.9.41 allows a remote attacker to execute arbitrary code via the application o…

Hgiga1 vulnerability on this pageMax CVSS 9.8Priority 41KEV 0

CVE-2024-9924 · Hgiga OAKlouds

Hgiga OAKlouds - Arbitrary File Read And Delete

wanxingtechnology2 vulnerabilities on this pageMax CVSS 9.8Priority 41KEV 0

CVE-2024-48779 · wanxingtechnology yitu_project_management_software

An issue in Wanxing Technology's Yitu project Management Software 3.2.2 allows a remote attacker to execute arbitrary code via the platfo…

CVE-2024-48781 · wanxingtechnology yitu_project_management_kirin_edition

An issue in Wanxing Technology Yitu Project Management Kirin Edition 2.3.6 allows a remote attacker to execute arbitrary code via a speci…

baptiste.gourdin1 vulnerability on this pageMax CVSS 9.8Priority 40KEV 0

CVE-2024-48033 · baptiste.gourdin Talkback

WordPress Talkback plugin <= 1.0 - PHP Object Injection vulnerability

ChanGate1 vulnerability on this pageMax CVSS 9.8Priority 40KEV 0

CVE-2024-9972 · ChanGate Property Management System

ChanGate Property Management System - SQL Injection

ESi Technology1 vulnerability on this pageMax CVSS 9.8Priority 40KEV 0

CVE-2024-9982 · ESi Technology AIM LINE Marketing Platform

ESi Technology AIM LINE Marketing Platform - SQL Injection

mbed1 vulnerability on this pageMax CVSS 9.8Priority 40KEV 0

CVE-2024-49195 · mbed mbedtls

Mbed TLS 3.5.x through 3.6.x before 3.6.2 has a buffer underrun in pkwrite when writing an opaque key pair

Oracle Corporation2 vulnerabilities on this pageMax CVSS 9.8Priority 40KEV 0

CVE-2024-21216 · Oracle Corporation Oracle WebLogic Server

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core).

CVE-2024-21172 · Oracle Corporation Oracle Hospitality OPERA 5

Vulnerability in the Oracle Hospitality OPERA 5 product of Oracle Hospitality Applications (component: Opera Servlet).

EPSS 0.5%CVSS 9.0

Ragic2 vulnerabilities on this pageMax CVSS 10.0Priority 40KEV 0

CVE-2024-9985 · Ragic Enterprise Cloud Database

Ragic Enterprise Cloud Database - Arbitrary File Upload

EPSS 0.6%CVSS 10.0

CVE-2024-9984 · Ragic Enterprise Cloud Database

Ragic Enterprise Cloud Database - Missing Authentication

teamplus technology1 vulnerability on this pageMax CVSS 9.8Priority 40KEV 0

CVE-2024-9921 · teamplus technology team+

TEAMPLUS TECHNOLOGY Team+ - SQL Injection

classcms1 vulnerability on this pageMax CVSS 9.8Priority 39KEV 0

CVE-2024-48180 · classcms classcms

ClassCMS <=4.8 is vulnerable to file inclusion in the nowView method in/class/cms/cms.php, which can include a file uploaded to the/class…

dataease1 vulnerability on this pageMax CVSS 9.8Priority 39KEV 0

CVE-2024-47074 · dataease dataease

Dataease PostgreSQL Data Source JDBC Connection Parameters Not Verified Leads to Deserialization Vulnerability

Ninja Team1 vulnerability on this pageMax CVSS 9.8Priority 39KEV 0

CVE-2024-47331 · Ninja Team Multi Step for Contact Form

WordPress Multi Step for Contact Form plugin <= 2.7.7 - Unauthenticated SQL Injection vulnerability