The archive.

Browse all tracked critical vulnerabilities, including records outside today's brief.

39,165 matching vulnerabilities · Page 410 of 784

Linear1 vulnerability on this pageMax CVSS 9.8Priority 59KEV 0

CVE-2024-9441 · Linear eMerge e3-Series

Linear eMerge e3-Series Forgot Password Command Injection

EPSS 53%public exploit CVSS 9.8

anteeowms1 vulnerability on this pageMax CVSS 9.8Priority 58KEV 0

CVE-2024-44349 · anteeowms anteeowms

A SQL injection vulnerability in login portal in AnteeoWMS before v4.7.34 allows unauthenticated attackers to execute arbitrary SQL comma…

EPSS 6%public exploit CVSS 9.8

mecha-cms1 vulnerability on this pageMax CVSS 9.8Priority 54KEV 0

CVE-2024-46446 · mecha-cms mecha_cms

Mecha CMS 3.0.0 is vulnerable to Directory Traversal.

EPSS 1%public exploit CVSS 9.8

taskcafe_project1 vulnerability on this pageMax CVSS 9.8Priority 50KEV 0

CVE-2023-26770 · taskcafe_project taskcafe

TaskCafe 0.3.2 lacks validation in the Cookie value.

EPSS 0.7%public exploit CVSS 9.8

vegabird2 vulnerabilities on this pageMax CVSS 9.8Priority 50KEV 0

CVE-2024-45873 · vegabird yaazhini

A DLL hijacking vulnerability in VegaBird Yaazhini 2.0.2 allows attackers to execute arbitrary code / maintain persistence via placing a…

EPSS 0.7%public exploit CVSS 9.8

CVE-2024-45874 · vegabird vooki

A DLL hijacking vulnerability in VegaBird Vooki 5.2.9 allows attackers to execute arbitrary code / maintain persistence via placing a cra…

EPSS 0.7%public exploit CVSS 9.8

Ivanti2 vulnerabilities on this pageMax CVSS 9.8Priority 49KEV 0

CVE-2024-47010 · Ivanti Avalanche

Path Traversal in Ivanti Avalanche before version 6.4.5 allows a remote unauthenticated attacker to bypass authentication.

EPSS 38%CVSS 9.8

CVE-2024-47009 · Ivanti Avalanche

Path Traversal in Ivanti Avalanche before version 6.4.5 allows a remote unauthenticated attacker to bypass authentication.

EPSS 2%CVSS 9.8

The Wikimedia Foundation1 vulnerability on this pageMax CVSS 9.8Priority 49KEV 0

CVE-2024-47849 · The Wikimedia Foundation Mediawiki - Cargo

Backticks can allow the usage of not-allowed SQL functions

EPSS 0.6%public exploit CVSS 9.8

latepoint2 vulnerabilities on this pageMax CVSS 9.8Priority 47KEV 0

CVE-2024-8911 · latepoint LatePoint Plugin

LatePoint <= 5.0.11 - Unauthenticated Arbitrary User Password Change via SQL Injection

EPSS 3%CVSS 9.8

CVE-2024-8943 · latepoint LatePoint Plugin

LatePoint <= 5.0.12 - Authentication Bypass

EPSS 3%CVSS 9.8

Apache Software Foundation1 vulnerability on this pageMax CVSS 9.2Priority 45KEV 0

CVE-2024-47561 · Apache Software Foundation Apache Avro Java SDK

Apache Avro Java SDK: Arbitrary Code Execution when reading Avro schema (Java SDK)

EPSS 3%CVSS 9.2

Cisco5 vulnerabilities on this pageMax CVSS 9.9Priority 43KEV 0

CVE-2024-20432 · Cisco Cisco Data Center Network Manager

Cisco Nexus Dashboard Fabric Controller Web UI Command Injection Vulnerability

EPSS 1%CVSS 9.9

CVE-2024-20521 · Cisco Cisco Small Business RV Series Router Firmware

Cisco Small Business RV042, RV042G, RV320, and RV325 Remote Command Execution Vulnerabilities

EPSS 0.7%CVSS 9.1

CVE-2024-20518 · Cisco Cisco Small Business RV Series Router Firmware

Cisco Small Business RV042, RV042G, RV320, and RV325 Remote Command Execution Vulnerabilities

EPSS 0.6%CVSS 9.1

CVE-2024-20519 · Cisco Cisco Small Business RV Series Router Firmware

Cisco Small Business RV042, RV042G, RV320, and RV325 Remote Command Execution Vulnerabilities

EPSS 0.6%CVSS 9.1

CVE-2024-20520 · Cisco Cisco Small Business RV Series Router Firmware

Cisco Small Business RV042, RV042G, RV320, and RV325 Remote Command Execution Vulnerabilities

EPSS 0.6%CVSS 9.1

Elsight2 vulnerabilities on this pageMax CVSS 9.8Priority 42KEV 0

CVE-2024-45251 · Elsight Halo version 11.7.1.5

Elsight – CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

EPSS 1%CVSS 9.8

CVE-2024-45252 · Elsight Halo version 11.7.1.5

Elsight – CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

EPSS 1%CVSS 9.8

mitre1 vulnerability on this pageMax CVSS 9.8Priority 41KEV 0

CVE-2024-41593 · mitre

DrayTek Vigor310 devices through 4.3.2.6 allow a remote attacker to execute arbitrary code via the function ft_payload_dns(), because a b…

EPSS 0.9%CVSS 9.8

Siemens4 vulnerabilities on this pageMax CVSS 9.9Priority 41KEV 0

CVE-2024-47553 · Siemens SINEC Security Monitor

A vulnerability has been identified in SINEC Security Monitor (All versions < V4.9.0).

EPSS 0.8%CVSS 9.9

CVE-2024-41798 · Siemens SENTRON 7KM PAC3200

A vulnerability has been identified in SENTRON 7KM PAC3200 (All versions).

EPSS 0.5%CVSS 9.8

CVE-2024-47562 · Siemens SINEC Security Monitor

A vulnerability has been identified in SINEC Security Monitor (All versions < V4.9.0).

EPSS 0.3%CVSS 9.3

CVE-2023-52952 · Siemens HiMed Cockpit 12 pro

A vulnerability has been identified in HiMed Cockpit 12 pro (J31032-K2017-H259) (All versions >= V11.5.1 < V11.6.2), HiMed Cockpit 14 pro…

EPSS 0.2%CVSS 9.3

Codezips1 vulnerability on this pageMax CVSS 9.8Priority 40KEV 0

CVE-2024-9460 · Codezips Online Shopping Portal

Codezips Online Shopping Portal index.php sql injection

EPSS 0.7%CVSS 9.8

ESAFENET1 vulnerability on this pageMax CVSS 9.8Priority 40KEV 0

CVE-2024-9536 · ESAFENET CDG

ESAFENET CDG MultiServerBackService sql injection

EPSS 0.6%CVSS 9.8

Optigo Networks2 vulnerabilities on this pageMax CVSS 9.8Priority 40KEV 0

CVE-2024-41925 · Optigo Networks ONS-S8 Spectra Aggregation Switch

Optigo Networks ONS-S8 Spectra Aggregation Switch PHP Remote File Inclusion

EPSS 0.7%CVSS 9.8

CVE-2024-45367 · Optigo Networks ONS-S8 Spectra Aggregation Switch

Optigo Networks ONS-S8 Spectra Aggregation Switch Weak Authentication

EPSS 0.5%CVSS 9.3

Delta Electronics1 vulnerability on this pageMax CVSS 9.8Priority 39KEV 0

CVE-2024-43699 · Delta Electronics DIAEnergie

Delta Electronics DIAEnergie SQL Injection

EPSS 0.5%CVSS 9.8

Qualcomm, Inc.1 vulnerability on this pageMax CVSS 9.8Priority 39KEV 0

CVE-2024-33066 · Qualcomm, Inc. Snapdragon

Improper Input Validation in WLAN Resource Manager

EPSS 0.6%CVSS 9.8

Schneider Electric1 vulnerability on this pageMax CVSS 9.8Priority 39KEV 0

CVE-2024-8884 · Schneider Electric System Monitor application in Harmony Industrial PC HMIBMO/HMIBMI/HMIPSO/HMIBMP/HMIBMU/HMIPSP/HMIPEP series

CWE-200: Exposure of Sensitive Information to an Unauthorized Actor vulnerability exists that could cause exposure of credentials when at…

EPSS 0.6%CVSS 9.8

SOPlanning1 vulnerability on this pageMax CVSS 9.8Priority 39KEV 0

CVE-2024-9574 · SOPlanning SOPlanning

SQL Injection vulnerability in SOPlanning

EPSS 0.5%CVSS 9.8

Vmax Studio1 vulnerability on this pageMax CVSS 9.6Priority 39KEV 0

CVE-2024-44014 · Vmax Studio Vmax Project Manager

WordPress Vmax Project Manager plugin <= 1.0 - Local File Inclusion to RCE vulnerability

EPSS 0.6%CVSS 9.6

ruoyi1 vulnerability on this pageMax CVSS 9.8Priority 38KEV 0

CVE-2024-46076 · ruoyi ruoyi

RuoYi v4.7.9 and before has a security flaw that allows escaping from comments within the code generation feature, enabling the injection…

EPSS 0.5%CVSS 9.8

Shilpi Computers1 vulnerability on this pageMax CVSS 9.8Priority 38KEV 0

CVE-2024-47656 · Shilpi Computers Client Dashboard

User Enumeration vulnerability

EPSS 0.5%CVSS 9.8

TEM1 vulnerability on this pageMax CVSS 9.3Priority 38KEV 0

CVE-2024-41988 · TEM Opera Plus FM Family Transmitter

Missing Authentication for Critical Function vulnerability in TEM Opera Plus FM Family Transmitter

EPSS 0.6%CVSS 9.3

Xerox2 vulnerabilities on this pageMax CVSS 9.8Priority 38KEV 0

CVE-2024-47556 · Xerox FreeFlow Core

Pre-Auth RCE via Path Traversal

EPSS 0.5%CVSS 9.8

CVE-2024-47557 · Xerox FreeFlow Core

Pre-Auth RCE via Path Traversal

EPSS 0.5%CVSS 9.8

Cavok1 vulnerability on this pageMax CVSS 9.8Priority 37KEV 0

CVE-2024-45249 · Cavok Cavok

Cavok – CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

EPSS 0.4%CVSS 9.8

kirisun1 vulnerability on this pageMax CVSS 9.8Priority 37KEV 0

CVE-2024-45918 · kirisun command_and_dispatch_platform

Fujian Kelixin Communication Command and Dispatch Platform <=7.6.6.4391 is vulnerable to SQL Injection via /client/get_gis_fence.php.

EPSS 0.4%CVSS 9.8

Microchip1 vulnerability on this pageMax CVSS 9.8Priority 37KEV 0

CVE-2024-43685 · Microchip TimeProvider 4100

Session token fixation in TimeProvider 4100

EPSS 0.4%CVSS 9.8

PureStorage1 vulnerability on this pageMax CVSS 9.8Priority 37KEV 0

CVE-2024-3057 · PureStorage FlashArray

A flaw exists whereby a user can make a specific call to a FlashArray endpoint allowing privilege escalation.

EPSS 0.4%CVSS 9.8

Webroot3 vulnerabilities on this pageMax CVSS 9.8Priority 37KEV 0

CVE-2024-7824 · Webroot SecureAnywhere - Web Shield

Type-confusion vulnerability that can cause the WRSA.exe service to crash and generate a crash dump

EPSS 0.4%CVSS 9.8

CVE-2024-7825 · Webroot SecureAnywhere - Web Shield

Type confusion that can cause the WRSA.exe service to crash and generate a crash dump

EPSS 0.4%CVSS 9.8

CVE-2024-7826 · Webroot SecureAnywhere - Web Shield

Unhandled exception vulnerability that can cause the WRSA.exe service to crash and generate a crash dump

EPSS 0.4%CVSS 9.8

MediaTek, Inc.3 vulnerabilities on this pageMax CVSS 9.8Priority 35KEV 0

CVE-2024-20100 · MediaTek, Inc. MT3605, MT6985, MT6989, MT6990, MT7927, MT8183, MT8365, MT8512, MT8676, MT8678, MT8695, MT8698, MT8755, MT8775, MT8792, MT8796

In wlan driver, there is a possible out of bounds write due to improper input validation.

EPSS 0.3%CVSS 9.8

CVE-2024-20101 · MediaTek, Inc. MT3605, MT6985, MT6989, MT6990, MT7927, MT8183, MT8512, MT8676, MT8678, MT8695, MT8698, MT8755, MT8775, MT8792, MT8796

In wlan driver, there is a possible out of bounds write due to improper input validation.

EPSS 0.3%CVSS 9.8

CVE-2024-20103 · MediaTek, Inc. MT3605, MT6985, MT6989, MT6990, MT7927, MT8183, MT8512, MT8678, MT8695, MT8698, MT8796, MT8893

In wlan firmware, there is a possible out of bounds write due to improper input validation.

EPSS 0.3%CVSS 9.8

YITHEMES1 vulnerability on this pageMax CVSS 9.3Priority 35KEV 0

CVE-2024-47350 · YITHEMES YITH WooCommerce Ajax Search

WordPress YITH WooCommerce Ajax Search plugin <= 2.8.0 - SQL Injection vulnerability

EPSS 0.4%CVSS 9.3

OpenText™1 vulnerability on this pageMax CVSS 9.8Priority 34KEV 0

CVE-2024-6360 · OpenText™ Vertica

Incorrect Permission Assignment for Critical Resource vulnerability has been discovered in OpenText™ Vertica.

EPSS 0.3%CVSS 9.8