The archive.

CVE-2024-9322 · code-projects Supply Chain Management

code-projects Supply Chain Management edit_manufacturer.php sql injection

EPSS 0.4%CVSS 9.8

mitre2 vulnerabilities on this pageMax CVSS 10.0Priority 50KEV 0

CVE-2024-24117 · mitre

Insecure Permissions vulnerability in Ruijie RG-NBS2009G-P RGOS v.10.4(1)P2 Release (9736) allows a remote attacker to gain privileges vi…

EPSS 0.7%public exploit CVSS 9.8

CVE-2024-42017 · mitre

An issue was discovered in Atos Eviden iCare 2.7.1 through 2.7.11.

EPSS 0.5%CVSS 10.0

SourceCodester4 vulnerabilities on this pageMax CVSS 9.8Priority 50KEV 0

CVE-2024-9295 · SourceCodester Advocate Office Management System

SourceCodester Advocate Office Management System login.php sql injection

CVE-2024-9296 · SourceCodester Advocate Office Management System

SourceCodester Advocate Office Management System forgot_pass.php sql injection

CVE-2024-9318 · SourceCodester Advocate Office Management System

SourceCodester Advocate Office Management System activate.php sql injection

EPSS 0.5%public exploit CVSS 9.8

CVE-2024-9328 · SourceCodester Advocate Office Management System

SourceCodester Advocate Office Management System edit_client.php sql injection

wanxingtechnology1 vulnerability on this pageMax CVSS 9.8Priority 50KEV 0

CVE-2024-24122 · wanxingtechnology yitu_project_management_software

A remote code execution vulnerability in the project management of Wanxing Technology's Yitu project which allows an attacker to use the…

EPSS 0.7%public exploit CVSS 9.8

kalvinGit1 vulnerability on this pageMax CVSS 9.8Priority 49KEV 0

CVE-2024-9280 · kalvinGit kvf-admin

kalvinGit kvf-admin FileUploadKit.java fileUpload unrestricted upload

ruijie1 vulnerability on this pageMax CVSS 9.8Priority 49KEV 0

CVE-2024-24116 · ruijie rg-nbs2009g-p_firmware

An issue in Ruijie RG-NBS2009G-P RGOS v.10.4(1)P2 Release(9736) allows a remote attacker to gain privileges via the system/config_menu.htm.

EPSS 28%CVSS 9.8

stellarwp1 vulnerability on this pageMax CVSS 9.8Priority 49KEV 0

CVE-2024-8353 · stellarwp GiveWP – Donation Plugin and Fundraising Platform

GiveWP – Donation Plugin and Fundraising Platform <= 3.16.1 - Unauthenticated PHP Object Injection

EPSS 33%CVSS 9.8

GitLab1 vulnerability on this pageMax CVSS 9.1Priority 47KEV 0

CVE-2023-3441 · GitLab GitLab

Exposure of Sensitive Information Due to Incompatible Policies in GitLab

EPSS 0.6%public exploit CVSS 9.1

online_medicine_ordering_system_project1 vulnerability on this pageMax CVSS 9.8Priority 47KEV 0

CVE-2024-46293 · online_medicine_ordering_system_project online_medicine_ordering_system

Sourcecodester Online Medicine Ordering System 1.0 is vulnerable to Incorrect Access Control.

EPSS 0.4%public exploit CVSS 9.8

cloudlog1 vulnerability on this pageMax CVSS 9.8Priority 46KEV 0

CVE-2024-45999 · cloudlog cloudlog

A SQL Injection vulnerability was discovered in Cloudlog 2.6.15, specifically within the get_station_info()function located in the file /…

EPSS 0.4%public exploit CVSS 9.8

xunhuweb2 vulnerabilities on this pageMax CVSS 9.8Priority 45KEV 0

CVE-2024-9106 · xunhuweb Wechat Social login 微信QQ钉钉登录插件

Wechat Social login <= 1.3.0 - Authentication Bypass

EPSS 2%CVSS 9.8

CVE-2024-9108 · xunhuweb Wechat Social login 微信QQ钉钉登录插件

Wechat Social login <= 1.3.0 - Unauthenticated Arbitrary File Upload

EPSS 0.9%CVSS 9.8

Atelmo1 vulnerability on this pageMax CVSS 9.3Priority 43KEV 0

CVE-2024-9166 · Atelmo Atemio AM 520 HD Full HD Satellite Receiver

OS Command Injection in Atelmo Atemio AM 520 HD Full HD Satellite Receiver

EPSS 2%CVSS 9.3

DefinetlyNotAI1 vulnerability on this pageMax CVSS 9.8Priority 40KEV 0

CVE-2024-47608 · DefinetlyNotAI Logicytics

Logicytics vulnerable to shell injections

EPSS 0.7%CVSS 9.8

Mozilla3 vulnerabilities on this pageMax CVSS 9.8Priority 40KEV 0

CVE-2024-9401 · Mozilla Firefox

Memory safety bugs present in Firefox 130, Firefox ESR 115.15, Firefox ESR 128.2, and Thunderbird 128.2.

EPSS 0.7%CVSS 9.8

CVE-2024-9392 · Mozilla Firefox

A compromised content process could have allowed for the arbitrary loading of cross-origin pages.

CVE-2024-9402 · Mozilla Firefox

Memory safety bugs present in Firefox 130, Firefox ESR 128.2, and Thunderbird 128.2.

OPW Fuel Managements Systems1 vulnerability on this pageMax CVSS 9.8Priority 40KEV 0

CVE-2024-8310 · OPW Fuel Managements Systems SiteSentinel

OPW Fuel Management Systems SiteSentinel Missing Authentication for Critical Function

EPSS 0.7%CVSS 9.8

Alisonic1 vulnerability on this pageMax CVSS 9.8Priority 39KEV 0

CVE-2024-8630 · Alisonic Sibylla

Alisonic Sibylla SQL Injection

CodeRevolution1 vulnerability on this pageMax CVSS 9.8Priority 39KEV 0

CVE-2024-9265 · CodeRevolution Echo RSS Feed Post Generator

Echo RSS Feed Post Generator <= 5.4.6 - Unauthenticated Privilege Escalation

filesender1 vulnerability on this pageMax CVSS 9.8Priority 39KEV 0

CVE-2024-45186 · filesender filesender

FileSender before 2.49 allows server-side template injection (SSTI) for retrieving credentials.

Linux1 vulnerability on this pageMax CVSS 9.8Priority 39KEV 0

CVE-2024-46865 · Linux Linux

fou: fix initialization of grc

OMNTEC1 vulnerability on this pageMax CVSS 9.8Priority 39KEV 0

CVE-2024-6981 · OMNTEC Proteus Tank Monitoring

OMNTEC Proteus Tank Monitoring Missing Authentication for Critical Function

PLANET Technology2 vulnerabilities on this pageMax CVSS 9.8Priority 39KEV 0

CVE-2024-8456 · PLANET Technology GS-4210-24PL4C hardware 2.0

PLANET Technology switch devices - Missing Authentication for multiple HTTP routes

CVE-2024-8450 · PLANET Technology GS-4210-24PL4C hardware 2.0

PLANET Technology switch devices - Hard-coded SNMPv1 read-write community string

EPSS 0.4%CVSS 9.8

RedefiningTheWeb1 vulnerability on this pageMax CVSS 9.8Priority 39KEV 0

CVE-2024-9289 · RedefiningTheWeb WordPress & WooCommerce Affiliate Program

WordPress & WooCommerce Affiliate Program <= 8.4.1 - Authentication Bypass to Account Takeover and Privilege Escalation

Oceanic Software3 vulnerabilities on this pageMax CVSS 9.8Priority 38KEV 0

CVE-2024-8607 · Oceanic Software ValeApp

SQLi in Oceanic Software's ValeApp

CVE-2024-8643 · Oceanic Software ValeApp

Session Hijacking in Oceanic Software's ValeApp