Critical vulnerability archive — page 414

broadcom2 vulnerabilities on this pageMax CVSS 9.8Priority 99KEV 2

CVE-2024-38812 · broadcom vmware_vcenter_server

Heap-overflow vulnerability

KEV · due 11 Dec EPSS 55%public exploit SSVC act CVSS 9.8

CVE-2024-38813 · broadcom vmware_center_server

Privilege escalation vulnerability

KEV · due 11 Dec EPSS 17%public exploit SSVC act CVSS 9.8

PTZOptics1 vulnerability on this pageMax CVSS 9.1Priority 97KEV 1

CVE-2024-8956 · PTZOptics PT30X-SDI

PTZOptics NDI and SDI Cameras /cgi-bin/param.cgi Insufficient Authentication

KEV · due 25 Nov EPSS 59%public exploit SSVC act CVSS 9.1

Smart HMI1 vulnerability on this pageMax CVSS 9.3Priority 57KEV 0

CVE-2024-8752 · Smart HMI WebIQ

WebIQ 2.15.9 Runtime on Windows - Directory Traversal Vulnerability

EPSS 12%public exploit CVSS 9.3

OpenPLC1 vulnerability on this pageMax CVSS 9.8Priority 56KEV 0

CVE-2024-34026 · OpenPLC OpenPLC_v3

A stack-based buffer overflow vulnerability exists in the OpenPLC Runtime EtherNet/IP parser functionality of OpenPLC _v3 b4702061dc14d10…

EPSS 2%public exploit CVSS 9.8

Red Hat2 vulnerabilities on this pageMax CVSS 9.9Priority 54KEV 0

CVE-2024-7387 · Red Hat Red Hat OpenShift Container Platform 4.12

Openshift/builder: path traversal allows command injection in privileged buildcontainer using docker build strategy

EPSS 2%public exploit CVSS 9.1

CVE-2024-45496 · Red Hat Red Hat OpenShift Container Platform 4.12

Openshift-controller-manager: elevated build pods can lead to node compromise in openshift

EPSS 1%CVSS 9.9

code-projects1 vulnerability on this pageMax CVSS 9.8Priority 53KEV 0

CVE-2024-8944 · code-projects Hospital Management System

code-projects Hospital Management System check_availability.php sql injection

EPSS 1%public exploit CVSS 9.8

todesk1 vulnerability on this pageMax CVSS 9.8Priority 53KEV 0

CVE-2024-44542 · todesk todesk

SQL Injection vulnerability in todesk v.1.1 allows a remote attacker to execute arbitrary code via the /todesk.com/news.html parameter.

EPSS 1%public exploit CVSS 9.8

totolink2 vulnerabilities on this pageMax CVSS 9.8Priority 53KEV 0

CVE-2024-46451 · totolink ac1200_t8_firmware

TOTOLINK AC1200 T8 v4.1.5cu.861_B20230220 has a buffer overflow vulnerability in the setWiFiAclRules function via the desc parameter.

EPSS 1%public exploit CVSS 9.8

CVE-2024-46419 · totolink ac1200_t8_firmware

TOTOLINK AC1200 T8 v4.1.5cu.861_B20230220 has a buffer overflow vulnerability in the setWizardCfg function via the ssid5g parameter.

EPSS 0.7%public exploit CVSS 9.8

espressif1 vulnerability on this pageMax CVSS 10.0Priority 52KEV 0

CVE-2024-45798 · espressif arduino-esp32

Multiple Poisoned Pipeline Execution (PPE) vulnerabilities

EPSS 0.9%public exploit CVSS 10.0

sqlitedict1 vulnerability on this pageMax CVSS 9.8Priority 51KEV 0

CVE-2024-35515 · sqlitedict sqlitedict

Insecure deserialization in sqlitedict up to v2.1.0 allows attackers to execute arbitrary code.

EPSS 0.9%public exploit CVSS 9.8

bluekitchen1 vulnerability on this pageMax CVSS 9.8Priority 50KEV 0

CVE-2024-40568 · bluekitchen bluestack

Buffer Overflow vulnerability in btstack mesh commit before v.864e2f2b6b7878c8fab3cf5ee84ae566e3380c58 allows a remote attacker to execut…

EPSS 0.7%public exploit CVSS 9.8

playsms1 vulnerability on this pageMax CVSS 9.8Priority 50KEV 0

CVE-2024-8880 · playsms playsms

playSMS Template index.php code injection

EPSS 0.7%public exploit CVSS 9.8

Apache Software Foundation1 vulnerability on this pageMax CVSS 9.8Priority 47KEV 0

CVE-2024-22399 · Apache Software Foundation Apache Seata

Apache Seata: Remote Code Execution vulnerability via Hessian Deserialization in Apache Seata Server

EPSS 3%CVSS 9.8

Millbeck Communications1 vulnerability on this pageMax CVSS 9.8Priority 46KEV 0

CVE-2024-45682 · Millbeck Communications Proroute H685t-w

Millbeck Communications Proroute H685t-w Command Injection.

EPSS 2%CVSS 9.8

D-Link4 vulnerabilities on this pageMax CVSS 9.8Priority 45KEV 0

CVE-2024-45694 · D-Link DIR-X5460 A1

D-Link WiFi router - Stack-based Buffer Overflow

EPSS 2%CVSS 9.8

CVE-2024-45695 · D-Link DIR-X4860 A1

D-Link WiFi router - Stack-based Buffer Overflow

EPSS 2%CVSS 9.8

CVE-2024-45698 · D-Link DIR-X4860 A1

D-Link WiFi router - OS Command Injection

EPSS 1%CVSS 9.8

CVE-2024-45697 · D-Link DIR-X4860 A1

D-Link WiFi router - Hidden Functionality

EPSS 1%CVSS 9.8

best_house_rental_management_system3 vulnerabilities on this pageMax CVSS 9.8Priority 43KEV 0

CVE-2024-46375 · best_house_rental_management_system best_house_rental_management_system

Best House Rental Management System 1.0 contains an arbitrary file upload vulnerability in the signup() function of the file rental/admin…

EPSS 1%CVSS 9.8

CVE-2024-46376 · best_house_rental_management_system best_house_rental_management_system

Best House Rental Management System 1.0 contains an arbitrary file upload vulnerability in the update_account() function of the file rent…

EPSS 1%CVSS 9.8

CVE-2024-46374 · best_house_rental_management_system best_house_rental_management_system

Best House Rental Management System 1.0 contains a SQL injection vulnerability in the delete_category() function of the file rental/admin…

EPSS 0.5%CVSS 9.8

sourcecodester1 vulnerability on this pageMax CVSS 9.8Priority 43KEV 0

CVE-2024-46377 · sourcecodester best_house_rental_management_system

Best House Rental Management System 1.0 contains an arbitrary file upload vulnerability in the save_settings() function of the file renta…

EPSS 1%CVSS 9.8

Apple2 vulnerabilities on this pageMax CVSS 10.0Priority 41KEV 0

CVE-2024-44146 · Apple macOS

A logic issue was addressed with improved file handling.

EPSS 0.7%CVSS 10.0

CVE-2024-44148 · Apple macOS

This issue was addressed with improved validation of file attributes.

EPSS 0.7%CVSS 10.0

Microsoft1 vulnerability on this pageMax CVSS 9.8Priority 41KEV 0

CVE-2024-38183 · Microsoft GroupMe

GroupMe Elevation of Privilege Vulnerability

EPSS 0.8%CVSS 9.8

CIRCUTOR4 vulnerabilities on this pageMax CVSS 10.0Priority 39KEV 0

CVE-2024-8887 · CIRCUTOR CIRCUTOR Q-SMT

Authentication bypass vulnerability on CIRCUTOR Q-SMT

EPSS 0.6%CVSS 10.0

CVE-2024-8888 · CIRCUTOR CIRCUTOR Q-SMT

Insufficient Session Expiration vulnerability on CIRCUTOR Q-SMT

EPSS 0.4%CVSS 10.0

CVE-2024-8889 · CIRCUTOR CIRCUTOR TCP2RS+

Improper Input Validation vulnerability on CIRCUTOR TCP2RS+

EPSS 0.4%CVSS 9.3

CVE-2024-8892 · CIRCUTOR CIRCUTOR TCP2RS+

Uncontrolled Resource Consumption vulnerability on CIRCUTOR TCP2RS+

EPSS 0.3%CVSS 9.1

Linux3 vulnerabilities on this pageMax CVSS 9.8Priority 39KEV 0

CVE-2024-46717 · Linux Linux

net/mlx5e: SHAMPO, Fix incorrect page release

EPSS 0.5%CVSS 9.8

CVE-2024-46736 · Linux Linux

smb: client: fix double put of @cfile in smb2_rename_path()

EPSS 0.6%CVSS 9.8

CVE-2024-46796 · Linux Linux

smb: client: fix double put of @cfile in smb2_set_path_size()

EPSS 0.4%CVSS 9.8

Acronis1 vulnerability on this pageMax CVSS 9.9Priority 38KEV 0

CVE-2024-8767 · Acronis Acronis Backup plugin for cPanel & WHM

Sensitive data disclosure and manipulation due to unnecessary privileges assignment.

EPSS 0.5%CVSS 9.9

Arni Cinco1 vulnerability on this pageMax CVSS 9.8Priority 38KEV 0

CVE-2024-44004 · Arni Cinco WPCargo Track & Trace

WordPress WPCargo Track & Trace plugin <= 8.0.2 - SQL Injection vulnerability

EPSS 0.5%CVSS 9.8

bmc1 vulnerability on this pageMax CVSS 9.8Priority 38KEV 0

CVE-2024-34399 · bmc remedy_mid-tier

UNSUPPORTED WHEN ASSIGNED An issue was discovered in BMC Remedy Mid Tier 7.6.04.

EPSS 0.5%CVSS 9.8

highwarden2 vulnerabilities on this pageMax CVSS 9.8Priority 38KEV 0

CVE-2024-43976 · highwarden Super Store Finder

WordPress Super Store Finder plugin <= 6.9.7 - SQL Injection vulnerability

EPSS 0.5%CVSS 9.8

CVE-2024-43978 · highwarden Super Store Finder

WordPress Super Store Finder plugin < 6.9.8 - SQL Injection vulnerability

EPSS 0.5%CVSS 9.8

SFS Consulting3 vulnerabilities on this pageMax CVSS 9.8Priority 38KEV 0

CVE-2024-7098 · SFS Consulting ww.Winsure

XML Injection in SFS Consulting's ww.Winsure

EPSS 0.5%CVSS 9.8

CVE-2024-7104 · SFS Consulting ww.Winsure

Remote Code Execution in SFS Consulting's ww.Winsure

EPSS 0.5%CVSS 9.8

CVE-2024-6401 · SFS Consulting InsureE GL

SQLi in SFS Consulting's InsureE GL

EPSS 0.4%CVSS 9.8

zte1 vulnerability on this pageMax CVSS 9.8Priority 38KEV 0

CVE-2024-45415 · zte zxhn_z500_firmware

The HTTPD binary in multiple ZTE routers has a stack-based buffer overflow vulnerability in check_data_integrity function.

EPSS 0.5%CVSS 9.8

Eliz Software1 vulnerability on this pageMax CVSS 9.4Priority 37KEV 0

CVE-2024-5958 · Eliz Software Panel

SQLi in Eliz Software's Panel

EPSS 0.5%CVSS 9.4

Mautic1 vulnerability on this pageMax CVSS 9.0Priority 37KEV 0

CVE-2021-27915 · Mautic Mautic

XSS Cross-site Scripting Stored (XSS) - Description field

EPSS 0.6%CVSS 9.0

mitre1 vulnerability on this pageMax CVSS 9.1Priority 37KEV 0

CVE-2024-46958 · mitre

In Nextcloud Desktop Client 3.13.1 through 3.13.3 on Linux, synchronized files (between the server and client) may become world writable…

EPSS 0.6%CVSS 9.1

mfasoft1 vulnerability on this pageMax CVSS 9.1Priority 36KEV 0

CVE-2024-46937 · mfasoft secure_authentication_server

An improper access control (IDOR) vulnerability in the /api-selfportal/get-info-token-properties endpoint in MFASOFT Secure Authenticatio…

EPSS 0.5%CVSS 9.1

hitachi1 vulnerability on this pageMax CVSS 9.1Priority 35KEV 0

CVE-2024-45523 · hitachi id_bravura_security_fabric

An issue was discovered in Bravura Security Fabric versions 12.3.x before 12.3.5.32784, 12.4.x before 12.4.3.35110, 12.5.x before 12.5.2.…

EPSS 0.4%CVSS 9.1

Veribilim Software1 vulnerability on this pageMax CVSS 9.4Priority 35KEV 0

CVE-2024-7873 · Veribilim Software Veribase Order

Stored XSS in Veribilim Software's Veribase Order Management

EPSS 0.4%CVSS 9.4

The archive.