The archive.

CVE-2024-46045 · tenda ch22_firmware

Tenda CH22 V1.0.0.6(468) has a stack overflow vulnerability located in the frmL7PlotForm function.

CVE-2024-46046 · tenda fh451_firmware

Tenda FH451 v1.0.0.9 has a stack overflow vulnerability located in the RouteStatic function.

CVE-2024-46049 · tenda o6_firmware

Tenda O6 V3.0 firmware V1.0.0.7(2054) contains a stack overflow vulnerability in the formexeCommand function.

h2oai1 vulnerability on this pageMax CVSS 9.8Priority 54KEV 0

CVE-2024-8862 · h2oai h2o-3

h2oai h2o-3 JDBC Connection 1 getConnectionSafe deserialization

EPSS 1%public exploit CVSS 9.8

code-projects2 vulnerabilities on this pageMax CVSS 9.8Priority 52KEV 0

CVE-2024-8868 · code-projects Crud Operation System

code-projects Crud Operation System savedata.php sql injection

EPSS 0.9%public exploit CVSS 9.8

CVE-2024-8762 · code-projects Crud Operation System

code-projects Crud Operation System updatedata.php sql injection

EPSS 0.7%public exploit CVSS 9.8

best_free_law_office_management_software1 vulnerability on this pageMax CVSS 9.8Priority 50KEV 0

CVE-2024-44430 · best_free_law_office_management_software best_free_law_office_management_software

SQL Injection vulnerability in Best Free Law Office Management Software-v1.0 allows an attacker to execute arbitrary code and obtain sens…

EPSS 0.7%public exploit CVSS 9.8

jfinalcms_project1 vulnerability on this pageMax CVSS 9.8Priority 50KEV 0

CVE-2024-8782 · jfinalcms_project jfinalcms

JFinalCMS edit delete path traversal

EPSS 0.7%public exploit CVSS 9.8

thimpress2 vulnerabilities on this pageMax CVSS 10.0Priority 50KEV 0

CVE-2024-8522 · thimpress LearnPress – WordPress LMS Plugin for Create and Sell Online Courses

LearnPress – WordPress LMS Plugin <= 4.2.7 - Unauthenticated SQL Injection via 'c_only_fields'

EPSS 63%CVSS 10.0

CVE-2024-8529 · thimpress LearnPress – WordPress LMS Plugin for Create and Sell Online Courses

LearnPress – WordPress LMS Plugin <= 4.2.7 - Unauthenticated SQL Injection via 'c_fields'

EPSS 12%CVSS 10.0

Adobe1 vulnerability on this pageMax CVSS 9.8Priority 49KEV 0

CVE-2024-41874 · Adobe ColdFusion

ColdFusion | Deserialization of Untrusted Data (CWE-502)

EPSS 30%CVSS 9.8

vedees1 vulnerability on this pageMax CVSS 9.1Priority 49KEV 0

CVE-2024-8875 · vedees wcms

vedees wcms finder.php path traversal

EPSS 0.9%public exploit CVSS 9.1

softaculous1 vulnerability on this pageMax CVSS 9.1Priority 47KEV 0

CVE-2024-8669 · softaculous Backuply – Backup, Restore, Migrate and Clone

Backuply – Backup, Restore, Migrate and Clone <= 1.3.4 - Authenticated (Admin+) SQL Injection

EPSS 17%CVSS 9.1

GitLab2 vulnerabilities on this pageMax CVSS 9.9Priority 46KEV 0

CVE-2024-6678 · GitLab GitLab

Authentication Bypass by Spoofing in GitLab

EPSS 2%CVSS 9.9

CVE-2024-2743 · GitLab GitLab

Incorrect Authorization in GitLab

EPSS 0.4%CVSS 9.1

ordat1 vulnerability on this pageMax CVSS 9.3Priority 46KEV 0

CVE-2024-34334 · ordat foss-online

ORDAT FOSS-Online before v2.24.01 was discovered to contain a SQL injection vulnerability via the forgot password function.

EPSS 0.5%public exploit CVSS 9.3

SolarWinds1 vulnerability on this pageMax CVSS 9.0Priority 45KEV 0

CVE-2024-28991 · SolarWinds Access Rights Manager

SolarWinds Access Rights Manager (ARM) Deserialization of Untrusted Data Remote Code Execution

EPSS 3%CVSS 9.0

Rockwell Automation4 vulnerabilities on this pageMax CVSS 9.8Priority 44KEV 0

CVE-2024-45824 · Rockwell Automation FactoryTalk View Site Edition

FactoryTalk® View Site Edition Remote Code Execution Vulnerability via Lack of Input Validation

CVE-2024-7961 · Rockwell Automation Pavilion8®

Rockwell Automation Path Traversal Vulnerability in Pavilion8®

EPSS 1.0%CVSS 9.8

CVE-2024-45823 · Rockwell Automation FactoryTalk® Batch View™

FactoryTalk® Batch View™ Authentication Bypass Vulnerability via shared secrets

EPSS 0.5%CVSS 9.8

CVE-2024-7960 · Rockwell Automation Pavilion8®

Rockwell Automation Incorrect Privileges and Path Traversal Vulnerability in Pavilion8®

EPSS 0.5%CVSS 9.1

Docker2 vulnerabilities on this pageMax CVSS 9.8Priority 43KEV 0

CVE-2024-8695 · Docker Docker Desktop

A remote code execution (RCE) vulnerability via crafted extension description/changelog could be abused by a malicious extension in Docker Desktop before 4.34.2.

CVE-2024-8696 · Docker Docker Desktop

A remote code execution (RCE) vulnerability via crafted extension publisher-url/additional-urls could be abused by a malicious extension in Docker Desktop before 4.34.2.

tuomoku1 vulnerability on this pageMax CVSS 9.8Priority 43KEV 0

CVE-2024-44623 · tuomoku spx_gc

An issue in TuomoKu SPx-GC v.1.3.0 and before allows a remote attacker to execute arbitrary code via the child_process.js function.

Linux4 vulnerabilities on this pageMax CVSS 9.8Priority 39KEV 0

CVE-2024-46695 · Linux Linux

selinux,smack: don't bypass permissions check in inode_setsecctx hook

EPSS 0.5%CVSS 9.8

CVE-2024-46696 · Linux Linux

nfsd: fix potential UAF in nfsd4_cb_getattr_release

CVE-2024-46697 · Linux Linux

nfsd: ensure that nfsd4_fattr_args.context is zeroed out

CVE-2024-46690 · Linux Linux

nfsd: fix nfsd4_deleg_getattr_conflict in presence of third party lease

no-ip1 vulnerability on this pageMax CVSS 9.1Priority 38KEV 0

CVE-2024-40457 · no-ip duc

No-IP Dynamic Update Client (DUC) v3.x uses cleartext credentials that may occur on a command line or in a file.

EPSS 0.6%CVSS 9.1

zte1 vulnerability on this pageMax CVSS 9.8Priority 38KEV 0

CVE-2024-45414 · zte zxhn_z500_firmware

The HTTPD binary in multiple ZTE routers has a stack-based buffer overflow vulnerability in webPrivateDecrypt function.

EPSS 0.5%CVSS 9.8

misp1 vulnerability on this pageMax CVSS 9.8Priority 37KEV 0

CVE-2024-46918 · misp misp

app/Controller/UserLoginProfilesController.php in MISP before 2.4.198 does not prevent an org admin from viewing sensitive login fields o…

opendaylight2 vulnerabilities on this pageMax CVSS 9.1Priority 37KEV 0

CVE-2024-46943 · opendaylight aaa

An issue was discovered in OpenDaylight Authentication, Authorization and Accounting (AAA) through 0.19.3.

EPSS 0.6%CVSS 9.1

CVE-2024-46942 · opendaylight md-sal

In OpenDaylight Model-Driven Service Abstraction Layer (MD-SAL) through 13.0.1, a controller with a follower role can configure flow entr…

EPSS 0.4%CVSS 9.1

TECNO1 vulnerability on this pageMax CVSS 9.8Priority 37KEV 0

CVE-2024-8039 · TECNO com.afmobi.boomplayer

Improper permission configurationDomain configuration vulnerability of the mobile application (com.afmobi.boomplayer) can lead to account…

TNB Mobile Solutions1 vulnerability on this pageMax CVSS 9.8Priority 37KEV 0

CVE-2024-6656 · TNB Mobile Solutions Cockpit Software

Hardcoded Credentals in TNB Mobile Solutions' Cockpit Software

mindsdb1 vulnerability on this pageMax CVSS 9.0Priority 36KEV 0

CVE-2024-45856 · mindsdb mindsdb

A cross-site scripting (XSS) vulnerability exists in all versions of the MindsDB platform, enabling the execution of a JavaScript payload…

EPSS 0.5%CVSS 9.0

OpenText2 vulnerabilities on this pageMax CVSS 9.8Priority 36KEV 0

CVE-2021-38132 · OpenText eDirectory

Possible External service interaction Vulnerability