The archive.

SourceCodester3 vulnerabilities on this pageMax CVSS 9.8Priority 50KEV 0

CVE-2024-8415 · SourceCodester Food Ordering Management System

SourceCodester Food Ordering Management System add-ticket.php sql injection

CVE-2024-8380 · SourceCodester Contact Manager with Export to VCF

SourceCodester Contact Manager with Export to VCF Delete Contact delete-account.php sql injection

CVE-2024-8416 · SourceCodester Food Ordering Management System

SourceCodester Food Ordering Management System ticket-status.php sql injection

sourcecodehero1 vulnerability on this pageMax CVSS 9.8Priority 49KEV 0

CVE-2024-44727 · sourcecodehero event_management_system

Sourcecodehero Event Management System1.0 is vulnerable to SQL Injection via the parameter 'username' in /event/admin/login.php.

EPSS 0.5%public exploit CVSS 9.8

Zyxel1 vulnerability on this pageMax CVSS 9.8Priority 49KEV 0

CVE-2024-7261 · Zyxel NWA1123ACv3 firmware

The improper neutralization of special elements in the parameter "host" in the CGI program of Zyxel NWA1123ACv3 firmware version 6.70(ABV…

EPSS 11%CVSS 9.8

esafenet1 vulnerability on this pageMax CVSS 9.1Priority 48KEV 0

CVE-2024-42885 · esafenet cdg

SQL Injection vulnerability in ESAFENET CDG 5.6 and before allows an attacker to execute arbitrary code via the id parameter of the data.…

EPSS 0.6%public exploit CVSS 9.1

Mozilla5 vulnerabilities on this pageMax CVSS 9.8Priority 48KEV 0

CVE-2024-8381 · Mozilla Firefox

A potentially exploitable type confusion could be triggered when looking up a property name on an object being used as the `with` environ…

EPSS 4%CVSS 9.8

CVE-2024-8384 · Mozilla Firefox

The JavaScript garbage collector could mis-color cross-compartment objects if OOM conditions were detected at the right point between two…

EPSS 0.7%CVSS 9.8

CVE-2024-8385 · Mozilla Firefox

A difference in the handling of StructFields and ArrayTypes in WASM could be used to trigger an exploitable type confusion vulnerability.

CVE-2024-8387 · Mozilla Firefox

Memory safety bugs present in Firefox 129, Firefox ESR 128.1, and Thunderbird 128.1.

CVE-2024-8389 · Mozilla Firefox

Memory safety bugs present in Firefox 129.

wcmp1 vulnerability on this pageMax CVSS 9.8Priority 43KEV 0

CVE-2024-8289 · wcmp MultiVendorX – WooCommerce Multivendor Marketplace Solutions

MultiVendorX – The Ultimate WooCommerce Multivendor Marketplace Solution <= 4.2.0 - Missing Authorization to Limited Vendor Privilege Escalation/Account Takeover

EPSS 1%CVSS 9.8

wpjobportal1 vulnerability on this pageMax CVSS 9.8Priority 43KEV 0

CVE-2024-7950 · wpjobportal WP Job Portal – AI-Powered Recruitment System for Company or Job Board website

WP Job Portal <= 2.1.6 - Missing Authorization to Unauthenticated Local File Inclusion, Arbitrary Settings Update, and User Creation

EPSS 1%CVSS 9.8

Linux4 vulnerabilities on this pageMax CVSS 10.0Priority 41KEV 0

CVE-2024-44984 · Linux Linux

bnxt_en: Fix double DMA unmapping for XDP_REDIRECT

EPSS 0.7%CVSS 10.0

CVE-2024-44985 · Linux Linux

ipv6: prevent possible UAF in ip6_xmit()

EPSS 0.9%CVSS 9.8

CVE-2024-44998 · Linux Linux

atm: idt77252: prevent use after free in dequeue_rx()

EPSS 0.8%CVSS 9.8

CVE-2024-44970 · Linux Linux

net/mlx5e: SHAMPO, Fix invalid WQ linked list unlink

Red Hat2 vulnerabilities on this pageMax CVSS 9.8Priority 41KEV 0

CVE-2024-7012 · Red Hat Red Hat Satellite 6.13 for RHEL 8

Puppet-foreman: an authentication bypass vulnerability exists in foreman

EPSS 0.8%CVSS 9.8

CVE-2024-7923 · Red Hat Red Hat Satellite 6.13 for RHEL 8

Puppet-pulpcore: an authentication bypass vulnerability exists in pulpcore

EPSS 0.8%CVSS 9.8

mbed1 vulnerability on this pageMax CVSS 9.8Priority 40KEV 0

CVE-2024-45158 · mbed mbedtls

An issue was discovered in Mbed TLS 3.6 before 3.6.1.

EPSS 0.7%CVSS 9.8

Samsung Mobile1 vulnerability on this pageMax CVSS 9.8Priority 40KEV 0

CVE-2024-34657 · Samsung Mobile Samsung Notes

Stack-based out-of-bounds write in Samsung Notes prior to version 4.4.21.62 allows remote attackers to execute arbitrary code.

IBM1 vulnerability on this pageMax CVSS 9.9Priority 39KEV 0

CVE-2024-45076 · IBM webMethods Integration

IBM webMethods Integration code execution

EPSS 0.5%CVSS 9.9

pingcap1 vulnerability on this pageMax CVSS 9.8Priority 39KEV 0

CVE-2024-41433 · pingcap tidb

PingCAP TiDB v8.1.0 was discovered to contain a buffer overflow via the component expression.ExplainExpressionList.

Progress1 vulnerability on this pageMax CVSS 9.6Priority 39KEV 0

CVE-2024-7345 · Progress OpenEdge

Direct local client connections to MS Agents can bypass authentication

EPSS 0.6%CVSS 9.6

FreeBSD2 vulnerabilities on this pageMax CVSS 9.3Priority 38KEV 0

CVE-2024-8178 · FreeBSD FreeBSD

Multiple issues in ctl(4) CAM Target Layer

EPSS 0.6%CVSS 9.3

CVE-2024-45287 · FreeBSD FreeBSD

Multiple vulnerabilities in libnv

EPSS 0.5%CVSS 9.1

Huachu Digital Technology Ltd.2 vulnerabilities on this pageMax CVSS 9.8Priority 38KEV 0

CVE-2024-43772 · Huachu Digital Technology Ltd. Easytest Online Test Platform

Huachu Easytest Online Learning Test Platform - SQL Injection

CVE-2024-43773 · Huachu Digital Technology Ltd. Easytest Online Test Platform

Huachu Easytest Online Learning Test Platform - SQL Injection

SAMPAŞ Holding1 vulnerability on this pageMax CVSS 9.8Priority 38KEV 0

CVE-2024-4259 · SAMPAŞ Holding AKOS (AkosCepVatandasService)

Sensetive Data Exposure in SAMPAS's AKOS

Semtek Informatics Software Consulting Inc.2 vulnerabilities on this pageMax CVSS 9.8Priority 38KEV 0

CVE-2024-7076 · Semtek Informatics Software Consulting Inc. Semtek Sempos

SQLi in Semtek Informatics Software's Semtek Sempos

CVE-2024-7078 · Semtek Informatics Software Consulting Inc. Semtek Sempos

Unauthenticate SQLi in Semtek Informatics Software's Semtek Sempos