The archive.

CVE-2024-8302 · dingfanzu CMS

dingfanzu CMS chpwd.php sql injection

feehi3 vulnerabilities on this pageMax CVSS 9.8Priority 51KEV 0

CVE-2024-8294 · feehi feehicms

FeehiCMS index.php update unrestricted upload

CVE-2024-8295 · feehi feehicms

FeehiCMS index.php createBanner unrestricted upload

CVE-2024-8296 · feehi feehicms

FeehiCMS index.php insert unrestricted upload

htmldoc1 vulnerability on this pageMax CVSS 9.8Priority 50KEV 0

CVE-2024-45508 · htmldoc htmldoc

HTMLDOC before 1.9.19 has an out-of-bounds write in parse_paragraph in ps-pdf.cxx because of an attempt to strip leading whitespace from…

SourceCodester9 vulnerabilities on this pageMax CVSS 9.8Priority 50KEV 0

CVE-2024-8340 · SourceCodester Electric Billing Management System

SourceCodester Electric Billing Management System Actions.php sql injection

CVE-2024-8341 · SourceCodester Petshop Management System

SourceCodester Petshop Management System add_user.php unrestricted upload

CVE-2024-8343 · SourceCodester Sentiment Based Movie Rating System

SourceCodester Sentiment Based Movie Rating System User Registration Users.php sql injection

CVE-2024-8336 · SourceCodester Music Gallery Site

SourceCodester Music Gallery Site Master.php sql injection

CVE-2024-8339 · SourceCodester Electric Billing Management System

SourceCodester Electric Billing Management System Connection Code ?page=tracks sql injection

CVE-2024-8345 · SourceCodester Music Gallery Site

SourceCodester Music Gallery Site Users.php sql injection

CVE-2024-8346 · SourceCodester Computer Laboratory Management System

SourceCodester Computer Laboratory Management System SystemSettings.php update_settings_info sql injection

CVE-2024-8347 · SourceCodester Computer Laboratory Management System

SourceCodester Computer Laboratory Management System Master.php delete_record sql injection

CVE-2024-8348 · SourceCodester Computer Laboratory Management System

SourceCodester Computer Laboratory Management System Master.php delete_category sql injection

asis1 vulnerability on this pageMax CVSS 9.8Priority 49KEV 0

CVE-2024-45622 · asis asis

ASIS (aka Aplikasi Sistem Sekolah using CodeIgniter 3) 3.0.0 through 3.2.0 allows index.php username SQL injection for Authentication Byp…

EPSS 36%CVSS 9.8

OpenRapid2 vulnerabilities on this pageMax CVSS 9.8Priority 49KEV 0

CVE-2024-8331 · OpenRapid RapidCMS

OpenRapid RapidCMS user-move-run.php sql injection

CVE-2024-8335 · OpenRapid RapidCMS

OpenRapid RapidCMS runlogon.php sql injection

safeguard1 vulnerability on this pageMax CVSS 9.8Priority 49KEV 0

CVE-2024-45488 · safeguard privileged_passwords

One Identity Safeguard for Privileged Passwords before 7.5.2 allows unauthorized access because of an issue related to cookies.

EPSS 51%CVSS 9.8

TemplateInvaders1 vulnerability on this pageMax CVSS 9.8Priority 49KEV 0

CVE-2024-43917 · TemplateInvaders TI WooCommerce Wishlist

WordPress TI WooCommerce Wishlist plugin <= 2.8.2 - SQL Injection vulnerability

EPSS 23%CVSS 9.8

Easy Digital Downloads1 vulnerability on this pageMax CVSS 9.8Priority 47KEV 0

CVE-2024-5057 · Easy Digital Downloads Easy Digital Downloads

WordPress Easy Digital Downloads plugin <= 3.2.12 - SQL Injection vulnerability

EPSS 3%CVSS 9.8

Smackcoders1 vulnerability on this pageMax CVSS 9.8Priority 46KEV 0

CVE-2024-43965 · Smackcoders SendGrid for WordPress

WordPress SendGrid for WordPress plugin <= 1.4 - SQL Injection vulnerability

EPSS 2%CVSS 9.8

StylemixThemes1 vulnerability on this pageMax CVSS 9.8Priority 46KEV 0

CVE-2024-43144 · StylemixThemes Cost Calculator Builder

WordPress Cost Calculator Builder plugin <= 3.2.15 - SQL Injection vulnerability

EPSS 2%CVSS 9.8

libexpat_project1 vulnerability on this pageMax CVSS 9.8Priority 45KEV 0

CVE-2024-45490 · libexpat_project libexpat

An issue was discovered in libexpat before 2.6.3.

EPSS 2%CVSS 9.8

WBW1 vulnerability on this pageMax CVSS 10.0Priority 45KEV 0

CVE-2024-43918 · WBW WBW Product Table PRO

WordPress WBW Product Table PRO plugin <= 1.9.4 - Unauthenticated Arbitrary SQL Query Execution vulnerability

EPSS 1%CVSS 10.0

libexpat2 vulnerabilities on this pageMax CVSS 9.8Priority 44KEV 0

CVE-2024-45492 · libexpat expat

An issue was discovered in libexpat before 2.6.3.

EPSS 1%CVSS 9.8

CVE-2024-45491 · libexpat expat

An issue was discovered in libexpat before 2.6.3.

EPSS 1%CVSS 9.8

code-projects1 vulnerability on this pageMax CVSS 9.8Priority 41KEV 0

CVE-2024-8368 · code-projects Hospital Management System

code-projects Hospital Management System Login index.php sql injection

EPSS 0.8%CVSS 9.8

Delta Electronics1 vulnerability on this pageMax CVSS 9.8Priority 41KEV 0

CVE-2024-8255 · Delta Electronics DTN Soft

Path Traversal in Ocean Data Systems Dream Report

EPSS 0.8%CVSS 9.8

IBM1 vulnerability on this pageMax CVSS 9.8Priority 41KEV 0

CVE-2024-39747 · IBM Sterling Connect:Direct Web Services

IBM Sterling Connect:Direct Web Services information disclosure

EPSS 0.8%CVSS 9.8

Themeum1 vulnerability on this pageMax CVSS 10.0Priority 40KEV 0

CVE-2024-43955 · Themeum Droip

WordPress Droip plugin <= 1.1.1 - Unauthenticated Arbitrary File Download/Deletion vulnerability

EPSS 0.6%CVSS 10.0

linen1 vulnerability on this pageMax CVSS 9.8Priority 39KEV 0

CVE-2024-45522 · linen linen

Linen before cd37c3e does not verify that the domain is linen.dev or www.linen.dev when resetting a password.

master-nan1 vulnerability on this pageMax CVSS 9.8Priority 39KEV 0

CVE-2024-8332 · master-nan Sweet-CMS

master-nan Sweet-CMS index sql injection

EPSS 0.6%CVSS 9.8

WPWeb Elite1 vulnerability on this pageMax CVSS 9.8Priority 39KEV 0

CVE-2024-43132 · WPWeb Elite Docket (WooCommerce Collections / Wishlist / Watchlist)

WordPress Docket (WooCommerce Collections / Wishlist / Watchlist) plugin < 1.7.0 - Unauthenticated SQL Injection vulnerability

eyecix1 vulnerability on this pageMax CVSS 9.8Priority 38KEV 0

CVE-2024-43931 · eyecix JobSearch

WordPress JobSearch WP Job Board WordPress Plugin plugin <= 2.5.3 - PHP Object Injection vulnerability

theeventscalendar1 vulnerability on this pageMax CVSS 9.1Priority 38KEV 0

CVE-2024-8016 · theeventscalendar The Events Calendar Pro

The Events Calendar Pro <= 7.0.2 - Authenticated (Administrator+) PHP Object Injection to Remote Code Execution

EPSS 0.7%CVSS 9.1

CridioStudio2 vulnerabilities on this pageMax CVSS 9.8Priority 37KEV 0

CVE-2024-38795 · CridioStudio ListingPro

WordPress ListingPro plugin <= 2.9.4 - Unauthenticated SQL Injection vulnerability

CVE-2024-39622 · CridioStudio ListingPro

WordPress ListingPro theme <= 2.9.4 - Unauthenticated SQL Injection vulnerability

E4J s.r.l.1 vulnerability on this pageMax CVSS 9.8Priority 37KEV 0

CVE-2024-39653 · E4J s.r.l. VikRentCar

WordPress VikRentCar Car Rental Management System plugin <= 1.4.0 - SQL Injection vulnerability

Propovoice1 vulnerability on this pageMax CVSS 9.8Priority 37KEV 0

CVE-2024-43941 · Propovoice Propovoice Pro

WordPress Propovoice Pro plugin <= 1.7.0.3 - Unauthenticated SQL Injection vulnerability

SportsNET4 vulnerabilities on this pageMax CVSS 9.8Priority 37KEV 0

CVE-2024-29723 · SportsNET SportsNET

Multiple vulnerabilities in SportsNET

CVE-2024-29724 · SportsNET SportsNET

Multiple vulnerabilities in SportsNET

CVE-2024-29725 · SportsNET SportsNET

Multiple vulnerabilities in SportsNET

CVE-2024-29726 · SportsNET SportsNET

Multiple vulnerabilities in SportsNET

misp1 vulnerability on this pageMax CVSS 9.8Priority 36KEV 0

CVE-2024-45509 · misp misp

In MISP through 2.4.196, app/Controller/BookmarksController.php does not properly restrict access to bookmarks data in the case where the…

NitroPack Inc.1 vulnerability on this pageMax CVSS 9.8Priority 35KEV 0

CVE-2024-43922 · NitroPack Inc. NitroPack

WordPress NitroPack plugin <= 1.16.7 - Unauthenticated Arbitrary Shortcode Execution vulnerability