The archive.

CVE-2024-8229 · Tenda O6

Tenda O6 operateMacFilter frommacFilterModify stack-based overflow

CVE-2024-8230 · Tenda O6

Tenda O6 setMacFilterList fromSafeSetMacFilter stack-based overflow

CVE-2024-8224 · Tenda G3

Tenda G3 setDebugCfg formSetDebugCfg stack-based overflow

CVE-2024-8225 · Tenda G3

Tenda G3 SetSysTimeCfg formSetSysTime stack-based overflow

CVE-2024-8226 · Tenda O1

Tenda O1 setcfm formSetCfm stack-based overflow

CVE-2024-8227 · Tenda O1

Tenda O1 DhcpSetSer fromDhcpSetSer stack-based overflow

yiquan_information1 vulnerability on this pageMax CVSS 9.9Priority 53KEV 0

CVE-2024-44761 · yiquan_information eq_enterprise_management_system

An issue in EQ Enterprise Management System before v2.0.0 allows attackers to execute a directory traversal via crafted requests.

EPSS 1%public exploit CVSS 9.9

mitre1 vulnerability on this pageMax CVSS 9.8Priority 52KEV 0

CVE-2024-34195 · mitre

TOTOLINK AC1200 Wireless Router A3002R Firmware V1.1.1-B20200824 is vulnerable to Buffer Overflow.

EPSS 0.9%public exploit CVSS 9.8

chartistjs1 vulnerability on this pageMax CVSS 9.8Priority 50KEV 0

CVE-2024-45435 · chartistjs chartist

Chartist 1.x through 1.3.0 allows Prototype Pollution via the extend function.

code-projects2 vulnerabilities on this pageMax CVSS 9.8Priority 50KEV 0

CVE-2024-8218 · code-projects Online Quiz Site

code-projects Online Quiz Site index.php sql injection

CVE-2024-8219 · code-projects Responsive Hotel Site

code-projects Responsive Hotel Site index.php sql injection

SourceCodester4 vulnerabilities on this pageMax CVSS 9.8Priority 50KEV 0

CVE-2024-8217 · SourceCodester E-Commerce Website

SourceCodester E-Commerce Website registration.php sql injection

EPSS 0.7%public exploit CVSS 9.8

CVE-2024-8221 · SourceCodester Music Gallery Site

SourceCodester Music Gallery Site manage_category.php sql injection

CVE-2024-8222 · SourceCodester Music Gallery Site

SourceCodester Music Gallery Site sql injection

CVE-2024-8223 · SourceCodester Music Gallery Site

SourceCodester Music Gallery Site Master.php sql injection

totolink1 vulnerability on this pageMax CVSS 9.8Priority 50KEV 0

CVE-2024-34198 · totolink a3002ru_firmware

TOTOLINK AC1200 Wireless Router A3002RU V2.1.1-B20230720.1011 is vulnerable to Buffer Overflow.

EPSS 0.7%public exploit CVSS 9.8

vtiger3 vulnerabilities on this pageMax CVSS 9.6Priority 50KEV 0

CVE-2024-44777 · vtiger vtiger_crm

A reflected cross-site scripting (XSS) vulnerability in the tag parameter in the index page of vTiger CRM 7.4.0 allows attackers to execu…

EPSS 0.7%public exploit CVSS 9.6

CVE-2024-44778 · vtiger vtiger_crm

A reflected cross-site scripting (XSS) vulnerability in the parent parameter in the index page of vTiger CRM 7.4.0 allows attackers to ex…

EPSS 0.7%public exploit CVSS 9.6

CVE-2024-44779 · vtiger vtiger_crm

A reflected cross-site scripting (XSS) vulnerability in the viewname parameter in the index page of vTiger CRM 7.4.0 allows attackers to…

EPSS 0.8%public exploit CVSS 9.6

itsourcecode1 vulnerability on this pageMax CVSS 9.8Priority 49KEV 0

CVE-2024-8220 · itsourcecode Tailoring Management System

itsourcecode Tailoring Management System staffedit.php sql injection

sunmochina1 vulnerability on this pageMax CVSS 9.1Priority 46KEV 0

CVE-2024-44760 · sunmochina enterprise_management_system

Incorrect access control in the component /servlet/SnoopServlet of Shenzhou News Union Enterprise Management System v5.0 through v18.8 al…

EPSS 0.5%public exploit CVSS 9.1

ollama1 vulnerability on this pageMax CVSS 9.1Priority 44KEV 0

CVE-2024-45436 · ollama ollama

extractFromZipFile in model.go in Ollama before 0.1.47 can extract members of a ZIP archive outside of the parent directory.

EPSS 3%CVSS 9.1

bdthemes1 vulnerability on this pageMax CVSS 9.8Priority 43KEV 0

CVE-2024-8030 · bdthemes Ultimate Store Kit – Addon For WooCommerce, EDD and Elementor

Ultimate Store Kit Elementor Addons, Woocommerce Builder, EDD Builder, Elementor Store Builder, Product Grid, Product Table, Woocommerce Slider <= 2.0.3 - Unauthenticated PHP Object Injection

EPSS 1%CVSS 9.8

sourcefabric6 vulnerabilities on this pageMax CVSS 9.8Priority 42KEV 0

CVE-2024-41361 · sourcefabric rpi-jukebox-rfid

RPi-Jukebox-RFID v2.7.0 was discovered to contain a remote code execution (RCE) vulnerability via htdocs\manageFilesFolders.php

CVE-2024-41364 · sourcefabric rpi-jukebox-rfid

RPi-Jukebox-RFID v2.7.0 was discovered to contain a remote code execution (RCE) vulnerability via htdocs\trackEdit.php

CVE-2024-41366 · sourcefabric rpi-jukebox-rfid

RPi-Jukebox-RFID v2.7.0 was discovered to contain a remote code execution (RCE) vulnerability via htdocs\userScripts.php

CVE-2024-41367 · sourcefabric rpi-jukebox-rfid

RPi-Jukebox-RFID v2.7.0 was discovered to contain a remote code execution (RCE) vulnerability via htdocs\api\playlist\appendFileToPlaylis…

CVE-2024-41368 · sourcefabric rpi-jukebox-rfid

RPi-Jukebox-RFID v2.7.0 was discovered to contain a remote code execution (RCE) vulnerability via htdocs\inc.setWlanIpMail.php

CVE-2024-41369 · sourcefabric rpi-jukebox-rfid

RPi-Jukebox-RFID v2.7.0 was discovered to contain a remote code execution (RCE) vulnerability via htdocs\inc.setWifi.php

Xiaomi4 vulnerabilities on this pageMax CVSS 9.8Priority 41KEV 0

CVE-2023-26322 · Xiaomi GetApps application

GetApps application has code execution vulnerability

EPSS 0.8%CVSS 9.8

CVE-2023-26324 · Xiaomi GetApps application

GetApps application has code execution vulnerability

EPSS 0.6%CVSS 9.8

CVE-2023-26321 · Xiaomi Xiaomi File Manager App International Version

The international version of Xiaomi File Manager has a path traversal vulnerability

CVE-2023-26323 · Xiaomi App Market

Xiaomi App Market has a code execution vulnerability

EPSS 0.6%CVSS 9.8

wolfSSL1 vulnerability on this pageMax CVSS 10.0Priority 39KEV 0

CVE-2024-5991 · wolfSSL wolfSSL

Buffer overread in domain name matching

EPSS 0.6%CVSS 10.0

causefx2 vulnerabilities on this pageMax CVSS 9.8Priority 38KEV 0

CVE-2024-41370 · causefx organizr

Organizr v1.90 was discovered to contain a SQL injection vulnerability via chat/setlike.php.

CVE-2024-41372 · causefx organizr

Organizr v1.90 was discovered to contain a SQL injection vulnerability via chat/settyping.php.

Menulux Information Technologies1 vulnerability on this pageMax CVSS 9.8Priority 38KEV 0

CVE-2024-4428 · Menulux Information Technologies Managment Portal

Sensetive Data Exposure in Menulux Managment Portal

SportsNET5 vulnerabilities on this pageMax CVSS 9.8Priority 37KEV 0

CVE-2024-29727 · SportsNET SportsNET

Multiple vulnerabilities in SportsNET

CVE-2024-29728 · SportsNET SportsNET

Multiple vulnerabilities in SportsNET

CVE-2024-29729 · SportsNET SportsNET

Multiple vulnerabilities in SportsNET

CVE-2024-29730 · SportsNET SportsNET

Multiple vulnerabilities in SportsNET

CVE-2024-29731 · SportsNET SportsNET

Multiple vulnerabilities in SportsNET

typo31 vulnerability on this pageMax CVSS 9.8Priority 36KEV 0

CVE-2024-45233 · typo3 typo3

An issue was discovered in powermail extension through 12.3.5 for TYPO3.