The archive.

CVE-2024-8131 · D-Link DNS-120

D-Link DNS-1550-04 HTTP POST Request apkg_mgr.cgi module_enable_disable command injection

CVE-2024-8133 · D-Link DNS-120

D-Link DNS-1550-04 HTTP POST Request hd_config.cgi cgi_FMT_R5_SpareDsk_DiskMGR command injection

CVE-2024-8134 · D-Link DNS-120

D-Link DNS-1550-04 HTTP POST Request hd_config.cgi cgi_FMT_Std2R5_1st_DiskMGR command injection

CVE-2024-8210 · D-Link DNS-120

D-Link DNS-1550-04 hd_config.cgi sprintf command injection

EPSS 7%public exploit CVSS 9.8

TOTOLINK1 vulnerability on this pageMax CVSS 9.8Priority 55KEV 0

CVE-2024-8162 · TOTOLINK T10 AC1200

TOTOLINK T10 AC1200 Telnet Service product.ini hard-coded credentials

EPSS 2%public exploit CVSS 9.8

g8bpq1 vulnerability on this pageMax CVSS 9.8Priority 53KEV 0

CVE-2024-34087 · g8bpq bpq32

An SEH-based buffer overflow in the BPQ32 HTTP Server in BPQ32 6.0.24.1 allows remote attackers with access to the Web Terminal to achiev…

EPSS 1%public exploit CVSS 9.8

fastcom1 vulnerability on this pageMax CVSS 9.8Priority 52KEV 0

CVE-2024-41285 · fastcom fw300r

A stack overflow in FAST FW300R v1.3.13 Build 141023 Rel.61347n allows attackers to execute arbitrary code or cause a Denial of Service (…

EPSS 1%public exploit CVSS 9.8

SourceCodester1 vulnerability on this pageMax CVSS 9.8Priority 51KEV 0

CVE-2024-8170 · SourceCodester Zipped Folder Manager App

SourceCodester Zipped Folder Manager App add-folder.php unrestricted upload

EPSS 0.8%public exploit CVSS 9.8

code-projects5 vulnerabilities on this pageMax CVSS 9.8Priority 50KEV 0

CVE-2024-8167 · code-projects Job Portal

code-projects Job Portal forget.php sql injection

CVE-2024-8168 · code-projects Online Bus Reservation Site

code-projects Online Bus Reservation Site login.php sql injection

CVE-2024-8169 · code-projects Online Quiz Site

code-projects Online Quiz Site signupuser.php sql injection

CVE-2024-8138 · code-projects Pharmacy Management System

code-projects Pharmacy Management System Parameter index.php editManager sql injection

CVE-2024-8146 · code-projects Pharmacy Management System

code-projects Pharmacy Management System index.php sql injection

imroc1 vulnerability on this pageMax CVSS 9.8Priority 50KEV 0

CVE-2024-45258 · imroc req

The req package before 3.43.4 for Go may send an unintended request when a malformed URL is provided, because cleanHost in http.go intent…

EPSS 0.7%public exploit CVSS 9.8

tenda11 vulnerabilities on this pageMax CVSS 9.8Priority 50KEV 0

CVE-2024-44550 · tenda ax1806_firmware

Tenda AX1806 v1.0.0.1 contains a stack overflow via the adv.iptv.stbpvid parameter in the function formGetIptv.

CVE-2024-44551 · tenda ax1806_firmware

Tenda AX1806 v1.0.0.1 contains a stack overflow via the iptv.city.vlan parameter in the function formGetIptv.

CVE-2024-44553 · tenda ax1806_firmware

Tenda AX1806 v1.0.0.1 contains a stack overflow via the iptv.stb.mode parameter in the function formGetIptv.

CVE-2024-44555 · tenda ax1806_firmware

Tenda AX1806 v1.0.0.1 contains a stack overflow via the iptv.city.vlan parameter in the function setIptvInfo.

EPSS 0.7%public exploit CVSS 9.8

CVE-2024-44558 · tenda ax1806_firmware

Tenda AX1806 v1.0.0.1 contains a stack overflow via the adv.iptv.stbpvid parameter in the function setIptvInfo.

CVE-2024-44563 · tenda ax1806_firmware

Tenda AX1806 v1.0.0.1 contains a stack overflow via the iptv.stb.port parameter in the function setIptvInfo.

CVE-2024-44565 · tenda ax1806_firmware

Tenda AX1806 v1.0.0.1 contains a stack overflow via the serverName parameter in the function form_fast_setting_internet_set.

CVE-2024-44549 · tenda ax1806_firmware

Tenda AX1806 v1.0.0.1 contains a stack overflow via the iptv.stb.port parameter in the function formGetIptv.

EPSS 0.4%public exploit CVSS 9.8

CVE-2024-44552 · tenda ax1806_firmware

Tenda AX1806 v1.0.0.1 contains a stack overflow via the adv.iptv.stballvlans parameter in the function formGetIptv.

EPSS 0.4%public exploit CVSS 9.8

CVE-2024-44556 · tenda ax1806_firmware

Tenda AX1806 v1.0.0.1 contains a stack overflow via the adv.iptv.stballvlans parameter in the function setIptvInfo.

EPSS 0.4%public exploit CVSS 9.8

CVE-2024-44557 · tenda ax1806_firmware

Tenda AX1806 v1.0.0.1 contains a stack overflow via the iptv.stb.mode parameter in the function setIptvInfo.

EPSS 0.6%CVSS 9.8

FlowiseAI1 vulnerability on this pageMax CVSS 9.8Priority 49KEV 0

CVE-2024-8181 · FlowiseAI Flowise

Flowise Authentication Bypass

EPSS 45%CVSS 9.8

itsourcecode2 vulnerabilities on this pageMax CVSS 9.8Priority 49KEV 0

CVE-2024-8139 · itsourcecode E-Commerce Website

itsourcecode E-Commerce Website search_list.php sql injection

CVE-2024-8171 · itsourcecode Tailoring Management System

itsourcecode Tailoring Management System staffcatedit.php sql injection

EPSS 0.5%public exploit CVSS 9.8

malwared1 vulnerability on this pageMax CVSS 9.8Priority 48KEV 0

CVE-2024-45256 · malwared byob

An arbitrary file write issue in the exfiltration endpoint in BYOB (Build Your Own Botnet) 2.0 allows attackers to overwrite SQLite datab…

EPSS 6%CVSS 9.8

Rockwell Automation1 vulnerability on this pageMax CVSS 9.8Priority 48KEV 0

CVE-2024-7988 · Rockwell Automation ThinManager® ThinServer™

ThinManager® ThinServer™ Information Disclosure and Remote Code Execution Vulnerabilities

EPSS 5%CVSS 9.8

dlink3 vulnerabilities on this pageMax CVSS 9.8Priority 46KEV 0

CVE-2024-41622 · dlink dir-846w_firmware

D-Link DIR-846W A1 FW100A43 was discovered to contain a remote command execution (RCE) vulnerability via the tomography_ping_address para…

EPSS 2%CVSS 9.8

CVE-2024-44342 · dlink dir-846w_firmware

D-Link DIR-846W A1 FW100A43 was discovered to contain a remote command execution (RCE) vulnerability via the wl(0).(0)_ssid parameter.

EPSS 2%CVSS 9.8

CVE-2024-44341 · dlink dir-846w_firmware

D-Link DIR-846W A1 FW100A43 was discovered to contain a remote command execution (RCE) vulnerability via the lan(0)_dhcps_staticlist para…

EPSS 2%CVSS 9.8

Fortra1 vulnerability on this pageMax CVSS 9.8Priority 43KEV 0

CVE-2024-6633 · Fortra FileCatalyst Workflow

Insecure Default in FileCatalyst Workflow 5.1.6 Build 139 (and earlier)

Hillstone Networks1 vulnerability on this pageMax CVSS 9.8Priority 43KEV 0

CVE-2024-8073 · Hillstone Networks Hillstone Networks Web Application Firewall

Command Injection Vulnerability in Hillstone Networks Web Application Firewall

HP Inc.1 vulnerability on this pageMax CVSS 9.8Priority 43KEV 0

CVE-2024-7720 · HP Inc. HP Security Manager

HP Security Manager - Potential Remote Code Execution

skysystem1 vulnerability on this pageMax CVSS 9.8Priority 42KEV 0

CVE-2024-45265 · skysystem arfa_cms

A SQL injection vulnerability in the poll component in SkySystem Arfa-CMS before 5.1.3124 allows remote attackers to execute arbitrary SQ…

Hitachi Energy3 vulnerabilities on this pageMax CVSS 9.9Priority 40KEV 0

CVE-2024-3980 · Hitachi Energy MicroSCADA X SYS600

The MicroSCADA Pro/X SYS600 product allows an authenticated user input to control or influence paths or file names that are used in files…

EPSS 0.6%CVSS 9.9

CVE-2024-7940 · Hitachi Energy MicroSCADA SYS600

The product exposes a service that is intended for local only to all network interfaces without any authentication.

EPSS 0.6%CVSS 9.8

CVE-2024-4872 · Hitachi Energy MicroSCADA X SYS600

A vulnerability exists in the query validation of the MicroSCADA Pro/X SYS600 product.

EPSS 0.5%CVSS 9.9

perl1 vulnerability on this pageMax CVSS 9.8Priority 40KEV 0

CVE-2024-45321 · perl cpanminus

The App::cpanminus package through 1.7047 for Perl downloads code via insecure HTTP, enabling code execution for network attackers.

EPSS 0.7%CVSS 9.8

Go-Tribe1 vulnerability on this pageMax CVSS 9.8Priority 39KEV 0

CVE-2024-8135 · Go-Tribe gotribe

Go-Tribe gotribe token.go Sign hard-coded credentials

CIGES1 vulnerability on this pageMax CVSS 9.8Priority 38KEV 0

CVE-2024-8161 · CIGES CIGESv2

SQL injection vulnerability in CIGESv2 system

rubrik1 vulnerability on this pageMax CVSS 9.8Priority 38KEV 0

CVE-2024-36068 · rubrik cdm

An incorrect access control vulnerability in Rubrik CDM versions prior to 9.1.2-p1, 9.0.3-p6 and 8.1.3-p12, allows an attacker with netwo…

seacms1 vulnerability on this pageMax CVSS 9.8Priority 38KEV 0

CVE-2024-41444 · seacms seacms

SeaCMS v12.9 has a SQL injection vulnerability in the key parameter of /js/player/dmplayer/dmku/index.php?ac=so.