The archive.

chillzhuang1 vulnerability on this pageMax CVSS 9.8Priority 50KEV 0

CVE-2024-8023 · chillzhuang SpringBlade

chillzhuang SpringBlade list sql injection

demozx1 vulnerability on this pageMax CVSS 9.8Priority 50KEV 0

CVE-2024-8005 · demozx gf_cms

demozx gf_cms JWT Authentication auth.go init hard-coded credentials

itsourcecode6 vulnerabilities on this pageMax CVSS 9.8Priority 50KEV 0

CVE-2024-7946 · itsourcecode Online Blood Bank Management System

itsourcecode Online Blood Bank Management System User Signup register.php sql injection

CVE-2024-7933 · itsourcecode Project Expense Monitoring System

itsourcecode Project Expense Monitoring System Backend Login login1.php sql injection

CVE-2024-7936 · itsourcecode Project Expense Monitoring System

itsourcecode Project Expense Monitoring System transferred_report.php sql injection

CVE-2024-7937 · itsourcecode Project Expense Monitoring System

itsourcecode Project Expense Monitoring System printtransfer.php sql injection

CVE-2024-7934 · itsourcecode Project Expense Monitoring System

itsourcecode Project Expense Monitoring System execute.php sql injection

EPSS 0.5%public exploit CVSS 9.8

CVE-2024-7935 · itsourcecode Project Expense Monitoring System

itsourcecode Project Expense Monitoring System print.php sql injection

EPSS 0.5%public exploit CVSS 9.8

SourceCodester1 vulnerability on this pageMax CVSS 9.8Priority 50KEV 0

CVE-2024-7947 · SourceCodester Point of Sales and Inventory Management System

SourceCodester Point of Sales and Inventory Management System login.php sql injection

Unknown1 vulnerability on this pageMax CVSS 9.8Priority 50KEV 0

CVE-2024-6847 · Unknown Chatbot with ChatGPT WordPress

SmartSearch WP <= 2.4.4 - Unauthenticated SQLi

vaibhavverma99992 vulnerabilities on this pageMax CVSS 9.8Priority 50KEV 0

CVE-2024-42556 · vaibhavverma9999 hotel_management_system

Hotel Management System commit 91caab8 was discovered to contain a SQL injection vulnerability via the room_type parameter at admin_room_…

CVE-2024-42558 · vaibhavverma9999 hotel_management_system

Hotel Management System commit 91caab8 was discovered to contain a SQL injection vulnerability via the book_id parameter at admin_modify_…

arajajyothibabu6 vulnerabilities on this pageMax CVSS 9.8Priority 49KEV 0

CVE-2024-42568 · arajajyothibabu school_management_system

School Management System commit bae5aa was discovered to contain a SQL injection vulnerability via the transport parameter at vehicle.php.

CVE-2024-42569 · arajajyothibabu school_management_system

School Management System commit bae5aa was discovered to contain a SQL injection vulnerability via the medium parameter at paidclass.php.

CVE-2024-42570 · arajajyothibabu school_management_system

School Management System commit bae5aa was discovered to contain a SQL injection vulnerability via the medium parameter at admininsert.php.

CVE-2024-42572 · arajajyothibabu school_management_system

School Management System commit bae5aa was discovered to contain a SQL injection vulnerability via the medium parameter at unitmarks.php.

CVE-2024-42574 · arajajyothibabu school_management_system

School Management System commit bae5aa was discovered to contain a SQL injection vulnerability via the medium parameter at attendance.php.

CVE-2024-42575 · arajajyothibabu school_management_system

School Management System commit bae5aa was discovered to contain a SQL injection vulnerability via the medium parameter at substaff.php.

krishna97721 vulnerability on this pageMax CVSS 9.8Priority 49KEV 0

CVE-2024-42562 · krishna9772 pharmacy_management_system

Pharmacy Management System commit a2efc8 was discovered to contain a SQL injection vulnerability via the invoice_number parameter at prev…

school_management_system_project4 vulnerabilities on this pageMax CVSS 9.8Priority 49KEV 0

CVE-2024-42566 · school_management_system_project school_management_system

School Management System commit bae5aa was discovered to contain a SQL injection vulnerability via the password parameter at login.php

CVE-2024-42567 · school_management_system_project school_management_system

School Management System commit bae5aa was discovered to contain a SQL injection vulnerability via the sid parameter at /search.php?actio…

CVE-2024-42571 · school_management_system_project school_management_system

School Management System commit bae5aa was discovered to contain a SQL injection vulnerability via the medium parameter at insertattendan…

CVE-2024-42573 · school_management_system_project school_management_system

School Management System commit bae5aa was discovered to contain a SQL injection vulnerability via the medium parameter at dtmarks.php.

Apache Software Foundation1 vulnerability on this pageMax CVSS 9.8Priority 46KEV 0

CVE-2024-43202 · Apache Software Foundation Apache DolphinScheduler

Apache DolphinScheduler: Remote Code Execution Vulnerability

EPSS 2%CVSS 9.8

GitHub1 vulnerability on this pageMax CVSS 9.8Priority 44KEV 0

CVE-2024-6800 · GitHub GitHub Enterprise Server

An XML signature wrapping vulnerability was present in GitHub Enterprise Server (GHES) when using SAML authentication with specific ident…

EPSS 2%CVSS 9.8

oswapp1 vulnerability on this pageMax CVSS 9.6Priority 44KEV 0

CVE-2024-42581 · oswapp warehouse_inventory_system

A Cross-Site Request Forgery (CSRF) in the component delete_group.php of Warehouse Inventory System v2.0 allows attackers to escalate pri…

EPSS 0.3%public exploit CVSS 9.6

Bit Apps2 vulnerabilities on this pageMax CVSS 9.9Priority 43KEV 0

CVE-2024-43249 · Bit Apps Bit Form Pro

WordPress Bit Form Pro plugin <= 2.6.4 - Authenticated Arbitrary File Upload vulnerability

EPSS 1%CVSS 9.9

CVE-2024-43248 · Bit Apps Bit Form Pro

WordPress Bit Form Pro plugin <= 2.6.4 - Unauthenticated Arbitrary File Deletion vulnerability

EPSS 0.6%CVSS 9.1

NicPWNs1 vulnerability on this pageMax CVSS 9.8Priority 43KEV 0

CVE-2024-43404 · NicPWNs MEGABOT

Remote Code Execution Vulnerability in MEGABOT

EPSS 1%CVSS 9.8

squirrelly1 vulnerability on this pageMax CVSS 9.8Priority 43KEV 0

CVE-2024-40453 · squirrelly squirrelly

squirrellyjs squirrelly v9.0.0 and fixed in v.9.0.1 was discovered to contain a code injection vulnerability via the component options.va…

EPSS 1%CVSS 9.8

escanav1 vulnerability on this pageMax CVSS 9.8Priority 42KEV 0

CVE-2024-42919 · escanav escan_management_console

eScan Management Console 14.0.1400.2281 is vulnerable to Incorrect Access Control via acteScanAVReport.

EPSS 1.0%CVSS 9.8

Go-Tribe1 vulnerability on this pageMax CVSS 9.8Priority 41KEV 0

CVE-2024-8003 · Go-Tribe gotribe-admin

Go-Tribe gotribe-admin Log routes.go InitRoutes deserialization

EPSS 0.8%CVSS 9.8

newlib_project1 vulnerability on this pageMax CVSS 9.8Priority 41KEV 0

CVE-2024-30949 · newlib_project newlib

An issue in newlib v.4.3.0 allows an attacker to execute arbitrary code via the time unit scaling in the _gettimeofday function.

EPSS 0.8%CVSS 9.8

bitpressadmin1 vulnerability on this pageMax CVSS 9.0Priority 40KEV 0

CVE-2024-7777 · bitpressadmin Contact Form by Bit Form: Multi Step Form, Calculation Contact Form, Payment Contact Form & Custom Contact Form builder

Contact Form by Bit Form: Multi Step Form, Calculation Contact Form, Payment Contact Form & Custom Contact Form builder 2.0 - 2.13.9 - Authenticated (Administrator+) Arbitrary File Read And Deletion

EPSS 1%CVSS 9.0

Microsoft1 vulnerability on this pageMax CVSS 9.6Priority 40KEV 0

CVE-2024-38175 · Microsoft Azure Managed Instance for Apache Cassandra

Azure Managed Instance for Apache Cassandra Elevation of Privilege Vulnerability

EPSS 0.8%CVSS 9.6

hotel_management_system_project1 vulnerability on this pageMax CVSS 9.8Priority 39KEV 0

CVE-2024-42559 · hotel_management_system_project hotel_management_system

An issue in the login component (process_login.php) of Hotel Management System commit 79d688 allows attackers to authenticate without pro…

EPSS 0.6%CVSS 9.8

Geek Code Lab1 vulnerability on this pageMax CVSS 9.8Priority 38KEV 0

CVE-2024-43311 · Geek Code Lab Login As Users

WordPress Login As Users plugin <= 1.4.2 - Broken Authentication vulnerability

Hamed Naderfar1 vulnerability on this pageMax CVSS 9.6Priority 38KEV 0

CVE-2024-43261 · Hamed Naderfar Compute Links

WordPress Compute Links plugin <= 1.2.1 - Remote File Inclusion vulnerability

EPSS 0.5%CVSS 9.6

keyfactor1 vulnerability on this pageMax CVSS 9.8Priority 38KEV 0

CVE-2024-33872 · keyfactor command

Keyfactor Command 10.5.x before 10.5.1 and 11.5.x before 11.5.1 allows SQL Injection which could result in code execution and escalation…

Linux1 vulnerability on this pageMax CVSS 9.8Priority 38KEV 0

CVE-2024-43864 · Linux Linux

net/mlx5e: Fix CT entry update leaks of modify header context

Saad Iqbal1 vulnerability on this pageMax CVSS 9.8Priority 38KEV 0

CVE-2024-43354 · Saad Iqbal myCred

WordPress myCred plugin <= 2.7.2 - PHP Object Injection vulnerability

WPDeveloper1 vulnerability on this pageMax CVSS 9.8Priority 38KEV 0

CVE-2024-43328 · WPDeveloper EmbedPress

WordPress EmbedPress plugin <= 4.0.9 - Local File Inclusion vulnerability