The archive.

CVE-2024-7909 · TOTOLINK EX1200L

TOTOLINK EX1200L cstecgi.cgi setLanguageCfg stack-based overflow

Unknown3 vulnerabilities on this pageMax CVSS 9.8Priority 58KEV 0

CVE-2024-6460 · Unknown Grow by Tradedoubler

Grow by Tradedoubler <= 2.0.21 - Unauthenticated LFI

EPSS 5%public exploit CVSS 9.8

CVE-2024-6459 · Unknown News Element Elementor Blog Magazine

News Element Elementor Blog Magazine < 1.0.6 - Unauthenticated LFI

CVE-2024-6330 · Unknown GEO my WP

GEO my WordPress < 4.4.0.2 - Unauthenticated RCE via LFI

EPSS 2%CVSS 9.8

Anhui Deshun Intelligent Technology3 vulnerabilities on this pageMax CVSS 9.8Priority 53KEV 0

CVE-2024-7919 · Anhui Deshun Intelligent Technology Jieshun JieLink+ JSOTC2016

Anhui Deshun Intelligent Technology Jieshun JieLink+ JSOTC2016 GetDataList access control

CVE-2024-7920 · Anhui Deshun Intelligent Technology Jieshun JieLink+ JSOTC2016

Anhui Deshun Intelligent Technology Jieshun JieLink+ JSOTC2016 GetParkInThroughDeivces access control

CVE-2024-7921 · Anhui Deshun Intelligent Technology Jieshun JieLink+ JSOTC2016

Anhui Deshun Intelligent Technology Jieshun JieLink+ JSOTC2016 GetDataList access control

MobSF1 vulnerability on this pageMax CVSS 9.8Priority 52KEV 0

CVE-2024-43399 · MobSF Mobile-Security-Framework-MobSF

Mobile Security Framework (MobSF) has a Zip Slip Vulnerability in .a Static Library Files

EPSS 1.0%public exploit CVSS 9.8

SourceCodester2 vulnerabilities on this pageMax CVSS 9.8Priority 51KEV 0

CVE-2024-7911 · SourceCodester Simple Online Bidding System

SourceCodester Simple Online Bidding System index.php file inclusion

CVE-2024-7851 · SourceCodester Yoga Class Registration System

SourceCodester Yoga Class Registration System Add User Users.php improper authorization

tp-link1 vulnerability on this pageMax CVSS 9.8Priority 51KEV 0

CVE-2024-42815 · tp-link re365

In the TP-Link RE365 V1_180213, there is a buffer overflow vulnerability due to the lack of length verification for the USER_AGENT field…

EPSS 0.8%public exploit CVSS 9.8

itsourcecode3 vulnerabilities on this pageMax CVSS 9.8Priority 50KEV 0

CVE-2024-7839 · itsourcecode Billing System

itsourcecode Billing System addbill.php sql injection

CVE-2024-7838 · itsourcecode Online Food Ordering System

itsourcecode Online Food Ordering System addcategory.php sql injection

CVE-2024-7913 · itsourcecode Billing System

itsourcecode Billing System addclient1.php sql injection

trendnet1 vulnerability on this pageMax CVSS 9.8Priority 50KEV 0

CVE-2024-42813 · trendnet tew-752dru_firmware

In TRENDnet TEW-752DRU FW1.03B01, there is a buffer overflow vulnerability due to the lack of length verification for the service field i…

h3c2 vulnerabilities on this pageMax CVSS 9.8Priority 49KEV 0

CVE-2024-42637 · h3c r3010_firmware

H3C R3010 v100R002L02 was discovered to contain a hardcoded password vulnerability in /etc/shadow, which allows attackers to log in as root.

CVE-2024-42639 · h3c gr-1100-p

H3C GR1100-P v100R009 was discovered to use a hardcoded password in /etc/shadow, which allows attackers to log in as root.

eyecix1 vulnerability on this pageMax CVSS 9.8Priority 48KEV 0

CVE-2024-43245 · eyecix JobSearch

WordPress JobSearch plugin <= 2.3.4 - Unauthenticated Account Takeover vulnerability

EPSS 0.5%public exploit CVSS 9.8

matter-labs1 vulnerability on this pageMax CVSS 9.1Priority 46KEV 0

CVE-2024-43366 · matter-labs era-compiler-vyper

zkvyper ignored loop range bounds

EPSS 0.5%public exploit CVSS 9.1

tenda1 vulnerability on this pageMax CVSS 9.8Priority 46KEV 0

CVE-2024-42634 · tenda ac9

A Command Injection vulnerability exists in formWriteFacMac of the httpd binary in Tenda AC9 v15.03.06.42.

EPSS 2%CVSS 9.8

xwiki2 vulnerabilities on this pageMax CVSS 9.1Priority 46KEV 0

CVE-2024-43400 · xwiki xwiki-platform

XWiki Platform allows XSS through XClass name in string properties

EPSS 0.5%public exploit CVSS 9.1

CVE-2024-43401 · xwiki xwiki-platform

In XWiki Platform, payloads stored in content is executed when a user with script/programming right edit them

EPSS 0.7%CVSS 9.1

flatpak1 vulnerability on this pageMax CVSS 10.0Priority 44KEV 0

CVE-2024-42472 · flatpak flatpak

Flatpak may allow access to files outside sandbox for certain apps

EPSS 1%CVSS 10.0

nepstech1 vulnerability on this pageMax CVSS 9.8Priority 44KEV 0

CVE-2024-42658 · nepstech ntpl-xpon1gfevn_firmware

An issue in wishnet Nepstech Wifi Router NTPL-XPON1GFEVN v1.0 allows a remote attacker to obtain sensitive information via the cookie's p…

EPSS 1%CVSS 9.8

silverpeas1 vulnerability on this pageMax CVSS 9.8Priority 44KEV 0

CVE-2024-42850 · silverpeas silverpeas

An issue in the password change function of Silverpeas v6.4.2 and lower allows for the bypassing of password complexity requirements.

EPSS 1%CVSS 9.8

inspirelabs1 vulnerability on this pageMax CVSS 10.0Priority 43KEV 0

CVE-2024-6500 · inspirelabs InPost for WooCommerce

InPost for WooCommerce <= 1.4.0 and InPost PL <= 1.4.4 - Missing Authorization to Unauthenticated Arbitrary File Read and Delete

EPSS 1.0%CVSS 10.0

roxnor1 vulnerability on this pageMax CVSS 9.8Priority 42KEV 0

CVE-2023-0714 · roxnor MetForm – Contact Form, Survey, Quiz, & Custom Form Builder for Elementor

Metform Elementor Contact Form Builder <= 3.2.4 - Unauthenticated Double-Extension Arbitrary File Upload

EPSS 1.0%CVSS 9.8

Linux2 vulnerabilities on this pageMax CVSS 9.8Priority 41KEV 0

CVE-2024-42285 · Linux Linux

RDMA/iwcm: Fix a use-after-free related to destroying CM IDs

EPSS 0.9%CVSS 9.8

CVE-2024-42284 · Linux Linux

tipc: Return non-zero value from tipc_udp_addr2str() on error

EPSS 0.9%CVSS 9.1

frrouting1 vulnerability on this pageMax CVSS 9.8Priority 40KEV 0

CVE-2024-44070 · frrouting frrouting

An issue was discovered in FRRouting (FRR) through 10.1.

mitre2 vulnerabilities on this pageMax CVSS 9.8Priority 40KEV 0

CVE-2024-43042 · mitre

Pluck CMS 4.7.18 does not restrict failed login attempts, allowing attackers to execute a brute force attack.

CVE-2024-42638 · mitre

H3C Magic B1ST v100R012 was discovered to contain a hardcoded password vulnerability in /etc/shadow, which allows attackers to log in as…

upKeeper Solutions3 vulnerabilities on this pageMax CVSS 10.0Priority 40KEV 0

CVE-2024-42466 · upKeeper Solutions upKeeper Manager

Lack of resources and rate limiting - login

EPSS 0.7%CVSS 9.8

CVE-2024-42462 · upKeeper Solutions upKeeper Manager

Bypass multifactor authentication

EPSS 0.5%CVSS 10.0

CVE-2024-42465 · upKeeper Solutions upKeeper Manager

Lack of resources and rate limiting - two factor authentication

EPSS 0.5%CVSS 9.8

azzaroco2 vulnerabilities on this pageMax CVSS 10.0Priority 39KEV 0

CVE-2024-43240 · azzaroco Ultimate Membership Pro

WordPress Indeed Ultimate Membership Pro plugin <= 12.7 - Unauthenticated Privilege Escalation vulnerability

EPSS 0.5%CVSS 9.8

CVE-2024-43242 · azzaroco Ultimate Membership Pro

WordPress Indeed Ultimate Membership Pro plugin <= 12.7 - Unauthenticated PHP Object Injection vulnerability

EPSS 0.5%CVSS 10.0

Liquid Web1 vulnerability on this pageMax CVSS 10.0Priority 39KEV 0

CVE-2024-37099 · Liquid Web GiveWP

WordPress GiveWP plugin <= 3.14.1 - Unauthenticated PHP Object Injection vulnerability

EPSS 0.6%CVSS 10.0

microcks1 vulnerability on this pageMax CVSS 9.8Priority 39KEV 0

CVE-2024-44076 · microcks microcks

In Microcks before 1.10.0, the POST /api/import and POST /api/export endpoints allow non-administrator access.

Tosei1 vulnerability on this pageMax CVSS 9.8Priority 39KEV 0

CVE-2024-7898 · Tosei Online Store Management System ネット店舗管理システム

Tosei Online Store Management System ネット店舗管理システム Backend default credentials