The archive.

Browse all tracked critical vulnerabilities, including records outside today's brief.

39,165 matching vulnerabilities · Page 425 of 784

Ivanti3 vulnerabilities on this pageMax CVSS 9.8Priority 99KEV 1

CVE-2024-7593 · Ivanti vTM

Ivanti Virtual Traffic Manager Authentication Bypass Vulnerability

KEV · due 15 Oct EPSS 100%public exploit SSVC act CVSS 9.8

CVE-2024-38652 · Ivanti Avalanche

Path traversal in the skin management component of Ivanti Avalanche 6.3.1 allows a remote unauthenticated attacker to achieve denial of s…

EPSS 8%CVSS 9.1

CVE-2024-7569 · Ivanti ITSM

An information disclosure vulnerability in Ivanti ITSM on-prem and Neurons for ITSM versions 2023.4 and earlier allows an unauthenticated…

EPSS 2%CVSS 9.8

SolarWinds1 vulnerability on this pageMax CVSS 9.8Priority 99KEV 1

CVE-2024-28986 · SolarWinds Web Help Desk

SolarWinds Web Help Desk Java Deserialization Remote Code Execution Vulnerability

KEV · due 5 Sep EPSS 85%public exploit SSVC act CVSS 9.8

D-Link3 vulnerabilities on this pageMax CVSS 9.8Priority 59KEV 0

CVE-2024-7828 · D-Link DNS-120

D-Link DNS-1550-04 photocenter_mgr.cgi cgi_set_cover buffer overflow

EPSS 16%public exploit CVSS 9.8

CVE-2024-7829 · D-Link DNS-120

D-Link DNS-1550-04 photocenter_mgr.cgi cgi_del_photo buffer overflow

EPSS 2%public exploit CVSS 9.8

CVE-2024-7830 · D-Link DNS-120

D-Link DNS-1550-04 photocenter_mgr.cgi cgi_move_photo buffer overflow

EPSS 2%public exploit CVSS 9.8

Microsoft7 vulnerabilities on this pageMax CVSS 9.8Priority 59KEV 0

CVE-2024-38063 · Microsoft Windows 10 Version 1809

Windows TCP/IP Remote Code Execution Vulnerability

EPSS 74%public exploit CVSS 9.8

CVE-2024-38140 · Microsoft Windows 10 Version 1809

Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability

EPSS 4%CVSS 9.8

CVE-2024-38199 · Microsoft Windows 10 Version 1809

Windows Line Printer Daemon (LPD) Service Remote Code Execution Vulnerability

EPSS 2%CVSS 9.8

CVE-2024-38159 · Microsoft Windows 10 Version 1607

Windows Network Virtualization Remote Code Execution Vulnerability

EPSS 2%CVSS 9.1

CVE-2024-38160 · Microsoft Windows 10 Version 1607

Windows Network Virtualization Remote Code Execution Vulnerability

EPSS 2%CVSS 9.1

CVE-2024-38109 · Microsoft Azure Health Bot

Azure Health Bot Elevation of Privilege Vulnerability

EPSS 2%CVSS 9.1

CVE-2024-38108 · Microsoft Azure Stack Hub

Azure Stack Hub Spoofing Vulnerability

EPSS 1%CVSS 9.3

asus1 vulnerability on this pageMax CVSS 9.8Priority 54KEV 0

CVE-2024-42757 · asus rt-n15u_firmware

Command injection vulnerability in Asus RT-N15U 3.0.0.4.376_3754 allows a remote attacker to execute arbitrary code via the netstat funct…

EPSS 1%public exploit CVSS 9.8

code-projects1 vulnerability on this pageMax CVSS 9.8Priority 53KEV 0

CVE-2024-7808 · code-projects Job Portal

code-projects Job Portal logindbc.php sql injection

EPSS 1%public exploit CVSS 9.8

tenda2 vulnerabilities on this pageMax CVSS 9.8Priority 53KEV 0

CVE-2024-42978 · tenda fh1206_firmware

An issue in the handler function in /goform/telnet of Tenda FH1206 v02.03.01.35 allows attackers to execute arbitrary commands via a craf…

EPSS 1%public exploit CVSS 9.8

CVE-2024-42947 · tenda fh1201_firmware

An issue in the handler function in /goform/telnet of Tenda FH1201 v1.2.0.14 (408) allows attackers to execute arbitrary commands via a c…

EPSS 1.0%public exploit CVSS 9.8

friendica1 vulnerability on this pageMax CVSS 9.8Priority 51KEV 0

CVE-2024-27730 · friendica friendica

Insecure Permissions vulnerability in Friendica v.2023.12 allows a remote attacker to obtain sensitive information and execute arbitrary…

EPSS 0.8%public exploit CVSS 9.8

wanglongcn3 vulnerabilities on this pageMax CVSS 9.8Priority 51KEV 0

CVE-2024-7740 · wanglongcn ltcms

wanglongcn ltcms API Endpoint download server-side request forgery

EPSS 0.8%public exploit CVSS 9.8

CVE-2024-7742 · wanglongcn ltcms

wanglongcn ltcms API Endpoint multiDownload server-side request forgery

EPSS 0.8%public exploit CVSS 9.8

CVE-2024-7743 · wanglongcn ltcms

wanglongcn ltcms API Endpoint downloadUrl server-side request forgery

EPSS 0.8%public exploit CVSS 9.8

SourceCodester4 vulnerabilities on this pageMax CVSS 9.8Priority 50KEV 0

CVE-2024-7748 · SourceCodester Accounts Manager App

SourceCodester Accounts Manager App delete-account.php sql injection

EPSS 0.7%public exploit CVSS 9.8

CVE-2024-7797 · SourceCodester Simple Online Bidding System

SourceCodester Simple Online Bidding System ajax.php sql injection

EPSS 0.7%public exploit CVSS 9.8

CVE-2024-7798 · SourceCodester Simple Online Bidding System

SourceCodester Simple Online Bidding System ajax.php sql injection

EPSS 0.7%public exploit CVSS 9.8

CVE-2024-7811 · SourceCodester Daily Expenses Monitoring App

SourceCodester Daily Expenses Monitoring App delete-expense.php sql injection

EPSS 0.6%public exploit CVSS 9.8

projectworlds1 vulnerability on this pageMax CVSS 9.8Priority 49KEV 0

CVE-2024-42843 · projectworlds online_examination_system

Projectworlds Online Examination System v1.0 is vulnerable to SQL Injection via the subject parameter in feed.php.

EPSS 0.6%public exploit CVSS 9.8

totolink2 vulnerabilities on this pageMax CVSS 9.8Priority 49KEV 0

CVE-2024-42966 · totolink n350rt_firmware

Incorrect access control in TOTOLINK N350RT V9.3.5u.6139_B20201216 allows attackers to obtain the apmib configuration file, which contain…

EPSS 0.6%public exploit CVSS 9.8

CVE-2024-42967 · totolink lr350_firmware

Incorrect access control in TOTOLINK LR350 V9.3.5u.6369_B20220309 allows attackers to obtain the apmib configuration file, which contains…

EPSS 0.6%public exploit CVSS 9.8

BerqWP1 vulnerability on this pageMax CVSS 10.0Priority 48KEV 0

CVE-2024-43160 · BerqWP BerqWP

WordPress BerqWP plugin <= 1.7.6 - Unauthenticated Arbitrary File Upload vulnerability

EPSS 5%CVSS 10.0

MediaTek, Inc.2 vulnerabilities on this pageMax CVSS 9.8Priority 44KEV 0

CVE-2024-20082 · MediaTek, Inc. MT2735, MT2737, MT6833, MT6835, MT6835T, MT6853, MT6855, MT6873, MT6875, MT6875T, MT6877, MT6879, MT6880, MT6883, MT6885, MT6886, MT6889, MT6890, MT6891, MT6893, MT6895, MT6895T, MT6896, MT6897, MT6980, MT6980D, MT6983, MT6985, MT6989, MT6990

In Modem, there is a possible memory corruption due to a missing bounds check.

EPSS 1%CVSS 9.8

CVE-2024-20083 · MediaTek, Inc. MT6765, MT6768, MT6779, MT6785, MT8321, MT8385, MT8666, MT8667, MT8755, MT8765, MT8766, MT8768, MT8771, MT8775, MT8781, MT8786, MT8788, MT8789, MT8791T, MT8792, MT8795T, MT8796, MT8797, MT8798

In venc, there is a possible out of bounds write due to a missing bounds check.

EPSS 0.3%CVSS 9.8

Palo Alto Networks1 vulnerability on this pageMax CVSS 9.8Priority 43KEV 0

CVE-2024-5914 · Palo Alto Networks Cortex XSOAR CommonScripts

Cortex XSOAR: Command Injection in CommonScripts Pack

EPSS 1%CVSS 9.8

SECOM2 vulnerabilities on this pageMax CVSS 9.8Priority 42KEV 0

CVE-2024-7732 · SECOM Dr.ID Attendance system

SECOM Dr.ID Attendance system - Unrestricted File Upload

EPSS 0.9%CVSS 9.8

CVE-2024-7731 · SECOM Dr.ID Access control system

SECOM Dr.ID Access control system - SQL injection

EPSS 0.8%CVSS 9.8

Adobe1 vulnerability on this pageMax CVSS 9.0Priority 40KEV 0

CVE-2024-39397 · Adobe Adobe Commerce

Adobe Commerce | Unrestricted Upload of File with Dangerous Type (CWE-434)

EPSS 1%CVSS 9.0

Roland Barker, xnau webdesign1 vulnerability on this pageMax CVSS 9.8Priority 40KEV 0

CVE-2024-43141 · Roland Barker, xnau webdesign Participants Database

WordPress Participants Database plugin <= 2.5.9.2 - PHP Object Injection vulnerability

EPSS 0.6%CVSS 9.8

WofficeIO1 vulnerability on this pageMax CVSS 9.8Priority 40KEV 0

CVE-2024-43153 · WofficeIO Woffice

WordPress Woffice theme <= 5.4.10 - Unauthenticated Privilege Escalation vulnerability

EPSS 0.6%CVSS 9.8

itsourcecode1 vulnerability on this pageMax CVSS 9.8Priority 39KEV 0

CVE-2024-7794 · itsourcecode Vehicle Management System

itsourcecode Vehicle Management System mybill.php sql injection

EPSS 0.5%CVSS 9.8

Traccar1 vulnerability on this pageMax CVSS 9.8Priority 39KEV 0

CVE-2024-7746 · Traccar Server

Use of default credentials at Traccar fleet management solution

EPSS 0.5%CVSS 9.8

wurmlab1 vulnerability on this pageMax CVSS 9.8Priority 39KEV 0

CVE-2024-42360 · wurmlab sequenceserver

Command Injection in sequenceserver

EPSS 0.6%CVSS 9.8

Fortinet1 vulnerability on this pageMax CVSS 9.0Priority 38KEV 0

CVE-2023-26211 · Fortinet FortiSOAR

An improper neutralization of input during web page generation ('cross-site scripting') in Fortinet FortiSOAR 7.3.0 through 7.3.2 allows…

EPSS 0.7%CVSS 9.0

PHOENIX CONTACT1 vulnerability on this pageMax CVSS 9.8Priority 38KEV 0

CVE-2024-6788 · PHOENIX CONTACT CHARX SEC-3000

Phoenix Contact: update feature from CHARX controller can be used to reset a low privilege user password

EPSS 0.5%CVSS 9.8

xiexe1 vulnerability on this pageMax CVSS 9.8Priority 36KEV 0

CVE-2024-23168 · xiexe xsoverlay

Vulnerability in Xiexe XSOverlay before build 647 allows non-local websites to send the malicious commands to the WebSocket API, resultin…

EPSS 0.4%CVSS 9.8

AMD1 vulnerability on this pageMax CVSS 10.0Priority 35KEV 0

CVE-2023-20591 · AMD AMD EPYC™ 7003 Series Processors

Improper re-initialization of IOMMU during the DRTM event may permit an untrusted platform configuration to persist, allowing an attacker…

EPSS 0.3%CVSS 10.0

intel5 vulnerabilities on this pageMax CVSS 9.3Priority 30KEV 0

CVE-2024-21807 · intel ethernet_complete_driver_pack

Improper initialization in the Linux kernel mode driver for some Intel(R) Ethernet Network Controllers and Adapters before version 28.3 m…

EPSS 0.2%CVSS 9.3

CVE-2024-21810 · intel ethernet_complete_driver_pack

Improper input validation in the Linux kernel mode driver for some Intel(R) Ethernet Network Controllers and Adapters before version 28.3…

EPSS 0.2%CVSS 9.3

CVE-2024-23497 · intel ethernet_complete_driver_pack

Out-of-bounds write in Linux kernel mode driver for some Intel(R) Ethernet Network Controllers and Adapters before version 28.3 may allow…

EPSS 0.2%CVSS 9.3

CVE-2024-23981 · intel ethernet_complete_driver_pack

Wrap-around error in Linux kernel mode driver for some Intel(R) Ethernet Network Controllers and Adapters before version 28.3 may allow a…

EPSS 0.2%CVSS 9.3

CVE-2024-24986 · intel ethernet_complete_driver_pack

Improper access control in Linux kernel mode driver for some Intel(R) Ethernet Network Controllers and Adapters before version 28.3 may a…

EPSS 0.2%CVSS 9.3