The archive.

totolink8 vulnerabilities on this pageMax CVSS 9.8Priority 55KEV 0

CVE-2024-42737 · totolink x5000r_firmware

In TOTOLINK X5000r v9.1.0cu.2350_b20230313, the file /cgi-bin/cstecgi.cgi contains an OS command injection vulnerability in delBlacklist.

EPSS 2%public exploit CVSS 9.8

CVE-2024-42745 · totolink x5000r

In TOTOLINK X5000r v9.1.0cu.2350_b20230313, the file /cgi-bin/cstecgi.cgi contains an OS command injection vulnerability in setUPnPCfg.

EPSS 2%public exploit CVSS 9.8

CVE-2024-42748 · totolink x5000r_firmware

In TOTOLINK X5000r v9.1.0cu.2350_b20230313, the file /cgi-bin/cstecgi.cgi contains an OS command injection vulnerability in setWiFiWpsCfg.

EPSS 2%public exploit CVSS 9.8

CVE-2024-42520 · totolink a3002r

TOTOLINK A3002R v4.0.0-B20230531.1404 contains a buffer overflow vulnerability in /bin/boa via formParentControl.

CVE-2024-42543 · totolink a3700r_firmware

TOTOLINK A3700R v9.1.2u.5822_B20200513 has a buffer overflow vulnerability in the http_host parameter in the loginauth function.

CVE-2024-42545 · totolink a3700r

TOTOLINK A3700R v9.1.2u.5822_B20200513 has a buffer overflow vulnerability in the ssid parameter in setWizardCfg function.

CVE-2024-42546 · totolink a3100r_firmware

TOTOLINK A3100R V4.1.2cu.5050_B20200504 has a buffer overflow vulnerability in the password parameter in the loginauth function.

CVE-2024-42547 · totolink a3100r

TOTOLINK A3100R V4.1.2cu.5050_B20200504 has a buffer overflow vulnerability in the http_host parameter in the loginauth function.

Tenda1 vulnerability on this pageMax CVSS 9.8Priority 54KEV 0

CVE-2024-7707 · Tenda FH1206

Tenda FH1206 HTTP POST Request SafeEmailFilter formSafeEmailFilter stack-based overflow

EPSS 1%public exploit CVSS 9.8

prestashop1 vulnerability on this pageMax CVSS 9.8Priority 53KEV 0

CVE-2024-41651 · prestashop prestashop

An issue in Prestashop v.8.1.7 and before allows a remote attacker to execute arbitrary code via the module upgrade functionality.

EPSS 1%public exploit CVSS 9.8

xwikisas1 vulnerability on this pageMax CVSS 10.0Priority 53KEV 0

CVE-2024-42489 · xwikisas xwiki-pro-macros

Pro Macros Remote Code Execution via Viewpdf and similar macros

EPSS 1%public exploit CVSS 10.0

code-projects5 vulnerabilities on this pageMax CVSS 9.8Priority 52KEV 0

CVE-2024-7637 · code-projects Online Polling

code-projects Online Polling Registration registeracc.php sql injection

EPSS 0.9%public exploit CVSS 9.8

CVE-2024-7635 · code-projects Simple Ticket Booking

code-projects Simple Ticket Booking Registration register_insert.php sql injection

EPSS 0.8%public exploit CVSS 9.8

CVE-2024-7636 · code-projects Simple Ticket Booking

code-projects Simple Ticket Booking Login authenticate.php sql injection

EPSS 0.8%public exploit CVSS 9.8

CVE-2024-7681 · code-projects College Management System

code-projects College Management System Login Page login.php sql injection

CVE-2024-7682 · code-projects Job Portal

code-projects Job Portal rw_i_nat.php sql injection

SourceCodester6 vulnerabilities on this pageMax CVSS 9.8Priority 52KEV 0

CVE-2024-7638 · SourceCodester Kortex Lite Advocate Office Management System

SourceCodester Kortex Lite Advocate Office Management System delete_client.php sql injection

EPSS 1.0%public exploit CVSS 9.8

CVE-2024-7641 · SourceCodester Kortex Lite Advocate Office Management System

SourceCodester Kortex Lite Advocate Office Management System deactivate_act.php sql injection

EPSS 0.9%public exploit CVSS 9.8

CVE-2024-7643 · SourceCodester Leads Manager Tool

SourceCodester Leads Manager Tool Delete Leads delete-leads.php sql injection

EPSS 0.9%public exploit CVSS 9.8

CVE-2024-7639 · SourceCodester Kortex Lite Advocate Office Management System

SourceCodester Kortex Lite Advocate Office Management System delete_act.php sql injection

EPSS 1.0%CVSS 9.8

CVE-2024-7640 · SourceCodester Kortex Lite Advocate Office Management System

SourceCodester Kortex Lite Advocate Office Management System delete_register.php sql injection

EPSS 1.0%CVSS 9.8

CVE-2024-7642 · SourceCodester Kortex Lite Advocate Office Management System

SourceCodester Kortex Lite Advocate Office Management System activate_act.php sql injection

EPSS 1.0%CVSS 9.8

gunet1 vulnerability on this pageMax CVSS 9.8Priority 51KEV 0

CVE-2024-38530 · gunet openeclass

Open eClass Platform allows Arbitrary File Upload in "modules/h5p/save.php"

EPSS 0.8%public exploit CVSS 9.8

clastix1 vulnerability on this pageMax CVSS 9.9Priority 50KEV 0

CVE-2024-42480 · clastix kamaji

Kamaji's RBAC Roles for `etcd` are not disjunct

EPSS 0.6%public exploit CVSS 9.9

itsourcecode1 vulnerability on this pageMax CVSS 9.8Priority 49KEV 0

CVE-2024-7680 · itsourcecode Tailoring Management System

itsourcecode Tailoring Management System incedit.php sql injection

EPSS 0.5%public exploit CVSS 9.8

rabilal1 vulnerability on this pageMax CVSS 9.8Priority 49KEV 0

CVE-2024-7094 · rabilal JS Help Desk – AI-Powered Support & Ticketing System

JS Help Desk – The Ultimate Help Desk & Support Plugin <= 2.8.6 - Unauthenticated PHP Code Injection to Remote Code Execution

EPSS 38%CVSS 9.8

SAP_SE2 vulnerabilities on this pageMax CVSS 9.8Priority 49KEV 0

CVE-2024-41730 · SAP_SE SAP BusinessObjects Business Intelligence Platform

Missing Authentication check in SAP BusinessObjects Business Intelligence Platform

EPSS 76%CVSS 9.8

CVE-2024-33003 · SAP_SE SAP Commerce Cloud

Information Disclosure Vulnerability in SAP Commerce Cloud

Enphase3 vulnerabilities on this pageMax CVSS 9.8Priority 44KEV 0

CVE-2024-21878 · Enphase Envoy

Command Injection through Unsafe File Name Evaluation in internal script in Enphase IQ Gateway v4.x to and including 8.x

EPSS 1%CVSS 9.8

CVE-2024-21876 · Enphase IQ Gateway

Unauthenticated Path Traversal via URL Parameter in Enphase IQ Gateway version < 8.2.4225

EPSS 0.8%CVSS 9.3

CVE-2024-21877 · Enphase Envoy

Insecure File Generation Based on User Input in Enphase IQ Gateway version 4.x to 8.x and < 8.2.4225

EPSS 0.8%CVSS 9.2

gnuboard1 vulnerability on this pageMax CVSS 9.8Priority 44KEV 0

CVE-2024-41475 · gnuboard gnuboard6

Gnuboard g6 6.0.7 is vulnerable to Session hijacking due to a CORS misconfiguration.

EPSS 0.3%public exploit CVSS 9.8

Veribilim Software1 vulnerability on this pageMax CVSS 10.0Priority 44KEV 0

CVE-2024-6917 · Veribilim Software Veribase Order Management

RCE in Veribilim Software's Veribase Order Management

EPSS 1%CVSS 10.0

Elastic1 vulnerability on this pageMax CVSS 9.1Priority 43KEV 0

CVE-2024-37287 · Elastic Kibana

Kibana arbitrary code execution via prototype pollution

EPSS 2%CVSS 9.1

openhab3 vulnerabilities on this pageMax CVSS 10.0Priority 43KEV 0

CVE-2024-42467 · openhab openhab-webui

CometVisu Backend for openHAB affected by SSRF/XSS

EPSS 1%CVSS 10.0

CVE-2024-42469 · openhab openhab-webui

CometVisu Backend for openHAB affected by RCE through path traversal

EPSS 1%CVSS 9.8

CVE-2024-42470 · openhab openhab-webui

CometVisu Backend for openHAB has a sensitive information disclosure vulnerability

ezviz1 vulnerability on this pageMax CVSS 9.8Priority 40KEV 0

CVE-2024-41623 · ezviz internet_pt_camera

An issue in D3D Security D3D IP Camera (D8801) v.V9.1.17.1.4-20180428 allows a local attacker to execute arbitrary code via a crafted pay…

EPSS 0.6%CVSS 9.8

GST Electronics1 vulnerability on this pageMax CVSS 9.9Priority 40KEV 0

CVE-2024-6684 · GST Electronics inohom Nova Panel N7

Authentication Bypass in GST Electronics' inohom Nova Panel N7

EPSS 0.6%CVSS 9.9

OpenText1 vulnerability on this pageMax CVSS 9.8Priority 39KEV 0

CVE-2023-7249 · OpenText OpenText Directory Services

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in OpenText OpenText Directory Services allo…

EPSS 0.6%CVSS 9.8

WPWeb2 vulnerabilities on this pageMax CVSS 9.8Priority 39KEV 0

CVE-2024-7503 · WPWeb WooCommerce - Social Login

WooCommerce - Social Login <= 2.7.5 - Authentication Bypass to Account Takeover

EPSS 0.6%CVSS 9.8

CVE-2024-39651 · WPWeb WooCommerce PDF Vouchers

WordPress WooCommerce PDF Vouchers plugin < 4.9.5 - Unauthenticated Arbitrary File Deletion vulnerability

EPSS 0.5%CVSS 9.3

openfga1 vulnerability on this pageMax CVSS 9.8Priority 38KEV 0

CVE-2024-42473 · openfga openfga

OpenFGA Authorization Bypass

EPSS 0.5%CVSS 9.8

Siemens1 vulnerability on this pageMax CVSS 9.4Priority 38KEV 0

CVE-2024-41940 · Siemens SINEC NMS

A vulnerability has been identified in SINEC NMS (All versions < V3.0).

EPSS 0.6%CVSS 9.4

FIWARE2 vulnerabilities on this pageMax CVSS 9.1Priority 36KEV 0

CVE-2024-42166 · FIWARE FIWARE Keyrock

Command Injection in Applicationname

CVE-2024-42167 · FIWARE FIWARE Keyrock

Command Injection in Organisationname

realmag7771 vulnerability on this pageMax CVSS 9.1Priority 35KEV 0

CVE-2024-43121 · realmag777 HUSKY

WordPress HUSKY plugin <= 1.3.6.1 - Privilege Escalation vulnerability