Critical vulnerability archive — page 427

Samsung Electronics1 vulnerability on this pageMax CVSS 9.8Priority 99KEV 1

CVE-2024-7399 · Samsung Electronics MagicINFO 9 Server

Samsung MagicINFO 9 Server Path Traversal Vulnerability

KEV · due 8 May EPSS 92%public exploit SSVC act CVSS 9.8

Alien Technology2 vulnerabilities on this pageMax CVSS 9.8Priority 59KEV 0

CVE-2024-7580 · Alien Technology ALR-F800

Alien Technology ALR-F800 system.html os command injection

EPSS 9%public exploit CVSS 9.8

CVE-2024-7578 · Alien Technology ALR-F800

Alien Technology ALR-F800 cmd.php improper authorization

EPSS 0.8%CVSS 9.8

c5pider1 vulnerability on this pageMax CVSS 9.8Priority 57KEV 0

CVE-2024-41570 · c5pider havoc

An Unauthenticated Server-Side Request Forgery (SSRF) in demon callback handling in Havoc 2 0.7 allows attackers to send arbitrary networ…

EPSS 3%public exploit CVSS 9.8

Tenda8 vulnerabilities on this pageMax CVSS 9.8Priority 54KEV 0

CVE-2024-7581 · Tenda A301

Tenda A301 WifiBasicSet formWifiBasicSet stack-based overflow

EPSS 1%public exploit CVSS 9.8

CVE-2024-7582 · Tenda i22

Tenda i22 apPortalAccessCodeAuth formApPortalAccessCodeAuth buffer overflow

EPSS 1%public exploit CVSS 9.8

CVE-2024-7583 · Tenda i22

Tenda i22 apPortalOneKeyAuth formApPortalOneKeyAuth buffer overflow

EPSS 1%public exploit CVSS 9.8

CVE-2024-7585 · Tenda i22

Tenda i22 apPortalAuth formApPortalWebAuth buffer overflow

EPSS 1%public exploit CVSS 9.8

CVE-2024-7613 · Tenda FH1206

Tenda FH1206 GstDhcpSetSer fromGstDhcpSetSer buffer overflow

EPSS 1%public exploit CVSS 9.8

CVE-2024-7614 · Tenda FH1206

Tenda FH1206 qossetting fromqossetting stack-based overflow

EPSS 1%public exploit CVSS 9.8

CVE-2024-7615 · Tenda FH1206

Tenda FH1206 fromSafeUrlFilter stack-based overflow

EPSS 1%public exploit CVSS 9.8

CVE-2024-7584 · Tenda i22

Tenda i22 apPortalPhoneAuth formApPortalPhoneAuth buffer overflow

EPSS 1%public exploit CVSS 9.8

izatop1 vulnerability on this pageMax CVSS 9.8Priority 53KEV 0

CVE-2024-38989 · izatop bunt

izatop bunt v0.29.19 was discovered to contain a prototype pollution via the component /esm/qs.js.

EPSS 1%public exploit CVSS 9.8

kashipara5 vulnerabilities on this pageMax CVSS 9.8Priority 53KEV 0

CVE-2024-40482 · kashipara live_membership_system

An Unrestricted file upload vulnerability was found in "/Membership/edit_member.php" of Kashipara Live Membership System v1.0, which allo…

EPSS 1%public exploit CVSS 9.8

CVE-2024-40486 · kashipara live_membership_system

A SQL injection vulnerability in "/index.php" of Kashipara Live Membership System v1.0 allows remote attackers to execute arbitrary SQL c…

EPSS 1%public exploit CVSS 9.8

CVE-2024-40480 · kashipara online_exam_system

A Broken Access Control vulnerability was found in /admin/update.php and /admin/dashboard.php in Kashipara Online Exam System v1.0, which…

EPSS 0.5%public exploit CVSS 9.8

CVE-2024-41237 · kashipara responsive_school_management_system

A SQL injection vulnerability in /smsa/teacher_login.php in Kashipara Responsive School Management System v1.0 allows an attacker to exec…

EPSS 0.6%public exploit CVSS 9.8

CVE-2024-41247 · kashipara responsive_school_management_system

An Incorrect Access Control vulnerability was found in /smsa/add_class.php and /smsa/add_class_submit.php in Kashipara Responsive School…

EPSS 0.4%public exploit CVSS 9.1

phpgurukul1 vulnerability on this pageMax CVSS 9.8Priority 51KEV 0

CVE-2024-40477 · phpgurukul old_age_home_management_system

A SQL injection vulnerability in "/oahms/admin/forgot-password.php" in PHPGurukul Old Age Home Management System v1.0 allows an attacker…

EPSS 0.8%public exploit CVSS 9.8

Journyx1 vulnerability on this pageMax CVSS 9.8Priority 50KEV 0

CVE-2024-6890 · Journyx Journyx (jtime)

Journyx Unauthenticated Password Reset Bruteforce

EPSS 0.7%public exploit CVSS 9.8

sourcecodester2 vulnerabilities on this pageMax CVSS 9.8Priority 50KEV 0

CVE-2024-40472 · sourcecodester daily_calories_monitoring_tool

Sourcecodester Daily Calories Monitoring Tool v1.0 is vulnerable to SQL Injection via "delete-calorie.php."

EPSS 0.7%public exploit CVSS 9.8

CVE-2024-34480 · sourcecodester computer_laboratory_management_system

SourceCodester Computer Laboratory Management System 1.0 allows admin/category/view_category.php id SQL Injection.

EPSS 0.6%public exploit CVSS 9.8

vrcx-team1 vulnerability on this pageMax CVSS 9.1Priority 49KEV 0

CVE-2024-42366 · vrcx-team VRCX

VR Overlay RCE

EPSS 0.8%public exploit CVSS 9.1

Cisco2 vulnerabilities on this pageMax CVSS 9.8Priority 48KEV 0

CVE-2024-20450 · Cisco Cisco Small Business IP Phones

Multiple vulnerabilities in the web-based management interface of Cisco Small Business SPA300 Series IP Phones and Cisco Small Business S…

EPSS 7%CVSS 9.8

CVE-2024-20454 · Cisco Cisco Small Business IP Phones

Multiple vulnerabilities in the web-based management interface of Cisco Small Business SPA300 Series IP Phones and Cisco Small Business S…

EPSS 7%CVSS 9.8

Edimax1 vulnerability on this pageMax CVSS 9.8Priority 48KEV 0

CVE-2024-7616 · Edimax IC-6220DC

Edimax IC-6220DC/IC-5150W ipcam_cgi cgiFormString command injection

EPSS 5%CVSS 9.8

mintplex-labs1 vulnerability on this pageMax CVSS 9.1Priority 48KEV 0

CVE-2024-3279 · mintplex-labs mintplex-labs/anything-llm

Improper Access Control in mintplex-labs/anything-llm

EPSS 0.6%public exploit CVSS 9.1

Ivanti1 vulnerability on this pageMax CVSS 9.8Priority 46KEV 0

CVE-2024-36130 · Ivanti EPMM

An insufficient authorization vulnerability in web component of EPMM prior to 12.1.0.1 allows an unauthorized attacker within the network…

EPSS 2%CVSS 9.8

KAON Group1 vulnerability on this pageMax CVSS 10.0Priority 45KEV 0

CVE-2024-3659 · KAON Group AR2140

Command injection in KAON AR2140 routers

EPSS 2%CVSS 10.0

Zabbix3 vulnerabilities on this pageMax CVSS 9.9Priority 45KEV 0

CVE-2024-22116 · Zabbix Zabbix

Remote code execution within ping script

EPSS 2%CVSS 9.9

CVE-2024-22122 · Zabbix Zabbix

AT(GSM) Command Injection

EPSS 2%CVSS 9.1

CVE-2024-36461 · Zabbix Zabbix

Direct access to memory pointers within the JS engine for modification

EPSS 0.8%CVSS 9.1

djangoproject1 vulnerability on this pageMax CVSS 9.8Priority 44KEV 0

CVE-2024-42005 · djangoproject django

An issue was discovered in Django 5.0 before 5.0.8 and 4.2 before 4.2.15.

EPSS 2%CVSS 9.8

Microchip Techology1 vulnerability on this pageMax CVSS 9.8Priority 44KEV 0

CVE-2024-7490 · Microchip Techology Advanced Software Framework

Remote Code Execution in Advanced Software Framework DHCP server

EPSS 1%CVSS 9.8

Vonets5 vulnerabilities on this pageMax CVSS 10.0Priority 44KEV 0

CVE-2024-37023 · Vonets VAR1200-H

Vonets WiFi Bridges Command Injection

EPSS 1%CVSS 9.9

CVE-2024-39791 · Vonets VAR1200-H

Vonets WiFi Bridges Stack-based Buffer Overflow

EPSS 1%CVSS 10.0

CVE-2024-41161 · Vonets VAR1200-H

Vonets WiFi Bridges Use of Hard-coded Credentials

EPSS 0.6%CVSS 9.8

CVE-2024-42001 · Vonets VAR1200-H

Vonets WiFi Bridges Forced Browsing

EPSS 0.7%CVSS 9.8

CVE-2024-39815 · Vonets VAR1200-H

Vonets WiFi Bridges Improper Check or Handling of Exceptional Conditions

EPSS 0.8%CVSS 9.4

productinfoquick1 vulnerability on this pageMax CVSS 9.8Priority 42KEV 0

CVE-2024-41577 · productinfoquick productinfoquick

An arbitrary file upload vulnerability in the Ueditor component of productinfoquick v1.0 allows attackers to execute arbitrary code via u…

EPSS 1.0%CVSS 9.8

Linux2 vulnerabilities on this pageMax CVSS 9.8Priority 41KEV 0

CVE-2024-42232 · Linux Linux

libceph: fix race between delayed_work() and ceph_monc_stop()

EPSS 0.8%CVSS 9.8

CVE-2024-42256 · Linux Linux

cifs: Fix server re-repick on subrequest retry

EPSS 0.7%CVSS 9.8

shopware2 vulnerabilities on this pageMax CVSS 9.8Priority 41KEV 0

CVE-2024-42355 · shopware shopware

Shopware vulnerable to Server Side Template Injection in Twig using deprecation silence tag

EPSS 0.9%CVSS 9.8

CVE-2024-42357 · shopware shopware

Shopware vulnerable to blind SQL-injection in DAL aggregations

EPSS 0.6%CVSS 9.8

reputeinfosystems1 vulnerability on this pageMax CVSS 9.8Priority 40KEV 0

CVE-2024-7350 · reputeinfosystems Appointment Booking Calendar Plugin and Scheduling Plugin – BookingPress

Appointment Booking Calendar Plugin and Online Scheduling Plugin – BookingPress 1.1.6 - 1.1.7 - Authentication Bypass to Account Takeover

EPSS 0.7%CVSS 9.8

amttgroup1 vulnerability on this pageMax CVSS 9.8Priority 39KEV 0

CVE-2024-41476 · amttgroup hotel_broadband_operation_system

AMTT Hotel Broadband Operation System (HiBOS) V3.0.3.151204 and before is vulnerable to SQL Injection via /manager/card/card_detail.php.

EPSS 0.6%CVSS 9.8

Microsoft1 vulnerability on this pageMax CVSS 9.0Priority 39KEV 0

CVE-2024-38219 · Microsoft Microsoft Edge (Chromium-based)

Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability

EPSS 0.9%CVSS 9.0

HP Inc.1 vulnerability on this pageMax CVSS 9.8Priority 38KEV 0

CVE-2024-41912 · HP Inc. Poly Clariti Manager

A vulnerability was discovered in the firmware builds up to 10.10.2.2 in Poly Clariti Manager devices.

EPSS 0.5%CVSS 9.8

Webnus1 vulnerability on this pageMax CVSS 9.6Priority 36KEV 0

CVE-2024-6522 · Webnus Modern Events Calendar

Modern Events Calendar <= 7.12.1 - Authenticated (Subscriber+) Server Side Request Forgery

EPSS 0.4%CVSS 9.6

Huawei1 vulnerability on this pageMax CVSS 9.3Priority 28KEV 0

CVE-2024-42037 · Huawei HarmonyOS

Vulnerability of uncaught exceptions in the Graphics module Impact: Successful exploitation of this vulnerability may affect service conf…

EPSS 0.1%CVSS 9.3

The archive.