The archive.

CVE-2024-41461 · tenda fh1201

Tenda FH1201 v1.2.0.14 was discovered to contain a stack-based buffer overflow vulnerability via the list1 parameter at ip/goform/DhcpLis…

CVE-2024-41459 · tenda fh1201_firmware

Tenda FH1201 v1.2.0.14 was discovered to contain a stack-based buffer overflow vulnerability via the PPPOEPassword parameter at ip/goform…

CVE-2024-41460 · tenda fh1201_firmware

Tenda FH1201 v1.2.0.14 was discovered to contain a stack-based buffer overflow vulnerability via the entrys parameter at ip/goform/RouteS…

CVE-2024-41464 · tenda fh1201

Tenda FH1201 v1.2.0.14 was discovered to contain a stack-based buffer overflow vulnerability via the mitInterface parameter in ip/goform/…

totolink1 vulnerability on this pageMax CVSS 9.8Priority 58KEV 0

CVE-2024-41319 · totolink a6000r_firmware

TOTOLINK A6000R V1.0.1-B20201211.2000 was discovered to contain a command injection vulnerability via the cmd parameter in the webcmd fun…

EPSS 5%public exploit CVSS 9.8

F-logic1 vulnerability on this pageMax CVSS 9.8Priority 57KEV 0

CVE-2024-7066 · F-logic DataCube3

F-logic DataCube3 HTTP POST Request config_time_sync.php os command injection

EPSS 3%public exploit CVSS 9.8

stitionai1 vulnerability on this pageMax CVSS 9.1Priority 57KEV 0

CVE-2024-40422 · stitionai devika

The snapshot_path parameter in the /api/get-browser-snapshot endpoint in stitionai devika v1 is susceptible to a path traversal attack.

EPSS 11%public exploit CVSS 9.1

opengeos9 vulnerabilities on this pageMax CVSS 9.8Priority 54KEV 0

CVE-2024-41112 · opengeos streamlit-geospatial

Remote code execution in streamlit geospatial in pages/1_📷_Timelapse.py Any Earth Engine ImageCollection option palette

CVE-2024-41113 · opengeos streamlit-geospatial

Remote code execution in streamlit geospatial in pages/1_📷_Timelapse.py Any Earth Engine ImageCollection option vis_params

CVE-2024-41114 · opengeos streamlit-geospatial

Remote code execution in streamlit geospatial in pages/1_📷_Timelapse.py MODIS Gap filled Land Surface Temperature Daily option

CVE-2024-41115 · opengeos streamlit-geospatial

Remote code execution in streamlit geospatial in pages/1_📷_Timelapse.py MODIS Ocean Color SMI option palette

CVE-2024-41116 · opengeos streamlit-geospatial

Remote code execution in streamlit geospatial in pages/1_📷_Timelapse.py MODIS Ocean Color SMI option vis_params

CVE-2024-41117 · opengeos streamlit-geospatial

Remote code execution in streamlit geospatial in pages/10_🌍_Earth_Engine_Datasets.py

CVE-2024-41119 · opengeos streamlit-geospatial

streamlit-geospatial remote code execution in pages/8_🏜️_Raster_Data_Visualization.py

CVE-2024-41120 · opengeos streamlit-geospatial

streamlit-geospatial blind SSRF in pages/9_🔲_Vector_Data_Visualization.py

EPSS 0.8%public exploit CVSS 9.8

CVE-2024-41118 · opengeos streamlit-geospatial

streamlit-geospatial blind SSRF in pages/7_📦_Web_Map_Service.py

EPSS 0.7%public exploit CVSS 9.8

vnotex1 vulnerability on this pageMax CVSS 9.6Priority 54KEV 0

CVE-2024-41662 · vnotex vnote

VNote vulnerable to Markdown XSS, which leads to RCE

EPSS 2%public exploit CVSS 9.6

projectcontour1 vulnerability on this pageMax CVSS 9.8Priority 53KEV 0

CVE-2024-36539 · projectcontour contour

Insecure permissions in contour v1.28.3 allows attackers to access sensitive data and escalate privileges by obtaining the service accoun…

solar-log1 vulnerability on this pageMax CVSS 9.8Priority 50KEV 0

CVE-2024-40117 · solar-log solar-log_1000_firmware

Incorrect access control in Solar-Log 1000 before v2.8.2 and build 52- 23.04.2013 allows attackers to obtain Administrative privileges vi…

EPSS 0.7%public exploit CVSS 9.8

itsourcecode1 vulnerability on this pageMax CVSS 9.8Priority 49KEV 0

CVE-2024-7081 · itsourcecode Tailoring Management System

itsourcecode Tailoring Management System expcatadd.php sql injection

moby1 vulnerability on this pageMax CVSS 10.0Priority 49KEV 0

CVE-2024-41110 · moby moby

Moby authz zero length regression

EPSS 16%CVSS 10.0

Spring1 vulnerability on this pageMax CVSS 9.8Priority 49KEV 0

CVE-2024-37084 · Spring Spring Cloud Data Flow

CVE-2024-37084: Remote code execution in Spring Cloud Data Flow

EPSS 35%CVSS 9.8

layer51 vulnerability on this pageMax CVSS 9.8Priority 48KEV 0

CVE-2024-36535 · layer5 meshery

Insecure permissions in meshery v0.7.51 allows attackers to access sensitive data and escalate privileges by obtaining the service accoun…

EPSS 0.5%public exploit CVSS 9.8

campcodes1 vulnerability on this pageMax CVSS 9.8Priority 46KEV 0

CVE-2024-41551 · campcodes supplier_management_system

CampCodes Supplier Management System v1.0 is vulnerable to SQL injection via Supply_Management_System/admin/view_order_items.php?id= .

EPSS 0.4%public exploit CVSS 9.8

Progress Software Corporation2 vulnerabilities on this pageMax CVSS 9.9Priority 46KEV 0

CVE-2024-6327 · Progress Software Corporation Telerik Report Server

Progress Telerik Report Server Deserialization

EPSS 2%CVSS 9.9

CVE-2024-6096 · Progress Software Corporation Telerik Reporting

Unsafe Deserialization Vulnerability

EPSS 0.9%CVSS 9.8

tightvnc1 vulnerability on this pageMax CVSS 9.1Priority 44KEV 0

CVE-2024-42049 · tightvnc tightvnc

TightVNC (Server for Windows) before 2.8.84 allows attackers to connect to the control pipe via a network connection.

EPSS 2%CVSS 9.1

Softaculous1 vulnerability on this pageMax CVSS 9.8Priority 43KEV 0

CVE-2024-24621 · Softaculous Webuzo

Softaculous Webuzo Authentication Bypass

EPSS 1%CVSS 9.8

NI1 vulnerability on this pageMax CVSS 9.8Priority 42KEV 0

CVE-2024-6806 · NI VeriStand

Missing Authorization Checks In NI VeriStand Gateway For Project Resources

EPSS 1%CVSS 9.8

Apache Software Foundation3 vulnerabilities on this pageMax CVSS 9.8Priority 41KEV 0

CVE-2023-48362 · Apache Software Foundation Apache Drill

Apache Drill: XXE Vulnerability in XML Format Reader

EPSS 0.8%CVSS 9.8

CVE-2024-35161 · Apache Software Foundation Apache Traffic Server

Apache Traffic Server: Incomplete check for chunked trailer section allows request smuggling

EPSS 1.0%CVSS 9.1

CVE-2024-29070 · Apache Software Foundation Apache StreamPark

Apache StreamPark: session not invalidated after logout

EPSS 0.8%CVSS 9.1

Microsoft1 vulnerability on this pageMax CVSS 9.6Priority 41KEV 0

CVE-2024-38164 · Microsoft GroupMe

GroupMe Elevation of Privilege Vulnerability

EPSS 1.0%CVSS 9.6

datex-soft1 vulnerability on this pageMax CVSS 9.8Priority 40KEV 0

CVE-2024-40324 · datex-soft e-staff

A CRLF injection vulnerability in E-Staff v5.1 allows attackers to insert Carriage Return (CR) and Line Feed (LF) characters into input f…

EPSS 0.7%CVSS 9.8

Positron S.R.L1 vulnerability on this pageMax CVSS 9.8Priority 40KEV 0

CVE-2024-7007 · Positron S.R.L Broadcast Signal Processor TRA7005

Authentication Bypass Using an Alternate Path or Channel in Positron Broadcast Signal Processor TRA7005

EPSS 0.6%CVSS 9.8

IBM1 vulnerability on this pageMax CVSS 9.8Priority 39KEV 0

CVE-2024-40689 · IBM InfoSphere Information Server

IBM InfoSphere Information Server SQL injection

dotCMS1 vulnerability on this pageMax CVSS 9.9Priority 38KEV 0

CVE-2024-4447 · dotCMS dotCMS core

In the System → Maintenance tool, the Logged Users tab surfaces sessionId data for all users via the Direct Web Remoting API (UserSession…

EPSS 0.5%CVSS 9.9

fabedge1 vulnerability on this pageMax CVSS 9.8Priority 38KEV 0

CVE-2024-36536 · fabedge fabedge

Insecure permissions in fabedge v0.8.1 allows attackers to access sensitive data and escalate privileges by obtaining the service account…

volcano1 vulnerability on this pageMax CVSS 9.8Priority 38KEV 0

CVE-2024-36533 · volcano volcano

Insecure permissions in volcano v1.8.2 allows attackers to access sensitive data and escalate privileges by obtaining the service account…

xiongwei_technology1 vulnerability on this pageMax CVSS 9.8Priority 38KEV 0

CVE-2024-26520 · xiongwei_technology restaurant_digital_comprehensive_management

An issue in Hangzhou Xiongwei Technology Development Co., Ltd.