Critical vulnerability archive — page 434

SourceCodester3 vulnerabilities on this pageMax CVSS 9.8Priority 59KEV 0

CVE-2024-6802 · SourceCodester Computer Laboratory Management System

SourceCodester Computer Laboratory Management System Master.php sql injection

EPSS 9%public exploit CVSS 9.8

CVE-2024-6801 · SourceCodester Online Student Management System

SourceCodester Online Student Management System add-students.php unrestricted upload

EPSS 0.8%public exploit CVSS 9.8

CVE-2024-40394 · sourcecodester simple_library_management_system

Simple Library Management System Project Using PHP/MySQL v1.0 was discovered to contain an arbitrary file upload vulnerability via the co…

EPSS 0.7%public exploit CVSS 9.8

jupyterlab1 vulnerability on this pageMax CVSS 10.0Priority 53KEV 0

CVE-2024-39700 · jupyterlab extension-template

Remote Code Execution (RCE) vulnerability in jupyterlab extension template `update-integration-tests` GitHub Action

EPSS 1%public exploit CVSS 10.0

Cisco2 vulnerabilities on this pageMax CVSS 10.0Priority 50KEV 0

CVE-2024-20419 · Cisco Cisco Smart Software Manager On-Prem

A vulnerability in the authentication system of Cisco Smart Software Manager On-Prem (SSM On-Prem) could allow an unauthenticated, remote…

EPSS 81%CVSS 10.0

CVE-2024-20401 · Cisco Cisco Secure Email

A vulnerability in the content scanning and message filtering features of Cisco Secure Email Gateway could allow an unauthenticated, remo…

EPSS 2%CVSS 9.8

itsourcecode2 vulnerabilities on this pageMax CVSS 9.8Priority 50KEV 0

CVE-2024-6808 · itsourcecode Simple Task List

itsourcecode Simple Task List signUp.php insertUserRecord sql injection

EPSS 0.7%public exploit CVSS 9.8

CVE-2024-6803 · itsourcecode Document Management System

itsourcecode Document Management System insert.php sql injection

EPSS 0.5%public exploit CVSS 9.8

nanjing_xingyuantu_technology1 vulnerability on this pageMax CVSS 9.8Priority 50KEV 0

CVE-2024-40425 · nanjing_xingyuantu_technology sparkshop

File Upload vulnerability in Nanjin Xingyuantu Technology Co Sparkshop (Spark Mall B2C Mall v.1.1.6 and before allows a remote attacker t…

EPSS 0.7%public exploit CVSS 9.8

open5gs2 vulnerabilities on this pageMax CVSS 9.8Priority 50KEV 0

CVE-2024-40130 · open5gs open5gs

open5gs v2.6.4 is vulnerable to Buffer Overflow.

EPSS 0.6%public exploit CVSS 9.8

CVE-2024-40129 · open5gs open5gs

Open5GS v2.6.4 is vulnerable to Buffer Overflow.

EPSS 0.5%public exploit CVSS 9.8

tenda1 vulnerability on this pageMax CVSS 9.8Priority 50KEV 0

CVE-2024-33180 · tenda ac18

Tenda AC18 V15.03.3.10_EN was discovered to contain a stack-based buffer overflow vulnerability via the deviceId parameter at ip/goform/s…

EPSS 0.6%public exploit CVSS 9.8

realmag7771 vulnerability on this pageMax CVSS 9.8Priority 49KEV 0

CVE-2024-6457 · realmag777 HUSKY – Products Filter Professional for WooCommerce

HUSKY - Products Filter Professional for WooCommerce <= 1.3.6 - Unauthenticated Time-Based SQL Injection

EPSS 20%CVSS 9.8

szlbt1 vulnerability on this pageMax CVSS 9.8Priority 49KEV 0

CVE-2024-40535 · szlbt lbt-t300-t400_firmware

Shenzhen Libituo Technology Co., Ltd LBT-T300-T400 v3.2 was discovered to contain a stack overflow via the apn_name_3g parameter in the c…

EPSS 0.6%public exploit CVSS 9.8

tendacn3 vulnerabilities on this pageMax CVSS 9.8Priority 49KEV 0

CVE-2024-33182 · tendacn ac18_firmware

Tenda AC18 V15.03.3.10_EN was discovered to contain a stack-based buffer overflow vulnerability via the deviceId parameter at ip/goform/a…

EPSS 0.6%public exploit CVSS 9.8

CVE-2024-35338 · tendacn i29_firmware

Tenda i29V1.0 V1.0.0.5 was discovered to contain a hardcoded password for root.

EPSS 0.5%public exploit CVSS 9.8

CVE-2024-40515 · tendacn ax2_pro

An issue in SHENZHEN TENDA TECHNOLOGY CO.,LTD Tenda AX2pro V16.03.29.48_cn allows a remote attacker to execute arbitrary code via the Rou…

EPSS 0.7%CVSS 9.8

zhengdon1 vulnerability on this pageMax CVSS 9.8Priority 49KEV 0

CVE-2024-6220 · zhengdon 简数采集器

简数采集器 (Keydatas) <= 2.5.2 - Unauthenticated Arbitrary File Upload

EPSS 35%CVSS 9.8

Apache Software Foundation1 vulnerability on this pageMax CVSS 9.8Priority 48KEV 0

CVE-2024-39887 · Apache Software Foundation Apache Superset

Apache Superset: Improper SQL authorisation, parse not checking for specific engine functions

EPSS 5%CVSS 9.8

Google3 vulnerabilities on this pageMax CVSS 9.6Priority 48KEV 0

CVE-2024-6779 · Google Chrome

Out of bounds memory access in V8 in Google Chrome prior to 126.0.6478.182 allowed a remote attacker to potentially perform a sandbox esc…

EPSS 6%CVSS 9.6

CVE-2023-7012 · Google Chrome

Insufficient data validation in Permission Prompts in Google Chrome prior to 117.0.5938.62 allowed an attacker who convinced a user to in…

EPSS 0.3%public exploit CVSS 9.6

CVE-2023-4860 · Google Chrome

Inappropriate implementation in Skia in Google Chrome prior to 115.0.5790.98 allowed a remote attacker who had compromised the renderer p…

EPSS 0.4%CVSS 9.6

pharmacy_medical_store_and_sale_point_project1 vulnerability on this pageMax CVSS 9.8Priority 48KEV 0

CVE-2024-40392 · pharmacy_medical_store_and_sale_point_project pharmacy_medical_store_and_sale_point

SourceCodester Pharmacy/Medical Store Point of Sale System Using PHP/MySQL and Bootstrap Framework with Source Code 1.0 was discovered to…

EPSS 0.5%public exploit CVSS 9.8

SolarWinds8 vulnerabilities on this pageMax CVSS 9.6Priority 48KEV 0

CVE-2024-23469 · SolarWinds Access Rights Manager

SolarWinds Access Rights Manager Exposed Dangerous Method Remote Code Execution Vulnerability

EPSS 18%CVSS 9.6

CVE-2024-23472 · SolarWinds Access Rights Manager

SolarWinds Access Rights Manager Directory Traversal Arbitrary File Deletion and Information Disclosure Vulnerability

EPSS 19%CVSS 9.6

CVE-2024-28074 · SolarWinds Access Rights Manager

SolarWinds Access Rights Manager (ARM) Internal Deserialization Remote Code Execution Vulnerability

EPSS 11%CVSS 9.6

CVE-2024-23466 · SolarWinds Access Rights Manager

SolarWinds Access Rights Manager Directory Traversal Remote Code Execution Vulnerability

EPSS 3%CVSS 9.6

CVE-2024-23467 · SolarWinds Access Rights Manager

SolarWinds Access Rights Manager Directory Traversal Remote Code Execution Vulnerability

EPSS 3%CVSS 9.6

CVE-2024-23475 · SolarWinds Access Rights Manager

SolarWinds Access Rights Manager Directory Traversal and Information Disclosure Vulnerability

EPSS 2%CVSS 9.6

CVE-2024-23471 · SolarWinds Access Rights Manager

SolarWinds Access Rights Manager (ARM) CreateFile Directory Traversal Remote Code Execution Vulnerability

EPSS 1%CVSS 9.6

CVE-2024-23470 · SolarWinds Access Rights Manager

SolarWinds Access Rights Manager (ARM) UserScriptHumster Exposed Dangerous Method Remote Command Execution Vulnerability

EPSS 1%CVSS 9.6

thinksaas1 vulnerability on this pageMax CVSS 9.8Priority 48KEV 0

CVE-2024-40456 · thinksaas thinksaas

ThinkSAAS v3.7.0 was discovered to contain a SQL injection vulnerability via the name parameter at \system\action\update.php.

EPSS 0.5%public exploit CVSS 9.8

ManageEngine1 vulnerability on this pageMax CVSS 9.8Priority 46KEV 0

CVE-2024-5471 · ManageEngine DDI Central

Agent takeover

EPSS 2%CVSS 9.8

Oracle Corporation2 vulnerabilities on this pageMax CVSS 9.8Priority 43KEV 0

CVE-2024-21181 · Oracle Corporation WebLogic Server

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core).

EPSS 1%CVSS 9.8

CVE-2024-21175 · Oracle Corporation WebLogic Server

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core).

EPSS 0.4%CVSS 9.1

Linux6 vulnerabilities on this pageMax CVSS 9.8Priority 42KEV 0

2531531 vulnerability on this pageMax CVSS 9.8Priority 41KEV 0

CVE-2024-39173 · 253153 calculator-boilerplate

calculator-boilerplate v1.0 was discovered to contain a remote code execution (RCE) vulnerability via the eval function at /routes/calcul…

EPSS 0.8%CVSS 9.8

acassen1 vulnerability on this pageMax CVSS 9.8Priority 40KEV 0

CVE-2024-41184 · acassen keepalived

In the vrrp_ipsets_handler handler (fglobal_parser.c) of keepalived through 2.3.1, an integer overflow can occur.

EPSS 0.6%CVSS 9.8

Century Systems Co., Ltd.2 vulnerabilities on this pageMax CVSS 9.8Priority 40KEV 0

CVE-2024-36491 · Century Systems Co., Ltd. FutureNet NXR-1300 series

FutureNet NXR series, VXR series and WXR series provided by Century Systems Co., Ltd.

EPSS 0.7%CVSS 9.8

CVE-2024-31070 · Century Systems Co., Ltd. FutureNet NXR-1300 series

Initialization of a resource with an insecure default vulnerability in FutureNet NXR series, VXR series and WXR series provided by Centur…

EPSS 0.8%CVSS 9.1

Hewlett Packard Enterprise (HPE)1 vulnerability on this pageMax CVSS 9.8Priority 40KEV 0

CVE-2024-22442 · Hewlett Packard Enterprise (HPE) HPE 3PAR Service Processor

The vulnerability could be remotely exploited to bypass authentication.

EPSS 0.6%CVSS 9.8

mitre1 vulnerability on this pageMax CVSS 9.8Priority 39KEV 0

CVE-2024-40393 · mitre

Online Clinic Management System In PHP With Free Source code v1.0 was discovered to contain a SQL injection vulnerability via the user pa…

EPSS 0.6%CVSS 9.8

dlink1 vulnerability on this pageMax CVSS 9.3Priority 36KEV 0

CVE-2024-40505 · dlink dap-1650_firmware

Directory Traversal vulnerability in D-Link DAP-1650 Firmware v.1.03 allows a local attacker to escalate privileges via the hedwig.cgi co…

EPSS 0.4%CVSS 9.3

PureStorage1 vulnerability on this pageMax CVSS 9.3Priority 35KEV 0

CVE-2023-4976 · PureStorage FlashBlade

FlashBlade Authentication Mechanism Vulnerability

EPSS 0.4%CVSS 9.3

Open Mainframe Project1 vulnerability on this pageMax CVSS 9.0Priority 31KEV 0

CVE-2024-6834 · Open Mainframe Project Zowe

Imperative Local Command Injection allows Activity Masking

EPSS 0.3%CVSS 9.0

The archive.