The archive.

vpl1 vulnerability on this pageMax CVSS 9.8Priority 54KEV 0

CVE-2024-34313 · vpl jail_system

An issue in VPL Jail System up to v4.0.2 allows attackers to execute a directory traversal via a crafted request to a public endpoint.

EPSS 1%public exploit CVSS 9.8

parisneo1 vulnerability on this pageMax CVSS 9.8Priority 53KEV 0

CVE-2024-5443 · parisneo parisneo/lollms

Remote Code Execution via Path Traversal in parisneo/lollms

EPSS 1%public exploit CVSS 9.8

itsourcecode9 vulnerabilities on this pageMax CVSS 9.8Priority 50KEV 0

CVE-2024-6190 · itsourcecode Farm Management System

itsourcecode Farm Management System Login index.php sql injection

CVE-2024-6218 · itsourcecode Vehicle Management System

itsourcecode Vehicle Management System busprofile.php sql injection

EPSS 0.7%public exploit CVSS 9.8

CVE-2024-6191 · itsourcecode Student Management System

itsourcecode Student Management System Login Page login.php sql injection

CVE-2024-6192 · itsourcecode Loan Management System

itsourcecode Loan Management System Login Page login.php sql injection

CVE-2024-6193 · itsourcecode Vehicle Management System

itsourcecode Vehicle Management System driverprofile.php sql injection

CVE-2024-6196 · itsourcecode Banking Management System

itsourcecode Banking Management System admin_class.php sql injection

CVE-2024-6194 · itsourcecode Tailoring Management System

itsourcecode Tailoring Management System editmeasurement.php sql injection

EPSS 0.4%public exploit CVSS 9.8

CVE-2024-6195 · itsourcecode Tailoring Management System

itsourcecode Tailoring Management System orderadd.php sql injection

EPSS 0.4%public exploit CVSS 9.8

CVE-2024-6253 · itsourcecode Online Food Ordering System

itsourcecode Online Food Ordering System purchase.php sql injection

EPSS 0.6%CVSS 9.8

laurent221 vulnerability on this pageMax CVSS 9.0Priority 50KEV 0

CVE-2023-45673 · laurent22 joplin

Arbitrary code execution on click of PDF links in Joplin

EPSS 1%public exploit CVSS 9.0

SourceCodester2 vulnerabilities on this pageMax CVSS 9.8Priority 50KEV 0

CVE-2024-6213 · SourceCodester Food Ordering Management System

SourceCodester Food Ordering Management System Login Panel login.php sql injection

EPSS 0.7%public exploit CVSS 9.8

CVE-2024-6280 · SourceCodester Simple Online Bidding System

SourceCodester Simple Online Bidding System unrestricted upload

EPSS 0.7%public exploit CVSS 9.8

lahirudanushka1 vulnerability on this pageMax CVSS 9.8Priority 49KEV 0

CVE-2024-6268 · lahirudanushka School Management System

lahirudanushka School Management System Login Page login.php sql injection

pearadmin2 vulnerabilities on this pageMax CVSS 9.8Priority 48KEV 0

CVE-2024-6241 · pearadmin pear_admin_boot

Pear Admin Boot getDictItems sql injection

CVE-2024-6266 · pearadmin pear_admin_boot

Pear Admin Boot loadDictItem sql injection

promokit1 vulnerability on this pageMax CVSS 9.8Priority 48KEV 0

CVE-2024-36681 · promokit pk_isotope

SQL Injection vulnerability in the module "Isotope" (pk_isotope) <=1.7.3 from Promokit.eu for PrestaShop allows attackers to obtain sensi…

xwiki1 vulnerability on this pageMax CVSS 9.1Priority 48KEV 0

CVE-2024-37899 · xwiki xwiki-platform

Disabling a user account changes its author, allowing RCE from user account in XWiki

EPSS 0.7%public exploit CVSS 9.1

Apache Software Foundation1 vulnerability on this pageMax CVSS 9.1Priority 46KEV 0

CVE-2024-29868 · Apache Software Foundation Apache StreamPipes

Apache StreamPipes, Apache StreamPipes: Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG) in Recovery Token Generation

EPSS 6%CVSS 9.1

Faronics1 vulnerability on this pageMax CVSS 9.1Priority 45KEV 0

CVE-2024-36497 · Faronics WINSelect (Standard + Enterprise)

Unhashed Storage of Password

EPSS 0.5%public exploit CVSS 9.1

Artbees1 vulnerability on this pageMax CVSS 9.8Priority 44KEV 0

CVE-2023-38389 · Artbees JupiterX Core

WordPress Jupiter X Core plugin <= 3.3.8 - Unauthenticated Account Takeover vulnerability

EPSS 1%CVSS 9.8

gnu1 vulnerability on this pageMax CVSS 9.8Priority 44KEV 0

CVE-2024-39331 · gnu emacs

In Emacs before 29.4, org-link-expand-abbrev in lisp/ol.el expands a %(...) link abbrev even when it specifies an unsafe function, such a…

EPSS 1%CVSS 9.8

asus1 vulnerability on this pageMax CVSS 9.8Priority 41KEV 0

CVE-2024-33278 · asus rt-ax88u_firmware

Buffer Overflow vulnerability in ASUS router RT-AX88U with firmware versions v3.0.0.4.388_24198 allows a remote attacker to execute arbit…

EPSS 0.8%CVSS 9.8

prestashop3 vulnerabilities on this pageMax CVSS 10.0Priority 41KEV 0

CVE-2023-50029 · prestashop m4_pdf

PHP Injection vulnerability in the module "M4 PDF Extensions" (m4pdf) up to version 3.3.2 from PrestaAddons for PrestaShop allows attacke…

EPSS 0.8%CVSS 10.0

CVE-2024-34989 · prestashop prestashop

In the module RSI PDF/HTML catalog evolution (prestapdf) <= 7.0.0 from RSI for PrestaShop, a guest can perform SQL injection via `PrestaP…

CVE-2024-34988 · prestashop ask_for_a_quote

SQL injection vulnerability in the module "Complete for Create a Quote in Frontend + Backend Pro" (askforaquotemodul) <= 1.0.51 from Buy…

EPSS 0.4%CVSS 9.8

themifyme1 vulnerability on this pageMax CVSS 9.8Priority 41KEV 0

CVE-2024-6027 · themifyme Themify – WooCommerce Product Filter

Themify - WooCommerce Product Filter <= 1.4.9 - Unauthenticated SQL Injection via conditions Parameter

EPSS 0.8%CVSS 9.8

Adminer1 vulnerability on this pageMax CVSS 9.8Priority 40KEV 0

CVE-2023-45197 · Adminer Adminer

Adminer and AdminerEvo vulnerable to directory traversal and file upload

axiros1 vulnerability on this pageMax CVSS 9.8Priority 40KEV 0

CVE-2024-33898 · axiros axess

Axiros AXESS Auto Configuration Server (ACS) 4.x and 5.0.0 is affected by an Incorrect Access Control vulnerability.

icegram1 vulnerability on this pageMax CVSS 9.8Priority 40KEV 0

CVE-2024-5756 · icegram Email Subscribers & Newsletters – Email Marketing, Post Notifications & Newsletter Plugin for WordPress

Icegram Express - Email Subscribers, Newsletters and Marketing Automation Plugin <= 5.7.23 - Unauthenticated SQL Injection via optin

Linux3 vulnerabilities on this pageMax CVSS 9.8Priority 40KEV 0

CVE-2024-36288 · Linux Linux

SUNRPC: Fix loop termination condition in gss_free_in_token_pages()

CVE-2024-38623 · Linux Linux

fs/ntfs3: Use variable length array instead of fixed size

CVE-2022-48716 · Linux Linux

ASoC: codecs: wcd938x: fix incorrect used of portid

h3c1 vulnerability on this pageMax CVSS 9.8Priority 39KEV 0

CVE-2024-38902 · h3c magic_r230

H3C Magic R230 V100R002 was discovered to contain a hardcoded password vulnerability in /etc/shadow, which allows attackers to log in as…

InstaWP1 vulnerability on this pageMax CVSS 10.0Priority 39KEV 0

CVE-2024-37228 · InstaWP InstaWP Connect

WordPress InstaWP Connect plugin <= 0.1.0.38 - Arbitrary File Upload vulnerability

EPSS 0.5%CVSS 10.0

Membership Software1 vulnerability on this pageMax CVSS 9.9Priority 39KEV 0

CVE-2024-37109 · Membership Software WishList Member X

WordPress WishList Member X plugin < 3.26.7 - Authenticated Arbitrary PHP Code Execution vulnerability

EPSS 0.5%CVSS 9.9

virtosoftware1 vulnerability on this pageMax CVSS 9.8Priority 39KEV 0

CVE-2024-33879 · virtosoftware virto_bulk_file_download

An issue was discovered in VirtoSoftware Virto Bulk File Download 5.5.44 for SharePoint 2019.

EPSS 0.6%CVSS 9.8

Next4Biz CRM & BPM Software1 vulnerability on this pageMax CVSS 9.8Priority 38KEV 0

CVE-2024-5683 · Next4Biz CRM & BPM Software Business Process Manangement (BPM)

Remote Code Execution in Next4Biz's BPM