The archive.

promokit2 vulnerabilities on this pageMax CVSS 9.8Priority 49KEV 0

CVE-2024-36678 · promokit promokit

In the module "Theme settings" (pk_themesettings) <= 1.8.8 from Promokit.eu for PrestaShop, a guest can perform SQL injection.

EPSS 0.6%public exploit CVSS 9.8

CVE-2024-36684 · promokit pk_customlinks

In the module "Custom links" (pk_customlinks) <= 2.3 from Promokit.eu for PrestaShop, a guest can perform SQL injection.

SourceCodester2 vulnerabilities on this pageMax CVSS 9.8Priority 49KEV 0

CVE-2024-6066 · SourceCodester Best House Rental Management System

SourceCodester Best House Rental Management System payment_report.php sql injection

EPSS 0.5%public exploit CVSS 9.8

CVE-2024-6067 · SourceCodester Music Class Enrollment System

SourceCodester Music Class Enrollment System sql injection

EPSS 0.5%public exploit CVSS 9.8

codeprojects1 vulnerability on this pageMax CVSS 9.4Priority 48KEV 0

CVE-2024-37802 · codeprojects health_care_hospital_management_system

CodeProjects Health Care hospital Management System v1.0 was discovered to contain a SQL injection vulnerability in the Patient Info modu…

EPSS 0.6%public exploit CVSS 9.4

softnews_media_group1 vulnerability on this pageMax CVSS 9.8Priority 48KEV 0

CVE-2024-37699 · softnews_media_group datalife_engine

An issue in DataLife Engine v.17.1 and before is vulnerable to SQL Injection in dboption.

EPSS 0.5%public exploit CVSS 9.8

thimpress2 vulnerabilities on this pageMax CVSS 10.0Priority 48KEV 0

CVE-2024-3605 · thimpress WP Hotel Booking

WP Hotel Booking <= 2.1.0 - Unauthenticated SQL Injection

EPSS 4%CVSS 10.0

CVE-2023-36515 · ThimPress LearnPress

WordPress LearnPress plugin <= 4.2.3 - Unauthenticated Broken Access Control vulnerability

Crocoblock1 vulnerability on this pageMax CVSS 9.8Priority 47KEV 0

CVE-2023-48760 · Crocoblock JetElements For Elementor

WordPress JetElements For Elementor plugin <= 2.6.13 - Unauthenticated Broken Access Control vulnerability

EPSS 0.4%public exploit CVSS 9.8

3uu1 vulnerability on this pageMax CVSS 9.8Priority 42KEV 0

CVE-2024-4098 · 3uu Shariff Wrapper

Shariff Wrapper <= 4.6.13 - Unauthenticated Local File Inclusion

EPSS 1%CVSS 9.8

Devolutions1 vulnerability on this pageMax CVSS 9.8Priority 42KEV 0

CVE-2024-6057 · Devolutions Remote Desktop Manager

Improper authentication in the vault password feature in Devolutions Remote Desktop Manager 2024.1.31.0 and earlier allows an attacker th…

EPSS 0.9%CVSS 9.8

Linux7 vulnerabilities on this pageMax CVSS 10.0Priority 42KEV 0

CVE-2024-38558 · Linux Linux

net: openvswitch: fix overwriting ct original tuple for ICMPv6

EPSS 0.8%CVSS 10.0

CVE-2024-38541 · Linux Linux

of: module: add buffer overflow check in of_modalias()

EPSS 0.9%CVSS 9.8

CVE-2024-38544 · Linux Linux

RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt

EPSS 0.8%CVSS 9.8

CVE-2024-38570 · Linux Linux

gfs2: Fix potential glock use-after-free on unmount

CVE-2024-38612 · Linux Linux

ipv6: sr: fix invalid unregister error path

CVE-2021-47587 · Linux Linux

net: systemport: Add global locking for descriptor lifecycle

CVE-2022-48711 · Linux Linux

tipc: improve size validations for received domain records

deepjavalibrary1 vulnerability on this pageMax CVSS 10.0Priority 41KEV 0

CVE-2024-37902 · deepjavalibrary djl

Path thraversal in DeepJavaLibrary

EPSS 0.8%CVSS 10.0

sirv1 vulnerability on this pageMax CVSS 9.9Priority 41KEV 0

CVE-2024-5853 · sirv Image Optimizer, Resizer and CDN – Sirv

Image Optimizer, Resizer and CDN – Sirv <= 7.2.6 - Authenticated (Contributor+) Arbitrary File Upload

EPSS 0.8%CVSS 9.9

wordpresschef1 vulnerability on this pageMax CVSS 9.8Priority 41KEV 0

CVE-2024-3229 · wordpresschef Salon Booking System – Free Version

Salon Booking System <= 10.2 - Unauthenticated Arbitrary File Upload

EPSS 0.9%CVSS 9.8

Openfind1 vulnerability on this pageMax CVSS 9.8Priority 40KEV 0

CVE-2024-6048 · Openfind MailGates 5.0

Openfind MailGates and MailAudit - OS Command Injection

webinnane1 vulnerability on this pageMax CVSS 9.8Priority 40KEV 0

CVE-2024-5432 · webinnane Lifeline Donation

Lifeline Donation <= 1.2.6 - Authentication Bypass

Brainstorm Force1 vulnerability on this pageMax CVSS 9.8Priority 39KEV 0

CVE-2023-36684 · Brainstorm Force Convert Pro

WordPress Convert Pro plugin <= 1.7.5 - Broken Access Control vulnerability

EPSS 0.6%CVSS 9.8

WooCommerce1 vulnerability on this pageMax CVSS 9.8Priority 39KEV 0

CVE-2023-35049 · WooCommerce WooCommerce Stripe Payment Gateway

WordPress WooCommerce Stripe Payment Gateway plugin <= 7.4.0 - Unauthenticated Broken Access Control vulnerability

EPSS 0.6%CVSS 9.8

RICOH COMPANY, LTD.1 vulnerability on this pageMax CVSS 9.8Priority 38KEV 0

CVE-2024-37124 · RICOH COMPANY, LTD. Ricoh Streamline NX PC Client

Use of potentially dangerous function issue exists in Ricoh Streamline NX PC Client.

Saturday Drive1 vulnerability on this pageMax CVSS 9.8Priority 38KEV 0

CVE-2023-38386 · Saturday Drive Ninja Forms

WordPress Ninja Forms plugin <= 3.6.25 - Contributor+ Broken Access Control vulnerability

VulDB1 vulnerability on this pageMax CVSS 9.8Priority 38KEV 0

CVE-2024-6083 · VulDB

PHPVibe Media Upload Page upload-mp3.php unrestricted upload

CVE-2024-364801 vulnerability on this pageMax CVSS 9.8Priority 37KEV 0

CVE-2024-36480 · CVE-2024-36480 Ricoh Streamline NX PC Client

Use of hard-coded credentials issue exists in Ricoh Streamline NX PC Client ver.3.7.2 and earlier.

Hennessey Digital1 vulnerability on this pageMax CVSS 9.8Priority 37KEV 0

CVE-2022-45832 · Hennessey Digital Attorney

WordPress Attorney theme <= 3 - Unauth. Arbitrary Content Deletion vulnerability

prestashopmodules1 vulnerability on this pageMax CVSS 9.8Priority 37KEV 0

CVE-2024-33836 · prestashopmodules jamarketplace

In the module "JA Marketplace" (jamarketplace) up to version 9.0.1 from JA Module for PrestaShop, a guest can upload files with extension…