The archive.

CVE-2024-27144 · Toshiba Tec Corporation Toshiba Tec e-Studio multi-function peripheral (MFP)

Pre-authenticated Remote Code Execution

CVE-2024-27145 · Toshiba Tec Corporation Toshiba Tec e-Studio multi-function peripheral (MFP)

Multiple Post-authenticated Remote Code Execution

mitre4 vulnerabilities on this pageMax CVSS 9.8Priority 57KEV 0

CVE-2024-37642 · mitre

TRENDnet TEW-814DAP v1_(FW1.01B01) was discovered to contain a command injection vulnerability via the ipv4_ping, ipv6_ping parameter at…

EPSS 11%public exploit CVSS 9.1

CVE-2023-37058 · mitre

Insecure Permissions vulnerability in JLINK Unionman Technology Co.

EPSS 0.6%CVSS 9.8

CVE-2024-38466 · mitre

Shenzhen Guoxin Synthesis image system before 8.3.0 has a 123456Qw default password.

EPSS 0.4%CVSS 9.8

CVE-2024-38468 · mitre

Shenzhen Guoxin Synthesis image system before 8.3.0 allows unauthorized password resets via the resetPassword API.

EPSS 0.4%CVSS 9.8

SourceCodester2 vulnerabilities on this pageMax CVSS 9.8Priority 56KEV 0

CVE-2024-34833 · sourcecodester payroll_management_system

Sourcecodester Payroll Management System v1.0 is vulnerable to File Upload.

EPSS 2%public exploit CVSS 9.8

CVE-2024-6043 · SourceCodester Best House Rental Management System

SourceCodester Best House Rental Management System admin_class.php login sql injection

EPSS 2%CVSS 9.8

gnachman1 vulnerability on this pageMax CVSS 9.8Priority 55KEV 0

CVE-2024-38396 · gnachman iterm2

An issue was discovered in iTerm2 3.5.x before 3.5.2.

EPSS 2%public exploit CVSS 9.8

netatalk2 vulnerabilities on this pageMax CVSS 9.8Priority 52KEV 0

CVE-2024-38439 · netatalk netatalk

Netatalk before 3.2.1 has an off-by-one error and resultant heap-based buffer overflow because of setting ibuf[PASSWDLEN] to '\0' in FPLo…

EPSS 0.9%public exploit CVSS 9.8

CVE-2024-38441 · netatalk netatalk

Netatalk before 3.2.1 has an off-by-one error and resultant heap-based buffer overflow because of setting ibuf[len] to '\0' in FPMapName…

cdr01 vulnerability on this pageMax CVSS 9.8Priority 51KEV 0

CVE-2024-36580 · cdr0 sg

A Prototype Pollution issue in cdr0 sg 1.0.10 allows an attacker to execute arbitrary code.

EPSS 0.8%public exploit CVSS 9.8

almela1 vulnerability on this pageMax CVSS 9.8Priority 50KEV 0

CVE-2024-36573 · almela obx

almela obx before v.0.0.4 has a Prototype Pollution issue which allows arbitrary code execution via the obx/build/index.js:656), reduce (…

EPSS 0.7%public exploit CVSS 9.8

itsourcecode10 vulnerabilities on this pageMax CVSS 9.8Priority 50KEV 0

CVE-2024-5983 · itsourcecode Online Bookstore

itsourcecode Online Bookstore bookPerPub.php sql injection

CVE-2024-6042 · itsourcecode Real Estate Management System

itsourcecode Real Estate Management System property-detail.php sql injection

CVE-2024-6009 · itsourcecode Event Calendar

itsourcecode Event Calendar process.php regDelete sql injection

CVE-2024-6013 · itsourcecode Online Book Store

itsourcecode Online Book Store admin_delete.php sql injection

CVE-2024-6014 · itsourcecode Document Management System

itsourcecode Document Management System edithis.php sql injection

CVE-2024-6015 · itsourcecode Online House Rental System

itsourcecode Online House Rental System manage_user.php sql injection

CVE-2024-6016 · itsourcecode Online Laundry Management System

itsourcecode Online Laundry Management System admin_class.php sql injection

CVE-2024-5984 · itsourcecode Online Bookstore

itsourcecode Online Bookstore book.php sql injection

EPSS 0.8%CVSS 9.8

CVE-2024-5981 · itsourcecode Online House Rental System

itsourcecode Online House Rental System manage_user.php sql injection

EPSS 0.5%CVSS 9.8

CVE-2024-37831 · itsourcecode payroll_management_system

Itsourcecode Payroll Management System 1.0 is vulnerable to SQL Injection in payroll_items.php via the ID parameter.

EPSS 0.4%CVSS 9.8

notabotai1 vulnerability on this pageMax CVSS 9.8Priority 50KEV 0

CVE-2024-36575 · notabotai getsetprop

A Prototype Pollution issue in getsetprop 1.1.0 allows an attacker to execute arbitrary code via global.accessor.

totolink1 vulnerability on this pageMax CVSS 9.8Priority 50KEV 0

CVE-2024-37637 · totolink a3700r

TOTOLINK A3700R V9.1.2u.6165_20211012 was discovered to contain a stack overflow via ssid5g in the function setWizardCfg.

EPSS 0.7%public exploit CVSS 9.8

ASUS2 vulnerabilities on this pageMax CVSS 9.8Priority 49KEV 0

CVE-2024-3080 · ASUS ZenWiFi XT8

ASUS Router - Improper Authentication

EPSS 43%CVSS 9.8

CVE-2024-3912 · ASUS DSL-N17U

ASUS Router - Upload arbitrary firmware

ghost1 vulnerability on this pageMax CVSS 9.1Priority 49KEV 0

CVE-2024-34451 · ghost ghost

Ghost through 5.85.1 allows remote attackers to bypass an authentication rate-limit protection mechanism by using many X-Forwarded-For he…

EPSS 0.8%public exploit CVSS 9.1

Netentsec1 vulnerability on this pageMax CVSS 9.8Priority 49KEV 0

CVE-2024-6007 · Netentsec NS-ASG Application Security Gateway

Netentsec NS-ASG Application Security Gateway deleteiscgwrouteconf.php sql injection

strimza_project1 vulnerability on this pageMax CVSS 9.8Priority 48KEV 0

CVE-2024-36543 · strimza_project kafka_connect_rest_api

Incorrect access control in the Kafka Connect REST API in the STRIMZI Project 0.41.0 and earlier allows an attacker to deny the service f…

terra-master1 vulnerability on this pageMax CVSS 9.4Priority 47KEV 0

CVE-2024-34539 · terra-master tos

Hardcoded credentials in TerraMaster TOS firmware through 5.1 allow a remote attacker to successfully login to the mail or webmail server.

EPSS 0.5%public exploit CVSS 9.4

themeisle1 vulnerability on this pageMax CVSS 9.9Priority 47KEV 0

CVE-2024-3105 · themeisle Woody Code Snippets – Insert PHP, CSS, JS, and Header/Footer Scripts

Woody code snippets – Insert Header Footer Code, AdSense Ads <= 2.5.0 -Authenticated (Contributor+) Remote Code Execution

EPSS 3%CVSS 9.9

iterm21 vulnerability on this pageMax CVSS 9.8Priority 44KEV 0

CVE-2024-38395 · iterm2 iterm2

In iTerm2 before 3.5.2, the "Terminal may report window title" setting is not honored, and thus remote code execution might occur but "is…

flightbycanto1 vulnerability on this pageMax CVSS 9.8Priority 42KEV 0

CVE-2024-4936 · flightbycanto Canto

Canto <= 3.0.8 - Unauthenticated Remote File Inclusion

jlink1 vulnerability on this pageMax CVSS 9.8Priority 42KEV 0

CVE-2023-37057 · jlink ax1800

An issue in JLINK Unionman Technology Co.

mcnardelli1 vulnerability on this pageMax CVSS 9.8Priority 42KEV 0

CVE-2024-5577 · mcnardelli Where I Was, Where I Will Be

Where I Was, Where I Will Be <= 1.1.1 - Unauthenticated Remote File Inclusion

Trellix1 vulnerability on this pageMax CVSS 9.8Priority 42KEV 0

CVE-2024-5671 · Trellix Intrusion Prevention System (IPS) Manager

Insecure Deserialization in some workflows of the IPS Manager allows unauthenticated remote attackers to perform arbitrary code execution…