The archive.

CVE-2024-26029 · Adobe Adobe Experience Manager

Adobe Experience Manager | Improper Access Control (CWE-284)

CVE-2024-34108 · Adobe Adobe Commerce

Large attack surface through legit webhook usage in Adobe Commerce

EPSS 1%CVSS 9.1

CVE-2024-30300 · Adobe Adobe Framemaker Publishing Server

Tenable Vulnerability Disclosure | Sensitive Information Disclosure Via Fake FMPS Worker

Unknown1 vulnerability on this pageMax CVSS 9.8Priority 59KEV 0

CVE-2024-3552 · Unknown Web Directory Free

Web Directory Free < 1.7.0 - Unauthenticated SQL Injection

EPSS 67%public exploit CVSS 9.8

gunet1 vulnerability on this pageMax CVSS 9.8Priority 57KEV 0

CVE-2024-31777 · gunet open_eclass_platform

File Upload vulnerability in openeclass v.3.15 and before allows an attacker to execute arbitrary code via a crafted file to the certbadg…

EPSS 4%public exploit CVSS 9.8

boelter1 vulnerability on this pageMax CVSS 9.1Priority 54KEV 0

CVE-2024-36840 · boelter blue_system_management

SQL Injection vulnerability in Boelter Blue System Management v.1.3 allows a remote attacker to execute arbitrary code and obtain sensiti…

EPSS 2%public exploit CVSS 9.1

itsourcecode2 vulnerabilities on this pageMax CVSS 9.8Priority 50KEV 0

CVE-2024-37849 · itsourcecode billing_system

A SQL Injection vulnerability in itsourcecode Billing System 1.0 allows a local attacker to execute arbitrary code in process.php via the…

EPSS 0.7%public exploit CVSS 9.8

CVE-2024-5898 · itsourcecode Payroll Management System

itsourcecode Payroll Management System print_payroll.php sql injection

EPSS 0.6%public exploit CVSS 9.8

parisneo1 vulnerability on this pageMax CVSS 9.1Priority 50KEV 0

CVE-2024-4315 · parisneo parisneo/lollms

LFI Vulnerability due to Lack of Path Sanitization in parisneo/lollms

EPSS 1%public exploit CVSS 9.1

totolink3 vulnerabilities on this pageMax CVSS 9.8Priority 50KEV 0

CVE-2024-37632 · totolink a3700r_firmware

TOTOLINK A3700R V9.1.2u.6165_20211012 was discovered to contain a stack overflow via the password parameter in function loginAuth .

EPSS 0.6%public exploit CVSS 9.8

CVE-2024-37634 · totolink a3700r_firmware

TOTOLINK A3700R V9.1.2u.6165_20211012 was discovered to contain a stack overflow via ssid in the function setWiFiEasyCfg.

EPSS 0.7%public exploit CVSS 9.8

CVE-2024-37635 · totolink a3700r_firmware

TOTOLINK A3700R V9.1.2u.6165_20211012 was discovered to contain a stack overflow via ssid in the function setWiFiBasicCfg

EPSS 0.7%public exploit CVSS 9.8

wedevs1 vulnerability on this pageMax CVSS 10.0Priority 50KEV 0

CVE-2024-3922 · wedevs Dokan Pro

Dokan Pro <= 3.10.3 - Unauthenticated SQL Injection

EPSS 53%CVSS 10.0

Microsoft1 vulnerability on this pageMax CVSS 9.8Priority 49KEV 0

CVE-2024-30080 · Microsoft Windows 10 Version 1507

Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability

EPSS 43%CVSS 9.8

SourceCodester5 vulnerabilities on this pageMax CVSS 9.8Priority 49KEV 0

CVE-2024-5895 · SourceCodester Employee and Visitor Gate Pass Logging System

SourceCodester Employee and Visitor Gate Pass Logging System delete_users sql injection

EPSS 0.6%public exploit CVSS 9.8

CVE-2024-5894 · SourceCodester Online Eyewear Shop

SourceCodester Online Eyewear Shop manage_product.php sql injection

EPSS 0.6%CVSS 9.8

CVE-2024-5896 · SourceCodester Employee and Visitor Gate Pass Logging System

SourceCodester Employee and Visitor Gate Pass Logging System save_users sql injection

CVE-2024-5976 · SourceCodester Employee and Visitor Gate Pass Logging System

SourceCodester Employee and Visitor Gate Pass Logging System log_employee sql injection

CVE-2024-5893 · SourceCodester Cab Management System

SourceCodester Cab Management System sql injection

instawp1 vulnerability on this pageMax CVSS 9.8Priority 48KEV 0

CVE-2024-4898 · instawp InstaWP Connect – 1-click WP Staging & Migration

InstaWP Connect – 1-click WP Staging & Migration <= 0.1.0.38 - Missing Authorization to Unauthenticated API setup/Arbitrary Options Update/Administrative User Creation

EPSS 4%CVSS 9.8

Jan Syski3 vulnerabilities on this pageMax CVSS 9.8Priority 43KEV 0

CVE-2024-1577 · Jan Syski MegaBIP

Remote Code Execution in MegaBIP

CVE-2024-1659 · Jan Syski MegaBIP

Arbitrary File Upload in MegaBIP

CVE-2024-1576 · Jan Syski MegaBIP

SQL Injection in MegaBIP

EPSS 0.6%CVSS 9.8

Apache Software Foundation2 vulnerabilities on this pageMax CVSS 9.8Priority 42KEV 0

CVE-2024-36264 · Apache Software Foundation Apache Submarine Commons Utils

Apache Submarine Commons Utils: default secret

CVE-2024-36265 · Apache Software Foundation Apache Submarine Server Core

Apache Submarine Server Core: authorization bypass

alcasar3 vulnerabilities on this pageMax CVSS 9.8Priority 41KEV 0

CVE-2024-38294 · alcasar alcasar

ALCASAR before 3.6.1 allows email_registration_back.php remote code execution.

EPSS 0.8%CVSS 9.8

CVE-2024-38295 · alcasar alcasar

ALCASAR before 3.6.1 allows still_connected.php remote code execution.

EPSS 0.8%CVSS 9.8

CVE-2024-38293 · alcasar alcasar

ALCASAR before 3.6.1 allows CSRF and remote code execution in activity.php.

EPSS 0.4%CVSS 9.6

codexpert1 vulnerability on this pageMax CVSS 9.8Priority 40KEV 0

CVE-2024-4371 · codexpert CoDesigner – All in One Elementor WooCommerce Builder

CoDesigner WooCommerce Builder for Elementor – Customize Checkout, Shop, Email, Products & More <= 4.4.1 - Unauthenticated PHP Object Injection

mintplex-labs1 vulnerability on this pageMax CVSS 9.1Priority 40KEV 0

CVE-2024-5211 · mintplex-labs mintplex-labs/anything-llm

Path Traversal to Arbitrary File Read/Delete/Overwrite, DoS Attack, and Admin Account Takeover in mintplex-labs/anything-llm

EPSS 1%CVSS 9.1

mitre1 vulnerability on this pageMax CVSS 9.8Priority 40KEV 0

CVE-2024-36761 · mitre

naga v0.14.0 was discovered to contain a stack overflow via the component /wgsl/parse/mod.rs.

lb_link1 vulnerability on this pageMax CVSS 9.8Priority 39KEV 0

CVE-2024-33374 · lb_link bl_w1210m

Incorrect access control in the UART/Serial interface on the LB-LINK BL-W1210M v2.0 router allows attackers to access the root terminal w…

lb-link1 vulnerability on this pageMax CVSS 9.8Priority 39KEV 0

CVE-2024-33375 · lb-link bl-w1210m

LB-LINK BL-W1210M v2.0 was discovered to store user credentials in plaintext within the router's firmware.

EPSS 0.6%CVSS 9.8

Schneider Electric1 vulnerability on this pageMax CVSS 9.8Priority 39KEV 0

CVE-2024-37036 · Schneider Electric Sage 1410

CWE-787: Out-of-bounds Write vulnerability exists that could result in an authentication bypass when sending a malformed POST request and…

BBS e-Theme1 vulnerability on this pageMax CVSS 9.8Priority 38KEV 0

CVE-2023-36504 · BBS e-Theme BBS e-Popup

WordPress BBS e-Popup plugin <= 2.4.5 - Broken Access Control vulnerability

Dell1 vulnerability on this pageMax CVSS 9.8Priority 38KEV 0

CVE-2024-37131 · Dell Secure Connect Gateway (SCG) Policy Manager

SCG Policy Manager, all versions, contains an overly permissive Cross-Origin Resource Policy (CORP) vulnerability.

Hewlett Packard Enterprise (HPE)1 vulnerability on this pageMax CVSS 9.8Priority 38KEV 0

CVE-2024-22441 · Hewlett Packard Enterprise (HPE) Cray System Management Software - PALS

HPE Cray Parallel Application Launch Service (PALS) is subject to an authentication bypass.