The archive.

Hitachi Energy3 vulnerabilities on this pageMax CVSS 10.0Priority 41KEV 0

CVE-2024-2013 · Hitachi Energy FOXMAN-UN

An authentication bypass vulnerability exists in the FOXMAN-UN/UNEM server / API Gateway component that if exploited allows attackers wit…

EPSS 0.7%CVSS 10.0

CVE-2024-2012 · Hitachi Energy FOXMAN-UN

vulnerability exists in the FOXMAN-UN/UNEM server / API Gateway that if exploited an attacker could use to allow unintended commands or…

CVE-2024-2011 · Hitachi Energy FOXMAN-UN

A heap-based buffer overflow vulnerability exists in the FOXMAN-UN/UNEM that if exploited will generally lead to a denial of service but…

Mozilla3 vulnerabilities on this pageMax CVSS 9.8Priority 41KEV 0

CVE-2024-5699 · Mozilla Firefox

In violation of spec, cookie prefixes such as `__Secure` were being ignored if they were not correctly capitalized - by spec they should…

EPSS 0.8%CVSS 9.8

CVE-2024-5695 · Mozilla Firefox

If an out-of-memory condition occurs at a specific point using allocations in the probabilistic heap checker, an assertion could have bee…

CVE-2024-5701 · Mozilla Firefox

Memory safety bugs present in Firefox 126.

hakeemnala1 vulnerability on this pageMax CVSS 9.8Priority 40KEV 0

CVE-2023-7264 · hakeemnala Build App Online

Build App Online <= 1.0.22 - Account Takeover via Weak Password Reset Mechanism

Asghar Hatampoor1 vulnerability on this pageMax CVSS 10.0Priority 39KEV 0

CVE-2024-35746 · Asghar Hatampoor BuddyPress Cover

WordPress BuddyPress Cover plugin <= 2.1.4.2 - Arbitrary File Upload vulnerability

EPSS 0.5%CVSS 10.0

pr-gateway1 vulnerability on this pageMax CVSS 9.9Priority 39KEV 0

CVE-2024-3549 · pr-gateway Blog2Social: Social Media Auto Post & Scheduler

Blog2Social: Social Media Auto Post & Scheduler <= 7.4.1 - Authenticated (Subscriber+) SQL Injection

EPSS 0.5%CVSS 9.9

StylemixThemes1 vulnerability on this pageMax CVSS 9.8Priority 39KEV 0

CVE-2024-35677 · StylemixThemes MegaMenu

WordPress MegaMenu plugin <= 2.3.12 - Unauthenticated Local File Inclusion vulnerability

Fuji Electric1 vulnerability on this pageMax CVSS 9.8Priority 38KEV 0

CVE-2024-5597 · Fuji Electric Monitouch V-SFT

Fuji Electric Monitouch V-SFT Type Confusion

Metagauss1 vulnerability on this pageMax CVSS 9.8Priority 38KEV 0

CVE-2024-31275 · Metagauss EventPrime

WordPress EventPrime plugin <= 3.3.4 - Booking Price Manipulation vulnerability

Apple3 vulnerabilities on this pageMax CVSS 9.1Priority 37KEV 0

CVE-2024-27811 · Apple iOS and iPadOS

The issue was addressed with improved checks.

CVE-2024-27832 · Apple iOS and iPadOS

The issue was addressed with improved checks.

CVE-2024-27844 · Apple Safari

The issue was addressed with improved checks.

drEryk sp. z o.o.1 vulnerability on this pageMax CVSS 9.8Priority 37KEV 0

CVE-2024-3699 · drEryk sp. z o.o. drEryk Gabinet

Hardcoded password in drEryk Gabinet

EuroSoft Sp. z o. o.1 vulnerability on this pageMax CVSS 9.8Priority 37KEV 0

CVE-2024-1228 · EuroSoft Sp. z o. o. Eurosoft Przychodnia

Hardcoded password in Eurosoft Przychodnia

ThemeHigh1 vulnerability on this pageMax CVSS 9.1Priority 37KEV 0

CVE-2024-35658 · ThemeHigh Checkout Field Editor for WooCommerce (Pro)

WordPress Checkout Field Editor for WooCommerce (Pro) plugin <= 3.6.2 - Unauthenticated Arbitrary File Deletion vulnerability

zorem1 vulnerability on this pageMax CVSS 9.8Priority 37KEV 0

CVE-2024-31283 · zorem Advanced Local Pickup for WooCommerce

WordPress Advanced Local Pickup for WooCommerce plugin <=1.6.2 - Broken Access Control vulnerability

CodePeople1 vulnerability on this pageMax CVSS 9.8Priority 36KEV 0

CVE-2024-35735 · CodePeople WP Time Slots Booking Form

WordPress WP Time Slots Booking Form plugin <= 1.2.11 - Broken Access Control vulnerability

Cybozu, Inc.1 vulnerability on this pageMax CVSS 9.0Priority 36KEV 0

CVE-2024-31401 · Cybozu, Inc. Cybozu Garoon

Cross-site scripting vulnerability in Cybozu Garoon 5.0.0 to 5.15.2 allows a remote authenticated attacker with an administrative privile…

EPSS 0.5%CVSS 9.0

mcafee1 vulnerability on this pageMax CVSS 9.1Priority 36KEV 0

CVE-2024-34405 · mcafee antivirus_vpn_for_android

Improper deep link validation in McAfee Security: Antivirus VPN for Android before 8.3.0 could allow an attacker to launch an arbitrary U…

EPSS 0.5%CVSS 9.1

Post SMTP1 vulnerability on this pageMax CVSS 9.8Priority 36KEV 0

CVE-2023-52233 · Post SMTP Post SMTP Mailer/Email Log

WordPress POST SMTP Mailer plugin <= 2.8.6 - Broken Access Control on API vulnerability

SoftLab1 vulnerability on this pageMax CVSS 9.8Priority 36KEV 0

CVE-2024-35661 · SoftLab Upload Fields for WPForms

WordPress Upload Fields for WPForms plugin <= 1.0.2 - Broken Access Control vulnerability

TMS1 vulnerability on this pageMax CVSS 9.8Priority 36KEV 0

CVE-2024-22298 · TMS Amelia

WordPress Amelia plugin <= 1.0.98 - Broken Access Control vulnerability

WPDeveloper1 vulnerability on this pageMax CVSS 9.8Priority 36KEV 0

CVE-2024-31284 · WPDeveloper EmbedPress

WordPress EmbedPress plugin <= 3.9.8 - Broken Access Control vulnerability

WPFactory1 vulnerability on this pageMax CVSS 9.8Priority 36KEV 0

CVE-2024-31276 · WPFactory Products, Order & Customers Export for WooCommerce

WordPress Products, Order & Customers Export for WooCommerce plugin <= 2.0.8 - Broken Access Control vulnerability

AdFoxly1 vulnerability on this pageMax CVSS 9.8Priority 35KEV 0

CVE-2024-34802 · AdFoxly AdFoxly – Ad Manager, AdSense Ads & Ads.txt

WordPress AdFoxly plugin <= 1.8.5 - Broken Access Control vulnerability

EPSS 0.3%CVSS 9.8

Estomed Sp. z o.o.1 vulnerability on this pageMax CVSS 9.8Priority 35KEV 0

CVE-2024-3700 · Estomed Sp. z o.o. Simple Care

Hardcoded password in Estomed Sp. z o.o. Simple Care software