The archive.

anji-plus6 vulnerabilities on this pageMax CVSS 9.8Priority 57KEV 0

CVE-2024-5355 · anji-plus AJ-Report

anji-plus AJ-Report IGroovyHandler command injection

EPSS 3%public exploit CVSS 9.8

CVE-2024-5353 · anji-plus AJ-Report

anji-plus AJ-Report ZIP File decompress path traversal

EPSS 0.8%public exploit CVSS 9.8

CVE-2024-5356 · anji-plus AJ-Report

anji-plus AJ-Report testTransform;swagger-ui sql injection

EPSS 1%CVSS 9.8

CVE-2024-5351 · anji-plus AJ-Report

anji-plus AJ-Report Javascript getValueFromJs deserialization

CVE-2024-5352 · anji-plus AJ-Report

anji-plus AJ-Report validationRules deserialization

CVE-2024-5350 · anji-plus AJ-Report

anji-plus AJ-Report pageList sql injection

tenda1 vulnerability on this pageMax CVSS 9.8Priority 55KEV 0

CVE-2024-35339 · tenda fh1206_firmware

Tenda FH1206 V1.2.0.8(8155) was discovered to contain a command injection vulnerability via the mac parameter at ip/goform/WriteFacMac.

EPSS 2%public exploit CVSS 9.8

parisneo1 vulnerability on this pageMax CVSS 9.8Priority 54KEV 0

CVE-2024-4267 · parisneo parisneo/lollms-webui

Remote Code Execution in parisneo/lollms-webui

EPSS 1%public exploit CVSS 9.8

mocado1 vulnerability on this pageMax CVSS 9.8Priority 53KEV 0

CVE-2024-35373 · mocado mocado

Mocodo Mocodo Online 4.2.6 and below is vulnerable to Remote Code Execution via /web/rewrite.php.

EPSS 1%public exploit CVSS 9.8

SourceCodester4 vulnerabilities on this pageMax CVSS 9.8Priority 52KEV 0

CVE-2024-5377 · SourceCodester Vehicle Management System

SourceCodester Vehicle Management System newvehicle.php unrestricted upload

EPSS 0.9%public exploit CVSS 9.8

CVE-2024-5362 · SourceCodester Online Hospital Management System

SourceCodester Online Hospital Management System departmentDoctor.php sql injection

EPSS 0.7%public exploit CVSS 9.8

CVE-2024-5378 · SourceCodester School Intramurals Student Attendance Management System

SourceCodester School Intramurals Student Attendance Management System manage_sy.php sql injection

EPSS 0.6%public exploit CVSS 9.8

CVE-2024-5384 · SourceCodester Facebook News Feed Like

SourceCodester Facebook News Feed Like index.php sql injection

inxedu2 vulnerabilities on this pageMax CVSS 9.8Priority 51KEV 0

CVE-2024-35570 · inxedu inxedu

An arbitrary file upload vulnerability in the component \controller\ImageUploadController.class of inxedu v2.0.6 allows attackers to exec…

EPSS 0.9%public exploit CVSS 9.8

CVE-2024-35079 · inxedu inxedu

An arbitrary file upload vulnerability in the uploadAudio method of inxedu v2024.4 allows attackers to execute arbitrary code via uploadi…

hashthemes2 vulnerabilities on this pageMax CVSS 9.8Priority 49KEV 0

CVE-2024-5084 · hashthemes Hash Form – Drag & Drop Form Builder

Hash Form – Drag & Drop Form Builder <= 1.1.0 - Unauthenticated Arbitrary File Upload to Remote Code Execution

EPSS 51%CVSS 9.8

CVE-2024-5085 · hashthemes Hash Form – Drag & Drop Form Builder

Hash Form – Drag & Drop Form Builder <= 1.1.0 - Unauthenticated PHP Object Injection

Veeam1 vulnerability on this pageMax CVSS 9.8Priority 49KEV 0

CVE-2024-29849 · Veeam Backup & Replication

Veeam Backup Enterprise Manager allows unauthenticated users to log in as any user to enterprise manager web interface.

EPSS 39%CVSS 9.8

bluexsx1 vulnerability on this pageMax CVSS 9.6Priority 48KEV 0

CVE-2024-35592 · bluexsx box-im

An arbitrary file upload vulnerability in the Upload function of Box-IM v2.0 allows attackers to execute arbitrary code via uploading a c…

EPSS 0.6%public exploit CVSS 9.6

campcodes6 vulnerabilities on this pageMax CVSS 9.8Priority 48KEV 0

CVE-2024-34927 · campcodes complete_web-based_school_management_system

A SQL injection vulnerability in /model/update_classroom.php in Campcodes Complete Web-Based School Management System 1.0 allows an attac…

CVE-2024-34931 · campcodes complete_web-based_school_management_system

A SQL injection vulnerability in /model/update_subject.php in Campcodes Complete Web-Based School Management System 1.0 allows an attacke…

CVE-2024-34932 · campcodes complete_web-based_school_management_system

A SQL injection vulnerability in /model/update_exam.php in Campcodes Complete Web-Based School Management System 1.0 allows an attacker t…

CVE-2024-34929 · campcodes complete_web-based_school_management_system

A SQL injection vulnerability in /view/find_friends.php in Campcodes Complete Web-Based School Management System 1.0 allows an attacker t…

CVE-2024-34934 · campcodes complete_web-based_school_management_system

A SQL injection vulnerability in /view/emarks_range_grade_update_form.php in Campcodes Complete Web-Based School Management System 1.0 al…

CVE-2024-34935 · campcodes complete_web-based_school_management_system

A SQL injection vulnerability in /view/conversation_history_admin.php in Campcodes Complete Web-Based School Management System 1.0 allows…

Dolibarr2 vulnerabilities on this pageMax CVSS 9.1Priority 47KEV 0

CVE-2024-5315 · Dolibarr ERP CMS

Multiple vulnerabilities in DOLIBARR's ERP CMS

EPSS 35%CVSS 9.1

CVE-2024-5314 · Dolibarr ERP CMS

Multiple vulnerabilities in DOLIBARR's ERP CMS

EPSS 0.6%CVSS 9.1

mocodo1 vulnerability on this pageMax CVSS 9.8Priority 47KEV 0

CVE-2024-35374 · mocodo mocodo_online

Mocodo Mocodo Online 4.2.6 and below does not properly sanitize the sql_case input field in /web/generate.php, allowing remote attackers…

EPSS 3%CVSS 9.8

Linux4 vulnerabilities on this pageMax CVSS 9.8Priority 44KEV 0

CVE-2021-47548 · Linux Linux

ethernet: hisilicon: hns: hns_dsaf_misc: fix a possible array overflow in hns_dsaf_ge_srst_by_port()

EPSS 1%CVSS 9.8

CVE-2021-47506 · Linux Linux

nfsd: fix use-after-free due to delegation race

CVE-2021-47544 · Linux Linux

tcp: fix page frag corruption on page fault

EPSS 0.9%CVSS 9.8

CVE-2021-47536 · Linux Linux

net/smc: fix wrong list_del in smc_lgr_cleanup_early

D-Link1 vulnerability on this pageMax CVSS 9.8Priority 43KEV 0

CVE-2024-5296 · D-Link D-View

D-Link D-View Use of Hard-coded Cryptographic Key Authentication Bypass Vulnerability

EPSS 1%CVSS 9.8

Unknown1 vulnerability on this pageMax CVSS 9.1Priority 43KEV 0

CVE-2024-4399 · Unknown cas

CAS <= 1.0.0 - Unauthenticated SSRF

EPSS 2%CVSS 9.1

Sante1 vulnerability on this pageMax CVSS 9.8Priority 42KEV 0

CVE-2023-51637 · Sante PACS Server PG

Sante PACS Server PG Patient Query SQL Injection Remote Code Execution Vulnerability

EPSS 1.0%CVSS 9.8

Genetech Solutions1 vulnerability on this pageMax CVSS 9.8Priority 39KEV 0

CVE-2024-4544 · Genetech Solutions Pie Register - Social Sites Login (Add on)

Pie Register - Social Sites Login (Add on) <= 1.7.7 - Authentication Bypass

inexdu1 vulnerability on this pageMax CVSS 9.8Priority 39KEV 0

CVE-2024-35080 · inexdu inexdu

An arbitrary file upload vulnerability in the gok4 method of inxedu v2024.4 allows attackers to execute arbitrary code via uploading a cr…

j2eefast3 vulnerabilities on this pageMax CVSS 9.8Priority 39KEV 0

CVE-2024-35086 · j2eefast j2eefast

J2EEFAST v2.7.0 was discovered to contain a SQL injection vulnerability via the findPage function in BpmTaskFromMapper.xml .

CVE-2024-35084 · j2eefast j2eefast

J2EEFAST v2.7.0 was discovered to contain a SQL injection vulnerability via the findPage function in SysMsgPushMapper.xml.

CVE-2024-35091 · j2eefast j2eefast

J2EEFAST v2.7.0 was discovered to contain a SQL injection vulnerability via the findPage function in SysTenantMapper.xml.

open_quantum_safe1 vulnerability on this pageMax CVSS 9.8Priority 39KEV 0

CVE-2024-31510 · open_quantum_safe liboqs

An issue in Open Quantum Safe liboqs v.10.0 allows a remote attacker to escalate privileges via the crypto_sign_signature parameter in th…

PMB Services1 vulnerability on this pageMax CVSS 9.8Priority 39KEV 0

CVE-2024-26289 · PMB Services PMB

Remote Code Inclusion Vulnerability in Multiple PMB Versions

Prodys1 vulnerability on this pageMax CVSS 9.8Priority 39KEV 0

CVE-2024-5168 · Prodys Quantum Audio codec

Improper access control vulnerability in Prodys Quantum Audio codec

dedecms1 vulnerability on this pageMax CVSS 9.8Priority 38KEV 0

CVE-2024-35375 · dedecms dedecms

There is an arbitrary file upload vulnerability on the media add .php page in the backend of the website in version 5.7.114 of DedeCMS

PHPGurukul4 vulnerabilities on this pageMax CVSS 9.8Priority 38KEV 0

CVE-2024-5357 · PHPGurukul Zoo Management System

PHPGurukul Zoo Management System forgot-password.php sql injection

CVE-2024-5358 · PHPGurukul Zoo Management System

PHPGurukul Zoo Management System normal-search.php sql injection

CVE-2024-5359 · PHPGurukul Zoo Management System

PHPGurukul Zoo Management System foreigner-search.php sql injection

CVE-2024-5360 · PHPGurukul Zoo Management System

PHPGurukul Zoo Management System foreigner-bwdates-reports-details.php sql injection