Critical vulnerability archive — page 454

Google1 vulnerability on this pageMax CVSS 9.6Priority 98KEV 1

CVE-2024-4671 · Google Chrome

Google Chromium Visuals Use-After-Free Vulnerability

KEV · due 3 Jun EPSS 8%public exploit SSVC act CVSS 9.6

Cacti3 vulnerabilities on this pageMax CVSS 10.0Priority 60KEV 0

CVE-2024-29895 · Cacti cacti

Cacti command injection in cmd_realtime.php

EPSS 99%public exploit CVSS 10.0

CVE-2024-25641 · Cacti cacti

Cacti RCE vulnerability when importing packages

EPSS 86%public exploit CVSS 9.1

CVE-2024-34340 · Cacti cacti

Authentication Bypass when using using older password hashes

EPSS 1%public exploit CVSS 9.1

abetlen1 vulnerability on this pageMax CVSS 9.7Priority 59KEV 0

CVE-2024-34359 · abetlen llama-cpp-python

llama-cpp-python vulnerable to Remote Code Execution by Server-Side Template Injection in Model Metadata

EPSS 26%public exploit CVSS 9.7

Netflix1 vulnerability on this pageMax CVSS 9.9Priority 59KEV 0

CVE-2024-4701 · Netflix Genie

Path Traversal vulnerability via File Uploads in Genie

EPSS 25%public exploit CVSS 9.9

Ruijie4 vulnerabilities on this pageMax CVSS 9.8Priority 58KEV 0

CVE-2024-4814 · Ruijie RG-UAC

Ruijie RG-UAC static_route_edit_commit.php os command injection

EPSS 6%public exploit CVSS 9.8

CVE-2024-4816 · Ruijie RG-UAC

Ruijie RG-UAC gre_add_commit.php os command injection

EPSS 6%public exploit CVSS 9.8

CVE-2024-4813 · Ruijie RG-UAC

Ruijie RG-UAC interface_commit.php os command injection

EPSS 6%CVSS 9.8

CVE-2024-4815 · Ruijie RG-UAC

Ruijie RG-UAC detail.php os command injection

EPSS 6%CVSS 9.8

lobehub1 vulnerability on this pageMax CVSS 9.0Priority 57KEV 0

CVE-2024-32964 · lobehub lobe-chat

lobe-chat `/api/proxy` endpoint Server-Side Request Forgery vulnerability

EPSS 53%public exploit CVSS 9.0

nuki1 vulnerability on this pageMax CVSS 9.8Priority 55KEV 0

CVE-2022-32504 · nuki nuki_smart_lock

An issue was discovered on certain Nuki Home Solutions devices.

EPSS 2%public exploit CVSS 9.8

SourceCodester2 vulnerabilities on this pageMax CVSS 9.8Priority 53KEV 0

CVE-2024-4809 · SourceCodester Open Source Clinic Management System

SourceCodester Open Source Clinic Management System setting.php unrestricted upload

EPSS 1%public exploit CVSS 9.8

CVE-2024-4798 · SourceCodester Online Computer and Laptop Store

SourceCodester Online Computer and Laptop Store manage_brand.php sql injection

EPSS 0.9%public exploit CVSS 9.8

froxlor1 vulnerability on this pageMax CVSS 9.7Priority 52KEV 0

CVE-2024-34070 · froxlor Froxlor

Froxlor Vulnerable to Blind XSS Leading to Froxlor Application Compromise

EPSS 1.0%public exploit CVSS 9.7

tenda2 vulnerabilities on this pageMax CVSS 9.8Priority 52KEV 0

CVE-2024-34943 · tenda fh1206_firmware

Tenda FH1206 V1.2.0.8(8155)_EN was discovered to contain a stack-based buffer overflow vulnerability via the page parameter at ip/goform/…

EPSS 0.9%public exploit CVSS 9.8

CVE-2024-34945 · tenda fh1206_firmware

Tenda FH1206 V1.2.0.8(8155)_EN was discovered to contain a stack-based buffer overflow vulnerability via the PPW parameter at ip/goform/W…

EPSS 0.9%public exploit CVSS 9.8

totolink2 vulnerabilities on this pageMax CVSS 9.8Priority 52KEV 0

CVE-2024-34209 · totolink cp450

TOTOLINK CP450 v4.1.0cu.747_B20191224 was discovered to contain a stack buffer overflow vulnerability in the setIpPortFilterRules function.

EPSS 0.9%public exploit CVSS 9.8

CVE-2024-34213 · totolink cp450

TOTOLINK CP450 v4.1.0cu.747_B20191224 was discovered to contain a stack buffer overflow vulnerability in the SetPortForwardRules function.

EPSS 0.9%CVSS 9.8

oretnom231 vulnerability on this pageMax CVSS 9.4Priority 50KEV 0

CVE-2024-34226 · oretnom23 visitor_management_system

SQL injection vulnerability in /php-sqlite-vms/?page=manage_visitor&id=1 in SourceCodester Visitor Management System 1.0 allow attackers…

EPSS 0.8%public exploit CVSS 9.4

thimpress1 vulnerability on this pageMax CVSS 9.8Priority 49KEV 0

CVE-2024-4434 · thimpress LearnPress – WordPress LMS Plugin for Create and Sell Online Courses

LearnPress – WordPress LMS Plugin <= 4.2.6.5 - Unauthenticated Time-Based SQL Injection

EPSS 37%CVSS 9.8

D-Link1 vulnerability on this pageMax CVSS 9.8Priority 48KEV 0

CVE-2024-4699 · D-Link DAR-8000-10

D-Link DAR-8000-10 importhtml.php deserialization

EPSS 6%CVSS 9.8

g-sky1 vulnerability on this pageMax CVSS 9.8Priority 48KEV 0

CVE-2024-30802 · g-sky vehicle_management_system

An issue in Vehicle Management System 7.31.0.3_20230412 allows an attacker to escalate privileges via the login.html component.

EPSS 0.5%public exploit CVSS 9.8

surveyking1 vulnerability on this pageMax CVSS 9.1Priority 48KEV 0

CVE-2024-35049 · surveyking surveyking

SurveyKing v1.3.1 was discovered to keep users' sessions active after logout.

EPSS 0.7%public exploit CVSS 9.1

IBM2 vulnerabilities on this pageMax CVSS 9.8Priority 47KEV 0

CVE-2023-43040 · IBM Spectrum Fusion HCI

IBM Spectrum Fusion HCI improper access control

EPSS 3%CVSS 9.8

CVE-2023-47709 · IBM Security Guardium

IBM Security Guardium command injection

EPSS 1%CVSS 9.1

Kognetiks2 vulnerabilities on this pageMax CVSS 10.0Priority 47KEV 0

CVE-2024-32700 · Kognetiks Kognetiks Chatbot for WordPress

WordPress Kognetiks Chatbot for WordPress plugin <= 2.0.0 - Arbitrary File Upload vulnerability

EPSS 3%CVSS 10.0

CVE-2024-4560 · kognetiks Kognetiks Chatbot for WordPress

Kognetiks Chatbot for WordPress <= 1.9.9 - Unauthenticated Arbitrary File Upload via chatbot_chatgpt_upload_file_to_assistant Function

EPSS 0.9%CVSS 9.8

nvidia1 vulnerability on this pageMax CVSS 9.0Priority 47KEV 0

CVE-2024-0087 · nvidia NVIDIA Triton Inference Server

CVE

EPSS 20%CVSS 9.0

P-THEMES1 vulnerability on this pageMax CVSS 9.8Priority 47KEV 0

CVE-2024-3806 · P-THEMES Porto

Porto <= 7.1.0 - Unauthenticated Local File Inclusion via porto_ajax_posts

EPSS 3%CVSS 9.8

Veeam1 vulnerability on this pageMax CVSS 9.9Priority 45KEV 0

CVE-2024-29212 · Veeam Service Provider Console

Due to an unsafe de-serialization method used by the Veeam Service Provider Console(VSPC) server in communication between the management…

EPSS 2%CVSS 9.9

hdfgroup4 vulnerabilities on this pageMax CVSS 9.8Priority 43KEV 0

CVE-2024-32615 · hdfgroup hdf5

HDF5 Library through 1.14.3 contains a heap-based buffer overflow in H5Z__nbit_decompress_one_byte in H5Znbit.c, caused by the earlier us…

EPSS 1%CVSS 9.8

CVE-2024-32621 · hdfgroup hdf5

HDF5 Library through 1.14.3 contains a heap-based buffer overflow in H5HG_read in H5HG.c (called from H5VL__native_blob_get in H5VLnative…

EPSS 0.9%CVSS 9.8

CVE-2024-33874 · hdfgroup hdf5

HDF5 Library through 1.14.3 has a heap buffer overflow in H5O__mtime_new_encode in H5Omtime.c.

EPSS 0.9%CVSS 9.8

CVE-2024-32622 · hdfgroup hdf5

HDF5 Library through 1.14.3 contains a out-of-bounds read operation in H5FL_arr_malloc in H5FL.c (called from H5S_set_extent_simple in H5…

EPSS 1.0%CVSS 9.1

jottlieb1 vulnerability on this pageMax CVSS 9.8Priority 43KEV 0

CVE-2024-3070 · jottlieb Last Viewed Posts by WPBeginner

Last Viewed Posts by WPBeginner <= 1.0.0 - Unauthenticated PHP Object Injection

EPSS 1%CVSS 9.8

hdf5library1 vulnerability on this pageMax CVSS 9.8Priority 42KEV 0

CVE-2024-32611 · hdf5library hdf5library

HDF5 Library through 1.14.3 may use an uninitialized value in H5A__attr_release_table in H5Aint.c.

EPSS 1.0%CVSS 9.8

valtimo-platform1 vulnerability on this pageMax CVSS 9.8Priority 42KEV 0

CVE-2024-34706 · valtimo-platform valtimo-frontend-libraries

@valtimo/components exposes access token to form.io

EPSS 1%CVSS 9.8

jetmonsters1 vulnerability on this pageMax CVSS 9.8Priority 41KEV 0

CVE-2024-4413 · jetmonsters MotoPress Hotel Booking

Hotel Booking Lite <= 4.11.1 - Unauthenticated PHP Object Injection

EPSS 0.9%CVSS 9.8

Thomas Scholl1 vulnerability on this pageMax CVSS 9.9Priority 41KEV 0

CVE-2024-34411 · Thomas Scholl canvasio3D Light

WordPress canvasio3D Light plugin <= 2.5.0 - Arbitrary File Upload vulnerability

EPSS 0.8%CVSS 9.9

URBAN BASE1 vulnerability on this pageMax CVSS 9.1Priority 41KEV 0

CVE-2024-34555 · URBAN BASE Z-Downloads

WordPress Z-Downloads plugin <= 1.11.3 - Auth. Arbitrary File Upload vulnerability

EPSS 1%CVSS 9.1

YMS1 vulnerability on this pageMax CVSS 9.8Priority 41KEV 0

CVE-2024-3263 · YMS VIS Pro

Improper authentication in YMS VIS Pro

EPSS 0.8%CVSS 9.8

Agentejo1 vulnerability on this pageMax CVSS 9.8Priority 40KEV 0

CVE-2024-4825 · Agentejo Cockpit CMS

Unrestricted Upload of File with Dangerous Type vulnerability on Cockpit CMS from Agentejo

EPSS 0.7%CVSS 9.8

AROX SOLUTION1 vulnerability on this pageMax CVSS 9.8Priority 40KEV 0

CVE-2024-4824 · AROX SOLUTION School ERP Pro+Responsive

SQL Injection in School ERP Pro+Responsive by AROX SOLUTION

EPSS 0.7%CVSS 9.8

Digisol1 vulnerability on this pageMax CVSS 9.1Priority 40KEV 0

CVE-2024-2257 · Digisol Digisol Router DG-GR1321

Password Policy Bypass Vulnerability in Digisol Router

EPSS 1%CVSS 9.1

Huawei1 vulnerability on this pageMax CVSS 9.8Priority 39KEV 0

CVE-2024-32991 · Huawei HarmonyOS

Permission verification vulnerability in the wpa_supplicant module Impact: Successful exploitation of this vulnerability will affect avai…

EPSS 0.5%CVSS 9.8

J.N. Breetvelt a.k.a. OpaJaap1 vulnerability on this pageMax CVSS 10.0Priority 39KEV 0

CVE-2024-31377 · J.N. Breetvelt a.k.a. OpaJaap WP Photo Album Plus

WordPress WP Photo Album Plus plugin <= 8.7.01.001 - Unauth. Arbitrary File Upload vulnerability

EPSS 0.5%CVSS 10.0

Jordy Meow1 vulnerability on this pageMax CVSS 9.1Priority 39KEV 0

CVE-2024-34440 · Jordy Meow AI Engine: ChatGPT Chatbot

WordPress AI Engine plugin <= 2.2.63 - Auth. Arbitrary File Upload vulnerability

EPSS 0.8%CVSS 9.1

Patchstack1 vulnerability on this pageMax CVSS 9.1Priority 39KEV 0

CVE-2024-34416 · Patchstack

WordPress Pk Favicon Manager plugin <= 2.1 - Arbitrary File Upload vulnerability

EPSS 0.8%CVSS 9.1

cryptopp1 vulnerability on this pageMax CVSS 9.8Priority 38KEV 0

CVE-2024-28285 · cryptopp crypto\+\+

A Fault Injection vulnerability in the SymmetricDecrypt function in cryptopp/elgamal.h of Cryptopp Crypto++ 8.9, allows an attacker to co…

EPSS 0.5%CVSS 9.8

The archive.