The archive.

CVE-2024-33409 · campcodes complete_web-based_school_management_system

SQL injection vulnerability in index.php in campcodes Complete Web-Based School Management System 1.0 allows attacker to execute arbitrar…

CVE-2024-33411 · campcodes complete_web-based_school_management_system

A SQL injection vulnerability in /model/get_admin_profile.php in Campcodes Complete Web-Based School Management System 1.0 allows attacke…

CVE-2024-33403 · campcodes complete_web-based_school_management_system

A SQL injection vulnerability in /model/get_events.php in campcodes Complete Web-Based School Management System 1.0 allows attacker to ex…

EPSS 0.7%CVSS 9.8

guangzhou_luhua_information_technology2 vulnerabilities on this pageMax CVSS 9.8Priority 50KEV 0

CVE-2024-25508 · guangzhou_luhua_information_technology ruvaroa

RuvarOA v6.01 and v12.01 were discovered to contain a SQL injection vulnerability via the id parameter at /bulletin/bulletin_template_sho…

CVE-2024-25510 · guangzhou_luhua_information_technology ruvaroa

RuvarOA v6.01 and v12.01 were discovered to contain a SQL injection vulnerability via the id parameter at /AddressBook/address_public_sho…

query_deluxe1 vulnerability on this pageMax CVSS 9.8Priority 50KEV 0

CVE-2024-34532 · query_deluxe query_deluxe

A SQL injection vulnerability in Yvan Dotet PostgreSQL Query Deluxe module (aka query_deluxe) 17.x before 17.0.0.4 allows a remote attack…

Delta Electronics2 vulnerabilities on this pageMax CVSS 9.8Priority 49KEV 0

CVE-2024-4548 · Delta Electronics DIAEnergie

Delta Electronics DIAEnergie SQL Injection

EPSS 29%CVSS 9.8

CVE-2024-4547 · Delta Electronics DIAEnergie

Delta Electronics DIAEnergie Unauthenticated SQL Injection

NETGEAR1 vulnerability on this pageMax CVSS 9.6Priority 49KEV 0

CVE-2023-50231 · NETGEAR ProSAFE Network Management System

NETGEAR ProSAFE Network Management System saveNodeLabel Cross-Site Scripting Privilege Escalation Vulnerability

EPSS 53%CVSS 9.6

Voltronic Power10 vulnerabilities on this pageMax CVSS 9.8Priority 49KEV 0

CVE-2023-51595 · Voltronic Power ViewPower Pro

Voltronic Power ViewPower Pro selectDeviceListBy SQL Injection Remote Code Execution Vulnerability

EPSS 48%CVSS 9.8

CVE-2023-51574 · Voltronic Power ViewPower

Voltronic Power ViewPower updateManagerPassword Exposed Dangerous Method Authentication Bypass Vulnerability

CVE-2023-51576 · Voltronic Power ViewPower

Voltronic Power ViewPower Deserialization of Untrusted Data Remote Code Execution Vulnerability

CVE-2023-51593 · Voltronic Power ViewPower Pro

Voltronic Power ViewPower Pro Expression Language Injection Remote Code Execution Vulnerability

CVE-2023-51575 · Voltronic Power ViewPower

Voltronic Power ViewPower MonitorConsole Exposed Dangerous Method Remote Code Execution Vulnerability

CVE-2023-51581 · Voltronic Power ViewPower

Voltronic Power ViewPower MacMonitorConsole Exposed Dangerous Method Remote Code Execution Vulnerability

CVE-2023-51582 · Voltronic Power ViewPower

Voltronic Power ViewPower LinuxMonitorConsole Exposed Dangerous Method Remote Code Execution Vulnerability

CVE-2023-51583 · Voltronic Power ViewPower

Voltronic Power ViewPower UpsScheduler Exposed Dangerous Method Remote Code Execution Vulnerability

CVE-2023-51586 · Voltronic Power ViewPower Pro

Voltronic Power ViewPower Pro selectEventConfig SQL Injection Remote Code Execution Vulnerability

CVE-2023-51590 · Voltronic Power ViewPower Pro

Voltronic Power ViewPower Pro UpLoadAction Unrestricted File Upload Remote Code Execution Vulnerability

d-link3 vulnerabilities on this pageMax CVSS 9.8Priority 48KEV 0

CVE-2024-33110 · d-link dir-845l

D-Link DIR-845L router v1.01KRb03 and before is vulnerable to Permission Bypass via the getcfg.php component.

EPSS 0.7%public exploit CVSS 9.1

CVE-2023-44414 · D-Link D-View

D-Link D-View coreservice_action_script Exposed Dangerous Function Remote Code Execution Vulnerability

EPSS 3%CVSS 9.8

CVE-2023-44411 · D-Link D-View

D-Link D-View InstallApplication Use of Hard-coded Credentials Authentication Bypass Vulnerability

EPSS 3%CVSS 9.8

ruvar4 vulnerabilities on this pageMax CVSS 9.4Priority 48KEV 0

CVE-2024-25507 · ruvar ruvarOA

RuvarOA v6.01 and v12.01 were discovered to contain a SQL injection vulnerability via the email_attach_id parameter at /LHMail/AttachDown…

CVE-2024-25509 · ruvar ruvarOA

RuvarOA v6.01 and v12.01 were discovered to contain a SQL injection vulnerability via the sys_file_storage_id parameter at /WorkFlow/wf_f…

CVE-2024-25511 · ruvar ruvarOA

RuvarOA v6.01 and v12.01 were discovered to contain a SQL injection vulnerability via the id parameter at /AddressBook/address_public_new…

CVE-2024-25514 · ruvar ruvarOA

RuvarOA v6.01 and v12.01 were discovered to contain a SQL injection vulnerability via the template_id parameter at /SysManage/wf_template…

sourcecodester1 vulnerability on this pageMax CVSS 9.1Priority 48KEV 0

CVE-2024-33294 · sourcecodester home_cleaning_service_system

An issue in Library System using PHP/MySQli with Source Code V1.0 allows a remote attacker to execute arbitrary code via the _FAILE varia…

EPSS 0.7%public exploit CVSS 9.1

Control Web Panel1 vulnerability on this pageMax CVSS 9.8Priority 45KEV 0

CVE-2023-42121 · Control Web Panel Control Web Panel

Control Web Panel Missing Authentication Remote Code Execution Vulnerability

linksys1 vulnerability on this pageMax CVSS 9.8Priority 45KEV 0

CVE-2023-46012 · linksys ea7500

Buffer Overflow vulnerability LINKSYS EA7500 3.0.1.207964 allows a remote attacker to execute arbitrary code via an HTTP request to the I…