The archive.

Browse all tracked critical vulnerabilities, including records outside today's brief.

39,181 matching vulnerabilities · Page 457 of 784

Inductive Automation3 vulnerabilities on this pageMax CVSS 9.8Priority 59KEV 0

CVE-2023-39475 · Inductive Automation Ignition

Inductive Automation Ignition ParameterVersionJavaSerializationCodec Deserialization of Untrusted Data Remote Code Execution Vulnerability

EPSS 64%public exploit CVSS 9.8

CVE-2023-39476 · Inductive Automation Ignition

Inductive Automation Ignition JavaSerializationCodec Deserialization of Untrusted Data Remote Code Execution Vulnerability

EPSS 2%public exploit CVSS 9.8

CVE-2023-38121 · Inductive Automation Ignition

Inductive Automation Ignition OPC UA Quick Client Cross-Site Scripting Remote Code Execution Vulnerability

EPSS 1%CVSS 9.0

Tinyproxy1 vulnerability on this pageMax CVSS 9.8Priority 59KEV 0

CVE-2023-49606 · Tinyproxy Tinyproxy

A use-after-free vulnerability exists in the HTTP Connection Headers parsing in Tinyproxy 1.11.1 and Tinyproxy 1.10.0.

EPSS 63%public exploit CVSS 9.8

stb1 vulnerability on this pageMax CVSS 9.8Priority 54KEV 0

CVE-2023-47212 · stb stb_vorbis.c

A heap-based buffer overflow vulnerability exists in the comment functionality of stb _vorbis.c v1.22.

EPSS 1%public exploit CVSS 9.8

libxmljs_project2 vulnerabilities on this pageMax CVSS 9.8Priority 53KEV 0

CVE-2024-34391 · libxmljs_project libxmljs

libxmljs attrs type confusion RCE

EPSS 1%public exploit CVSS 9.8

CVE-2024-34392 · libxmljs_project libxmljs

libxmljs namespaces type confusion RCE

EPSS 1%public exploit CVSS 9.8

netis-systems1 vulnerability on this pageMax CVSS 9.8Priority 52KEV 0

CVE-2024-33792 · netis-systems mex605

netis-systems MEX605 v2.00.06 allows attackers to execute arbitrary OS commands via a crafted payload to the tracert page.

EPSS 1.0%public exploit CVSS 9.8

node-saml1 vulnerability on this pageMax CVSS 10.0Priority 52KEV 0

CVE-2024-32962 · node-saml xml-crypto

XML signature verification bypass due improper verification of signature / signature spoofing

EPSS 0.8%public exploit CVSS 10.0

zhongcheng1 vulnerability on this pageMax CVSS 9.8Priority 51KEV 0

CVE-2024-33786 · zhongcheng ticketing_management_platform

An arbitrary file upload vulnerability in Zhongcheng Kexin Ticketing Management Platform 20.04 allows attackers to execute arbitrary code…

EPSS 0.8%public exploit CVSS 9.8

D-Link2 vulnerabilities on this pageMax CVSS 9.8Priority 49KEV 0

CVE-2023-32165 · D-Link D-View

D-Link D-View TftpReceiveFileHandler Directory Traversal Remote Code Execution Vulnerability

EPSS 73%CVSS 9.8

CVE-2023-32169 · D-Link D-View

D-Link D-View Use of Hard-coded Cryptographic Key Authentication Bypass Vulnerability

EPSS 56%CVSS 9.8

Hewlett Packard Enterprise (HPE)4 vulnerabilities on this pageMax CVSS 9.8Priority 49KEV 0

CVE-2024-26304 · Hewlett Packard Enterprise (HPE) Aruba Mobility Conductor (formerly Mobility Master); Aruba Mobility Controllers; WLAN Gateways and SD-WAN Gateways managed by Aruba Central

There is a buffer overflow vulnerability in the underlying L2/L3 Management service that could lead to unauthenticated remote code execut…

EPSS 44%CVSS 9.8

CVE-2024-26305 · Hewlett Packard Enterprise (HPE) Aruba Mobility Conductor (formerly Mobility Master); Aruba Mobility Controllers; WLAN Gateways and SD-WAN Gateways managed by Aruba Central

There is a buffer overflow vulnerability in the underlying Utility daemon that could lead to unauthenticated remote code execution by sen…

EPSS 15%CVSS 9.8

CVE-2024-33511 · Hewlett Packard Enterprise (HPE) Aruba Mobility Conductor (formerly Mobility Master); Aruba Mobility Controllers; WLAN Gateways and SD-WAN Gateways managed by Aruba Central

There is a buffer overflow vulnerability in the underlying Automatic Reporting service that could lead to unauthenticated remote code exe…

EPSS 15%CVSS 9.8

CVE-2024-33512 · Hewlett Packard Enterprise (HPE) Aruba Mobility Conductor (formerly Mobility Master); Aruba Mobility Controllers; WLAN Gateways and SD-WAN Gateways managed by Aruba Central

There is a buffer overflow vulnerability in the underlying Local User Authentication Database service that could lead to unauthenticated…

EPSS 15%CVSS 9.8

icegram1 vulnerability on this pageMax CVSS 9.8Priority 49KEV 0

CVE-2024-2876 · icegram Email Subscribers & Newsletters – Email Marketing, Post Notifications & Newsletter Plugin for WordPress

Icegram Express - Email Subscribers, Newsletters and Marketing Automation Plugin <= 5.7.14 - Unauthenticated SQL Injection

EPSS 81%CVSS 9.8

Jenkins Project1 vulnerability on this pageMax CVSS 9.8Priority 49KEV 0

CVE-2024-34144 · Jenkins Project Jenkins Script Security Plugin

A sandbox bypass vulnerability involving crafted constructor bodies in Jenkins Script Security Plugin 1335.vf07d9ce377a_e and earlier all…

EPSS 48%CVSS 9.8

LG11 vulnerabilities on this pageMax CVSS 9.8Priority 49KEV 0

CVE-2023-40497 · LG Simple Editor

LG Simple Editor saveXml Directory Traversal Remote Code Execution Vulnerability

EPSS 67%CVSS 9.8

CVE-2023-40498 · LG Simple Editor

LG Simple Editor cp Command Directory Traversal Remote Code Execution Vulnerability

EPSS 85%CVSS 9.8

CVE-2023-40504 · LG Simple Editor

LG Simple Editor readVideoInfo Command Injection Remote Code Execution Vulnerability

EPSS 89%CVSS 9.8

CVE-2023-40492 · LG Simple Editor

LG Simple Editor deleteCheckSession Directory Traversal Arbitrary File Deletion Vulnerability

EPSS 82%CVSS 9.1

CVE-2023-40493 · LG Simple Editor

LG Simple Editor copySessionFolder Directory Traversal Remote Code Execution Vulnerability

EPSS 3%CVSS 9.8

CVE-2023-40494 · LG Simple Editor

LG Simple Editor deleteFolder Directory Traversal Arbitrary File Deletion Vulnerability

EPSS 82%CVSS 9.1

CVE-2023-40502 · LG Simple Editor

LG Simple Editor cropImage Directory Traversal Arbitrary File Deletion Vulnerability

EPSS 82%CVSS 9.1

CVE-2023-40505 · LG Simple Editor

LG Simple Editor createThumbnailByMovie Command Injection Remote Code Execution Vulnerability

EPSS 2%CVSS 9.8

CVE-2023-40500 · LG Simple Editor

LG Simple Editor copyContent Exposed Dangerous Function Remote Code Execution Vulnerability

EPSS 2%CVSS 9.8

CVE-2023-40501 · LG Simple Editor

LG Simple Editor copyContent Exposed Dangerous Function Remote Code Execution Vulnerability

EPSS 2%CVSS 9.8

CVE-2023-40499 · LG Simple Editor

LG Simple Editor mkdir Directory Traversal Arbitrary File Deletion Vulnerability

EPSS 2%CVSS 9.1

NETGEAR1 vulnerability on this pageMax CVSS 9.8Priority 49KEV 0

CVE-2023-38096 · NETGEAR ProSAFE Network Management System

NETGEAR ProSAFE Network Management System MyHandlerInterceptor Authentication Bypass Vulnerability

EPSS 82%CVSS 9.8

instawp1 vulnerability on this pageMax CVSS 9.8Priority 48KEV 0

CVE-2024-2667 · instawp InstaWP Connect – 1-click WP Staging & Migration

InstaWP Connect – 1-click WP Staging & Migration <= 0.1.0.22 - Unauthenticated Arbitrary File Upload

EPSS 6%CVSS 9.8

linksys1 vulnerability on this pageMax CVSS 9.8Priority 46KEV 0

CVE-2024-33789 · linksys e5600_firmware

Linksys E5600 v1.1.0.26 was discovered to contain a command injection vulnerability via the ipurl parameter at /API/info form endpoint.

EPSS 2%CVSS 9.8

Triangle MicroWorks1 vulnerability on this pageMax CVSS 9.8Priority 46KEV 0

CVE-2023-39457 · Triangle MicroWorks SCADA Data Gateway

Triangle MicroWorks SCADA Data Gateway Missing Authentication Vulnerability

EPSS 2%CVSS 9.8

Xiaomi2 vulnerabilities on this pageMax CVSS 9.6Priority 45KEV 0

CVE-2024-4406 · Xiaomi Pro 13

Xiaomi Pro 13 GetApps integral-dialog-page Cross-Site Scripting Remote Code Execution Vulnerability

EPSS 2%CVSS 9.6

CVE-2024-4405 · Xiaomi Pro 13

Xiaomi Pro 13 mimarket manual-upgrade Cross-Site Scripting Remote Code Execution Vulnerability

EPSS 1%CVSS 9.6

PiBrewing1 vulnerability on this pageMax CVSS 9.8Priority 43KEV 0

CVE-2024-3955 · PiBrewing CraftBeerPi 4

Arbitrary code execution in CraftBeerPi 4

EPSS 1%CVSS 9.8

Softing1 vulnerability on this pageMax CVSS 9.6Priority 43KEV 0

CVE-2023-27335 · Softing edgeAggregator

Softing edgeAggregator Client Cross-Site Scripting Remote Code Execution Vulnerability

EPSS 1%CVSS 9.6

TP-Link1 vulnerability on this pageMax CVSS 9.8Priority 43KEV 0

CVE-2023-27359 · TP-Link AX1800

TP-Link AX1800 hotplugd Firewall Rule Race Condition Vulnerability

EPSS 1%CVSS 9.8

Unified Automation1 vulnerability on this pageMax CVSS 9.1Priority 43KEV 0

CVE-2023-32174 · Unified Automation UaGateway

Unified Automation UaGateway NodeManagerOpcUa Use-After-Free Remote Code Execution Vulnerability

EPSS 2%CVSS 9.1

wproyal1 vulnerability on this pageMax CVSS 9.8Priority 43KEV 0

CVE-2024-1567 · wproyal Royal Addons for Elementor – Addons and Templates Kit for Elementor

Royal Elementor Addons and Templates <= 1.3.94 - Unauthenticated Limited File Upload

EPSS 1%CVSS 9.8

shabti1 vulnerability on this pageMax CVSS 9.8Priority 41KEV 0

CVE-2024-3729 · shabti Frontend Admin by DynamiApps

Frontend Admin by DynamiApps <= 3.19.4 - Improper Missing Encryption Exception Handling to Form Manipulation

EPSS 0.8%CVSS 9.8

kliqqi1 vulnerability on this pageMax CVSS 9.8Priority 39KEV 0

CVE-2024-31673 · kliqqi kliqqi_cms

Kliqqi-CMS 2.0.2 is vulnerable to SQL Injection in load_data.php via the userid parameter.

EPSS 0.6%CVSS 9.8

apollographql1 vulnerability on this pageMax CVSS 9.1Priority 38KEV 0

CVE-2024-32971 · apollographql router

Defect in query plan cache may cause incorrect operations to be executed in Apollo Router

EPSS 0.7%CVSS 9.1

JFrog1 vulnerability on this pageMax CVSS 9.0Priority 38KEV 0

CVE-2024-4142 · JFrog Artifactory

JFrog Artifactory Improper input validation within token creation flow

EPSS 0.7%CVSS 9.0

Zscaler3 vulnerabilities on this pageMax CVSS 9.8Priority 38KEV 0

CVE-2024-23459 · Zscaler Client Connector

Multiple Arbitrary Creates/Overwrites by link following

EPSS 0.5%CVSS 9.8

CVE-2023-28798 · Zscaler Client Connector

Out-of-bounds write to heap in pacparser

EPSS 0.4%CVSS 9.8

CVE-2024-23480 · Zscaler Client Connector

Insecure MacOS code sign check fallback

EPSS 0.3%CVSS 9.8

mitel1 vulnerability on this pageMax CVSS 9.1Priority 35KEV 0

CVE-2024-31967 · mitel 6800_series_sip_phones

A vulnerability on Mitel 6800 Series and 6900 Series SIP Phones through 6.3 SP3 HF4, 6900w Series SIP Phone through 6.3.3, and 6970 Confe…

EPSS 0.5%CVSS 9.1

Tesla1 vulnerability on this pageMax CVSS 9.0Priority 35KEV 0

CVE-2023-32156 · Tesla Model 3

Tesla Model 3 Gateway Firmware Signature Validation Bypass Vulnerability

EPSS 0.4%CVSS 9.0

Xserver Migrator1 vulnerability on this pageMax CVSS 9.6Priority 33KEV 0

CVE-2024-33913 · Xserver Migrator Xserver Migrator

WordPress Xserver Migrator plugin <= 1.6.1 - CSRF to Arbitrary File Upload vulnerability

EPSS 0.3%CVSS 9.6