The archive.

CVE-2024-31822 · ecommerce_codeigniter_bootstrap_project ecommerce_codeigniter_bootstrap

An issue in Ecommerce-CodeIgniter-Bootstrap commit v.

glpi-project1 vulnerability on this pageMax CVSS 9.8Priority 55KEV 0

CVE-2024-31705 · glpi-project glpi

An issue in Infotel Conseil GLPI v.10.X.X and after allows a remote attacker to execute arbitrary code via the insufficient validation of…

mitre1 vulnerability on this pageMax CVSS 9.8Priority 55KEV 0

CVE-2024-31823 · mitre

An issue in Ecommerce-CodeIgniter-Bootstrap commit v.

RIOT-OS3 vulnerabilities on this pageMax CVSS 9.8Priority 55KEV 0

CVE-2024-32017 · RIOT-OS RIOT

Buffer overflows in RIOT

CVE-2024-32018 · RIOT-OS RIOT

Ineffective size check due to assert() and buffer overflow in RIOT

EPSS 2%CVSS 9.0

CVE-2024-31225 · RIOT-OS RIOT

Lack of size check and buffer overflow in RIOT

EPSS 1%CVSS 9.0

danswer-ai1 vulnerability on this pageMax CVSS 9.8Priority 51KEV 0

CVE-2024-32881 · danswer-ai danswer

Unauthorized access to GET/SET of Slack Bot Tokens in Danswer

EPSS 0.8%public exploit CVSS 9.8

onethink1 vulnerability on this pageMax CVSS 9.8Priority 51KEV 0

CVE-2024-33444 · onethink onethink

SQL injection vulnerability in onethink v.1.1 allows a remote attacker to escalate privileges via a crafted script to the ModelModel.clas…

EPSS 0.9%public exploit CVSS 9.8

tenda1 vulnerability on this pageMax CVSS 9.8Priority 51KEV 0

CVE-2024-33835 · tenda ac18

Tenda AC18 V15.03.05.05 has a stack overflow vulnerability in the remoteIp parameter from formSetSafeWanWebMan function.

EPSS 0.8%public exploit CVSS 9.8

helloshop1 vulnerability on this pageMax CVSS 9.8Priority 50KEV 0

CVE-2024-33266 · helloshop deliveryorderautoupdate

SQL Injection vulnerability in Helloshop deliveryorderautoupdate v.2.8.1 and before allows an attacker to run arbitrary SQL commands via…

EPSS 0.7%public exploit CVSS 9.8

libmodbus1 vulnerability on this pageMax CVSS 9.8Priority 50KEV 0

CVE-2023-26793 · libmodbus libmodbus

libmodbus v3.1.10 has a heap-based buffer overflow vulnerability in read_io_status function in src/modbus.c.

EPSS 0.7%public exploit CVSS 9.8

emdns1 vulnerability on this pageMax CVSS 9.8Priority 49KEV 0

CVE-2023-50434 · emdns emdns.c

emdns_resolve_raw in emdns.c in emdns through fbd1eef calls strlen with an input that may not be '\0' terminated, leading to a stack-base…

EPSS 0.6%public exploit CVSS 9.8

mailcleaner1 vulnerability on this pageMax CVSS 9.8Priority 48KEV 0

CVE-2024-3191 · mailcleaner mailcleaner

MailCleaner Email os command injection

EPSS 5%CVSS 9.8

pdfmyurl1 vulnerability on this pageMax CVSS 9.8Priority 48KEV 0

CVE-2024-33449 · pdfmyurl pdfmyurl

An SSRF issue in the PDFMyURL service allows a remote attacker to obtain sensitive information and execute arbitrary code via a POST requ…

EPSS 0.5%public exploit CVSS 9.8

tvs_motor_company1 vulnerability on this pageMax CVSS 9.1Priority 48KEV 0

CVE-2024-33308 · tvs_motor_company connect

An issue in TVS Motor Company Limited TVS Connet Android v.4.5.1 and iOS v.5.0.0 allows a remote attacker to escalate privileges via the…

EPSS 0.7%public exploit CVSS 9.1

8theme3 vulnerabilities on this pageMax CVSS 9.8Priority 46KEV 0

CVE-2024-33559 · 8theme XStore

WordPress XStore theme <= 9.3.5 - Unauthenticated SQL Injection vulnerability

EPSS 4%CVSS 9.3

CVE-2024-33551 · 8theme XStore Core

WordPress XStore Core plugin <= 5.3.5 - Unauthenticated SQL Injection vulnerability

CVE-2024-33553 · 8theme XStore Core

WordPress XStore Core plugin <= 5.3.5 - Unauthenticated PHP Object Injection vulnerability

Google1 vulnerability on this pageMax CVSS 9.0Priority 46KEV 0

CVE-2024-4058 · Google Chrome

Type confusion in ANGLE in Google Chrome prior to 124.0.6367.78 allowed a remote attacker to potentially exploit heap corruption via a cr…

EPSS 9%CVSS 9.0

taocms1 vulnerability on this pageMax CVSS 9.8Priority 45KEV 0

CVE-2024-33350 · taocms taocms

Directory Traversal vulnerability in TaoCMS v.3.0.2 allows a remote attacker to execute arbitrary code and obtain sensitive information v…

EPSS 2%CVSS 9.8

hisiphp1 vulnerability on this pageMax CVSS 9.8Priority 44KEV 0

CVE-2024-33445 · hisiphp hisiphp

An issue in hisiphp v2.0.111 allows a remote attacker to execute arbitrary code via a crafted script to the SystemPlugins::mkInfo paramet…

EPSS 1%CVSS 9.8

Linux4 vulnerabilities on this pageMax CVSS 9.8Priority 43KEV 0

CVE-2024-27053 · Linux Linux

wifi: wilc1000: fix RCU usage in connect path

EPSS 2%CVSS 9.1

CVE-2024-27388 · Linux Linux

SUNRPC: fix some memleaks in gssx_dec_option_array

EPSS 1.0%CVSS 9.8

CVE-2022-48666 · Linux Linux

scsi: core: Fix a use-after-free

EPSS 0.8%CVSS 9.8

CVE-2024-26953 · Linux Linux

net: esp: fix bad handling of pages from page_pool

EPSS 0.7%CVSS 9.8

N-Media1 vulnerability on this pageMax CVSS 10.0Priority 43KEV 0

CVE-2024-33566 · N-Media OrderConvo

WordPress OrderConvo plugin <= 12.4 - Unauthenticated API Access to Arbitrary File Upload vulnerability

EPSS 1%CVSS 10.0

tencent1 vulnerability on this pageMax CVSS 9.8Priority 43KEV 0

CVE-2024-33078 · tencent libpag

Tencent Libpag v4.3 is vulnerable to Buffer Overflow.

EPSS 1%CVSS 9.8

guangzhou_yingshi_electronic_technology1 vulnerability on this pageMax CVSS 9.8Priority 42KEV 0

CVE-2024-33435 · guangzhou_yingshi_electronic_technology ncast_yingshi

Insecure Permissions vulnerability in Guangzhou Yingshi Electronic Technology Co.

EPSS 0.9%CVSS 9.8

E-WEBInformationCo.1 vulnerability on this pageMax CVSS 9.8Priority 41KEV 0

CVE-2024-4300 · E-WEBInformationCo. FS-EZViewer(Web)

E-WEBInformationCo. FS-EZViewer(Web) - Sensitive Data Exposure

EPSS 0.8%CVSS 9.8

sammycage1 vulnerability on this pageMax CVSS 9.8Priority 41KEV 0

CVE-2024-33768 · sammycage lunasvg

lunasvg v2.3.9 was discovered to contain a segmentation violation via the component composition_solid_source_over.

EPSS 0.8%CVSS 9.8

teledyne1 vulnerability on this pageMax CVSS 9.8Priority 41KEV 0

CVE-2023-46295 · teledyne flir_m300

An issue was discovered in Teledyne FLIR M300 2.00-19.

EPSS 0.9%CVSS 9.8

VulDB1 vulnerability on this pageMax CVSS 9.6Priority 41KEV 0

CVE-2024-3192 · VulDB

MailCleaner Admin Interface cross site scripting

EPSS 1.0%CVSS 9.6

Ofofonobs1 vulnerability on this pageMax CVSS 9.9Priority 40KEV 0

CVE-2024-4306 · Ofofonobs HubBank

Unrestricted Upload of File with Dangerous Type vulnerability in HubBank

EPSS 0.7%CVSS 9.9

webbax1 vulnerability on this pageMax CVSS 9.8Priority 40KEV 0

CVE-2024-33275 · webbax supernewsletter

SQL injection vulnerability in Webbax supernewsletter v.1.4.21 and before allows a remote attacker to escalate privileges via the Super N…

EPSS 0.7%CVSS 9.8

znuny1 vulnerability on this pageMax CVSS 9.8Priority 40KEV 0

CVE-2024-32491 · znuny znuny

An issue was discovered in Znuny and Znuny LTS 6.0.31 through 6.5.7 and Znuny 7.0.1 through 7.0.16 where a logged-in user can upload a fi…

EPSS 0.7%CVSS 9.8

jetmonsters1 vulnerability on this pageMax CVSS 9.9Priority 39KEV 0

CVE-2024-3342 · jetmonsters Timetable and Event Schedule by MotoPress

Timetable and Event Schedule by MotoPress <= 2.4.11 - Authenticated (Contributor+) SQL Injection

EPSS 0.6%CVSS 9.9

o-ran-sc1 vulnerability on this pageMax CVSS 9.8Priority 39KEV 0

CVE-2024-34048 · o-ran-sc ric-plt-e2mgr

O-RAN RIC I-Release e2mgr lacks array size checks in E2nodeConfigUpdateNotificationHandler.

prestashop1 vulnerability on this pageMax CVSS 9.8Priority 39KEV 0

CVE-2024-33276 · prestashop prestashop

SQL Injection vulnerability in FME Modules preorderandnotication v.3.1.0 and before allows a remote attacker to run arbitrary SQL command…

shipup1 vulnerability on this pageMax CVSS 9.8Priority 39KEV 0

CVE-2024-33273 · shipup shipup

SQL injection vulnerability in shipup before v.3.3.0 allows a remote attacker to escalate privileges via the getShopID function.

AA-Team2 vulnerabilities on this pageMax CVSS 9.6Priority 38KEV 0

CVE-2024-33544 · AA-Team WZone

WordPress WZone plugin <= 14.0.10 - Unauthenticated SQL Injection vulnerability

EPSS 0.6%CVSS 9.3

CVE-2024-33546 · AA-Team WZone

WordPress WZone plugin <= 14.0.10 - Arbitrary SQL Update Execution vulnerability

EPSS 0.5%CVSS 9.6

communitydeveloper1 vulnerability on this pageMax CVSS 9.8Priority 38KEV 0

CVE-2024-33269 · communitydeveloper prestaddons_flashsales

SQL Injection vulnerability in Prestaddons flashsales 1.9.7 and before allows an attacker to run arbitrary SQL commands via the FsModel::…

Dell1 vulnerability on this pageMax CVSS 9.1Priority 38KEV 0

CVE-2024-3411 · Dell iDRAC8

Insufficient Randomness When Validating an IPMI Authenticated Session

EPSS 0.7%CVSS 9.1

htc1 vulnerability on this pageMax CVSS 9.8Priority 38KEV 0

CVE-2024-33267 · htc hero

SQL Injection vulnerability in Hero hfheropayment v.1.2.5 and before allows an attacker to escalate privileges via the HfHeropaymentGatew…

prestashopmodules1 vulnerability on this pageMax CVSS 9.8Priority 38KEV 0

CVE-2024-33268 · prestashopmodules mdgiftproduct

SQL Injection vulnerability in Digincube mdgiftproduct before 1.4.1 allows an attacker to run arbitrary SQL commands via the MdGiftRule::…

shenzhen_project1 vulnerability on this pageMax CVSS 9.8Priority 38KEV 0

CVE-2023-49473 · shenzhen_project jf6000_cloud_media_collaboration_processing_platform_firmware

Shenzhen JF6000 Cloud Media Collaboration Processing Platform firmware version V1.2.0 and software version V2.0.0 build 6245 is vulnerabl…