The archive.

CVE-2024-22373 · Grassroot DICOM Grassroot DICOM

An out-of-bounds write vulnerability exists in the JPEG2000Codec::DecodeByStreamsCommon functionality of Mathieu Malaterre Grassroot DICO…

EPSS 2%CVSS 9.8

tenda4 vulnerabilities on this pageMax CVSS 9.8Priority 54KEV 0

CVE-2024-4164 · Tenda G3

Tenda G3 ModifyPppAuthWhiteMac formModifyPppAuthWhiteMac stack-based overflow

CVE-2024-4165 · Tenda G3

Tenda G3 modifyDhcpRule stack-based overflow

CVE-2024-25343 · tenda n300

Tenda N300 F3 router vulnerability allows users to bypass intended security policy and create weak passwords.

EPSS 0.5%public exploit CVSS 9.1

CVE-2024-33215 · tenda fh1206_firmware

Tenda FH1206 V1.2.0.8(8155)_EN was discovered to contain a stack-based buffer overflow vulnerability via the mitInterface parameter in ip…

mysql21 vulnerability on this pageMax CVSS 9.8Priority 52KEV 0

CVE-2024-21511 · mysql2 mysql2

Versions of the package mysql2 before 3.9.7 are vulnerable to Arbitrary Code Injection due to improper sanitization of the timezone param…

setor1 vulnerability on this pageMax CVSS 9.8Priority 52KEV 0

CVE-2024-22632 · setor sil

Setor Informatica Sistema Inteligente para Laboratorios (S.I.L.) 388 was discovered to contain a remote code execution (RCE) vulnerabilit…

setor_informatica_sistema_inteligente_para_laboritorios_\/sil\/1 vulnerability on this pageMax CVSS 9.8Priority 52KEV 0

CVE-2024-22633 · setor_informatica_sistema_inteligente_para_laboritorios_\/sil\/ setor_informatica_sistema_inteligente_para_laboritorios_\/sil\/

Setor Informatica Sistema Inteligente para Laboratorios (S.I.L.) 388 was discovered to contain a remote code execution (RCE) vulnerabilit…

EPSS 0.9%public exploit CVSS 9.8

puneethreddyhc1 vulnerability on this pageMax CVSS 9.8Priority 51KEV 0

CVE-2024-28322 · puneethreddyhc event_management

SQL Injection vulnerability in /event-management-master/backend/register.php in PuneethReddyHC Event Management 1.0 allows attackers to r…

EPSS 0.8%public exploit CVSS 9.8

thinkcmf1 vulnerability on this pageMax CVSS 9.8Priority 50KEV 0

CVE-2024-31615 · thinkcmf thinkcmf

ThinkCMF 6.0.9 is vulnerable to File upload via UeditorController.php.

EPSS 0.7%public exploit CVSS 9.8

d-link1 vulnerability on this pageMax CVSS 9.8Priority 49KEV 0

CVE-2024-33344 · d-link dir-822

D-Link DIR-822+ V1.0.5 was found to contain a command injection in ftext function of upload_firmware.cgi, which allows remote attackers t…

EPSS 20%CVSS 9.8

FreeRDP5 vulnerabilities on this pageMax CVSS 9.8Priority 47KEV 0

CVE-2024-32459 · FreeRDP FreeRDP

FreeRDP Out-Of-Bounds Read in ncrush_decompress

EPSS 4%CVSS 9.8

CVE-2024-32460 · FreeRDP FreeRDP

FreeRDP Out-Of-Bounds Read in interleaved_decompress

EPSS 2%CVSS 9.8

CVE-2024-32658 · FreeRDP FreeRDP

FreeRDP ExtractRunLengthRegular* out of bound read

CVE-2024-32659 · FreeRDP FreeRDP

freerdp_image_copy out of bound read

CVE-2024-32662 · FreeRDP FreeRDP

FreeRDP rdp_redirection_read_base64_wchar out of bound read

EPSS 0.8%CVSS 9.8

Plechev Andrey1 vulnerability on this pageMax CVSS 9.3Priority 47KEV 0

CVE-2024-32709 · Plechev Andrey WP-Recall

WordPress WP-Recall plugin <= 16.26.5 - SQL Injection vulnerability

EPSS 6%CVSS 9.3

QNAP Systems Inc.3 vulnerabilities on this pageMax CVSS 10.0Priority 47KEV 0

CVE-2024-32766 · QNAP Systems Inc. QTS

QTS, QuTS hero, QuTScloud

EPSS 2%CVSS 10.0

CVE-2023-47222 · QNAP Systems Inc. Media Streaming add-on

Media Streaming add-on

EPSS 0.5%CVSS 9.8

CVE-2024-32764 · QNAP Systems Inc. myQNAPcloud Link

myQNAPcloud Link

EPSS 0.4%CVSS 9.9

Elementor1 vulnerability on this pageMax CVSS 9.8Priority 45KEV 0

CVE-2023-47504 · Elementor Elementor Website Builder

WordPress Elementor plugin <= 3.16.4 - Auth. Arbitrary Attachment Read vulnerability

EPSS 2%CVSS 9.8

zammad1 vulnerability on this pageMax CVSS 9.1Priority 45KEV 0

CVE-2024-33668 · zammad zammad

An issue was discovered in Zammad before 6.3.0.

EPSS 0.5%public exploit CVSS 9.1

themeisle1 vulnerability on this pageMax CVSS 9.8Priority 44KEV 0

CVE-2024-3962 · themeisle PPOM – Product Addons & Custom Fields for WooCommerce

Product Addons & Fields for WooCommerce <= 32.0.18 - Unauthenticated Arbitrary File Upload via ppom_upload_file

Eclipse Foundation1 vulnerability on this pageMax CVSS 9.8Priority 43KEV 0

CVE-2024-0740 · Eclipse Foundation Eclipse Target Management

Eclipse Target Management <= 4.5.500 Command Injection

Webkul Software1 vulnerability on this pageMax CVSS 10.0Priority 43KEV 0

CVE-2024-0916 · Webkul Software UvDesk Community

Unauthenticated Remote Code Execution in UvDesk Community

EPSS 1.0%CVSS 10.0

pyload1 vulnerability on this pageMax CVSS 9.1Priority 42KEV 0

CVE-2024-32880 · pyload pyload

pyLoad allows upload to arbitrary folder lead to RCE

EPSS 1%CVSS 9.1

asus1 vulnerability on this pageMax CVSS 9.8Priority 41KEV 0

CVE-2024-30804 · asus fan_xpert

An issue discovered in the DeviceIoControl component in ASUS Fan_Xpert before v.10013 allows an attacker to execute arbitrary code via cr…

EPSS 0.8%CVSS 9.8

Unlimited Elements1 vulnerability on this pageMax CVSS 9.9Priority 41KEV 0

CVE-2023-31090 · Unlimited Elements Unlimited Elements For Elementor (Free Widgets, Addons, Templates)

WordPress Unlimited Elements For Elementor plugin <= 1.5.60 - Unrestricted Zip Extraction vulnerability

EPSS 0.8%CVSS 9.9

Abdul Hakeem1 vulnerability on this pageMax CVSS 9.8Priority 40KEV 0

CVE-2023-51478 · Abdul Hakeem Build App Online

WordPress Build App Online plugin <= 1.0.19 - Unauthenticated Account Takeover vulnerability

BUDDYBOSS DMCC1 vulnerability on this pageMax CVSS 9.8Priority 40KEV 0

CVE-2023-51477 · BUDDYBOSS DMCC BuddyBoss Theme

WordPress BuddyBoss Theme theme <= 2.4.60 - Unauth. Arbitrary WordPress Settings Change vulnerability

EazyPlugins1 vulnerability on this pageMax CVSS 9.9Priority 40KEV 0

CVE-2023-51482 · EazyPlugins Eazy Plugin Manager

WordPress Eazy Plugin Manager plugin <= 4.1.2 - Auth. Arbitrary Options Update lead to RCE vulnerability

EPSS 0.7%CVSS 9.9

Mestres do WP1 vulnerability on this pageMax CVSS 9.8Priority 40KEV 0

CVE-2023-51472 · Mestres do WP Checkout Mestres WP

WordPress Checkout Mestres WP plugin <= 7.1.9.7 - Unauthenticated Account Takeover vulnerability

mitre1 vulnerability on this pageMax CVSS 9.8Priority 40KEV 0

CVE-2024-28613 · mitre

SQL Injection vulnerability in PHP Task Management System v.1.0 allows a remote attacker to escalate privileges and obtain sensitive info…

EPSS 0.6%CVSS 9.8

Repute Infosystems2 vulnerabilities on this pageMax CVSS 9.8Priority 40KEV 0

CVE-2023-51405 · Repute Infosystems BookingPress

WordPress BookingPress plugin <= 1.0.74 - Booking Price Manipulation vulnerability

CVE-2024-32948 · Repute Infosystems ARMember

WordPress ARMember – Membership Plugin plugin <= 4.0.28 - Broken Access Control vulnerability

EPSS 0.6%CVSS 9.1

wp-buy1 vulnerability on this pageMax CVSS 9.8Priority 40KEV 0

CVE-2023-51484 · wp-buy Login as User or Customer (User Switching)

WordPress Login as User or Customer plugin <= 3.8 - Unauthenticated Account Takeover vulnerability