The archive.

task_management_system_project1 vulnerability on this pageMax CVSS 9.8Priority 53KEV 0

CVE-2024-28556 · task_management_system_project task_management_system

SQL Injection vulnerability in Sourcecodester php task management system v1.0, allows remote attackers to execute arbitrary code, escalat…

EPSS 1%public exploit CVSS 9.8

Xiongmai1 vulnerability on this pageMax CVSS 9.8Priority 53KEV 0

CVE-2024-3765 · Xiongmai AHB7804R-MH-V2

Xiongmai AHB7804R-MH-V2 Sofia Service access control

EPSS 1%public exploit CVSS 9.8

phpgurukul7 vulnerabilities on this pageMax CVSS 9.8Priority 52KEV 0

CVE-2024-3769 · PHPGurukul Student Record System

PHPGurukul Student Record System login.php sql injection

EPSS 0.9%public exploit CVSS 9.8

CVE-2024-3768 · PHPGurukul News Portal

PHPGurukul/itsourcecode News Portal search.php sql injection

CVE-2024-3770 · PHPGurukul Student Record System

PHPGurukul Student Record System sql injection

CVE-2024-30985 · phpgurukul client_management_system

SQL Injection vulnerability in "B/W Dates Reports" page in phpgurukul Client Management System using PHP & MySQL 1.1 allows attacker to e…

EPSS 0.7%public exploit CVSS 9.8

CVE-2024-30990 · phpgurukul client_management_system

SQL Injection vulnerability in the "Invoices" page in phpgurukul Client Management System using PHP & MySQL 1.1 allows attacker to execut…

EPSS 0.6%public exploit CVSS 9.8

CVE-2024-30981 · phpgurukul cyber_cafe_management_system

SQL Injection vulnerability in /edit-computer-detail.php in phpgurukul Cyber Cafe Management System Using PHP & MySQL v1.0 allows attacke…

EPSS 0.5%public exploit CVSS 9.8

CVE-2024-30982 · phpgurukul cyber_cafe_management_system

SQL Injection vulnerability in phpgurukul Cyber Cafe Management System Using PHP & MySQL 1.0 allows attackers to run arbitrary SQL comman…

EPSS 0.5%CVSS 9.8

tenda2 vulnerabilities on this pageMax CVSS 9.8Priority 51KEV 0

CVE-2024-32286 · tenda w30e_firmware

Tenda W30E v1.0 V1.0.1.25(633) firmware has a stack overflow vulnerability located via the page parameter in the fromVirtualSer function.

CVE-2024-32301 · tenda ac7_firmware

Tenda AC7V1.0 v15.03.06.44 firmware has a stack overflow vulnerability via the PPW parameter in the fromWizardHandle function.

cosmetics_and_beauty_product_online_store_project1 vulnerability on this pageMax CVSS 9.6Priority 50KEV 0

CVE-2024-31650 · cosmetics_and_beauty_product_online_store_project cosmetics_and_beauty_product_online_store

A cross-site scripting (XSS) in Cosmetics and Beauty Product Online Store v1.0 allows attackers to execute arbitrary web scripts or HTML…

EPSS 0.8%public exploit CVSS 9.6

mlflow1 vulnerability on this pageMax CVSS 9.3Priority 49KEV 0

CVE-2024-3573 · mlflow mlflow/mlflow

Local File Inclusion (LFI) via Scheme Confusion in mlflow/mlflow

EPSS 0.7%public exploit CVSS 9.3

mintplex-labs2 vulnerabilities on this pageMax CVSS 9.1Priority 48KEV 0

CVE-2024-3029 · mintplex-labs mintplex-labs/anything-llm

Improper Input Validation in mintplex-labs/anything-llm

EPSS 0.7%public exploit CVSS 9.0

CVE-2024-0404 · mintplex-labs mintplex-labs/anything-llm

Mass Assignment Vulnerability in mintplex-labs/anything-llm

EPSS 0.8%CVSS 9.1

lunary-ai2 vulnerabilities on this pageMax CVSS 9.1Priority 46KEV 0

CVE-2024-1626 · lunary-ai lunary-ai/lunary

IDOR Vulnerability in lunary-ai/lunary

EPSS 0.5%public exploit CVSS 9.1

CVE-2024-1739 · lunary-ai lunary-ai/lunary

Case Insensitive Email Address Validation Vulnerability in lunary-ai/lunary

EPSS 0.6%CVSS 9.1

Deltra Electronics1 vulnerability on this pageMax CVSS 9.8Priority 45KEV 0

CVE-2024-3871 · Deltra Electronics DVW-W02W2-E2

Authenticated Remote Command Injection in Delta Electronics DVW

EPSS 2%CVSS 9.8

tensorflow1 vulnerability on this pageMax CVSS 9.8Priority 45KEV 0

CVE-2024-3660 · tensorflow keras

Arbitrary code injection vulnerability in Keras framework < 2.13

EPSS 2%CVSS 9.8

Realtyna1 vulnerability on this pageMax CVSS 9.3Priority 44KEV 0

CVE-2024-32128 · Realtyna Realtyna Organic IDX plugin

WordPress Realtyna Organic IDX plugin + WPL Real Estate plugin <= 4.14.4 - Unauthenticated SQL Injection vulnerability

EPSS 2%CVSS 9.3

ffmpeg1 vulnerability on this pageMax CVSS 9.8Priority 43KEV 0

CVE-2024-31581 · ffmpeg ffmpeg

FFmpeg version n6.1 was discovered to contain an improper validation of array index vulnerability in libavcodec/cbs_h266_syntax_template.c.

EPSS 1%CVSS 9.8

Mozilla1 vulnerability on this pageMax CVSS 9.8Priority 41KEV 0

CVE-2024-3863 · Mozilla Firefox

The executable file warning was not presented when downloading .xrm-ms files.

EPSS 0.8%CVSS 9.8

Oracle Corporation5 vulnerabilities on this pageMax CVSS 9.9Priority 41KEV 0

CVE-2024-20997 · Oracle Corporation Hospitality Simphony

Vulnerability in the Oracle Hospitality Simphony product of Oracle Food and Beverage Applications (component: Simphony Enterprise Server).

EPSS 0.8%CVSS 9.9

CVE-2024-21010 · Oracle Corporation Hospitality Simphony

Vulnerability in the Oracle Hospitality Simphony product of Oracle Food and Beverage Applications (component: Simphony Enterprise Server).

EPSS 0.7%CVSS 9.9

CVE-2024-21014 · Oracle Corporation Hospitality Simphony

Vulnerability in the Oracle Hospitality Simphony product of Oracle Food and Beverage Applications (component: Simphony Enterprise Server).

EPSS 0.8%CVSS 9.8

CVE-2024-21082 · Oracle Corporation BI Publisher (formerly XML Publisher)

Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: XML Services).

EPSS 0.8%CVSS 9.8

CVE-2024-21071 · Oracle Corporation Workflow

Vulnerability in the Oracle Workflow product of Oracle E-Business Suite (component: Admin Screens and Grants UI).

EPSS 0.7%CVSS 9.1

WBSAirback1 vulnerability on this pageMax CVSS 9.1Priority 41KEV 0

CVE-2024-3781 · WBSAirback White Bear Solutions

OS Command Injection vulnerability in WBSAirback

EPSS 1%CVSS 9.1

Ai31 vulnerability on this pageMax CVSS 9.8Priority 40KEV 0

CVE-2024-3777 · Ai3 QbiBot

Ai3 QbiBot - Broken Access Control

Combodo1 vulnerability on this pageMax CVSS 9.8Priority 40KEV 0

CVE-2023-48710 · Combodo iTop

iTop limit pages/exec.php script to PHP files

CS Technologies Australia2 vulnerabilities on this pageMax CVSS 9.8Priority 40KEV 0

CVE-2024-29844 · CS Technologies Australia Evolution Controller

Default credentials on web interface of Evolution Controller Versions allows attackers to login and perform administrative functions

CVE-2024-29836 · CS Technologies Australia Evolution Controller

Broken Authentication on USER_CHANGE in Evolution Controller allows unauthenticated account creation and takeover

cyber_cafe_management_system_project1 vulnerability on this pageMax CVSS 9.8Priority 40KEV 0

CVE-2024-30980 · cyber_cafe_management_system_project cyber_cafe_management_system

SQL Injection vulnerability in phpgurukul Cyber Cafe Management System Using PHP & MySQL 1.0 allows attackers to run arbitrary SQL comman…

jizhicms1 vulnerability on this pageMax CVSS 9.8Priority 40KEV 0

CVE-2024-32161 · jizhicms jizhicms

jizhiCMS 2.5 suffers from a File upload vulnerability.

openfga1 vulnerability on this pageMax CVSS 9.8Priority 40KEV 0

CVE-2024-31452 · openfga openfga

OpenFGA Authorization Bypass

TECNO1 vulnerability on this pageMax CVSS 9.8Priority 40KEV 0

CVE-2024-3701 · TECNO com.transsion.kolun.aiservice

Improper Authentication in com.transsion.kolun.aiservice

BUFFALO INC.1 vulnerability on this pageMax CVSS 9.8Priority 39KEV 0

CVE-2024-23486 · BUFFALO INC. WSR-2533DHP

Plaintext storage of a password issue exists in BUFFALO wireless LAN routers, which may allow a network-adjacent unauthenticated attacker…