The archive.

CVE-2024-3455 · Netentsec NS-ASG Application Security Gateway

Netentsec NS-ASG Application Security Gateway add_postlogin.php sql injection

EPSS 0.7%public exploit CVSS 9.8

CVE-2024-3457 · Netentsec NS-ASG Application Security Gateway

Netentsec NS-ASG Application Security Gateway config_ISCGroupNoCache.php sql injection

EPSS 0.7%public exploit CVSS 9.8

CVE-2024-3458 · Netentsec NS-ASG Application Security Gateway

Netentsec NS-ASG Application Security Gateway add_ikev2.php sql injection

SourceCodester9 vulnerabilities on this pageMax CVSS 9.8Priority 51KEV 0

CVE-2024-3422 · SourceCodester Online Courseware

SourceCodester Online Courseware activatestud.php sql injection

CVE-2024-3423 · SourceCodester Online Courseware

SourceCodester Online Courseware activateteach.php sql injection

CVE-2024-3424 · SourceCodester Online Courseware

SourceCodester Online Courseware listscore.php sql injection

CVE-2024-3425 · SourceCodester Online Courseware

SourceCodester Online Courseware activateall.php sql injection

CVE-2024-3438 · SourceCodester Prison Management System

SourceCodester Prison Management System login.php sql injection

EPSS 0.9%public exploit CVSS 9.8

CVE-2024-3439 · SourceCodester Prison Management System

SourceCodester Prison Management System login.php sql injection

EPSS 0.9%public exploit CVSS 9.8

CVE-2024-3445 · SourceCodester Laundry Management System

SourceCodester Laundry Management System laporan_filter sql injection

CVE-2024-3465 · SourceCodester Laundry Management System

SourceCodester Laundry Management System Transaki.php laporan_filter sql injection

CVE-2024-3464 · SourceCodester Laundry Management System

SourceCodester Laundry Management System Pelanggan.php laporan_filter sql injection

EPSS 0.8%CVSS 9.8

Bitdefender2 vulnerabilities on this pageMax CVSS 9.8Priority 50KEV 0

CVE-2024-2224 · Bitdefender GravityZone Control Center (On Premises)

Privilege Escalation via the GravityZone productManager UpdateServer.KitsManager API (VA-11466)

EPSS 0.7%public exploit CVSS 9.8

CVE-2024-2223 · Bitdefender GravityZone Control Center (On Premises)

Incorrect Regular Expression in GravityZone Update Server (VA-11465)

EPSS 0.5%CVSS 9.8

stylemix1 vulnerability on this pageMax CVSS 9.8Priority 48KEV 0

CVE-2024-3136 · stylemix MasterStudy LMS WordPress Plugin – for Online Courses and Education

MasterStudy LMS <= 3.3.3 - Unauthenticated Local File Inclusion via template

EPSS 5%CVSS 9.8

LG4 vulnerabilities on this pageMax CVSS 9.8Priority 46KEV 0

CVE-2023-6318 · LG webOS

Command injection in the processAnalyticsReport method from the com.webos.service.cloudupload service

EPSS 5%CVSS 9.1

CVE-2023-6319 · LG webOS

Command injection in the getAudioMetadata method from the com.webos.service.attachedstoragemanager service

EPSS 6%CVSS 9.1

CVE-2023-6320 · LG webOS

Command injection in the com.webos.service.connectionmanager/tv/setVlanStaticAddress endpoint

EPSS 4%CVSS 9.1

CVE-2023-6317 · LG WebOS

PIN/prompt bypass on the secondscreen.gateway service allows access to the SSAP API without user interaction

Microsoft1 vulnerability on this pageMax CVSS 9.0Priority 46KEV 0

CVE-2024-29990 · Microsoft Azure Kubernetes Service

Microsoft Azure Kubernetes Service Confidential Container Elevation of Privilege Vulnerability

EPSS 18%CVSS 9.0

Apache Software Foundation2 vulnerabilities on this pageMax CVSS 9.8Priority 45KEV 0

CVE-2024-31866 · Apache Software Foundation Apache Zeppelin

Apache Zeppelin: Interpreter download command does not escape malicious code injection

CVE-2024-31864 · Apache Software Foundation Apache Zeppelin

Apache Zeppelin: Remote code execution by adding malicious JDBC connection string

irontec2 vulnerabilities on this pageMax CVSS 9.8Priority 45KEV 0

CVE-2024-3119 · irontec sngrep

Stack-Buffer Overflow in 'Call-ID' and 'X-Call-ID' SIP Header Processing in sngrep

CVE-2024-3120 · irontec sngrep

Stack-Buffer Overflow in 'Content-Length' and 'Warning' Header Processing in sngrep

Tp-Link2 vulnerabilities on this pageMax CVSS 9.8Priority 45KEV 0

CVE-2023-49133 · Tp-Link AC1350 Wireless MU-MIMO Gigabit Access Point (EAP225 V3)

A command execution vulnerability exists in the tddpd enable_test_mode functionality of Tp-Link AC1350 Wireless MU-MIMO Gigabit Access Po…

CVE-2023-49134 · Tp-Link AC1350 Wireless MU-MIMO Gigabit Access Point (EAP225 V3)

A command execution vulnerability exists in the tddpd enable_test_mode functionality of Tp-Link AC1350 Wireless MU-MIMO Gigabit Access Po…

yt-dlp1 vulnerability on this pageMax CVSS 9.8Priority 44KEV 0

CVE-2024-22423 · yt-dlp yt-dlp

yt-dlp `--exec` command injection when using `%q` in yt-dlp on Windows

binary-husky1 vulnerability on this pageMax CVSS 9.8Priority 43KEV 0

CVE-2024-31224 · binary-husky gpt_academic

GPT Academic: Pickle deserializing cookies may pose RCE risk

Fortinet1 vulnerability on this pageMax CVSS 9.4Priority 43KEV 0

CVE-2023-45590 · Fortinet FortiClientLinux

An improper control of generation of code ('code injection') in Fortinet FortiClientLinux version 7.2.0, 7.0.6 through 7.0.10 and 7.0.3 t…

EPSS 2%CVSS 9.4

presstigers1 vulnerability on this pageMax CVSS 9.8Priority 43KEV 0

CVE-2024-1813 · presstigers Simple Job Board

Simple Job Board <= 2.11.0 - Unauthenticated PHP Object Injection via Job Application Fields

candycms1 vulnerability on this pageMax CVSS 9.8Priority 42KEV 0

CVE-2024-31022 · candycms candycms

An issue was discovered in CandyCMS version 1.0.0, allows remote attackers to execute arbitrary code via the install.php component.

EPSS 0.9%CVSS 9.8

J.N. Breetvelt a.k.a. OpaJaap1 vulnerability on this pageMax CVSS 9.9Priority 42KEV 0

CVE-2024-31286 · J.N. Breetvelt a.k.a. OpaJaap WP Photo Album Plus

WordPress WP Photo Album Plus plugin < 8.6.03.005 - Arbitrary File Upload vulnerability

EPSS 0.9%CVSS 9.9

secure_lockdown1 vulnerability on this pageMax CVSS 9.8Priority 42KEV 0

CVE-2024-29500 · secure_lockdown multi_application_edition

An issue in the kiosk mode of Secure Lockdown Multi Application Edition v2.00.219 allows attackers to execute arbitrary code via running…

Linux1 vulnerability on this pageMax CVSS 9.8Priority 41KEV 0

CVE-2024-26811 · Linux Linux

ksmbd: validate payload size in ipc response

EPSS 0.8%CVSS 9.8

Relevanssi1 vulnerability on this pageMax CVSS 9.8Priority 41KEV 0

CVE-2024-3214 · Relevanssi Relevanssi Premium

Relevanssi – A Better Search <= 4.22.1 - Unauthenticated Second Order CSV Injection

EPSS 0.8%CVSS 9.8

andy_moyle1 vulnerability on this pageMax CVSS 9.9Priority 40KEV 0

CVE-2024-31280 · andy_moyle Church Admin

WordPress Church Admin plugin <= 4.1.5 - Arbitrary File Upload vulnerability

EPSS 0.6%CVSS 9.9

jokr1 vulnerability on this pageMax CVSS 9.8Priority 40KEV 0

CVE-2024-2804 · jokr Network Summary

Network Summary <= 2.0.11 - Unauthenticated SQL Injection

mtommila1 vulnerability on this pageMax CVSS 9.8Priority 40KEV 0

CVE-2024-23086 · mtommila apfloat

Apfloat v1.10.1 was discovered to contain a stack overflow via the component org.apfloat.internal.DoubleModMath::modPow(double.

Welotec1 vulnerability on this pageMax CVSS 9.8Priority 40KEV 0

CVE-2023-1083 · Welotec TK515L

Welotec: improper access control in TK500v1 router series