The archive.

CVE-2024-3413 · SourceCodester Human Resource Information System

SourceCodester Human Resource Information System login_process.php sql injection

EPSS 1.0%public exploit CVSS 9.8

CVE-2024-3416 · SourceCodester Online Courseware

SourceCodester Online Courseware editt.php sql injection

CVE-2024-3347 · SourceCodester Airline Ticket Reservation System

SourceCodester Airline Ticket Reservation System activate_jet_details_form_handler.php sql injection

CVE-2024-3349 · SourceCodester Aplaya Beach Resort Online Reservation System

SourceCodester Aplaya Beach Resort Online Reservation System login.php sql injection

CVE-2024-3351 · SourceCodester Aplaya Beach Resort Online Reservation System

SourceCodester Aplaya Beach Resort Online Reservation System index.php sql injection

CVE-2024-3352 · SourceCodester Aplaya Beach Resort Online Reservation System

SourceCodester Aplaya Beach Resort Online Reservation System index.php sql injection

CVE-2024-3356 · SourceCodester Aplaya Beach Resort Online Reservation System

SourceCodester Aplaya Beach Resort Online Reservation System sql injection

CVE-2024-3363 · SourceCodester Online Library System

SourceCodester Online Library System index.php sql injection

CVE-2024-3417 · SourceCodester Online Courseware

SourceCodester Online Courseware saveeditt.php sql injection

EPSS 0.8%public exploit CVSS 9.8

CVE-2024-3420 · SourceCodester Online Courseware

SourceCodester Online Courseware saveedit.php sql injection

EPSS 0.8%public exploit CVSS 9.8

CVE-2024-3315 · SourceCodester Computer Laboratory Management System

SourceCodester Computer Laboratory Management System user.php sql injection

EPSS 0.7%public exploit CVSS 9.8

CVE-2024-3418 · SourceCodester Online Courseware

SourceCodester Online Courseware deactivateteach.php sql injection

EPSS 0.7%public exploit CVSS 9.8

CVE-2024-3421 · SourceCodester Online Courseware

SourceCodester Online Courseware deactivatestud.php sql injection

EPSS 0.7%public exploit CVSS 9.8

CVE-2024-3359 · SourceCodester Online Library System

SourceCodester Online Library System login.php sql injection

EPSS 1.0%CVSS 9.8

CVE-2024-3348 · SourceCodester Aplaya Beach Resort Online Reservation System

SourceCodester Aplaya Beach Resort Online Reservation System index.php sql injection

CVE-2024-3350 · SourceCodester Aplaya Beach Resort Online Reservation System

SourceCodester Aplaya Beach Resort Online Reservation System index.php sql injection

CVE-2024-3354 · SourceCodester Aplaya Beach Resort Online Reservation System

SourceCodester Aplaya Beach Resort Online Reservation System index.php sql injection

CVE-2024-3355 · SourceCodester Aplaya Beach Resort Online Reservation System

SourceCodester Aplaya Beach Resort Online Reservation System sql injection

CVE-2024-3419 · SourceCodester Online Courseware

SourceCodester Online Courseware edit.php sql injection

EPSS 0.8%CVSS 9.8

CVE-2024-3314 · SourceCodester Computer Laboratory Management System

SourceCodester Computer Laboratory Management System Users.php sql injection

EPSS 0.5%CVSS 9.8

Xuxueli1 vulnerability on this pageMax CVSS 9.8Priority 52KEV 0

CVE-2024-3366 · Xuxueli xxl-job

Xuxueli xxl-job Template JdkSerializeTool.java deserialize injection

baptisteArno1 vulnerability on this pageMax CVSS 9.3Priority 50KEV 0

CVE-2024-30264 · baptisteArno typebot.io

typebot.io: `GHSL-2024-040`

EPSS 0.8%public exploit CVSS 9.3

Ivanti1 vulnerability on this pageMax CVSS 9.8Priority 49KEV 0

CVE-2024-21894 · Ivanti Connect Secure

A heap overflow vulnerability in IPSec component of Ivanti Connect Secure (9.x, 22.x) and Ivanti Policy Secure allows an unauthenticated…

EPSS 19%CVSS 9.8

maildev1 vulnerability on this pageMax CVSS 9.1Priority 49KEV 0

CVE-2024-27448 · maildev maildev

MailDev 2 through 2.1.0 allows Remote Code Execution via a crafted Content-ID header for an e-mail attachment, leading to lib/mailserver.…

EPSS 0.9%public exploit CVSS 9.1

SiYuan1 vulnerability on this pageMax CVSS 9.0Priority 48KEV 0

CVE-2024-2692 · SiYuan SiYuan

SiYuan 3.0.3 - RCE via Server Side XSS

EPSS 0.7%public exploit CVSS 9.0

WordPress1 vulnerability on this pageMax CVSS 9.8Priority 47KEV 0

CVE-2024-31211 · WordPress wordpress-develop

Remote Code Execution in `WP_HTML_Token`

EPSS 3%CVSS 9.8

mitre1 vulnerability on this pageMax CVSS 9.8Priority 44KEV 0

CVE-2024-29375 · mitre

CSV Injection vulnerability in Addactis IBNRS v.3.10.3.107 allows a remote attacker to execute arbitrary code via a crafted .ibnrs file t…

EPSS 1%CVSS 9.8

Ubiquiti Inc1 vulnerability on this pageMax CVSS 9.8Priority 44KEV 0

CVE-2024-27981 · Ubiquiti Inc UniFi Network Application

A Command Injection vulnerability found in a Self-Hosted UniFi Network Servers (Linux) with UniFi Network Application (Version 8.0.28 and…

EPSS 1%CVSS 9.8

Brocade1 vulnerability on this pageMax CVSS 9.8Priority 43KEV 0

CVE-2023-3454 · Brocade Fabric OS

Remote code execution (RCE) vulnerability in Brocade Fabric OS after v9.0 and before v9.2.0 could allow an attacker to execute arbitrary…

EPSS 1%CVSS 9.8

IBM2 vulnerabilities on this pageMax CVSS 10.0Priority 42KEV 0

CVE-2024-28787 · IBM Security Verify Access Container

IBM Security Verify Access information disclosure

EPSS 0.8%CVSS 10.0

CVE-2024-25029 · IBM Personal Communications

IBM Personal Communications code execution

EPSS 0.8%CVSS 10.0

Apache Software Foundation1 vulnerability on this pageMax CVSS 9.8Priority 41KEV 0

CVE-2024-29006 · Apache Software Foundation Apache CloudStack

Apache CloudStack: x-forwarded-for HTTP header parsed by default

itb_gmbh1 vulnerability on this pageMax CVSS 9.8Priority 41KEV 0

CVE-2023-36645 · itb_gmbh tradepro

SQL injection vulnerability in ITB-GmbH TradePro v9.5, allows remote attackers to run SQL queries via oordershow component in customer fu…

Linux3 vulnerabilities on this pageMax CVSS 9.8Priority 41KEV 0

CVE-2024-26800 · Linux Linux

tls: fix use-after-free on failed backlog decryption

CVE-2024-26760 · Linux Linux

scsi: target: pscsi: Fix bio_put() for error case

CVE-2024-26782 · Linux Linux

mptcp: fix double-free on socket dismantle

webhood-io1 vulnerability on this pageMax CVSS 9.8Priority 40KEV 0

CVE-2024-31218 · webhood-io webhood

Missing Authentication for Critical Function in Webhood backend