Critical vulnerability archive — page 465

Progress Software1 vulnerability on this pageMax CVSS 10.0Priority 60KEV 0

CVE-2024-2389 · Progress Software Flowmon

Flowmon Unauthenticated Command Injection Vulnerability

EPSS 93%public exploit CVSS 10.0

gibbonedu1 vulnerability on this pageMax CVSS 9.8Priority 59KEV 0

CVE-2024-24724 · gibbonedu gibbon

Gibbon through 26.0.00 allows /modules/School%20Admin/messengerSettings.php Server Side Template Injection leading to Remote Code Executi…

EPSS 26%public exploit CVSS 9.8

netgear1 vulnerability on this pageMax CVSS 9.8Priority 59KEV 0

CVE-2024-30568 · netgear r6850_firmware

Netgear R6850 1.1.0.88 was discovered to contain a command injection vulnerability via the c4-IPAddr parameter.

EPSS 47%public exploit CVSS 9.8

seeyonao1 vulnerability on this pageMax CVSS 9.8Priority 59KEV 0

CVE-2024-29276 · seeyonao seeyonoa

An issue was discovered in seeyonOA version 8, allows remote attackers to execute arbitrary code via the importProcess method in WorkFlow…

EPSS 33%public exploit CVSS 9.8

beescms1 vulnerability on this pageMax CVSS 9.8Priority 53KEV 0

CVE-2024-31011 · beescms beescms

Arbitrary file write vulnerability in beescms v.4.0, allows a remote attacker to execute arbitrary code via a file path that was not isol…

EPSS 1%public exploit CVSS 9.8

phpgurukul1 vulnerability on this pageMax CVSS 9.8Priority 53KEV 0

CVE-2024-30998 · phpgurukul men_salon_management_system

SQL Injection vulnerability in PHPGurukul Men Salon Management System v.2.0, allows remote attackers to execute arbitrary code and obtain…

EPSS 1%public exploit CVSS 9.8

sem-cms1 vulnerability on this pageMax CVSS 9.8Priority 53KEV 0

CVE-2024-31012 · sem-cms semcms

An issue was discovered in SEMCMS v.4.8, allows remote attackers to execute arbitrary code, escalate privileges, and obtain sensitive inf…

EPSS 1%public exploit CVSS 9.8

ermig19791 vulnerability on this pageMax CVSS 9.8Priority 52KEV 0

CVE-2024-3207 · ermig1979 Simd

ermig1979 Simd SimdMemoryStream.h ReadUnsigned heap-based overflow

EPSS 1.0%public exploit CVSS 9.8

gleezcms1 vulnerability on this pageMax CVSS 9.4Priority 51KEV 0

CVE-2021-27312 · gleezcms gleez_cms

Server Side Request Forgery (SSRF) vulnerability in Gleez Cms 1.2.0, allows remote attackers to execute arbitrary code and obtain sensiti…

EPSS 1%public exploit CVSS 9.4

SourceCodester1 vulnerability on this pageMax CVSS 9.8Priority 51KEV 0

CVE-2024-3252 · SourceCodester Internship Portal Management System

SourceCodester Internship Portal Management System check_admin.php sql injection

EPSS 0.8%public exploit CVSS 9.8

tenda2 vulnerabilities on this pageMax CVSS 9.8Priority 51KEV 0

CVE-2024-30620 · tenda ax1803

Tenda AX1803 v1.0.0.1 contains a stack overflow via the serviceName parameter in the function fromAdvSetMacMtuWan.

EPSS 0.8%public exploit CVSS 9.8

CVE-2024-30621 · tenda ax1803_firmware

Tenda AX1803 v1.0.0.1 contains a stack overflow via the serverName parameter in the function fromAdvSetMacMtuWan.

EPSS 0.7%public exploit CVSS 9.8

netentsec3 vulnerabilities on this pageMax CVSS 9.8Priority 50KEV 0

CVE-2024-30868 · netentsec ns-asg_firmware

netentsec NS-ASG 6.3 is vulnerable to SQL Injection via /admin/add_getlogin.php.

EPSS 0.7%public exploit CVSS 9.8

CVE-2024-30865 · netentsec ns-asg

netentsec NS-ASG 6.3 is vulnerable to SQL Injection via /admin/edit_user_login.php.

EPSS 0.7%CVSS 9.8

CVE-2024-30867 · netentsec ns-asg

netentsec NS-ASG 6.3 is vulnerable to SQL Injection via /admin/edit_virtual_site_info.php.

EPSS 0.7%CVSS 9.8

ns_asg1 vulnerability on this pageMax CVSS 9.8Priority 50KEV 0

CVE-2024-30858 · ns_asg ns_asg

netentsec NS-ASG 6.3 is vulnerable to SQL Injection via /admin/edit_fire_wall.php.

EPSS 0.7%public exploit CVSS 9.8

Filter Custom Fields & Taxonomies Light1 vulnerability on this pageMax CVSS 9.8Priority 49KEV 0

CVE-2024-31094 · Filter Custom Fields & Taxonomies Light Filter Custom Fields & Taxonomies Light

WordPress Filter Custom Fields & Taxonomies Light plugin <= 1.05 - PHP Object Injection vulnerability

EPSS 0.5%public exploit CVSS 9.8

LayerSlider1 vulnerability on this pageMax CVSS 9.8Priority 49KEV 0

CVE-2024-2879 · LayerSlider LayerSlider

The LayerSlider plugin for WordPress is vulnerable to SQL Injection via the ls_get_popup_markup action in versions 7.9.11 and 7.10.0 due…

EPSS 18%CVSS 9.8

Voltronic Power3 vulnerabilities on this pageMax CVSS 9.8Priority 49KEV 0

CVE-2023-51572 · Voltronic Power ViewPower Pro

Voltronic Power ViewPower Pro getMacAddressByIp Command Injection Remote Code Execution Vulnerability

EPSS 38%CVSS 9.8

CVE-2023-51573 · Voltronic Power ViewPower Pro

Voltronic Power ViewPower Pro updateManagerPassword Exposed Dangerous Function Authentication Bypass Vulnerability

EPSS 46%CVSS 9.8

CVE-2023-51570 · Voltronic Power ViewPower Pro

Voltronic Power ViewPower Pro Deserialization of Untrusted Data Remote Code Execution Vulnerability

EPSS 1%CVSS 9.8

Delta Electronics1 vulnerability on this pageMax CVSS 9.8Priority 48KEV 0

CVE-2024-25574 · Delta Electronics DIAEnergie

Delta Electronics DIAEnergie SQL Injection

EPSS 9%CVSS 9.8

alldata3 vulnerabilities on this pageMax CVSS 9.8Priority 45KEV 0

CVE-2024-27602 · alldata alldata

Alldata V0.4.6 is vulnerable to Incorrect Access Control.

EPSS 0.4%public exploit CVSS 9.1

CVE-2024-29433 · alldata alldata

A deserialization vulnerability in the FASTJSON component of Alldata v0.4.6 allows attackers to execute arbitrary commands via supplying…

EPSS 0.8%CVSS 9.8

CVE-2024-29432 · alldata alldata

Alldata v0.4.6 was discovered to contain a SQL injection vulnerability via the tablename parameter at /data/masterdata/datas.

EPSS 0.5%CVSS 9.8

Jack Arturo1 vulnerability on this pageMax CVSS 9.9Priority 45KEV 0

CVE-2024-27972 · Jack Arturo WP Fusion Lite

WordPress WP Fusion Lite plugin <= 3.41.24 - Remote Code Execution (RCE) vulnerability

EPSS 2%CVSS 9.9

bento41 vulnerability on this pageMax CVSS 9.8Priority 44KEV 0

CVE-2024-31002 · bento4 bento4

Buffer Overflow vulnerability in Bento4 Bento v.1.6.0-641 allows a remote attacker to execute arbitrary code via the AP4 BitReader::ReadC…

EPSS 1%CVSS 9.8

c-blosc2_project1 vulnerability on this pageMax CVSS 9.8Priority 44KEV 0

CVE-2024-3204 · c-blosc2_project c-blosc2

c-blosc2 ndlz4x4.c ndlz4_decompress heap-based overflow

EPSS 1%CVSS 9.8

cornerstoneplatform1 vulnerability on this pageMax CVSS 9.8Priority 44KEV 0

CVE-2024-28515 · cornerstoneplatform csapp_lab3

Buffer Overflow vulnerability in CSAPP_Lab CSAPP Lab3 15-213 Fall 20xx allows a remote attacker to execute arbitrary code via the lab3 of…

EPSS 2%CVSS 9.8

mitre2 vulnerabilities on this pageMax CVSS 9.8Priority 44KEV 0

CVE-2024-31004 · mitre

An issue in Bento4 Bento v.1.6.0-641 allows a remote attacker to execute arbitrary code via the Ap4StsdAtom.cpp,AP4_StsdAtom::AP4_StsdAto…

EPSS 2%CVSS 9.8

CVE-2024-27604 · mitre

Alldata V0.4.6 is vulnerable to Command execution vulnerability.

EPSS 1%CVSS 9.8

VideoWhisper.com1 vulnerability on this pageMax CVSS 9.8Priority 44KEV 0

CVE-2023-25699 · VideoWhisper.com VideoWhisper Live Streaming Integration

WordPress VideoWhisper Live Streaming Integration plugin <= 5.5.15 - Remote Code Execution (RCE)

EPSS 1%CVSS 9.8

VulDB2 vulnerabilities on this pageMax CVSS 9.8Priority 44KEV 0

CVE-2024-3203 · VulDB

c-blosc2 ndlz8x8.c ndlz8_decompress heap-based overflow

EPSS 1%CVSS 9.8

CVE-2024-3209 · VulDB

UPX bele.h get_ne64 heap-based overflow

EPSS 1%CVSS 9.8

Sante1 vulnerability on this pageMax CVSS 9.8Priority 43KEV 0

CVE-2024-1863 · Sante PACS Server

Sante PACS Server Token Endpoint SQL Injection Remote Code Execution Vulnerability

EPSS 1%CVSS 9.8

biplob0181 vulnerability on this pageMax CVSS 9.1Priority 42KEV 0

CVE-2024-31114 · biplob018 Shortcode Addons

WordPress Shortcode Addons <= 3.2.5 - Arbitrary File Upload vulnerability

EPSS 1%CVSS 9.1

Soflyy2 vulnerabilities on this pageMax CVSS 9.9Priority 42KEV 0

CVE-2024-31390 · Soflyy Breakdance

WordPress Breakdance plugin <= 1.7.2 - Authenticated Remote Code Execution (RCE) vulnerability

EPSS 0.9%CVSS 9.9

CVE-2024-31380 · Soflyy Oxygen Builder

WordPress Oxygen plugin <= 4.9 - Authenticated Remote Code Execution (RCE) vulnerability

EPSS 0.8%CVSS 9.9

Canto Inc.1 vulnerability on this pageMax CVSS 10.0Priority 41KEV 0

CVE-2024-25096 · Canto Inc. Canto

WordPress canto plugin <= 3.0.7 - Unauth. Remote Code Execution (RCE) vulnerability

EPSS 0.7%CVSS 10.0

Cwicly Builder, SL.1 vulnerability on this pageMax CVSS 9.9Priority 41KEV 0

CVE-2024-24707 · Cwicly Builder, SL. Cwicly

WordPress Cwicly plugin <= 1.4.0.2 - Auth. Remote Code Execution (RCE) vulnerability

EPSS 0.7%CVSS 9.9

InstaWP1 vulnerability on this pageMax CVSS 9.9Priority 40KEV 0

CVE-2024-25918 · InstaWP InstaWP Connect

WordPress InstaWP Connect plugin <= 0.1.0.8 - Remote Code Execution vulnerability

EPSS 0.7%CVSS 9.9

Qualcomm, Inc.2 vulnerabilities on this pageMax CVSS 9.8Priority 40KEV 0

CVE-2024-21473 · Qualcomm, Inc. Snapdragon

Improper Input Validation in WIN SON

EPSS 0.7%CVSS 9.8

CVE-2024-21463 · Qualcomm, Inc. Snapdragon

Buffer Copy Without Checking Size of Input in Audio

EPSS 0.3%CVSS 9.8

QuanticaLabs1 vulnerability on this pageMax CVSS 10.0Priority 40KEV 0

CVE-2024-31115 · QuanticaLabs Chauffeur Taxi Booking System for WordPress

WordPress Chauffeur Taxi Booking System for WordPress plugin <= 7.2 - Arbitrary File Upload vulnerability

EPSS 0.6%CVSS 10.0

arm1 vulnerability on this pageMax CVSS 9.1Priority 38KEV 0

CVE-2024-30166 · arm mbed_tls

In Mbed TLS 3.3.0 through 3.5.2 before 3.6.0, a malicious client can cause information disclosure or a denial of service because of a sta…

EPSS 0.7%CVSS 9.1

friendica1 vulnerability on this pageMax CVSS 9.1Priority 38KEV 0

CVE-2024-25864 · friendica friendica

Server Side Request Forgery (SSRF) vulnerability in Friendica versions after v.2023.12, allows a remote attacker to execute arbitrary cod…

EPSS 0.7%CVSS 9.1

Linux1 vulnerability on this pageMax CVSS 9.1Priority 38KEV 0

CVE-2024-26665 · Linux Linux

tunnels: fix out of bounds access when building IPv6 PMTU error

EPSS 0.7%CVSS 9.1

Themeisle1 vulnerability on this pageMax CVSS 9.1Priority 37KEV 0

CVE-2024-27951 · Themeisle Multiple Page Generator Plugin – MPG

WordPress Multiple Page Generator Plugin <= 3.4.0 - Auth. Remote Code Execution (RCE) vulnerability

EPSS 0.6%CVSS 9.1

veridiumid1 vulnerability on this pageMax CVSS 9.1Priority 37KEV 0

CVE-2023-44039 · veridiumid veridiumad

In VeridiumID before 3.5.0, the WebAuthn API allows an internal unauthenticated attacker (who can pass enrollment verifications and is al…

EPSS 0.5%CVSS 9.1

Ricard Torres1 vulnerability on this pageMax CVSS 9.1Priority 35KEV 0

CVE-2024-31095 · Ricard Torres Thumbs Rating

WordPress Thumbs Rating plugin <= 5.1.0 - Insecure Direct Object References (IDOR) vulnerability

EPSS 0.4%CVSS 9.1

The archive.