The archive.

huashi1 vulnerability on this pageMax CVSS 9.8Priority 53KEV 0

CVE-2024-31032 · huashi private_cloud_cdn_live_streaming_acceleration_server

An issue in Huashi Private Cloud CDN Live Streaming Acceleration Server hgateway-sixport v.1.1.2 allows a remote attacker to execute arbi…

EPSS 1%public exploit CVSS 9.8

messense1 vulnerability on this pageMax CVSS 9.8Priority 53KEV 0

CVE-2024-29640 · messense aliyundrive-webdav

An issue in aliyundrive-webdav v.2.3.3 and before allows a remote attacker to execute arbitrary code via a crafted payload to the sid par…

EPSS 1%public exploit CVSS 9.8

Netentsec2 vulnerabilities on this pageMax CVSS 9.8Priority 51KEV 0

CVE-2024-3040 · Netentsec NS-ASG Application Security Gateway

Netentsec NS-ASG Application Security Gateway list_crl_conf sql injection

CVE-2024-3041 · Netentsec NS-ASG Application Security Gateway

Netentsec NS-ASG Application Security Gateway listloginfo.php sql injection

EPSS 0.8%CVSS 9.8

PHPGurukul2 vulnerabilities on this pageMax CVSS 9.8Priority 51KEV 0

CVE-2024-3085 · PHPGurukul Emergency Ambulance Hiring Portal

PHPGurukul Emergency Ambulance Hiring Portal Admin Login Page login.php sql injection

CVE-2024-3087 · PHPGurukul Emergency Ambulance Hiring Portal

PHPGurukul Emergency Ambulance Hiring Portal Ambulance Tracking Page ambulance-tracking.php sql injection

tenda4 vulnerabilities on this pageMax CVSS 9.8Priority 51KEV 0

CVE-2024-30622 · tenda fh1205_firmware

Tenda FH1205 v2.0.0.7(775) has a stack overflow vulnerability in the mitInterface parameter from fromAddressNat function.

CVE-2024-30628 · tenda fh1205

Tenda FH1205 v2.0.0.7(775) has a stack overflow vulnerability in the page parameter from fromAddressNat function.

CVE-2024-30630 · tenda fh1205_firmware

Tenda FH1205 v2.0.0.7(775) has a stack overflow vulnerability in the time parameter from saveParentControlInfo function.

CVE-2024-30635 · tenda f1202

Tenda F1202 v1.2.0.20(408) has a stack overflow vulnerability located in the funcpara1 parameter in the formSetCfm function.

Red Hat1 vulnerability on this pageMax CVSS 10.0Priority 50KEV 0

CVE-2024-3094 · Red Hat Red Hat Enterprise Linux 10

Xz: malicious code in distributed source

EPSS 91%CVSS 10.0

Shanghai Brad Technology1 vulnerability on this pageMax CVSS 9.8Priority 50KEV 0

CVE-2024-3039 · Shanghai Brad Technology BladeX

Shanghai Brad Technology BladeX API export-user sql injection

EPSS 0.7%public exploit CVSS 9.8

tongtianxing_technology_co_ltd1 vulnerability on this pageMax CVSS 9.8Priority 49KEV 0

CVE-2024-29667 · tongtianxing_technology_co_ltd cmsv6

SQL Injection vulnerability in Tongtianxing Technology Co., Ltd CMSV6 v.7.31.0.2 through v.7.31.0.3 allows a remote attacker to escalate…

EPSS 0.6%public exploit CVSS 9.8

Ivanti2 vulnerabilities on this pageMax CVSS 9.9Priority 48KEV 0

CVE-2023-41724 · Ivanti Sentry

A command injection vulnerability in Ivanti Sentry prior to 9.19.0 allows unauthenticated threat actor to execute arbitrary commands on t…

EPSS 13%CVSS 9.6

CVE-2023-46808 · Ivanti ITSM

An file upload vulnerability in Ivanti ITSM before 2023.4, allows an authenticated remote user to perform file writes to the server.

EPSS 2%CVSS 9.9

Tumult Inc.1 vulnerability on this pageMax CVSS 9.1Priority 48KEV 0

CVE-2024-2890 · Tumult Inc. Tumult Hype Animations

WordPress Tumult Hype Animations plugin <= 1.9.12 - Arbitrary File Upload vulnerability

EPSS 0.7%public exploit CVSS 9.1

CRM Perks1 vulnerability on this pageMax CVSS 10.0Priority 47KEV 0

CVE-2024-30498 · CRM Perks CRM Perks Forms

WordPress CRM Perks Forms plugin <= 1.1.4 - Unauthenticated SQL Injection vulnerability

EPSS 2%CVSS 10.0

Metagauss1 vulnerability on this pageMax CVSS 9.8Priority 46KEV 0

CVE-2024-30490 · Metagauss ProfileGrid

WordPress ProfileGrid plugin <= 5.7.8 - SQL Injection vulnerability

nextcloud1 vulnerability on this pageMax CVSS 10.0Priority 46KEV 0

CVE-2024-30247 · nextcloud nextcloudpi

Command Injection as root in NextCloudPi web panel

EPSS 2%CVSS 10.0

WP Travel Engine1 vulnerability on this pageMax CVSS 9.8Priority 46KEV 0

CVE-2024-30502 · WP Travel Engine WP Travel Engine

WordPress WP Travel Engine plugin <= 5.7.9 - Unauth. Blind SQL Injection vulnerability

stylemix2 vulnerabilities on this pageMax CVSS 9.8Priority 45KEV 0

CVE-2024-2411 · stylemix MasterStudy LMS WordPress Plugin – for Online Courses and Education

MasterStudy LMS <= 3.3.0 - Unauthenticated Local File Inclusion via modal

CVE-2024-2409 · stylemix MasterStudy LMS WordPress Plugin – for Online Courses and Education

MasterStudy LMS <= 3.3.1 - Unauthenticated Privilege Escalation via stm_lms_register AJAX Action

EPSS 0.8%CVSS 9.8

Apache Software Foundation2 vulnerabilities on this pageMax CVSS 9.9Priority 44KEV 0

CVE-2024-23538 · Apache Software Foundation Apache Fineract

Apache Fineract: Under certain system configurations, the sqlSearch parameter was vulnerable to SQL injection attacks, potentially allowing attackers to manipulate database queries.

EPSS 1%CVSS 9.9

CVE-2024-23539 · Apache Software Foundation Apache Fineract

Apache Fineract: Under certain system configurations, the sqlSearch parameter for specific endpoints was vulnerable to SQL injection attacks, potentially allowing attackers to manipulate database queries.

EPSS 1%CVSS 9.8

TP-Link1 vulnerability on this pageMax CVSS 9.8Priority 44KEV 0

CVE-2023-6437 · TP-Link TP-Link EX20v AX1800, Tp-Link Archer C5v AC1200, Tp-Link TD-W9970, Tp-Link TD-W9970v3, TP-Link VX220-G2u, TP-Link VN020-G2u

Authenticated RCE

EPSS 1%CVSS 9.8

princeahmed1 vulnerability on this pageMax CVSS 10.0Priority 41KEV 0

CVE-2024-2086 · princeahmed File Manager for Google Drive – Integrate Google Drive

Integrate Google Drive <= 1.3.8 - Missing Authorization to Unauthenticated Settings Modification and Export

Salon Booking System1 vulnerability on this pageMax CVSS 10.0Priority 41KEV 0

CVE-2024-30510 · Salon Booking System Salon booking system

WordPress Salon booking system plugin <= 9.5 - Arbitrary File Upload vulnerability

Synology1 vulnerability on this pageMax CVSS 9.9Priority 41KEV 0

CVE-2024-29241 · Synology Surveillance Station

Missing authorization vulnerability in System webapi component in Synology Surveillance Station before 9.2.0-9289 and 9.2.0-11289 allows…

EPSS 0.8%CVSS 9.9

VulDB1 vulnerability on this pageMax CVSS 9.8Priority 41KEV 0

CVE-2024-3078 · VulDB

Qdrant Full Snapshot REST API snapshots.rs path traversal

EPSS 0.9%CVSS 9.8

Wholesale Team1 vulnerability on this pageMax CVSS 10.0Priority 41KEV 0

CVE-2024-30224 · Wholesale Team WholesaleX

WordPress WholesaleX plugin <= 1.3.2 - Unauthenticated PHP Object Injection vulnerability

WPENGINE, INC.1 vulnerability on this pageMax CVSS 10.0Priority 41KEV 0

CVE-2024-30225 · WPENGINE, INC. WP Migrate

WordPress WP Migrate plugin <= 2.6.10 - Unauthenticated PHP Object Injection vulnerability