The archive.

CVE-2024-2809 · Tenda AC15

Tenda AC15 SetFirewallCfg formSetFirewallCfg stack-based overflow

CVE-2024-2811 · Tenda AC15

Tenda AC15 WifiWpsStart formWifiWpsStart stack-based overflow

CVE-2024-2808 · Tenda AC15

Tenda AC15 QuickIndex formQuickIndex stack-based overflow

CVE-2024-2810 · Tenda AC15

Tenda AC15 WifiWpsOOB formWifiWpsOOB stack-based overflow

CVE-2024-2813 · Tenda AC15

Tenda AC15 fast_setting_wifi_set form_fast_setting_wifi_set stack-based overflow

CVE-2024-2814 · Tenda AC15

Tenda AC15 DhcpListClient fromDhcpListClient stack-based overflow

CVE-2024-2815 · Tenda AC15

Tenda AC15 Cookie execCommand R7WebsSecurityHandler stack-based overflow

CVE-2024-2850 · Tenda AC15

Tenda AC15 saveParentControlInfo stack-based overflow

CVE-2024-2855 · Tenda AC15

Tenda AC15 SetSysTimeCfg fromSetSysTime stack-based overflow

CVE-2024-2856 · Tenda AC10

Tenda AC10 SetSysTimeCfg fromSetSysTime stack-based overflow

CVE-2024-2852 · Tenda AC15

Tenda AC15 saveParentControlInfo stack-based overflow

EPSS 1%CVSS 9.8

FriendsOfSymfony11 vulnerability on this pageMax CVSS 9.8Priority 55KEV 0

CVE-2024-28861 · FriendsOfSymfony1 symfony1

Gadget chain in Symfony 1 due to uncontrolled unserialized input in sfNamespacedParameterHolder

ignite_realtime1 vulnerability on this pageMax CVSS 9.8Priority 55KEV 0

CVE-2024-25421 · ignite_realtime openfire

An issue in Ignite Realtime Openfire v.4.9.0 and before allows a remote attacker to escalate privileges via the ROOM_CACHE component.

thi-ng1 vulnerability on this pageMax CVSS 9.8Priority 54KEV 0

CVE-2024-29650 · thi-ng paths

An issue in @thi.ng/paths v.5.1.62 and before allows a remote attacker to execute arbitrary code via the mutIn and mutInManyUnsafe compon…

freescout-helpdesk1 vulnerability on this pageMax CVSS 9.1Priority 53KEV 0

CVE-2024-29185 · freescout-helpdesk freescout

FreeScout OS Command Injection vulnerability

EPSS 2%public exploit CVSS 9.1

sourcecodester2 vulnerabilities on this pageMax CVSS 9.8Priority 52KEV 0

CVE-2024-2849 · SourceCodester Simple File Manager

SourceCodester Simple File Manager unrestricted upload

EPSS 0.9%public exploit CVSS 9.8

CVE-2024-29303 · sourcecodester php_task_management_system

The delete admin users function of SourceCodester PHP Task Management System 1.0 is vulnerable to SQL Injection

EPSS 0.9%public exploit CVSS 9.8

cobub1 vulnerability on this pageMax CVSS 9.8Priority 51KEV 0

CVE-2024-28421 · cobub razor

SQL Injection vulnerability in Razor 0.8.0 allows a remote attacker to escalate privileges via the ChannelModel::updateapk method of the…

EPSS 0.8%public exploit CVSS 9.8

mindskip1 vulnerability on this pageMax CVSS 9.8Priority 51KEV 0

CVE-2024-29401 · mindskip xzs-mysql

xzs-mysql 3.8 is vulnerable to Insufficient Session Expiration, which allows attackers to use the session of a deleted admin to do anything.

EPSS 0.8%public exploit CVSS 9.8

dedecms1 vulnerability on this pageMax CVSS 9.8Priority 49KEV 0

CVE-2024-29684 · dedecms dedecms

DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /src/dede/makehtml_homepage.php allowing a r…

EPSS 0.6%public exploit CVSS 9.8

wolfSSL1 vulnerability on this pageMax CVSS 9.1Priority 48KEV 0

CVE-2024-0901 · wolfSSL wolfSSL

SEGV and out of bounds memory read from malicious packet

EPSS 0.7%public exploit CVSS 9.1

ExpressTech1 vulnerability on this pageMax CVSS 9.3Priority 44KEV 0

CVE-2023-28787 · ExpressTech Quiz And Survey Master

WordPress Quiz And Survey Master plugin <= 8.1.4 - Unauthenticated SQL Injection vulnerability

EPSS 2%CVSS 9.3

Fortunefield1 vulnerability on this pageMax CVSS 9.8Priority 44KEV 0

CVE-2024-28048 · Fortunefield ffBull

OS command injection vulnerability exists in ffBull ver.4.11, which may allow a remote unauthenticated attacker to execute an arbitrary O…

EPSS 1%CVSS 9.8

home-made_io1 vulnerability on this pageMax CVSS 9.8Priority 44KEV 0

CVE-2024-28386 · home-made_io fastmagsync

An issue in Home-Made.io fastmagsync v.1.7.51 and before allows a remote attacker to execute arbitrary code via the getPhpBin() component.

EPSS 1%CVSS 9.8

Eclipse Foundation1 vulnerability on this pageMax CVSS 9.8Priority 42KEV 0

CVE-2024-2452 · Eclipse Foundation ThreadX

Integer wraparound, under-allocation, and heap buffer overflow in Eclipse ThreadX NetX Duo __portable_aligned_alloc()

EPSS 0.9%CVSS 9.8

MainWP1 vulnerability on this pageMax CVSS 10.0Priority 42KEV 0

CVE-2023-23656 · MainWP MainWP File Uploader Extension

WordPress MainWP File Uploader Extension Plugin <= 4.1 - Unauthenticated Arbitrary File Upload Vulnerability

EPSS 0.8%CVSS 10.0

Devolutions1 vulnerability on this pageMax CVSS 9.8Priority 41KEV 0

CVE-2024-2921 · Devolutions Server

Improper access control in PAM vault permissions in Devolutions Server 2024.1.10.0 and earlier allows an authenticated user with access t…

EPSS 0.8%CVSS 9.8

Linux3 vulnerabilities on this pageMax CVSS 9.8Priority 41KEV 0

CVE-2021-47162 · Linux Linux

tipc: skb_linearize the head skb when reassembling msgs

CVE-2021-47168 · Linux Linux

NFS: fix an incorrect limit in filelayout_decode_layout()

EPSS 0.8%CVSS 9.8

CVE-2021-47137 · Linux Linux

net: lantiq: fix memory corruption in RX ring

EPSS 0.6%CVSS 9.8

SailPoint1 vulnerability on this pageMax CVSS 10.0Priority 41KEV 0

CVE-2024-2227 · SailPoint IdentityIQ

IdentityIQ JavaServer Faces File Path Traversal Vulnerability

EPSS 0.8%CVSS 10.0

Ciges3 vulnerabilities on this pageMax CVSS 9.8Priority 40KEV 0

CVE-2024-2722 · Ciges CIGESv2

SQL injection vulnerability in the CIGESv2 system

CVE-2024-2723 · Ciges CIGESv2

SQL injection vulnerability in the CIGESv2 system

CVE-2024-2724 · Ciges CIGESv2

SQL injection vulnerability in the CIGESv2 system

prestashop1 vulnerability on this pageMax CVSS 9.8Priority 40KEV 0

CVE-2024-28393 · prestashop scalapay

SQL injection vulnerability in scalapay v.1.2.41 and before allows a remote attacker to escalate privileges via the ScalapayReturnModuleF…

tongtianxing_technology_co_ltd1 vulnerability on this pageMax CVSS 9.8Priority 40KEV 0

CVE-2024-29666 · tongtianxing_technology_co_ltd cmsv6

Insecure Permissions vulnerability in Vehicle Monitoring platform system CMSV6 v.7.31.0.2 through v.7.32.0.3 allows a remote attacker to…