The archive.

CVE-2024-2807 · Tenda AC15

Tenda AC15 expandDlnaFile formExpandDlnaFile stack-based overflow

magicflu1 vulnerability on this pageMax CVSS 9.8Priority 53KEV 0

CVE-2024-28441 · magicflu magicflu

File Upload vulnerability in magicflue v.7.0 and before allows a remote attacker to execute arbitrary code via a crafted request to the m…

dlink2 vulnerabilities on this pageMax CVSS 9.8Priority 52KEV 0

CVE-2024-29385 · dlink dir-845l_firmware

DIR-845L router <= v1.01KRb03 has an Unauthenticated remote code execution vulnerability in the cgibin binary via soapcgi_main function.

EPSS 2%public exploit CVSS 9.0

CVE-2024-27683 · dlink go-rt-ac750_firmware

D-Link Go-RT-AC750 GORTAC750_A1_FW_v101b03 contains a stack-based buffer overflow via the function hnap_main.

EPSS 0.9%public exploit CVSS 9.8

SourceCodester1 vulnerability on this pageMax CVSS 9.8Priority 52KEV 0

CVE-2024-2690 · SourceCodester Online Discussion Forum Site

SourceCodester Online Discussion Forum Site uupdate.php unrestricted upload

tramyardg2 vulnerabilities on this pageMax CVSS 9.8Priority 52KEV 0

CVE-2023-48901 · tramyardg autoexpress

A SQL injection vulnerability in tramyardg Autoexpress version 1.3.0, allows remote unauthenticated attackers to execute arbitrary SQL co…

CVE-2023-48902 · tramyardg autoexpress

An issue was discovered in tramyardg autoexpress version 1.3.0, allows unauthenticated remote attackers to escalate privileges, update ca…

EPSS 1%CVSS 9.8

eProsima1 vulnerability on this pageMax CVSS 9.7Priority 51KEV 0

CVE-2024-28231 · eProsima Fast-DDS

Manipulated DATA Submessage causes a heap-buffer-overflow error

EPSS 0.9%public exploit CVSS 9.7

Netentsec4 vulnerabilities on this pageMax CVSS 9.8Priority 51KEV 0

CVE-2024-2644 · Netentsec NS-ASG Application Security Gateway

Netentsec NS-ASG Application Security Gateway addfirewall.php sql injection

CVE-2024-2646 · Netentsec NS-ASG Application Security Gateway

Netentsec NS-ASG Application Security Gateway sql injection

CVE-2024-2649 · Netentsec NS-ASG Application Security Gateway

Netentsec NS-ASG Application Security Gateway deleteonlineuser.php sql injection

CVE-2024-2647 · Netentsec NS-ASG Application Security Gateway

Netentsec NS-ASG Application Security Gateway singlelogin.php sql injection

EPSS 1.0%CVSS 9.8

szlbt1 vulnerability on this pageMax CVSS 9.8Priority 51KEV 0

CVE-2024-29243 · szlbt lbt-t300-mini_firmware

Shenzhen Libituo Technology Co., Ltd LBT-T300-mini v1.2.9 was discovered to contain a buffer overflow via the vpn_client_ip parameter at…

ValvePress1 vulnerability on this pageMax CVSS 9.9Priority 50KEV 0

CVE-2024-27956 · ValvePress Automatic

WordPress Automatic plugin <= 3.92.0 - Unauthenticated Arbitrary SQL Execution vulnerability

EPSS 94%CVSS 9.9

Olive Themes1 vulnerability on this pageMax CVSS 9.8Priority 49KEV 0

CVE-2024-2702 · Olive Themes Olive One Click Demo Import

WordPress Olive One Click Demo Import plugin <= 1.1.1 - Broken Access Control vulnerability

EPSS 0.6%public exploit CVSS 9.8

distrobox1 vulnerability on this pageMax CVSS 9.8Priority 47KEV 0

CVE-2024-29864 · distrobox distrobox

Distrobox before 1.7.0.1 allows attackers to execute arbitrary code via command injection into exported executables.

EPSS 3%CVSS 9.8

openbsd1 vulnerability on this pageMax CVSS 9.8Priority 45KEV 0

CVE-2024-29937 · openbsd openbsd

NFS in a BSD derived codebase, as used in OpenBSD through 7.4 and FreeBSD through 14.0-RELEASE, allows remote attackers to execute arbitr…

EPSS 2%CVSS 9.8

GitHub1 vulnerability on this pageMax CVSS 9.1Priority 44KEV 0

CVE-2024-2443 · GitHub GitHub Enterprise Server

Improper input validation vulnerability was identified in GitHub Enterprise Server that allowed privilege escalation in the Management Console

EPSS 2%CVSS 9.1

Apache Software Foundation1 vulnerability on this pageMax CVSS 9.8Priority 42KEV 0

CVE-2024-27438 · Apache Software Foundation Apache Doris

Apache Doris: Downloading arbitrary remote jar files resulting in remote command execution

EPSS 1.0%CVSS 9.8

jupyterhub2 vulnerabilities on this pageMax CVSS 9.8Priority 42KEV 0

CVE-2024-28179 · jupyterhub jupyter-server-proxy

Jupyter Server Proxy's Websocket Proxying does not require authentication

EPSS 1%CVSS 9.8

CVE-2024-29033 · jupyterhub oauthenticator

GoogleOAuthenticator.hosted_domain incorrectly verifies membership of an Google organization/workspace

EPSS 0.6%CVSS 9.1

Kiloview1 vulnerability on this pageMax CVSS 9.8Priority 42KEV 0

CVE-2024-2161 · Kiloview NDI

Use of Hard-coded Credentials in Kiloview NDI N series products API middleware

elspec2 vulnerabilities on this pageMax CVSS 9.8Priority 41KEV 0

CVE-2024-22080 · elspec g5_digital_fault_recorder

An issue was discovered in Elspec G5 digital fault recorder versions 1.1.4.15 and before.

CVE-2024-22081 · elspec g5_digital_fault_recorder

An issue was discovered in Elspec G5 digital fault recorder versions 1.1.4.15 and before.

misp2 vulnerabilities on this pageMax CVSS 9.8Priority 41KEV 0

CVE-2024-29859 · misp misp

In MISP before 2.4.187, add_misp_export in app/Controller/EventsController.php does not properly check for a valid file upload.

CVE-2024-29858 · misp misp

In MISP before 2.4.187, __uploadLogo in app/Controller/OrganisationsController.php does not properly check for a valid logo upload.

EPSS 0.4%CVSS 9.8

Sentrifugo7 vulnerabilities on this pageMax CVSS 9.8Priority 41KEV 0

CVE-2024-29870 · Sentrifugo Sentrifugo

SQL injection vulnerability in Sentrifugo

CVE-2024-29871 · Sentrifugo Sentrifugo

SQL injection vulnerability in Sentrifugo

CVE-2024-29872 · Sentrifugo Sentrifugo

SQL injection vulnerability in Sentrifugo

CVE-2024-29873 · Sentrifugo Sentrifugo

SQL injection vulnerability in Sentrifugo

CVE-2024-29874 · Sentrifugo Sentrifugo

SQL injection vulnerability in Sentrifugo

CVE-2024-29875 · Sentrifugo Sentrifugo

SQL injection vulnerability in Sentrifugo

CVE-2024-29876 · Sentrifugo Sentrifugo

SQL injection vulnerability in Sentrifugo

mischiefmarmot1 vulnerability on this pageMax CVSS 9.8Priority 40KEV 0

CVE-2024-1711 · mischiefmarmot Create

Create by Mediavine <= 1.9.4 - Unauthenticated SQL Injection via 'id'

OpenText3 vulnerabilities on this pageMax CVSS 9.8Priority 40KEV 0

CVE-2024-1147 · OpenText PVCS Version Manager

Weak Access Control - Arbitrary file download

CVE-2024-1148 · OpenText PVCS Version Manager

Weak Access Control - Arbitrary file upload

CVE-2024-1811 · OpenText ArcSight Platform

OpenText ArcSight Platform Remote Vulnerability

prestashopmodules1 vulnerability on this pageMax CVSS 9.8Priority 40KEV 0

CVE-2024-28395 · prestashopmodules bestkit_popup

SQL injection vulnerability in Best-Kit bestkit_popup v.1.7.2 and before allows a remote attacker to escalate privileges via the bestkit_…

Abast1 vulnerability on this pageMax CVSS 9.8Priority 39KEV 0

CVE-2024-29732 · Abast SCAN_VISIO eDocument Suite Web Viewer

SQL Injection vulnerability on SCAN_VISIO eDocument Suite Web Viewer from Abast

EPSS 0.5%CVSS 9.8

Folio1 vulnerability on this pageMax CVSS 9.8Priority 39KEV 0

CVE-2022-4963 · Folio Spring Module Core

Folio Spring Module Core Schema Name HibernateSchemaService.java dropSchema sql injection

getrebuild1 vulnerability on this pageMax CVSS 9.1Priority 39KEV 0

CVE-2024-25294 · getrebuild rebuild

An SSRF issue in REBUILD v.3.5 allows a remote attacker to obtain sensitive information and execute arbitrary code via the FileDownloader…

EPSS 0.8%CVSS 9.1

prestashop1 vulnerability on this pageMax CVSS 9.8Priority 39KEV 0

CVE-2024-28392 · prestashop abandoned_cart_reminder_pro

SQL injection vulnerability in pscartabandonmentpro v.2.0.11 and before allows a remote attacker to escalate privileges via the pscartaba…

Skymoonlabs1 vulnerability on this pageMax CVSS 9.8Priority 39KEV 0

CVE-2024-25912 · Skymoonlabs MoveTo

WordPress MoveTo plugin <= 6.2 - Unauthenticated Arbitrary WordPress Settings Change vulnerability