The archive.

sourcecodester12 vulnerabilities on this pageMax CVSS 9.8Priority 53KEV 0

CVE-2024-2569 · SourceCodester Employee Task Management System

SourceCodester Employee Task Management System admin-manage-user.php redirect

CVE-2024-2570 · SourceCodester Employee Task Management System

SourceCodester Employee Task Management System edit-task.php redirect

CVE-2024-2571 · SourceCodester Employee Task Management System

SourceCodester Employee Task Management System manage-admin.php redirect

CVE-2024-2573 · SourceCodester Employee Task Management System

SourceCodester Employee Task Management System task-info.php redirect

CVE-2024-2556 · SourceCodester Employee Task Management System

SourceCodester Employee Task Management System attendance-info.php sql injection

EPSS 0.6%public exploit CVSS 9.8

CVE-2024-2574 · SourceCodester Employee Task Management System

SourceCodester Employee Task Management System edit-task.php authorization

CVE-2024-2575 · SourceCodester Employee Task Management System

SourceCodester Employee Task Management System task-details.php authorization

CVE-2024-2576 · SourceCodester Employee Task Management System

SourceCodester Employee Task Management System update-admin.php authorization

CVE-2024-2604 · SourceCodester File Manager App

SourceCodester File Manager App update-file.php unrestricted upload

CVE-2024-2572 · SourceCodester Employee Task Management System

SourceCodester Employee Task Management System task-details.php redirect

EPSS 1%CVSS 9.8

CVE-2024-2577 · SourceCodester Employee Task Management System

SourceCodester Employee Task Management System update-employee.php authorization

EPSS 0.7%CVSS 9.8

CVE-2024-28303 · sourcecodester open_source_medicine_ordering_system

Open Source Medicine Ordering System v1.0 was discovered to contain a SQL injection vulnerability via the date parameter at /admin/report…

argoproj2 vulnerabilities on this pageMax CVSS 9.8Priority 51KEV 0

CVE-2024-21652 · argoproj argo-cd

Argo CD vulnerable to Bypassing of Brute Force Protection via Application Crash and In-Memory Data Loss

EPSS 0.8%public exploit CVSS 9.8

CVE-2024-21662 · argoproj argo-cd

Argo CD vulnerable to Bypassing of Rate Limit and Brute Force Protection Using Cache Overflow

EPSS 0.8%public exploit CVSS 9.1

PandaXGO3 vulnerabilities on this pageMax CVSS 9.8Priority 51KEV 0

CVE-2024-2563 · PandaXGO PandaX

PandaXGO PandaX upload.go DeleteImage path traversal

EPSS 0.9%public exploit CVSS 9.8

CVE-2024-2565 · PandaXGO PandaX

PandaXGO PandaX File Extension upload.go unrestricted upload

EPSS 0.6%public exploit CVSS 9.8

CVE-2024-2562 · PandaXGO PandaX

PandaXGO PandaX role_menu.go InsertRole sql injection

kishor-231 vulnerability on this pageMax CVSS 9.1Priority 50KEV 0

CVE-2024-2557 · kishor-23 Food Waste Management System

kishor-23 Food Waste Management System admin.php improper authorization

EPSS 1%public exploit CVSS 9.1

Fujian Kelixin Communication4 vulnerabilities on this pageMax CVSS 9.8Priority 49KEV 0

CVE-2024-2622 · Fujian Kelixin Communication Command and Dispatch Platform

Fujian Kelixin Communication Command and Dispatch Platform editemedia.php sql injection

CVE-2024-2621 · Fujian Kelixin Communication Command and Dispatch Platform

Fujian Kelixin Communication Command and Dispatch Platform pwd_update.php sql injection

EPSS 2%CVSS 9.8

CVE-2024-2566 · Fujian Kelixin Communication Command and Dispatch Platform

Fujian Kelixin Communication Command and Dispatch Platform get_extension_yl.php sql injection

EPSS 0.6%CVSS 9.8

CVE-2024-2620 · Fujian Kelixin Communication Command and Dispatch Platform

Fujian Kelixin Communication Command and Dispatch Platform down_file.php sql injection

EPSS 0.6%CVSS 9.8

glpi-project1 vulnerability on this pageMax CVSS 9.6Priority 49KEV 0

CVE-2024-27098 · glpi-project glpi

Blind Server-Side Request Forgery (SSRF) using Arbitrary Object Instantiation in GLPI

EPSS 36%CVSS 9.6

MAGESH-K214 vulnerabilities on this pageMax CVSS 9.8Priority 48KEV 0

CVE-2024-2517 · MAGESH-K21 Online-College-Event-Hall-Reservation-System

MAGESH-K21 Online-College-Event-Hall-Reservation-System book_history.php sql injection

CVE-2024-2520 · MAGESH-K21 Online-College-Event-Hall-Reservation-System

MAGESH-K21 Online-College-Event-Hall-Reservation-System bookdate.php sql injection

CVE-2024-2534 · MAGESH-K21 Online-College-Event-Hall-Reservation-System

MAGESH-K21 Online-College-Event-Hall-Reservation-System users.php sql injection

CVE-2024-2522 · MAGESH-K21 Online-College-Event-Hall-Reservation-System

MAGESH-K21 Online-College-Event-Hall-Reservation-System booktime.php sql injection

openclinic_ga_project2 vulnerabilities on this pageMax CVSS 9.1Priority 48KEV 0

CVE-2023-40276 · openclinic_ga_project openclinic_ga

An issue was discovered in OpenClinic GA 5.247.01.

EPSS 0.7%public exploit CVSS 9.1

CVE-2023-40275 · openclinic_ga_project openclinic_ga

An issue was discovered in OpenClinic GA 5.247.01.

EPSS 0.9%CVSS 9.1

perl1 vulnerability on this pageMax CVSS 9.1Priority 46KEV 0

CVE-2021-47155 · perl perl

The Net::IPV4Addr module 0.10 for Perl does not properly consider extraneous zero characters in an IP address string, which (in some situ…

EPSS 0.5%public exploit CVSS 9.1

advancedplugins1 vulnerability on this pageMax CVSS 9.8Priority 43KEV 0

CVE-2024-28394 · advancedplugins reportsstatistics

An issue in Advanced Plugins reportsstatistics v1.3.20 and before allows a remote attacker to execute arbitrary code via the Sales Report…

EPSS 1%CVSS 9.8

unclebob1 vulnerability on this pageMax CVSS 9.8Priority 42KEV 0

CVE-2024-28125 · unclebob FitNesse

FitNesse all releases allows a remote authenticated attacker to execute arbitrary OS commands.

EPSS 1.0%CVSS 9.8

knowband1 vulnerability on this pageMax CVSS 9.8Priority 41KEV 0

CVE-2024-28389 · knowband spinwheel

SQL injection vulnerability in KnowBand spinwheel v.3.0.3 and before allows a remote attacker to gain escalated privileges and obtain sen…

EPSS 0.8%CVSS 9.8

parse-community1 vulnerability on this pageMax CVSS 9.1Priority 41KEV 0

CVE-2024-29027 · parse-community parse-server

Parse Server crash and RCE via invalid Cloud Function or Cloud Job name

EPSS 1%CVSS 9.1

Schneider Electric1 vulnerability on this pageMax CVSS 9.8Priority 41KEV 0

CVE-2024-2051 · Schneider Electric Easergy T200 (Modbus) Models: T200I, T200E, T200P, T200S, T200H

CWE-307: Improper Restriction of Excessive Authentication Attempts vulnerability exists that could cause account takeover and unauthorize…

EPSS 0.8%CVSS 9.8

tenda1 vulnerability on this pageMax CVSS 9.8Priority 41KEV 0

CVE-2024-28537 · tenda ac18_firmware

Tenda AC18 V15.03.05.05 has a stack overflow vulnerability in the page parameter of fromNatStaticSetting function.

EPSS 0.8%CVSS 9.8

Unitronics2 vulnerabilities on this pageMax CVSS 10.0Priority 41KEV 0

CVE-2024-27767 · Unitronics Unistream Unilogic

Unitronics Unistream Unilogic – Versions prior to 1.35.227 CWE-287: Improper Authentication

EPSS 0.7%CVSS 10.0

CVE-2024-27768 · Unitronics Unistream Unilogic

Unitronics Unistream Unilogic – Versions prior to 1.35.227 CWE-22: 'Path Traversal'

EPSS 0.9%CVSS 9.8

Amssplus1 vulnerability on this pageMax CVSS 9.9Priority 40KEV 0

CVE-2024-2599 · Amssplus AMSS++

Unrestricted Upload of File with Dangerous Type vulnerability in AMSS++

EPSS 0.6%CVSS 9.9

Pie Register1 vulnerability on this pageMax CVSS 10.0Priority 40KEV 0

CVE-2024-27957 · Pie Register Pie Register

WordPress Pie Register plugin <= 3.8.3.1 - Unauthenticated Arbitrary File Upload vulnerability

EPSS 0.6%CVSS 10.0

Themefic1 vulnerability on this pageMax CVSS 9.9Priority 40KEV 0

CVE-2024-29135 · Themefic Tourfic

WordPress Tourfic plugin <= 2.11.15 - Arbitrary File Upload vulnerability

EPSS 0.7%CVSS 9.9

Mozilla1 vulnerability on this pageMax CVSS 9.8Priority 39KEV 0

CVE-2024-2615 · Mozilla Firefox

Memory safety bugs present in Firefox 123.

EPSS 0.6%CVSS 9.8

Pandora FMS2 vulnerabilities on this pageMax CVSS 9.8Priority 39KEV 0

CVE-2023-44092 · Pandora FMS Pandora FMS

OS Command Injection

EPSS 0.8%CVSS 9.1

CVE-2023-44091 · Pandora FMS Pandora FMS

Unauth Time-Based SQL Injection

siklu1 vulnerability on this pageMax CVSS 9.8Priority 38KEV 0

CVE-2022-47036 · siklu tg_terragraph

Siklu TG Terragraph devices before approximately 2.1.1 have a hardcoded root password that has been revealed via a brute force attack on…