The archive.

cyberlord921 vulnerability on this pageMax CVSS 9.8Priority 45KEV 0

CVE-2024-2172 · cyberlord92 Web Application Firewall – website security

Malware Scanner <= 4.7.2 and Web Application Firewall <= 2.1.1 - Unauthenticated Privilege Escalation

EPSS 2%CVSS 9.8

CMS Made Simple1 vulnerability on this pageMax CVSS 9.8Priority 42KEV 0

CVE-2024-1527 · CMS Made Simple CMS Made Simple

Unrestricted Upload of File with Dangerous Type in CMS Made Simple

EPSS 0.9%CVSS 9.8

eyoucms1 vulnerability on this pageMax CVSS 9.8Priority 42KEV 0

CVE-2023-42286 · eyoucms eyoucms

There is a PHP file inclusion vulnerability in the template configuration of eyoucms v1.6.4, allowing attackers to execute code or system…

EPSS 1.0%CVSS 9.8

Mitsubishi Electric Corporation5 vulnerabilities on this pageMax CVSS 9.8Priority 42KEV 0

CVE-2024-0802 · Mitsubishi Electric Corporation MELSEC-Q Series Q03UDECPU

Incorrect Pointer Scaling vulnerability in Mitsubishi Electric Corporation MELSEC-Q Series and MELSEC-L Series CPU modules allows a remot…

CVE-2024-0803 · Mitsubishi Electric Corporation MELSEC-Q Series Q03UDECPU

Integer Overflow or Wraparound vulnerability in Mitsubishi Electric Corporation MELSEC-Q Series and MELSEC-L Series CPU modules allows a…

CVE-2024-1915 · Mitsubishi Electric Corporation MELSEC-Q Series Q03UDECPU

Incorrect Pointer Scaling vulnerability in Mitsubishi Electric Corporation MELSEC-Q Series and MELSEC-L Series CPU modules allows a remot…

CVE-2024-1916 · Mitsubishi Electric Corporation MELSEC-Q Series Q03UDECPU

Integer Overflow or Wraparound vulnerability in Mitsubishi Electric Corporation MELSEC-Q Series and MELSEC-L Series CPU modules allows a…

CVE-2024-1917 · Mitsubishi Electric Corporation MELSEC-Q Series Q03UDECPU

Integer Overflow or Wraparound vulnerability in Mitsubishi Electric Corporation MELSEC-Q Series and MELSEC-L Series CPU modules allows a…

peering-manager1 vulnerability on this pageMax CVSS 9.1Priority 42KEV 0

CVE-2024-28114 · peering-manager peering-manager

Remote Code Execution using Server Side Template Injection in Peering Manager

EPSS 1%CVSS 9.1

tp-link1 vulnerability on this pageMax CVSS 10.0Priority 42KEV 0

CVE-2024-25139 · tp-link omada_er605

In TP-Link Omada er605 1.0.1 through (v2.6) 2.2.3, a cloud-brd binary is susceptible to an integer overflow that leads to a heap-based bu…

EPSS 0.9%CVSS 10.0

airflow-diagrams_project1 vulnerability on this pageMax CVSS 9.8Priority 41KEV 0

CVE-2024-28423 · airflow-diagrams_project airflow-diagrams

Airflow-Diagrams v2.1.0 was discovered to contain an arbitrary file upload vulnerability in the unsafe_load function at cli.py.

code-projects1 vulnerability on this pageMax CVSS 9.8Priority 41KEV 0

CVE-2023-41505 · code-projects student_enrollment_in_php

An arbitrary file upload vulnerability in the Add Student's Profile Picture function of Student Enrollment In PHP v1.0 allows attackers t…

sunnytoo1 vulnerability on this pageMax CVSS 9.8Priority 41KEV 0

CVE-2024-28388 · sunnytoo stproductcomments

SQL injection vulnerability in SunnyToo stproductcomments module for PrestaShop v.1.0.5 and before, allows a remote attacker to escalate…

tenda1 vulnerability on this pageMax CVSS 9.8Priority 41KEV 0

CVE-2024-28383 · tenda ax12_firmware

Tenda AX12 v1.0 v22.03.01.16 was discovered to contain a stack overflow via the ssid parameter in the sub_431CF0 function.

advancedplugins1 vulnerability on this pageMax CVSS 9.8Priority 40KEV 0

CVE-2024-28390 · advancedplugins ultimateimagetool

An issue in Advanced Plugins ultimateimagetool module for PrestaShop before v.2.2.01, allows a remote attacker to escalate privileges and…

agro-school_management_system_project1 vulnerability on this pageMax CVSS 9.8Priority 39KEV 0

CVE-2024-25250 · agro-school_management_system_project agro-school_management_system

SQL Injection vulnerability in code-projects Agro-School Management System 1.0 allows attackers to run arbitrary code via the Login page.

fme_modules1 vulnerability on this pageMax CVSS 9.8Priority 39KEV 0

CVE-2024-28391 · fme_modules quickproducttable_module_for_pestashop

SQL injection vulnerability in FME Modules quickproducttable module for PrestaShop v.1.2.1 and before, allows a remote attacker to escala…

Gacjie1 vulnerability on this pageMax CVSS 9.8Priority 39KEV 0

CVE-2024-2406 · Gacjie Server

Gacjie Server Upload.php index unrestricted upload

Intumit1 vulnerability on this pageMax CVSS 9.8Priority 39KEV 0

CVE-2024-2413 · Intumit SmartRobot

Intumit SmartRobot - Use of Hard-coded Cryptographic Key

argoproj1 vulnerability on this pageMax CVSS 9.1Priority 38KEV 0

CVE-2024-28175 · argoproj argo-cd

Cross-site scripting on application summary component in argo-cd

EPSS 0.7%CVSS 9.1

Logitech1 vulnerability on this pageMax CVSS 9.8Priority 34KEV 0

CVE-2024-2537 · Logitech Logi Tune

Electron Code Injection in Logi Tune macOS Application

Opentext1 vulnerability on this pageMax CVSS 9.8Priority 34KEV 0

CVE-2023-7248 · Opentext Vertica Management Console

OpenText Vertica Management console might be prone to bypass via crafted requests

OpenText™1 vulnerability on this pageMax CVSS 9.8Priority 33KEV 0

CVE-2023-38535 · OpenText™ Exceed Turbo X

Use of Hard-coded Cryptographic Key vulnerability in OpenText™ Exceed Turbo X affecting versions 12.5.1 and 12.5.2.