The archive.

fit2cloud1 vulnerability on this pageMax CVSS 9.8Priority 57KEV 0

CVE-2024-2352 · fit2cloud 1panel

1Panel swap baseApi.UpdateDeviceSwap command injection

EPSS 3%public exploit CVSS 9.8

gpac1 vulnerability on this pageMax CVSS 9.8Priority 53KEV 0

CVE-2023-46427 · gpac gpac

An issue was discovered in gpac version 2.3-DEV-rev588-g7edc40fee-master, allows remote attackers to execute arbitrary code, cause a deni…

EPSS 1%public exploit CVSS 9.8

newlandemea1 vulnerability on this pageMax CVSS 9.8Priority 51KEV 0

CVE-2023-49340 · newlandemea nquire_1000_manta

An issue was discovered in Newland Nquire 1000 Interactive Kiosk version NQ1000-II_G_V1.00.011, allows remote attackers to escalate privi…

EPSS 0.9%public exploit CVSS 9.8

tenda2 vulnerabilities on this pageMax CVSS 9.8Priority 51KEV 0

CVE-2024-28535 · tenda ac18_firmware

Tenda AC18 V15.03.05.05 has a stack overflow vulnerability in the mitInterface parameter of fromAddressNat function.

EPSS 0.8%public exploit CVSS 9.8

CVE-2024-28553 · tenda ac18_firmware

Tenda AC18 V15.03.05.05 has a stack overflow vulnerability in the entrys parameter fromAddressNat function.

EPSS 0.8%public exploit CVSS 9.8

boyiddha3 vulnerabilities on this pageMax CVSS 9.8Priority 50KEV 0

CVE-2024-2282 · boyiddha Automated-Mess-Management-System

boyiddha Automated-Mess-Management-System Login Page index.php sql injection

CVE-2024-2281 · boyiddha Automated-Mess-Management-System

boyiddha Automated-Mess-Management-System Setting index.php access control

CVE-2024-2283 · boyiddha Automated-Mess-Management-System

boyiddha Automated-Mess-Management-System view.php sql injection

CodeAstro1 vulnerability on this pageMax CVSS 9.8Priority 50KEV 0

CVE-2024-2351 · CodeAstro Ecommerce Site

CodeAstro Ecommerce Site Search action.php sql injection

paddlepaddle1 vulnerability on this pageMax CVSS 9.1Priority 50KEV 0

CVE-2024-0818 · paddlepaddle paddlepaddle/paddle

Arbitrary File Overwrite Via Path Traversal in paddlepaddle/paddle before 2.6

EPSS 1%public exploit CVSS 9.1

SourceCodester3 vulnerabilities on this pageMax CVSS 9.8Priority 50KEV 0

CVE-2024-2393 · SourceCodester CRUD without Page Reload

SourceCodester CRUD without Page Reload add_user.php sql injection

CVE-2024-2394 · SourceCodester Employee Management System

SourceCodester Employee Management System add-admin.php unrestricted upload

CVE-2024-2331 · SourceCodester Tourist Reservation System

SourceCodester Tourist Reservation System System.cpp ad_writedata buffer overflow

ChatGPTNextWeb1 vulnerability on this pageMax CVSS 9.8Priority 49KEV 0

CVE-2023-49785 · ChatGPTNextWeb NextChat

NextChat vulnerable to Server-Side Request Forgery and Cross-site Scripting

EPSS 83%CVSS 9.8

keerti19245 vulnerabilities on this pageMax CVSS 9.8Priority 49KEV 0

CVE-2024-2264 · keerti1924 PHP-MYSQL-User-Login-System

keerti1924 PHP-MYSQL-User-Login-System login.php sql injection

CVE-2024-2268 · keerti1924 Online-Book-Store-Website

keerti1924 Online-Book-Store-Website unrestricted upload

CVE-2024-2269 · keerti1924 Online-Book-Store-Website

keerti1924 Online-Book-Store-Website search.php sql injection

CVE-2024-2271 · keerti1924 Online-Book-Store-Website

keerti1924 Online-Book-Store-Website HTTP POST Request shop.php sql injection

CVE-2024-2272 · keerti1924 Online-Book-Store-Website

keerti1924 Online-Book-Store-Website HTTP POST Request home.php sql injection

QNAP Systems Inc.1 vulnerability on this pageMax CVSS 9.8Priority 49KEV 0

CVE-2024-21899 · QNAP Systems Inc. QTS

QTS, QuTS hero, QuTScloud

EPSS 24%CVSS 9.8

Google5 vulnerabilities on this pageMax CVSS 9.8Priority 44KEV 0

CVE-2024-0039 · Google Android

In attp_build_value_cmd of att_protocol.cc, there is a possible out of bounds write due to a missing bounds check.

EPSS 2%CVSS 9.8

CVE-2024-27228 · Google Android

there is a possible out of bounds write due to a heap buffer overflow.

CVE-2024-27227 · Google Android

A malicious DNS response can trigger a number of OOB reads, writes, and other memory issues

EPSS 0.3%CVSS 9.8

CVE-2024-23717 · Google Android

In access_secure_service_from_temp_bond of btm_sec.cc, there is a possible way to achieve keystroke injection due to improper input valid…

EPSS 0.4%CVSS 9.1

CVE-2024-27207 · Google Android

Exported broadcast receivers allowing malicious apps to bypass broadcast protection.

EPSS 0.3%CVSS 9.1

PHOENIX CONTACT3 vulnerabilities on this pageMax CVSS 9.8Priority 44KEV 0

CVE-2024-25995 · PHOENIX CONTACT CHARX SEC-3000

PHOENIX CONTACT: Remote code execution in CHARX Series

EPSS 1%CVSS 9.8

CVE-2024-26001 · PHOENIX CONTACT CHARX SEC-3000

PHOENIX CONTACT: Out of bounds write only memory access

EPSS 0.9%CVSS 9.8

CVE-2024-25996 · PHOENIX CONTACT CHARX SEC-3000

PHOENIX CONTACT: Remote code execution due to an origin validation error in CHARX Series

EPSS 0.4%CVSS 9.8

Apple3 vulnerabilities on this pageMax CVSS 9.8Priority 43KEV 0

CVE-2024-23286 · Apple iOS and iPadOS

A buffer overflow issue was addressed with improved memory handling.

EPSS 1%CVSS 9.8

CVE-2024-23265 · Apple iOS and iPadOS

A memory corruption vulnerability was addressed with improved locking.

EPSS 0.7%CVSS 9.8

CVE-2024-23255 · Apple iOS and iPadOS

An authentication issue was addressed with improved state management.

EPSS 0.7%CVSS 9.1

SAP_SE1 vulnerability on this pageMax CVSS 9.1Priority 43KEV 0

CVE-2024-22127 · SAP_SE SAP NetWeaver AS Java (Administrator Log Viewer plug-in)

Code Injection vulnerability in SAP NetWeaver AS Java (Administrator Log Viewer plug-in)

EPSS 2%CVSS 9.1

Apache Software Foundation1 vulnerability on this pageMax CVSS 9.8Priority 42KEV 0

CVE-2023-41313 · Apache Software Foundation Apache Doris

Apache Doris: Timing Attack weakness

EPSS 1%CVSS 9.8

Siemens2 vulnerabilities on this pageMax CVSS 10.0Priority 42KEV 0

CVE-2024-22039 · Siemens Cerberus PRO EN Engineering Tool

A vulnerability has been identified in Cerberus PRO EN Engineering Tool (All versions < IP8), Cerberus PRO EN Fire Panel FC72x IP6 (All v…

EPSS 0.8%CVSS 10.0

CVE-2022-32257 · Siemens SINEMA Remote Connect Server

A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.2).

Canon Inc.1 vulnerability on this pageMax CVSS 9.8Priority 41KEV 0

CVE-2024-2184 · Canon Inc. Color imageCLASS MF740C Series

Buffer overflow in identifier field of WSD probe request process of Small Office Multifunction Printers and Laser Printers(*) which may a…

Fortinet1 vulnerability on this pageMax CVSS 9.8Priority 41KEV 0

CVE-2023-36554 · Fortinet FortiManager

A improper access control in Fortinet FortiManager version 7.4.0, version 7.2.0 through 7.2.3, version 7.0.0 through 7.0.10, version 6.4.…

wasmi-labs1 vulnerability on this pageMax CVSS 9.8Priority 41KEV 0

CVE-2024-28123 · wasmi-labs wasmi

Wasmi Out-of-bounds Write for host to Wasm calls with more than 128 Parameters

presta_tool_kit1 vulnerability on this pageMax CVSS 9.8Priority 40KEV 0

CVE-2024-25849 · presta_tool_kit make_an_offer_for_prestashop

In the module "Make an offer" (makeanoffer) <= 1.7.1 from PrestaToolKit for PrestaShop, a guest can perform SQL injection via MakeOffers:…

Bdtask1 vulnerability on this pageMax CVSS 9.1Priority 39KEV 0

CVE-2024-2317 · Bdtask Hospital AutoManager

Bdtask Hospital AutoManager Prescription Page improper authorization

EPSS 0.8%CVSS 9.1

code-projects1 vulnerability on this pageMax CVSS 9.8Priority 39KEV 0

CVE-2024-24093 · code-projects scholars_tracking_system

SQL Injection vulnerability in Code-projects Scholars Tracking System 1.0 allows attackers to run arbitrary code via Personal Information…

prestashop1 vulnerability on this pageMax CVSS 9.8Priority 39KEV 0

CVE-2024-25845 · prestashop prestashop

In the module "CD Custom Fields 4 Orders" (cdcustomfields4orders) <= 1.0.0 from Cleanpresta.com for PrestaShop, a guest can perform SQL i…