The archive.

zlog_project1 vulnerability on this pageMax CVSS 9.8Priority 55KEV 0

CVE-2024-22857 · zlog_project zlog

Heap based buffer flow in zlog v1.1.0 to v1.2.17 in zlog_rule_new().The size of record_name is MAXLEN_PATH(1024) + 1 but file_path may ha…

EPSS 2%public exploit CVSS 9.8

erzhongxmu1 vulnerability on this pageMax CVSS 9.8Priority 52KEV 0

CVE-2024-27764 · erzhongxmu jeewms

An issue in Jeewms v.3.7 and before allows a remote attacker to escalate privileges via the AuthInterceptor component.

IceWhaleTech2 vulnerabilities on this pageMax CVSS 9.8Priority 52KEV 0

CVE-2024-24765 · IceWhaleTech CasaOS-UserService

CasaOS-UserService allows unauthorized access to any file

CVE-2024-24767 · IceWhaleTech CasaOS-UserService

CasaOS Improper Restriction of Excessive Authentication Attempts vulnerability

paddlepaddle3 vulnerabilities on this pageMax CVSS 9.8Priority 52KEV 0

CVE-2024-0817 · paddlepaddle paddlepaddle/paddle

Command injection in IrGraph.draw in paddlepaddle/paddle 2.6.0

EPSS 1%public exploit CVSS 9.3

CVE-2024-0815 · paddlepaddle paddlepaddle/paddle

Command injection in paddle.utils.download._wget_download (bypass filter) in paddlepaddle/paddle 2.6.0

EPSS 1%public exploit CVSS 9.3

CVE-2024-0917 · paddlepaddle paddlepaddle/paddle

remote code execution in paddlepaddle/paddle 2.6.0

EPSS 2%CVSS 9.8

phpgurukul1 vulnerability on this pageMax CVSS 9.8Priority 51KEV 0

CVE-2023-49989 · phpgurukul hotel_booking_management_system

Hotel Booking Management v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at update.php.

EPSS 0.8%public exploit CVSS 9.8

tokio-rs1 vulnerability on this pageMax CVSS 9.1Priority 49KEV 0

CVE-2024-27308 · tokio-rs mio

Mio's tokens for named pipes may be delivered after deregistration

EPSS 0.9%public exploit CVSS 9.1

zeromicro1 vulnerability on this pageMax CVSS 9.1Priority 49KEV 0

CVE-2024-27302 · zeromicro go-zero

Authorization Bypass Through User-Controlled Key in go-zero

EPSS 0.8%public exploit CVSS 9.1

HashiCorp1 vulnerability on this pageMax CVSS 9.8Priority 47KEV 0

CVE-2024-2048 · HashiCorp Vault

Vault Cert Auth Method Did Not Correctly Validate Non-CA Certificates

EPSS 0.5%public exploit CVSS 9.8

wondercms1 vulnerability on this pageMax CVSS 9.1Priority 47KEV 0

CVE-2024-27561 · wondercms wondercms

A Server-Side Request Forgery (SSRF) in the installUpdateThemePluginAction function of WonderCMS v3.1.3 allows attackers to force the app…

EPSS 0.6%public exploit CVSS 9.1

vmware2 vulnerabilities on this pageMax CVSS 9.3Priority 46KEV 0

CVE-2024-22252 · vmware esxi

Use-after-free vulnerability

EPSS 4%CVSS 9.3

CVE-2024-22253 · vmware esxi

Use-after-free vulnerability

EPSS 0.6%CVSS 9.3

jsonata-js1 vulnerability on this pageMax CVSS 9.8Priority 44KEV 0

CVE-2024-27307 · jsonata-js jsonata

JSONata expression can pollute the "Object" prototype

jackc1 vulnerability on this pageMax CVSS 9.8Priority 43KEV 0

CVE-2024-27304 · jackc pgx

pgx SQL Injection via Protocol Message Size Overflow

NAVER3 vulnerabilities on this pageMax CVSS 9.8Priority 43KEV 0

CVE-2024-28213 · NAVER nGrinder

nGrinder before 3.5.9 allows to accept serialized Java objects from unauthenticated users, which could allow remote attacker to execute a…

CVE-2024-28212 · NAVER nGrinder

nGrinder before 3.5.9 uses old version of SnakeYAML, which could allow remote attacker to execute arbitrary code via unsafe deserialization.

CVE-2024-28211 · NAVER nGrinder

nGrinder before 3.5.9 allows connection to malicious JMX/RMI server by default, which could be the cause of executing arbitrary code via…

mitre4 vulnerabilities on this pageMax CVSS 9.8Priority 42KEV 0

CVE-2024-28222 · mitre

In Veritas NetBackup before 8.1.2 and NetBackup Appliance before 3.1.2, the BPCD process inadequately validates the file path, allowing a…

EPSS 1.0%CVSS 9.8

CVE-2024-24275 · mitre

Cross Site Scripting vulnerability in Teamwire Windows desktop client v.2.0.1 through v.2.4.0 allows a remote attacker to obtain sensitiv…

EPSS 0.9%CVSS 9.6

CVE-2024-24276 · mitre

Cross Site Scripting (XSS) vulnerability in Teamwire Windows desktop client v.2.0.1 through v.2.4.0 allows a remote attacker to obtain se…

EPSS 0.9%CVSS 9.6

CVE-2023-41014 · mitre

code-projects.org Online Job Portal 1.0 is vulnerable to SQL Injection via the Username parameter for "Employer."

vanderbilt1 vulnerability on this pageMax CVSS 9.8Priority 42KEV 0

CVE-2023-38825 · vanderbilt redcap

SQL injection vulnerability in Vanderbilt REDCap before v.13.8.0 allows a remote attacker to obtain sensitive information via the passwor…

EPSS 1.0%CVSS 9.8

Apache Software Foundation1 vulnerability on this pageMax CVSS 9.1Priority 41KEV 0

CVE-2024-26580 · Apache Software Foundation Apache InLong

Apache InLong: Logged-in user could exploit an arbitrary file read vulnerability

EPSS 1%CVSS 9.1

IBM1 vulnerability on this pageMax CVSS 9.8Priority 41KEV 0

CVE-2023-35899 · IBM Cloud Pak for Automation

IBM Cloud Pak for Automation CSV injection

Linux1 vulnerability on this pageMax CVSS 9.8Priority 41KEV 0

CVE-2021-47107 · Linux Linux

NFSD: Fix READDIR buffer overflow

tomphttp1 vulnerability on this pageMax CVSS 9.8Priority 41KEV 0

CVE-2024-27922 · tomphttp bare-server-node

HTTP Handling Vulnerability in the Bare server

XPodas1 vulnerability on this pageMax CVSS 9.8Priority 41KEV 0

CVE-2024-1202 · XPodas Octopod

Authentication Bypass in XPodas' Octopod

EPSS 0.9%CVSS 9.8

AiLux5 vulnerabilities on this pageMax CVSS 9.8Priority 40KEV 0

CVE-2023-45592 · AiLux imx6 bundle

A CWE-250 “Execution with Unnecessary Privileges” vulnerability in the embedded Chromium browser (due to the binary being executed with t…

EPSS 0.7%CVSS 9.8

CVE-2023-5457 · AiLux imx6 bundle

A CWE-1269 “Product Released in Non-Release Configuration” vulnerability in the Django web framework used by the web application (due to…

CVE-2023-5456 · AiLux imx6 bundle

A CWE-798 “Use of Hard-coded Credentials” vulnerability in the MariaDB database of the web application allows a remote unauthenticated at…

CVE-2023-45600 · AiLux imx6 bundle

A CWE-613 “Insufficient Session Expiration” vulnerability in the web application, due to the session cookie “sessionid” lasting two weeks…

EPSS 0.4%CVSS 9.8

CVE-2023-45597 · AiLux imx6 bundle

A CWE-1236 “Improper Neutralization of Formula Elements in a CSV File” vulnerability in the “file_configuration” functionality of the web…

EPSS 0.4%CVSS 9.0

chatgpt-wechat-personal1 vulnerability on this pageMax CVSS 9.8Priority 40KEV 0

CVE-2024-27565 · chatgpt-wechat-personal weixin.php

A Server-Side Request Forgery (SSRF) in weixin.php of ChatGPT-wechat-personal commit a0857f6 allows attackers to force the application to…

EPSS 0.7%CVSS 9.8

eProsima1 vulnerability on this pageMax CVSS 9.8Priority 40KEV 0

CVE-2023-50716 · eProsima Fast-DDS

Invalid DATA_FRAG Submessage causes a bad-free error

EPSS 0.7%CVSS 9.8

ZKSoftware Biometric Security Solutions1 vulnerability on this pageMax CVSS 9.8Priority 40KEV 0

CVE-2023-7103 · ZKSoftware Biometric Security Solutions UFace 5

Authentication Bypass in ZKSoftware's UFace 5

php1 vulnerability on this pageMax CVSS 9.8Priority 39KEV 0

CVE-2023-41503 · php student_enrollment

Student Enrollment In PHP v1.0 was discovered to contain a SQL injection vulnerability via the Login function.