Critical vulnerability archive — page 474

JetBrains1 vulnerability on this pageMax CVSS 9.8Priority 99KEV 1

CVE-2024-27198 · JetBrains TeamCity

JetBrains TeamCity Authentication Bypass Vulnerability

KEV · due 28 Mar ransomware use EPSS 100%public exploit SSVC act CVSS 9.8

MediaTek, Inc.2 vulnerabilities on this pageMax CVSS 9.8Priority 59KEV 0

CVE-2024-20017 · MediaTek, Inc. MT6890, MT7915, MT7916, MT7981, MT7986

In wlan service, there is a possible out of bounds write due to improper input validation.

EPSS 47%public exploit CVSS 9.8

CVE-2024-20018 · MediaTek, Inc. MT7615

In wlan driver, there is a possible out of bounds write due to improper input validation.

EPSS 1.0%CVSS 9.8

SourceCodester12 vulnerabilities on this pageMax CVSS 9.8Priority 59KEV 0

CVE-2024-27746 · sourcecodester petrol_pump_management

SQL Injection vulnerability in Petrol Pump Mangement Software v.1.0 allows an attacker to execute arbitrary code via a crafted payload to…

EPSS 13%public exploit CVSS 9.8

CVE-2024-27747 · sourcecodester petrol_pump_management

File Upload vulnerability in Petrol Pump Mangement Software v.1.0 allows an attacker to execute arbitrary code via a crafted payload to t…

EPSS 24%public exploit CVSS 9.8

CVE-2023-49547 · sourcecodester customer_support_system

Customer Support System v1 was discovered to contain a SQL injection vulnerability via the username parameter at /customer_support/ajax.p…

EPSS 1%public exploit CVSS 9.8

CVE-2023-49970 · sourcecodester customer_support_system

Customer Support System v1 was discovered to contain a SQL injection vulnerability via the subject parameter at /customer_support/ajax.ph…

EPSS 0.8%public exploit CVSS 9.8

CVE-2024-2147 · SourceCodester Online Mobile Management Store

SourceCodester Online Mobile Management Store login.php sql injection

EPSS 0.8%public exploit CVSS 9.8

CVE-2024-25239 · sourcecodester employee_management_system

SQL Injection vulnerability in Sourcecodester Employee Management System v1.0 allows attackers to run arbitrary SQL commands via crafted…

EPSS 0.8%public exploit CVSS 9.8

CVE-2024-2077 · SourceCodester Simple Online Bidding System

SourceCodester Simple Online Bidding System index.php sql injection

EPSS 0.7%public exploit CVSS 9.8

CVE-2024-2152 · SourceCodester Online Mobile Management Store

SourceCodester Online Mobile Management Store manage_product.php sql injection

EPSS 0.6%public exploit CVSS 9.8

CVE-2024-2153 · SourceCodester Online Mobile Management Store

SourceCodester Online Mobile Management Store view_order.php sql injection

EPSS 0.7%public exploit CVSS 9.8

CVE-2024-2156 · SourceCodester Best POS Management System

SourceCodester Best POS Management System admin_class.php sql injection

EPSS 0.6%public exploit CVSS 9.8

CVE-2024-2067 · SourceCodester Computer Inventory System

SourceCodester Computer Inventory System delete-computer.php sql injection

EPSS 0.5%public exploit CVSS 9.8

CVE-2024-2154 · SourceCodester Online Mobile Management Store

SourceCodester Online Mobile Management Store view_product.php sql injection

EPSS 0.6%CVSS 9.8

Netentsec2 vulnerabilities on this pageMax CVSS 9.8Priority 58KEV 0

CVE-2024-2022 · Netentsec NS-ASG Application Security Gateway

Netentsec NS-ASG Application Security Gateway list_ipAddressPolicy.php sql injection

EPSS 9%public exploit CVSS 9.8

CVE-2024-2021 · Netentsec NS-ASG Application Security Gateway

Netentsec NS-ASG Application Security Gateway list_localuser.php sql injection

EPSS 0.7%public exploit CVSS 9.8

Panabit1 vulnerability on this pageMax CVSS 9.8Priority 53KEV 0

CVE-2024-2014 · Panabit Panalog

Panabit Panalog sprog_upstatus.php sql injection

EPSS 1%public exploit CVSS 9.8

parse-community1 vulnerability on this pageMax CVSS 10.0Priority 53KEV 0

CVE-2024-27298 · parse-community parse-server

Parse Server literalizeRegexPart SQL Injection

EPSS 1%public exploit CVSS 10.0

book_store_management_system_project1 vulnerability on this pageMax CVSS 9.8Priority 52KEV 0

CVE-2023-49543 · book_store_management_system_project book_store_management_system

Incorrect access control in Book Store Management System v1 allows attackers to access unauthorized pages and execute administrative func…

EPSS 1.0%public exploit CVSS 9.8

pdfmake_project1 vulnerability on this pageMax CVSS 9.8Priority 52KEV 0

CVE-2024-25180 · pdfmake_project pdfmake

An issue discovered in pdfmake 0.2.9 allows remote attackers to run arbitrary code via crafted POST request to the /pdf endpoint.

EPSS 1%public exploit CVSS 9.8

mjml1 vulnerability on this pageMax CVSS 9.3Priority 51KEV 0

CVE-2024-25293 · mjml mjml

mjml-app versions 3.0.4 and 3.1.0-beta were discovered to contain a remote code execution (RCE) via the href attribute.

EPSS 1.0%public exploit CVSS 9.3

Dassault Systèmes1 vulnerability on this pageMax CVSS 9.4Priority 45KEV 0

CVE-2024-1624 · Dassault Systèmes Documentation server

OS Command Injection vulnerability affecting documentation server on certain Releases of 3DEXPERIENCE, SIMULIA Abaqus, SIMULIA Isight and CATIA Composer

EPSS 2%CVSS 9.4

deskfiler1 vulnerability on this pageMax CVSS 9.8Priority 45KEV 0

CVE-2024-25291 · deskfiler deskfiler

Deskfiler v1.2.3 allows attackers to execute arbitrary code via uploading a crafted plugin.

EPSS 2%CVSS 9.8

nteract1 vulnerability on this pageMax CVSS 9.8Priority 45KEV 0

CVE-2024-22891 · nteract nteract

Nteract v.0.28.0 was discovered to contain a remote code execution (RCE) vulnerability via the Markdown link.

EPSS 2%CVSS 9.8

Leo Khoa1 vulnerability on this pageMax CVSS 9.8Priority 44KEV 0

CVE-2024-0864 · Leo Khoa Laragon

RCE in Laragon

EPSS 1%CVSS 9.8

mitre1 vulnerability on this pageMax CVSS 9.6Priority 44KEV 0

CVE-2024-25292 · mitre

Cross-site scripting (XSS) vulnerability in RenderTune v1.1.4 allows attackers to execute arbitrary web scripts or HTML via a crafted pay…

EPSS 1%CVSS 9.6

epointwebbuilder1 vulnerability on this pageMax CVSS 9.8Priority 43KEV 0

CVE-2024-24525 · epointwebbuilder epointwebbuilder

An issue in EpointWebBuilder 5.1.0-sp1, 5.2.1-sp1, 5.4.1 and 5.4.2 allows a remote attacker to execute arbitrary code via the infoid para…

EPSS 1%CVSS 9.8

vivotek1 vulnerability on this pageMax CVSS 9.8Priority 43KEV 0

CVE-2024-26548 · vivotek network_camera

An issue in vivotek Network Camera v.FD8166A-VVTK-0204j allows a remote attacker to execute arbitrary code via a crafted payload to the u…

EPSS 1%CVSS 9.8

wpvividplugins2 vulnerabilities on this pageMax CVSS 9.8Priority 43KEV 0

CVE-2024-1981 · wpvividplugins Migration, Backup, Staging – WPvivid

The Migration, Backup, Staging – WPvivid plugin for WordPress is vulnerable to SQL Injection via the 'table_prefix' parameter in version…

EPSS 1%CVSS 9.8

CVE-2024-1982 · wpvividplugins WPvivid — Backup, Migration & Staging

WPvivid Backup and Migration <= 0.9.68 - Missing Authorization

EPSS 0.8%CVSS 9.1

Linux3 vulnerabilities on this pageMax CVSS 9.8Priority 42KEV 0

CVE-2021-47103 · Linux Linux

inet: fully convert sk->sk_rx_dst to RCU rules

EPSS 1.0%CVSS 9.8

CVE-2023-52515 · Linux Linux

RDMA/srp: Do not call scsi_done() from srp_abort()

EPSS 0.6%CVSS 9.8

CVE-2023-52480 · Linux Linux

ksmbd: fix race condition between session lookup and expire

EPSS 0.5%CVSS 9.8

prestashopmodules1 vulnerability on this pageMax CVSS 9.8Priority 42KEV 0

CVE-2024-24302 · prestashopmodules productdesigner

An issue was discovered in Tunis Soft "Product Designer" (productdesigner) module for PrestaShop before version 1.178.36, allows remote a…

EPSS 0.9%CVSS 9.8

CISA2 vulnerabilities on this pageMax CVSS 9.8Priority 41KEV 0

CVE-2023-7243 · CISA Industrial Control Systems Network Protocol Parsers (ICSNPP) - Ethercat Plugin for Zeek

Ethercat Zeek Plugin Out-of-bounds Write

EPSS 0.8%CVSS 9.8

CVE-2023-7244 · CISA Industrial Control Systems Network Protocol Parsers (ICSNPP) - Ethercat Plugin for Zeek

Ethercat Zeek Plugin Out-of-bounds Write

EPSS 0.8%CVSS 9.8

LangChain1 vulnerability on this pageMax CVSS 9.8Priority 40KEV 0

CVE-2024-2057 · LangChain langchain_community

LangChain langchain_community TFIDFRetriever tfidf.py load_local server-side request forgery

EPSS 0.7%CVSS 9.8

Commend1 vulnerability on this pageMax CVSS 9.4Priority 39KEV 0

CVE-2024-21767 · Commend WS203VICM

Commend WS203VICM Improper Access Control

EPSS 0.6%CVSS 9.4

myprestamodules1 vulnerability on this pageMax CVSS 9.8Priority 39KEV 0

CVE-2024-25847 · myprestamodules product_catalog_import_for_prestashop

SQL Injection vulnerability in MyPrestaModules "Product Catalog (CSV, Excel) Import" (simpleimportproduct) modules for PrestaShop version…

EPSS 0.5%CVSS 9.8

mintplex-labs1 vulnerability on this pageMax CVSS 9.6Priority 38KEV 0

CVE-2024-0765 · mintplex-labs mintplex-labs/anything-llm

Default user role exporting save state of instance

EPSS 0.6%CVSS 9.6

Mollie1 vulnerability on this pageMax CVSS 9.1Priority 37KEV 0

CVE-2023-6090 · Mollie Mollie Payments for WooCommerce

WordPress Mollie Payments for WooCommerce Plugin <= 7.3.11 is vulnerable to Arbitrary File Upload

EPSS 0.6%CVSS 9.1

Qualcomm, Inc.5 vulnerabilities on this pageMax CVSS 9.8Priority 37KEV 0

CVE-2023-28582 · Qualcomm, Inc. Snapdragon

Buffer Copy Without Checking Size of Input in Data Modem

EPSS 0.4%CVSS 9.8

CVE-2023-43552 · Qualcomm, Inc. Snapdragon

Use After Free in WLAN Host Communication

EPSS 0.4%CVSS 9.8

CVE-2023-43553 · Qualcomm, Inc. Snapdragon

Use of Out-of-range Pointer Offset in WLAN HOST

EPSS 0.4%CVSS 9.8

CVE-2023-43548 · Qualcomm, Inc. Snapdragon

Buffer Copy Without Checking Size of Input in Video

EPSS 0.3%CVSS 9.8

CVE-2023-28578 · Qualcomm, Inc. Snapdragon

Improper Input Validation in Services

EPSS 0.1%CVSS 9.3

J's Communications Co., Ltd.1 vulnerability on this pageMax CVSS 9.1Priority 36KEV 0

CVE-2024-25091 · J's Communications Co., Ltd. RevoWorks SCVX

Protection mechanism failure issue exists in RevoWorks SCVX prior to scvimage4.10.21_1013 (when using 'VirusChecker' or 'ThreatChecker' f…

EPSS 0.5%CVSS 9.1

authzed1 vulnerability on this pageMax CVSS 9.1Priority 35KEV 0

CVE-2024-27101 · authzed spicedb

Integer overflow in chunking helper causes dispatching to miss elements or panic

EPSS 0.5%CVSS 9.1

Dell1 vulnerability on this pageMax CVSS 9.1Priority 32KEV 0

CVE-2024-22463 · Dell PowerScale OneFS

Dell PowerScale OneFS 8.2.x through 9.6.0.x contains a use of a broken or risky cryptographic algorithm vulnerability.

EPSS 0.3%CVSS 9.1

The archive.