The archive.

Silicon Labs1 vulnerability on this pageMax CVSS 10.0Priority 56KEV 0

CVE-2023-45318 · Silicon Labs Gecko Platform

A heap-based buffer overflow vulnerability exists in the HTTP Server functionality of Weston Embedded uC-HTTP git commit 80d4004.

EPSS 2%public exploit CVSS 10.0

The Biosig Project8 vulnerabilities on this pageMax CVSS 9.8Priority 55KEV 0

CVE-2024-23305 · The Biosig Project libbiosig

An out-of-bounds write vulnerability exists in the BrainVisionMarker Parsing functionality of The Biosig Project libbiosig 2.5.0 and Mast…

CVE-2024-23313 · The Biosig Project libbiosig

An integer underflow vulnerability exists in the sopen_FAMOS_read functionality of The Biosig Project libbiosig 2.5.0 and Master Branch (…

CVE-2024-23809 · The Biosig Project libbiosig

A double-free vulnerability exists in the BrainVision ASCII Header Parsing functionality of The Biosig Project libbiosig 2.5.0 and Master…

CVE-2024-21795 · The Biosig Project libbiosig

A heap-based buffer overflow vulnerability exists in the .egi parsing functionality of The Biosig Project libbiosig 2.5.0 and Master Bran…

CVE-2024-21812 · The Biosig Project libbiosig

An integer overflow vulnerability exists in the sopen_FAMOS_read functionality of The Biosig Project libbiosig 2.5.0 and Master Branch (a…

CVE-2024-22097 · The Biosig Project libbiosig

A double-free vulnerability exists in the BrainVision Header Parsing functionality of The Biosig Project libbiosig Master Branch (ab0ee11…

CVE-2024-23310 · The Biosig Project libbiosig

A use-after-free vulnerability exists in the sopen_FAMOS_read functionality of The Biosig Project libbiosig 2.5.0 and Master Branch (ab0e…

CVE-2024-23606 · The Biosig Project libbiosig

An out-of-bounds write vulnerability exists in the sopen_FAMOS_read functionality of The Biosig Project libbiosig 2.5.0 and Master Branch…

keerti19241 vulnerability on this pageMax CVSS 9.8Priority 51KEV 0

CVE-2024-1701 · keerti1924 PHP-MYSQL-User-Login-System

keerti1924 PHP-MYSQL-User-Login-System edit.php access control

EPSS 0.8%public exploit CVSS 9.8

pmb_project2 vulnerabilities on this pageMax CVSS 9.8Priority 51KEV 0

CVE-2023-52153 · pmb_project pmb

A SQL Injection vulnerability in /pmb/opac_css/includes/sessions.inc.php in PMB 7.4.7 and earlier allows remote unauthenticated attackers…

EPSS 0.8%public exploit CVSS 9.8

CVE-2023-51828 · pmb_project pmb

A SQL Injection vulnerability in /admin/convert/export.class.php in PMB 7.4.7 and earlier versions allows remote unauthenticated attacker…

EPSS 0.9%CVSS 9.8

churchcrm3 vulnerabilities on this pageMax CVSS 9.8Priority 50KEV 0

CVE-2024-25894 · churchcrm churchcrm

ChurchCRM 5.5.0 /EventEditor.php is vulnerable to Blind SQL Injection (Time-based) via the EventCount POST parameter.

EPSS 0.7%public exploit CVSS 9.8

CVE-2024-25897 · churchcrm churchcrm

ChurchCRM 5.5.0 FRCatalog.php is vulnerable to Blind SQL Injection (Time-based) via the CurrentFundraiser GET parameter.

CVE-2024-25893 · churchcrm churchcrm

ChurchCRM 5.5.0 FRCertificates.php is vulnerable to Blind SQL Injection (Time-based) via the CurrentFundraiser GET parameter.

EPSS 0.4%public exploit CVSS 9.1

Weston Embedded1 vulnerability on this pageMax CVSS 9.1Priority 50KEV 0

CVE-2023-38562 · Weston Embedded uC-TCP-IP

A double-free vulnerability exists in the IP header loopback parsing functionality of Weston Embedded uC-TCP-IP v3.06.01.

EPSS 1%public exploit CVSS 9.1

Google1 vulnerability on this pageMax CVSS 9.8Priority 49KEV 0

CVE-2024-1676 · Google Chrome

Inappropriate implementation in Navigation in Google Chrome prior to 122.0.6261.57 allowed a remote attacker to spoof security UI via a c…

EPSS 18%CVSS 9.8

Linux7 vulnerabilities on this pageMax CVSS 9.8Priority 49KEV 0

CVE-2023-52440 · Linux Linux

ksmbd: fix slub overflow in ksmbd_decode_ntlmssp_auth_blob()

EPSS 22%CVSS 9.8

CVE-2023-52442 · Linux Linux

ksmbd: validate session id and tree id in compound request

EPSS 30%CVSS 9.1

CVE-2024-26584 · Linux Linux

net: tls: handle backlogging of crypto requests

EPSS 0.7%CVSS 9.8

CVE-2024-26582 · Linux Linux

net: tls: fix use-after-free with partial reads and async decrypt

EPSS 0.7%CVSS 9.8

CVE-2024-26583 · Linux Linux

tls: fix race between async notify and socket close

EPSS 0.5%CVSS 9.8

CVE-2024-26585 · Linux Linux

tls: fix race between tx work scheduling and socket close

EPSS 0.6%CVSS 9.8

CVE-2023-52441 · Linux Linux

ksmbd: fix out of bounds in init_smb2_rsp_hdr()

EPSS 0.7%CVSS 9.1

Apache Software Foundation2 vulnerabilities on this pageMax CVSS 9.8Priority 44KEV 0

CVE-2024-23114 · Apache Software Foundation Apache Camel

Apache Camel: Camel-CassandraQL: Unsafe Deserialization from CassandraAggregationRepository

CVE-2024-25141 · Apache Software Foundation Apache Airflow Mongo Provider

Apache Airflow Mongo Provider: Certificate validation isn't respected even if SSL is enabled for apache-airflow-providers-mongo

EPSS 0.6%CVSS 9.1

HP Inc.1 vulnerability on this pageMax CVSS 9.8Priority 44KEV 0

CVE-2024-0794 · HP Inc. Certain LaserJet Pro, HP Enterprise LaserJet, HP LaserJet Managed Printers

Certain LaserJet Pro, HP Enterprise LaserJet, HP LaserJet Managed Printers – Potential Buffer Overflow, Potential Remote Code Execution

mitre1 vulnerability on this pageMax CVSS 9.8Priority 44KEV 0

CVE-2024-25249 · mitre

An issue in He3 App for macOS version 2.0.17, allows remote attackers to execute arbitrary code via the RunAsNode and enableNodeClilnspec…

pmb_services1 vulnerability on this pageMax CVSS 9.8Priority 43KEV 0

CVE-2023-37177 · pmb_services pmb

SQL Injection vulnerability in PMB Services PMB v.7.4.7 and before allows a remote unauthenticated attacker to execute arbitrary code via…

VMware1 vulnerability on this pageMax CVSS 9.6Priority 43KEV 0

CVE-2024-22245 · VMware VMware Enhanced Authentication Plug-in (EAP)

Arbitrary Authentication Relay Vulnerability in Deprecated EAP Browser Plugin

EPSS 1%CVSS 9.6

discourse1 vulnerability on this pageMax CVSS 9.1Priority 39KEV 0

CVE-2023-46241 · discourse discourse-microsoft-auth

Potential account take over due to unverified emails from Microsoft Identity Platform

EPSS 0.8%CVSS 9.1

Internet Computer1 vulnerability on this pageMax CVSS 9.1Priority 39KEV 0

CVE-2024-1631 · Internet Computer agent-js

agent-js: Insecure Key Generation in `Ed25519KeyIdentity.generate`

EPSS 0.9%CVSS 9.1

Liferay12 vulnerabilities on this pageMax CVSS 9.6Priority 39KEV 0

CVE-2023-42496 · Liferay Portal

Reflected cross-site scripting (XSS) vulnerability on the add assignees to a role page in Liferay Portal 7.3.3 through 7.4.3.97, and Life…

CVE-2023-42498 · Liferay Portal

Reflected cross-site scripting (XSS) vulnerability in the Language Override edit screen in Liferay Portal 7.4.3.8 through 7.4.3.97, and L…

CVE-2024-25147 · Liferay Portal

Cross-site scripting (XSS) vulnerability in HtmlUtil.escapeJsLink in Liferay Portal 7.2.0 through 7.4.1, and older unsupported versions,…

CVE-2024-26269 · Liferay Portal

Cross-site scripting (XSS) vulnerability in the Frontend JS module's portlet.js in Liferay Portal 7.2.0 through 7.4.3.37, and Liferay DXP…

CVE-2023-40191 · Liferay Portal

Reflected cross-site scripting (XSS) vulnerability in the instance settings for Accounts in Liferay Portal 7.4.3.44 through 7.4.3.97, and…

CVE-2023-47795 · Liferay Portal

Stored cross-site scripting (XSS) vulnerability in the Document and Media widget in Liferay Portal 7.4.3.18 through 7.4.3.101, and Lifera…

CVE-2024-25602 · Liferay Portal

Stored cross-site scripting (XSS) vulnerability in Users Admin module's edit user page in Liferay Portal 7.2.0 through 7.4.2, and older u…

CVE-2024-25152 · Liferay Portal

Stored cross-site scripting (XSS) vulnerability in Message Board widget in Liferay Portal 7.2.0 through 7.4.2, and older unsupported vers…

CVE-2024-25601 · Liferay Portal

Stored cross-site scripting (XSS) vulnerability in Expando module's geolocation custom fields in Liferay Portal 7.2.0 through 7.4.2, and…

CVE-2024-25603 · Liferay Portal

Stored cross-site scripting (XSS) vulnerability in the Dynamic Data Mapping module's DDMForm in Liferay Portal 7.2.0 through 7.4.3.4, and…

CVE-2024-25610 · Liferay Portal

In Liferay Portal 7.2.0 through 7.4.3.12, and older unsupported versions, and Liferay DXP 7.4 before update 9, 7.3 before update 4, 7.2 b…

EPSS 0.5%CVSS 9.0

CVE-2024-26266 · Liferay Portal

Multiple stored cross-site scripting (XSS) vulnerabilities in Liferay Portal 7.2.0 through 7.4.3.13, and older unsupported versions, and…