The archive.

CVE-2023-39244 · Dell ESI (Enterprise Storage Integrator) for SAP LAMA

DELL ESI (Enterprise Storage Integrator) for SAP LAMA, version 10.0, contains an information disclosure vulnerability in EHAC component.

EPSS 0.6%CVSS 9.8

CVE-2023-39245 · Dell ESI (Enterprise Storage Integrator) for SAP LAMA

DELL ESI (Enterprise Storage Integrator) for SAP LAMA, version 10.0, contains an information disclosure vulnerability in EHAC component.

EPSS 0.6%CVSS 9.8

CVE-2024-22425 · Dell RecoverPoint for VMs

Dell RecoverPoint for Virtual Machines 5.3.x, 6.0.SP1 contains a brute force/dictionary attack vulnerability.

NodeJS1 vulnerability on this pageMax CVSS 9.8Priority 43KEV 0

CVE-2024-21896 · NodeJS Node

The permission model protects itself against path traversal attacks by calling path.resolve() on any paths given by the user.

yoctoproject1 vulnerability on this pageMax CVSS 9.8Priority 43KEV 0

CVE-2024-25626 · yoctoproject poky

Yocto Project Security Advisory - BitBake/Toaster

Imaging Data Commons2 vulnerabilities on this pageMax CVSS 9.8Priority 42KEV 0

CVE-2024-24793 · Imaging Data Commons libdicom

A use-after-free vulnerability exists in the DICOM Element Parsing as implemented in Imaging Data Commons libdicom 1.0.5.

CVE-2024-24794 · Imaging Data Commons libdicom

A use-after-free vulnerability exists in the DICOM Element Parsing as implemented in Imaging Data Commons libdicom 1.0.5.

Suite CRM1 vulnerability on this pageMax CVSS 9.9Priority 42KEV 0

CVE-2024-1644 · Suite CRM Suite CRM

Suite CRM v7.14.2 - RCE via Local File Inclusion

EPSS 0.9%CVSS 9.9

timo1 vulnerability on this pageMax CVSS 9.8Priority 42KEV 0

CVE-2024-22824 · timo timo

An issue in Timo v.2.0.3 allows a remote attacker to execute arbitrary code via the filetype restrictions in the UploadController.java co…

novel-plus1 vulnerability on this pageMax CVSS 9.8Priority 41KEV 0

CVE-2024-25274 · novel-plus novel-plus

An arbitrary file upload vulnerability in the component /sysFile/upload of Novel-Plus v4.3.0-RC1 allows attackers to execute arbitrary co…

EPSS 0.8%CVSS 9.8

enartia1 vulnerability on this pageMax CVSS 9.8Priority 40KEV 0

CVE-2024-0610 · enartia Piraeus Bank WooCommerce Payment Gateway

Piraeus Bank WooCommerce Payment Gateway <= 1.6.5.1 - Unauthenticated SQL Injection

EPSS 0.7%CVSS 9.8

Rockwell Automation1 vulnerability on this pageMax CVSS 9.0Priority 40KEV 0

CVE-2024-21915 · Rockwell Automation FactoryTalk® Service Platform

Rockwell Automation FactoryTalk® Service Platform Elevated Privileges Vulnerability Through Web Service Functionality

EPSS 1.0%CVSS 9.0

Brivo1 vulnerability on this pageMax CVSS 9.0Priority 39KEV 0

CVE-2023-6260 · Brivo ACS100, ACS300

Web UI OS Command Injection in Brivo ACS100, ACS300

EPSS 0.9%CVSS 9.0

Google2 vulnerabilities on this pageMax CVSS 9.8Priority 39KEV 0

CVE-2024-0031 · Google Android

In attp_build_read_by_type_value_cmd of att_protocol.cc , there is a possible out of bounds write due to improper input validation.

EPSS 0.6%CVSS 9.8

CVE-2023-40115 · Google Android

In readLogs of StatsService.cpp, there is a possible memory corruption due to a use after free.

EPSS 0.2%CVSS 9.8

IBM1 vulnerability on this pageMax CVSS 9.8Priority 38KEV 0

CVE-2022-42443 · IBM Trusteer iOS SDK

Trusteer for mobile file upload

openrobotics1 vulnerability on this pageMax CVSS 9.1Priority 38KEV 0

CVE-2024-25198 · openrobotics robot_operating_system

Inappropriate pointer order of laser_scan_filter_.reset() and tf_listener_.reset() (amcl_node.cpp) in Open Robotics Robotic Operating Syt…

EPSS 0.7%CVSS 9.1

POSTAHSİL1 vulnerability on this pageMax CVSS 9.8Priority 38KEV 0

CVE-2023-7081 · POSTAHSİL Online Payment System

SQLi in PosTahsil's Online Payment System

Utarit Information Technologies1 vulnerability on this pageMax CVSS 9.8Priority 38KEV 0

CVE-2023-5155 · Utarit Information Technologies SoliPay Mobile App

SQLi in Utarit's Smart Deposit System

12dsynergy1 vulnerability on this pageMax CVSS 9.1Priority 37KEV 0

CVE-2024-24722 · 12dsynergy 12d_synergy_server

An unquoted service path vulnerability in the 12d Synergy Server and File Replication Server components may allow an attacker to gain ele…

EPSS 0.6%CVSS 9.1

Hitachi1 vulnerability on this pageMax CVSS 9.8Priority 37KEV 0

CVE-2024-0715 · Hitachi Hitachi Global Link Manager

EL Injection Vulnerability in Hitachi Global Link Manager

Huawei4 vulnerabilities on this pageMax CVSS 9.8Priority 37KEV 0

CVE-2023-52370 · Huawei HarmonyOS

Stack overflow vulnerability in the network acceleration module.Successful exploitation of this vulnerability may cause unauthorized file…

CVE-2023-52378 · Huawei HarmonyOS

Vulnerability of incorrect service logic in the WindowManagerServices module.Successful exploitation of this vulnerability may cause feat…

CVE-2023-52381 · Huawei HarmonyOS

Script injection vulnerability in the email module.Successful exploitation of this vulnerability may affect service confidentiality, inte…

CVE-2023-52369 · Huawei HarmonyOS

Stack overflow vulnerability in the NFC module.Successful exploitation of this vulnerability may affect service availability and integrity.

EPSS 0.4%CVSS 9.1

zephyrproject-rtos4 vulnerabilities on this pageMax CVSS 9.8Priority 37KEV 0

CVE-2023-5779 · zephyrproject-rtos Zephyr

can: out of bounds in remove_rx_filter function

CVE-2023-6249 · zephyrproject-rtos Zephyr

ipm: signed to unsigned conversion problem in esp32_ipm_send

CVE-2023-6749 · zephyrproject-rtos Zephyr

Unchecked user input length in the Zephyr Settings Shell