The archive.

CVE-2024-25210 · mitre

Simple Expense Tracker v1.0 was discovered to contain a SQL injection vulnerability via the expense parameter at /endpoint/delete_expense…

CVE-2024-25211 · mitre

Simple Expense Tracker v1.0 was discovered to contain a SQL injection vulnerability via the category parameter at /endpoint/delete_catego…

CVE-2024-25215 · mitre

Employee Managment System v1.0 was discovered to contain a SQL injection vulnerability via the pwd parameter at /aprocess.php.

CVE-2024-25217 · mitre

Online Medicine Ordering System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /omos/?p=products/vi…

CVE-2024-25220 · mitre

Task Manager App v1.0 was discovered to contain a SQL injection vulnerability via the taskID parameter at /TaskManager/EditTask.php.

CVE-2024-25223 · mitre

Simple Admin Panel App v1.0 was discovered to contain a SQL injection vulnerability via the orderID parameter at /adminView/viewEachOrder…

EPSS 0.6%public exploit CVSS 9.8

CVE-2024-22923 · mitre

SQL injection vulnerability in adv radius v.2.2.5 allows a local attacker to execute arbitrary code via a crafted script.

CVE-2024-25216 · mitre

Employee Managment System v1.0 was discovered to contain a SQL injection vulnerability via the mailud parameter at /aprocess.php.

Adobe1 vulnerability on this pageMax CVSS 9.8Priority 52KEV 0

CVE-2024-20738 · Adobe Adobe Framemaker Publishing Server

Adobe FrameMaker Publishing Server Authentication Bypass Vulnerability | CVE-2023-44324 bypass

EPSS 1%public exploit CVSS 9.8

sherlock1 vulnerability on this pageMax CVSS 9.8Priority 52KEV 0

CVE-2024-25214 · sherlock employee_management_system

An issue in Employee Managment System v1.0 allows attackers to bypass authentication via injecting a crafted payload into the E-mail and…

EPSS 1.0%public exploit CVSS 9.8

4ipnet1 vulnerability on this pageMax CVSS 9.8Priority 51KEV 0

CVE-2024-24300 · 4ipnet eap-767

4ipnet EAP-767 v3.42.00 is vulnerable to Incorrect Access Control.

task_manager_in_php_with_source_code_project1 vulnerability on this pageMax CVSS 9.8Priority 51KEV 0

CVE-2024-25222 · task_manager_in_php_with_source_code_project task_manager_in_php_with_source_code

Task Manager App v1.0 was discovered to contain a SQL injection vulnerability via the projectID parameter at /TaskManager/EditProject.php.

FreeBSD3 vulnerabilities on this pageMax CVSS 9.8Priority 47KEV 0

CVE-2022-23088 · FreeBSD FreeBSD

802.11 heap buffer overflow

EPSS 4%CVSS 9.8

CVE-2022-23085 · FreeBSD FreeBSD

Potential jail escape vulnerabilities in netmap

EPSS 0.5%CVSS 9.8

CVE-2022-23086 · FreeBSD FreeBSD

mpr/mps/mpt driver ioctl heap out-of-bounds write

EPSS 0.4%CVSS 9.8

Dell3 vulnerabilities on this pageMax CVSS 9.8Priority 46KEV 0

CVE-2023-32462 · Dell Dell SmartFabric OS10

Dell OS10 Networking Switches running 10.5.2.x and above contain an OS command injection vulnerability when using remote user authenticat…

EPSS 2%CVSS 9.8

CVE-2023-28078 · Dell Dell SmartFabric OS10

Dell OS10 Networking Switches running 10.5.2.x and above contain a vulnerability with zeroMQ when VLT is configured.

EPSS 0.9%CVSS 9.1

CVE-2023-32484 · Dell Enterprise SONiC OS

Dell Networking Switches running Enterprise SONiC versions 4.1.0, 4.0.5, 3.5.4 and below contains an improper input validation vulnerabil…

EPSS 0.6%CVSS 9.8

Hgiga2 vulnerabilities on this pageMax CVSS 9.8Priority 45KEV 0

CVE-2024-26260 · Hgiga OAKlouds

Hgiga OAKlouds - Command Injection

EPSS 2%CVSS 9.8

CVE-2024-26261 · Hgiga OAKlouds

Hgiga OAKlouds - Arbitrary File Read And Delete

Zoom Video Communications, Inc.1 vulnerability on this pageMax CVSS 9.8Priority 45KEV 0

CVE-2024-24691 · Zoom Video Communications, Inc. Zoom Desktop Client for Windows, Zoom VDI Client for Windows, and Zoom Meeting SDK for Windows

Zoom Desktop Client for Windows, Zoom VDI Client for Windows, and Zoom Meeting SDK for Windows - Improper Input Validation

EPSS 2%CVSS 9.8

GitHub6 vulnerabilities on this pageMax CVSS 9.1Priority 44KEV 0

CVE-2024-1355 · GitHub Enterprise Server

Command injection vulnerability was identified in GitHub Enterprise Server that allowed privilege escalation in the Mangement Console

CVE-2024-1359 · GitHub Enterprise Server

Command injection vulnerability was identified in GitHub Enterprise Server that allowed privilege escalation in the Mangement Console

CVE-2024-1369 · GitHub Enterprise Server

Command injection vulnerability was identified in GitHub Enterprise Server that allowed privilege escalation in the Mangement Console

CVE-2024-1372 · GitHub Enterprise Server

Command injection vulnerability was identified in GitHub Enterprise Server that allowed privilege escalation in the Mangement Console

CVE-2024-1374 · GitHub Enterprise Server

Command injection vulnerability was identified in GitHub Enterprise Server that allowed privilege escalation in the Mangement Console

EPSS 3%CVSS 9.1

CVE-2024-1378 · GitHub Enterprise Server

Command injection vulnerability was identified in GitHub Enterprise Server that allowed privilege escalation in the Mangement Console

mystenlabs1 vulnerability on this pageMax CVSS 9.8Priority 44KEV 0

CVE-2023-42374 · mystenlabs sui_blockchain

An issue in mystenlabs Sui Blockchain before v.1.6.3 allow a remote attacker to execute arbitrary code and cause a denial of service via…

EPSS 1%CVSS 9.8

SHARP CORPORATION3 vulnerabilities on this pageMax CVSS 9.8Priority 43KEV 0

CVE-2024-23789 · SHARP CORPORATION Energy Management Controller with Cloud Services

Energy Management Controller with Cloud Services JH-RVB1 /JH-RV11 Ver.B0.1.9.1 and earlier allows a network-adjacent unauthenticated atta…

EPSS 1%CVSS 9.8

CVE-2024-23786 · SHARP CORPORATION Energy Management Controller with Cloud Services

Cross-site scripting vulnerability in Energy Management Controller with Cloud Services JH-RVB1 /JH-RV11 Ver.B0.1.9.1 and earlier allows a…

EPSS 0.8%CVSS 9.3

CVE-2024-23788 · SHARP CORPORATION Energy Management Controller with Cloud Services

Server-side request forgery vulnerability in Energy Management Controller with Cloud Services JH-RVB1 /JH-RV11 Ver.B0.1.9.1 and earlier a…

EPSS 0.8%CVSS 9.1

EBM Technologies1 vulnerability on this pageMax CVSS 9.8Priority 41KEV 0

CVE-2024-26264 · EBM Technologies RISWEB

EBM Technologies RISWEB - SQL Injection

EPSS 0.8%CVSS 9.8

ausweisapp1 vulnerability on this pageMax CVSS 9.6Priority 40KEV 0

CVE-2024-23674 · ausweisapp online-ausweis-funktion

The Online-Ausweis-Funktion eID scheme in the German National Identity card through 2024-02-15 allows authentication bypass by spoofing.

EPSS 0.7%CVSS 9.6

Red Hat1 vulnerability on this pageMax CVSS 9.3Priority 40KEV 0

CVE-2024-1485 · Red Hat OpenShift Developer Tools and Services

Registry-support: decompress can delete files outside scope via relative paths

EPSS 0.9%CVSS 9.3

SAP_SE1 vulnerability on this pageMax CVSS 9.1Priority 40KEV 0

CVE-2024-22131 · SAP_SE SAP ABA (Application Basis)

Code Injection vulnerability in SAP ABA (Application Basis)

EPSS 1%CVSS 9.1

Siemens3 vulnerabilities on this pageMax CVSS 9.8Priority 40KEV 0

CVE-2024-23810 · Siemens SINEC NMS

A vulnerability has been identified in SINEC NMS (All versions < V2.0 SP1).

CVE-2024-23816 · Siemens Location Intelligence Perpetual Large

A vulnerability has been identified in Location Intelligence Perpetual Large (9DE5110-8CA13-1AX0) (All versions < V4.3), Location Intelli…

CVE-2024-23813 · Siemens Polarion ALM

A vulnerability has been identified in Polarion ALM (All versions < V2404.0).

EPSS 0.6%CVSS 9.8

UNI-PA University Marketing & Computer Internet Trade Inc.1 vulnerability on this pageMax CVSS 9.8Priority 40KEV 0

CVE-2023-6441 · UNI-PA University Marketing & Computer Internet Trade Inc. University Information System

SQLi in UNI-PA's University Information System