The archive.

Browse all tracked critical vulnerabilities, including records outside today's brief.

39,188 matching vulnerabilities · Page 482 of 784

Fortinet2 vulnerabilities on this pageMax CVSS 9.8Priority 59KEV 0

CVE-2024-23108 · Fortinet FortiSIEM

An improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet allows attacker…

EPSS 80%public exploit CVSS 9.8

CVE-2024-23109 · Fortinet FortiSIEM

An improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet allows attacker…

EPSS 3%CVSS 9.8

paultgoodchild1 vulnerability on this pageMax CVSS 9.8Priority 59KEV 0

CVE-2023-6989 · paultgoodchild Shield: Blocks Bots, Protects Users, and Prevents Security Breaches

Shield Security – Smart Bot Blocking & Intrusion Prevention Security <= 18.5.9 - Unauthenticated Local File Inclusion

EPSS 57%public exploit CVSS 9.8

Unknown1 vulnerability on this pageMax CVSS 9.8Priority 58KEV 0

CVE-2021-4436 · Unknown 3DPrint Lite

3DPrint Lite < 1.9.1.5 - Unauthenticated Arbitrary File Upload

EPSS 7%public exploit CVSS 9.8

mitre13 vulnerabilities on this pageMax CVSS 9.8Priority 57KEV 0

CVE-2024-24112 · mitre

xmall v1.1 was discovered to contain a SQL injection vulnerability via the orderDir parameter.

EPSS 3%public exploit CVSS 9.8

CVE-2024-24398 · mitre

Directory Traversal vulnerability in Stimulsoft GmbH Stimulsoft Dashboard.JS before v.2024.1.2 allows a remote attacker to execute arbitr…

EPSS 2%public exploit CVSS 9.8

CVE-2023-51951 · mitre

SQL Injection vulnerability in Stock Management System 1.0 allows a remote attacker to execute arbitrary code via the id parameter in the…

EPSS 1%public exploit CVSS 9.8

CVE-2024-22852 · mitre

D-Link Go-RT-AC750 GORTAC750_A1_FW_v101b03 contains a stack-based buffer overflow via the function genacgi_main.

EPSS 1%public exploit CVSS 9.8

CVE-2024-23049 · mitre

An issue in symphony v.3.6.3 and before allows a remote attacker to execute arbitrary code via the log4j component.

EPSS 1%public exploit CVSS 9.8

CVE-2024-24543 · mitre

Buffer Overflow vulnerability in the function setSchedWifi in Tenda AC9 v.3.0, firmware version v.15.03.06.42_multi allows a remote attac…

EPSS 1%public exploit CVSS 9.8

CVE-2024-24001 · mitre

jshERP v3.3 is vulnerable to SQL Injection.

EPSS 0.7%public exploit CVSS 9.8

CVE-2023-46359 · mitre

An OS command injection vulnerability in Hardy Barth cPH2 eCharge Ladestation v1.87.0 and earlier, may allow an unauthenticated remote at…

EPSS 88%CVSS 9.8

CVE-2024-22853 · mitre

D-LINK Go-RT-AC750 GORTAC750_A1_FW_v101b03 has a hardcoded password for the Alphanetworks account, which allows remote attackers to obtai…

EPSS 5%CVSS 9.8

CVE-2020-36773 · mitre

Artifex Ghostscript before 9.53.0 has an out-of-bounds write and use-after-free in devices/vector/gdevtxtw.c (for txtwrite) because a sin…

EPSS 0.9%CVSS 9.8

CVE-2024-24000 · mitre

jshERP v3.3 is vulnerable to Arbitrary File Upload.

EPSS 0.6%CVSS 9.8

CVE-2024-24013 · mitre

A SQL injection vulnerability exists in Novel-Plus v4.3.0-RC1 and prior versions.

EPSS 0.6%CVSS 9.8

CVE-2024-24015 · mitre

A SQL injection vulnerability exists in Novel-Plus v4.3.0-RC1 and prior versions.

EPSS 0.6%CVSS 9.8

mate-desktop1 vulnerability on this pageMax CVSS 9.6Priority 54KEV 0

CVE-2023-52138 · mate-desktop engrampa

Path traversal via crafted cpio archives in Engrampa archivers

EPSS 2%public exploit CVSS 9.6

plone1 vulnerability on this pageMax CVSS 9.8Priority 54KEV 0

CVE-2024-23054 · plone plone_docker_official_image

An issue in Plone Docker Official Image 5.2.13 (5221) open-source software that could allow for remote code execution due to a package li…

EPSS 1%public exploit CVSS 9.8

gradio-app1 vulnerability on this pageMax CVSS 9.4Priority 51KEV 0

CVE-2024-0964 · gradio-app gradio-app/gradio

LFI in Gradio

EPSS 1.0%public exploit CVSS 9.4

jishenghua2 vulnerabilities on this pageMax CVSS 9.8Priority 51KEV 0

CVE-2024-24002 · jishenghua jsherp

jshERP v3.3 is vulnerable to SQL Injection.

EPSS 0.8%public exploit CVSS 9.8

CVE-2024-24004 · jishenghua jsherp

jshERP v3.3 is vulnerable to SQL Injection.

EPSS 0.7%public exploit CVSS 9.8

rustdesk1 vulnerability on this pageMax CVSS 9.8Priority 48KEV 0

CVE-2024-25140 · rustdesk rustdesk

A default installation of RustDesk 1.2.3 on Windows places a WDKTestCert certificate under Trusted Root Certification Authorities with En…

EPSS 0.5%public exploit CVSS 9.8

Canon Inc.7 vulnerabilities on this pageMax CVSS 9.8Priority 45KEV 0

CVE-2024-0244 · Canon Inc. Satera MF750C Series

Buffer overflow in CPCA PCFAX number process of Office Multifunction Printers and Laser Printers(*) which may allow an attacker on the ne…

EPSS 2%CVSS 9.8

CVE-2023-6229 · Canon Inc. Satera LBP670C Series

Buffer overflow in CPCA PDL Resource Download process of Office Multifunction Printers and Laser Printers(*) which may allow an attacker…

EPSS 1%CVSS 9.8

CVE-2023-6230 · Canon Inc. Satera LBP670C Series

Buffer overflow in the Address Book password process in authentication of Mobile Device Function of Office Multifunction Printers and Las…

EPSS 1%CVSS 9.8

CVE-2023-6231 · Canon Inc. Satera LBP670C Series

Buffer overflow in WSD probe request process of Office Multifunction Printers and Laser Printers(*) which may allow an attacker on the ne…

EPSS 1%CVSS 9.8

CVE-2023-6232 · Canon Inc. Satera LBP670C Series

Buffer overflow in the Address Book username process in authentication of Mobile Device Function of Office Multifunction Printers and Las…

EPSS 1%CVSS 9.8

CVE-2023-6233 · Canon Inc. Satera LBP670C Series

Buffer overflow in SLP attribute request process of Office Multifunction Printers and Laser Printers(*) which may allow an attacker on th…

EPSS 1%CVSS 9.8

CVE-2023-6234 · Canon Inc. Satera LBP670C Series

Buffer overflow in CPCA Color LUT Resource Download process of Office Multifunction Printers and Laser Printers(*) which may allow an att…

EPSS 1%CVSS 9.8

malwarebytes1 vulnerability on this pageMax CVSS 9.8Priority 45KEV 0

CVE-2024-25089 · malwarebytes binisoft_windows_firewall_control

Malwarebytes Binisoft Windows Firewall Control before 6.9.9.2 allows remote attackers to execute arbitrary code via gRPC named pipes.

EPSS 2%CVSS 9.8

QNAP Systems Inc.2 vulnerabilities on this pageMax CVSS 9.8Priority 43KEV 0

CVE-2023-45025 · QNAP Systems Inc. QTS

QTS, QuTS hero, QuTScloud

EPSS 1%CVSS 9.8

CVE-2023-39303 · QNAP Systems Inc. QTS

QTS, QuTS hero, QuTScloud

EPSS 0.5%CVSS 9.8

10web1 vulnerability on this pageMax CVSS 9.1Priority 42KEV 0

CVE-2024-0221 · 10web Photo Gallery by 10Web – Mobile-Friendly Image Gallery

Photo Gallery by 10Web - Mobile-Friendly Image Gallery <= 1.8.19 - Directory Traversal to Arbitrary File Rename

EPSS 1%CVSS 9.1

Dell3 vulnerabilities on this pageMax CVSS 9.8Priority 42KEV 0

CVE-2022-34381 · Dell Dell BSAFE Crypto-J

Dell BSAFE SSL-J version 7.0 and all versions prior to 6.5, and Dell BSAFE Crypto-J versions prior to 6.2.6.1 contain an unmaintained thi…

EPSS 1.0%CVSS 9.8

CVE-2020-29504 · Dell BSAFE Crypto-C Micro Edition

Dell BSAFE Crypto-C Micro Edition, versions before 4.1.5, and Dell BSAFE Micro Edition Suite, versions before 4.5.2, contain a Missing Re…

EPSS 0.5%CVSS 9.8

CVE-2021-21575 · Dell BSAFE Micro Edition Suite

Dell BSAFE Micro Edition Suite, versions before 4.5.2, contain an Observable Timing Discrepancy Vulnerability.

EPSS 0.5%CVSS 9.8

narinder-singh1 vulnerability on this pageMax CVSS 9.8Priority 42KEV 0

CVE-2024-0709 · narinder-singh Cryptocurrency Widgets – Price Ticker & Coins List

The Cryptocurrency Widgets – Price Ticker & Coins List plugin for WordPress is vulnerable to SQL Injection via the 'coinslist' parameter…

EPSS 0.9%CVSS 9.8

QiboSoft1 vulnerability on this pageMax CVSS 9.8Priority 41KEV 0

CVE-2024-1225 · QiboSoft QiboCMS X1

QiboSoft QiboCMS X1 Pay.php rmb_pay deserialization

EPSS 0.9%CVSS 9.8

IBM1 vulnerability on this pageMax CVSS 9.0Priority 40KEV 0

CVE-2023-31004 · IBM Security Verify Access Appliance

IBM Security Access Manager Container gain access

EPSS 1.0%CVSS 9.0

Sharp Display Solutions, Ltd.1 vulnerability on this pageMax CVSS 9.8Priority 40KEV 0

CVE-2023-7077 · Sharp Display Solutions, Ltd. P403, P463, P553, P703, P801, X554UN, X464UN, X554UNS, X464UNV, X474HB, X464UNS, X554UNV, X555UNS, X555UNV, X754HB, X554HB, E705, E805, E905, UN551S, UN551VS, X551UHD, X651UHD, X841UHD, X981UHD, MD551C8

Sharp NEC Displays (P403, P463, P553, P703, P801, X554UN, X464UN, X554UNS, X464UNV, X474HB, X464UNS, X554UNV, X555UNS, X555UNV, X754HB, X…

EPSS 0.7%CVSS 9.8

VulDB1 vulnerability on this pageMax CVSS 9.8Priority 40KEV 0

CVE-2024-1198 · VulDB

openBI Phar User.php addxinzhi deserialization

EPSS 0.7%CVSS 9.8

SourceCodester1 vulnerability on this pageMax CVSS 9.8Priority 39KEV 0

CVE-2024-1197 · SourceCodester Testimonial Page Manager

SourceCodester Testimonial Page Manager HTTP GET Request delete-testimonial.php sql injection

EPSS 0.6%CVSS 9.8

Degamisu1 vulnerability on this pageMax CVSS 9.8Priority 38KEV 0

CVE-2024-24757 · Degamisu open-irs

open-irs .env Exposure

EPSS 0.5%CVSS 9.8

MediaTek, Inc.1 vulnerability on this pageMax CVSS 9.8Priority 37KEV 0

CVE-2024-20011 · MediaTek, Inc. MT6985, MT8127, MT8135, MT8167, MT8167S, MT8168, MT8173, MT8175, MT8176, MT8183, MT8185, MT8188, MT8188T, MT8195, MT8195Z, MT8312C, MT8312D

In alac decoder, there is a possible information disclosure due to an incorrect bounds check.

EPSS 0.4%CVSS 9.8

Qualcomm, Inc.4 vulnerabilities on this pageMax CVSS 9.8Priority 33KEV 0

CVE-2023-33058 · Qualcomm, Inc. Snapdragon

Buffer Copy Without Checking Size of Input in Modem

EPSS 0.4%CVSS 9.1

CVE-2023-43518 · Qualcomm, Inc. Snapdragon

Untrusted Pointer Dereference in Video

EPSS 0.3%CVSS 9.8

CVE-2023-43519 · Qualcomm, Inc. Snapdragon

Buffer Copy without Checking Size of Input (`Classic Buffer Overflow`) in Video

EPSS 0.3%CVSS 9.8

CVE-2023-33072 · Qualcomm, Inc. Snapdragon

Buffer copy without checking size of Input in Core

EPSS 0.1%CVSS 9.3

B&R Industrial Automation1 vulnerability on this pageMax CVSS 9.8Priority 32KEV 0

CVE-2024-0323 · B&R Industrial Automation Automation Runtime

FTP uses unsecure encryption mechanisms

EPSS 0.2%CVSS 9.8