The archive.

CVE-2023-50488 · mitre

An issue in Blurams Lumi Security Camera (A31C) v23.0406.435.4120 allows attackers to execute arbitrary code.

CVE-2024-22901 · mitre

Vinchin Backup & Recovery v7.2 was discovered to use default MYSQL credentials.

CVE-2024-22902 · mitre

Vinchin Backup & Recovery v7.2 was discovered to be configured with default root credentials.

CVE-2024-22108 · mitre

An issue was discovered in GTB Central Console 15.17.1-30814.NG.

EPSS 0.8%public exploit CVSS 9.8

CVE-2024-24029 · mitre

JFinalCMS 5.0.0 is vulnerable to SQL injection via /admin/content/data.

EPSS 0.8%public exploit CVSS 9.8

CVE-2022-47072 · mitre

SQL injection vulnerability in Enterprise Architect 16.0.1605 32-bit allows attackers to run arbitrary SQL commands via the Find paramete…

EPSS 0.6%public exploit CVSS 9.8

CVE-2024-23745 · mitre

In Notion Web Clipper 1.0.3(7), a .nib file is susceptible to the Dirty NIB attack.

CVE-2024-22533 · mitre

Before Beetl v3.15.12, the rendering template has a server-side template injection (SSTI) vulnerability.

EPSS 1%CVSS 9.8

apktool1 vulnerability on this pageMax CVSS 9.8Priority 53KEV 0

CVE-2024-24482 · apktool apktool

Aprktool before 2.9.3 on Windows allows ../ and /..

Wanhu1 vulnerability on this pageMax CVSS 9.8Priority 52KEV 0

CVE-2024-1012 · Wanhu ezOFFICE

Wanhu ezOFFICE wf_printnum.jsp sql injection

EPSS 0.9%public exploit CVSS 9.8

Academy Software Foundation1 vulnerability on this pageMax CVSS 9.1Priority 51KEV 0

CVE-2023-5841 · Academy Software Foundation OpenEXR

OpenEXR Heap Overflow in Scanline Deep Data Parsing

EPSS 1%public exploit CVSS 9.1

dataease1 vulnerability on this pageMax CVSS 9.1Priority 51KEV 0

CVE-2024-23328 · dataease dataease

The Dataease datasource exists deserialization and arbitrary file read vulnerability

EPSS 1%public exploit CVSS 9.1

vyperlang1 vulnerability on this pageMax CVSS 9.8Priority 51KEV 0

CVE-2024-24561 · vyperlang vyper

Vyper bounds check on built-in `slice()` function can be overflowed

EPSS 0.9%public exploit CVSS 9.8

VulDB4 vulnerabilities on this pageMax CVSS 9.8Priority 50KEV 0

CVE-2024-1113 · VulDB

openBI Unity.php uploadUnity unrestricted upload

EPSS 0.6%public exploit CVSS 9.8

CVE-2024-1115 · VulDB

openBI Setting.php dlfile os command injection

CVE-2024-1036 · VulDB

openBI Icon Screen.php uploadIcon unrestricted upload

EPSS 0.9%CVSS 9.8

CVE-2024-1117 · VulDB

openBI Screen.php index code injection

brefphp1 vulnerability on this pageMax CVSS 9.8Priority 49KEV 0

CVE-2024-24754 · brefphp bref

Bref Body Parsing Inconsistency in Event-Driven Functions

EPSS 0.6%public exploit CVSS 9.8

manageengine2 vulnerabilities on this pageMax CVSS 9.8Priority 48KEV 0

CVE-2023-48792 · manageengine adaudit_plus

Zoho ManageEngine ADAudit Plus through 7250 is vulnerable to SQL Injection in the report export option.

EPSS 7%CVSS 9.8

CVE-2023-48793 · manageengine adaudit_plus

Zoho ManageEngine ADAudit Plus through 7250 allows SQL Injection in the aggregate report feature.

EPSS 7%CVSS 9.8

moby2 vulnerabilities on this pageMax CVSS 10.0Priority 48KEV 0

CVE-2024-23653 · moby buildkit

BuildKit interactive containers API does not validate entitlements check

EPSS 4%CVSS 9.8

CVE-2024-23652 · moby buildkit

BuildKit possible host system access from mount stub cleaner

EPSS 2%CVSS 10.0

anchore1 vulnerability on this pageMax CVSS 9.8Priority 46KEV 0

CVE-2024-24579 · anchore stereoscope

Tar path traversal in stereoscope when processing OCI tar archives

EPSS 0.4%public exploit CVSS 9.8

mastodon1 vulnerability on this pageMax CVSS 9.8Priority 46KEV 0

CVE-2024-23832 · mastodon mastodon

Mastodon Remote user impersonation and takeover

Angus Johnson1 vulnerability on this pageMax CVSS 9.8Priority 45KEV 0

CVE-2024-1112 · Angus Johnson Resource Hacker

Buffer Overflow Vulnerability in Resource Hacker

Dassault Systèmes1 vulnerability on this pageMax CVSS 9.8Priority 45KEV 0

CVE-2023-6078 · Dassault Systèmes BIOVIA Materials Studio products

OS Command Injection vulnerability affecting BIOVIA Materials Studio products from Release BIOVIA 2021 through Release BIOVIA 2023

kihron1 vulnerability on this pageMax CVSS 9.8Priority 45KEV 0

CVE-2024-22779 · kihron serverrpexposer

Directory Traversal vulnerability in Kihron ServerRPExposer v.1.0.2 and before allows a remote attacker to execute arbitrary code via the…

kstover1 vulnerability on this pageMax CVSS 9.8Priority 41KEV 0

CVE-2024-0685 · kstover Ninja Forms – The Contact Form Builder That Grows With You

Ninja Forms Contact Form <= 3.7.1 - Unauthenticated Second Order SQL Injection

EPSS 0.8%CVSS 9.8

MachineSense2 vulnerabilities on this pageMax CVSS 10.0Priority 41KEV 0

CVE-2023-49617 · MachineSense FeverWarn

MachineSense FeverWarn Missing Authentication for Critical Function

EPSS 0.8%CVSS 10.0

CVE-2023-46706 · MachineSense FeverWarn

MachineSense FeverWarn Use of Hard-coded Credentials

openbi3 vulnerabilities on this pageMax CVSS 9.8Priority 41KEV 0

CVE-2024-1035 · openbi openbi

openBI Icon.php uploadIcon unrestricted upload

EPSS 0.8%CVSS 9.8

CVE-2024-1114 · openbi openbi

openBI Screen.php dlfile access control

EPSS 0.9%CVSS 9.8

CVE-2024-1116 · openbi openbi

openBI Upload.php index unrestricted upload

EPSS 0.8%CVSS 9.8

Rockwell Automation1 vulnerability on this pageMax CVSS 9.8Priority 41KEV 0

CVE-2024-21917 · Rockwell Automation FactoryTalk® Service Platform

Rockwell Automation FactoryTalk® Service Platform Service Token Vulnerability

EPSS 0.9%CVSS 9.8

Dell1 vulnerability on this pageMax CVSS 9.8Priority 40KEV 0

CVE-2024-22433 · Dell Data Protection Search

Dell Data Protection Search 19.2.0 and above contain an exposed password opportunity in plain text when using LdapSettings.get_ldap_info…

EPSS 0.6%CVSS 9.8

Gessler GmbH1 vulnerability on this pageMax CVSS 9.8Priority 40KEV 0

CVE-2024-1039 · Gessler GmbH WEB-MASTER

Use of Hard-coded Credentials in Gessler GmbH WEB-MASTER

KDDI CORPORATION1 vulnerability on this pageMax CVSS 9.8Priority 40KEV 0

CVE-2024-23978 · KDDI CORPORATION HOME SPOT CUBE2

Heap-based buffer overflow vulnerability exists in HOME SPOT CUBE2 V102 and earlier.

Objectplanet1 vulnerability on this pageMax CVSS 9.8Priority 40KEV 0

CVE-2023-4472 · Objectplanet Opinio

Cryptographically weak PRNG in Opinio 7.22