SQL injection vulnerability in wp-load.php in the BuddyPress plugin 1.5.x before 1.5.5 of WordPress allows remote attackers to execute arbitrary SQL commands via the page parameter in an. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available.
WordPress
SQLi
PHP
Buddypress
NVD
Exploit-DB
CVSS 2.0
7.5
EPSS
2.9%
The Management Software application in GarrettCom Magnum MNS-6K before 4.4.0, and 14.x before 14.4.0, has a hardcoded password for an administrative account, which allows local users to gain. Rated high severity (CVSS 7.7), this vulnerability is low attack complexity. No vendor patch available.
Authentication Bypass
Magnum Managed Networks Software 6K
Magnum Managed Networks Software 6K Secure
NVD
CVSS 2.0
7.7
EPSS
0.1%