Skip to main content
CVE-2024-4500 May 05, 18:15 HIGH POC This Week

A vulnerability was found in SourceCodester Prison Management System 1.0. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP File Upload Prison Management System Fast5
NVD GitHub VulDB
CVSS 3.1
8.8
EPSS
0.9%
CVE-2024-34506 May 05, 19:15 HIGH POC This Week

An issue was discovered in includes/specials/SpecialMovePage.php in MediaWiki before 1.39.7, 1.40.x before 1.40.3, and 1.41.x before 1.41.1. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP Denial Of Service Mediawiki Fedora Fedoraproject
NVD
CVSS 3.1
7.5
EPSS
0.9%
CVE-2024-34489 May 05, 03:15 HIGH POC This Week

OFPHello in parser.py in Faucet SDN Ryu 4.34 allows attackers to cause a denial of service (infinite loop) via length=0. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Denial Of Service Ryu Facuet
NVD GitHub
CVSS 3.1
7.5
EPSS
0.7%
CVE-2024-34488 May 05, 03:15 HIGH POC This Week

OFPMultipartReply in parser.py in Faucet SDN Ryu 4.34 allows attackers to cause a denial of service (infinite loop) via b.length=0. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Denial Of Service Ryu Facuet
NVD GitHub
CVSS 3.1
7.5
EPSS
0.7%
CVE-2024-34487 May 05, 03:15 HIGH POC This Week

OFPFlowStats in parser.py in Faucet SDN Ryu 4.34 allows attackers to cause a denial of service (infinite loop) via inst.length=0. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Denial Of Service Ryu Facuet
NVD GitHub
CVSS 3.1
7.5
EPSS
0.7%
CVE-2024-34486 May 05, 03:15 HIGH POC This Week

OFPPacketQueue in parser.py in Faucet SDN Ryu 4.34 allows attackers to cause a denial of service (infinite loop) via OFPQueueProp.len=0. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Denial Of Service Ryu Facuet
NVD GitHub
CVSS 3.1
7.5
EPSS
0.6%
CVE-2024-34483 May 05, 02:15 HIGH POC This Week

OFPGroupDescStats in parser.py in Faucet SDN Ryu 4.34 allows attackers to cause a denial of service (infinite loop) via OFPBucket.len=0. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Denial Of Service Ryu Facuet
NVD GitHub
CVSS 3.1
7.5
EPSS
0.7%
CVE-2024-34507 May 05, 19:15 HIGH POC This Week

An issue was discovered in includes/CommentFormatter/CommentParser.php in MediaWiki before 1.39.7, 1.40.x before 1.40.3, and 1.41.x before 1.41.1. Rated high severity (CVSS 7.4), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP XSS Mediawiki Fedora Fedoraproject
NVD
CVSS 3.1
7.4
EPSS
0.7%
CVE-2024-34515 May 05, 21:15 HIGH PATCH This Week

image-optimizer before 1.7.3 allows PHAR deserialization, e.g., the phar:// protocol in arguments to file_exists(). Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Deserialization
NVD GitHub
CVSS 3.1
8.8
EPSS
1.9%
CVE-2024-4497 May 05, 07:15 HIGH This Week

A vulnerability was found in Tenda i21 1.0.0.14(4656). Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Buffer Overflow Stack Overflow Tenda I21 Firmware
NVD GitHub VulDB
CVSS 3.1
8.8
EPSS
1.5%
CVE-2024-4496 May 05, 06:15 HIGH This Week

A vulnerability was found in Tenda i21 1.0.0.14(4656). Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Buffer Overflow Stack Overflow Tenda I21 Firmware
NVD GitHub VulDB
CVSS 3.1
8.8
EPSS
1.5%
CVE-2024-4495 May 05, 06:15 HIGH This Week

A vulnerability was found in Tenda i21 1.0.0.14(4656) and classified as critical. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Buffer Overflow Stack Overflow Tenda I21 Firmware
NVD GitHub VulDB
CVSS 3.1
8.8
EPSS
1.5%
CVE-2024-4494 May 05, 05:15 HIGH This Week

A vulnerability has been found in Tenda i21 1.0.0.14(4656) and classified as critical. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Buffer Overflow Stack Overflow Tenda I21 Firmware
NVD GitHub VulDB
CVSS 3.1
8.8
EPSS
1.5%
CVE-2024-4493 May 05, 03:15 HIGH This Week

A vulnerability, which was classified as critical, was found in Tenda i21 1.0.0.14(4656). Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Buffer Overflow Stack Overflow Tenda I21 Firmware
NVD GitHub VulDB
CVSS 3.1
8.8
EPSS
1.5%
CVE-2024-4492 May 05, 01:15 HIGH This Week

A vulnerability, which was classified as critical, has been found in Tenda i21 1.0.0.14(4656). Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Buffer Overflow Stack Overflow Tenda I21 Firmware
NVD GitHub VulDB
CVSS 3.1
8.8
EPSS
1.5%
CVE-2024-4491 May 05, 00:15 HIGH This Week

A vulnerability classified as critical was found in Tenda i21 1.0.0.14(4656). Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Buffer Overflow Stack Overflow Tenda I21 Firmware
NVD GitHub VulDB
CVSS 3.1
8.8
EPSS
1.5%
CVE-2024-34474 May 05, 15:15 HIGH This Week

Clario through 2024-04-11 for Desktop has weak permissions for %PROGRAMDATA%\Clario and tries to load DLLs from there as SYSTEM. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Privilege Escalation
NVD GitHub
CVSS 3.1
7.8
EPSS
0.3%
CVE-2024-34510 May 05, 20:15 HIGH PATCH This Week

Gradio before 4.20 allows credential leakage on Windows. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Information Disclosure Microsoft Gradio Gradio Project
NVD GitHub
CVSS 3.1
7.5
EPSS
0.6%
CVE-2024-34478 May 05, 01:15 HIGH PATCH This Week

btcd before 0.24.0 does not correctly implement the consensus rules outlined in BIP 68 and BIP 112, making it susceptible to consensus failures. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Information Disclosure Btcd Btcd Project
NVD GitHub
CVSS 3.1
7.5
EPSS
0.6%
CVE-2024-34475 May 05, 00:15 HIGH This Week

Open5GS before 2.7.1 is vulnerable to a reachable assertion that can cause an AMF crash via NAS messages from a UE: gmm_state_authentication in amf/gmm-sm.c for != OGS_ERROR. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Denial Of Service Open5gs
NVD GitHub
CVSS 3.1
7.5
EPSS
0.6%
CVE-2024-4506 May 05, 23:15 HIGH This Week

A vulnerability has been found in Ruijie RG-UAC up to 20240428 and classified as critical. Rated high severity (CVSS 7.2), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

PHP Command Injection Rg Uac 6000 E50 Firmware Rg Uac 6000 Cc Firmware Rg Uac 6000 E10 Firmware +25
NVD GitHub VulDB
CVSS 3.1
7.2
EPSS
7.6%
CVE-2024-4505 May 05, 23:15 HIGH This Week

A vulnerability, which was classified as critical, was found in Ruijie RG-UAC up to 20240428. Rated high severity (CVSS 7.2), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

PHP Command Injection Rg Uac 6000 E50 Firmware Rg Uac 6000 Cc Firmware Rg Uac 6000 E10 Firmware +25
NVD GitHub VulDB
CVSS 3.1
7.2
EPSS
6.8%
CVE-2024-4504 May 05, 23:15 HIGH This Week

A vulnerability, which was classified as critical, has been found in Ruijie RG-UAC up to 20240428. Rated high severity (CVSS 7.2), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

PHP Command Injection Rg Uac 6000 E50 Firmware Rg Uac 6000 Cc Firmware Rg Uac 6000 E10 Firmware +25
NVD GitHub VulDB
CVSS 3.1
7.2
EPSS
6.7%
CVE-2024-4503 May 05, 22:15 HIGH This Week

A vulnerability classified as critical was found in Ruijie RG-UAC up to 20240428. Rated high severity (CVSS 7.2), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

PHP Command Injection Rg Uac 6000 E50 Firmware Rg Uac 6000 Cc Firmware Rg Uac 6000 E10 Firmware +25
NVD GitHub VulDB
CVSS 3.1
7.2
EPSS
6.8%
CVE-2024-4502 May 05, 22:15 HIGH This Week

A vulnerability classified as critical has been found in Ruijie RG-UAC up to 20240428. Rated high severity (CVSS 7.2), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

PHP Command Injection Rg Uac 6000 E50 Firmware Rg Uac 6000 Cc Firmware Rg Uac 6000 E10 Firmware +25
NVD GitHub VulDB
CVSS 3.1
7.2
EPSS
6.8%
CVE-2024-4501 May 05, 20:15 HIGH This Week

A vulnerability was found in Ruijie RG-UAC up to 20240428. Rated high severity (CVSS 7.2), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

PHP Command Injection Rg Uac 6000 E50 Firmware Rg Uac 6000 Cc Firmware Rg Uac 6000 E10 Firmware +25
NVD GitHub VulDB
CVSS 3.1
7.2
EPSS
6.8%

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy