CVE Database

151104+ vulnerabilities with CVSS scores, EPSS exploit predictions, and CISA KEV status. Updated daily.

Filter: All CRITICAL HIGH MEDIUM LOW CISA KEV
Sort: Newest CVSS EPSS
CVE-2024-20149
7.5 HIGH

In Modem, there is a possible system crash due to improper input validation. This could lead to remote denial of service with no additional execution …

Jan 6, 2025
CVE-2024-20148
9.8 CRITICAL

In wlan STA FW, there is a possible out of bounds write due to improper input validation. This could lead to remote (proximal/adjacent) code execution …

Jan 6, 2025
CVE-2024-20146
8.1 HIGH

In wlan STA driver, there is a possible out of bounds write due to improper input validation. This could lead to remote (proximal/adjacent) code execution …

Jan 6, 2025
CVE-2024-20145
6.6 MEDIUM

In V6 DA, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege, …

Jan 6, 2025
CVE-2024-20144
6.6 MEDIUM

In V6 DA, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege, …

Jan 6, 2025
CVE-2024-20143
6.6 MEDIUM

In V6 DA, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege, …

Jan 6, 2025
CVE-2024-20140
6.7 MEDIUM

In power, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if …

Jan 6, 2025
CVE-2024-20105
6.7 MEDIUM

In m4u, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if …

Jan 6, 2025
CVE-2024-13145
6.3 MEDIUM

A vulnerability classified as critical was found in zhenfeng13 My-Blog 1.0. Affected by this vulnerability is the function upload of the file src/main/java/com/site/blog/my/core/controller/admin/uploadController. java. The …

Jan 6, 2025
CVE-2024-13144
6.3 MEDIUM

A vulnerability classified as critical has been found in zhenfeng13 My-Blog 1.0. Affected is the function uploadFileByEditomd of the file src/main/java/com/site/blog/my/core/controller/admin/BlogController.java. The manipulation of the …

Jan 6, 2025
CVE-2024-13143
2.4 LOW

A vulnerability was found in ZeroWdd studentmanager 1.0. It has been rated as problematic. This issue affects the function submitAddPermission of the file src/main/java/com/zero/system/controller/PermissionController. java. …

Jan 6, 2025
CVE-2025-0233
7.3 HIGH

A vulnerability was found in Codezips Project Management System 1.0. It has been classified as critical. This affects an unknown part of the file /pages/forms/course.php. …

Jan 5, 2025
CVE-2024-13142
2.4 LOW

A vulnerability was found in ZeroWdd studentmanager 1.0. It has been declared as problematic. This vulnerability affects the function submitAddRole of the file src/main/java/com/zero/system/controller/RoleController. java. …

Jan 5, 2025
CVE-2025-0232
6.3 MEDIUM

A vulnerability was found in Codezips Blood Bank Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the …

Jan 5, 2025
CVE-2025-0231
6.3 MEDIUM

A vulnerability has been found in Codezips Gym Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the …

Jan 5, 2025
CVE-2025-0230
6.3 MEDIUM

A vulnerability, which was classified as critical, was found in code-projects Responsive Hotel Site 1.0. Affected is an unknown function of the file /admin/print.php. The …

Jan 5, 2025
CVE-2025-0229
6.3 MEDIUM

A vulnerability, which was classified as critical, has been found in code-projects Travel Management System 1.0. This issue affects some unknown processing of the file …

Jan 5, 2025
CVE-2025-0228
2.4 LOW

A vulnerability has been found in code-projects Local Storage Todo App 1.0 and classified as problematic. This vulnerability affects unknown code of the file /js-todo-app/index.html. …

Jan 5, 2025
CVE-2025-0227
4.3 MEDIUM

A vulnerability, which was classified as problematic, was found in Tsinghua Unigroup Electronic Archives System 3.2.210802(62532). This affects an unknown part of the file /Logs/Annals/downLoad.html. …

Jan 5, 2025
CVE-2025-0226
4.3 MEDIUM

A vulnerability, which was classified as problematic, has been found in Tsinghua Unigroup Electronic Archives System 3.2.210802(62532). Affected by this issue is the function download …

Jan 5, 2025
CVE-2025-0225
4.3 MEDIUM

A vulnerability classified as problematic was found in Tsinghua Unigroup Electronic Archives System 3.2.210802(62532). Affected by this vulnerability is an unknown functionality of the file …

Jan 5, 2025
CVE-2025-0224
5.3 MEDIUM

A vulnerability was found in Provision-ISR SH-4050A-2, SH-4100A-2L(MM), SH-8100A-2L(MM), SH-16200A-2(1U), SH-16200A-5(1U) and NVR5-8200PX up to 20241220. It has been declared as problematic. Affected by this …

Jan 5, 2025
CVE-2025-0223
5.5 MEDIUM

A vulnerability was found in IObit Protected Folder up to 13.6.0.5. It has been classified as problematic. Affected is the function 0x8001E000/0x8001E00C/0x8001E004/0x8001E010 in the library …

Jan 5, 2025
CVE-2025-0222
5.5 MEDIUM

A vulnerability was found in IObit Protected Folder up to 13.6.0.5 and classified as problematic. This issue affects the function 0x8001E000/0x8001E004 in the library IUProcessFilter.sys …

Jan 5, 2025
CVE-2025-0221
5.5 MEDIUM

A vulnerability has been found in IOBit Protected Folder up to 1.3.0 and classified as problematic. This vulnerability affects the function 0x22200c in the library …

Jan 5, 2025
CVE-2024-13141
3.5 LOW

A vulnerability classified as problematic was found in osuuu LightPicture up to 1.2.2. This vulnerability affects unknown code of the file /api/upload of the component …

Jan 5, 2025
CVE-2025-0220
2.4 LOW

A vulnerability, which was classified as problematic, was found in Trimble SPS851 488.01. This affects an unknown part of the component Ethernet Configuration Menu. The …

Jan 5, 2025
CVE-2024-13140
3.5 LOW

A vulnerability classified as problematic has been found in Emlog Pro up to 2.4.3. Affected is an unknown function of the file /admin/article.php?action=upload_cover of the …

Jan 5, 2025
CVE-2024-13139
6.3 MEDIUM

A vulnerability was found in wangl1989 mysiteforme 1.0. It has been rated as critical. This issue affects the function doContent of the file src/main/java/com/mysiteform/admin/controller/system/FileController. The …

Jan 5, 2025
CVE-2024-13138
4.7 MEDIUM

A vulnerability was found in wangl1989 mysiteforme 1.0. It has been declared as critical. This vulnerability affects the function upload of the file src/main/java/com/mysiteform/admin/service/ipl/LocalUploadServiceImpl. The …

Jan 5, 2025
CVE-2024-13137
2.4 LOW

A vulnerability was found in wangl1989 mysiteforme 1.0. It has been classified as problematic. This affects the function RestResponse of the file src/main/java/com/mysiteforme/admin/controller/system/SiteController. The manipulation …

Jan 5, 2025
CVE-2024-13136
6.3 MEDIUM

A vulnerability was found in wangl1989 mysiteforme 1.0 and classified as critical. Affected by this issue is the function rememberMeManager of the file src/main/java/com/mysiteforme/admin/config/ShiroConfig.java. The …

Jan 5, 2025
CVE-2024-13135
3.5 LOW

A vulnerability has been found in Emlog Pro 2.4.3 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /admin/twitter.php …

Jan 5, 2025
CVE-2024-13134
6.3 MEDIUM

A vulnerability, which was classified as critical, was found in ZeroWdd studentmanager 1.0. Affected is the function addTeacher/editTeacher of the file src/main/Java/com/wdd/studentmanager/controller/TeacherController. java. The manipulation …

Jan 5, 2025
CVE-2025-0219
2.4 LOW

A vulnerability, which was classified as problematic, has been found in Trimble SPS851 488.01. Affected by this issue is some unknown functionality of the component …

Jan 5, 2025
CVE-2024-13133
6.3 MEDIUM

A vulnerability, which was classified as critical, has been found in ZeroWdd studentmanager 1.0. This issue affects the function addStudent/editStudent of the file src/main/Java/com/wdd/studentmanager/controller/StudentController. java. …

Jan 5, 2025
CVE-2024-13132
3.5 LOW

A vulnerability classified as problematic was found in Emlog Pro up to 2.4.3. This vulnerability affects unknown code of the file /admin/article.php of the component …

Jan 5, 2025
CVE-2024-13130
4.3 MEDIUM

A vulnerability was found in Dahua IPC-HFW1200S, IPC-HFW2300R-Z, IPC-HFW5220E-Z and IPC-HDW1200S up to 20241222. It has been rated as problematic. Affected by this issue is …

Jan 5, 2025
CVE-2025-0214
4.1 MEDIUM

A vulnerability was found in TMD Custom Header Menu 4.0.0.1 on OpenCart. It has been rated as problematic. This issue affects some unknown processing of …

Jan 4, 2025
CVE-2025-0213
6.3 MEDIUM

A vulnerability was found in Campcodes Project Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /forms/update_forms.php?action=change_pic2&id=4. …

Jan 4, 2025
CVE-2025-0212
6.3 MEDIUM

A vulnerability was found in Campcodes Student Grading System 1.0. It has been classified as critical. This affects an unknown part of the file /view_students.php. …

Jan 4, 2025
CVE-2025-0211
6.3 MEDIUM

A vulnerability was found in Campcodes School Faculty Scheduling System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the …

Jan 4, 2025
CVE-2024-41768
6.5 MEDIUM

IBM Engineering Lifecycle Optimization - Publishing 7.0.2 and 7.0.3 could allow a remote attacker to cause an unhandled SSL exception which could leave the connection …

Jan 4, 2025
CVE-2024-41767
7.3 HIGH

IBM Engineering Lifecycle Optimization - Publishing 7.0.2 and 7.0.3 is vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, which could …

Jan 4, 2025
CVE-2024-41766
7.5 HIGH

IBM Engineering Lifecycle Optimization - Publishing 7.0.2 and 7.0.3 could allow a remote attacker to cause a denial of service using a complex regular expression.

Jan 4, 2025
CVE-2024-41765
6.5 MEDIUM

IBM Engineering Lifecycle Optimization - Publishing 7.0.2 and 7.0.3 could allow a remote attacker to traverse directories on the system. An attacker could send a …

Jan 4, 2025
CVE-2024-41763
5.9 MEDIUM

IBM Engineering Lifecycle Optimization - Publishing 7.0.2 and 7.0.3 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information.

Jan 4, 2025
CVE-2025-0210
7.3 HIGH

A vulnerability has been found in Campcodes School Faculty Scheduling System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of …

Jan 4, 2025
CVE-2024-10957
8.8 HIGH

The UpdraftPlus: WP Backup & Migration Plugin plugin for WordPress is vulnerable to PHP Object Injection in all versions from 1.23.8 to 1.24.11 via deserialization …

Jan 4, 2025
CVE-2025-0208
6.3 MEDIUM

A vulnerability, which was classified as critical, was found in code-projects Online Shoe Store 1.0. This affects an unknown part of the file /summary.php. The …

Jan 4, 2025

Scan your infrastructure for known CVEs

Free website and port scanning — find vulnerabilities before attackers do.