Vulnerabilities > Critical

DATE CVE VULNERABILITY TITLE RISK
2024-06-27 CVE-2024-5751 Unspecified vulnerability in Litellm 1.35.8
BerriAI/litellm version v1.35.8 contains a vulnerability where an attacker can achieve remote code execution.
network
low complexity
litellm
critical
9.8
2024-06-27 CVE-2024-39374 Unspecified vulnerability in Markoni products
TELSAT marKoni FM Transmitters are vulnerable to an attacker exploiting a hidden admin account that can be accessed through the use of hard-coded credentials.
network
low complexity
markoni
critical
9.8
2024-06-27 CVE-2024-39375 Unspecified vulnerability in Markoni products
TELSAT marKoni FM Transmitters are vulnerable to an attacker bypassing authentication and gaining administrator privileges.
network
low complexity
markoni
critical
9.8
2024-06-27 CVE-2024-39376 Unspecified vulnerability in Markoni products
TELSAT marKoni FM Transmitters are vulnerable to users gaining unauthorized access to sensitive information or performing actions beyond their designated permissions.
network
low complexity
markoni
critical
9.8
2024-06-27 CVE-2024-6371 Unspecified vulnerability in Janobe Pool of Bethesda Online Reservation System 1.0
A vulnerability, which was classified as critical, has been found in itsourcecode Pool of Bethesda Online Reservation System 1.0.
network
low complexity
janobe
critical
9.8
2024-06-27 CVE-2024-6372 Unspecified vulnerability in Angeljudesuarez Tailoring Management System 1.0
A vulnerability, which was classified as critical, was found in itsourcecode Tailoring Management System 1.0.
network
low complexity
angeljudesuarez
critical
9.8
2024-06-27 CVE-2024-6373 Unspecified vulnerability in Kevinwong Online Food Ordering System 1.0
A vulnerability has been found in itsourcecode Online Food Ordering System up to 1.0 and classified as critical.
network
low complexity
kevinwong
critical
9.8
2024-06-27 CVE-2024-1107 Unspecified vulnerability in Talyabilisim Travel Apps
Authorization Bypass Through User-Controlled Key vulnerability in Talya Informatics Travel APPS allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Travel APPS: before v17.0.68.
network
low complexity
talyabilisim
critical
9.8
2024-06-25 CVE-2024-37843 SQL Injection vulnerability in Craftcms Craft CMS
Craft CMS up to v3.7.31 was discovered to contain a SQL injection vulnerability via the GraphQL API endpoint.
network
low complexity
craftcms CWE-89
critical
9.8
2024-06-25 CVE-2024-4883 Unspecified vulnerability in Progress Whatsup Gold
In WhatsUp Gold versions released before 2023.1.3, a Remote Code Execution issue exists in Progress WhatsUp Gold.
network
low complexity
progress
critical
9.8