Vulnerabilities > Critical
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2024-12-20 | CVE-2024-51466 | IBM Cognos Analytics 11.2.0 through 11.2.4 FP4 and 12.0.0 through 12.0.4 is vulnerable to an Expression Language (EL) Injection vulnerability. | 9.0 |
| 2024-12-20 | CVE-2024-12571 | The Store Locator for WordPress with Google Maps – LotsOfLocales plugin for WordPress is vulnerable to Local File Inclusion in version 3.98.9 via the 'sl_engine' parameter. | 9.8 |
| 2024-12-20 | CVE-2022-32203 | Command Injection vulnerability in Huawei Cv81-Wdm Firmware 01.70.49.29.46 There is a command injection vulnerability in Huawei terminal printer product. | 9.8 |
| 2024-12-19 | CVE-2024-12791 | SQL Injection vulnerability in Codezips E-Commerce Site 1.0 A vulnerability was found in Codezips E-Commerce Site 1.0. | 9.8 |
| 2024-12-19 | CVE-2024-12792 | SQL Injection vulnerability in Codezips E-Commerce Site 1.0 A vulnerability classified as critical was found in Codezips E-Commerce Site 1.0. | 9.8 |
| 2024-12-19 | CVE-2024-12794 | SQL Injection vulnerability in Codezips E-Commerce Site 1.0 A vulnerability, which was classified as critical, was found in Codezips E-Commerce Site 1.0. | 9.8 |
| 2024-12-19 | CVE-2024-12788 | SQL Injection vulnerability in Codezips Technical Discussion Forum 1.0 A vulnerability was found in Codezips Technical Discussion Forum 1.0 and classified as critical. | 9.8 |
| 2024-12-19 | CVE-2024-12789 | Code Injection vulnerability in Pbootcms A vulnerability was found in PbootCMS up to 3.2.3. | 9.8 |
| 2024-12-19 | CVE-2024-12787 | SQL Injection vulnerability in 1000Projects Attendance Tracking Management System 1.0 A vulnerability has been found in 1000 Projects Attendance Tracking Management System 1.0 and classified as critical. | 9.8 |
| 2024-12-19 | CVE-2021-26102 | Path Traversal vulnerability in Fortinet Fortiwan A relative path traversal vulnerability (CWE-23) in FortiWAN version 4.5.7 and below, 4.4 all versions may allow a remote non-authenticated attacker to delete files on the system by sending a crafted POST request. | 9.1 |