microvorld/CVE-2024

Releases0

CVE History

CVE	Published	CVSS v3	CVSS v2
CVE-2024-50919 ↗	Nov 18, 2024Monday, 18 November 2024, 20:15	9.8 CRITICAL	—
Jpress until v5.1.1 has arbitrary file uploads on the windows platform, and the construction of non-standard file formats such as .jsp. can lead to arbitrary command execution
CVE-2024-46540 ↗	Sep 30, 2024Monday, 30 September 2024, 17:15	6.3 MEDIUM	—
A remote code execution (RCE) vulnerability in the component /admin/store.php of Emlog Pro before v2.3.15 allows attackers to use remote file downloads and self-extract fucntions to upload webshells to the target server, thereby obtaining system privileges.