By year
24
26
Bars are flaws published each year; the red part is the share attackers have used.
Latest high and critical flaws
- CVE-2020-37135 AMSS++ 4.7 contains an authentication bypass vulnerability that allows attackers to access administrative accounts using hardcoded credentials.Critical 9.3 · Feb 6, 2026
- CVE-2024-2599 File upload restriction evasion vulnerability in AMSS++ version 4.31.Critical 9.9 · Mar 18, 2024
- CVE-2024-2598 Vulnerability in AMSS++ version 4.31, which does not sufficiently encode user-controlled input, resulting in a Cross-Site Scripting (XSS) vulnerability through High 7.1 · Mar 18, 2024
- CVE-2024-2597 Vulnerability in AMSS++ version 4.31, which does not sufficiently encode user-controlled input, resulting in a Cross-Site Scripting (XSS) vulnerability through High 7.1 · Mar 18, 2024
- CVE-2024-2596 Vulnerability in AMSS++ version 4.31, which does not sufficiently encode user-controlled input, resulting in a Cross-Site Scripting (XSS) vulnerability through High 7.1 · Mar 18, 2024
- CVE-2024-2595 Vulnerability in AMSS++ version 4.31, which does not sufficiently encode user-controlled input, resulting in a Cross-Site Scripting (XSS) vulnerability through High 7.1 · Mar 18, 2024
- CVE-2024-2594 Vulnerability in AMSS++ version 4.31, which does not sufficiently encode user-controlled input, resulting in a Cross-Site Scripting (XSS) vulnerability through High 7.1 · Mar 18, 2024
- CVE-2024-2593 Vulnerability in AMSS++ version 4.31, which does not sufficiently encode user-controlled input, resulting in a Cross-Site Scripting (XSS) vulnerability through High 7.1 · Mar 18, 2024
- CVE-2024-2592 Vulnerability in AMSS++ version 4.31 that allows SQL injection through /amssplus/modules/person/pic_show.php, in the 'person_id' parameter.High 8.2 · Mar 18, 2024
- CVE-2024-2591 Vulnerability in AMSS++ version 4.31 that allows SQL injection through /amssplus/modules/book/main/bookdetail_group.php, in multiple parameters.High 8.2 · Mar 18, 2024
- CVE-2024-2590 Vulnerability in AMSS++ version 4.31 that allows SQL injection through /amssplus/modules/mail/main/select_send.php, in the 'sd_index' parameter.High 8.2 · Mar 18, 2024
- CVE-2024-2589 Vulnerability in AMSS++ version 4.31 that allows SQL injection through /amssplus/modules/book/main/bookdetail_school_person.php, in multiple parameters.High 8.2 · Mar 18, 2024
- CVE-2024-2588 Vulnerability in AMSS++ version 4.31 that allows SQL injection through /amssplus/admin/index.php, in the 'id' parameter.High 8.2 · Mar 18, 2024
- CVE-2024-2587 Vulnerability in AMSS++ version 4.31 that allows SQL injection through /amssplus/modules/book/main/bookdetail_khet_person.php, in multiple parameters.High 8.2 · Mar 18, 2024
- CVE-2024-2586 Vulnerability in AMSS++ version 4.31 that allows SQL injection through /amssplus/index.php, in the 'username' parameter.High 8.2 · Mar 18, 2024
- CVE-2024-2585 Vulnerability in AMSS++ version 4.31 that allows SQL injection through /amssplus/modules/book/main/select_send_2.php, in the 'sd_index' parameter.High 8.2 · Mar 18, 2024
- CVE-2024-2584 Vulnerability in AMSS++ version 4.31 that allows SQL injection through /amssplus/modules/book/main/select_send.php, in the 'sd_index' parameter.High 8.2 · Mar 18, 2024
Part of our vulnerability database: the whole National Vulnerability Database plus CISA’s exploited list, refreshed twice a day. This is general guidance, not a review of your systems.
Weekly security brief
The flaws that hit local websites, every Friday.
One short email: what got exploited this week, which WordPress plugins broke, and what to check. Unsubscribe in one click.