CVE-2024 records published in January 2024
This page lists the 1,130 CVE-2024 records published in January 2024, newest first, 1,000 to a page. The Cybersecurity and Infrastructure Security Agency's Known Exploited Vulnerabilities (KEV) catalog lists seven of them. Each CVE opens on cve-security.com with its sources, detection content and vendor fixes, and the search on the CVE-2024 list filters these records by severity or signal.
- Critical
- 26923.8% of these records
- Listed in CISA KEV
- 70.6% of these records
- Reported exploited
- 10.1% of these records
- Detection signal
- 322.8% of these records
- Exploit code
- 655.8% of these records
- Actionable vendor fix
- 59352.5% of these records
Figures as of 2026-10-24 13:18 UTC. Records published in January 2024 have had from about 33 months to about 34 months to collect KEV listings, exploitation reports, detection content and exploit code. Records published more recently have had less time, which can hold their shares down.
| CVE | Summary | CVSS | EPSS | Published | Signals |
|---|---|---|---|---|---|
| CVE-2024-24747 | MinIO unsafe default: Access keys inherit `admin` of root user, allowing privilege escalation | 8.8CNA v3.1 | 34.1% | 2024-01-31 | Exploit codeFix |
| CVE-2024-24579 | Tar path traversal in stereoscope when processing OCI tar archives | 5.3CNA v3.1 | 0.4% | 2024-01-31 | Fix |
| CVE-2024-24573 | facileManager privilege escalation via mass assignment | 8.8CNA v3.1 | 0.8% | 2024-01-31 | |
| CVE-2024-24572 | facileManager Authenticated Variable Manipulation leading to SQL injection | 6.5CNA v3.1 | 0.6% | 2024-01-31 | |
| CVE-2024-24571 | facileManager Systemic cross-site scripting (XSS) | 5.4CNA v3.1 | 0.4% | 2024-01-31 | |
| CVE-2024-24566 | lobehub lobe-chat lobe Chat unauthorized access to plugins | 5.3CNA v3.1 | 0.5% | 2024-01-31 | Fix |
| CVE-2024-23775 | Arm mbed TLS integer overflow | 7.5v3.1 | 1.1% | 2024-01-31 | Fix |
| CVE-2024-23745 | Notion Web Clipper command injection | 9.8v3.1 | 2.0% | 2024-01-31 | Exploit code |
| CVE-2024-23653 | BuildKit interactive containers API does not validate entitlements check | 9.8CNA v3.1 | 3.4% | 2024-01-31 | Exploit codeFix |
| CVE-2024-23652 | BuildKit possible host system access from mount stub cleaner | 10.0CNA v3.1 | 2.5% | 2024-01-31 | Exploit codeFix |
| CVE-2024-23651 | BuildKit possible race condition with accessing subpaths from cache mounts | 8.7CNA v3.1 | 0.9% | 2024-01-31 | Fix |
| CVE-2024-23650 | BuildKit possible panic when incorrect parameters sent from frontend | 5.3CNA v3.1 | 1.1% | 2024-01-31 | Fix |
| CVE-2024-23637 | OctoPrint unverified password change via Access Control settings | 4.2CNA v3.1 | 0.5% | 2024-01-31 | Fix |
| CVE-2024-23508 | PDF Poster - PDF Embedder Plugin for WordPress cross-site scripting (XSS) | 6.1NVD v3.1 | 0.3% | 2024-01-31 | Fix |
| CVE-2024-23507 | InstaWP Connect WordPress plugin SQL injection | 8.8v3.1 | 0.6% | 2024-01-31 | Fix |
| CVE-2024-23505 | PDF Viewer and 3D PDF Flipbook DearPDF WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.3% | 2024-01-31 | |
| CVE-2024-23502 | InfornWeb Posts List Designer by Category stored cross-site scripting | 5.4v3.1 | 0.3% | 2024-01-31 | Fix |
| CVE-2024-23170 | Arm mbed TLS observable discrepancy | 5.5v3.1 | 0.3% | 2024-01-31 | Fix |
| CVE-2024-22569 | Poscms stored cross-site scripting | 5.4v3.1 | 0.5% | 2024-01-31 | |
| CVE-2024-22310 | Formzu WP WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.3% | 2024-01-31 | Fix |
| CVE-2024-22307 | WP-Lister Lite for eBay WordPress plugin reflected cross-site scripting (XSS) | 6.1NVD v3.1 | 0.3% | 2024-01-31 | Fix |
| CVE-2024-22306 | Mang Board WP WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.3% | 2024-01-31 | Fix |
| CVE-2024-22305 | ali Forms Contact Form builder with drag and drop for WordPress insecure direct object reference | 8.1v3.1 | 0.5% | 2024-01-31 | Fix |
| CVE-2024-22304 | FreshMail For WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.2% | 2024-01-31 | |
| CVE-2024-22302 | Albo Pretorio Online WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.3% | 2024-01-31 | Fix |
| CVE-2024-22297 | CBX Map for Google Map and OpenStreetMap WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.3% | 2024-01-31 | Fix |
| CVE-2024-22295 | Robo Gallery WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.3% | 2024-01-31 | Fix |
| CVE-2024-22293 | BP Profile Search WordPress plugin cross-site scripting (XSS) | 6.1NVD v3.1 | 0.3% | 2024-01-31 | Fix |
| CVE-2024-22292 | WP To Do WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.3% | 2024-01-31 | Fix |
| CVE-2024-22291 | Browser Theme Color WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.2% | 2024-01-31 | Fix |
| CVE-2024-22290 | Custom Dashboard Widgets WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.2% | 2024-01-31 | |
| CVE-2024-22289 | Post views Stats WordPress plugin cross-site scripting (XSS) | 6.1NVD v3.1 | 0.3% | 2024-01-31 | Fix |
| CVE-2024-22287 | Better Anchor Links WordPress plugin cross-site request forgery (CSRF) | 6.1NVD v3.1 | 0.2% | 2024-01-31 | |
| CVE-2024-22286 | BA Plus WordPress plugin cross-site scripting (XSS) | 6.1NVD v3.1 | 0.3% | 2024-01-31 | |
| CVE-2024-22285 | Frontpage Manager WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.2% | 2024-01-31 | |
| CVE-2024-22282 | SimpleMap Store Locator WordPress plugin cross-site scripting (XSS) | 6.1NVD v3.1 | 0.3% | 2024-01-31 | |
| CVE-2024-22236 | Spring Cloud Contract vulnerable to local information disclosure | 3.3CNA v3.1 | 0.2% | 2024-01-31 | Fix |
| CVE-2024-22163 | Shield Security WordPress plugin cross-site scripting (XSS) | 6.1NVD v3.1 | 0.3% | 2024-01-31 | Fix |
| CVE-2024-22162 | WPZOOM Shortcodes WordPress plugin cross-site scripting (XSS) | 6.1NVD v3.1 | 0.3% | 2024-01-31 | Fix |
| CVE-2024-22161 | HD Quiz WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.3% | 2024-01-31 | Fix |
| CVE-2024-22160 | Image Tag Manager WordPress plugin cross-site scripting (XSS) | 6.1NVD v3.1 | 0.3% | 2024-01-31 | |
| CVE-2024-22159 | WOLF WordPress plugin cross-site scripting (XSS) | 6.1NVD v3.1 | 0.3% | 2024-01-31 | Fix |
| CVE-2024-22158 | PeepSo Core: Photos WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.3% | 2024-01-31 | Fix |
| CVE-2024-22153 | Stock Locations for WooCommerce WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.4% | 2024-01-31 | Fix |
| CVE-2024-22150 | PWR Plugins PowerFolio stored cross-site scripting | 5.4v3.1 | 0.3% | 2024-01-31 | Fix |
| CVE-2024-22146 | Schema and Structured Data for WP and AMP WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.3% | 2024-01-31 | Fix |
| CVE-2024-22143 | WP Spell Check WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.2% | 2024-01-31 | Fix |
| CVE-2024-22140 | Profile Builder Pro WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2024-01-31 | Fix |
| CVE-2024-22136 | Droit Elementor Addons WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.2% | 2024-01-31 | |
| CVE-2024-21917 | Rockwell Automation FactoryTalk Service Platform service token improper signature verification | 9.8CNA v3.1 | 0.9% | 2024-01-31 | |
| CVE-2024-21916 | Rockwell Automation denial of service vulnerability in ICE1 Controller | 8.6CNA v3.1 | 0.6% | 2024-01-31 | Fix |
| CVE-2024-21893 | Ivanti Connect Secure, Policy Secure, and Neurons server-side request forgery (SSRF) | 8.2v3.1 | 100.0% | 2024-01-31 | KEVNucleiMetasploitEmerging ThreatsExploit codeKCVFix |
| CVE-2024-21888 | Ivanti Connect Secure web component privilege escalation | 8.8v3.1 | 85.4% | 2024-01-31 | Exploit codeFix |
| CVE-2024-21626 | runc container breakout through process.cwd trickery and leaked fds | 8.6CNA v3.1 | 18.9% | 2024-01-31 | Reported exploitedExploit codeFix |
| CVE-2024-1117 | openBI Screen.php index code injection | 9.8v3.1 | 0.7% | 2024-01-31 | |
| CVE-2024-1116 | openBI Upload.php index unrestricted upload | 9.8v3.1 | 0.8% | 2024-01-31 | |
| CVE-2024-1115 | openBI Setting.php dlfile os command injection | 9.8v3.1 | 1.9% | 2024-01-31 | |
| CVE-2024-1114 | openBI Screen.php dlfile access control | 9.8v3.1 | 0.9% | 2024-01-31 | |
| CVE-2024-1113 | openBI Unity.php uploadUnity unrestricted upload | 9.8v3.1 | 0.6% | 2024-01-31 | |
| CVE-2024-1112 | Buffer overflow vulnerability in Resource Hacker | 9.8v3.1 | 1.6% | 2024-01-31 | Exploit codeFix |
| CVE-2024-1111 | SourceCodester QR Code Login System add-user.php cross-site scripting | 6.1v3.1 | 0.4% | 2024-01-31 | |
| CVE-2024-1103 | CodeAstro Real Estate Management System Feedback form profile.php cross-site scripting | 5.4v3.1 | 0.6% | 2024-01-31 | |
| CVE-2024-1099 | Rebuild read-raw getFileOfData cross-site scripting | 5.4v3.1 | 0.6% | 2024-01-31 | |
| CVE-2024-1098 | Rebuild proxy-download QiniuCloud.getStorageFile information disclosure | 7.5v3.1 | 1.2% | 2024-01-31 | |
| CVE-2024-1086 | Linux Kernel use-after-free | 7.8NVD v3.1 | 28.1% | 2024-01-31 | KEVExploit codeKCVFix |
| CVE-2024-1085 | Linux kernel A use-after-free | 7.8NVD v3.1 | 0.3% | 2024-01-31 | Fix |
| CVE-2024-1069 | Contact Form Entries WordPress plugin authenticated (Administrator+) arbitrary file upload | 7.2v3.1 | 1.2% | 2024-01-31 | Fix |
| CVE-2024-1012 | Wanhu ezOFFICE wf_printnum.jsp SQL injection | 9.8v3.1 | 0.9% | 2024-01-31 | |
| CVE-2024-0914 | Opencryptoki: Timing side-channel in handling of rsa pkcs#1 padded ciphertexts (marvin) | 5.9NVD v3.1 | 0.9% | 2024-01-31 | Fix |
| CVE-2024-0836 | WordPress Review and Structure Data Schema Plugin WordPress plugin unauthorized access | 4.3v3.1 | 0.4% | 2024-01-31 | Fix |
| CVE-2024-0833 | Progress Telerik Test Studio installer privilege escalation | 7.8CNA v3.1 | 0.2% | 2024-01-31 | Fix |
| CVE-2024-0832 | Privilege Elevation via Telerik Reporting Installer | 7.8CNA v3.1 | 0.2% | 2024-01-31 | Fix |
| CVE-2024-0589 | Devolutions Remote Desktop Manager entry overview tab cross-site scripting | 5.4v3.1 | 0.3% | 2024-01-31 | Fix |
| CVE-2024-0219 | Privilege Elevation via Telerik JustDecompile Installer | 7.8CNA v3.1 | 0.2% | 2024-01-31 | Fix |
| CVE-2024-24567 | vyperlang vyper raw_call `value=` kwargs not disabled for static and delegate calls | 4.8CNA v3.1 | 0.5% | 2024-01-30 | Fix |
| CVE-2024-24565 | CrateDB database has an arbitrary file read | 5.7CNA v3.1 | 3.1% | 2024-01-30 | NucleiFix |
| CVE-2024-24558 | @tanstack query react-query-streamed-hydration XSS | 8.2CNA v3.1 | 0.4% | 2024-01-30 | Fix |
| CVE-2024-24556 | @urql/next cross-site scripting | 7.2CNA v3.1 | 0.4% | 2024-01-30 | Fix |
| CVE-2024-24333 | TOTOLINK A3300R OS command injection | 9.8v3.1 | 1.7% | 2024-01-30 | |
| CVE-2024-24332 | TOTOLINK A3300R OS command injection | 9.8v3.1 | 1.7% | 2024-01-30 | |
| CVE-2024-24331 | TOTOLINK A3300R OS command injection | 9.8v3.1 | 1.6% | 2024-01-30 | |
| CVE-2024-24330 | TOTOLINK A3300R OS command injection | 9.8v3.1 | 1.5% | 2024-01-30 | |
| CVE-2024-24329 | TOTOLINK A3300R OS command injection | 9.8v3.1 | 6.2% | 2024-01-30 | Nuclei |
| CVE-2024-24328 | TOTOLINK A3300R OS command injection | 9.8v3.1 | 6.2% | 2024-01-30 | Nuclei |
| CVE-2024-24327 | TOTOLINK A3300R OS command injection | 9.8v3.1 | 1.6% | 2024-01-30 | |
| CVE-2024-24326 | TOTOLINK A3300R OS command injection | 9.8v3.1 | 1.6% | 2024-01-30 | |
| CVE-2024-24325 | TOTOLINK A3300R OS command injection | 9.8v3.1 | 1.7% | 2024-01-30 | |
| CVE-2024-24324 | TOTOLINK A8000RU hard-coded credentials | 9.8v3.1 | 0.7% | 2024-01-30 | |
| CVE-2024-23841 | XSS in @apollo/experimental-nextjs-app-support | 8.2CNA v3.1 | 0.4% | 2024-01-30 | Fix |
| CVE-2024-23840 | `goreleaser release --debug` shows secrets | 5.5CNA v3.1 | 0.3% | 2024-01-30 | Fix |
| CVE-2024-23838 | truelayer-dotnet TrueLayer.client SSRF when fetching payment or payment provider | 8.6CNA v3.0 | 0.5% | 2024-01-30 | Fix |
| CVE-2024-23834 | Discourse improperly sanitized user input leads to XSS | 6.3CNA v3.1 | 0.5% | 2024-01-30 | Fix |
| CVE-2024-23825 | TablePress SSRF vulnerability due to insufficient filtering of cloud provider hosts | 3.0CNA v3.1 | 0.5% | 2024-01-30 | Fix |
| CVE-2024-23647 | PKCE downgrade attack in Authentik | 6.5CNA v3.1 | 0.5% | 2024-01-30 | Fix |
| CVE-2024-22938 | Bosscms insecure permissions | 7.8v3.1 | 0.3% | 2024-01-30 | |
| CVE-2024-22894 | Alpha-innotec Heat Pumps inadequate encryption strength | 6.8v3.1 | 0.7% | 2024-01-30 | Exploit code |
| CVE-2024-22648 | SEO Panel "Crawl Meta Data" functionality server-side request forgery | 5.3v3.1 | 0.6% | 2024-01-30 | |
| CVE-2024-22647 | SEO Panel observable discrepancy | 5.3v3.1 | 0.6% | 2024-01-30 | |
| CVE-2024-22646 | SEO Panel information disclosure through error messages | 5.3v3.1 | 0.6% | 2024-01-30 | |
| CVE-2024-22643 | SEO Panel cross-site request forgery | 6.5v3.1 | 0.3% | 2024-01-30 | |
| CVE-2024-22523 | Fuwushe Ifair Qiyu path traversal | 7.5v3.1 | 1.1% | 2024-01-30 | |
| CVE-2024-22200 | vantage6-UI docker image leaks software version information | 3.3CNA v3.1 | 0.3% | 2024-01-30 | Fix |
| CVE-2024-22193 | vantage6 unencrypted task can be created in encrypted collaboration | 3.5CNA v3.1 | 0.3% | 2024-01-30 | Fix |
| CVE-2024-21840 | Directory and File Permission vulnerability in Hitachi Storage Plug-in for VMware vCenter | 7.9CNA v3.1 | 0.1% | 2024-01-30 | Fix |
| CVE-2024-21803 | Possible UAF in bt_accept_poll in Linux kernel | 7.8NVD v3.1 | 0.5% | 2024-01-30 | Fix |
| CVE-2024-21671 | vantage6 username timing attack | 3.7CNA v3.1 | 0.4% | 2024-01-30 | Fix |
| CVE-2024-21653 | vantage6 insecure SSH configuration for node and server containers | 6.5CNA v3.1 | 0.5% | 2024-01-30 | Fix |
| CVE-2024-21649 | vantage6 remote code execution | 8.8CNA v3.1 | 1.3% | 2024-01-30 | Fix |
| CVE-2024-21488 | Network arbitrary command injection | 9.8v3.1 | 3.3% | 2024-01-30 | Fix |
| CVE-2024-21388 | Microsoft Edge (Chromium-based) elevation of privilege | 6.5CNA v3.1 | 32.0% | 2024-01-30 | Exploit codeFix |
| CVE-2024-1077 | Google Chrome Network use-after-free | 8.8v3.1 | 0.9% | 2024-01-30 | Fix |
| CVE-2024-1063 | Appwrite server-side request forgery | 7.5NVD v3.1 | 0.4% | 2024-01-30 | |
| CVE-2024-1061 | bPlugins HTML5 Video Player SQL injection | 9.8NVD v3.1 | 11.2% | 2024-01-30 | NucleiFix |
| CVE-2024-1060 | Google Chrome Canvas use-after-free | 8.8v3.1 | 0.9% | 2024-01-30 | Fix |
| CVE-2024-1059 | Google Chrome Peer Connection use-after-free | 8.8v3.1 | 0.9% | 2024-01-30 | Fix |
| CVE-2024-1036 | openBI Icon Screen.php uploadIcon unrestricted upload | 9.8v3.1 | 0.9% | 2024-01-30 | |
| CVE-2024-1035 | openBI Icon.php uploadIcon unrestricted upload | 9.8v3.1 | 0.8% | 2024-01-30 | |
| CVE-2024-1034 | openBI File.php uploadFile unrestricted upload | 9.8v3.1 | 0.8% | 2024-01-30 | |
| CVE-2024-1033 | openBI Datament.php agent information disclosure | 7.5v3.1 | 0.6% | 2024-01-30 | |
| CVE-2024-1032 | openBI Test Connection Databasesource.php testConnection deserialization | 9.8v3.1 | 0.8% | 2024-01-30 | |
| CVE-2024-1031 | CodeAstro Expense Management System Add Expenses page 5-Add-Expenses.php cross-site scripting | 6.1v3.1 | 0.4% | 2024-01-30 | |
| CVE-2024-1030 | Cogites eReserv tenancyDetail.php cross-site scripting | 5.4v3.1 | 0.4% | 2024-01-30 | |
| CVE-2024-1029 | Cogites eReserv tenancyDetail.php cross-site scripting | 6.1v3.1 | 0.4% | 2024-01-30 | |
| CVE-2024-1028 | SourceCodester Facebook News Feed Like Post cross-site scripting | 6.1v3.1 | 0.4% | 2024-01-30 | |
| CVE-2024-1027 | SourceCodester Facebook News Feed Like Post unrestricted upload | 9.8v3.1 | 0.5% | 2024-01-30 | |
| CVE-2024-1026 | Cogites eReserv config.php cross-site scripting | 6.1v3.1 | 0.3% | 2024-01-30 | |
| CVE-2024-1024 | SourceCodester Facebook News Feed Like New Account cross-site scripting | 6.1v3.1 | 0.3% | 2024-01-30 | |
| CVE-2024-1019 | WAF bypass of the ModSecurity v3 release line | 8.6v3.1 | 0.7% | 2024-01-30 | Fix |
| CVE-2024-0676 | Weak password requirement vulnerability in Lamassu Bitcoin ATM Douro machines | 7.1v3.1 | 0.1% | 2024-01-30 | Fix |
| CVE-2024-0675 | Lamassu Douro Bitcoin ATM kiosk mode improper check for exceptional conditions | 6.8v3.1 | 0.2% | 2024-01-30 | Fix |
| CVE-2024-0674 | Privilege escalation vulnerability in Lamassu Bitcoin ATM Douro machines | 7.8v3.1 | 0.1% | 2024-01-30 | Fix |
| CVE-2024-0564 | Kernel: Max page sharing of kernel samepage merging (ksm) may cause memory deduplication | 6.5NVD v3.1 | 0.6% | 2024-01-30 | |
| CVE-2024-24736 | Ypopsemail Ypops! buffer overflow | 7.5v3.1 | 1.2% | 2024-01-29 | |
| CVE-2024-24141 | Remyandrade School Task Manager SQL injection | 9.8v3.1 | 1.1% | 2024-01-29 | Exploit code |
| CVE-2024-24140 | Remyandrade Daily Habit Tracker SQL injection | 7.2v3.1 | 1.2% | 2024-01-29 | Exploit code |
| CVE-2024-24139 | Remyandrade Login System With Email Verification SQL injection | 7.2v3.1 | 1.2% | 2024-01-29 | Exploit code |
| CVE-2024-24136 | Remyandrade Math Game cross-site scripting | 6.1v3.1 | 0.6% | 2024-01-29 | Exploit code |
| CVE-2024-24135 | Remyandrade Product Inventory With Export To Excel cross-site scripting | 6.1v3.1 | 0.7% | 2024-01-29 | Exploit code |
| CVE-2024-24134 | Remyandrade Online Food Menu cross-site scripting | 4.8v3.1 | 0.7% | 2024-01-29 | Exploit code |
| CVE-2024-23940 | Trend Micro Security (Consumer) uiAirSupport uncontrolled search path | 7.8v3.1 | 0.6% | 2024-01-29 | Fix |
| CVE-2024-23829 | Aiohttp's HTTP parser (the python one, not llhttp) still overly lenient about separators | 6.5CNA v3.1 | 1.0% | 2024-01-29 | Fix |
| CVE-2024-23828 | Nginx-UI authenticated RCE through injecting into the application config via CRLF | 8.8CNA v3.1 | 1.1% | 2024-01-29 | Fix |
| CVE-2024-23827 | Nginx-UI arbitrary file write through the Import Certificate feature | 9.8CNA v3.1 | 0.7% | 2024-01-29 | Fix |
| CVE-2024-23826 | spbu_se_site uploading an image with a specific filename causes a server-side DoS | 6.8CNA v3.1 | 0.5% | 2024-01-29 | Fix |
| CVE-2024-23822 | Thruk Incorrect limitation of a pathname to a restricted directory (path traversal) | 5.4CNA v3.1 | 1.4% | 2024-01-29 | Fix |
| CVE-2024-23792 | OTRS insufficient access control | 5.3CNA v3.1 | 0.3% | 2024-01-29 | Fix |
| CVE-2024-23791 | OTRS unnecessary data is written to log if issues during indexing occurs | 4.9CNA v3.1 | 0.5% | 2024-01-29 | Fix |
| CVE-2024-23790 | OTRS missing file type check in avatar picture upload | 3.5CNA v3.1 | 0.3% | 2024-01-29 | Fix |
| CVE-2024-23747 | Modernasistemas Modernanet Hospital Management System 2024 insecure direct object reference | 7.5v3.1 | 0.7% | 2024-01-29 | Exploit code |
| CVE-2024-23441 | VBA32 Antivirus denial of service (DoS) | 5.5CNA v3.1 | 0.2% | 2024-01-29 | |
| CVE-2024-23334 | aio-libs aiohttp Aiohttp.web.static(follow_symlinks=True) is vulnerable to directory traversal | 5.9CNA v3.1 | 76.9% | 2024-01-29 | NucleiEmerging ThreatsExploit codeFix |
| CVE-2024-22570 | Njtech GreenCMS /install.php?m=install&c=index&a=step3 stored cross-site scripting | 5.4v3.1 | 0.3% | 2024-01-29 | |
| CVE-2024-22559 | Lightcms cross-site scripting | 5.4v3.1 | 0.3% | 2024-01-29 | |
| CVE-2024-1022 | CodeAstro Simple Student Result Management System add_classes.php cross-site scripting | 4.8v3.1 | 0.5% | 2024-01-29 | |
| CVE-2024-1021 | Rebuild HTTP request readRawText server-side request forgery | 9.8v3.1 | 34.7% | 2024-01-29 | Nuclei |
| CVE-2024-1020 | Rebuild proxy-download getStorageFile cross-site scripting | 6.1v3.1 | 0.6% | 2024-01-29 | |
| CVE-2024-1018 | PbootCMS cross-site scripting | 6.1v3.1 | 0.5% | 2024-01-29 | |
| CVE-2024-1017 | Gabriels FTP Server denial of service | 7.5v3.1 | 1.4% | 2024-01-29 | |
| CVE-2024-1016 | Solar FTP Server PASV command denial of service | 7.5v3.1 | 1.4% | 2024-01-29 | |
| CVE-2024-1015 | Remote command execution vulnerability in SE-elektronic GmbH E-DDC3.3 | 9.8v3.1 | 1.7% | 2024-01-29 | Fix |
| CVE-2024-1014 | Uncontrolled resource consumption vulnerability in SE-elektronic GmbH E-DDC3.3 | 7.5v3.1 | 0.7% | 2024-01-29 | Fix |
| CVE-2024-1011 | SourceCodester Employee Management System Leave delete-leave.php access control | 8.8v3.1 | 0.6% | 2024-01-29 | |
| CVE-2024-1010 | SourceCodester Employee Management System edit-profile.php cross-site scripting | 5.4v3.1 | 0.6% | 2024-01-29 | |
| CVE-2024-1009 | SourceCodester Employee Management System login.php SQL injection | 9.8v3.1 | 0.8% | 2024-01-29 | |
| CVE-2024-1008 | SourceCodester Employee Management System Profile page edit-photo.php unrestricted upload | 7.2v3.1 | 0.8% | 2024-01-29 | |
| CVE-2024-1007 | SourceCodester Employee Management System edit_profile.php SQL injection | 7.2v3.1 | 0.6% | 2024-01-29 | |
| CVE-2024-1006 | Shanxi Diankeyun Technology NODERP Cookie common.php improper authentication | 5.3NVD v3.1 | 0.7% | 2024-01-29 | |
| CVE-2024-1005 | Shanxi Diankeyun Technology NODERP log file access | 7.5v3.1 | 0.9% | 2024-01-29 | |
| CVE-2024-1004 | Totolink N200RE cstecgi.cgi loginAuth stack-based overflow | 7.2v3.1 | 1.3% | 2024-01-29 | |
| CVE-2024-1003 | Totolink N200RE cstecgi.cgi setLanguageCfg stack-based overflow | 8.8v3.1 | 1.3% | 2024-01-29 | |
| CVE-2024-1002 | Totolink N200RE cstecgi.cgi setIpPortFilterRules stack-based overflow | 8.8v3.1 | 1.3% | 2024-01-29 | |
| CVE-2024-1001 | Totolink N200RE cstecgi.cgi main stack-based overflow | 9.8v3.1 | 1.4% | 2024-01-29 | |
| CVE-2024-1000 | Totolink N200RE cstecgi.cgi setTracerouteCfg stack-based overflow | 8.8v3.1 | 1.3% | 2024-01-29 | |
| CVE-2024-0999 | Totolink N200RE cstecgi.cgi setParentalRules stack-based overflow | 8.8v3.1 | 1.5% | 2024-01-29 | |
| CVE-2024-0998 | Totolink N200RE cstecgi.cgi setDiagnosisCfg stack-based overflow | 8.8v3.1 | 1.4% | 2024-01-29 | |
| CVE-2024-0997 | Totolink N200RE cstecgi.cgi setOpModeCfg stack-based overflow | 8.8v3.1 | 1.3% | 2024-01-29 | |
| CVE-2024-0996 | Tenda i9 httpd setcfm formSetCfm stack-based overflow | 9.8v3.1 | 1.6% | 2024-01-29 | |
| CVE-2024-0995 | Tenda W6 httpd wifiSSIDset formwrlSSIDset stack-based overflow | 9.8v3.1 | 1.7% | 2024-01-29 | |
| CVE-2024-0994 | Tenda W6 httpd setcfm formSetCfm stack-based overflow | 9.8v3.1 | 1.7% | 2024-01-29 | |
| CVE-2024-0993 | Tenda i6 httpd WifiMacFilterGet formWifiMacFilterGet stack-based overflow | 9.8v3.1 | 1.7% | 2024-01-29 | |
| CVE-2024-0992 | Tenda i6 httpd wifiSSIDset formwrlSSIDset stack-based overflow | 9.8v3.1 | 1.7% | 2024-01-29 | |
| CVE-2024-0991 | Tenda i6 httpd setcfm formSetCfm stack-based overflow | 9.8v3.1 | 1.7% | 2024-01-29 | |
| CVE-2024-0990 | Tenda i6 httpd setAutoPing formSetAutoPing stack-based overflow | 9.8v3.1 | 1.7% | 2024-01-29 | |
| CVE-2024-0989 | Sichuan Yougou Technology KuERP Service.php del_sn_db path traversal | 9.8v3.1 | 1.2% | 2024-01-29 | |
| CVE-2024-0988 | Sichuan Yougou Technology KuERP common.php checklogin improper authentication | 9.8v3.1 | 1.0% | 2024-01-29 | |
| CVE-2024-0987 | Sichuan Yougou Technology KuERP log neutralization for logs | 9.8v3.1 | 0.9% | 2024-01-29 | |
| CVE-2024-0986 | Issabel PBX Asterisk-Cli os command injection | 9.8v3.1 | 58.2% | 2024-01-29 | NucleiExploit code |
| CVE-2024-0788 | SUPERAntiSpyware Pro X Kernel-level API parameters manipulation | 5.5NVD v3.1 | 0.2% | 2024-01-29 | |
| CVE-2024-0212 | Cloudflare WordPress plugin enables information disclosure of Cloudflare API | 8.1CNA v3.1 | 0.8% | 2024-01-29 | Fix |
| CVE-2024-23782 | appleple a-blog cms Ver.3.1.x series cross-site scripting | 5.4v3.1 | 0.3% | 2024-01-28 | Fix |
| CVE-2024-23743 | Notion execution with unnecessary privileges | 3.3v3.1 | 0.4% | 2024-01-28 | Exploit code |
| CVE-2024-23742 | loom code injection | 9.8v3.1 | 1.7% | 2024-01-28 | Exploit code |
| CVE-2024-23741 | vercel hyper code injection | 9.8v3.1 | 1.6% | 2024-01-28 | Exploit code |
| CVE-2024-23740 | Getkap KAP arbitrary code execution | 9.8v3.1 | 1.5% | 2024-01-28 | Exploit code |
| CVE-2024-23739 | Discord arbitrary code execution | 9.8v3.1 | 1.8% | 2024-01-28 | Exploit code |
| CVE-2024-23738 | Postman remote code execution | 9.8v3.1 | 1.5% | 2024-01-28 | Exploit code |
| CVE-2024-0841 | Kernel: Hugetlbfs: Null pointer dereference in hugetlbfs_fill_super function | 7.8NVD v3.1 | 0.3% | 2024-01-28 | Fix |
| CVE-2024-23506 | InstaWP Connect WordPress plugin sensitive data exposure | 6.5NVD v3.1 | 0.5% | 2024-01-27 | Fix |
| CVE-2024-22862 | FFmpeg integer overflow | 9.8v3.1 | 1.2% | 2024-01-27 | Fix |
| CVE-2024-22861 | FFmpeg integer overflow | 7.5v3.1 | 0.6% | 2024-01-27 | Fix |
| CVE-2024-22860 | FFmpeg integer overflow | 9.8v3.1 | 1.1% | 2024-01-27 | Fix |
| CVE-2024-22283 | Delhivery Logistics Courier WordPress plugin SQL injection | 8.8v3.1 | 0.5% | 2024-01-27 | |
| CVE-2024-22147 | WooCommerce PDF Invoices and Packing Slips WordPress plugin SQL injection | 7.2v3.1 | 0.6% | 2024-01-27 | Fix |
| CVE-2024-0962 | obgm libcoap Configuration file coap_oscore.c get_split_entry stack-based overflow | 7.8v3.1 | 0.8% | 2024-01-27 | Fix |
| CVE-2024-0960 | flink-extended ai-flow workflow_command.py cloudpickle.loads deserialization | 9.8v3.1 | 0.7% | 2024-01-27 | |
| CVE-2024-0959 | StanfordVL GibsonEnv pposgd_fuse.py cloudpickle.load deserialization | 9.8v3.1 | 0.7% | 2024-01-27 | |
| CVE-2024-0958 | CodeAstro Stock Management System Add Category index.php cross-site scripting | 5.4v3.1 | 0.6% | 2024-01-27 | |
| CVE-2024-0824 | Exclusive Addons for Elementor WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.3% | 2024-01-27 | Fix |
| CVE-2024-0697 | Backuply Backup, Restore, Migrate and Clone WordPress plugin directory traversal | 4.9v3.1 | 0.8% | 2024-01-27 | Fix |
| CVE-2024-0667 | Form Maker by 10Web WordPress plugin cross-site request forgery | 6.3v3.1 | 0.2% | 2024-01-27 | Fix |
| CVE-2024-0664 | Meks Smart Social Widget WordPress plugin authenticated (Admin+) stored cross-site scripting | 4.8v3.1 | 0.3% | 2024-01-27 | Fix |
| CVE-2024-0618 | Fluent Forms WordPress plugin stored cross-site scripting | 4.8v3.1 | 0.5% | 2024-01-27 | Fix |
| CVE-2024-23896 | Cross-site scripting (XSS) vulnerability in Cups Easy | 6.1NVD v3.1 | 0.5% | 2024-01-26 | |
| CVE-2024-23894 | Cross-site scripting (XSS) vulnerability in Cups Easy | 6.1NVD v3.1 | 0.4% | 2024-01-26 | |
| CVE-2024-23893 | Cross-site scripting (XSS) vulnerability in Cups Easy | 6.1NVD v3.1 | 0.4% | 2024-01-26 | |
| CVE-2024-23892 | Cross-site scripting (XSS) vulnerability in Cups Easy | 6.1NVD v3.1 | 0.4% | 2024-01-26 | |
| CVE-2024-23891 | Cross-site scripting (XSS) vulnerability in Cups Easy | 6.1NVD v3.1 | 0.4% | 2024-01-26 | |
| CVE-2024-23890 | Cross-site scripting (XSS) vulnerability in Cups Easy | 6.1NVD v3.1 | 0.4% | 2024-01-26 | |
| CVE-2024-23889 | Cross-site scripting (XSS) vulnerability in Cups Easy | 6.1NVD v3.1 | 0.4% | 2024-01-26 | |
| CVE-2024-23888 | Cross-site scripting (XSS) vulnerability in Cups Easy | 6.1NVD v3.1 | 0.4% | 2024-01-26 | |
| CVE-2024-23887 | Cross-site scripting (XSS) vulnerability in Cups Easy | 6.1NVD v3.1 | 0.4% | 2024-01-26 | |
| CVE-2024-23886 | Cross-site scripting (XSS) vulnerability in Cups Easy | 6.1NVD v3.1 | 0.4% | 2024-01-26 | |
| CVE-2024-23885 | Cross-site scripting (XSS) vulnerability in Cups Easy | 6.1NVD v3.1 | 0.4% | 2024-01-26 | |
| CVE-2024-23884 | Cross-site scripting (XSS) vulnerability in Cups Easy | 6.1NVD v3.1 | 0.4% | 2024-01-26 | |
| CVE-2024-23883 | Cross-site scripting (XSS) vulnerability in Cups Easy | 6.1NVD v3.1 | 0.4% | 2024-01-26 | |
| CVE-2024-23882 | Cross-site scripting (XSS) vulnerability in Cups Easy | 6.1NVD v3.1 | 0.4% | 2024-01-26 | |
| CVE-2024-23881 | Cross-site scripting (XSS) vulnerability in Cups Easy | 6.1NVD v3.1 | 0.4% | 2024-01-26 | |
| CVE-2024-23880 | Cross-site scripting (XSS) vulnerability in Cups Easy | 6.1NVD v3.1 | 0.4% | 2024-01-26 | |
| CVE-2024-23879 | Cross-site scripting (XSS) vulnerability in Cups Easy | 6.1NVD v3.1 | 0.4% | 2024-01-26 | |
| CVE-2024-23878 | Cross-site scripting (XSS) vulnerability in Cups Easy | 6.1NVD v3.1 | 0.4% | 2024-01-26 | |
| CVE-2024-23877 | Cross-site scripting (XSS) vulnerability in Cups Easy | 6.1NVD v3.1 | 0.4% | 2024-01-26 | |
| CVE-2024-23876 | Cross-site scripting (XSS) vulnerability in Cups Easy | 6.1NVD v3.1 | 0.4% | 2024-01-26 | |
| CVE-2024-23875 | Cross-site scripting (XSS) vulnerability in Cups Easy | 6.1NVD v3.1 | 0.4% | 2024-01-26 | |
| CVE-2024-23874 | Cross-site scripting (XSS) vulnerability in Cups Easy | 6.1NVD v3.1 | 0.4% | 2024-01-26 | |
| CVE-2024-23873 | Cross-site scripting (XSS) vulnerability in Cups Easy | 6.1NVD v3.1 | 0.4% | 2024-01-26 | |
| CVE-2024-23872 | Cross-site scripting (XSS) vulnerability in Cups Easy | 6.1NVD v3.1 | 0.4% | 2024-01-26 | |
| CVE-2024-23871 | Cross-site scripting (XSS) vulnerability in Cups Easy | 6.1NVD v3.1 | 0.4% | 2024-01-26 | |
| CVE-2024-23870 | Cross-site scripting (XSS) vulnerability in Cups Easy | 6.1NVD v3.1 | 0.4% | 2024-01-26 | |
| CVE-2024-23869 | Cross-site scripting (XSS) vulnerability in Cups Easy | 6.1NVD v3.1 | 0.4% | 2024-01-26 | |
| CVE-2024-23868 | Cross-site scripting (XSS) vulnerability in Cups Easy | 6.1NVD v3.1 | 0.4% | 2024-01-26 | |
| CVE-2024-23867 | Cross-site scripting (XSS) vulnerability in Cups Easy | 6.1NVD v3.1 | 0.4% | 2024-01-26 | |
| CVE-2024-23866 | Cross-site scripting (XSS) vulnerability in Cups Easy | 6.1NVD v3.1 | 0.4% | 2024-01-26 | |
| CVE-2024-23865 | Cross-site scripting (XSS) vulnerability in Cups Easy | 6.1NVD v3.1 | 0.4% | 2024-01-26 | |
| CVE-2024-23864 | Cross-site scripting (XSS) vulnerability in Cups Easy | 6.1NVD v3.1 | 0.4% | 2024-01-26 | |
| CVE-2024-23863 | Cross-site scripting (XSS) vulnerability in Cups Easy | 6.1NVD v3.1 | 0.4% | 2024-01-26 | |
| CVE-2024-23862 | Cross-site scripting (XSS) vulnerability in Cups Easy | 6.1NVD v3.1 | 0.4% | 2024-01-26 | |
| CVE-2024-23861 | Cross-site scripting (XSS) vulnerability in Cups Easy | 6.1NVD v3.1 | 0.4% | 2024-01-26 | |
| CVE-2024-23860 | Cross-site scripting (XSS) vulnerability in Cups Easy | 6.1NVD v3.1 | 0.4% | 2024-01-26 | |
| CVE-2024-23859 | Cross-site scripting (XSS) vulnerability in Cups Easy | 6.1NVD v3.1 | 0.4% | 2024-01-26 | |
| CVE-2024-23858 | Cross-site scripting (XSS) vulnerability in Cups Easy | 6.1NVD v3.1 | 0.4% | 2024-01-26 | |
| CVE-2024-23857 | Cross-site scripting (XSS) vulnerability in Cups Easy | 6.1NVD v3.1 | 0.4% | 2024-01-26 | |
| CVE-2024-23856 | Cross-site scripting (XSS) vulnerability in Cups Easy | 6.1NVD v3.1 | 0.4% | 2024-01-26 | |
| CVE-2024-23820 | OpenFGA denial of service | 5.3CNA v3.1 | 0.7% | 2024-01-26 | Fix |
| CVE-2024-23630 | Motorola MR2600 firmware upload vulnerability | 8.8NVD v3.1 | 1.5% | 2024-01-26 | |
| CVE-2024-23629 | Motorola MR2600 authentication bypass | 7.5NVD v3.1 | 1.1% | 2024-01-26 | |
| CVE-2024-23628 | Motorola MR2600 SaveStaticRouteIPv6Params command injection | 8.8NVD v3.1 | 3.2% | 2024-01-26 | |
| CVE-2024-23627 | Motorola MR2600 SaveStaticRouteIPv4Params command injection | 8.8NVD v3.1 | 3.5% | 2024-01-26 | |
| CVE-2024-23626 | Motorola MR2600 SaveSysLogParams command injection | 8.8NVD v3.1 | 3.5% | 2024-01-26 | |
| CVE-2024-23625 | D-Link DAP-1650 SUBSCRIBE Callback command injection | 9.8v3.1 | 7.3% | 2024-01-26 | Emerging Threats |
| CVE-2024-23624 | D-Link DAP-1650 gena.cgi SUBSCRIBE command injection | 9.8v3.1 | 26.0% | 2024-01-26 | Emerging Threats |
| CVE-2024-23622 | IBM Merge Healthcare eFilm Workstation License Server CopySLS_Request3 buffer overflow | 9.8v3.1 | 1.9% | 2024-01-26 | |
| CVE-2024-23621 | IBM Merge Healthcare eFilm Workstation License Server buffer overflow | 9.8v3.1 | 1.9% | 2024-01-26 | |
| CVE-2024-23620 | IBM Merge Healthcare eFilm Workstation SYSTEM privilege escalation | 7.8v3.1 | 0.2% | 2024-01-26 | |
| CVE-2024-23619 | IBM Merge Healthcare eFilm Workstation hard-coded credentials | 9.8v3.1 | 1.7% | 2024-01-26 | Fix |
| CVE-2024-23618 | Arris SURFboard SBG6950AC2 arbitrary code execution | 9.8v3.1 | 1.2% | 2024-01-26 | |
| CVE-2024-23617 | Symantec Data Loss Prevention buffer overflow | 8.8NVD v3.1 | 1.7% | 2024-01-26 | |
| CVE-2024-23616 | Symantec Server Management Suite buffer overflow | 9.8v3.1 | 1.9% | 2024-01-26 | |
| CVE-2024-23615 | Symantec Messaging Gateway buffer overflow | 9.8v3.1 | 1.9% | 2024-01-26 | |
| CVE-2024-23614 | Symantec Messaging Gateway buffer overflow | 9.8v3.1 | 1.6% | 2024-01-26 | |
| CVE-2024-23613 | Symantec Deployment Solution remote code execution | 9.8v3.1 | 1.8% | 2024-01-26 | |
| CVE-2024-23388 | "Mercari" App handler for custom URL scheme issue improper authorization | 6.1v3.1 | 0.4% | 2024-01-26 | Fix |
| CVE-2024-22551 | Ushainformatique Whatacart cross-site scripting | 6.1v3.1 | 0.4% | 2024-01-26 | |
| CVE-2024-22550 | ShopSite component /alsdemo/ss/mediam.cgi arbitrary file upload | 6.1v3.1 | 0.6% | 2024-01-26 | |
| CVE-2024-22545 | TRENDnet TEW-824DRU command injection | 7.8v3.1 | 0.5% | 2024-01-26 | |
| CVE-2024-21985 | Privilege escalation vulnerability in ONTAP 9 | 7.6CNA v3.1 | 0.3% | 2024-01-26 | Fix |
| CVE-2024-21387 | Microsoft Edge for Android spoofing | 5.3CNA v3.1 | 0.7% | 2024-01-26 | Fix |
| CVE-2024-21385 | Microsoft Edge (Chromium-based) elevation of privilege | 8.3CNA v3.1 | 1.0% | 2024-01-26 | Fix |
| CVE-2024-21383 | Microsoft Edge (Chromium-based) spoofing | 3.3CNA v3.1 | 0.4% | 2024-01-26 | Fix |
| CVE-2024-21382 | Microsoft Edge for Android information disclosure | 4.3CNA v3.1 | 0.9% | 2024-01-26 | Fix |
| CVE-2024-21336 | Microsoft Edge (Chromium-based) spoofing | 2.5CNA v3.1 | 0.5% | 2024-01-26 | Fix |
| CVE-2024-21326 | Microsoft Edge (Chromium-based) elevation of privilege | 9.6CNA v3.1 | 1.2% | 2024-01-26 | Fix |
| CVE-2024-20305 | Cisco Unity Connection cross-site scripting | 4.8CNA v3.1 | 0.4% | 2024-01-26 | Fix |
| CVE-2024-20263 | Cisco Small Business Smart and Managed Switches improper access control | 5.8CNA v3.1 | 0.5% | 2024-01-26 | Fix |
| CVE-2024-20253 | Cisco Unified Contact Center Enterprise deserialization of untrusted data | 9.9CNA v3.1 | 2.4% | 2024-01-26 | Fix |
| CVE-2024-0948 | NetBox Home Page Configuration config-revisions cross-site scripting | 6.1v3.1 | 0.5% | 2024-01-26 | |
| CVE-2024-0946 | 60IndexPage parameter index.php server-side request forgery | 9.8v3.1 | 0.6% | 2024-01-26 | |
| CVE-2024-0945 | 60IndexPage parameter file.php server-side request forgery | 9.8v3.1 | 0.6% | 2024-01-26 | |
| CVE-2024-0944 | Totolink T8 cstecgi.cgi session expiration | 5.3v3.1 | 1.5% | 2024-01-26 | |
| CVE-2024-0943 | Totolink N350RT cstecgi.cgi session expiration | 5.3v3.1 | 0.6% | 2024-01-26 | |
| CVE-2024-0942 | Totolink N200RE V5 cstecgi.cgi session expiration | 4.3v3.1 | 0.7% | 2024-01-26 | |
| CVE-2024-0941 | Novel-Plus list SQL injection | 9.8v3.1 | 0.7% | 2024-01-26 | |
| CVE-2024-0939 | Byzoro Smart S210 Management Platform uploadfile.php unrestricted upload | 9.8v3.1 | 43.8% | 2024-01-26 | Nuclei |
| CVE-2024-0938 | Tongda OA 2017 delete_webmail.php SQL injection | 9.8v3.1 | 0.7% | 2024-01-26 | |
| CVE-2024-0937 | van_der_Schaar LAB synthcity PKL file load_from_file deserialization | 9.8v3.1 | 0.7% | 2024-01-26 | |
| CVE-2024-0936 | van_der_Schaar LAB TemporAI PKL file load_from_file deserialization | 8.8v3.1 | 0.7% | 2024-01-26 | |
| CVE-2024-0933 | Niushop B2B2C Upload.php unrestricted upload | 9.8v3.1 | 0.6% | 2024-01-26 | |
| CVE-2024-0932 | Tenda AC10U setSmartPowerManagement stack-based overflow | 9.8v3.1 | 0.9% | 2024-01-26 | |
| CVE-2024-0931 | Tenda AC10U saveParentControlInfo stack-based overflow | 9.8v3.1 | 0.9% | 2024-01-26 | |
| CVE-2024-0930 | Tenda AC10U fromSetWirelessRepeat stack-based overflow | 9.8v3.1 | 15.2% | 2024-01-26 | |
| CVE-2024-0929 | Tenda AC10U fromNatStaticSetting stack-based overflow | 9.8v3.1 | 1.1% | 2024-01-26 | |
| CVE-2024-0928 | Tenda AC10U fromDhcpListClient stack-based overflow | 9.8v3.1 | 1.1% | 2024-01-26 | |
| CVE-2024-0927 | Tenda AC10U fromAddressNat stack-based overflow | 9.8v3.1 | 0.8% | 2024-01-26 | |
| CVE-2024-0926 | Tenda AC10U formWifiWpsOOB stack-based overflow | 9.8v3.1 | 0.9% | 2024-01-26 | |
| CVE-2024-0925 | Tenda AC10U formSetVirtualSer stack-based overflow | 9.8v3.1 | 0.9% | 2024-01-26 | |
| CVE-2024-0924 | Tenda AC10U formSetPPTPServer stack-based overflow | 9.8v3.1 | 0.9% | 2024-01-26 | |
| CVE-2024-0923 | Tenda AC10U formSetDeviceName stack-based overflow | 9.8v3.1 | 0.9% | 2024-01-26 | |
| CVE-2024-0922 | Tenda AC10U formQuickIndex stack-based overflow | 9.8v3.1 | 0.9% | 2024-01-26 | |
| CVE-2024-0921 | D-Link DIR-816 A2 Web interface setDeviceSettings os command injection | 9.8v3.1 | 37.6% | 2024-01-26 | |
| CVE-2024-0920 | TRENDnet TEW-822DRE POST request admin_ping.htm command injection | 7.2v3.1 | 8.6% | 2024-01-26 | |
| CVE-2024-0919 | TRENDnet TEW-815DAP POST request do_setNTP command injection | 7.2v3.1 | 22.5% | 2024-01-26 | |
| CVE-2024-0918 | TRENDnet TEW-800MB POST request os command injection | 7.2v3.1 | 25.4% | 2024-01-26 | |
| CVE-2024-0727 | OpenSSL PKCS12 Decoding crashes | 5.5NVD v3.1 | 3.2% | 2024-01-26 | Fix |
| CVE-2024-0456 | Direct request (forced browsing) in GitLab | 4.3CNA v3.1 | 0.5% | 2024-01-26 | Fix |
| CVE-2024-0402 | Improper limitation of a pathname to a restricted directory (path traversal) in GitLab | 9.9CNA v3.1 | 3.8% | 2024-01-26 | Exploit codeFix |
| CVE-2024-24399 | Leptoncms LEPTON v7.0.0 arbitrary file upload | 7.2v3.1 | 15.6% | 2024-01-25 | |
| CVE-2024-23985 | Ezhometech Ezserver denial of service | 7.5v3.1 | 3.6% | 2024-01-25 | Exploit code |
| CVE-2024-23855 | Cross-site scripting (XSS) vulnerability in Cups Easy | 6.1NVD v3.1 | 0.4% | 2024-01-25 | |
| CVE-2024-23817 | Dolibarr Application Home Page HTML injection | 7.1CNA v3.1 | 0.6% | 2024-01-25 | Fix |
| CVE-2024-23656 | Dex is discarding TLSconfig and always serves deprecated TLS 1.0/ and insecure ciphers | 7.5CNA v3.1 | 0.4% | 2024-01-25 | Fix |
| CVE-2024-23655 | tutao tutanota attacker can prevent users from accessing received emails | 7.5CNA v3.1 | 0.8% | 2024-01-25 | Fix |
| CVE-2024-23307 | Integer overflow in raid5_cache_count in Linux kernel | 7.8NVD v3.1 | 0.6% | 2024-01-25 | Fix |
| CVE-2024-23055 | Plone Docker Official Image improper input validation | 6.1v3.1 | 0.9% | 2024-01-25 | Nuclei |
| CVE-2024-22922 | Projectworlds Visitor Management System improper privilege management | 9.8v3.1 | 0.8% | 2024-01-25 | Exploit code |
| CVE-2024-22749 | gpac buffer overflow | 7.8v3.1 | 0.5% | 2024-01-25 | |
| CVE-2024-22729 | Netis Systems MW5360 command injection | 9.8v3.1 | 70.8% | 2024-01-25 | NucleiMetasploitExploit code |
| CVE-2024-22639 | Igalerie cross-site scripting | 6.1v3.1 | 0.4% | 2024-01-25 | |
| CVE-2024-22638 | Livesite remote code execution | 9.8v3.1 | 1.6% | 2024-01-25 | |
| CVE-2024-22637 | Form Tools cross-site scripting | 6.1v3.1 | 0.5% | 2024-01-25 | |
| CVE-2024-22636 | PluXml remote code execution | 8.8v3.1 | 1.3% | 2024-01-25 | |
| CVE-2024-22635 | WebCalendar cross-site scripting | 6.1v3.1 | 0.5% | 2024-01-25 | |
| CVE-2024-22529 | TOTOLINK X2000R command injection | 9.8v3.1 | 1.7% | 2024-01-25 | |
| CVE-2024-22432 | Dell NetWorker Module for Databases and Applications plaintext password storage | 7.8CNA v3.1 | 0.1% | 2024-01-25 | Fix |
| CVE-2024-22099 | Null pointer deference in rfcomm_check_security in Linux kernel | 5.5NVD v3.1 | 0.6% | 2024-01-25 | Fix |
| CVE-2024-21630 | Zulip Server multi-use invitations missing authorization | 4.3CNA v3.1 | 0.4% | 2024-01-25 | Fix |
| CVE-2024-21620 | Junos OS: SRX Series and EX Series: J-Web doesn't sufficiently sanitize input to prevent XSS | 8.8CNA v3.1 | 0.9% | 2024-01-25 | Fix |
| CVE-2024-21619 | Juniper Networks Junos OS J-Web information disclosure | 5.3CNA v3.1 | 0.9% | 2024-01-25 | Fix |
| CVE-2024-0891 | hongmaple octopus cross-site scripting | 5.4v3.1 | 0.6% | 2024-01-25 | |
| CVE-2024-0890 | hongmaple octopus edit SQL injection | 9.8v3.1 | 0.7% | 2024-01-25 | |
| CVE-2024-0889 | Kmint21 Golden FTP Server PASV command denial of service | 7.5v3.1 | 1.4% | 2024-01-25 | |
| CVE-2024-0888 | BORGChat Service Port 7551 denial of service | 7.5v3.1 | 1.1% | 2024-01-25 | |
| CVE-2024-0887 | Mafiatic Blue Server Connection denial of service | 7.5v3.1 | 1.1% | 2024-01-25 | |
| CVE-2024-0886 | Poikosoft EZ CD Audio Converter Activation denial of service | 5.5v3.1 | 0.4% | 2024-01-25 | |
| CVE-2024-0885 | SpyCamLizard HTTP GET request denial of service | 7.5v3.1 | 1.4% | 2024-01-25 | |
| CVE-2024-0884 | SourceCodester Online Tours and Travels Management System payment.php exec SQL injection | 9.8v3.1 | 0.6% | 2024-01-25 | |
| CVE-2024-0883 | SourceCodester Online Tours and Travels Management System pay.php prepare SQL injection | 9.8v3.1 | 0.6% | 2024-01-25 | |
| CVE-2024-0882 | qwdigital LinkWechat Universal Download interface resource path traversal | 7.5v3.1 | 0.8% | 2024-01-25 | |
| CVE-2024-0880 | Qidianbang qdbcrm password reset cross-site request forgery | 8.8v3.1 | 0.4% | 2024-01-25 | |
| CVE-2024-0879 | Authentication bypass in vector-admin domain restriction | 4.3NVD v3.1 | 0.4% | 2024-01-25 | Fix |
| CVE-2024-0822 | oVirt: Authentication bypass | 7.5CNA v3.1 | 0.7% | 2024-01-25 | Fix |
| CVE-2024-0688 | WebSub (FKA. PubSubHubbub) WordPress plugin authenticated (Admin+) stored cross-site scripting | 4.8v3.1 | 0.3% | 2024-01-25 | Fix |
| CVE-2024-0625 | WPFront Notification Bar WordPress plugin stored cross-site scripting | 4.8v3.1 | 0.4% | 2024-01-25 | Fix |
| CVE-2024-0624 | Paid Memberships Pro WordPress plugin cross-site request forgery to Level orders update | 5.3v3.1 | 1.0% | 2024-01-25 | Exploit codeFix |
| CVE-2024-0617 | Category Discount Woocommerce WordPress plugin missing authorization via wpcd_save_discount | 5.3v3.1 | 0.5% | 2024-01-25 | Fix |
| CVE-2024-23905 | Content-Security-Policy disabled by Red Hat Dependency Analytics Jenkins Plugin | 5.4v3.1 | 0.6% | 2024-01-24 | Fix |
| CVE-2024-23904 | Arbitrary file read vulnerability in Jenkins Log Command Plugin | 7.5v3.1 | 0.9% | 2024-01-24 | Fix |
| CVE-2024-23903 | Non-constant time webhook token comparison in Jenkins GitLab Branch Source Plugin | 5.3v3.1 | 0.5% | 2024-01-24 | Fix |
| CVE-2024-23902 | CSRF vulnerability in Jenkins GitLab Branch Source Plugin | 4.3v3.1 | 0.3% | 2024-01-24 | Fix |
| CVE-2024-23901 | Shared projects are unconditionally discovered by Jenkins GitLab Branch Source Plugin | 6.5v3.1 | 0.5% | 2024-01-24 | Fix |
| CVE-2024-23900 | Path traversal vulnerability in Jenkins Matrix Project Plugin | 4.3v3.1 | 0.7% | 2024-01-24 | Fix |
| CVE-2024-23899 | Arbitrary file read vulnerability in Git Server Plugin can lead to RCE | 6.5v3.1 | 1.3% | 2024-01-24 | Fix |
| CVE-2024-23898 | Cross-site WebSocket hijacking vulnerability in the Jenkins CLI | 8.8v3.1 | 66.9% | 2024-01-24 | Exploit codeFix |
| CVE-2024-23897 | Jenkins Command Line Interface (CLI) path traversal | 9.8NVD v3.1 | 100.0% | 2024-01-24 | KEVNucleiMetasploitEmerging ThreatsExploit codeFix |
| CVE-2024-23649 | LemmyNet Lemmy private message report API improper authorization | 7.5CNA v3.1 | 0.5% | 2024-01-24 | Fix |
| CVE-2024-23648 | Pimcore Admin Classic Bundle host header injection in the password reset | 8.8CNA v3.1 | 0.8% | 2024-01-24 | Fix |
| CVE-2024-23646 | Pimcore Admin Classic Bundle SQL injection in Admin download files as zip | 8.8CNA v3.1 | 1.0% | 2024-01-24 | Fix |
| CVE-2024-23644 | Trillium-http and trillium-client vulnerable to HTTP Request/Response Splitting | 6.8CNA v3.1 | 0.6% | 2024-01-24 | Fix |
| CVE-2024-23641 | sveltejs kit sending a GET or HEAD request with a body crashes SvelteKit | 7.5CNA v3.1 | 0.8% | 2024-01-24 | Fix |
| CVE-2024-23638 | squid-cache squid SQUID-2023:11 denial of service in Cache Manager | 6.5CNA v3.1 | 60.1% | 2024-01-24 | Fix |
| CVE-2024-23633 | HumanSignal label-studio Label Studio XSS vulnerability on Data Import | 4.7CNA v3.1 | 0.6% | 2024-01-24 | Fix |
| CVE-2024-23453 | Spoon Radio Japan Android Spoon application hard-coded credentials | 5.5v3.1 | 0.2% | 2024-01-24 | Fix |
| CVE-2024-22751 | D-Link Dir-882 A1 out-of-bounds write | 9.8v3.1 | 1.2% | 2024-01-24 | |
| CVE-2024-22725 | Adobe Orthanc reflected cross-site scripting | 6.1v3.1 | 0.4% | 2024-01-24 | Fix |
| CVE-2024-22720 | kanboard cross-site scripting | 4.8v3.1 | 0.4% | 2024-01-24 | Fix |
| CVE-2024-22651 | D-Link DIR-815 ssdpcgi_main function of cgibin binary command injection | 9.8v3.1 | 20.2% | 2024-01-24 | |
| CVE-2024-22380 | Maff Electronic Delivery Check System XML file processing XML external entity injection | 5.5v3.1 | 0.2% | 2024-01-24 | Fix |
| CVE-2024-22372 | ELECOM WRC-X1500GS-B OS command injection | 6.8v3.1 | 0.8% | 2024-01-24 | Fix |
| CVE-2024-22366 | Yamaha WLX222 active debug code | 6.8v3.1 | 0.3% | 2024-01-24 | Fix |
| CVE-2024-22309 | ChatBot WordPress plugin PHP object injection | 9.8v3.1 | 0.5% | 2024-01-24 | Fix |
| CVE-2024-22308 | Simple Membership WordPress plugin open redirection | 6.1v3.1 | 0.3% | 2024-01-24 | Fix |
| CVE-2024-22301 | Albo Pretorio Online WordPress plugin sensitive data exposure | 7.5v3.1 | 0.4% | 2024-01-24 | Fix |
| CVE-2024-22294 | Download IP2Location Country Blocker WordPress plugin sensitive data exposure | 7.5v3.1 | 0.5% | 2024-01-24 | Fix |
| CVE-2024-22284 | Asgaros Forum WordPress plugin PHP object injection | 9.8v3.1 | 0.6% | 2024-01-24 | Fix |
| CVE-2024-22229 | Dell Unity log injection | 3.1CNA v3.1 | 0.3% | 2024-01-24 | Fix |
| CVE-2024-22154 | SalesKing WordPress plugin sensitive data exposure | 7.5v3.1 | 0.5% | 2024-01-24 | Fix |
| CVE-2024-22152 | Product Import Export for WooCommerce WordPress plugin arbitrary file upload | 7.2v3.1 | 0.5% | 2024-01-24 | Fix |
| CVE-2024-22141 | Profile Builder Pro WordPress plugin sensitive data exposure | 7.5v3.1 | 0.5% | 2024-01-24 | Fix |
| CVE-2024-22135 | Order Export and Order Import for WooCommerce WordPress plugin arbitrary file upload | 7.2v3.1 | 0.5% | 2024-01-24 | Fix |
| CVE-2024-22134 | Contact Form 7 Extension For Mailchimp WordPress plugin server side request forgery (SSRF) | 6.5v3.1 | 0.3% | 2024-01-24 | Fix |
| CVE-2024-21796 | Ministry of Defense Electronic Deliverables Creation Support Tool XML external entity injection | 5.5v3.1 | 0.2% | 2024-01-24 | Fix |
| CVE-2024-21765 | Electronic Delivery Check System (Doboku) Ver.18.1.0 and earlier, Electronic Delivery Check System (Dentsu) Ver.12.1.0 and earlier, Electronic Delivery Check System (Kikai) Ver.10.1.0 and earlier, and Electronic delivery item Inspection Support SystemVer.4.0.31 and earlier improperly restrict XML ex | 5.5v3.1 | 0.2% | 2024-01-24 | Fix |
| CVE-2024-0854 | Synology DiskStation Manager (DSM) file access component open redirect | 5.4CNA v3.1 | 0.4% | 2024-01-24 | Fix |
| CVE-2024-0814 | Google Chrome Payments incorrect security UI | 6.5v3.1 | 0.3% | 2024-01-24 | Fix |
| CVE-2024-0813 | Google Chrome Reading Mode use-after-free | 8.8v3.1 | 0.4% | 2024-01-24 | Fix |
| CVE-2024-0812 | Google Chrome Accessibility inappropriate implementation | 8.8v3.1 | 0.5% | 2024-01-24 | Fix |
| CVE-2024-0811 | Google Chrome Extensions API inappropriate implementation | 4.3v3.1 | 0.6% | 2024-01-24 | Fix |
| CVE-2024-0810 | Google Chrome DevTools insufficient policy enforcement | 4.3v3.1 | 0.4% | 2024-01-24 | Fix |
| CVE-2024-0809 | Google Chrome Autofill inappropriate implementation | 4.3v3.1 | 0.4% | 2024-01-24 | Fix |
| CVE-2024-0808 | Google Chrome WebUI integer underflow | 9.8v3.1 | 0.5% | 2024-01-24 | Fix |
| CVE-2024-0807 | Google Chrome Web Audio use-after-free | 8.8v3.1 | 0.5% | 2024-01-24 | Fix |
| CVE-2024-0806 | Google Chrome Passwords use-after-free | 8.8v3.1 | 0.4% | 2024-01-24 | Fix |
| CVE-2024-0805 | Google Chrome Downloads inappropriate implementation | 4.3v3.1 | 0.4% | 2024-01-24 | Fix |
| CVE-2024-0804 | Google Chrome iOS Security UI insufficient policy enforcement | 7.5v3.1 | 0.5% | 2024-01-24 | Fix |
| CVE-2024-0665 | WP Customer Area WordPress plugin reflected cross-site scripting | 6.1v3.1 | 0.5% | 2024-01-24 | Fix |
| CVE-2024-23851 | Linux kernel integer overflow | 5.5v3.1 | 0.3% | 2024-01-23 | Fix |
| CVE-2024-23850 | Linux kernel reachable assertion | 5.5v3.1 | 0.3% | 2024-01-23 | Fix |
| CVE-2024-23849 | Linux kernel off-by-one error | 5.5v3.1 | 0.3% | 2024-01-23 | Fix |
| CVE-2024-23848 | Linux kernel use-after-free | 5.5NVD v3.1 | 0.3% | 2024-01-23 | Fix |
| CVE-2024-23842 | Hitron Systems DVR Lguvr-16h improper input validation | 7.5v3.1 | 0.5% | 2024-01-23 | Fix |
| CVE-2024-23636 | sofastack sofa-rpc SOFARPC remote command execution(RCE) Vulnerbility | 9.8CNA v3.1 | 0.8% | 2024-01-23 | Fix |
| CVE-2024-23348 | appleple a-blog cms Ver.3.1.x series improper input validation | 8.8v3.1 | 0.7% | 2024-01-23 | Fix |
| CVE-2024-23345 | Nautobot has XSS potential in rendered Markdown fields | 7.1CNA v3.1 | 0.4% | 2024-01-23 | Fix |
| CVE-2024-23342 | python-ecdsa vulnerable to Minerva attack on P-256 | 7.4CNA v3.1 | 1.0% | 2024-01-23 | Fix |
| CVE-2024-23341 | TuiTse-TsuSin html injection vulnerability in `tuitse_html` function | 6.1CNA v3.1 | 0.4% | 2024-01-23 | Fix |
| CVE-2024-23330 | Tuta loads images from external resources | 5.3CNA v3.1 | 0.5% | 2024-01-23 | Fix |
| CVE-2024-23224 | Apple macOS information disclosure | 5.5v3.1 | 0.3% | 2024-01-23 | Fix |
| CVE-2024-23223 | Apple macOS incorrect permission assignment | 6.2v3.1 | 0.3% | 2024-01-23 | Fix |
| CVE-2024-23222 | Apple Multiple Products WebKit type confusion | 8.8v3.1 | 10.6% | 2024-01-23 | KEVExploit codeKCVFix |
| CVE-2024-23219 | Apple iOS and iPadOS improper authentication | 6.2v3.1 | 0.3% | 2024-01-23 | Fix |
| CVE-2024-23218 | Apple macOS observable discrepancy | 5.9v3.1 | 1.0% | 2024-01-23 | Fix |
| CVE-2024-23217 | Apple macOS insecure storage of sensitive information | 3.3v3.1 | 0.4% | 2024-01-23 | Fix |
| CVE-2024-23215 | Apple iOS, iPadOS, macOS, tvOS and watchOS temporary file handling information disclosure | 5.5v3.1 | 0.3% | 2024-01-23 | Fix |
| CVE-2024-23214 | Apple macOS out-of-bounds write | 8.8v3.1 | 1.0% | 2024-01-23 | Fix |
| CVE-2024-23213 | Apple Safari arbitrary code execution | 8.8v3.1 | 1.5% | 2024-01-23 | Fix |
| CVE-2024-23212 | Apple macOS arbitrary code execution | 7.8v3.1 | 0.4% | 2024-01-23 | Fix |
| CVE-2024-23211 | Apple Safari personal information exposure | 3.3v3.1 | 0.4% | 2024-01-23 | Fix |
| CVE-2024-23210 | Apple macOS sensitive information in log files | 3.3v3.1 | 0.3% | 2024-01-23 | Fix |
| CVE-2024-23209 | Apple macOS arbitrary code execution | 8.8v3.1 | 0.8% | 2024-01-23 | Fix |
| CVE-2024-23208 | Apple macOS code injection | 7.8v3.1 | 1.4% | 2024-01-23 | Exploit codeFix |
| CVE-2024-23207 | Apple macOS information disclosure | 5.5v3.1 | 0.3% | 2024-01-23 | Fix |
| CVE-2024-23206 | Apple Safari information disclosure | 6.5v3.1 | 0.9% | 2024-01-23 | Fix |
| CVE-2024-23204 | The issue was addressed with additional permissions checks. This issue is fixed in iOS 16.7.6 and iPadOS 16.7.6, iOS 17.3 and iPadOS 17.3, macOS Monterey 12.7.4, macOS Sonoma 14.3, macOS Ventura 13.6.5, watchOS 10.3. A shortcut may be able to use sensitive data with certain actions without prompting | 7.5v3.1 | 1.8% | 2024-01-23 | Fix |
| CVE-2024-23203 | The issue was addressed with additional permissions checks. This issue is fixed in iOS 16.7.6 and iPadOS 16.7.6, iOS 17.3 and iPadOS 17.3, macOS Sonoma 14.3, macOS Ventura 13.6.5. A shortcut may be able to use sensitive data with certain actions without prompting the user. | 7.5v3.1 | 0.9% | 2024-01-23 | Fix |
| CVE-2024-23183 | appleple a-blog cms Ver.3.1.x series cross-site scripting | 5.4v3.1 | 0.4% | 2024-01-23 | Fix |
| CVE-2024-23182 | appleple a-blog cms Ver.3.1.x series relative path traversal | 8.1v3.1 | 0.7% | 2024-01-23 | Fix |
| CVE-2024-23181 | appleple a-blog cms Ver.3.1.x series cross-site scripting | 6.1v3.1 | 0.4% | 2024-01-23 | Fix |
| CVE-2024-23180 | appleple a-blog cms Ver.3.1.x series improper input validation | 8.8v3.1 | 0.9% | 2024-01-23 | Fix |
| CVE-2024-22772 | Hitron Systems DVR Lguvr-8h improper input validation | 7.5v3.1 | 0.5% | 2024-01-23 | Fix |
| CVE-2024-22771 | Hitron Systems DVR Lguvr-4h improper input validation | 7.5v3.1 | 0.5% | 2024-01-23 | Fix |
| CVE-2024-22770 | Hitron Systems DVR Hvr-16781 improper input validation | 7.5v3.1 | 0.5% | 2024-01-23 | Fix |
| CVE-2024-22769 | Hitron Systems DVR Hvr-8781 improper input validation | 7.5v3.1 | 0.5% | 2024-01-23 | Fix |
| CVE-2024-22768 | Hitron Systems DVR Hvr-4781 improper input validation | 7.5v3.1 | 0.6% | 2024-01-23 | Fix |
| CVE-2024-22705 | Linux kernel out-of-bounds read | 7.8v3.1 | 0.3% | 2024-01-23 | Fix |
| CVE-2024-22663 | TOTOLINK A3700R command injection | 9.8v3.1 | 1.7% | 2024-01-23 | |
| CVE-2024-22662 | TOTOLINK A3700R out-of-bounds write | 9.8v3.1 | 0.9% | 2024-01-23 | |
| CVE-2024-22660 | TOTOLINK A3700R out-of-bounds write | 9.8v3.1 | 0.9% | 2024-01-23 | |
| CVE-2024-22497 | JFinalCMS cross-site scripting in JFinal | 6.1v3.1 | 0.4% | 2024-01-23 | |
| CVE-2024-22496 | JFinalCMS cross-site scripting in JFinal | 6.1v3.1 | 0.4% | 2024-01-23 | |
| CVE-2024-22490 | Cross-site scripting in beetl-bbs | 6.1v3.1 | 0.4% | 2024-01-23 | |
| CVE-2024-22417 | benbusby whoogle-search whoogle Search cross-site scripting | 6.1NVD v3.1 | 0.6% | 2024-01-23 | Fix |
| CVE-2024-22205 | benbusby whoogle-search whoogle Search server side request forgery | 9.8NVD v3.1 | 1.0% | 2024-01-23 | Fix |
| CVE-2024-22204 | benbusby whoogle-search Whoogle Search Limited File Write vulnerability | 5.3NVD v3.1 | 0.8% | 2024-01-23 | Fix |
| CVE-2024-22203 | benbusby whoogle-search whoogle Search server side request forgery | 9.8NVD v3.1 | 1.0% | 2024-01-23 | Exploit codeFix |
| CVE-2024-22076 | Myq-solution Print Server arbitrary code execution | 9.8v3.1 | 1.1% | 2024-01-23 | Fix |
| CVE-2024-0755 | Mozilla Firefox memory safety bugs | 8.8v3.1 | 0.7% | 2024-01-23 | Fix |
| CVE-2024-0754 | Mozilla Firefox uncaught exception | 6.5v3.1 | 0.4% | 2024-01-23 | Fix |
| CVE-2024-0753 | Mozilla Firefox HSTS subdomain handling vulnerability | 6.5v3.1 | 0.7% | 2024-01-23 | Fix |
| CVE-2024-0752 | Mozilla Firefox use-after-free | 6.5v3.1 | 0.4% | 2024-01-23 | Fix |
| CVE-2024-0751 | Mozilla Firefox improper privilege management | 8.8v3.1 | 0.6% | 2024-01-23 | Fix |
| CVE-2024-0750 | Mozilla Firefox UI misrepresentation | 8.8v3.1 | 0.8% | 2024-01-23 | Fix |
| CVE-2024-0749 | Mozilla Firefox origin validation error | 4.3v3.1 | 0.3% | 2024-01-23 | Fix |
| CVE-2024-0748 | Mozilla Firefox content process document URI handling vulnerability | 4.3v3.1 | 0.4% | 2024-01-23 | Fix |
| CVE-2024-0747 | Mozilla Firefox protection mechanism failure | 6.5v3.1 | 0.6% | 2024-01-23 | Fix |
| CVE-2024-0746 | Mozilla Firefox use-after-free | 6.5v3.1 | 0.7% | 2024-01-23 | Fix |
| CVE-2024-0745 | Mozilla Firefox stack-based buffer overflow | 8.8v3.1 | 0.7% | 2024-01-23 | Fix |
| CVE-2024-0744 | Mozilla Firefox crash | 7.5v3.1 | 0.6% | 2024-01-23 | Fix |
| CVE-2024-0743 | Mozilla Firefox TLS handshake code unchecked return value | 7.5v3.1 | 1.3% | 2024-01-23 | Fix |
| CVE-2024-0742 | Mozilla Firefox browser prompt timestamp handling vulnerability | 4.3v3.1 | 0.6% | 2024-01-23 | Fix |
| CVE-2024-0741 | Mozilla Firefox ANGLE out-of-bounds write | 6.5v3.1 | 2.2% | 2024-01-23 | Exploit codeFix |
| CVE-2024-0703 | Sticky Buttons WordPress plugin authenticated (Admin+) stored cross-site scripting | 4.8v3.1 | 0.3% | 2024-01-23 | Fix |
| CVE-2024-0587 | Accelerated Mobile Pages WordPress plugin reflected cross-site scripting | 6.1v3.1 | 0.4% | 2024-01-23 | Fix |
| CVE-2024-23771 | UNIX4LYFE darkhttpd observable discrepancy | 9.8v3.1 | 1.1% | 2024-01-22 | |
| CVE-2024-23770 | darkhttpd auth credential argument vulnerability | 5.5v3.1 | 0.2% | 2024-01-22 | |
| CVE-2024-23768 | Dremio path traversal | 8.8v3.1 | 0.6% | 2024-01-22 | Fix |
| CVE-2024-23752 | Code execution in PandasAI | 9.8v3.1 | 1.0% | 2024-01-22 | |
| CVE-2024-23751 | llama_index SQL injection in llama-index | 9.8v3.1 | 0.7% | 2024-01-22 | Fix |
| CVE-2024-23750 | Code execution in MetaGPT | 8.8v3.1 | 1.0% | 2024-01-22 | Fix |
| CVE-2024-23678 | Deserialization of untrusted data on Splunk Enterprise for Windows | 8.8v3.1 | 0.2% | 2024-01-22 | Fix |
| CVE-2024-23677 | Splunk Enterprise Server Response Disclosure in RapidDiag Salesforce.com Log file | 5.3v3.1 | 0.4% | 2024-01-22 | Fix |
| CVE-2024-23676 | Splunk Enterprise sensitive information disclosure of Index Metrics through mrollup SPL command | 3.5NVD v3.1 | 0.3% | 2024-01-22 | Fix |
| CVE-2024-23675 | Splunk App Key Value Store Improper Handling of Permissions leads to KV Store Collection Deletion | 6.5v3.1 | 0.4% | 2024-01-22 | Fix |
| CVE-2024-23340 | @Hono/node-server can't handle double dots in URL | 5.3CNA v3.1 | 0.7% | 2024-01-22 | Fix |
| CVE-2024-23339 | hoolock does not block prototype pollution with object-path related utilities | 6.3CNA v3.1 | 1.0% | 2024-01-22 | Exploit codeFix |
| CVE-2024-22895 | DedeCMS unrestricted file upload | 8.8v3.1 | 0.8% | 2024-01-22 | |
| CVE-2024-22233 | Spring Framework server web DoS | 7.5CNA v3.1 | 1.0% | 2024-01-22 | Fix |
| CVE-2024-22113 | ANGLERSNET Co,.Ltd Access analysis CGI An-Analyzer open redirect | 6.1v3.1 | 0.4% | 2024-01-22 | Fix |
| CVE-2024-21484 | Marvin Attack of RSA and RSAOAEP decryption in jsrsasign | 5.9NVD v3.1 | 1.0% | 2024-01-22 | Fix |
| CVE-2024-0784 | hongmaple octopus list SQL injection | 9.8v3.1 | 0.7% | 2024-01-22 | |
| CVE-2024-0783 | Project Worlds Online Admission System documents.php unrestricted upload | 9.8v3.1 | 1.2% | 2024-01-22 | Exploit code |
| CVE-2024-0782 | CodeAstro Online Railway Reservation System pass-profile.php cross-site scripting | 6.1v3.1 | 0.6% | 2024-01-22 | |
| CVE-2024-0781 | CodeAstro Internet Banking System pages_client_signup.php redirect | 6.1v3.1 | 0.5% | 2024-01-22 | |
| CVE-2024-0778 | Uniview ISC 2500-S VM.php setNatConfig os command injection | 9.8v3.1 | 32.1% | 2024-01-22 | |
| CVE-2024-0776 | LinZhaoguan pb-cms comment cross-site scripting | 5.4v3.1 | 0.6% | 2024-01-22 | |
| CVE-2024-0775 | Linux kernel use-after-free | 7.1NVD v3.1 | 0.2% | 2024-01-22 | Fix |
| CVE-2024-0774 | Any-Capture Any Sound Recorder Registration memory corruption | 5.5v3.1 | 0.3% | 2024-01-22 | |
| CVE-2024-0773 | CodeAstro Internet Banking System pages_client_signup.php cross-site scripting | 5.4v3.1 | 0.6% | 2024-01-22 | |
| CVE-2024-0772 | Nsasoft ShareAlarmPro Registration memory corruption | 5.5v3.1 | 0.4% | 2024-01-22 | |
| CVE-2024-0606 | Mozilla Focus cross-site scripting | 6.1v3.1 | 0.3% | 2024-01-22 | Fix |
| CVE-2024-0605 | Mozilla Focus race condition | 7.5v3.1 | 0.4% | 2024-01-22 | Fix |
| CVE-2024-0430 | IObit Malware Fighter denial of service (DoS) | 5.5CNA v3.1 | 0.2% | 2024-01-22 | |
| CVE-2024-0204 | Authentication bypass in GoAnywhere MFT | 9.8CNA v3.1 | 95.1% | 2024-01-22 | NucleiMetasploitEmerging ThreatsExploit codeFix |
| CVE-2024-23744 | TrustedFirmware Mbed TLS resource exhaustion | 7.5v3.1 | 0.7% | 2024-01-21 | Fix |
| CVE-2024-23732 | Embedchain regular expression denial of service | 7.5v3.1 | 0.8% | 2024-01-21 | Fix |
| CVE-2024-23731 | Code execution in Embedchain | 9.8v3.1 | 1.1% | 2024-01-21 | Fix |
| CVE-2024-23730 | Llamahub unsafe yaml deserialization in llama-hub | 9.8v3.1 | 1.2% | 2024-01-21 | Fix |
| CVE-2024-23726 | Ubee Interactive DDW365 hard-coded credentials | 8.8v3.1 | 0.5% | 2024-01-21 | |
| CVE-2024-23725 | Cross-site scripting in Ghost | 6.1v3.1 | 0.4% | 2024-01-21 | Fix |
| CVE-2024-0771 | Nsasoft Product Key Explorer Registration memory corruption | 5.5v3.1 | 0.3% | 2024-01-21 | |
| CVE-2024-0770 | European Chemicals Agency IUCLID Desktop Installer iuclid6.exe default permission | 7.1v3.1 | 0.3% | 2024-01-21 | |
| CVE-2024-0769 | D-Link DIR-859 Router path traversal | 9.8v3.1 | 82.7% | 2024-01-21 | KEVEmerging Threats |
| CVE-2024-0679 | ColorMag WordPress theme missing authorization to arbitrary plugin installation | 6.5v3.1 | 1.3% | 2024-01-20 | Exploit codeFix |
| CVE-2024-0623 | VK Block Patterns WordPress plugin cross-site request forgery | 4.3v3.1 | 0.7% | 2024-01-20 | Exploit codeFix |
| CVE-2024-0521 | Code injection in PaddlePaddle/Paddle | 7.8NVD v3.1 | 0.5% | 2024-01-20 | Fix |
| CVE-2024-23689 | ClickHouse Client Certificate password exposure | 8.8v3.1 | 0.7% | 2024-01-19 | Fix |
| CVE-2024-23688 | Consensys Discovery nonce reuse | 5.3v3.1 | 0.5% | 2024-01-19 | Fix |
| CVE-2024-23687 | FOLIO Mod-data-export-spring hard-coded credentials | 9.1v3.1 | 0.6% | 2024-01-19 | Fix |
| CVE-2024-23686 | OWASP Dependency-check DependencyCheck Debug Mode Logging of NVD API Key | 5.3v3.1 | 0.6% | 2024-01-19 | Fix |
| CVE-2024-23685 | FOLIO Mod-remote-storage hard coded credentials | 5.3v3.1 | 0.5% | 2024-01-19 | Fix |
| CVE-2024-23684 | Upokecenter Cbor denial of service | 7.5v3.1 | 0.9% | 2024-01-19 | Fix |
| CVE-2024-23683 | Artemis Java Test Sandbox InvocationTargetException Subclass Escape | 8.2v3.1 | 0.4% | 2024-01-19 | Fix |
| CVE-2024-23682 | Artemis Java Test Sandbox Class Loading Escape | 8.2v3.1 | 0.4% | 2024-01-19 | Fix |
| CVE-2024-23681 | Artemis Java Test Sandbox Libary Load Escape | 8.2v3.1 | 0.3% | 2024-01-19 | Fix |
| CVE-2024-23680 | AWS Encryption SDK for Java improper verification of cryptographic signature | 5.3v3.1 | 0.2% | 2024-01-19 | Fix |
| CVE-2024-23679 | Enonic XP session fixation | 9.8v3.1 | 0.8% | 2024-01-19 | Fix |
| CVE-2024-23659 | SPIP cross-site scripting | 6.1v3.1 | 0.4% | 2024-01-19 | Fix |
| CVE-2024-23387 | FusionPBX cross-site scripting | 4.8v3.1 | 0.5% | 2024-01-19 | Fix |
| CVE-2024-23332 | notaryproject specifications operation on a released resource | 4.0CNA v3.1 | 0.3% | 2024-01-19 | Fix |
| CVE-2024-23331 | Vite dev server option `server.fs.deny` can be bypassed when hosted on case-insensitive filesystem | 7.5CNA v3.1 | 0.8% | 2024-01-19 | Fix |
| CVE-2024-23329 | Changedetection.io API endpoint is not secured with API token | 3.7CNA v3.1 | 0.6% | 2024-01-19 | Fix |
| CVE-2024-22957 | swftools out-of-bounds read | 5.5v3.1 | 0.3% | 2024-01-19 | |
| CVE-2024-22956 | swftools use-after-free | 7.8v3.1 | 0.3% | 2024-01-19 | |
| CVE-2024-22955 | swftools out-of-bounds write | 7.8v3.1 | 0.3% | 2024-01-19 | |
| CVE-2024-22920 | swftools use-after-free | 7.8v3.1 | 0.3% | 2024-01-19 | |
| CVE-2024-22919 | swftools buffer overflow | 7.8v3.1 | 0.3% | 2024-01-19 | |
| CVE-2024-22915 | swftools heap- use-after-free | 7.8v3.1 | 0.4% | 2024-01-19 | |
| CVE-2024-22914 | swftools heap- use-after-free | 5.5v3.1 | 0.3% | 2024-01-19 | |
| CVE-2024-22913 | swftools out-of-bounds write | 7.8v3.1 | 0.4% | 2024-01-19 | |
| CVE-2024-22912 | swftools A global buffer overflow | 7.8v3.1 | 0.4% | 2024-01-19 | |
| CVE-2024-22911 | swftools out-of-bounds write | 7.8v3.1 | 0.3% | 2024-01-19 | |
| CVE-2024-22877 | StrangeBee TheHive cross-site scripting | 5.4v3.1 | 0.3% | 2024-01-19 | |
| CVE-2024-22876 | StrangeBee TheHive cross-site scripting | 5.4v3.1 | 0.3% | 2024-01-19 | |
| CVE-2024-22563 | openvswitch memory leak | 7.5v3.1 | 0.6% | 2024-01-19 | Fix |
| CVE-2024-22562 | swftools out-of-bounds write | 7.8v3.1 | 0.3% | 2024-01-19 | |
| CVE-2024-22424 | Cross-site request forgery (CSRF) in github.com/argoproj/argo-cd | 8.4CNA v3.1 | 0.5% | 2024-01-19 | Fix |
| CVE-2024-22422 | mintplex-labs anything-llm unauthenticated denial of service (DOS) attack in AnythingLLM | 7.5CNA v3.1 | 1.0% | 2024-01-19 | Fix |
| CVE-2024-22421 | Potential authentication and CSRF tokens leak in JupyterLab | 7.6CNA v3.1 | 0.7% | 2024-01-19 | KCVFix |
| CVE-2024-22420 | Stored cross-site scripting in Markdown Preview in JupyterLab | 6.5CNA v3.1 | 0.6% | 2024-01-19 | Fix |
| CVE-2024-22211 | FreeRDP integer overflow leading to heap overflow | 3.7CNA v3.1 | 1.1% | 2024-01-19 | Fix |
| CVE-2024-21733 | Apache Tomcat: Leaking of unrelated request bodies in default error page | 5.3v3.1 | 14.3% | 2024-01-19 | Exploit codeFix |
| CVE-2024-0758 | Ipb-halle Molecularfaces JavaScript execution via malicious molfiles (XSS) | 6.1v3.1 | 0.6% | 2024-01-19 | Fix |
| CVE-2024-0739 | Hecheng Leadshop Leadshop.php deserialization | 9.8v3.1 | 0.8% | 2024-01-19 | |
| CVE-2024-0738 | 个人开源 mldong DecisionModel.java ExpressionEngine code injection | 9.8v3.1 | 0.8% | 2024-01-19 | |
| CVE-2024-0737 | Xlightftpd Xlight FTP Server login denial of service | 7.5v3.1 | 4.2% | 2024-01-19 | Exploit code |
| CVE-2024-0736 | EFS Easy File Sharing FTP login denial of service | 7.5v3.1 | 1.0% | 2024-01-19 | |
| CVE-2024-0735 | SourceCodester Online Tours and Travels Management System expense.php exec SQL injection | 9.8v3.1 | 0.7% | 2024-01-19 | |
| CVE-2024-0734 | Smsot get.php SQL injection | 9.8v3.1 | 0.5% | 2024-01-19 | |
| CVE-2024-0733 | Smsot HTTP POST request api.php SQL injection | 9.8v3.1 | 0.5% | 2024-01-19 | |
| CVE-2024-0732 | PCMan FTP Server STOR command denial of service | 7.5v3.1 | 1.1% | 2024-01-19 | |
| CVE-2024-0731 | PCMan FTP Server PUT command denial of service | 7.5v3.1 | 1.1% | 2024-01-19 | |
| CVE-2024-0730 | Project Worlds Online Time Table Generator course_ajax.php SQL injection | 9.8v3.1 | 0.6% | 2024-01-19 | |
| CVE-2024-0729 | ForU CMS cms_admin.php SQL injection | 9.8v3.1 | 0.6% | 2024-01-19 | |
| CVE-2024-0728 | ForU CMS channel.php file inclusion | 9.8v3.1 | 0.7% | 2024-01-19 | |
| CVE-2024-0726 | Projectworlds Student Project Allocation System cross-site scripting | 6.1v3.1 | 0.6% | 2024-01-19 | |
| CVE-2024-0725 | ProSSHD denial of service | 7.5v3.1 | 3.6% | 2024-01-19 | Exploit code |
| CVE-2024-0723 | freeSSHd denial of service | 7.5v3.1 | 3.6% | 2024-01-19 | Exploit code |
| CVE-2024-0722 | code-projects Social Networking Site message page message.php cross-site scripting | 5.4v3.1 | 0.5% | 2024-01-19 | |
| CVE-2024-0721 | Jspxcms Survey Label cross-site scripting | 6.1v3.1 | 0.5% | 2024-01-19 | |
| CVE-2024-0720 | FactoMineR FactoInvestigate HTML Report Generator cross-site scripting | 6.1v3.1 | 0.5% | 2024-01-19 | |
| CVE-2024-0718 | liuwy-dlsdys zhglxt HTTP POST request edit cross-site scripting | 4.8v3.1 | 0.5% | 2024-01-19 | |
| CVE-2024-0717 | D-Link Good Line Router v2 HTTP GET request devinfo information disclosure | 5.3v3.1 | 18.2% | 2024-01-19 | |
| CVE-2024-0716 | Byzoro Smart S150 Management Platform Backup file download.php information disclosure | 5.3v3.1 | 1.2% | 2024-01-19 | |
| CVE-2024-0714 | MiczFlor RPi-Jukebox-RFID HTTP request userScripts.php os command injection | 9.8v3.1 | 1.6% | 2024-01-19 | |
| CVE-2024-0712 | Byzoro Smart S150 Management Platform userattea.php access control | 9.8v3.1 | 3.9% | 2024-01-19 | |
| CVE-2024-0705 | Stripe Payment Plugin for WooCommerce WordPress plugin unauthenticated SQL injection | 7.5NVD v3.1 | 2.6% | 2024-01-19 | NucleiFix |
| CVE-2024-23525 | Tozt Spreadsheet XML external entity injection | 6.5v3.1 | 0.8% | 2024-01-18 | Fix |
| CVE-2024-22819 | FlyCMS cross-site request forgery | 8.8v3.1 | 0.3% | 2024-01-18 | |
| CVE-2024-22818 | FlyCMS cross-site request forgery | 8.8v3.1 | 0.3% | 2024-01-18 | |
| CVE-2024-22817 | FlyCMS cross-site request forgery | 8.8v3.1 | 0.3% | 2024-01-18 | |
| CVE-2024-22699 | FlyCMS cross-site request forgery | 8.8v3.1 | 0.4% | 2024-01-18 | |
| CVE-2024-22603 | FlyCMS cross-site request forgery | 8.8v3.1 | 0.3% | 2024-01-18 | |
| CVE-2024-22601 | FlyCMS cross-site request forgery | 8.8v3.1 | 0.2% | 2024-01-18 | |
| CVE-2024-22593 | FlyCMS cross-site request forgery | 8.8v3.1 | 0.3% | 2024-01-18 | |
| CVE-2024-22592 | FlyCMS cross-site request forgery | 8.8v3.1 | 0.3% | 2024-01-18 | |
| CVE-2024-22591 | FlyCMS cross-site request forgery | 8.8v3.1 | 0.3% | 2024-01-18 | |
| CVE-2024-22568 | FlyCMS cross-site request forgery | 8.8v3.1 | 0.3% | 2024-01-18 | |
| CVE-2024-22549 | FlyCMS cross-site scripting | 5.4v3.1 | 0.4% | 2024-01-18 | |
| CVE-2024-22548 | FlyCMS cross-site scripting | 5.4v3.1 | 0.4% | 2024-01-18 | |
| CVE-2024-22419 | Concat built-in can corrupt memory in vyper | 7.3CNA v3.1 | 0.8% | 2024-01-18 | Fix |
| CVE-2024-22418 | Stored cross-site scripting vulnerability via Malicious File Names in GroupOffice | 6.5CNA v3.1 | 0.4% | 2024-01-18 | Fix |
| CVE-2024-22416 | Cross-site request forgery on any API call in pyLoad may lead to admin privilege escalation | 9.7CNA v3.1 | 0.9% | 2024-01-18 | Exploit codeFix |
| CVE-2024-22415 | Unsecured endpoints in the jupyter-lsp server extension | 7.3CNA v3.1 | 0.5% | 2024-01-18 | Fix |
| CVE-2024-22404 | Permissions bypass in Nextcloud with the files zip app | 4.1CNA v3.1 | 0.5% | 2024-01-18 | Fix |
| CVE-2024-22403 | OAuth2 authorization codes are valid indefinetly in Nextcloud Server | 3.0CNA v3.1 | 0.5% | 2024-01-18 | Fix |
| CVE-2024-22402 | Improper handling of request URLs in Nextcloud Guests app allows guest users to bypass app allowlist | 5.4CNA v3.1 | 0.5% | 2024-01-18 | Fix |
| CVE-2024-22401 | All users can reset the allowed apps list for Nextcloud Guest App users | 4.1CNA v3.1 | 0.5% | 2024-01-18 | Fix |
| CVE-2024-22400 | Open redirect in user_saml via RelayState parameter in Nextcloud User Saml | 3.1CNA v3.1 | 0.5% | 2024-01-18 | Fix |
| CVE-2024-22317 | IBM App Connect Enterprise denial of service | 9.1CNA v3.1 | 1.0% | 2024-01-18 | Fix |
| CVE-2024-22213 | Cross-site scripting when sending HTML as a comment in the Nextcloud Deck app | 0.0CNA v3.1 | 0.5% | 2024-01-18 | Fix |
| CVE-2024-22212 | Nextcloud Global Site Selector authentication bypass | 9.7CNA v3.1 | 0.8% | 2024-01-18 | Fix |
| CVE-2024-0696 | AtroCore AtroPIM Product Series Overview cross-site scripting | 6.1v3.1 | 0.5% | 2024-01-18 | |
| CVE-2024-0695 | EFS Easy Chat Server HTTP GET request denial of service | 5.3v3.1 | 1.0% | 2024-01-18 | |
| CVE-2024-0693 | EFS Easy File Sharing FTP denial of service | 7.5v3.1 | 1.3% | 2024-01-18 | |
| CVE-2024-0669 | Cross-Frame Scripting (XFS) on Plone CMS | 7.1v3.1 | 0.3% | 2024-01-18 | Fix |
| CVE-2024-0655 | Novel-Plus list SQL injection | 9.8v3.1 | 0.7% | 2024-01-18 | |
| CVE-2024-0654 | DeepFaceLab Util.py deserialization | 7.8v3.1 | 0.3% | 2024-01-18 | |
| CVE-2024-0652 | PHPGurukul Company Visitor Management System search-visitor.php cross-site scripting | 4.8v3.1 | 0.6% | 2024-01-18 | |
| CVE-2024-0651 | PHPGurukul Company Visitor Management System search-visitor.php SQL injection | 7.2v3.1 | 0.6% | 2024-01-18 | |
| CVE-2024-0650 | Project Worlds Visitor Management System URL dataset.php cross-site scripting | 6.1v3.1 | 0.7% | 2024-01-18 | |
| CVE-2024-0607 | Kernel: Nf_tables: Pointer math issue in nft_byteorder_eval | 6.6NVD v3.1 | 0.3% | 2024-01-18 | Fix |
| CVE-2024-0580 | IDMSistemas Sinergia, Sinergia omission of key-controlled authorization in Qsige | 7.5v3.1 | 0.5% | 2024-01-18 | Fix |
| CVE-2024-0409 | X.Org xwayland xorg-x11-server: Selinux context corruption | 7.8NVD v3.1 | 0.4% | 2024-01-18 | Fix |
| CVE-2024-0408 | Red Hat Enterprise Linux 7 xorg-x11-server: Selinux unlabeled glx pbuffer | 5.5NVD v3.1 | 0.3% | 2024-01-18 | Fix |
| CVE-2024-0381 | WP Recipe Maker WordPress plugin authenticated (Contributor+) stored cross-site scripting via tag | 5.4v3.1 | 0.6% | 2024-01-18 | Fix |
| CVE-2024-22715 | codelyfe Stupid Simple CMS cross-site request forgery | 8.8v3.1 | 0.3% | 2024-01-17 | |
| CVE-2024-22714 | codelyfe Stupid Simple CMS cross-site scripting | 6.1v3.1 | 0.4% | 2024-01-17 | |
| CVE-2024-22414 | User profile page vulnerable to cross-site scripting (XSS) in flaskBlog | 6.5CNA v3.1 | 0.4% | 2024-01-17 | |
| CVE-2024-22410 | Binary planting Attack on Windows Platforms in Creditcoin | 3.3CNA v3.1 | 0.2% | 2024-01-17 | Fix |
| CVE-2024-20287 | Cisco Business Wireless Access Point Software argument injection | 6.5CNA v3.1 | 1.4% | 2024-01-17 | Fix |
| CVE-2024-20277 | Cisco ThousandEyes Recorder Application OS command injection | 6.8CNA v3.1 | 0.8% | 2024-01-17 | Fix |
| CVE-2024-20272 | Cisco Unity Connection unrestricted file upload | 7.3CNA v3.1 | 1.6% | 2024-01-17 | Fix |
| CVE-2024-20270 | Cisco BroadWorks cross-site scripting | 4.8CNA v3.1 | 0.4% | 2024-01-17 | Fix |
| CVE-2024-20251 | Cisco Identity Services Engine Software cross-site scripting | 4.8CNA v3.1 | 0.4% | 2024-01-17 | Fix |
| CVE-2024-0649 | ZhiHuiYun Search ImageController.php download_network_image server-side request forgery | 9.8v3.1 | 0.5% | 2024-01-17 | |
| CVE-2024-0648 | Yunyou CMS Common.php unrestricted upload | 9.8v3.1 | 0.7% | 2024-01-17 | |
| CVE-2024-0647 | Sparksuite SimpleMDE iFrame cross-site scripting | 6.1v3.1 | 0.7% | 2024-01-17 | |
| CVE-2024-0646 | Linux kernel kernel TLS splice handling out-of-bounds write | 7.8NVD v3.1 | 0.3% | 2024-01-17 | Fix |
| CVE-2024-0645 | Explorerplusplus Explorer++.exe buffer overflow vulnerability in Explorer++ | 7.8v3.1 | 0.2% | 2024-01-17 | |
| CVE-2024-0643 | Unrestricted upload of dangerous file types in C21 Live Encoder and Live Mosaic | 9.8v3.1 | 0.7% | 2024-01-17 | Fix |
| CVE-2024-0642 | Inadequate access control in C21 Live Encoder and Live Mosaic | 9.8v3.1 | 0.6% | 2024-01-17 | Fix |
| CVE-2024-0641 | Kernel: Deadlock leading to denial of service in tipc_crypto_key_revoke | 5.5NVD v3.1 | 0.2% | 2024-01-17 | Fix |
| CVE-2024-0639 | Linux kernel denial of service | 5.5NVD v3.1 | 0.2% | 2024-01-17 | Fix |
| CVE-2024-0405 | Burst Statistics Really Simple Plugins WordPress plugin authenticated (Editor+) SQL injection | 6.5NVD v3.1 | 0.6% | 2024-01-17 | Fix |
| CVE-2024-0396 | Progress Software MOVEit Transfer Missing Server-Side Input Validation in HTTP parameter | 7.1CNA v3.1 | 0.5% | 2024-01-17 | Fix |
| CVE-2024-23347 | Meta Platforms Meta Spark Studio arbitrary code execution | 7.8v3.1 | 0.3% | 2024-01-16 | Fix |
| CVE-2024-22916 | D-Link Go-rt-ac750 out-of-bounds write | 9.8v3.1 | 1.0% | 2024-01-16 | |
| CVE-2024-22628 | oretnom23 Budget and Expense Tracker System SQL injection | 7.2v3.1 | 0.6% | 2024-01-16 | |
| CVE-2024-22627 | Campcodes Supplier Management System SQL injection | 7.2v3.1 | 0.7% | 2024-01-16 | |
| CVE-2024-22626 | Campcodes Supplier Management System SQL injection | 7.2v3.1 | 0.7% | 2024-01-16 | |
| CVE-2024-22625 | Campcodes Supplier Management System SQL injection | 7.2v3.1 | 0.7% | 2024-01-16 | |
| CVE-2024-22491 | Stored cross-site scripting in beetl-bbs | 5.4v3.1 | 0.4% | 2024-01-16 | |
| CVE-2024-22428 | Dell iDRAC Service Module (iSM) incorrect default permissions | 7.0CNA v3.1 | 0.2% | 2024-01-16 | Fix |
| CVE-2024-22411 | Cross-site scripting in action messages on Avo | 6.5CNA v3.1 | 0.7% | 2024-01-16 | Fix |
| CVE-2024-22409 | Default Privileges allow for high level operations for low privileged users in datahub | 7.5CNA v3.1 | 0.7% | 2024-01-16 | Fix |
| CVE-2024-22408 | Server-side request forgery (SSRF) in Shopware Flow Builder | 7.6CNA v3.1 | 0.4% | 2024-01-16 | Fix |
| CVE-2024-22407 | Broken access control order API in Shopware | 4.9CNA v3.1 | 0.4% | 2024-01-16 | Fix |
| CVE-2024-22406 | Blind SQL-injection in DAL aggregations in Shopware | 9.3CNA v3.1 | 0.6% | 2024-01-16 | Fix |
| CVE-2024-22362 | Drupal denial of service | 7.5v3.1 | 0.8% | 2024-01-16 | Fix |
| CVE-2024-22192 | Ursa CL-Signatures Revocation allows verifiers to generate unique identifiers for holders | 6.5CNA v3.1 | 0.3% | 2024-01-16 | Fix |
| CVE-2024-22191 | Stored cross-site scripting (XSS) in `key_value` field in Avo | 7.3CNA v3.1 | 0.7% | 2024-01-16 | Fix |
| CVE-2024-21674 | Atlassian Confluence Data Center code injection | 8.6CNA v3.0 | 1.8% | 2024-01-16 | Fix |
| CVE-2024-21673 | Atlassian Confluence Data Center code injection | 8.0CNA v3.0 | 1.5% | 2024-01-16 | Fix |
| CVE-2024-21672 | Atlassian Confluence Data Center code injection | 8.3CNA v3.0 | 1.4% | 2024-01-16 | Fix |
| CVE-2024-21670 | Hyperledger Ursa CL-Signatures revocation scheme weak cryptographic algorithm | 6.5CNA v3.1 | 0.3% | 2024-01-16 | Fix |
| CVE-2024-20987 | Oracle BI Publisher Web Server component unauthorized data modification | 5.4CNA v3.1 | 0.3% | 2024-01-16 | Fix |
| CVE-2024-20985 | Oracle MySQL Server UDF component denial of service | 6.5CNA v3.1 | 1.1% | 2024-01-16 | Fix |
| CVE-2024-20983 | Oracle MySQL Server DML component denial of service | 4.9CNA v3.1 | 0.9% | 2024-01-16 | Fix |
| CVE-2024-20981 | Oracle MySQL Server DDL component denial of service | 4.9CNA v3.1 | 1.0% | 2024-01-16 | Fix |
| CVE-2024-20979 | Oracle BI Publisher Web Server component unauthorized data modification | 5.4CNA v3.1 | 0.3% | 2024-01-16 | Fix |
| CVE-2024-20977 | Oracle MySQL Server Optimizer component denial of service | 6.5CNA v3.1 | 1.1% | 2024-01-16 | Fix |
| CVE-2024-20975 | Oracle MySQL Server Optimizer component denial of service | 6.5CNA v3.1 | 0.9% | 2024-01-16 | Fix |
| CVE-2024-20973 | Oracle MySQL Server Optimizer component denial of service | 6.5CNA v3.1 | 1.1% | 2024-01-16 | Fix |
| CVE-2024-20971 | Oracle MySQL Server Optimizer component denial of service | 4.9CNA v3.1 | 1.0% | 2024-01-16 | Fix |
| CVE-2024-20969 | Oracle MySQL Server DDL component unauthorized data modification | 5.5CNA v3.1 | 0.8% | 2024-01-16 | Fix |
| CVE-2024-20967 | Oracle MySQL Server Replication component unauthorized data modification | 5.5CNA v3.1 | 0.8% | 2024-01-16 | Fix |
| CVE-2024-20965 | Oracle MySQL Server Optimizer component denial of service | 4.9CNA v3.1 | 1.5% | 2024-01-16 | Fix |
| CVE-2024-20963 | Oracle MySQL Server Security Encryption component denial of service | 6.5CNA v3.1 | 1.1% | 2024-01-16 | Fix |
| CVE-2024-20961 | Oracle MySQL Server Optimizer component denial of service | 6.5CNA v3.1 | 1.1% | 2024-01-16 | Fix |
| CVE-2024-20959 | Oracle ZFS Storage Appliance Kit Core component denial of service | 4.4CNA v3.1 | 0.2% | 2024-01-16 | Fix |
| CVE-2024-20957 | Oracle JD Edwards EnterpriseOne Tools Package Build SEC component denial of service | 2.7CNA v3.1 | 0.5% | 2024-01-16 | Fix |
| CVE-2024-20955 | Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition Compiler component information disclosure | 3.7CNA v3.1 | 0.5% | 2024-01-16 | Fix |
| CVE-2024-20952 | Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition unauthorized data access | 7.4CNA v3.1 | 0.9% | 2024-01-16 | Fix |
| CVE-2024-20950 | Oracle E-Business Suite Customer Interaction History unauthorized data modification | 6.1CNA v3.1 | 0.3% | 2024-01-16 | Fix |
| CVE-2024-20948 | Oracle E-Business Suite Knowledge Management Setup, Admin component unauthorized data modification | 6.1CNA v3.1 | 0.3% | 2024-01-16 | Fix |
| CVE-2024-20946 | Oracle Solaris Kernel component denial of service | 5.5CNA v3.1 | 0.2% | 2024-01-16 | Fix |
| CVE-2024-20944 | Oracle E-Business Suite iSupport Internal Operations component unauthorized data modification | 5.4CNA v3.1 | 0.2% | 2024-01-16 | Fix |
| CVE-2024-20942 | Oracle Complex Maintenance, Repair, and Overhaul LOV component unauthorized data modification | 6.1CNA v3.1 | 0.2% | 2024-01-16 | Fix |
| CVE-2024-20940 | Oracle E-Business Suite Knowledge Management unauthorized data modification | 6.1CNA v3.1 | 0.2% | 2024-01-16 | Fix |
| CVE-2024-20938 | Oracle E-Business Suite iStore ECC component unauthorized data modification | 6.1CNA v3.1 | 0.3% | 2024-01-16 | Fix |
| CVE-2024-20936 | Oracle E-Business Suite One-to-One Fulfillment Documents component unauthorized data modification | 6.1CNA v3.1 | 0.3% | 2024-01-16 | Fix |
| CVE-2024-20934 | Oracle E-Business Suite Installed Base unauthorized data modification | 6.1CNA v3.1 | 0.2% | 2024-01-16 | Fix |
| CVE-2024-20932 | Oracle Java SE JDK and JRE improper access control | 7.5CNA v3.1 | 0.8% | 2024-01-16 | Fix |
| CVE-2024-20930 | Oracle Outside In Technology unauthorized data modification | 6.3CNA v3.1 | 0.4% | 2024-01-16 | Fix |
| CVE-2024-20928 | Oracle WebCenter Content Server component unauthorized data modification | 6.1CNA v3.1 | 0.3% | 2024-01-16 | Fix |
| CVE-2024-20926 | Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition unauthorized data access | 5.9CNA v3.1 | 1.0% | 2024-01-16 | Fix |
| CVE-2024-20924 | Oracle Audit Vault and Database Firewall vulnerability | 7.6CNA v3.1 | 0.4% | 2024-01-16 | Fix |
| CVE-2024-20922 | Oracle Java SE, Oracle GraalVM Enterprise Edition JavaFX component unauthorized data modification | 2.5CNA v3.1 | 0.3% | 2024-01-16 | Fix |
| CVE-2024-20920 | Oracle Solaris Filesystem component information disclosure | 3.8CNA v3.1 | 0.2% | 2024-01-16 | Fix |
| CVE-2024-20918 | Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition unauthorized data access | 7.4CNA v3.1 | 0.9% | 2024-01-16 | Fix |
| CVE-2024-20916 | Oracle Enterprise Manager Base Platform Event Management component unauthorized data access | 8.3CNA v3.1 | 0.3% | 2024-01-16 | Fix |
| CVE-2024-20914 | Oracle ZFS Storage Appliance Kit Core component information disclosure | 2.3CNA v3.1 | 0.2% | 2024-01-16 | Fix |
| CVE-2024-20912 | Oracle Audit Vault and Database Firewall improper access control | 2.7CNA v3.1 | 0.3% | 2024-01-16 | Fix |
| CVE-2024-20910 | Oracle Audit Vault and Database Firewall information disclosure | 3.0CNA v3.1 | 0.3% | 2024-01-16 | Fix |
| CVE-2024-20908 | Oracle WebCenter Sites Advanced UI component unauthorized data modification | 6.1CNA v3.1 | 0.3% | 2024-01-16 | Fix |
| CVE-2024-20906 | Oracle Integrated Lights Out Manager (ILOM) unauthorized data modification | 4.8CNA v3.1 | 0.3% | 2024-01-16 | Fix |
| CVE-2024-20904 | Oracle Business Intelligence Enterprise Edition Pod Admin component information disclosure | 5.0CNA v3.1 | 0.4% | 2024-01-16 | Fix |
| CVE-2024-0603 | ZhiCms giftcontroller.php deserialization | 9.8v3.1 | 0.9% | 2024-01-16 | |
| CVE-2024-0601 | ZhongFuCheng3y Austin email message template file handler server-side request forgery | 6.5v3.1 | 0.5% | 2024-01-16 | |
| CVE-2024-0599 | Jspxcms Document Management Page InfoController.java cross-site scripting | 5.4v3.1 | 0.5% | 2024-01-16 | |
| CVE-2024-0582 | Kernel: Io_uring: Page use-after-free vulnerability via buffer ring mmap | 7.8NVD v3.1 | 12.8% | 2024-01-16 | Exploit codeFix |
| CVE-2024-0581 | Uncontrolled resource consumption vulnerability on Sandsprite Scdbg | 5.5v3.1 | 0.2% | 2024-01-16 | Fix |
| CVE-2024-0579 | Totolink X2000R formMapDelDevice command injection | 9.8v3.1 | 2.2% | 2024-01-16 | |
| CVE-2024-0578 | Totolink LR1200GB cstecgi.cgi UploadCustomModule stack-based overflow | 9.8v3.1 | 1.1% | 2024-01-16 | |
| CVE-2024-0577 | Totolink LR1200GB cstecgi.cgi setLanguageCfg stack-based overflow | 9.8v3.1 | 1.0% | 2024-01-16 | |
| CVE-2024-0576 | Totolink LR1200GB cstecgi.cgi setIpPortFilterRules stack-based overflow | 9.8v3.1 | 1.0% | 2024-01-16 | |
| CVE-2024-0575 | Totolink LR1200GB cstecgi.cgi setTracerouteCfg stack-based overflow | 9.8v3.1 | 1.1% | 2024-01-16 | |
| CVE-2024-0574 | Totolink LR1200GB cstecgi.cgi setParentalRules stack-based overflow | 9.8v3.1 | 1.1% | 2024-01-16 | |
| CVE-2024-0573 | Totolink LR1200GB cstecgi.cgi setDiagnosisCfg stack-based overflow | 9.8v3.1 | 1.1% | 2024-01-16 | |
| CVE-2024-0572 | Totolink LR1200GB cstecgi.cgi setOpModeCfg stack-based overflow | 9.8v3.1 | 1.3% | 2024-01-16 | |
| CVE-2024-0571 | Totolink LR1200GB cstecgi.cgi setSmsCfg stack-based overflow | 9.8v3.1 | 1.3% | 2024-01-16 | |
| CVE-2024-0570 | Totolink N350RT setting cstecgi.cgi access control | 9.1v3.1 | 0.8% | 2024-01-16 | |
| CVE-2024-0569 | Totolink T8 setting cstecgi.cgi getSysStatusCfg information disclosure | 9.1v3.1 | 1.0% | 2024-01-16 | |
| CVE-2024-0567 | GnuTLS: Rejects certificate chain with distributed trust | 7.5NVD v3.1 | 1.4% | 2024-01-16 | Fix |
| CVE-2024-0556 | Weak cryptography for Passwords vulnerability on WIC1200 | 6.5NVD v3.1 | 0.4% | 2024-01-16 | |
| CVE-2024-0555 | Cross-site request forgery (CSRF) vulnerability on WIC1200 | 8.0v3.1 | 0.2% | 2024-01-16 | |
| CVE-2024-0554 | Cross-site scripting (XSS) vulnerability on WIC1200 | 5.4v3.1 | 0.3% | 2024-01-16 | |
| CVE-2024-0553 | GnuTLS RSA-PSK client key exchange observable timing discrepancy | 7.5NVD v3.1 | 1.6% | 2024-01-16 | Fix |
| CVE-2024-0519 | Google Chromium V8 out-of-bounds memory access | 8.8NVD v3.1 | 3.8% | 2024-01-16 | KEVFix |
| CVE-2024-0518 | Google Chrome V8 type confusion | 8.8v3.1 | 0.9% | 2024-01-16 | Fix |
| CVE-2024-0517 | Google Chrome V8 out-of-bounds write | 8.8v3.1 | 21.7% | 2024-01-16 | Fix |
| CVE-2024-0507 | Privilege escalation by code injection in the Management console in GitHub Enterprise Server | 6.5CNA v3.1 | 65.8% | 2024-01-16 | Emerging ThreatsExploit code |
| CVE-2024-0239 | Contact Form 7 Connector WordPress plugin reflected XSS | 6.1NVD v3.1 | 0.5% | 2024-01-16 | Fix |
| CVE-2024-0238 | EventON post metadata update missing authorization | 6.1NVD v3.1 | 0.4% | 2024-01-16 | Fix |
| CVE-2024-0237 | EventON virtual event settings missing authorization | 5.3NVD v3.1 | 0.4% | 2024-01-16 | Fix |
| CVE-2024-0236 | EventON virtual event settings missing authorization | 5.3NVD v3.1 | 0.5% | 2024-01-16 | Fix |
| CVE-2024-0235 | Myeventon EventON AJAX email retrieval action missing authorization | 5.3NVD v3.1 | 38.0% | 2024-01-16 | NucleiExploit codeFix |
| CVE-2024-0233 | EventON reflected cross-site scripting | 6.1NVD v3.1 | 0.4% | 2024-01-16 | Fix |
| CVE-2024-0232 | SQLite use-after-free | 5.5NVD v3.1 | 0.4% | 2024-01-16 | Fix |
| CVE-2024-0200 | Unsafe reflection in GitHub Enterprise Server leading to command injection | 7.2CNA v3.1 | 71.7% | 2024-01-16 | NucleiEmerging ThreatsFix |
| CVE-2024-0187 | Community by PeepSo WordPress plugin reflected XSS | 6.1NVD v3.1 | 0.5% | 2024-01-16 | Fix |
| CVE-2024-22207 | fastify-swagger-ui default swagger-ui configuration exposes all files in the module | 5.3CNA v3.1 | 2.3% | 2024-01-15 | NucleiFix |
| CVE-2024-22028 | Insufficient technical documentation issue exists in thermal camera TMC series all firmware versions. The user of the affected product is not aware of the internally saved data. By accessing the affected product physically, an attacker may retrieve the internal data. | 4.6v3.1 | 0.2% | 2024-01-15 | |
| CVE-2024-20721 | Adobe T5 Acrobat JS vulnerability Exploitable crash via t5::javascript::get_page_num_words | 5.5CNA v3.1 | 0.7% | 2024-01-15 | Fix |
| CVE-2024-20709 | Adobe New Edge T5 MSRC Case [DCMSFT-1081] | 5.5CNA v3.1 | 0.6% | 2024-01-15 | Fix |
| CVE-2024-0565 | Linux kernel SMB client encrypted read handling integer underflow | 7.4NVD v3.1 | 2.0% | 2024-01-15 | Fix |
| CVE-2024-0562 | Linux kernel A use-after-free | 7.8NVD v3.1 | 0.3% | 2024-01-15 | Fix |
| CVE-2024-0558 | DedeBIZ makehtml_freelist_action.php SQL injection | 7.2v3.1 | 0.6% | 2024-01-15 | |
| CVE-2024-0557 | DedeBIZ Website Copyright setting cross-site scripting | 5.4v3.1 | 0.5% | 2024-01-15 | |
| CVE-2024-0552 | Intumit inc. SmartRobot remote code execution | 9.8v3.1 | 1.2% | 2024-01-15 | Fix |
| CVE-2024-0548 | FreeFloat FTP Server SIZE command denial of service | 7.5v3.1 | 1.3% | 2024-01-15 | |
| CVE-2024-0547 | Ability FTP Server APPE command denial of service | 7.5v3.1 | 1.4% | 2024-01-15 | |
| CVE-2024-0546 | EasyFTP LIST command denial of service | 7.5v3.1 | 6.8% | 2024-01-15 | MetasploitExploit code |
| CVE-2024-0545 | CodeCanyon RISE Ultimate Project Manager signin redirect | 6.1v3.1 | 0.5% | 2024-01-15 | |
| CVE-2024-0543 | CodeAstro Real Estate Management System propertydetail.php SQL injection | 7.5v3.1 | 0.5% | 2024-01-15 | |
| CVE-2024-0542 | Tenda W9 httpd formWifiMacFilterGet stack-based overflow | 9.8v3.1 | 1.3% | 2024-01-15 | |
| CVE-2024-0541 | Tenda W9 httpd formAddSysLogRule stack-based overflow | 9.8v3.1 | 1.3% | 2024-01-15 | |
| CVE-2024-0540 | Tenda W9 httpd formOfflineSet stack-based overflow | 9.8v3.1 | 0.8% | 2024-01-15 | |
| CVE-2024-0539 | Tenda W9 httpd formQosManage_user stack-based overflow | 9.8v3.1 | 1.3% | 2024-01-15 | |
| CVE-2024-0538 | Tenda W9 httpd formQosManage_auto stack-based overflow | 9.8v3.1 | 1.4% | 2024-01-15 | |
| CVE-2024-0537 | Tenda W9 httpd setWrlBasicInfo stack-based overflow | 9.8v3.1 | 1.3% | 2024-01-15 | |
| CVE-2024-0536 | Tenda W9 httpd setWrlAccessList stack-based overflow | 9.8v3.1 | 1.4% | 2024-01-15 | |
| CVE-2024-0535 | Tenda PA6 httpd portmap cgiPortMapAdd stack-based overflow | 9.8v3.1 | 1.0% | 2024-01-15 | |
| CVE-2024-0534 | Tenda A15 Web-based Management Interface SetOnlineDevName stack-based overflow | 7.2v3.1 | 1.7% | 2024-01-15 | |
| CVE-2024-0533 | Tenda A15 Web-based Management Interface SetOnlineDevName stack-based overflow | 7.2v3.1 | 1.7% | 2024-01-15 | |
| CVE-2024-0532 | Tenda A15 Web-based Management Interface WifiExtraSet set_repeat5 stack-based overflow | 7.2v3.1 | 1.8% | 2024-01-15 | |
| CVE-2024-0531 | Tenda A15 Web-based Management interface setBlackRule stack-based overflow | 7.2v3.1 | 1.7% | 2024-01-15 | |
| CVE-2024-0530 | CXBSoft Post-Office HTTP POST request reg_go.php SQL injection | 9.8v3.1 | 0.6% | 2024-01-15 | |
| CVE-2024-0529 | CXBSoft Post-Office HTTP POST request login_auth.php SQL injection | 9.8v3.1 | 0.7% | 2024-01-15 | |
| CVE-2024-0528 | CXBSoft Post-Office HTTP POST request update_go.php SQL injection | 9.8v3.1 | 0.6% | 2024-01-15 | |
| CVE-2024-0527 | CXBSoft Url-shorting HTTP POST request update_go.php SQL injection | 9.8v3.1 | 0.7% | 2024-01-15 | |
| CVE-2024-0526 | CXBSoft Url-shorting HTTP POST request short_to_long.php SQL injection | 9.8v3.1 | 0.6% | 2024-01-15 | |
| CVE-2024-0525 | CXBSoft Url-shorting HTTP POST request long_s_short.php SQL injection | 9.8v3.1 | 0.6% | 2024-01-15 | |
| CVE-2024-0524 | CXBSoft Url-shorting index.php SQL injection | 9.8v3.1 | 0.6% | 2024-01-15 | |
| CVE-2024-0320 | Cross-site scripting in FireEye Malware Analysis (AX) | 6.1v3.1 | 0.3% | 2024-01-15 | |
| CVE-2024-0319 | Open redirect vulnerability in FireEye HXTool | 6.1v3.1 | 0.3% | 2024-01-15 | |
| CVE-2024-0318 | Cross-site scripting in FireEye HXTool | 6.1v3.1 | 0.3% | 2024-01-15 | |
| CVE-2024-0317 | Cross-site scripting in FireEye EX | 6.1v3.1 | 0.3% | 2024-01-15 | |
| CVE-2024-0316 | FireEye Endpoint Security containment_notify preview parameter vulnerability | 7.5v3.1 | 0.3% | 2024-01-15 | |
| CVE-2024-0315 | Remote file inclusion vulnerability in FireEye Central Management | 7.8v3.1 | 0.3% | 2024-01-15 | |
| CVE-2024-0314 | XSS vulnerability in FireEye Central Management | 6.1v3.1 | 0.3% | 2024-01-15 | |
| CVE-2024-0523 | CmsEasy language_admin.php getslide_child_action SQL injection | 9.8v3.1 | 0.7% | 2024-01-14 | |
| CVE-2024-0522 | Allegro RomPager HTTP POST request cross-site request forgery | 8.8v3.1 | 0.2% | 2024-01-14 | |
| CVE-2024-22209 | openedx edx-platform XBlock custom auth does not respect JWT Scopes | 6.4CNA v3.1 | 0.6% | 2024-01-13 | |
| CVE-2024-22142 | Profile Builder Pro WordPress plugin cross-site scripting (XSS) | 6.1NVD v3.1 | 0.3% | 2024-01-13 | Fix |
| CVE-2024-22137 | Constant Contact Forms by MailMunch WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.3% | 2024-01-13 | Fix |
| CVE-2024-21640 | chromiumembedded cef OOB Access in CefVideoConsumerOSR::OnFrameCaptured | 5.4CNA v3.1 | 0.6% | 2024-01-13 | |
| CVE-2024-0510 | HaoKeKeJi YiQiNiu Api.php http_post server-side request forgery | 9.8v3.1 | 0.9% | 2024-01-13 | |
| CVE-2024-0505 | ZhongFuCheng3y Austin Upload Material Menu MaterialController.java getFile unrestricted upload | 9.8v3.1 | 0.8% | 2024-01-13 | |
| CVE-2024-0504 | Code-projects Simple Online Hotel Reservation System cross-site scripting | 6.1v3.1 | 0.6% | 2024-01-13 | |
| CVE-2024-0503 | code-projects Online FIR System registercomplaint.php cross-site scripting | 6.1v3.1 | 0.6% | 2024-01-13 | |
| CVE-2024-0502 | SourceCodester House Rental Management System Edit User manage_user.php SQL injection | 7.2v3.1 | 0.6% | 2024-01-13 | |
| CVE-2024-0501 | SourceCodester House Rental Management System Manage Invoice Details cross-site scripting | 4.8v3.1 | 0.5% | 2024-01-13 | |
| CVE-2024-0500 | SourceCodester House Rental Management System Manage Tenant Details cross-site scripting | 4.8v3.1 | 0.5% | 2024-01-13 | |
| CVE-2024-0499 | SourceCodester House Rental Management System index.php cross-site scripting | 4.8v3.1 | 0.5% | 2024-01-13 | |
| CVE-2024-0498 | Project Worlds Lawyer Management System searchLawyer.php SQL injection | 9.8v3.1 | 0.5% | 2024-01-13 | |
| CVE-2024-0497 | Campcodes Student Information System SQL injection | 9.8v3.1 | 0.5% | 2024-01-13 | |
| CVE-2024-0496 | Kashipara Billing Software HTTP POST request item_list_edit.php SQL injection | 9.8v3.1 | 0.6% | 2024-01-13 | |
| CVE-2024-0495 | Kashipara Billing Software HTTP POST request party_submit.php SQL injection | 9.8v3.1 | 0.6% | 2024-01-13 | |
| CVE-2024-0494 | Kashipara Billing Software HTTP POST request material_bill.php SQL injection | 9.8v3.1 | 0.5% | 2024-01-13 | |
| CVE-2024-0493 | Kashipara Billing Software HTTP POST request submit_delivery_list.php SQL injection | 9.8v3.1 | 0.5% | 2024-01-13 | |
| CVE-2024-0492 | Kashipara Billing Software HTTP POST request buyer_detail_submit.php SQL injection | 9.8v3.1 | 0.5% | 2024-01-13 | |
| CVE-2024-0491 | Huaxia ERP UserController.java password recovery | 7.5v3.1 | 0.6% | 2024-01-13 | |
| CVE-2024-0490 | Huaxia ERP getAllList information disclosure | 7.5v3.1 | 0.7% | 2024-01-13 | |
| CVE-2024-0489 | code-projects Fighting Cock Information System edit_chicken.php SQL injection | 9.8v3.1 | 0.5% | 2024-01-13 | |
| CVE-2024-0488 | code-projects Fighting Cock Information System new-feed.php SQL injection | 9.8v3.1 | 0.5% | 2024-01-13 | |
| CVE-2024-0487 | code-projects Fighting Cock Information System delete-vaccine.php SQL injection | 9.8v3.1 | 0.5% | 2024-01-13 | |
| CVE-2024-0486 | code-projects Fighting Cock Information System add_con.php SQL injection | 9.8v3.1 | 0.5% | 2024-01-13 | |
| CVE-2024-0485 | code-projects Fighting Cock Information System add_con.php SQL injection | 9.8v3.1 | 0.5% | 2024-01-13 | |
| CVE-2024-0484 | code-projects Fighting Cock Information System update_mother.php SQL injection | 9.8v3.1 | 0.5% | 2024-01-13 | |
| CVE-2024-0483 | Taokeyun HTTP POST Request Task.php index SQL injection | 9.8v3.1 | 0.5% | 2024-01-13 | |
| CVE-2024-0482 | Taokeyun HTTP POST Request Video.php index SQL injection | 9.8v3.1 | 0.5% | 2024-01-13 | |
| CVE-2024-0481 | Taokeyun HTTP POST Request Goods.php shopGoods SQL injection | 9.8v3.1 | 0.5% | 2024-01-13 | |
| CVE-2024-0480 | Taokeyun HTTP POST Request Drs.php index SQL injection | 9.8v3.1 | 0.8% | 2024-01-13 | |
| CVE-2024-0479 | Taokeyun HTTP POST Request User.php login SQL injection | 9.8v3.1 | 0.6% | 2024-01-13 | |
| CVE-2024-0478 | code-projects Fighting Cock Information System edit_chicken.php SQL injection | 9.8v3.1 | 0.5% | 2024-01-13 | |
| CVE-2024-0477 | code-projects Fighting Cock Information System update-deworm.php SQL injection | 9.8v3.1 | 0.5% | 2024-01-13 | |
| CVE-2024-0476 | Blood Bank and Donor Management request-received-bydonar.php cross-site scripting | 4.8v3.1 | 0.5% | 2024-01-13 | |
| CVE-2024-0475 | code-projects Dormitory Management System modifyuser.php SQL injection | 9.8v3.1 | 0.5% | 2024-01-13 | |
| CVE-2024-0251 | Advanced Woo Search WordPress plugin reflected cross-site scripting | 6.1v3.1 | 0.5% | 2024-01-13 | Fix |
| CVE-2024-23301 | Relax-and-recover incorrect default permissions | 5.5v3.1 | 0.3% | 2024-01-12 | Fix |
| CVE-2024-23179 | mediawiki cross-site scripting | 6.1v3.1 | 0.4% | 2024-01-12 | Fix |
| CVE-2024-23178 | mediawiki cross-site scripting | 5.4v3.1 | 0.4% | 2024-01-12 | Fix |
| CVE-2024-23177 | mediawiki cross-site scripting | 6.1v3.1 | 0.4% | 2024-01-12 | Fix |
| CVE-2024-23174 | mediawiki cross-site scripting | 5.4v3.1 | 0.4% | 2024-01-12 | Fix |
| CVE-2024-23173 | MediaWiki Cargo extension cross-site scripting | 6.1v3.1 | 0.4% | 2024-01-12 | Fix |
| CVE-2024-23172 | mediawiki cross-site scripting | 5.4v3.1 | 0.5% | 2024-01-12 | Fix |
| CVE-2024-23171 | mediawiki cross-site scripting | 5.4v3.1 | 0.4% | 2024-01-12 | Fix |
| CVE-2024-22494 | JFinalCMS stored cross-site scripting | 5.4v3.1 | 0.5% | 2024-01-12 | |
| CVE-2024-22493 | JFinalCMS cross-site scripting in JFinal | 5.4v3.1 | 0.6% | 2024-01-12 | |
| CVE-2024-22492 | JFinalCMS cross-site scripting in JFinal | 5.4v3.1 | 0.6% | 2024-01-12 | |
| CVE-2024-22206 | @clerk/nextjs auth and getAuth methods vulnerable to insecure direct object reference (IDOR) | 9.1CNA v3.1 | 0.7% | 2024-01-12 | Fix |
| CVE-2024-22027 | AYS Pro Plugins WordPress Quiz Maker Plugin improper input validation | 6.5v3.1 | 0.7% | 2024-01-12 | Fix |
| CVE-2024-21982 | Information disclosure vulnerability in ONTAP 9 | 4.8CNA v3.1 | 0.4% | 2024-01-12 | Fix |
| CVE-2024-21887 | Ivanti Connect Secure and Policy Secure command injection | 9.1NVD v3.1 | 100.0% | 2024-01-12 | KEVNucleiMetasploitEmerging ThreatsExploit codeKCVFix |
| CVE-2024-21655 | discourse insufficient control of custom field value sizes | 4.3CNA v3.1 | 0.6% | 2024-01-12 | Fix |
| CVE-2024-21654 | rubygems.org MFA Bypass through password reset function could allow account takeover | 4.8CNA v3.1 | 0.5% | 2024-01-12 | Fix |
| CVE-2024-21639 | chromiumembedded cef OOB Access in CefLayeredWindowUpdaterOSR::OnAllocatedSharedMemory | 5.3CNA v3.1 | 0.7% | 2024-01-12 | |
| CVE-2024-21617 | Junos OS: BGP flap on NSR-enabled devices causes memory leak | 6.5CNA v3.1 | 0.3% | 2024-01-12 | Fix |
| CVE-2024-21616 | Juniper Networks Junos OS Packet Forwarding Engine improper syntax validation | 7.5CNA v3.1 | 0.5% | 2024-01-12 | Fix |
| CVE-2024-21614 | Junos OS and Junos OS Evolved: A specific query via DREND causes rpd crash | 7.5CNA v3.1 | 0.7% | 2024-01-12 | Fix |
| CVE-2024-21613 | Junos OS and Junos OS Evolved: A link flap causes patroot memory leak which leads to rpd crash | 6.5CNA v3.1 | 0.3% | 2024-01-12 | Fix |
| CVE-2024-21612 | Junos OS Evolved: Specific TCP traffic causes OFP core and restart of RE | 7.5CNA v3.1 | 0.5% | 2024-01-12 | Fix |
| CVE-2024-21611 | Juniper Networks Junos OS Routing protocol daemon memory leak | 7.5CNA v3.1 | 0.6% | 2024-01-12 | Fix |
| CVE-2024-21607 | Juniper Networks Junos OS IPv6 firewall filter vulnerability | 5.3CNA v3.1 | 0.3% | 2024-01-12 | Fix |
| CVE-2024-21606 | Juniper Networks Junos OS flow processing daemon double free | 7.5CNA v3.1 | 0.6% | 2024-01-12 | Fix |
| CVE-2024-21604 | Junos OS Evolved: A high rate of specific traffic will cause a complete system outage | 7.5CNA v3.1 | 0.5% | 2024-01-12 | Fix |
| CVE-2024-21603 | Juniper Networks Junos OS kernel of Juniper Network improper check for exceptional conditions | 6.5CNA v3.1 | 0.5% | 2024-01-12 | Fix |
| CVE-2024-21602 | Juniper Networks Junos OS Evolved null pointer dereference | 7.5CNA v3.1 | 0.5% | 2024-01-12 | Fix |
| CVE-2024-21601 | Junos OS: SRX Series: Due to an error in processing TCP events flowd will crash | 5.9CNA v3.1 | 0.5% | 2024-01-12 | Fix |
| CVE-2024-21600 | Juniper Networks Junos OS Packet Forwarding Engine denial of service | 6.5CNA v3.1 | 0.3% | 2024-01-12 | Fix |
| CVE-2024-21599 | Junos OS: MX Series: MPC3E memory leak with PTP configuration | 6.5CNA v3.1 | 0.3% | 2024-01-12 | Fix |
| CVE-2024-21597 | Junos OS: MX Series: In an AF scenario traffic can bypass configured lo0 firewall filters | 5.3CNA v3.1 | 0.4% | 2024-01-12 | Fix |
| CVE-2024-21596 | Juniper Networks Junos OS Routing protocol daemon heap-based buffer overflow | 5.3CNA v3.1 | 0.5% | 2024-01-12 | Fix |
| CVE-2024-21595 | Juniper Networks Junos OS Packet Forwarding Engine improper syntax validation | 7.5CNA v3.1 | 0.5% | 2024-01-12 | Fix |
| CVE-2024-21594 | Junos OS: SRX 5000 Series: Repeated execution of a specific CLI command causes a flowd crash | 5.5CNA v3.1 | 0.2% | 2024-01-12 | Fix |
| CVE-2024-21591 | Juniper Networks Junos OS J-Web out-of-bounds write | 9.8CNA v3.1 | 17.5% | 2024-01-12 | Fix |
| CVE-2024-21589 | Paragon Active Assurance Control Center: Information disclosure | 7.4CNA v3.1 | 0.4% | 2024-01-12 | Fix |
| CVE-2024-21587 | Juniper Networks Junos OS broadband edge subscriber management daemon improper exception handling | 6.5CNA v3.1 | 0.3% | 2024-01-12 | Fix |
| CVE-2024-21585 | Junos OS and Junos OS Evolved: BGP session flaps on NSR-enabled devices can cause rpd crash | 5.9CNA v3.1 | 0.6% | 2024-01-12 | Fix |
| CVE-2024-0474 | code-projects Dormitory Management System login.php SQL injection | 9.8v3.1 | 0.6% | 2024-01-12 | |
| CVE-2024-0473 | code-projects Dormitory Management System comment.php SQL injection | 9.8v3.1 | 0.5% | 2024-01-12 | |
| CVE-2024-0472 | code-projects Dormitory Management System modifyuser.php information disclosure | 7.5v3.1 | 0.6% | 2024-01-12 | |
| CVE-2024-0471 | code-projects Human Resource Integrated System dec_service_credits.php SQL injection | 9.8v3.1 | 0.5% | 2024-01-12 | |
| CVE-2024-0470 | code-projects Human Resource Integrated System inc_service_credits.php SQL injection | 9.8v3.1 | 0.5% | 2024-01-12 | |
| CVE-2024-0469 | code-projects Human Resource Integrated System update_personal_info.php SQL injection | 9.8v3.1 | 0.5% | 2024-01-12 | |
| CVE-2024-0468 | code-projects Fighting Cock Information System new-father.php unrestricted upload | 9.8v3.1 | 0.6% | 2024-01-12 | |
| CVE-2024-0467 | code-projects Employee Profile Management System edit_position_query.php cross-site scripting | 6.1v3.1 | 0.4% | 2024-01-12 | |
| CVE-2024-0466 | code-projects Employee Profile Management System file_table.php SQL injection | 9.8v3.1 | 0.6% | 2024-01-12 | |
| CVE-2024-0465 | code-projects Employee Profile Management System download.php path traversal | 5.3v3.1 | 0.7% | 2024-01-12 | |
| CVE-2024-0464 | code-projects Online Faculty Clearance HTTP GET request delete_faculty.php SQL injection | 9.8v3.1 | 0.6% | 2024-01-12 | |
| CVE-2024-0463 | code-projects Online Faculty Clearance HTTP POST request admin_view_info.php SQL injection | 9.8v3.1 | 0.5% | 2024-01-12 | |
| CVE-2024-0462 | code-projects Online Faculty Clearance HTTP POST request designee_view_status.php SQL injection | 9.8v3.1 | 0.5% | 2024-01-12 | |
| CVE-2024-0461 | code-projects Online Faculty Clearance HTTP POST request deactivate.php SQL injection | 9.8v3.1 | 0.5% | 2024-01-12 | |
| CVE-2024-0460 | code-projects Faculty Management System student-print.php SQL injection | 9.8v3.1 | 0.5% | 2024-01-12 | |
| CVE-2024-0459 | Blood Bank and Donor Management request-received-bydonar.php SQL injection | 7.2v3.1 | 0.7% | 2024-01-12 | |
| CVE-2024-0454 | ELAN Match-on-Chip FPR solution SID validation authentication bypass by spoofing | 6.0CNA v3.1 | 0.3% | 2024-01-12 | Fix |
| CVE-2024-0230 | Apple Magic Keyboard Bluetooth pairing information disclosure | 2.4v3.1 | 1.2% | 2024-01-12 | Exploit codeFix |
| CVE-2024-23061 | TOTOLINK A3300R OS command injection | 9.8v3.1 | 1.7% | 2024-01-11 | |
| CVE-2024-23060 | TOTOLINK A3300R OS command injection | 9.8v3.1 | 1.7% | 2024-01-11 | |
| CVE-2024-23059 | TOTOLINK A3300R OS command injection | 9.8v3.1 | 1.7% | 2024-01-11 | |
| CVE-2024-23058 | TOTOLINK A3300R OS command injection | 9.8v3.1 | 1.6% | 2024-01-11 | |
| CVE-2024-23057 | TOTOLINK A3300R OS command injection | 9.8v3.1 | 1.6% | 2024-01-11 | |
| CVE-2024-22942 | TOTOLINK A3300R OS command injection | 9.8v3.1 | 1.6% | 2024-01-11 | |
| CVE-2024-22199 | Django Template Engine vulnerable to XSS | 9.3CNA v3.1 | 0.5% | 2024-01-11 | Fix |
| CVE-2024-22198 | 0xJacky nginx-ui authenticated arbitrary command execution by modifying `start_cmd` setting | 7.1CNA v3.1 | 4.1% | 2024-01-11 | Fix |
| CVE-2024-22197 | 0xJacky nginx-ui authenticated remote command execution by modifying `nginx` settings | 7.7CNA v3.1 | 1.5% | 2024-01-11 | Fix |
| CVE-2024-22196 | 0xJacky nginx-ui authenticated (user role) SQL injection in `OrderAndPaginate` (GHSL-2023-270) | 7.0CNA v3.1 | 0.6% | 2024-01-11 | Fix |
| CVE-2024-22195 | Jinja vulnerable to cross-site scripting (XSS) | 5.4CNA v3.1 | 0.9% | 2024-01-11 | Fix |
| CVE-2024-22194 | LF Projects cdo-local-uuid local_uuid function information disclosure | 2.2CNA v3.1 | 0.4% | 2024-01-11 | Fix |
| CVE-2024-22190 | GitPython untrusted search path under some conditions on Windows allows arbitrary code execution | 7.8CNA v3.1 | 0.3% | 2024-01-11 | Fix |
| CVE-2024-21833 | TP-Link Archer AX3000 OS command injection | 8.8v3.1 | 1.1% | 2024-01-11 | Fix |
| CVE-2024-21821 | TP-Link Archer AX3000 OS command injection | 8.0v3.1 | 0.4% | 2024-01-11 | Fix |
| CVE-2024-21773 | TP-Link Archer AX3000 OS command injection | 8.8v3.1 | 0.5% | 2024-01-11 | Fix |
| CVE-2024-21669 | Hyperledger Aries Cloud Agent Python result of presentation verification not checked for LDP-VC | 9.9CNA v3.1 | 0.6% | 2024-01-11 | Fix |
| CVE-2024-21667 | Pimcore Customer Management Framework GDPR data extraction endpoint improper access control | 6.5CNA v3.1 | 0.6% | 2024-01-11 | Fix |
| CVE-2024-21666 | Pimcore Customer Management Framework customer duplicates list endpoint improper access control | 6.5CNA v3.1 | 0.6% | 2024-01-11 | Fix |
| CVE-2024-21665 | Pimcore Ecommerce Framework Bundle back-office orders list improper access control | 4.3CNA v3.1 | 0.5% | 2024-01-11 | Fix |
| CVE-2024-21637 | XSS in Authentik via JavaScript-URI as Redirect URI and form_post Response Mode | 7.7CNA v3.1 | 0.5% | 2024-01-11 | Fix |
| CVE-2024-21337 | Microsoft Edge (Chromium-based) elevation of privilege | 5.2CNA v3.1 | 0.4% | 2024-01-11 | Fix |
| CVE-2024-20675 | Microsoft Edge (Chromium-based) security feature bypass | 6.3CNA v3.1 | 0.5% | 2024-01-11 | Fix |
| CVE-2024-0443 | Kernel: Blkio memory leakage due to blkcg and some blkgs are not freed after they are made offline | 5.5NVD v3.1 | 0.2% | 2024-01-11 | Fix |
| CVE-2024-0429 | Buffer overflow vulnerability on Hex Workshop | 5.5NVD v3.1 | 0.2% | 2024-01-11 | |
| CVE-2024-0426 | ForU CMS cms_template.php SQL injection | 9.8v3.1 | 0.7% | 2024-01-11 | |
| CVE-2024-0425 | ForU CMS admin password reset weak password recovery | 7.5v3.1 | 0.7% | 2024-01-11 | |
| CVE-2024-0424 | CodeAstro Simple Banking System Create a User page createuser.php cross-site scripting | 5.4v3.1 | 0.5% | 2024-01-11 | |
| CVE-2024-0423 | CodeAstro Online Food Ordering System dishes.php cross-site scripting | 5.4v3.1 | 0.5% | 2024-01-11 | |
| CVE-2024-0422 | CodeAstro POS and Inventory Management System New Item Creation page new_item cross-site scripting | 5.4v3.1 | 0.5% | 2024-01-11 | |
| CVE-2024-0419 | JasPer httpdx HTTP POST request denial of service | 7.5v3.1 | 1.1% | 2024-01-11 | |
| CVE-2024-0418 | iSharer and upRedSun File Sharing Wizard GET request denial of service | 7.5v3.1 | 1.3% | 2024-01-11 | |
| CVE-2024-0417 | DeShang DSShop MemberAuth.php path traversal | 9.8v3.1 | 1.1% | 2024-01-11 | |
| CVE-2024-0416 | DeShang DSMall MemberAuth.php path traversal | 9.8v3.1 | 0.9% | 2024-01-11 | |
| CVE-2024-0415 | DeShang DSMall Image URL TaobaoExport.php access control | 9.8v3.1 | 0.6% | 2024-01-11 | |
| CVE-2024-0414 | DeShang DSCMS install.php access control | 9.8v3.1 | 0.8% | 2024-01-11 | |
| CVE-2024-0413 | DeShang DSKMS install.php access control | 9.8v3.1 | 0.8% | 2024-01-11 | |
| CVE-2024-0412 | DeShang DSShop HTTP GET request install.php access control | 9.8v3.1 | 0.8% | 2024-01-11 | |
| CVE-2024-0411 | DeShang DSMall HTTP GET request install.php access control | 7.5v3.1 | 2.2% | 2024-01-11 | |
| CVE-2024-0252 | ManageEngine ADSelfService Plus remote code execution | 8.8CNA v3.1 | 7.8% | 2024-01-11 | Fix |
| CVE-2024-21643 | AzureAD azure-activedirectory-identitymodel-extensions-for-dotnet code injection | 7.1CNA v3.1 | 2.2% | 2024-01-10 | Fix |
| CVE-2024-21638 | Azure IPAM solution elevation of privilege | 9.1CNA v3.1 | 1.7% | 2024-01-10 | Fix |
| CVE-2024-20715 | Adobe Substance 3D Stager vulnerability VIII | 5.5CNA v3.1 | 0.3% | 2024-01-10 | Fix |
| CVE-2024-20714 | Adobe Substance 3D Stager out-of-bounds read | 5.5CNA v3.1 | 0.3% | 2024-01-10 | Fix |
| CVE-2024-20713 | Adobe Substance 3D Stager out-of-bounds read | 5.5CNA v3.1 | 0.3% | 2024-01-10 | Fix |
| CVE-2024-20712 | Adobe Substance 3D Stager vulnerability III | 5.5CNA v3.1 | 0.3% | 2024-01-10 | Fix |
| CVE-2024-20711 | Adobe Substance 3D Stager vulnerability VII | 5.5CNA v3.1 | 0.3% | 2024-01-10 | Fix |
| CVE-2024-20710 | Adobe Substance 3D Stager out-of-bounds read | 5.5CNA v3.1 | 0.3% | 2024-01-10 | Fix |
| CVE-2024-0389 | SourceCodester Student Attendance System attendance_report.php SQL injection | 9.8v3.1 | 0.8% | 2024-01-10 | |
| CVE-2024-0364 | PHPGurukul Hospital Management System query-details.php SQL injection | 9.8v3.1 | 0.5% | 2024-01-10 | |
| CVE-2024-0363 | PHPGurukul Hospital Management System patient-search.php SQL injection | 9.8v3.1 | 0.6% | 2024-01-10 | |
| CVE-2024-0362 | PHPGurukul Hospital Management System change-password.php SQL injection | 9.8v3.1 | 0.6% | 2024-01-10 | |
| CVE-2024-0361 | PHPGurukul Hospital Management System contact.php SQL injection | 9.8v3.1 | 0.7% | 2024-01-10 | |
| CVE-2024-0360 | PHPGurukul Hospital Management System edit-doctor-specialization.php SQL injection | 9.8v3.1 | 0.7% | 2024-01-10 | |
| CVE-2024-0359 | code-projects Simple Online Hotel Reservation System login.php SQL injection | 9.8v3.1 | 0.7% | 2024-01-10 | |
| CVE-2024-0358 | DeShang DSO2O install.php access control | 7.5v3.1 | 0.6% | 2024-01-10 | |
| CVE-2024-0357 | coderd-repos Eva HTTP POST request page SQL injection | 9.8v3.1 | 0.7% | 2024-01-10 | |
| CVE-2024-0356 | Mandelo ssm_shiro_blog Backend updateRoles access control | 7.5v3.1 | 0.6% | 2024-01-10 | |
| CVE-2024-0355 | PHPGurukul Dairy Farm Shop Management System add-category.php SQL injection | 9.8v3.1 | 0.7% | 2024-01-10 | |
| CVE-2024-0354 | unknown-o download-station index.php path traversal | 7.5v3.1 | 0.8% | 2024-01-10 | |
| CVE-2024-0333 | Google Chrome extensions improper input validation | 5.3v3.1 | 0.4% | 2024-01-10 | Fix |
| CVE-2024-0310 | Trellix Endpoint Security (ENS) Web Control cross-site scripting | 6.1CNA v3.1 | 0.4% | 2024-01-10 | Fix |
| CVE-2024-22370 | JetBrains YouTrack cross-site scripting | 4.6CNA v3.1 | 0.4% | 2024-01-09 | Fix |
| CVE-2024-22368 | The Spreadsheet::ParseXLSX package before 0.28 for Perl can encounter an out-of-memory condition during parsing of a crafted XLSX document. This occurs because the memoize implementation does not have appropriate constraints on merged cells. | 5.5v3.1 | 0.5% | 2024-01-09 | Fix |
| CVE-2024-22165 | Denial of service in Splunk Enterprise Security of the Investigations manager | 6.5v3.1 | 0.5% | 2024-01-09 | Fix |
| CVE-2024-22164 | Denial of service of an Investigation in Splunk Enterprise Security | 4.3v3.1 | 0.5% | 2024-01-09 | Fix |
| CVE-2024-22125 | Information disclosure vulnerability in Microsoft Edge browser extension | 7.4CNA v3.1 | 0.5% | 2024-01-09 | Fix |
| CVE-2024-22124 | Information disclosure vulnerability in SAP NetWeaver Internet Communication Manager | 4.1CNA v3.1 | 0.3% | 2024-01-09 | Fix |
| CVE-2024-21738 | Cross-site scripting (XSS) vulnerability in SAP NetWeaver ABAP Application Server and ABAP Platform | 4.1CNA v3.1 | 0.3% | 2024-01-09 | Fix |
| CVE-2024-21737 | Code injection vulnerability in SAP Application Interface Framework (File Adapter) | 8.4CNA v3.1 | 0.6% | 2024-01-09 | Fix |
| CVE-2024-21736 | Missing authorization check in SAP S/4HANA Finance (Advanced Payment Management) | 6.4CNA v3.1 | 0.3% | 2024-01-09 | Fix |
| CVE-2024-21735 | Improper authorization check in SAP LT Replication Server | 7.3CNA v3.1 | 0.4% | 2024-01-09 | Fix |
| CVE-2024-21734 | URL redirection vulnerability in SAP Marketing (Contacts App) | 3.7CNA v3.1 | 0.2% | 2024-01-09 | Fix |
| CVE-2024-21668 | Insertion of sensitive information into log file in react-native-mmkv | 4.4CNA v3.1 | 0.4% | 2024-01-09 | Fix |
| CVE-2024-21664 | lestrrat-go jwx parsing JSON serialized payload without protected field can lead to segfault | 4.3CNA v3.1 | 0.9% | 2024-01-09 | Fix |
| CVE-2024-21663 | DEMON1A Discord-Recon ReconServer prips command vulnerability | 10.0CNA v3.1 | 1.5% | 2024-01-09 | Fix |
| CVE-2024-21651 | XWiki denial of service attack through attachments | 7.5CNA v3.1 | 0.6% | 2024-01-09 | Fix |
| CVE-2024-21648 | XWiki has no right protection on rollback action | 8.0CNA v3.1 | 0.5% | 2024-01-09 | Fix |
| CVE-2024-21646 | Azure IoT Platform Device SDK remote code execution | 9.8CNA v3.1 | 5.1% | 2024-01-09 | Fix |
| CVE-2024-21325 | Microsoft Printer Metadata Troubleshooter Tool remote code execution | 7.8CNA v3.1 | 1.2% | 2024-01-09 | Fix |
| CVE-2024-21320 | Microsoft Windows Themes spoofing | 6.5CNA v3.1 | 22.6% | 2024-01-09 | Emerging ThreatsExploit codeFix |
| CVE-2024-21319 | Microsoft Identity denial of service | 6.8CNA v3.1 | 2.9% | 2024-01-09 | Fix |
| CVE-2024-21318 | Microsoft SharePoint server remote code execution | 8.8CNA v3.1 | 30.8% | 2024-01-09 | Fix |
| CVE-2024-21316 | Microsoft Windows Server Key Distribution service security feature bypass | 6.1CNA v3.1 | 1.5% | 2024-01-09 | Fix |
| CVE-2024-21314 | Microsoft Message Queuing information disclosure | 6.5CNA v3.1 | 2.1% | 2024-01-09 | Fix |
| CVE-2024-21313 | Microsoft Windows TCP/IP information disclosure | 5.3CNA v3.1 | 1.5% | 2024-01-09 | Fix |
| CVE-2024-21312 | NET Framework denial of service | 7.5CNA v3.1 | 3.6% | 2024-01-09 | Fix |
| CVE-2024-21311 | Microsoft Windows Cryptographic services information disclosure | 5.5CNA v3.1 | 0.8% | 2024-01-09 | Fix |
| CVE-2024-21310 | Microsoft Windows Cloud Files Mini Filter driver elevation of privilege | 7.8CNA v3.1 | 11.5% | 2024-01-09 | Fix |
| CVE-2024-21309 | Microsoft Windows Kernel-Mode driver elevation of privilege | 7.8CNA v3.1 | 0.8% | 2024-01-09 | Fix |
| CVE-2024-21307 | Remote Desktop client remote code execution | 7.5CNA v3.1 | 2.0% | 2024-01-09 | Fix |
| CVE-2024-21306 | Microsoft Bluetooth driver spoofing | 5.7CNA v3.1 | 5.8% | 2024-01-09 | Exploit codeFix |
| CVE-2024-21305 | Microsoft Windows Hypervisor-Protected Code Integrity (HVCI) security feature bypass | 4.4CNA v3.1 | 1.5% | 2024-01-09 | Exploit codeFix |
| CVE-2024-20700 | Microsoft Windows Hyper-V remote code execution | 7.5CNA v3.1 | 4.0% | 2024-01-09 | Fix |
| CVE-2024-20699 | Microsoft Windows Hyper-V denial of service | 5.5CNA v3.1 | 0.7% | 2024-01-09 | Fix |
| CVE-2024-20698 | Microsoft Windows Kernel elevation of privilege | 7.8CNA v3.1 | 8.6% | 2024-01-09 | Fix |
| CVE-2024-20697 | Microsoft Windows libarchive remote code execution | 7.3CNA v3.1 | 72.2% | 2024-01-09 | Fix |
| CVE-2024-20696 | Microsoft Windows libarchive remote code execution | 7.3CNA v3.1 | 3.1% | 2024-01-09 | Exploit codeFix |
| CVE-2024-20694 | Microsoft Windows CoreMessaging information disclosure | 5.5CNA v3.1 | 0.9% | 2024-01-09 | Fix |
| CVE-2024-20692 | Microsoft Local Security Authority subsystem service information disclosure | 5.7CNA v3.1 | 1.2% | 2024-01-09 | Fix |
| CVE-2024-20691 | Microsoft Windows Themes information disclosure | 4.7CNA v3.1 | 0.6% | 2024-01-09 | Fix |
| CVE-2024-20690 | Microsoft Windows Nearby Sharing spoofing | 6.5CNA v3.1 | 1.3% | 2024-01-09 | Fix |
| CVE-2024-20687 | Microsoft AllJoyn API denial of service | 7.5CNA v3.1 | 2.5% | 2024-01-09 | Fix |
| CVE-2024-20686 | Microsoft Windows win32k elevation of privilege | 7.8CNA v3.1 | 0.7% | 2024-01-09 | Fix |
| CVE-2024-20683 | Microsoft Windows win32k elevation of privilege | 7.8CNA v3.1 | 4.2% | 2024-01-09 | Fix |
| CVE-2024-20682 | Microsoft Windows Cryptographic services remote code execution | 7.8CNA v3.1 | 0.8% | 2024-01-09 | Fix |
| CVE-2024-20681 | Microsoft Windows subsystem for Linux elevation of privilege | 7.8CNA v3.1 | 0.7% | 2024-01-09 | Fix |
| CVE-2024-20680 | Microsoft Windows Message Queuing Client (MSMQC) information disclosure | 6.5CNA v3.1 | 2.0% | 2024-01-09 | Fix |
| CVE-2024-20677 | Microsoft Office remote code execution | 7.8CNA v3.1 | 3.3% | 2024-01-09 | Fix |
| CVE-2024-20676 | Microsoft Azure Storage Mover remote code execution | 8.0CNA v3.1 | 2.7% | 2024-01-09 | Fix |
| CVE-2024-20674 | Microsoft Windows Kerberos security feature bypass | 8.8CNA v3.1 | 17.2% | 2024-01-09 | Exploit codeFix |
| CVE-2024-20672 | Microsoft .NET denial of service | 7.5CNA v3.1 | 2.9% | 2024-01-09 | Fix |
| CVE-2024-20666 | Microsoft Windows BitLocker security feature bypass | 6.6CNA v3.1 | 3.1% | 2024-01-09 | Fix |
| CVE-2024-20664 | Microsoft Message Queuing information disclosure | 6.5CNA v3.1 | 2.0% | 2024-01-09 | Fix |
| CVE-2024-20663 | Microsoft Windows Message Queuing Client (MSMQC) information disclosure | 6.5CNA v3.1 | 1.9% | 2024-01-09 | Fix |
| CVE-2024-20662 | Microsoft Windows Online Certificate Status Protocol (OCSP) information disclosure | 4.9CNA v3.1 | 1.9% | 2024-01-09 | Fix |
| CVE-2024-20661 | Microsoft Message Queuing (MSMQ) denial of service | 7.5CNA v3.1 | 2.8% | 2024-01-09 | Fix |
| CVE-2024-20660 | Microsoft Message Queuing information disclosure | 6.5CNA v3.1 | 2.0% | 2024-01-09 | Fix |
| CVE-2024-20658 | Microsoft Virtual Hard Disk elevation of privilege | 7.8CNA v3.1 | 0.7% | 2024-01-09 | Fix |
| CVE-2024-20657 | Microsoft Windows Group Policy elevation of privilege | 7.0CNA v3.1 | 0.6% | 2024-01-09 | Fix |
| CVE-2024-20656 | Visual Studio elevation of privilege | 7.8CNA v3.1 | 3.9% | 2024-01-09 | Exploit codeFix |
| CVE-2024-20655 | Microsoft Online Certificate Status Protocol (OCSP) remote code execution | 6.6CNA v3.1 | 1.4% | 2024-01-09 | Fix |
| CVE-2024-20654 | Microsoft ODBC driver remote code execution | 8.0CNA v3.1 | 2.0% | 2024-01-09 | Fix |
| CVE-2024-20653 | Microsoft Common Log File System elevation of privilege | 7.8CNA v3.1 | 4.5% | 2024-01-09 | Fix |
| CVE-2024-20652 | Microsoft Windows HTML Platforms security feature bypass | 8.1CNA v3.1 | 2.1% | 2024-01-09 | Fix |
| CVE-2024-0352 | Likeshop HTTP POST Request File.php userFormImage unrestricted upload | 9.8v3.1 | 72.9% | 2024-01-09 | NucleiExploit code |
| CVE-2024-0351 | SourceCodester Engineers Online Portal session handling session fixation | 3.5v3.1 | 0.6% | 2024-01-09 | |
| CVE-2024-0350 | SourceCodester Engineers Online Portal session handling vulnerability | 6.5v3.1 | 0.5% | 2024-01-09 | |
| CVE-2024-0349 | SourceCodester Engineers Online Portal missing secure attribute | 5.3v3.1 | 0.4% | 2024-01-09 | |
| CVE-2024-0348 | SourceCodester Engineers Online Portal file upload resource consumption | 6.5v3.1 | 1.1% | 2024-01-09 | |
| CVE-2024-0347 | SourceCodester Engineers Online Portal signup_teacher.php weak password | 3.7v3.1 | 0.9% | 2024-01-09 | |
| CVE-2024-0346 | CodeAstro Vehicle Booking System Feedback page user-give-feedback.php cross-site scripting | 5.4v3.1 | 0.5% | 2024-01-09 | |
| CVE-2024-0345 | CodeAstro Vehicle Booking System User Registration usr-register.php cross-site scripting | 6.1v3.1 | 0.6% | 2024-01-09 | |
| CVE-2024-0344 | soxft TimeMail check.php SQL injection | 9.8v3.1 | 0.6% | 2024-01-09 | |
| CVE-2024-0343 | CodeAstro Simple House Rental System Login Panel cross-site scripting | 6.1v3.1 | 0.7% | 2024-01-09 |