CVE-2024 records published in February 2024
This page lists the 1,741 CVE-2024 records published in February 2024, newest first, 1,000 to a page. The Cybersecurity and Infrastructure Security Agency's Known Exploited Vulnerabilities (KEV) catalog lists 11 of them. Each CVE opens on cve-security.com with its sources, detection content and vendor fixes, and the search on the CVE-2024 list filters these records by severity or signal.
- Critical
- 29116.7% of these records
- Listed in CISA KEV
- 110.6% of these records
- Reported exploited
- 20.1% of these records
- Detection signal
- 281.6% of these records
- Exploit code
- 864.9% of these records
- Actionable vendor fix
- 1,20769.3% of these records
Figures as of 2026-10-24 13:18 UTC. Records published in February 2024 have had from about 32 months to about 33 months to collect KEV listings, exploitation reports, detection content and exploit code. Records published more recently have had less time, which can hold their shares down.
| CVE | Summary | CVSS | EPSS | Published | Signals |
|---|---|---|---|---|---|
| CVE-2024-27906 | Apache Airflow: Dag Code and Import Error Permissions Ignored | 5.9CISA ADP v3.1 | 0.3% | 2024-02-29 | Fix |
| CVE-2024-27662 | D-Link DIR-823G improper exception handling | 6.5v3.1 | 0.4% | 2024-02-29 | |
| CVE-2024-27661 | D-Link DIR-823G denial of service | 6.5v3.1 | 0.4% | 2024-02-29 | |
| CVE-2024-27660 | D-Link DIR-823 null pointer dereference | 6.5v3.1 | 0.6% | 2024-02-29 | |
| CVE-2024-27659 | D-Link DIR-823G denial of service | 6.5v3.1 | 0.6% | 2024-02-29 | |
| CVE-2024-27658 | D-Link DIR-823G denial of service | 6.5CISA ADP v3.1 | 0.6% | 2024-02-29 | |
| CVE-2024-27657 | D-Link DIR-823G stack-based buffer overflow | 8.8CISA ADP v3.1 | 1.2% | 2024-02-29 | |
| CVE-2024-27656 | D-Link DIR-823G stack-based buffer overflow | 8.8CISA ADP v3.1 | 0.6% | 2024-02-29 | |
| CVE-2024-27655 | D-Link DIR-823G stack-based buffer overflow | 8.8CISA ADP v3.1 | 1.2% | 2024-02-29 | |
| CVE-2024-27517 | Webasyst cross-site scripting | 5.4v3.1 | 0.4% | 2024-02-29 | |
| CVE-2024-27516 | livehelperchat server-side template injection | 9.8CISA ADP v3.1 | 1.5% | 2024-02-29 | Fix |
| CVE-2024-27294 | Dp-golang Go installation could be owned by wrong user | 7.3CNA v3.1 | 0.2% | 2024-02-29 | Fix |
| CVE-2024-27284 | cassandra-rs non-idiomatic use of iterators leads to use-after-free | 7.5CNA v3.1 | 0.8% | 2024-02-29 | Fix |
| CVE-2024-27092 | Content spoofing real Hoppscotch emails | 5.4CNA v3.1 | 0.6% | 2024-02-29 | Fix |
| CVE-2024-27083 | Flask-AppBuilder's OAuth login page subject to cross-site scripting (XSS) | 4.3CNA v3.1 | 0.6% | 2024-02-29 | Fix |
| CVE-2024-26620 | Linux kernel s390 vfio-ap AP matrix filtering out-of-bounds write | 8.2CNA v3.1 | 0.6% | 2024-02-29 | Fix |
| CVE-2024-26617 | Linux kernel task_mmu MMU notifier race condition | 7.8CNA v3.1 | 0.2% | 2024-02-29 | Fix |
| CVE-2024-26614 | Linux kernel TCP accept queue vulnerability | 7.8CNA v3.1 | 0.2% | 2024-02-29 | Fix |
| CVE-2024-26611 | Linux kernel xsk null pointer dereference | 7.5CNA v3.1 | 0.6% | 2024-02-29 | Fix |
| CVE-2024-26610 | Linux kernel iwlwifi Wi-Fi driver out-of-bounds write | 7.8CNA v3.1 | 0.3% | 2024-02-29 | Fix |
| CVE-2024-26608 | Linux kernel ksmbd netlink policy out-of-bounds read | 7.8CNA v3.1 | 0.2% | 2024-02-29 | Fix |
| CVE-2024-26607 | Linux kernel sii902x DRM bridge driver null pointer dereference | 4.7v3.1 | 0.2% | 2024-02-29 | Fix |
| CVE-2024-26548 | Vivotek Camera arbitrary code execution | 9.8CISA ADP v3.1 | 1.1% | 2024-02-29 | |
| CVE-2024-26473 | Msaad1999 KLiK SocialMediaWebsite SocialMediaWebsite v1.0.1 reflected cross-site scripting | 6.1CISA ADP v3.1 | 0.5% | 2024-02-29 | |
| CVE-2024-26472 | Msaad1999 KLiK SocialMediaWebsite cross-site scripting | 6.1CISA ADP v3.1 | 0.5% | 2024-02-29 | |
| CVE-2024-26471 | Msaad1999 KLiK SocialMediaWebsite zhimengzhe iBarn v1.5 reflected cross-site scripting | 5.4CISA ADP v3.1 | 0.5% | 2024-02-29 | |
| CVE-2024-26470 | FullStackHero's WebAPI Boilerplate host header injection | 8.1CISA ADP v3.1 | 1.0% | 2024-02-29 | |
| CVE-2024-26462 | MIT Kerberos 5 memory leak | 5.5v3.1 | 0.4% | 2024-02-29 | Fix |
| CVE-2024-26461 | MIT Kerberos 5 resource exhaustion | 7.5CISA ADP v3.1 | 1.1% | 2024-02-29 | Fix |
| CVE-2024-26458 | MIT Kerberos 5 memory leak | 5.3CISA ADP v3.1 | 0.8% | 2024-02-29 | Fix |
| CVE-2024-26196 | Microsoft Edge for Android (Chromium-based) information disclosure | 4.3CNA v3.1 | 1.2% | 2024-02-29 | Fix |
| CVE-2024-26146 | Possible denial of service vulnerability in Rack Header Parsing | 5.3CNA v3.1 | 2.0% | 2024-02-29 | Fix |
| CVE-2024-26141 | Possible DoS vulnerability with Range header in Rack | 5.8CNA v3.1 | 1.6% | 2024-02-29 | Fix |
| CVE-2024-26132 | Element Android can be asked to share internal files | 4.0CNA v3.1 | 0.4% | 2024-02-29 | Fix |
| CVE-2024-26131 | Element Android Intent Redirection | 8.4CNA v3.1 | 0.5% | 2024-02-29 | Fix |
| CVE-2024-25932 | Change Table Prefix WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2024-02-29 | Fix |
| CVE-2024-25931 | Heureka WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2024-02-29 | Fix |
| CVE-2024-25930 | Custom Order Statuses for WooCommerce WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2024-02-29 | |
| CVE-2024-25833 | F-logic DataCube3 SQL injection | 9.8v3.1 | 2.8% | 2024-02-29 | |
| CVE-2024-25832 | F-logic DataCube3 unrestricted file upload | 8.8v3.1 | 12.8% | 2024-02-29 | Exploit codeKCV |
| CVE-2024-25831 | F-logic DataCube3 cross-site scripting | 5.4v3.1 | 0.6% | 2024-02-29 | |
| CVE-2024-25830 | F-logic DataCube3 path traversal | 9.8CISA ADP v3.1 | 24.0% | 2024-02-29 | Exploit codeKCV |
| CVE-2024-25713 | Yyjson has a double free | 8.6CISA ADP v3.1 | 1.8% | 2024-02-29 | Fix |
| CVE-2024-25712 | http-swagger XSS via PUT requests | 6.1v3.1 | 0.6% | 2024-02-29 | Fix |
| CVE-2024-25594 | MyWaze WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.3% | 2024-02-29 | |
| CVE-2024-25292 | Martinbarker Rendertune cross-site scripting | 9.6v3.1 | 1.5% | 2024-02-29 | Exploit code |
| CVE-2024-25291 | Deskfiler code injection | 9.8CISA ADP v3.1 | 1.6% | 2024-02-29 | Exploit code |
| CVE-2024-25262 | texlive-bin ttfdump TTF parser heap-based buffer overflow | 8.1CISA ADP v3.1 | 0.9% | 2024-02-29 | Fix |
| CVE-2024-25180 | pdfmake code injection | 9.8CISA ADP v3.1 | 1.0% | 2024-02-29 | |
| CVE-2024-25128 | Flask-AppBuilder incorrect authentication when using auth type OpenID | 9.1CNA v3.1 | 0.9% | 2024-02-29 | Fix |
| CVE-2024-25126 | Rack ReDos in content type parsing (2nd degree polynomial) | 5.3CNA v3.1 | 35.4% | 2024-02-29 | Fix |
| CVE-2024-25098 | PB oEmbed HTML5 Audio WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.3% | 2024-02-29 | |
| CVE-2024-25094 | PJ News Ticker WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.3% | 2024-02-29 | Fix |
| CVE-2024-25093 | GD Rating System WordPress plugin cross-site scripting (XSS) | 6.1NVD v3.1 | 0.4% | 2024-02-29 | Fix |
| CVE-2024-25065 | Apache OFBiz: Path traversal allowing authentication bypass | 9.1CISA ADP v3.1 | 47.7% | 2024-02-29 | Fix |
| CVE-2024-25006 | XenForo path traversal | 8.1CISA ADP v3.1 | 1.0% | 2024-02-29 | Fix |
| CVE-2024-24988 | Mattermost excessive resource consumption when sending long emoji names in user custom status | 4.3CNA v3.1 | 0.7% | 2024-02-29 | Fix |
| CVE-2024-24708 | W3SPEEDSTER WordPress plugin cross-site request forgery (CSRF) | 4.3v3.1 | 0.3% | 2024-02-29 | Fix |
| CVE-2024-24701 | Setka Editor WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2024-02-29 | |
| CVE-2024-24525 | Epointwebbuilder improper parameter handling | 9.8CISA ADP v3.1 | 1.1% | 2024-02-29 | |
| CVE-2024-24246 | Qpdf heap-based buffer overflow | 5.5v3.1 | 0.4% | 2024-02-29 | Fix |
| CVE-2024-24155 | Axiosys Bento4 memory leak | 6.5v3.1 | 0.6% | 2024-02-29 | |
| CVE-2024-24150 | Libming parseSWF_TEXTRECORD memory leak | 6.5v3.1 | 0.8% | 2024-02-29 | |
| CVE-2024-24149 | Libming parseSWF_GLYPHENTRY memory leak | 6.5v3.1 | 0.8% | 2024-02-29 | |
| CVE-2024-24147 | Libming parseSWF_FILLSTYLEARRAY memory leak | 6.5v3.1 | 0.7% | 2024-02-29 | |
| CVE-2024-24146 | Libming parseSWF_DEFINEBUTTON memory leak | 6.5v3.1 | 0.7% | 2024-02-29 | |
| CVE-2024-23946 | Apache OFBiz: Path traversal or file inclusion | 5.3v3.1 | 3.1% | 2024-02-29 | Fix |
| CVE-2024-23807 | Apache Xerces C++: Use-after-free on external DTD scan | 9.8v3.1 | 1.5% | 2024-02-29 | Fix |
| CVE-2024-23519 | Email Before Download WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2024-02-29 | Fix |
| CVE-2024-23501 | Ebook Store WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.3% | 2024-02-29 | Fix |
| CVE-2024-23493 | Mattermost team associated AD/LDAP Groups Leaked due to missing authorization | 4.3CNA v3.1 | 0.4% | 2024-02-29 | Fix |
| CVE-2024-23488 | Mattermost fails to properly restrict the access of files attached to posts | 3.1CNA v3.1 | 0.3% | 2024-02-29 | Fix |
| CVE-2024-23328 | The Dataease datasource exists deserialization and arbitrary file read | 9.1CNA v3.1 | 1.2% | 2024-02-29 | Fix |
| CVE-2024-23302 | Couchbase Server information disclosure | 7.5v3.1 | 0.7% | 2024-02-29 | Fix |
| CVE-2024-23052 | 5kcrm WukongCRM deserialization of untrusted data | 9.8v3.1 | 4.9% | 2024-02-29 | |
| CVE-2024-22939 | sunkaifei FlyCMS cross-site request forgery | 8.8v3.1 | 0.7% | 2024-02-29 | Exploit code |
| CVE-2024-22936 | Manuelaldape Parents & Student Portal cross-site scripting | 6.1v3.1 | 0.6% | 2024-02-29 | |
| CVE-2024-22871 | Clojure deserialization of untrusted data | 7.5CISA ADP v3.1 | 1.5% | 2024-02-29 | Fix |
| CVE-2024-22251 | VMware Workstation out-of-bounds read | 5.9CNA v3.1 | 0.2% | 2024-02-29 | Fix |
| CVE-2024-21752 | Ajax Search Lite WordPress plugin cross-site scripting (XSS) | 6.1NVD v3.1 | 0.2% | 2024-02-29 | Fix |
| CVE-2024-21726 | Joomla! CMS core Inadequate content filtering within the filter code | 6.5CISA ADP v3.1 | 48.8% | 2024-02-29 | Fix |
| CVE-2024-21725 | Joomla! CMS core XSS in mail address outputs | 6.1CISA ADP v3.1 | 32.2% | 2024-02-29 | Fix |
| CVE-2024-21724 | Joomla! CMS core XSS in media selection fields | 6.1v3.1 | 0.5% | 2024-02-29 | Fix |
| CVE-2024-21723 | Joomla! CMS core open redirect in installation application | 4.3CISA ADP v3.1 | 0.5% | 2024-02-29 | Fix |
| CVE-2024-21722 | Joomla! CMS core insufficient session expiration in MFA management views | 6.3CISA ADP v3.1 | 0.5% | 2024-02-29 | Fix |
| CVE-2024-20765 | Adobe Acrobat Reader DC PDF File Parsing use-after-free remote code execution | 7.8CNA v3.1 | 0.6% | 2024-02-29 | Fix |
| CVE-2024-20344 | Cisco Unified Computing System denial of service | 5.3CNA v3.1 | 0.8% | 2024-02-29 | Fix |
| CVE-2024-20321 | Cisco NX-OS Software denial of service | 8.6CNA v3.1 | 0.7% | 2024-02-29 | Fix |
| CVE-2024-20294 | Cisco NX-OS Software buffer access with incorrect length | 6.6CNA v3.1 | 0.3% | 2024-02-29 | Fix |
| CVE-2024-20291 | Cisco NX-OS Software improper access control | 5.8CNA v3.1 | 0.9% | 2024-02-29 | Fix |
| CVE-2024-20267 | Cisco NX-OS Software buffer overflow | 8.6CNA v3.1 | 0.9% | 2024-02-29 | Fix |
| CVE-2024-2009 | Nway Pro argument index.php ajax_login_submit_form information exposure | 7.5v3.1 | 0.6% | 2024-02-29 | |
| CVE-2024-2001 | Cross-site scripting vulnerability in Cockpit CMS | 5.4v3.1 | 0.3% | 2024-02-29 | |
| CVE-2024-1982 | WPvivid Backup and Migration WordPress plugin missing authorization | 9.1v3.1 | 0.8% | 2024-02-29 | Fix |
| CVE-2024-1981 | Migration WordPress plugin SQL injection | 9.1v3.1 | 1.1% | 2024-02-29 | Fix |
| CVE-2024-1978 | Friends WordPress plugin authenticated (Admin+) blind server-side request forgery | 5.5CNA v3.1 | 0.5% | 2024-02-29 | Fix |
| CVE-2024-1977 | Restaurant Solutions WordPress plugin stored cross-site scripting | 4.8v3.1 | 0.4% | 2024-02-29 | |
| CVE-2024-1976 | Marketing Optimizer WordPress plugin cross-site request forgery to stored cross-site scripting | 4.3v3.1 | 0.2% | 2024-02-29 | |
| CVE-2024-1971 | Surya2Developer Online Shopping System POST parameter login.php SQL injection | 9.8v3.1 | 0.8% | 2024-02-29 | |
| CVE-2024-1970 | SourceCodester Online Learning System V2 index.php cross-site scripting | 6.1v3.1 | 0.7% | 2024-02-29 | |
| CVE-2024-1953 | Mattermost fails to limit the number of role names | 4.3CNA v3.1 | 0.5% | 2024-02-29 | Fix |
| CVE-2024-1952 | Mattermost incorrectly allows access individual posts | 3.1CNA v3.1 | 0.4% | 2024-02-29 | Fix |
| CVE-2024-1949 | Mattermost race condition | 2.6CNA v3.1 | 0.3% | 2024-02-29 | Fix |
| CVE-2024-1942 | Mattermost allows attackers access to posts in channels they are not a member of | 4.3CNA v3.1 | 0.4% | 2024-02-29 | Fix |
| CVE-2024-1939 | Google Chrome V8 type confusion | 8.8v3.1 | 2.6% | 2024-02-29 | Exploit codeFix |
| CVE-2024-1938 | Google Chrome V8 type confusion | 8.8v3.1 | 0.8% | 2024-02-29 | Fix |
| CVE-2024-1928 | SourceCodester Web-Based Student Clearance System edit-admin.php SQL injection | 7.2v3.1 | 0.7% | 2024-02-29 | |
| CVE-2024-1927 | SourceCodester Web-Based Student Clearance System login.php SQL injection | 9.8v3.1 | 0.8% | 2024-02-29 | |
| CVE-2024-1888 | Mattermost existing server guests invited to the team by members without invite_guest permission | 4.3CNA v3.1 | 0.3% | 2024-02-29 | Fix |
| CVE-2024-1887 | Mattermost post fetching without auditing in compliance export | 4.3CNA v3.1 | 0.3% | 2024-02-29 | Fix |
| CVE-2024-1722 | Red Hat Build of Keycloak keycloak-core: Dos via account lockout | 3.7CNA v3.1 | 0.8% | 2024-02-29 | Fix |
| CVE-2024-1619 | Kaspersky Security unauthorized access | 6.1CNA v3.1 | 0.4% | 2024-02-29 | Fix |
| CVE-2024-1595 | Delta Electronics CNCSoft-B DOPSoft uncontrolled search path element | 7.8v3.1 | 0.4% | 2024-02-29 | Fix |
| CVE-2024-1586 | Schema and Structured Data for WP and AMP WordPress plugin (Custom) stored cross-site scripting | 5.4v3.1 | 0.4% | 2024-02-29 | Fix |
| CVE-2024-1570 | ProfilePress WordPress plugin authenticated (Contributor+) stored cross-site scripting via shortcode | 5.4v3.1 | 0.5% | 2024-02-29 | Fix |
| CVE-2024-1519 | Paid Membership Plugin WordPress plugin stored cross-site scripting | 6.1v3.1 | 0.6% | 2024-02-29 | Fix |
| CVE-2024-1496 | Featured Image from URL (FIFU) WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.4% | 2024-02-29 | Fix |
| CVE-2024-1492 | WPify Woo Czech WordPress plugin missing authorization | 5.3v3.1 | 0.5% | 2024-02-29 | Fix |
| CVE-2024-1475 | Coming Soon Maintenance Mode WordPress plugin information exposure | 5.3CNA v3.1 | 0.5% | 2024-02-29 | Fix |
| CVE-2024-1472 | WP Maintenance WordPress plugin information exposure | 5.3CNA v3.1 | 0.5% | 2024-02-29 | Fix |
| CVE-2024-1470 | Elevation of privilege attack on NetIQ Client Login Extension | 7.1CNA v3.1 | 0.2% | 2024-02-29 | |
| CVE-2024-1468 | Avada Website Builder For WordPress and WooCommerce theme arbitrary file upload | 8.8CNA v3.1 | 1.2% | 2024-02-29 | Fix |
| CVE-2024-1448 | Sassy Social Share WordPress plugin authenticated (Contributor+) stored cross-site scripting | 6.4CNA v3.1 | 0.5% | 2024-02-29 | Fix |
| CVE-2024-1447 | Sydney Toolbox WordPress plugin authenticated (Contributor+) stored cross-site scripting | 5.4v3.1 | 0.4% | 2024-02-29 | Fix |
| CVE-2024-1445 | Page scroll to id WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.4% | 2024-02-29 | Fix |
| CVE-2024-1437 | Adsmonetizer WordPress plugin cross-site scripting (XSS) | 6.1NVD v3.1 | 0.4% | 2024-02-29 | Fix |
| CVE-2024-1435 | Tainacan WordPress plugin sensitive data exposure via Log file | 7.5v3.1 | 0.5% | 2024-02-29 | Fix |
| CVE-2024-1434 | Media Alt Renamer WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.3% | 2024-02-29 | |
| CVE-2024-1425 | EmbedPress WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.5% | 2024-02-29 | Fix |
| CVE-2024-1411 | PowerPack Addons for Elementor WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.4% | 2024-02-29 | Fix |
| CVE-2024-1408 | ProfilePress WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.6% | 2024-02-29 | Fix |
| CVE-2024-1390 | Paid Membership Subscriptions WordPress plugin unauthorized access | 4.3CNA v3.1 | 0.5% | 2024-02-29 | Fix |
| CVE-2024-1389 | Paid Membership Subscriptions WordPress plugin unauthorized access | 5.3CNA v3.1 | 0.5% | 2024-02-29 | Fix |
| CVE-2024-1349 | EmbedPress WordPress plugin authenticated (Contributor+) stored cross-site scripting via shortcode | 5.4v3.1 | 0.4% | 2024-02-29 | Fix |
| CVE-2024-1341 | Advanced iFrame WordPress plugin authenticated (Contributor+) stored cross-site scripting | 5.4v3.1 | 0.3% | 2024-02-29 | Fix |
| CVE-2024-1340 | Login Lockdown Protect Login Form WordPress plugin missing authorization | 5.4CNA v3.1 | 0.4% | 2024-02-29 | Fix |
| CVE-2024-1339 | ImageRecycle pdf and image compression WordPress plugin cross-site request forgery | 4.3CNA v3.1 | 0.2% | 2024-02-29 | Fix |
| CVE-2024-1338 | ImageRecycle pdf and image compression WordPress plugin cross-site request forgery | 4.3CNA v3.1 | 0.2% | 2024-02-29 | Fix |
| CVE-2024-1337 | SKT Page Builder WordPress plugin missing authorization authenticated content injection | 4.3CNA v3.1 | 0.3% | 2024-02-29 | Fix |
| CVE-2024-1336 | ImageRecycle pdf and image compression WordPress plugin cross-site request forgery | 4.3CNA v3.1 | 0.2% | 2024-02-29 | Fix |
| CVE-2024-1335 | ImageRecycle pdf and image compression WordPress plugin cross-site request forgery | 4.3CNA v3.1 | 0.2% | 2024-02-29 | Fix |
| CVE-2024-1334 | ImageRecycle pdf and image compression WordPress plugin cross-site request forgery | 4.3CNA v3.1 | 0.2% | 2024-02-29 | Fix |
| CVE-2024-1322 | Directorist WordPress plugin missing authorization to unauthenticated settings Change | 5.3CNA v3.1 | 0.5% | 2024-02-29 | Fix |
| CVE-2024-1318 | RSS Aggregator by Feedzy WordPress plugin unauthorized access | 6.5CNA v3.1 | 0.5% | 2024-02-29 | Fix |
| CVE-2024-1317 | RSS Aggregator by Feedzy WordPress plugin Authenticated(Contributor+) SQL injection | 8.8CNA v3.1 | 0.7% | 2024-02-29 | Fix |
| CVE-2024-1294 | Sunshine Photo Cart: Free Client Galleries for Photographers WordPress plugin information disclosure | 5.3CNA v3.1 | 0.7% | 2024-02-29 | Fix |
| CVE-2024-1288 | Schema and Structured Data for WP and AMP WordPress plugin unauthorized access | 4.3CNA v3.1 | 0.4% | 2024-02-29 | Fix |
| CVE-2024-1282 | Email Encoder Protect Email Addresses and Phone Numbers WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.4% | 2024-02-29 | Fix |
| CVE-2024-1277 | Ocean Extra WordPress plugin authenticated (Contributor+) stored cross-site scripting | 5.4v3.1 | 0.5% | 2024-02-29 | Fix |
| CVE-2024-1276 | Essential Addons for Elementor WordPress plugin stored cross-site scripting | 6.4CNA v3.1 | 0.4% | 2024-02-29 | Fix |
| CVE-2024-1242 | Premium Addons for Elementor WordPress plugin stored cross-site scripting | 6.4CNA v3.1 | 0.4% | 2024-02-29 | Fix |
| CVE-2024-1236 | Essential Addons for Elementor WordPress plugin stored cross-site scripting | 6.4CNA v3.1 | 0.5% | 2024-02-29 | Fix |
| CVE-2024-1235 | Elementor Addons by Livemesh WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.4% | 2024-02-29 | Fix |
| CVE-2024-1218 | Contact Form builder with drag and drop for WordPress Kali Forms plugin missing authorization | 5.4v3.1 | 0.3% | 2024-02-29 | Fix |
| CVE-2024-1217 | wpchill Kali Forms missing authorization | 4.3NVD v3.1 | 0.3% | 2024-02-29 | Fix |
| CVE-2024-1206 | WP Recipe Maker WordPress plugin missing authorization to authenticated (Subscriber+) SQL Injecton | 8.8CNA v3.1 | 0.7% | 2024-02-29 | Fix |
| CVE-2024-1192 | South River WebDrive New Secure WebDAV denial of service | 5.5v3.1 | 0.4% | 2024-02-29 | |
| CVE-2024-1191 | Hyper CdCatalog HCF file denial of service | 5.5v3.1 | 0.4% | 2024-02-29 | |
| CVE-2024-1172 | Essential Addons for Elementor WordPress plugin stored cross-site scripting | 5.4CNA v3.1 | 0.5% | 2024-02-29 | Fix |
| CVE-2024-1171 | Essential Addons for Elementor WordPress plugin stored cross-site scripting | 5.4CNA v3.1 | 0.4% | 2024-02-29 | Fix |
| CVE-2024-1133 | Tutor LMS WordPress plugin missing authorization | 4.3CNA v3.1 | 0.4% | 2024-02-29 | Fix |
| CVE-2024-1130 | NEX-Forms Ultimate Form Builder Contact forms and much more WordPress plugin missing authorization | 4.3v3.1 | 0.6% | 2024-02-29 | Fix |
| CVE-2024-1129 | NEX-Forms Ultimate Form Builder Contact forms and much more WordPress plugin missing authorization | 4.3v3.1 | 0.6% | 2024-02-29 | Fix |
| CVE-2024-1128 | Tutor LMS WordPress plugin Authenticated(Student+) HTML injection via Q&A | 3.5NVD v3.1 | 0.5% | 2024-02-29 | Fix |
| CVE-2024-1091 | ImageRecycle pdf and image compression WordPress plugin unauthorized access | 4.3CNA v3.1 | 0.3% | 2024-02-29 | Fix |
| CVE-2024-1090 | ImageRecycle pdf and image compression WordPress plugin unauthorized access | 4.3CNA v3.1 | 0.3% | 2024-02-29 | Fix |
| CVE-2024-1089 | ImageRecycle pdf and image compression WordPress plugin unauthorized access | 4.3CNA v3.1 | 0.4% | 2024-02-29 | Fix |
| CVE-2024-1070 | SiteOrigin Widgets Bundle WordPress plugin authenticated (Contributor+) stored cross-site scripting | 5.4v3.1 | 0.5% | 2024-02-29 | Fix |
| CVE-2024-1058 | SiteOrigin Widgets Bundle WordPress plugin authenticated (Contributor+) stored cross-site scripting | 5.4v3.1 | 0.4% | 2024-02-29 | Fix |
| CVE-2024-1054 | Booster for WooCommerce WordPress plugin authenticated (Contributor+) stored cross-site scripting | 5.4v3.1 | 0.3% | 2024-02-29 | Fix |
| CVE-2024-1044 | Customer Reviews for WooCommerce WordPress plugin improper authorization via submit_review | 5.3CNA v3.1 | 0.4% | 2024-02-29 | Fix |
| CVE-2024-1043 | AMP for WP WordPress plugin arbitrary post deletion via amppb_remove_saved_layout_data | 6.5CNA v3.1 | 0.7% | 2024-02-29 | Fix |
| CVE-2024-0984 | ImageRecycle pdf and image compression WordPress plugin unauthorized access | 4.3CNA v3.1 | 0.4% | 2024-02-29 | Fix |
| CVE-2024-0983 | ImageRecycle pdf and image compression WordPress plugin unauthorized access | 4.3CNA v3.1 | 0.4% | 2024-02-29 | Fix |
| CVE-2024-0978 | My Private Site WordPress plugin improper access control to sensitive information exposure | 5.3CNA v3.1 | 0.5% | 2024-02-29 | Fix |
| CVE-2024-0907 | NEX-Forms Ultimate Form Builder Contact forms and much more WordPress plugin missing authorization | 4.3v3.1 | 0.6% | 2024-02-29 | Fix |
| CVE-2024-0864 | Leo Khoa Laragon Simple Ajax Uploader plugin vulnerability | 9.8CISA ADP v3.1 | 1.4% | 2024-02-29 | |
| CVE-2024-0838 | Happy Addons for Elementor WordPress plugin authenticated (Contributor+) stored cross-site scripting | 5.4v3.1 | 0.5% | 2024-02-29 | Fix |
| CVE-2024-0821 | WPFactory Cost of Goods for WooCommerce section parameter reflected cross-site scripting | 6.1v3.1 | 0.4% | 2024-02-29 | Fix |
| CVE-2024-0792 | WP Shortcodes Plugin Shortcodes Ultimate WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.4% | 2024-02-29 | Fix |
| CVE-2024-0702 | Oliver POS A WooCommerce Point of Sale (POS) WordPress plugin missing authorization | 7.3CNA v3.1 | 0.5% | 2024-02-29 | Fix |
| CVE-2024-0689 | Custom Field Suite WordPress plugin authenticated (Admin+) stored cross-site scripting | 4.8v3.1 | 0.3% | 2024-02-29 | Fix |
| CVE-2024-0658 | Insert PHP Code Snippet WordPress plugin authenticated (Admin+) stored cross-site scripting | 4.8v3.1 | 0.3% | 2024-02-29 | Fix |
| CVE-2024-0656 | Password Protected WordPress plugin authenticated (Admin+) stored cross-site scripting | 4.8v3.1 | 0.3% | 2024-02-29 | Fix |
| CVE-2024-0621 | Simple Share Buttons Adder WordPress plugin stored cross-site scripting | 4.8v3.1 | 0.5% | 2024-02-29 | Fix |
| CVE-2024-0620 | PPWP Password Protect Pages WordPress plugin Protection Mechanism bypass | 5.3v3.1 | 0.5% | 2024-02-29 | Fix |
| CVE-2024-0616 | Passster WordPress plugin information disclosure | 5.3v3.1 | 0.5% | 2024-02-29 | Fix |
| CVE-2024-0604 | Best WordPress Gallery Plugin FooGallery stored cross-site scripting | 4.8v3.1 | 0.6% | 2024-02-29 | Fix |
| CVE-2024-0602 | Yet Another Related Posts Plugin (YARPP) WordPress plugin stored cross-site scripting | 4.0v3.1 | 0.5% | 2024-02-29 | Fix |
| CVE-2024-0590 | Microsoft Clarity WordPress plugin cross-site request forgery to stored cross-site scripting | 6.1v3.1 | 1.3% | 2024-02-29 | Exploit codeFix |
| CVE-2024-0516 | Royal Elementor Addons and Templates WordPress plugin missing authorization | 5.3CNA v3.1 | 0.2% | 2024-02-29 | Fix |
| CVE-2024-0515 | Royal Elementor Addons and Templates WordPress plugin cross-site request forgery | 4.3CNA v3.1 | 0.2% | 2024-02-29 | Fix |
| CVE-2024-0514 | Royal Elementor Addons and Templates WordPress plugin cross-site request forgery via add_to_compare | 4.3CNA v3.1 | 0.2% | 2024-02-29 | Fix |
| CVE-2024-0513 | Royal Elementor Addons and Templates WordPress plugin cross-site request forgery | 4.3CNA v3.1 | 0.2% | 2024-02-29 | Fix |
| CVE-2024-0512 | Royal Elementor Addons and Templates WordPress plugin cross-site request forgery via add_to_wishlist | 4.3CNA v3.1 | 0.2% | 2024-02-29 | Fix |
| CVE-2024-0506 | Elementor Website Builder More than Just a Page Builder WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.5% | 2024-02-29 | Fix |
| CVE-2024-0442 | Royal Elementor Addons and Templates WordPress plugin stored cross-site scripting | 6.4CNA v3.1 | 0.5% | 2024-02-29 | Fix |
| CVE-2024-0438 | Happy Addons for Elementor WordPress plugin authenticated (Contributor+) stored cross-site scripting | 5.4v3.1 | 0.6% | 2024-02-29 | Fix |
| CVE-2024-0379 | Custom Twitter Feeds WordPress plugin cross-site request forgery | 4.3CNA v3.1 | 1.0% | 2024-02-29 | Exploit codeFix |
| CVE-2024-0068 | HYPR Workforce Access link following | 5.5CNA v3.1 | 0.2% | 2024-02-29 | Fix |
| CVE-2024-27948 | Atahualpa WordPress theme cross-site request forgery (CSRF) | 8.8v3.1 | 0.2% | 2024-02-28 | |
| CVE-2024-27913 | FRRouting missing resource initialization | 6.5v3.1 | 0.3% | 2024-02-28 | Fix |
| CVE-2024-27515 | mindstellar Osclass SQL injection | 7.2CISA ADP v3.1 | 0.6% | 2024-02-28 | |
| CVE-2024-27315 | Apache Superset: Improper error handling on alerts | 4.3CNA v3.1 | 1.0% | 2024-02-28 | Fix |
| CVE-2024-27285 | YARD's default template vulnerable to cross-site scripting in generated frames.html | 5.4CNA v3.1 | 1.1% | 2024-02-28 | Fix |
| CVE-2024-27103 | Querybook stored cross-site scripting allows Privilege Elevation | 6.1CNA v3.1 | 0.4% | 2024-02-28 | Fix |
| CVE-2024-26559 | Dagg uverif insecure storage of sensitive information | 5.3CISA ADP v3.1 | 0.7% | 2024-02-28 | |
| CVE-2024-26476 | openemr server-side request forgery | 3.5CISA ADP v3.1 | 0.4% | 2024-02-28 | |
| CVE-2024-26450 | Piwigo cross-site request forgery | 5.4CISA ADP v3.1 | 0.2% | 2024-02-28 | Fix |
| CVE-2024-26342 | ASUS 4g-ac68u usr/sbin/httpd null pointer dereference | 7.5CISA ADP v3.1 | 0.9% | 2024-02-28 | |
| CVE-2024-26016 | Apache Superset: Improper authorization validation on dashboards and charts import | 4.3CNA v3.1 | 0.9% | 2024-02-28 | Fix |
| CVE-2024-25927 | postMash custom post order WordPress plugin SQL injection | 9.8v3.1 | 0.6% | 2024-02-28 | |
| CVE-2024-25910 | MoveTo WordPress plugin SQL injection | 9.8v3.1 | 0.6% | 2024-02-28 | |
| CVE-2024-25902 | Malware Scanner WordPress plugin SQL injection | 7.2v3.1 | 0.5% | 2024-02-28 | Fix |
| CVE-2024-25869 | CodeAstro Membership Management System arbitrary file upload | 8.8CISA ADP v3.1 | 18.7% | 2024-02-28 | |
| CVE-2024-25868 | CodeAstro Membership Management System cross-site scripting | 6.1CISA ADP v3.1 | 0.6% | 2024-02-28 | |
| CVE-2024-25867 | CodeAstro Membership Management System SQL injection | 9.1CISA ADP v3.1 | 0.7% | 2024-02-28 | |
| CVE-2024-25866 | CodeAstro Membership Management System SQL injection | 8.8CISA ADP v3.1 | 0.8% | 2024-02-28 | |
| CVE-2024-25859 | Phillipsdata Blesta /path/to/uploads/ directory path traversal | 7.1CISA ADP v3.1 | 0.3% | 2024-02-28 | |
| CVE-2024-25579 | ELECOM WMC-X1800GST-B OS command injection | 6.8CISA ADP v3.1 | 0.8% | 2024-02-28 | |
| CVE-2024-25435 | MD1HEALTH MD1PATIENT cross-site scripting | 6.1v3.1 | 0.4% | 2024-02-28 | |
| CVE-2024-25422 | SEMCMS SQL injection | 9.8v3.1 | 1.0% | 2024-02-28 | Exploit code |
| CVE-2024-25351 | PHPGurukul Zoo Management System /zms/admin/changeimage.php SQL injection | 3.8CISA ADP v3.1 | 0.4% | 2024-02-28 | |
| CVE-2024-25350 | PHPGurukul Zoo Management System /zms/admin/edit-ticket.php SQL injection | 9.8CISA ADP v3.1 | 0.6% | 2024-02-28 | |
| CVE-2024-25202 | PHPGurukul User Registration and Login and User Management System cross-site scripting | 6.1CISA ADP v3.1 | 1.0% | 2024-02-28 | Exploit code |
| CVE-2024-25170 | Mezzanine allows attackers to bypass access controls via manipulating the host header | 9.1CISA ADP v3.1 | 0.9% | 2024-02-28 | |
| CVE-2024-25169 | Mezzanine allows attackers to bypass access control mechanisms | 9.8v3.1 | 1.1% | 2024-02-28 | Exploit code |
| CVE-2024-24868 | SP Project and Document Manager WordPress plugin SQL injection | 8.8v3.1 | 0.5% | 2024-02-28 | Fix |
| CVE-2024-24779 | Apache Superset: Improper data authorization when creating a new dataset | 5.0CNA v3.1 | 0.7% | 2024-02-28 | Fix |
| CVE-2024-24773 | Apache Superset: Improper validation of SQL statements allows for unauthorized access to data | 4.9CNA v3.1 | 0.8% | 2024-02-28 | Fix |
| CVE-2024-24772 | Apache Superset: Improper neutralisation of custom SQL on embedded context | 4.3CNA v3.1 | 1.0% | 2024-02-28 | Fix |
| CVE-2024-24705 | Accessibility WordPress plugin cross-site request forgery (CSRF) | 5.4CNA v3.1 | 0.2% | 2024-02-28 | Fix |
| CVE-2024-24702 | Page Restrict WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.2% | 2024-02-28 | |
| CVE-2024-24148 | Libming parseSWF_FREECHARACTER memory leak | 7.5CISA ADP v3.1 | 0.6% | 2024-02-28 | |
| CVE-2024-23910 | ELECOM WMC-X1800GST-B cross-site request forgery | 8.8v3.1 | 0.2% | 2024-02-28 | Fix |
| CVE-2024-22983 | Projectworlds Visitor Management System SQL injection | 8.1CISA ADP v3.1 | 0.8% | 2024-02-28 | Exploit code |
| CVE-2024-22723 | Webtrees path traversal | 4.9v3.1 | 0.9% | 2024-02-28 | |
| CVE-2024-22532 | XnView Nconvert XNSoft buffer overflow | 6.5CISA ADP v3.1 | 1.1% | 2024-02-28 | Exploit code |
| CVE-2024-22459 | Dell ECS improper access control | 6.8CNA v3.1 | 0.5% | 2024-02-28 | Fix |
| CVE-2024-21886 | Red Hat Enterprise Linux 6 Extended Lifecycle Support heap-based buffer overflow | 7.8CNA v3.1 | 1.4% | 2024-02-28 | Fix |
| CVE-2024-21885 | Red Hat Enterprise Linux 6 Extended Lifecycle Support heap-based buffer overflow | 7.8CNA v3.1 | 1.4% | 2024-02-28 | Fix |
| CVE-2024-21798 | ELECOM WMC-X1800GST-B cross-site scripting | 4.8v3.1 | 1.3% | 2024-02-28 | Fix |
| CVE-2024-21749 | 1 click disable all WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.2% | 2024-02-28 | Fix |
| CVE-2024-1972 | SourceCodester Online Job Portal EditProfile.php cross-site scripting | 5.4v3.1 | 0.5% | 2024-02-28 | |
| CVE-2024-1965 | Server-side request forgery vulnerability in Haivision Products | 5.3v3.1 | 0.4% | 2024-02-28 | |
| CVE-2024-1954 | Oliver POS A WooCommerce Point of Sale (POS) WordPress plugin cross-site request forgery | 6.3CNA v3.1 | 0.2% | 2024-02-28 | Fix |
| CVE-2024-1943 | Yuki WordPress theme cross-site request forgery to theme setting reset | 4.3v3.1 | 0.2% | 2024-02-28 | Fix |
| CVE-2024-1932 | Unrestricted upload of file with dangerous type in freescout-helpdesk/Freescout | 4.8v3.1 | 0.4% | 2024-02-28 | |
| CVE-2024-1892 | ReDoS vulnerability in scrapy/scrapy's XMLFeedSpider | 6.5NVD v3.1 | 0.6% | 2024-02-28 | Fix |
| CVE-2024-1861 | Bill Minozzi Anti Hacker scan table truncation function missing authorization | 4.3CNA v3.1 | 0.4% | 2024-02-28 | Fix |
| CVE-2024-1860 | Bill Minozzi Anti Hacker IP whitelist function missing authorization | 5.3v3.1 | 0.4% | 2024-02-28 | Fix |
| CVE-2024-1847 | Dassault Systèmes eDrawings file reading memory corruption | 7.8CNA v3.1 | 0.3% | 2024-02-28 | |
| CVE-2024-1808 | WP Shortcodes Plugin Shortcodes Ultimate WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.3% | 2024-02-28 | Fix |
| CVE-2024-1791 | CodeMirror Blocks WordPress plugin authenticated (Contributor+) stored cross-site scripting | 5.4v3.1 | 0.4% | 2024-02-28 | Fix |
| CVE-2024-1719 | Easy PayPal and Stripe Buy Now Button WordPress plugin cross-site request forgery | 4.3v3.1 | 0.3% | 2024-02-28 | Fix |
| CVE-2024-1636 | Progress Software Sitefinity potential cross-site scripting (XSS) in the page editing area | 8.0CNA v3.1 | 0.4% | 2024-02-28 | Fix |
| CVE-2024-1632 | Incorrect access control in the Sitefinity backend | 8.8CNA v3.1 | 0.5% | 2024-02-28 | Fix |
| CVE-2024-1568 | Seraphinite Accelerator WordPress plugin server-side request forgery in OnAdminApi_HtmlCheck | 6.4v3.1 | 0.3% | 2024-02-28 | Fix |
| CVE-2024-1566 | Redirects WordPress plugin missing authorization via save | 6.5CNA v3.1 | 0.5% | 2024-02-28 | |
| CVE-2024-1516 | WP eCommerce WordPress plugin missing authorization to unauthenticated arbitrary post creation | 5.3CNA v3.1 | 0.4% | 2024-02-28 | Fix |
| CVE-2024-1514 | WP eCommerce WordPress plugin unauthenticated SQL injection | 7.5NVD v3.1 | 0.7% | 2024-02-28 | Fix |
| CVE-2024-1476 | Under Construction / Maintenance Mode from Acurax WordPress plugin information exposure | 5.3CNA v3.1 | 0.5% | 2024-02-28 | |
| CVE-2024-1388 | Yuki WordPress theme missing authorization to authenticated (Subscriber+) theme setting reset | 4.3v3.1 | 0.3% | 2024-02-28 | Fix |
| CVE-2024-1368 | Page Duplicator WordPress plugin missing authorization to unauthenticated Post/Page Duplication | 5.3CNA v3.1 | 0.4% | 2024-02-28 | Fix |
| CVE-2024-1136 | Coming Soon Page and Maintenance Mode WordPress plugin Maintenance Mode bypass | 5.3CNA v3.1 | 0.5% | 2024-02-28 | Fix |
| CVE-2024-0975 | WordPress Access Control plugin improper access control to sensitive information exposure | 5.3CNA v3.1 | 0.5% | 2024-02-28 | Fix |
| CVE-2024-0786 | Conversios WordPress plugin authenticated (Subscriber+) SQL injection via ee_syncProductCategory | 6.5NVD v3.1 | 0.7% | 2024-02-28 | Fix |
| CVE-2024-0768 | Envo's Elementor Templates and Widgets for WooCommerce WordPress plugin cross-site request forgery | 4.3CNA v3.1 | 0.3% | 2024-02-28 | Fix |
| CVE-2024-0767 | Envo's Elementor Templates and Widgets for WooCommerce WordPress plugin cross-site request forgery | 4.3CNA v3.1 | 0.3% | 2024-02-28 | Fix |
| CVE-2024-0766 | Envo's Elementor Templates and Widgets for WooCommerce WordPress plugin missing authorization | 4.3CNA v3.1 | 0.5% | 2024-02-28 | Fix |
| CVE-2024-0682 | Page Restrict WordPress plugin Protection Mechanism bypass | 5.3CNA v3.1 | 0.5% | 2024-02-28 | |
| CVE-2024-0680 | WP Private Content Plus WordPress plugin Protection Mechanism bypass | 5.3CNA v3.1 | 0.6% | 2024-02-28 | Fix |
| CVE-2024-0560 | Red Hat 3scale token introspection policy improper handling of insufficient permissions | 6.3CNA v3.1 | 0.5% | 2024-02-28 | |
| CVE-2024-0550 | mintplex-labs/anything-llm privileged User using traversal to read system files | 6.5NVD v3.1 | 0.7% | 2024-02-28 | Fix |
| CVE-2024-0433 | Gestpay for WooCommerce WordPress plugin cross-site request forgery (CSRF) | 4.3v3.1 | 0.3% | 2024-02-28 | Fix |
| CVE-2024-0432 | Gestpay for WooCommerce WordPress plugin cross-site request forgery (CSRF) via ajax_delete_card | 4.3v3.1 | 0.3% | 2024-02-28 | Fix |
| CVE-2024-0431 | Gestpay for WooCommerce WordPress plugin cross-site request forgery (CSRF) via ajax_set_default_card | 4.3v3.1 | 0.3% | 2024-02-28 | Fix |
| CVE-2024-27905 | Apache Aurora: Padding oracle can allow construction an authentication cookie | 9.1CISA ADP v3.1 | 1.5% | 2024-02-27 | Fix |
| CVE-2024-27508 | Atheme crypto-benchmark utility memory leak | 7.5CISA ADP v3.1 | 0.7% | 2024-02-27 | |
| CVE-2024-27507 | libLAS ts2las utility memory leak | 7.5CISA ADP v3.1 | 1.2% | 2024-02-27 | Fix |
| CVE-2024-27356 | GL.iNet AR300M16 information disclosure | 7.5CISA ADP v3.1 | 23.9% | 2024-02-27 | Emerging ThreatsExploit codeKCV |
| CVE-2024-27099 | Azure IoT Platform Device SDK double free | 9.8CNA v3.1 | 1.4% | 2024-02-27 | Fix |
| CVE-2024-26542 | bonitasoft Bonita Web cross-site scripting | 6.1CISA ADP v3.1 | 0.5% | 2024-02-27 | |
| CVE-2024-26302 | HPE Aruba ClearPass Policy Manager incorrect default permissions | 4.8CNA v3.1 | 0.4% | 2024-02-27 | |
| CVE-2024-26301 | HPE Aruba ClearPass Policy Manager information disclosure | 6.5CNA v3.1 | 0.5% | 2024-02-27 | |
| CVE-2024-26300 | HPE Aruba ClearPass Policy Manager cross-site scripting | 6.6CNA v3.1 | 0.4% | 2024-02-27 | |
| CVE-2024-26299 | HPE Aruba ClearPass Policy Manager cross-site scripting | 6.6CNA v3.1 | 0.4% | 2024-02-27 | |
| CVE-2024-26298 | HPE Aruba ClearPass Policy Manager command injection | 7.2CNA v3.1 | 0.9% | 2024-02-27 | |
| CVE-2024-26297 | HPE Aruba ClearPass Policy Manager command injection | 7.2CNA v3.1 | 0.9% | 2024-02-27 | |
| CVE-2024-26296 | HPE Aruba ClearPass Policy Manager command injection | 7.2CNA v3.1 | 0.9% | 2024-02-27 | |
| CVE-2024-26295 | HPE Aruba ClearPass Policy Manager command injection | 7.2CNA v3.1 | 0.9% | 2024-02-27 | |
| CVE-2024-26294 | HPE Aruba ClearPass Policy Manager command injection | 7.2CNA v3.1 | 0.9% | 2024-02-27 | |
| CVE-2024-26144 | rails Possible Sensitive Session information leak in Active Storage | 5.3CNA v3.1 | 1.1% | 2024-02-27 | Exploit codeFix |
| CVE-2024-26143 | Rails possible XSS vulnerability in action controller | 6.1CNA v3.1 | 1.0% | 2024-02-27 | Fix |
| CVE-2024-26142 | Rails possible ReDoS vulnerability in Accept header parsing in Action Dispatch | 7.5CNA v3.1 | 1.5% | 2024-02-27 | Fix |
| CVE-2024-25846 | Myprestamodules Product Catalog (csv, Excel) Import unrestricted file upload | 9.1CISA ADP v3.1 | 0.8% | 2024-02-27 | |
| CVE-2024-25843 | PrestaShop Import/update Bulk Product SQL injection | 9.8CISA ADP v3.1 | 0.6% | 2024-02-27 | Fix |
| CVE-2024-25841 | Common-services So Flexibilite cross-site scripting | 5.9CISA ADP v3.1 | 0.4% | 2024-02-27 | |
| CVE-2024-25840 | Prestaworld Account Manager path traversal | 7.5CISA ADP v3.1 | 0.6% | 2024-02-27 | Fix |
| CVE-2024-25723 | ZenML server remote privilege escalation | 8.8CISA ADP v3.1 | 70.8% | 2024-02-27 | NucleiExploit codeFix |
| CVE-2024-25711 | diffoscope path traversal | 7.5v3.1 | 1.0% | 2024-02-27 | Fix |
| CVE-2024-25400 | Intelliants subrion SQL injection | 9.8CISA ADP v3.1 | 0.7% | 2024-02-27 | |
| CVE-2024-25399 | Subrion CMS vulnerable to cross-site scripting | 6.1CISA ADP v3.1 | 0.3% | 2024-02-27 | |
| CVE-2024-25398 | Srelay denial of service | 7.5CISA ADP v3.1 | 0.7% | 2024-02-27 | |
| CVE-2024-25166 | Xiaocheng-keji 71cms cross-site scripting | 6.1CISA ADP v3.1 | 0.5% | 2024-02-27 | |
| CVE-2024-24721 | Innovaphone Pbx missing brute-force protection | 6.5CISA ADP v3.1 | 0.3% | 2024-02-27 | |
| CVE-2024-24720 | Innovaphone Pbx information disclosure | 5.3CISA ADP v3.1 | 0.5% | 2024-02-27 | Fix |
| CVE-2024-24323 | linlinjava litemall SQL injection | 7.2CISA ADP v3.1 | 0.7% | 2024-02-27 | |
| CVE-2024-24100 | Carmelo Computer Book Store SQL injection | 8.3CISA ADP v3.1 | 0.6% | 2024-02-27 | |
| CVE-2024-24099 | code-projects Scholars Tracking System SQL injection | 5.4CISA ADP v3.1 | 0.4% | 2024-02-27 | |
| CVE-2024-24096 | Carmelo Computer Book Store SQL injection | 7.8CISA ADP v3.1 | 0.4% | 2024-02-27 | |
| CVE-2024-24095 | code-projects Simple Stock System SQL injection | 9.8CISA ADP v3.1 | 0.6% | 2024-02-27 | |
| CVE-2024-24027 | likeshop SQL injection | 7.2CISA ADP v3.1 | 0.7% | 2024-02-27 | |
| CVE-2024-22917 | Lopalopa Dynamic Lab Management System SQL injection | 8.6CISA ADP v3.1 | 0.7% | 2024-02-27 | |
| CVE-2024-22544 | Linksys E1700 command injection | 8.0CISA ADP v3.1 | 9.3% | 2024-02-27 | |
| CVE-2024-22543 | Linksys E1700 insufficient session expiration | 6.1CISA ADP v3.1 | 1.2% | 2024-02-27 | |
| CVE-2024-21742 | Apache James Mime4J: Mime4J DOM header injection | 5.3v3.1 | 1.1% | 2024-02-27 | Fix |
| CVE-2024-1926 | SourceCodester Free and Open Source Inventory Management System SQL injection | 9.8v3.1 | 0.6% | 2024-02-27 | |
| CVE-2024-1925 | Ctcms Upsys.php unrestricted upload | 8.1v3.1 | 0.6% | 2024-02-27 | |
| CVE-2024-1924 | CodeAstro Membership Management System get_membership_amount.php SQL injection | 5.3v3.1 | 0.5% | 2024-02-27 | |
| CVE-2024-1923 | SourceCodester Simple Student Attendance System ajax-api.php delete_student function SQL injection | 9.8v3.1 | 0.8% | 2024-02-27 | |
| CVE-2024-1922 | SourceCodester Online Job Portal Manage Job Page ManageJob.php cross-site scripting | 5.4v3.1 | 0.5% | 2024-02-27 | |
| CVE-2024-1921 | osuuu LightPicture Setup.php unrestricted upload | 9.8v3.1 | 0.6% | 2024-02-27 | |
| CVE-2024-1920 | osuuu LightPicture TokenVerify.php handle hard-coded key | 8.1v3.1 | 0.7% | 2024-02-27 | |
| CVE-2024-1919 | SourceCodester Online Job Portal Manage Walkin Page ManageWalkin.php cross-site scripting | 5.4v3.1 | 0.5% | 2024-02-27 | |
| CVE-2024-1918 | Byzoro Smart S42 Management Platform userattestation.php unrestricted upload | 9.8v3.1 | 2.3% | 2024-02-27 | |
| CVE-2024-1912 | Categorify WordPress plugin cross-site request forgery via categorifyAjaxUpdateFolderPosition | 4.3CNA v3.1 | 0.2% | 2024-02-27 | Fix |
| CVE-2024-1910 | Categorify WordPress plugin cross-site request forgery via categorifyAjaxClearCategory | 4.3CNA v3.1 | 0.2% | 2024-02-27 | Fix |
| CVE-2024-1909 | Categorify WordPress plugin cross-site request forgery via categorifyAjaxRenameCategory | 4.3CNA v3.1 | 0.2% | 2024-02-27 | Fix |
| CVE-2024-1907 | Categorify WordPress plugin cross-site request forgery via categorifyAjaxDeleteCategory | 4.3CNA v3.1 | 0.2% | 2024-02-27 | Fix |
| CVE-2024-1906 | Categorify WordPress plugin cross-site request forgery via categorifyAjaxAddCategory | 4.3CNA v3.1 | 0.2% | 2024-02-27 | Fix |
| CVE-2024-1698 | NotificationX WordPress plugin SQL injection | 9.8v3.1 | 77.4% | 2024-02-27 | NucleiExploit codeFix |
| CVE-2024-1687 | VillaTheme Thank You Page Customizer for WooCommerce missing authorization | 5.4CNA v3.1 | 0.4% | 2024-02-27 | Fix |
| CVE-2024-1686 | Thank You Page Customizer for WooCommerce WordPress plugin missing authorization | 6.5NVD v3.1 | 0.4% | 2024-02-27 | Fix |
| CVE-2024-1653 | Categorify WordPress plugin missing authorization in categorifyAjaxUpdateFolderPosition | 4.3CNA v3.1 | 0.3% | 2024-02-27 | Fix |
| CVE-2024-1652 | Categorify WordPress plugin missing authorization in categorifyAjaxClearCategory | 4.3CNA v3.1 | 0.3% | 2024-02-27 | Fix |
| CVE-2024-1650 | Categorify WordPress plugin missing authorization in categorifyAjaxRenameCategory | 4.3CNA v3.1 | 0.3% | 2024-02-27 | Fix |
| CVE-2024-1649 | Categorify WordPress plugin missing authorization in categorifyAjaxDeleteCategory | 4.3CNA v3.1 | 0.3% | 2024-02-27 | Fix |
| CVE-2024-1403 | Authentication bypass in OpenEdge Authentication Gateway and AdminServer | 10.0CNA v3.1 | 3.3% | 2024-02-27 | Exploit codeFix |
| CVE-2024-1323 | Orbit Fox by ThemeIsle WordPress plugin authenticated (Contributor+) stored cross-site scripting | 5.4v3.1 | 0.5% | 2024-02-27 | Fix |
| CVE-2024-1106 | Shariff Wrapper WordPress plugin Admin+ stored XSS | 6.1CISA ADP v3.1 | 0.4% | 2024-02-27 | Fix |
| CVE-2024-0855 | Spiffy Calendar WordPress plugin broken access control | 5.3CISA ADP v3.1 | 0.5% | 2024-02-27 | Fix |
| CVE-2024-0819 | TeamViewer Remote Full Client incomplete protection of personal password settings | 7.8v3.1 | 0.2% | 2024-02-27 | Fix |
| CVE-2024-0763 | mintplex-labs/anything-llm improper validation of document removal parameter | 8.1v3.1 | 0.9% | 2024-02-27 | Fix |
| CVE-2024-0759 | mintplex-labs/anything-llm collection of internally resolving IPs | 7.5v3.1 | 1.0% | 2024-02-27 | Fix |
| CVE-2024-0551 | mintplex-labs/anything-llm download and export of file via default user role | 7.1v3.1 | 0.6% | 2024-02-27 | Fix |
| CVE-2024-0197 | Privilege escalation in Thales SafeNet Sentinel HASP LDK | 7.8CNA v3.1 | 0.4% | 2024-02-27 | Exploit codeFix |
| CVE-2024-27456 | Rack CORS Middleware has insecure file permissions | 9.1CISA ADP v3.1 | 0.8% | 2024-02-26 | Fix |
| CVE-2024-27455 | Bentley AssetWise ALIM Web file download function session data exposure | 9.1CISA ADP v3.1 | 0.6% | 2024-02-26 | |
| CVE-2024-27454 | Orjson does not limit recursion for deeply nested JSON documents | 7.5CNA v3.1 | 1.2% | 2024-02-26 | Fix |
| CVE-2024-27447 | pretix mishandles file validation | 9.8CISA ADP v3.1 | 0.8% | 2024-02-26 | Fix |
| CVE-2024-27444 | LangChain Experimental vulnerable to arbitrary code execution | 9.8CISA ADP v3.1 | 0.8% | 2024-02-26 | Fix |
| CVE-2024-27359 | WithSecure security products archive scanning engine infinite loop | 7.5CISA ADP v3.1 | 0.7% | 2024-02-26 | |
| CVE-2024-27350 | Amazon Fire OS Fire TV ADB debugging vulnerability | 5.9CISA ADP v3.1 | 0.3% | 2024-02-26 | |
| CVE-2024-27093 | Minder trusts client-provided mapping from repo name to upstream ID | 4.6CNA v3.1 | 0.6% | 2024-02-26 | Fix |
| CVE-2024-27088 | es5-ext regular expression denial of service in `function#copy` and `function#toStringTokens` | 0.0CNA v3.1 | 0.5% | 2024-02-26 | Exploit codeFix |
| CVE-2024-27087 | Kirby cross-site scripting (XSS) in the link field Custom type | 4.6CNA v3.1 | 0.3% | 2024-02-26 | Fix |
| CVE-2024-27081 | ESPHome remote code execution via arbitrary file write | 7.2CNA v3.1 | 1.5% | 2024-02-26 | Fix |
| CVE-2024-26606 | Linux kernel binder driver vulnerability | 5.5v3.1 | 0.2% | 2024-02-26 | Fix |
| CVE-2024-26605 | Linux kernel PCI ASPM deadlock | 5.5v3.1 | 0.2% | 2024-02-26 | Fix |
| CVE-2024-26604 | Linux kernel kobject null pointer dereference | 5.5v3.1 | 0.3% | 2024-02-26 | Fix |
| CVE-2024-26603 | Linux kernel x86 FPU xsave buffer handling infinite loop | 5.5v3.1 | 0.3% | 2024-02-26 | Fix |
| CVE-2024-26602 | Linux kernel sys_membarrier syscall vulnerability | 5.5v3.1 | 0.3% | 2024-02-26 | Fix |
| CVE-2024-26600 | Linux kernel OMAP USB2 PHY driver null pointer dereference | 5.5v3.1 | 0.3% | 2024-02-26 | Fix |
| CVE-2024-26468 | Jstrieb URL Pages component index.html DOM-based cross-site scripting | 6.1CISA ADP v3.1 | 0.4% | 2024-02-26 | |
| CVE-2024-26467 | Tabatkins Railroad-diagram Generator component generator.html DOM-based cross-site scripting | 6.1CISA ADP v3.1 | 0.4% | 2024-02-26 | |
| CVE-2024-26466 | Web-platform-tests component /dom/ranges/Range-test-iframe.html DOM-based cross-site scripting | 6.1CISA ADP v3.1 | 0.4% | 2024-02-26 | |
| CVE-2024-26465 | component /beep/Beep.Instrument.js of stewdio beep.js A DOM-based cross-site scripting | 6.1CISA ADP v3.1 | 0.4% | 2024-02-26 | |
| CVE-2024-26455 | treasure-data Fluent Bit use-after-free | 7.5CISA ADP v3.1 | 0.7% | 2024-02-26 | Fix |
| CVE-2024-26149 | Vyper _abi_decode Memory Overflow | 3.7CNA v3.1 | 0.5% | 2024-02-26 | Fix |
| CVE-2024-25925 | WooCommerce Easy Checkout Field Editor, Fees and Discounts WordPress plugin arbitrary file upload | 9.8v3.1 | 0.6% | 2024-02-26 | Fix |
| CVE-2024-25913 | MoveTo WordPress plugin arbitrary file upload | 9.8v3.1 | 0.6% | 2024-02-26 | |
| CVE-2024-25909 | WP Media folder WordPress plugin arbitrary file upload | 8.8NVD v3.1 | 0.6% | 2024-02-26 | Fix |
| CVE-2024-25770 | Libming action script compiler memory leak | 4.3CISA ADP v3.1 | 0.6% | 2024-02-26 | |
| CVE-2024-25768 | Trusteddomain OpenDMARC null pointer dereference | 7.5CISA ADP v3.1 | 0.7% | 2024-02-26 | Fix |
| CVE-2024-25767 | emqx nanomq use-after-free | 6.5CISA ADP v3.1 | 0.6% | 2024-02-26 | |
| CVE-2024-25763 | openNDS use-after-free | 5.5CISA ADP v3.1 | 0.5% | 2024-02-26 | Fix |
| CVE-2024-25751 | Tenda AC9 stack-based buffer overflow | 9.8CISA ADP v3.1 | 1.0% | 2024-02-26 | |
| CVE-2024-25410 | Flusity unrestricted file upload | 6.5CISA ADP v3.1 | 0.6% | 2024-02-26 | |
| CVE-2024-25344 | ITFlow cross-site scripting | 6.1CISA ADP v3.1 | 0.7% | 2024-02-26 | |
| CVE-2024-25248 | Niushop B2B2C Multi-business orderGoodsDelivery function SQL injection | 9.8v3.1 | 0.6% | 2024-02-26 | |
| CVE-2024-25247 | Niushop B2B2C Multi-business /app/api/controller/Store.php SQL injection | 9.8CISA ADP v3.1 | 0.6% | 2024-02-26 | |
| CVE-2024-25082 | FontForge command injection | 6.5CISA ADP v3.1 | 1.9% | 2024-02-26 | Exploit codeFix |
| CVE-2024-25081 | FontForge command injection | 4.2CISA ADP v3.1 | 1.1% | 2024-02-26 | Exploit codeFix |
| CVE-2024-24714 | Icons Font Loader WordPress plugin arbitrary file upload | 7.2v3.1 | 0.6% | 2024-02-26 | Fix |
| CVE-2024-24568 | Suricata http2: Header handling evasion | 5.3CNA v3.1 | 0.6% | 2024-02-26 | Fix |
| CVE-2024-24564 | Vyper extract32 can ready dirty memory | 3.7CNA v3.1 | 0.6% | 2024-02-26 | Fix |
| CVE-2024-24402 | Nagios XI improper privilege management | 9.8v3.1 | 3.4% | 2024-02-26 | Exploit codeFix |
| CVE-2024-24401 | Nagios XI SQL injection | 9.8CISA ADP v3.1 | 45.9% | 2024-02-26 | Exploit codeFix |
| CVE-2024-23839 | Suricata HTTP: Heap use-after-free with http.request_header and http.response_header keywords | 7.1CNA v3.1 | 0.8% | 2024-02-26 | Fix |
| CVE-2024-23837 | LibHTP unbounded folded header handling leads to denial service | 7.5CNA v3.1 | 1.2% | 2024-02-26 | Fix |
| CVE-2024-23836 | OISF suricata crafted traffic can cause denial of service | 7.5CNA v3.1 | 1.2% | 2024-02-26 | Fix |
| CVE-2024-23835 | Suricata's pgsql: Memory exhaustion use on record parsing | 7.5CNA v3.1 | 0.9% | 2024-02-26 | Fix |
| CVE-2024-23605 | llama.cpp GGUF library header.n_kv functionality heap-based buffer overflow | 9.8v3.1 | 1.3% | 2024-02-26 | |
| CVE-2024-23496 | llama.cpp GGUF library gguf_fread_str functionality heap-based buffer overflow | 9.8v3.1 | 1.3% | 2024-02-26 | |
| CVE-2024-22873 | Tencent Blueking Configuration Management Database server-side request forgery | 8.1CISA ADP v3.1 | 0.5% | 2024-02-26 | |
| CVE-2024-22371 | Apache Camel data exposure | 2.9CNA v3.1 | 0.7% | 2024-02-26 | Fix |
| CVE-2024-22201 | Jetty connection leaking on idle timeout when TCP congested | 7.5CNA v3.1 | 1.4% | 2024-02-26 | Fix |
| CVE-2024-21836 | llama.cpp GGUF library header.n_tensors functionality heap-based buffer overflow | 9.8v3.1 | 1.3% | 2024-02-26 | |
| CVE-2024-21825 | llama.cpp heap-based buffer overflow | 9.8v3.1 | 1.3% | 2024-02-26 | |
| CVE-2024-21802 | llama.cpp heap-based buffer overflow | 9.8v3.1 | 1.4% | 2024-02-26 | |
| CVE-2024-1899 | Showdownjs denial of service | 5.3CNA v3.1 | 0.8% | 2024-02-26 | |
| CVE-2024-1890 | Clickjacking vulnerability in Sunny Webbox | 5.4v3.1 | 0.5% | 2024-02-26 | |
| CVE-2024-1889 | Cross-site request forgery vulnerability in SMA Cluster Controller | 8.8v3.1 | 0.3% | 2024-02-26 | |
| CVE-2024-1886 | Absolute path traversal attack on LG Signage | 3.0CNA v3.1 | 0.8% | 2024-02-26 | Fix |
| CVE-2024-1885 | Remote code execution attack on LG Signage | 6.3CNA v3.1 | 0.9% | 2024-02-26 | Fix |
| CVE-2024-1878 | SourceCodester Employee Management System myprofile.php SQL injection | 8.8v3.1 | 0.6% | 2024-02-26 | |
| CVE-2024-1877 | SourceCodester Employee Management System cancel.php SQL injection | 8.8v3.1 | 0.6% | 2024-02-26 | |
| CVE-2024-1876 | SourceCodester Employee Management System psubmit.php SQL injection | 9.8v3.1 | 0.7% | 2024-02-26 | |
| CVE-2024-1875 | SourceCodester Complaint Management System complaint registration form arbitrary file upload | 8.8v3.1 | 0.9% | 2024-02-26 | |
| CVE-2024-1871 | SourceCodester Employee Management System Project Assignment Report assignp.php cross-site scripting | 5.4v3.1 | 0.5% | 2024-02-26 | |
| CVE-2024-1758 | SuperFaktura WooCommerce WordPress plugin blind server-side request forgery | 8.1v3.1 | 0.5% | 2024-02-26 | Fix |
| CVE-2024-1735 | Armeria SAML authentication bypass due to missing validation on unsigned SAML messages | 9.1CNA v3.1 | 0.8% | 2024-02-26 | Fix |
| CVE-2024-1710 | Addon Library WordPress plugin missing authorization authenticated arbitrary file upload | 8.8CNA v3.1 | 0.7% | 2024-02-26 | |
| CVE-2024-1622 | Routinator terminates when RTR connection is reset too quickly after opening | 7.5CNA v3.1 | 1.0% | 2024-02-26 | Fix |
| CVE-2024-1436 | WooCommerce Coupon Popup, SmartBar, Slide In MyShopKit WordPress plugin sensitive data exposure | 5.3v3.1 | 0.4% | 2024-02-26 | |
| CVE-2024-1165 | Brizy Page Builder WordPress plugin authenticated (Contributor+) directory traversal | 6.5v3.1 | 0.8% | 2024-02-26 | Fix |
| CVE-2024-0798 | Privilege escalation in mintplex-labs/anything-llm | 6.5NVD v3.1 | 0.6% | 2024-02-26 | Fix |
| CVE-2024-0455 | mintplex-labs/anything-llm SSRF on AWS deployed instances of AnythingLLM via /metadata | 7.5NVD v3.1 | 0.8% | 2024-02-26 | Fix |
| CVE-2024-0440 | mintplex-labs/anything-llm SSRF file:// unsanitized access to underlying host files | 6.5NVD v3.1 | 0.6% | 2024-02-26 | Fix |
| CVE-2024-0439 | mintplex-labs/anything-llm improper privilege management | 8.8v3.1 | 0.6% | 2024-02-26 | Fix |
| CVE-2024-0436 | mintplex-labs/anything-llm prevent timing attack for single-user password check | 5.9NVD v3.1 | 0.5% | 2024-02-26 | Fix |
| CVE-2024-0435 | mintplex-labs/anything-llm user can submit message to self-XSS | 5.4NVD v3.1 | 0.5% | 2024-02-26 | Fix |
| CVE-2024-0387 | Moxa EDS-4008 Series EDS-4000/G4000 Series IP Forwarding vulnerability | 6.5CNA v3.1 | 0.5% | 2024-02-26 | Fix |
| CVE-2024-0243 | langchain-ai/langchain server-side request forgery in Recursive URL Loader | 8.1v3.1 | 0.5% | 2024-02-26 | Fix |
| CVE-2024-26601 | Linux kernel ext4 fast commit replay vulnerability | 7.8CNA v3.1 | 0.3% | 2024-02-24 | Fix |
| CVE-2024-22395 | SonicWall SMA100 improper authentication | 6.3CNA v3.1 | 0.4% | 2024-02-24 | Fix |
| CVE-2024-21502 | Uninitialized variable in fastecdsa | 7.5v3.1 | 1.0% | 2024-02-24 | Fix |
| CVE-2024-21501 | sanitize-html information exposure | 5.3v3.1 | 1.0% | 2024-02-24 | Fix |
| CVE-2024-1810 | Archivist Custom Archive Templates WordPress plugin reflected cross-site scripting | 6.1v3.1 | 0.4% | 2024-02-24 | Fix |
| CVE-2024-27319 | Onnx out-of-bounds read | 9.1NVD v3.1 | 0.6% | 2024-02-23 | Fix |
| CVE-2024-27318 | Onnx directory traversal | 7.5NVD v3.1 | 1.2% | 2024-02-23 | Fix |
| CVE-2024-27133 | MLFlow cross-site scripting vulnerability leads to client-side remote code execution | 9.6NVD v3.1 | 0.7% | 2024-02-23 | Fix |
| CVE-2024-27132 | Insufficient sanitization in MLflow leads to XSS when running an untrusted recipe | 9.6NVD v3.1 | 0.9% | 2024-02-23 | Fix |
| CVE-2024-26599 | Linux kernel pwm out-of-bounds access | 7.8v3.1 | 0.3% | 2024-02-23 | Fix |
| CVE-2024-26598 | Linux kernel KVM arm64 vGIC ITS LPI translation cache use-after-free | 8.8CNA v3.1 | 0.2% | 2024-02-23 | Fix |
| CVE-2024-26597 | Linux kernel rmnet driver Netlink policy out-of-bounds read | 7.8CNA v3.1 | 0.3% | 2024-02-23 | Fix |
| CVE-2024-26596 | In the Linux kernel, the following vulnerability has been resolved: net: dsa: fix netdev_priv() dereference before check on non-DSA netdevice events After the blamed commit, we started doing this dereference for every NETDEV_CHANGEUPPER and NETDEV_PRECHANGEUPPER event in the system. static inline | 5.5NVD v3.1 | 0.2% | 2024-02-23 | Fix |
| CVE-2024-26595 | Linux kernel mlxsw ACL TCAM driver null pointer dereference | 5.5v3.1 | 0.2% | 2024-02-23 | Fix |
| CVE-2024-26594 | Linux kernel ksmbd session setup out-of-bounds read | 9.1CNA v3.1 | 51.2% | 2024-02-23 | Fix |
| CVE-2024-26593 | Linux kernel i801 I2C driver out-of-bounds read | 7.1v3.1 | 0.3% | 2024-02-23 | Fix |
| CVE-2024-26192 | Microsoft Edge (Chromium-based) information disclosure | 8.2CNA v3.1 | 1.5% | 2024-02-23 | Fix |
| CVE-2024-26188 | Microsoft Edge (Chromium-based) spoofing | 4.3CNA v3.1 | 0.8% | 2024-02-23 | Fix |
| CVE-2024-26150 | `@backstage/backend-common` vulnerable to path traversal through symlinks | 8.7CNA v3.1 | 0.8% | 2024-02-23 | Fix |
| CVE-2024-25928 | Sitepact's Contact Form 7 Extension For Klaviyo WordPress plugin SQL injection | 9.8v3.1 | 0.4% | 2024-02-23 | Fix |
| CVE-2024-25915 | Raaj Trambadia Pexels Free Stock Photos plugin server-side request forgery | 8.8v3.1 | 0.3% | 2024-02-23 | |
| CVE-2024-25730 | Hitrontech Coda-4589 insufficient entropy | 9.8CISA ADP v3.1 | 0.9% | 2024-02-23 | |
| CVE-2024-25629 | c-ares out-of-bounds read in ares__read_line | 4.4CNA v3.1 | 0.4% | 2024-02-23 | Fix |
| CVE-2024-25469 | crmeb_java SQL injection | 7.5CISA ADP v3.1 | 0.8% | 2024-02-23 | |
| CVE-2024-24681 | Yealink Configuration Encryption Tool hard-coded credentials | 9.8v3.1 | 1.0% | 2024-02-23 | |
| CVE-2024-24310 | Ethercreation Generate Barcode On Invoice / Delivery Slip SQL injection | 8.8CISA ADP v3.1 | 0.5% | 2024-02-23 | |
| CVE-2024-24309 | Ecomiz Survey Tma information disclosure | 7.5CISA ADP v3.1 | 0.6% | 2024-02-23 | Fix |
| CVE-2024-23320 | Apache DolphinScheduler: Arbitrary js execution as root for authenticated users | 8.8CISA ADP v3.1 | 1.4% | 2024-02-23 | Fix |
| CVE-2024-22988 | ZKTeco Zkbio Wdms code injection | 9.8CISA ADP v3.1 | 0.8% | 2024-02-23 | |
| CVE-2024-22776 | Wallosapp Wallos cross-site scripting | 4.7CISA ADP v3.1 | 0.5% | 2024-02-23 | |
| CVE-2024-22243 | Spring Framework URL Parsing with Host Validation | 8.1CNA v3.1 | 4.0% | 2024-02-23 | Exploit codeFix |
| CVE-2024-21423 | Microsoft Edge (Chromium-based) information disclosure | 4.8CNA v3.1 | 0.6% | 2024-02-23 | Fix |
| CVE-2024-1834 | SourceCodester Simple Student Attendance System ?page=attendance&class_id=1 cross-site scripting | 6.1v3.1 | 0.6% | 2024-02-23 | |
| CVE-2024-1833 | SourceCodester Employee Management System login.php SQL injection | 9.8v3.1 | 0.9% | 2024-02-23 | |
| CVE-2024-1832 | SourceCodester Complete File Management System Admin Login form SQL injection | 9.8v3.1 | 0.9% | 2024-02-23 | |
| CVE-2024-1831 | SourceCodester Complete File Management System Login form index.php SQL injection | 9.8v3.1 | 0.7% | 2024-02-23 | |
| CVE-2024-1830 | code-projects Library System lost-password.php SQL injection | 9.8v3.1 | 0.8% | 2024-02-23 | |
| CVE-2024-1829 | code-projects Library System registration.php SQL injection | 9.8v3.1 | 0.8% | 2024-02-23 | |
| CVE-2024-1828 | code-projects Library System registration.php SQL injection | 9.8v3.1 | 0.7% | 2024-02-23 | |
| CVE-2024-1827 | code-projects Library System login.php SQL injection | 9.8v3.1 | 0.7% | 2024-02-23 | |
| CVE-2024-1826 | code-projects Library System login.php SQL injection | 9.8v3.1 | 0.6% | 2024-02-23 | |
| CVE-2024-1825 | CodeAstro House Rental Management System User Registration page cross-site scripting | 6.1v3.1 | 0.5% | 2024-02-23 | |
| CVE-2024-1824 | CodeAstro House Rental Management System signing.php SQL injection | 9.8v3.1 | 0.6% | 2024-02-23 | |
| CVE-2024-1823 | CodeAstro Simple Voting System Backend users.php access control | 5.3v3.1 | 0.7% | 2024-02-23 | |
| CVE-2024-1822 | PHPGurukul Tourism Management System user-bookings.php cross-site scripting | 6.1v3.1 | 0.4% | 2024-02-23 | |
| CVE-2024-1821 | code-projects Crime Reporting System police_add.php SQL injection | 8.8v3.1 | 0.5% | 2024-02-23 | |
| CVE-2024-1820 | code-projects Crime Reporting System inchargelogin.php SQL injection | 9.8v3.1 | 0.6% | 2024-02-23 | |
| CVE-2024-1819 | CodeAstro Membership Management System Add Members Tab unrestricted upload | 7.2v3.1 | 0.7% | 2024-02-23 | |
| CVE-2024-1818 | CodeAstro Membership Management System Logo unrestricted upload | 7.2v3.1 | 0.7% | 2024-02-23 | |
| CVE-2024-1817 | Demososo DM Enterprise Website Building System cookie login handler improper authentication | 9.8v3.1 | 0.8% | 2024-02-23 | |
| CVE-2024-1786 | D-Link Dir-600m C1 Telnet service buffer overflow | 7.5v3.1 | 2.7% | 2024-02-23 | |
| CVE-2024-1784 | Limbas main_admin.php SQL injection | 6.6v3.1 | 0.7% | 2024-02-23 | |
| CVE-2024-1783 | Totolink LR1200GB Web interface cstecgi.cgi loginAuth stack-based overflow | 9.8v3.1 | 2.0% | 2024-02-23 | |
| CVE-2024-1781 | Totolink X6000R AX3000 shttpd cstecgi.cgi setWizardCfg command injection | 9.8v3.1 | 14.7% | 2024-02-23 | Exploit code |
| CVE-2024-1779 | Admin side data storage for Contact Form 7 WordPress plugin unauthorized access | 5.3CNA v3.1 | 0.4% | 2024-02-23 | |
| CVE-2024-1778 | Admin side data storage for Contact Form 7 WordPress plugin unauthorized access | 5.3v3.1 | 0.4% | 2024-02-23 | |
| CVE-2024-1777 | Admin side data storage for Contact Form 7 WordPress plugin cross-site request forgery | 4.3v3.1 | 0.2% | 2024-02-23 | |
| CVE-2024-1776 | Admin side data storage for Contact Form 7 WordPress plugin authenticated (Admin+) SQL injection | 7.2v3.1 | 0.6% | 2024-02-23 | |
| CVE-2024-1683 | DLL injection in Tenable Identity Exposure Secure Relay | 7.3CNA v3.1 | 0.3% | 2024-02-23 | Fix |
| CVE-2024-1590 | Page Builder: Pagelayer Drag and Drop website builder WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.4% | 2024-02-23 | Fix |
| CVE-2024-1362 | Colibri Page Builder WordPress plugin Cross-Site request Fogery via cp_shortcode_refresh | 4.3CNA v3.1 | 0.2% | 2024-02-23 | Fix |
| CVE-2024-1361 | Colibri Page Builder WordPress plugin Cross-Site request Fogery via extend_builder | 4.3CNA v3.1 | 0.2% | 2024-02-23 | Fix |
| CVE-2024-1360 | Colibri WP WordPress theme cross-site request forgery to limited plugin installation | 4.3v3.1 | 0.2% | 2024-02-23 | Fix |
| CVE-2024-0563 | Denial of service condition in M-Files Server | 4.3CNA v3.1 | 0.7% | 2024-02-23 | Fix |
| CVE-2024-27283 | Veritas eDiscovery Platform unrestricted file upload | 7.2v3.1 | 0.7% | 2024-02-22 | Fix |
| CVE-2024-26592 | Linux kernel ksmbd TCP connection handling use-after-free | 9.8CNA v3.1 | 1.0% | 2024-02-22 | Fix |
| CVE-2024-26591 | Linux kernel BPF tracing attachment null pointer dereference | 5.5v3.1 | 0.2% | 2024-02-22 | Fix |
| CVE-2024-26590 | Linux kernel EROFS decompression null pointer dereference | 5.5v3.1 | 0.2% | 2024-02-22 | Fix |
| CVE-2024-26589 | Linux kernel BPF verifier flow keys handling memory corruption | 7.8CNA v3.1 | 0.2% | 2024-02-22 | Fix |
| CVE-2024-26588 | Linux kernel BPF out-of-bounds access | 7.8v3.1 | 0.2% | 2024-02-22 | Fix |
| CVE-2024-26587 | Linux kernel netdevsim driver null pointer dereference | 5.5v3.1 | 0.2% | 2024-02-22 | Fix |
| CVE-2024-26586 | Linux kernel mlxsw ACL TCAM driver out-of-bounds write | 7.8CNA v3.1 | 0.2% | 2024-02-22 | Fix |
| CVE-2024-26578 | Apache Answer: Repeated submission at registration created duplicate users with the same name | 5.9v3.1 | 0.9% | 2024-02-22 | Fix |
| CVE-2024-26491 | Flusity Addon JD cross-site scripting | 6.1CISA ADP v3.1 | 0.4% | 2024-02-22 | |
| CVE-2024-26490 | Flusity Addon JD Simple module cross-site scripting | 5.4CISA ADP v3.1 | 0.4% | 2024-02-22 | |
| CVE-2024-26489 | Flusity Addon JD cross-site scripting | 6.1v3.1 | 0.4% | 2024-02-22 | |
| CVE-2024-26484 | getkirby kirby Edit Content Layout module stored cross-site scripting | 6.1CISA ADP v3.1 | 0.4% | 2024-02-22 | |
| CVE-2024-26483 | Kirby vulnerable to unrestricted file upload of user avatar images | 8.8CISA ADP v3.1 | 1.0% | 2024-02-22 | Fix |
| CVE-2024-26482 | getkirby kirby Edit Content Layout module HTML injection | 7.1CISA ADP v3.1 | 0.3% | 2024-02-22 | Fix |
| CVE-2024-26481 | Kirby vulnerable to self cross-site scripting (self-XSS) in the URL field | 4.7CISA ADP v3.1 | 0.4% | 2024-02-22 | Fix |
| CVE-2024-26445 | Flusity cross-site request forgery | 6.1CISA ADP v3.1 | 0.2% | 2024-02-22 | |
| CVE-2024-26352 | Flusity cross-site request forgery | 8.8CISA ADP v3.1 | 0.3% | 2024-02-22 | |
| CVE-2024-26351 | Flusity cross-site request forgery | 6.1CISA ADP v3.1 | 0.2% | 2024-02-22 | |
| CVE-2024-26350 | Flusity cross-site request forgery | 8.8v3.1 | 0.3% | 2024-02-22 | |
| CVE-2024-26349 | Flusity cross-site request forgery | 4.3CISA ADP v3.1 | 0.3% | 2024-02-22 | |
| CVE-2024-26284 | Mozilla Focus cross-site scripting | 6.1v3.1 | 0.3% | 2024-02-22 | Fix |
| CVE-2024-26283 | Mozilla Firefox cross-site scripting | 7.8CISA ADP v3.1 | 0.3% | 2024-02-22 | Fix |
| CVE-2024-26282 | Mozilla Firefox cross-site scripting | 7.1CISA ADP v3.1 | 0.3% | 2024-02-22 | Fix |
| CVE-2024-26281 | Mozilla Firefox cross-site scripting | 4.7CISA ADP v3.1 | 0.3% | 2024-02-22 | Fix |
| CVE-2024-26152 | HumanSignal Label Studio Choices and Labels tags cross-site scripting | 4.7CNA v3.1 | 2.2% | 2024-02-22 | Fix |
| CVE-2024-26151 | FelixSchwarz mjml-python potentially untrusted input is rendered as HTML in final output | 8.2CNA v3.1 | 0.6% | 2024-02-22 | Fix |
| CVE-2024-26128 | baserCMS cross-site scripting vulnerability in Content Management | 5.4CNA v3.1 | 0.6% | 2024-02-22 | Fix |
| CVE-2024-25876 | Enhavo cross-site scripting | 6.1CISA ADP v3.1 | 0.4% | 2024-02-22 | |
| CVE-2024-25875 | Enhavo cross-site scripting | 6.1CISA ADP v3.1 | 0.4% | 2024-02-22 | |
| CVE-2024-25874 | Enhavo cross-site scripting | 5.4CISA ADP v3.1 | 0.4% | 2024-02-22 | |
| CVE-2024-25873 | Enhavo cross-site scripting | 5.4CISA ADP v3.1 | 0.5% | 2024-02-22 | |
| CVE-2024-25851 | Netis Systems WF2780 OS command injection | 8.0CISA ADP v3.1 | 1.9% | 2024-02-22 | |
| CVE-2024-25850 | Netis Systems WF2780 command injection | 9.8CISA ADP v3.1 | 19.1% | 2024-02-22 | |
| CVE-2024-25828 | CmsEasy arbitrary file deletion | 4.9CISA ADP v3.1 | 0.6% | 2024-02-22 | |
| CVE-2024-25802 | Skinsoft S-museum unrestricted file upload | 9.8v3.1 | 0.6% | 2024-02-22 | |
| CVE-2024-25801 | Skinsoft S-museum unrestricted file upload | 6.1v3.1 | 0.3% | 2024-02-22 | |
| CVE-2024-25756 | Tenda AC9 stack-based buffer overflow | 8.0CISA ADP v3.1 | 0.6% | 2024-02-22 | |
| CVE-2024-25753 | Tenda AC9 stack-based buffer overflow | 8.8CISA ADP v3.1 | 0.6% | 2024-02-22 | |
| CVE-2024-25748 | Tenda AC9 stack-based buffer overflow | 8.8CISA ADP v3.1 | 0.6% | 2024-02-22 | |
| CVE-2024-25746 | Tenda AC9 stack-based buffer overflow | 8.8CISA ADP v3.1 | 0.4% | 2024-02-22 | |
| CVE-2024-25423 | Nemetschek Cinema 4D out-of-bounds write | 7.0CISA ADP v3.1 | 0.4% | 2024-02-22 | Exploit code |
| CVE-2024-25385 | FLVMeta use-after-free | 6.2CISA ADP v3.1 | 0.2% | 2024-02-22 | |
| CVE-2024-25369 | Thedaylightstudio Fuel CMS reflected cross-site scripting | 6.1CISA ADP v3.1 | 0.4% | 2024-02-22 | |
| CVE-2024-25251 | Carmelo Agro-School Management System improper access control | 8.8CISA ADP v3.1 | 0.7% | 2024-02-22 | |
| CVE-2024-25130 | Tuleap's mass update clears the permissions on artifact field | 5.4CNA v3.1 | 0.5% | 2024-02-22 | Fix |
| CVE-2024-25129 | Limited data exfiltration in CodeQL CLI | 2.7CNA v3.1 | 0.8% | 2024-02-22 | Fix |
| CVE-2024-25021 | IBM AIX command execution | 8.4CNA v3.1 | 0.3% | 2024-02-22 | Fix |
| CVE-2024-24817 | discourse-calendar user can see invitees in events created in PMs and private categories | 4.3CNA v3.1 | 0.4% | 2024-02-22 | Fix |
| CVE-2024-23349 | Apache Answer: XSS vulnerability when submitting summary | 5.4v3.1 | 1.1% | 2024-02-22 | Fix |
| CVE-2024-23137 | Autodesk AutoCAD STP and SLDPRT file parser use of uninitialized variable | 7.8CNA v3.1 | 1.0% | 2024-02-22 | Fix |
| CVE-2024-23136 | Autodesk AutoCAD STP file parser untrusted pointer dereference | 7.8CNA v3.1 | 0.4% | 2024-02-22 | Fix |
| CVE-2024-23135 | Autodesk AutoCAD SLDPRT file parser use-after-free | 7.8CNA v3.1 | 0.5% | 2024-02-22 | Fix |
| CVE-2024-23134 | Autodesk AutoCAD IGS file parser use-after-free | 7.8CNA v3.1 | 0.5% | 2024-02-22 | Fix |
| CVE-2024-23133 | Autodesk AutoCAD STP file import memory corruption | 7.8CNA v3.1 | 0.3% | 2024-02-22 | Fix |
| CVE-2024-23132 | Autodesk AutoCAD STP file import memory corruption | 7.8CNA v3.1 | 0.6% | 2024-02-22 | Fix |
| CVE-2024-23131 | Autodesk AutoCAD STP file import memory corruption | 7.8CNA v3.1 | 0.5% | 2024-02-22 | Fix |
| CVE-2024-23130 | Autodesk AutoCAD SLDASM and SLDPRT file import memory corruption | 7.8CNA v3.1 | 0.5% | 2024-02-22 | Fix |
| CVE-2024-23129 | Autodesk AutoCAD 3DM, STP and SLDASM file import memory corruption | 7.8CNA v3.1 | 0.4% | 2024-02-22 | Fix |
| CVE-2024-23128 | Autodesk AutoCAD MODEL file import memory corruption | 7.8CNA v3.1 | 0.5% | 2024-02-22 | Fix |
| CVE-2024-23127 | Autodesk AutoCAD MODEL, SLDPRT and SLDASM file import heap-based buffer overflow | 7.8CNA v3.1 | 0.5% | 2024-02-22 | Fix |
| CVE-2024-23126 | Autodesk AutoCAD CATPART file import stack-based buffer overflow | 7.8CNA v3.1 | 0.4% | 2024-02-22 | Fix |
| CVE-2024-23125 | Autodesk AutoCAD SLDPRT file import stack-based buffer overflow | 7.8CNA v3.1 | 0.4% | 2024-02-22 | Fix |
| CVE-2024-23124 | Autodesk AutoCAD STP file import out-of-bounds write | 7.8CNA v3.1 | 0.6% | 2024-02-22 | Fix |
| CVE-2024-23123 | Autodesk AutoCAD CATPART file import out-of-bounds write | 7.8CNA v3.1 | 0.6% | 2024-02-22 | Fix |
| CVE-2024-23122 | Autodesk AutoCAD 3DM file import out-of-bounds write | 7.8CNA v3.1 | 0.7% | 2024-02-22 | Fix |
| CVE-2024-23121 | Autodesk AutoCAD MODEL file import out-of-bounds write | 7.8CNA v3.1 | 0.6% | 2024-02-22 | Fix |
| CVE-2024-23120 | Autodesk AutoCAD STEP file import out-of-bounds write | 7.8CNA v3.1 | 0.5% | 2024-02-22 | Fix |
| CVE-2024-23094 | Flusity cross-site request forgery | 8.8CISA ADP v3.1 | 0.3% | 2024-02-22 | |
| CVE-2024-22547 | WAYOS Ibr-7150 cross-site scripting | 4.7CISA ADP v3.1 | 0.4% | 2024-02-22 | |
| CVE-2024-22393 | Apache Answer: Pixel Flood Attack by uploading the large pixel file | 9.1CISA ADP v3.1 | 2.5% | 2024-02-22 | Exploit codeFix |
| CVE-2024-1750 | TemmokuMVC Image Download images_get_down.php img_replace deserialization | 8.1v3.1 | 0.8% | 2024-02-22 | |
| CVE-2024-1749 | Bdtask Bhojon Best Restaurant Management Software message page message cross-site scripting | 4.8v3.1 | 0.5% | 2024-02-22 | |
| CVE-2024-1748 | van_der_Schaar LAB AutoPrognosis Release Note load_model_from_file deserialization | 7.5v3.1 | 0.7% | 2024-02-22 | |
| CVE-2024-1563 | Mozilla Focus time-of-check time-of-use race condition | 8.1v3.1 | 0.4% | 2024-02-22 | Fix |
| CVE-2024-1451 | Improper neutralization of input during web page generation (cross-site scripting) in GitLab | 8.7CNA v3.1 | 51.5% | 2024-02-22 | Fix |
| CVE-2024-1104 | Areal Topkapi Webserv2 temporary denial of service during a brute force attack | 7.5CNA v3.1 | 0.7% | 2024-02-22 | Fix |
| CVE-2024-1053 | Event Tickets and Registration WordPress plugin missing authorization | 4.3CNA v3.1 | 0.4% | 2024-02-22 | Fix |
| CVE-2024-0903 | User Feedback WordPress plugin stored cross-site scripting | 6.1v3.1 | 0.4% | 2024-02-22 | Fix |
| CVE-2024-0861 | Direct request (forced browsing) in GitLab | 4.3CNA v3.1 | 0.4% | 2024-02-22 | Fix |
| CVE-2024-0446 | Autodesk AutoCAD STP, CATPART and MODEL file parsing out-of-bounds write | 7.8CNA v3.1 | 0.5% | 2024-02-22 | Fix |
| CVE-2024-0220 | B&R Industrial Automation Automation Studio B&R products use insufficient communication encryption | 8.3CNA v3.1 | 0.4% | 2024-02-22 | Fix |
| CVE-2024-26585 | Linux kernel TLS socket layer race condition | 9.8CNA v3.1 | 0.6% | 2024-02-21 | Fix |
| CVE-2024-26584 | Linux kernel TLS crypto request handling vulnerability | 9.8CNA v3.1 | 0.7% | 2024-02-21 | Fix |
| CVE-2024-26583 | Linux kernel TLS socket layer race condition | 9.8CNA v3.1 | 0.6% | 2024-02-21 | Fix |
| CVE-2024-26582 | Linux kernel tls use-after-free | 9.8CNA v3.1 | 0.7% | 2024-02-21 | Fix |
| CVE-2024-26311 | Archerirm Archer cross-site scripting | 5.7CNA v3.1 | 0.5% | 2024-02-21 | Fix |
| CVE-2024-26310 | Archerirm Archer improper access control | 4.3v3.1 | 0.4% | 2024-02-21 | Fix |
| CVE-2024-26269 | Liferay Portal Frontend JS module's portlet.js and Liferay DXP vulnerable to cross-site scripting | 9.6CNA v3.1 | 0.6% | 2024-02-21 | Fix |
| CVE-2024-26266 | Liferay Portal and Liferay DXP vulnerable to stored cross-site scripting | 9.0CNA v3.1 | 0.6% | 2024-02-21 | Fix |
| CVE-2024-26148 | Querybook's stored cross-site scripting vulnerability allows Privilege Elevation | 6.1CNA v3.1 | 0.5% | 2024-02-21 | Fix |
| CVE-2024-26147 | Helm's Missing YAML Content leads to panic | 7.5CNA v3.1 | 0.9% | 2024-02-21 | Fix |
| CVE-2024-26145 | discourse-calendar uninvited user is able to join and mark the attendance of the the private event | 6.5CNA v3.1 | 0.4% | 2024-02-21 | Fix |
| CVE-2024-26138 | XWiki extension license information is public, exposing instance id and license holder details | 5.3CNA v3.1 | 0.5% | 2024-02-21 | Fix |
| CVE-2024-26133 | EventStoreDB Projections subsystem has potential password leak | 5.5CNA v3.1 | 0.6% | 2024-02-21 | Fix |
| CVE-2024-26130 | cryptography pkcs12.serialize_key_and_certificates function null pointer dereference | 7.5CNA v3.1 | 0.8% | 2024-02-21 | Fix |
| CVE-2024-25905 | Multi Step Form WordPress plugin cross-site request forgery (CSRF) | 5.4v3.1 | 0.2% | 2024-02-21 | Fix |
| CVE-2024-25904 | TinyMCE Professional Formats and Styles WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.2% | 2024-02-21 | |
| CVE-2024-25898 | ChurchCRM cross-site scripting | 6.1v3.1 | 0.4% | 2024-02-21 | |
| CVE-2024-25897 | ChurchCRM SQL injection | 9.8CISA ADP v3.1 | 1.6% | 2024-02-21 | Exploit code |
| CVE-2024-25896 | ChurchCRM SQL injection | 5.3CISA ADP v3.1 | 0.4% | 2024-02-21 | |
| CVE-2024-25895 | ChurchCRM A reflected cross-site scripting | 6.1CISA ADP v3.1 | 0.4% | 2024-02-21 | |
| CVE-2024-25894 | ChurchCRM SQL injection | 9.8CISA ADP v3.1 | 0.7% | 2024-02-21 | |
| CVE-2024-25893 | ChurchCRM SQL injection | 9.1CISA ADP v3.1 | 0.4% | 2024-02-21 | |
| CVE-2024-25892 | ChurchCRM SQL injection | 8.1CISA ADP v3.1 | 0.6% | 2024-02-21 | |
| CVE-2024-25891 | ChurchCRM SQL injection | 7.5CISA ADP v3.1 | 0.6% | 2024-02-21 | |
| CVE-2024-25603 | Liferay Portal Dynamic Data Mapping module's DDMForm stored cross-site scripting | 9.0CNA v3.1 | 0.6% | 2024-02-21 | Fix |
| CVE-2024-25602 | Liferay Portal and Liferay DXP's Users Admin module vulnerable to stored cross-site scripting | 9.0CNA v3.1 | 0.6% | 2024-02-21 | Fix |
| CVE-2024-25601 | Liferay Portal Expando module and Liferay DXP vulnerable to stored cross-site scripting | 9.0CNA v3.1 | 0.6% | 2024-02-21 | Fix |
| CVE-2024-25461 | Crm Creatio Terrasoft path traversal | 7.5CISA ADP v3.1 | 1.0% | 2024-02-21 | |
| CVE-2024-25381 | emlog There is a stored cross-site scripting | 6.1CISA ADP v3.1 | 0.4% | 2024-02-21 | |
| CVE-2024-25288 | SLIMS Senayan Library Management System SQL injection | 4.9CISA ADP v3.1 | 0.5% | 2024-02-21 | |
| CVE-2024-25249 | HE3 App code injection | 9.8v3.1 | 1.5% | 2024-02-21 | |
| CVE-2024-25152 | Liferay Portal Message Board widget and Liferay DXP vulnerable to stored cross-site scripting | 9.0CNA v3.1 | 0.6% | 2024-02-21 | Fix |
| CVE-2024-25151 | Liferay Portal Calendar module and Liferay DXP vulnerable to cross-site scripting, content spoofing | 5.4CNA v3.1 | 0.5% | 2024-02-21 | Fix |
| CVE-2024-25147 | Liferay Portal and Liferay DXP vulnerable to cross-site scripting | 9.6CNA v3.1 | 0.6% | 2024-02-21 | Fix |
| CVE-2024-25124 | Fiber has Insecure CORS Configuration, allowing Wildcard Origin with Credentials | 9.4CNA v3.1 | 0.7% | 2024-02-21 | Fix |
| CVE-2024-25117 | php-svg-lib lacks path validation on font through SVG inline styles | 6.8CNA v3.1 | 0.9% | 2024-02-21 | Fix |
| CVE-2024-24876 | Admin Menu Editor WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.2% | 2024-02-21 | Fix |
| CVE-2024-24872 | Themify Builder WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.2% | 2024-02-21 | Fix |
| CVE-2024-24849 | Quicksand Post Filter jQuery WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.2% | 2024-02-21 | |
| CVE-2024-24843 | PowerPack Pro for Elementor WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.2% | 2024-02-21 | Fix |
| CVE-2024-24837 | Cross-site request forgery vulnerability in FG PrestaShop, FG Drupal and FG Joomla WordPress plugins | 4.3CNA v3.1 | 0.3% | 2024-02-21 | Fix |
| CVE-2024-24802 | JTRT Responsive Tables WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.2% | 2024-02-21 | |
| CVE-2024-24798 | Debug WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.2% | 2024-02-21 | Fix |
| CVE-2024-24479 | Wireshark buffer overflow | 7.5CISA ADP v3.1 | 1.3% | 2024-02-21 | Fix |
| CVE-2024-24478 | Wireshark integer overflow to buffer overflow | 7.5CISA ADP v3.1 | 1.0% | 2024-02-21 | Fix |
| CVE-2024-24476 | Wireshark buffer overflow | 7.5CISA ADP v3.1 | 1.3% | 2024-02-21 | Fix |
| CVE-2024-23654 | discourse-ai admin-initiated SSRF when interacting with AI services | 4.1CNA v3.1 | 0.4% | 2024-02-21 | Fix |
| CVE-2024-23346 | Materialsvirtuallab pymatgen transformation string parser code injection | 9.4CNA v3.1 | 3.8% | 2024-02-21 | Exploit codeFix |
| CVE-2024-22778 | HackMD CodiMD denial of service | 7.5CISA ADP v3.1 | 0.7% | 2024-02-21 | |
| CVE-2024-22473 | silabs.com GSDK uninitialized TRNG used for ECDSA after EM2/EM3 sleep for VSE devices | 6.8CNA v3.1 | 0.4% | 2024-02-21 | |
| CVE-2024-22235 | VMware Aria Operations improper privilege management | 6.7CNA v3.1 | 0.2% | 2024-02-21 | Fix |
| CVE-2024-22220 | Terminalfour cross-site scripting | 6.3CISA ADP v3.1 | 0.4% | 2024-02-21 | Fix |
| CVE-2024-20325 | Cisco Unified Intelligence Center improper access control | 5.1CNA v3.1 | 0.1% | 2024-02-21 | Fix |
| CVE-2024-1714 | SailPoint IdentityIQ Access request for Entitlement Values with Leading/Trailing Whitespace | 7.1CNA v3.1 | 0.3% | 2024-02-21 | Fix |
| CVE-2024-1709 | ConnectWise ScreenConnect authentication bypass | 10.0NVD v3.1 | 100.0% | 2024-02-21 | KEVNucleiMetasploitEmerging ThreatsExploit codeKCVFix |
| CVE-2024-1708 | ConnectWise ScreenConnect path traversal | 8.4v3.1 | 95.5% | 2024-02-21 | KEVNucleiMetasploitEmerging ThreatsExploit codeKCVFix |
| CVE-2024-1707 | GARO WALLBOX GLB+ T2EV7 Software Update index.jsp#settings cross-site scripting | 6.1v3.1 | 0.7% | 2024-02-21 | |
| CVE-2024-1706 | ZKTeco ZKBio Access IVS Department Name Search Bar cross-site scripting | 5.4v3.1 | 0.4% | 2024-02-21 | |
| CVE-2024-1705 | Shopwind Installation DefaultController.php actionCreate code injection | 8.1v3.1 | 0.6% | 2024-02-21 | |
| CVE-2024-1704 | ZhongBangKeJi CRMEB crud delete path traversal | 8.1v3.1 | 0.6% | 2024-02-21 | |
| CVE-2024-1703 | ZhongBangKeJi CRMEB openfile absolute path traversal | 5.3v3.1 | 0.7% | 2024-02-21 | |
| CVE-2024-1702 | keerti1924 PHP-MYSQL-User-Login-System edit.php SQL injection | 9.8v3.1 | 0.7% | 2024-02-21 | |
| CVE-2024-1701 | keerti1924 PHP-MYSQL-User-Login-System edit.php access control | 9.8v3.1 | 0.8% | 2024-02-21 | |
| CVE-2024-1700 | keerti1924 PHP-MYSQL-User-Login-System signup.php cross-site scripting | 5.4v3.1 | 0.6% | 2024-02-21 | |
| CVE-2024-1676 | Google Chrome Navigation inappropriate implementation | 5.4NVD v3.1 | 18.8% | 2024-02-21 | Fix |
| CVE-2024-1675 | Google Chrome Download insufficient policy enforcement | 8.8v3.1 | 10.4% | 2024-02-21 | Fix |
| CVE-2024-1674 | Google Chrome Navigation inappropriate implementation | 8.8v3.1 | 0.8% | 2024-02-21 | Fix |
| CVE-2024-1673 | Google Chrome Accessibility use-after-free | 8.8v3.1 | 0.8% | 2024-02-21 | Fix |
| CVE-2024-1672 | Google Chrome Content Security Policy inappropriate implementation | 5.4NVD v3.1 | 0.9% | 2024-02-21 | Fix |
| CVE-2024-1671 | Google Chrome Site Isolation inappropriate implementation | 6.5v3.1 | 0.7% | 2024-02-21 | Fix |
| CVE-2024-1670 | Google Chrome Mojo use-after-free | 8.8v3.1 | 9.0% | 2024-02-21 | Fix |
| CVE-2024-1669 | Google Chrome Blink out-of-bounds access | 8.8v3.1 | 1.0% | 2024-02-21 | Fix |
| CVE-2024-1631 | Dfinity agent-js Ed25519KeyIdentity.generate function insufficient randomness | 9.1CNA v3.1 | 0.9% | 2024-02-21 | Fix |
| CVE-2024-1562 | WooCommerce Google Sheet Connector WordPress plugin missing authorization | 5.3CNA v3.1 | 0.4% | 2024-02-21 | Fix |
| CVE-2024-1525 | Authentication bypass using an alternate path or channel in GitLab | 5.3CNA v3.1 | 0.5% | 2024-02-21 | Fix |
| CVE-2024-1501 | Database Reset WordPress plugin cross-site request forgery to WP reset plugin installation | 4.7CNA v3.1 | 0.3% | 2024-02-21 | Fix |
| CVE-2024-1474 | WS_FTP Server reflected cross-site scripting in Administrative interface | 7.5CNA v3.1 | 0.5% | 2024-02-21 | Fix |
| CVE-2024-1212 | Progress Kemp LoadMaster OS command injection | 10.0CNA v3.1 | 95.4% | 2024-02-21 | KEVNucleiMetasploitEmerging ThreatsExploit codeFix |
| CVE-2024-1108 | Plugin Groups WordPress plugin missing authorization to unauthenticated denial of service | 8.2v3.1 | 0.5% | 2024-02-21 | Fix |
| CVE-2024-1081 | 3D FlipBook PDF Flipbook WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.3% | 2024-02-21 | Fix |
| CVE-2024-0593 | Simple Job Board WordPress plugin missing authorization to unauthenticated information disclosure | 5.3CNA v3.1 | 0.9% | 2024-02-21 | NucleiFix |
| CVE-2024-0410 | Improper enforcement of behavioral workflow in GitLab | 7.7CNA v3.1 | 0.5% | 2024-02-21 | Fix |
| CVE-2024-0407 | Certain HP Enterprise LaserJet, HP LaserJet Managed Printers potential information disclosure | 6.5CISA ADP v3.1 | 0.3% | 2024-02-21 | Fix |
| CVE-2024-26581 | Linux kernel nftables rbtree set garbage collection vulnerability | 7.8CNA v3.1 | 2.2% | 2024-02-20 | Fix |
| CVE-2024-26270 | Liferay Portal and Liferay DXP vulnerable to theft of hashed password | 6.5CNA v3.1 | 0.4% | 2024-02-20 | Fix |
| CVE-2024-26268 | Liferay Portal observable discrepancy | 5.3CNA v3.1 | 0.5% | 2024-02-20 | Fix |
| CVE-2024-26267 | Liferay Portal and Liferay DXP HTTP header can Expose Versions | 5.3CNA v3.1 | 0.5% | 2024-02-20 | Fix |
| CVE-2024-26265 | Liferay Portal vulnerable to denial of service | 5.0CNA v3.1 | 0.7% | 2024-02-20 | Fix |
| CVE-2024-26140 | Com.yetanalytics/lrs has cross-site scripting vulnerability in Statement Browser | 4.6CNA v3.1 | 0.4% | 2024-02-20 | Fix |
| CVE-2024-26136 | kedi ElectronCord's Discord Token is public | 7.5CNA v3.1 | 0.5% | 2024-02-20 | Fix |
| CVE-2024-26135 | MeshCentral cross-site websocket hijacking (CSWSH) vulnerability | 8.4CNA v3.1 | 0.5% | 2024-02-20 | Fix |
| CVE-2024-25974 | Frentix OpenOlat LMS stored cross-site scripting (XSS) within the Media Center | 5.4CISA ADP v3.1 | 0.6% | 2024-02-20 | |
| CVE-2024-25973 | Frentix OpenOlat LMS multiple stored cross-site scripting | 5.4v3.1 | 0.6% | 2024-02-20 | |
| CVE-2024-25631 | cilium unencrypted traffic between pods when using Wireguard and an external kvstore | 6.1CNA v3.1 | 0.2% | 2024-02-20 | Fix |
| CVE-2024-25630 | Cilium has unencrypted ingress/health traffic when using Wireguard transparent encryption | 6.1CNA v3.1 | 0.2% | 2024-02-20 | Fix |
| CVE-2024-25610 | Liferay Portal has a stored XSS with Blog entries (Insecure defaults) | 9.0CNA v3.1 | 0.5% | 2024-02-20 | Fix |
| CVE-2024-25609 | Liferay Portal and Liferay DXP's HtmlUtil.escapeRedirect can be Circumvented via Two Forward Slashes | 6.1CNA v3.1 | 0.4% | 2024-02-20 | Fix |
| CVE-2024-25608 | Liferay Portal open redirect | 6.1CNA v3.1 | 1.0% | 2024-02-20 | NucleiFix |
| CVE-2024-25607 | Liferay Portal defaults to a low work factor for the default password hashing algorithm | 8.1CNA v3.1 | 0.3% | 2024-02-20 | Fix |
| CVE-2024-25606 | Liferay Portal has an XXE vulnerability in Java2WsddTask._format | 8.0CNA v3.1 | 0.5% | 2024-02-20 | Fix |
| CVE-2024-25605 | Liferay Portal and Liferay DXP allows templates to be Viewed via the UI or API | 5.3CNA v3.1 | 0.5% | 2024-02-20 | Fix |
| CVE-2024-25604 | Liferay Portal and Liferay DXP allows Authenticated Users with View Permissions to Edit Permissions | 6.5CNA v3.1 | 0.4% | 2024-02-20 | Fix |
| CVE-2024-25428 | MRCMS SQL injection | 6.5CISA ADP v3.1 | 0.4% | 2024-02-20 | |
| CVE-2024-25366 | MZ Automation libiec61850 mz-automation.de libiec61859 v.1.4.0 buffer overflow | 6.2CISA ADP v3.1 | 0.9% | 2024-02-20 | |
| CVE-2024-25274 | xxyopen Novel-Plus component /sysFile/upload arbitrary file upload | 9.8CISA ADP v3.1 | 0.8% | 2024-02-20 | |
| CVE-2024-25260 | elfutils null pointer dereference | 4.0CISA ADP v3.1 | 0.3% | 2024-02-20 | Fix |
| CVE-2024-25199 | Opennav NAV2 use-after-free | 8.1CISA ADP v3.1 | 0.6% | 2024-02-20 | |
| CVE-2024-25198 | Opennav NAV2 use-after-free | 9.1CISA ADP v3.1 | 0.7% | 2024-02-20 | |
| CVE-2024-25197 | Opennav NAV2 null pointer dereference | 6.5CISA ADP v3.1 | 0.7% | 2024-02-20 | |
| CVE-2024-25196 | Opennav NAV2 buffer overflow | 3.3CISA ADP v3.1 | 0.3% | 2024-02-20 | |
| CVE-2024-25150 | Liferay Portal and Liferay DXP information disclosure vulnerability in the Control Panel | 4.3CNA v3.1 | 0.4% | 2024-02-20 | Fix |
| CVE-2024-25149 | Liferay Portal incorrect authorization | 5.4CNA v3.1 | 0.3% | 2024-02-20 | Fix |
| CVE-2024-25141 | Improper certificate validation in Apache airflow mongo hook | 9.1CISA ADP v3.1 | 0.6% | 2024-02-20 | Fix |
| CVE-2024-24794 | Imaging Data Commons libdicom DICOM Element Parsing as implemented use-after-free | 9.8v3.1 | 1.1% | 2024-02-20 | |
| CVE-2024-24793 | Imaging Data Commons libdicom DICOM Element Parsing as implemented use-after-free | 9.8v3.1 | 1.1% | 2024-02-20 | |
| CVE-2024-24763 | JumpServer open redirect | 4.3CNA v3.1 | 1.1% | 2024-02-20 | NucleiFix |
| CVE-2024-24474 | QEMU buffer overflow | 8.8CISA ADP v3.1 | 1.4% | 2024-02-20 | Fix |
| CVE-2024-23830 | MantisBT host header injection | 8.3CNA v3.1 | 1.0% | 2024-02-20 | Fix |
| CVE-2024-23809 | The Biosig Project libbiosig double free | 9.8CNA v3.1 | 1.7% | 2024-02-20 | Fix |
| CVE-2024-23758 | Unisys Stealth sensitive information in log files | 7.5CISA ADP v3.1 | 0.5% | 2024-02-20 | Fix |
| CVE-2024-23606 | The Biosig Project libbiosig sopen_FAMOS_read functionality out-of-bounds write | 9.8CNA v3.1 | 1.7% | 2024-02-20 | Fix |
| CVE-2024-23313 | The Biosig Project libbiosig sopen_FAMOS_read functionality integer underflow | 9.8CNA v3.1 | 1.8% | 2024-02-20 | Fix |
| CVE-2024-23310 | The Biosig Project libbiosig sopen_FAMOS_read functionality use-after-free | 9.8CNA v3.1 | 1.7% | 2024-02-20 | Fix |
| CVE-2024-23305 | The Biosig Project libbiosig BrainVisionMarker Parsing functionality out-of-bounds write | 9.8CNA v3.1 | 1.7% | 2024-02-20 | Fix |
| CVE-2024-23114 | Apache Camel: Camel-CassandraQL: Unsafe deserialization from CassandraAggregationRepository | 9.8CISA ADP v3.1 | 1.3% | 2024-02-20 | Fix |
| CVE-2024-22824 | Auntvt Timo unrestricted file upload | 9.8CISA ADP v3.1 | 1.1% | 2024-02-20 | |
| CVE-2024-22369 | Apache Camel: Camel-SQL: Unsafe deserialization from JDBCAggregationRepository | 7.8CISA ADP v3.1 | 0.7% | 2024-02-20 | Exploit codeFix |
| CVE-2024-22250 | Session Hijack vulnerability in Deprecated EAP Browser plugin | 7.8CNA v3.1 | 0.3% | 2024-02-20 | Fix |
| CVE-2024-22245 | Arbitrary Authentication Relay vulnerability in Deprecated EAP Browser plugin | 9.6CNA v3.1 | 1.3% | 2024-02-20 | Fix |
| CVE-2024-22234 | Broken access control in Spring Security with Direct Use of isFullyAuthenticated | 7.4CNA v3.1 | 0.7% | 2024-02-20 | Fix |
| CVE-2024-22097 | The Biosig Project libbiosig BrainVision Header Parsing functionality double free | 9.8CNA v3.1 | 1.6% | 2024-02-20 | Fix |
| CVE-2024-22054 | Ubiquiti UniFi Access Points improper input validation | 7.5CISA ADP v3.1 | 0.5% | 2024-02-20 | Fix |
| CVE-2024-22019 | Node.js Node improper resource release | 7.5v3.1 | 3.2% | 2024-02-20 | Fix |
| CVE-2024-21896 | Node.js Node path traversal | 9.8v3.1 | 1.3% | 2024-02-20 | Fix |
| CVE-2024-21892 | Node.js Node improper privilege management | 7.8v3.1 | 0.6% | 2024-02-20 | Fix |
| CVE-2024-21891 | Node.js Node path traversal | 8.8v3.1 | 1.2% | 2024-02-20 | Fix |
| CVE-2024-21890 | Node.js permission model vulnerability | 6.5v3.1 | 0.9% | 2024-02-20 | Fix |
| CVE-2024-21812 | The Biosig Project libbiosig sopen_FAMOS_read functionality integer overflow | 9.8CNA v3.1 | 1.8% | 2024-02-20 | Fix |
| CVE-2024-21795 | The Biosig Project libbiosig .egi parsing functionality heap-based buffer overflow | 9.8CNA v3.1 | 1.8% | 2024-02-20 | Fix |
| CVE-2024-21682 | Atlassian Assets Discovery Data Center code injection | 7.2CNA v3.0 | 0.8% | 2024-02-20 | Fix |
| CVE-2024-21678 | Atlassian Confluence Data Center cross-site scripting | 8.5CNA v3.0 | 0.5% | 2024-02-20 | Fix |
| CVE-2024-1661 | Totolink X6000R shadow hard-coded credentials | 5.5v3.1 | 0.3% | 2024-02-20 | |
| CVE-2024-1651 | Deserialization of untrusted data in Torrentpier | 9.8v3.1 | 34.0% | 2024-02-20 | Exploit code |
| CVE-2024-1648 | electron-pdf Local File Read via Server Side XSS | 7.5CNA v3.1 | 0.7% | 2024-02-20 | |
| CVE-2024-1647 | pyhtml2pdf Local File Read via Server Side XSS | 7.5CNA v3.1 | 0.7% | 2024-02-20 | |
| CVE-2024-1644 | SuiteCRM suite CRM RCE via local file inclusion | 8.8NVD v3.1 | 0.9% | 2024-02-20 | Fix |
| CVE-2024-1608 | OPPO Usercenter Credit SDK privilege escalation | 9.1CNA v3.1 | 0.5% | 2024-02-20 | Fix |
| CVE-2024-1559 | Link Library WordPress plugin unauthenticated stored cross-site scripting | 6.1v3.1 | 0.4% | 2024-02-20 | Fix |
| CVE-2024-1557 | Mozilla Firefox memory safety bugs | 8.1CISA ADP v3.1 | 0.6% | 2024-02-20 | Fix |
| CVE-2024-1556 | Mozilla Firefox improper check for exceptional conditions | 6.5CISA ADP v3.1 | 0.5% | 2024-02-20 | Fix |
| CVE-2024-1555 | Mozilla Firefox authentication bypass by spoofing | 8.3CISA ADP v3.1 | 0.5% | 2024-02-20 | Fix |
| CVE-2024-1554 | Mozilla Firefox insufficient verification of data authenticity | 9.8CISA ADP v3.1 | 0.4% | 2024-02-20 | Fix |
| CVE-2024-1553 | Mozilla Firefox memory safety bugs | 8.1CISA ADP v3.1 | 0.9% | 2024-02-20 | Fix |
| CVE-2024-1552 | Mozilla Firefox incorrect numeric conversion | 7.5v3.1 | 0.7% | 2024-02-20 | Fix |
| CVE-2024-1551 | Mozilla Firefox cookie reliance without validation | 6.1CISA ADP v3.1 | 0.7% | 2024-02-20 | Fix |
| CVE-2024-1550 | Mozilla Firefox clickjacking | 6.1v3.1 | 0.6% | 2024-02-20 | Fix |
| CVE-2024-1549 | Mozilla Firefox and Thunderbird permission dialog vulnerability | 6.1CISA ADP v3.1 | 0.5% | 2024-02-20 | Fix |
| CVE-2024-1548 | Mozilla Firefox spoofing | 4.3CISA ADP v3.1 | 0.9% | 2024-02-20 | Fix |
| CVE-2024-1547 | Mozilla Firefox authentication bypass by spoofing | 6.5v3.1 | 0.7% | 2024-02-20 | Fix |
| CVE-2024-1546 | Mozilla Firefox out-of-bounds read | 7.5CISA ADP v3.1 | 0.7% | 2024-02-20 | Fix |
| CVE-2024-1510 | WP Shortcodes Plugin Shortcodes Ultimate WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.5% | 2024-02-20 | Fix |
| CVE-2024-1297 | Loomio code injection | 9.8NVD v3.1 | 2.7% | 2024-02-20 | |
| CVE-2024-1156 | NI SystemLink Server incorrect default permissions | 7.8CNA v3.1 | 0.4% | 2024-02-20 | |
| CVE-2024-1155 | Incorrect permissions for shared NI SystemLink Elixir based services | 7.8CNA v3.1 | 0.3% | 2024-02-20 | |
| CVE-2024-0794 | HP LaserJet Pro, Enterprise LaserJet and LaserJet Managed printers out-of-bounds read | 9.8CISA ADP v3.1 | 1.3% | 2024-02-20 | |
| CVE-2024-0715 | EL injection vulnerability in Hitachi Global Link Manager | 7.6CNA v3.1 | 0.5% | 2024-02-20 | Fix |
| CVE-2024-26328 | QEMU out-of-bounds write | 6.0v3.1 | 0.3% | 2024-02-19 | Fix |
| CVE-2024-26327 | QEMU heap-based buffer overflow | 5.3v3.1 | 0.5% | 2024-02-19 | Fix |
| CVE-2024-26318 | Cross-site scripting in Serenity | 6.1v3.1 | 0.4% | 2024-02-19 | Fix |
| CVE-2024-26308 | Apache Commons Compress: OutOfMemoryError unpacking broken Pack200 file | 5.5v3.1 | 0.9% | 2024-02-19 | Exploit codeFix |
| CVE-2024-26134 | CBOR2 decoder has potential buffer overflow | 7.5CNA v3.1 | 1.2% | 2024-02-19 | Fix |
| CVE-2024-26129 | PrestaShop vulnerable to path disclosure in JavaScript variable | 5.8CNA v3.1 | 0.6% | 2024-02-19 | Fix |
| CVE-2024-25983 | Moodle msa-24-0006: Idor on dashboard comments block | 5.3NVD v3.1 | 0.6% | 2024-02-19 | Fix |
| CVE-2024-25982 | Moodle msa-24-0005: Csrf risk in language import utility | 8.8NVD v3.1 | 0.5% | 2024-02-19 | Fix |
| CVE-2024-25981 | Moodle msa-24-0004: Forum export did not respect activity group settings | 5.3NVD v3.1 | 0.6% | 2024-02-19 | Fix |
| CVE-2024-25980 | Moodle msa-24-0003: H5p attempts report did not respect activity group settings | 5.3NVD v3.1 | 0.5% | 2024-02-19 | Fix |
| CVE-2024-25979 | Moodle msa-24-0002: Forum search accepted random parameters in its URL | 5.3NVD v3.1 | 0.6% | 2024-02-19 | Fix |
| CVE-2024-25978 | Moodle msa-24-0001: Denial of service risk in file picker unzip functionality | 7.5NVD v3.1 | 0.9% | 2024-02-19 | Fix |
| CVE-2024-25710 | Apache Commons Compress: Denial of service caused by an infinite loop for a corrupted DUMP file | 8.1CNA v3.1 | 0.4% | 2024-02-19 | Fix |
| CVE-2024-25640 | Improper neutralization of alternate XSS syntax in iris-web | 4.6CNA v3.1 | 0.3% | 2024-02-19 | Fix |
| CVE-2024-25636 | Misskey remote Activity Streams fetcher vulnerability | 7.1CNA v3.1 | 0.7% | 2024-02-19 | Fix |
| CVE-2024-25635 | alf.io admin API users endpoint information disclosure | 8.8CNA v3.1 | 0.7% | 2024-02-19 | Fix |
| CVE-2024-25634 | alfio-event alf.io IDOR make user can read e-mail log sent by other events | 7.2CNA v3.1 | 0.7% | 2024-02-19 | Fix |
| CVE-2024-25626 | Yocto Project Security Advisory BitBake/Toaster | 8.8CNA v3.1 | 1.2% | 2024-02-19 | Fix |
| CVE-2024-25625 | Pimcore host header injection in user invitation link | 8.1CNA v3.1 | 0.7% | 2024-02-19 | Fix |
| CVE-2024-25623 | Mastodon remote status fetcher vulnerability | 8.5CNA v3.1 | 0.5% | 2024-02-19 | Fix |
| CVE-2024-24722 | 12dsynergy File Replication Server the unquoted search path | 9.1CISA ADP v3.1 | 0.6% | 2024-02-19 | Fix |
| CVE-2024-1638 | Zephyr Bluetooth GATT permission checks improper input validation | 8.2CNA v3.1 | 0.4% | 2024-02-19 | |
| CVE-2024-1635 | Red Hat build of Apache Camel undertow uncontrolled resource consumption | 7.5CNA v3.1 | 4.6% | 2024-02-19 | Fix |
| CVE-2024-1633 | Renesas rcar_gen3_v2.5 FIP header integer overflow | 2.0v3.1 | 0.1% | 2024-02-19 | |
| CVE-2024-1597 | pgjdbc SQL injection via line comment generation | 10.0CNA v3.1 | 4.8% | 2024-02-19 | Fix |
| CVE-2024-1580 | Integer overflow in VideoLAN dav1d | 8.8NVD v3.1 | 1.8% | 2024-02-19 | Fix |
| CVE-2024-1346 | Weak MySQL database root password in LaborOfficeFree | 5.5v3.1 | 0.4% | 2024-02-19 | Exploit code |
| CVE-2024-1345 | Weak MySQL database root password in LaborOfficeFree | 5.5v3.1 | 0.2% | 2024-02-19 | |
| CVE-2024-1344 | Encrypted database credentials in LaborOfficeFree | 9.8v3.1 | 0.3% | 2024-02-19 | |
| CVE-2024-1343 | LaborOfficeFree backup directory improper access control | 5.5v3.1 | 0.1% | 2024-02-19 | |
| CVE-2024-25468 | TOTOLINK X5000R OS command injection | 7.5v3.1 | 0.9% | 2024-02-17 | |
| CVE-2024-25298 | Code injection in REDAXO | 7.2v3.1 | 1.1% | 2024-02-17 | |
| CVE-2024-25297 | Bludit cross-site scripting | 4.8v3.1 | 0.6% | 2024-02-17 | |
| CVE-2024-22727 | Teltonika TRB1-series devices with firmware before TRB1_R_00.07.05.2 allow attackers to exploit a firmware vulnerability via Ethernet LAN or USB. | 8.3CISA ADP v3.1 | 0.3% | 2024-02-17 | Fix |
| CVE-2024-22337 | IBM QRadar Suite information disclosure | 5.1CNA v3.1 | 0.2% | 2024-02-17 | Fix |
| CVE-2024-22336 | IBM QRadar Suite information disclosure | 5.1CNA v3.1 | 0.2% | 2024-02-17 | Fix |
| CVE-2024-22335 | IBM QRadar Suite information disclosure | 5.1CNA v3.1 | 0.2% | 2024-02-17 | Fix |
| CVE-2024-21500 | Improper restriction of excessive authentication attempts in github.com/greenpau/Caddy-security | 6.5v3.1 | 0.5% | 2024-02-17 | |
| CVE-2024-21499 | Improper neutralization of HTTP headers in github.com/Greenpau/Caddy-security | 4.3v3.1 | 0.5% | 2024-02-17 | |
| CVE-2024-21498 | Server-side request forgery in github.com/greenpau/Caddy-security | 5.3CNA v3.1 | 0.6% | 2024-02-17 | |
| CVE-2024-21497 | Open redirect in github.com/Greenpau/Caddy-security | 6.1v3.1 | 0.5% | 2024-02-17 | |
| CVE-2024-21496 | Cross-site scripting in github.com/greenpau/Caddy-security | 6.1CNA v3.1 | 0.6% | 2024-02-17 | |
| CVE-2024-21495 | github.com/greenpau/caddy-security insufficient randomness | 9.8v3.1 | 0.7% | 2024-02-17 | Fix |
| CVE-2024-21494 | Authentication bypass by spoofing in github.com/Greenpau/Caddy-security | 5.4v3.1 | 0.5% | 2024-02-17 | |
| CVE-2024-21493 | Improper validation of array index in github.com/Greenpau/Caddy-security | 5.3v3.1 | 0.7% | 2024-02-17 | |
| CVE-2024-21492 | Insufficient session expiration in github.com/greenpau/Caddy-security | 8.1v3.1 | 0.7% | 2024-02-17 | |
| CVE-2024-20986 | Oracle WebLogic Server Core component unauthorized data modification | 6.1CNA v3.1 | 0.2% | 2024-02-17 | Fix |
| CVE-2024-20984 | Oracle MySQL Server Security Firewall component denial of service | 4.4CNA v3.1 | 1.0% | 2024-02-17 | Fix |
| CVE-2024-20982 | Oracle MySQL Server Optimizer component denial of service | 4.9CNA v3.1 | 1.1% | 2024-02-17 | Fix |
| CVE-2024-20980 | Oracle BI Publisher Web Server component unauthorized data modification | 5.4CNA v3.1 | 0.3% | 2024-02-17 | Fix |
| CVE-2024-20978 | Oracle MySQL Server Optimizer component denial of service | 4.9CNA v3.1 | 1.0% | 2024-02-17 | Fix |
| CVE-2024-20976 | Oracle MySQL Server Optimizer component denial of service | 4.9CNA v3.1 | 1.1% | 2024-02-17 | Fix |
| CVE-2024-20974 | Oracle MySQL Server Optimizer component denial of service | 4.9CNA v3.1 | 0.9% | 2024-02-17 | Fix |
| CVE-2024-20972 | Oracle MySQL Server Optimizer component denial of service | 4.9CNA v3.1 | 1.1% | 2024-02-17 | Fix |
| CVE-2024-20970 | Oracle MySQL Server Optimizer component denial of service | 4.9CNA v3.1 | 1.1% | 2024-02-17 | Fix |
| CVE-2024-20968 | Oracle MySQL Server options component denial of service | 4.4CNA v3.1 | 0.9% | 2024-02-17 | Fix |
| CVE-2024-20966 | Oracle MySQL Server Optimizer component denial of service | 4.9CNA v3.1 | 1.1% | 2024-02-17 | Fix |
| CVE-2024-20964 | Oracle MySQL Server Security Privileges component denial of service | 5.3CNA v3.1 | 1.0% | 2024-02-17 | Fix |
| CVE-2024-20962 | Oracle MySQL Server Optimizer component denial of service | 6.5CNA v3.1 | 1.1% | 2024-02-17 | Fix |
| CVE-2024-20960 | Oracle MySQL Server RAPID component denial of service | 6.5CNA v3.1 | 1.1% | 2024-02-17 | Fix |
| CVE-2024-20958 | Oracle E-Business Suite Installed Base unauthorized data modification | 5.4CNA v3.1 | 0.3% | 2024-02-17 | Fix |
| CVE-2024-20956 | Oracle Agile Product Lifecycle Management for Process unauthorized data modification | 7.3CNA v3.1 | 0.4% | 2024-02-17 | Fix |
| CVE-2024-20953 | Oracle Agile Product Lifecycle Management (PLM) deserialization | 8.8CNA v3.1 | 3.9% | 2024-02-17 | KEVFix |
| CVE-2024-20951 | Oracle E-Business Suite Customer Interaction History unauthorized data modification | 6.1CNA v3.1 | 0.3% | 2024-02-17 | Fix |
| CVE-2024-20949 | Oracle E-Business Suite Customer Interaction History unauthorized data modification | 6.1CNA v3.1 | 0.4% | 2024-02-17 | Fix |
| CVE-2024-20947 | Oracle E-Business Suite Common Applications unauthorized data modification | 5.4CNA v3.1 | 0.3% | 2024-02-17 | Fix |
| CVE-2024-20945 | Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition unauthorized data access | 4.7CNA v3.1 | 0.4% | 2024-02-17 | Fix |
| CVE-2024-20943 | Oracle E-Business Suite Knowledge Management unauthorized data modification | 5.4CNA v3.1 | 0.3% | 2024-02-17 | Fix |
| CVE-2024-20941 | Oracle E-Business Suite Installed Base HTML UI component unauthorized data modification | 6.1CNA v3.1 | 0.4% | 2024-02-17 | Fix |
| CVE-2024-20939 | Oracle E-Business Suite CRM Technical Foundation Admin console component denial of service | 4.3CNA v3.1 | 0.5% | 2024-02-17 | Fix |
| CVE-2024-20937 | Oracle JD Edwards EnterpriseOne Tools information disclosure | 4.3CNA v3.1 | 0.4% | 2024-02-17 | Fix |
| CVE-2024-20935 | Oracle E-Business Suite Installed Base unauthorized data modification | 6.1CNA v3.1 | 0.4% | 2024-02-17 | Fix |
| CVE-2024-20933 | Oracle E-Business Suite Installed Base unauthorized data modification | 6.1CNA v3.1 | 0.2% | 2024-02-17 | Fix |
| CVE-2024-20931 | Oracle WebLogic Server Core component unauthorized data access | 7.5CNA v3.1 | 59.4% | 2024-02-17 | Emerging ThreatsExploit codeFix |
| CVE-2024-20929 | Oracle E-Business Suite Application Object Library unauthorized data modification | 6.5CNA v3.1 | 0.3% | 2024-02-17 | Fix |
| CVE-2024-20927 | Oracle WebLogic Server Core component unauthorized data modification | 8.6CNA v3.1 | 0.5% | 2024-02-17 | Fix |
| CVE-2024-20925 | Oracle Java SE, Oracle GraalVM Enterprise Edition JavaFX component unauthorized data modification | 3.1CNA v3.1 | 0.6% | 2024-02-17 | Fix |
| CVE-2024-20923 | Oracle Java SE, Oracle GraalVM Enterprise Edition JavaFX component information disclosure | 3.1CNA v3.1 | 0.6% | 2024-02-17 | Fix |
| CVE-2024-20921 | Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition unauthorized data access | 5.9CNA v3.1 | 0.9% | 2024-02-17 | Fix |
| CVE-2024-20919 | Oracle Java SE Hotspot vulnerability | 5.9CNA v3.1 | 0.8% | 2024-02-17 | Fix |
| CVE-2024-20917 | Oracle Enterprise Manager Base Platform Log Management component unauthorized data access | 7.5CNA v3.1 | 0.4% | 2024-02-17 | Fix |
| CVE-2024-20915 | Oracle E-Business Suite Application Object Library Login - SSO component denial of service | 5.3CNA v3.1 | 0.5% | 2024-02-17 | Fix |
| CVE-2024-20913 | Oracle Business Intelligence Enterprise Edition unauthorized data modification | 5.4CNA v3.1 | 0.3% | 2024-02-17 | Fix |
| CVE-2024-20911 | Oracle Audit Vault and Database Firewall improper access control | 2.6CNA v3.1 | 0.3% | 2024-02-17 | Fix |
| CVE-2024-20909 | Oracle Audit Vault and Database Firewall vulnerability | 7.5CNA v3.1 | 0.4% | 2024-02-17 | Fix |
| CVE-2024-20907 | Oracle Web Applications Desktop Integrator file download component unauthorized data modification | 6.1CNA v3.1 | 0.3% | 2024-02-17 | Fix |
| CVE-2024-20905 | Oracle JD Edwards EnterpriseOne Tools Enterprise Infrastructure SEC component denial of service | 2.7CNA v3.1 | 0.5% | 2024-02-17 | Fix |
| CVE-2024-20903 | Oracle Database Java VM vulnerability | 6.5CNA v3.1 | 0.4% | 2024-02-17 | Fix |
| CVE-2024-1512 | MasterStudy LMS WordPress Plugin for Online Courses and Education unauthenticated SQL injection | 9.8CNA v3.1 | 77.6% | 2024-02-17 | NucleiExploit codeFix |
| CVE-2024-0610 | Piraeus Bank WooCommerce Payment Gateway WordPress plugin unauthenticated SQL injection | 9.8CNA v3.1 | 0.7% | 2024-02-17 | Fix |
| CVE-2024-25628 | Insufficient session expiration in Alf.io | 7.6CNA v3.1 | 0.4% | 2024-02-16 | Fix |
| CVE-2024-25627 | Cross-site scripting (XSS) via file upload in Alf.io | 3.5CNA v3.1 | 0.4% | 2024-02-16 | Fix |
| CVE-2024-25466 | React Native Document Picker directory traversal | 7.8v3.1 | 0.5% | 2024-02-16 | Exploit codeFix |
| CVE-2024-25415 | PhoenixCart Ce PHOENIX Cart remote code execution | 7.2v3.1 | 27.2% | 2024-02-16 | |
| CVE-2024-25414 | CSZ CMS /admin/upgrade arbitrary file upload | 9.8v3.1 | 1.6% | 2024-02-16 | |
| CVE-2024-25413 | Firebearstudio Improved Import & Export XSLT Server Side injection | 7.2NVD v3.1 | 1.5% | 2024-02-16 | |
| CVE-2024-25320 | Tongda2000 Office Anywhere SQL injection | 9.8v3.1 | 0.7% | 2024-02-16 | |
| CVE-2024-25083 | BeyondTrust Privilege Management incorrect privilege assignment | 7.8v3.1 | 0.1% | 2024-02-16 | Fix |
| CVE-2024-24758 | Proxy-Authorization header not cleared on cross-origin redirect in fetch in Undici | 3.9CNA v3.1 | 0.8% | 2024-02-16 | Fix |
| CVE-2024-24750 | Backpressure request ignored in fetch in Undici | 6.5CNA v3.1 | 0.7% | 2024-02-16 | Fix |
| CVE-2024-24377 | iDocView command injection | 9.8v3.1 | 1.1% | 2024-02-16 | |
| CVE-2024-23591 | Lenovo ThinkSystem SR670 V2 Intel Boot Guard firmware vulnerability | 2.0CNA v3.1 | 0.2% | 2024-02-16 | Fix |
| CVE-2024-22854 | Darktrace Threat Visualizer main page HTML injection | 6.1v3.1 | 0.4% | 2024-02-16 | |
| CVE-2024-22426 | Dell RecoverPoint for VMs unrestricted file upload | 7.2CNA v3.1 | 1.4% | 2024-02-16 | Fix |
| CVE-2024-22425 | Dell RecoverPoint for VMs missing brute-force protection | 6.5CNA v3.1 | 0.5% | 2024-02-16 | Fix |
| CVE-2024-21987 | Improper authorization vulnerability in SnapCenter | 5.4CNA v3.1 | 0.3% | 2024-02-16 | Fix |
| CVE-2024-21984 | Reflected cross-site scripting vulnerability in StorageGRID (formerly StorageGRID Webscale) | 5.9CNA v3.1 | 0.3% | 2024-02-16 | Fix |
| CVE-2024-21983 | Denial of service vulnerability in StorageGRID (formerly StorageGRID Webscale) | 6.5CNA v3.1 | 0.5% | 2024-02-16 | Fix |
| CVE-2024-21915 | Rockwell Automation FactoryTalk® Service Platform privilege escalation | 9.0CNA v3.1 | 1.0% | 2024-02-16 | |
| CVE-2024-21775 | ManageEngine Exchange Reporter Plus SQL injection | 8.3CNA v3.1 | 5.0% | 2024-02-16 | Fix |
| CVE-2024-1591 | Privilege Management for Windows information leak | 3.3CNA v3.1 | 0.2% | 2024-02-16 | Fix |
| CVE-2024-0041 | Google Android SystemStatusAnimationSchedulerImpl.kt race condition | 7.0v3.1 | 0.1% | 2024-02-16 | Fix |
| CVE-2024-0040 | Google Android MtpPacket.cpp out-of-bounds read | 7.5v3.1 | 2.0% | 2024-02-16 | Exploit codeFix |
| CVE-2024-0038 | Google Android AccessibilityManagerService.java injection | 7.8v3.1 | 0.1% | 2024-02-16 | Fix |
| CVE-2024-0037 | Google Android SaveUi.java information disclosure | 3.3v3.1 | 0.1% | 2024-02-16 | Fix |
| CVE-2024-0036 | Google Android ActivityTaskManagerService.java privilege escalation | 7.8v3.1 | 0.1% | 2024-02-16 | Fix |
| CVE-2024-0035 | Google Android TileLifecycleManager.java privilege escalation | 7.8v3.1 | 0.1% | 2024-02-16 | Fix |
| CVE-2024-0034 | Google Android BackgroundLaunchProcessController privilege escalation | 7.8v3.1 | 0.1% | 2024-02-16 | Fix |
| CVE-2024-0033 | Google Android ashmem-dev.cpp privilege escalation | 7.8v3.1 | 0.2% | 2024-02-16 | Fix |
| CVE-2024-0032 | Google Android multiple locations privilege escalation | 6.5v3.1 | 0.5% | 2024-02-16 | Fix |
| CVE-2024-0031 | Google Android att_protocol.cc out-of-bounds write | 9.8v3.1 | 0.6% | 2024-02-16 | Fix |
| CVE-2024-0030 | Google Android btif_gatt_util.cc out-of-bounds read | 5.5v3.1 | 0.4% | 2024-02-16 | Exploit codeFix |
| CVE-2024-0029 | Google Android multiple files privilege escalation | 7.8v3.1 | 0.1% | 2024-02-16 | Fix |
| CVE-2024-0023 | Google Android Codec2BufferUtils.cpp out-of-bounds write | 7.8v3.1 | 0.4% | 2024-02-16 | Exploit codeFix |
| CVE-2024-0021 | Google Android privilege escalation | 7.8v3.1 | 0.1% | 2024-02-16 | Fix |
| CVE-2024-0020 | Google Android NotificationSoundPreference.java information disclosure | 5.5v3.1 | 0.1% | 2024-02-16 | Fix |
| CVE-2024-0019 | Google Android AppOpsControllerImpl.java denial of service | 5.0v3.1 | 0.1% | 2024-02-16 | Fix |
| CVE-2024-0018 | Google Android ColorConverter.cpp out-of-bounds write | 7.8v3.1 | 0.1% | 2024-02-16 | Fix |
| CVE-2024-0017 | Google Android CameraActivity.java confused deputy | 5.5v3.1 | 0.1% | 2024-02-16 | Fix |
| CVE-2024-0016 | Google Android multiple locations out-of-bounds read | 5.3v3.1 | 0.2% | 2024-02-16 | Fix |
| CVE-2024-0015 | Google Android DreamService.java privilege escalation | 7.8v3.1 | 0.4% | 2024-02-16 | Exploit codeFix |
| CVE-2024-0014 | Google Android UpdateFetcher.java privilege escalation | 7.8v3.1 | 0.1% | 2024-02-16 | Fix |
| CVE-2024-26264 | EBM Technologies RISWEB SQL injection | 9.8CNA v3.1 | 0.8% | 2024-02-15 | Fix |
| CVE-2024-26263 | EBM Technologies RISWEB improper access control | 7.5v3.1 | 0.4% | 2024-02-15 | Fix |
| CVE-2024-26262 | EBM Technologies Uniweb/SoliPACS WebServer SQL injection | 8.8CNA v3.1 | 0.8% | 2024-02-15 | Fix |
| CVE-2024-26261 | HGiga OAKlouds arbitrary file read and Delete | 9.8CNA v3.1 | 0.7% | 2024-02-15 | Fix |
| CVE-2024-26260 | HGiga OAKlouds command injection | 9.8CNA v3.1 | 1.6% | 2024-02-15 | Fix |
| CVE-2024-25941 | FreeBSD jail(2) information leak | 3.3CISA ADP v3.1 | 0.2% | 2024-02-15 | Fix |
| CVE-2024-25940 | FreeBSD bhyveload(8) host file access | 6.3CISA ADP v3.1 | 0.5% | 2024-02-15 | Fix |
| CVE-2024-25620 | Dependency management path traversal in helm | 6.4CNA v3.1 | 0.6% | 2024-02-15 | Fix |
| CVE-2024-25559 | appleple a-blog cms spoofing | 4.7CISA ADP v3.1 | 0.4% | 2024-02-15 | Fix |
| CVE-2024-25502 | Flusity path traversal | 9.8CISA ADP v3.1 | 1.4% | 2024-02-15 | |
| CVE-2024-25373 | Tenda AC10 buffer overflow | 4.6CISA ADP v3.1 | 0.4% | 2024-02-15 | |
| CVE-2024-25123 | Path Manipulation in file mslib/index.py in MSS | 7.3CNA v3.1 | 0.5% | 2024-02-15 | Fix |
| CVE-2024-24386 | VitalPBX arbitrary code execution | 7.2CISA ADP v3.1 | 1.0% | 2024-02-15 | Exploit code |
| CVE-2024-24256 | Yonyou SQL injection | 5.9CISA ADP v3.1 | 0.4% | 2024-02-15 | |
| CVE-2024-23674 | German National Identity Card Online-Ausweis-Funktion eID scheme authentication bypass by spoofing | 9.6CISA ADP v3.1 | 0.7% | 2024-02-15 | |
| CVE-2024-23479 | SolarWinds Access Rights Manager (ARM) directory traversal remote code execution | 9.6CNA v3.1 | 5.8% | 2024-02-15 | Fix |
| CVE-2024-23478 | SolarWinds Access Rights Manager (ARM) deserialization of untrusted data remote code execution | 8.0CNA v3.1 | 81.6% | 2024-02-15 | Fix |
| CVE-2024-23477 | SolarWinds Access Rights Manager (ARM) directory traversal remote code execution | 7.9CNA v3.1 | 7.8% | 2024-02-15 | Fix |
| CVE-2024-23476 | SolarWinds Access Rights Manager (ARM) directory traversal remote code execution | 9.6CNA v3.1 | 7.1% | 2024-02-15 | Fix |
| CVE-2024-23113 | Fortinet Multiple Products format string | 9.8CNA v3.1 | 61.7% | 2024-02-15 | KEVEmerging ThreatsExploit codeFix |
| CVE-2024-21728 | Extension Smartcalc.es open redirect vulnerability in osTicky component for Joomla | 6.1CISA ADP v3.1 | 0.3% | 2024-02-15 | |
| CVE-2024-21727 | Extension digtal-peak.com XSS vulnerability in DP Calendar component for Joomla | 6.1CISA ADP v3.1 | 0.3% | 2024-02-15 | |
| CVE-2024-20750 | Adobe Substance 3D Designer PICT Parsing out-of-bounds read | 7.8CNA v3.1 | 0.3% | 2024-02-15 | Fix |
| CVE-2024-20749 | TALOS-2023-1910 Adobe Acrobat Reader Font CharStrings CharStringsOffset out-of-bounds read | 5.5CNA v3.1 | 2.3% | 2024-02-15 | Fix |
| CVE-2024-20748 | TALOS-2023-1909 Adobe Acrobat Reader Font avar SegmentMaps out-of-bounds read | 5.5CNA v3.1 | 2.3% | 2024-02-15 | Fix |
| CVE-2024-20747 | TALOS-2023-1908 Adobe Acrobat Reader Font CharStrings INDEX out-of-bounds read | 5.5CNA v3.1 | 2.4% | 2024-02-15 | Fix |
| CVE-2024-20744 | Adobe Substance 3D Paint PICT Parsing Access Violation Write vulnerability | 7.8CNA v3.1 | 0.2% | 2024-02-15 | Fix |
| CVE-2024-20743 | Adobe Substance 3D Paint PSD Parsing out-of-bounds write | 7.8CNA v3.1 | 0.2% | 2024-02-15 | Fix |
| CVE-2024-20742 | Adobe Substance 3D Paint RAS File Parsing out-of-bounds read | 7.8CNA v3.1 | 0.3% | 2024-02-15 | Fix |
| CVE-2024-20741 | Adobe Substance 3D Paint ICO Parsing Access Violation Write vulnerability | 7.8CNA v3.1 | 0.3% | 2024-02-15 | Fix |
| CVE-2024-20740 | Adobe Substance 3D Paint PSD Parsing out-of-bounds write | 7.8CNA v3.1 | 0.2% | 2024-02-15 | Fix |
| CVE-2024-20739 | Adobe Audition AVI File Parsing heap-based buffer overflow remote code execution | 7.8CNA v3.1 | 0.6% | 2024-02-15 | Fix |
| CVE-2024-20738 | Adobe FrameMaker Publishing Server authentication bypass vulnerability bypass | 9.8CNA v3.1 | 1.1% | 2024-02-15 | Fix |
| CVE-2024-20736 | Adobe Acrobat Pro DC AcroForm out-of-bounds read information disclosure | 5.5CNA v3.1 | 3.2% | 2024-02-15 | Fix |
| CVE-2024-20735 | TALOS-2023-1905 Adobe Acrobat Reader Font CPAL numColorRecords out-of-bounds read | 5.5CNA v3.1 | 2.3% | 2024-02-15 | Fix |
| CVE-2024-20734 | Adobe Acrobat Pro DC AcroForm use-after-free information disclosure | 5.5CNA v3.1 | 3.3% | 2024-02-15 | Fix |
| CVE-2024-20733 | Adobe Acrobat Reader Parsing OTF font denial of service | 5.5CNA v3.1 | 3.4% | 2024-02-15 | Fix |
| CVE-2024-20731 | TALOS-2023-1901 Adobe Acrobat Reader FileAttachment PDAnnot destroy use-after-free | 7.8CNA v3.1 | 2.6% | 2024-02-15 | Fix |
| CVE-2024-20730 | TALOS-2023-1906 Adobe Acrobat Reader Font CPAL integer overflow | 7.8CNA v3.1 | 4.4% | 2024-02-15 | Fix |
| CVE-2024-20729 | TALOS-2023-1890 Adobe Acrobat Reader Annot3D object zoom event use-after-free | 7.8CNA v3.1 | 3.4% | 2024-02-15 | Fix |
| CVE-2024-20728 | Adobe Acrobat Pro DC Annotation out-of-bounds write remote code execution | 7.8CNA v3.1 | 2.8% | 2024-02-15 | Fix |
| CVE-2024-20727 | Adobe Acrobat Reader out-of-bounds access vulnerability when parsing jpeg2000 | 7.8CNA v3.1 | 2.0% | 2024-02-15 | Fix |
| CVE-2024-20726 | Adobe Acrobat Reader JP2K Image Parsing out-of-bounds write | 7.8CNA v3.1 | 2.4% | 2024-02-15 | Fix |
| CVE-2024-20725 | Adobe Substance 3D Painter OOBR vulnerability I | 5.5CNA v3.1 | 0.2% | 2024-02-15 | Fix |
| CVE-2024-20724 | Adobe Substance 3D Painter OOBR vulnerability II | 5.5CNA v3.1 | 0.2% | 2024-02-15 | Fix |
| CVE-2024-20723 | Adobe Substance 3D Painter buffer overflow | 7.8CNA v3.1 | 0.4% | 2024-02-15 | Fix |
| CVE-2024-20722 | Adobe Substance 3D Painter OOBR vulnerability III | 5.5CNA v3.1 | 0.2% | 2024-02-15 | Fix |
| CVE-2024-20720 | Adobe Commerce command injection in data collector backup due to insufficient patching of | 9.1CNA v3.1 | 3.7% | 2024-02-15 | Fix |
| CVE-2024-20719 | Adobe Commerce stored XSS from low privileged admin user on every admin page, bypassing | 9.1CNA v3.1 | 1.3% | 2024-02-15 | Fix |
| CVE-2024-20718 | CSRF to delete Requisition Lists at Adobe Commerce | 4.3CNA v3.1 | 0.8% | 2024-02-15 | Fix |
| CVE-2024-20717 | Adobe Commerce stored admin XSS via PayPal authentication certificate | 5.4CNA v3.1 | 0.4% | 2024-02-15 | Fix |
| CVE-2024-20716 | Force high-usage of resources by generating unlimited coupons: Adobe Commerce | 4.9CNA v3.1 | 0.9% | 2024-02-15 | Fix |
| CVE-2024-1530 | ECshop view_sendlist.php SQL injection | 8.8v3.1 | 0.6% | 2024-02-15 | |
| CVE-2024-1523 | EC-web FS-EZViewer(Web) SQL injection | 8.8CNA v3.1 | 0.8% | 2024-02-15 | Fix |
| CVE-2024-1488 | Unbound: Unrestricted reconfiguration enabled to anyone that may lead to local privilege escalation | 7.3NVD v3.1 | 0.3% | 2024-02-15 | Fix |
| CVE-2024-0708 | Landing Page Cat WordPress plugin information disclosure | 5.3CNA v3.1 | 0.5% | 2024-02-15 | Fix |
| CVE-2024-0622 | OpenText Operations Agent privilege escalation | 8.8CNA v3.1 | 0.1% | 2024-02-15 | Fix |
| CVE-2024-0390 | Hard-coded credentials in iZZi connect application | 9.8v3.1 | 0.4% | 2024-02-15 | Fix |
| CVE-2024-0353 | ESET, spol. s r.o ESET NOD32 Antivirus local privilege escalation in Windows products | 7.8CNA v3.1 | 0.6% | 2024-02-15 | Exploit codeFix |
| CVE-2024-0240 | silabs.com GSDK memory leak | 6.5CNA v3.1 | 0.4% | 2024-02-15 | Fix |
| CVE-2024-25619 | Destroying OAuth Applications doesn't notify Streaming of Access Tokens being destroyed in mastodon | 3.1CNA v3.1 | 0.4% | 2024-02-14 | Fix |
| CVE-2024-25618 | External OpenID Connect account takeover by E-Mail Change in mastodon | 4.2CNA v3.1 | 0.5% | 2024-02-14 | Fix |
| CVE-2024-25617 | Denial of service in HTTP header parser in squid proxy | 5.3CNA v3.1 | 88.1% | 2024-02-14 | Fix |
| CVE-2024-25301 | redaxo code injection | 7.2v3.1 | 1.5% | 2024-02-14 | |
| CVE-2024-25300 | redaxo cross-site scripting | 4.8v3.1 | 0.4% | 2024-02-14 | |
| CVE-2024-25226 | code-projects Simple Admin Panel cross-site scripting | 6.1v3.1 | 0.4% | 2024-02-14 | |
| CVE-2024-25225 | code-projects Simple Admin Panel cross-site scripting | 5.4v3.1 | 0.4% | 2024-02-14 | |
| CVE-2024-25224 | code-projects Simple Admin Panel cross-site scripting | 5.4v3.1 | 0.4% | 2024-02-14 | |
| CVE-2024-25223 | code-projects Simple Admin Panel SQL injection | 9.8v3.1 | 0.6% | 2024-02-14 | |
| CVE-2024-25222 | code-projects Task Manager SQL injection | 9.8v3.1 | 0.7% | 2024-02-14 | |
| CVE-2024-25221 | code-projects Task Manager cross-site scripting | 6.1v3.1 | 0.4% | 2024-02-14 | |
| CVE-2024-25220 | code-projects Task Manager SQL injection | 9.8v3.1 | 0.7% | 2024-02-14 | |
| CVE-2024-25219 | code-projects Task Manager cross-site scripting | 6.1v3.1 | 0.5% | 2024-02-14 | |
| CVE-2024-25218 | code-projects Task Manager cross-site scripting | 6.1v3.1 | 0.4% | 2024-02-14 | |
| CVE-2024-25217 | oretnom23 Online Medicine Ordering System SQL injection | 9.8v3.1 | 0.7% | 2024-02-14 | |
| CVE-2024-25216 | Sherlock Employee Management System SQL injection | 9.8v3.1 | 0.7% | 2024-02-14 | |
| CVE-2024-25215 | Sherlock Employee Management System SQL injection | 9.8v3.1 | 0.7% | 2024-02-14 | |
| CVE-2024-25214 | Sherlock Employee Management System SQL injection | 9.8v3.1 | 1.0% | 2024-02-14 | |
| CVE-2024-25213 | Sherlock Employee Management System SQL injection | 7.2v3.1 | 0.7% | 2024-02-14 | |
| CVE-2024-25212 | Sherlock Employee Management System SQL injection | 7.2v3.1 | 0.7% | 2024-02-14 | |
| CVE-2024-25211 | Rems Simple Expense Tracker App SQL injection | 9.8v3.1 | 0.8% | 2024-02-14 | |
| CVE-2024-25210 | Rems Simple Expense Tracker App SQL injection | 9.8v3.1 | 0.8% | 2024-02-14 | |
| CVE-2024-25209 | Rems Barangay Population Monitoring System SQL injection | 9.8v3.1 | 0.8% | 2024-02-14 | |
| CVE-2024-25208 | Barangay Management System cross-site scripting | 5.4v3.1 | 0.4% | 2024-02-14 | |
| CVE-2024-25207 | Barangay Management System cross-site scripting | 5.4v3.1 | 0.4% | 2024-02-14 | |
| CVE-2024-25165 | swftools buffer overflow | 7.8v3.1 | 0.5% | 2024-02-14 | |
| CVE-2024-25125 | Absolute path traversal vulnerability in digdag server | 5.3CNA v3.1 | 29.6% | 2024-02-14 | Fix |
| CVE-2024-24990 | F5 NGINX HTTP/3 QUIC module use-after-free | 7.5CNA v3.1 | 0.9% | 2024-02-14 | Fix |
| CVE-2024-24989 | F5 NGINX HTTP/3 QUIC module null pointer dereference | 7.5CNA v3.1 | 1.1% | 2024-02-14 | Fix |
| CVE-2024-24966 | F5OS LDAP remote authentication incorrect authorization | 6.2CNA v3.1 | 0.2% | 2024-02-14 | Fix |
| CVE-2024-24775 | F5 BIG-IP Traffic Management Microkernel null pointer dereference | 7.5CNA v3.1 | 0.5% | 2024-02-14 | Fix |
| CVE-2024-24699 | Zoom Clients business logic error | 6.5CNA v3.1 | 1.7% | 2024-02-14 | Fix |
| CVE-2024-24698 | Zoom Clients improper authentication | 4.9CNA v3.1 | 0.5% | 2024-02-14 | Fix |
| CVE-2024-24697 | Zoom Clients untrusted search path | 7.2CNA v3.1 | 0.3% | 2024-02-14 | Fix |
| CVE-2024-24696 | Zoom Video Communications Zoom Desktop Client improper input validation | 6.8CNA v3.1 | 0.8% | 2024-02-14 | Fix |
| CVE-2024-24695 | Zoom Video Communications Zoom Desktop Client improper input validation | 6.8CNA v3.1 | 0.8% | 2024-02-14 | Fix |
| CVE-2024-24691 | Zoom Video Communications Zoom Desktop Client improper input validation | 9.6CNA v3.1 | 1.7% | 2024-02-14 | Fix |
| CVE-2024-24690 | Zoom Clients improper input validation | 5.4CNA v3.1 | 0.6% | 2024-02-14 | Fix |
| CVE-2024-24301 | 4ipnet Eap-767 command injection | 8.8CISA ADP v3.1 | 2.1% | 2024-02-14 | |
| CVE-2024-24300 | 4ipnet Eap-767 improper access control | 9.8CISA ADP v3.1 | 0.8% | 2024-02-14 | |
| CVE-2024-23982 | F5 BIG-IP Policy Enforcement Manager classification profile vulnerability | 7.5CNA v3.1 | 0.5% | 2024-02-14 | Fix |
| CVE-2024-23979 | BIG-IP SSL Client Certificate LDAP and CRLDP Authentication profiles vulnerability | 7.5CNA v3.1 | 0.3% | 2024-02-14 | Fix |
| CVE-2024-23976 | BIG-IP Appliance mode iAppsLX vulnerability | 6.0CNA v3.1 | 0.2% | 2024-02-14 | Fix |
| CVE-2024-23952 | Apache Superset: Allows for uncontrolled resource consumption via a ZIP bomb (version range fix for) | 6.5CNA v3.1 | 1.7% | 2024-02-14 | Fix |
| CVE-2024-23805 | F5 Application Visibility and Reporting module and BIG-IP Advanced WAF/ASM vulnerability | 7.5CNA v3.1 | 0.5% | 2024-02-14 | Fix |
| CVE-2024-23789 | Sharp Energy Management Controller with Cloud Services OS command injection | 8.8NVD v3.1 | 1.2% | 2024-02-14 | Fix |
| CVE-2024-23788 | Sharp Energy Management Controller with Cloud Services server-side request forgery | 8.1NVD v3.1 | 0.8% | 2024-02-14 | Fix |
| CVE-2024-23787 | Sharp Energy Management Controller with Cloud Services path traversal | 6.5NVD v3.1 | 0.9% | 2024-02-14 | Fix |
| CVE-2024-23786 | Sharp Energy Management Controller with Cloud Services cross-site scripting | 9.3v3.1 | 0.8% | 2024-02-14 | Fix |
| CVE-2024-23785 | Sharp Energy Management Controller with Cloud Services cross-site request forgery | 6.5v3.1 | 0.4% | 2024-02-14 | Fix |
| CVE-2024-23784 | Sharp Energy Management Controller with Cloud Services improper access control | 6.5v3.1 | 0.4% | 2024-02-14 | Fix |
| CVE-2024-23783 | Sharp Energy Management Controller with Cloud Services improper authentication | 8.8v3.1 | 0.5% | 2024-02-14 | Fix |
| CVE-2024-23607 | F5OS A path traversal | 5.5CNA v3.1 | 0.5% | 2024-02-14 | Fix |
| CVE-2024-23603 | BIG-IP Advanced WAF and ASM Configuration utility vulnerability | 3.8CNA v3.1 | 0.3% | 2024-02-14 | Fix |
| CVE-2024-23314 | F5 BIG-IP HTTP/2 processing vulnerability | 7.5CNA v3.1 | 0.5% | 2024-02-14 | Fix |
| CVE-2024-23308 | F5 BIG-IP Advanced WAF and ASM BD process null pointer dereference | 7.5CNA v3.1 | 0.5% | 2024-02-14 | Fix |
| CVE-2024-23306 | F5 BIG-IP Next CNF and SPK information disclosure | 7.1CNA v3.1 | 0.2% | 2024-02-14 | Fix |
| CVE-2024-22455 | Dell Mobility insecure direct object reference | 4.4CNA v3.1 | 0.3% | 2024-02-14 | Fix |
| CVE-2024-22389 | BIG-IP iControl REST API vulnerability | 7.2CNA v3.1 | 0.5% | 2024-02-14 | Fix |
| CVE-2024-22093 | F5 BIG-IP appliance mode iControl REST vulnerability | 8.7CNA v3.1 | 0.8% | 2024-02-14 | Fix |
| CVE-2024-21849 | F5 BIG-IP Websockets profile denial of service | 7.5CNA v3.1 | 0.5% | 2024-02-14 | Fix |
| CVE-2024-21789 | F5 BIG-IP missing resource release | 7.5CNA v3.1 | 0.5% | 2024-02-14 | Fix |
| CVE-2024-21782 | F5 BIG-IP and BIG-IQ secure copy utility OS command injection | 6.7CNA v3.1 | 0.2% | 2024-02-14 | Fix |
| CVE-2024-21771 | F5 AFM Signature Matching vulnerability | 7.5CNA v3.1 | 0.5% | 2024-02-14 | Fix |
| CVE-2024-21763 | F5 BIG-IP Advanced Firewall Manager DoS profile null pointer dereference | 7.5CNA v3.1 | 0.5% | 2024-02-14 | Fix |
| CVE-2024-1482 | Improper authorization in GitHub Enterprise Server allowed unauthorized workflow execution | 7.1CNA v3.1 | 0.4% | 2024-02-14 | Fix |
| CVE-2024-1471 | Tenable Security Center HTML injection | 5.9CNA v3.1 | 0.4% | 2024-02-14 | Fix |
| CVE-2024-1367 | Command injection vulnerability in Tenable Security Center | 7.2CNA v3.1 | 1.6% | 2024-02-14 | Fix |
| CVE-2024-0568 | Schneider Electric Harmony Control Relay RMNF22TB30 improper authentication | 8.8CNA v3.1 | 0.3% | 2024-02-14 | |
| CVE-2024-0011 | PAN-OS: Reflected cross-site scripting (XSS) vulnerability in Captive Portal Authentication | 4.3CNA v3.1 | 0.4% | 2024-02-14 | Fix |
| CVE-2024-0010 | PAN-OS: Reflected cross-site scripting (XSS) vulnerability in GlobalProtect portal | 4.3CNA v3.1 | 0.5% | 2024-02-14 | Fix |