CVE-2024 records published in February 2024
Page two of two: records 1,001 to 1,741 of the 1,741 published in February 2024, newest first. The first page carries the figures for February 2024.
| CVE | Summary | CVSS | EPSS | Published | Signals |
|---|---|---|---|---|---|
| CVE-2024-0009 | PAN-OS: Improper IP Address Verification in GlobalProtect Gateway | 6.3CNA v3.1 | 0.2% | 2024-02-14 | Fix |
| CVE-2024-0008 | PAN-OS: Insufficient session expiration vulnerability in the Web interface | 6.6CNA v3.1 | 0.5% | 2024-02-14 | Fix |
| CVE-2024-0007 | PAN-OS: Stored cross-site scripting (XSS) vulnerability in the Panorama Web interface | 6.8CNA v3.1 | 0.4% | 2024-02-14 | Fix |
| CVE-2024-25914 | SMTP Mail WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.2% | 2024-02-13 | Fix |
| CVE-2024-25643 | Missing authorization check in SAP Fiori app (My Overtime requests) | 4.3CNA v3.1 | 0.3% | 2024-02-13 | Fix |
| CVE-2024-25642 | Improper certificate validation in SAP Cloud Connector | 7.4CNA v3.1 | 0.5% | 2024-02-13 | Fix |
| CVE-2024-25407 | steve insufficient entropy | 7.5v3.1 | 0.6% | 2024-02-13 | |
| CVE-2024-25122 | Cross-site scripting sidekiq-unique-jobs UI server | 7.1CNA v3.1 | 0.5% | 2024-02-13 | Fix |
| CVE-2024-25121 | Improper access control Persisting File Abstraction Layer Entities via Data handler in TYPO3 | 7.1CNA v3.1 | 0.5% | 2024-02-13 | Fix |
| CVE-2024-25120 | Improper access control of Resources Referenced by t3:// URI Scheme in TYPO3 | 4.3CNA v3.1 | 0.5% | 2024-02-13 | Fix |
| CVE-2024-25119 | Information disclosure of Encryption Key in TYPO3 Install tool | 4.9CNA v3.1 | 0.4% | 2024-02-13 | Fix |
| CVE-2024-25118 | Information disclosure of Hashed Passwords in TYPO3 Backend forms | 4.3CNA v3.1 | 0.6% | 2024-02-13 | Fix |
| CVE-2024-24925 | Siemens Simcenter Femap uninitialized pointer access | 7.8CNA v3.1 | 0.3% | 2024-02-13 | Fix |
| CVE-2024-24924 | Siemens Simcenter Femap out-of-bounds write | 7.8CNA v3.1 | 0.3% | 2024-02-13 | Fix |
| CVE-2024-24923 | Siemens Simcenter Femap out-of-bounds read | 7.8CNA v3.1 | 0.3% | 2024-02-13 | Fix |
| CVE-2024-24922 | Siemens Simcenter Femap out-of-bounds write | 7.8CNA v3.1 | 0.3% | 2024-02-13 | Fix |
| CVE-2024-24921 | Siemens Simcenter Femap memory corruption | 7.8CNA v3.1 | 0.3% | 2024-02-13 | Fix |
| CVE-2024-24920 | Siemens Simcenter Femap out-of-bounds write | 7.8CNA v3.1 | 0.3% | 2024-02-13 | Fix |
| CVE-2024-24814 | Denial of service when manipulating mod_auth_openidc_session_chunks cookie in mod_auth_openidc | 7.5CNA v3.1 | 1.3% | 2024-02-13 | Fix |
| CVE-2024-24782 | HIMA: Origin validation error in multiple products | 4.3CNA v3.1 | 0.2% | 2024-02-13 | |
| CVE-2024-24781 | HIMA: Uncontrolled resource consumption in multiple products | 7.5CNA v3.1 | 0.7% | 2024-02-13 | |
| CVE-2024-24751 | Broken access control in Backend module in sf_event_mgt | 4.3CNA v3.1 | 0.5% | 2024-02-13 | Fix |
| CVE-2024-24743 | XXE vulnerability in SAP NetWeaver AS Java (Guided Procedures) | 8.6CNA v3.1 | 0.5% | 2024-02-13 | Fix |
| CVE-2024-24742 | Cross-site scripting (XSS) vulnerability in SAP CRM (WebClient UI) | 4.1CNA v3.1 | 0.3% | 2024-02-13 | Fix |
| CVE-2024-24741 | Missing authorization check in SAP Master Data Governance Material | 4.3CNA v3.1 | 0.3% | 2024-02-13 | Fix |
| CVE-2024-24740 | Information disclosure vulnerability in SAP NetWeaver Application Server ABAP (SAP Kernel) | 5.3CNA v3.1 | 0.4% | 2024-02-13 | Fix |
| CVE-2024-24739 | Missing authorization check in SAP BAM (Bank Account Management) | 6.3CNA v3.1 | 0.3% | 2024-02-13 | Fix |
| CVE-2024-24142 | Rems School Task Manager SQL injection | 9.8v3.1 | 1.1% | 2024-02-13 | Exploit code |
| CVE-2024-23816 | Siemens Location Intelligence Perpetual Large hard-coded credentials | 9.8CNA v3.1 | 0.7% | 2024-02-13 | Fix |
| CVE-2024-23813 | Siemens Polarion ALM improper authentication | 7.3CNA v3.1 | 0.6% | 2024-02-13 | Fix |
| CVE-2024-23812 | Siemens SINEC NMS OS command injection | 8.0CNA v3.1 | 1.1% | 2024-02-13 | Fix |
| CVE-2024-23811 | Siemens SINEC NMS unrestricted file upload | 8.8CNA v3.1 | 0.4% | 2024-02-13 | Fix |
| CVE-2024-23810 | Siemens SINEC NMS SQL injection | 8.8CNA v3.1 | 0.7% | 2024-02-13 | Fix |
| CVE-2024-23804 | Siemens Tecnomatix Plant Simulation V2201 stack-based buffer overflow | 7.8CNA v3.1 | 0.2% | 2024-02-13 | Fix |
| CVE-2024-23803 | Siemens Tecnomatix Plant Simulation V2201 out-of-bounds write | 7.8CNA v3.1 | 0.2% | 2024-02-13 | Fix |
| CVE-2024-23802 | Siemens Tecnomatix Plant Simulation V2201 out-of-bounds read | 7.8CNA v3.1 | 0.2% | 2024-02-13 | Fix |
| CVE-2024-23801 | Siemens Tecnomatix Plant Simulation V2201 null pointer dereference | 3.3CNA v3.1 | 0.2% | 2024-02-13 | Fix |
| CVE-2024-23800 | Siemens Tecnomatix Plant Simulation V2201 null pointer dereference | 3.3CNA v3.1 | 0.2% | 2024-02-13 | Fix |
| CVE-2024-23799 | Siemens Tecnomatix Plant Simulation V2201 null pointer dereference | 3.3CNA v3.1 | 0.2% | 2024-02-13 | Fix |
| CVE-2024-23798 | Siemens Tecnomatix Plant Simulation V2201 stack-based buffer overflow | 7.8CNA v3.1 | 0.3% | 2024-02-13 | Fix |
| CVE-2024-23797 | Siemens Tecnomatix Plant Simulation V2201 stack-based buffer overflow | 7.8CNA v3.1 | 0.3% | 2024-02-13 | Fix |
| CVE-2024-23796 | Siemens Tecnomatix Plant Simulation V2201 heap-based buffer overflow | 7.8CNA v3.1 | 0.3% | 2024-02-13 | Fix |
| CVE-2024-23795 | Siemens Tecnomatix Plant Simulation V2201 out-of-bounds write | 7.8CNA v3.1 | 0.3% | 2024-02-13 | Fix |
| CVE-2024-23440 | VirusBlokAda Vba32 Antivirus Vba32m64.sys driver out-of-bounds read | 7.1v3.1 | 0.2% | 2024-02-13 | |
| CVE-2024-23439 | VirusBlokAda Vba32 Antivirus Vba32m64.sys driver out-of-bounds read | 7.1v3.1 | 0.2% | 2024-02-13 | |
| CVE-2024-22923 | Adv RADIUS SQL injection | 9.8v3.1 | 0.7% | 2024-02-13 | |
| CVE-2024-22454 | Dell PowerProtect Data Manager weak password recovery | 8.8CNA v3.1 | 0.6% | 2024-02-13 | Fix |
| CVE-2024-22445 | Dell PowerProtect Data Manager OS command injection | 7.2CNA v3.1 | 1.4% | 2024-02-13 | Fix |
| CVE-2024-22132 | Code injection vulnerability in SAP IDES Systems | 7.4CNA v3.1 | 0.5% | 2024-02-13 | Fix |
| CVE-2024-22131 | Code injection vulnerability in SAP ABA (Application Basis) | 9.1CNA v3.1 | 1.1% | 2024-02-13 | Fix |
| CVE-2024-22130 | Cross-site scripting (XSS) vulnerability in SAP CRM WebClient UI | 7.6CNA v3.1 | 0.3% | 2024-02-13 | Fix |
| CVE-2024-22129 | Cross-site scripting (XSS) vulnerability in SAP Companion | 5.4CNA v3.1 | 0.3% | 2024-02-13 | Fix |
| CVE-2024-22128 | Cross-site scripting (XSS) vulnerability in SAP NetWeaver Business Client for HTML | 4.7CNA v3.1 | 0.3% | 2024-02-13 | Fix |
| CVE-2024-22126 | Cross-site scripting vulnerability in SAP NetWeaver AS Java (User Admin Application) | 6.1CNA v3.1 | 0.5% | 2024-02-13 | Fix |
| CVE-2024-22043 | Siemens Parasolid null pointer dereference | 3.3CNA v3.1 | 0.2% | 2024-02-13 | Fix |
| CVE-2024-22042 | Siemens Unicam FX incorrect use of privileged APIs | 7.8CNA v3.1 | 0.1% | 2024-02-13 | |
| CVE-2024-22024 | Ivanti Connect Secure SAML component XML external entity injection | 8.3NVD v3.1 | 94.7% | 2024-02-13 | NucleiEmerging ThreatsFix |
| CVE-2024-21491 | Svix vulnerable to authentication bypass | 6.5v3.1 | 0.4% | 2024-02-13 | Fix |
| CVE-2024-21420 | Microsoft WDAC OLE DB provider for SQL server remote code execution | 8.8CNA v3.1 | 1.7% | 2024-02-13 | Fix |
| CVE-2024-21413 | Microsoft Outlook improper input validation | 9.8CNA v3.1 | 94.7% | 2024-02-13 | KEVExploit codeFix |
| CVE-2024-21412 | Microsoft Windows Internet Shortcut files security feature bypass | 8.1CNA v3.1 | 99.4% | 2024-02-13 | KEVExploit codeKCVFix |
| CVE-2024-21410 | Microsoft Exchange Server privilege escalation | 9.8CNA v3.1 | 12.6% | 2024-02-13 | KEVFix |
| CVE-2024-21406 | Microsoft Windows Printing service spoofing | 7.5CNA v3.1 | 0.9% | 2024-02-13 | Fix |
| CVE-2024-21405 | Microsoft Message Queuing (MSMQ) elevation of privilege | 7.0CNA v3.1 | 0.4% | 2024-02-13 | Fix |
| CVE-2024-21404 | Microsoft .NET denial of service | 7.5CNA v3.1 | 2.7% | 2024-02-13 | Fix |
| CVE-2024-21403 | Microsoft Azure Kubernetes Service Confidential Container elevation of privilege | 9.0CNA v3.1 | 1.3% | 2024-02-13 | Fix |
| CVE-2024-21402 | Microsoft Outlook elevation of privilege | 7.1CNA v3.1 | 0.5% | 2024-02-13 | Fix |
| CVE-2024-21401 | Microsoft Entra Jira Single-Sign-on plugin elevation of privilege | 9.8CNA v3.1 | 1.5% | 2024-02-13 | Fix |
| CVE-2024-21397 | Microsoft Azure File Sync elevation of privilege | 5.3CNA v3.1 | 0.5% | 2024-02-13 | Fix |
| CVE-2024-21396 | Dynamics 365 Sales spoofing | 7.6CNA v3.1 | 1.2% | 2024-02-13 | Fix |
| CVE-2024-21395 | Microsoft Dynamics 365 (on-premises) cross-site scripting | 8.2CNA v3.1 | 1.1% | 2024-02-13 | Fix |
| CVE-2024-21394 | Dynamics 365 field service spoofing | 7.6CNA v3.1 | 1.1% | 2024-02-13 | Fix |
| CVE-2024-21393 | Microsoft Dynamics 365 (on-premises) cross-site scripting | 7.6CNA v3.1 | 1.2% | 2024-02-13 | Fix |
| CVE-2024-21391 | Microsoft WDAC OLE DB provider for SQL server remote code execution | 8.8CNA v3.1 | 1.6% | 2024-02-13 | Fix |
| CVE-2024-21389 | Microsoft Dynamics 365 (on-premises) cross-site scripting | 7.6CNA v3.1 | 1.2% | 2024-02-13 | Fix |
| CVE-2024-21386 | Microsoft ASP.NET Core .NET denial of service | 7.5CNA v3.1 | 2.4% | 2024-02-13 | Fix |
| CVE-2024-21384 | Microsoft Office OneNote remote code execution | 7.8CNA v3.1 | 0.8% | 2024-02-13 | Fix |
| CVE-2024-21381 | Microsoft Azure Active Directory B2C spoofing | 6.8CNA v3.1 | 0.4% | 2024-02-13 | Fix |
| CVE-2024-21380 | Microsoft Dynamics Business Central/NAV information disclosure | 8.0CNA v3.1 | 1.7% | 2024-02-13 | Fix |
| CVE-2024-21379 | Microsoft Word remote code execution | 7.8CNA v3.1 | 1.7% | 2024-02-13 | Fix |
| CVE-2024-21378 | Microsoft Outlook remote code execution | 8.8CNA v3.1 | 11.0% | 2024-02-13 | Exploit codeFix |
| CVE-2024-21377 | Microsoft Windows DNS information disclosure | 5.5CNA v3.1 | 0.6% | 2024-02-13 | Fix |
| CVE-2024-21376 | Microsoft Azure Kubernetes Service Confidential Container remote code execution | 9.0CNA v3.1 | 1.2% | 2024-02-13 | Fix |
| CVE-2024-21375 | Microsoft WDAC OLE DB provider for SQL server remote code execution | 8.8CNA v3.1 | 1.7% | 2024-02-13 | Fix |
| CVE-2024-21374 | Microsoft Teams for Android information disclosure | 5.0CNA v3.1 | 1.0% | 2024-02-13 | Fix |
| CVE-2024-21372 | Microsoft Windows OLE remote code execution | 8.8CNA v3.1 | 1.8% | 2024-02-13 | Fix |
| CVE-2024-21371 | Microsoft Windows Kernel elevation of privilege | 7.0CNA v3.1 | 10.9% | 2024-02-13 | Fix |
| CVE-2024-21370 | Microsoft WDAC OLE DB provider for SQL server remote code execution | 8.8CNA v3.1 | 1.8% | 2024-02-13 | Fix |
| CVE-2024-21369 | Microsoft WDAC OLE DB provider for SQL server remote code execution | 8.8CNA v3.1 | 1.5% | 2024-02-13 | Fix |
| CVE-2024-21368 | Microsoft WDAC OLE DB provider for SQL server remote code execution | 8.8CNA v3.1 | 1.6% | 2024-02-13 | Fix |
| CVE-2024-21367 | Microsoft WDAC OLE DB provider for SQL server remote code execution | 8.8CNA v3.1 | 1.6% | 2024-02-13 | Fix |
| CVE-2024-21366 | Microsoft WDAC OLE DB provider for SQL server remote code execution | 8.8CNA v3.1 | 1.8% | 2024-02-13 | Fix |
| CVE-2024-21365 | Microsoft WDAC OLE DB provider for SQL server remote code execution | 8.8CNA v3.1 | 1.8% | 2024-02-13 | Fix |
| CVE-2024-21364 | Microsoft Azure Site Recovery elevation of privilege | 9.3CNA v3.1 | 0.6% | 2024-02-13 | Fix |
| CVE-2024-21363 | Microsoft Message Queuing (MSMQ) remote code execution | 7.8CNA v3.1 | 0.8% | 2024-02-13 | Fix |
| CVE-2024-21362 | Microsoft Windows Kernel security feature bypass | 5.5CNA v3.1 | 0.4% | 2024-02-13 | Fix |
| CVE-2024-21361 | Microsoft WDAC OLE DB provider for SQL server remote code execution | 8.8CNA v3.1 | 1.6% | 2024-02-13 | Fix |
| CVE-2024-21360 | Microsoft WDAC OLE DB provider for SQL server remote code execution | 8.8CNA v3.1 | 1.8% | 2024-02-13 | Fix |
| CVE-2024-21359 | Microsoft WDAC OLE DB provider for SQL server remote code execution | 8.8CNA v3.1 | 1.6% | 2024-02-13 | Fix |
| CVE-2024-21358 | Microsoft WDAC OLE DB provider for SQL server remote code execution | 8.8CNA v3.1 | 1.8% | 2024-02-13 | Fix |
| CVE-2024-21357 | Microsoft Windows Pragmatic General Multicast (PGM) remote code execution | 8.1CNA v3.1 | 26.9% | 2024-02-13 | Fix |
| CVE-2024-21356 | Microsoft Windows Lightweight Directory Access Protocol (LDAP) denial of service | 6.5CNA v3.1 | 2.1% | 2024-02-13 | Fix |
| CVE-2024-21355 | Microsoft Message Queuing (MSMQ) elevation of privilege | 7.0CNA v3.1 | 0.3% | 2024-02-13 | Fix |
| CVE-2024-21354 | Microsoft Message Queuing (MSMQ) elevation of privilege | 7.8CNA v3.1 | 0.6% | 2024-02-13 | Fix |
| CVE-2024-21353 | Microsoft WDAC ODBC driver remote code execution | 8.8CNA v3.1 | 1.6% | 2024-02-13 | Fix |
| CVE-2024-21352 | Microsoft WDAC OLE DB provider for SQL server remote code execution | 8.8CNA v3.1 | 1.6% | 2024-02-13 | Fix |
| CVE-2024-21351 | Microsoft Windows SmartScreen security feature bypass | 7.6CNA v3.1 | 27.8% | 2024-02-13 | KEVFix |
| CVE-2024-21350 | Microsoft WDAC OLE DB provider for SQL server remote code execution | 8.8CNA v3.1 | 1.5% | 2024-02-13 | Fix |
| CVE-2024-21349 | Microsoft ActiveX Data Objects remote code execution | 8.8CNA v3.1 | 1.6% | 2024-02-13 | Fix |
| CVE-2024-21348 | Microsoft Windows Internet Connection Sharing (ICS) denial of service | 7.5CNA v3.1 | 2.2% | 2024-02-13 | Fix |
| CVE-2024-21347 | Microsoft ODBC driver remote code execution | 7.5CNA v3.1 | 1.4% | 2024-02-13 | Fix |
| CVE-2024-21346 | Microsoft Windows win32k elevation of privilege | 7.8CNA v3.1 | 4.1% | 2024-02-13 | Fix |
| CVE-2024-21345 | Microsoft Windows Kernel elevation of privilege | 8.8CNA v3.1 | 20.4% | 2024-02-13 | Exploit codeFix |
| CVE-2024-21344 | Microsoft Windows Network Address Translation (NAT) denial of service | 5.9CNA v3.1 | 1.7% | 2024-02-13 | Fix |
| CVE-2024-21343 | Microsoft Windows Network Address Translation (NAT) denial of service | 5.9CNA v3.1 | 1.8% | 2024-02-13 | Fix |
| CVE-2024-21342 | Microsoft Windows DNS client denial of service | 7.5CNA v3.1 | 2.5% | 2024-02-13 | Fix |
| CVE-2024-21341 | Microsoft Windows Kernel remote code execution | 6.8CNA v3.1 | 1.0% | 2024-02-13 | Fix |
| CVE-2024-21340 | Microsoft Windows Kernel information disclosure | 4.6CNA v3.1 | 0.8% | 2024-02-13 | Fix |
| CVE-2024-21339 | Microsoft Windows USB Generic Parent driver remote code execution | 6.4CNA v3.1 | 0.6% | 2024-02-13 | Fix |
| CVE-2024-21338 | Microsoft Windows Kernel exposed IOCTL with insufficient access control | 7.8CNA v3.1 | 59.8% | 2024-02-13 | KEVExploit codeFix |
| CVE-2024-21329 | Microsoft Azure Connected Machine Agent elevation of privilege | 7.3CNA v3.1 | 1.1% | 2024-02-13 | Fix |
| CVE-2024-21328 | Dynamics 365 Sales spoofing | 7.6CNA v3.1 | 1.3% | 2024-02-13 | Fix |
| CVE-2024-21327 | Microsoft Dynamics 365 Customer Engagement cross-site scripting | 7.6CNA v3.1 | 1.3% | 2024-02-13 | Fix |
| CVE-2024-21315 | Microsoft Defender For Endpoint Protection elevation of privilege | 7.8CNA v3.1 | 0.6% | 2024-02-13 | Fix |
| CVE-2024-21304 | Microsoft Windows Trusted Compute Base elevation of privilege | 4.1CNA v3.1 | 0.5% | 2024-02-13 | Fix |
| CVE-2024-20695 | Microsoft Skype for Business information disclosure | 5.7CNA v3.1 | 0.6% | 2024-02-13 | Fix |
| CVE-2024-20684 | Microsoft Windows Hyper-V denial of service | 6.5CNA v3.1 | 1.0% | 2024-02-13 | Fix |
| CVE-2024-20679 | Microsoft Azure Stack Hub spoofing | 6.5CNA v3.1 | 1.3% | 2024-02-13 | Fix |
| CVE-2024-20673 | Microsoft Office remote code execution | 7.8CNA v3.1 | 1.2% | 2024-02-13 | Fix |
| CVE-2024-20667 | Microsoft Azure DevOps Server remote code execution | 7.5CNA v3.1 | 1.4% | 2024-02-13 | Fix |
| CVE-2024-1485 | Registry-support: Decompress can delete files outside scope via relative paths | 8.0CNA v3.1 | 0.9% | 2024-02-13 | Fix |
| CVE-2024-1378 | GitHub Enterprise Server Management Console SMTP configuration command injection | 9.1CNA v3.1 | 2.3% | 2024-02-13 | Fix |
| CVE-2024-1374 | GitHub Enterprise Server Management Console audit log forwarding command injection | 9.1CNA v3.1 | 2.6% | 2024-02-13 | Fix |
| CVE-2024-1372 | GitHub Enterprise Server Management Console SAML settings command injection | 9.1CNA v3.1 | 2.3% | 2024-02-13 | Fix |
| CVE-2024-1369 | GitHub Enterprise Server Management Console collectd configuration command injection | 9.1CNA v3.1 | 2.3% | 2024-02-13 | Fix |
| CVE-2024-1359 | GitHub Enterprise Server Management Console HTTP proxy configuration command injection | 9.1CNA v3.1 | 2.3% | 2024-02-13 | Fix |
| CVE-2024-1355 | GitHub Enterprise Server Management Console actions-console container command injection | 9.1CNA v3.1 | 2.4% | 2024-02-13 | Fix |
| CVE-2024-1354 | GitHub Enterprise Server Management Console syslog-ng configuration command injection | 8.0CNA v3.1 | 1.7% | 2024-02-13 | Fix |
| CVE-2024-1309 | Honeywell Niagara Framework resource consumption Identified in NTP and | 6.5CNA v3.1 | 1.0% | 2024-02-13 | Fix |
| CVE-2024-1163 | Path traversal vulnerability in Mapshaper | 7.1v3.1 | 0.4% | 2024-02-13 | Fix |
| CVE-2024-1160 | Bold Page Builder WordPress plugin stored cross-site scripting | 5.4CNA v3.1 | 0.4% | 2024-02-13 | Fix |
| CVE-2024-1159 | Bold Page Builder WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.4% | 2024-02-13 | Fix |
| CVE-2024-1157 | Bold Page Builder WordPress plugin stored cross-site scripting | 5.4CNA v3.1 | 0.4% | 2024-02-13 | Fix |
| CVE-2024-1140 | Twister Antivirus out-of-bounds read | 5.5NVD v3.1 | 0.2% | 2024-02-13 | |
| CVE-2024-1096 | Twister Antivirus denial of service | 5.5CNA v3.1 | 0.2% | 2024-02-13 | |
| CVE-2024-1084 | GitHub Enterprise Server cross-site scripting | 6.5CNA v3.1 | 0.5% | 2024-02-13 | Fix |
| CVE-2024-1082 | GitHub Enterprise Server GitHub Pages artifact upload path traversal | 6.3CNA v3.1 | 0.8% | 2024-02-13 | Fix |
| CVE-2024-25744 | Linux kernel protection mechanism failure | 8.8v3.1 | 0.3% | 2024-02-12 | Fix |
| CVE-2024-25741 | Linux kernel denial of service | 5.5v3.1 | 0.3% | 2024-02-12 | Fix |
| CVE-2024-25740 | Linux kernel UBI driver in drivers/mtd/ubi/attach.c in the memory leak | 5.5v3.1 | 0.2% | 2024-02-12 | Fix |
| CVE-2024-25739 | Linux kernel improper check for exceptional conditions | 5.5NVD v3.1 | 0.2% | 2024-02-12 | Fix |
| CVE-2024-25360 | Motorola CX2L insecure storage of sensitive information | 5.3v3.1 | 0.4% | 2024-02-12 | |
| CVE-2024-25112 | Denial of service due to unbounded recursion in QuickTimeVideo::multipleEntriesDecoder in Exiv2 | 5.5CNA v3.1 | 0.2% | 2024-02-12 | Fix |
| CVE-2024-25110 | Azure IoT Platform Device SDK remote code execution | 9.8CNA v3.1 | 7.3% | 2024-02-12 | Fix |
| CVE-2024-25108 | Insufficient authorization allowing elevated access to resources in pixelfed | 9.9CNA v3.1 | 0.7% | 2024-02-12 | Fix |
| CVE-2024-25100 | Coupon Referral Program WordPress plugin unauthenticated PHP object injection | 9.8v3.1 | 0.8% | 2024-02-12 | Fix |
| CVE-2024-24935 | Basic Log Viewer WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.2% | 2024-02-12 | |
| CVE-2024-24933 | Honeypot for WP Comment WordPress plugin cross-site scripting (XSS) | 6.1NVD v3.1 | 0.3% | 2024-02-12 | |
| CVE-2024-24932 | VK Poster Group WordPress plugin cross-site scripting (XSS) | 6.1NVD v3.1 | 0.3% | 2024-02-12 | |
| CVE-2024-24931 | Before After Image Slider WP WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.3% | 2024-02-12 | |
| CVE-2024-24930 | Buttons Shortcode and Widget WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.3% | 2024-02-12 | |
| CVE-2024-24929 | WP Contact Form WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.2% | 2024-02-12 | |
| CVE-2024-24928 | Content Cards WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.3% | 2024-02-12 | |
| CVE-2024-24927 | Brooklyn WordPress theme cross-site scripting (XSS) | 6.1NVD v3.1 | 0.3% | 2024-02-12 | Fix |
| CVE-2024-24926 | Brooklyn WordPress theme PHP object injection | 8.8v3.1 | 1.1% | 2024-02-12 | Exploit codeFix |
| CVE-2024-24889 | All 404 Pages Redirect to Homepage WordPress plugin cross-site scripting (XSS) | 6.1v3.1 | 0.3% | 2024-02-12 | Fix |
| CVE-2024-24887 | Contest Gallery WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.2% | 2024-02-12 | Fix |
| CVE-2024-24884 | Contact Form 7 Connector WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.2% | 2024-02-12 | Fix |
| CVE-2024-24875 | Link Library WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.2% | 2024-02-12 | Fix |
| CVE-2024-24826 | Out-of-bounds read in QuickTimeVideo::NikonTagsDecoder in Exiv2 | 5.5CNA v3.1 | 0.2% | 2024-02-12 | Fix |
| CVE-2024-24797 | ERE Recently Viewed WordPress plugin PHP object injection | 9.8v3.1 | 0.6% | 2024-02-12 | Fix |
| CVE-2024-24796 | Event Manager for WooCommerce WordPress plugin PHP object injection | 8.8v3.1 | 0.5% | 2024-02-12 | Fix |
| CVE-2024-24337 | Koha budget and patron CSV exports CSV injection | 8.0v3.1 | 0.8% | 2024-02-12 | |
| CVE-2024-23833 | OpenRefine JDBC connector path traversal | 7.5CNA v3.1 | 1.0% | 2024-02-12 | Fix |
| CVE-2024-23763 | Gambio SQL injection | 9.8v3.1 | 0.6% | 2024-02-12 | |
| CVE-2024-23762 | Gambio Content Manager feature arbitrary file upload | 7.8v3.1 | 0.3% | 2024-02-12 | |
| CVE-2024-23761 | Gambio server-side template injection | 9.8v3.1 | 0.7% | 2024-02-12 | |
| CVE-2024-23760 | Gambio cleartext storage of sensitive information | 2.7v3.1 | 0.4% | 2024-02-12 | |
| CVE-2024-23759 | Gambio deserialization of untrusted data | 9.8v3.1 | 47.8% | 2024-02-12 | MetasploitEmerging ThreatsExploit code |
| CVE-2024-23513 | PropertyHive WordPress plugin PHP object injection | 9.8v3.1 | 0.5% | 2024-02-12 | Fix |
| CVE-2024-23512 | ProductX Gutenberg WooCommerce Blocks WordPress plugin PHP object injection | 9.8v3.1 | 0.5% | 2024-02-12 | Fix |
| CVE-2024-22230 | Dell Unity cross-site scripting | 6.4CNA v3.1 | 0.3% | 2024-02-12 | Fix |
| CVE-2024-22228 | Dell Unity OS command injection | 7.8CNA v3.1 | 0.6% | 2024-02-12 | Fix |
| CVE-2024-22227 | Dell Unity OS command injection | 7.8CNA v3.1 | 0.6% | 2024-02-12 | Fix |
| CVE-2024-22226 | Dell Unity relative path traversal | 3.3CNA v3.1 | 0.4% | 2024-02-12 | Fix |
| CVE-2024-22225 | Dell Unity OS command injection | 7.8CNA v3.1 | 1.0% | 2024-02-12 | Fix |
| CVE-2024-22224 | Dell Unity OS command injection | 7.8CNA v3.1 | 0.9% | 2024-02-12 | Fix |
| CVE-2024-22223 | Dell Unity OS command injection | 7.8CNA v3.1 | 0.9% | 2024-02-12 | Fix |
| CVE-2024-22222 | Dell Unity OS command injection | 7.8CNA v3.1 | 0.9% | 2024-02-12 | Fix |
| CVE-2024-22221 | Dell Unity SQL injection | 4.5CNA v3.1 | 0.4% | 2024-02-12 | Fix |
| CVE-2024-1459 | Red Hat JBoss Enterprise Application Platform Undertow: Directory traversal | 5.3CNA v3.1 | 1.7% | 2024-02-12 | Fix |
| CVE-2024-1454 | OpenSC: Memory use-after-free in authentic driver when updating token info | 3.4NVD v3.1 | 0.4% | 2024-02-12 | Fix |
| CVE-2024-1439 | Inadequate access control vulnerability in Moodle | 3.3NVD v3.1 | 0.3% | 2024-02-12 | Fix |
| CVE-2024-1250 | GitLab group access token creation privilege escalation | 6.5CNA v3.1 | 0.5% | 2024-02-12 | Fix |
| CVE-2024-1062 | Red Hat Directory Server heap-based buffer overflow | 5.5CNA v3.1 | 0.3% | 2024-02-12 | Fix |
| CVE-2024-0566 | Smart Manager WordPress plugin Admin+ SQL injection | 7.2NVD v3.1 | 3.3% | 2024-02-12 | Exploit codeFix |
| CVE-2024-0421 | MapPress Maps for WordPress plugin unauthenticated arbitrary Private/Draft post disclosure | 5.3NVD v3.1 | 0.6% | 2024-02-12 | Fix |
| CVE-2024-0420 | MapPress Maps for WordPress plugin Contributor+ stored XSS | 5.4NVD v3.1 | 0.5% | 2024-02-12 | Fix |
| CVE-2024-0250 | Analytics Insights for Google Analytics 4 WordPress plugin open redirect | 6.1NVD v3.1 | 1.3% | 2024-02-12 | Reported exploitedNucleiFix |
| CVE-2024-0248 | EazyDocs WordPress plugin Subscriber+ arbitrary posts deletion and Document management | 4.3NVD v3.1 | 0.4% | 2024-02-12 | Fix |
| CVE-2024-0170 | Dell Unity OS command injection | 7.8CNA v3.1 | 0.8% | 2024-02-12 | Fix |
| CVE-2024-0169 | Dell Unity cross-site scripting | 5.7CNA v3.1 | 0.3% | 2024-02-12 | Fix |
| CVE-2024-0168 | Dell Unity OS command injection | 7.8CNA v3.1 | 0.8% | 2024-02-12 | Fix |
| CVE-2024-0167 | Dell Unity OS command injection | 7.8CNA v3.1 | 0.8% | 2024-02-12 | Fix |
| CVE-2024-0166 | Dell Unity OS command injection | 7.8CNA v3.1 | 1.1% | 2024-02-12 | Fix |
| CVE-2024-0165 | Dell Unity OS command injection | 7.8CNA v3.1 | 1.0% | 2024-02-12 | Fix |
| CVE-2024-0164 | Dell Unity OS command injection | 7.8CNA v3.1 | 1.1% | 2024-02-12 | Fix |
| CVE-2024-25728 | Expressvpn insecure storage of sensitive information | 7.5v3.1 | 0.7% | 2024-02-11 | Fix |
| CVE-2024-25722 | QAnything SQL injection | 9.8v3.1 | 0.6% | 2024-02-11 | |
| CVE-2024-25718 | Samly access control vulnerability | 9.8v3.1 | 0.7% | 2024-02-11 | Fix |
| CVE-2024-25715 | Glewlwyd SSO Server open redirect | 6.1v3.1 | 0.4% | 2024-02-11 | Fix |
| CVE-2024-25714 | Rhonabwy observable discrepancy | 9.8v3.1 | 0.8% | 2024-02-11 | Fix |
| CVE-2024-25419 | Flusity cross-site request forgery | 8.8v3.1 | 0.3% | 2024-02-11 | |
| CVE-2024-25418 | Flusity cross-site request forgery | 8.8v3.1 | 0.3% | 2024-02-11 | |
| CVE-2024-25417 | Flusity cross-site request forgery | 8.8v3.1 | 0.3% | 2024-02-11 | |
| CVE-2024-23724 | Ghost has possible cross-site scripting issue | 9.0v3.1 | 3.5% | 2024-02-11 | Exploit codeFix |
| CVE-2024-21875 | Badge.team Hacker Hotel Badge 2024 DoS attack when broadcasting billboard messages | 6.5v3.1 | 0.5% | 2024-02-11 | |
| CVE-2024-1433 | KDE Plasma Workspace theme file eventpluginsmanager.cpp enabledPlugins path traversal | 3.7v3.1 | 0.8% | 2024-02-11 | |
| CVE-2024-1432 | DeepFaceLab main.py apply_xseg deserialization | 5.0CNA v3.1 | 0.6% | 2024-02-11 | |
| CVE-2024-1431 | Netgear R7000 Web Management interface debuginfo.htm information disclosure | 6.5v3.1 | 0.5% | 2024-02-11 | |
| CVE-2024-1430 | Netgear R7000 Web Management interface currentsetting.htm information disclosure | 6.5v3.1 | 0.6% | 2024-02-11 | |
| CVE-2024-1151 | Kernel: Stack overflow problem in open vswitch kernel module leading to DoS | 5.5NVD v3.1 | 0.3% | 2024-02-11 | Fix |
| CVE-2024-24831 | Premium Addons for Elementor WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.3% | 2024-02-10 | Fix |
| CVE-2024-24804 | MW WP Form WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.3% | 2024-02-10 | Fix |
| CVE-2024-24803 | Ultra Companion WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.3% | 2024-02-10 | Fix |
| CVE-2024-24801 | OWL Carousel WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.3% | 2024-02-10 | |
| CVE-2024-24717 | Beds24 Online Booking WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.3% | 2024-02-10 | Fix |
| CVE-2024-24713 | Auto Listings WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.3% | 2024-02-10 | Fix |
| CVE-2024-24712 | Heateor Social Login WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.3% | 2024-02-10 | Fix |
| CVE-2024-23517 | Scheduling Plugin Online Booking for WordPress cross-site scripting (XSS) | 5.4v3.1 | 0.3% | 2024-02-10 | Fix |
| CVE-2024-23516 | CC BMI Calculator WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.3% | 2024-02-10 | Fix |
| CVE-2024-23514 | Click To Tweet WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.3% | 2024-02-10 | |
| CVE-2024-22361 | IBM Semeru Runtime information disclosure | 5.9CNA v3.1 | 0.3% | 2024-02-10 | Fix |
| CVE-2024-22313 | IBM Storage Defender Resiliency service information disclosure | 6.2CNA v3.1 | 0.1% | 2024-02-10 | Fix |
| CVE-2024-22312 | IBM Storage Defender Resiliency service information disclosure | 4.4CNA v3.1 | 0.2% | 2024-02-10 | Fix |
| CVE-2024-21490 | angular vulnerable to super-linear runtime due to backtracking | 7.5NVD v3.1 | 1.9% | 2024-02-10 | Fix |
| CVE-2024-1406 | Linksys WRT54GL Web Management Interface SysInfo1.htm information disclosure | 4.3v3.1 | 0.5% | 2024-02-10 | |
| CVE-2024-1405 | Linksys WRT54GL Web Management interface wlaninfo.htm information disclosure | 4.3v3.1 | 0.4% | 2024-02-10 | |
| CVE-2024-0596 | Awesome Support WordPress HelpDesk and Support plugin missing authorization via editor_html | 5.3v3.1 | 0.4% | 2024-02-10 | Fix |
| CVE-2024-0595 | Awesome Support WordPress HelpDesk and Support plugin missing authorization via wpas_get_users | 4.3v3.1 | 0.4% | 2024-02-10 | Fix |
| CVE-2024-0594 | Awesome Support WordPress HelpDesk and Support plugin authenticated (Subscriber+) SQL injection | 8.8v3.1 | 0.6% | 2024-02-10 | Fix |
| CVE-2024-25679 | PQUIC initial encryption key handling vulnerability | 6.5v3.1 | 0.3% | 2024-02-09 | |
| CVE-2024-25678 | litespeedtech LSQUIC improper integrity check validation | 9.8v3.1 | 0.4% | 2024-02-09 | Fix |
| CVE-2024-25677 | Minbrowser Min improper access control | 8.8v3.1 | 0.6% | 2024-02-09 | |
| CVE-2024-25675 | MISP exposed dangerous method | 9.8v3.1 | 0.8% | 2024-02-09 | |
| CVE-2024-25674 | MISP unrestricted file upload | 9.8v3.1 | 0.8% | 2024-02-09 | |
| CVE-2024-25454 | Axiosys Bento4 null pointer dereference | 5.5v3.1 | 0.2% | 2024-02-09 | |
| CVE-2024-25453 | Axiosys Bento4 null pointer dereference | 5.5v3.1 | 0.3% | 2024-02-09 | |
| CVE-2024-25452 | Axiosys Bento4 resource exhaustion | 5.5v3.1 | 0.2% | 2024-02-09 | |
| CVE-2024-25451 | Axiosys Bento4 resource exhaustion | 6.5v3.1 | 0.5% | 2024-02-09 | |
| CVE-2024-25450 | Enlightenment Imlib2 memory leak | 8.8v3.1 | 0.7% | 2024-02-09 | Fix |
| CVE-2024-25448 | Enlightenment Imlib2 heap-based buffer overflow | 8.8v3.1 | 0.7% | 2024-02-09 | Fix |
| CVE-2024-25447 | Enlightenment Imlib2 out-of-bounds write | 8.8v3.1 | 0.7% | 2024-02-09 | Fix |
| CVE-2024-25446 | Hugin out-of-bounds write | 7.8v3.1 | 0.4% | 2024-02-09 | Fix |
| CVE-2024-25445 | Hugin reachable assertion | 7.8v3.1 | 0.3% | 2024-02-09 | Fix |
| CVE-2024-25443 | Hugin use-after-free | 7.8v3.1 | 0.3% | 2024-02-09 | Fix |
| CVE-2024-25442 | Hugin out-of-bounds write | 7.8v3.1 | 0.4% | 2024-02-09 | Fix |
| CVE-2024-25318 | Hotel Management System SQL injection | 8.8v3.1 | 0.7% | 2024-02-09 | |
| CVE-2024-25316 | Hotel Management System SQL injection | 9.8v3.1 | 0.7% | 2024-02-09 | |
| CVE-2024-25315 | Hotel Management System SQL injection | 9.8v3.1 | 0.7% | 2024-02-09 | |
| CVE-2024-25314 | Hotel Management System SQL injection | 9.8v3.1 | 0.7% | 2024-02-09 | |
| CVE-2024-25313 | code-projects Simple School Management System improper authentication | 8.8v3.1 | 0.8% | 2024-02-09 | |
| CVE-2024-25312 | code-projects Simple School Management System SQL injection | 8.8v3.1 | 0.7% | 2024-02-09 | |
| CVE-2024-25310 | code-projects Simple School Management System SQL injection | 8.8v3.1 | 0.7% | 2024-02-09 | |
| CVE-2024-25309 | code-projects Simple School Management System SQL injection | 8.8v3.1 | 0.7% | 2024-02-09 | |
| CVE-2024-25308 | code-projects Simple School Management System SQL injection | 8.8v3.1 | 0.7% | 2024-02-09 | |
| CVE-2024-25307 | code-projects Cinema Seat Reservation System SQL injection | 9.8v3.1 | 0.7% | 2024-02-09 | |
| CVE-2024-25306 | code-projects Simple School Management System SQL injection | 8.8v3.1 | 0.7% | 2024-02-09 | |
| CVE-2024-25305 | code-projects Simple School Management System SQL injection | 8.8v3.1 | 0.9% | 2024-02-09 | |
| CVE-2024-25304 | code-projects Simple School Management System SQL injection | 8.8v3.1 | 0.7% | 2024-02-09 | |
| CVE-2024-25302 | Remyandrade Event Student Attendance System SQL injection | 9.8v3.1 | 0.7% | 2024-02-09 | |
| CVE-2024-25109 | Cross-site scripting in the extensions, settings, permissions and namespaces subpages of ManageWiki | 6.5CNA v3.1 | 0.4% | 2024-02-09 | Fix |
| CVE-2024-25004 | 9BIS kitty out-of-bounds write | 7.8v3.1 | 1.8% | 2024-02-09 | Exploit code |
| CVE-2024-25003 | 9BIS kitty out-of-bounds write | 7.8v3.1 | 1.8% | 2024-02-09 | Exploit code |
| CVE-2024-24829 | SSRF in Sentry via Phabricator integration | 4.3CNA v3.1 | 0.5% | 2024-02-09 | Fix |
| CVE-2024-24828 | Local privilege escalation in execuatables bundled by pkg | 6.6CNA v3.1 | 0.2% | 2024-02-09 | Fix |
| CVE-2024-24825 | TokenManager not checking permissions on cached tokens in DIRAC | 9.1CNA v3.1 | 0.5% | 2024-02-09 | Fix |
| CVE-2024-24821 | Composer code execution and possible privilege escalation | 8.8CNA v3.1 | 0.3% | 2024-02-09 | Fix |
| CVE-2024-24820 | Icinga Director configuration is susceptible to cross-site request forgery | 8.3CNA v3.1 | 0.4% | 2024-02-09 | Fix |
| CVE-2024-24819 | icingaweb2-module-incubator base implementation for HTML forms is susceptible to CSRF | 5.3CNA v3.1 | 0.3% | 2024-02-09 | Fix |
| CVE-2024-24776 | Mattermost incorrect authorization leads to Channel Member Count leak | 3.1CNA v3.1 | 0.3% | 2024-02-09 | Fix |
| CVE-2024-24774 | Mattermost missing authorization allows users to access arbitrary security levels on Jira | 3.4CNA v3.1 | 0.5% | 2024-02-09 | Fix |
| CVE-2024-24308 | Boostmyshop SQL injection | 9.8v3.1 | 0.7% | 2024-02-09 | Fix |
| CVE-2024-23749 | 9BIS kitty command injection | 7.8v3.1 | 4.7% | 2024-02-09 | Exploit code |
| CVE-2024-23639 | micronaut-core management endpoints vulnerable to drive-by localhost attack | 5.1CNA v3.1 | 0.3% | 2024-02-09 | Fix |
| CVE-2024-23327 | Crash in proxy protocol when command type of local in Envoy | 7.5CNA v3.1 | 0.7% | 2024-02-09 | Fix |
| CVE-2024-23325 | Envoy crashes when using an address type that isn’t supported by the OS | 7.5CNA v3.1 | 0.8% | 2024-02-09 | Fix |
| CVE-2024-23324 | Envoy ext auth can be bypassed when Proxy protocol filter sets invalid UTF-8 metadata | 8.6CNA v3.1 | 0.6% | 2024-02-09 | Fix |
| CVE-2024-23323 | Excessive CPU usage when URI template matcher is configured using regex in Envoy | 4.3CNA v3.1 | 0.5% | 2024-02-09 | Fix |
| CVE-2024-23322 | Envoy crashes when idle and request per try timeout occur within the backoff interval | 7.5CNA v3.1 | 0.7% | 2024-02-09 | Fix |
| CVE-2024-23319 | Mattermost CSRF issue allows disconnecting a user's Jira connection | 3.5CNA v3.1 | 0.2% | 2024-02-09 | Fix |
| CVE-2024-22332 | IBM Integration Bus for z/OS denial of service | 6.5CNA v3.1 | 0.6% | 2024-02-09 | Fix |
| CVE-2024-22318 | IBM i Access Client Solutions information disclosure | 5.1CNA v3.1 | 0.6% | 2024-02-09 | Exploit codeFix |
| CVE-2024-22119 | Zabbix stored XSS in graph items select form | 5.5CNA v3.1 | 0.7% | 2024-02-09 | Fix |
| CVE-2024-21762 | Fortinet FortiOS out-of-bound write | 9.6CNA v3.1 | 83.4% | 2024-02-09 | KEVEmerging ThreatsExploit codeFix |
| CVE-2024-21624 | Potential information leak in User-Constructed message templates in nonebot2 | 5.7CNA v3.1 | 0.5% | 2024-02-09 | Fix |
| CVE-2024-1404 | Linksys WRT54GL Web Management Interface SysInfo.htm information disclosure | 7.5v3.1 | 0.8% | 2024-02-09 | |
| CVE-2024-1402 | Denial of service in Mattermost mobile apps and server via emoji reactions | 4.3CNA v3.1 | 0.5% | 2024-02-09 | Fix |
| CVE-2024-1353 | Phpems index.api.php index deserialization | 9.8v3.1 | 0.7% | 2024-02-09 | |
| CVE-2024-1247 | Concrete CMS vulnerable to stored XSS via the Role Name field | 2.0CNA v3.1 | 1.2% | 2024-02-09 | Exploit codeFix |
| CVE-2024-1246 | Concrete CMS vulnerable to reflected XSS via the Image URL Import feature | 2.0CNA v3.1 | 0.5% | 2024-02-09 | Fix |
| CVE-2024-1245 | Concrete CMS vulnerable to stored XSS in file tags and description attributes | 2.4CNA v3.1 | 0.4% | 2024-02-09 | Fix |
| CVE-2024-1122 | Event Manager WordPress plugin unauthorized access | 5.3v3.1 | 0.5% | 2024-02-09 | Fix |
| CVE-2024-0842 | Backuply - Backup, Restore, Migrate and Clone WordPress plugin denial of service | 7.5v3.1 | 1.0% | 2024-02-09 | Fix |
| CVE-2024-0657 | Internal Link Juicer WordPress plugin authenticated (Admin+) stored cross-site scripting | 4.8v3.1 | 0.3% | 2024-02-09 | Fix |
| CVE-2024-0229 | X.Org X server An out-of-bounds access | 7.8NVD v3.1 | 1.2% | 2024-02-09 | Fix |
| CVE-2024-25191 | Zihanggao Php-jwt observable discrepancy | 9.8v3.1 | 0.9% | 2024-02-08 | |
| CVE-2024-25190 | Glitchedpolygons L8W8JWT observable discrepancy | 9.8v3.1 | 0.9% | 2024-02-08 | |
| CVE-2024-25189 | libjwt observable discrepancy | 9.8v3.1 | 1.0% | 2024-02-08 | Fix |
| CVE-2024-25148 | Liferay Portal information disclosure | 5.4CNA v3.1 | 0.5% | 2024-02-08 | Fix |
| CVE-2024-25146 | Liferay Portal allows attackers to discover the existence of sites | 5.3CNA v3.1 | 0.6% | 2024-02-08 | Fix |
| CVE-2024-25144 | Liferay Portal denial of service | 4.1CNA v3.1 | 0.6% | 2024-02-08 | Fix |
| CVE-2024-25107 | Cross-site scripting in WikiDiscover | 4.9CNA v3.1 | 0.4% | 2024-02-08 | Fix |
| CVE-2024-25106 | OpenObserve unauthorized access vulnerability in Users API | 9.1CNA v3.1 | 0.5% | 2024-02-08 | Fix |
| CVE-2024-24886 | Product Labels For Woocommerce WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.3% | 2024-02-08 | Fix |
| CVE-2024-24885 | Woocommerce Vietnam Checkout WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.3% | 2024-02-08 | Fix |
| CVE-2024-24881 | WP SMS WordPress plugin cross-site scripting (XSS) | 6.1NVD v3.1 | 0.4% | 2024-02-08 | Fix |
| CVE-2024-24880 | Apollo13 Framework Extensions WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.3% | 2024-02-08 | Fix |
| CVE-2024-24879 | Link Library WordPress plugin cross-site scripting (XSS) | 6.1NVD v3.1 | 0.4% | 2024-02-08 | Fix |
| CVE-2024-24878 | Portugal CTT Tracking for WooCommerce WordPress plugin reflected cross-site scripting (XSS) | 6.1NVD v3.1 | 0.3% | 2024-02-08 | Fix |
| CVE-2024-24877 | Wonder Slider Lite WordPress plugin cross-site scripting (XSS) | 6.1NVD v3.1 | 0.3% | 2024-02-08 | Fix |
| CVE-2024-24871 | Blocksy WordPress theme cross-site scripting (XSS) | 5.4v3.1 | 0.3% | 2024-02-08 | Fix |
| CVE-2024-24836 | GDPR Data Request Form WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.3% | 2024-02-08 | Fix |
| CVE-2024-24834 | BEAR WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.3% | 2024-02-08 | Fix |
| CVE-2024-24830 | OpenObserve privilege escalation vulnerability in Users API | 10.0CNA v3.1 | 0.7% | 2024-02-08 | Fix |
| CVE-2024-24496 | Remyandrade Daily Habit Tracker improper authentication | 9.8v3.1 | 19.5% | 2024-02-08 | Exploit code |
| CVE-2024-24495 | Remyandrade Daily Habit Tracker delete-tracker.php SQL injection | 9.8v3.1 | 1.3% | 2024-02-08 | Exploit code |
| CVE-2024-24494 | Remyandrade Daily Habit Tracker cross-site scripting | 6.1v3.1 | 25.9% | 2024-02-08 | Exploit code |
| CVE-2024-24393 | Oaooa Pichome unrestricted file upload | 9.8v3.1 | 1.2% | 2024-02-08 | |
| CVE-2024-24350 | Softwarepublico E-sic Livre file upload | 8.8v3.1 | 1.2% | 2024-02-08 | |
| CVE-2024-24321 | D-Link DIR-816 command injection | 9.8v3.1 | 1.9% | 2024-02-08 | |
| CVE-2024-24216 | EasyCorp ZenTao command injection | 9.8v3.1 | 1.3% | 2024-02-08 | |
| CVE-2024-24215 | Cellinx Nvt Web Server information disclosure | 5.3v3.1 | 0.5% | 2024-02-08 | |
| CVE-2024-24213 | supabase Postgres SQL injection | 9.8v3.1 | 1.1% | 2024-02-08 | Fix |
| CVE-2024-24202 | EasyCorp ZenTao Biz /upgrade/control.php arbitrary file upload | 9.8v3.1 | 1.0% | 2024-02-08 | |
| CVE-2024-24115 | Cotonti Siena Edit page function stored cross-site scripting | 5.4v3.1 | 0.4% | 2024-02-08 | |
| CVE-2024-24113 | XXL-JOB vulnerable to server-side request forgery | 8.8v3.1 | 0.6% | 2024-02-08 | |
| CVE-2024-24091 | Yealink Meeting Server OS command injection | 9.8v3.1 | 1.1% | 2024-02-08 | Fix |
| CVE-2024-24034 | Setorinformatica S.i.l open redirect | 6.1v3.1 | 0.6% | 2024-02-08 | Exploit code |
| CVE-2024-24026 | xxyopen Novel-Plus An arbitrary file upload | 9.8v3.1 | 0.7% | 2024-02-08 | |
| CVE-2024-24025 | xxyopen Novel-Plus An arbitrary file upload | 9.8v3.1 | 0.7% | 2024-02-08 | |
| CVE-2024-24024 | xxyopen Novel-Plus An arbitrary file read | 9.8v3.1 | 0.7% | 2024-02-08 | |
| CVE-2024-24023 | xxyopen Novel-Plus A SQL injection | 9.8v3.1 | 0.6% | 2024-02-08 | |
| CVE-2024-24021 | xxyopen Novel-Plus A SQL injection | 9.8v3.1 | 0.6% | 2024-02-08 | |
| CVE-2024-24018 | xxyopen Novel-Plus A SQL injection | 9.8v3.1 | 0.6% | 2024-02-08 | |
| CVE-2024-24017 | xxyopen Novel-Plus A SQL injection | 9.8v3.1 | 0.6% | 2024-02-08 | |
| CVE-2024-24014 | xxyopen Novel-Plus A SQL injection | 9.8v3.1 | 0.6% | 2024-02-08 | |
| CVE-2024-24003 | jishenghua jshERP SQL injection | 9.8v3.1 | 0.8% | 2024-02-08 | |
| CVE-2024-23764 | WithSecure Elements Endpoint Protection improper privilege management | 6.7v3.1 | 0.2% | 2024-02-08 | Fix |
| CVE-2024-23756 | The HTTP PUT and DELETE methods are enabled in the Plone official Docker version 5.2.13 (5221), allowing unauthenticated attackers to execute dangerous actions such as uploading files to the server or deleting them. | 7.5v3.1 | 0.6% | 2024-02-08 | |
| CVE-2024-23660 | Binance Trust Wallet weak random number generator | 7.5v3.1 | 0.6% | 2024-02-08 | |
| CVE-2024-23452 | Apache bRPC: HTTP request smuggling | 7.5v3.1 | 1.6% | 2024-02-08 | Fix |
| CVE-2024-22836 | Akaunting An OS command injection | 9.8v3.1 | 30.0% | 2024-02-08 | Exploit codeFix |
| CVE-2024-22795 | Forescout SecureConnector insecure permissions | 7.0v3.1 | 0.3% | 2024-02-08 | |
| CVE-2024-22464 | Dell AppSync sensitive information in log files | 6.2CNA v3.1 | 0.5% | 2024-02-08 | Fix |
| CVE-2024-22394 | SonicWall SonicOS improper authentication | 9.8v3.1 | 0.7% | 2024-02-08 | Fix |
| CVE-2024-1329 | Nomad vulnerable to arbitrary Write through symlink attack | 7.7CNA v3.1 | 0.6% | 2024-02-08 | Fix |
| CVE-2024-1312 | Kernel: Race condition leads to use-after-free during vma lock in lock_vma_under_rcu | 4.7NVD v3.1 | 0.2% | 2024-02-08 | Fix |
| CVE-2024-1207 | Booking Calendar WordPress plugin unauthenticated SQL injection | 9.8v3.1 | 3.2% | 2024-02-08 | Exploit codeFix |
| CVE-2024-1150 | Snow Software Inventory Agent improper validation of update packages | 7.8CNA v3.1 | 0.1% | 2024-02-08 | Fix |
| CVE-2024-1149 | Snow Software Inventory Agent improper validation of update packages | 7.8CNA v3.1 | 0.1% | 2024-02-08 | Fix |
| CVE-2024-0985 | PostgreSQL non-owner REFRESH MATERIALIZED VIEW CONCURRENTLY executes arbitrary SQL | 8.0CNA v3.1 | 1.8% | 2024-02-08 | Fix |
| CVE-2024-0965 | Simple Page Access Restriction WordPress plugin information disclosure | 5.3v3.1 | 0.5% | 2024-02-08 | Fix |
| CVE-2024-0511 | Royal Elementor Addons and Templates WordPress plugin cross-site request forgery | 4.3v3.1 | 0.2% | 2024-02-08 | Fix |
| CVE-2024-0242 | Unauthorized access to settings in Qolsys IQ Panel 4 and IQ4 Hub | 7.3CNA v3.1 | 0.6% | 2024-02-08 | Fix |
| CVE-2024-25201 | Espruino out-of-bounds read | 7.5v3.1 | 0.7% | 2024-02-07 | |
| CVE-2024-25200 | Espruino out-of-bounds write | 7.5v3.1 | 0.7% | 2024-02-07 | |
| CVE-2024-25145 | Liferay Portal stored cross-site scripting (XSS) | 9.6CNA v3.1 | 0.6% | 2024-02-07 | Fix |
| CVE-2024-25143 | Liferay Portal denial of service (memory consumption) | 6.5CNA v3.1 | 0.7% | 2024-02-07 | Fix |
| CVE-2024-24824 | graylog2-server vulnerable to instantiation of arbitrary classes triggered by API request | 8.8CNA v3.1 | 34.7% | 2024-02-07 | Exploit codeFix |
| CVE-2024-24823 | graylog2-server session fixation vulnerability through cookie injection | 5.7CNA v3.1 | 0.4% | 2024-02-07 | Fix |
| CVE-2024-24822 | Pimcore Admin Classic Bundle permissions are not getting checked when working with tags | 6.5CNA v3.1 | 0.5% | 2024-02-07 | Fix |
| CVE-2024-24816 | ckeditor4 cross-site scripting (XSS) vulnerability in samples with enabled the preview feature | 6.1CNA v3.1 | 1.7% | 2024-02-07 | Fix |
| CVE-2024-24815 | CKEditor4 cross-site scripting (XSS) vulnerability caused by incorrect CDATA detection | 6.1CNA v3.1 | 0.7% | 2024-02-07 | Fix |
| CVE-2024-24812 | Frappe Authenticated reflected cross-site scripting (XSS) in portal pages | 5.4CNA v3.1 | 0.4% | 2024-02-07 | Fix |
| CVE-2024-24811 | Products.SQLAlchemyDA vulnerable to unauthenticated arbitrary SQL query execution | 9.8CNA v3.1 | 0.9% | 2024-02-07 | Fix |
| CVE-2024-24810 | WiX is vulnerable to DLL redirection attacks that allow the attacker to escalate privileges | 8.3CNA v3.1 | 0.2% | 2024-02-07 | Fix |
| CVE-2024-24806 | Improper Domain Lookup that potentially leads to SSRF attacks in libuv | 7.3CNA v3.1 | 2.0% | 2024-02-07 | Fix |
| CVE-2024-24771 | open-formulieren open-forms open forms potential multi-factor authentication bypass | 7.7CNA v3.1 | 0.6% | 2024-02-07 | Fix |
| CVE-2024-24706 | WP-CFM WordPress plugin cross-site request forgery (CSRF) | 4.3v3.1 | 0.2% | 2024-02-07 | Fix |
| CVE-2024-24563 | Vyper array negative index vulnerability | 9.8CNA v3.1 | 1.5% | 2024-02-07 | Fix |
| CVE-2024-24488 | Tendacn CP3 cleartext storage of sensitive information | 5.5v3.1 | 0.2% | 2024-02-07 | Exploit code |
| CVE-2024-24311 | Lineagrafica Multilingual And Multistore Sitemap Pro path traversal | 7.5v3.1 | 0.7% | 2024-02-07 | Fix |
| CVE-2024-24304 | Sinch Mailjet information disclosure | 7.5v3.1 | 0.5% | 2024-02-07 | Fix |
| CVE-2024-24303 | Hipresta Gift Wrapping Pro SQL injection | 9.8v3.1 | 0.7% | 2024-02-07 | |
| CVE-2024-24189 | Jsish use-after-free | 9.8v3.1 | 0.7% | 2024-02-07 | |
| CVE-2024-24188 | Jsish out-of-bounds write | 9.8v3.1 | 0.8% | 2024-02-07 | |
| CVE-2024-24186 | Jsish out-of-bounds write | 9.8v3.1 | 0.9% | 2024-02-07 | |
| CVE-2024-24133 | Atmail SQL injection | 9.8v3.1 | 0.6% | 2024-02-07 | |
| CVE-2024-24131 | Superwebmailer cross-site scripting | 6.1v3.1 | 0.9% | 2024-02-07 | Nuclei |
| CVE-2024-24130 | MAIL2WORLD Webmail cross-site scripting | 6.1v3.1 | 0.4% | 2024-02-07 | |
| CVE-2024-24019 | xxyopen Novel-Plus A SQL injection | 9.8v3.1 | 0.6% | 2024-02-07 | |
| CVE-2024-24004 | jishenghua jshERP SQL injection | 9.8v3.1 | 0.7% | 2024-02-07 | |
| CVE-2024-24002 | jishenghua jshERP SQL injection | 9.8v3.1 | 0.8% | 2024-02-07 | |
| CVE-2024-24001 | jishenghua jshERP SQL injection | 9.8v3.1 | 0.7% | 2024-02-07 | |
| CVE-2024-23806 | HID Global Reader Configuration Cards improper authorization | 5.3v3.1 | 0.3% | 2024-02-07 | |
| CVE-2024-23769 | Samsung Magician named pipe vulnerability | 5.5NVD v3.1 | 0.2% | 2024-02-07 | Fix |
| CVE-2024-23448 | APM Server insertion of sensitive information into log file | 5.7CNA v3.1 | 0.7% | 2024-02-07 | Fix |
| CVE-2024-23447 | Elastic Network Drive Connector improper access control | 5.3CNA v3.1 | 0.4% | 2024-02-07 | Fix |
| CVE-2024-23446 | Kibana broken access control issue | 6.5CNA v3.1 | 0.5% | 2024-02-07 | Fix |
| CVE-2024-22022 | Veeam Recovery Orchestrator information disclosure | 8.8v3.1 | 0.7% | 2024-02-07 | Fix |
| CVE-2024-22021 | Veeam Recovery Orchestrator improper authorization | 4.3v3.1 | 0.4% | 2024-02-07 | Fix |
| CVE-2024-22012 | Google Android out-of-bounds write | 7.8v3.1 | 0.1% | 2024-02-07 | Fix |
| CVE-2024-20290 | Cisco Secure Endpoint buffer over-read | 7.5CNA v3.1 | 33.3% | 2024-02-07 | Fix |
| CVE-2024-20255 | Cisco TelePresence Video Communication Server (VCS) Expressway cross-site request forgery | 8.2CNA v3.1 | 0.6% | 2024-02-07 | Fix |
| CVE-2024-20254 | Cisco TelePresence Video Communication Server (VCS) Expressway cross-site request forgery | 9.6CNA v3.1 | 0.8% | 2024-02-07 | Fix |
| CVE-2024-20252 | Cisco TelePresence Video Communication Server (VCS) Expressway cross-site request forgery | 9.6CNA v3.1 | 0.8% | 2024-02-07 | Fix |
| CVE-2024-1284 | Google Chrome Mojo use-after-free | 9.8v3.1 | 1.1% | 2024-02-07 | Fix |
| CVE-2024-1283 | Google Chrome Skia heap-based buffer overflow | 9.8v3.1 | 21.9% | 2024-02-07 | Fix |
| CVE-2024-1269 | SourceCodester Product Management System supplier.php cross-site scripting | 6.1v3.1 | 0.7% | 2024-02-07 | Exploit code |
| CVE-2024-1268 | CodeAstro Restaurant POS System update_product.php unrestricted upload | 9.8v3.1 | 0.6% | 2024-02-07 | |
| CVE-2024-1267 | CodeAstro Restaurant POS System create_account.php cross-site scripting | 6.1v3.1 | 0.4% | 2024-02-07 | |
| CVE-2024-1266 | CodeAstro University Management System Student Registration form st_reg.php cross-site scripting | 6.1v3.1 | 0.5% | 2024-02-07 | |
| CVE-2024-1265 | CodeAstro University Management System Attendance Management att_add.php cross-site scripting | 4.8v3.1 | 0.5% | 2024-02-07 | |
| CVE-2024-1264 | Juanpao JPShop UploadsController.php actionUpdate unrestricted upload | 9.8v3.1 | 0.6% | 2024-02-07 | |
| CVE-2024-1118 | Podlove Subscribe button WordPress plugin authenticated (Contributor+) SQL injection | 8.8v3.1 | 0.7% | 2024-02-07 | Fix |
| CVE-2024-1110 | Podlove Podcast Publisher WordPress plugin missing authorization to settings import | 5.3v3.1 | 0.5% | 2024-02-07 | Fix |
| CVE-2024-1109 | Podlove Podcast Publisher WordPress plugin missing authorization to unauthenticated data export | 5.3v3.1 | 0.6% | 2024-02-07 | Fix |
| CVE-2024-1079 | Quiz Maker WordPress plugin missing authorization to unauthenticated Quiz data Retrieval | 5.3v3.1 | 0.5% | 2024-02-07 | Fix |
| CVE-2024-1078 | Quiz Maker WordPress plugin unauthorized access | 4.3v3.1 | 0.4% | 2024-02-07 | Fix |
| CVE-2024-1066 | Allocation of resources without limits or throttling in GitLab | 6.5CNA v3.1 | 0.6% | 2024-02-07 | Fix |
| CVE-2024-1055 | PowerPack Addons for Elementor WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.4% | 2024-02-07 | Fix |
| CVE-2024-1037 | All-In-One Security (AIOS) Security and Firewall WordPress plugin reflected cross-site scripting | 6.1v3.1 | 0.6% | 2024-02-07 | Fix |
| CVE-2024-0977 | Timeline Widget For Elementor WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.3% | 2024-02-07 | Fix |
| CVE-2024-0971 | Tenable Nessus SQL injection | 6.5CNA v3.1 | 0.8% | 2024-02-07 | Fix |
| CVE-2024-0955 | Tenable Nessus stored XSS | 4.8CNA v3.1 | 0.6% | 2024-02-07 | Fix |
| CVE-2024-0849 | Leanote Local File Read | 5.5NVD v3.1 | 0.2% | 2024-02-07 | |
| CVE-2024-0628 | WP RSS Aggregator WordPress plugin server-side request forgery | 3.8v3.1 | 0.4% | 2024-02-07 | Fix |
| CVE-2024-0256 | Starbox WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.3% | 2024-02-07 | Fix |
| CVE-2024-25140 | rustdesk improper certificate validation | 9.8v3.1 | 0.5% | 2024-02-06 | |
| CVE-2024-24943 | JetBrains Toolbox App denial of service | 5.3CNA v3.1 | 0.4% | 2024-02-06 | Fix |
| CVE-2024-24942 | JetBrains TeamCity relative path traversal | 5.3CNA v3.1 | 32.0% | 2024-02-06 | Emerging ThreatsFix |
| CVE-2024-24941 | JetBrains IntelliJ IDEA improper input validation | 6.1CNA v3.1 | 0.3% | 2024-02-06 | Fix |
| CVE-2024-24940 | JetBrains IntelliJ IDEA relative path traversal | 2.8CNA v3.1 | 0.3% | 2024-02-06 | Fix |
| CVE-2024-24939 | JetBrains Rider sensitive information in log files | 3.3CNA v3.1 | 0.3% | 2024-02-06 | Fix |
| CVE-2024-24938 | JetBrains TeamCity relative path traversal | 5.3CNA v3.1 | 0.7% | 2024-02-06 | Fix |
| CVE-2024-24937 | JetBrains TeamCity cross-site scripting | 4.6CNA v3.1 | 0.4% | 2024-02-06 | Fix |
| CVE-2024-24936 | JetBrains TeamCity improper authorization | 4.3CNA v3.1 | 0.3% | 2024-02-06 | Fix |
| CVE-2024-24808 | pyLoad open redirect vulnerability due to improper validation of the is_safe_url function | 4.7CNA v3.1 | 0.5% | 2024-02-06 | Fix |
| CVE-2024-24680 | Django denial of service attack in the intcomma template filter | 7.5v3.1 | 1.6% | 2024-02-06 | Fix |
| CVE-2024-24594 | Allegro.AI ClearML cross-site scripting | 5.4NVD v3.1 | 0.6% | 2024-02-06 | |
| CVE-2024-24593 | Allegro.AI ClearML all versions up to cross-site request forgery | 8.8NVD v3.1 | 0.4% | 2024-02-06 | Fix |
| CVE-2024-24592 | Allegro.AI ClearML forced browsing | 9.8NVD v3.1 | 1.0% | 2024-02-06 | |
| CVE-2024-24591 | Allegro AI ClearML path traversal | 8.8NVD v3.1 | 0.8% | 2024-02-06 | Fix |
| CVE-2024-24590 | Allegro AI ClearML vulnerable to deserialization of untrusted data | 8.8NVD v3.1 | 2.5% | 2024-02-06 | Exploit codeFix |
| CVE-2024-24577 | libgit2 is vulnerable to arbitrary code execution due to heap corruption in `git_index_add` | 8.6CNA v3.1 | 1.5% | 2024-02-06 | Fix |
| CVE-2024-24575 | libgit2 is vulnerable to a denial of service attack in `git_revparse_single` | 7.5CNA v3.1 | 1.4% | 2024-02-06 | Fix |
| CVE-2024-24398 | Stimulsoft Dashboard.JS directory traversal | 9.8v3.1 | 2.0% | 2024-02-06 | Exploit codeFix |
| CVE-2024-24291 | YzmCMS open redirect | 6.1v3.1 | 0.4% | 2024-02-06 | |
| CVE-2024-24255 | Dronecode PX4 Drone Autopilot race condition | 4.2v3.1 | 0.3% | 2024-02-06 | |
| CVE-2024-24254 | Dronecode PX4 Drone Autopilot race condition | 4.2v3.1 | 0.4% | 2024-02-06 | |
| CVE-2024-24112 | Exrick xmall SQL injection | 9.8v3.1 | 3.3% | 2024-02-06 | Nuclei |
| CVE-2024-24015 | xxyopen Novel-Plus A SQL injection | 9.8v3.1 | 0.6% | 2024-02-06 | |
| CVE-2024-24013 | xxyopen Novel-Plus A SQL injection | 9.8v3.1 | 0.6% | 2024-02-06 | |
| CVE-2024-24000 | Huaxiaerp jshERP unrestricted file upload | 9.8v3.1 | 0.6% | 2024-02-06 | |
| CVE-2024-23917 | JetBrains TeamCity authentication bypass | 9.8CNA v3.1 | 54.0% | 2024-02-06 | NucleiFix |
| CVE-2024-23673 | Apache Sling Servlets Resolver: Malicious code execution via path traversal | 8.5CNA v3.1 | 1.3% | 2024-02-06 | Fix |
| CVE-2024-23344 | Tuleap's content of artifacts might be readable by unauthorized users | 5.3CNA v3.1 | 0.5% | 2024-02-06 | Fix |
| CVE-2024-23304 | Cybozu KUNAI untrusted search path | 7.5v3.1 | 0.8% | 2024-02-06 | Fix |
| CVE-2024-22853 | D-Link Go-rt-ac750 hard-coded credentials | 9.8v3.1 | 4.8% | 2024-02-06 | Exploit code |
| CVE-2024-22852 | D-Link Go-rt-ac750 out-of-bounds write | 9.8v3.1 | 1.1% | 2024-02-06 | |
| CVE-2024-22773 | Intelbras Action Rf 1200 insecure storage of sensitive information | 8.1v3.1 | 1.0% | 2024-02-06 | |
| CVE-2024-22520 | Dronetag Drone Scanner authentication bypass by spoofing | 8.2v3.1 | 0.6% | 2024-02-06 | |
| CVE-2024-22519 | Sorenfriis Opendroneid Osm authentication bypass by spoofing | 8.2v3.1 | 0.6% | 2024-02-06 | |
| CVE-2024-22515 | Ispyconnect Agent Dvr arbitrary file upload | 8.8v3.1 | 1.2% | 2024-02-06 | Exploit codeKCV |
| CVE-2024-22514 | Ispyconnect Agent Dvr path traversal | 8.8v3.1 | 1.4% | 2024-02-06 | Exploit codeKCV |
| CVE-2024-22433 | Dell Data Protection Search sensitive information in an accessible file | 8.8CNA v3.1 | 0.6% | 2024-02-06 | Fix |
| CVE-2024-22388 | Insecure default initialization of Resource in HID Global | 7.8v3.1 | 0.2% | 2024-02-06 | Fix |
| CVE-2024-22365 | Linux-PAM denial of service | 5.5NVD v3.1 | 0.5% | 2024-02-06 | Fix |
| CVE-2024-22331 | IBM UrbanCode Deploy information disclosure | 6.2CNA v3.1 | 0.2% | 2024-02-06 | Fix |
| CVE-2024-22241 | VMware Aria Operations for Networks cross-site scripting | 4.3CNA v3.1 | 37.8% | 2024-02-06 | Fix |
| CVE-2024-22240 | VMware Aria Operations for Networks files accessible to external parties | 4.9CNA v3.1 | 0.6% | 2024-02-06 | Fix |
| CVE-2024-22239 | VMware Aria Operations for Networks improper privilege management | 5.3CNA v3.1 | 0.2% | 2024-02-06 | Fix |
| CVE-2024-22238 | VMware Aria Operations for Networks cross-site scripting | 6.4CNA v3.1 | 0.5% | 2024-02-06 | Fix |
| CVE-2024-22237 | VMware Aria Operations for Networks improper privilege management | 7.8CNA v3.1 | 0.2% | 2024-02-06 | Fix |
| CVE-2024-20828 | Samsung Mobile Samsung Internet improper authorization | 2.4CNA v3.1 | 0.2% | 2024-02-06 | Fix |
| CVE-2024-20827 | Samsung Mobile Gallery improper access control | 4.6CNA v3.1 | 0.2% | 2024-02-06 | Fix |
| CVE-2024-20826 | Samsung Mobile UPHelper information disclosure | 5.5CNA v3.1 | 0.1% | 2024-02-06 | Fix |
| CVE-2024-20825 | Samsung Mobile Galaxy Store information disclosure | 5.5CNA v3.1 | 0.2% | 2024-02-06 | Fix |
| CVE-2024-20824 | Samsung Mobile Galaxy Store information disclosure | 5.5CNA v3.1 | 0.2% | 2024-02-06 | Fix |
| CVE-2024-20823 | Samsung Mobile Galaxy Store information disclosure | 5.5CNA v3.1 | 0.2% | 2024-02-06 | Fix |
| CVE-2024-20822 | Samsung Mobile Galaxy Store information disclosure | 5.5CNA v3.1 | 0.2% | 2024-02-06 | Fix |
| CVE-2024-20820 | Samsung Mobile Devices bootloader improper input validation | 4.4CNA v3.1 | 0.2% | 2024-02-06 | Fix |
| CVE-2024-20819 | Samsung Mobile Devices svc1td_vld_plh_ap of libsthmbc.so out-of-bounds write | 6.6CNA v3.1 | 0.2% | 2024-02-06 | Fix |
| CVE-2024-20818 | Samsung Mobile Devices svc1td_vld_elh of libsthmbc.so out-of-bounds write | 6.6CNA v3.1 | 0.2% | 2024-02-06 | Fix |
| CVE-2024-20817 | Samsung Mobile Devices svc1td_vld_slh of libsthmbc.so out-of-bounds write | 6.6CNA v3.1 | 0.2% | 2024-02-06 | Fix |
| CVE-2024-20816 | Samsung Mobile Devices onCharacteristicWriteRequest in Auto Hotspot improper authentication | 8.0CNA v3.1 | 0.4% | 2024-02-06 | Fix |
| CVE-2024-20815 | Samsung Mobile Devices onCharacteristicReadRequest in Auto Hotspot improper authentication | 8.0CNA v3.1 | 0.4% | 2024-02-06 | Fix |
| CVE-2024-20814 | Samsung Mobile Devices padmd_vld_ac_prog_refine of libpadm.so out-of-bounds read | 4.0CNA v3.1 | 0.2% | 2024-02-06 | Fix |
| CVE-2024-20813 | Samsung Mobile Devices padmd_vld_qtbl of libpadm.so out-of-bounds write | 8.4CNA v3.1 | 0.2% | 2024-02-06 | Fix |
| CVE-2024-20812 | Samsung Mobile Devices padmd_vld_htbl of libpadm.so out-of-bounds write | 8.4CNA v3.1 | 0.2% | 2024-02-06 | Fix |
| CVE-2024-20811 | Samsung Mobile Devices GameOptimizer vulnerability | 5.1CNA v3.1 | 0.1% | 2024-02-06 | Fix |
| CVE-2024-20810 | Samsung Mobile Devices clickjacking | 3.3CNA v3.1 | 0.2% | 2024-02-06 | Fix |
| CVE-2024-1263 | Juanpao JPShop API PosterController.php actionUpdate unrestricted upload | 9.8v3.1 | 0.6% | 2024-02-06 | |
| CVE-2024-1262 | Juanpao JPShop API MaterialController.php actionUpdate unrestricted upload | 9.8v3.1 | 0.6% | 2024-02-06 | |
| CVE-2024-1261 | Juanpao JPShop API ComboController.php actionIndex unrestricted upload | 9.8v3.1 | 0.6% | 2024-02-06 | |
| CVE-2024-1260 | Juanpao JPShop API ComboController.php actionIndex unrestricted upload | 9.8v3.1 | 0.6% | 2024-02-06 | |
| CVE-2024-1259 | Juanpao JPShop API AppController.php unrestricted upload | 9.8v3.1 | 0.7% | 2024-02-06 | |
| CVE-2024-1258 | Juanpao JPShop API params.php hard-coded key | 5.9v3.1 | 0.6% | 2024-02-06 | |
| CVE-2024-1257 | Jspxcms find_text.do cross-site scripting | 6.1v3.1 | 0.5% | 2024-02-06 | |
| CVE-2024-1256 | Jspxcms filter_text.do cross-site scripting | 4.3v3.1 | 0.6% | 2024-02-06 | |
| CVE-2024-1255 | sepidz SepidzDigitalMenu Waiters information disclosure | 7.5v3.1 | 0.6% | 2024-02-06 | |
| CVE-2024-1254 | Byzoro Smart S20 Management Platform sysmanageajax.php SQL injection | 7.2v3.1 | 4.6% | 2024-02-06 | |
| CVE-2024-1253 | Byzoro Smart S40 Management Platform Import web.php unrestricted upload | 7.2v3.1 | 1.7% | 2024-02-06 | |
| CVE-2024-1252 | Tongda OA 2017 delete.php SQL injection | 9.8v3.1 | 0.7% | 2024-02-06 | |
| CVE-2024-1251 | Tongda OA 2017 delete.php SQL injection | 9.8v3.1 | 0.6% | 2024-02-06 | |
| CVE-2024-1048 | GRUB2: Grub2-set-bootflag can be abused by local (pseudo-)users | 3.3NVD v3.1 | 0.3% | 2024-02-06 | Fix |
| CVE-2024-0911 | Indent: Heap-based buffer overflow in set_buf_break | 5.5NVD v3.1 | 0.3% | 2024-02-06 | Fix |
| CVE-2024-0690 | Red Hat Ansible Automation Platform ansible-core information disclosure flaw | 5.0CNA v3.1 | 0.3% | 2024-02-06 | Fix |
| CVE-2024-0684 | Coreutils: Heap overflow in split --line-bytes with very long lines | 5.5NVD v3.1 | 0.5% | 2024-02-06 | Fix |
| CVE-2024-0244 | Canon Satera MF750C Series buffer overflow | 9.8CNA v3.1 | 1.4% | 2024-02-06 | Fix |
| CVE-2024-24870 | Advanced iFrame WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.3% | 2024-02-05 | Fix |
| CVE-2024-24866 | Biteship WordPress plugin cross-site scripting (XSS) | 6.1NVD v3.1 | 0.4% | 2024-02-05 | Fix |
| CVE-2024-24865 | Scroll Triggered Box WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.3% | 2024-02-05 | |
| CVE-2024-24864 | Race condition vulnerability in Linux kernel media/dvb-core in dvbdmx_write | 4.7NVD v3.1 | 0.2% | 2024-02-05 | Fix |
| CVE-2024-24861 | Race condition vulnerability in Linux kernel media/xc4000 xc4000_get_frequency | 6.3NVD v3.1 | 0.2% | 2024-02-05 | Fix |
| CVE-2024-24860 | Linux kernel A race condition | 5.3NVD v3.1 | 0.8% | 2024-02-05 | Fix |
| CVE-2024-24859 | Linux kernel A race condition | 4.8NVD v3.1 | 0.7% | 2024-02-05 | Fix |
| CVE-2024-24858 | Linux kernel A race condition | 5.3NVD v3.1 | 0.3% | 2024-02-05 | Fix |
| CVE-2024-24857 | Linux kernel A race condition | 6.8NVD v3.1 | 0.3% | 2024-02-05 | Fix |
| CVE-2024-24855 | Race condition vulnerability in Linux kernel scsi device driver lpfc_unregister_fcf_rescan | 4.7NVD v3.1 | 0.2% | 2024-02-05 | Fix |
| CVE-2024-24848 | PT Sign Ups WordPress plugin cross-site scripting (XSS) | 6.1NVD v3.1 | 0.3% | 2024-02-05 | |
| CVE-2024-24847 | CalculatorPro Calculators WordPress plugin cross-site scripting (XSS) | 6.1NVD v3.1 | 0.3% | 2024-02-05 | |
| CVE-2024-24846 | Mighty Addons for Elementor WordPress plugin cross-site scripting (XSS) | 6.1NVD v3.1 | 0.3% | 2024-02-05 | |
| CVE-2024-24841 | WordPress Add Customer for WooCommerce plugin stored cross-site scripting | 4.8v3.1 | 0.3% | 2024-02-05 | Fix |
| CVE-2024-24839 | Structured Content WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.3% | 2024-02-05 | Fix |
| CVE-2024-24838 | Five Star Restaurant Reviews WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.3% | 2024-02-05 | Fix |
| CVE-2024-24807 | Sulu is vulnerable to HTML injection via Autocomplete Suggestion | 2.7CNA v3.1 | 0.5% | 2024-02-05 | Fix |
| CVE-2024-24768 | 1Panel set-cookie is missing the Secure keyword | 6.5CNA v3.1 | 0.3% | 2024-02-05 | Fix |
| CVE-2024-24762 | python-multipart vulnerable to content-type header regular expression denial of service | 7.5CNA v3.1 | 1.5% | 2024-02-05 | Fix |
| CVE-2024-24595 | Allegro AI ClearML stores credentials in plaintext in MongoDB Instance | 7.1NVD v3.1 | 0.3% | 2024-02-05 | |
| CVE-2024-24574 | phpMyFAQ vulnerable to stored XSS on attachments filename | 6.5CNA v3.1 | 0.9% | 2024-02-05 | Fix |
| CVE-2024-24559 | Vyper SHA3 code generation bug | 3.7CNA v3.1 | 0.3% | 2024-02-05 | Fix |
| CVE-2024-24543 | Tenda AC9 function setSchedWifi buffer overflow | 9.8v3.1 | 1.0% | 2024-02-05 | |
| CVE-2024-24469 | Flusity cross-site request forgery | 8.8v3.1 | 0.5% | 2024-02-05 | |
| CVE-2024-24468 | Flusity cross-site request forgery | 8.8v3.1 | 0.5% | 2024-02-05 | |
| CVE-2024-24397 | Stimulsoft Dashboard.JS cross-site scripting | 5.4v3.1 | 0.8% | 2024-02-05 | Exploit codeFix |
| CVE-2024-24396 | Stimulsoft Dashboard.JS cross-site scripting | 6.1v3.1 | 0.8% | 2024-02-05 | Exploit codeFix |
| CVE-2024-24267 | gpac memory leak | 7.5v3.1 | 1.6% | 2024-02-05 | |
| CVE-2024-24266 | gpac use-after-free | 7.5v3.1 | 1.3% | 2024-02-05 | |
| CVE-2024-24265 | gpac memory leak | 7.5v3.1 | 1.3% | 2024-02-05 | |
| CVE-2024-24263 | Chendotjs Lotos Webserver use-after-free | 7.5v3.1 | 0.7% | 2024-02-05 | |
| CVE-2024-24262 | Ireader Media Server use-after-free | 7.5v3.1 | 0.7% | 2024-02-05 | |
| CVE-2024-24260 | Ireader Media Server use-after-free | 7.5v3.1 | 0.7% | 2024-02-05 | |
| CVE-2024-24259 | Artifex MuPDF memory leak | 7.5v3.1 | 1.1% | 2024-02-05 | Fix |
| CVE-2024-24258 | Artifex MuPDF memory leak | 7.5v3.1 | 1.1% | 2024-02-05 | Fix |
| CVE-2024-23196 | Race condition vulnerability in Linux kernel sound/hda snd_hdac_regmap_sync | 4.7NVD v3.1 | 0.2% | 2024-02-05 | Fix |
| CVE-2024-23109 | Fortinet FortiSIEM OS command injection | 9.7CNA v3.1 | 3.2% | 2024-02-05 | Fix |
| CVE-2024-23108 | Fortinet FortiSIEM OS command injection | 9.7CNA v3.1 | 80.3% | 2024-02-05 | Reported exploitedNucleiEmerging ThreatsExploit codeFix |
| CVE-2024-23054 | Plone Docker Official Image uncontrolled search path | 9.8v3.1 | 1.3% | 2024-02-05 | |
| CVE-2024-23049 | b3log Symphony command injection | 9.8v3.1 | 1.2% | 2024-02-05 | |
| CVE-2024-22667 | Vim out-of-bounds write | 7.8v3.1 | 0.6% | 2024-02-05 | Fix |
| CVE-2024-22567 | MingSoft MCMS file upload | 8.8v3.1 | 17.8% | 2024-02-05 | |
| CVE-2024-22386 | Race condition vulnerability in Linux kernel drm/exynos exynos_drm_crtc_atomic_disable | 4.7NVD v3.1 | 0.2% | 2024-02-05 | Fix |
| CVE-2024-22208 | phpMyFAQ sharing FAQ functionality can easily be abused for phishing purposes | 6.5CNA v3.1 | 0.7% | 2024-02-05 | Fix |
| CVE-2024-22202 | thorsten phpMyFAQ User Removal page allows spoofing of User Details | 5.7CNA v3.1 | 0.6% | 2024-02-05 | Fix |
| CVE-2024-20016 | MediaTek chipsets out-of-bounds write in ged | 4.4v3.1 | 0.1% | 2024-02-05 | Fix |
| CVE-2024-20015 | MediaTek chipsets missing authorization in telephony | 7.8v3.1 | 0.1% | 2024-02-05 | Fix |
| CVE-2024-20013 | MediaTek chipsets out-of-bounds write in keyInstall | 6.7v3.1 | 0.1% | 2024-02-05 | Fix |
| CVE-2024-20012 | MediaTek chipsets access of resource using incompatible type (type confusion) in keyInstall | 6.7v3.1 | 0.1% | 2024-02-05 | Fix |
| CVE-2024-20011 | MediaTek chipsets remote code execution in alac decoder | 9.8v3.1 | 0.4% | 2024-02-05 | Fix |
| CVE-2024-20010 | MediaTek chipsets access of resource using incompatible type (type confusion) in keyInstall | 6.7v3.1 | 0.1% | 2024-02-05 | Fix |
| CVE-2024-20009 | MediaTek chipsets improper check or handling of exceptional conditions in alac decoder | 8.8v3.1 | 0.4% | 2024-02-05 | Fix |
| CVE-2024-20007 | MediaTek chipsets out-of-bounds write in mp3 decoder | 7.5v3.1 | 0.3% | 2024-02-05 | Fix |
| CVE-2024-20006 | MediaTek chipsets out-of-bounds write in da | 6.7v3.1 | 0.2% | 2024-02-05 | Fix |
| CVE-2024-20004 | MediaTek chipsets improper input validation in Modem NL1 | 7.5v3.1 | 1.2% | 2024-02-05 | Fix |
| CVE-2024-20003 | MediaTek chipsets improper input validation in Modem NL1 | 7.5v3.1 | 1.1% | 2024-02-05 | Fix |
| CVE-2024-20002 | MediaTek chipsets out-of-bounds write in TVAPI | 6.7v3.1 | 0.1% | 2024-02-05 | Fix |
| CVE-2024-20001 | MediaTek chipsets out-of-bounds write in TVAPI | 6.7v3.1 | 0.1% | 2024-02-05 | Fix |
| CVE-2024-1225 | QiboSoft QiboCMS X1 Pay.php rmb_pay deserialization | 9.8v3.1 | 0.9% | 2024-02-05 | |
| CVE-2024-1210 | LearnDash LMS WordPress plugin sensitive information exposure via API | 5.3v3.1 | 2.0% | 2024-02-05 | NucleiFix |
| CVE-2024-1209 | LearnDash LMS WordPress plugin sensitive information exposure via assignments | 5.3NVD v3.1 | 2.4% | 2024-02-05 | NucleiFix |
| CVE-2024-1208 | LearnDash LMS WordPress plugin sensitive information exposure via API | 5.3v3.1 | 5.3% | 2024-02-05 | NucleiExploit codeFix |
| CVE-2024-1177 | WP Club Manager WordPress plugin unauthorized access | 5.3v3.1 | 0.5% | 2024-02-05 | Fix |
| CVE-2024-1121 | Advanced Forms for ACF WordPress plugin missing authorization unauthenticated form settings export | 5.3v3.1 | 0.6% | 2024-02-05 | Fix |
| CVE-2024-1092 | RSS Aggregator by Feedzy WordPress plugin unauthorized data modification | 4.3v3.1 | 0.5% | 2024-02-05 | Fix |
| CVE-2024-1075 | Minimal Coming Soon Coming Soon Page WordPress plugin unauthenticated Maintenance Mode bypass | 5.3v3.1 | 0.7% | 2024-02-05 | Fix |
| CVE-2024-1072 | Website Builder by SeedProd WordPress plugin unauthorized access | 7.5v3.1 | 0.7% | 2024-02-05 | Fix |
| CVE-2024-1052 | Boundary vulnerable to session hijacking through TLS Certificate tampering | 8.0CNA v3.1 | 0.3% | 2024-02-05 | Fix |
| CVE-2024-1046 | Paid Membership Plugin WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.4% | 2024-02-05 | Fix |
| CVE-2024-0969 | ARMember WordPress plugin improper access control to sensitive information exposure via REST API | 5.3v3.1 | 0.5% | 2024-02-05 | Fix |
| CVE-2024-0964 | Gradio path traversal | 9.4v3.1 | 1.0% | 2024-02-05 | Fix |
| CVE-2024-0961 | SiteOrigin Widgets Bundle WordPress plugin authenticated (Contributor+) stored cross-site scripting | 5.4v3.1 | 0.5% | 2024-02-05 | Fix |
| CVE-2024-0954 | Essential Addons for Elementor WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.4% | 2024-02-05 | Fix |
| CVE-2024-0953 | Mozilla Firefox open redirect | 6.1v3.1 | 0.3% | 2024-02-05 | Fix |
| CVE-2024-0869 | Instant Images WordPress plugin authenticated (Author+) arbitrary options update | 6.5NVD v3.1 | 0.8% | 2024-02-05 | Fix |
| CVE-2024-0859 | Affiliates Manager WordPress plugin cross-site request forgery | 4.3v3.1 | 0.3% | 2024-02-05 | Fix |
| CVE-2024-0835 | Royal Elementor Kit WordPress theme missing authorization to arbitrary Transient update | 4.3v3.1 | 0.5% | 2024-02-05 | Fix |
| CVE-2024-0834 | Elementor Addon Elements WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.5% | 2024-02-05 | Fix |
| CVE-2024-0823 | Exclusive Addons for Elementor WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.4% | 2024-02-05 | Fix |
| CVE-2024-0797 | realmag777 Active Products Tables for WooCommerce admin AJAX functions missing authorization | 4.3v3.1 | 0.4% | 2024-02-05 | Fix |
| CVE-2024-0796 | realmag777 Active Products Tables for WooCommerce AJAX actions cross-site request forgery | 4.3v3.1 | 0.2% | 2024-02-05 | Fix |
| CVE-2024-0791 | WOLF WordPress Posts Bulk Editor and Manager Professional plugin missing authorization | 4.3v3.1 | 0.5% | 2024-02-05 | Fix |
| CVE-2024-0790 | WOLF WordPress Posts Bulk Editor and Manager Professional plugin cross-site request forgery | 4.3v3.1 | 0.3% | 2024-02-05 | Fix |
| CVE-2024-0761 | File Manager WordPress plugin sensitive information exposure via Backup Filenames | 7.5v3.1 | 1.0% | 2024-02-05 | Fix |
| CVE-2024-0709 | Cryptocurrency Widgets WordPress plugin SQL injection | 7.5NVD v3.1 | 0.9% | 2024-02-05 | Fix |
| CVE-2024-0701 | UserPro WordPress plugin Disabled Membership Registration bypass | 5.3v3.1 | 0.6% | 2024-02-05 | Fix |
| CVE-2024-0699 | AI Engine WordPress plugin Authenticated(Editor+) arbitrary file upload via add_image_from_url | 7.2v3.1 | 1.2% | 2024-02-05 | Fix |
| CVE-2024-0691 | FileBird WordPress plugin stored cross-site scripting | 4.8v3.1 | 0.4% | 2024-02-05 | Fix |
| CVE-2024-0678 | Order Delivery Date for WP e-Commerce WordPress plugin unauthenticated stored cross-site scripting | 6.1v3.1 | 0.4% | 2024-02-05 | |
| CVE-2024-0668 | Advanced Database Cleaner WordPress plugin PHP object injection | 7.2v3.1 | 1.1% | 2024-02-05 | Fix |
| CVE-2024-0660 | Formidable Forms WordPress plugin cross-site request forgery to stored cross-site scripting | 4.3v3.1 | 0.2% | 2024-02-05 | Fix |
| CVE-2024-0659 | Easy Digital Downloads WordPress plugin stored cross-site scripting | 4.8v3.1 | 0.4% | 2024-02-05 | Fix |
| CVE-2024-0630 | WP RSS Aggregator WordPress plugin stored cross-site scripting | 4.8v3.1 | 0.4% | 2024-02-05 | Fix |
| CVE-2024-0612 | Content Views WordPress plugin stored cross-site scripting | 4.8v3.1 | 0.5% | 2024-02-05 | Fix |
| CVE-2024-0597 | SEO Plugin by Squirrly SEO WordPress plugin stored cross-site scripting | 4.8v3.1 | 0.5% | 2024-02-05 | Fix |
| CVE-2024-0586 | Essential Addons for Elementor WordPress plugin stored cross-site scripting | 5.4NVD v3.1 | 0.4% | 2024-02-05 | Fix |
| CVE-2024-0585 | Essential Addons for Elementor WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.4% | 2024-02-05 | Fix |
| CVE-2024-0509 | WP 404 Auto Redirect to Similar Post WordPress plugin reflected cross-site scripting via request | 6.1v3.1 | 1.2% | 2024-02-05 | Exploit codeFix |
| CVE-2024-0508 | Orbit Fox by ThemeIsle WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.5% | 2024-02-05 | Fix |
| CVE-2024-0448 | Elementor Addons by Livemesh WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.5% | 2024-02-05 | Fix |
| CVE-2024-0428 | Index Now WordPress plugin cross-site request forgery via reset_form | 8.8v3.1 | 0.3% | 2024-02-05 | Fix |
| CVE-2024-0384 | WP Recipe Maker WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.6% | 2024-02-05 | Fix |
| CVE-2024-0382 | WP Recipe Maker WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.6% | 2024-02-05 | Fix |
| CVE-2024-0380 | WP Recipe Maker WordPress plugin directory traversal | 4.3v3.1 | 0.8% | 2024-02-05 | Fix |
| CVE-2024-0374 | Views for WPForms WordPress plugin cross-site request forgery via create_view | 4.3v3.1 | 0.2% | 2024-02-05 | Fix |
| CVE-2024-0373 | Views for WPForms WordPress plugin cross-site request forgery via save_view | 4.3v3.1 | 0.2% | 2024-02-05 | Fix |
| CVE-2024-0372 | Views for WPForms WordPress plugin missing authorization via get_form_fields | 4.3v3.1 | 0.4% | 2024-02-05 | Fix |
| CVE-2024-0371 | Views for WPForms WordPress plugin missing authorization via create_view | 4.3v3.1 | 0.4% | 2024-02-05 | Fix |
| CVE-2024-0370 | Views for WPForms WordPress plugin missing authorization via save_view | 4.3v3.1 | 0.4% | 2024-02-05 | Fix |
| CVE-2024-0366 | Starbox the Author Box for Humans WordPress plugin insecure direct object reference | 4.3v3.1 | 0.6% | 2024-02-05 | Fix |
| CVE-2024-0324 | User Profile Builder WordPress plugin missing authorization plugin settings Change | 7.5v3.1 | 2.4% | 2024-02-05 | Exploit codeFix |
| CVE-2024-0323 | B&R Industrial Automation Automation Runtime FTP uses unsecure encryption mechanisms | 9.8CNA v3.1 | 0.2% | 2024-02-05 | Fix |
| CVE-2024-0255 | WP Recipe Maker WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.5% | 2024-02-05 | Fix |
| CVE-2024-0254 | (Simply) Guest Author Name WordPress plugin authenticated (Contributor+) stored cross-site scripting | 5.4v3.1 | 0.5% | 2024-02-05 | Fix |
| CVE-2024-0221 | Photo Gallery by 10Web WordPress plugin path traversal | 7.2NVD v3.1 | 1.3% | 2024-02-05 | Fix |
| CVE-2024-0202 | Cryptlib: Rsa key exchange ciphersuites in TLS vulnerable to marvin attack | 5.9NVD v3.1 | 0.3% | 2024-02-05 | |
| CVE-2024-25089 | Malwarebytes Binisoft Windows Firewall Control code injection | 9.8v3.1 | 1.8% | 2024-02-04 | Fix |
| CVE-2024-25062 | libxml2 use-after-free | 7.5NVD v3.1 | 1.3% | 2024-02-04 | Fix |
| CVE-2024-23550 | HCL DevOps Deploy / HCL Launch (UCD) may be vulnerable to sensitive information disclosure | 6.2CNA v3.1 | 0.2% | 2024-02-03 | Fix |
| CVE-2024-1215 | SourceCodester CRUD without Page Reload fetch_data.php cross-site scripting | 6.1v3.1 | 0.6% | 2024-02-03 | |
| CVE-2024-1200 | Jspxcms information disclosure | 6.5v3.1 | 0.9% | 2024-02-03 | |
| CVE-2024-1199 | CodeAstro Employee Task Management System attendance-info.php denial of service | 7.5v3.1 | 0.7% | 2024-02-03 | |
| CVE-2024-1198 | openBI Phar User.php addxinzhi deserialization | 9.8v3.1 | 0.7% | 2024-02-03 | |
| CVE-2024-1064 | Improper neutralization of HTTP headers for scripting syntax in Crafty Controller 4 | 7.5CNA v3.1 | 0.8% | 2024-02-03 | |
| CVE-2024-0909 | Anonymous Restricted Content WordPress plugin Protection Mechanism bypass | 7.5v3.1 | 0.6% | 2024-02-03 | Fix |
| CVE-2024-0895 | PDF Flipbook, 3D Flipbook DearFlip WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.4% | 2024-02-03 | Fix |
| CVE-2024-0853 | curl OCSP verification bypass with TLS session reuse | 5.3v3.1 | 1.1% | 2024-02-03 | Fix |
| CVE-2024-24760 | Mailcow Docker Container Exposure to Local Network | 8.8CNA v3.1 | 0.9% | 2024-02-02 | Exploit codeFix |
| CVE-2024-24757 | Degamisu open-irs information disclosure | 7.6CNA v3.1 | 0.5% | 2024-02-02 | Fix |
| CVE-2024-24560 | Vyper external calls can overflow return data to return input buffer | 3.7CNA v3.1 | 0.5% | 2024-02-02 | Fix |
| CVE-2024-24524 | Flusity cross-site request forgery | 8.8v3.1 | 0.5% | 2024-02-02 | |
| CVE-2024-24482 | Apktool path traversal | 9.8v3.1 | 1.2% | 2024-02-02 | |
| CVE-2024-24470 | Flusity cross-site request forgery | 8.8v3.1 | 0.5% | 2024-02-02 | |
| CVE-2024-24388 | XunRuiCMS cross-site scripting | 6.1v3.1 | 0.5% | 2024-02-02 | |
| CVE-2024-24161 | MRCMS files accessible to external parties | 7.5v3.1 | 0.7% | 2024-02-02 | |
| CVE-2024-24160 | MRCMS cross-site scripting | 5.4v3.1 | 0.4% | 2024-02-02 | |
| CVE-2024-24029 | JFinalCMS SQL injection | 9.8v3.1 | 0.8% | 2024-02-02 | |
| CVE-2024-23978 | KDDI HOME SPOT CUBE2 heap-based buffer overflow | 9.8v3.1 | 0.7% | 2024-02-02 | Fix |
| CVE-2024-23895 | Cross-site scripting (XSS) vulnerability in Cups Easy | 6.1NVD v3.1 | 0.5% | 2024-02-02 | |
| CVE-2024-23831 | LedgerSMB privilege escalation through CSRF attack on setup.pl | 7.5CNA v3.1 | 0.3% | 2024-02-02 | Fix |
| CVE-2024-23824 | Mailcow ipixel flood attack leads to denial of service in admin page | 4.7CNA v3.1 | 0.6% | 2024-02-02 | Fix |
| CVE-2024-23746 | Miro code injection | 9.8v3.1 | 1.3% | 2024-02-02 | Exploit code |
| CVE-2024-23635 | AntiSamy malicious input can provoke XSS when preserving comments | 6.1CNA v3.1 | 0.4% | 2024-02-02 | Fix |
| CVE-2024-23553 | A cross-site scripting (XSS) vulnerability affects HCL BigFix Platform | 3.0CNA v3.1 | 0.3% | 2024-02-02 | Fix |
| CVE-2024-22903 | Vinchin Backup And Recovery command injection | 8.8v3.1 | 1.9% | 2024-02-02 | |
| CVE-2024-22902 | Vinchin Backup and Recovery root account vulnerability | 9.8v3.1 | 1.1% | 2024-02-02 | |
| CVE-2024-22901 | Vinchin Backup and Recovery MySQL database vulnerability | 9.8v3.1 | 1.1% | 2024-02-02 | |
| CVE-2024-22900 | Vinchin Backup And Recovery command injection | 8.8v3.1 | 1.9% | 2024-02-02 | |
| CVE-2024-22899 | Vinchin Backup And Recovery code injection | 8.8v3.1 | 2.4% | 2024-02-02 | Exploit code |
| CVE-2024-22851 | Liveconfig path traversal | 7.5v3.1 | 1.2% | 2024-02-02 | |
| CVE-2024-22779 | Kihron Serverrpexposer path traversal | 9.8v3.1 | 1.9% | 2024-02-02 | |
| CVE-2024-22533 | Beetl server-side template injection | 9.8v3.1 | 1.0% | 2024-02-02 | Fix |
| CVE-2024-22320 | IBM Operational Decision Manager code execution | 9.8CNA v3.1 | 73.4% | 2024-02-02 | NucleiFix |
| CVE-2024-22319 | IBM Operational Decision Manager JDNI injection | 8.1CNA v3.1 | 76.4% | 2024-02-02 | NucleiFix |
| CVE-2024-22108 | Gttb Gtb Central Console SQL injection | 9.8v3.1 | 0.8% | 2024-02-02 | KCV |
| CVE-2024-22107 | Gttb Gtb Central Console command injection | 7.2v3.1 | 2.5% | 2024-02-02 | KCV |
| CVE-2024-22096 | Relative path traversal in Rapid SCADA | 6.5v3.1 | 0.6% | 2024-02-02 | |
| CVE-2024-22016 | Incorrect permission assignment for critical resource in Rapid SCADA | 7.8v3.1 | 0.2% | 2024-02-02 | |
| CVE-2024-21869 | Plaintext storage of a password in Rapid SCADA | 5.5v3.1 | 0.2% | 2024-02-02 | |
| CVE-2024-21866 | Generation of error message containing sensitive information in Rapid SCADA | 5.3v3.1 | 0.4% | 2024-02-02 | |
| CVE-2024-21863 | OpenHarmony dsoftbus has an improper input validation | 4.7CNA v3.1 | 0.2% | 2024-02-02 | Fix |
| CVE-2024-21860 | OpenHarmony dsoftbus has a use-after-free | 8.2CNA v3.1 | 0.4% | 2024-02-02 | Fix |
| CVE-2024-21851 | OpenHarmony dsoftbus has an integer overflow | 2.9CNA v3.1 | 0.2% | 2024-02-02 | Fix |
| CVE-2024-21845 | OpenHarmony dsoftbus has an integer overflow | 2.9CNA v3.1 | 0.2% | 2024-02-02 | Fix |
| CVE-2024-21794 | Open redirect in Rapid SCADA | 5.4v3.1 | 0.3% | 2024-02-02 | |
| CVE-2024-21780 | KDDI HOME SPOT CUBE2 stack-based buffer overflow | 7.5v3.1 | 0.7% | 2024-02-02 | Fix |
| CVE-2024-21764 | Rapid SCADA hard-coded credentials | 9.8v3.1 | 0.6% | 2024-02-02 | |
| CVE-2024-21485 | Dash apps vulnerable to cross-site scripting | 5.4v3.1 | 1.5% | 2024-02-02 | NucleiFix |
| CVE-2024-21399 | Microsoft Edge (Chromium-based) remote code execution | 8.3CNA v3.1 | 1.2% | 2024-02-02 | Fix |
| CVE-2024-1201 | PanteraSoft HDD Health search path or unquoted item vulnerability | 7.8v3.1 | 0.2% | 2024-02-02 | |
| CVE-2024-1197 | SourceCodester Testimonial Page Manager HTTP GET request delete-testimonial.php SQL injection | 9.8v3.1 | 0.6% | 2024-02-02 | |
| CVE-2024-1196 | SourceCodester Testimonial Page Manager HTTP POST request add-testimonial.php cross-site scripting | 6.1v3.1 | 0.5% | 2024-02-02 | |
| CVE-2024-1195 | iTop VPN IOCTL ITopVpnCallbackProcess.sys denial of service | 5.5v3.1 | 0.3% | 2024-02-02 | |
| CVE-2024-1194 | Armcode AlienIP Locate host denial of service | 5.5v3.1 | 0.4% | 2024-02-02 | |
| CVE-2024-1193 | Navicat MySQL Conecction denial of service | 5.5v3.1 | 0.3% | 2024-02-02 | |
| CVE-2024-1190 | Global Scape CuteFTP denial of service | 5.5v3.1 | 0.3% | 2024-02-02 | |
| CVE-2024-1189 | AMPPS Encryption Passphrase denial of service | 7.5v3.1 | 0.7% | 2024-02-02 | |
| CVE-2024-1188 | Rizone Soft Notepad3 Encryption Passphrase denial of service | 5.5v3.1 | 0.2% | 2024-02-02 | |
| CVE-2024-1187 | Munsoft Easy Outlook Express Recovery Registration Key denial of service | 5.5v3.1 | 0.3% | 2024-02-02 | |
| CVE-2024-1186 | Munsoft Easy Archive Recovery Registration Key denial of service | 5.5v3.1 | 0.4% | 2024-02-02 | |
| CVE-2024-1185 | Nsasoft NBMonitor Network Bandwidth Monitor Registration denial of service | 5.5v3.1 | 0.4% | 2024-02-02 | |
| CVE-2024-1184 | Nsasoft Network Sleuth Registration denial of service | 5.5v3.1 | 0.4% | 2024-02-02 | |
| CVE-2024-1162 | Orbit Fox by ThemeIsle WordPress plugin cross-site request forgery | 4.3v3.1 | 0.2% | 2024-02-02 | Fix |
| CVE-2024-1143 | Central Dogma authentication bypass vulnerability via session leakage | 6.1NVD v3.1 | 0.5% | 2024-02-02 | Fix |
| CVE-2024-1073 | SlimStat Analytics WordPress plugin authenticated (Subscriber+) stored cross-site scripting | 5.4v3.1 | 0.5% | 2024-02-02 | Fix |
| CVE-2024-1047 | ThemeIsle SDK missing authorization | 5.3v3.1 | 0.6% | 2024-02-02 | Fix |
| CVE-2024-0963 | Calculated Fields Form WordPress plugin authenticated (Contributor+) stored cross-site scripting | 5.4v3.1 | 0.5% | 2024-02-02 | Fix |
| CVE-2024-0844 | Popup More Popups WordPress plugin local file inclusion | 7.2v3.1 | 0.7% | 2024-02-02 | Fix |
| CVE-2024-0685 | Ninja Forms Contact Form WordPress plugin unauthenticated Second order SQL injection | 9.8v3.1 | 0.8% | 2024-02-02 | Fix |
| CVE-2024-0338 | Buffer overflow vulnerability in XAMPP | 9.8v3.1 | 0.5% | 2024-02-02 | |
| CVE-2024-0285 | OpenHarmony dsoftbus has an improper input validation | 4.7CNA v3.1 | 0.2% | 2024-02-02 | Fix |
| CVE-2024-0269 | ManageEngine ADAudit Plus SQL injection | 8.3CNA v3.1 | 5.4% | 2024-02-02 | Fix |
| CVE-2024-0253 | ManageEngine ADAudit Plus SQL injection | 8.3CNA v3.1 | 5.0% | 2024-02-02 | Fix |
| CVE-2024-24945 | Remyandrade Travel Journal Using PHP And Mysql With Source Code stored cross-site scripting | 6.1NVD v3.1 | 0.5% | 2024-02-01 | |
| CVE-2024-24756 | Crafatar path traversal | 7.5CNA v3.1 | 0.9% | 2024-02-01 | Fix |
| CVE-2024-24755 | discourse-group-membership-ip-block is exposing potentially sensitive custom fields | 4.3CNA v3.1 | 0.4% | 2024-02-01 | Fix |
| CVE-2024-24754 | Bref Body Parsing Inconsistency in Event-Driven functions | 3.7CNA v3.1 | 0.6% | 2024-02-01 | Fix |
| CVE-2024-24753 | Bref multiple Value headers not Supported in ApiGatewayFormatV2 | 4.8CNA v3.1 | 0.4% | 2024-02-01 | Fix |
| CVE-2024-24752 | Bref Uploaded files not Deleted in Event-Driven functions | 6.5CNA v3.1 | 0.8% | 2024-02-01 | Fix |
| CVE-2024-24570 | Statamic account takeover via XSS and password reset link | 8.2CNA v3.1 | 0.7% | 2024-02-01 | Fix |
| CVE-2024-24569 | Pixee Java Code Security Toolkit ZipSecurity path traversal guard path traversal | 5.4CNA v3.1 | 0.6% | 2024-02-01 | Fix |
| CVE-2024-24561 | Vyper bounds check on built-in `slice` function can be overflowed | 9.8CNA v3.1 | 0.9% | 2024-02-01 | Fix |
| CVE-2024-24557 | Moby classic builder cache poisoning | 6.9CNA v3.1 | 0.3% | 2024-02-01 | Fix |
| CVE-2024-24548 | Simplesite Payment EX information disclosure | 6.5NVD v3.1 | 0.6% | 2024-02-01 | Fix |
| CVE-2024-24062 | aitangbao springboot-manager cross-site scripting | 5.4v3.1 | 0.4% | 2024-02-01 | |
| CVE-2024-24061 | aitangbao springboot-manager cross-site scripting | 5.4v3.1 | 0.4% | 2024-02-01 | |
| CVE-2024-24060 | aitangbao springboot-manager cross-site scripting | 5.4v3.1 | 0.4% | 2024-02-01 | |
| CVE-2024-24059 | aitangbao springboot-manager cross-site scripting | 5.4v3.1 | 0.4% | 2024-02-01 | |
| CVE-2024-24041 | Remyandrade Travel Journal Using PHP And Mysql With Source Code stored cross-site scripting | 6.1v3.1 | 0.5% | 2024-02-01 | |
| CVE-2024-23941 | Intermesh groupoffice cross-site scripting | 5.4v3.1 | 0.6% | 2024-02-01 | Fix |
| CVE-2024-23832 | Mastodon Remote user impersonation and takeover | 9.4CNA v3.1 | 2.5% | 2024-02-01 | Fix |
| CVE-2024-23645 | GLPI reflected XSS in reports pages | 6.5CNA v3.1 | 0.9% | 2024-02-01 | Fix |
| CVE-2024-23034 | EyouCMS input parameter cross-site scripting | 6.1v3.1 | 0.5% | 2024-02-01 | |
| CVE-2024-23033 | EyouCMS path parameter cross-site scripting | 6.1v3.1 | 0.5% | 2024-02-01 | |
| CVE-2024-23032 | EyouCMS num parameter cross-site scripting | 6.1v3.1 | 0.5% | 2024-02-01 | |
| CVE-2024-23031 | EyouCMS is_water parameter cross-site scripting | 6.1v3.1 | 0.4% | 2024-02-01 | |
| CVE-2024-22927 | EyouCMS func parameter cross-site scripting | 6.1v3.1 | 1.0% | 2024-02-01 | Nuclei |
| CVE-2024-22859 | Laravel Livewire cross-site request forgery | 8.8v3.1 | 0.5% | 2024-02-01 | Fix |
| CVE-2024-22449 | Dell PowerScale OneFS missing authentication | 6.6CNA v3.1 | 0.2% | 2024-02-01 | Fix |
| CVE-2024-22430 | Dell PowerScale OneFS incorrect default permissions | 5.5CNA v3.1 | 0.1% | 2024-02-01 | Fix |
| CVE-2024-22148 | WP Smart Editor WordPress plugin cross-site scripting (XSS) | 6.1NVD v3.1 | 0.4% | 2024-02-01 | |
| CVE-2024-21852 | Rapid SCADA path traversal | 8.8v3.1 | 1.2% | 2024-02-01 | |
| CVE-2024-21750 | Shortcodes Finder WordPress plugin cross-site scripting (XSS) | 6.1NVD v3.1 | 0.4% | 2024-02-01 | Fix |
| CVE-2024-1167 | SEW-EURODRIVE MOVITOOLS MotionStudio improper restriction of XML external entity reference | 7.5v3.1 | 0.5% | 2024-02-01 | Fix |
| CVE-2024-1141 | Glance-store: Glance store access key logged in debug log level | 5.5CNA v3.1 | 0.2% | 2024-02-01 | Fix |
| CVE-2024-1040 | Gessler WEB-MASTER password hashing weak cryptographic algorithm | 4.4v3.1 | 0.1% | 2024-02-01 | Fix |
| CVE-2024-1039 | Gessler WEB-MASTER restoration account hard-coded credentials | 9.8v3.1 | 0.7% | 2024-02-01 | Fix |
| CVE-2024-0935 | Dassault Systèmes DELMIA Apriso log files information disclosure | 4.4CNA v3.1 | 0.4% | 2024-02-01 | |
| CVE-2024-0831 | Vault may Expose Sensitive Information when Configuring an Audit Log Device | 4.5CNA v3.1 | 0.8% | 2024-02-01 | Fix |
| CVE-2024-0325 | Command injection in Helix Sync | 3.6CNA v3.1 | 0.8% | 2024-02-01 | Fix |