CVE-2024 records published in March 2024
This page lists the 2,606 CVE-2024 records published in March 2024, newest first, 1,000 to a page. The Cybersecurity and Infrastructure Security Agency's Known Exploited Vulnerabilities (KEV) catalog lists seven of them. Each CVE opens on cve-security.com with its sources, detection content and vendor fixes, and the search on the CVE-2024 list filters these records by severity or signal.
- Critical
- 30611.7% of these records
- Listed in CISA KEV
- 70.3% of these records
- Reported exploited
- 30.1% of these records
- Detection signal
- 532.0% of these records
- Exploit code
- 773.0% of these records
- Actionable vendor fix
- 1,71865.9% of these records
Figures as of 2026-10-24 13:18 UTC. Records published in March 2024 have had from about 31 months to about 32 months to collect KEV listings, exploitation reports, detection content and exploit code. Records published more recently have had less time, which can hold their shares down.
| CVE | Summary | CVSS | EPSS | Published | Signals |
|---|---|---|---|---|---|
| CVE-2024-31123 | SpiderFAQ WordPress plugin cross-site scripting | 7.1CNA v3.1 | 0.4% | 2024-03-31 | |
| CVE-2024-31122 | User Rights Access Manager WordPress plugin cross-site scripting (XSS) | 5.8CNA v3.1 | 0.3% | 2024-03-31 | |
| CVE-2024-31121 | HeartThis WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.3% | 2024-03-31 | |
| CVE-2024-31120 | Gallery Image and Video Gallery with Thumbnails WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.4% | 2024-03-31 | |
| CVE-2024-31117 | WooCommerce Bookings Calendar WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.3% | 2024-03-31 | |
| CVE-2024-31116 | 10Web Map Builder for Google Maps WordPress plugin SQL injection | 7.2v3.1 | 0.5% | 2024-03-31 | |
| CVE-2024-31115 | Chauffeur Taxi Booking System for WordPress plugin arbitrary file upload | 10.0CNA v3.1 | 0.6% | 2024-03-31 | Fix |
| CVE-2024-31114 | WordPress Shortcode Addons plugin arbitrary file upload | 9.1CNA v3.1 | 1.4% | 2024-03-31 | Exploit code |
| CVE-2024-31112 | Stephanie Leary Convert Post Types reflected cross-site scripting | 7.1CNA v3.1 | 0.4% | 2024-03-31 | |
| CVE-2024-31110 | Contact Form 7 Newsletter WordPress plugin cross-site scripting (XSS) | 7.1CNA v3.1 | 0.4% | 2024-03-31 | |
| CVE-2024-31108 | iFlyChat WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.3% | 2024-03-31 | |
| CVE-2024-31107 | OpenID WordPress plugin reflected cross-site scripting (XSS) | 7.1CNA v3.1 | 0.4% | 2024-03-31 | |
| CVE-2024-31106 | Yoo Slider Image Slider and Video Slider WordPress plugin reflected cross-site scripting (XSS) | 7.1CNA v3.1 | 0.4% | 2024-03-31 | Fix |
| CVE-2024-31104 | GetResponse for WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.3% | 2024-03-31 | |
| CVE-2024-31103 | Kanban Boards for WordPress plugin reflected cross-site scripting (XSS) | 7.1CNA v3.1 | 0.4% | 2024-03-31 | |
| CVE-2024-31102 | Prenotazioni WordPress plugin cross-site scripting (XSS) | 5.9CNA v3.1 | 0.3% | 2024-03-31 | |
| CVE-2024-31101 | AI Twitter Feeds (Twitter widget and shortcode) WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.3% | 2024-03-31 | |
| CVE-2024-31100 | Popup Cart Lite for WooCommerce WordPress plugin cross-site request forgery (CSRF) | 5.4CNA v3.1 | 0.2% | 2024-03-31 | |
| CVE-2024-31097 | SEO Title Tag WordPress plugin reflected cross-site scripting (XSS) | 7.1CNA v3.1 | 0.4% | 2024-03-31 | |
| CVE-2024-31096 | Nictitate WordPress theme cross-site request forgery (CSRF) | 4.3CNA v3.1 | 0.2% | 2024-03-31 | |
| CVE-2024-31095 | Thumbs Rating WordPress plugin insecure direct object references (IDOR) | 9.1CISA ADP v3.1 | 0.4% | 2024-03-31 | |
| CVE-2024-31094 | Filter Custom Fields and Taxonomies Light WordPress plugin PHP object injection | 9.8CISA ADP v3.1 | 0.5% | 2024-03-31 | |
| CVE-2024-31092 | Comic Easel WordPress plugin cross-site scripting (XSS) | 7.1CNA v3.1 | 0.4% | 2024-03-31 | |
| CVE-2024-31091 | Custom Field Bulk Editor WordPress plugin cross-site scripting | 7.1CNA v3.1 | 0.4% | 2024-03-31 | |
| CVE-2024-31090 | Hacklog Down As PDF WordPress plugin cross-site scripting (XSS) | 7.1CNA v3.1 | 0.4% | 2024-03-31 | |
| CVE-2024-31089 | Platinum SEO WordPress plugin cross-site scripting (XSS) | 5.9CNA v3.1 | 0.3% | 2024-03-31 | |
| CVE-2024-31087 | pageMash WordPress plugin cross-site scripting (XSS) | 7.1CNA v3.1 | 0.4% | 2024-03-31 | |
| CVE-2024-31085 | Post-Plugin Library WordPress plugin reflected cross-site scripting (XSS) | 7.1CNA v3.1 | 0.4% | 2024-03-31 | |
| CVE-2024-31084 | Weekly Class Schedule WordPress plugin reflected cross-site scripting (XSS) | 7.1CNA v3.1 | 0.4% | 2024-03-31 | |
| CVE-2024-30561 | Appointment Calendar WordPress plugin reflected cross-site scripting (XSS) | 7.1CNA v3.1 | 0.4% | 2024-03-31 | |
| CVE-2024-30559 | Spin 360 deg and 3D Model Viewer WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.3% | 2024-03-31 | |
| CVE-2024-30558 | Michael Simpson Add Shortcodes Actions And Filters reflected cross-site scripting | 7.1CNA v3.1 | 0.4% | 2024-03-31 | |
| CVE-2024-30557 | Aesop Story Engine WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.3% | 2024-03-31 | |
| CVE-2024-30556 | Mighty Classic Pros And Cons WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.3% | 2024-03-31 | |
| CVE-2024-30555 | Ultimate Social Comments WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.3% | 2024-03-31 | |
| CVE-2024-30554 | DD Rating WordPress plugin cross-site scripting (XSS) | 5.9CNA v3.1 | 0.3% | 2024-03-31 | |
| CVE-2024-30553 | WP Twitter Mega Fan Box Widget WordPress plugin cross-site scripting (XSS) | 5.9CNA v3.1 | 0.3% | 2024-03-31 | |
| CVE-2024-30552 | Responsive flipbook WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.3% | 2024-03-31 | |
| CVE-2024-30551 | Sticky Anything WordPress plugin cross-site scripting (XSS) | 7.1CNA v3.1 | 0.3% | 2024-03-31 | |
| CVE-2024-30550 | Gallery Image and Video Gallery with Thumbnails WordPress plugin reflected cross-site scripting | 6.1NVD v3.1 | 0.4% | 2024-03-31 | |
| CVE-2024-30549 | Contact Forms by Cimatti WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.3% | 2024-03-31 | Fix |
| CVE-2024-30548 | underConstruction WordPress plugin cross-site scripting (XSS) | 5.9CNA v3.1 | 0.3% | 2024-03-31 | Fix |
| CVE-2024-30543 | Whizzy WordPress plugin insecure direct object references (IDOR) | 6.5CNA v3.1 | 0.4% | 2024-03-31 | |
| CVE-2024-30541 | LWS Optimize WordPress plugin cross-site request forgery (CSRF) | 4.3CNA v3.1 | 0.2% | 2024-03-31 | Fix |
| CVE-2024-30536 | Slugs Manager WordPress plugin cross-site request forgery (CSRF) | 4.3CNA v3.1 | 0.2% | 2024-03-31 | Fix |
| CVE-2024-30535 | Easy Form Builder WordPress plugin SQL injection | 8.5CNA v3.1 | 0.5% | 2024-03-31 | Fix |
| CVE-2024-30533 | Layouts for Elementor WordPress plugin arbitrary file upload | 7.5CNA v3.1 | 0.5% | 2024-03-31 | Fix |
| CVE-2024-30530 | MP3 Audio Player for Music, Radio and Podcast by Sonaar WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.3% | 2024-03-31 | Fix |
| CVE-2024-30526 | Easy Social Feed WordPress plugin cross-site request forgery | 4.3CNA v3.1 | 0.2% | 2024-03-31 | Fix |
| CVE-2024-30524 | PDF Viewer for Elementor WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.3% | 2024-03-31 | |
| CVE-2024-30523 | Paid Memberships Pro Mailchimp Add On WordPress plugin sensitive data exposure | 5.3CNA v3.1 | 0.4% | 2024-03-31 | Fix |
| CVE-2024-30489 | WP Cost Estimation and Payment Forms Builder WordPress plugin SQL injection | 8.5CNA v3.1 | 0.5% | 2024-03-31 | Fix |
| CVE-2024-25027 | IBM Security Verify Access Container information disclosure | 6.2CNA v3.1 | 0.1% | 2024-03-31 | Fix |
| CVE-2024-22353 | IBM WebSphere Application Server Liberty denial of service | 5.9CNA v3.1 | 0.8% | 2024-03-31 | Fix |
| CVE-2024-3118 | iteachyou Dreamer CMS attachment handler vulnerability | 8.8v3.1 | 0.8% | 2024-03-31 | |
| CVE-2024-3117 | YouDianCMS ChannelAction.class.php unrestricted upload | 4.7CNA v3.1 | 0.6% | 2024-03-31 | |
| CVE-2024-29278 | funboot message title field cross-site scripting | 6.5CISA ADP v3.1 | 0.4% | 2024-03-30 | Exploit code |
| CVE-2024-28288 | Ruijie Rg-nbr700gw cookie reliance without validation | 9.8CISA ADP v3.1 | 0.7% | 2024-03-30 | |
| CVE-2024-3091 | PHPGurukul Emergency Ambulance Hiring Portal Search request page search.php cross-site scripting | 5.4v3.1 | 0.5% | 2024-03-30 | |
| CVE-2024-3090 | PHPGurukul Emergency Ambulance Hiring Portal Add Ambulance Page cross-site scripting | 4.8v3.1 | 0.6% | 2024-03-30 | |
| CVE-2024-3089 | PHPGurukul Emergency Ambulance Hiring Portal Manage Ambulance Page cross-site request forgery | 4.3v3.1 | 0.4% | 2024-03-30 | |
| CVE-2024-3088 | PHPGurukul Emergency Ambulance Hiring Portal Forgot Password page forgot-password.php SQL injection | 7.3CISA ADP v3.1 | 0.8% | 2024-03-30 | |
| CVE-2024-3087 | PHPGurukul Emergency Ambulance Hiring Portal Ambulance Tracking Page SQL injection | 9.8v3.1 | 0.8% | 2024-03-30 | |
| CVE-2024-3086 | PHPGurukul Emergency Ambulance Hiring Portal Ambulance Tracking Page cross-site scripting | 6.1v3.1 | 0.7% | 2024-03-30 | |
| CVE-2024-3085 | PHPGurukul Emergency Ambulance Hiring Portal Admin Login page login.php SQL injection | 9.8v3.1 | 0.8% | 2024-03-30 | |
| CVE-2024-3084 | PHPGurukul Emergency Ambulance Hiring Portal Hire an Ambulance page cross-site scripting | 6.1v3.1 | 0.7% | 2024-03-30 | |
| CVE-2024-3018 | Essential Addons for Elementor WordPress plugin PHP object injection | 8.8CNA v3.1 | 0.8% | 2024-03-30 | Fix |
| CVE-2024-2948 | Favorites WordPress plugin authenticated (Contributor+) stored cross-site scripting via shortcode | 6.4CNA v3.1 | 0.4% | 2024-03-30 | Fix |
| CVE-2024-2794 | Gutenberg Block Editor Toolkit EditorsKit WordPress plugin stored cross-site scripting | 6.4CNA v3.1 | 0.4% | 2024-03-30 | Fix |
| CVE-2024-2491 | PowerPack Addons for Elementor WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.3% | 2024-03-30 | Fix |
| CVE-2024-2144 | Ultimate Addons for Beaver Builder Lite WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.4% | 2024-03-30 | Fix |
| CVE-2024-2143 | Ultimate Addons for Beaver Builder Lite WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.3% | 2024-03-30 | Fix |
| CVE-2024-2142 | Ultimate Addons for Beaver Builder Lite WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.4% | 2024-03-30 | Fix |
| CVE-2024-2141 | Ultimate Addons for Beaver Builder Lite WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.4% | 2024-03-30 | Fix |
| CVE-2024-2140 | Ultimate Addons for Beaver Builder Lite WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.3% | 2024-03-30 | Fix |
| CVE-2024-2086 | Integrate Google Drive WordPress plugin unauthorized access | 10.0CNA v3.1 | 0.7% | 2024-03-30 | Fix |
| CVE-2024-2047 | ElementsKit Elementor addons WordPress plugin local file inclusion in render_raw | 8.8CNA v3.1 | 1.5% | 2024-03-30 | Fix |
| CVE-2024-1692 | BoldGrid Easy SEO Simple and Effective SEO WordPress plugin stored cross-site scripting | 6.4CNA v3.1 | 0.3% | 2024-03-30 | Fix |
| CVE-2024-1522 | Cross-site request forgery (CSRF) leading to remote code execution in parisneo/lollms-webui | 8.8CNA v3.0 | 0.4% | 2024-03-30 | Fix |
| CVE-2024-1238 | ElementsKit Elementor addons WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.4% | 2024-03-30 | Fix |
| CVE-2024-1051 | List category posts WordPress plugin authenticated (Contributor+) stored cross-site scripting | 6.4CNA v3.1 | 0.4% | 2024-03-30 | Fix |
| CVE-2024-0367 | Unlimited Elements For Elementor WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.3% | 2024-03-30 | Fix |
| CVE-2024-31032 | Huashi Private Cloud CDN Live Streaming Acceleration Server manager/ipping.php remote code execution | 9.8CISA ADP v3.1 | 1.1% | 2024-03-29 | |
| CVE-2024-30645 | Tenda AC15 OS command injection | 8.0CISA ADP v3.1 | 1.0% | 2024-03-29 | |
| CVE-2024-30639 | Tenda F1202 stack-based buffer overflow | 6.5CISA ADP v3.1 | 0.5% | 2024-03-29 | |
| CVE-2024-30638 | Tenda F1202 stack-based buffer overflow | 4.3CISA ADP v3.1 | 0.4% | 2024-03-29 | |
| CVE-2024-30637 | Tenda F1202 command injection | 8.8CISA ADP v3.1 | 1.8% | 2024-03-29 | |
| CVE-2024-30636 | Tenda F1202 stack-based buffer overflow | 6.5CISA ADP v3.1 | 0.4% | 2024-03-29 | |
| CVE-2024-30635 | Tenda F1202 buffer overflow | 9.8CISA ADP v3.1 | 0.8% | 2024-03-29 | |
| CVE-2024-30634 | Tenda F1202 stack-based buffer overflow | 8.0CISA ADP v3.1 | 0.7% | 2024-03-29 | |
| CVE-2024-30633 | Tenda FH1205 stack-based buffer overflow | 6.5CISA ADP v3.1 | 0.5% | 2024-03-29 | |
| CVE-2024-30632 | Tenda FH1205 stack-based buffer overflow | 6.5CISA ADP v3.1 | 0.5% | 2024-03-29 | |
| CVE-2024-30631 | Tenda FH1205 stack-based buffer overflow | 4.3CISA ADP v3.1 | 0.4% | 2024-03-29 | |
| CVE-2024-30630 | Tenda FH1205 out-of-bounds read | 9.8CISA ADP v3.1 | 0.8% | 2024-03-29 | |
| CVE-2024-30629 | Tenda FH1205 stack-based buffer overflow | 5.7CISA ADP v3.1 | 0.5% | 2024-03-29 | |
| CVE-2024-30628 | Tenda FH1205 stack-based buffer overflow | 9.8v3.1 | 0.8% | 2024-03-29 | |
| CVE-2024-30627 | Tenda FH1205 stack-based buffer overflow | 8.8CISA ADP v3.1 | 0.8% | 2024-03-29 | |
| CVE-2024-30626 | Tenda FH1205 stack-based buffer overflow | 8.0CISA ADP v3.1 | 0.7% | 2024-03-29 | |
| CVE-2024-30625 | Tenda FH1205 stack-based buffer overflow | 8.0CISA ADP v3.1 | 0.7% | 2024-03-29 | |
| CVE-2024-30624 | Tenda FH1205 stack-based buffer overflow | 8.8CISA ADP v3.1 | 0.7% | 2024-03-29 | |
| CVE-2024-30623 | Tenda FH1205 stack-based buffer overflow | 6.5CISA ADP v3.1 | 0.5% | 2024-03-29 | |
| CVE-2024-30622 | Tenda FH1205 stack-based buffer overflow | 9.8CISA ADP v3.1 | 0.8% | 2024-03-29 | |
| CVE-2024-30613 | Tenda AC15 out-of-bounds write | 4.3CISA ADP v3.1 | 0.4% | 2024-03-29 | |
| CVE-2024-30521 | Landingi Landing Pages WordPress plugin cross-site request forgery (CSRF) | 5.4CNA v3.1 | 0.2% | 2024-03-29 | Fix |
| CVE-2024-30520 | Carousel Anything For WPBakery Page Builder WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.3% | 2024-03-29 | |
| CVE-2024-30519 | Lordicon Animated Icons WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.3% | 2024-03-29 | |
| CVE-2024-30518 | Custom WooCommerce Checkout Fields Editor WordPress plugin cross-site request forgery (CSRF) | 4.3CNA v3.1 | 0.2% | 2024-03-29 | Fix |
| CVE-2024-30514 | Paid Memberships Pro Payfast Gateway Add On WordPress plugin sensitive data exposure via Log file | 5.3CNA v3.1 | 0.5% | 2024-03-29 | Fix |
| CVE-2024-30513 | ProfileGrid WordPress plugin insecure direct object references (IDOR) | 6.5v3.1 | 0.5% | 2024-03-29 | Fix |
| CVE-2024-30511 | FG PrestaShop to WooCommerce WordPress plugin sensitive data exposure via Log file | 5.3CNA v3.1 | 0.5% | 2024-03-29 | Fix |
| CVE-2024-30510 | Salon booking system WordPress plugin arbitrary file upload | 9.8v3.1 | 0.7% | 2024-03-29 | Fix |
| CVE-2024-30508 | WP Hotel Booking WordPress plugin broken access control | 9.8v3.1 | 0.5% | 2024-03-29 | Fix |
| CVE-2024-30507 | Molongui Authorship WordPress plugin insecure direct object references (IDOR) | 2.7CNA v3.1 | 0.4% | 2024-03-29 | Fix |
| CVE-2024-30506 | All In One Redirection WordPress plugin cross-site scripting (XSS) | 7.1CNA v3.1 | 0.4% | 2024-03-29 | |
| CVE-2024-30505 | Church Admin WordPress plugin broken access control | 5.4CNA v3.1 | 0.5% | 2024-03-29 | Fix |
| CVE-2024-30504 | WP Travel Engine WordPress plugin SQL injection | 7.2v3.1 | 0.6% | 2024-03-29 | Fix |
| CVE-2024-30503 | Mailster WordPress plugin reflected cross-site scripting (XSS) | 6.1NVD v3.1 | 0.4% | 2024-03-29 | Fix |
| CVE-2024-30502 | WP Travel Engine WordPress plugin Unauth. blind SQL injection | 9.8v3.1 | 2.2% | 2024-03-29 | NucleiFix |
| CVE-2024-30501 | Download Monitor WordPress plugin Auth. SQL injection | 7.2v3.1 | 0.6% | 2024-03-29 | Fix |
| CVE-2024-30500 | CubeWP WordPress plugin arbitrary file upload | 8.8NVD v3.1 | 0.6% | 2024-03-29 | Fix |
| CVE-2024-30499 | CRM Perks Forms WordPress plugin SQL injection | 8.8v3.1 | 0.6% | 2024-03-29 | Fix |
| CVE-2024-30498 | CRM Perks Forms WordPress plugin unauthenticated SQL injection | 10.0v3.1 | 2.2% | 2024-03-29 | NucleiFix |
| CVE-2024-30497 | WP Responsive Tabs horizontal vertical and accordion Tabs WordPress plugin SQL injection | 8.8v3.1 | 0.6% | 2024-03-29 | Fix |
| CVE-2024-30496 | Element Pack Lite WordPress plugin SQL injection | 8.8v3.1 | 0.6% | 2024-03-29 | Fix |
| CVE-2024-30495 | Falang multilanguage for WordPress plugin SQL injection | 7.2v3.1 | 0.6% | 2024-03-29 | Fix |
| CVE-2024-30494 | OSS Aliyun WordPress plugin SQL injection | 7.6CNA v3.1 | 0.5% | 2024-03-29 | Fix |
| CVE-2024-30493 | Church Admin WordPress plugin cross-site request forgery (CSRF) | 4.3CNA v3.1 | 0.2% | 2024-03-29 | Fix |
| CVE-2024-30492 | Export and Import Users and Customers WordPress plugin path traversal | 4.3CNA v3.1 | 0.5% | 2024-03-29 | Fix |
| CVE-2024-30491 | ProfileGrid User Profiles, Memberships, Groups and Communities WordPress plugin SQL injection | 8.8v3.1 | 32.0% | 2024-03-29 | Fix |
| CVE-2024-30490 | ProfileGrid WordPress plugin SQL injection | 9.8v3.1 | 2.2% | 2024-03-29 | NucleiFix |
| CVE-2024-30488 | Zotpress WordPress plugin SQL injection | 8.8v3.1 | 0.6% | 2024-03-29 | Fix |
| CVE-2024-30487 | MP3 Audio Player for Music, Radio and Podcast by Sonaar WordPress plugin broken access control | 7.6v3.1 | 0.5% | 2024-03-29 | Fix |
| CVE-2024-30486 | Media Library Folders WordPress plugin Auth. SQL injection | 8.8v3.1 | 0.6% | 2024-03-29 | Fix |
| CVE-2024-30483 | Sponsors WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.4% | 2024-03-29 | |
| CVE-2024-30482 | Simple Revisions Delete WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.2% | 2024-03-29 | Fix |
| CVE-2024-30478 | Announcement and Notification Banner Bulletin WordPress plugin SQL injection | 7.2v3.1 | 0.6% | 2024-03-29 | Fix |
| CVE-2024-30477 | Klarna Payments for WooCommerce WordPress plugin broken access control | 9.8v3.1 | 0.5% | 2024-03-29 | Fix |
| CVE-2024-30469 | Wholesale For WooCommerce WordPress plugin unauthenticated sensitive data exposure | 5.3v3.1 | 0.4% | 2024-03-29 | Fix |
| CVE-2024-30468 | All-In-One Security (AIOS) Security and Firewall WordPress plugin cross-site request forgery (CSRF) | 4.3CNA v3.1 | 0.2% | 2024-03-29 | Fix |
| CVE-2024-30463 | BEAR WordPress plugin broken access control | 5.3v3.1 | 0.4% | 2024-03-29 | Fix |
| CVE-2024-30462 | HUSKY WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.2% | 2024-03-29 | Fix |
| CVE-2024-30460 | Tumult Hype Animations WordPress plugin cross-site request forgery (CSRF) | 4.3CNA v3.1 | 0.2% | 2024-03-29 | Fix |
| CVE-2024-30458 | FOX Currency Switcher Professional for WooCommerce WordPress plugin cross-site request forgery | 8.8v3.1 | 0.2% | 2024-03-29 | Fix |
| CVE-2024-30457 | MDTF WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.2% | 2024-03-29 | Fix |
| CVE-2024-30456 | WPCS WordPress Currency Switcher Professional plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.2% | 2024-03-29 | Fix |
| CVE-2024-30455 | GamiPress WordPress plugin cross-site request forgery (CSRF) | 4.3v3.1 | 0.2% | 2024-03-29 | Fix |
| CVE-2024-30454 | WP SMS WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.2% | 2024-03-29 | Fix |
| CVE-2024-30453 | Brave WordPress plugin server side request forgery (SSRF) | 5.4CNA v3.1 | 0.3% | 2024-03-29 | Fix |
| CVE-2024-30452 | Landing Page Builder WordPress plugin cross-site scripting (XSS) | 5.9CNA v3.1 | 0.4% | 2024-03-29 | Fix |
| CVE-2024-30451 | Geo Controller WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.4% | 2024-03-29 | Fix |
| CVE-2024-30450 | OpenStreetMap for Gutenberg and WPBakery Page Builder WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.4% | 2024-03-29 | Fix |
| CVE-2024-30449 | Booking Activities WordPress plugin cross-site scripting (XSS) | 7.1CNA v3.1 | 0.4% | 2024-03-29 | Fix |
| CVE-2024-30448 | Slider by Supsystic WordPress plugin cross-site scripting (XSS) | 5.9CNA v3.1 | 0.4% | 2024-03-29 | Fix |
| CVE-2024-30447 | Creative Image Slider WordPress plugin cross-site scripting (XSS) | 7.1CNA v3.1 | 0.4% | 2024-03-29 | Fix |
| CVE-2024-30446 | CRM Perks Forms WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.3% | 2024-03-29 | Fix |
| CVE-2024-30445 | Web Icons WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.4% | 2024-03-29 | Fix |
| CVE-2024-30444 | WordPress Page Builder Zion Builder plugin cross-site scripting (XSS) | 5.9CNA v3.1 | 0.4% | 2024-03-29 | Fix |
| CVE-2024-30443 | GS Testimonial Slider WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.4% | 2024-03-29 | Fix |
| CVE-2024-30442 | Bold Page Builder WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.3% | 2024-03-29 | Fix |
| CVE-2024-30441 | PickPlugins Post Grid reflected cross-site scripting | 7.1CNA v3.1 | 0.4% | 2024-03-29 | Fix |
| CVE-2024-30440 | Themify Event Post WordPress plugin cross-site scripting (XSS) | 5.9CNA v3.1 | 0.4% | 2024-03-29 | Fix |
| CVE-2024-30439 | BestWebSoft Limit Attempts by BestWebSoft reflected cross-site scripting | 7.1CNA v3.1 | 0.4% | 2024-03-29 | Fix |
| CVE-2024-30438 | Print Page block WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.4% | 2024-03-29 | Fix |
| CVE-2024-30437 | Webinar and Video Conference with Jitsi Meet WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.4% | 2024-03-29 | Fix |
| CVE-2024-30436 | Collectchat stored cross-site scripting | 6.5CNA v3.1 | 0.3% | 2024-03-29 | Fix |
| CVE-2024-30435 | Nexter Blocks WordPress plugin reflected cross-site scripting (XSS) | 7.1CNA v3.1 | 0.4% | 2024-03-29 | Fix |
| CVE-2024-30434 | WP-CRM System WordPress plugin cross-site scripting (XSS) | 5.9CNA v3.1 | 0.4% | 2024-03-29 | Fix |
| CVE-2024-30433 | MultiVendorX Marketplace WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.4% | 2024-03-29 | Fix |
| CVE-2024-30432 | B Slider WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.3% | 2024-03-29 | Fix |
| CVE-2024-30431 | Mang Board WP WordPress plugin reflected cross-site scripting (XSS) | 7.1CNA v3.1 | 0.4% | 2024-03-29 | Fix |
| CVE-2024-30430 | FluentCRM WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.4% | 2024-03-29 | Fix |
| CVE-2024-30429 | wp-forecast WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.3% | 2024-03-29 | Fix |
| CVE-2024-30428 | Contest Gallery WordPress plugin reflected cross-site scripting (XSS) | 6.1NVD v3.1 | 0.4% | 2024-03-29 | Fix |
| CVE-2024-30427 | Spiffy Calendar WordPress plugin cross-site scripting (XSS) | 6.1v3.1 | 0.4% | 2024-03-29 | Fix |
| CVE-2024-30426 | Hash Elements WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.3% | 2024-03-29 | Fix |
| CVE-2024-30425 | Beaver Builder WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.3% | 2024-03-29 | Fix |
| CVE-2024-30423 | Better Elementor Addons WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.3% | 2024-03-29 | Fix |
| CVE-2024-30247 | Command injection as root in NextCloudPi web panel | 10.0CNA v3.1 | 2.1% | 2024-03-29 | Fix |
| CVE-2024-30246 | Tuleap deleting or moving an artifact can delete values from unrelated artifacts | 7.6CNA v3.1 | 0.6% | 2024-03-29 | Fix |
| CVE-2024-29904 | CodeIgniter4 Language class DoS | 7.5CNA v3.1 | 0.8% | 2024-03-29 | Fix |
| CVE-2024-29901 | @workos-inc/authkit-nextjs session replay vulnerability | 4.8CNA v3.1 | 0.7% | 2024-03-29 | Fix |
| CVE-2024-29900 | @electron/packager's build process memory potentially leaked into final executable | 7.5CNA v3.1 | 0.6% | 2024-03-29 | Fix |
| CVE-2024-29893 | argoproj argo-cd uncontrolled resource consumption vulnerability in ArgoCD's repo server | 6.5CNA v3.1 | 1.0% | 2024-03-29 | Fix |
| CVE-2024-29890 | datalens-tech datalens remote code execution in datalens-ui | 8.8CNA v3.1 | 0.8% | 2024-03-29 | Fix |
| CVE-2024-29686 | Winter CMS server-side template injection (SSTI) | 7.2CISA ADP v3.1 | 1.8% | 2024-03-29 | Exploit code |
| CVE-2024-29667 | Tongtianxing Technology Co SQL injection | 9.8CISA ADP v3.1 | 0.6% | 2024-03-29 | |
| CVE-2024-29640 | Aliyundrive-webdav vulnerable to command injection | 9.8CISA ADP v3.1 | 1.2% | 2024-03-29 | |
| CVE-2024-29202 | JumpServer vulnerable to Jinja2 template injection in Ansible leads to RCE in Celery | 10.0CNA v3.1 | 5.9% | 2024-03-29 | |
| CVE-2024-29201 | JumpServer's insecure Ansible playbook validation leads to RCE in Celery | 10.0CNA v3.1 | 5.9% | 2024-03-29 | |
| CVE-2024-29024 | JumpServer Direct Object Reference (IDOR) vulnerability in File Manager Bulk Transfer Functionality | 4.6CNA v3.1 | 0.2% | 2024-03-29 | Fix |
| CVE-2024-29020 | FIT2CLOUD JumpServer playbook files insecure direct object reference | 4.6CNA v3.1 | 0.3% | 2024-03-29 | Fix |
| CVE-2024-28960 | Arm Mbed Crypto improper access control | 8.2CISA ADP v3.1 | 0.8% | 2024-03-29 | Fix |
| CVE-2024-28867 | Swift Prometheus injection | 5.9CNA v3.1 | 0.6% | 2024-03-29 | Fix |
| CVE-2024-28405 | SEMCMS improper access control | 7.2CISA ADP v3.1 | 0.8% | 2024-03-29 | |
| CVE-2024-27619 | Dlink Dir-3040us A1 1.20b03a hotfix is vulnerable to Buffer Overflow. Any user having read/write access to ftp server can write directly to ram causing buffer overflow if file or files uploaded are greater than available ram. Ftp server allows change of directory to root which is one level up than r | 7.3CISA ADP v3.1 | 0.8% | 2024-03-29 | Exploit code |
| CVE-2024-25944 | Dell OpenManage Enterprise relative path traversal | 5.7CNA v3.1 | 0.8% | 2024-03-29 | Fix |
| CVE-2024-23539 | Apache Fineract SQL command improper neutralization | 8.3CNA v3.1 | 1.5% | 2024-03-29 | Fix |
| CVE-2024-23538 | Apache Fineract SQL command improper neutralization | 9.9CNA v3.1 | 1.3% | 2024-03-29 | Fix |
| CVE-2024-23537 | Apache Fineract improper privilege management | 8.4CNA v3.1 | 1.1% | 2024-03-29 | Fix |
| CVE-2024-23449 | Elasticsearch uncaught exception | 4.3CNA v3.1 | 0.7% | 2024-03-29 | Fix |
| CVE-2024-3094 | Xz: Malicious code in distributed source | 10.0NVD v3.1 | 90.9% | 2024-03-29 | Exploit codeFix |
| CVE-2024-3081 | EasyCorp EasyAdmin Autocomplete autocomplete.js cross-site scripting | 5.4v3.1 | 0.5% | 2024-03-29 | Fix |
| CVE-2024-3078 | Qdrant Full Snapshot REST API snapshots.rs path traversal | 9.8v3.1 | 0.9% | 2024-03-29 | Fix |
| CVE-2024-3077 | zephyrproject-rtos Zephyr Bluetooth: Integer underflow in gatt_find_info_rsp | 6.8CNA v3.1 | 0.5% | 2024-03-29 | |
| CVE-2024-3061 | HUSKY Products Filter Professional for WooCommerce WordPress plugin local file inclusion | 7.2v3.1 | 0.8% | 2024-03-29 | Fix |
| CVE-2024-2970 | News Wall WordPress plugin cross-site request forgery to plugin settings update | 4.3CNA v3.1 | 0.2% | 2024-03-29 | |
| CVE-2024-2969 | WP-Eggdrop WordPress plugin cross-site request forgery to settings update | 5.4CNA v3.1 | 0.2% | 2024-03-29 | |
| CVE-2024-2968 | WP-Eggdrop WordPress plugin authenticated (Admin+) stored cross-site scripting | 4.8v3.1 | 0.3% | 2024-03-29 | |
| CVE-2024-2964 | Pocket News Generator WordPress plugin cross-site request forgery to settings update | 4.3v3.1 | 0.2% | 2024-03-29 | |
| CVE-2024-2963 | Pocket News Generator WordPress plugin authenticated (Admin+) stored cross-site scripting | 4.8v3.1 | 0.3% | 2024-03-29 | |
| CVE-2024-2936 | Sydney Toolbox WordPress plugin authenticated (Contributor+) stored cross-site scripting via _id | 5.4v3.1 | 0.3% | 2024-03-29 | Fix |
| CVE-2024-2848 | Responsive WordPress theme missing authorization to HTML injection | 7.5CNA v3.1 | 0.7% | 2024-03-29 | Fix |
| CVE-2024-2844 | Easy Appointments WordPress plugin insufficient authorization | 4.3CNA v3.1 | 0.4% | 2024-03-29 | Fix |
| CVE-2024-2842 | Easy Appointments WordPress plugin authenticated (Contributor+) stored cross-site scripting | 5.4v3.1 | 0.3% | 2024-03-29 | Fix |
| CVE-2024-2841 | Otter Blocks WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.3% | 2024-03-29 | Fix |
| CVE-2024-2476 | OceanWP WordPress theme missing authorization sensitive information exposure | 4.3CNA v3.1 | 0.4% | 2024-03-29 | Fix |
| CVE-2024-2475 | Media Library Assistant WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.4% | 2024-03-29 | Fix |
| CVE-2024-2411 | MasterStudy LMS WordPress plugin unauthenticated local file inclusion via modal | 9.8CNA v3.1 | 1.5% | 2024-03-29 | Fix |
| CVE-2024-2409 | MasterStudy LMS WordPress plugin unauthenticated privilege escalation | 9.8CNA v3.1 | 0.8% | 2024-03-29 | Fix |
| CVE-2024-2280 | Better Elementor Addons WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.4% | 2024-03-29 | Fix |
| CVE-2024-2250 | 130+ Widgets WordPress plugin stored cross-site scripting | 6.4CNA v3.1 | 0.3% | 2024-03-29 | Fix |
| CVE-2024-2116 | Christmas Greetings WordPress plugin reflected cross-site scripting | 6.1CNA v3.1 | 0.5% | 2024-03-29 | Fix |
| CVE-2024-2113 | Ninja Forms Contact Form WordPress plugin cross-site request forgery | 4.3v3.1 | 0.2% | 2024-03-29 | Fix |
| CVE-2024-2108 | Ninja Forms Contact Form WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.3% | 2024-03-29 | Fix |
| CVE-2024-1872 | Button WordPress plugin authenticated (Contributor+) PHP object injection in button_shortcode | 8.8CNA v3.1 | 0.9% | 2024-03-29 | Fix |
| CVE-2024-1858 | Lightbox slider Responsive Lightbox Gallery WordPress plugin PHP object injection | 5.4CNA v3.1 | 0.5% | 2024-03-29 | Fix |
| CVE-2024-1729 | Gradio apps vulnerable to timing attacks to guess password | 5.9CNA v3.0 | 0.5% | 2024-03-29 | Fix |
| CVE-2024-0956 | WP ERP WordPress plugin authenticated (AccountingManager+) SQL injection | 4.9CNA v3.1 | 0.5% | 2024-03-29 | Fix |
| CVE-2024-0913 | WP ERP WordPress plugin authenticated (Accounting Manager+) SQL injection | 7.2CNA v3.1 | 0.6% | 2024-03-29 | Fix |
| CVE-2024-0609 | WP ERP WordPress plugin stored cross-site scripting | 6.1NVD v3.1 | 0.5% | 2024-03-29 | Fix |
| CVE-2024-0608 | WP ERP WordPress plugin SQL injection | 6.5CNA v3.1 | 0.5% | 2024-03-29 | Fix |
| CVE-2024-31140 | JetBrains TeamCity tools installation vulnerability | 4.1CNA v3.1 | 0.4% | 2024-03-28 | Fix |
| CVE-2024-31139 | JetBrains TeamCity XML external entity injection | 5.9CNA v3.1 | 0.5% | 2024-03-28 | Fix |
| CVE-2024-31138 | JetBrains TeamCity cross-site scripting | 4.6CNA v3.1 | 74.5% | 2024-03-28 | Fix |
| CVE-2024-31137 | JetBrains TeamCity cross-site scripting | 6.8CNA v3.1 | 0.4% | 2024-03-28 | Fix |
| CVE-2024-31136 | In JetBrains TeamCity before 2024.03 2FA could be bypassed by providing a special URL parameter | 7.4CNA v3.1 | 0.5% | 2024-03-28 | Fix |
| CVE-2024-31135 | JetBrains TeamCity open redirect | 6.1CNA v3.1 | 0.5% | 2024-03-28 | Fix |
| CVE-2024-31134 | JetBrains TeamCity incorrect authorization | 6.5CNA v3.1 | 0.4% | 2024-03-28 | Fix |
| CVE-2024-31065 | Munyweki Insurance Management System Insurance Mangement System v.1.0.0 and cross-site scripting | 6.1CISA ADP v3.1 | 0.8% | 2024-03-28 | |
| CVE-2024-31064 | Munyweki Insurance Management System Insurance Mangement System v.1.0.0 and cross-site scripting | 6.1CISA ADP v3.1 | 0.7% | 2024-03-28 | |
| CVE-2024-31063 | Munyweki Insurance Management System Insurance Mangement System v.1.0.0 and cross-site scripting | 6.4CISA ADP v3.1 | 0.9% | 2024-03-28 | |
| CVE-2024-31062 | Munyweki Insurance Management System Insurance Mangement System v.1.0.0 and cross-site scripting | 6.3CISA ADP v3.1 | 0.8% | 2024-03-28 | |
| CVE-2024-31061 | Munyweki Insurance Management System Insurance Mangement System v.1.0.0 and cross-site scripting | 6.1CISA ADP v3.1 | 0.9% | 2024-03-28 | |
| CVE-2024-30612 | Tenda AC10U stack-based buffer overflow | 8.1CISA ADP v3.1 | 0.7% | 2024-03-28 | |
| CVE-2024-30607 | Tenda FH1203 stack-based buffer overflow | 8.0CISA ADP v3.1 | 0.7% | 2024-03-28 | |
| CVE-2024-30606 | Tenda FH1203 stack-based buffer overflow | 8.0CISA ADP v3.1 | 0.7% | 2024-03-28 | |
| CVE-2024-30604 | Tenda FH1203 out-of-bounds read | 7.5CISA ADP v3.1 | 0.7% | 2024-03-28 | |
| CVE-2024-30603 | Tenda FH1203 stack-based buffer overflow | 6.5CISA ADP v3.1 | 0.5% | 2024-03-28 | |
| CVE-2024-30602 | Tenda FH1203 buffer overflow | 9.8CISA ADP v3.1 | 0.7% | 2024-03-28 | |
| CVE-2024-30601 | Tenda FH1203 stack-based buffer overflow | 8.0CISA ADP v3.1 | 0.7% | 2024-03-28 | |
| CVE-2024-30600 | Tenda FH1203 stack-based buffer overflow | 8.0CISA ADP v3.1 | 0.7% | 2024-03-28 | |
| CVE-2024-30599 | Tenda FH1203 stack-based buffer overflow | 8.8CISA ADP v3.1 | 0.7% | 2024-03-28 | |
| CVE-2024-30598 | Tenda FH1203 stack-based buffer overflow | 6.5CISA ADP v3.1 | 0.5% | 2024-03-28 | |
| CVE-2024-30597 | Tenda FH1203 stack-based buffer overflow | 6.5CISA ADP v3.1 | 0.5% | 2024-03-28 | |
| CVE-2024-30596 | Tenda FH1202 out-of-bounds read | 9.8CISA ADP v3.1 | 0.9% | 2024-03-28 | |
| CVE-2024-30595 | Tenda FH1202 stack-based buffer overflow | 9.8CISA ADP v3.1 | 0.8% | 2024-03-28 | |
| CVE-2024-30594 | Tenda FH1202 stack-based buffer overflow | 6.5CISA ADP v3.1 | 0.5% | 2024-03-28 | |
| CVE-2024-30593 | Tenda FH1202 buffer overflow | 9.8CISA ADP v3.1 | 0.8% | 2024-03-28 | |
| CVE-2024-30592 | Tenda FH1202 stack-based buffer overflow | 8.0CISA ADP v3.1 | 0.7% | 2024-03-28 | |
| CVE-2024-30591 | Tenda FH1202 stack-based buffer overflow | 8.8CISA ADP v3.1 | 0.7% | 2024-03-28 | |
| CVE-2024-30590 | Tenda FH1202 stack-based buffer overflow | 6.5CISA ADP v3.1 | 0.5% | 2024-03-28 | |
| CVE-2024-30589 | Tenda FH1202 stack-based buffer overflow | 9.8CISA ADP v3.1 | 0.7% | 2024-03-28 | |
| CVE-2024-30588 | Tenda FH1202 stack-based buffer overflow | 4.3CISA ADP v3.1 | 0.4% | 2024-03-28 | |
| CVE-2024-30587 | Tenda FH1202 out-of-bounds read | 9.8CISA ADP v3.1 | 0.8% | 2024-03-28 | |
| CVE-2024-30586 | Tenda FH1202 stack-based buffer overflow | 6.5CISA ADP v3.1 | 0.5% | 2024-03-28 | |
| CVE-2024-30585 | Tenda FH1202 stack-based buffer overflow | 6.5CISA ADP v3.1 | 0.5% | 2024-03-28 | |
| CVE-2024-30584 | Tenda FH1202 buffer overflow | 9.8CISA ADP v3.1 | 0.9% | 2024-03-28 | |
| CVE-2024-30583 | Tenda FH1202 stack-based buffer overflow | 8.0CISA ADP v3.1 | 0.7% | 2024-03-28 | |
| CVE-2024-30422 | Elementor Addon Elements WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.3% | 2024-03-28 | Fix |
| CVE-2024-30421 | Events Manager WordPress plugin cross-site request forgery (CSRF) | 4.3CNA v3.1 | 0.2% | 2024-03-28 | Fix |
| CVE-2024-30245 | DecaLog WordPress plugin SQL injection | 7.6CNA v3.1 | 0.6% | 2024-03-28 | Fix |
| CVE-2024-30244 | Church Admin WordPress plugin SQL injection via shortcode | 8.8v3.1 | 0.7% | 2024-03-28 | Fix |
| CVE-2024-30243 | Tooltips WordPress plugin Auth. SQL injection | 8.5CNA v3.1 | 0.5% | 2024-03-28 | Fix |
| CVE-2024-30242 | Contact Form to Any API WordPress plugin Auth. SQL injection | 8.5CNA v3.1 | 0.5% | 2024-03-28 | Fix |
| CVE-2024-30241 | ProfileGrid User Profiles, Memberships, Groups and Communities WordPress plugin SQL injection | 8.8v3.1 | 0.9% | 2024-03-28 | Fix |
| CVE-2024-30240 | Calendarista WordPress plugin SQL injection | 8.5CNA v3.1 | 0.5% | 2024-03-28 | Fix |
| CVE-2024-30239 | Zoho Campaigns WordPress plugin SQL injection | 8.5CNA v3.1 | 0.5% | 2024-03-28 | Fix |
| CVE-2024-30237 | Slider by Supsystic WordPress plugin SQL injection | 7.6CNA v3.1 | 0.5% | 2024-03-28 | Fix |
| CVE-2024-30236 | Contest Gallery WordPress plugin SQL injection | 9.9v3.1 | 0.6% | 2024-03-28 | Fix |
| CVE-2024-30230 | PDF Invoices and Packing Slips For WooCommerce WordPress plugin PHP object injection | 8.8v3.1 | 0.6% | 2024-03-28 | Fix |
| CVE-2024-30229 | stellarwp GiveWP deserialization of untrusted data | 7.2v3.1 | 0.6% | 2024-03-28 | Fix |
| CVE-2024-30228 | Hercules Core WordPress plugin Auth. PHP object injection | 9.9CNA v3.1 | 0.7% | 2024-03-28 | Fix |
| CVE-2024-30227 | Geo Controller WordPress plugin PHP object injection | 9.0CNA v3.1 | 0.6% | 2024-03-28 | Fix |
| CVE-2024-30226 | BetterDocs WordPress plugin unauthenticated PHP object injection | 9.0CNA v3.1 | 0.9% | 2024-03-28 | Fix |
| CVE-2024-30225 | WP Migrate WordPress plugin unauthenticated PHP object injection | 10.0CNA v3.1 | 0.7% | 2024-03-28 | Fix |
| CVE-2024-30224 | WholesaleX WordPress plugin unauthenticated PHP object injection | 9.8v3.1 | 0.7% | 2024-03-28 | Fix |
| CVE-2024-30223 | ARMember WordPress plugin unauthenticated PHP object injection | 9.8v3.1 | 0.6% | 2024-03-28 | Fix |
| CVE-2024-30222 | ARMember WordPress plugin PHP object injection | 8.8v3.1 | 0.6% | 2024-03-28 | Fix |
| CVE-2024-30221 | Sunshine Photo Cart WordPress plugin PHP object injection | 9.8v3.1 | 0.5% | 2024-03-28 | Fix |
| CVE-2024-30200 | BEAR WordPress plugin reflected cross-site scripting (XSS) | 6.1NVD v3.1 | 0.4% | 2024-03-28 | Fix |
| CVE-2024-29898 | Miraheze CreateWiki wiki request queue information disclosure | 4.9CNA v3.1 | 0.7% | 2024-03-28 | Fix |
| CVE-2024-29897 | CreateWiki Leak of suppressed wiki requests outside of `CreateWikiGlobalWiki` | 4.9CNA v3.1 | 0.7% | 2024-03-28 | |
| CVE-2024-29896 | KindSpells Astro-Shield Content-Security-Policy header generation injection | 7.5CNA v3.1 | 0.6% | 2024-03-28 | Fix |
| CVE-2024-29882 | SRS DOM XSS on JSONP callback | 7.2CNA v3.1 | 1.1% | 2024-03-28 | NucleiFix |
| CVE-2024-29489 | JerryScript null pointer dereference | 5.5CISA ADP v3.1 | 0.3% | 2024-03-28 | Fix |
| CVE-2024-29316 | Incorrect Access Control in NodeBB | 6.3CISA ADP v3.1 | 0.4% | 2024-03-28 | Fix |
| CVE-2024-29241 | Synology Surveillance Station System webapi component missing authorization | 9.9CNA v3.1 | 0.8% | 2024-03-28 | Fix |
| CVE-2024-29240 | Synology Surveillance Station LayoutSave webapi component missing authorization | 4.3CNA v3.1 | 0.7% | 2024-03-28 | Fix |
| CVE-2024-29239 | Synology Surveillance Station SQL command improper neutralization | 5.4CNA v3.1 | 0.6% | 2024-03-28 | Fix |
| CVE-2024-29238 | Synology Surveillance Station SQL command improper neutralization | 5.4CNA v3.1 | 0.6% | 2024-03-28 | Fix |
| CVE-2024-29237 | Synology Surveillance Station SQL command improper neutralization | 5.4CNA v3.1 | 0.6% | 2024-03-28 | Fix |
| CVE-2024-29236 | Synology Surveillance Station SQL command improper neutralization | 5.4CNA v3.1 | 0.6% | 2024-03-28 | Fix |
| CVE-2024-29235 | Synology Surveillance Station SQL command improper neutralization | 5.4CNA v3.1 | 0.6% | 2024-03-28 | Fix |
| CVE-2024-29234 | Synology Surveillance Station SQL command improper neutralization | 5.4CNA v3.1 | 0.6% | 2024-03-28 | Fix |
| CVE-2024-29233 | Synology Surveillance Station SQL command improper neutralization | 5.4CNA v3.1 | 0.6% | 2024-03-28 | Fix |
| CVE-2024-29232 | Synology Surveillance Station SQL command improper neutralization | 5.4CNA v3.1 | 0.6% | 2024-03-28 | Fix |
| CVE-2024-29231 | Synology Surveillance Station UserPrivilege.Enum webapi component improper array index validation | 5.4CNA v3.1 | 0.7% | 2024-03-28 | Fix |
| CVE-2024-29230 | Synology Surveillance Station SQL command improper neutralization | 5.4CNA v3.1 | 0.6% | 2024-03-28 | Fix |
| CVE-2024-29229 | Synology Surveillance Station GetLiveViewPath webapi component missing authorization | 7.7CNA v3.1 | 0.8% | 2024-03-28 | Fix |
| CVE-2024-29228 | Synology Surveillance Station GetStmUrlPath webapi component missing authorization | 7.7CNA v3.1 | 0.8% | 2024-03-28 | Fix |
| CVE-2024-29227 | Synology Surveillance Station SQL command improper neutralization | 5.4CNA v3.1 | 0.6% | 2024-03-28 | Fix |
| CVE-2024-29200 | kimai API returns timesheet entries a user should not be authorized to view | 6.8CNA v3.1 | 0.6% | 2024-03-28 | Fix |
| CVE-2024-29100 | AI Engine WordPress plugin arbitrary file upload | 7.2NVD v3.1 | 0.6% | 2024-03-28 | Fix |
| CVE-2024-29090 | AI Engine WordPress plugin server side request forgery (SSRF) | 6.8v3.1 | 0.9% | 2024-03-28 | Fix |
| CVE-2024-28714 | crmeb_java SQL injection | 8.1CISA ADP v3.1 | 0.8% | 2024-03-28 | |
| CVE-2024-28713 | mtons mblog unrestricted file upload | 9.8CISA ADP v3.1 | 1.3% | 2024-03-28 | |
| CVE-2024-28456 | Campcodes Online Marriage Registration System cross-site scripting | 5.4NVD v3.1 | 0.7% | 2024-03-28 | |
| CVE-2024-28109 | veraPDF-library potential XSLT injection vulnerability when using policy files | 8.1CNA v3.1 | 1.0% | 2024-03-28 | Fix |
| CVE-2024-28091 | Technicolor TC8715D managed_services_add.asp stored cross-site scripting | 6.1CISA ADP v3.1 | 0.4% | 2024-03-28 | |
| CVE-2024-28090 | Technicolor TC8715D dyn_dns.asp stored cross-site scripting | 5.4CISA ADP v3.1 | 3.6% | 2024-03-28 | |
| CVE-2024-28016 | NEC WG1800HP4 improper access control | 6.0CISA ADP v3.1 | 0.5% | 2024-03-28 | Fix |
| CVE-2024-28015 | NEC Aterm WG1800HP4 OS command vulnerability in NEC Corporation improper neutralization | 9.8CISA ADP v3.1 | 0.7% | 2024-03-28 | Fix |
| CVE-2024-28014 | NEC Aterm WG1800HP4 NEC Corporation stack-based buffer overflow | 9.8CISA ADP v3.1 | 0.7% | 2024-03-28 | Fix |
| CVE-2024-28013 | NEC Aterm WG1800HP4 NEC Corporation insufficient randomness | 5.3CISA ADP v3.1 | 0.4% | 2024-03-28 | Fix |
| CVE-2024-28012 | NEC Aterm WG1800HP4 NEC Corporation improper authentication | 9.8CISA ADP v3.1 | 0.7% | 2024-03-28 | Fix |
| CVE-2024-28011 | NEC Aterm WG1800HP4 NEC Corporation hidden functionality | 9.8CISA ADP v3.1 | 0.6% | 2024-03-28 | Fix |
| CVE-2024-28010 | NEC Aterm WG1800HP4 NEC Corporation hard-coded password | 9.8CISA ADP v3.1 | 0.6% | 2024-03-28 | Fix |
| CVE-2024-28009 | NEC Aterm WG1800HP4 NEC Corporation improper authentication | 9.8CISA ADP v3.1 | 0.7% | 2024-03-28 | Fix |
| CVE-2024-28008 | NEC Aterm WG1800HP4 NEC Corporation active debug code | 9.8CISA ADP v3.1 | 0.6% | 2024-03-28 | Fix |
| CVE-2024-28007 | NEC Aterm WG1800HP4 NEC Corporation improper authentication | 9.8CISA ADP v3.1 | 0.7% | 2024-03-28 | Fix |
| CVE-2024-28006 | NEC Aterm WG1800HP4 NEC Corporation improper authentication | 5.3CISA ADP v3.1 | 0.5% | 2024-03-28 | Fix |
| CVE-2024-28005 | NEC WG1800HP4 execution with unnecessary privileges | 4.7CISA ADP v3.1 | 0.5% | 2024-03-28 | Fix |
| CVE-2024-28004 | Colibri Page Builder WordPress plugin broken access control | 4.3v3.1 | 0.4% | 2024-03-28 | Fix |
| CVE-2024-28003 | Max Mega Menu WordPress plugin broken access control | 5.4CNA v3.1 | 0.3% | 2024-03-28 | Fix |
| CVE-2024-28002 | Cornerstone WordPress plugin reflected cross-site scripting (XSS) | 7.1CNA v3.1 | 0.4% | 2024-03-28 | Fix |
| CVE-2024-28001 | Favicon Rotator WordPress plugin reflected cross-site scripting (XSS) | 7.1CNA v3.1 | 0.4% | 2024-03-28 | Fix |
| CVE-2024-27999 | Preview E-mails for WooCommerce WordPress plugin reflected cross-site scripting (XSS) | 7.1CNA v3.1 | 0.4% | 2024-03-28 | Fix |
| CVE-2024-27775 | SysAid server-side request forgery (SSRF) | 7.2CNA v3.1 | 0.6% | 2024-03-28 | |
| CVE-2024-27719 | Rems FAQ Management System cross-site scripting | 6.1CISA ADP v3.1 | 0.5% | 2024-03-28 | |
| CVE-2024-25971 | Dell PowerProtect Data Manager XML external entity injection | 5.5CNA v3.1 | 0.6% | 2024-03-28 | Fix |
| CVE-2024-25963 | Dell PowerScale OneFS weak cryptographic algorithm | 5.9CNA v3.1 | 0.3% | 2024-03-28 | Fix |
| CVE-2024-25961 | Dell PowerScale OneFS improper privilege management | 6.0CNA v3.1 | 0.2% | 2024-03-28 | Fix |
| CVE-2024-25960 | Dell PowerScale OneFS cleartext transmission of sensitive information | 7.3CNA v3.1 | 0.1% | 2024-03-28 | Fix |
| CVE-2024-25959 | Dell PowerScale OneFS sensitive information in log files | 7.9CNA v3.1 | 0.2% | 2024-03-28 | Fix |
| CVE-2024-25955 | Dell Virtual Appliance (vApp) Manager OS command injection | 7.2CNA v3.1 | 1.4% | 2024-03-28 | Fix |
| CVE-2024-25954 | Dell PowerScale OneFS insufficient session expiration | 5.3CNA v3.1 | 0.6% | 2024-03-28 | Fix |
| CVE-2024-25953 | Dell PowerScale OneFS symlink following | 6.0CNA v3.1 | 0.2% | 2024-03-28 | Fix |
| CVE-2024-25952 | Dell PowerScale OneFS symlink following | 6.0CNA v3.1 | 0.2% | 2024-03-28 | Fix |
| CVE-2024-25946 | Dell Virtual Appliance (vApp) Manager OS command injection | 7.2CNA v3.1 | 1.4% | 2024-03-28 | Fix |
| CVE-2024-25924 | WP Testimonials WordPress plugin Auth. SQL injection | 7.6CNA v3.1 | 0.5% | 2024-03-28 | Fix |
| CVE-2024-25923 | Community by PeepSo WordPress plugin sensitive data exposure via Log file | 5.3CNA v3.1 | 0.4% | 2024-03-28 | Fix |
| CVE-2024-25599 | Seriously Simple Podcasting WordPress plugin reflected cross-site scripting (XSS) | 6.1NVD v3.1 | 0.4% | 2024-03-28 | Fix |
| CVE-2024-25506 | Process Maker cross-site scripting | 6.5CISA ADP v3.1 | 0.3% | 2024-03-28 | |
| CVE-2024-24407 | Mayuri K Best Courier Management System SQL injection | 5.3CISA ADP v3.1 | 0.6% | 2024-03-28 | |
| CVE-2024-23727 | Kami Vision YI Smart WebViewActivity component code injection | 8.4CISA ADP v3.1 | 0.5% | 2024-03-28 | Exploit code |
| CVE-2024-23500 | Kadence Blocks WordPress plugin server side request forgery (SSRF) | 6.5NVD v3.1 | 0.5% | 2024-03-28 | Fix |
| CVE-2024-22138 | Seraphinite Accelerator WordPress plugin sensitive data exposure via Log file | 5.3CNA v3.1 | 0.4% | 2024-03-28 | Fix |
| CVE-2024-3042 | SourceCodester Simple Subscription Website manage_user.php SQL injection | 9.1v3.1 | 0.6% | 2024-03-28 | |
| CVE-2024-3041 | Netentsec NS-ASG Application Security Gateway listloginfo.php SQL injection | 9.8v3.1 | 0.8% | 2024-03-28 | |
| CVE-2024-3040 | Netentsec NS-ASG Application Security Gateway list_crl_conf SQL injection | 9.8v3.1 | 0.8% | 2024-03-28 | |
| CVE-2024-3039 | Shanghai Brad Technology BladeX API export-user SQL injection | 9.8v3.1 | 0.7% | 2024-03-28 | |
| CVE-2024-3024 | appneta tcpreplay get.c get_layer4_v6 heap-based overflow | 7.8v3.1 | 0.4% | 2024-03-28 | Fix |
| CVE-2024-3019 | Red Hat Enterprise Linux 8 pcp: Exposure of the redis server backend allows remote command execution | 8.8CNA v3.1 | 1.0% | 2024-03-28 | Fix |
| CVE-2024-3015 | SourceCodester Simple Subscription Website manage_plan.php SQL injection | 8.8v3.1 | 0.7% | 2024-03-28 | |
| CVE-2024-3014 | SourceCodester Simple Subscription Website Actions.php SQL injection | 8.8v3.1 | 0.7% | 2024-03-28 | |
| CVE-2024-3013 | Teledyne Flir AX8 User Registration test_login.php improper authorization | 8.8v3.1 | 23.0% | 2024-03-28 | Emerging Threats |
| CVE-2024-3012 | Tenda FH1205 GetParentControlInfo stack-based overflow | 8.8v3.1 | 1.8% | 2024-03-28 | |
| CVE-2024-3011 | Tenda FH1205 QuickIndex formQuickIndex stack-based overflow | 8.8v3.1 | 1.8% | 2024-03-28 | |
| CVE-2024-3010 | Tenda FH1205 setcfm formSetCfm stack-based overflow | 8.8v3.1 | 1.8% | 2024-03-28 | |
| CVE-2024-3009 | Tenda FH1205 WriteFacMac formWriteFacMac command injection | 8.8v3.1 | 7.9% | 2024-03-28 | |
| CVE-2024-2947 | Red Hat Enterprise Linux 8 cockpit: Command injection when deleting a sosreport with a crafted name | 7.3CNA v3.1 | 1.2% | 2024-03-28 | Fix |
| CVE-2024-2890 | Tumult Hype Animations WordPress plugin arbitrary file upload | 9.1CNA v3.1 | 0.7% | 2024-03-28 | Fix |
| CVE-2024-2818 | Allocation of resources without limits or throttling in GitLab | 4.3CNA v3.1 | 0.9% | 2024-03-28 | Fix |
| CVE-2024-2111 | Events Manager WordPress plugin authenticated (Contributor+) stored cross-site scripting | 5.4v3.1 | 0.3% | 2024-03-28 | Fix |
| CVE-2024-2110 | Events Manager WordPress plugin cross-site request forgery | 4.3CNA v3.1 | 0.2% | 2024-03-28 | Fix |
| CVE-2024-2091 | Elementor Addon Elements WordPress plugin authenticated (Contributor+) stored cross-site scripting | 4.6v3.1 | 0.5% | 2024-03-28 | Fix |
| CVE-2024-1770 | Meta Tag Manager WordPress plugin authenticated (Subscriber+) PHP object injection | 8.8CNA v3.1 | 0.8% | 2024-03-28 | Fix |
| CVE-2024-0980 | Okta Verify path traversal | 7.1CISA ADP v3.1 | 0.5% | 2024-03-28 | Fix |
| CVE-2024-0677 | Pz-LinkCard WordPress plugin Contributor+ SSRF | 5.1CISA ADP v3.1 | 0.3% | 2024-03-28 | Fix |
| CVE-2024-0673 | Pz-LinkCard WordPress plugin Admin+ stored XSS | 6.1CISA ADP v3.1 | 0.5% | 2024-03-28 | Fix |
| CVE-2024-0672 | Pz-LinkCard WordPress plugin reflected XSS | 7.1CISA ADP v3.1 | 0.5% | 2024-03-28 | Fix |
| CVE-2024-0259 | Privilege escalation in Robot Schedule Enterprise Agent for Windows prior to | 7.3CNA v3.1 | 0.3% | 2024-03-28 | Fix |
| CVE-2024-30238 | Photos and Files Contest Gallery WordPress plugin SQL injection | 8.8v3.1 | 0.6% | 2024-03-27 | Fix |
| CVE-2024-30201 | WP Smart Import WordPress plugin reflected cross-site scripting (XSS) | 6.1NVD v3.1 | 0.4% | 2024-03-27 | Fix |
| CVE-2024-30199 | WP-Lister Lite for Amazon WordPress plugin reflected cross-site scripting (XSS) | 7.1CNA v3.1 | 0.4% | 2024-03-27 | Fix |
| CVE-2024-30198 | Buddyforms WordPress plugin reflected cross-site scripting (XSS) | 6.1v3.1 | 0.3% | 2024-03-27 | Fix |
| CVE-2024-30197 | Church Admin WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.3% | 2024-03-27 | Fix |
| CVE-2024-30196 | Easy Social Share Buttons WordPress plugin reflected cross-site scripting (XSS) | 7.1CNA v3.1 | 0.4% | 2024-03-27 | Fix |
| CVE-2024-30195 | New RoyalSlider WordPress plugin reflected cross-site scripting (XSS) | 7.1CNA v3.1 | 0.4% | 2024-03-27 | Fix |
| CVE-2024-30194 | Sunshine Photo Cart WordPress plugin reflected cross-site scripting (XSS) | 6.1NVD v3.1 | 0.7% | 2024-03-27 | NucleiFix |
| CVE-2024-30193 | Church Admin WordPress plugin stored cross-site scripting (XSS) | 5.4v3.1 | 0.3% | 2024-03-27 | Fix |
| CVE-2024-30192 | Pinterest WordPress plugin cross-site scripting (XSS) | 5.9CISA ADP v3.1 | 0.3% | 2024-03-27 | Fix |
| CVE-2024-30186 | Prime Slider WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.3% | 2024-03-27 | Fix |
| CVE-2024-30185 | Element Pack Elementor Addons WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.3% | 2024-03-27 | Fix |
| CVE-2024-30184 | Popup Builder WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.4% | 2024-03-27 | Fix |
| CVE-2024-30183 | WPBakery Page Builder Addons by Livemesh WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.4% | 2024-03-27 | Fix |
| CVE-2024-30182 | HT Mega Absolute Addons For Elementor WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.4% | 2024-03-27 | Fix |
| CVE-2024-30181 | Locatoraid Store Locator WordPress plugin cross-site scripting (XSS) | 5.9CNA v3.1 | 0.4% | 2024-03-27 | Fix |
| CVE-2024-30180 | Easy Social Feed WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.3% | 2024-03-27 | Fix |
| CVE-2024-30179 | Bold Page Builder WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.4% | 2024-03-27 | Fix |
| CVE-2024-30178 | Simply Static WordPress plugin cross-site scripting (XSS) | 5.9CNA v3.1 | 0.3% | 2024-03-27 | Fix |
| CVE-2024-30177 | Exclusive Addons for Elementor WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.3% | 2024-03-27 | Fix |
| CVE-2024-29946 | Splunk Enterprise risky command safeguards bypass in Dashboard Examples Hub | 8.1v3.1 | 0.8% | 2024-03-27 | Fix |
| CVE-2024-29945 | Splunk Authentication token exposure in Debug Log in Splunk Enterprise | 7.2v3.1 | 1.0% | 2024-03-27 | Fix |
| CVE-2024-29936 | Image Hover Effects Elementor Addon WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.3% | 2024-03-27 | Fix |
| CVE-2024-29935 | Sina Extension for Elementor WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.3% | 2024-03-27 | Fix |
| CVE-2024-29934 | Piotnet Addons For Elementor WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.4% | 2024-03-27 | Fix |
| CVE-2024-29933 | Web Icons WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.3% | 2024-03-27 | Fix |
| CVE-2024-29932 | WordPress Meta Data and Taxonomies Filter (MDTF) plugin cross-site scripting (XSS) | 5.4v3.1 | 0.4% | 2024-03-27 | Fix |
| CVE-2024-29931 | WP Go Maps WordPress plugin reflected cross-site scripting (XSS) | 6.1NVD v3.1 | 0.8% | 2024-03-27 | NucleiFix |
| CVE-2024-29930 | Crypto Converter Widget WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.3% | 2024-03-27 | Fix |
| CVE-2024-29929 | WCFM WordPress plugin cross-site scripting (XSS) | 5.9CNA v3.1 | 0.4% | 2024-03-27 | Fix |
| CVE-2024-29928 | Advanced Sermons WordPress plugin reflected cross-site scripting (XSS) | 6.1NVD v3.1 | 0.4% | 2024-03-27 | Fix |
| CVE-2024-29927 | WishSuite WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.3% | 2024-03-27 | Fix |
| CVE-2024-29926 | WC Builder WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.3% | 2024-03-27 | Fix |
| CVE-2024-29925 | Post Grid, Slider and Carousel Ultimate WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.3% | 2024-03-27 | Fix |
| CVE-2024-29924 | Premium Packages WordPress plugin cross-site scripting (XSS) | 7.1CNA v3.1 | 0.4% | 2024-03-27 | Fix |
| CVE-2024-29923 | PropertyHive WordPress plugin reflected cross-site scripting (XSS) | 6.1NVD v3.1 | 0.4% | 2024-03-27 | Fix |
| CVE-2024-29922 | Slider Hero WordPress plugin cross-site scripting (XSS) | 5.9CNA v3.1 | 0.3% | 2024-03-27 | Fix |
| CVE-2024-29921 | Photo Gallery by Supsystic WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.3% | 2024-03-27 | Fix |
| CVE-2024-29920 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Moveaddons Move Addons for Elementor allows Stored XSS.This issue affects Move Addons for Elementor: from n/a through 1.2.9. | 5.4v3.1 | 0.3% | 2024-03-27 | Fix |
| CVE-2024-29919 | Photo Gallery by Ays WordPress plugin reflected cross-site scripting (XSS) | 7.1CNA v3.1 | 0.4% | 2024-03-27 | Fix |
| CVE-2024-29918 | Survey Maker WordPress plugin reflected cross-site scripting (XSS) | 5.4NVD v3.1 | 0.4% | 2024-03-27 | Fix |
| CVE-2024-29917 | Compact WP Audio Player WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.3% | 2024-03-27 | Fix |
| CVE-2024-29915 | Podlove Podcast Publisher WordPress plugin reflected cross-site scripting (XSS) | 6.1NVD v3.1 | 0.4% | 2024-03-27 | Fix |
| CVE-2024-29914 | Stratum Elementor Widgets WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.3% | 2024-03-27 | Fix |
| CVE-2024-29913 | Tutor LMS Elementor Addons WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.3% | 2024-03-27 | Fix |
| CVE-2024-29912 | iCalendrier WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.3% | 2024-03-27 | Fix |
| CVE-2024-29911 | Master Addons for Elementor WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.3% | 2024-03-27 | Fix |
| CVE-2024-29910 | Dropdown Multisite selector WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.3% | 2024-03-27 | Fix |
| CVE-2024-29909 | Travelers' Map WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.3% | 2024-03-27 | Fix |
| CVE-2024-29908 | Co-marquage service-public.fr WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.3% | 2024-03-27 | Fix |
| CVE-2024-29907 | SEO Backlink Monitor WordPress plugin cross-site scripting (XSS) | 7.1CNA v3.1 | 0.4% | 2024-03-27 | Fix |
| CVE-2024-29906 | MDTF Meta Data and Taxonomies Filter WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.3% | 2024-03-27 | Fix |
| CVE-2024-29892 | ZITADEL action claim handling incorrect authorization | 6.1CNA v3.1 | 0.8% | 2024-03-27 | Fix |
| CVE-2024-29891 | ZITADEL Improper Content-Type Validation leads to account takeover via stored XSS + CSP bypass | 8.7CNA v3.1 | 0.8% | 2024-03-27 | Fix |
| CVE-2024-29888 | Saleor click-and-collect delivery information disclosure | 4.2CNA v3.1 | 0.5% | 2024-03-27 | Fix |
| CVE-2024-29887 | Serverpod client accepts any certificate | 7.4CNA v3.1 | 0.3% | 2024-03-27 | Fix |
| CVE-2024-29886 | serverpod improved security for stored password hashes | 5.3CNA v3.1 | 0.3% | 2024-03-27 | Fix |
| CVE-2024-29820 | PDF Builder for WPForms WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.3% | 2024-03-27 | Fix |
| CVE-2024-29819 | WPFront Notification Bar WordPress plugin cross-site scripting (XSS) | 5.9CNA v3.1 | 0.3% | 2024-03-27 | Fix |
| CVE-2024-29818 | WP Poll Maker WordPress plugin authenticated cross-site scripting (XSS) | 5.9CNA v3.1 | 0.4% | 2024-03-27 | Fix |
| CVE-2024-29817 | affiliate-toolkit WordPress Affiliate plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.3% | 2024-03-27 | Fix |
| CVE-2024-29816 | Woo Viet WordPress plugin cross-site scripting (XSS) | 5.9CNA v3.1 | 0.4% | 2024-03-27 | Fix |
| CVE-2024-29815 | WP Change Email Sender WordPress plugin cross-site scripting (XSS) | 5.9CNA v3.1 | 0.4% | 2024-03-27 | Fix |
| CVE-2024-29814 | Exchange Rates Widget WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.3% | 2024-03-27 | Fix |
| CVE-2024-29813 | CartFlows WordPress plugin cross-site scripting (XSS) | 5.9CNA v3.1 | 0.4% | 2024-03-27 | Fix |
| CVE-2024-29812 | ReviewX WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.4% | 2024-03-27 | Fix |
| CVE-2024-29811 | Radio Player WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.3% | 2024-03-27 | Fix |
| CVE-2024-29807 | DearFlip WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.3% | 2024-03-27 | Fix |
| CVE-2024-29806 | ReDi Restaurant Reservation WordPress plugin reflected cross-site scripting (XSS) | 6.1NVD v3.1 | 0.4% | 2024-03-27 | Fix |
| CVE-2024-29805 | Shipping with Venipak for WooCommerce WordPress plugin reflected cross-site scripting (XSS) | 6.1NVD v3.1 | 0.4% | 2024-03-27 | Fix |
| CVE-2024-29804 | Fancy Comments WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.3% | 2024-03-27 | Fix |
| CVE-2024-29803 | FlatPM WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.3% | 2024-03-27 | Fix |
| CVE-2024-29802 | Football Pool WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.4% | 2024-03-27 | Fix |
| CVE-2024-29801 | Fullscreen Galleria WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.4% | 2024-03-27 | Fix |
| CVE-2024-29799 | WP Fast Total Search WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.4% | 2024-03-27 | Fix |
| CVE-2024-29798 | Gratisfaction WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.4% | 2024-03-27 | Fix |
| CVE-2024-29797 | Grid Shortcodes WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.4% | 2024-03-27 | Fix |
| CVE-2024-29796 | Hot Random Image WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.3% | 2024-03-27 | Fix |
| CVE-2024-29795 | InterfaceLab Media Cloud stored cross-site scripting | 6.5CNA v3.1 | 0.4% | 2024-03-27 | Fix |
| CVE-2024-29794 | Conversios.io WordPress plugin reflected cross-site scripting (XSS) | 7.1CNA v3.1 | 0.4% | 2024-03-27 | Fix |
| CVE-2024-29793 | MailChimp Forms by MailMunch WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.4% | 2024-03-27 | Fix |
| CVE-2024-29792 | Unlimited Elements for Elementor WordPress plugin reflected cross-site scripting (XSS) | 6.1NVD v3.1 | 0.7% | 2024-03-27 | NucleiFix |
| CVE-2024-29791 | Bulk NoIndex and NoFollow Toolkit WordPress plugin reflected cross-site scripting (XSS) | 7.1CNA v3.1 | 0.4% | 2024-03-27 | Fix |
| CVE-2024-29790 | Squirrly SEO WordPress plugin reflected cross-site scripting (XSS) | 6.1NVD v3.1 | 0.4% | 2024-03-27 | Fix |
| CVE-2024-29789 | OneClick Chat to Order WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.4% | 2024-03-27 | Fix |
| CVE-2024-29788 | Podlove Web Player WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.3% | 2024-03-27 | Fix |
| CVE-2024-29777 | Forminator WordPress plugin reflected cross-site scripting (XSS) | 6.1NVD v3.1 | 0.4% | 2024-03-27 | Fix |
| CVE-2024-29776 | EventPrime WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.4% | 2024-03-27 | Fix |
| CVE-2024-29775 | Frontend Dashboard WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.4% | 2024-03-27 | Fix |
| CVE-2024-29774 | WP Directory Kit WordPress plugin reflected cross-site scripting (XSS) | 6.1NVD v3.1 | 0.4% | 2024-03-27 | Fix |
| CVE-2024-29773 | BizPrint WordPress plugin CSRF to XSS | 7.1CNA v3.1 | 0.2% | 2024-03-27 | Fix |
| CVE-2024-29772 | MyBookTable Bookstore WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.4% | 2024-03-27 | Fix |
| CVE-2024-29771 | Dracula Dark Mode WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.3% | 2024-03-27 | Fix |
| CVE-2024-29770 | Pretty Links WordPress plugin reflected cross-site scripting (XSS) | 7.1CNA v3.1 | 0.4% | 2024-03-27 | Fix |
| CVE-2024-29769 | Portfolio Gallery WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.4% | 2024-03-27 | Fix |
| CVE-2024-29768 | Astra WordPress theme cross-site scripting (XSS) | 5.9CNA v3.1 | 0.4% | 2024-03-27 | Fix |
| CVE-2024-29767 | Doneren met Mollie WordPress plugin cross-site scripting (XSS) | 7.1CNA v3.1 | 0.4% | 2024-03-27 | Fix |
| CVE-2024-29766 | StreamWeasels Twitch Integration WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.4% | 2024-03-27 | Fix |
| CVE-2024-29765 | Aparat for WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.3% | 2024-03-27 | Fix |
| CVE-2024-29764 | Molongui WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.4% | 2024-03-27 | Fix |
| CVE-2024-29763 | MDTF Meta Data and Taxonomies Filter WordPress plugin cross-site scripting (XSS) | 6.1NVD v3.1 | 0.4% | 2024-03-27 | Fix |
| CVE-2024-29762 | Off-Canvas Sidebars and Menus (Slidebars) WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.4% | 2024-03-27 | Fix |
| CVE-2024-29761 | WP Post Disclaimer WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.4% | 2024-03-27 | Fix |
| CVE-2024-29760 | Booster for WooCommerce WordPress plugin reflected cross-site scripting (XSS) | 6.1NVD v3.1 | 0.4% | 2024-03-27 | Fix |
| CVE-2024-29759 | Calculated Fields Form WordPress plugin reflected cross-site scripting (XSS) | 6.1NVD v3.1 | 0.4% | 2024-03-27 | Fix |
| CVE-2024-29758 | Co-marquage service-public.fr WordPress plugin reflected cross-site scripting (XSS) | 7.1CNA v3.1 | 0.4% | 2024-03-27 | Fix |
| CVE-2024-28860 | Insecure IPsec transport encryption in Cilium | 8.0CNA v3.1 | 0.2% | 2024-03-27 | Fix |
| CVE-2024-28853 | Ampache preferences.php stored cross-site scripting | 3.9CNA v3.1 | 0.6% | 2024-03-27 | Fix |
| CVE-2024-28852 | Ampache has multiple reflective XSS | 6.1CNA v3.1 | 0.5% | 2024-03-27 | Fix |
| CVE-2024-28815 | Mitel InAttend BluStar vulnerability | 9.8CISA ADP v3.1 | 0.9% | 2024-03-27 | Fix |
| CVE-2024-28784 | IBM QRadar cross-site scripting | 5.4CNA v3.1 | 0.3% | 2024-03-27 | Fix |
| CVE-2024-28335 | Lektor does not sanitize database path traversal | 9.1CISA ADP v3.1 | 0.8% | 2024-03-27 | Fix |
| CVE-2024-28247 | pi-hole Pihole Authenticated arbitrary file read with root privileges | 7.6CNA v3.1 | 1.4% | 2024-03-27 | Exploit code |
| CVE-2024-28233 | XSS in JupyterHub via Self-XSS leveraged by Cookie Tossing | 8.1CNA v3.1 | 0.3% | 2024-03-27 | Fix |
| CVE-2024-28085 | kernel util-linux escape sequence injection | 3.3CISA ADP v3.1 | 2.2% | 2024-03-27 | Exploit codeFix |
| CVE-2024-27270 | IBM WebSphere Application Server Liberty cross-site scripting | 4.7CNA v3.1 | 0.4% | 2024-03-27 | Fix |
| CVE-2024-27188 | Breeze WordPress plugin cross-site scripting (XSS) | 5.9CNA v3.1 | 0.3% | 2024-03-27 | Fix |
| CVE-2024-27091 | GeoNode stored XSS to full account takeover | 6.1CNA v3.1 | 0.4% | 2024-03-27 | Fix |
| CVE-2024-26652 | Linux kernel pds_core auxiliary device driver double free | 4.1CISA ADP v3.1 | 0.3% | 2024-03-27 | Fix |
| CVE-2024-26651 | In the Linux kernel, the following vulnerability has been resolved: sr9800: Add check for usbnet_get_endpoints Add check for usbnet_get_endpoints() and return the error if it fails in order to transfer the error. | 5.5NVD v3.1 | 0.3% | 2024-03-27 | Fix |
| CVE-2024-25962 | Dell InsightIQ improper access control | 8.3CNA v3.1 | 0.4% | 2024-03-27 | Fix |
| CVE-2024-25926 | Widgets Controller WordPress plugin cross-site scripting (XSS) | 7.1CNA v3.1 | 0.3% | 2024-03-27 | |
| CVE-2024-25920 | WP SMS WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.3% | 2024-03-27 | Fix |
| CVE-2024-25736 | Wyrestorm Apollo VX20 improper access control | 7.5CISA ADP v3.1 | 4.3% | 2024-03-27 | Exploit code |
| CVE-2024-25735 | Wyrestorm Apollo VX20 cleartext transmission of sensitive information | 9.1CISA ADP v3.1 | 50.6% | 2024-03-27 | NucleiExploit code |
| CVE-2024-25734 | Wyrestorm Apollo VX20 information disclosure | 7.5CISA ADP v3.1 | 4.1% | 2024-03-27 | Exploit code |
| CVE-2024-25580 | Qt KTX image handler buffer overflow | 6.2CISA ADP v3.1 | 0.3% | 2024-03-27 | Fix |
| CVE-2024-25395 | rt-thread utilities/rt-link/src/rtlink.c buffer overflow | 8.8CISA ADP v3.1 | 1.0% | 2024-03-27 | |
| CVE-2024-25394 | rt-thread utilities/ymodem/ry_sy.c buffer overflow | 4.3CISA ADP v3.1 | 0.6% | 2024-03-27 | |
| CVE-2024-25393 | rt-thread net/at/src/at_server.c stack-based buffer overflow | 9.8CISA ADP v3.1 | 1.1% | 2024-03-27 | |
| CVE-2024-25392 | rt-thread utilities/var_export/var_export.c out-of-bounds access | 5.9CISA ADP v3.1 | 0.3% | 2024-03-27 | |
| CVE-2024-25391 | rt-thread libc/posix/ipc/mqueue.c stack-based buffer overflow | 8.4CISA ADP v3.1 | 0.3% | 2024-03-27 | |
| CVE-2024-25390 | rt-thread finsh/msh_file.c and finsh/msh.c heap-based buffer overflow | 8.4CISA ADP v3.1 | 0.3% | 2024-03-27 | |
| CVE-2024-25389 | rt-thread weak random number generator | 7.5CISA ADP v3.1 | 0.8% | 2024-03-27 | |
| CVE-2024-25388 | rt-thread buffer overflow | 8.4CISA ADP v3.1 | 0.3% | 2024-03-27 | |
| CVE-2024-25354 | Domain-suffix RegEx denial of service | 7.5CISA ADP v3.1 | 0.6% | 2024-03-27 | |
| CVE-2024-24842 | Knowledge Base for Documentation, FAQs with AI Assistance WordPress plugin PHP object injection | 8.7CNA v3.1 | 0.5% | 2024-03-27 | Fix |
| CVE-2024-24800 | Product Feed PRO for WooCommerce WordPress plugin reflected cross-site scripting (XSS) | 7.1CNA v3.1 | 0.4% | 2024-03-27 | Fix |
| CVE-2024-24700 | WP Editor WordPress plugin reflected cross-site scripting (XSS) | 7.1CNA v3.1 | 0.4% | 2024-03-27 | Fix |
| CVE-2024-24335 | rt-thread dfs_v2 romfs filesystem heap-based buffer overflow | 8.4CISA ADP v3.1 | 0.4% | 2024-03-27 | |
| CVE-2024-24334 | rt-thread dfs_v2 dfs_file heap-based buffer overflow | 8.4CISA ADP v3.1 | 0.4% | 2024-03-27 | |
| CVE-2024-23515 | Cincopa video and media WordPress plugin cross-site request forgery (CSRF) | 5.4CNA v3.1 | 0.2% | 2024-03-27 | Fix |
| CVE-2024-23510 | Martyn Chamberlin Don't Muck My Markup cross-site request forgery | 8.8v3.1 | 0.2% | 2024-03-27 | |
| CVE-2024-23451 | Elasticsearch incorrect authorization in the Remote Cluster Security API key based security model | 4.4CNA v3.1 | 0.5% | 2024-03-27 | Fix |
| CVE-2024-23450 | Elasticsearch uncontrolled resource consumption | 4.9CNA v3.1 | 1.3% | 2024-03-27 | Fix |
| CVE-2024-22311 | Simply Schedule Appointments WordPress plugin reflected cross-site scripting (XSS) | 7.1CNA v3.1 | 0.4% | 2024-03-27 | Fix |
| CVE-2024-22300 | Icegram Express WordPress plugin reflected cross-site scripting (XSS) | 7.1CNA v3.1 | 0.4% | 2024-03-27 | Fix |
| CVE-2024-22299 | FV Player WordPress plugin reflected cross-site scripting (XSS) | 7.1CNA v3.1 | 0.4% | 2024-03-27 | Fix |
| CVE-2024-22288 | WooCommerce PDF Invoices WordPress plugin cross-site scripting | 6.1NVD v3.1 | 0.4% | 2024-03-27 | Fix |
| CVE-2024-22149 | cformsII WordPress plugin cross-site scripting (XSS) | 7.1CNA v3.1 | 0.4% | 2024-03-27 | Fix |
| CVE-2024-20354 | Cisco Aironet Access Point Software incomplete cleanup | 4.7CNA v3.1 | 0.3% | 2024-03-27 | Fix |
| CVE-2024-20333 | Cisco Digital Network Architecture Center (DNA Center) improper authorization | 4.3CNA v3.1 | 0.4% | 2024-03-27 | Fix |
| CVE-2024-20324 | Cisco IOS XE Software improper handling of insufficient privileges | 5.5CNA v3.1 | 0.1% | 2024-03-27 | Fix |
| CVE-2024-20316 | Cisco IOS XE Software data model interface services vulnerability | 5.8CNA v3.1 | 0.5% | 2024-03-27 | Fix |
| CVE-2024-20314 | Cisco IOS XE Software denial of service | 8.6CNA v3.1 | 0.8% | 2024-03-27 | Fix |
| CVE-2024-20312 | Cisco IOS null pointer dereference | 7.4CNA v3.1 | 0.3% | 2024-03-27 | Fix |
| CVE-2024-20311 | Cisco IOS uncontrolled recursion | 8.6CNA v3.1 | 0.8% | 2024-03-27 | Fix |
| CVE-2024-20309 | Cisco IOS XE Software auxiliary port (AUX) denial of service | 5.6CNA v3.1 | 0.1% | 2024-03-27 | Fix |
| CVE-2024-20308 | Cisco IOS out-of-bounds write | 8.6CNA v3.1 | 0.8% | 2024-03-27 | Fix |
| CVE-2024-20307 | Cisco IOS stack-based buffer overflow | 6.8CNA v3.1 | 0.7% | 2024-03-27 | Fix |
| CVE-2024-20306 | Cisco IOS XE Software improper parameter handling | 6.0CNA v3.1 | 0.2% | 2024-03-27 | Fix |
| CVE-2024-20303 | Cisco IOS XE Software incomplete cleanup | 7.4CNA v3.1 | 0.3% | 2024-03-27 | Fix |
| CVE-2024-20278 | Cisco IOS XE Software incomplete denylist | 6.5CNA v3.1 | 0.5% | 2024-03-27 | Fix |
| CVE-2024-20276 | Cisco IOS uncaught exception | 7.4CNA v3.1 | 0.3% | 2024-03-27 | Fix |
| CVE-2024-20271 | Cisco Aironet Access Point Software improper input validation | 8.6CNA v3.1 | 0.6% | 2024-03-27 | Fix |
| CVE-2024-20265 | Cisco IOS XE Software trust boundary violation | 5.9CNA v3.1 | 0.2% | 2024-03-27 | Fix |
| CVE-2024-20259 | Cisco IOS XE Software heap-based buffer overflow | 8.6CNA v3.1 | 0.8% | 2024-03-27 | Fix |
| CVE-2024-3008 | Tenda FH1205 execCommand formexeCommand stack-based overflow | 8.8v3.1 | 1.7% | 2024-03-27 | |
| CVE-2024-3007 | Tenda FH1205 NatStaticSetting fromNatStaticSetting stack-based overflow | 8.8v3.1 | 1.6% | 2024-03-27 | |
| CVE-2024-3006 | Tenda FH1205 fromRouteStatic fromSetRouteStatic stack-based overflow | 8.8v3.1 | 1.7% | 2024-03-27 | |
| CVE-2024-3004 | code-projects Online Book System Product.php cross-site scripting | 6.1v3.1 | 0.6% | 2024-03-27 | |
| CVE-2024-3003 | code-projects Online Book System cart.php SQL injection | 9.8v3.1 | 0.8% | 2024-03-27 | |
| CVE-2024-3002 | code-projects Online Book System description.php SQL injection | 9.8v3.1 | 0.8% | 2024-03-27 | |
| CVE-2024-3001 | code-projects Online Book System Product.php SQL injection | 9.8v3.1 | 0.8% | 2024-03-27 | |
| CVE-2024-3000 | code-projects Online Book System index.php SQL injection | 9.8v3.1 | 1.0% | 2024-03-27 | |
| CVE-2024-2999 | Campcodes Online Art Gallery Management System adminHome.php SQL injection | 7.5v3.1 | 0.6% | 2024-03-27 | |
| CVE-2024-2998 | Bdtask Multi-Store Inventory Management System Store Update page cross-site scripting | 5.4v3.1 | 0.5% | 2024-03-27 | |
| CVE-2024-2997 | Bdtask Multi-Store Inventory Management System cross-site scripting | 5.4NVD v3.1 | 1.2% | 2024-03-27 | |
| CVE-2024-2996 | Bdtask Multi-Store Inventory Management System Page Title cross-site scripting | 4.8v3.1 | 0.5% | 2024-03-27 | |
| CVE-2024-2995 | NUUO Camera deletefile.php denial of service | 5.4CNA v3.1 | 0.6% | 2024-03-27 | |
| CVE-2024-2994 | Tenda FH1203 GetParentControlInfo stack-based overflow | 8.8v3.1 | 1.5% | 2024-03-27 | |
| CVE-2024-2993 | Tenda FH1203 QuickIndex formQuickIndex stack-based overflow | 8.8v3.1 | 1.6% | 2024-03-27 | |
| CVE-2024-2992 | Tenda FH1203 setcfm formSetCfm stack-based overflow | 8.8v3.1 | 1.7% | 2024-03-27 | |
| CVE-2024-2991 | Tenda FH1203 WriteFacMac formWriteFacMac command injection | 8.8v3.1 | 7.6% | 2024-03-27 | |
| CVE-2024-2990 | Tenda FH1203 execCommand formexeCommand stack-based overflow | 8.8v3.1 | 1.5% | 2024-03-27 | |
| CVE-2024-2989 | Tenda FH1203 NatStaticSetting fromNatStaticSetting stack-based overflow | 8.8v3.1 | 1.6% | 2024-03-27 | |
| CVE-2024-2988 | Tenda FH1203 fromRouteStatic fromSetRouteStatic stack-based overflow | 8.8v3.1 | 1.6% | 2024-03-27 | |
| CVE-2024-2987 | Tenda FH1202 GetParentControlInfo stack-based overflow | 8.8v3.1 | 1.6% | 2024-03-27 | |
| CVE-2024-2986 | Tenda FH1202 SetSpeedWan formSetSpeedWan stack-based overflow | 8.8v3.1 | 1.7% | 2024-03-27 | |
| CVE-2024-2985 | Tenda FH1202 QuickIndex formQuickIndex stack-based overflow | 8.8v3.1 | 1.8% | 2024-03-27 | |
| CVE-2024-2984 | Tenda FH1202 setcfm formSetCfm stack-based overflow | 8.8v3.1 | 1.8% | 2024-03-27 | |
| CVE-2024-2983 | Tenda FH1202 SetClientState formSetClientState stack-based overflow | 8.8v3.1 | 1.8% | 2024-03-27 | |
| CVE-2024-2982 | Tenda FH1202 WriteFacMac formWriteFacMac command injection | 8.8v3.1 | 8.2% | 2024-03-27 | |
| CVE-2024-2981 | Tenda FH1202 fast_setting_wifi_set form_fast_setting_wifi_set stack-based overflow | 8.8v3.1 | 1.8% | 2024-03-27 | |
| CVE-2024-2980 | Tenda FH1202 execCommand formexeCommand stack-based overflow | 8.8v3.1 | 1.8% | 2024-03-27 | |
| CVE-2024-2979 | Tenda F1203 openSchedWifi setSchedWifi stack-based overflow | 8.8v3.1 | 1.7% | 2024-03-27 | |
| CVE-2024-2978 | Tenda F1203 setcfm formSetCfm stack-based overflow | 8.8v3.1 | 1.8% | 2024-03-27 | |
| CVE-2024-2977 | Tenda F1203 QuickIndex formQuickIndex stack-based overflow | 8.8v3.1 | 1.8% | 2024-03-27 | |
| CVE-2024-2976 | Tenda F1203 execCommand R7WebsSecurityHandler stack-based overflow | 8.8v3.1 | 1.7% | 2024-03-27 | |
| CVE-2024-2962 | Networker - Tech News WordPress Theme with Dark Mode missing authorization | 5.3CNA v3.1 | 0.5% | 2024-03-27 | Fix |
| CVE-2024-2956 | Simple Ajax Chat WordPress plugin authenticated (Admin+) stored cross-site scripting | 4.4CNA v3.1 | 0.3% | 2024-03-27 | Fix |
| CVE-2024-2954 | Action Network WordPress plugin SQL injection | 4.9NVD v3.1 | 0.6% | 2024-03-27 | Fix |
| CVE-2024-2945 | Campcodes Online Examination System updateExaminee.php SQL injection | 6.5v3.1 | 0.5% | 2024-03-27 | |
| CVE-2024-2944 | Campcodes Online Examination System deleteCourseExe.php SQL injection | 6.5v3.1 | 0.6% | 2024-03-27 | |
| CVE-2024-2943 | Campcodes Online Examination System deleteExamExe.php SQL injection | 6.5v3.1 | 0.5% | 2024-03-27 | |
| CVE-2024-2942 | Campcodes Online Examination System deleteQuestionExe.php SQL injection | 6.5v3.1 | 0.5% | 2024-03-27 | |
| CVE-2024-2941 | Campcodes Online Examination System loginExe.php SQL injection | 9.8v3.1 | 0.7% | 2024-03-27 | |
| CVE-2024-2940 | Campcodes Online Examination System updateCourse.php cross-site scripting | 6.1v3.1 | 0.6% | 2024-03-27 | |
| CVE-2024-2939 | Campcodes Online Examination System updateExaminee.php cross-site scripting | 6.1v3.1 | 0.6% | 2024-03-27 | |
| CVE-2024-2938 | Campcodes Online Examination System updateCourse.php SQL injection | 6.5v3.1 | 0.6% | 2024-03-27 | |
| CVE-2024-2935 | SourceCodester Todo List in Kanban Board cross-site scripting | 6.1v3.1 | 0.6% | 2024-03-27 | |
| CVE-2024-2934 | SourceCodester Todo List in Kanban Board SQL injection | 9.8v3.1 | 0.8% | 2024-03-27 | |
| CVE-2024-2932 | SourceCodester Online Chatting System update_room.php SQL injection | 7.5v3.1 | 0.6% | 2024-03-27 | |
| CVE-2024-2930 | SourceCodester Music Gallery Site unrestricted upload | 9.8v3.1 | 1.2% | 2024-03-27 | |
| CVE-2024-2781 | Elementor Website Builder Pro WordPress plugin DOM-based stored cross-site scripting | 5.4v3.1 | 0.3% | 2024-03-27 | Fix |
| CVE-2024-2466 | curl TLS certificate check bypass with mbedTLS | 6.5CISA ADP v3.1 | 1.5% | 2024-03-27 | Fix |
| CVE-2024-2398 | curl HTTP/2 push headers memory-leak | 8.6CISA ADP v3.1 | 36.1% | 2024-03-27 | Fix |
| CVE-2024-2379 | curl QUIC certificate check bypass with wolfSSL | 6.3CISA ADP v3.1 | 1.9% | 2024-03-27 | Fix |
| CVE-2024-2244 | Hitachi Energy Asset Suite EAM improper authentication | 5.3CNA v3.1 | 0.4% | 2024-03-27 | Fix |
| CVE-2024-2210 | The Plus Addons for Elementor WordPress plugin local file inclusion | 6.4CNA v3.1 | 0.5% | 2024-03-27 | Fix |
| CVE-2024-2209 | HP Printer Firmware Update Utility DLL loading code injection | 6.3CISA ADP v3.1 | 0.2% | 2024-03-27 | Fix |
| CVE-2024-2206 | SSRF vulnerability in gradio-app/Gradio | 6.5NVD v3.1 | 0.4% | 2024-03-27 | Fix |
| CVE-2024-2203 | The Plus Addons for Elementor WordPress plugin local file inclusion | 8.8v3.1 | 0.6% | 2024-03-27 | Fix |
| CVE-2024-2139 | Master Addons for Elementor WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.3% | 2024-03-27 | Fix |
| CVE-2024-2121 | Elementor Website Builder Pro WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.3% | 2024-03-27 | Fix |
| CVE-2024-2120 | Elementor Website Builder Pro WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.3% | 2024-03-27 | Fix |
| CVE-2024-2097 | Hitachi Energy MACH SCM Server code injection | 7.5CNA v3.1 | 0.5% | 2024-03-27 | Fix |
| CVE-2024-2004 | curl usage of disabled protocol | 3.5CISA ADP v3.1 | 1.7% | 2024-03-27 | Fix |
| CVE-2024-1540 | Command injection in gradio-app/Gradio via deploy+test-visual.yml workflow | 8.2v3.1 | 2.0% | 2024-03-27 | Fix |
| CVE-2024-1532 | Hitachi Energy RTU500 series CMU firmware unrestricted file upload | 6.8CNA v3.1 | 0.6% | 2024-03-27 | Fix |
| CVE-2024-1531 | Hitachi Energy RTU500 series CMU firmware unrestricted file upload | 8.2CNA v3.1 | 0.4% | 2024-03-27 | Fix |
| CVE-2024-1521 | Elementor Website Builder Pro WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.3% | 2024-03-27 | Fix |
| CVE-2024-1364 | Elementor Website Builder Pro WordPress plugin Authententicated stored cross-site scripting | 5.4v3.1 | 0.3% | 2024-03-27 | Fix |
| CVE-2024-1023 | Red Hat CEQ eclipse Vert.x memory leak | 6.5CNA v3.1 | 1.7% | 2024-03-27 | Fix |
| CVE-2024-0400 | Hitachi Energy MACH SCM code injection | 7.5CNA v3.1 | 0.6% | 2024-03-27 | Fix |
| CVE-2024-0079 | NVIDIA vGPU driver and Cloud Gaming driver kernel mode layer null pointer dereference | 6.5CNA v3.1 | 0.2% | 2024-03-27 | Fix |
| CVE-2024-0078 | NVIDIA GPU Display Driver kernel mode layer null pointer dereference | 6.5CNA v3.1 | 0.2% | 2024-03-27 | Fix |
| CVE-2024-0077 | NVIDIA vGPU driver, Cloud Gaming driver improper authorization | 7.8CNA v3.1 | 0.2% | 2024-03-27 | Fix |
| CVE-2024-0075 | NVIDIA GPU Display Driver null pointer dereference | 6.1CNA v3.1 | 0.2% | 2024-03-27 | Fix |
| CVE-2024-0074 | NVIDIA GPU Display Driver out-of-bounds access | 7.1CNA v3.1 | 0.2% | 2024-03-27 | Fix |
| CVE-2024-0073 | NVIDIA GPU Display Driver kernel mode layer vulnerability | 7.8CNA v3.1 | 0.2% | 2024-03-27 | Fix |
| CVE-2024-0071 | NVIDIA GPU Display Driver user mode layer out-of-bounds write | 7.8CNA v3.1 | 0.4% | 2024-03-27 | Fix |
| CVE-2024-30235 | Multiple Page Generator Plugin MPG WordPress plugin broken access control | 8.8v3.1 | 0.4% | 2024-03-26 | Fix |
| CVE-2024-30234 | WholesaleX WordPress plugin broken access control | 8.8v3.1 | 0.5% | 2024-03-26 | Fix |
| CVE-2024-30233 | WholesaleX WordPress plugin sensitive data exposure on user export | 6.5v3.1 | 0.5% | 2024-03-26 | Fix |
| CVE-2024-30232 | Exclusive Addons for Elementor WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.3% | 2024-03-26 | Fix |
| CVE-2024-30231 | Product Import Export for WooCommerce WordPress plugin arbitrary file upload | 7.2NVD v3.1 | 0.6% | 2024-03-26 | Fix |
| CVE-2024-29883 | CreateWiki's wiki request suppression ignores the suppression settings set by the suppressor | 4.9CNA v3.1 | 0.6% | 2024-03-26 | Fix |
| CVE-2024-29881 | TinyMCE cross-site scripting vulnerability in handling external SVG files | 4.3CNA v3.1 | 0.7% | 2024-03-26 | Fix |
| CVE-2024-29833 | 10web PhotoGallery WordPress Photo Gallery plugin stored cross-site scripting in UploadHandler | 5.4v3.1 | 0.4% | 2024-03-26 | |
| CVE-2024-29832 | 10Web Photo Gallery GalleryBox current_url parameter reflected cross-site scripting | 6.1v3.1 | 0.4% | 2024-03-26 | Fix |
| CVE-2024-29810 | 10Web Photo Gallery editimage_bwg thumb_url parameter reflected cross-site scripting | 5.4v3.1 | 0.4% | 2024-03-26 | Fix |
| CVE-2024-29809 | 10Web Photo Gallery editimage_bwg image_url parameter reflected cross-site scripting | 5.4v3.1 | 0.4% | 2024-03-26 | Fix |
| CVE-2024-29808 | 10Web Photo Gallery editimage_bwg image_id parameter reflected cross-site scripting | 5.4v3.1 | 0.4% | 2024-03-26 | Fix |
| CVE-2024-29735 | Apache Airflow: Potentially harmful permission changing by log task handler | 5.3CISA ADP v3.1 | 1.5% | 2024-03-26 | Fix |
| CVE-2024-29684 | DedeCMS cross-site request forgery | 9.8CISA ADP v3.1 | 0.6% | 2024-03-26 | |
| CVE-2024-29644 | Dcat-Admin cross-site scripting | 6.1CISA ADP v3.1 | 0.6% | 2024-03-26 | |
| CVE-2024-29401 | Mindskip xzs-mysql 学之思开源考试系统 insufficient session expiration | 9.8CISA ADP v3.1 | 0.8% | 2024-03-26 | |
| CVE-2024-29303 | Mayuri K PHP Task Management System SQL injection | 9.8CISA ADP v3.1 | 0.9% | 2024-03-26 | |
| CVE-2024-29302 | Mayuri K PHP Task Management System SQL injection | 7.5CISA ADP v3.1 | 0.8% | 2024-03-26 | |
| CVE-2024-29301 | Mayuri K PHP Task Management System SQL injection | 7.5CISA ADP v3.1 | 0.8% | 2024-03-26 | |
| CVE-2024-29203 | TinyMCE cross-site scripting (XSS) vulnerability in handling iframes | 4.3CNA v3.1 | 0.7% | 2024-03-26 | Fix |
| CVE-2024-29199 | nautobot unauthenticated views may expose information to anonymous users | 3.7CNA v3.1 | 0.6% | 2024-03-26 | Fix |
| CVE-2024-29197 | Pimcore Preview Documents are not restricted to logged in users anymore | 6.5CNA v3.1 | 0.7% | 2024-03-26 | Fix |
| CVE-2024-29196 | phpMyFAQ path traversal in Attachments | 3.8CNA v3.1 | 0.6% | 2024-03-26 | Fix |
| CVE-2024-29195 | Azure C SDK integer wraparound | 6.0CNA v3.1 | 5.0% | 2024-03-26 | Fix |
| CVE-2024-29189 | Ansys pyansys-geometry ansys-geometry-core OS command injection | 7.4CNA v3.1 | 0.3% | 2024-03-26 | Fix |
| CVE-2024-28551 | Tenda AC18 stack-based buffer overflow | 7.5CISA ADP v3.1 | 0.8% | 2024-03-26 | |
| CVE-2024-28545 | Tenda AC18 command injection | 9.8CISA ADP v3.1 | 2.3% | 2024-03-26 | |
| CVE-2024-28442 | Yealink VP59 path traversal | 7.5CISA ADP v3.1 | 0.8% | 2024-03-26 | |
| CVE-2024-28131 | sira.jp EasyRange uncontrolled search path | 7.8CISA ADP v3.1 | 0.2% | 2024-03-26 | |
| CVE-2024-28126 | Zerochannel 0ch BBS Script cross-site scripting | 6.1CISA ADP v3.1 | 0.3% | 2024-03-26 | |
| CVE-2024-28093 | AdTran NetVanta 3120 Telnet service default credentials | 8.8CISA ADP v3.1 | 0.5% | 2024-03-26 | |
| CVE-2024-28048 | Fortunefield ffBull OS command injection | 9.8CISA ADP v3.1 | 1.3% | 2024-03-26 | |
| CVE-2024-28034 | Flash CGI Mini Thread cross-site scripting | 5.4CISA ADP v3.1 | 0.3% | 2024-03-26 | |
| CVE-2024-28033 | LunarNight Laboratory WebProxy OS command injection | 7.3CISA ADP v3.1 | 1.0% | 2024-03-26 | |
| CVE-2024-27521 | TOTOLINK A3300R OS command injection | 8.0CISA ADP v3.1 | 1.5% | 2024-03-26 | |
| CVE-2024-26649 | Linux kernel AMDGPU RLC firmware loading null pointer dereference | 5.5v3.1 | 0.2% | 2024-03-26 | Fix |
| CVE-2024-26648 | Linux kernel AMD display eDP Replay panel control null pointer dereference | 5.5CISA ADP v3.1 | 0.2% | 2024-03-26 | Fix |
| CVE-2024-26647 | Linux kernel AMD display DSC link driver null pointer dereference | 5.5v3.1 | 0.2% | 2024-03-26 | Fix |
| CVE-2024-26646 | Linux kernel hfi memory corruption | 7.8CNA v3.1 | 0.2% | 2024-03-26 | Fix |
| CVE-2024-26645 | Linux kernel tracing_map histogram triggers vulnerability | 5.5NVD v3.1 | 0.2% | 2024-03-26 | Fix |
| CVE-2024-26644 | Linux kernel Btrfs snapshot creation vulnerability | 5.5v3.1 | 0.2% | 2024-03-26 | Fix |
| CVE-2024-26577 | VSeeFace UDP packet handling denial of service | 7.5CISA ADP v3.1 | 0.6% | 2024-03-26 | |
| CVE-2024-26303 | HPE ArubaOS-S Switch denial of service | 4.9CNA v3.1 | 0.5% | 2024-03-26 | |
| CVE-2024-26018 | TvRock cross-site scripting | 6.1CISA ADP v3.1 | 0.3% | 2024-03-26 | |
| CVE-2024-25958 | Dell Grab incorrect default permissions | 6.7CNA v3.1 | 0.1% | 2024-03-26 | Fix |
| CVE-2024-25957 | Dell Grab sensitive information in log files | 4.8CNA v3.1 | 0.2% | 2024-03-26 | Fix |
| CVE-2024-25956 | Dell Grab incorrect permission assignment | 5.5CNA v3.1 | 0.2% | 2024-03-26 | Fix |
| CVE-2024-25421 | Ignite Realtime Openfire privilege escalation | 9.8CISA ADP v3.1 | 1.7% | 2024-03-26 | Fix |
| CVE-2024-25420 | Ignite Realtime Openfire privilege escalation | 7.2CISA ADP v3.1 | 1.4% | 2024-03-26 | Fix |
| CVE-2024-25138 | AutomationDirect C-MORE EA9 HMI plaintext storage of a password | 6.5CNA v3.1 | 0.4% | 2024-03-26 | Fix |
| CVE-2024-25137 | AutomationDirect C-MORE EA9 HMI stack-based buffer overflow | 4.3CNA v3.1 | 0.5% | 2024-03-26 | Fix |
| CVE-2024-25136 | AutomationDirect C-MORE EA9 HMI path traversal | 7.5CNA v3.1 | 0.6% | 2024-03-26 | Fix |
| CVE-2024-24805 | WP Dummy Content Generator WordPress plugin broken access control | 4.3CNA v3.1 | 0.4% | 2024-03-26 | Fix |
| CVE-2024-24799 | WooCommerce Box Office WordPress plugin broken access control | 8.8v3.1 | 0.5% | 2024-03-26 | Fix |
| CVE-2024-24719 | Location Picker at Checkout for WooCommerce WordPress plugin Uriahs Victor missing authorization | 4.3CNA v3.1 | 0.3% | 2024-03-26 | Fix |
| CVE-2024-24718 | PropertyHive WordPress plugin missing authorization to Non-Arbitrary plugin installation | 6.5v3.1 | 0.3% | 2024-03-26 | Fix |
| CVE-2024-24711 | WooCommerce Conversion Tracking WordPress plugin broken access control | 4.3CNA v3.1 | 0.3% | 2024-03-26 | Fix |
| CVE-2024-23722 | treasure-data Fluent Bit null pointer dereference | 7.5CISA ADP v3.1 | 0.9% | 2024-03-26 | Exploit codeFix |
| CVE-2024-23520 | PopupAlly WordPress plugin broken access control | 4.3v3.1 | 0.3% | 2024-03-26 | Fix |
| CVE-2024-23482 | Zscaler Client Connector ZScalerService local privilege escalation | 7.0CNA v3.1 | 0.3% | 2024-03-26 | Fix |
| CVE-2024-22436 | HPE IceWall Gen11, IceWall SSO Agent resource exhaustion | 6.5CNA v3.1 | 0.4% | 2024-03-26 | |
| CVE-2024-22356 | IBM App Connect Enterprise and IBM Integration Bus for z/OS information disclosure | 4.9CNA v3.1 | 0.5% | 2024-03-26 | Fix |
| CVE-2024-22156 | SalesKing WordPress plugin unauthenticated plugin settings Change vulnerability | 6.5CNA v3.1 | 0.4% | 2024-03-26 | Fix |
| CVE-2024-21920 | Rockwell Automation Arena Simulation vulnerable to buffer overflow | 4.4CNA v3.1 | 0.2% | 2024-03-26 | Fix |
| CVE-2024-21919 | Rockwell Automation Arena Simulation vulnerable to uninitialized pointer | 7.8CNA v3.1 | 0.3% | 2024-03-26 | Fix |
| CVE-2024-21918 | Rockwell Automation Arena Simulation vulnerable to memory corruption | 7.8CNA v3.1 | 0.2% | 2024-03-26 | Fix |
| CVE-2024-21913 | Rockwell Automation Arena Simulation vulnerable to memory corruption | 7.8CNA v3.1 | 0.2% | 2024-03-26 | Fix |
| CVE-2024-21912 | Rockwell Automation Arena Simulation vulnerable to out-of-bounds write | 7.8CNA v3.1 | 0.3% | 2024-03-26 | Fix |
| CVE-2024-2971 | Out-of-bounds array access due to negative object numbers in indirect references in Xpdf | 2.9CNA v3.1 | 0.2% | 2024-03-26 | Fix |
| CVE-2024-2955 | Mismatched Memory Management Routines in Wireshark | 7.8CNA v3.1 | 1.4% | 2024-03-26 | Fix |
| CVE-2024-2951 | RegistrationMagic WordPress plugin cross-site request forgery (CSRF) | 4.3v3.1 | 0.2% | 2024-03-26 | Fix |
| CVE-2024-2929 | Rockwell Automation Arena Simulation vulnerable to memory corruption | 7.8CNA v3.1 | 0.3% | 2024-03-26 | Fix |
| CVE-2024-2927 | code-projects Mobile Shop Login Page Details.php SQL injection | 9.8v3.1 | 0.8% | 2024-03-26 | |
| CVE-2024-2921 | Devolutions Server PAM vault permissions improper access control | 9.8CISA ADP v3.1 | 0.8% | 2024-03-26 | Fix |
| CVE-2024-2917 | Campcodes House Rental Management System index.php file inclusion | 9.8v3.1 | 0.8% | 2024-03-26 | |
| CVE-2024-2916 | Campcodes House Rental Management System ajax.php SQL injection | 6.5NVD v3.1 | 0.6% | 2024-03-26 | |
| CVE-2024-2915 | Devolutions Server PAM JIT elevation improper access control | 8.8CISA ADP v3.1 | 0.6% | 2024-03-26 | Fix |
| CVE-2024-2911 | Tianjin PubliCMS cross-site request forgery | 6.9CNA v4.0 | 0.3% | 2024-03-26 | |
| CVE-2024-2910 | Ruijie RG-EG350 HTTP POST request vpnAction os command injection | 8.8v3.1 | 3.7% | 2024-03-26 | |
| CVE-2024-2909 | Ruijie RG-EG350 HTTP POST request setAction os command injection | 8.8CNA v3.1 | 4.0% | 2024-03-26 | |
| CVE-2024-2906 | Radio Player WordPress plugin unauthenticated broken access control | 6.5CNA v3.1 | 0.5% | 2024-03-26 | Fix |
| CVE-2024-2904 | Calliope WordPress theme cross-site request forgery (CSRF) | 8.8v3.1 | 0.2% | 2024-03-26 | Fix |
| CVE-2024-2903 | Tenda AC7 GetParentControlInfo stack-based overflow | 8.8v3.1 | 1.8% | 2024-03-26 | |
| CVE-2024-2902 | Tenda AC7 WifiGuestSet fromSetWifiGusetBasic stack-based overflow | 8.8v3.1 | 1.8% | 2024-03-26 | |
| CVE-2024-2901 | Tenda AC7 openSchedWifi setSchedWifi stack-based overflow | 8.8v3.1 | 1.7% | 2024-03-26 | |
| CVE-2024-2900 | Tenda AC7 saveParentControlInfo stack-based overflow | 8.8v3.1 | 1.7% | 2024-03-26 | |
| CVE-2024-2899 | Tenda AC7 WifiExtraSet fromSetWirelessRepeat stack-based overflow | 8.8v3.1 | 1.7% | 2024-03-26 | |
| CVE-2024-2898 | Tenda AC7 SetStaticRouteCfg fromSetRouteStatic stack-based overflow | 8.8v3.1 | 1.7% | 2024-03-26 | |
| CVE-2024-2897 | Tenda AC7 WriteFacMac formWriteFacMac os command injection | 8.8v3.1 | 7.9% | 2024-03-26 | |
| CVE-2024-2896 | Tenda AC7 WifiWpsStart formWifiWpsStart stack-based overflow | 8.8v3.1 | 1.9% | 2024-03-26 | Emerging Threats |
| CVE-2024-2895 | Tenda AC7 WifiWpsOOB formWifiWpsOOB stack-based overflow | 8.8v3.1 | 1.7% | 2024-03-26 | |
| CVE-2024-2894 | Tenda AC7 SetNetControlList formSetQosBand stack-based overflow | 8.8v3.1 | 1.6% | 2024-03-26 | |
| CVE-2024-2893 | Tenda AC7 SetOnlineDevName formSetDeviceName stack-based overflow | 8.8v3.1 | 1.7% | 2024-03-26 | |
| CVE-2024-2892 | Tenda AC7 setcfm formSetCfm stack-based overflow | 8.8v3.1 | 1.7% | 2024-03-26 | |
| CVE-2024-2891 | Tenda AC7 QuickIndex formQuickIndex stack-based overflow | 8.8v3.1 | 1.7% | 2024-03-26 | |
| CVE-2024-2889 | WP-Lister Lite for Amazon WordPress plugin cross-site scripting (XSS) | 5.9CNA v3.1 | 0.4% | 2024-03-26 | Fix |
| CVE-2024-2888 | Post and Page Builder by BoldGrid WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.3% | 2024-03-26 | Fix |
| CVE-2024-2887 | Google Chrome WebAssembly type confusion | 7.7v3.1 | 17.9% | 2024-03-26 | Exploit codeFix |
| CVE-2024-2886 | Google Chrome WebCodecs use-after-free | 7.5v3.1 | 1.8% | 2024-03-26 | Fix |
| CVE-2024-2885 | Google Chrome Dawn use-after-free | 8.8v3.1 | 1.5% | 2024-03-26 | Fix |
| CVE-2024-2883 | Google Chrome ANGLE use-after-free | 8.8v3.1 | 3.4% | 2024-03-26 | Fix |
| CVE-2024-2732 | Themify Shortcodes WordPress plugin authenticated (Contributor+) stored cross-site scripting | 5.4v3.1 | 0.3% | 2024-03-26 | Fix |
| CVE-2024-2452 | Eclipse Foundation ThreadX NetX Duo aligned memory allocator integer overflow | 7.0CNA v3.1 | 0.9% | 2024-03-26 | Fix |
| CVE-2024-2303 | Easy Textillate WordPress plugin stored cross-site scripting | 6.4CNA v3.1 | 0.3% | 2024-03-26 | Fix |
| CVE-2024-2214 | Eclipse Foundation ThreadX missing array size check in _Mtxinit in the Xtensa port | 7.0CNA v3.1 | 0.3% | 2024-03-26 | Fix |
| CVE-2024-2212 | Eclipse Foundation ThreadX FreeRTOS compatibility API heap-based buffer overflow | 7.3CNA v3.1 | 0.5% | 2024-03-26 | Fix |
| CVE-2024-2170 | VK All in One Expansion Unit WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.3% | 2024-03-26 | Fix |
| CVE-2024-1933 | Improper symlink resolution in TeamViewer Remote Client for macOS | 7.1CNA v3.1 | 0.2% | 2024-03-26 | Fix |
| CVE-2024-1745 | Testimonial Slider WordPress plugin Author+ settings update | 4.3CISA ADP v3.1 | 0.4% | 2024-03-26 | Fix |
| CVE-2024-1455 | Billion laughs Attack leading to DoS in langchain-ai/langchain | 5.9v3.1 | 0.8% | 2024-03-26 | Fix |
| CVE-2024-1313 | Grafana users outside an organization can delete a snapshot with its key | 6.5CNA v3.1 | 0.6% | 2024-03-26 | Fix |
| CVE-2024-0866 | checkemail Check and Log Email check_nonce function code injection | 8.1CNA v3.1 | 0.7% | 2024-03-26 | Fix |
| CVE-2024-30205 | GNU Org Mode download without integrity check | 7.1CISA ADP v3.1 | 0.5% | 2024-03-25 | Fix |
| CVE-2024-30204 | GNU Emacs incorrect default permissions | 2.8CISA ADP v3.1 | 0.5% | 2024-03-25 | Fix |
| CVE-2024-30203 | GNU Emacs Gnus vulnerability | 5.5CISA ADP v3.1 | 0.6% | 2024-03-25 | Fix |
| CVE-2024-30202 | GNU Org Mode code injection | 7.8CISA ADP v3.1 | 1.1% | 2024-03-25 | Fix |
| CVE-2024-30187 | Anope improper preservation of permissions | 5.3CISA ADP v3.1 | 0.5% | 2024-03-25 | Fix |
| CVE-2024-29666 | CMSV6 vehicle monitoring platform default password | 9.8CISA ADP v3.1 | 0.7% | 2024-03-25 | |
| CVE-2024-29650 | @thi.ng/paths prototype pollution | 9.8CISA ADP v3.1 | 1.4% | 2024-03-25 | Fix |
| CVE-2024-29515 | Leptoncms lepton v.7.1.0 file upload | 8.8CISA ADP v3.1 | 1.2% | 2024-03-25 | |
| CVE-2024-29216 | Sangoma cg6kwin2k.sys exposed IOCTL without access control | 6.1CISA ADP v3.1 | 0.2% | 2024-03-25 | |
| CVE-2024-29179 | phpMyFAQ stored cross-site scripting at File Attachments | 4.3CNA v3.0 | 0.5% | 2024-03-25 | Fix |
| CVE-2024-29071 | KDDI HGW-BL1500HM weak credentials | 8.8CISA ADP v3.1 | 0.4% | 2024-03-25 | |
| CVE-2024-29041 | expressjs express Express.js open redirect in malformed URLs | 6.1CNA v3.1 | 0.8% | 2024-03-25 | Fix |
| CVE-2024-29025 | Netty HttpPostRequestDecoder resource exhaustion | 5.3CNA v3.1 | 1.4% | 2024-03-25 | Fix |
| CVE-2024-29009 | Ari Susanto easy-popup-show cross-site request forgery | 6.1CISA ADP v3.1 | 0.2% | 2024-03-25 | |
| CVE-2024-28850 | WP Crontrol possible RCE when combined with a pre-condition | 8.2CNA v3.1 | 0.2% | 2024-03-25 | Fix |
| CVE-2024-28435 | twenty server-side request forgery | 5.4CISA ADP v3.1 | 0.4% | 2024-03-25 | |
| CVE-2024-28434 | twenty cross-site scripting | 7.6CISA ADP v3.1 | 0.7% | 2024-03-25 | |
| CVE-2024-28421 | Cobub Razor SQL injection | 9.8CISA ADP v3.1 | 0.8% | 2024-03-25 | |
| CVE-2024-28393 | Scalapay SQL injection | 9.8CISA ADP v3.1 | 0.7% | 2024-03-25 | Fix |
| CVE-2024-28387 | Axonaut cleartext storage of sensitive information | 7.5CISA ADP v3.1 | 0.4% | 2024-03-25 | |
| CVE-2024-28386 | Home-made Fastmag Sync code injection | 9.8CISA ADP v3.1 | 1.5% | 2024-03-25 | |
| CVE-2024-28246 | KaTeX is missing normalization of the protocol in URLs allows bypassing forbidden protocols | 5.5CNA v3.1 | 0.4% | 2024-03-25 | Fix |
| CVE-2024-28245 | KaTeX's \includegraphics does not escape filename | 6.3CNA v3.1 | 0.4% | 2024-03-25 | Fix |
| CVE-2024-28244 | KaTeX's maxExpand bypassed by Unicode sub/superscripts | 6.5CNA v3.1 | 2.2% | 2024-03-25 | Fix |
| CVE-2024-28243 | KaTeX's maxExpand bypassed by \edef | 6.5CNA v3.1 | 1.4% | 2024-03-25 | Fix |
| CVE-2024-28183 | espressif esp-idf anti Rollback bypass with physical access and TOCTOU attack | 6.1CNA v3.1 | 0.2% | 2024-03-25 | Fix |
| CVE-2024-28108 | phpMyFAQ stored HTML injection at contentLink | 4.7CNA v3.1 | 0.5% | 2024-03-25 | Fix |
| CVE-2024-28107 | phpMyFAQ SQL injections at insertentry and saveentry | 8.8CNA v3.1 | 1.0% | 2024-03-25 | Fix |
| CVE-2024-28106 | phpMyFAQ stored XSS at FAQ News Content | 4.3CNA v3.1 | 0.5% | 2024-03-25 | Fix |
| CVE-2024-28105 | PhpMyFAQ's file upload Bypass at Category Image leads to RCE | 7.2CNA v3.1 | 1.5% | 2024-03-25 | Fix |
| CVE-2024-28041 | KDDI HGW-BL1500HM command injection | 8.8CISA ADP v3.1 | 0.6% | 2024-03-25 | |
| CVE-2024-27300 | phpMyFAQ stored XSS at user email | 5.5CNA v3.1 | 0.7% | 2024-03-25 | Fix |
| CVE-2024-27299 | phpMyFAQ SQL injection at Save News | 8.8CNA v3.1 | 1.2% | 2024-03-25 | Fix |
| CVE-2024-25964 | Dell PowerScale OneFS timing side channel | 5.3CNA v3.1 | 0.7% | 2024-03-25 | Fix |
| CVE-2024-25175 | Kickdler cross-site scripting | 6.1CISA ADP v3.1 | 0.5% | 2024-03-25 | |
| CVE-2024-25002 | Bosch Network Synchronizer Enterprise diagnostics interface of the command injection | 8.8CNA v3.1 | 1.2% | 2024-03-25 | Fix |
| CVE-2024-24899 | Command injection in aops-zeus | 7.2CNA v3.1 | 1.7% | 2024-03-25 | |
| CVE-2024-24897 | Remote command execution in A-Tune-Collector | 8.1CNA v3.1 | 1.4% | 2024-03-25 | |
| CVE-2024-24892 | Unauthorized RCE in migration-tools | 8.1CNA v3.1 | 0.9% | 2024-03-25 | |
| CVE-2024-24890 | Command injection in ioprobe of gala-gopher | 7.8CNA v3.1 | 1.1% | 2024-03-25 | |
| CVE-2024-21914 | Rockwell Automation FactoryTalk View ME PanelView Plus 7 terminal denial of service | 5.3CNA v3.1 | 0.7% | 2024-03-25 | Fix |
| CVE-2024-21865 | KDDI HGW-BL1500HM weak credentials | 6.5CISA ADP v3.1 | 0.4% | 2024-03-25 | |
| CVE-2024-21505 | web3-utils prototype pollution | 7.5CNA v3.1 | 0.7% | 2024-03-25 | Fix |
| CVE-2024-2873 | User authentication bypass in wolfSSH server | 9.1CNA v3.1 | 0.6% | 2024-03-25 | Fix |
| CVE-2024-2865 | SQLi in Mergen Soft Quality Management System | 9.8CNA v3.1 | 0.6% | 2024-03-25 | |
| CVE-2024-2864 | Youzify - Buddypress Moderation WordPress plugin unauthenticated cross-site scripting (XSS) | 6.1NVD v3.1 | 0.4% | 2024-03-25 | |
| CVE-2024-2863 | Path traversal via file upload on LG LED Assistant | 5.3CNA v3.1 | 64.0% | 2024-03-25 | Reported exploitedNucleiFix |
| CVE-2024-2862 | Password reset vulnerability without authorization on LG LED Assistant | 9.1CNA v3.1 | 51.0% | 2024-03-25 | Reported exploitedNucleiFix |
| CVE-2024-2427 | Rockwell Automation denial of service and Input Validation vulnerabilities in PowerFlex® 527 | 7.5CNA v3.1 | 0.7% | 2024-03-25 | |
| CVE-2024-2426 | Rockwell Automation denial of service and Input Validation vulnerabilities in PowerFlex® 527 | 7.5CNA v3.1 | 2.8% | 2024-03-25 | |
| CVE-2024-2425 | Rockwell Automation denial of service and Input Validation vulnerabilities in PowerFlex® 527 | 7.5CNA v3.1 | 2.8% | 2024-03-25 | |
| CVE-2024-1973 | OpenText Secure Content Manager elevation of privileges | 8.5CNA v3.1 | 0.4% | 2024-03-25 | |
| CVE-2024-1962 | CM Download and File Manager WordPress plugin download Edit via CSRF | 8.8CISA ADP v3.1 | 0.5% | 2024-03-25 | Fix |
| CVE-2024-1564 | Schema Pro WordPress plugin Contributor+ Custom field access | 4.3CISA ADP v3.1 | 0.5% | 2024-03-25 | Fix |
| CVE-2024-1232 | CM Download Manager WordPress plugin download deletion via CSRF | 4.8CISA ADP v3.1 | 0.2% | 2024-03-25 | Fix |
| CVE-2024-1231 | CM Download and File Manager WordPress plugin download Unpublish via CSRF | 6.8CISA ADP v3.1 | 0.2% | 2024-03-25 | Fix |
| CVE-2024-0901 | wolfSSL SEGV and out-of-bounds memory read from malicious packet | 7.5CNA v3.1 | 0.7% | 2024-03-25 | Fix |
| CVE-2024-30161 | Qt QNetworkReply in Qt for WebAssembly use-after-free | 6.5CISA ADP v3.1 | 0.5% | 2024-03-24 | Fix |
| CVE-2024-30156 | Varnish Cache HTTP/2 flow control window resource exhaustion | 7.5CISA ADP v3.1 | 3.7% | 2024-03-24 | Fix |
| CVE-2024-29194 | OneUptime vulnerable to a privilege escalation via Local Storage Key Manipulation | 8.3CNA v3.1 | 0.7% | 2024-03-24 | Fix |
| CVE-2024-29188 | WiX toolset RemoveFolderEx custom action link following | 7.8CNA v3.1 | 0.2% | 2024-03-24 | Fix |
| CVE-2024-29187 | wixtoolset issues WiX based installers are vulnerable to binary hijack when run as SYSTEM | 7.3CNA v3.1 | 0.5% | 2024-03-24 | Fix |
| CVE-2024-29034 | CarrierWave's Content-Type allowlist bypass vulnerability which possibly leads to XSS remained | 6.8CNA v3.1 | 0.4% | 2024-03-24 | Fix |
| CVE-2024-2856 | Tenda AC10 SetSysTimeCfg fromSetSysTime stack-based overflow | 9.8v3.1 | 1.2% | 2024-03-24 | |
| CVE-2024-2855 | Tenda AC15 SetSysTimeCfg fromSetSysTime stack-based overflow | 9.8v3.1 | 1.3% | 2024-03-24 | |
| CVE-2024-2854 | Tenda AC18 setsambacfg formSetSambaConf os command injection | 9.8v3.1 | 3.9% | 2024-03-24 | |
| CVE-2024-2853 | Tenda AC10U setsambacfg formSetSambaConf os command injection | 9.8v3.1 | 4.0% | 2024-03-24 | |
| CVE-2024-2852 | Tenda AC15 saveParentControlInfo stack-based overflow | 9.8v3.1 | 1.3% | 2024-03-24 | |
| CVE-2024-2851 | Tenda AC15 setsambacfg formSetSambaConf os command injection | 9.8v3.1 | 4.0% | 2024-03-24 | |
| CVE-2024-2850 | Tenda AC15 saveParentControlInfo stack-based overflow | 9.8v3.1 | 1.3% | 2024-03-24 | |
| CVE-2024-29059 | Microsoft .NET Framework information disclosure | 7.5CNA v3.1 | 98.6% | 2024-03-23 | KEVNucleiEmerging ThreatsExploit codeFix |
| CVE-2024-24840 | Element Pack Elementor Addons WordPress plugin broken access control on Duplicate post | 5.4v3.1 | 0.3% | 2024-03-23 | Fix |
| CVE-2024-24835 | BEAR WordPress plugin broken access control | 6.5v3.1 | 0.4% | 2024-03-23 | Fix |
| CVE-2024-24832 | EventPrime WordPress plugin broken access control | 7.5v3.1 | 0.4% | 2024-03-23 | Fix |
| CVE-2024-24725 | gibbonedu gibbon deserialization of untrusted data | 8.8CISA ADP v3.1 | 51.3% | 2024-03-23 | MetasploitExploit code |
| CVE-2024-23755 | Clickup code injection | 8.8CISA ADP v3.1 | 1.1% | 2024-03-23 | Fix |
| CVE-2024-2849 | SourceCodester Simple File Manager unrestricted upload | 9.8v3.1 | 0.9% | 2024-03-23 | |
| CVE-2024-2832 | Campcodes Online Shopping System offersmail.php cross-site scripting | 6.1v3.1 | 0.5% | 2024-03-23 | |
| CVE-2024-2688 | EmbedPress WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.3% | 2024-03-23 | Fix |
| CVE-2024-2468 | EmbedPress WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.3% | 2024-03-23 | Fix |
| CVE-2024-2326 | Pretty Links WordPress plugin cross-site request forgery | 4.3CNA v3.1 | 0.2% | 2024-03-23 | Fix |
| CVE-2024-2202 | Page Builder by SiteOrigin WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.4% | 2024-03-23 | Fix |
| CVE-2024-2131 | The Move Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's infobox and button widget in all versions up to, and including, 1.2.9 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for au | 5.4v3.1 | 0.3% | 2024-03-23 | Fix |
| CVE-2024-2025 | themekraft BuddyPress WooCommerce My Account Integration plugin deserialization of untrusted data | 8.8CNA v3.1 | 0.8% | 2024-03-23 | Fix |
| CVE-2024-1697 | Custom WooCommerce Checkout Fields Editor WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.4% | 2024-03-23 | Fix |
| CVE-2024-1603 | PaddlePaddle allows arbitrary file read via paddle.vision.ops.read_file | 7.5v3.1 | 0.6% | 2024-03-23 | |
| CVE-2024-1049 | Page Builder Gutenberg Blocks CoBlocks WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.3% | 2024-03-23 | Fix |
| CVE-2024-29944 | Mozilla Firefox parent process event handler vulnerability | 8.4CISA ADP v3.1 | 4.7% | 2024-03-22 | Fix |
| CVE-2024-29943 | Mozilla Firefox out-of-bounds read | 9.8CISA ADP v3.1 | 22.9% | 2024-03-22 | Exploit codeFix |
| CVE-2024-29865 | Logpoint SIEM cross-site scripting | 5.4CISA ADP v3.1 | 0.3% | 2024-03-22 | Fix |
| CVE-2024-29499 | Cross-site request forgery in Anchor CMS | 7.4CISA ADP v3.1 | 0.3% | 2024-03-22 | |
| CVE-2024-29385 | D-Link Dir-845l command injection | 9.0CISA ADP v3.1 | 1.6% | 2024-03-22 | |
| CVE-2024-29366 | D-Link Dir-845l cgibin binary command injection | 8.8CISA ADP v3.1 | 2.4% | 2024-03-22 | |
| CVE-2024-29338 | Cross-site request forgery in Anchor CMS | 2.4CISA ADP v3.1 | 0.3% | 2024-03-22 | |
| CVE-2024-29275 | Seacms SQL injection | 9.8CISA ADP v3.1 | 5.0% | 2024-03-22 | |
| CVE-2024-29273 | Dzzoffice There is stored cross-site scripting | 6.1CISA ADP v3.1 | 0.4% | 2024-03-22 | |
| CVE-2024-29272 | VvvebJs arbitrary file upload | 6.5CISA ADP v3.1 | 9.4% | 2024-03-22 | NucleiFix |
| CVE-2024-29271 | VvvebJs reflected cross-site scripting (XSS) | 6.1CISA ADP v3.1 | 0.6% | 2024-03-22 | Fix |
| CVE-2024-29190 | MobSF SSRF vulnerability on assetlinks_check(act_name, well_knowns) | 7.5CNA v3.1 | 0.7% | 2024-03-22 | Fix |
| CVE-2024-29186 | brefphp bref Slow String Operations via MultiPart requests in Event-Driven functions | 5.3CNA v3.1 | 0.7% | 2024-03-22 | Fix |
| CVE-2024-29185 | FreeScout OS command injection | 9.1CNA v3.1 | 1.7% | 2024-03-22 | Fix |
| CVE-2024-29184 | FreeScout stored XSS to privilege escalation after CSP bypass | 8.0CNA v3.1 | 0.9% | 2024-03-22 | Fix |
| CVE-2024-29057 | Microsoft Edge (Chromium-based) spoofing | 4.3CNA v3.1 | 1.0% | 2024-03-22 | Fix |
| CVE-2024-29042 | Translate cache poisoning | 5.3CNA v3.1 | 0.7% | 2024-03-22 | Fix |
| CVE-2024-28861 | FriendsOfSymfony1 Symfony 1 sfNamespacedParameterHolder class deserialization of untrusted data | 9.8CNA v3.1 | 1.5% | 2024-03-22 | Fix |
| CVE-2024-28824 | Checkmk privilege escalation in mk_informix plugin | 8.8CNA v3.1 | 0.2% | 2024-03-22 | Fix |
| CVE-2024-28593 | Cross-site scripting in Moodle Chat | 5.4CISA ADP v3.1 | 0.6% | 2024-03-22 | Fix |
| CVE-2024-28560 | Niushop B2B2C Multi-business SQL injection | 5.4CISA ADP v3.1 | 0.5% | 2024-03-22 | |
| CVE-2024-28559 | Niushop B2B2C Multi-business SQL injection | 8.8CISA ADP v3.1 | 0.8% | 2024-03-22 | |
| CVE-2024-28441 | Magicflue file upload | 9.8CISA ADP v3.1 | 1.2% | 2024-03-22 | |
| CVE-2024-26557 | Codiad cross-site scripting | 5.4CISA ADP v3.1 | 0.3% | 2024-03-22 | |
| CVE-2024-26247 | Microsoft Edge (Chromium-based) security feature bypass | 4.7CNA v3.1 | 1.1% | 2024-03-22 | Fix |
| CVE-2024-25808 | LycheeOrg Lychee cross-site request forgery | 8.3CISA ADP v3.1 | 0.4% | 2024-03-22 | |
| CVE-2024-25807 | LycheeOrg Lychee cross-site scripting | 6.1CISA ADP v3.1 | 0.5% | 2024-03-22 | |
| CVE-2024-25168 | Dingflow snow SQL injection | 6.3CISA ADP v3.1 | 0.6% | 2024-03-22 | |
| CVE-2024-2828 | lakernote EasyAdmin IndexController.java thumbnail server-side request forgery | 8.8v3.1 | 0.6% | 2024-03-22 | |
| CVE-2024-2827 | lakernote EasyAdmin saveReportFile server-side request forgery | 8.8v3.1 | 0.6% | 2024-03-22 | |
| CVE-2024-2826 | lakernote EasyAdmin saveReportFile XML external entity reference | 8.8v3.1 | 0.6% | 2024-03-22 | |
| CVE-2024-2825 | lakernote EasyAdmin saveReportFile path traversal | 8.8v3.1 | 0.7% | 2024-03-22 | |
| CVE-2024-2824 | Matthias-Wandel jhead exif.c PrintFormatNumber heap-based overflow | 6.3CNA v3.1 | 0.7% | 2024-03-22 | |
| CVE-2024-2823 | DedeCMS mda_main.php cross-site request forgery | 4.3v3.1 | 0.4% | 2024-03-22 | |
| CVE-2024-2822 | DedeCMS vote_edit.php cross-site request forgery | 4.3CNA v3.1 | 0.4% | 2024-03-22 | |
| CVE-2024-2821 | DedeCMS friendlink_edit.php cross-site request forgery | 4.3CNA v3.1 | 0.4% | 2024-03-22 | |
| CVE-2024-2820 | DedeCMS baidunews.php cross-site request forgery | 4.3v3.1 | 0.4% | 2024-03-22 | |
| CVE-2024-2817 | Tenda AC15 SysToolRestoreSet fromSysToolRestoreSet cross-site request forgery | 6.5v3.1 | 0.3% | 2024-03-22 | |
| CVE-2024-2816 | Tenda AC15 SysToolReboot fromSysToolReboot cross-site request forgery | 6.5v3.1 | 0.4% | 2024-03-22 | |
| CVE-2024-2815 | Tenda AC15 Cookie execCommand R7WebsSecurityHandler stack-based overflow | 9.8v3.1 | 1.3% | 2024-03-22 | |
| CVE-2024-2814 | Tenda AC15 DhcpListClient fromDhcpListClient stack-based overflow | 9.8v3.1 | 1.3% | 2024-03-22 | |
| CVE-2024-2813 | Tenda AC15 fast_setting_wifi_set form_fast_setting_wifi_set stack-based overflow | 9.8v3.1 | 1.3% | 2024-03-22 | |
| CVE-2024-2812 | Tenda AC15 WriteFacMac formWriteFacMac os command injection | 8.8v3.1 | 4.1% | 2024-03-22 | |
| CVE-2024-2811 | Tenda AC15 WifiWpsStart formWifiWpsStart stack-based overflow | 9.8v3.1 | 1.5% | 2024-03-22 | Emerging Threats |
| CVE-2024-2810 | Tenda AC15 WifiWpsOOB formWifiWpsOOB stack-based overflow | 9.8v3.1 | 1.3% | 2024-03-22 | |
| CVE-2024-2809 | Tenda AC15 SetFirewallCfg formSetFirewallCfg stack-based overflow | 9.8v3.1 | 1.9% | 2024-03-22 | Emerging Threats |
| CVE-2024-2808 | Tenda AC15 QuickIndex formQuickIndex stack-based overflow | 9.8v3.1 | 1.4% | 2024-03-22 | |
| CVE-2024-2807 | Tenda AC15 expandDlnaFile formExpandDlnaFile stack-based overflow | 9.8v3.1 | 1.4% | 2024-03-22 | |
| CVE-2024-2806 | Tenda AC15 addWifiMacFilter stack-based overflow | 9.8v3.1 | 1.3% | 2024-03-22 | |
| CVE-2024-2805 | Tenda AC15 SetSpeedWan formSetSpeedWan stack-based overflow | 8.8v3.1 | 1.6% | 2024-03-22 | |
| CVE-2024-2780 | Campcodes Online Marriage Registration System admin-profile.php cross-site scripting | 6.1v3.1 | 0.5% | 2024-03-22 | |
| CVE-2024-2779 | Campcodes Online Marriage Registration System cross-site scripting | 5.4v3.1 | 0.5% | 2024-03-22 | |
| CVE-2024-2778 | Campcodes Online Marriage Registration System search.php cross-site scripting | 6.1v3.1 | 0.5% | 2024-03-22 | |
| CVE-2024-2777 | Online Marriage Registration System application-bwdates-reports-details.php SQL injection | 6.5v3.1 | 0.5% | 2024-03-22 | |
| CVE-2024-2776 | Campcodes Online Marriage Registration System search.php SQL injection | 6.5v3.1 | 0.5% | 2024-03-22 | |
| CVE-2024-2728 | Information exposure vulnerability in the CIGESv2 system | 5.5v3.1 | 0.2% | 2024-03-22 | Fix |
| CVE-2024-2727 | Stored cross-site scripting (Stored-XSS) vulnerability in the CIGESv2 system | 6.1CNA v3.1 | 0.3% | 2024-03-22 | Fix |
| CVE-2024-2726 | Stored cross-site scripting (Stored-XSS) vulnerability in the CIGESv2 system | 6.1CNA v3.1 | 0.3% | 2024-03-22 | Fix |
| CVE-2024-2725 | Exposure of sensitive information vulnerability in the CIGESv2 system | 7.5CNA v3.1 | 0.6% | 2024-03-22 | Fix |
| CVE-2024-2724 | SQL injection vulnerability in the CIGESv2 system | 7.5NVD v3.1 | 0.7% | 2024-03-22 | Fix |
| CVE-2024-2723 | SQL injection vulnerability in the CIGESv2 system | 7.5NVD v3.1 | 0.7% | 2024-03-22 | Fix |
| CVE-2024-2722 | SQL injection vulnerability in the CIGESv2 system | 7.5NVD v3.1 | 0.7% | 2024-03-22 | Fix |
| CVE-2024-2500 | ColorMag WordPress theme authenticated (Contributor+) stored cross-site scripting via Display Name | 6.4CNA v3.1 | 0.4% | 2024-03-22 | Fix |
| CVE-2024-2449 | LoadMaster cross-site request forgery (CSRF) | 7.5CNA v3.1 | 12.9% | 2024-03-22 | Fix |
| CVE-2024-2448 | LoadMaster command injection | 8.4CNA v3.1 | 55.4% | 2024-03-22 | Fix |
| CVE-2024-2392 | Blocksy Companion WordPress plugin authenticated (Contributor+) stored cross-site scripting | 5.4NVD v3.1 | 0.3% | 2024-03-22 | Fix |
| CVE-2024-2228 | IdentityIQ Authorization of QuickLink Target Identities vulnerability | 7.1CNA v3.1 | 0.4% | 2024-03-22 | Fix |
| CVE-2024-2227 | IdentityIQ JavaServer Faces file path traversal | 10.0CNA v3.1 | 0.8% | 2024-03-22 | Fix |
| CVE-2024-2080 | LiquidPoll Polls, Surveys, NPS and Feedback Reviews WordPress plugin information exposure | 4.3CNA v3.1 | 0.4% | 2024-03-22 | Fix |
| CVE-2024-1848 | Dassault Systèmes SOLIDWORKS Desktop file reading memory corruption | 7.8CNA v3.1 | 0.3% | 2024-03-22 | |
| CVE-2024-1742 | Information disclosure in mk_oracle Checkmk agent plugin | 3.8CNA v3.1 | 0.2% | 2024-03-22 | Fix |
| CVE-2024-0957 | WooCommerce PDF Invoices WordPress plugin stored cross-site scripting | 6.1CNA v3.1 | 0.4% | 2024-03-22 | Fix |
| CVE-2024-0638 | Checkmk privilege escalation in mk_oracle plugins | 8.2CNA v3.1 | 0.2% | 2024-03-22 | Fix |
| CVE-2024-29916 | Dormakaba Saflok keycard key derivation vulnerability | 5.6CISA ADP v3.1 | 0.3% | 2024-03-21 | |
| CVE-2024-29880 | JetBrains TeamCity exposed dangerous method | 4.2CNA v3.1 | 0.2% | 2024-03-21 | Fix |
| CVE-2024-29879 | Cross-site scripting (XSS) vulnerability in Sentrifugo | 6.1NVD v3.1 | 0.5% | 2024-03-21 | |
| CVE-2024-29878 | Cross-site scripting (XSS) vulnerability in Sentrifugo | 6.1NVD v3.1 | 0.5% | 2024-03-21 | |
| CVE-2024-29877 | Cross-site scripting (XSS) vulnerability in Sentrifugo | 6.1NVD v3.1 | 0.5% | 2024-03-21 | |
| CVE-2024-29876 | SQL injection vulnerability in Sentrifugo | 9.8v3.1 | 0.8% | 2024-03-21 | |
| CVE-2024-29875 | SQL injection vulnerability in Sentrifugo | 9.8v3.1 | 0.9% | 2024-03-21 | |
| CVE-2024-29874 | SQL injection vulnerability in Sentrifugo | 9.8v3.1 | 0.9% | 2024-03-21 | |
| CVE-2024-29873 | SQL injection vulnerability in Sentrifugo | 9.8v3.1 | 0.8% | 2024-03-21 | |
| CVE-2024-29872 | SQL injection vulnerability in Sentrifugo | 9.8v3.1 | 0.8% | 2024-03-21 | |
| CVE-2024-29871 | SQL injection vulnerability in Sentrifugo | 9.8v3.1 | 0.9% | 2024-03-21 | |
| CVE-2024-29870 | SQL injection vulnerability in Sentrifugo | 9.8v3.1 | 0.9% | 2024-03-21 | |
| CVE-2024-29866 | Datalust Seq improper access control | 9.1CISA ADP v3.1 | 0.7% | 2024-03-21 | |
| CVE-2024-29864 | 89luca89 Distrobox command injection | 9.8CISA ADP v3.1 | 2.9% | 2024-03-21 | Fix |
| CVE-2024-29862 | ChirpStack Gateway Bridge and MQTT Forwarder Kerlink firewall vulnerability | 7.5CISA ADP v3.1 | 0.7% | 2024-03-21 | |
| CVE-2024-29859 | MISP unrestricted file upload | 9.8v3.1 | 0.8% | 2024-03-21 | |
| CVE-2024-29858 | MISP organization logo upload vulnerability | 9.8CISA ADP v3.1 | 0.4% | 2024-03-21 | |
| CVE-2024-29732 | SQL injection vulnerability on SCAN_VISIO eDocument Suite Web Viewer from Abast | 9.8CNA v3.1 | 0.5% | 2024-03-21 | |
| CVE-2024-29374 | Cross-site scripting in Moodle | 6.1CISA ADP v3.1 | 0.5% | 2024-03-21 | Fix |
| CVE-2024-29244 | Szlbt Lbt-t300-mini1 buffer overflow | 5.3CISA ADP v3.1 | 0.5% | 2024-03-21 | |
| CVE-2024-29243 | Szlbt Lbt-t300-mini1 buffer overflow | 9.8CISA ADP v3.1 | 0.8% | 2024-03-21 | |
| CVE-2024-29180 | webpack-dev-middleware path traversal | 7.4CNA v3.1 | 1.2% | 2024-03-21 | Fix |
| CVE-2024-29133 | Apache Commons Configuration out-of-bounds write | 5.4CISA ADP v3.1 | 1.7% | 2024-03-21 | Fix |
| CVE-2024-29131 | Apache Commons Configuration out-of-bounds write | 7.3CISA ADP v3.1 | 2.1% | 2024-03-21 | Fix |
| CVE-2024-29031 | Meshery SQL injection | 7.5CNA v3.1 | 1.0% | 2024-03-21 | Fix |
| CVE-2024-28916 | Microsoft Xbox Gaming Services elevation of privilege | 8.8CNA v3.1 | 0.6% | 2024-03-21 | Fix |
| CVE-2024-28891 | Delta Electronics DIAEnergie SQL injection | 8.8CNA v3.1 | 8.5% | 2024-03-21 | Fix |
| CVE-2024-28863 | Denial of service while parsing a Tar file due to lack of folders count validation | 6.5CNA v3.1 | 0.9% | 2024-03-21 | Fix |
| CVE-2024-28835 | Red Hat Enterprise Linux 9 gnutls: Potential crash during chain building/verification | 5.0CNA v3.1 | 0.4% | 2024-03-21 | Fix |
| CVE-2024-28834 | Red Hat Enterprise Linux 8 gnutls: Vulnerable to minerva side-channel information leak | 5.3CNA v3.1 | 0.7% | 2024-03-21 | Fix |
| CVE-2024-28756 | SolarEdge Mysolaredge out-of-bounds read | 5.9CNA v3.1 | 0.2% | 2024-03-21 | Fix |
| CVE-2024-28635 | devsoftbaltic Survey-creator cross-site scripting in Survey Creator | 6.1CISA ADP v3.1 | 0.5% | 2024-03-21 | Fix |
| CVE-2024-28521 | Netentsec NS-ASG Netcome SQL injection | 7.8CISA ADP v3.1 | 0.3% | 2024-03-21 | |
| CVE-2024-28286 | MZ Automation libiec61850 null pointer dereference | 7.5CISA ADP v3.1 | 0.7% | 2024-03-21 | |
| CVE-2024-28171 | Delta Electronics DIAEnergie path traversal | 8.1CNA v3.1 | 0.6% | 2024-03-21 | Fix |
| CVE-2024-28123 | Wasmi out-of-bounds write for host to Wasm calls with more than 128 parameters | 7.3CNA v3.1 | 0.8% | 2024-03-21 | Fix |
| CVE-2024-28119 | Grav vulnerable to server side template injection (SSTI) via Twig escape handler | 8.8CNA v3.1 | 1.6% | 2024-03-21 | Fix |
| CVE-2024-28118 | Grav vulnerable to server side template injection (SSTI) | 8.8CNA v3.1 | 1.2% | 2024-03-21 | Fix |
| CVE-2024-28117 | Grav vulnerable to server side template injection (SSTI) | 8.8CNA v3.1 | 1.4% | 2024-03-21 | Fix |
| CVE-2024-28116 | Server-side template injection (SSTI) with Grav CMS security sandbox bypass | 8.8CNA v3.1 | 5.8% | 2024-03-21 | Exploit codeFix |
| CVE-2024-28102 | JWCrypto vulnerable to JWT bomb Attack in `deserialize` function | 6.8CNA v3.1 | 1.0% | 2024-03-21 | Fix |
| CVE-2024-28101 | Apollo Router's Compressed Payloads do not respect HTTP Payload Limits | 7.5CNA v3.1 | 0.8% | 2024-03-21 | Fix |
| CVE-2024-28045 | Delta Electronics DIAEnergie cross-site scripting | 5.4v3.1 | 0.3% | 2024-03-21 | Fix |
| CVE-2024-28040 | Delta Electronics DIAEnergie SQL injection | 8.8CNA v3.1 | 8.5% | 2024-03-21 | Fix |
| CVE-2024-28029 | Client-side enforcement of server-side security in Delta Electronics DIAEnergie | 8.8v3.1 | 0.7% | 2024-03-21 | Fix |
| CVE-2024-27995 | ARMember WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.3% | 2024-03-21 | Fix |
| CVE-2024-27994 | YITH WooCommerce Product Add-Ons WordPress plugin cross-site scripting (XSS) | 7.1CNA v3.1 | 0.4% | 2024-03-21 | Fix |
| CVE-2024-27993 | Calendarista Basic Edition WordPress plugin cross-site scripting (XSS) | 7.1CNA v3.1 | 0.4% | 2024-03-21 | Fix |
| CVE-2024-27968 | Super Page Cache for Cloudflare WordPress plugin cross-site request forgery (CSRF) to XSS | 6.1NVD v3.1 | 0.2% | 2024-03-21 | Fix |
| CVE-2024-27965 | WPFunnels WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.3% | 2024-03-21 | Fix |
| CVE-2024-27964 | Zippy WordPress plugin arbitrary file upload | 8.8v3.1 | 0.6% | 2024-03-21 | Fix |
| CVE-2024-27963 | Crisp Live Chat and Chatbot WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.3% | 2024-03-21 | Fix |
| CVE-2024-27962 | wp-mpdf WordPress plugin reflected cross-site scripting (XSS) | 6.1NVD v3.1 | 0.4% | 2024-03-21 | Fix |
| CVE-2024-27956 | Automatic WordPress plugin unauthenticated arbitrary SQL execution vulnerability | 9.8NVD v3.1 | 94.1% | 2024-03-21 | Reported exploitedNucleiMetasploitExploit codeFix |
| CVE-2024-27936 | Deno interactive permission prompt spoofing via improper ANSI stripping | 8.8CNA v3.1 | 0.9% | 2024-03-21 | Fix |
| CVE-2024-27935 | Deno's Node.js Compatibility Runtime has Cross-Session Data Contamination | 7.2CNA v3.1 | 0.7% | 2024-03-21 | Fix |
| CVE-2024-27934 | denoland deno *const c_void / ExternalPointer unsoundness leading to use-after-free | 8.4CNA v3.1 | 0.4% | 2024-03-21 | Fix |
| CVE-2024-27933 | Deno arbitrary file descriptor close via `op_node_ipc_pipe` leading to permission prompt bypass | 8.3CNA v3.1 | 2.3% | 2024-03-21 | Fix |
| CVE-2024-27932 | Deno's improper suffix match testing for DENO_AUTH_TOKENS | 4.6CNA v3.1 | 0.6% | 2024-03-21 | Fix |
| CVE-2024-27927 | RSSHub vulnerable to SSRF in /mastodon, /zjoi, and /m4 | 6.5CNA v3.1 | 1.0% | 2024-03-21 | Fix |
| CVE-2024-27926 | RSSHub cross-site scripting vulnerability caused by internal media proxy | 6.1CNA v3.1 | 0.5% | 2024-03-21 | Fix |
| CVE-2024-27923 | getgrav grav remote code execution by uploading a phar file using frontmatter | 8.8CNA v3.1 | 1.4% | 2024-03-21 | Fix |
| CVE-2024-27922 | HTTP Handling vulnerability in the Bare server | 9.8CNA v3.1 | 0.8% | 2024-03-21 | Fix |
| CVE-2024-27921 | Grav file upload path traversal | 8.8CNA v3.1 | 60.6% | 2024-03-21 | Fix |
| CVE-2024-27918 | Coder's OIDC authentication allows email with partially matching domain to register | 8.2CNA v3.1 | 1.0% | 2024-03-21 | Fix |
| CVE-2024-27916 | stacklok minder improper authorization | 7.1CNA v3.1 | 0.7% | 2024-03-21 | Fix |
| CVE-2024-27626 | Dotclear cross-site scripting | 6.1CISA ADP v3.1 | 0.4% | 2024-03-21 | |
| CVE-2024-27438 | Apache Doris: Downloading arbitrary remote jar files resulting in remote command execution | 9.8CISA ADP v3.1 | 1.0% | 2024-03-21 | Fix |
| CVE-2024-27292 | Docassemble unauthorized access through URL manipulation | 7.5CNA v3.1 | 69.5% | 2024-03-21 | NucleiExploit codeFix |
| CVE-2024-27291 | Docassemble open redirect | 6.1CNA v3.1 | 0.4% | 2024-03-21 | Fix |
| CVE-2024-27290 | Docassemble HTML and javascript injection | 6.1CNA v3.1 | 0.4% | 2024-03-21 | Fix |
| CVE-2024-27277 | IBM Storage Protect Plus Server information disclosure | 6.2CNA v3.1 | 0.1% | 2024-03-21 | Fix |
| CVE-2024-27190 | Download Media WordPress plugin broken access control | 8.8v3.1 | 0.4% | 2024-03-21 | |
| CVE-2024-27105 | Frappe File Permissions can by bypassed using certain endpoints | 8.1CNA v3.1 | 0.6% | 2024-03-21 | Fix |
| CVE-2024-27094 | OpenZeppelin Contracts base64 encoding may read from potentially dirty memory | 6.5CNA v3.1 | 0.8% | 2024-03-21 | Fix |
| CVE-2024-26643 | Linux kernel nftables anonymous set garbage collection race condition | 7.8CNA v3.1 | 0.2% | 2024-03-21 | Fix |
| CVE-2024-26642 | Linux kernel nftables anonymous sets vulnerability | 7.8CNA v3.1 | 0.3% | 2024-03-21 | Fix |
| CVE-2024-26307 | Apache Doris: Possible race condition | 5.3CISA ADP v3.1 | 0.2% | 2024-03-21 | Fix |
| CVE-2024-25937 | Delta Electronics DIAEnergie SQL injection | 8.8v3.1 | 8.5% | 2024-03-21 | Fix |
| CVE-2024-25811 | iteachyou Dreamer CMS An improper access control | 6.5CISA ADP v3.1 | 0.6% | 2024-03-21 | |
| CVE-2024-25567 | Delta Electronics DIAEnergie path traversal | 8.8v3.1 | 0.7% | 2024-03-21 | Fix |
| CVE-2024-25359 | Zuoxingdong Lagom code injection | 6.6CISA ADP v3.1 | 0.3% | 2024-03-21 | |
| CVE-2024-25239 | Walterjnr1 Employee Management System Sourcecodester SQL injection | 9.8CISA ADP v3.1 | 0.8% | 2024-03-21 | |
| CVE-2024-25167 | Markerhub Eblog cross-site scripting | 6.1CISA ADP v3.1 | 0.6% | 2024-03-21 | |
| CVE-2024-24818 | EspoCRM weakness in Forgot password | 5.9CNA v3.1 | 0.6% | 2024-03-21 | Fix |
| CVE-2024-24813 | Frappe SQL injection from reporting logic | 7.5CNA v3.1 | 0.6% | 2024-03-21 | Fix |
| CVE-2024-24520 | Leptoncms code injection | 7.8CISA ADP v3.1 | 0.4% | 2024-03-21 | Exploit code |
| CVE-2024-24272 | Itopvpn DualSafe Password Manager sensitive information in log files | 7.1CISA ADP v3.1 | 0.2% | 2024-03-21 | |
| CVE-2024-24110 | crmeb_java SQL injection | 6.5CISA ADP v3.1 | 0.6% | 2024-03-21 | |
| CVE-2024-24028 | likeshop server-side request forgery | 5.9CISA ADP v3.1 | 0.2% | 2024-03-21 | |
| CVE-2024-23975 | Delta Electronics DIAEnergie SQL injection | 8.8CNA v3.1 | 8.5% | 2024-03-21 | Fix |
| CVE-2024-23494 | Delta Electronics DIAEnergie SQL injection | 8.8CNA v3.1 | 8.5% | 2024-03-21 | Fix |
| CVE-2024-22724 | Os Commerce code injection | 6.6CISA ADP v3.1 | 0.3% | 2024-03-21 | |
| CVE-2024-22352 | IBM InfoSphere Information Server information disclosure | 6.5CNA v3.1 | 0.5% | 2024-03-21 | Fix |
| CVE-2024-2775 | Campcodes Online Marriage Registration System user-profile.php cross-site scripting | 6.1v3.1 | 0.5% | 2024-03-21 | |
| CVE-2024-2774 | Campcodes Online Marriage Registration System search.php SQL injection | 6.5v3.1 | 0.5% | 2024-03-21 | |
| CVE-2024-2773 | Campcodes Online Marriage Registration System search.php cross-site scripting | 6.1v3.1 | 0.5% | 2024-03-21 | |
| CVE-2024-2770 | Campcodes Complete Online Beauty Parlor Management System contact-us.php SQL injection | 6.5v3.1 | 0.5% | 2024-03-21 | |
| CVE-2024-2769 | Campcodes Complete Online Beauty Parlor Management System admin-profile.php SQL injection | 6.5v3.1 | 0.5% | 2024-03-21 | |
| CVE-2024-2768 | Campcodes Complete Online Beauty Parlor Management System edit-services.php SQL injection | 6.5v3.1 | 0.5% | 2024-03-21 | |
| CVE-2024-2767 | Campcodes Complete Online Beauty Parlor Management System forgot-password.php SQL injection | 6.5v3.1 | 0.5% | 2024-03-21 | |
| CVE-2024-2766 | Campcodes Complete Online Beauty Parlor Management System index.php SQL injection | 6.5v3.1 | 0.5% | 2024-03-21 | |
| CVE-2024-2764 | Tenda AC10U SetPptpServerCfg formSetPPTPServer stack-based overflow | 8.8v3.1 | 1.5% | 2024-03-21 | |
| CVE-2024-2763 | Tenda AC10U setcfm formSetCfm stack-based overflow | 8.8v3.1 | 1.5% | 2024-03-21 |