CVE-2024 records published in March 2024
Page two of three: records 1,001 to 2,000 of the 2,606 published in March 2024, newest first. The first page carries the figures for March 2024.
| CVE | Summary | CVSS | EPSS | Published | Signals |
|---|---|---|---|---|---|
| CVE-2024-2754 | SourceCodester Complete E-Commerce Site users_photo.php unrestricted upload | 8.8v3.1 | 0.8% | 2024-03-21 | |
| CVE-2024-2748 | GitHub Enterprise Server cross-site request forgery | 4.3CNA v3.1 | 0.2% | 2024-03-21 | Fix |
| CVE-2024-2713 | Campcodes Complete Online DJ Booking System booking-search.php SQL injection | 6.5v3.1 | 0.6% | 2024-03-21 | |
| CVE-2024-2712 | Campcodes Complete Online DJ Booking System user-search.php SQL injection | 6.5v3.1 | 0.6% | 2024-03-21 | |
| CVE-2024-2580 | FunnelKit Automation by Autonami plugin stored cross-site scripting | 6.5CNA v3.1 | 0.3% | 2024-03-21 | Fix |
| CVE-2024-2579 | Tracking Code Manager WordPress plugin cross-site scripting (XSS) | 5.9CNA v3.1 | 0.3% | 2024-03-21 | Fix |
| CVE-2024-2578 | WP Coder WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.3% | 2024-03-21 | Fix |
| CVE-2024-2494 | Red Hat Enterprise Linux 8 libvirt: Negative g_new0 length can lead to unbounded memory allocation | 6.2CNA v3.1 | 0.4% | 2024-03-21 | Fix |
| CVE-2024-2465 | Open redirection in CDeX | 7.1CISA ADP v3.1 | 0.5% | 2024-03-21 | Fix |
| CVE-2024-2464 | Application users enumeration in CDeX | 6.3CISA ADP v3.1 | 0.5% | 2024-03-21 | Fix |
| CVE-2024-2463 | Weak password recovery mechanism in CDeX | 8.0CISA ADP v3.1 | 0.6% | 2024-03-21 | Fix |
| CVE-2024-2453 | Advantech WebAccess/SCADA SQL injection | 6.4CNA v3.1 | 0.3% | 2024-03-21 | Fix |
| CVE-2024-2162 | Authenticated remote code execution in Kiloview NDI N series products | 8.8CNA v3.1 | 2.1% | 2024-03-21 | Fix |
| CVE-2024-2161 | Kiloview NDI hard-coded credentials | 9.8CNA v3.1 | 0.9% | 2024-03-21 | Fix |
| CVE-2024-2054 | Artica Proxy Unauthenticated PHP deserialization | 9.8CISA ADP v3.1 | 81.3% | 2024-03-21 | MetasploitExploit code |
| CVE-2024-2053 | Artica Proxy Unauthenticated LFI Protection Bypass | 7.5CISA ADP v3.1 | 44.6% | 2024-03-21 | NucleiExploit code |
| CVE-2024-2016 | ZhiCms setcontroller.php index code injection | 8.8v3.1 | 1.0% | 2024-03-21 | |
| CVE-2024-2015 | ZhiCms mcontroller.php getindexdata SQL injection | 8.8v3.1 | 0.8% | 2024-03-21 | |
| CVE-2024-2014 | Panabit Panalog sprog_upstatus.php SQL injection | 9.8v3.1 | 1.1% | 2024-03-21 | |
| CVE-2024-2007 | OpenBMB XAgent Privileged Mode sandbox | 8.8v3.1 | 0.3% | 2024-03-21 | |
| CVE-2024-1908 | GitHub Enterprise Server GitHub Connect download token privilege escalation | 6.3CNA v3.1 | 0.6% | 2024-03-21 | Fix |
| CVE-2024-1727 | CSRF vulnerability in gradio-app/Gradio | 4.3CNA v3.0 | 0.4% | 2024-03-21 | Fix |
| CVE-2024-1538 | File Manager WordPress plugin cross-site request forgery to local JS file inclusion | 8.8CNA v3.1 | 10.7% | 2024-03-21 | Fix |
| CVE-2024-1503 | Tutor LMS WordPress plugin cross-site request forgery | 4.3CNA v3.1 | 0.2% | 2024-03-21 | Fix |
| CVE-2024-1502 | Themeum Tutor LMS announcement deletion function missing authorization | 4.3v3.1 | 0.4% | 2024-03-21 | Fix |
| CVE-2024-1450 | Shariff Wrapper WordPress plugin authenticated (Contributor+) stored cross-site scripting | 5.4v3.1 | 0.5% | 2024-03-21 | Fix |
| CVE-2024-1394 | Red Hat Ansible Automation Platform memory leaks in code encrypting and verifying RSA payloads | 7.5CNA v3.1 | 1.5% | 2024-03-21 | Fix |
| CVE-2024-1326 | Jeg Elementor Kit WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.5% | 2024-03-21 | Fix |
| CVE-2024-1278 | Easy Social Feed WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.4% | 2024-03-21 | Fix |
| CVE-2024-1214 | Easy Social Feed WordPress plugin cross-site request forgery | 4.3CNA v3.1 | 0.2% | 2024-03-21 | Fix |
| CVE-2024-1213 | Easy Social Feed WordPress plugin cross-site request forgery | 4.3v3.1 | 0.2% | 2024-03-21 | Fix |
| CVE-2024-1202 | Authentication bypass in XPodas' Octopod | 9.8CNA v3.1 | 0.9% | 2024-03-21 | Fix |
| CVE-2024-1148 | OpenText PVCS Weak Access Control arbitrary file upload | 9.8CNA v3.1 | 0.7% | 2024-03-21 | Fix |
| CVE-2024-1147 | OpenText PVCS Weak Access Control arbitrary file download | 9.8CNA v3.1 | 0.7% | 2024-03-21 | Fix |
| CVE-2024-1142 | Sonatype IQ Server path traversal | 5.4CNA v3.1 | 0.8% | 2024-03-21 | Fix |
| CVE-2024-0966 | Shariff Wrapper WordPress plugin authenticated (Contributor+) stored cross-site scripting | 5.4v3.1 | 0.5% | 2024-03-21 | Fix |
| CVE-2024-29474 | Zhyd OneBlog cross-site scripting | 5.4CISA ADP v3.1 | 0.4% | 2024-03-20 | |
| CVE-2024-29473 | Zhyd OneBlog cross-site scripting | 6.1v3.1 | 0.4% | 2024-03-20 | |
| CVE-2024-29472 | Zhyd OneBlog cross-site scripting | 5.4v3.1 | 0.4% | 2024-03-20 | |
| CVE-2024-29471 | Zhyd OneBlog cross-site scripting | 5.4v3.1 | 0.4% | 2024-03-20 | |
| CVE-2024-29470 | Zhyd OneBlog cross-site scripting | 6.1CISA ADP v3.1 | 0.4% | 2024-03-20 | |
| CVE-2024-29469 | Zhyd OneBlog A stored cross-site scripting | 6.1CISA ADP v3.1 | 0.4% | 2024-03-20 | |
| CVE-2024-29419 | TOTOLINK X2000R cross-site scripting | 5.4v3.1 | 0.4% | 2024-03-20 | |
| CVE-2024-29037 | acryldata datahub-helm default secret use for initial deployment | 9.1CNA v3.1 | 0.6% | 2024-03-20 | Fix |
| CVE-2024-29036 | Saleor Storefront session leak in cache | 4.3CNA v3.1 | 0.6% | 2024-03-20 | Fix |
| CVE-2024-29033 | Project Jupyter OAuthenticator GoogleOAuthenticator hosted_domain check improper authorization | 7.5CNA v3.1 | 0.6% | 2024-03-20 | Fix |
| CVE-2024-29032 | qiskit-ibm-runtime `qiskit_ibm_runtime.RuntimeDecoder` can execute arbitrary code | 5.3CNA v3.1 | 0.4% | 2024-03-20 | Fix |
| CVE-2024-29026 | Owncast cross origin request | 9.1NVD v3.1 | 0.4% | 2024-03-20 | Fix |
| CVE-2024-29018 | moby external DNS requests from internal networks could lead to data exfiltration | 5.9CNA v3.1 | 0.8% | 2024-03-20 | Fix |
| CVE-2024-28868 | Umbraco CMS login screen vulnerability | 3.7CNA v3.1 | 0.5% | 2024-03-20 | Fix |
| CVE-2024-28735 | UNIT4 Financials BY Coda improper authentication | 8.1CISA ADP v3.1 | 0.7% | 2024-03-20 | |
| CVE-2024-28584 | FreeImage open source null pointer dereference | 3.3CISA ADP v3.1 | 0.4% | 2024-03-20 | |
| CVE-2024-28583 | FreeImage open source buffer overflow | 7.8CISA ADP v3.1 | 0.4% | 2024-03-20 | |
| CVE-2024-28582 | FreeImage open source buffer overflow | 8.4CISA ADP v3.1 | 0.4% | 2024-03-20 | |
| CVE-2024-28581 | FreeImage open source buffer overflow | 8.4CISA ADP v3.1 | 0.4% | 2024-03-20 | |
| CVE-2024-28580 | FreeImage open source buffer overflow | 8.4CISA ADP v3.1 | 0.4% | 2024-03-20 | |
| CVE-2024-28579 | FreeImage open source buffer overflow | 6.2CISA ADP v3.1 | 0.3% | 2024-03-20 | |
| CVE-2024-28578 | FreeImage open source buffer overflow | 8.4CISA ADP v3.1 | 0.4% | 2024-03-20 | |
| CVE-2024-28577 | FreeImage open source null pointer dereference | 5.5CISA ADP v3.1 | 0.3% | 2024-03-20 | |
| CVE-2024-28576 | FreeImage open source buffer overflow | 5.5CISA ADP v3.1 | 0.3% | 2024-03-20 | |
| CVE-2024-28575 | FreeImage open source buffer overflow | 8.4CISA ADP v3.1 | 0.3% | 2024-03-20 | |
| CVE-2024-28574 | FreeImage open source buffer overflow | 6.2CISA ADP v3.1 | 0.3% | 2024-03-20 | |
| CVE-2024-28573 | FreeImage open source buffer overflow | 6.2CISA ADP v3.1 | 0.3% | 2024-03-20 | |
| CVE-2024-28572 | FreeImage open source buffer overflow | 6.2CISA ADP v3.1 | 0.3% | 2024-03-20 | |
| CVE-2024-28571 | FreeImage open source buffer overflow | 5.5CISA ADP v3.1 | 0.3% | 2024-03-20 | |
| CVE-2024-28570 | FreeImage open source buffer overflow | 5.5CISA ADP v3.1 | 0.3% | 2024-03-20 | |
| CVE-2024-28569 | FreeImage open source buffer overflow | 7.8CISA ADP v3.1 | 0.3% | 2024-03-20 | |
| CVE-2024-28568 | FreeImage open source buffer overflow | 8.4CISA ADP v3.1 | 0.3% | 2024-03-20 | |
| CVE-2024-28567 | FreeImage open source buffer overflow | 6.2CISA ADP v3.1 | 0.3% | 2024-03-20 | |
| CVE-2024-28566 | FreeImage open source buffer overflow | 8.4CISA ADP v3.1 | 0.4% | 2024-03-20 | |
| CVE-2024-28565 | FreeImage open source buffer overflow | 5.5CISA ADP v3.1 | 0.4% | 2024-03-20 | |
| CVE-2024-28564 | FreeImage open source buffer overflow | 6.2CISA ADP v3.1 | 0.5% | 2024-03-20 | |
| CVE-2024-28563 | FreeImage open source buffer overflow | 5.9CISA ADP v3.1 | 0.5% | 2024-03-20 | |
| CVE-2024-28562 | FreeImage open source buffer overflow | 6.8CISA ADP v3.1 | 0.5% | 2024-03-20 | |
| CVE-2024-28396 | Myprestamodules Orders (csv, Excel) Export Pro code injection | 7.5CISA ADP v3.1 | 0.8% | 2024-03-20 | |
| CVE-2024-28395 | Bestkit Popup SQL injection | 9.8CISA ADP v3.1 | 0.7% | 2024-03-20 | |
| CVE-2024-28392 | PrestaShop Abandoned Cart Reminder Pro pscartabandonmentpro v.2.0.11 and SQL injection | 9.8CISA ADP v3.1 | 0.6% | 2024-03-20 | |
| CVE-2024-28231 | eProsima Fast-DDS manipulated DATA Submessage causes a heap-buffer-overflow error | 9.7CNA v3.1 | 0.9% | 2024-03-20 | Exploit codeFix |
| CVE-2024-28179 | Jupyter Server Proxy's Websocket Proxying does not require authentication | 9.1CNA v3.1 | 1.0% | 2024-03-20 | Fix |
| CVE-2024-27286 | zulip moving single messages from public to private streams leaves them accessible | 6.5CNA v3.1 | 0.5% | 2024-03-20 | Fix |
| CVE-2024-25294 | getrebuild rebuild An server-side request forgery | 9.1CISA ADP v3.1 | 0.8% | 2024-03-20 | |
| CVE-2024-24050 | Remyandrade Workout Journal App Sourcecodester cross-site scripting | 4.7CISA ADP v3.1 | 0.4% | 2024-03-20 | |
| CVE-2024-23821 | GeoServer's GWC Demos page vulnerable to stored cross-site scripting (XSS) | 4.8CNA v3.1 | 0.4% | 2024-03-20 | Fix |
| CVE-2024-23819 | GeoServer stored cross-site scripting (XSS) vulnerability in MapML HTML page | 4.8CNA v3.1 | 0.4% | 2024-03-20 | Fix |
| CVE-2024-23818 | GeoServer stored cross-site scripting (XSS) vulnerability in WMS OpenLayers Format | 4.8CNA v3.1 | 0.4% | 2024-03-20 | Fix |
| CVE-2024-23721 | DrayTek Vigor3910 process_post path traversal | 7.5CISA ADP v3.1 | 0.9% | 2024-03-20 | Fix |
| CVE-2024-23643 | GeoServer stored cross-site scripting (XSS) vulnerability in GWC Seed form | 4.8CNA v3.1 | 0.4% | 2024-03-20 | Fix |
| CVE-2024-23642 | GeoServer stored cross-site scripting (XSS) vulnerability in Simple SVG Renderer | 4.8CNA v3.1 | 0.4% | 2024-03-20 | Fix |
| CVE-2024-23640 | GeoServer stored cross-site scripting (XSS) vulnerability in Style Publisher | 4.8CNA v3.1 | 0.4% | 2024-03-20 | Fix |
| CVE-2024-23634 | GeoServer arbitrary file renaming vulnerability in REST Coverage/Data Store API | 6.0CNA v3.1 | 0.7% | 2024-03-20 | Fix |
| CVE-2024-22258 | PKCE Downgrade in Spring Authorization Server | 6.1CNA v3.1 | 0.5% | 2024-03-20 | Fix |
| CVE-2024-22085 | Elspec-ltd G5DFR incorrect default permissions | 6.2CISA ADP v3.1 | 0.2% | 2024-03-20 | |
| CVE-2024-22084 | Elspec-ltd G5DFR cleartext storage of sensitive information | 7.5CISA ADP v3.1 | 0.4% | 2024-03-20 | |
| CVE-2024-22083 | Elspec-ltd G5DFR hard-coded credentials | 6.5CISA ADP v3.1 | 0.6% | 2024-03-20 | |
| CVE-2024-22082 | Elspec-ltd G5DFR directory listing | 7.5CISA ADP v3.1 | 0.6% | 2024-03-20 | |
| CVE-2024-22081 | Elspec-ltd G5DFR HTTP request smuggling | 9.8CISA ADP v3.1 | 0.8% | 2024-03-20 | |
| CVE-2024-22080 | Elspec-ltd G5DFR memory corruption | 9.8CISA ADP v3.1 | 0.8% | 2024-03-20 | |
| CVE-2024-22079 | Elspec-ltd G5DFR path traversal | 7.5CISA ADP v3.1 | 1.0% | 2024-03-20 | |
| CVE-2024-22078 | Elspec-ltd G5DFR improper handling of insufficient permissions | 8.8CISA ADP v3.1 | 0.6% | 2024-03-20 | |
| CVE-2024-22077 | Elspec-ltd G5DFR improper handling of insufficient permissions | 5.3CISA ADP v3.1 | 0.5% | 2024-03-20 | |
| CVE-2024-2721 | Social Media Share Buttons WordPress plugin PHP object injection | 8.8v3.1 | 0.7% | 2024-03-20 | |
| CVE-2024-2720 | Campcodes Complete Online DJ Booking System aboutus.php cross-site scripting | 6.1v3.1 | 0.6% | 2024-03-20 | |
| CVE-2024-2719 | Campcodes Complete Online DJ Booking System admin-profile.php cross-site scripting | 6.1v3.1 | 0.5% | 2024-03-20 | |
| CVE-2024-2718 | Campcodes Complete Online DJ Booking System booking-bwdates-reports-details.php cross-site scripting | 6.1v3.1 | 0.5% | 2024-03-20 | |
| CVE-2024-2717 | Campcodes Complete Online DJ Booking System booking-search.php cross-site scripting | 6.1v3.1 | 0.5% | 2024-03-20 | |
| CVE-2024-2716 | Campcodes Complete Online DJ Booking System contactus.php cross-site scripting | 6.1v3.1 | 0.5% | 2024-03-20 | |
| CVE-2024-2715 | Campcodes Complete Online DJ Booking System user-search.php cross-site scripting | 6.1v3.1 | 0.5% | 2024-03-20 | |
| CVE-2024-2714 | Campcodes Complete Online DJ Booking System booking-bwdates-reports-details.php SQL injection | 6.5v3.1 | 0.5% | 2024-03-20 | |
| CVE-2024-2711 | Tenda AC10U addWifiMacFilter stack-based overflow | 8.8v3.1 | 1.5% | 2024-03-20 | |
| CVE-2024-2710 | Tenda AC10U openSchedWifi setSchedWifi stack-based overflow | 8.8v3.1 | 1.5% | 2024-03-20 | |
| CVE-2024-2709 | Tenda AC10U SetStaticRouteCfg fromSetRouteStatic stack-based overflow | 8.8v3.1 | 1.5% | 2024-03-20 | |
| CVE-2024-2708 | Tenda AC10U execCommand formexeCommand stack-based overflow | 8.8v3.1 | 1.5% | 2024-03-20 | |
| CVE-2024-2707 | Tenda AC10U WriteFacMac formWriteFacMac os command injection | 8.8v3.1 | 4.6% | 2024-03-20 | |
| CVE-2024-2706 | Tenda AC10U WifiWpsStart formWifiWpsStart stack-based overflow | 8.8v3.1 | 1.7% | 2024-03-20 | Emerging Threats |
| CVE-2024-2705 | Tenda AC10U SetNetControlList formSetQosBand stack-based overflow | 8.8v3.1 | 1.5% | 2024-03-20 | |
| CVE-2024-2704 | Tenda AC10U SetFirewallCfg formSetFirewallCfg stack-based overflow | 8.8v3.1 | 1.5% | 2024-03-20 | |
| CVE-2024-2703 | Tenda AC10U SetOnlineDevName formSetDeviceName stack-based overflow | 8.8v3.1 | 1.5% | 2024-03-20 | |
| CVE-2024-2702 | Olive One Click Demo Import WordPress plugin broken access control | 9.8v3.1 | 0.6% | 2024-03-20 | Fix |
| CVE-2024-2690 | SourceCodester Online Discussion Forum Site uupdate.php unrestricted upload | 9.8v3.1 | 1.0% | 2024-03-20 | |
| CVE-2024-2687 | Campcodes Online Job Finder System index.php SQL injection | 6.5v3.1 | 0.6% | 2024-03-20 | |
| CVE-2024-2686 | Campcodes Online Job Finder System controller.php cross-site scripting | 6.1v3.1 | 0.6% | 2024-03-20 | |
| CVE-2024-2685 | Campcodes Online Job Finder System index.php cross-site scripting | 6.1v3.1 | 0.6% | 2024-03-20 | |
| CVE-2024-2684 | Campcodes Online Job Finder System index.php cross-site scripting | 6.1v3.1 | 0.6% | 2024-03-20 | |
| CVE-2024-2683 | Campcodes Online Job Finder System index.php cross-site scripting | 6.1v3.1 | 0.6% | 2024-03-20 | |
| CVE-2024-2682 | Campcodes Online Job Finder System controller.php cross-site scripting | 6.1v3.1 | 0.6% | 2024-03-20 | |
| CVE-2024-2681 | Campcodes Online Job Finder System index.php cross-site scripting | 6.1v3.1 | 0.6% | 2024-03-20 | |
| CVE-2024-2680 | Campcodes Online Job Finder System index.php cross-site scripting | 6.1v3.1 | 0.6% | 2024-03-20 | |
| CVE-2024-2679 | Campcodes Online Job Finder System index.php cross-site scripting | 6.1v3.1 | 0.6% | 2024-03-20 | |
| CVE-2024-2678 | Campcodes Online Job Finder System controller.php SQL injection | 6.5v3.1 | 0.5% | 2024-03-20 | |
| CVE-2024-2677 | Campcodes Online Job Finder System controller.php SQL injection | 6.5v3.1 | 0.5% | 2024-03-20 | |
| CVE-2024-2676 | Campcodes Online Job Finder System controller.php SQL injection | 6.5v3.1 | 0.5% | 2024-03-20 | |
| CVE-2024-2675 | Campcodes Online Job Finder System index.php SQL injection | 6.5v3.1 | 0.5% | 2024-03-20 | |
| CVE-2024-2674 | Campcodes Online Job Finder System index.php SQL injection | 6.5v3.1 | 0.6% | 2024-03-20 | |
| CVE-2024-2673 | Campcodes Online Job Finder System login.php SQL injection | 6.5v3.1 | 0.6% | 2024-03-20 | |
| CVE-2024-2672 | Campcodes Online Job Finder System controller.php SQL injection | 6.5v3.1 | 0.6% | 2024-03-20 | |
| CVE-2024-2671 | Campcodes Online Job Finder System index.php SQL injection | 6.5v3.1 | 0.6% | 2024-03-20 | |
| CVE-2024-2670 | Campcodes Online Job Finder System index.php SQL injection | 6.5v3.1 | 0.6% | 2024-03-20 | |
| CVE-2024-2669 | Campcodes Online Job Finder System GET parameter controller.php SQL injection | 6.5v3.1 | 0.6% | 2024-03-20 | |
| CVE-2024-2668 | Campcodes Online Job Finder System controller.php SQL injection | 6.5v3.1 | 0.6% | 2024-03-20 | |
| CVE-2024-2649 | Netentsec NS-ASG Application Security Gateway deleteonlineuser.php SQL injection | 9.8v3.1 | 0.8% | 2024-03-20 | |
| CVE-2024-2631 | Google Chrome iOS inappropriate implementation | 4.3v3.1 | 0.7% | 2024-03-20 | Fix |
| CVE-2024-2630 | Google Chrome iOS inappropriate implementation | 6.5v3.1 | 0.8% | 2024-03-20 | Fix |
| CVE-2024-2629 | Google Chrome iOS incorrect security UI | 4.3v3.1 | 0.7% | 2024-03-20 | Fix |
| CVE-2024-2628 | Google Chrome Downloads inappropriate implementation | 4.3v3.1 | 0.7% | 2024-03-20 | Fix |
| CVE-2024-2627 | Google Chrome Canvas use-after-free | 8.8v3.1 | 0.9% | 2024-03-20 | Fix |
| CVE-2024-2626 | Google Chrome Swiftshader out-of-bounds read | 6.5v3.1 | 0.8% | 2024-03-20 | Fix |
| CVE-2024-2625 | Google Chrome V8 object lifecycle issue | 8.8v3.1 | 21.4% | 2024-03-20 | Fix |
| CVE-2024-2538 | Permalink Manager Lite WordPress plugin unauthorized access | 4.3v3.1 | 0.6% | 2024-03-20 | Fix |
| CVE-2024-2474 | Standout Color Boxes and Buttons WordPress plugin stored cross-site scripting | 6.4CNA v3.1 | 0.4% | 2024-03-20 | |
| CVE-2024-2469 | GitHub Enterprise Server administrator SSH access remote code execution | 8.0CNA v3.1 | 1.6% | 2024-03-20 | Fix |
| CVE-2024-2460 | GamiPress Button WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.4% | 2024-03-20 | Fix |
| CVE-2024-2459 | UX Flat WordPress plugin Authenticated(Contributor+) stored cross-site scripting via shortcode | 7.4CNA v3.1 | 0.5% | 2024-03-20 | Fix |
| CVE-2024-2443 | GitHub Enterprise Server Management Console GeoJSON settings command injection | 9.1CNA v3.1 | 2.1% | 2024-03-20 | Fix |
| CVE-2024-2387 | Advanced Form Integration WordPress plugin SQL injection | 6.1CNA v3.1 | 1.6% | 2024-03-20 | Exploit codeFix |
| CVE-2024-2384 | WooCommerce POS WordPress plugin information disclosure | 4.3CNA v3.1 | 0.3% | 2024-03-20 | Fix |
| CVE-2024-2304 | Animated Headline WordPress plugin stored cross-site scripting | 6.4CNA v3.1 | 0.3% | 2024-03-20 | |
| CVE-2024-2291 | Progress Software MOVEit Transfer user activity logging vulnerability | 4.3CNA v3.1 | 0.4% | 2024-03-20 | Fix |
| CVE-2024-2255 | Essential Blocks WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.6% | 2024-03-20 | Fix |
| CVE-2024-2197 | Chirp Systems Chirp Access use of hard-coded password | 2.3CNA v4.0 | 0.3% | 2024-03-20 | |
| CVE-2024-2129 | WPBITS Addons For Elementor Page Builder WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.5% | 2024-03-20 | Fix |
| CVE-2024-2124 | Translate WordPress and go Multilingual Weglot plugin stored cross-site scripting | 6.4CNA v3.1 | 0.5% | 2024-03-20 | Fix |
| CVE-2024-1995 | Smart Custom Fields WordPress plugin missing authorization authenticated post content disclosure | 4.3CNA v3.1 | 0.6% | 2024-03-20 | Fix |
| CVE-2024-1983 | Simple Ajax Chat WordPress plugin unauthenticated stored XSS | 7.1CISA ADP v3.1 | 0.5% | 2024-03-20 | Fix |
| CVE-2024-1856 | Progress Telerik Reporting Remote deserialization | 8.5CNA v3.1 | 1.1% | 2024-03-20 | Fix |
| CVE-2024-1844 | RevivePress Keep your Old Content Evergreen WordPress plugin missing authorization | 4.3CNA v3.1 | 0.4% | 2024-03-20 | Fix |
| CVE-2024-1811 | A potential vulnerability has been identified in OpenText ArcSight Platform. The vulnerability could be remotely exploited. | 9.8CNA v3.1 | 0.6% | 2024-03-20 | Fix |
| CVE-2024-1801 | Progress Telerik Reporting Local deserialization | 7.7CNA v3.1 | 0.4% | 2024-03-20 | Fix |
| CVE-2024-1800 | Progress Telerik Report Server deserialization | 9.9CNA v3.1 | 34.2% | 2024-03-20 | MetasploitEmerging ThreatsExploit codeKCVFix |
| CVE-2024-1799 | GamiPress WordPress plugin SQL injection | 8.8CNA v3.1 | 1.0% | 2024-03-20 | Fix |
| CVE-2024-1787 | Contests by Rewards Fuel WordPress plugin stored cross-site scripting | 6.4CNA v3.1 | 0.6% | 2024-03-20 | Fix |
| CVE-2024-1785 | Contests by Rewards Fuel WordPress plugin cross-site request forgery to stored cross-site scripting | 5.4CNA v3.1 | 0.3% | 2024-03-20 | Fix |
| CVE-2024-1711 | Create by Mediavine WordPress plugin unauthenticated SQL injection via id | 9.8CNA v3.1 | 0.7% | 2024-03-20 | Fix |
| CVE-2024-1477 | Easy Maintenance Mode WordPress plugin information exposure | 5.3CNA v3.1 | 0.4% | 2024-03-20 | |
| CVE-2024-1473 | Coming Soon and Maintenance Mode by Colorlib WordPress plugin information exposure | 5.3v3.1 | 0.5% | 2024-03-20 | Fix |
| CVE-2024-1379 | Website Article Monetization By MageNet WordPress plugin unauthenticated stored cross-site scripting | 6.1v3.1 | 0.5% | 2024-03-20 | Fix |
| CVE-2024-1325 | Live Sales Notification for Woocommerce Woomotiv WordPress plugin cross-site request forgery | 4.3v3.1 | 0.3% | 2024-03-20 | Fix |
| CVE-2024-1205 | Wemanage Management App for WooCommerce CSV upload function unrestricted file upload | 8.8v3.1 | 1.3% | 2024-03-20 | Fix |
| CVE-2024-1181 | Dazzlersoft Coming Soon plugin maintenance mode check vulnerability | 5.3CNA v3.1 | 0.6% | 2024-03-20 | Fix |
| CVE-2024-1119 | Order Tip for WooCommerce WordPress plugin missing authorization to unauthenticated data export | 5.3CNA v3.1 | 0.5% | 2024-03-20 | Fix |
| CVE-2024-0856 | Booking Calendar WordPress plugin CSRF appointment scheduling | 8.8CISA ADP v3.1 | 0.4% | 2024-03-20 | Fix |
| CVE-2024-0337 | Travelpayouts WordPress plugin open redirect | 6.1CISA ADP v3.1 | 0.9% | 2024-03-20 | NucleiFix |
| CVE-2024-29143 | Passwordless Login WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.3% | 2024-03-19 | Fix |
| CVE-2024-29142 | Better Search WordPress plugin stored cross-site scripting (XSS) | 7.1CNA v3.1 | 0.4% | 2024-03-19 | Fix |
| CVE-2024-29141 | PDF Embedder WordPress plugin cross-site scripting (XSS) | 5.5CNA v3.1 | 0.3% | 2024-03-19 | Fix |
| CVE-2024-29140 | MJM Clinic WordPress plugin cross-site scripting (XSS) | 5.9CNA v3.1 | 0.3% | 2024-03-19 | Fix |
| CVE-2024-29139 | MyCurator Content Curation WordPress plugin cross-site scripting (XSS) | 7.1CNA v3.1 | 0.4% | 2024-03-19 | Fix |
| CVE-2024-29138 | Joachim Jensen Restrict User Access plugin reflected cross-site scripting | 6.1NVD v3.1 | 0.6% | 2024-03-19 | NucleiFix |
| CVE-2024-29137 | Tourfic WordPress plugin reflected cross-site scripting (XSS) | 6.1NVD v3.1 | 0.6% | 2024-03-19 | NucleiFix |
| CVE-2024-29136 | Tourfic WordPress plugin PHP object injection | 8.8v3.1 | 0.6% | 2024-03-19 | Fix |
| CVE-2024-29135 | Tourfic WordPress plugin arbitrary file upload | 8.8NVD v3.1 | 0.7% | 2024-03-19 | Fix |
| CVE-2024-29134 | Tourfic WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.3% | 2024-03-19 | Fix |
| CVE-2024-29130 | Contact Form 7 PayPal and Stripe Add-on WordPress plugin reflected cross-site scripting (XSS) | 6.1NVD v3.1 | 0.4% | 2024-03-19 | Fix |
| CVE-2024-29129 | OxyExtras WordPress plugin cross-site scripting (XSS) | 6.1NVD v3.1 | 0.4% | 2024-03-19 | Fix |
| CVE-2024-29128 | POST SMTP Mailer WordPress plugin reflected cross-site scripting (XSS) | 6.1NVD v3.1 | 0.4% | 2024-03-19 | Fix |
| CVE-2024-29127 | Advanced Access Manager WordPress plugin reflected cross-site scripting (XSS) | 6.1NVD v3.1 | 0.4% | 2024-03-19 | Fix |
| CVE-2024-29126 | Specific Content For Mobile WordPress plugin cross-site scripting (XSS) | 7.1CNA v3.1 | 0.4% | 2024-03-19 | Fix |
| CVE-2024-29125 | Coupon Affiliates WordPress plugin reflected cross-site scripting (XSS) | 7.1CNA v3.1 | 0.4% | 2024-03-19 | Fix |
| CVE-2024-29124 | Advanced Access Manager WordPress plugin cross-site scripting (XSS) | 5.9CNA v3.1 | 0.4% | 2024-03-19 | Fix |
| CVE-2024-29123 | Link Library WordPress plugin reflected cross-site scripting (XSS) | 6.1NVD v3.1 | 0.4% | 2024-03-19 | Fix |
| CVE-2024-29122 | FV Player WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.3% | 2024-03-19 | Fix |
| CVE-2024-29121 | WooCommerce License Manager WordPress plugin reflected cross-site scripting (XSS) | 7.1CNA v3.1 | 0.4% | 2024-03-19 | Fix |
| CVE-2024-29118 | Scrollsequence WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.3% | 2024-03-19 | Fix |
| CVE-2024-29117 | Contact Forms by Cimatti WordPress plugin unauthenticated stored cross-site scripting (XSS) | 6.1NVD v3.1 | 0.4% | 2024-03-19 | Fix |
| CVE-2024-29116 | WooThumbs for WooCommerce by Iconic WordPress plugin reflected cross-site scripting (XSS) | 7.1CNA v3.1 | 0.4% | 2024-03-19 | Fix |
| CVE-2024-29115 | Smart Online Order for Clover WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.3% | 2024-03-19 | Fix |
| CVE-2024-29114 | Download Manager WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.3% | 2024-03-19 | Fix |
| CVE-2024-29113 | RegistrationMagic WordPress plugin reflected cross-site scripting (XSS) | 6.1NVD v3.1 | 0.4% | 2024-03-19 | Fix |
| CVE-2024-29112 | WooCommerce Google Feed Manager WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.4% | 2024-03-19 | Fix |
| CVE-2024-29111 | Sitekit WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.3% | 2024-03-19 | Fix |
| CVE-2024-29110 | Table and Contact Form 7 Database WordPress plugin cross-site scripting | 7.1CNA v3.1 | 0.4% | 2024-03-19 | Fix |
| CVE-2024-29109 | Shariff Wrapper WordPress plugin Contributor+ cross-site scripting (XSS) | 5.4v3.1 | 0.3% | 2024-03-19 | Fix |
| CVE-2024-29108 | Happy Addons for Elementor WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.3% | 2024-03-19 | Fix |
| CVE-2024-29107 | Elementor Addon Elements WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.3% | 2024-03-19 | Fix |
| CVE-2024-29106 | Premium Addons for Elementor WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.3% | 2024-03-19 | Fix |
| CVE-2024-29105 | WP Popups WordPress Popup builder plugin cross-site scripting (XSS) | 5.9CNA v3.1 | 0.3% | 2024-03-19 | Fix |
| CVE-2024-29104 | Ticket Tailor WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.3% | 2024-03-19 | Fix |
| CVE-2024-29103 | Database for Contact Form 7 WordPress plugin unauthenticated cross-site scripting (XSS) | 7.1CNA v3.1 | 0.3% | 2024-03-19 | Fix |
| CVE-2024-29102 | Extensions For CF7 WordPress plugin unauthenticated cross-site scripting (XSS) | 6.1NVD v3.1 | 0.3% | 2024-03-19 | Fix |
| CVE-2024-29101 | Jeg Elementor Kit WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.4% | 2024-03-19 | Fix |
| CVE-2024-29099 | Evergreen Content Poster WordPress plugin reflected cross-site scripting (XSS) | 6.1NVD v3.1 | 0.4% | 2024-03-19 | Fix |
| CVE-2024-29098 | WP Calameo WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.3% | 2024-03-19 | Fix |
| CVE-2024-29097 | User profile WordPress plugin Subscriber+ stored cross-site scripting (XSS) | 6.3CNA v3.1 | 0.4% | 2024-03-19 | Fix |
| CVE-2024-29096 | MJM Clinic WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.3% | 2024-03-19 | Fix |
| CVE-2024-29095 | Site Reviews WordPress plugin cross-site scripting (XSS) | 5.9CNA v3.1 | 0.3% | 2024-03-19 | Fix |
| CVE-2024-29094 | HT Easy GA4 WordPress plugin cross-site scripting (XSS) | 6.1NVD v3.1 | 0.4% | 2024-03-19 | Fix |
| CVE-2024-29093 | Builder for WooCommerce reviews shortcodes ReviewShort WordPress plugin cross-site request forgery | 4.3CNA v3.1 | 0.2% | 2024-03-19 | Fix |
| CVE-2024-29092 | Permalink Manager Lite WordPress plugin reflected cross-site scripting (XSS) | 6.1NVD v3.1 | 0.4% | 2024-03-19 | Fix |
| CVE-2024-29091 | WP Armour WordPress plugin reflected cross-site scripting (XSS) | 7.1CNA v3.1 | 0.4% | 2024-03-19 | Fix |
| CVE-2024-29089 | Restaurant Menu and Food Ordering WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.3% | 2024-03-19 | Fix |
| CVE-2024-29027 | parse-community parse-server parse Server crash and RCE via invalid Cloud function or Cloud Job name | 9.1CNA v3.1 | 1.2% | 2024-03-19 | Fix |
| CVE-2024-28734 | Unit4 Financials by Coda cross-site scripting | 6.1CISA ADP v3.1 | 1.8% | 2024-03-19 | Nuclei |
| CVE-2024-28715 | Html-js DoraCMS cross-site scripting | 8.8CISA ADP v3.1 | 1.1% | 2024-03-19 | |
| CVE-2024-28595 | Walterjnr1 Employee Management System SQL injection | 9.8CISA ADP v3.1 | 1.2% | 2024-03-19 | Exploit code |
| CVE-2024-28447 | Szlbt Lbt-t300-mini1 stack-based buffer overflow | 6.5CISA ADP v3.1 | 0.5% | 2024-03-19 | |
| CVE-2024-28446 | Szlbt Lbt-t300-mini1 stack-based buffer overflow | 5.7CISA ADP v3.1 | 0.5% | 2024-03-19 | |
| CVE-2024-28394 | Advanced Plugins reportsstatistics plugin remote code execution | 9.8CISA ADP v3.1 | 1.2% | 2024-03-19 | |
| CVE-2024-28389 | KnowBand spinwheel v.3.0.3 and SQL injection | 9.8CISA ADP v3.1 | 0.8% | 2024-03-19 | |
| CVE-2024-28303 | Open Source Medicine Ordering System reports page SQL injection | 9.8CISA ADP v3.1 | 0.5% | 2024-03-19 | |
| CVE-2024-28283 | Linksys E1000 pc_change_act function stack-based buffer overflow | 6.7CISA ADP v3.1 | 0.5% | 2024-03-19 | |
| CVE-2024-28092 | UBEE DDW365 XCNDDW365 8.14.3105 software on hardware 3.13.1 allows a remote attacker within Wi-Fi proximity to conduct stored XSS attacks via RgFirewallEL.asp, RgDdns.asp, RgTime.asp, RgDiagnostics.asp, or RgParentalBasic.asp. The affected fields are SMTP Server Name, SMTP Username, Host Name, Time | 7.2CISA ADP v3.1 | 0.5% | 2024-03-19 | |
| CVE-2024-27998 | Barcode Scanner and Inventory manager WordPress plugin reflected cross-site scripting (XSS) | 7.1CNA v3.1 | 0.4% | 2024-03-19 | Fix |
| CVE-2024-27997 | Visual Composer WordPress plugin cross-site scripting (XSS) | 5.9CNA v3.1 | 0.3% | 2024-03-19 | Fix |
| CVE-2024-27996 | Survey Maker WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.3% | 2024-03-19 | Fix |
| CVE-2024-27439 | Apache Wicket: Possible bypass of CSRF protection | 6.5CISA ADP v3.1 | 0.7% | 2024-03-19 | Fix |
| CVE-2024-26369 | An issue in the HistoryQosPolicy component of FastDDS v2.12.x, v2.11.x, v2.10.x, and v2.6.x leads to a SIGABRT (signal abort) upon receiving DataWriter's data. | 7.5CISA ADP v3.1 | 0.6% | 2024-03-19 | Fix |
| CVE-2024-25942 | Dell PowerEdge Platform improper input validation | 4.4CNA v3.1 | 0.2% | 2024-03-19 | Fix |
| CVE-2024-24683 | Apache Hop Engine: ID isn't escaped when generating HTML | 6.5CISA ADP v3.1 | 1.2% | 2024-03-19 | Fix |
| CVE-2024-24336 | '/members/moremember.pl' multiple cross-site scripting | 8.1CISA ADP v3.1 | 0.4% | 2024-03-19 | |
| CVE-2024-24043 | Speedy11CZ MCRPX v.1.4.0 and path traversal | 5.5CNA v3.1 | 0.4% | 2024-03-19 | |
| CVE-2024-24042 | Path traversal in flaskcode Devan-Kerman ARRP | 8.8CNA v3.1 | 1.4% | 2024-03-19 | Fix |
| CVE-2024-22453 | Dell PowerEdge Platform heap-based buffer overflow | 7.2CNA v3.1 | 0.2% | 2024-03-19 | Fix |
| CVE-2024-22025 | Node.js Node improper resource release | 6.5CNA v3.0 | 1.3% | 2024-03-19 | Fix |
| CVE-2024-22017 | Node.js Node execution with unnecessary privileges | 7.3CNA v3.0 | 0.9% | 2024-03-19 | Fix |
| CVE-2024-21677 | Atlassian Confluence Data Center path traversal | 8.3CNA v3.0 | 0.9% | 2024-03-19 | Fix |
| CVE-2024-21504 | Cross-site scripting in Livewire/Livewire | 6.1CNA v3.1 | 0.5% | 2024-03-19 | Fix |
| CVE-2024-21503 | Black vulnerable to regular expression denial of service (ReDoS) | 5.3CNA v3.1 | 1.0% | 2024-03-19 | Fix |
| CVE-2024-2648 | Netentsec NS-ASG Application Security Gateway naccheck.php XPath injection | 5.3v3.1 | 0.7% | 2024-03-19 | |
| CVE-2024-2647 | Netentsec NS-ASG Application Security Gateway singlelogin.php SQL injection | 9.8v3.1 | 1.0% | 2024-03-19 | |
| CVE-2024-2646 | Netentsec NS-ASG Application Security Gateway SQL injection | 9.8v3.1 | 0.8% | 2024-03-19 | |
| CVE-2024-2645 | Netentsec NS-ASG Application Security Gateway resetpwd.php XPath injection | 5.3v3.1 | 0.7% | 2024-03-19 | |
| CVE-2024-2644 | Netentsec NS-ASG Application Security Gateway addfirewall.php SQL injection | 9.8v3.1 | 0.8% | 2024-03-19 | |
| CVE-2024-2642 | Ruijie RG-NBS2009G-P EXCU_SHELL command injection | 7.3CNA v3.1 | 2.8% | 2024-03-19 | |
| CVE-2024-2641 | Ruijie RG-NBS2009G-P Password passwdManage.htm improper authorization | 5.3CNA v3.1 | 0.8% | 2024-03-19 | |
| CVE-2024-2639 | Bdtask Wholesale Inventory Management System session fixiation | 4.3CNA v3.1 | 0.5% | 2024-03-19 | |
| CVE-2024-2636 | Cegid Meta4 HR update_password.jsp unrestricted file upload | 9.0CNA v3.1 | 0.6% | 2024-03-19 | |
| CVE-2024-2635 | Cegid Meta4 HR configuration pages information disclosure | 7.3CNA v3.1 | 0.4% | 2024-03-19 | |
| CVE-2024-2634 | Cegid Meta4 HR generico_login.jsp cross-site scripting | 6.1CNA v3.1 | 0.3% | 2024-03-19 | |
| CVE-2024-2633 | Cegid Meta4 HR dumpenv.jsp cross-site scripting | 6.1CNA v3.1 | 0.3% | 2024-03-19 | |
| CVE-2024-2632 | Information exposure vulnerability on Meta4 HR | 7.5CNA v3.1 | 0.5% | 2024-03-19 | |
| CVE-2024-2622 | Fujian Kelixin Communication Command and Dispatch Platform editemedia.php SQL injection | 9.8v3.1 | 0.5% | 2024-03-19 | |
| CVE-2024-2621 | Fujian Kelixin Communication Command and Dispatch Platform pwd_update.php SQL injection | 9.8v3.1 | 1.9% | 2024-03-19 | Nuclei |
| CVE-2024-2620 | Fujian Kelixin Communication Command and Dispatch Platform down_file.php SQL injection | 9.8v3.1 | 0.6% | 2024-03-19 | |
| CVE-2024-2616 | Mozilla Firefox ESR out-of-bounds write | 2.7v3.1 | 0.7% | 2024-03-19 | Fix |
| CVE-2024-2615 | Mozilla Firefox memory safety bugs | 9.8v3.1 | 0.6% | 2024-03-19 | Fix |
| CVE-2024-2614 | Mozilla Firefox memory safety bugs | 8.8v3.1 | 0.9% | 2024-03-19 | Fix |
| CVE-2024-2613 | Mozilla Firefox clickjacking | 7.5v3.1 | 0.5% | 2024-03-19 | Fix |
| CVE-2024-2612 | Mozilla Firefox use-after-free | 8.1CISA ADP v3.1 | 1.0% | 2024-03-19 | Fix |
| CVE-2024-2611 | Mozilla Firefox and Thunderbird pointer lock permission prompt vulnerability | 5.5CISA ADP v3.1 | 0.6% | 2024-03-19 | Fix |
| CVE-2024-2610 | Mozilla Firefox code injection | 6.1CISA ADP v3.1 | 0.7% | 2024-03-19 | Fix |
| CVE-2024-2609 | Mozilla Firefox missing warning for unsafe actions | 6.1CISA ADP v3.1 | 0.6% | 2024-03-19 | Fix |
| CVE-2024-2608 | Mozilla Firefox integer overflow to buffer overflow | 8.4CISA ADP v3.1 | 0.4% | 2024-03-19 | Fix |
| CVE-2024-2607 | Mozilla Firefox write-what-where condition | 8.1CISA ADP v3.1 | 1.1% | 2024-03-19 | Fix |
| CVE-2024-2606 | Mozilla Firefox incorrect type conversion | 3.7CISA ADP v3.1 | 0.4% | 2024-03-19 | Fix |
| CVE-2024-2605 | Mozilla Firefox arbitrary code execution | 5.9CISA ADP v3.1 | 0.6% | 2024-03-19 | Fix |
| CVE-2024-2442 | Path traversal vulnerability in Franklin Fueling System EVO 550/5000 | 7.5CNA v3.1 | 0.7% | 2024-03-19 | Fix |
| CVE-2024-2307 | Red Hat osbuild-composer package repository GPG verification race condition | 6.1CNA v3.1 | 0.2% | 2024-03-19 | Fix |
| CVE-2024-2169 | MikroTik RouterOS-TFTP denial of service | 7.5CISA ADP v3.1 | 5.4% | 2024-03-19 | |
| CVE-2024-1401 | Profile Box Shortcode And Widget Admin+ stored XSS | 4.8CISA ADP v3.1 | 0.4% | 2024-03-19 | Fix |
| CVE-2024-1146 | Cross-site scripting at Alma Devklan Blog | 6.1v3.1 | 0.3% | 2024-03-19 | Fix |
| CVE-2024-1145 | Observable response discrepancy at Alma Devklan Blog | 5.3CNA v3.1 | 0.5% | 2024-03-19 | Fix |
| CVE-2024-1144 | Improper access control at Alma Devklan Blog | 6.5CNA v3.1 | 0.3% | 2024-03-19 | Fix |
| CVE-2024-0450 | Python CPython quoted zip-bomb protection for zipfile | 6.2CNA v3.1 | 0.3% | 2024-03-19 | Fix |
| CVE-2024-0055 | Axis Communications AXIS OS resource exhaustion | 6.5CNA v3.1 | 0.6% | 2024-03-19 | Fix |
| CVE-2024-0054 | Axis Communications AXIS OS resource exhaustion | 6.5CNA v3.1 | 0.6% | 2024-03-19 | |
| CVE-2024-29156 | Information leakage in Yaql | 6.5v3.1 | 0.7% | 2024-03-18 | Fix |
| CVE-2024-29154 | danielmiessler fabric cross-site scripting | 7.4CNA v3.1 | 0.4% | 2024-03-18 | |
| CVE-2024-29151 | Rocket.Chat.Audit filecachetools dependency vulnerability | 9.1CISA ADP v3.1 | 0.3% | 2024-03-18 | |
| CVE-2024-28865 | Django-wiki denial of service via regular expression | 7.5CNA v3.1 | 0.6% | 2024-03-18 | Fix |
| CVE-2024-28864 | IlicMiljan Secure-Props Decryption failure (Regex Match) | 2.6CNA v3.1 | 0.3% | 2024-03-18 | Fix |
| CVE-2024-28855 | ZITADEL vulnerable to improper HTML sanitization | 8.1CNA v3.1 | 0.8% | 2024-03-18 | Fix |
| CVE-2024-28745 | AbemaTV 'ABEMA' App improper export of Android application components | 3.3CISA ADP v3.1 | 0.2% | 2024-03-18 | |
| CVE-2024-28550 | Tenda AC18 stack-based buffer overflow | 4.3CISA ADP v3.1 | 0.4% | 2024-03-18 | |
| CVE-2024-28547 | Tenda AC18 stack-based buffer overflow | 6.5CISA ADP v3.1 | 0.5% | 2024-03-18 | |
| CVE-2024-28537 | Tenda AC18 out-of-bounds read | 9.8CISA ADP v3.1 | 0.8% | 2024-03-18 | |
| CVE-2024-28250 | Cilium has possible unencrypted traffic between nodes when using WireGuard and L7 policies | 6.1CNA v3.1 | 0.2% | 2024-03-18 | Fix |
| CVE-2024-28249 | Cilium has possible unencrypted traffic between nodes when using IPsec and L7 policies | 6.1CNA v3.1 | 0.3% | 2024-03-18 | Fix |
| CVE-2024-28248 | Cilium intermittent HTTP policy bypass | 7.2CNA v3.1 | 0.6% | 2024-03-18 | Fix |
| CVE-2024-28237 | OctoPrint XSS via the Snapshot Test feature in Classic Webcam plugin settings | 4.0CNA v3.1 | 0.4% | 2024-03-18 | Fix |
| CVE-2024-28128 | FitNesse cross-site scripting | 6.1v3.1 | 0.6% | 2024-03-18 | Fix |
| CVE-2024-28125 | unclebob FitNesse OS command injection | 9.8CISA ADP v3.1 | 1.0% | 2024-03-18 | |
| CVE-2024-28054 | Amavis MIME boundary parsing vulnerability | 7.4CISA ADP v3.1 | 0.8% | 2024-03-18 | Fix |
| CVE-2024-28039 | unclebob FitNesse XML external entity injection | 5.8CISA ADP v3.1 | 0.7% | 2024-03-18 | |
| CVE-2024-27974 | FUJIFILM Business Inovation DocuPrint P450 d FUJIFILM printers cross-site request forgery | 6.3CISA ADP v3.1 | 0.2% | 2024-03-18 | |
| CVE-2024-27937 | glpi Users emails enumeration | 6.5CNA v3.1 | 27.1% | 2024-03-18 | Emerging ThreatsFix |
| CVE-2024-27930 | Sensitive fields access through dropdowns in GLPI | 6.5CNA v3.1 | 1.1% | 2024-03-18 | Emerging ThreatsFix |
| CVE-2024-27914 | Reflected cross-site scripting (XSS) in search engine when debug mode is enabled in GLPI | 5.3CNA v3.1 | 0.8% | 2024-03-18 | Fix |
| CVE-2024-27774 | Unitronics Unistream Unilogic Versions use of hard-coded password | 6.5NVD v3.1 | 0.4% | 2024-03-18 | Fix |
| CVE-2024-27773 | Unitronics Unistream Unilogic Versions use of less trusted source | 8.8v3.1 | 0.4% | 2024-03-18 | Fix |
| CVE-2024-27772 | Unitronics Unistream Unilogic Versions OS command injection | 8.8v3.1 | 1.7% | 2024-03-18 | Fix |
| CVE-2024-27771 | Unitronics Unistream Unilogic Versions path traversal | 8.8v3.1 | 0.8% | 2024-03-18 | Fix |
| CVE-2024-27770 | Unitronics Unistream Unilogic Versions relative path traversal | 8.8v3.1 | 0.8% | 2024-03-18 | Fix |
| CVE-2024-27769 | Unitronics Unistream Unilogic Versions exposure of sensitive information to an unauthorized actor | 8.8v3.1 | 0.7% | 2024-03-18 | Fix |
| CVE-2024-27768 | Unitronics Unistream Unilogic Versions path traversal | 9.8v3.1 | 0.9% | 2024-03-18 | Fix |
| CVE-2024-27767 | Unitronics Unistream Unilogic Versions improper authentication | 9.8v3.1 | 0.7% | 2024-03-18 | Fix |
| CVE-2024-27757 | Flusity cross-site scripting | 6.1CISA ADP v3.1 | 0.4% | 2024-03-18 | |
| CVE-2024-27104 | Stored XSS in dashboards in GLPI | 4.5CNA v3.1 | 0.7% | 2024-03-18 | Fix |
| CVE-2024-27098 | Blind server-side request forgery (SSRF) using arbitrary Object Instantiation in GLPI | 6.4CNA v3.1 | 35.7% | 2024-03-18 | Emerging ThreatsFix |
| CVE-2024-27096 | glpi SQL injection in through the search engine | 7.7CNA v3.1 | 58.8% | 2024-03-18 | Emerging ThreatsFix |
| CVE-2024-26641 | Linux kernel IPv6 tunnel receive handling vulnerability | 8.6CNA v3.1 | 0.6% | 2024-03-18 | Fix |
| CVE-2024-26640 | Linux kernel TCP receive zerocopy vulnerability | 7.8CNA v3.1 | 0.2% | 2024-03-18 | Fix |
| CVE-2024-26638 | Linux kernel NBD driver socket handling vulnerability | 4.4CISA ADP v3.1 | 0.2% | 2024-03-18 | Fix |
| CVE-2024-26637 | Linux kernel ath11k Wi-Fi driver debugfs vulnerability | 7.8CNA v3.1 | 0.2% | 2024-03-18 | Fix |
| CVE-2024-26636 | Linux kernel LLC socket sendmsg vulnerability | 5.5v3.1 | 0.2% | 2024-03-18 | Fix |
| CVE-2024-26635 | Linux kernel LLC protocol handler vulnerability | 5.5v3.1 | 0.2% | 2024-03-18 | Fix |
| CVE-2024-26634 | In the Linux kernel, the following vulnerability has been resolved: net: fix removing a namespace with conflicting altnames Mark reports a BUG() when a net namespace is removed. kernel BUG at net/core/dev.c:11520! Physical interfaces moved outside of init_net get "refunded" to init_net when | 5.5v3.1 | 0.2% | 2024-03-18 | Fix |
| CVE-2024-26633 | Linux kernel IPv6 tunnel driver vulnerability | 5.5CISA ADP v3.1 | 0.3% | 2024-03-18 | Fix |
| CVE-2024-26632 | Linux kernel block null pointer dereference | 7.8CNA v3.1 | 0.2% | 2024-03-18 | Fix |
| CVE-2024-26631 | Linux kernel IPv6 multicast race condition | 7.8CNA v3.1 | 0.2% | 2024-03-18 | Fix |
| CVE-2024-26125 | Adobe Experience Manager cross-site scripting (stored XSS) | 5.4CNA v3.1 | 0.4% | 2024-03-18 | Fix |
| CVE-2024-26124 | Adobe Experience Manager cross-site scripting (stored XSS) | 5.4CNA v3.1 | 0.4% | 2024-03-18 | Fix |
| CVE-2024-26120 | Adobe Experience Manager cross-site scripting (stored XSS) | 5.4CNA v3.1 | 0.4% | 2024-03-18 | Fix |
| CVE-2024-26119 | Adobe Experience Manager information exposure | 5.3CNA v3.1 | 0.6% | 2024-03-18 | Fix |
| CVE-2024-26118 | Adobe Experience Manager cross-site scripting (reflected XSS) | 5.4CNA v3.1 | 0.4% | 2024-03-18 | Fix |
| CVE-2024-26107 | Adobe Experience Manager cross-site scripting (reflected XSS) | 5.4CNA v3.1 | 0.4% | 2024-03-18 | Fix |
| CVE-2024-26106 | Adobe Experience Manager cross-site scripting (reflected XSS) | 5.4CNA v3.1 | 0.4% | 2024-03-18 | Fix |
| CVE-2024-26105 | Adobe Experience Manager cross-site scripting (reflected XSS) | 5.4CNA v3.1 | 0.4% | 2024-03-18 | Fix |
| CVE-2024-26104 | Adobe Experience Manager cross-site scripting (reflected XSS) | 5.4CNA v3.1 | 0.4% | 2024-03-18 | Fix |
| CVE-2024-26103 | Adobe Experience Manager cross-site scripting (reflected XSS) | 5.4CNA v3.1 | 0.4% | 2024-03-18 | Fix |
| CVE-2024-26102 | Adobe Experience Manager cross-site scripting (reflected XSS) | 5.4CNA v3.1 | 0.4% | 2024-03-18 | Fix |
| CVE-2024-26101 | Adobe Experience Manager cross-site scripting (reflected XSS) | 5.4CNA v3.1 | 0.4% | 2024-03-18 | Fix |
| CVE-2024-26096 | Adobe Experience Manager cross-site scripting (stored XSS) | 5.4CNA v3.1 | 0.4% | 2024-03-18 | Fix |
| CVE-2024-26094 | Adobe Experience Manager cross-site scripting (stored XSS) | 5.4CNA v3.1 | 0.4% | 2024-03-18 | Fix |
| CVE-2024-26080 | Adobe Experience Manager cross-site scripting (DOM-based XSS) | 5.4CNA v3.1 | 0.4% | 2024-03-18 | Fix |
| CVE-2024-26073 | Adobe Experience Manager cross-site scripting (stored XSS) | 5.4CNA v3.1 | 0.4% | 2024-03-18 | Fix |
| CVE-2024-26069 | Adobe Experience Manager cross-site scripting (stored XSS) | 5.4CNA v3.1 | 0.4% | 2024-03-18 | Fix |
| CVE-2024-26067 | Adobe Experience Manager cross-site scripting (stored XSS) | 5.4CNA v3.1 | 0.4% | 2024-03-18 | Fix |
| CVE-2024-26065 | Adobe Experience Manager cross-site scripting (stored XSS) | 5.4CNA v3.1 | 0.4% | 2024-03-18 | Fix |
| CVE-2024-26064 | Adobe Experience Manager cross-site scripting (DOM-based XSS) | 5.4CNA v3.1 | 0.5% | 2024-03-18 | Fix |
| CVE-2024-26063 | Adobe Experience Manager information exposure | 5.3CNA v3.1 | 0.6% | 2024-03-18 | Fix |
| CVE-2024-26062 | Adobe Experience Manager cross-site scripting (stored XSS) | 5.4CNA v3.1 | 0.4% | 2024-03-18 | Fix |
| CVE-2024-26061 | Adobe Experience Manager cross-site scripting (stored XSS) | 5.4CNA v3.1 | 0.4% | 2024-03-18 | Fix |
| CVE-2024-26059 | Adobe Experience Manager cross-site scripting (stored XSS) | 5.4CNA v3.1 | 0.4% | 2024-03-18 | Fix |
| CVE-2024-26056 | Adobe Experience Manager cross-site scripting (stored XSS) | 5.4CNA v3.1 | 0.4% | 2024-03-18 | Fix |
| CVE-2024-26052 | Adobe Experience Manager cross-site scripting (stored XSS) | 5.4CNA v3.1 | 0.4% | 2024-03-18 | Fix |
| CVE-2024-26051 | Adobe Experience Manager cross-site scripting (stored XSS) | 5.4CNA v3.1 | 0.4% | 2024-03-18 | Fix |
| CVE-2024-26050 | Adobe Experience Manager cross-site scripting (stored XSS) | 4.8CNA v3.1 | 0.4% | 2024-03-18 | Fix |
| CVE-2024-26045 | Adobe Experience Manager cross-site scripting (stored XSS) | 5.4CNA v3.1 | 0.4% | 2024-03-18 | Fix |
| CVE-2024-26044 | Adobe Experience Manager cross-site scripting (DOM-based XSS) | 5.4CNA v3.1 | 0.5% | 2024-03-18 | Fix |
| CVE-2024-26043 | Adobe Experience Manager cross-site scripting (stored XSS) | 5.4CNA v3.1 | 0.4% | 2024-03-18 | Fix |
| CVE-2024-26042 | Adobe Experience Manager cross-site scripting (DOM-based XSS) | 5.4CNA v3.1 | 0.5% | 2024-03-18 | Fix |
| CVE-2024-26041 | Adobe Experience Manager cross-site scripting (stored XSS) | 5.4CNA v3.1 | 0.4% | 2024-03-18 | Fix |
| CVE-2024-26040 | Adobe Experience Manager cross-site scripting (stored XSS) | 5.4CNA v3.1 | 0.4% | 2024-03-18 | Fix |
| CVE-2024-26038 | Adobe Experience Manager cross-site scripting (stored XSS) | 5.4CNA v3.1 | 0.4% | 2024-03-18 | Fix |
| CVE-2024-26035 | Adobe Experience Manager cross-site scripting (stored XSS) | 5.4CNA v3.1 | 0.4% | 2024-03-18 | Fix |
| CVE-2024-26034 | Adobe Experience Manager cross-site scripting (stored XSS) | 5.4CNA v3.1 | 0.4% | 2024-03-18 | Fix |
| CVE-2024-26033 | Adobe Experience Manager cross-site scripting (stored XSS) | 5.4CNA v3.1 | 0.4% | 2024-03-18 | Fix |
| CVE-2024-26032 | Adobe Experience Manager cross-site scripting (DOM-based XSS) | 5.4CNA v3.1 | 0.5% | 2024-03-18 | Fix |
| CVE-2024-26031 | Adobe Experience Manager cross-site scripting (stored XSS) | 5.4CNA v3.1 | 0.4% | 2024-03-18 | Fix |
| CVE-2024-26030 | Adobe Experience Manager cross-site scripting (stored XSS) | 5.4CNA v3.1 | 0.4% | 2024-03-18 | Fix |
| CVE-2024-26028 | Adobe Experience Manager cross-site scripting (stored XSS) | 5.4CNA v3.1 | 0.4% | 2024-03-18 | Fix |
| CVE-2024-25657 | AVSystem Unified Management Platform login and logout functionality open redirect | 5.4CISA ADP v3.1 | 0.3% | 2024-03-18 | |
| CVE-2024-25656 | AVSystem Unified Management Platform improper input validation | 5.9CISA ADP v3.1 | 0.5% | 2024-03-18 | |
| CVE-2024-25655 | AVSystem Unified Management Platform LDAP password storage insecure storage of sensitive information | 6.5CISA ADP v3.1 | 0.5% | 2024-03-18 | |
| CVE-2024-25654 | Avsystem Unified Management Platform incorrect default permissions | 5.5v3.1 | 0.2% | 2024-03-18 | |
| CVE-2024-24578 | RaspberryMatic unauthenticated remote code execution vulnerability through HMServer file upload | 10.0CNA v3.1 | 8.7% | 2024-03-18 | MetasploitExploit codeFix |
| CVE-2024-24539 | FusionPBX before 5.2.0 does not validate a session. | 5.3CISA ADP v3.1 | 0.5% | 2024-03-18 | |
| CVE-2024-24230 | Komm.One CMS Velocity template engine server-side template injection | 7.5CISA ADP v3.1 | 0.7% | 2024-03-18 | |
| CVE-2024-23604 | unclebob FitNesse cross-site scripting | 6.1v3.1 | 0.6% | 2024-03-18 | Fix |
| CVE-2024-23333 | LAM vulnerable to authenticated remote code execution | 7.9CNA v3.1 | 17.9% | 2024-03-18 | Fix |
| CVE-2024-23139 | ActionScript Byte Code ABC vulnerability in the Autodesk FBX Review software | 7.8CNA v3.1 | 0.4% | 2024-03-18 | Fix |
| CVE-2024-23138 | Autodesk AutoCAD stack-based overflow vulnerability in the TrueViewTM Desktop software | 7.8CNA v3.1 | 0.5% | 2024-03-18 | Fix |
| CVE-2024-22475 | Brother Industries Multiple printers and scanners cross-site request forgery | 6.1CISA ADP v3.1 | 0.3% | 2024-03-18 | |
| CVE-2024-22412 | ClickHouse's Role-based Access Control is bypassed when query caching is enabled | 2.4CNA v3.1 | 0.6% | 2024-03-18 | Fix |
| CVE-2024-22257 | Erroneous authentication pass in Spring Security | 8.2CNA v3.1 | 1.0% | 2024-03-18 | Fix |
| CVE-2024-21824 | Brother Industries Multiple printers and scanners exists improper authentication | 5.3CISA ADP v3.1 | 0.3% | 2024-03-18 | |
| CVE-2024-21662 | argoproj argo-cd Argo CD vulnerable to Bypassing of Rate Limit and brute force Protection | 7.5CNA v3.1 | 0.8% | 2024-03-18 | Fix |
| CVE-2024-21661 | argoproj argo-cd out-of-bounds write | 7.5CNA v3.1 | 1.2% | 2024-03-18 | Fix |
| CVE-2024-21652 | argoproj argo-cd argo CD vulnerable to Bypassing of brute force Protection | 9.8CNA v3.1 | 0.8% | 2024-03-18 | Fix |
| CVE-2024-20768 | Adobe Experience Manager cross-site scripting (stored XSS) | 5.4CNA v3.1 | 0.4% | 2024-03-18 | Fix |
| CVE-2024-20767 | Adobe ColdFusion improper access control | 7.4CNA v3.1 | 98.5% | 2024-03-18 | KEVNucleiEmerging ThreatsExploit codeFix |
| CVE-2024-20764 | Adobe Animate 2024 SWF file parsing memory corruption | 5.5CNA v3.1 | 0.4% | 2024-03-18 | Fix |
| CVE-2024-20763 | Adobe Animate 2024 GIF file parsing memory corruption | 5.5CNA v3.1 | 0.4% | 2024-03-18 | Fix |
| CVE-2024-20762 | Adobe Animate MP3 file parsing unitialized heap memory corruption | 5.5CNA v3.1 | 0.3% | 2024-03-18 | Fix |
| CVE-2024-20761 | Adobe Animate 2024 BMP File Parsing out-of-bound write remote code execution | 7.8CNA v3.1 | 0.4% | 2024-03-18 | Fix |
| CVE-2024-20760 | Adobe Experience Manager cross-site scripting (stored XSS) | 5.4CNA v3.1 | 0.4% | 2024-03-18 | Fix |
| CVE-2024-20757 | Adobe Bridge 2024 TIF File Parsing out-of-bound read information disclosure | 5.5CNA v3.1 | 0.4% | 2024-03-18 | Fix |
| CVE-2024-20756 | Adobe Bridge 2024 out of bound write remote code execution | 7.8CNA v3.1 | 4.1% | 2024-03-18 | Fix |
| CVE-2024-20755 | Adobe Bridge PDF Parsing Heap memory corruption remote code execution | 7.8CNA v3.1 | 4.4% | 2024-03-18 | Fix |
| CVE-2024-20754 | Adobe Lightroom Desktop untrusted search path | 7.8CNA v3.1 | 0.3% | 2024-03-18 | Fix |
| CVE-2024-20752 | Adobe Bridge PS File Parsing use-after-free remote code execution | 7.8CNA v3.1 | 7.8% | 2024-03-18 | Fix |
| CVE-2024-20746 | Adobe Premiere Pro out-of-bounds write arbitrary code execution | 7.8CNA v3.1 | 0.5% | 2024-03-18 | Fix |
| CVE-2024-20745 | Adobe Premiere Pro AVI File Parsing heap-based buffer overflow remote code execution | 7.8CNA v3.1 | 0.5% | 2024-03-18 | Fix |
| CVE-2024-2604 | SourceCodester File Manager App update-file.php unrestricted upload | 9.8v3.1 | 0.7% | 2024-03-18 | |
| CVE-2024-2599 | Unrestricted upload of file with dangerous type vulnerability in AMSS++ | 8.8NVD v3.1 | 0.6% | 2024-03-18 | |
| CVE-2024-2598 | Cross-site scripting (XSS) in AMSS++ | 6.1NVD v3.1 | 0.4% | 2024-03-18 | |
| CVE-2024-2597 | Cross-site scripting (XSS) in AMSS++ | 6.1NVD v3.1 | 0.4% | 2024-03-18 | |
| CVE-2024-2596 | Cross-site scripting (XSS) in AMSS++ | 6.1NVD v3.1 | 0.4% | 2024-03-18 | |
| CVE-2024-2595 | Cross-site scripting (XSS) in AMSS++ | 6.1NVD v3.1 | 0.4% | 2024-03-18 | |
| CVE-2024-2594 | Cross-site scripting (XSS) in AMSS++ | 6.1NVD v3.1 | 0.4% | 2024-03-18 | |
| CVE-2024-2593 | Cross-site scripting (XSS) in AMSS++ | 6.1NVD v3.1 | 0.4% | 2024-03-18 | |
| CVE-2024-2592 | SQL injection vulnerability in AMSS++ | 7.5v3.1 | 0.5% | 2024-03-18 | |
| CVE-2024-2591 | SQL injection vulnerability in AMSS++ | 7.5v3.1 | 0.5% | 2024-03-18 | |
| CVE-2024-2590 | SQL injection vulnerability in AMSS++ | 7.5v3.1 | 0.5% | 2024-03-18 | |
| CVE-2024-2589 | SQL injection vulnerability in AMSS++ | 7.5v3.1 | 0.5% | 2024-03-18 | |
| CVE-2024-2588 | SQL injection vulnerability in AMSS++ | 7.5v3.1 | 0.5% | 2024-03-18 | |
| CVE-2024-2587 | SQL injection vulnerability in AMSS++ | 7.5v3.1 | 0.5% | 2024-03-18 | |
| CVE-2024-2586 | SQL injection vulnerability in AMSS++ | 7.5v3.1 | 0.6% | 2024-03-18 | |
| CVE-2024-2585 | SQL injection vulnerability in AMSS++ | 7.5v3.1 | 0.5% | 2024-03-18 | |
| CVE-2024-2584 | SQL injection vulnerability in AMSS++ | 7.5v3.1 | 0.6% | 2024-03-18 | |
| CVE-2024-2581 | Tenda AC10 SetStaticRouteCfg fromSetRouteStatic stack-based overflow | 8.8v3.1 | 1.3% | 2024-03-18 | |
| CVE-2024-2577 | SourceCodester Employee Task Management System update-employee.php authorization | 9.8v3.1 | 0.7% | 2024-03-18 | |
| CVE-2024-2576 | SourceCodester Employee Task Management System update-admin.php authorization | 9.8v3.1 | 0.7% | 2024-03-18 | |
| CVE-2024-2575 | SourceCodester Employee Task Management System task-details.php authorization | 9.8v3.1 | 0.7% | 2024-03-18 | |
| CVE-2024-2574 | SourceCodester Employee Task Management System edit-task.php authorization | 9.8v3.1 | 0.7% | 2024-03-18 | |
| CVE-2024-2573 | SourceCodester Employee Task Management System task-info.php redirect | 9.8v3.1 | 1.0% | 2024-03-18 | |
| CVE-2024-2572 | SourceCodester Employee Task Management System task-details.php redirect | 9.8v3.1 | 1.0% | 2024-03-18 | |
| CVE-2024-2571 | SourceCodester Employee Task Management System manage-admin.php redirect | 9.8v3.1 | 1.0% | 2024-03-18 | |
| CVE-2024-2570 | SourceCodester Employee Task Management System edit-task.php redirect | 9.8v3.1 | 1.0% | 2024-03-18 | |
| CVE-2024-2569 | SourceCodester Employee Task Management System admin-manage-user.php redirect | 9.8v3.1 | 1.2% | 2024-03-18 | |
| CVE-2024-2496 | Libvirt: Null pointer dereference in udevconnectlistallinterfaces | 5.0CNA v3.1 | 0.3% | 2024-03-18 | Fix |
| CVE-2024-2390 | Tenable Nessus local privilege escalation | 7.8CNA v3.1 | 0.2% | 2024-03-18 | Fix |
| CVE-2024-2229 | Schneider Electric EcoStruxure Power Design deserialization of untrusted data | 7.8CNA v3.1 | 0.4% | 2024-03-18 | |
| CVE-2024-2052 | Schneider Electric Easergy T200 (Modbus) Models: T200I files accessible to external parties | 7.5CNA v3.1 | 0.5% | 2024-03-18 | Fix |
| CVE-2024-2051 | Schneider Electric Easergy T200 (Modbus) Models: T200I missing brute-force protection | 9.8CNA v3.1 | 0.8% | 2024-03-18 | Fix |
| CVE-2024-2050 | Schneider Electric Easergy T200 (Modbus) Models: T200I cross-site scripting | 8.2CNA v3.1 | 0.5% | 2024-03-18 | Fix |
| CVE-2024-2002 | Libdwarf: Crashes randomly on fuzzed object | 7.5CNA v3.1 | 1.1% | 2024-03-18 | Fix |
| CVE-2024-1753 | Buildah: Buildah: Container escape via improper bind mount validation | 8.6CNA v3.1 | 0.5% | 2024-03-18 | Fix |
| CVE-2024-1658 | Grid Shortcodes for WordPress Contributor+ stored XSS | 5.4CISA ADP v3.1 | 0.4% | 2024-03-18 | Fix |
| CVE-2024-1606 | HTML injection in BMC Control-M | 5.4v3.1 | 0.4% | 2024-03-18 | Fix |
| CVE-2024-1605 | BMC Control-M DLL loading on login vulnerability | 7.8v3.1 | 0.2% | 2024-03-18 | Fix |
| CVE-2024-1604 | Incorrect authorization in BMC Control-M | 6.8v3.1 | 0.5% | 2024-03-18 | Fix |
| CVE-2024-1333 | Responsive Pricing Table WordPress plugin Author+ stored XSS | 5.4CISA ADP v3.1 | 0.4% | 2024-03-18 | Fix |
| CVE-2024-1331 | Team Members WordPress plugin Author+ stored XSS | 6.1CISA ADP v3.1 | 0.4% | 2024-03-18 | Fix |
| CVE-2024-1013 | Unixodbc: Out-of-bounds stack write due to pointer-to-integer types conversion | 7.8NVD v3.1 | 0.3% | 2024-03-18 | Fix |
| CVE-2024-0973 | Widget for Social Page Feeds WordPress plugin Admin+ stored XSS | 6.1CISA ADP v3.1 | 0.4% | 2024-03-18 | Fix |
| CVE-2024-0951 | Advanced Social Feeds Widget and Shortcode WordPress plugin Admin+ stored XSS | 4.8NVD v3.1 | 0.4% | 2024-03-18 | |
| CVE-2024-0858 | Innovs HR WordPress plugin Employee creation via CSRF | 8.8CISA ADP v3.1 | 0.4% | 2024-03-18 | Fix |
| CVE-2024-0820 | Jobs for WordPress plugin Contributor+ stored XSS | 5.4NVD v3.1 | 0.5% | 2024-03-18 | Fix |
| CVE-2024-0780 | Enjoy Social Feed WordPress plugin Subscriber+ plugin Database reset | 8.8NVD v3.1 | 0.8% | 2024-03-18 | |
| CVE-2024-0779 | Enjoy Social Feed WordPress plugin unauthenticated arbitrary Instagram account Unlinking | 8.8CISA ADP v3.1 | 0.4% | 2024-03-18 | |
| CVE-2024-0719 | Tabs Shortcode and Widget WordPress plugin Contributor+ stored cross-site scripting | 5.4CISA ADP v3.1 | 0.4% | 2024-03-18 | |
| CVE-2024-0711 | Buttons Shortcode and Widget for WordPress stored XSS via shortcode | 6.1CISA ADP v3.1 | 0.4% | 2024-03-18 | |
| CVE-2024-0365 | Fancy Product Designer WordPress plugin Admin+ SQL injection | 6.5CISA ADP v3.1 | 0.6% | 2024-03-18 | Fix |
| CVE-2024-27961 | AntiSpam for Contact Form 7 WordPress plugin reflected cross-site scripting (XSS) | 7.1CNA v3.1 | 0.3% | 2024-03-17 | Fix |
| CVE-2024-27960 | Email Subscription Popup WordPress plugin cross-site scripting (XSS) | 6.1NVD v3.1 | 0.3% | 2024-03-17 | Fix |
| CVE-2024-27959 | WC Shop Sync WordPress plugin cross-site scripting | 6.1NVD v3.1 | 0.4% | 2024-03-17 | Fix |
| CVE-2024-27958 | Visualizer WordPress plugin reflected cross-site scripting (XSS) | 6.1NVD v3.1 | 0.4% | 2024-03-17 | Fix |
| CVE-2024-27957 | Pie Register WordPress plugin unauthenticated arbitrary file upload | 9.8v3.1 | 0.6% | 2024-03-17 | Fix |
| CVE-2024-25933 | PeproDev Ultimate Invoice WordPress plugin sensitive data exposure | 7.5v3.1 | 0.5% | 2024-03-17 | Fix |
| CVE-2024-25903 | Frontend File Manager WordPress plugin sensitive data exposure | 7.5v3.1 | 0.5% | 2024-03-17 | Fix |
| CVE-2024-25591 | WP Editor WordPress plugin sensitive data exposure | 7.5v3.1 | 0.5% | 2024-03-17 | Fix |
| CVE-2024-24867 | WP Stats Manager WordPress plugin sensitive data exposure | 7.5v3.1 | 0.5% | 2024-03-17 | Fix |
| CVE-2024-2568 | heyewei JFinalCMS Custom Data page SQL injection | 7.2v3.1 | 0.7% | 2024-03-17 | |
| CVE-2024-2567 | jurecapuder AndroidWeatherApp Backup file androidmanifest.xml backup | 1.8CNA v3.1 | 0.2% | 2024-03-17 | |
| CVE-2024-2566 | Fujian Kelixin Communication Command and Dispatch Platform get_extension_yl.php SQL injection | 9.8v3.1 | 0.6% | 2024-03-17 | |
| CVE-2024-2565 | PandaXGO PandaX file extension upload.go unrestricted upload | 9.8v3.1 | 0.6% | 2024-03-17 | |
| CVE-2024-2564 | PandaXGO PandaX user.go ExportUser path traversal | 7.3v3.1 | 0.5% | 2024-03-17 | |
| CVE-2024-2563 | PandaXGO PandaX upload.go DeleteImage path traversal | 9.8v3.1 | 0.9% | 2024-03-17 | |
| CVE-2024-2562 | PandaXGO PandaX role_menu.go InsertRole SQL injection | 9.8v3.1 | 0.5% | 2024-03-17 | |
| CVE-2024-2561 | 74CMS Company Logo Index.php#sendCompanyLogo unrestricted upload | 8.8v3.1 | 6.1% | 2024-03-17 | |
| CVE-2024-2560 | Tenda AC18 SysToolRestoreSet fromSysToolRestoreSet cross-site request forgery | 4.3v3.1 | 0.4% | 2024-03-17 | |
| CVE-2024-2559 | Tenda AC18 SysToolReboot fromSysToolReboot cross-site request forgery | 6.5v3.1 | 0.3% | 2024-03-17 | |
| CVE-2024-2558 | Tenda AC18 execCommand formexeCommand stack-based overflow | 8.8v3.1 | 1.3% | 2024-03-17 | |
| CVE-2024-2557 | kishor-23 Food Waste Management System admin.php improper authorization | 9.1v3.1 | 1.0% | 2024-03-17 | |
| CVE-2024-2556 | SourceCodester Employee Task Management System attendance-info.php SQL injection | 9.8v3.1 | 0.6% | 2024-03-17 | |
| CVE-2024-2555 | SourceCodester Employee Task Management System update-admin.php SQL injection | 7.2v3.1 | 0.6% | 2024-03-17 | |
| CVE-2024-2554 | SourceCodester Employee Task Management System update-employee.php SQL injection | 8.8v3.1 | 0.7% | 2024-03-17 | |
| CVE-2024-2553 | SourceCodester Product Review Rating System Rate Product cross-site scripting | 6.1v3.1 | 0.6% | 2024-03-17 | |
| CVE-2024-2547 | Tenda AC18 R7WebsSecurityHandler stack-based overflow | 8.8v3.1 | 1.2% | 2024-03-17 | |
| CVE-2024-2546 | Tenda AC18 fromSetWirelessRepeat stack-based overflow | 8.8v3.1 | 1.0% | 2024-03-17 | |
| CVE-2024-2535 | MAGESH-K21 Online-College-Event-Hall-Reservation-System users.php cross-site scripting | 6.1v3.1 | 0.4% | 2024-03-17 | |
| CVE-2024-2534 | MAGESH-K21 Online-College-Event-Hall-Reservation-System users.php SQL injection | 9.8v3.1 | 0.5% | 2024-03-17 | |
| CVE-2024-28862 | mdp rotp incorrect default permissions | 5.3CNA v3.1 | 0.2% | 2024-03-16 | Fix |
| CVE-2024-28640 | TOTOLINK A7000R buffer overflow | 7.5CISA ADP v3.1 | 14.2% | 2024-03-16 | |
| CVE-2024-28639 | TOTOLINK A7000R buffer overflow | 9.8v3.1 | 1.2% | 2024-03-16 | |
| CVE-2024-28070 | Mitel Micontact Center Business cross-site scripting | 6.8CISA ADP v3.1 | 0.4% | 2024-03-16 | Fix |
| CVE-2024-28069 | Mitel Micontact Center Business insecure storage of sensitive information | 7.5CISA ADP v3.1 | 0.6% | 2024-03-16 | Fix |
| CVE-2024-27197 | BeePress WordPress plugin CSRF to stored cross-site scripting (XSS) | 7.1CNA v3.1 | 0.2% | 2024-03-16 | |
| CVE-2024-27195 | Watermark RELOADED WordPress plugin CSRF to XSS | 7.1CNA v3.1 | 0.2% | 2024-03-16 | Fix |
| CVE-2024-27194 | Fontific WordPress plugin CSRF to XSS | 6.1NVD v3.1 | 0.2% | 2024-03-16 | |
| CVE-2024-24845 | Post Thumbnail Editor WordPress plugin unauthenticated sensitive data exposure | 5.3CNA v3.1 | 0.4% | 2024-03-16 | |
| CVE-2024-24156 | Sir Gnuboard cross-site scripting | 6.1CISA ADP v3.1 | 0.5% | 2024-03-16 | |
| CVE-2024-23523 | Elementor Pro WordPress plugin Contributor+ arbitrary user Meta data Retrieval vulnerability | 6.5CNA v3.1 | 0.5% | 2024-03-16 | Fix |
| CVE-2024-22513 | Improper privilege management in djangorestframework-simplejwt | 5.5CISA ADP v3.1 | 0.8% | 2024-03-16 | Exploit codeFix |
| CVE-2024-22259 | Spring Framework URL Parsing with Host Validation (2nd report) | 8.1CNA v3.1 | 2.6% | 2024-03-16 | Fix |
| CVE-2024-2533 | MAGESH-K21 Online-College-Event-Hall-Reservation-System update-users.php cross-site scripting | 6.1v3.1 | 0.5% | 2024-03-16 | |
| CVE-2024-2532 | MAGESH-K21 Online-College-Event-Hall-Reservation-System update-users.php SQL injection | 8.8v3.1 | 0.5% | 2024-03-16 | |
| CVE-2024-2531 | MAGESH-K21 Online-College-Event-Hall-Reservation-System update-rooms.php unrestricted upload | 8.8v3.1 | 0.7% | 2024-03-16 | |
| CVE-2024-2530 | MAGESH-K21 Online-College-Event-Hall-Reservation-System update-rooms.php cross-site scripting | 6.1v3.1 | 0.5% | 2024-03-16 | |
| CVE-2024-2529 | MAGESH-K21 Online-College-Event-Hall-Reservation-System rooms.php unrestricted upload | 8.8v3.1 | 0.6% | 2024-03-16 | |
| CVE-2024-2528 | MAGESH-K21 Online-College-Event-Hall-Reservation-System update-rooms.php SQL injection | 8.8v3.1 | 0.5% | 2024-03-16 | |
| CVE-2024-2527 | MAGESH-K21 Online-College-Event-Hall-Reservation-System rooms.php SQL injection | 8.8v3.1 | 0.6% | 2024-03-16 | |
| CVE-2024-2526 | MAGESH-K21 Online-College-Event-Hall-Reservation-System rooms.php cross-site scripting | 6.1v3.1 | 0.5% | 2024-03-16 | |
| CVE-2024-2525 | MAGESH-K21 Online-College-Event-Hall-Reservation-System receipt.php cross-site scripting | 6.1v3.1 | 0.5% | 2024-03-16 | |
| CVE-2024-2524 | MAGESH-K21 Online-College-Event-Hall-Reservation-System receipt.php SQL injection | 8.8v3.1 | 0.5% | 2024-03-16 | |
| CVE-2024-2523 | MAGESH-K21 Online-College-Event-Hall-Reservation-System booktime.php cross-site scripting | 6.1v3.1 | 0.4% | 2024-03-16 | |
| CVE-2024-2522 | MAGESH-K21 Online-College-Event-Hall-Reservation-System booktime.php SQL injection | 9.8v3.1 | 0.5% | 2024-03-16 | |
| CVE-2024-2521 | MAGESH-K21 Online-College-Event-Hall-Reservation-System bookdate.php cross-site scripting | 6.1v3.1 | 0.4% | 2024-03-16 | |
| CVE-2024-2520 | MAGESH-K21 Online-College-Event-Hall-Reservation-System bookdate.php SQL injection | 9.8v3.1 | 0.5% | 2024-03-16 | |
| CVE-2024-2519 | MAGESH-K21 Online-College-Event-Hall-Reservation-System navbar.php cross-site scripting | 6.1v3.1 | 0.4% | 2024-03-16 | |
| CVE-2024-2518 | MAGESH-K21 Online-College-Event-Hall-Reservation-System book_history.php cross-site scripting | 6.1v3.1 | 0.5% | 2024-03-16 | |
| CVE-2024-2517 | MAGESH-K21 Online-College-Event-Hall-Reservation-System book_history.php SQL injection | 9.8v3.1 | 0.5% | 2024-03-16 | |
| CVE-2024-2516 | MAGESH-K21 Online-College-Event-Hall-Reservation-System home.php SQL injection | 8.8v3.1 | 0.5% | 2024-03-16 | |
| CVE-2024-2515 | MAGESH-K21 Online-College-Event-Hall-Reservation-System home.php cross-site scripting | 6.1v3.1 | 0.5% | 2024-03-16 | |
| CVE-2024-2308 | ElementInvader Addons for Elementor WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.3% | 2024-03-16 | Fix |
| CVE-2024-2294 | Backuply Backup, Restore, Migrate and Clone WordPress plugin directory traversal | 4.9CNA v3.1 | 0.9% | 2024-03-16 | Fix |
| CVE-2024-2042 | ElementsKit Elementor addons WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.5% | 2024-03-16 | Fix |
| CVE-2024-1857 | Ultimate Gift Cards for WooCommerce WordPress plugin information disclosure | 5.3CNA v3.1 | 0.3% | 2024-03-16 | Fix |
| CVE-2024-1733 | Word Replacer Pro WordPress plugin missing authorization to unauthenticated arbitrary content update | 5.3CNA v3.1 | 0.4% | 2024-03-16 | |
| CVE-2024-1685 | Social Media Share Buttons WordPress plugin authenticated (Subscriber+) PHP object injection | 8.8v3.1 | 0.8% | 2024-03-16 | |
| CVE-2024-1239 | ElementsKit Elementor addons WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.4% | 2024-03-16 | Fix |
| CVE-2024-28859 | FriendsOfSymfony1 symfony1 Gadget chain in Symfony 1 due to vulnerable Swift Mailer dependency | 5.0CNA v3.1 | 1.5% | 2024-03-15 | Fix |
| CVE-2024-28854 | Slow loris vulnerability with default configuration in tls-listener | 7.5CNA v3.1 | 1.0% | 2024-03-15 | Fix |
| CVE-2024-28851 | Elevation of privilege in Snowflake Hive MetaStore Connector Helper script | 4.0CNA v3.1 | 0.3% | 2024-03-15 | |
| CVE-2024-28848 | OpenMetadata policy condition validation endpoint code injection | 8.8CNA v3.1 | 7.9% | 2024-03-15 | Fix |
| CVE-2024-28847 | SpEL injection in `PUT /API/v1/events/subscriptions` in OpenMetadata | 8.8CNA v3.1 | 2.4% | 2024-03-15 | Fix |
| CVE-2024-28752 | Apache CXF SSRF vulnerability using the Aegis databinding | 9.3CISA ADP v3.1 | 2.5% | 2024-03-15 | Emerging ThreatsExploit codeFix |
| CVE-2024-28404 | TOTOLINK X2000R cross-site scripting | 8.0CISA ADP v3.1 | 0.5% | 2024-03-15 | |
| CVE-2024-28403 | TOTOLINK X2000R cross-site scripting | 5.4v3.1 | 0.4% | 2024-03-15 | |
| CVE-2024-28401 | TOTOLINK X2000R cross-site scripting | 5.4v3.1 | 0.4% | 2024-03-15 | |
| CVE-2024-28354 | TRENDnet Tew-827dru command injection | 10.0CISA ADP v3.1 | 2.2% | 2024-03-15 | |
| CVE-2024-28353 | TRENDnet Tew-827dru command injection | 8.8CISA ADP v3.1 | 2.1% | 2024-03-15 | |
| CVE-2024-28319 | gpac out-of-bounds read | 6.2CISA ADP v3.1 | 0.2% | 2024-03-15 | |
| CVE-2024-28318 | gpac out-of-bounds write | 7.1CISA ADP v3.1 | 0.5% | 2024-03-15 | |
| CVE-2024-28255 | Authentication bypass in OpenMetadata | 9.8CNA v3.1 | 73.3% | 2024-03-15 | NucleiMetasploitExploit codeKCVFix |
| CVE-2024-28254 | OpenMetadata alert condition validation endpoint vulnerability | 8.8CNA v3.1 | 45.7% | 2024-03-15 | MetasploitExploit codeKCVFix |
| CVE-2024-28253 | SpEL injection in `PUT /API/v1/policies` in OpenMetadata | 9.4CNA v3.1 | 12.5% | 2024-03-15 | NucleiFix |
| CVE-2024-28252 | CoreWCF NetFraming based services can leave connections open when they should be closed | 7.5CNA v3.1 | 0.6% | 2024-03-15 | Fix |
| CVE-2024-28242 | Disclosure of the existence of secret categories with custom backgrounds in Discourse | 5.3CNA v3.1 | 0.5% | 2024-03-15 | Fix |
| CVE-2024-28053 | Mattermost resource exhaustion via the Invitation feature | 3.1CNA v3.1 | 0.5% | 2024-03-15 | Fix |
| CVE-2024-27987 | StellarWP GiveWP reflected cross-site scripting | 6.1NVD v3.1 | 0.4% | 2024-03-15 | Fix |
| CVE-2024-27920 | Unsigned code template execution through workflows in projectdiscovery/nuclei | 7.4CNA v3.1 | 0.4% | 2024-03-15 | Fix |
| CVE-2024-27756 | GLPI asset title field CSV injection | 8.8CISA ADP v3.1 | 0.7% | 2024-03-15 | |
| CVE-2024-27351 | Regular expression denial of service in Django | 5.3CISA ADP v3.1 | 1.9% | 2024-03-15 | Fix |
| CVE-2024-27196 | postMash custom post order WordPress plugin reflected cross-site scripting (XSS) | 6.1NVD v3.1 | 0.4% | 2024-03-15 | |
| CVE-2024-27193 | PayU India WordPress plugin reflected cross-site scripting (XSS) | 6.1NVD v3.1 | 0.4% | 2024-03-15 | Fix |
| CVE-2024-27192 | Configure SMTP WordPress plugin cross-site scripting (XSS) | 7.1CNA v3.1 | 0.4% | 2024-03-15 | Fix |
| CVE-2024-27189 | WP Social Widget WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.3% | 2024-03-15 | Fix |
| CVE-2024-27100 | Denial of service via Staff Actions in Discourse | 6.5CNA v3.1 | 0.6% | 2024-03-15 | Fix |
| CVE-2024-27085 | Denial of service through invites in Discourse | 6.5CNA v3.1 | 0.6% | 2024-03-15 | Fix |
| CVE-2024-26540 | CImg Clmg heap-based buffer overflow | 7.8CISA ADP v3.1 | 0.3% | 2024-03-15 | Fix |
| CVE-2024-26454 | Healthcare-Chatbot cross-site scripting | 5.4CISA ADP v3.1 | 0.4% | 2024-03-15 | |
| CVE-2024-25936 | SoundCloud Shortcode WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.3% | 2024-03-15 | Fix |
| CVE-2024-25934 | FormFacade WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.3% | 2024-03-15 | Fix |
| CVE-2024-25921 | Action Network WordPress plugin reflected cross-site scripting (XSS) | 7.1CNA v3.1 | 0.3% | 2024-03-15 | Fix |
| CVE-2024-25919 | Custom Field Template WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.3% | 2024-03-15 | Fix |
| CVE-2024-25916 | My Calendar WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.3% | 2024-03-15 | Fix |
| CVE-2024-25598 | Elementor Addons by Livemesh WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.3% | 2024-03-15 | Fix |
| CVE-2024-25597 | Ultimate Reviews WordPress plugin unauthenticated cross-site scripting (XSS) | 6.1NVD v3.1 | 0.4% | 2024-03-15 | Fix |
| CVE-2024-25596 | Doofinder for WooCommerce WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.3% | 2024-03-15 | Fix |
| CVE-2024-25593 | NEX-Forms WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.3% | 2024-03-15 | Fix |
| CVE-2024-25592 | Broken Link Checker WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.3% | 2024-03-15 | Fix |
| CVE-2024-25227 | Abo.cms SQL injection | 9.8v3.1 | 0.8% | 2024-03-15 | Exploit code |
| CVE-2024-24975 | Denial of service for mobile app users due to automatic code highlighting | 3.5CNA v3.1 | 0.4% | 2024-03-15 | Fix |
| CVE-2024-24827 | No rate limits on POST /uploads endpoint in Discourse | 5.3CNA v3.1 | 0.6% | 2024-03-15 | Fix |
| CVE-2024-24748 | Disclosure of the existence of secret subcategories in Discourse | 5.3CNA v3.1 | 0.5% | 2024-03-15 | Fix |
| CVE-2024-23944 | Apache ZooKeeper: Information disclosure in persistent watcher handling | 5.3CISA ADP v3.1 | 0.2% | 2024-03-15 | Fix |
| CVE-2024-23298 | Apple Xcode logic flaw | 5.5v3.1 | 0.5% | 2024-03-15 | Exploit codeFix |
| CVE-2024-2537 | Electron code injection in Logi Tune macOS application | 4.4CNA v3.1 | 0.3% | 2024-03-15 | |
| CVE-2024-2514 | MAGESH-K21 Online-College-Event-Hall-Reservation-System login.php SQL injection | 9.8v3.1 | 0.6% | 2024-03-15 | |
| CVE-2024-2497 | RaspAP raspap-webgui HTTP POST request provider.php code injection | 7.2v3.1 | 0.9% | 2024-03-15 | |
| CVE-2024-2495 | Cryptographic key in plain text vulnerability in FriendlyElec's FriendlyWrt | 4.4v3.1 | 0.2% | 2024-03-15 | |
| CVE-2024-2490 | Tenda AC18 openSchedWifi setSchedWifi stack-based overflow | 8.8v3.1 | 1.6% | 2024-03-15 | |
| CVE-2024-2489 | Tenda AC18 SetNetControlList formSetQosBand stack-based overflow | 8.8v3.1 | 1.6% | 2024-03-15 | |
| CVE-2024-2488 | Tenda AC18 SetPptpServerCfg formSetPPTPServer stack-based overflow | 8.8v3.1 | 1.5% | 2024-03-15 | |
| CVE-2024-2487 | Tenda AC18 SetOnlineDevName formSetDeviceName stack-based overflow | 8.8v3.1 | 1.6% | 2024-03-15 | |
| CVE-2024-2486 | Tenda AC18 QuickIndex formQuickIndex stack-based overflow | 8.8v3.1 | 1.6% | 2024-03-15 | |
| CVE-2024-2485 | Tenda AC18 SetSpeedWan formSetSpeedWan stack-based overflow | 8.8v3.1 | 1.7% | 2024-03-15 | |
| CVE-2024-2483 | Surya2Developer Hostel Management Service change-password.php cross-site request forgery | 4.3CNA v3.1 | 0.3% | 2024-03-15 | |
| CVE-2024-2482 | Surya2Developer Hostel Management Service check_availability.php observable response discrepancy | 3.7v3.1 | 0.8% | 2024-03-15 | |
| CVE-2024-2481 | Surya2Developer Hostel Management System manage-students.php access control | 6.5v3.1 | 1.0% | 2024-03-15 | |
| CVE-2024-2480 | MHA Sistemas arMHAzena Executa page SQL injection | 8.8v3.1 | 0.6% | 2024-03-15 | |
| CVE-2024-2479 | MHA Sistemas arMHAzena Cadastro page cross-site scripting | 3.5CNA v3.1 | 0.5% | 2024-03-15 | |
| CVE-2024-2478 | BradWenqiang HR Background Management register selectAll SQL injection | 9.8v3.1 | 0.6% | 2024-03-15 | |
| CVE-2024-2450 | Mattermost improper authentication | 8.8CNA v3.1 | 0.6% | 2024-03-15 | Fix |
| CVE-2024-2446 | Mattermost Server @-mention processing resource exhaustion | 4.3CNA v3.1 | 0.4% | 2024-03-15 | Fix |
| CVE-2024-2445 | Reflected XSS in Mattermost Jira plugin | 6.1CNA v3.1 | 0.3% | 2024-03-15 | Fix |
| CVE-2024-2399 | Premium Addons for Elementor WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.4% | 2024-03-15 | Fix |
| CVE-2024-2204 | Zemana AntiLogger denial of service (DoS) | 5.5CNA v3.1 | 0.2% | 2024-03-15 | |
| CVE-2024-2193 | Xen speculative execution mitigations race condition | 5.7CISA ADP v3.1 | 1.3% | 2024-03-15 | Fix |
| CVE-2024-2180 | Zemana AntiLogger Kernel memory leak | 5.5CNA v3.1 | 0.3% | 2024-03-15 | |
| CVE-2024-1917 | Mitsubishi Electric MELSEC-Q Series Q03UDECPU integer overflow | 9.8CNA v3.1 | 1.1% | 2024-03-15 | Fix |
| CVE-2024-1916 | Mitsubishi Electric MELSEC-Q Series Q03UDECPU integer overflow | 9.8CNA v3.1 | 1.1% | 2024-03-15 | Fix |
| CVE-2024-1915 | Incorrect Pointer Scaling vulnerability in Mitsubishi Electric Corporation MELSEC-Q Series and MELSEC-L Series CPU modules allows a remote unauthenticated attacker to execute malicious code on a target product by sending a specially crafted packet. | 9.8CNA v3.1 | 1.0% | 2024-03-15 | Fix |
| CVE-2024-1796 | HUSKY Products Filter for WooCommerce Professional WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.3% | 2024-03-15 | Fix |
| CVE-2024-1795 | HUSKY Products Filter for WooCommerce Professional WordPress plugin SQL injection | 8.8CNA v3.1 | 0.6% | 2024-03-15 | Fix |
| CVE-2024-0803 | Mitsubishi Electric MELSEC-Q Series Q03UDECPU integer overflow | 9.8CNA v3.1 | 1.0% | 2024-03-15 | Fix |
| CVE-2024-0802 | Incorrect Pointer Scaling vulnerability in Mitsubishi Electric Corporation MELSEC-Q Series and MELSEC-L Series CPU modules allows a remote unauthenticated attacker to read arbitrary information from a target product or execute malicious code on a target product by sending a specially crafted packet. | 9.8CNA v3.1 | 1.1% | 2024-03-15 | Fix |
| CVE-2024-28849 | Proxy-Authorization header kept across hosts in follow-redirects | 6.5CNA v3.1 | 1.0% | 2024-03-14 | Fix |
| CVE-2024-28746 | Apache Airflow improper preservation of permissions | 8.1v3.1 | 1.3% | 2024-03-14 | Fix |
| CVE-2024-28425 | LinkedIn Greykite unrestricted file upload | 7.5CISA ADP v3.1 | 0.6% | 2024-03-14 | |
| CVE-2024-28424 | ZenML code injection | 8.8CISA ADP v3.1 | 0.7% | 2024-03-14 | |
| CVE-2024-28423 | Feluelle Airflow-diagrams unrestricted file upload | 9.8CISA ADP v3.1 | 0.8% | 2024-03-14 | |
| CVE-2024-28418 | Webedition CMS unrestricted file upload | 6.5CISA ADP v3.1 | 0.4% | 2024-03-14 | |
| CVE-2024-28417 | Webedition CMS cross-site scripting | 6.3CISA ADP v3.1 | 0.3% | 2024-03-14 | |
| CVE-2024-28391 | Fmemodules B2B Quick ORDER Form SQL injection | 9.8CISA ADP v3.1 | 0.6% | 2024-03-14 | Fix |
| CVE-2024-28390 | Advancedplugins Ultimateimagetool improper access control | 9.8CISA ADP v3.1 | 0.6% | 2024-03-14 | |
| CVE-2024-28388 | Sunnytoo productcomments SunnyToo st SQL injection | 9.8CISA ADP v3.1 | 0.8% | 2024-03-14 | |
| CVE-2024-28383 | Tenda AX12 stack-based buffer overflow | 9.8CISA ADP v3.1 | 0.8% | 2024-03-14 | |
| CVE-2024-28323 | PHPGurukul User Registration and Login and User Management System SQL injection | 6.5CISA ADP v3.1 | 0.4% | 2024-03-14 | |
| CVE-2024-28251 | Cross-site websocket hijacking in Querybook | 5.6CNA v3.1 | 0.2% | 2024-03-14 | Fix |
| CVE-2024-28181 | hopsoft turbo_boost-commands injection | 8.1CNA v3.1 | 0.8% | 2024-03-14 | Fix |
| CVE-2024-27986 | Livemesh Addons for Elementor WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.3% | 2024-03-14 | Fix |
| CVE-2024-27301 | Privilege escalation Abusing installer in SupportApp | 7.3CNA v3.1 | 0.3% | 2024-03-14 | Fix |
| CVE-2024-27266 | IBM Maximo Application Suite XML external entity injection | 8.2CNA v3.1 | 0.8% | 2024-03-14 | Fix |
| CVE-2024-27265 | IBM Integration Bus for z/OS cross-site request forgery | 4.5CNA v3.1 | 0.2% | 2024-03-14 | Fix |
| CVE-2024-26503 | openeclass arbitrary file upload | 9.1CISA ADP v3.1 | 1.1% | 2024-03-14 | Exploit code |
| CVE-2024-26475 | radare2 null pointer dereference | 5.5v3.1 | 0.3% | 2024-03-14 | Exploit codeFix |
| CVE-2024-26246 | Microsoft Edge (Chromium-based) security feature bypass | 3.9CNA v3.1 | 0.6% | 2024-03-14 | Fix |
| CVE-2024-26163 | Microsoft Edge (Chromium-based) security feature bypass | 4.7CNA v3.1 | 2.1% | 2024-03-14 | Fix |
| CVE-2024-25653 | Delinea Secret Server Report functionality of Delinea PAM missing authorization | 4.3CISA ADP v3.1 | 0.4% | 2024-03-14 | |
| CVE-2024-25652 | Delinea Secret Server improper authentication | 8.4v3.1 | 0.6% | 2024-03-14 | Fix |
| CVE-2024-25651 | Delinea Secret Server observable discrepancy | 5.3CISA ADP v3.1 | 0.5% | 2024-03-14 | |
| CVE-2024-25650 | Delinea Distributed Engine cleartext transmission of sensitive information | 5.9CISA ADP v3.1 | 0.3% | 2024-03-14 | |
| CVE-2024-25649 | Delinea Secret Server cleartext storage of sensitive information in memory | 6.7CISA ADP v3.1 | 0.1% | 2024-03-14 | |
| CVE-2024-25228 | Vinchin Backup And Recovery command injection | 8.8CISA ADP v3.1 | 25.9% | 2024-03-14 | |
| CVE-2024-25156 | Path traversal in GoAnywhere MFT | 6.5CNA v3.1 | 0.4% | 2024-03-14 | Fix |
| CVE-2024-25139 | TP-Link Omada ER605 buffer overflow | 10.0CISA ADP v3.1 | 0.9% | 2024-03-14 | |
| CVE-2024-24770 | Username timing attack on recover password/MFA token in vantage6 | 5.3CNA v3.1 | 0.4% | 2024-03-14 | Fix |
| CVE-2024-24562 | Security headers not set in vantage6-UI | 5.4CNA v3.1 | 0.3% | 2024-03-14 | Fix |
| CVE-2024-23823 | CORS settings overly permissive in vantage6 | 4.2CNA v3.1 | 0.3% | 2024-03-14 | Fix |
| CVE-2024-22398 | SonicWall Email Security path traversal | 4.9CISA ADP v3.1 | 0.9% | 2024-03-14 | Fix |
| CVE-2024-22397 | SonicWall SonicOS cross-site scripting | 8.3CISA ADP v3.1 | 1.1% | 2024-03-14 | Fix |
| CVE-2024-22396 | SonicWall SonicOS Integer-based buffer overflow | 5.3CISA ADP v3.1 | 1.1% | 2024-03-14 | Fix |
| CVE-2024-22346 | IBM i privilege escalation | 8.4CNA v3.1 | 0.2% | 2024-03-14 | Fix |
| CVE-2024-2256 | oik WordPress plugin authenticated (Contributor+) stored cross-site scripting via shortcode | 5.4v3.1 | 0.4% | 2024-03-14 | Fix |
| CVE-2024-2249 | LA-Studio Element Kit for Elementor WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.3% | 2024-03-14 | Fix |
| CVE-2024-1884 | Server side request forgery in PaperCut NG/MF | 6.5CNA v3.1 | 37.9% | 2024-03-14 | Fix |
| CVE-2024-1883 | Reflected XSS in PaperCut NG/MF | 6.3CNA v3.1 | 61.5% | 2024-03-14 | Fix |
| CVE-2024-1882 | Server-side resource injection in PaperCut NG/MF | 7.2CNA v3.1 | 1.4% | 2024-03-14 | Fix |
| CVE-2024-1853 | Zemana AntiLogger arbitrary Process Termination | 5.5CNA v3.1 | 0.2% | 2024-03-14 | |
| CVE-2024-1713 | Plv8 Deferred Trigger privilege escalation | 7.2NVD v3.1 | 0.6% | 2024-03-14 | |
| CVE-2024-1654 | Unauthorized write operations in PaperCut NG/MF | 7.2CNA v3.1 | 1.3% | 2024-03-14 | Fix |
| CVE-2024-1623 | Insufficient session timeout vulnerability in Sagemcom router | 7.8v3.1 | 0.2% | 2024-03-14 | Fix |
| CVE-2024-1223 | Improper authorization controls in PaperCut NG/MF | 4.8CNA v3.1 | 0.4% | 2024-03-14 | Fix |
| CVE-2024-1222 | Incorrect authorization controls in PaperCut NG/MF APIs | 8.6CNA v3.1 | 64.0% | 2024-03-14 | Fix |
| CVE-2024-1221 | Improper access controls on APIs on Linux and macOS in PaperCut NG/MF | 3.1CNA v3.1 | 0.5% | 2024-03-14 | Fix |
| CVE-2024-0860 | Cleartext transmission of sensitive information in Softing edgeConnector and edgeAggregator | 7.5v3.1 | 0.5% | 2024-03-14 | Fix |
| CVE-2024-0313 | Skyhigh Client Proxy incorrect control flow | 5.5CNA v3.1 | 0.2% | 2024-03-14 | |
| CVE-2024-0312 | Skyhigh Client Proxy uninstall password check vulnerability | 5.5CNA v3.1 | 0.2% | 2024-03-14 | |
| CVE-2024-0311 | Skyhigh Client Proxy release code policy vulnerability | 5.5CNA v3.1 | 0.4% | 2024-03-14 | Exploit code |
| CVE-2024-28684 | DedeCMS cross-site request forgery | 8.8CISA ADP v3.1 | 0.3% | 2024-03-13 | |
| CVE-2024-28683 | DedeCMS cross-site scripting | 6.1CISA ADP v3.1 | 0.5% | 2024-03-13 | |
| CVE-2024-28682 | DedeCMS cross-site request forgery | 6.3CISA ADP v3.1 | 0.2% | 2024-03-13 | |
| CVE-2024-28681 | DedeCMS cross-site request forgery | 6.1CISA ADP v3.1 | 0.2% | 2024-03-13 | |
| CVE-2024-28680 | DedeCMS cross-site scripting | 6.1CISA ADP v3.1 | 0.5% | 2024-03-13 | |
| CVE-2024-28679 | DedeCMS cross-site scripting | 6.1CISA ADP v3.1 | 0.5% | 2024-03-13 | |
| CVE-2024-28678 | DedeCMS cross-site request forgery | 6.3CISA ADP v3.1 | 0.2% | 2024-03-13 | |
| CVE-2024-28677 | DedeCMS cross-site request forgery | 6.1CISA ADP v3.1 | 0.2% | 2024-03-13 | |
| CVE-2024-28676 | DedeCMS cross-site scripting | 6.1CISA ADP v3.1 | 0.5% | 2024-03-13 | |
| CVE-2024-28675 | DedeCMS cross-site request forgery | 8.8CISA ADP v3.1 | 0.3% | 2024-03-13 | |
| CVE-2024-28673 | DedeCMS cross-site request forgery | 8.8CISA ADP v3.1 | 0.4% | 2024-03-13 | |
| CVE-2024-28672 | DedeCMS cross-site request forgery | 5.4CISA ADP v3.1 | 0.2% | 2024-03-13 | |
| CVE-2024-28671 | DedeCMS cross-site scripting | 8.8CISA ADP v3.1 | 0.9% | 2024-03-13 | |
| CVE-2024-28670 | DedeCMS cross-site request forgery | 6.1CISA ADP v3.1 | 0.2% | 2024-03-13 | |
| CVE-2024-28669 | DedeCMS cross-site request forgery | 5.4CISA ADP v3.1 | 0.2% | 2024-03-13 | |
| CVE-2024-28668 | DedeCMS server-side request forgery | 6.1CISA ADP v3.1 | 0.4% | 2024-03-13 | |
| CVE-2024-28667 | DedeCMS cross-site request forgery | 6.1CISA ADP v3.1 | 0.2% | 2024-03-13 | |
| CVE-2024-28666 | DedeCMS cross-site request forgery | 5.5CISA ADP v3.1 | 0.2% | 2024-03-13 | |
| CVE-2024-28665 | DedeCMS cross-site request forgery | 8.8CISA ADP v3.1 | 0.3% | 2024-03-13 | |
| CVE-2024-28662 | Piwigo A cross-site scripting | 5.4CISA ADP v3.1 | 0.4% | 2024-03-13 | Fix |
| CVE-2024-28623 | Ritecms cross-site scripting | 6.1CISA ADP v3.1 | 1.3% | 2024-03-13 | NucleiExploit code |
| CVE-2024-28432 | DedeCMS cross-site request forgery | 8.8CISA ADP v3.1 | 0.3% | 2024-03-13 | |
| CVE-2024-28431 | DedeCMS cross-site request forgery | 8.8CISA ADP v3.1 | 0.3% | 2024-03-13 | |
| CVE-2024-28430 | DedeCMS cross-site request forgery | 6.1CISA ADP v3.1 | 0.2% | 2024-03-13 | |
| CVE-2024-28429 | DedeCMS cross-site request forgery | 5.5CISA ADP v3.1 | 0.2% | 2024-03-13 | |
| CVE-2024-28196 | Clickjacking in your_spotify | 6.5CNA v3.1 | 0.4% | 2024-03-13 | Fix |
| CVE-2024-28195 | Cross-site request forgery (CSRF) vulnerability in API and login in your_spotify | 8.1CNA v3.1 | 0.4% | 2024-03-13 | Fix |
| CVE-2024-28194 | Authentication bypass Because of Hard-coded JWT Secret in your_spotify | 9.1CNA v3.1 | 0.8% | 2024-03-13 | Fix |
| CVE-2024-28193 | Disclosure of Spotify API Access Tokens to Guest Users using Public Tokens in your_spotify | 6.5CNA v3.1 | 0.6% | 2024-03-13 | Fix |
| CVE-2024-28192 | NoSQL injection leading to authentication bypass in your_spotify | 5.3CNA v3.1 | 0.6% | 2024-03-13 | Fix |
| CVE-2024-28175 | Cross-site scripting on application summary component in argo-cd | 9.1CNA v3.1 | 0.7% | 2024-03-13 | Fix |
| CVE-2024-27953 | Cryptocurrency Widgets Price Ticker and Coins List WordPress plugin broken access control | 4.7v3.1 | 0.4% | 2024-03-13 | Fix |
| CVE-2024-27952 | Advanced Sermons WordPress plugin cross-site scripting (XSS) | 6.1NVD v3.1 | 0.4% | 2024-03-13 | Fix |
| CVE-2024-27703 | Leantime cross-site scripting | 5.4CISA ADP v3.1 | 0.5% | 2024-03-13 | |
| CVE-2024-27440 | Toyoko Inn IT Solution Toyoko Inn official App improper certificate validation | 4.8CISA ADP v3.1 | 0.2% | 2024-03-13 | |
| CVE-2024-27102 | Improper isolation of server file access in github.com/pterodactyl/wings | 10.0CNA v3.1 | 0.5% | 2024-03-13 | Fix |
| CVE-2024-27097 | Potential log injection in reset user endpoint in ckan | 4.3CNA v3.1 | 0.4% | 2024-03-13 | Fix |
| CVE-2024-26630 | Linux kernel cachestat page cache walk use-after-free | 7.1CNA v3.1 | 0.3% | 2024-03-13 | Fix |
| CVE-2024-26629 | Linux kernel NFSD lock owner release vulnerability | 5.5NVD v3.1 | 0.2% | 2024-03-13 | Fix |
| CVE-2024-26529 | MZ Automation libiec61850 denial of service | 7.5CISA ADP v3.1 | 0.8% | 2024-03-13 | |
| CVE-2024-25250 | Carmelo Agro-School Management System code-projects SQL injection | 9.8CISA ADP v3.1 | 0.6% | 2024-03-13 | |
| CVE-2024-25155 | Reflected cross-site scripting (XSS) in FileCatalyst Direct | 7.2CNA v3.1 | 0.4% | 2024-03-13 | Fix |
| CVE-2024-25154 | Path traversal in FileCatalyst Direct | 5.3CNA v3.1 | 0.5% | 2024-03-13 | Fix |
| CVE-2024-25153 | Remote code execution in FileCatalyst Workflow Build 114 | 9.8CNA v3.1 | 41.7% | 2024-03-13 | Emerging ThreatsExploit codeFix |
| CVE-2024-25101 | Maspik Spam blacklist WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.4% | 2024-03-13 | Fix |
| CVE-2024-25099 | Paytium: Mollie payment forms and donations WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.4% | 2024-03-13 | Fix |
| CVE-2024-25097 | TNC PDF viewer WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.4% | 2024-03-13 | Fix |
| CVE-2024-24693 | Zoom Rooms Client for Windows improper access control | 7.2CNA v3.1 | 0.2% | 2024-03-13 | Fix |
| CVE-2024-24692 | Zoom Rooms Client for Windows race condition | 5.3CNA v3.1 | 0.1% | 2024-03-13 | Fix |
| CVE-2024-24549 | Apache Tomcat: HTTP/2 header handling DoS | 7.5CISA ADP v3.1 | 23.1% | 2024-03-13 | Exploit codeFix |
| CVE-2024-24105 | Carmelo Computer Science Time Table System Code-projects SQL injection | 7.8v3.1 | 0.3% | 2024-03-13 | |
| CVE-2024-23672 | Apache Tomcat: WebSocket DoS with incomplete closing handshake | 6.3CISA ADP v3.1 | 2.3% | 2024-03-13 | Fix |
| CVE-2024-22167 | SanDisk PrivateAccess DLL hijacking | 7.9CNA v3.1 | 0.2% | 2024-03-13 | Fix |
| CVE-2024-20327 | Cisco IOS XR Software crash | 7.4CNA v3.1 | 0.3% | 2024-03-13 | Fix |
| CVE-2024-20322 | Cisco IOS XR Software improper access control | 5.8CNA v3.1 | 0.5% | 2024-03-13 | Fix |
| CVE-2024-20320 | Cisco IOS XR Software incorrect privilege assignment | 7.8CNA v3.1 | 0.2% | 2024-03-13 | Fix |
| CVE-2024-20319 | Cisco IOS XR Software improper access control | 4.3CNA v3.1 | 0.3% | 2024-03-13 | Fix |
| CVE-2024-20318 | Cisco IOS XR Software denial of service | 7.4CNA v3.1 | 0.3% | 2024-03-13 | Fix |
| CVE-2024-20315 | Cisco IOS XR Software improper access control | 5.8CNA v3.1 | 0.5% | 2024-03-13 | Fix |
| CVE-2024-20266 | Cisco IOS XR Software null pointer dereference | 5.3CNA v3.1 | 0.6% | 2024-03-13 | Fix |
| CVE-2024-20262 | Cisco IOS XR Software improper privilege management | 6.5CNA v3.1 | 0.1% | 2024-03-13 | Fix |
| CVE-2024-2433 | PAN-OS: Improper privilege management vulnerability in Panorama software leads to Availability Loss | 4.3CNA v3.1 | 0.6% | 2024-03-13 | Fix |
| CVE-2024-2432 | GlobalProtect App: Local privilege escalation (PE) | 4.5CNA v3.1 | 0.4% | 2024-03-13 | Exploit codeFix |
| CVE-2024-2431 | GlobalProtect App: Local User can Disable GlobalProtect | 5.5CNA v3.1 | 0.2% | 2024-03-13 | Fix |
| CVE-2024-2418 | SourceCodester Best POS Management System view_order.php SQL injection | 9.8v3.1 | 0.7% | 2024-03-13 | |
| CVE-2024-2416 | Cross-site request forgery vulnerability in Movistar 4G router | 6.5CNA v3.1 | 0.2% | 2024-03-13 | |
| CVE-2024-2415 | Command injection vulnerability in Movistar 4G router | 7.8CNA v3.1 | 0.7% | 2024-03-13 | |
| CVE-2024-2414 | Unprotected Primary Channel vulnerability in Movistar 4G router | 8.8CNA v3.1 | 0.3% | 2024-03-13 | |
| CVE-2024-2413 | Intumit SmartRobot use of hard-coded cryptographic key | 9.8CNA v3.1 | 0.6% | 2024-03-13 | Fix |
| CVE-2024-2412 | Heimavista Rpage and Epage broken access control | 5.3CNA v3.1 | 0.4% | 2024-03-13 | Fix |
| CVE-2024-2403 | Devolutions Remote Desktop Manager incomplete cleanup | 5.9v3.1 | 0.4% | 2024-03-13 | Fix |
| CVE-2024-2400 | Google Chrome Performance Manager use-after-free | 8.8v3.1 | 0.7% | 2024-03-13 | Fix |
| CVE-2024-2293 | Site Reviews WordPress plugin stored cross-site scripting | 6.4CNA v3.1 | 0.5% | 2024-03-13 | Fix |
| CVE-2024-2286 | Sky Addons for Elementor WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.4% | 2024-03-13 | Fix |
| CVE-2024-2252 | Droit Elementor Addons WordPress plugin stored cross-site scripting | 5.4CNA v3.1 | 0.4% | 2024-03-13 | |
| CVE-2024-2247 | JFrog Artifactory cross-site scripting | 8.8CNA v3.1 | 0.5% | 2024-03-13 | Fix |
| CVE-2024-2242 | Contact Form 7 WordPress plugin reflected cross-site scripting | 6.1CNA v3.1 | 1.3% | 2024-03-13 | Exploit codeFix |
| CVE-2024-2239 | Premium Addons PRO WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.4% | 2024-03-13 | Fix |
| CVE-2024-2238 | Premium Addons PRO WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.4% | 2024-03-13 | Fix |
| CVE-2024-2237 | Premium Addons PRO WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.4% | 2024-03-13 | Fix |
| CVE-2024-2194 | WP Statistics WordPress plugin unauthenticated stored cross-site scripting | 7.2CNA v3.1 | 67.7% | 2024-03-13 | Fix |
| CVE-2024-2172 | Malware Scanner and Web Application Firewall mo_wpns_init function privilege escalation | 9.8CNA v3.1 | 1.7% | 2024-03-13 | Fix |
| CVE-2024-2126 | Orbit Fox by ThemeIsle WordPress plugin stored Cross-Site Scripiting via Registration form widget | 5.4v3.1 | 0.4% | 2024-03-13 | Fix |
| CVE-2024-2123 | Ultimate Member WordPress plugin unauthenticated stored cross-site scripting | 6.1NVD v3.1 | 26.7% | 2024-03-13 | Fix |
| CVE-2024-2106 | MasterStudy LMS WordPress Plugin for Online Courses and Education Basic information exposure | 7.5v3.1 | 0.8% | 2024-03-13 | Fix |
| CVE-2024-2079 | WPBakery Page Builder Addons by Livemesh WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.3% | 2024-03-13 | Fix |
| CVE-2024-2030 | Database for Contact Form 7, WPforms, Elementor forms WordPress plugin stored cross-site scripting | 6.4CNA v3.1 | 0.6% | 2024-03-13 | Fix |
| CVE-2024-2028 | Exclusive Addons for Elementor WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.4% | 2024-03-13 | Fix |
| CVE-2024-2020 | Calculated Fields Form Professional WordPress plugin unauthenticated stored cross-site scripting | 6.1NVD v3.1 | 0.6% | 2024-03-13 | Fix |
| CVE-2024-2006 | Post Grid, Slider and Carousel Ultimate WordPress plugin PHP object injection | 8.8v3.1 | 1.2% | 2024-03-13 | Fix |
| CVE-2024-2000 | Premium Addons PRO WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.4% | 2024-03-13 | Fix |
| CVE-2024-1997 | Premium Addons PRO WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.4% | 2024-03-13 | Fix |
| CVE-2024-1996 | Premium Addons for Elementor PRO WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.4% | 2024-03-13 | Fix |
| CVE-2024-1985 | Simple Membership WordPress plugin unauthenticated stored Self-based cross-site scripting | 6.1v3.1 | 0.9% | 2024-03-13 | Fix |
| CVE-2024-1979 | Quarkus: Information leak in annotation | 3.5CNA v3.1 | 0.6% | 2024-03-13 | Fix |
| CVE-2024-1951 | Logo Showcase Ultimate WordPress plugin PHP object injection | 7.5CNA v3.1 | 1.0% | 2024-03-13 | Fix |
| CVE-2024-1950 | Product Carousel Slider and Grid Ultimate for WooCommerce WordPress plugin PHP object injection | 8.8v3.1 | 1.2% | 2024-03-13 | Fix |
| CVE-2024-1935 | Giveaways and Contests by RafflePress WordPress plugin unauthenticated stored cross-site scripting | 6.1NVD v3.1 | 0.7% | 2024-03-13 | Fix |
| CVE-2024-1894 | Burst Statistics Privacy-Friendly Analytics for WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.5% | 2024-03-13 | Fix |
| CVE-2024-1862 | WooCommerce Add to Cart Custom Redirect WordPress plugin unauthorized access | 6.5NVD v3.1 | 0.7% | 2024-03-13 | Fix |
| CVE-2024-1854 | Essential Blocks WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.4% | 2024-03-13 | Fix |
| CVE-2024-1843 | Auto Affiliate Links WordPress plugin missing authorization via aalAddLink | 4.3v3.1 | 0.5% | 2024-03-13 | Fix |
| CVE-2024-1806 | ProfilePress WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.6% | 2024-03-13 | Fix |
| CVE-2024-1793 | AWeber WordPress plugin SQL injection | 7.2CNA v3.1 | 0.9% | 2024-03-13 | Fix |
| CVE-2024-1772 | Play.ht WordPress plugin PHP object injection | 8.8CNA v3.1 | 1.0% | 2024-03-13 | |
| CVE-2024-1763 | Wp Social Login and Register Social Counter WordPress plugin unauthorized access | 5.3v3.1 | 0.4% | 2024-03-13 | Fix |
| CVE-2024-1751 | Tutor LMS eLearning and online course solution WordPress plugin SQL injection | 8.8CNA v3.1 | 3.1% | 2024-03-13 | NucleiFix |
| CVE-2024-1723 | SiteOrigin Widgets Bundle WordPress plugin authenticated (Contributor+) stored cross-site scripting | 5.4v3.1 | 0.5% | 2024-03-13 | Fix |
| CVE-2024-1691 | Otter Blocks PRO WordPress plugin unauthenticated stored cross-site scripting via SVG upload | 6.1CNA v3.1 | 0.5% | 2024-03-13 | Fix |
| CVE-2024-1690 | TeraWallet WordPress plugin unauthorized access | 4.3CNA v3.1 | 0.4% | 2024-03-13 | Fix |
| CVE-2024-1684 | Otter Blocks PRO WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.4% | 2024-03-13 | Fix |
| CVE-2024-1680 | Premium Addons for Elementor WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.4% | 2024-03-13 | Fix |
| CVE-2024-1668 | Avada WordPress theme Authenticated(Contributor+) sensitive information exposure via form Entries | 6.5CNA v3.1 | 0.7% | 2024-03-13 | Fix |
| CVE-2024-1642 | MainWP Dashboard WordPress plugin cross-site request forgery via posting_bulk | 4.3v3.1 | 0.3% | 2024-03-13 | Fix |
| CVE-2024-1640 | Contact Form Builder Plugin: Multi Step Contact Form WordPress plugin unauthorized access | 5.3CNA v3.1 | 0.5% | 2024-03-13 | Fix |
| CVE-2024-1585 | Metform Elementor Contact Form Builder WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.5% | 2024-03-13 | Fix |
| CVE-2024-1582 | WP Go Maps (formerly WP Google Maps) WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.3% | 2024-03-13 | Fix |
| CVE-2024-1541 | Gutenberg Blocks by Kadence Blocks WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.5% | 2024-03-13 | Fix |
| CVE-2024-1537 | Essential Addons for Elementor WordPress plugin stored cross-site scripting | 6.4CNA v3.1 | 0.4% | 2024-03-13 | Fix |
| CVE-2024-1536 | Essential Addons for Elementor WordPress plugin stored cross-site scripting | 7.4CNA v3.1 | 0.5% | 2024-03-13 | Fix |
| CVE-2024-1535 | ProfilePress WordPress plugin authenticated (Contributor+) stored cross-site scripting via shortcode | 5.4v3.1 | 0.6% | 2024-03-13 | Fix |
| CVE-2024-1508 | Prime Slider Addons For Elementor WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.3% | 2024-03-13 | Fix |
| CVE-2024-1507 | Prime Slider Addons For Elementor WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.4% | 2024-03-13 | Fix |
| CVE-2024-1505 | Academy LMS eLearning and online course solution for WordPress plugin privilege escalation | 8.8CNA v3.1 | 0.8% | 2024-03-13 | Fix |
| CVE-2024-1499 | Orbit Fox by ThemeIsle WordPress plugin authenticated (Contributor+) stored cross-site scripting | 5.4v3.1 | 0.5% | 2024-03-13 | Fix |
| CVE-2024-1497 | Orbit Fox by ThemeIsle WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.5% | 2024-03-13 | Fix |
| CVE-2024-1489 | SMS Alert Order Notifications WooCommerce WordPress plugin cross-site request forgery | 4.3CNA v3.1 | 0.2% | 2024-03-13 | Fix |
| CVE-2024-1484 | Booking for Appointments and Events Calendar Amelia WordPress plugin reflected cross-site scripting | 6.1v3.1 | 0.5% | 2024-03-13 | Fix |
| CVE-2024-1479 | WP Show Posts WordPress plugin information exposure | 5.3CNA v3.1 | 0.7% | 2024-03-13 | Fix |
| CVE-2024-1462 | Maintenance Page WordPress plugin security Mechanism bypass via REST API | 5.3CNA v3.1 | 0.5% | 2024-03-13 | Fix |
| CVE-2024-1452 | GenerateBlocks WordPress plugin sensitive information exposure | 4.3CNA v3.1 | 0.6% | 2024-03-13 | Fix |
| CVE-2024-1422 | Elementor Addon Elements WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.5% | 2024-03-13 | Fix |
| CVE-2024-1414 | Exclusive Addons for Elementor WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.4% | 2024-03-13 | Fix |
| CVE-2024-1413 | Exclusive Addons for Elementor WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.4% | 2024-03-13 | Fix |
| CVE-2024-1409 | Paid Membership Plugin WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.4% | 2024-03-13 | Fix |
| CVE-2024-1393 | Elementor Addon Elements WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.5% | 2024-03-13 | Fix |
| CVE-2024-1392 | Elementor Addon Elements WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.5% | 2024-03-13 | Fix |
| CVE-2024-1391 | Elementor Addon Elements WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.5% | 2024-03-13 | Fix |
| CVE-2024-1383 | WPvivid Backup for MainWP WordPress plugin reflected cross-site scripting | 6.1CNA v3.1 | 0.6% | 2024-03-13 | Fix |
| CVE-2024-1380 | Relevanssi A Better Search and missing authorization to Unauthenticated Query Log Export | 5.3CNA v3.1 | 50.2% | 2024-03-13 | NucleiExploit codeFix |
| CVE-2024-1370 | Maintenance Page WordPress plugin missing authorization to sensitive information exposure | 4.3v3.1 | 0.4% | 2024-03-13 | Fix |
| CVE-2024-1365 | YML for Yandex Market WordPress plugin reflected cross-site scripting | 6.1v3.1 | 0.5% | 2024-03-13 | Fix |
| CVE-2024-1363 | Easy Accordion Best Accordion FAQ Plugin for WordPress stored cross-site scripting | 5.4v3.1 | 0.4% | 2024-03-13 | Fix |
| CVE-2024-1358 | Elementor Addon Elements WordPress plugin directory traversal to local file inclusion | 6.5NVD v3.1 | 1.2% | 2024-03-13 | Fix |
| CVE-2024-1321 | EventPrime WordPress plugin insufficient verification of data authenticity | 5.3CNA v3.1 | 0.3% | 2024-03-13 | Fix |
| CVE-2024-1311 | Brizy Page Builder WordPress plugin authenticated (Contributor+) arbitrary file upload | 8.8CNA v3.1 | 1.5% | 2024-03-13 | Fix |
| CVE-2024-1296 | Brizy Page Builder WordPress plugin authenticated (Contributor+) stored cross-site scripting | 5.4v3.1 | 0.5% | 2024-03-13 | Fix |
| CVE-2024-1293 | Brizy Page Builder WordPress plugin authenticated (Contributor+) stored cross-site scripting | 5.4v3.1 | 0.4% | 2024-03-13 | Fix |
| CVE-2024-1291 | Brizy Page Builder WordPress plugin authenticated (Contributor+) stored cross-site scripting | 5.4v3.1 | 0.4% | 2024-03-13 | Fix |
| CVE-2024-1237 | Elementor Header and Footer Builder WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.5% | 2024-03-13 | Fix |
| CVE-2024-1234 | Exclusive Addons for Elementor WordPress plugin stored cross-site scripting | 5.4v3.1 | 1.6% | 2024-03-13 | Exploit codeFix |
| CVE-2024-1203 | Conversios WordPress plugin SQL injection | 8.8v3.1 | 0.8% | 2024-03-13 | Fix |
| CVE-2024-1176 | HT Easy GA4 Google Analytics WordPress plugin missing authorization unauthenticated GA4 email update | 5.3CNA v3.1 | 0.6% | 2024-03-13 | Fix |
| CVE-2024-1158 | Post Form WordPress plugin unauthorized access | 4.3CNA v3.1 | 0.5% | 2024-03-13 | Fix |
| CVE-2024-1127 | EventPrime WordPress plugin unauthorized access | 4.3CNA v3.1 | 0.5% | 2024-03-13 | Fix |
| CVE-2024-1126 | EventPrime WordPress plugin unauthorized access | 4.3v3.1 | 0.4% | 2024-03-13 | Fix |
| CVE-2024-1083 | Simple Restrict WordPress plugin missing authorization to sensitive information exposure | 5.3CNA v3.1 | 0.5% | 2024-03-13 | Fix |
| CVE-2024-1080 | Beaver Builder WordPress Page Builder plugin stored cross-site scripting | 5.4v3.1 | 0.4% | 2024-03-13 | Fix |
| CVE-2024-1074 | Beaver Builder WordPress Page Builder plugin stored cross-site scripting | 5.4v3.1 | 0.5% | 2024-03-13 | Fix |
| CVE-2024-1071 | Ultimate Member WordPress plugin SQL injection | 9.8CNA v3.1 | 89.4% | 2024-03-13 | NucleiExploit codeFix |
| CVE-2024-1038 | Beaver Builder WordPress Page Builder plugin reflected (DOM-Based) cross-site scripting | 6.1v3.1 | 0.6% | 2024-03-13 | Fix |
| CVE-2024-0976 | WP Event Manager WordPress plugin reflected cross-site scripting via plugin | 6.1CNA v3.1 | 0.6% | 2024-03-13 | Fix |
| CVE-2024-0898 | Chat Bubble WordPress plugin authenticated (Administrator+) stored cross-site scripting | 4.8v3.1 | 0.4% | 2024-03-13 | |
| CVE-2024-0897 | Beaver Builder WordPress Page Builder plugin stored cross-site scripting | 5.4v3.1 | 0.4% | 2024-03-13 | Fix |
| CVE-2024-0896 | Beaver Builder WordPress Page Builder plugin stored cross-site scripting | 5.4v3.1 | 0.5% | 2024-03-13 | Fix |
| CVE-2024-0871 | Beaver Builder WordPress plugin stored cross-site scripting | 5.4CNA v3.1 | 0.4% | 2024-03-13 | Fix |
| CVE-2024-0839 | FeedWordPress WordPress plugin insecure direct object Referece | 5.3CNA v3.1 | 0.6% | 2024-03-13 | Fix |
| CVE-2024-0830 | Comments Extra Fields For Post,Pages and CPT WordPress plugin cross-site request forgery | 4.3v3.1 | 0.3% | 2024-03-13 | Fix |
| CVE-2024-0829 | Comments Extra Fields For Post,Pages and CPT WordPress plugin missing authorization | 4.3CNA v3.1 | 0.5% | 2024-03-13 | Fix |
| CVE-2024-0828 | Play.ht WordPress plugin unauthorized access | 6.3v3.1 | 0.4% | 2024-03-13 | |
| CVE-2024-0827 | Play.ht WordPress plugin cross-site request forgery | 4.3v3.1 | 0.2% | 2024-03-13 | |
| CVE-2024-0801 | Unauthenticated DoS in Arcserve Unified Data Protection | 7.5CNA v3.1 | 41.8% | 2024-03-13 | NucleiEmerging Threats |
| CVE-2024-0800 | Authentication bypass via wizardLogin in Arcserve Unified Data Protection | 8.8CNA v3.1 | 1.0% | 2024-03-13 | KCV |
| CVE-2024-0799 | Authentication bypass via wizardLogin in Arcserve Unified Data Protection | 9.8CNA v3.1 | 4.3% | 2024-03-13 | NucleiEmerging ThreatsKCV |
| CVE-2024-0700 | Simple Tweet WordPress plugin authenticated (Author+) stored cross-site scripting | 5.4v3.1 | 0.5% | 2024-03-13 | |
| CVE-2024-0687 | Intoxstudio Restrict User Access API information disclosure | 5.3CNA v3.1 | 0.5% | 2024-03-13 | Fix |
| CVE-2024-0683 | Bulgarisation for WooCommerce WordPress plugin missing authorization | 7.5v3.1 | 1.2% | 2024-03-13 | Exploit codeFix |
| CVE-2024-0681 | Page Restriction WordPress (WP) Protect WP Pages/Post plugin Protection Mechanism bypass | 5.3CNA v3.1 | 0.6% | 2024-03-13 | Fix |
| CVE-2024-0631 | Duitku Payment Gateway WordPress plugin missing authorization via check_duitku_response | 5.3v3.1 | 0.6% | 2024-03-13 | Fix |
| CVE-2024-0614 | Events Manager WordPress plugin stored cross-site scripting | 4.8v3.1 | 0.7% | 2024-03-13 | Fix |
| CVE-2024-0592 | Related Posts for WordPress plugin cross-site request forgery | 5.4v3.1 | 0.3% | 2024-03-13 | Fix |
| CVE-2024-0591 | wpDataTables WordPress plugin reflected cross-site scripting | 6.1CNA v3.1 | 0.6% | 2024-03-13 | Fix |
| CVE-2024-0449 | ArtiBot Free Chat Bot for WordPress WebSites plugin authenticated (Admin+) cross-site scripting | 4.8v3.1 | 0.5% | 2024-03-13 | Fix |
| CVE-2024-0447 | ArtiBot Free Chat Bot for WordPress WebSites plugin missing authorization to settings update | 5.0CNA v3.1 | 0.6% | 2024-03-13 | Fix |
| CVE-2024-0385 | Categorify WordPress plugin missing authorization in categorifyAjaxAddCategory | 4.3CNA v3.1 | 0.6% | 2024-03-13 | Fix |
| CVE-2024-0377 | LifterLMS WordPress LMS Plugin for eLearning missing authorization via process_review | 5.3CNA v3.1 | 0.7% | 2024-03-13 | Fix |
| CVE-2024-0369 | Bulk Edit Post Titles WordPress plugin missing authorization via bulkUpdatePostTitles | 4.3CNA v3.1 | 0.4% | 2024-03-13 | |
| CVE-2024-0368 | Hustle WordPress plugin sensitive information exposure via Exposed Hubspot API Keys | 8.6CNA v3.1 | 0.8% | 2024-03-13 | Fix |
| CVE-2024-0326 | Premium Addons for Elementor WordPress plugin stored cross-site scripting | 6.4CNA v3.1 | 0.6% | 2024-03-13 | Fix |
| CVE-2024-0173 | Dell PowerEdge Platform out-of-bounds access | 3.8CNA v3.1 | 0.2% | 2024-03-13 | Fix |
| CVE-2024-0163 | Dell PowerEdge BIOS Intel 16G time-of-check time-of-use race condition | 5.3CNA v3.1 | 0.1% | 2024-03-13 | Fix |
| CVE-2024-0162 | Dell PowerEdge BIOS Intel 16G out-of-bounds read | 5.3CNA v3.1 | 0.2% | 2024-03-13 | Fix |
| CVE-2024-0161 | Dell PowerEdge Platform improper input validation | 7.2CNA v3.1 | 0.2% | 2024-03-13 | Fix |
| CVE-2024-0154 | Dell PowerEdge Platform out-of-bounds access | 3.8CNA v3.1 | 0.2% | 2024-03-13 | Fix |
| CVE-2024-28553 | Tenda AC18 Firmware out-of-bounds write | 9.8v3.1 | 0.8% | 2024-03-12 | |
| CVE-2024-28535 | Tenda AC18 Firmware stack-based buffer overflow | 9.8v3.1 | 0.8% | 2024-03-12 | |
| CVE-2024-28340 | NETGEAR CBK40 currentsetting.htm component information disclosure | 7.5CISA ADP v3.1 | 0.6% | 2024-03-12 | Fix |
| CVE-2024-28339 | NETGEAR CBK40 debuginfo.htm component information disclosure | 5.4CISA ADP v3.1 | 0.4% | 2024-03-12 | Fix |
| CVE-2024-28338 | TOTOLINK A8000RU improper access control | 8.0CISA ADP v3.1 | 0.6% | 2024-03-12 | |
| CVE-2024-28239 | URL redirection to untrusted site in OAuth2/OpenID in directus | 5.4CNA v3.1 | 0.6% | 2024-03-12 | Fix |
| CVE-2024-28238 | Session Token in URL in directus | 2.3CNA v3.1 | 0.2% | 2024-03-12 | Fix |
| CVE-2024-28236 | go-vela worker Insecure Variable Substitution in Vela | 7.7CNA v3.1 | 0.7% | 2024-03-12 | Fix |
| CVE-2024-28186 | SMTP Mail Credentials Disclosed in Error Log in Freescout | 7.1CNA v3.1 | 0.6% | 2024-03-12 | Fix |
| CVE-2024-28163 | Information disclosure vulnerability in SAP NetWeaver Process Integration (Support Web pages) | 5.3CNA v3.1 | 0.4% | 2024-03-12 | Fix |
| CVE-2024-28121 | Reflex arbitrary method call in stimulus_reflex | 8.8CNA v3.1 | 1.6% | 2024-03-12 | Fix |
| CVE-2024-28114 | peering-manager remote code execution using server side template injection in Peering Manager | 8.1CNA v3.1 | 1.3% | 2024-03-12 | Fix |
| CVE-2024-28113 | peering-manager open redirection using the return_url parameter in Peering Manager | 3.5CNA v3.1 | 0.4% | 2024-03-12 | Fix |
| CVE-2024-28112 | peering-manager cross-site scripting on router page in Peering Manager | 6.1CNA v3.1 | 0.3% | 2024-03-12 | Fix |
| CVE-2024-28098 | Apache Pulsar: Improper authorization for Topic-Level Policy Management | 6.4CNA v3.1 | 1.7% | 2024-03-12 | Fix |
| CVE-2024-27907 | Siemens Simcenter Femap out-of-bounds write | 7.8CNA v3.1 | 0.4% | 2024-03-12 | Fix |
| CVE-2024-27902 | Cross-site scripting vulnerability in SAP NetWeaver AS ABAP applications based on SAPGUI for HTML | 5.4CNA v3.1 | 0.5% | 2024-03-12 | Fix |
| CVE-2024-27900 | Missing authorization check in SAP ABAP Platform | 4.3CNA v3.1 | 0.4% | 2024-03-12 | Fix |
| CVE-2024-27894 | Apache Pulsar Pulsar Functions Worker vulnerability | 8.5CNA v3.1 | 1.9% | 2024-03-12 | Fix |
| CVE-2024-27758 | RPyC's missing security check results in code execution when using numpy.array on the server-side | 8.4CISA ADP v3.1 | 0.5% | 2024-03-12 | Fix |
| CVE-2024-27317 | Apache Pulsar Functions Worker archive extraction path traversal | 8.4CNA v3.1 | 56.9% | 2024-03-12 | Fix |
| CVE-2024-27305 | aio-libs aiosmtpd insufficient verification of data authenticity | 5.3CNA v3.1 | 0.4% | 2024-03-12 | Fix |
| CVE-2024-27279 | appleple a-blog cms Ver.3.1.x series path traversal | 6.5CISA ADP v3.1 | 0.8% | 2024-03-12 | Fix |
| CVE-2024-27135 | Apache Pulsar: Improper input validation in Pulsar Function Worker allows remote code execution | 8.5CNA v3.1 | 6.0% | 2024-03-12 | Fix |
| CVE-2024-27121 | OMRON Machine Automation Controller NJ-series path traversal | 7.2CISA ADP v3.1 | 0.9% | 2024-03-12 | |
| CVE-2024-26521 | CE Phoenix v1.0.8.20 and HTML injection | 4.8CISA ADP v3.1 | 0.8% | 2024-03-12 | Exploit code |
| CVE-2024-26288 | Phoenix Contact: Lack of SSL support in CHARX Series | 8.7CNA v3.1 | 0.3% | 2024-03-12 | Fix |
| CVE-2024-26204 | Outlook for Android information disclosure | 7.5CNA v3.1 | 2.1% | 2024-03-12 | Fix |
| CVE-2024-26203 | Microsoft Azure Data Studio elevation of privilege | 7.3CNA v3.1 | 0.9% | 2024-03-12 | Fix |
| CVE-2024-26201 | Microsoft Intune Linux agent elevation of privilege | 6.6CNA v3.1 | 0.9% | 2024-03-12 | Fix |
| CVE-2024-26199 | Microsoft Office elevation of privilege | 7.8CNA v3.1 | 1.2% | 2024-03-12 | Fix |
| CVE-2024-26198 | Microsoft Exchange Server remote code execution | 8.8CNA v3.1 | 6.8% | 2024-03-12 | Fix |
| CVE-2024-26197 | Microsoft Windows Standards-Based Storage Management service denial of service | 6.5CNA v3.1 | 2.8% | 2024-03-12 | Fix |
| CVE-2024-26190 | Microsoft QUIC denial of service | 7.5CNA v3.1 | 3.0% | 2024-03-12 | Fix |
| CVE-2024-26185 | Microsoft Windows Compressed Folder tampering | 6.5CNA v3.1 | 30.3% | 2024-03-12 | Fix |
| CVE-2024-26182 | Microsoft Windows Kernel elevation of privilege | 7.8CNA v3.1 | 5.6% | 2024-03-12 | Fix |
| CVE-2024-26181 | Microsoft Windows Kernel denial of service | 5.5CNA v3.1 | 1.0% | 2024-03-12 | Fix |
| CVE-2024-26178 | Microsoft Windows Kernel elevation of privilege | 7.8CNA v3.1 | 0.9% | 2024-03-12 | Fix |
| CVE-2024-26177 | Microsoft Windows Kernel information disclosure | 5.5CNA v3.1 | 1.1% | 2024-03-12 | Fix |
| CVE-2024-26176 | Microsoft Windows Kernel elevation of privilege | 7.8CNA v3.1 | 0.8% | 2024-03-12 | Fix |
| CVE-2024-26174 | Microsoft Windows Kernel information disclosure | 5.5CNA v3.1 | 0.9% | 2024-03-12 | Fix |
| CVE-2024-26173 | Microsoft Windows Kernel elevation of privilege | 7.8CNA v3.1 | 0.9% | 2024-03-12 | Fix |
| CVE-2024-26170 | Microsoft Windows Composite Image File System (CimFS) elevation of privilege | 7.8CNA v3.1 | 6.6% | 2024-03-12 | Fix |
| CVE-2024-26169 | Microsoft Windows Error Reporting service improper privilege management | 7.8CNA v3.1 | 4.0% | 2024-03-12 | KEVFix |
| CVE-2024-26166 | Microsoft WDAC OLE DB provider for SQL server remote code execution | 8.8CNA v3.1 | 2.0% | 2024-03-12 | Fix |
| CVE-2024-26165 | Microsoft Visual Studio Code elevation of privilege | 8.8CNA v3.1 | 1.9% | 2024-03-12 | Fix |
| CVE-2024-26164 | Microsoft Django Backend for SQL server remote code execution | 8.8CNA v3.1 | 2.1% | 2024-03-12 | Fix |
| CVE-2024-26162 | Microsoft ODBC driver remote code execution | 8.8CNA v3.1 | 2.0% | 2024-03-12 | Fix |
| CVE-2024-26161 | Microsoft WDAC OLE DB provider for SQL server remote code execution | 8.8CNA v3.1 | 1.9% | 2024-03-12 | Fix |
| CVE-2024-26160 | Microsoft Windows Cloud Files Mini Filter driver information disclosure | 5.5CNA v3.1 | 11.4% | 2024-03-12 | Exploit codeFix |
| CVE-2024-26159 | Microsoft ODBC driver remote code execution | 8.8CNA v3.1 | 1.9% | 2024-03-12 | Fix |
| CVE-2024-26005 | Phoenix Contact: Privilege gain through incomplete cleanup in CHARX Series | 4.8CNA v3.1 | 0.6% | 2024-03-12 | Fix |
| CVE-2024-26004 | Phoenix Contact: DoS of a control agent due to access of a uninitialized pointer in CHARX Series | 7.5CNA v3.1 | 1.0% | 2024-03-12 | Fix |
| CVE-2024-26003 | Phoenix Contact: DoS of the control agent in CHARX Series | 7.5CNA v3.1 | 1.2% | 2024-03-12 | Fix |
| CVE-2024-26002 | Phoenix Contact: File ownership manipulation in CHARX Series | 7.8CNA v3.1 | 0.3% | 2024-03-12 | Fix |
| CVE-2024-26001 | Phoenix Contact: Out-of-bounds write only memory access | 9.8v3.1 | 0.9% | 2024-03-12 | Fix |
| CVE-2024-26000 | Phoenix Contact: Out-of-bounds read only memory access | 7.5v3.1 | 0.8% | 2024-03-12 | Fix |
| CVE-2024-25999 | Phoenix Contact: Privilege escalation in the OCPP agent service | 7.8v3.1 | 0.4% | 2024-03-12 | Fix |
| CVE-2024-25998 | Phoenix Contact: Command injection in the OCPP service | 7.3CNA v3.1 | 1.5% | 2024-03-12 | Fix |
| CVE-2024-25997 | Phoenix Contact: Log injection in CHARX Series | 5.3CNA v3.1 | 0.7% | 2024-03-12 | Fix |
| CVE-2024-25996 | Phoenix Contact: Remote code execution due to an origin validation error in CHARX Series | 9.8v3.1 | 0.4% | 2024-03-12 | Fix |
| CVE-2024-25995 | Phoenix Contact: Remote code execution in CHARX Series | 9.8CNA v3.1 | 1.4% | 2024-03-12 | Fix |
| CVE-2024-25994 | Phoenix Contact: Unintended script file upload in CHARX Series | 5.3CNA v3.1 | 0.7% | 2024-03-12 | Fix |
| CVE-2024-25645 | Information disclosure vulnerability in SAP NetWeaver (Enterprise Portal) | 5.3CNA v3.1 | 0.4% | 2024-03-12 | Fix |
| CVE-2024-25644 | Information disclosure vulnerability in NetWeaver (WSRM) | 5.3CNA v3.1 | 0.4% | 2024-03-12 | Fix |
| CVE-2024-25331 | DIR-822 HNAP interface stack-based buffer overflow | 9.3CISA ADP v3.1 | 0.3% | 2024-03-12 | |
| CVE-2024-25325 | Walterjnr1 Employee Management System SQL injection | 7.1CISA ADP v3.1 | 0.3% | 2024-03-12 | |
| CVE-2024-24964 | SKYSEA Client View resident process improper access control | 6.3CISA ADP v3.1 | 0.4% | 2024-03-12 | Fix |
| CVE-2024-24101 | code-projects Scholars Tracking System SQL injection | 9.8v3.1 | 0.3% | 2024-03-12 | |
| CVE-2024-24097 | code-projects Scholars Tracking System cross-site scripting | 5.4CISA ADP v3.1 | 0.3% | 2024-03-12 | |
| CVE-2024-24093 | code-projects Scholars Tracking System SQL injection | 9.8CISA ADP v3.1 | 0.6% | 2024-03-12 | |
| CVE-2024-24092 | code-projects Scholars Tracking System Code-projects.org SQL injection | 7.8CISA ADP v3.1 | 0.3% | 2024-03-12 | |
| CVE-2024-23300 | Apple GarageBand use-after-free | 7.8v3.1 | 0.3% | 2024-03-12 | Fix |
| CVE-2024-23112 | Fortinet FortiOS insecure direct object reference | 7.2CNA v3.1 | 0.7% | 2024-03-12 | Fix |
| CVE-2024-22133 | Improper access control in SAP Fiori Front End Server | 4.6CNA v3.1 | 0.3% | 2024-03-12 | Fix |
| CVE-2024-22127 | Code injection vulnerability in SAP NetWeaver AS Java (Administrator Log Viewer plug-in) | 9.1CNA v3.1 | 1.6% | 2024-03-12 | Exploit codeFix |
| CVE-2024-22045 | Siemens SINEMA Remote Connect Client sensitive information in an accessible file | 7.6CNA v3.1 | 0.4% | 2024-03-12 | Fix |
| CVE-2024-22044 | Siemens SENTRON 3KC ATC6 Expansion Module Ethernet hidden functionality | 7.5CNA v3.1 | 0.5% | 2024-03-12 | |
| CVE-2024-22041 | Siemens Cerberus PRO EN Engineering Tool memory corruption | 7.5CNA v3.1 | 0.5% | 2024-03-12 | Fix |
| CVE-2024-22040 | Siemens Cerberus PRO EN Engineering Tool out-of-bounds read | 7.5CNA v3.1 | 0.8% | 2024-03-12 | Fix |
| CVE-2024-22039 | Siemens Cerberus PRO EN Engineering Tool buffer overflow | 10.0CNA v3.1 | 0.8% | 2024-03-12 | Fix |
| CVE-2024-21805 | SKYSEA Client View specific folder improper access control | 7.8CISA ADP v3.1 | 0.2% | 2024-03-12 | Fix |
| CVE-2024-21761 | Fortinet FortiPortal improper authorization | 3.9CNA v3.1 | 0.4% | 2024-03-12 | Fix |
| CVE-2024-21584 | Implem Pleasanter cross-site scripting | 6.1v3.1 | 0.4% | 2024-03-12 | Fix |
| CVE-2024-21483 | Siemens SENTRON 7KM PAC3120 AC/DC improper access control | 5.1CNA v4.0 | 0.2% | 2024-03-12 | Fix |
| CVE-2024-21451 | Microsoft ODBC driver remote code execution | 8.8CNA v3.1 | 1.9% | 2024-03-12 | Fix |
| CVE-2024-21450 | Microsoft WDAC OLE DB provider for SQL server remote code execution | 8.8CNA v3.1 | 2.0% | 2024-03-12 | Fix |
| CVE-2024-21448 | Microsoft Teams for Android information disclosure | 5.0CNA v3.1 | 1.2% | 2024-03-12 | Fix |
| CVE-2024-21446 | Microsoft Windows NTFS elevation of privilege | 7.8CNA v3.1 | 0.7% | 2024-03-12 | Fix |
| CVE-2024-21445 | Microsoft Windows USB Print driver elevation of privilege | 7.0CNA v3.1 | 0.5% | 2024-03-12 | Fix |
| CVE-2024-21444 | Microsoft WDAC OLE DB provider for SQL server remote code execution | 8.8CNA v3.1 | 1.9% | 2024-03-12 | Fix |
| CVE-2024-21443 | Microsoft Windows Kernel elevation of privilege | 7.3CNA v3.1 | 1.3% | 2024-03-12 | Fix |
| CVE-2024-21442 | Microsoft Windows USB Print driver elevation of privilege | 7.8CNA v3.1 | 0.8% | 2024-03-12 | Fix |
| CVE-2024-21441 | Microsoft WDAC OLE DB provider for SQL server remote code execution | 8.8CNA v3.1 | 1.9% | 2024-03-12 | Fix |
| CVE-2024-21440 | Microsoft ODBC driver remote code execution | 8.8CNA v3.1 | 2.0% | 2024-03-12 | Fix |
| CVE-2024-21439 | Microsoft Windows Telephony Server elevation of privilege | 7.0CNA v3.1 | 0.5% | 2024-03-12 | Fix |
| CVE-2024-21438 | Microsoft AllJoyn API denial of service | 7.5CNA v3.1 | 2.7% | 2024-03-12 | Fix |
| CVE-2024-21437 | Microsoft Windows Graphics component elevation of privilege | 7.8CNA v3.1 | 8.0% | 2024-03-12 | Fix |
| CVE-2024-21436 | Microsoft Windows Installer elevation of privilege | 7.8CNA v3.1 | 0.7% | 2024-03-12 | Fix |
| CVE-2024-21435 | Microsoft Windows OLE remote code execution | 8.8CNA v3.1 | 2.0% | 2024-03-12 | Fix |
| CVE-2024-21434 | Microsoft Windows SCSI Class System file elevation of privilege | 7.8CNA v3.1 | 0.8% | 2024-03-12 | Fix |
| CVE-2024-21433 | Microsoft Windows Print Spooler elevation of privilege | 7.0CNA v3.1 | 5.1% | 2024-03-12 | Fix |
| CVE-2024-21432 | Microsoft Windows Update Stack elevation of privilege | 7.0CNA v3.1 | 0.7% | 2024-03-12 | Fix |
| CVE-2024-21431 | Microsoft Windows Hypervisor-Protected Code Integrity (HVCI) security feature bypass | 7.8CNA v3.1 | 0.6% | 2024-03-12 | Fix |
| CVE-2024-21430 | Microsoft Windows USB Attached SCSI (UAS) protocol remote code execution | 5.7CNA v3.1 | 0.7% | 2024-03-12 | Fix |
| CVE-2024-21429 | Microsoft Windows USB Hub driver remote code execution | 6.8CNA v3.1 | 0.9% | 2024-03-12 | Fix |
| CVE-2024-21427 | Microsoft Windows Kerberos security feature bypass | 7.5CNA v3.1 | 1.5% | 2024-03-12 | Fix |
| CVE-2024-21426 | Microsoft SharePoint server remote code execution | 7.8CNA v3.1 | 3.9% | 2024-03-12 | Fix |
| CVE-2024-21421 | Microsoft Azure SDK spoofing | 7.5CNA v3.1 | 1.8% | 2024-03-12 | Fix |
| CVE-2024-21419 | Microsoft Dynamics 365 (on-premises) cross-site scripting | 7.6CNA v3.1 | 1.1% | 2024-03-12 | Fix |
| CVE-2024-21418 | Microsoft Software For Open Networking In The Cloud (SONiC) elevation of privilege | 7.8CNA v3.1 | 0.7% | 2024-03-12 | Fix |
| CVE-2024-21411 | Microsoft Skype for Consumer remote code execution | 8.8CNA v3.1 | 2.6% | 2024-03-12 | Fix |
| CVE-2024-21408 | Microsoft Windows Hyper-V denial of service | 5.5CNA v3.1 | 4.5% | 2024-03-12 | Fix |
| CVE-2024-21407 | Microsoft Windows Hyper-V remote code execution | 8.1CNA v3.1 | 16.3% | 2024-03-12 | Fix |
| CVE-2024-21400 | Microsoft Azure Kubernetes Service Confidential Container elevation of privilege | 9.0CNA v3.1 | 2.2% | 2024-03-12 | Fix |
| CVE-2024-21392 | NET and Visual Studio denial of service | 7.5CNA v3.1 | 3.1% | 2024-03-12 | Fix |
| CVE-2024-21390 | Microsoft Authenticator elevation of privilege | 7.1CNA v3.1 | 1.3% | 2024-03-12 | Fix |
| CVE-2024-21334 | Microsoft Open Management Infrastructure (OMI) remote code execution | 9.8CNA v3.1 | 20.2% | 2024-03-12 | Fix |
| CVE-2024-21330 | Microsoft Open Management Infrastructure (OMI) elevation of privilege | 7.8CNA v3.1 | 1.0% | 2024-03-12 | Fix |
| CVE-2024-20671 | Microsoft Defender security feature bypass | 5.5CNA v3.1 | 0.9% | 2024-03-12 | Fix |
| CVE-2024-2406 | Gacjie Server Upload.php index unrestricted upload | 9.8v3.1 | 0.6% | 2024-03-12 | |
| CVE-2024-2395 | Bulgarisation for WooCommerce WordPress plugin cross-site request forgery | 4.3NVD v3.1 | 0.2% | 2024-03-12 | Fix |
| CVE-2024-2394 | SourceCodester Employee Management System add-admin.php unrestricted upload | 9.8v3.1 | 0.6% | 2024-03-12 | |
| CVE-2024-2393 | SourceCodester CRUD without Page Reload add_user.php SQL injection | 9.8v3.1 | 0.7% | 2024-03-12 | |
| CVE-2024-2391 | Eve-ng Lab cross-site scripting | 6.1v3.1 | 0.5% | 2024-03-12 | |
| CVE-2024-2371 | Information exposure vulnerability in Korenix JetI/O 6550 | 6.2CNA v3.1 | 0.2% | 2024-03-12 | |
| CVE-2024-2182 | Red Hat Fast Datapath for Red Hat Enterprise Linux 8 origin validation error | 6.5CNA v3.1 | 0.8% | 2024-03-12 | Fix |
| CVE-2024-2130 | CWW Companion WordPress plugin authenticated (Contributor+) stored cross-site scripting | 5.4v3.1 | 0.3% | 2024-03-12 | Fix |
| CVE-2024-2107 | Blossom Spa WordPress theme sensitive information exposure | 7.5v3.1 | 0.5% | 2024-03-12 | Fix |
| CVE-2024-2049 | Citrix SD-WAN Standard/Premium Editions server-side request forgery (SSRF) | 6.5CNA v3.1 | 0.4% | 2024-03-12 | Fix |
| CVE-2024-2031 | Video Conferencing with Zoom WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.3% | 2024-03-12 | Fix |
| CVE-2024-1765 | Unlimited resource allocation by QUIC CRYPTO frames flooding in quiche | 5.9CNA v3.1 | 1.2% | 2024-03-12 | Fix |
| CVE-2024-1618 | Unquoted item or search path vulnerability in Faronics Deep Freeze Server Standard | 7.8CNA v3.1 | 0.2% | 2024-03-12 | |
| CVE-2024-1529 | Cross-site scripting in CMS Made Simple | 6.1NVD v3.1 | 0.4% | 2024-03-12 | |
| CVE-2024-1528 | Cross-site scripting in CMS Made Simple | 6.1NVD v3.1 | 0.4% | 2024-03-12 | |
| CVE-2024-1527 | Unrestricted upload of file with dangerous type in CMS Made Simple | 8.8NVD v3.1 | 0.9% | 2024-03-12 | |
| CVE-2024-1421 | HT Mega Absolute Addons For Elementor WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.3% | 2024-03-12 | Fix |
| CVE-2024-1410 | Unbounded storage of information related to connection ID retirement, in quiche | 3.7CNA v3.1 | 0.7% | 2024-03-12 | Fix |
| CVE-2024-1397 | HT Mega WordPress plugin authenticated (Contributor+) stored cross-site scripting via titleTag | 5.4v3.1 | 0.5% | 2024-03-12 | Fix |
| CVE-2024-1328 | Newsletter2Go WordPress plugin Authenticated(Subscriber+) stored cross-site scripting via style | 5.4v3.1 | 0.3% | 2024-03-12 | |
| CVE-2024-1304 | Badger Meter Monitool cross-site scripting | 6.1v3.1 | 0.7% | 2024-03-12 | Exploit codeFix |
| CVE-2024-1303 | Badger Meter Monitool download-file functionality path traversal | 6.5v3.1 | 1.0% | 2024-03-12 | Exploit codeFix |
| CVE-2024-1302 | Badger Meter Monitool information disclosure | 5.5NVD v3.1 | 0.5% | 2024-03-12 | Exploit codeFix |
| CVE-2024-1301 | Badger Meter Monitool SQL injection | 7.5NVD v3.1 | 2.2% | 2024-03-12 | Exploit codeFix |
| CVE-2024-1227 | Rejetto HTTP File Server open redirect | 6.5CNA v3.1 | 0.5% | 2024-03-12 |