CVE-2024 records published in March 2024
Page three of three: records 2,001 to 2,606 of the 2,606 published in March 2024, newest first. The first page carries the figures for March 2024.
| CVE | Summary | CVSS | EPSS | Published | Signals |
|---|---|---|---|---|---|
| CVE-2024-1226 | Rejetto HTTP File Server HTTP header handling CRLF injection | 7.5CNA v3.1 | 0.4% | 2024-03-12 | |
| CVE-2024-1138 | TIBCO FTL privilege escalation | 8.8CNA v3.1 | 0.5% | 2024-03-12 | |
| CVE-2024-1137 | TIBCO ActiveSpaces information leak | 4.3CNA v3.1 | 0.3% | 2024-03-12 | |
| CVE-2024-0906 | f(x) Private Site WordPress plugin sensitive information exposure | 5.3CNA v3.1 | 0.5% | 2024-03-12 | |
| CVE-2024-0386 | weForms WordPress plugin unauthenticated stored cross-site scripting via Referer | 6.1NVD v3.1 | 0.6% | 2024-03-12 | Fix |
| CVE-2024-28823 | Amazon AWS JavaScript S3 Explorer index.html cross-site scripting | 6.1CISA ADP v3.1 | 0.4% | 2024-03-11 | |
| CVE-2024-28816 | Student Information Chatbot login function SQL injection | 7.1CISA ADP v3.1 | 0.5% | 2024-03-11 | |
| CVE-2024-28199 | Cross-site scripting (XSS) possible with maliciously formed HTML attribute names and values in Phlex | 7.1CNA v3.1 | 0.6% | 2024-03-11 | Fix |
| CVE-2024-28198 | XML external entity (XXE) injection in OpenOLAT | 4.6CNA v3.1 | 0.4% | 2024-03-11 | Fix |
| CVE-2024-28197 | Account takeover via session fixation in Zitadel [Bypassing MFA] | 7.5CNA v3.1 | 0.3% | 2024-03-11 | Fix |
| CVE-2024-28187 | inunosinsi soycms OS command injection vulnerability in SOY CMS | 7.2CNA v3.1 | 1.6% | 2024-03-11 | Fix |
| CVE-2024-28120 | API key leak in codeium-chrome | 6.5CNA v3.1 | 0.6% | 2024-03-11 | |
| CVE-2024-27938 | Postal SMTP server vulnerability | 5.3CNA v3.1 | 0.7% | 2024-03-11 | Fix |
| CVE-2024-27297 | Nix Corruption of fixed-output derivations | 6.3CNA v3.1 | 0.6% | 2024-03-11 | Fix |
| CVE-2024-27237 | Google Android nsmemwipe.c information disclosure | 5.5v3.1 | 0.1% | 2024-03-11 | Fix |
| CVE-2024-27236 | Google Android aoc.c memory corruption | 8.4CISA ADP v3.1 | 0.1% | 2024-03-11 | Fix |
| CVE-2024-27235 | Google Android out-of-bounds read | 5.5CISA ADP v3.1 | 0.1% | 2024-03-11 | Fix |
| CVE-2024-27234 | Google Android fvp.c out-of-bounds read | 5.9CISA ADP v3.1 | 0.1% | 2024-03-11 | Fix |
| CVE-2024-27233 | Google Android ppcfw.c insecure permissions | 7.8CISA ADP v3.1 | 0.1% | 2024-03-11 | Fix |
| CVE-2024-27230 | Google Android protocolpsadapter.cpp out-of-bounds read | 5.1CISA ADP v3.1 | 0.1% | 2024-03-11 | Fix |
| CVE-2024-27229 | Google Android ss_CallBarring.c null pointer dereference | 7.5v3.1 | 0.4% | 2024-03-11 | Fix |
| CVE-2024-27228 | Google Android out-of-bounds write | 9.8CISA ADP v3.1 | 0.6% | 2024-03-11 | Fix |
| CVE-2024-27227 | Google Android out-of-bounds write | 9.8v3.1 | 0.3% | 2024-03-11 | Fix |
| CVE-2024-27226 | Google Android out-of-bounds write | 8.4CISA ADP v3.1 | 0.1% | 2024-03-11 | Fix |
| CVE-2024-27225 | Google Android bluetooth_hci.cc out-of-bounds read | 4.4CISA ADP v3.1 | 0.1% | 2024-03-11 | Fix |
| CVE-2024-27224 | Google Android strncpy.c out-of-bounds write | 7.8CISA ADP v3.1 | 0.1% | 2024-03-11 | Fix |
| CVE-2024-27223 | Google Android LPP_LcsManagement.c out-of-bounds read | 5.1CISA ADP v3.1 | 0.1% | 2024-03-11 | Fix |
| CVE-2024-27222 | Google Android FaceEnrollFoldPage.java privilege escalation | 7.8CISA ADP v3.1 | 0.1% | 2024-03-11 | Fix |
| CVE-2024-27221 | Google Android out-of-bounds write | 7.8CISA ADP v3.1 | 0.1% | 2024-03-11 | Fix |
| CVE-2024-27220 | Google Android out-of-bounds access | 8.4CISA ADP v3.1 | 0.1% | 2024-03-11 | Fix |
| CVE-2024-27219 | Google Android tmu.c out-of-bounds write | 8.4CISA ADP v3.1 | 0.1% | 2024-03-11 | Fix |
| CVE-2024-27218 | Google Android out-of-bounds read | 5.5v3.1 | 0.1% | 2024-03-11 | Fix |
| CVE-2024-27213 | Google Android servicemgr.cpp remote code execution | 8.4CISA ADP v3.1 | 0.1% | 2024-03-11 | Fix |
| CVE-2024-27212 | Google Android out-of-bounds write | 7.8CISA ADP v3.1 | 0.1% | 2024-03-11 | Fix |
| CVE-2024-27211 | Google Android ati_Main.c out-of-bounds write | 7.7CISA ADP v3.1 | 0.1% | 2024-03-11 | Fix |
| CVE-2024-27210 | Google Android fvp.c out-of-bounds write | 7.8CISA ADP v3.1 | 0.1% | 2024-03-11 | Fix |
| CVE-2024-27209 | Google Android heap-based buffer overflow | 8.4CISA ADP v3.1 | 0.1% | 2024-03-11 | Fix |
| CVE-2024-27208 | Google Android out-of-bounds write | 8.4CISA ADP v3.1 | 0.1% | 2024-03-11 | Fix |
| CVE-2024-27207 | Google Android improper privilege management | 9.1CISA ADP v3.1 | 0.3% | 2024-03-11 | Fix |
| CVE-2024-27206 | Google Android out-of-bounds read | 7.5CISA ADP v3.1 | 0.3% | 2024-03-11 | Fix |
| CVE-2024-27205 | Google Android use-after-free | 8.4CISA ADP v3.1 | 0.1% | 2024-03-11 | Fix |
| CVE-2024-27204 | Google Android tmu.c out-of-bounds write | 8.4CISA ADP v3.1 | 0.1% | 2024-03-11 | Fix |
| CVE-2024-26619 | Linux kernel RISC-V module loader use-after-free | 7.8v3.1 | 0.3% | 2024-03-11 | Fix |
| CVE-2024-26618 | Linux kernel arm64 SME storage allocation vulnerability | 5.5v3.1 | 0.2% | 2024-03-11 | Fix |
| CVE-2024-26616 | Linux kernel Btrfs scrub use-after-free | 7.8v3.1 | 0.3% | 2024-03-11 | Fix |
| CVE-2024-26615 | Linux kernel SMC-D connection dump null pointer dereference | 5.5v3.1 | 0.3% | 2024-03-11 | Fix |
| CVE-2024-26612 | Linux kernel netfs fscache null pointer dereference | 5.5CISA ADP v3.1 | 0.2% | 2024-03-11 | Fix |
| CVE-2024-25993 | Google Android out-of-bounds write | 8.4CISA ADP v3.1 | 0.1% | 2024-03-11 | Fix |
| CVE-2024-25992 | Google Android tmu.c out-of-bounds read | 7.8CISA ADP v3.1 | 0.1% | 2024-03-11 | Fix |
| CVE-2024-25991 | Google Android tmu_plugin.c out-of-bounds read | 3.3CISA ADP v3.1 | 0.1% | 2024-03-11 | Fix |
| CVE-2024-25990 | Google Android link_rx_pktproc.c out-of-bounds write | 6.4CISA ADP v3.1 | 0.1% | 2024-03-11 | Fix |
| CVE-2024-25989 | Google Android pixel_gpu_slc.c out-of-bounds read | 5.9CISA ADP v3.1 | 0.1% | 2024-03-11 | Fix |
| CVE-2024-25988 | Google Android SAEMM_RadioMessageCodec.c out-of-bounds read | 8.4CISA ADP v3.1 | 0.1% | 2024-03-11 | Fix |
| CVE-2024-25987 | Google Android pt.c out-of-bounds write | 6.7CISA ADP v3.1 | 0.1% | 2024-03-11 | Fix |
| CVE-2024-25986 | Google Android drm_fw.c privilege escalation | 7.8CISA ADP v3.1 | 0.1% | 2024-03-11 | Fix |
| CVE-2024-25985 | Google Android bigo.c use-after-free | 8.4CISA ADP v3.1 | 0.1% | 2024-03-11 | Fix |
| CVE-2024-25984 | Google Android dump_power.cpp out-of-bounds read | 6.2CISA ADP v3.1 | 0.1% | 2024-03-11 | Fix |
| CVE-2024-25854 | Munyweki Insurance Management System Sourcecodester cross-site scripting | 6.1CISA ADP v3.1 | 0.3% | 2024-03-11 | |
| CVE-2024-25114 | Sensitive information disclosure (JailID) to users in Collabora Online | 2.6CNA v3.1 | 0.5% | 2024-03-11 | Fix |
| CVE-2024-23717 | Google Android btm_sec.cc injection | 8.8NVD v3.1 | 0.4% | 2024-03-11 | Fix |
| CVE-2024-23612 | Improper error handling issue in LabVIEW | 7.8CNA v3.1 | 0.6% | 2024-03-11 | Fix |
| CVE-2024-23611 | Out-of-bounds write due to Missing Bounds Check in LabVIEW | 7.8CNA v3.1 | 0.6% | 2024-03-11 | Fix |
| CVE-2024-23610 | Out-of-bounds write due to Missing Bounds Check in LabVIEW | 7.8CNA v3.1 | 0.6% | 2024-03-11 | Fix |
| CVE-2024-23609 | Improper error handling issue in LabVIEW | 7.8CNA v3.1 | 0.6% | 2024-03-11 | Fix |
| CVE-2024-23608 | Out-of-bounds write due to Missing Bounds Check in LabVIEW | 7.8CNA v3.1 | 0.6% | 2024-03-11 | Fix |
| CVE-2024-22011 | Google Android ss_MmConManagement.c out-of-bounds read | 7.5v3.1 | 0.3% | 2024-03-11 | Fix |
| CVE-2024-22010 | Google Android fvp.c out-of-bounds read | 5.5CISA ADP v3.1 | 0.1% | 2024-03-11 | Fix |
| CVE-2024-22009 | Google Android out-of-bounds write | 7.1CISA ADP v3.1 | 0.1% | 2024-03-11 | Fix |
| CVE-2024-22008 | Google Android tmu.c out-of-bounds write | 7.8CISA ADP v3.1 | 0.1% | 2024-03-11 | Fix |
| CVE-2024-22007 | Google Android fvp.c out-of-bounds read | 6.2CISA ADP v3.1 | 0.1% | 2024-03-11 | Fix |
| CVE-2024-22006 | Google Android TMU plugin out-of-bounds read | 5.3CISA ADP v3.1 | 0.2% | 2024-03-11 | Fix |
| CVE-2024-22005 | Google Android out-of-bounds write | 8.4CISA ADP v3.1 | 0.1% | 2024-03-11 | Fix |
| CVE-2024-2365 | Musicshelf SHA-1 PinningTrustManager.java weak password hash | 4.2v3.1 | 0.3% | 2024-03-11 | Fix |
| CVE-2024-2357 | IKEv2 misconfiguration can cause libreswan to abort and restart | 6.5CISA ADP v3.1 | 0.9% | 2024-03-11 | Fix |
| CVE-2024-2184 | Canon Color imageCLASS MF740C Series buffer overflow | 9.8CNA v3.1 | 0.8% | 2024-03-11 | Fix |
| CVE-2024-1696 | Santesoft Sante FFT Imaging out-of-bounds write | 7.8v3.1 | 0.3% | 2024-03-11 | Fix |
| CVE-2024-1645 | Mollie Forms WordPress plugin missing authorization | 4.3CNA v3.1 | 0.5% | 2024-03-11 | Fix |
| CVE-2024-1487 | Photos and Files Contest Gallery WordPress plugin Author+ stored cross-site scripting | 5.4NVD v3.1 | 0.4% | 2024-03-11 | Fix |
| CVE-2024-1441 | Red Hat Enterprise Linux 9 libvirt: Off-by-one error in udevlistinterfacesbystatus | 5.5CNA v3.1 | 0.4% | 2024-03-11 | Fix |
| CVE-2024-1400 | Mollie Forms WordPress plugin missing authorization to arbitrary post Duplication | 4.3CNA v3.1 | 0.3% | 2024-03-11 | Fix |
| CVE-2024-1290 | Formidable Registration WordPress plugin arbitrary user password reset to account takeover | 6.5CISA ADP v3.1 | 0.6% | 2024-03-11 | Fix |
| CVE-2024-1279 | Paid Memberships Pro WordPress plugin Contributor+ arbitrary user Custom field disclosure | 4.3NVD v3.1 | 0.5% | 2024-03-11 | Fix |
| CVE-2024-1273 | Starbox WordPress plugin Contributor+ stored XSS | 6.1CISA ADP v3.1 | 0.4% | 2024-03-11 | Fix |
| CVE-2024-1068 | 404 Solution WordPress plugin Admin+ SQL injection | 7.2CISA ADP v3.1 | 0.8% | 2024-03-11 | Fix |
| CVE-2024-0670 | Checkmk privilege escalation in windows agent | 8.8CNA v3.1 | 0.3% | 2024-03-11 | Exploit codeFix |
| CVE-2024-0561 | Ultimate Posts Widget WordPress plugin Admin+ stored XSS | 5.4CISA ADP v3.1 | 0.4% | 2024-03-11 | Fix |
| CVE-2024-0559 | Enhanced Text Widget WordPress plugin Admin+ stored XSS | 6.5CISA ADP v3.1 | 0.5% | 2024-03-11 | Fix |
| CVE-2024-0053 | Google Android PrintManagerService.java information disclosure | 3.3v3.1 | 0.1% | 2024-03-11 | Fix |
| CVE-2024-0052 | Google Android healthconnect information disclosure | 3.3NVD v3.1 | 0.1% | 2024-03-11 | Fix |
| CVE-2024-0051 | Google Android SoftMPEG4.cpp out-of-bounds write | 7.8v3.1 | 0.1% | 2024-03-11 | Fix |
| CVE-2024-0050 | Google Android SoftVideoDecoderOMXComponent.cpp out-of-bounds write | 7.8v3.1 | 0.1% | 2024-03-11 | Fix |
| CVE-2024-0049 | Google Android multiple locations out-of-bounds write | 7.8v3.1 | 0.2% | 2024-03-11 | Fix |
| CVE-2024-0048 | Google Android AccountManagerService.java privilege escalation | 7.8v3.1 | 0.1% | 2024-03-11 | Fix |
| CVE-2024-0047 | Google Android deserialization of untrusted data | 5.5v3.1 | 0.1% | 2024-03-11 | Fix |
| CVE-2024-0046 | Google Android InstallPackageHelper.java privilege escalation | 7.8v3.1 | 0.1% | 2024-03-11 | Fix |
| CVE-2024-0045 | Google Android smp_act.cc out-of-bounds read | 6.5NVD v3.1 | 0.3% | 2024-03-11 | Fix |
| CVE-2024-0044 | Google Android PackageInstallerService.java privilege escalation | 6.7NVD v3.1 | 1.5% | 2024-03-11 | Exploit codeFix |
| CVE-2024-0039 | Google Android att_protocol.cc out-of-bounds write | 9.8v3.1 | 1.5% | 2024-03-11 | Exploit codeFix |
| CVE-2024-28757 | libexpat XML entity expansion | 7.5NVD v3.1 | 2.0% | 2024-03-10 | Fix |
| CVE-2024-2364 | Musicshelf Backup androidmanifest.xml backup | 4.6v3.1 | 0.3% | 2024-03-10 | |
| CVE-2024-2363 | AOL AIM Triton Invite denial of service | 5.3CNA v3.1 | 0.7% | 2024-03-10 | |
| CVE-2024-2355 | keerti1924 Secret-Coder-PHP-Project secret_coder.sql file vulnerability | 3.7CNA v3.1 | 0.6% | 2024-03-10 | |
| CVE-2024-2354 | Dreamer CMS toEdit cross-site request forgery | 6.5v3.1 | 0.3% | 2024-03-10 | |
| CVE-2024-2353 | Totolink X6000R shttpd cstecgi.cgi setDiagnosisCfg os command injection | 8.8v3.1 | 4.0% | 2024-03-10 | |
| CVE-2024-2352 | 1Panel swap baseApi.UpdateDeviceSwap command injection | 9.8v3.1 | 3.0% | 2024-03-10 | Fix |
| CVE-2024-2314 | IOVisor BPF Compiler Collection kernel header loader vulnerability | 2.5NVD v3.1 | 0.2% | 2024-03-10 | Fix |
| CVE-2024-2313 | bpftrace insecure temporary file | 2.8CNA v3.1 | 0.2% | 2024-03-10 | Fix |
| CVE-2024-28754 | Raspap raspap-webgui vulnerable to denial of service | 7.5CISA ADP v3.1 | 0.9% | 2024-03-09 | Fix |
| CVE-2024-28753 | RaspAP (aka raspap-webgui) through 3.0.9 allows remote attackers to read the /etc/passwd file via a crafted request. | 6.5CISA ADP v3.1 | 0.7% | 2024-03-09 | |
| CVE-2024-28184 | WeasyPrint allows the attachment of arbitrary files and URLs to a PDF | 7.4CNA v3.1 | 0.7% | 2024-03-09 | Fix |
| CVE-2024-28180 | go-jose go JOSE vulnerable to improper handling of highly compressed data (data amplification) | 4.3CNA v3.1 | 2.0% | 2024-03-09 | Fix |
| CVE-2024-28176 | jose vulnerable to resource exhaustion via specifically crafted JWE with compressed plaintext | 4.9CNA v3.1 | 2.1% | 2024-03-09 | Fix |
| CVE-2024-28122 | JWX vulnerable to a denial of service attack using compressed JWE message | 6.8CNA v3.1 | 0.6% | 2024-03-09 | Fix |
| CVE-2024-28089 | Hitron CODA-4582 Device Location page stored cross-site scripting | 5.2CISA ADP v3.1 | 0.7% | 2024-03-09 | |
| CVE-2024-25951 | Integrated Dell Remote Access Controller 8 local RACADM command injection | 8.0CNA v3.1 | 0.8% | 2024-03-09 | Fix |
| CVE-2024-25501 | Winmail arbitrary code execution | 8.8CISA ADP v3.1 | 0.8% | 2024-03-09 | |
| CVE-2024-2351 | CodeAstro Ecommerce Site Search action.php SQL injection | 9.8v3.1 | 0.7% | 2024-03-09 | |
| CVE-2024-2333 | CodeAstro Membership Management System add_members.php SQL injection | 7.2v3.1 | 0.7% | 2024-03-09 | |
| CVE-2024-2332 | SourceCodester Online Mobile Management Store HTTP GET request manage_category.php SQL injection | 7.2v3.1 | 0.7% | 2024-03-09 | |
| CVE-2024-2331 | SourceCodester Tourist Reservation System System.cpp ad_writedata buffer overflow | 9.8v3.1 | 0.6% | 2024-03-09 | |
| CVE-2024-2330 | Netentsec NS-ASG Application Security Gateway index.php SQL injection | 9.8v3.1 | 17.6% | 2024-03-09 | Nuclei |
| CVE-2024-2329 | Netentsec NS-ASG Application Security Gateway SQL injection | 9.8v3.1 | 0.7% | 2024-03-09 | |
| CVE-2024-1870 | Colibri Page Builder WordPress plugin missing authorization | 4.3CNA v3.1 | 0.4% | 2024-03-09 | Fix |
| CVE-2024-1767 | Blocksy WordPress theme authenticated (Contributor+) stored cross-site scripting | 5.4v3.1 | 0.3% | 2024-03-09 | Fix |
| CVE-2024-1320 | EventPrime WordPress plugin stored cross-site scripting | 6.1v3.1 | 0.4% | 2024-03-09 | Fix |
| CVE-2024-1125 | Metagauss EventPrime post deletion function missing authorization | 5.3NVD v3.1 | 0.3% | 2024-03-09 | Fix |
| CVE-2024-1124 | Metagauss EventPrime attendee email function missing authorization | 4.3CNA v3.1 | 0.3% | 2024-03-09 | Fix |
| CVE-2024-1123 | EventPrime WordPress plugin unauthorized access | 6.5CNA v3.1 | 0.4% | 2024-03-09 | Fix |
| CVE-2024-27613 | Numbas Editor improper input validation | 7.3v3.1 | 0.5% | 2024-03-08 | Fix |
| CVE-2024-27612 | Numbas Editor improper input validation | 6.2CISA ADP v3.1 | 10.7% | 2024-03-08 | Exploit code |
| CVE-2024-26313 | Archerirm Archer cross-site scripting | 5.4NVD v3.1 | 0.5% | 2024-03-08 | Fix |
| CVE-2024-26309 | Archerirm Archer information disclosure | 7.5v3.1 | 0.5% | 2024-03-08 | |
| CVE-2024-25849 | Prestatoolkit Make An Offer/offer Your Price SQL injection | 9.8CISA ADP v3.1 | 0.6% | 2024-03-08 | Fix |
| CVE-2024-25848 | Team-ever Seo SQL injection | 5.9CISA ADP v3.1 | 0.4% | 2024-03-08 | |
| CVE-2024-25845 | Cleanpresta Cd Custom Fields 4 Orders SQL injection | 9.8CISA ADP v3.1 | 0.6% | 2024-03-08 | Fix |
| CVE-2024-25729 | Arris SBG6580 default Wi-Fi password generation vulnerability | 8.8CISA ADP v3.1 | 0.5% | 2024-03-08 | |
| CVE-2024-25327 | Justice Systems FullCourt Enterprise v.8.2 cross-site scripting | 6.1CISA ADP v3.1 | 0.6% | 2024-03-08 | |
| CVE-2024-23297 | Apple iOS, iPadOS, tvOS and watchOS information disclosure | 5.5v3.1 | 0.3% | 2024-03-08 | Fix |
| CVE-2024-23295 | Apple visionOS incorrect default permissions | 5.5v3.1 | 0.3% | 2024-03-08 | Fix |
| CVE-2024-23294 | Apple macOS code execution | 7.8v3.1 | 0.3% | 2024-03-08 | Fix |
| CVE-2024-23293 | Apple macOS information disclosure | 4.6v3.1 | 0.4% | 2024-03-08 | Fix |
| CVE-2024-23292 | Apple macOS information disclosure | 3.3v3.1 | 0.3% | 2024-03-08 | Fix |
| CVE-2024-23291 | Apple iOS, iPadOS, macOS, tvOS and watchOS accessibility notifications logging vulnerability | 3.3NVD v3.1 | 0.6% | 2024-03-08 | Fix |
| CVE-2024-23290 | Apple macOS insecure storage of sensitive information | 5.5v3.1 | 0.5% | 2024-03-08 | Fix |
| CVE-2024-23289 | Apple iOS, iPadOS, macOS and watchOS Siri lock screen vulnerability | 3.3NVD v3.1 | 0.3% | 2024-03-08 | Fix |
| CVE-2024-23288 | Apple macOS incorrect privilege assignment | 7.8v3.1 | 0.3% | 2024-03-08 | Fix |
| CVE-2024-23287 | Apple macOS insecure temporary file | 5.5v3.1 | 0.7% | 2024-03-08 | Fix |
| CVE-2024-23286 | Apple macOS buffer overflow | 7.8NVD v3.1 | 1.2% | 2024-03-08 | Fix |
| CVE-2024-23285 | Apple macOS link following | 5.5NVD v3.1 | 0.2% | 2024-03-08 | Fix |
| CVE-2024-23284 | Apple Safari logic flaw | 6.5v3.1 | 1.5% | 2024-03-08 | Fix |
| CVE-2024-23283 | Apple iOS, iPadOS and macOS log entries information disclosure | 5.5v3.1 | 0.3% | 2024-03-08 | Fix |
| CVE-2024-23281 | Apple macOS information disclosure | 5.5v3.1 | 0.2% | 2024-03-08 | Fix |
| CVE-2024-23280 | Apple Safari injection | 6.5NVD v3.1 | 1.3% | 2024-03-08 | Fix |
| CVE-2024-23279 | Apple macOS log entries information disclosure | 5.5v3.1 | 0.2% | 2024-03-08 | Fix |
| CVE-2024-23278 | Apple macOS code injection | 8.6v3.1 | 0.5% | 2024-03-08 | Fix |
| CVE-2024-23277 | Apple macOS spoofing | 5.9v3.1 | 0.7% | 2024-03-08 | Fix |
| CVE-2024-23276 | Apple macOS improper privilege management | 7.8v3.1 | 0.3% | 2024-03-08 | Fix |
| CVE-2024-23275 | Apple macOS race condition | 4.7v3.1 | 0.2% | 2024-03-08 | Fix |
| CVE-2024-23274 | Apple macOS special element injection | 7.8v3.1 | 0.4% | 2024-03-08 | Fix |
| CVE-2024-23273 | Apple Safari improper certificate validation | 4.3v3.1 | 0.7% | 2024-03-08 | Fix |
| CVE-2024-23272 | Apple macOS logic flaw | 5.5v3.1 | 0.2% | 2024-03-08 | Fix |
| CVE-2024-23270 | Apple macOS out-of-bounds write | 7.8v3.1 | 0.3% | 2024-03-08 | Fix |
| CVE-2024-23269 | Apple macOS code signing vulnerability | 5.5v3.1 | 0.2% | 2024-03-08 | Fix |
| CVE-2024-23268 | Apple macOS special element injection | 7.8v3.1 | 0.4% | 2024-03-08 | Fix |
| CVE-2024-23267 | Apple macOS improper access control | 5.5v3.1 | 0.2% | 2024-03-08 | Fix |
| CVE-2024-23266 | Apple macOS improper access control | 5.5v3.1 | 0.2% | 2024-03-08 | Fix |
| CVE-2024-23265 | Apple macOS out-of-bounds write | 7.8NVD v3.1 | 0.7% | 2024-03-08 | Fix |
| CVE-2024-23264 | Apple macOS out-of-bounds read | 5.5v3.1 | 0.8% | 2024-03-08 | Fix |
| CVE-2024-23263 | Apple Safari logic flaw | 6.5NVD v3.1 | 1.5% | 2024-03-08 | Fix |
| CVE-2024-23262 | Apple visionOS incorrect authorization | 3.3NVD v3.1 | 0.5% | 2024-03-08 | Fix |
| CVE-2024-23260 | Apple macOS entitlements information disclosure | 5.5v3.1 | 0.2% | 2024-03-08 | Fix |
| CVE-2024-23259 | Apple macOS denial of service | 6.5v3.1 | 0.9% | 2024-03-08 | Fix |
| CVE-2024-23258 | Apple macOS out-of-bounds read | 7.8v3.1 | 0.2% | 2024-03-08 | Fix |
| CVE-2024-23257 | Apple macOS memory corruption | 3.3v3.1 | 0.4% | 2024-03-08 | Fix |
| CVE-2024-23255 | Apple macOS improper authentication | 2.4NVD v3.1 | 0.7% | 2024-03-08 | Fix |
| CVE-2024-23254 | Apple Safari audio data handling vulnerability | 6.5v3.1 | 1.3% | 2024-03-08 | Fix |
| CVE-2024-23253 | Apple macOS improper privilege management | 3.3NVD v3.1 | 0.4% | 2024-03-08 | Fix |
| CVE-2024-23250 | Apple macOS incorrect authorization | 5.5v3.1 | 0.2% | 2024-03-08 | Fix |
| CVE-2024-23249 | Apple macOS improper resource release | 7.1v3.1 | 0.2% | 2024-03-08 | Fix |
| CVE-2024-23248 | Apple macOS improper resource release | 7.1v3.1 | 0.5% | 2024-03-08 | Fix |
| CVE-2024-23247 | Apple macOS command injection | 7.8v3.1 | 0.4% | 2024-03-08 | Fix |
| CVE-2024-23246 | Apple macOS sandbox escape | 8.6v3.1 | 0.7% | 2024-03-08 | Fix |
| CVE-2024-23245 | Apple macOS Automator legacy actions vulnerability | 3.3NVD v3.1 | 0.4% | 2024-03-08 | Fix |
| CVE-2024-23244 | Apple macOS logic flaw | 7.8v3.1 | 0.2% | 2024-03-08 | Fix |
| CVE-2024-23242 | Apple macOS sensitive information in log files | 3.3v3.1 | 0.2% | 2024-03-08 | Fix |
| CVE-2024-23241 | Apple macOS insecure storage of sensitive information | 5.5v3.1 | 0.4% | 2024-03-08 | Fix |
| CVE-2024-23240 | Apple iOS and iPadOS Shake to Undo missing authentication | 2.4v3.1 | 0.3% | 2024-03-08 | Fix |
| CVE-2024-23239 | Apple macOS race condition | 4.7v3.1 | 0.4% | 2024-03-08 | Fix |
| CVE-2024-23238 | Apple macOS improper access control | 3.3NVD v3.1 | 0.2% | 2024-03-08 | Fix |
| CVE-2024-23235 | Apple macOS race condition | 4.7NVD v3.1 | 0.5% | 2024-03-08 | Fix |
| CVE-2024-23234 | Apple macOS out-of-bounds write | 6.7NVD v3.1 | 0.3% | 2024-03-08 | Fix |
| CVE-2024-23233 | Apple macOS insecure inherited permissions | 7.8v3.1 | 0.2% | 2024-03-08 | Fix |
| CVE-2024-23232 | Apple macOS insecure storage of sensitive information | 3.3v3.1 | 0.2% | 2024-03-08 | Fix |
| CVE-2024-23231 | Apple iOS, iPadOS, macOS and watchOS log entry redaction information disclosure | 5.5v3.1 | 0.3% | 2024-03-08 | Fix |
| CVE-2024-23230 | Apple macOS missing authorization | 5.5v3.1 | 0.2% | 2024-03-08 | Fix |
| CVE-2024-23227 | Apple macOS information disclosure | 3.3NVD v3.1 | 0.2% | 2024-03-08 | Fix |
| CVE-2024-23226 | Apple macOS out-of-bounds write | 8.8v3.1 | 1.2% | 2024-03-08 | Fix |
| CVE-2024-23220 | Apple iOS, iPadOS and visionOS cache handling vulnerability | 5.5v3.1 | 0.2% | 2024-03-08 | Fix |
| CVE-2024-23216 | Apple macOS path traversal | 7.1v3.1 | 0.3% | 2024-03-08 | Fix |
| CVE-2024-23205 | Apple macOS insecure storage of sensitive information | 5.5v3.1 | 0.2% | 2024-03-08 | Fix |
| CVE-2024-23201 | Apple macOS incorrect default permissions | 5.5v3.1 | 0.2% | 2024-03-08 | Fix |
| CVE-2024-21901 | QNAP myQNAPcloud SQL injection | 4.7CNA v3.1 | 18.7% | 2024-03-08 | Fix |
| CVE-2024-21900 | QNAP Systems QTS injection | 4.3CNA v3.1 | 9.4% | 2024-03-08 | Fix |
| CVE-2024-21899 | QNAP QTS, QuTS hero and QuTScloud improper authentication | 9.8CNA v3.1 | 24.4% | 2024-03-08 | Fix |
| CVE-2024-2339 | Improper input validation in PostgreSQL Anonymizer allows table owner to gain superuser privileges | 8.0CNA v3.1 | 0.6% | 2024-03-08 | Fix |
| CVE-2024-2338 | SQL injection in PostgreSQL Anonymizer allows table owner to gain superuser privileges | 8.0CNA v3.1 | 0.5% | 2024-03-08 | Fix |
| CVE-2024-2319 | Cross-site scripting vulnerability in Django MarkdownX | 6.1v3.1 | 0.4% | 2024-03-08 | |
| CVE-2024-2318 | ZKTeco ZKBio Media Service Port 9999 download path traversal | 7.5v3.1 | 0.9% | 2024-03-08 | Fix |
| CVE-2024-2317 | Bdtask Hospital AutoManager Prescription page improper authorization | 9.1v3.1 | 0.8% | 2024-03-08 | |
| CVE-2024-2316 | Bdtask Hospital AutoManager Update Bill page cross-site request forgery | 4.3v3.1 | 0.4% | 2024-03-08 | |
| CVE-2024-2298 | affiliate-toolkit WordPress Affiliate plugin missing authorization via atkp_import_product | 4.3CNA v3.1 | 0.3% | 2024-03-08 | Fix |
| CVE-2024-2285 | boyiddha Automated-Mess-Management-System member_edit.php cross-site scripting | 6.1v3.1 | 0.5% | 2024-03-08 | |
| CVE-2024-2284 | boyiddha Automated-Mess-Management-System Chat Book chat.php cross-site scripting | 6.1v3.1 | 0.5% | 2024-03-08 | |
| CVE-2024-2283 | boyiddha Automated-Mess-Management-System view.php SQL injection | 9.8v3.1 | 0.6% | 2024-03-08 | |
| CVE-2024-2282 | boyiddha Automated-Mess-Management-System Login page index.php SQL injection | 9.8v3.1 | 0.7% | 2024-03-08 | |
| CVE-2024-2281 | boyiddha Automated-Mess-Management-System setting index.php access control | 9.8v3.1 | 0.6% | 2024-03-08 | |
| CVE-2024-2277 | Bdtask G-Prescription Gynaecology and OBS Consultation Software cross-site request forgery | 4.3v3.1 | 0.3% | 2024-03-08 | |
| CVE-2024-2276 | Bdtask G-Prescription Gynaecology and OBS Consultation Software Edit Venue page cross-site scripting | 6.1v3.1 | 0.5% | 2024-03-08 | |
| CVE-2024-2275 | Bdtask G-Prescription Gynaecology and OBS Consultation Software cross-site scripting | 6.1v3.1 | 0.5% | 2024-03-08 | |
| CVE-2024-2274 | Bdtask G-Prescription Gynaecology and OBS Consultation Software cross-site scripting | 6.1v3.1 | 0.5% | 2024-03-08 | |
| CVE-2024-2272 | keerti1924 Online-Book-Store-Website HTTP POST request home.php SQL injection | 9.8v3.1 | 0.6% | 2024-03-08 | |
| CVE-2024-2271 | keerti1924 Online-Book-Store-Website HTTP POST request shop.php SQL injection | 9.8v3.1 | 0.6% | 2024-03-08 | |
| CVE-2024-1987 | WP-Members Membership WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.4% | 2024-03-08 | Fix |
| CVE-2024-1851 | affiliate-toolkit WordPress Affiliate plugin missing authorization via atkp_create_list | 6.5v3.1 | 0.3% | 2024-03-08 | Fix |
| CVE-2024-0258 | Apple macOS arbitrary code execution | 8.6NVD v3.1 | 0.3% | 2024-03-08 | Fix |
| CVE-2024-28230 | JetBrains YouTrack missing authorization | 6.5CNA v3.1 | 0.5% | 2024-03-07 | Fix |
| CVE-2024-28229 | JetBrains YouTrack incorrect authorization | 6.5CNA v3.1 | 0.5% | 2024-03-07 | Fix |
| CVE-2024-28228 | JetBrains YouTrack authentication bypass by spoofing | 5.3CNA v3.1 | 0.5% | 2024-03-07 | Fix |
| CVE-2024-28222 | Veritas Netbackup Appliance path traversal | 9.8v3.1 | 1.0% | 2024-03-07 | Fix |
| CVE-2024-28216 | NAVER nGrinder missing authorization | 5.4CISA ADP v3.1 | 0.3% | 2024-03-07 | Fix |
| CVE-2024-28215 | NAVER nGrinder missing authorization | 7.5CISA ADP v3.1 | 0.5% | 2024-03-07 | Fix |
| CVE-2024-28214 | NAVER nGrinder resource amplification | 2.7CISA ADP v3.1 | 0.6% | 2024-03-07 | Fix |
| CVE-2024-28213 | nGrinder vulnerable to unsafe Java objects deserialization | 9.8CISA ADP v3.1 | 1.2% | 2024-03-07 | Fix |
| CVE-2024-28212 | NAVER nGrinder deserialization of untrusted data | 9.8CISA ADP v3.1 | 1.0% | 2024-03-07 | Fix |
| CVE-2024-28211 | NAVER nGrinder deserialization of untrusted data | 9.8CISA ADP v3.1 | 0.8% | 2024-03-07 | Fix |
| CVE-2024-28115 | Privilege escalation in FreeRTOS Kernel ARMv7-M MPU ports and ARMv8-M ports with MPU support enabled | 8.8CNA v3.1 | 0.2% | 2024-03-07 | Fix |
| CVE-2024-28097 | Stored cross-site scripting in Calendar functionality in Schoolbox | 5.4NVD v3.1 | 0.4% | 2024-03-07 | Fix |
| CVE-2024-28096 | Stored cross-site scripting in class functionality in Schoolbox | 5.4NVD v3.1 | 0.4% | 2024-03-07 | Fix |
| CVE-2024-28095 | Stored cross-site scripting in News functionality in Schoolbox | 5.4NVD v3.1 | 0.3% | 2024-03-07 | Fix |
| CVE-2024-28094 | Blind SQL injection in Chat functionality in Schoolbox | 8.8v3.1 | 0.6% | 2024-03-07 | Fix |
| CVE-2024-27733 | Byzro Network Smart s42 Management Platform userattestation.php vulnerability | 7.7CISA ADP v3.1 | 0.3% | 2024-03-07 | |
| CVE-2024-27707 | hcengineering Huly Platform v.0.6.202 server-side request forgery | 4.3CISA ADP v3.1 | 0.3% | 2024-03-07 | |
| CVE-2024-26566 | Iscute Cute Http File Server authentication bypass | 8.2CISA ADP v3.1 | 0.5% | 2024-03-07 | |
| CVE-2024-26492 | Online Diagnostic Lab Management System staff account login vulnerability | 6.3CISA ADP v3.1 | 0.6% | 2024-03-07 | Exploit code |
| CVE-2024-26167 | Microsoft Edge for Android spoofing | 4.3CNA v3.1 | 0.9% | 2024-03-07 | Fix |
| CVE-2024-24389 | XunRuiCMS A cross-site scripting | 6.1v3.1 | 0.3% | 2024-03-07 | |
| CVE-2024-24375 | JFinalCMS SQL injection | 7.5CISA ADP v3.1 | 0.5% | 2024-03-07 | |
| CVE-2024-24035 | Setorinformatica S.i.l. cross-site scripting | 6.1CISA ADP v3.1 | 0.4% | 2024-03-07 | Exploit code |
| CVE-2024-22857 | zlog zlog_rule_new function heap-based buffer overflow | 9.8CISA ADP v3.1 | 1.7% | 2024-03-07 | |
| CVE-2024-22752 | EaseUS MobiMover insecure permissions | 8.1CISA ADP v3.1 | 0.6% | 2024-03-07 | Exploit code |
| CVE-2024-22256 | VMware Cloud Director information disclosure | 4.3CNA v3.1 | 0.4% | 2024-03-07 | Fix |
| CVE-2024-2270 | keerti1924 Online-Book-Store-Website signup.php cross-site scripting | 6.1v3.1 | 0.6% | 2024-03-07 | |
| CVE-2024-2269 | keerti1924 Online-Book-Store-Website search.php SQL injection | 9.8v3.1 | 0.6% | 2024-03-07 | |
| CVE-2024-2268 | keerti1924 Online-Book-Store-Website unrestricted upload | 9.8v3.1 | 0.6% | 2024-03-07 | |
| CVE-2024-2267 | keerti1924 Online-Book-Store-Website shop.php logic error | 7.5v3.1 | 0.5% | 2024-03-07 | |
| CVE-2024-2266 | keerti1924 Secret-Coder-PHP-Project Login page login.php cross-site scripting | 6.1v3.1 | 0.5% | 2024-03-07 | |
| CVE-2024-2265 | keerti1924 PHP-MYSQL-User-Login-System login.sql inclusion of sensitive information in source code | 7.5v3.1 | 0.8% | 2024-03-07 | |
| CVE-2024-2264 | keerti1924 PHP-MYSQL-User-Login-System login.php SQL injection | 9.8v3.1 | 0.6% | 2024-03-07 | |
| CVE-2024-2245 | Cross-site scripting vulnerability in moziloCMS | 6.1v3.1 | 0.3% | 2024-03-07 | |
| CVE-2024-2241 | Devolutions Workspace user interface improper access control | 6.3CISA ADP v3.1 | 0.4% | 2024-03-07 | Fix |
| CVE-2024-2136 | WPKoi Templates for Elementor WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.3% | 2024-03-07 | Fix |
| CVE-2024-2128 | EmbedPress WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.4% | 2024-03-07 | Fix |
| CVE-2024-2127 | Page Builder: Pagelayer Drag and Drop website builder WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.3% | 2024-03-07 | Fix |
| CVE-2024-2044 | Unsafe Deserialisation and remote code execution by an Authenticated user in pgAdmin 4 | 9.9CNA v3.1 | 79.5% | 2024-03-07 | MetasploitExploit codeFix |
| CVE-2024-1986 | Elite Booster for WooCommerce WordPress plugin authenticated (Subscriber+) arbitrary file upload | 8.8CNA v3.1 | 1.3% | 2024-03-07 | Fix |
| CVE-2024-1931 | NLnet Labs Unbound denial of service when trimming EDE text on positive replies | 7.5CNA v3.1 | 2.5% | 2024-03-07 | Fix |
| CVE-2024-1802 | EmbedPress WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.3% | 2024-03-07 | Fix |
| CVE-2024-1773 | PDF Invoices and Packing Slips For WooCommerce WordPress plugin PHP object injection | 8.8CNA v3.1 | 1.0% | 2024-03-07 | Fix |
| CVE-2024-1761 | WP Chat App WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.4% | 2024-03-07 | Fix |
| CVE-2024-1725 | Red Hat OpenShift Container Platform kubevirt-csi: Persistentvolume allows access to hcp's root node | 6.5CNA v3.1 | 0.6% | 2024-03-07 | Fix |
| CVE-2024-1720 | User Registration WordPress plugin stored cross-site scripting | 6.1v3.1 | 0.5% | 2024-03-07 | Fix |
| CVE-2024-1534 | Booster for WooCommerce WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.3% | 2024-03-07 | Fix |
| CVE-2024-1506 | Prime Slider Addons For Elementor WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.3% | 2024-03-07 | Fix |
| CVE-2024-1500 | Royal Elementor Addons and Templates WordPress plugin stored cross-site scripting | 5.4CNA v3.1 | 0.4% | 2024-03-07 | Fix |
| CVE-2024-1460 | MSI Afterburner Kernel memory leak | 4.4v3.1 | 0.2% | 2024-03-07 | |
| CVE-2024-1443 | MSI Afterburner denial of service | 4.4CNA v3.1 | 0.2% | 2024-03-07 | |
| CVE-2024-1442 | Grafana user with permissions to create a data source can CRUD all data sources | 6.0CNA v3.1 | 0.8% | 2024-03-07 | Fix |
| CVE-2024-1419 | The Plus Addons for Elementor WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.3% | 2024-03-07 | Fix |
| CVE-2024-1382 | Restaurant Reservations WordPress plugin directory traversal to authenticated local file inclusion | 8.8CNA v3.1 | 0.9% | 2024-03-07 | Fix |
| CVE-2024-1377 | Happy Addons for Elementor WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.4% | 2024-03-07 | Fix |
| CVE-2024-1366 | Happy Addons for Elementor WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.4% | 2024-03-07 | Fix |
| CVE-2024-1351 | MongoDB Server may allow successful untrusted connection | 8.8CNA v3.1 | 0.5% | 2024-03-07 | Fix |
| CVE-2024-1299 | GitLab custom role access tokens privilege escalation | 6.5CNA v3.1 | 0.7% | 2024-03-07 | Fix |
| CVE-2024-1170 | Post Form WordPress plugin file deletion | 8.2v3.1 | 0.7% | 2024-03-07 | Fix |
| CVE-2024-1169 | themekraft Post Form media upload handler missing authorization | 7.5v3.1 | 0.6% | 2024-03-07 | Fix |
| CVE-2024-0917 | PaddlePaddle vulnerable to remote code execution | 9.8v3.1 | 1.7% | 2024-03-07 | |
| CVE-2024-0818 | PaddlePaddle path traversal | 9.1v3.1 | 1.1% | 2024-03-07 | |
| CVE-2024-0817 | PaddlePaddle command injection | 7.8NVD v3.1 | 1.2% | 2024-03-07 | Fix |
| CVE-2024-0815 | PaddlePaddle command injection in paddle.utils.download._wget_download | 8.8NVD v3.1 | 1.1% | 2024-03-07 | Fix |
| CVE-2024-0203 | Digits WordPress plugin cross-site request forgery | 8.8CNA v3.1 | 0.3% | 2024-03-07 | Fix |
| CVE-2024-0199 | Incorrect authorization in GitLab | 7.7CNA v3.1 | 0.7% | 2024-03-07 | Fix |
| CVE-2024-28174 | JetBrains TeamCity incorrect authorization | 5.8CNA v3.1 | 0.3% | 2024-03-06 | Fix |
| CVE-2024-28173 | JetBrains TeamCity information disclosure | 4.3CNA v3.1 | 0.5% | 2024-03-06 | Fix |
| CVE-2024-28162 | Jenkins Delphix Plugin has improper SSL/TLS certificate validation | 4.2CISA ADP v3.1 | 0.3% | 2024-03-06 | Fix |
| CVE-2024-28161 | Jenkins Delphix Plugin has SSL/TLS certificate validation disabled by default | 5.3CISA ADP v3.1 | 0.4% | 2024-03-06 | Fix |
| CVE-2024-28160 | Jenkins iceScrum Plugin vulnerable to stored cross-site scripting | 8.8CISA ADP v3.1 | 1.1% | 2024-03-06 | Fix |
| CVE-2024-28159 | Jenkins Subversion Partial Release Manager Plugin missing permission check | 4.3CISA ADP v3.1 | 0.5% | 2024-03-06 | Fix |
| CVE-2024-28158 | Jenkins Subversion Partial Release Manager Plugin vulnerable to cross-site request forgery | 4.3CISA ADP v3.1 | 0.3% | 2024-03-06 | Fix |
| CVE-2024-28157 | Jenkins GitBucket Plugin vulnerable to stored cross-site scripting | 8.0CISA ADP v3.1 | 1.3% | 2024-03-06 | Exploit codeFix |
| CVE-2024-28156 | Jenkins Build Monitor View Plugin vulnerable to stored cross-site scripting | 5.4v3.1 | 80.2% | 2024-03-06 | Fix |
| CVE-2024-28155 | Jenkins AppSpider Plugin missing permission checks | 4.3v3.1 | 0.5% | 2024-03-06 | Fix |
| CVE-2024-28154 | Jenkins MQ Notifier Plugin exposes sensitive information in build logs | 6.5v3.1 | 0.7% | 2024-03-06 | Fix |
| CVE-2024-28153 | Jenkins OWASP Dependency-Check Plugin has stored XSS | 5.4NVD v3.1 | 0.7% | 2024-03-06 | Fix |
| CVE-2024-28152 | Jenkins Bitbucket Branch Source Plugin has incorrect trust policy behavior for pull requests | 6.3CISA ADP v3.1 | 0.6% | 2024-03-06 | Fix |
| CVE-2024-28151 | Jenkins HTML Publisher Plugin path traversal | 4.3CISA ADP v3.1 | 0.9% | 2024-03-06 | Fix |
| CVE-2024-28150 | Jenkins HTML Publisher Plugin stored XSS | 4.7CISA ADP v3.1 | 0.7% | 2024-03-06 | Fix |
| CVE-2024-28149 | Jenkins HTML Publisher Plugin does not properly sanitize input | 6.5CISA ADP v3.1 | 0.7% | 2024-03-06 | Fix |
| CVE-2024-28111 | thinkst canarytokens CSV injection in exported history CSV files | 6.5CNA v3.1 | 0.6% | 2024-03-06 | Fix |
| CVE-2024-28110 | Go SDK for CloudEvents's use of WithRoundTripper to create a client leaks credentials | 7.5CNA v3.1 | 0.7% | 2024-03-06 | Fix |
| CVE-2024-27917 | Shopware's session is persistent in Cache for 404 pages | 7.5CNA v3.1 | 0.6% | 2024-03-06 | Fix |
| CVE-2024-27915 | Sulu grants access to pages regardless of role permissions | 6.8CNA v3.1 | 0.5% | 2024-03-06 | Fix |
| CVE-2024-27308 | Mio's tokens for named pipes may be delivered after deregistration | 7.5CNA v3.1 | 0.9% | 2024-03-06 | Fix |
| CVE-2024-27307 | JSONata expression can pollute the object prototype | 9.8CNA v3.1 | 1.4% | 2024-03-06 | Fix |
| CVE-2024-27304 | pgx SQL injection via protocol Message Size Overflow | 9.8CNA v3.1 | 1.1% | 2024-03-06 | Exploit codeFix |
| CVE-2024-27303 | Electron-builder's NSIS installer execute arbitrary code on the target machine (Windows only) | 7.3CNA v3.1 | 0.3% | 2024-03-06 | Fix |
| CVE-2024-27302 | Authorization bypass through user-controlled key in Go-zero | 9.1CNA v3.1 | 0.8% | 2024-03-06 | Fix |
| CVE-2024-27289 | pgx SQL injection via Line Comment Creation | 8.1CNA v3.1 | 0.8% | 2024-03-06 | Fix |
| CVE-2024-27288 | 1Panel open source panel project has an unauthorized vulnerability | 6.3CNA v3.1 | 0.5% | 2024-03-06 | Fix |
| CVE-2024-27287 | ESPHome vulnerable to stored cross-site scripting in edit configuration file API | 6.5CNA v3.1 | 0.7% | 2024-03-06 | Fix |
| CVE-2024-27278 | OpenPNE Plugin "opTimelinePlugin" cross-site scripting | 5.4v3.1 | 0.3% | 2024-03-06 | Fix |
| CVE-2024-26627 | Linux kernel SCSI error handler denial of service | 5.5CISA ADP v3.1 | 0.2% | 2024-03-06 | Fix |
| CVE-2024-26626 | Linux kernel ipmr kernel panic | 7.5CNA v3.1 | 0.6% | 2024-03-06 | Fix |
| CVE-2024-26625 | Linux kernel LLC socket release use-after-free | 7.8CNA v3.1 | 0.3% | 2024-03-06 | Fix |
| CVE-2024-26623 | Linux kernel pds_core adminq null pointer dereference | 7.8CNA v3.1 | 0.2% | 2024-03-06 | Fix |
| CVE-2024-26580 | Apache InLong: Logged-in user could exploit an arbitrary file read | 9.1CISA ADP v3.1 | 1.2% | 2024-03-06 | Fix |
| CVE-2024-25817 | Eza potential heap overflow vulnerability for AArch64 | 7.8v3.1 | 0.3% | 2024-03-06 | Fix |
| CVE-2024-25111 | squid-cache squid SQUID-2024:1 denial of service in HTTP Chunked Decoding | 8.6CNA v3.1 | 65.3% | 2024-03-06 | Fix |
| CVE-2024-25103 | Dynamic Link Library (DLL) Hijacking vulnerability in CDAC AppSamvid Software | 6.3CNA v3.1 | 0.2% | 2024-03-06 | |
| CVE-2024-25102 | Information disclosure vulnerability in CDAC AppSamvid Software | 7.8CNA v3.1 | 0.1% | 2024-03-06 | |
| CVE-2024-24767 | CasaOS improper restriction of excessive authentication attempts | 9.1CNA v3.1 | 1.0% | 2024-03-06 | Fix |
| CVE-2024-24766 | IceWhaleTech CasaOS-UserService CasaOS Username Enumeration | 6.2CNA v3.1 | 0.8% | 2024-03-06 | Fix |
| CVE-2024-24765 | CasaOS-UserService allows unauthorized access to any file | 7.5CNA v3.1 | 1.0% | 2024-03-06 | Fix |
| CVE-2024-24761 | Galette public pages accessibility restriction | 7.5CNA v3.1 | 0.6% | 2024-03-06 | Fix |
| CVE-2024-22889 | Plone phone information disclosure | 7.5v3.1 | 0.7% | 2024-03-06 | Exploit code |
| CVE-2024-20346 | Cisco AppDynamics cross-site scripting | 5.4CNA v3.1 | 0.4% | 2024-03-06 | Fix |
| CVE-2024-20345 | Cisco AppDynamics file upload | 6.5CNA v3.1 | 2.2% | 2024-03-06 | Fix |
| CVE-2024-20338 | Cisco Secure Client uncontrolled search path | 7.3CNA v3.1 | 0.9% | 2024-03-06 | Exploit codeFix |
| CVE-2024-20337 | Cisco Secure Client CRLF injection | 8.2CNA v3.1 | 29.9% | 2024-03-06 | Fix |
| CVE-2024-20336 | Cisco Business Wireless Access Point Software stack-based buffer overflow | 6.5CNA v3.1 | 0.8% | 2024-03-06 | Fix |
| CVE-2024-20335 | Cisco Business Wireless Access Point Software OS command injection | 6.5CNA v3.1 | 1.0% | 2024-03-06 | Fix |
| CVE-2024-20301 | Cisco Duo improper authentication | 6.2CNA v3.1 | 0.3% | 2024-03-06 | Fix |
| CVE-2024-20292 | Cisco Duo information disclosure | 4.4CNA v3.1 | 0.1% | 2024-03-06 | Fix |
| CVE-2024-2236 | Red Hat Enterprise Linux 9 libgcrypt: Vulnerable to marvin attack | 5.9CNA v3.1 | 1.1% | 2024-03-06 | Fix |
| CVE-2024-2216 | Jenkins Docker-build-step Plugin missing permission check | 8.8CISA ADP v3.1 | 0.8% | 2024-03-06 | Fix |
| CVE-2024-2215 | Jenkins Docker-build-step Plugin cross-site request forgery | 6.1CISA ADP v3.1 | 0.4% | 2024-03-06 | Fix |
| CVE-2024-2211 | Cross-site scripting vulnerability in Gophish Admin Panel | 6.1v3.1 | 0.3% | 2024-03-06 | |
| CVE-2024-2176 | Google Chrome FedCM use-after-free | 8.8v3.1 | 1.3% | 2024-03-06 | Fix |
| CVE-2024-2174 | Google Chrome V8 inappropriate implementation | 8.8v3.1 | 12.6% | 2024-03-06 | Fix |
| CVE-2024-2173 | Google Chrome V8 out-of-bounds access | 8.8v3.1 | 13.6% | 2024-03-06 | Fix |
| CVE-2024-2005 | Blue Planet Inventory (BPI) SAML implementation allows privilege escalation | 9.0CNA v3.1 | 0.5% | 2024-03-06 | |
| CVE-2024-1989 | Social Sharing Plugin Sassy Social Share WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.5% | 2024-03-06 | Fix |
| CVE-2024-1771 | Total WordPress theme missing authorization to authenticated (Subscriber+) Sections update | 4.3v3.1 | 0.4% | 2024-03-06 | Fix |
| CVE-2024-1760 | Appointment Booking Calendar WordPress plugin cross-site request forgery | 4.7v3.1 | 0.3% | 2024-03-06 | Fix |
| CVE-2024-1224 | Information disclosure vulnerability in CDAC USB Pratirodh | 7.1CNA v3.1 | 0.1% | 2024-03-06 | |
| CVE-2024-1220 | NPort W2150A/W2250A Series Web Server stack-based buffer overflow | 8.2CNA v3.1 | 0.7% | 2024-03-06 | Fix |
| CVE-2024-27931 | denoland deno insufficient permission checking in `Deno.makeTemp*` APIs | 5.8CNA v3.1 | 0.5% | 2024-03-05 | Fix |
| CVE-2024-27929 | SixLabors ImageSharp use-after-free in SixLabors.ImageSharp | 7.1CNA v3.1 | 0.4% | 2024-03-05 | Fix |
| CVE-2024-27765 | JEEWMS path traversal | 7.5v3.1 | 0.9% | 2024-03-05 | |
| CVE-2024-27764 | JEEWMS path traversal | 9.8v3.1 | 1.0% | 2024-03-05 | |
| CVE-2024-27718 | Baizhuo Network Smart s200 Management Platform importexport.php SQL injection | 7.8CISA ADP v3.1 | 1.1% | 2024-03-05 | Nuclei |
| CVE-2024-27627 | SuperCali version reflected cross-site scripting | 6.1CISA ADP v3.1 | 0.4% | 2024-03-05 | |
| CVE-2024-27625 | CMS Made Simple cross-site scripting | 4.8CISA ADP v3.1 | 0.4% | 2024-03-05 | |
| CVE-2024-27623 | CMS Made Simple server-side template injection | 5.9CISA ADP v3.1 | 0.4% | 2024-03-05 | |
| CVE-2024-27622 | CMS Made Simple special element injection | 7.2CISA ADP v3.1 | 2.0% | 2024-03-05 | |
| CVE-2024-27565 | dirk1983 Chatgpt-wechat-personal weixin.php server-side request forgery | 9.8v3.1 | 0.7% | 2024-03-05 | |
| CVE-2024-27564 | dirk1983 mm1.ltd source code server-side request forgery | 6.5v3.1 | 40.6% | 2024-03-05 | NucleiExploit code |
| CVE-2024-27563 | WonderCMS getFileFromRepo function server-side request forgery | 5.3v3.1 | 0.4% | 2024-03-05 | |
| CVE-2024-27561 | WonderCMS installUpdateThemePluginAction function server-side request forgery | 8.1NVD v3.1 | 0.6% | 2024-03-05 | |
| CVE-2024-26339 | swftools swfc utility vulnerability | 9.1CISA ADP v3.1 | 0.8% | 2024-03-05 | |
| CVE-2024-26337 | swftools swfc s_font function vulnerability | 4.3CISA ADP v3.1 | 0.6% | 2024-03-05 | |
| CVE-2024-26335 | swftools memory corruption | 5.5CISA ADP v3.1 | 0.4% | 2024-03-05 | |
| CVE-2024-26334 | swftools out-of-bounds read | 6.2CISA ADP v3.1 | 0.3% | 2024-03-05 | |
| CVE-2024-26333 | swftools use-after-free | 5.5CISA ADP v3.1 | 0.3% | 2024-03-05 | |
| CVE-2024-25858 | Foxit PDF Editor code execution | 8.4CISA ADP v3.1 | 0.2% | 2024-03-05 | Fix |
| CVE-2024-25731 | Elinksmart Esmartcam hard-coded credentials | 7.5v3.1 | 0.5% | 2024-03-05 | Exploit code |
| CVE-2024-25616 | ArubaOS IKE_AUTH negotiation information disclosure | 3.7CNA v3.1 | 0.3% | 2024-03-05 | |
| CVE-2024-25615 | HPE ArubaOS Wi-Fi Controllers and Campus/Remote Access Points denial of service | 5.3CNA v3.1 | 0.5% | 2024-03-05 | |
| CVE-2024-25614 | HPE ArubaOS Wi-Fi Controllers and Campus/Remote Access Points CLI used by arbitrary file deletion | 5.5CNA v3.1 | 0.5% | 2024-03-05 | |
| CVE-2024-25613 | HPE ArubaOS Wi-Fi Controllers and Campus/Remote Access Points Authenticated command injection | 7.2CNA v3.1 | 1.2% | 2024-03-05 | |
| CVE-2024-25612 | HPE ArubaOS Wi-Fi Controllers and Campus/Remote Access Points Authenticated command injection | 7.2CNA v3.1 | 1.2% | 2024-03-05 | |
| CVE-2024-25611 | HPE ArubaOS Wi-Fi Controllers and Campus/Remote Access Points Authenticated command injection | 7.2CNA v3.1 | 1.2% | 2024-03-05 | |
| CVE-2024-25269 | struktur libheif memory leak | 7.5CISA ADP v3.1 | 0.7% | 2024-03-05 | Fix |
| CVE-2024-25164 | Idurarapp Idurar iA path traversal | 7.5CISA ADP v3.1 | 0.9% | 2024-03-05 | |
| CVE-2024-24786 | Infinite loop in JSON unmarshaling in google.golang.org/protobuf | 7.5CISA ADP v3.1 | 1.3% | 2024-03-05 | Fix |
| CVE-2024-24785 | Errors returned from JSON marshaling may break template escaping in html/template | 5.4CISA ADP v3.1 | 0.8% | 2024-03-05 | Fix |
| CVE-2024-24784 | Comments in display names are incorrectly handled in net/mail | 7.5CISA ADP v3.1 | 1.1% | 2024-03-05 | Fix |
| CVE-2024-24783 | Verify panics on certificates with an unknown public key algorithm in crypto/x509 | 5.9CISA ADP v3.1 | 0.7% | 2024-03-05 | Fix |
| CVE-2024-24278 | Teamwire code injection | 7.5CISA ADP v3.1 | 0.7% | 2024-03-05 | |
| CVE-2024-24276 | Teamwire cross-site scripting | 9.6v3.1 | 0.9% | 2024-03-05 | |
| CVE-2024-24275 | Teamwire cross-site scripting | 9.6v3.1 | 0.9% | 2024-03-05 | |
| CVE-2024-24098 | Fabian Scholars Tracking System SQL injection | 7.8NVD v3.1 | 0.4% | 2024-03-05 | |
| CVE-2024-23296 | Apple Multiple Products memory corruption | 7.8NVD v3.1 | 1.4% | 2024-03-05 | KEVKCVFix |
| CVE-2024-23256 | Apple iOS and iPadOS logic flaw | 3.3v3.1 | 0.3% | 2024-03-05 | Fix |
| CVE-2024-23243 | Apple iOS and iPadOS information disclosure | 3.3NVD v3.1 | 0.6% | 2024-03-05 | Fix |
| CVE-2024-23225 | Apple Multiple Products memory corruption | 7.8v3.1 | 1.5% | 2024-03-05 | KEVKCVFix |
| CVE-2024-22383 | Gallagher Controller 7000 missing resource release | 6.2CNA v3.1 | 0.2% | 2024-03-05 | Fix |
| CVE-2024-22255 | VMware ESXi information disclosure | 7.1CNA v3.1 | 2.3% | 2024-03-05 | Fix |
| CVE-2024-22254 | VMware ESXi out-of-bounds write | 7.9CNA v3.1 | 0.5% | 2024-03-05 | Fix |
| CVE-2024-22253 | VMware ESXi use-after-free | 9.3CNA v3.1 | 0.6% | 2024-03-05 | Fix |
| CVE-2024-22252 | VMware ESXi use-after-free | 9.3CNA v3.1 | 3.5% | 2024-03-05 | Fix |
| CVE-2024-22188 | TYPO3 Install tool vulnerable to code execution | 7.2CISA ADP v3.1 | 2.0% | 2024-03-05 | Fix |
| CVE-2024-21838 | Gallagher Command Centre Server output improper neutralization | 6.8CNA v3.1 | 0.3% | 2024-03-05 | Fix |
| CVE-2024-21815 | Gallagher Command Centre Server insufficiently protected credentials | 9.1CNA v3.1 | 0.3% | 2024-03-05 | Fix |
| CVE-2024-20841 | Samsung Mobile Samnsung Account improper handling of insufficient privileges | 5.1CNA v3.1 | 0.2% | 2024-03-05 | Fix |
| CVE-2024-20840 | Samsung Mobile Samsung Voice Recorder improper access control | 5.7CNA v3.1 | 0.2% | 2024-03-05 | Fix |
| CVE-2024-20839 | Samsung Mobile Samsung Voice Recorder improper access control | 4.6CNA v3.1 | 0.3% | 2024-03-05 | Fix |
| CVE-2024-20838 | Samsung Mobile Samsung Internet improper input validation | 6.8CNA v3.1 | 0.2% | 2024-03-05 | Fix |
| CVE-2024-20837 | Samsung Internet Trusted Web Activities vulnerability | 5.3CNA v3.1 | 0.1% | 2024-03-05 | Fix |
| CVE-2024-20836 | Samsung Mobile Devices ssmis_get_frm in libsubextractor.so out-of-bounds read | 3.3CNA v3.1 | 0.2% | 2024-03-05 | Fix |
| CVE-2024-20835 | Samsung Mobile Devices CustomFrequencyManagerService improper access control | 4.0CNA v3.1 | 0.1% | 2024-03-05 | Fix |
| CVE-2024-20834 | Samsung Mobile Devices WlanTest information disclosure | 3.3CNA v3.1 | 0.1% | 2024-03-05 | Fix |
| CVE-2024-20833 | Samsung Mobile Devices pub_crypto_recv_msg use-after-free | 4.1CNA v3.1 | 0.1% | 2024-03-05 | Fix |
| CVE-2024-20832 | Samsung Mobile Devices Little Kernel in bootloader heap-based buffer overflow | 6.4CNA v3.1 | 0.2% | 2024-03-05 | Fix |
| CVE-2024-20831 | Samsung Mobile Devices Little Kernel in bootloader stack-based buffer overflow | 6.4CNA v3.1 | 0.2% | 2024-03-05 | Fix |
| CVE-2024-20830 | Samsung Mobile Devices incorrect default permissions | 5.3CNA v3.1 | 0.1% | 2024-03-05 | Fix |
| CVE-2024-20829 | Samsung Internet deeplink handling vulnerability | 5.4CNA v3.1 | 0.3% | 2024-03-05 | Fix |
| CVE-2024-2188 | Cross-site scripting vulnerability in TP-Link Archer AX50 | 6.1v3.1 | 1.0% | 2024-03-05 | Fix |
| CVE-2024-2179 | Concrete CMS stored cross-site scripting | 2.2CNA v3.1 | 0.3% | 2024-03-05 | Fix |
| CVE-2024-2056 | Artica Proxy Loopback Services Remotely Accessible Unauthenticated | 9.8CISA ADP v3.1 | 16.7% | 2024-03-05 | |
| CVE-2024-2055 | Artica Proxy Unauthenticated File Manager vulnerability | 9.8CISA ADP v3.1 | 0.9% | 2024-03-05 | |
| CVE-2024-1901 | Devolutions Server denial of service | 4.3CISA ADP v3.1 | 0.3% | 2024-03-05 | Fix |
| CVE-2024-1900 | Devolutions Server insufficient session expiration | 5.5CISA ADP v3.1 | 0.2% | 2024-03-05 | Fix |
| CVE-2024-1898 | Devolutions Server notification feature improper access control | 4.3v3.1 | 0.2% | 2024-03-05 | Fix |
| CVE-2024-1782 | Blue Triad EZAnalytics WordPress plugin reflected cross-site scripting via bt_webid | 6.1CNA v3.1 | 0.4% | 2024-03-05 | |
| CVE-2024-1769 | JM Twitter Cards WordPress plugin information exposure via Meta Description | 5.3CNA v3.1 | 0.6% | 2024-03-05 | Fix |
| CVE-2024-1764 | Devolutions Server Just-in-time improper privilege management | 7.6CISA ADP v3.1 | 0.4% | 2024-03-05 | Fix |
| CVE-2024-1731 | Auto Refresh Single Page WordPress plugin authenticated (Contributor+) PHP object injection | 8.8CNA v3.1 | 0.9% | 2024-03-05 | |
| CVE-2024-1478 | Maintenance Mode WordPress plugin information exposure | 5.3CNA v3.1 | 0.5% | 2024-03-05 | Fix |
| CVE-2024-1381 | Page Builder Sandwich Front End WordPress Page Builder plugin sensitive information exposure | 6.5v3.1 | 0.5% | 2024-03-05 | Fix |
| CVE-2024-1356 | HPE ArubaOS Wi-Fi Controllers and Campus/Remote Access Points Authenticated command injection | 7.2CNA v3.1 | 1.2% | 2024-03-05 | |
| CVE-2024-1285 | Page Builder Sandwich WordPress plugin missing authorization authenticated arbitrary post Editing | 6.5CNA v3.1 | 0.4% | 2024-03-05 | |
| CVE-2024-1178 | SportsPress WordPress plugin unauthorized access | 5.3CNA v3.1 | 0.4% | 2024-03-05 | Fix |
| CVE-2024-1095 | Build and Control Block Patterns Boost up Gutenberg Editor WordPress plugin missing authorization | 5.3CNA v3.1 | 0.5% | 2024-03-05 | |
| CVE-2024-1093 | Change Memory Limit WordPress plugin missing authorization via admin_logic | 5.3CNA v3.1 | 0.4% | 2024-03-05 | |
| CVE-2024-1088 | Password Protected Store for WooCommerce WordPress plugin information exposure via REST API | 5.3CNA v3.1 | 0.6% | 2024-03-05 | Fix |
| CVE-2024-0825 | Vimeography: Vimeo Video Gallery WordPress plugin authenticated (Contributor+) PHP object injection | 8.8v3.1 | 0.9% | 2024-03-05 | Fix |
| CVE-2024-0698 | Easy!Appointments WordPress plugin authenticated (Contributor+) stored cross-site scripting | 5.4v3.1 | 0.4% | 2024-03-05 | Fix |
| CVE-2024-28088 | LangChain directory traversal | 8.1v3.1 | 1.7% | 2024-03-04 | Exploit codeFix |
| CVE-2024-27889 | Arista Edge Threat Management reporting application of the SQL injection | 8.8CNA v3.1 | 8.8% | 2024-03-04 | |
| CVE-2024-27694 | FlyCMS cross-site request forgery | 7.4CISA ADP v3.1 | 0.2% | 2024-03-04 | |
| CVE-2024-27684 | D-Link Go-rt-ac750 dlapn.cgi cross-site scripting | 6.1CISA ADP v3.1 | 0.5% | 2024-03-04 | |
| CVE-2024-27680 | Flusity cross-site scripting | 6.1CISA ADP v3.1 | 0.4% | 2024-03-04 | |
| CVE-2024-27668 | Flusity cross-site scripting | 6.1v3.1 | 0.4% | 2024-03-04 | |
| CVE-2024-27199 | JetBrains TeamCity relative path traversal | 7.3CNA v3.1 | 100.0% | 2024-03-04 | KEVNucleiEmerging ThreatsFix |
| CVE-2024-27198 | JetBrains TeamCity authentication bypass | 9.8CNA v3.1 | 99.9% | 2024-03-04 | KEVNucleiMetasploitEmerging ThreatsExploit codeFix |
| CVE-2024-26622 | Linux kernel tomoyo write control use-after-free | 7.8v3.1 | 0.2% | 2024-03-04 | Fix |
| CVE-2024-24901 | Dell PowerScale OneFS audit logging vulnerability | 3.0CNA v3.1 | 0.1% | 2024-03-04 | Fix |
| CVE-2024-22463 | Dell PowerScale OneFS weak cryptographic algorithm | 7.4CNA v3.1 | 0.3% | 2024-03-04 | Fix |
| CVE-2024-22452 | Dell Display and Peripheral Manager improper access control | 7.3CNA v3.1 | 0.2% | 2024-03-04 | Fix |
| CVE-2024-21826 | OpenHarmony huks has an insecure storage of sensitive information | 4.3CNA v3.1 | 0.2% | 2024-03-04 | Fix |
| CVE-2024-21816 | OpenHarmony background task manager has an improper preservation of permissions | 4.0CNA v3.1 | 0.1% | 2024-03-04 | Fix |
| CVE-2024-20038 | MediaTek chipsets out-of-bounds read in pq | 3.4CISA ADP v3.1 | 0.1% | 2024-03-04 | Fix |
| CVE-2024-20037 | MediaTek chipsets write-what-where condition in pq | 6.7CISA ADP v3.1 | 0.1% | 2024-03-04 | Fix |
| CVE-2024-20036 | MediaTek chipsets improper access control in vdec | 4.4CISA ADP v3.1 | 0.1% | 2024-03-04 | Fix |
| CVE-2024-20034 | MediaTek chipsets out-of-bounds write in battery | 7.2CISA ADP v3.1 | 0.3% | 2024-03-04 | Fix |
| CVE-2024-20033 | MediaTek chipsets out-of-bounds read in nvram | 4.4CISA ADP v3.1 | 0.1% | 2024-03-04 | Fix |
| CVE-2024-20032 | MediaTek chipsets improper privilege management in aee | 6.7CISA ADP v3.1 | 0.1% | 2024-03-04 | Fix |
| CVE-2024-20031 | MediaTek chipsets improper input validation in da | 6.7CISA ADP v3.1 | 0.1% | 2024-03-04 | Fix |
| CVE-2024-20030 | MediaTek chipsets improper input validation in da | 4.4CISA ADP v3.1 | 0.1% | 2024-03-04 | Fix |
| CVE-2024-20029 | MediaTek chipsets improper input validation in wlan firmware | 8.4CISA ADP v3.1 | 0.1% | 2024-03-04 | Fix |
| CVE-2024-20028 | MediaTek chipsets improper input validation in da | 6.6CISA ADP v3.1 | 0.3% | 2024-03-04 | Fix |
| CVE-2024-20027 | MediaTek chipsets improper input validation in da | 7.9CISA ADP v3.1 | 0.1% | 2024-03-04 | Fix |
| CVE-2024-20026 | MediaTek chipsets out-of-bounds read in da | 4.2CISA ADP v3.1 | 0.1% | 2024-03-04 | Fix |
| CVE-2024-20025 | MediaTek chipsets improper check or handling of exceptional conditions in da | 6.7CISA ADP v3.1 | 0.1% | 2024-03-04 | Fix |
| CVE-2024-20024 | MediaTek chipsets out-of-bounds write in flashc | 6.0CISA ADP v3.1 | 0.1% | 2024-03-04 | Fix |
| CVE-2024-20023 | MediaTek chipsets out-of-bounds write in flashc | 6.7CISA ADP v3.1 | 0.1% | 2024-03-04 | Fix |
| CVE-2024-20022 | MediaTek chipsets improper privilege management in lk | 6.7v3.1 | 0.1% | 2024-03-04 | Fix |
| CVE-2024-20020 | MediaTek chipsets out-of-bounds write in OPTEE | 4.4v3.1 | 0.1% | 2024-03-04 | Fix |
| CVE-2024-20019 | MediaTek MT7925, MT7927 missing release of memory after effective lifetime in wlan driver | 5.9CISA ADP v3.1 | 0.7% | 2024-03-04 | Fix |
| CVE-2024-20018 | MediaTek MT7615 improper input validation in wlan driver | 9.8CISA ADP v3.1 | 1.0% | 2024-03-04 | Fix |
| CVE-2024-20017 | MediaTek chipsets improper input validation in wlan service | 9.8CISA ADP v3.1 | 46.6% | 2024-03-04 | Exploit codeFix |
| CVE-2024-20005 | MediaTek chipsets improper access control in da | 8.2CISA ADP v3.1 | 0.1% | 2024-03-04 | Fix |
| CVE-2024-2168 | SourceCodester Online Tours and Travels Management System expense_category.php SQL injection | 7.2v3.1 | 0.6% | 2024-03-04 | |
| CVE-2024-2156 | SourceCodester Best POS Management System admin_class.php SQL injection | 9.8v3.1 | 0.6% | 2024-03-04 | |
| CVE-2024-2155 | SourceCodester Best POS Management System index.php file inclusion | 4.3v3.1 | 0.5% | 2024-03-04 | |
| CVE-2024-2154 | SourceCodester Online Mobile Management Store view_product.php SQL injection | 9.8v3.1 | 0.6% | 2024-03-04 | |
| CVE-2024-2153 | SourceCodester Online Mobile Management Store view_order.php SQL injection | 9.8v3.1 | 0.7% | 2024-03-04 | |
| CVE-2024-2152 | SourceCodester Online Mobile Management Store manage_product.php SQL injection | 9.8v3.1 | 0.6% | 2024-03-04 | |
| CVE-2024-2151 | SourceCodester Online Mobile Management Store Product Price logic error | 5.3v3.1 | 0.5% | 2024-03-04 | |
| CVE-2024-2048 | Vault Cert Auth Method Did not Correctly Validate Non-CA Certificates | 8.1CNA v3.1 | 0.4% | 2024-03-04 | Fix |
| CVE-2024-1936 | Mozilla Thunderbird insecure storage of sensitive information | 7.5CISA ADP v3.1 | 0.7% | 2024-03-04 | Fix |
| CVE-2024-1319 | Event Tickets Plus WordPress plugin Contributor+ Attendees Lists disclosure | 4.3CISA ADP v3.1 | 0.5% | 2024-03-04 | Fix |
| CVE-2024-1316 | Event Tickets and Registration WordPress plugin Contributor+ arbitrary Events access | 6.5CISA ADP v3.1 | 0.6% | 2024-03-04 | Fix |
| CVE-2024-0156 | Dell Digital Delivery (D3) heap-based buffer overflow | 7.0CNA v3.1 | 0.2% | 2024-03-04 | Fix |
| CVE-2024-0155 | Dell Digital Delivery (D3) use-after-free | 7.0CNA v3.1 | 0.2% | 2024-03-04 | Fix |
| CVE-2024-28084 | Intel Inet Wireless Daemon improper initialization | 7.5v3.1 | 0.9% | 2024-03-03 | Fix |
| CVE-2024-27255 | IBM MQ Container information disclosure | 5.9CNA v3.1 | 0.3% | 2024-03-03 | Fix |
| CVE-2024-26469 | Prestalife Product Designer Tunis Soft " server-side request forgery | 8.1CISA ADP v3.1 | 0.3% | 2024-03-03 | |
| CVE-2024-25847 | Myprestamodules Product Catalog (csv, Excel) Import SQL injection | 9.8CISA ADP v3.1 | 0.5% | 2024-03-03 | |
| CVE-2024-25844 | Common-services So Flexibilite improper handling of insufficient permissions | 7.5CISA ADP v3.1 | 0.6% | 2024-03-03 | |
| CVE-2024-25842 | Prestaworld Account Manager improper privilege management | 7.5CISA ADP v3.1 | 0.6% | 2024-03-03 | |
| CVE-2024-25839 | Webbax Super Newsletter privilege escalation | 7.5CISA ADP v3.1 | 0.5% | 2024-03-03 | |
| CVE-2024-25551 | oretnom23 Simple Student Attendance System sourcecodester cross-site scripting | 6.1CISA ADP v3.1 | 0.4% | 2024-03-03 | |
| CVE-2024-25016 | IBM MQ denial of service | 7.5CNA v3.1 | 0.8% | 2024-03-03 | Fix |
| CVE-2024-24307 | Prestalife Product Designer Tunis Soft " path traversal | 7.5CISA ADP v3.1 | 0.7% | 2024-03-03 | |
| CVE-2024-24302 | Prestalife Product Designer deserialization of untrusted data | 9.8CISA ADP v3.1 | 0.9% | 2024-03-03 | |
| CVE-2024-22355 | IBM QRadar Suite information dislosure | 5.9CNA v3.1 | 0.4% | 2024-03-03 | Fix |
| CVE-2024-2150 | SourceCodester Insurance Management System file inclusion | 5.3v3.1 | 0.6% | 2024-03-03 | |
| CVE-2024-2149 | CodeAstro Membership Management System settings.php SQL injection | 7.2v3.1 | 0.6% | 2024-03-03 | |
| CVE-2024-2148 | SourceCodester Online Mobile Management Store Users.php unrestricted upload | 8.8v3.1 | 0.8% | 2024-03-03 | |
| CVE-2024-2147 | SourceCodester Online Mobile Management Store login.php SQL injection | 9.8v3.1 | 0.8% | 2024-03-03 | |
| CVE-2024-2146 | SourceCodester Online Mobile Management Store ?p=products cross-site scripting | 6.1v3.1 | 0.6% | 2024-03-03 | |
| CVE-2024-2145 | SourceCodester Online Mobile Management Store update-tracker.php cross-site scripting | 6.1v3.1 | 0.6% | 2024-03-03 | |
| CVE-2024-2135 | Bdtask Hospita AutoManager Hospital Activities page form cross-site scripting | 6.1v3.1 | 0.5% | 2024-03-03 | |
| CVE-2024-2134 | Bdtask Hospita AutoManager Investigation Report cross-site request forgery | 6.5v3.1 | 0.4% | 2024-03-03 | |
| CVE-2024-2133 | Bdtask Isshue Multi Store eCommerce Shopping Cart Solution Manage Sale Page cross-site scripting | 2.4CNA v3.1 | 0.5% | 2024-03-03 | |
| CVE-2024-0765 | mintplex-labs/anything-llm default user role exporting save state of instance | 6.5NVD v3.1 | 0.6% | 2024-03-03 | Fix |
| CVE-2024-26621 | In the Linux kernel, the following vulnerability has been resolved: mm: huge_memory: don't force huge page alignment on 32 bit commit efa7df3e3bb5 ("mm: align larger anonymous mappings on THP boundaries") caused two issues [1] [2] reported on 32 bit system or compat userspace. It doesn't make too | 8.2CNA v3.1 | 1.0% | 2024-03-02 | Fix |
| CVE-2024-25865 | Hexo-theme-anzhiyu cross-site scripting | 6.1v3.1 | 0.5% | 2024-03-02 | |
| CVE-2024-25064 | Due to insufficient server-side validation, an attacker with login privileges could access certain resources that the attacker should not have access to by changing parameter values. | 4.3CNA v3.1 | 0.4% | 2024-03-02 | Fix |
| CVE-2024-25063 | Hikvision HikCentral Professional improper authorization | 7.5CNA v3.1 | 0.6% | 2024-03-02 | Fix |
| CVE-2024-1775 | Nextend Social Login and Register WordPress plugin reflected Self-based cross-site scripting | 5.4v3.1 | 0.4% | 2024-03-02 | Fix |
| CVE-2024-1592 | Complianz WordPress plugin cross-site request forgery | 4.3CNA v3.1 | 0.2% | 2024-03-02 | Fix |
| CVE-2024-1449 | Master Slider Responsive Touch Slider WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.4% | 2024-03-02 | Fix |
| CVE-2024-1398 | Ultimate Bootstrap Elements for Elementor WordPress plugin stored cross-site scripting | 6.4CNA v3.1 | 0.5% | 2024-03-02 | Fix |
| CVE-2024-0795 | mintplex-labs/anything-llm create user API role not enforced | 7.2v3.1 | 0.9% | 2024-03-02 | Fix |
| CVE-2024-0611 | Master Slider Responsive Touch Slider WordPress plugin stored cross-site scripting | 4.8v3.1 | 0.7% | 2024-03-02 | Fix |
| CVE-2024-0378 | AI Engine WordPress plugin unauthenticated stored cross-site scripting | 6.1v3.1 | 0.6% | 2024-03-02 | Fix |
| CVE-2024-27950 | Sirv WordPress plugin broken access control | 8.8v3.1 | 0.4% | 2024-03-01 | Fix |
| CVE-2024-27949 | Sirv WordPress plugin server side request forgery (SSRF) | 5.4CNA v3.1 | 0.3% | 2024-03-01 | Fix |
| CVE-2024-27747 | Mayuri K Petrol Pump Management Petrol Pump Mangement software v.1.0 file upload | 9.8CISA ADP v3.1 | 23.6% | 2024-03-01 | Exploit code |
| CVE-2024-27746 | Mayuri K Petrol Pump Management Petrol Pump Mangement software v.1.0 SQL injection | 9.8CISA ADP v3.1 | 12.9% | 2024-03-01 | Exploit code |
| CVE-2024-27744 | Mayuri K Petrol Pump Management Petrol Pump Mangement software v.1.0 cross-site scripting | 6.1CISA ADP v3.1 | 1.3% | 2024-03-01 | Exploit code |
| CVE-2024-27743 | Mayuri K Petrol Pump Management Petrol Pump Mangement software v.1.0 cross-site scripting | 6.1CISA ADP v3.1 | 1.3% | 2024-03-01 | Exploit code |
| CVE-2024-27734 | CSZ CMS A cross-site scripting | 6.1CISA ADP v3.1 | 0.5% | 2024-03-01 | |
| CVE-2024-27689 | codelyfe Stupid Simple CMS cross-site request forgery | 8.8CISA ADP v3.1 | 0.3% | 2024-03-01 | |
| CVE-2024-27572 | Libtor Lbt-t300-t390 buffer overflow | 7.5CISA ADP v3.1 | 0.7% | 2024-03-01 | |
| CVE-2024-27571 | Libtor Lbt-t300-t390 stack-based buffer overflow | 7.5CISA ADP v3.1 | 0.7% | 2024-03-01 | |
| CVE-2024-27570 | Libtor Lbt-t300-t390 stack-based buffer overflow | 7.5v3.1 | 0.7% | 2024-03-01 | |
| CVE-2024-27569 | Libtor Lbt-t300-t390 stack-based buffer overflow | 6.5CISA ADP v3.1 | 0.5% | 2024-03-01 | |
| CVE-2024-27568 | Libtor Lbt-t300-t390 stack-based buffer overflow | 6.5CISA ADP v3.1 | 0.5% | 2024-03-01 | |
| CVE-2024-27567 | Libtor Lbt-t300-t390 stack-based buffer overflow | 6.5CISA ADP v3.1 | 0.6% | 2024-03-01 | |
| CVE-2024-27559 | codelyfe Stupid Simple CMS cross-site request forgery | 6.3CISA ADP v3.1 | 0.2% | 2024-03-01 | |
| CVE-2024-27558 | codelyfe Stupid Simple CMS cross-site scripting | 6.1CISA ADP v3.1 | 0.4% | 2024-03-01 | |
| CVE-2024-27499 | Webkul Bagisto bagist cross-site scripting | 6.5CISA ADP v3.1 | 0.5% | 2024-03-01 | Fix |
| CVE-2024-27497 | Linksys E2000 authentication bypass | 8.8CISA ADP v3.1 | 26.7% | 2024-03-01 | Nuclei |
| CVE-2024-27355 | phpseclib guardrails needed on OID length | 7.5CISA ADP v3.1 | 0.6% | 2024-03-01 | Fix |
| CVE-2024-27354 | phpseclib denial of service | 7.5CISA ADP v3.1 | 0.6% | 2024-03-01 | Fix |
| CVE-2024-27298 | parse-community parse-server Parse Server literalizeRegexPart SQL injection | 10.0CNA v3.1 | 1.0% | 2024-03-01 | Fix |
| CVE-2024-27296 | Directus version number disclosure | 5.3CNA v3.1 | 0.6% | 2024-03-01 | Fix |
| CVE-2024-27295 | Directus MySQL accent insensitive email matching | 8.2CNA v3.1 | 0.7% | 2024-03-01 | Fix |
| CVE-2024-27140 | Apache Archiva: Reflected XSS | 5.4CISA ADP v3.1 | 1.3% | 2024-03-01 | Fix |
| CVE-2024-27139 | Apache Archiva: Incorrect authentication potentially leading to account takeover | 7.5CISA ADP v3.1 | 1.3% | 2024-03-01 | Fix |
| CVE-2024-27138 | Apache Archiva: Disabling user registration is not effective | 7.5CISA ADP v3.1 | 1.2% | 2024-03-01 | Fix |
| CVE-2024-27101 | authzed spicedb integer overflow in chunking helper causes dispatching to miss elements or panic | 7.3CNA v3.1 | 0.5% | 2024-03-01 | Fix |
| CVE-2024-26280 | Apache Airflow: Overly broad default permissions for Viewer/Ops (audit logs) | 4.7CISA ADP v3.1 | 1.9% | 2024-03-01 | Fix |
| CVE-2024-25972 | Initialization of a resource with an insecure default vulnerability in OET-213H-BTS1 sold in Japan by Atsumi Electric Co., Ltd. allows a network-adjacent unauthenticated attacker to configure and control the affected product. | 8.3CISA ADP v3.1 | 0.3% | 2024-03-01 | |
| CVE-2024-25578 | MicroDicom DICOM Viewer out-of-bounds write | 7.8v3.1 | 0.2% | 2024-03-01 | Fix |
| CVE-2024-25552 | W&T Com Redirector PnP wiesemann and Theis: Multiple products prone to unquoted search path | 7.8CNA v3.1 | 0.2% | 2024-03-01 | Fix |
| CVE-2024-25438 | Public Knowledge Project OPEN JOURNAL SYSTEMS cross-site scripting | 6.1CISA ADP v3.1 | 0.4% | 2024-03-01 | |
| CVE-2024-25436 | Sfu OPEN JOURNAL SYSTEMS cross-site scripting | 6.1v3.1 | 0.4% | 2024-03-01 | |
| CVE-2024-25434 | Pkp.sfu OPEN JOURNAL SYSTEMS Pkp Ojs v3.3 cross-site scripting | 5.4CISA ADP v3.1 | 0.4% | 2024-03-01 | |
| CVE-2024-25386 | DICOM® Connectivity Framework by laurelbridge path traversal | 8.8CISA ADP v3.1 | 1.7% | 2024-03-01 | |
| CVE-2024-25293 | Mjml App code injection | 9.3CISA ADP v3.1 | 1.0% | 2024-03-01 | Exploit code |
| CVE-2024-25091 | J's Communications RevoWorks SCVX protection mechanism failure | 9.1CISA ADP v3.1 | 0.5% | 2024-03-01 | |
| CVE-2024-24907 | Dell Secure Connect Gateway (SCG) Policy Manager cross-site scripting | 7.6CNA v3.1 | 0.4% | 2024-03-01 | Fix |
| CVE-2024-24906 | Dell Secure Connect Gateway (SCG) Policy Manager cross-site scripting | 7.6CNA v3.1 | 0.4% | 2024-03-01 | Fix |
| CVE-2024-24905 | Dell Secure Connect Gateway (SCG) Policy Manager cross-site scripting | 7.6CNA v3.1 | 0.4% | 2024-03-01 | Fix |
| CVE-2024-24904 | Dell Secure Connect Gateway (SCG) Policy Manager cross-site scripting | 7.6CNA v3.1 | 0.4% | 2024-03-01 | Fix |
| CVE-2024-24903 | Dell Secure Connect Gateway (SCG) Policy Manager weak password recovery | 8.0CNA v3.1 | 0.4% | 2024-03-01 | Fix |
| CVE-2024-24900 | Dell Secure Connect Gateway (SCG) Policy Manager improper authorization | 5.8CNA v3.1 | 0.2% | 2024-03-01 | Fix |
| CVE-2024-24512 | Pkp.sfu OPEN JOURNAL SYSTEMS Pkp OJS v.3.4 cross-site scripting | 6.1CISA ADP v3.1 | 0.5% | 2024-03-01 | |
| CVE-2024-24511 | Pkp.sfu OPEN JOURNAL SYSTEMS Pkp OJS v.3.4 cross-site scripting | 6.1CISA ADP v3.1 | 0.5% | 2024-03-01 | |
| CVE-2024-23492 | Commend WS203VICM weak encoding for password | 5.7CNA v3.1 | 0.2% | 2024-03-01 | Fix |
| CVE-2024-22891 | Nteract remote code execution | 9.8CISA ADP v3.1 | 1.7% | 2024-03-01 | Exploit code |
| CVE-2024-22458 | Dell Secure Connect Gateway (SCG) weak cryptographic algorithm | 3.7CNA v3.1 | 0.1% | 2024-03-01 | Fix |
| CVE-2024-22457 | Dell Secure Connect Gateway (SCG) authentication bypass by spoofing | 7.1CNA v3.1 | 0.3% | 2024-03-01 | Fix |
| CVE-2024-22182 | Commend WS203VICM argument injection | 8.6CNA v3.1 | 0.6% | 2024-03-01 | Fix |
| CVE-2024-22100 | MicroDicom DICOM heap-based buffer overflow | 7.8v3.1 | 0.3% | 2024-03-01 | Fix |
| CVE-2024-21767 | Commend WS203VICM improper access control | 9.4CNA v3.1 | 0.6% | 2024-03-01 | Fix |
| CVE-2024-20328 | Cisco ClamAV VirusEvent File Processing command injection | 5.3CNA v3.1 | 84.8% | 2024-03-01 | Fix |
| CVE-2024-2078 | Cross-site scripting vulnerability in HelpDeskZ | 6.1v3.1 | 0.3% | 2024-03-01 | |
| CVE-2024-2077 | SourceCodester Simple Online Bidding System index.php SQL injection | 9.8v3.1 | 0.7% | 2024-03-01 | |
| CVE-2024-2076 | CodeAstro House Rental Management System tenant.php missing authentication | 7.5v3.1 | 0.9% | 2024-03-01 | |
| CVE-2024-2075 | SourceCodester Daily Habit Tracker update-tracker.php cross-site scripting | 5.4v3.1 | 0.5% | 2024-03-01 | |
| CVE-2024-2074 | Mini-Tmall 1 SQL injection | 6.3CNA v3.1 | 0.8% | 2024-03-01 | Exploit code |
| CVE-2024-2073 | SourceCodester Block Inserter for Dynamic Content view_post.php SQL injection | 8.8v3.1 | 0.7% | 2024-03-01 | |
| CVE-2024-2072 | SourceCodester Flashcard Quiz App update-flashcard.php cross-site scripting | 5.4v3.1 | 0.5% | 2024-03-01 | |
| CVE-2024-2071 | SourceCodester FAQ Management System Update FAQ cross-site scripting | 5.4v3.1 | 0.5% | 2024-03-01 | |
| CVE-2024-2070 | SourceCodester FAQ Management System add-faq.php cross-site scripting | 6.1v3.1 | 0.5% | 2024-03-01 | |
| CVE-2024-2069 | SourceCodester FAQ Management System delete-faq.php SQL injection | 5.3v3.1 | 0.5% | 2024-03-01 | |
| CVE-2024-2068 | SourceCodester Computer Inventory System update-computer.php cross-site scripting | 6.1v3.1 | 2.5% | 2024-03-01 | |
| CVE-2024-2067 | SourceCodester Computer Inventory System delete-computer.php SQL injection | 9.8v3.1 | 0.5% | 2024-03-01 | |
| CVE-2024-2066 | SourceCodester Computer Inventory System add-computer.php cross-site scripting | 6.1v3.1 | 0.4% | 2024-03-01 | |
| CVE-2024-2065 | SourceCodester Barangay Population Monitoring System update-resident.php cross-site scripting | 6.1v3.1 | 0.4% | 2024-03-01 | |
| CVE-2024-2064 | rahman SelectCours Template CacheController.java getCacheNames injection | 4.3v3.1 | 0.5% | 2024-03-01 | |
| CVE-2024-2063 | SourceCodester Petrol Pump Management Software profile_crud.php cross-site scripting | 4.8v3.1 | 0.4% | 2024-03-01 | |
| CVE-2024-2062 | SourceCodester Petrol Pump Management Software edit_categories.php SQL injection | 7.2v3.1 | 0.5% | 2024-03-01 | |
| CVE-2024-2061 | SourceCodester Petrol Pump Management Software edit_supplier.php SQL injection | 7.2v3.1 | 0.5% | 2024-03-01 | |
| CVE-2024-2060 | SourceCodester Petrol Pump Management Software login_crud.php SQL injection | 7.2v3.1 | 0.5% | 2024-03-01 | |
| CVE-2024-2059 | SourceCodester Petrol Pump Management Software service_crud.php unrestricted upload | 7.2v3.1 | 0.6% | 2024-03-01 | |
| CVE-2024-2058 | SourceCodester Petrol Pump Management Software product.php unrestricted upload | 7.2v3.1 | 0.6% | 2024-03-01 | |
| CVE-2024-2057 | LangChain langchain_community TFIDFRetriever tfidf.py load_local server-side request forgery | 9.8v3.1 | 0.6% | 2024-03-01 | |
| CVE-2024-2045 | Session LFR via chat attachment | 5.5v3.1 | 0.3% | 2024-03-01 | |
| CVE-2024-2022 | Netentsec NS-ASG Application Security Gateway list_ipAddressPolicy.php SQL injection | 9.8v3.1 | 8.5% | 2024-03-01 | |
| CVE-2024-2021 | Netentsec NS-ASG Application Security Gateway list_localuser.php SQL injection | 9.8v3.1 | 0.7% | 2024-03-01 | |
| CVE-2024-1941 | Delta Electronics CNCSoft-B stack-based buffer overflow | 7.8v3.1 | 0.7% | 2024-03-01 | Fix |
| CVE-2024-1869 | HP DesignJet out-of-bounds read | 7.5CISA ADP v3.1 | 2.3% | 2024-03-01 | Fix |
| CVE-2024-1859 | Slider Responsive Slideshow Image slider, Gallery slideshow WordPress plugin PHP object injection | 8.8CNA v3.1 | 0.8% | 2024-03-01 | Fix |
| CVE-2024-1624 | Dassault Systèmes Documentation Server OS command injection | 9.4CNA v3.1 | 2.1% | 2024-03-01 | |
| CVE-2024-1453 | Santesoft Sante DICOM Viewer Pro out-of-bounds read | 7.8v3.1 | 0.3% | 2024-03-01 | Fix |
| CVE-2024-1174 | HP ThinPro memory corruption | 8.2CISA ADP v3.1 | 0.2% | 2024-03-01 | |
| CVE-2024-1120 | NextMove Lite WordPress plugin unauthorized access | 5.3CNA v3.1 | 0.5% | 2024-03-01 | Fix |
| CVE-2024-0967 | OpenText / Micro Focus ArcSight Enterprise Security Manager Remote vulnerability | 4.3CNA v3.1 | 0.5% | 2024-03-01 | Fix |
| CVE-2024-0692 | SolarWinds Security Event Manager deserialization of untrusted data remote code execution | 8.8CNA v3.1 | 92.2% | 2024-03-01 | NucleiFix |
| CVE-2024-0403 | Tandoor Recipes server-side request forgery | 6.5v3.1 | 0.4% | 2024-03-01 |