CVE-2024 records published in April 2024
This page lists the 3,133 CVE-2024 records published in April 2024, newest first, 1,000 to a page. The Cybersecurity and Infrastructure Security Agency's Known Exploited Vulnerabilities (KEV) catalog lists 10 of them. Each CVE opens on cve-security.com with its sources, detection content and vendor fixes, and the search on the CVE-2024 list filters these records by severity or signal.
- Critical
- 32010.2% of these records
- Listed in CISA KEV
- 100.3% of these records
- Reported exploited
- 20.1% of these records
- Detection signal
- 591.9% of these records
- Exploit code
- 933.0% of these records
- Actionable vendor fix
- 2,20270.3% of these records
Figures as of 2026-10-24 13:18 UTC. Records published in April 2024 have had from about 30 months to about 31 months to collect KEV listings, exploitation reports, detection content and exploit code. Records published more recently have had less time, which can hold their shares down.
| CVE | Summary | CVSS | EPSS | Published | Signals |
|---|---|---|---|---|---|
| CVE-2024-34149 | Bitcoin Core and Bitcoin Knots tapscript policy check vulnerability | 6.3CISA ADP v3.1 | 0.4% | 2024-04-30 | |
| CVE-2024-34088 | FRRouting null pointer dereference | 7.5CISA ADP v3.1 | 0.7% | 2024-04-30 | Fix |
| CVE-2024-34050 | onosproject Traffic Steering Xapplication improper array index validation | 7.5CISA ADP v3.1 | 0.5% | 2024-04-30 | |
| CVE-2024-34049 | onosproject Traffic Steering Xapplication out-of-bounds read | 7.5CISA ADP v3.1 | 0.5% | 2024-04-30 | |
| CVE-2024-34048 | O-RAN-SC Ric-plt-e2mgr improper array index validation | 9.8CISA ADP v3.1 | 0.6% | 2024-04-30 | Fix |
| CVE-2024-34047 | O-RAN-SC Ric-plt-e2mgr improper array index validation | 4.3CISA ADP v3.1 | 0.3% | 2024-04-30 | Fix |
| CVE-2024-34044 | O-RAN E2T buildPrometheusList function null pointer dereference | 5.3CISA ADP v3.1 | 0.5% | 2024-04-30 | |
| CVE-2024-34043 | RICAPP kpimon-go E2AP-PDU message handling vulnerability | 5.3CISA ADP v3.1 | 0.2% | 2024-04-30 | |
| CVE-2024-33832 | OneNav get_link_info endpoint server-side request forgery | 6.3CISA ADP v3.1 | 0.7% | 2024-04-30 | Nuclei |
| CVE-2024-33831 | YApi Advanced Expectation Response module stored cross-site scripting | 7.4CISA ADP v3.1 | 0.5% | 2024-04-30 | |
| CVE-2024-33465 | MajorDoMo cross-site scripting | 7.1CISA ADP v3.1 | 0.4% | 2024-04-30 | |
| CVE-2024-33437 | Mikegualtieri CSS Exfil Protection information disclosure | 7.5CISA ADP v3.1 | 0.8% | 2024-04-30 | |
| CVE-2024-33436 | Mikegualtieri CSS Exfil Protection information disclosure | 5.3CISA ADP v3.1 | 0.6% | 2024-04-30 | |
| CVE-2024-33383 | xxyopen Novel-Plus arbitrary file read | 7.5CISA ADP v3.1 | 0.7% | 2024-04-30 | |
| CVE-2024-33371 | DedeCMS cross-site scripting | 6.1CISA ADP v3.1 | 0.5% | 2024-04-30 | |
| CVE-2024-33332 | Bladex SpringBlade SQL injection | 7.5CISA ADP v3.1 | 0.7% | 2024-04-30 | |
| CVE-2024-33309 | An issue in TVS Motor Company Limited TVS Connet Android v.4.5.1 and iOS v.5.0.0 allows a remote attacker to obtain sensitive information via an insecure API endpoint. NOTE: this is disputed as discussed in the msn-official/CVE-Evidence repository. | 7.5CISA ADP v3.1 | 0.8% | 2024-04-30 | |
| CVE-2024-33308 | An issue in TVS Motor Company Limited TVS Connet Android v.4.5.1 and iOS v.5.0.0 allows a remote attacker to escalate privileges via the Emergency Contact Feature. NOTE: this is disputed as discussed in the msn-official/CVE-Evidence repository. | 9.1CISA ADP v3.1 | 0.7% | 2024-04-30 | |
| CVE-2024-33275 | Webbax supernewsletter v.1.4.21 and SQL injection | 9.8CISA ADP v3.1 | 0.7% | 2024-04-30 | |
| CVE-2024-33274 | FME Modules customfields v.2.2.7 and path traversal | 7.5CISA ADP v3.1 | 1.0% | 2024-04-30 | |
| CVE-2024-33273 | shipup SQL injection | 9.8CISA ADP v3.1 | 0.6% | 2024-04-30 | |
| CVE-2024-33270 | FME Modules fileuploads uploadfiles.php out-of-bounds read | 7.5CISA ADP v3.1 | 0.6% | 2024-04-30 | |
| CVE-2024-33267 | Hero hfheropayment v.1.2.5 and SQL injection | 9.8CISA ADP v3.1 | 0.5% | 2024-04-30 | |
| CVE-2024-33103 | Media Manager component of DokuWiki arbitrary file upload | 6.1CISA ADP v3.1 | 0.5% | 2024-04-30 | |
| CVE-2024-33102 | ThinkSAAS component /pubs/counter.php stored cross-site scripting | 5.4CISA ADP v3.1 | 0.4% | 2024-04-30 | |
| CVE-2024-33101 | ThinkSAAS component /action/anti.php stored cross-site scripting | 6.1CISA ADP v3.1 | 0.4% | 2024-04-30 | |
| CVE-2024-32970 | Cross-site scripting (XSS) possible with maliciously formed HTML attribute names and values in Phlex | 7.1CNA v3.1 | 0.7% | 2024-04-30 | Fix |
| CVE-2024-31837 | DMitry (Deepmagic Information Gathering Tool) format string | 8.4CISA ADP v3.1 | 0.2% | 2024-04-30 | Fix |
| CVE-2024-29466 | lsgwr spring boot online exam FileTransUtil directory traversal | 8.8CISA ADP v3.1 | 1.0% | 2024-04-30 | |
| CVE-2024-29384 | Mikegualtieri CSS Exfil Protection information disclosure | 7.5CISA ADP v3.1 | 0.8% | 2024-04-30 | |
| CVE-2024-29320 | Wallosapp Wallos SQL injection | 8.1CISA ADP v3.1 | 0.7% | 2024-04-30 | Fix |
| CVE-2024-28716 | OpenStack Storlets gateway.py denial of service | 7.5CISA ADP v3.1 | 1.4% | 2024-04-30 | |
| CVE-2024-28269 | ReCrystallize Server file upload feature unrestricted file upload | 7.2CISA ADP v3.1 | 1.0% | 2024-04-30 | Emerging Threats |
| CVE-2024-26331 | ReCrystallize Server cookie improper authentication | 7.5CISA ADP v3.1 | 51.3% | 2024-04-30 | NucleiEmerging Threats |
| CVE-2024-25938 | Foxit Reader way use-after-free | 8.8CNA v3.1 | 15.6% | 2024-04-30 | Fix |
| CVE-2024-25648 | Foxit Reader way use-after-free | 8.8CNA v3.1 | 15.6% | 2024-04-30 | Fix |
| CVE-2024-25575 | Foxit Reader way type confusion | 8.8v3.1 | 17.7% | 2024-04-30 | Fix |
| CVE-2024-23774 | Quest KACE Agent KSchedulerSvc.exe and AMPTools.exe vulnerability | 7.8CISA ADP v3.1 | 0.4% | 2024-04-30 | |
| CVE-2024-23773 | Quest KACE Agent KSchedulerSvc.exe arbitrary file deletion | 7.8CISA ADP v3.1 | 0.4% | 2024-04-30 | |
| CVE-2024-23772 | Quest KACE Agent KSchedulerSvc.exe, KUserAlert.exe and Runkbot.exe vulnerability | 6.6CISA ADP v3.1 | 0.3% | 2024-04-30 | |
| CVE-2024-23463 | Zscaler Client Connector Anti-tampering bypass via Repair App functionality | 8.8CNA v3.1 | 0.4% | 2024-04-30 | Fix |
| CVE-2024-22546 | TRENDnet TEW-815DAP command injection | 6.4CISA ADP v3.1 | 1.5% | 2024-04-30 | |
| CVE-2024-22405 | XADMaster may not apply quarantine attribute correctly to extracted files | 5.5CNA v3.1 | 0.2% | 2024-04-30 | Fix |
| CVE-2024-4349 | SourceCodester Pisay Online E-Learning System controller.php unrestricted upload | 7.3CISA ADP v3.1 | 1.0% | 2024-04-30 | |
| CVE-2024-4348 | osCommerce all-products cross-site scripting | 4.3CNA v3.1 | 1.8% | 2024-04-30 | Nuclei |
| CVE-2024-4340 | Passing a heavily nested list to sqlparse.parse leads to a denial of service due to RecursionError | 7.5CNA v3.1 | 3.2% | 2024-04-30 | Fix |
| CVE-2024-4337 | Adive Framework admin nav page stored cross-site scripting | 7.4v3.1 | 0.4% | 2024-04-30 | |
| CVE-2024-4336 | Adive Framework admin tables page stored cross-site scripting | 7.4v3.1 | 0.4% | 2024-04-30 | |
| CVE-2024-4327 | Apryse WebViewer PDF Document cross-site scripting | 3.5CNA v3.1 | 0.5% | 2024-04-30 | |
| CVE-2024-4226 | Octopus Deploy Octopus Server incorrect default permissions | 3.5CNA v3.1 | 0.3% | 2024-04-30 | Fix |
| CVE-2024-4225 | DPS Telecom NetGuardian DIN Remote Telemetry Unit web interface improper access control | 7.6CNA v3.1 | 0.3% | 2024-04-30 | |
| CVE-2024-4192 | Stack-based buffer overflow vulnerability in Delta Electronics CNCSoft-G2 DOPSoft | 7.8CNA v3.1 | 0.3% | 2024-04-30 | Fix |
| CVE-2024-4185 | Customer Email Verification for WooCommerce WordPress plugin authentication bypass | 8.1CNA v3.1 | 0.9% | 2024-04-30 | Fix |
| CVE-2024-3746 | Measuresoft ScadaPro improper access control | 7.1CISA ADP v3.1 | 0.2% | 2024-04-30 | |
| CVE-2024-3411 | Insufficient randomness when Validating an IPMI Authenticated Session | 9.1CISA ADP v3.1 | 0.7% | 2024-04-30 | |
| CVE-2024-3072 | ACF Front End Editor WordPress plugin missing authorization authenticated arbitrary content update | 4.3CNA v3.1 | 0.3% | 2024-04-30 | |
| CVE-2024-2877 | HashiCorp Vault Enterprise audit log information disclosure | 5.5CNA v3.1 | 0.2% | 2024-04-30 | Fix |
| CVE-2024-2663 | ZD YouTube FLV Player WordPress plugin server-side request forgery | 8.3CNA v3.1 | 0.4% | 2024-04-30 | |
| CVE-2024-2617 | Hitachi Energy RTU500 series CMU firmware improperly implemented security check | 7.2CNA v3.1 | 0.7% | 2024-04-30 | Fix |
| CVE-2024-2378 | Hitachi Energy SDM600 incorrect authorization | 8.0CNA v3.1 | 0.2% | 2024-04-30 | Fix |
| CVE-2024-2377 | Hitachi Energy SDM600 origin validation error | 7.6CNA v3.1 | 0.2% | 2024-04-30 | Fix |
| CVE-2024-1895 | Event Monster WordPress plugin Authenticated(Contributor+) PHP object injection via Custom Meta | 7.5CNA v3.1 | 0.9% | 2024-04-30 | Fix |
| CVE-2024-1371 | LeadConnector WordPress plugin missing authorization to unauthenticated arbitrary post deletion | 6.5CNA v3.1 | 0.6% | 2024-04-30 | Fix |
| CVE-2024-0216 | Google Doc Embedder WordPress plugin authenticated (Contributor+) blind server side request forgery | 6.4CNA v3.1 | 0.3% | 2024-04-30 | |
| CVE-2024-34046 | The O-RAN E2T I-Release Prometheus metric Increment function can crash in sctpThread.cpp for message.peerInfo->sctpParams->e2tCounters[IN_SUCC][MSG_COUNTER][ProcedureCode_id_RICsubscription]->Increment(). | 7.5CISA ADP v3.1 | 0.5% | 2024-04-29 | |
| CVE-2024-34045 | The O-RAN E2T I-Release Prometheus metric Increment function can crash in sctpThread.cpp for message.peerInfo->counters[IN_INITI][MSG_COUNTER][ProcedureCode_id_E2setup]->Increment(). | 7.5CISA ADP v3.1 | 0.5% | 2024-04-29 | |
| CVE-2024-34020 | hcode mail.c putSDN function stack-based buffer overflow | 6.5CISA ADP v3.1 | 0.6% | 2024-04-29 | Fix |
| CVE-2024-34011 | Acronis Cyber Protect Cloud Agent incorrect default permissions | 6.8CNA v3.0 | 0.2% | 2024-04-29 | Fix |
| CVE-2024-34010 | Acronis Cyber Protect Cloud Agent unquoted search path | 8.2CNA v3.0 | 0.2% | 2024-04-29 | Fix |
| CVE-2024-33905 | Telegram WebK Mini Web App postMessage handler cross-site scripting | 4.6CISA ADP v3.1 | 0.9% | 2024-04-29 | |
| CVE-2024-33904 | Hyprland plugin hook system race condition | 7.0CISA ADP v3.1 | 0.2% | 2024-04-29 | |
| CVE-2024-33903 | CARLA collision sensor protection mechanism failure | 5.9CISA ADP v3.1 | 0.6% | 2024-04-29 | |
| CVE-2024-33899 | RARLAB WinRAR escape sequence injection | 7.1CISA ADP v3.1 | 0.8% | 2024-04-29 | Fix |
| CVE-2024-33686 | Pathway WordPress theme Extend Themes missing authorization | 4.3CNA v3.1 | 0.5% | 2024-04-29 | Fix |
| CVE-2024-33684 | Save as PDF plugin by Pdfcrowd WordPress plugin broken access control to stored XSS | 6.5CNA v3.1 | 0.3% | 2024-04-29 | Fix |
| CVE-2024-33681 | Regenerate post permalink WordPress plugin cross-site request forgery (CSRF) leading to XSS | 7.1CNA v3.1 | 0.2% | 2024-04-29 | |
| CVE-2024-33652 | Client Dash WordPress plugin broken access control | 5.3CNA v3.1 | 0.5% | 2024-04-29 | |
| CVE-2024-33649 | Opal Widgets For Elementor WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.3% | 2024-04-29 | |
| CVE-2024-33648 | Recencio Book Reviews WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.4% | 2024-04-29 | Fix |
| CVE-2024-33646 | Sticky Anything WordPress plugin broken access control to XSS | 7.1CNA v3.1 | 0.2% | 2024-04-29 | |
| CVE-2024-33645 | Easy Set Favicon WordPress plugin reflected cross-site scripting (XSS) | 7.1CNA v3.1 | 0.4% | 2024-04-29 | |
| CVE-2024-33643 | Advanced Most Recent Posts Mod WordPress plugin cross-site scripting (XSS) | 5.9CNA v3.1 | 0.3% | 2024-04-29 | |
| CVE-2024-33641 | Custom field finder WordPress plugin PHP object injection | 5.4CNA v3.1 | 0.3% | 2024-04-29 | Fix |
| CVE-2024-33640 | Pretty Google Calendar WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.3% | 2024-04-29 | Fix |
| CVE-2024-33637 | Solid Affiliate WordPress plugin sensitive data exposure via Log file | 7.5CNA v3.1 | 0.6% | 2024-04-29 | |
| CVE-2024-33636 | WP Page Post Widget Clone WordPress plugin broken access control | 5.4CNA v3.1 | 0.3% | 2024-04-29 | |
| CVE-2024-33635 | Piotnet Addons For Elementor Pro WordPress plugin missing authorization | 7.5CNA v3.1 | 0.6% | 2024-04-29 | |
| CVE-2024-33634 | Piotnet Addons For Elementor Pro WordPress plugin unauthenticated server side request forgery (SSRF) | 5.4CNA v3.1 | 0.3% | 2024-04-29 | |
| CVE-2024-33633 | Piotnet Addons For Elementor Pro WordPress plugin reflected cross-site scripting (XSS) | 7.1CNA v3.1 | 0.4% | 2024-04-29 | |
| CVE-2024-33632 | Piotnet Addons For Elementor Pro WordPress plugin cross-site request forgery (CSRF) | 5.4CNA v3.1 | 0.2% | 2024-04-29 | |
| CVE-2024-33631 | Piotnet Addons For Elementor Pro WordPress plugin authenticated stored cross-site scripting (XSS) | 9.8CISA ADP v3.1 | 0.4% | 2024-04-29 | |
| CVE-2024-33630 | Piotnet Addons For Elementor WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.3% | 2024-04-29 | Fix |
| CVE-2024-33629 | Auto Featured Image (Auto Post Thumbnail) WordPress plugin server side request forgery (SSRF) | 4.4CNA v3.1 | 0.3% | 2024-04-29 | Fix |
| CVE-2024-33627 | AGCA Custom Dashboard and Login Page WordPress plugin server side request forgery (SSRF) | 4.4CNA v3.1 | 0.3% | 2024-04-29 | Fix |
| CVE-2024-33597 | SSU WordPress plugin broken access control | 7.5CNA v3.1 | 0.6% | 2024-04-29 | Fix |
| CVE-2024-33596 | Five Star Restaurant Reservations WordPress plugin broken access control | 5.3CNA v3.1 | 0.4% | 2024-04-29 | Fix |
| CVE-2024-33595 | Master Addons for Elementor WordPress plugin broken access control on Duplicate post | 8.8v3.1 | 0.5% | 2024-04-29 | Fix |
| CVE-2024-33594 | Leaky Paywall WordPress plugin Price manipulation vulnerability | 7.5CNA v3.1 | 0.5% | 2024-04-29 | Fix |
| CVE-2024-33593 | Smart Forms WordPress plugin broken access control | 4.3v3.1 | 0.3% | 2024-04-29 | Fix |
| CVE-2024-33591 | Easy Accept Payments for PayPal WordPress plugin broken access control | 7.5CNA v3.1 | 0.5% | 2024-04-29 | Fix |
| CVE-2024-33590 | codeSavory Knowledge Base documentation and wiki plugin server-side request forgery | 5.0CNA v3.1 | 0.4% | 2024-04-29 | Fix |
| CVE-2024-33589 | KB Support WordPress plugin broken access control | 6.5v3.1 | 0.5% | 2024-04-29 | Fix |
| CVE-2024-33588 | codeSavory Knowledge Base documentation and wiki plugin missing authorization | 5.4CNA v3.1 | 0.4% | 2024-04-29 | Fix |
| CVE-2024-33587 | Secure Copy Content Protection and Content Locking WordPress plugin broken access control | 5.3CNA v3.1 | 0.4% | 2024-04-29 | Fix |
| CVE-2024-33586 | Photo Gallery by 10Web WordPress plugin broken access control | 5.3v3.1 | 0.4% | 2024-04-29 | Fix |
| CVE-2024-33585 | Payment Gateway Based Fees and Discounts for WooCommerce WordPress plugin broken access control | 4.3CNA v3.1 | 0.3% | 2024-04-29 | Fix |
| CVE-2024-33584 | Video Conferencing with Zoom WordPress plugin open redirection | 4.7CNA v3.1 | 0.4% | 2024-04-29 | Fix |
| CVE-2024-33575 | User Meta WordPress plugin sensitive data exposure | 5.3CNA v3.1 | 1.1% | 2024-04-29 | NucleiFix |
| CVE-2024-33571 | VOD Infomaniak WordPress plugin reflected cross-site scripting (XSS) | 7.1CNA v3.1 | 0.4% | 2024-04-29 | Fix |
| CVE-2024-33566 | OrderConvo WordPress plugin unauthenticated API access to arbitrary file upload | 10.0CNA v3.1 | 1.1% | 2024-04-29 | Fix |
| CVE-2024-33562 | XStore WordPress theme reflected cross-site scripting (XSS) | 7.1CNA v3.1 | 0.4% | 2024-04-29 | Fix |
| CVE-2024-33559 | XStore WordPress theme unauthenticated SQL injection | 9.3CNA v3.1 | 3.6% | 2024-04-29 | Exploit codeFix |
| CVE-2024-33558 | XStore Core WordPress plugin limited arbitrary file download | 6.5v3.1 | 0.4% | 2024-04-29 | Fix |
| CVE-2024-33554 | XStore Core WordPress plugin reflected cross-site scripting (XSS) | 6.1NVD v3.1 | 0.4% | 2024-04-29 | Fix |
| CVE-2024-33553 | XStore Core WordPress plugin unauthenticated PHP object injection | 9.8v3.1 | 0.6% | 2024-04-29 | Fix |
| CVE-2024-33551 | XStore Core WordPress plugin unauthenticated SQL injection | 9.8v3.1 | 0.6% | 2024-04-29 | Fix |
| CVE-2024-33548 | WZone WordPress plugin reflected cross-site scripting (XSS) | 7.1CNA v3.1 | 0.4% | 2024-04-29 | Fix |
| CVE-2024-33546 | WZone WordPress plugin arbitrary SQL update execution vulnerability | 9.6CNA v3.1 | 0.5% | 2024-04-29 | |
| CVE-2024-33544 | WZone WordPress plugin unauthenticated SQL injection | 9.3CNA v3.1 | 0.6% | 2024-04-29 | Fix |
| CVE-2024-33542 | Crelly Slider WordPress plugin insecure direct object references (IDOR) | 4.3CISA ADP v3.1 | 0.4% | 2024-04-29 | Fix |
| CVE-2024-33540 | ColorNews WordPress theme cross-site scripting (XSS) | 6.5CNA v3.1 | 0.3% | 2024-04-29 | Fix |
| CVE-2024-33539 | WPZOOM Addons for Elementor WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.4% | 2024-04-29 | Fix |
| CVE-2024-33538 | Assistant Every Day Productivity Apps WordPress plugin sensitive data exposure | 5.3CNA v3.1 | 0.4% | 2024-04-29 | Fix |
| CVE-2024-33537 | WP Portfolio WordPress theme cross-site scripting (XSS) | 6.5CNA v3.1 | 0.4% | 2024-04-29 | Fix |
| CVE-2024-33522 | Privilege escalation in Calico CNI install binary | 6.7CNA v3.1 | 0.2% | 2024-04-29 | Fix |
| CVE-2024-33449 | PDFMyURL service An server-side request forgery | 9.8CISA ADP v3.1 | 0.5% | 2024-04-29 | |
| CVE-2024-33445 | hisiphp code injection | 9.8CISA ADP v3.1 | 1.3% | 2024-04-29 | |
| CVE-2024-33444 | Onethink SQL injection | 9.8CISA ADP v3.1 | 0.9% | 2024-04-29 | |
| CVE-2024-33443 | Onethink code injection | 7.1CISA ADP v3.1 | 0.7% | 2024-04-29 | |
| CVE-2024-33438 | CubeCart file upload | 8.0CISA ADP v3.1 | 1.1% | 2024-04-29 | Exploit codeFix |
| CVE-2024-33435 | Guangzhou Yingshi Electronic Technology Co insecure permissions | 9.8CISA ADP v3.1 | 0.9% | 2024-04-29 | |
| CVE-2024-33401 | DedeCMS cross-site scripting | 4.4CISA ADP v3.1 | 0.2% | 2024-04-29 | |
| CVE-2024-33350 | Taogogo taoCMS path traversal | 9.8CISA ADP v3.1 | 1.8% | 2024-04-29 | |
| CVE-2024-33345 | D-Link DIR-823G null pointer dereference | 6.5CISA ADP v3.1 | 0.8% | 2024-04-29 | |
| CVE-2024-33338 | jizhiCMS cross-site scripting | 7.3CISA ADP v3.1 | 1.0% | 2024-04-29 | |
| CVE-2024-33276 | FME Modules preorderandnotication v.3.1.0 and SQL injection | 9.8CISA ADP v3.1 | 0.6% | 2024-04-29 | |
| CVE-2024-33272 | KnowBand for PrestaShop autosuggest SQL injection | 6.8CISA ADP v3.1 | 0.4% | 2024-04-29 | |
| CVE-2024-33271 | FME Modules eventsmanager ps_customer information disclosure | 7.5CISA ADP v3.1 | 0.5% | 2024-04-29 | |
| CVE-2024-33269 | Prestaddons flashsales SQL injection | 9.8CISA ADP v3.1 | 0.5% | 2024-04-29 | |
| CVE-2024-33268 | Digincube mdgiftproduct SQL injection | 9.8CISA ADP v3.1 | 0.5% | 2024-04-29 | |
| CVE-2024-33266 | Helloshop deliveryorderautoupdate v.2.8.1 and SQL injection | 9.8CISA ADP v3.1 | 0.7% | 2024-04-29 | |
| CVE-2024-32493 | Znuny draft form ID parameter SQL injection | 8.8CISA ADP v3.1 | 0.7% | 2024-04-29 | Fix |
| CVE-2024-32492 | Znuny code injection | 7.1CISA ADP v3.1 | 0.5% | 2024-04-29 | Fix |
| CVE-2024-32491 | Znuny code injection | 9.8CISA ADP v3.1 | 0.7% | 2024-04-29 | Fix |
| CVE-2024-32269 | Yonganda YAD-LOJ denial of service | 7.5CISA ADP v3.1 | 0.7% | 2024-04-29 | |
| CVE-2024-32268 | Tuya Smart Camera U6N network connection component denial of service | 3.3CISA ADP v3.1 | 0.2% | 2024-04-29 | |
| CVE-2024-31823 | Ecommerce-CodeIgniter-Bootstrap code injection | 9.8CISA ADP v3.1 | 1.7% | 2024-04-29 | |
| CVE-2024-31822 | Ecommerce-CodeIgniter-Bootstrap code injection | 9.8CISA ADP v3.1 | 1.9% | 2024-04-29 | |
| CVE-2024-31821 | Ecommerce-CodeIgniter-Bootstrap SQL injection | 8.0CISA ADP v3.1 | 1.1% | 2024-04-29 | |
| CVE-2024-31820 | Ecommerce-CodeIgniter-Bootstrap SQL injection | 9.8CISA ADP v3.1 | 1.9% | 2024-04-29 | |
| CVE-2024-31801 | NEXSYS-ONE path traversal | 7.5CISA ADP v3.1 | 1.1% | 2024-04-29 | |
| CVE-2024-31747 | Yealink VP59 Firmware phone lock vulnerability | 2.1CISA ADP v3.1 | 0.3% | 2024-04-29 | |
| CVE-2024-31705 | Infotel Conseil GLPI OS command injection | 9.8CISA ADP v3.1 | 1.9% | 2024-04-29 | |
| CVE-2024-31621 | Flowise vulnerable to code injection via API/v1 | 7.6CISA ADP v3.1 | 59.9% | 2024-04-29 | NucleiExploit codeFix |
| CVE-2024-28961 | Dell OpenManage Enterprise plaintext password storage | 6.3CNA v3.1 | 0.2% | 2024-04-29 | Fix |
| CVE-2024-28320 | Mayuri K Hospital Management System insecure direct object reference | 7.6CISA ADP v3.1 | 0.5% | 2024-04-29 | |
| CVE-2024-28294 | Limbas SQL injection | 6.5CISA ADP v3.1 | 0.6% | 2024-04-29 | |
| CVE-2024-27518 | SUPERAntiSpyware Professional X restore function privilege escalation | 7.8CISA ADP v3.1 | 0.6% | 2024-04-29 | Exploit code |
| CVE-2024-27322 | The R Project R R statistical programming language deserialization of untrusted data | 8.8CNA v3.1 | 23.4% | 2024-04-29 | Fix |
| CVE-2024-23995 | Beekeeper Studio cross-site scripting | 6.1CISA ADP v3.1 | 1.0% | 2024-04-29 | Exploit code |
| CVE-2024-4310 | Cross-site scripting (XSS) vulnerability in HubBank | 5.4v3.1 | 0.3% | 2024-04-29 | |
| CVE-2024-4309 | SQL injection vulnerability in HubBank | 8.1v3.1 | 0.5% | 2024-04-29 | Exploit code |
| CVE-2024-4308 | SQL injection vulnerability in HubBank | 8.1CNA v3.1 | 0.5% | 2024-04-29 | |
| CVE-2024-4307 | SQL injection vulnerability in HubBank | 8.1v3.1 | 0.5% | 2024-04-29 | |
| CVE-2024-4306 | Unrestricted upload of file with dangerous type vulnerability in HubBank | 8.8NVD v3.1 | 0.7% | 2024-04-29 | |
| CVE-2024-4304 | GT3 Soluciones SWAL reflected cross-site scripting | 5.4CNA v3.1 | 0.3% | 2024-04-29 | |
| CVE-2024-4303 | ArmorX Android APP MFA Bypass | 8.8CNA v3.1 | 0.7% | 2024-04-29 | Fix |
| CVE-2024-4302 | Super 8 livechat SDK cross-site scripting | 6.1CNA v3.1 | 0.4% | 2024-04-29 | Fix |
| CVE-2024-4301 | N-Reporter and N-Cloud from N-Partner os command injection | 8.8CNA v3.1 | 1.1% | 2024-04-29 | Fix |
| CVE-2024-4300 | E-WEBInformationCo. FS-EZViewer(Web) sensitive data exposure | 9.8CNA v3.1 | 0.8% | 2024-04-29 | Fix |
| CVE-2024-4299 | HGiga iSherlock command injection | 7.2CNA v3.1 | 2.1% | 2024-04-29 | Fix |
| CVE-2024-4298 | HGiga iSherlock command injection | 7.2CNA v3.1 | 2.1% | 2024-04-29 | Fix |
| CVE-2024-4297 | HGiga iSherlock arbitrary file download | 4.9CNA v3.1 | 0.7% | 2024-04-29 | Fix |
| CVE-2024-4296 | HGiga iSherlock arbitrary file download | 4.9CNA v3.1 | 0.7% | 2024-04-29 | Fix |
| CVE-2024-3375 | Broken access control in Havelsan's Dialogue | 9.4CNA v3.1 | 0.5% | 2024-04-29 | Fix |
| CVE-2024-3196 | MailCleaner SOAP service dumpConfiguration os command injection | 6.7v3.1 | 1.7% | 2024-04-29 | |
| CVE-2024-3195 | MailCleaner Admin endpoints path traversal | 7.2v3.1 | 1.0% | 2024-04-29 | |
| CVE-2024-3194 | MailCleaner Log file endpoint cross-site scripting | 6.1v3.1 | 0.7% | 2024-04-29 | |
| CVE-2024-3193 | MailCleaner Admin endpoints os command injection | 8.8v3.1 | 4.2% | 2024-04-29 | |
| CVE-2024-3192 | MailCleaner admin interface cross-site scripting | 9.6v3.1 | 1.0% | 2024-04-29 | |
| CVE-2024-3191 | MailCleaner email os command injection | 9.8v3.1 | 5.2% | 2024-04-29 | |
| CVE-2024-3096 | PHP function password_verify can erroneously return true when argument contains NUL | 6.5CNA v3.1 | 1.5% | 2024-04-29 | Fix |
| CVE-2024-2757 | PHP mb_encode_mimeheader runs endlessly for some inputs | 7.5CNA v3.1 | 1.9% | 2024-04-29 | Fix |
| CVE-2024-2756 | PHP __Host-/__Secure- cookie bypass due to partial fix | 6.5CNA v3.1 | 38.1% | 2024-04-29 | Fix |
| CVE-2024-2505 | GamiPress WordPress plugin broken access control | 8.1CISA ADP v3.1 | 0.6% | 2024-04-29 | Fix |
| CVE-2024-1969 | Secomea GateManager heap buffer overflow | 8.2CNA v3.1 | 0.5% | 2024-04-29 | Fix |
| CVE-2024-1905 | Smart Forms WordPress plugin Admin+ stored XSS | 5.9CISA ADP v3.1 | 0.5% | 2024-04-29 | Fix |
| CVE-2024-1874 | PHP command injection via array-ish $command parameter of proc_open | 9.4CNA v3.1 | 32.6% | 2024-04-29 | Exploit codeFix |
| CVE-2024-1579 | Secomea GateManager insufficient seeding of random number generator | 8.1CNA v3.1 | 0.5% | 2024-04-29 | Fix |
| CVE-2024-0840 | Grandstream UCM Series IP PBX HTTP parameter injection | 8.8CNA v3.1 | 0.9% | 2024-04-29 | Fix |
| CVE-2024-33891 | Delinea Secret Server hard-coded cryptographic key | 8.8CNA v3.1 | 1.0% | 2024-04-28 | Fix |
| CVE-2024-33883 | Ejs lacks certain pollution protection | 4.0CISA ADP v3.1 | 0.6% | 2024-04-28 | Exploit codeFix |
| CVE-2024-26928 | Linux kernel CIFS client debug files interface use-after-free | 7.8v3.1 | 0.3% | 2024-04-28 | Fix |
| CVE-2024-26927 | Linux kernel SOF audio firmware parser buffer overflow | 8.4CISA ADP v3.1 | 0.3% | 2024-04-28 | Fix |
| CVE-2024-25050 | IBM i privilege escalation | 8.4CNA v3.1 | 0.3% | 2024-04-28 | Fix |
| CVE-2024-33851 | Mdanter/ecc affected by timing vulnerability in cryptographic side-channels | 4.3CISA ADP v3.1 | 0.4% | 2024-04-27 | Fix |
| CVE-2024-25048 | IBM MQ code execution | 7.5CNA v3.1 | 0.9% | 2024-04-27 | Fix |
| CVE-2024-4294 | PHPGurukul Doctor Appointment Management System view-appointment-detail.php resource injection | 8.8v3.1 | 0.9% | 2024-04-27 | |
| CVE-2024-4293 | PHPGurukul Doctor Appointment Management System cross-site scripting | 5.4v3.1 | 0.6% | 2024-04-27 | |
| CVE-2024-4292 | Contemporary Controls BASrouter BACnet BASRT-B denial of service | 6.5CNA v3.1 | 0.4% | 2024-04-27 | |
| CVE-2024-4291 | Tenda A301 setBlackRule formAddMacfilterRule stack-based overflow | 8.8CNA v3.1 | 1.5% | 2024-04-27 | |
| CVE-2024-4257 | BlueNet Technology Clinical Browsing System deleteStudy.php SQL injection | 6.5v3.1 | 12.1% | 2024-04-27 | Nuclei |
| CVE-2024-4256 | Techkshetra Info Solutions Savsoft Quiz Category page editCategory cross-site scripting | 4.8v3.1 | 0.5% | 2024-04-27 | |
| CVE-2024-4255 | Ruijie RG-UAC gre_edit_commit.php os command injection | 7.2v3.1 | 5.0% | 2024-04-27 | |
| CVE-2024-4252 | Tenda i22 formSetUrlFilterRule stack-based overflow | 8.8v3.1 | 1.5% | 2024-04-27 | |
| CVE-2024-4251 | Tenda i21 DhcpSetSe fromDhcpSetSer stack-based overflow | 8.8v3.1 | 1.3% | 2024-04-27 | |
| CVE-2024-4250 | Tenda i21 wifiSSIDset formwrlSSIDset stack-based overflow | 8.8v3.1 | 1.3% | 2024-04-27 | |
| CVE-2024-4249 | Tenda i21 wifiSSIDget formwrlSSIDget stack-based overflow | 8.8v3.1 | 1.3% | 2024-04-27 | |
| CVE-2024-4248 | Tenda i21 formQosManage_user stack-based overflow | 8.8v3.1 | 1.3% | 2024-04-27 | |
| CVE-2024-4247 | Tenda i21 formQosManage_auto stack-based overflow | 8.8v3.1 | 1.5% | 2024-04-27 | |
| CVE-2024-4246 | Tenda i21 formQosManageDouble_auto stack-based overflow | 8.8v3.1 | 1.3% | 2024-04-27 | |
| CVE-2024-4245 | Tenda i21 formQosManageDouble_user stack-based overflow | 8.8v3.1 | 1.3% | 2024-04-27 | |
| CVE-2024-3342 | Timetable and Event Schedule by MotoPress WordPress plugin SQL injection | 9.9CNA v3.1 | 0.6% | 2024-04-27 | Fix |
| CVE-2024-3309 | Qi Addons For Elementor WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.3% | 2024-04-27 | Fix |
| CVE-2024-3034 | BackUpWordPress WordPress plugin authenticated (Admin+) directory traversal | 2.7CNA v3.1 | 0.7% | 2024-04-27 | Fix |
| CVE-2024-2859 | By default, SANnav OVA is shipped with root user login enabled | 6.8CNA v3.1 | 0.8% | 2024-04-27 | Fix |
| CVE-2024-2838 | WPC Composite Products for WooCommerce WordPress plugin stored cross-site scripting | 6.4CNA v3.1 | 0.3% | 2024-04-27 | Fix |
| CVE-2024-2258 | Form Maker by 10Web WordPress plugin stored Self-based cross-site scripting | 5.4v3.1 | 0.4% | 2024-04-27 | Fix |
| CVE-2024-33697 | CF7 File Download WordPress plugin cross-site scripting (XSS) | 5.9CNA v3.1 | 0.3% | 2024-04-26 | |
| CVE-2024-33696 | WordPress Ad Widget plugin cross-site scripting (XSS) | 5.9CNA v3.1 | 0.3% | 2024-04-26 | |
| CVE-2024-33695 | Fan Page Widget by ThemeNcode WordPress plugin cross-site scripting (XSS) | 5.9CNA v3.1 | 0.3% | 2024-04-26 | Fix |
| CVE-2024-33694 | Meks ThemeForest Smart Widget WordPress plugin cross-site scripting (XSS) | 5.9CNA v3.1 | 0.3% | 2024-04-26 | Fix |
| CVE-2024-33693 | Meks Smart Social Widget WordPress plugin cross-site scripting (XSS) | 5.9CNA v3.1 | 0.3% | 2024-04-26 | Fix |
| CVE-2024-33692 | Smart Recent Posts Widget WordPress plugin cross-site scripting (XSS) | 5.9CNA v3.1 | 0.3% | 2024-04-26 | |
| CVE-2024-33691 | Popup Builder by OptinMonster WordPress plugin cross-site request forgery (CSRF) Notice Dismissal | 4.3CNA v3.1 | 0.2% | 2024-04-26 | Fix |
| CVE-2024-33690 | Financio WordPress theme cross-site request forgery (CSRF) | 4.3CNA v3.1 | 0.2% | 2024-04-26 | Fix |
| CVE-2024-33689 | Radio Station WordPress plugin cross-site request forgery (CSRF) | 4.3CNA v3.1 | 0.2% | 2024-04-26 | Fix |
| CVE-2024-33688 | Teluro WordPress theme cross-site request forgery (CSRF) | 8.8v3.1 | 0.2% | 2024-04-26 | Fix |
| CVE-2024-33683 | Hide Dashboard Notifications WordPress plugin cross-site request forgery (CSRF) | 4.3CNA v3.1 | 0.2% | 2024-04-26 | Fix |
| CVE-2024-33682 | WP GDPR Compliance WordPress plugin cross-site request forgery (CSRF) | 5.4CNA v3.1 | 0.3% | 2024-04-26 | |
| CVE-2024-33680 | MainWP Child Reports WordPress plugin cross-site request forgery (CSRF) | 5.4CNA v3.1 | 0.2% | 2024-04-26 | Fix |
| CVE-2024-33679 | FameTheme Demo Importer WordPress plugin cross-site request forgery (CSRF) | 4.3CNA v3.1 | 0.2% | 2024-04-26 | Fix |
| CVE-2024-33678 | ClickCease Click Fraud Protection WordPress plugin cross-site request forgery (CSRF) | 4.3CNA v3.1 | 0.2% | 2024-04-26 | Fix |
| CVE-2024-33677 | Contact Form 7 Extension For Mailchimp WordPress plugin cross-site request forgery (CSRF) | 4.3CNA v3.1 | 0.2% | 2024-04-26 | Fix |
| CVE-2024-33673 | Veritas Backup Exec DLL hijacking | 7.8CNA v3.1 | 0.2% | 2024-04-26 | Fix |
| CVE-2024-33672 | Veritas NetBackup uncontrolled search path | 7.1v3.1 | 0.2% | 2024-04-26 | Fix |
| CVE-2024-33671 | Veritas Backup Exec external control of a file path | 7.1v3.1 | 0.2% | 2024-04-26 | Fix |
| CVE-2024-33670 | Passbolt API allows HTML injection | 4.3CNA v3.1 | 0.5% | 2024-04-26 | Fix |
| CVE-2024-33669 | Passbolt Browser Extension leaks password information | 6.8v3.1 | 0.6% | 2024-04-26 | Fix |
| CVE-2024-33668 | zammad insecure direct object reference | 9.1CISA ADP v3.1 | 0.4% | 2024-04-26 | Fix |
| CVE-2024-33667 | zammad missing authorization | 6.5CISA ADP v3.1 | 0.6% | 2024-04-26 | Fix |
| CVE-2024-33666 | zammad improper access control | 8.6CISA ADP v3.1 | 0.5% | 2024-04-26 | Fix |
| CVE-2024-33665 | angular-translate translate directive cross-site scripting | 6.1CISA ADP v3.1 | 0.5% | 2024-04-26 | |
| CVE-2024-33664 | python-jose denial of service via compressed JWE content | 5.3CISA ADP v3.1 | 0.8% | 2024-04-26 | Fix |
| CVE-2024-33663 | python-jose algorithm confusion guard bypassed by DER-encoded public keys | 6.5CISA ADP v3.1 | 0.3% | 2024-04-26 | Fix |
| CVE-2024-33661 | portainer open redirect | 9.1CISA ADP v3.1 | 0.6% | 2024-04-26 | |
| CVE-2024-33651 | MF Gig Calendar WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.2% | 2024-04-26 | |
| CVE-2024-33650 | Serious Slider WordPress plugin cross-site request forgery (CSRF) | 4.3CNA v3.1 | 0.2% | 2024-04-26 | Fix |
| CVE-2024-33642 | Advanced Post List WordPress plugin cross-site scripting (XSS) | 5.9CNA v3.1 | 0.4% | 2024-04-26 | Fix |
| CVE-2024-33639 | PopupAlly WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.4% | 2024-04-26 | Fix |
| CVE-2024-33638 | Smart Maintenance Mode WordPress plugin cross-site request forgery (CSRF) | 5.4CNA v3.1 | 0.2% | 2024-04-26 | |
| CVE-2024-33598 | Annual Archive WordPress plugin cross-site scripting (XSS) | 5.9CNA v3.1 | 0.4% | 2024-04-26 | |
| CVE-2024-33344 | D-Link DIR-822 command injection | 9.8CISA ADP v3.1 | 19.9% | 2024-04-26 | |
| CVE-2024-33343 | D-Link DIR-822 OS command injection | 8.8CISA ADP v3.1 | 8.3% | 2024-04-26 | |
| CVE-2024-33342 | D-Link DIR-822 command injection | 7.5CISA ADP v3.1 | 1.6% | 2024-04-26 | |
| CVE-2024-33260 | JerryScript improper access control | 5.1CISA ADP v3.1 | 0.2% | 2024-04-26 | |
| CVE-2024-33259 | JerryScript resource exhaustion | 5.5CISA ADP v3.1 | 0.3% | 2024-04-26 | |
| CVE-2024-33258 | JerryScript memory corruption | 7.1CISA ADP v3.1 | 0.3% | 2024-04-26 | |
| CVE-2024-33255 | JerryScript reachable assertion | 6.2CISA ADP v3.1 | 0.3% | 2024-04-26 | |
| CVE-2024-32957 | Page Builder: Live Composer WordPress plugin broken access control | 4.7CNA v3.1 | 0.4% | 2024-04-26 | Fix |
| CVE-2024-32887 | Reflected XSS in sidekiq | 5.5CNA v3.1 | 0.6% | 2024-04-26 | Fix |
| CVE-2024-32884 | Byron gitoxide gix-transport indirect code execution via malicious username | 6.4CNA v3.1 | 0.5% | 2024-04-26 | Fix |
| CVE-2024-32883 | MCUboot injection attack of unprotected TLV values | 7.7CNA v3.1 | 0.1% | 2024-04-26 | |
| CVE-2024-32881 | Unauthorized access to GET/SET of Slack Bot Tokens in Danswer | 9.8CNA v3.1 | 0.8% | 2024-04-26 | Fix |
| CVE-2024-32880 | pyLoad allows upload to arbitrary folder lead to RCE | 9.1CNA v3.1 | 1.4% | 2024-04-26 | |
| CVE-2024-32878 | ggerganov llama.cpp gguf_init_from_file use of uninitialized variable | 7.1CNA v3.1 | 0.7% | 2024-04-26 | Fix |
| CVE-2024-32868 | ZITADEL's Improper Lockout Mechanism leads to MFA Bypass | 6.5CNA v3.1 | 0.5% | 2024-04-26 | Fix |
| CVE-2024-32829 | Data Tables Generator by Supsystic WordPress plugin broken access control | 4.3CNA v3.1 | 0.4% | 2024-04-26 | Fix |
| CVE-2024-32828 | Flexible Shipping WordPress plugin Octolize missing authorization | 4.3CNA v3.1 | 0.3% | 2024-04-26 | Fix |
| CVE-2024-32826 | VK Block Patterns WordPress plugin broken access control | 5.3CNA v3.1 | 0.4% | 2024-04-26 | Fix |
| CVE-2024-32822 | Reviews Plus WordPress plugin broken access control | 4.3CNA v3.1 | 0.3% | 2024-04-26 | Fix |
| CVE-2024-32766 | QNAP QTS, QuTS hero and QuTScloud command injection | 10.0CNA v3.1 | 2.3% | 2024-04-26 | Fix |
| CVE-2024-32764 | QNAP myQNAPcloud Link missing authentication | 9.9CNA v3.1 | 0.4% | 2024-04-26 | Fix |
| CVE-2024-32651 | dgtlmoon changedetection.io server side template injection in Jinja2 allows remote command execution | 10.0CNA v3.1 | 83.6% | 2024-04-26 | NucleiExploit codeFix |
| CVE-2024-32406 | inducer relate server-side template injection | 7.5CISA ADP v3.1 | 1.1% | 2024-04-26 | |
| CVE-2024-32404 | inducer relate server-side template injection | 6.0CISA ADP v3.1 | 0.8% | 2024-04-26 | |
| CVE-2024-32046 | Mattermost detailed error discloses full file path with dev mode off | 4.3CNA v3.1 | 0.5% | 2024-04-26 | Fix |
| CVE-2024-31828 | LavaLite CMS cross-site scripting | 6.1CISA ADP v3.1 | 0.5% | 2024-04-26 | |
| CVE-2024-31755 | cJSON null pointer dereference | 7.6CISA ADP v3.1 | 0.6% | 2024-04-26 | Fix |
| CVE-2024-31741 | 1234n MiniCMS cross-site scripting | 6.1CISA ADP v3.1 | 0.4% | 2024-04-26 | |
| CVE-2024-31601 | Panabit Panalog exportpdf.php vulnerability | 9.8CISA ADP v3.1 | 0.4% | 2024-04-26 | |
| CVE-2024-31551 | CmsEasy lib/admin/image.admin.php path traversal | 7.5CISA ADP v3.1 | 0.7% | 2024-04-26 | |
| CVE-2024-31502 | Insurance Management System new staff endpoint privilege escalation | 8.1CISA ADP v3.1 | 0.6% | 2024-04-26 | |
| CVE-2024-30804 | ASUS Fan Xpert DeviceIoControl interface arbitrary code execution | 9.8CISA ADP v3.1 | 0.8% | 2024-04-26 | Exploit code |
| CVE-2024-28328 | Asus RT-N12+ router CSV injection | 5.4CISA ADP v3.1 | 0.4% | 2024-04-26 | |
| CVE-2024-28327 | Asus RT-N12+ B1 router stores user passwords in plaintext, which could allow local attackers to obtain unauthorized access and modify router settings. | 8.4CISA ADP v3.1 | 0.1% | 2024-04-26 | |
| CVE-2024-28326 | Asus RT-N12+ B1 and RT-N12 D1 routers UART interface vulnerability | 6.8CISA ADP v3.1 | 0.3% | 2024-04-26 | |
| CVE-2024-28325 | Asus RT-N12+ B1 router stores credentials in cleartext, which could allow local attackers to obtain unauthorized access and modify router settings. | 6.1CISA ADP v3.1 | 0.1% | 2024-04-26 | |
| CVE-2024-28322 | PuneethReddyHC Event Management /event-management-master/backend/register.php SQL injection | 9.8CISA ADP v3.1 | 0.8% | 2024-04-26 | |
| CVE-2024-27124 | QNAP QTS, QuTS hero and QuTScloud OS command injection | 7.5CNA v3.1 | 1.4% | 2024-04-26 | Fix |
| CVE-2024-25343 | Tenda N300 improper privilege management | 9.1CISA ADP v3.1 | 0.5% | 2024-04-26 | |
| CVE-2024-22633 | Setor Informatica Sistema Inteligente para Laboratorios hprinter parameter handler code injection | 9.8CISA ADP v3.1 | 0.9% | 2024-04-26 | |
| CVE-2024-22632 | Setor Informatica Sistema Inteligente para Laboratorios hmsg parameter handler code injection | 9.8CISA ADP v3.1 | 1.0% | 2024-04-26 | |
| CVE-2024-22091 | Mattermost excessive resource consumption due to lack to request path size limits | 3.1CNA v3.1 | 0.5% | 2024-04-26 | Fix |
| CVE-2024-21905 | QNAP QTS, QuTS hero and QuTScloud integer overflow | 6.5CNA v3.1 | 0.5% | 2024-04-26 | Fix |
| CVE-2024-4244 | Tenda W9 DhcpSetSer fromDhcpSetSer stack-based overflow | 8.8v3.1 | 1.3% | 2024-04-26 | |
| CVE-2024-4243 | Tenda W9 wifiSSIDset formwrlSSIDset stack-based overflow | 8.8v3.1 | 1.3% | 2024-04-26 | |
| CVE-2024-4242 | Tenda W9 wifiSSIDget formwrlSSIDget stack-based overflow | 8.8v3.1 | 1.3% | 2024-04-26 | |
| CVE-2024-4241 | Tenda W9 formQosManageDouble_auto stack-based overflow | 8.8v3.1 | 1.3% | 2024-04-26 | |
| CVE-2024-4240 | Tenda W9 formQosManageDouble_user stack-based overflow | 8.8v3.1 | 1.5% | 2024-04-26 | |
| CVE-2024-4239 | Tenda AX1806 SetRebootTimer formSetRebootTimer stack-based overflow | 8.8v3.1 | 1.5% | 2024-04-26 | |
| CVE-2024-4238 | Tenda AX1806 SetOnlineDevName formSetDeviceName stack-based overflow | 8.8v3.1 | 1.5% | 2024-04-26 | |
| CVE-2024-4237 | Tenda AX1806 execCommand R7WebsSecurityHandler stack-based overflow | 8.8v3.1 | 1.5% | 2024-04-26 | |
| CVE-2024-4236 | Tenda AX1803 SetDDNSCfg formSetSysToolDDNS stack-based overflow | 8.8v3.1 | 14.9% | 2024-04-26 | |
| CVE-2024-4235 | Netgear DG834Gv5 web management interface cleartext storage | 4.9v3.1 | 0.6% | 2024-04-26 | |
| CVE-2024-4234 | Filterable Portfolio WordPress plugin cross-site scripting (XSS) | 5.9CNA v3.1 | 0.4% | 2024-04-26 | |
| CVE-2024-4198 | Mattermost fails to fully validate role changes | 2.7CNA v3.1 | 0.5% | 2024-04-26 | Fix |
| CVE-2024-4195 | Mattermost allows team admins to promote guests to team admins | 2.7CNA v3.1 | 0.5% | 2024-04-26 | Fix |
| CVE-2024-4183 | Mattermost fails to limit the number of active sessions | 4.3CNA v3.1 | 0.6% | 2024-04-26 | Fix |
| CVE-2024-4182 | Mattermost crashes web clients via a malformed custom status | 4.3CNA v3.1 | 0.6% | 2024-04-26 | Fix |
| CVE-2024-4163 | Privilege escalation on Skylab IIoT Gateway (IGX) | 8.0CNA v3.1 | 0.4% | 2024-04-26 | |
| CVE-2024-4056 | Denial of service condition in M-Files Server | 7.5CNA v3.1 | 0.8% | 2024-04-26 | Fix |
| CVE-2024-3962 | Product Addons and Fields for WooCommerce WordPress plugin unauthenticated arbitrary file upload | 9.8CNA v3.1 | 1.4% | 2024-04-26 | Fix |
| CVE-2024-3890 | Happy Addons for Elementor WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.3% | 2024-04-26 | Fix |
| CVE-2024-3682 | WP STAGING and WP STAGING Pro WordPress plugin information disclosure | 5.3CNA v3.1 | 0.6% | 2024-04-26 | Fix |
| CVE-2024-3678 | Blog2Social: Social Media Auto Post and Scheduler WordPress plugin information exposure | 5.3CNA v3.1 | 0.6% | 2024-04-26 | Fix |
| CVE-2024-3188 | Shortcodes Ultimate WordPress plugin Contributor+ stored XSS | 6.3CISA ADP v3.1 | 0.4% | 2024-04-26 | Fix |
| CVE-2024-3154 | Red Hat OpenShift Container Platform cri-o: Arbitrary command injection via pod annotation | 7.2CNA v3.1 | 1.4% | 2024-04-26 | Fix |
| CVE-2024-3076 | MM-email2image WordPress plugin stored XSS via CSRF | 3.8CISA ADP v3.1 | 0.2% | 2024-04-26 | |
| CVE-2024-3075 | MM-email2image WordPress plugin Contributor+ stored XSS | 8.1CISA ADP v3.1 | 0.6% | 2024-04-26 | |
| CVE-2024-3060 | ENL Newsletter WordPress plugin Admin+ SQL injection | 4.5CISA ADP v3.1 | 0.5% | 2024-04-26 | |
| CVE-2024-3059 | ENL Newsletter WordPress plugin Campaign deletion via CSRF | 5.7CISA ADP v3.1 | 0.3% | 2024-04-26 | |
| CVE-2024-3058 | ENL Newsletter WordPress plugin stored XSS via CSRF | 5.4CISA ADP v3.1 | 0.2% | 2024-04-26 | |
| CVE-2024-3052 | Z/IP Gateway S2 Nonce Get denial of service | 7.5CNA v3.1 | 0.5% | 2024-04-26 | Fix |
| CVE-2024-3051 | Z/IP Gateway Device Reset Locally denial of service | 7.5CNA v3.1 | 0.5% | 2024-04-26 | |
| CVE-2024-3048 | Bannerlid WordPress plugin reflected XSS | 5.5CISA ADP v3.1 | 0.4% | 2024-04-26 | |
| CVE-2024-2920 | WP-Members Membership WordPress plugin Unprotected Storage of Potentially sensitive files | 5.3CNA v3.1 | 0.5% | 2024-04-26 | Fix |
| CVE-2024-2908 | The Call Now Button WordPress plugin before 1.4.7 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup). | 4.3CISA ADP v3.1 | 0.7% | 2024-04-26 | Fix |
| CVE-2024-2837 | WP Chat App WordPress plugin Admin+ stored XSS | 5.4CISA ADP v3.1 | 0.5% | 2024-04-26 | Fix |
| CVE-2024-2603 | Salon booking system WordPress plugin Editor+ stored XSS via email settings | 6.3CISA ADP v3.1 | 0.5% | 2024-04-26 | Fix |
| CVE-2024-2439 | Salon booking system WordPress plugin Editor+ stored XSS | 4.8CISA ADP v3.1 | 0.4% | 2024-04-26 | Fix |
| CVE-2024-2429 | Salon booking system WordPress plugin settings update via CSRF | 4.3CISA ADP v3.1 | 0.2% | 2024-04-26 | Fix |
| CVE-2024-2310 | WP Google Review Slider WordPress plugin Admin+ stored XSS | 5.9CISA ADP v3.1 | 0.3% | 2024-04-26 | Fix |
| CVE-2024-2159 | Sassy Social Share WordPress plugin Contributor+ stored XSS | 4.7CISA ADP v3.1 | 0.5% | 2024-04-26 | Fix |
| CVE-2024-1789 | WP SMTP WordPress plugin SQL injection | 7.2CNA v3.1 | 0.5% | 2024-04-26 | Fix |
| CVE-2024-0905 | Fancy Product Designer WordPress plugin reflected cross-site scripting | 6.3CISA ADP v3.1 | 0.5% | 2024-04-26 | Fix |
| CVE-2024-0740 | Eclipse Target Management command injection | 9.8CNA v3.1 | 1.2% | 2024-04-26 | Fix |
| CVE-2024-33592 | Radio Player WordPress plugin server side request forgery (SSRF) | 5.4CNA v3.1 | 0.3% | 2024-04-25 | Fix |
| CVE-2024-33247 | oretnom23 Employee Task Management System SQL injection | 8.8v3.1 | 0.7% | 2024-04-25 | |
| CVE-2024-32961 | Blocksy WordPress theme cross-site scripting (XSS) | 5.4v3.1 | 0.3% | 2024-04-25 | Fix |
| CVE-2024-32676 | LoginPress Pro WordPress plugin Captcha bypass vulnerability | 5.3CNA v3.1 | 0.4% | 2024-04-25 | Fix |
| CVE-2024-32649 | vyper performs double eval of the argument of sqrt | 5.3CNA v3.1 | 0.5% | 2024-04-25 | Fix |
| CVE-2024-32648 | vyper default functions don't respect nonreentrancy keys | 5.3CNA v3.1 | 0.4% | 2024-04-25 | Fix |
| CVE-2024-32647 | vyper performs double eval of raw_args in create_from_blueprint | 5.3CNA v3.1 | 0.5% | 2024-04-25 | Fix |
| CVE-2024-32646 | vyper performs double eval of the slice args when buffer from adhoc locations | 5.3CNA v3.1 | 0.5% | 2024-04-25 | Fix |
| CVE-2024-32645 | vyper performs incorrect topic logging in raw_log | 5.3CNA v3.1 | 0.5% | 2024-04-25 | Fix |
| CVE-2024-32481 | Vyper's range(start, start + N) reverts for negative numbers | 5.3CNA v3.1 | 0.8% | 2024-04-25 | Fix |
| CVE-2024-32467 | metersphere meteraphsere vulnerable to unauthorized viewing by workspace members | 5.7CNA v3.1 | 0.5% | 2024-04-25 | Fix |
| CVE-2024-32358 | jpress code injection | 7.5CISA ADP v3.1 | 0.7% | 2024-04-25 | Fix |
| CVE-2024-32324 | Szlbt Lbt-t300-t400 Shenzhen Libituo Technology Co buffer overflow | 7.8CISA ADP v3.1 | 0.3% | 2024-04-25 | |
| CVE-2024-32236 | CmsEasy insecure storage of sensitive information | 3.5CISA ADP v3.1 | 0.4% | 2024-04-25 | |
| CVE-2024-31615 | ThinkCMF unrestricted file upload | 9.8CISA ADP v3.1 | 0.7% | 2024-04-25 | |
| CVE-2024-31610 | code-projects Simple School Management System function for employees to upload avatars file upload | 6.3CISA ADP v3.1 | 0.4% | 2024-04-25 | |
| CVE-2024-31609 | Bosscms cross-site scripting | 7.1CISA ADP v3.1 | 0.4% | 2024-04-25 | |
| CVE-2024-31574 | Twcms cross-site scripting | 5.0CISA ADP v3.1 | 0.3% | 2024-04-25 | |
| CVE-2024-31266 | Advanced Order Export For WooCommerce WordPress plugin remote code execution (RCE) | 9.1CNA v3.1 | 0.7% | 2024-04-25 | Fix |
| CVE-2024-30939 | Yealink VP59 Firmware improper authentication | 6.8CISA ADP v3.1 | 0.4% | 2024-04-25 | |
| CVE-2024-30890 | Ed01-cms cross-site scripting | 4.7CISA ADP v3.1 | 0.4% | 2024-04-25 | |
| CVE-2024-30560 | DX-Watermark WordPress plugin CSRF to arbitrary file upload and XSS | 9.6CNA v3.1 | 0.3% | 2024-04-25 | |
| CVE-2024-29660 | DedeCMS cross-site scripting | 5.3CISA ADP v3.1 | 0.2% | 2024-04-25 | |
| CVE-2024-29205 | Ivanti Connect Secure web component improper check for exceptional conditions | 7.5CNA v3.0 | 1.6% | 2024-04-25 | Fix |
| CVE-2024-28241 | GLPI-Agent MSI installer privilege escalation | 7.3CNA v3.1 | 0.2% | 2024-04-25 | Fix |
| CVE-2024-28240 | GLPI-Agent's MSI package installation permits local users to change agent configuration | 7.3CNA v3.1 | 0.2% | 2024-04-25 | Fix |
| CVE-2024-25917 | WP Setup Wizard WordPress plugin Auth. full Database download vulnerability | 8.8CNA v3.1 | 0.6% | 2024-04-25 | Fix |
| CVE-2024-25624 | iris-web vulnerable to server side template injection in reports | 6.8CNA v3.1 | 0.9% | 2024-04-25 | Fix |
| CVE-2024-25583 | Crafted responses can lead to a denial of service in Recursor if recursive forwarding is configured | 7.5CNA v3.1 | 0.8% | 2024-04-25 | Fix |
| CVE-2024-25569 | Grassroot DICOM out-of-bounds read | 6.5CNA v3.1 | 1.1% | 2024-04-25 | Fix |
| CVE-2024-25026 | IBM WebSphere Application Server denial of service | 5.9CNA v3.1 | 0.8% | 2024-04-25 | Fix |
| CVE-2024-23527 | Ivanti Avalanche WL out-of-bounds read | 7.5v3.1 | 2.0% | 2024-04-25 | Fix |
| CVE-2024-22391 | Grassroot DICOM heap-based buffer overflow | 9.8v3.1 | 1.4% | 2024-04-25 | Fix |
| CVE-2024-22373 | Grassroot DICOM out-of-bounds write | 9.8v3.1 | 1.6% | 2024-04-25 | Fix |
| CVE-2024-22144 | Anti-Malware Security and Brute-Force Firewall WordPress plugin Eli Scheetz code injection | 9.0CNA v3.1 | 0.9% | 2024-04-25 | Fix |
| CVE-2024-4175 | Improper input validation vulnerability in Hyperion Web Server | 5.4CNA v3.1 | 0.3% | 2024-04-25 | |
| CVE-2024-4174 | Cross-site scripting (XSS) vulnerability in Hyperion Web Server | 5.4CNA v3.1 | 0.3% | 2024-04-25 | |
| CVE-2024-4173 | SANnav versions exposes Kafka in the wan interface | 7.6CNA v3.1 | 0.6% | 2024-04-25 | Fix |
| CVE-2024-4172 | idcCMS cross-site request forgery | 4.3CNA v3.1 | 0.4% | 2024-04-25 | |
| CVE-2024-4171 | Tenda W30E WizardHandle fromWizardHandle stack-based overflow | 8.8CNA v3.1 | 1.4% | 2024-04-25 | |
| CVE-2024-4170 | Tenda 4G300 sub_429A30 stack-based overflow | 8.8v3.1 | 1.7% | 2024-04-25 | |
| CVE-2024-4169 | Tenda 4G300 sub_4279CC stack-based overflow | 8.8v3.1 | 1.8% | 2024-04-25 | |
| CVE-2024-4168 | Tenda 4G300 sub_4260F0 stack-based overflow | 8.8v3.1 | 1.8% | 2024-04-25 | |
| CVE-2024-4167 | Tenda 4G300 sub_422AA4 stack-based overflow | 8.8v3.1 | 1.8% | 2024-04-25 | |
| CVE-2024-4166 | Tenda 4G300 sub_41E858 stack-based overflow | 8.8v3.1 | 1.8% | 2024-04-25 | |
| CVE-2024-4165 | Tenda G3 modifyDhcpRule stack-based overflow | 9.8v3.1 | 1.5% | 2024-04-25 | |
| CVE-2024-4164 | Tenda G3 ModifyPppAuthWhiteMac formModifyPppAuthWhiteMac stack-based overflow | 9.8v3.1 | 1.5% | 2024-04-25 | |
| CVE-2024-4161 | Brocade SANnav syslog traffic sent in clear-text | 8.6CNA v3.1 | 0.5% | 2024-04-25 | Fix |
| CVE-2024-4159 | Broadcom Brocade SANnav Docker information ports information disclosure | 4.3CNA v3.1 | 0.5% | 2024-04-25 | Fix |
| CVE-2024-4077 | UDesign WordPress theme reflected cross-site scripting (XSS) | 7.1CNA v3.1 | 0.4% | 2024-04-25 | |
| CVE-2024-4035 | Photo Gallery - GT3 Image Gallery and Gutenberg Block Gallery WordPress plugin cross-site scripting | 6.4CNA v3.1 | 0.3% | 2024-04-25 | Fix |
| CVE-2024-4024 | Authentication bypass by assumed-immutable data in GitLab | 7.3CNA v3.1 | 14.9% | 2024-04-25 | Fix |
| CVE-2024-4006 | Incorrect authorization in GitLab | 4.3CNA v3.1 | 0.5% | 2024-04-25 | Fix |
| CVE-2024-3994 | Tutor LMS eLearning and online course solution WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.4% | 2024-04-25 | Fix |
| CVE-2024-3988 | Sina Extension for Elementor WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.4% | 2024-04-25 | Fix |
| CVE-2024-3929 | Content Views WordPress plugin stored cross-site scripting | 6.4CNA v3.1 | 0.4% | 2024-04-25 | Fix |
| CVE-2024-3893 | RadiusTheme Classified Listing attachment deletion AJAX action missing authorization | 4.3v3.1 | 0.4% | 2024-04-25 | Fix |
| CVE-2024-3733 | Essential Addons for Elementor WordPress plugin information disclosure | 5.3CNA v3.1 | 0.5% | 2024-04-25 | Fix |
| CVE-2024-3730 | Simple Membership WordPress plugin stored cross-site scripting | 5.4CNA v3.1 | 0.3% | 2024-04-25 | Fix |
| CVE-2024-3625 | Red Hat mirror registry for Red Hat OpenShift mirror-registry: Redis password stored in plain-text | 7.3CNA v3.1 | 0.3% | 2024-04-25 | |
| CVE-2024-3624 | Red Hat Mirror Registry Quay database configuration plaintext password storage | 7.3CNA v3.1 | 0.3% | 2024-04-25 | |
| CVE-2024-3623 | Red Hat Mirror Registry database secret key plaintext password storage | 6.5CNA v3.1 | 0.4% | 2024-04-25 | |
| CVE-2024-3622 | Red Hat mirror registry for Red Hat OpenShift Mirror-registry: Plain-text default CSRF secret key | 8.8CNA v3.1 | 0.5% | 2024-04-25 | |
| CVE-2024-3508 | Red Hat Trusted Profile Analyzer Bombastic API denial of service | 4.3CNA v3.1 | 0.5% | 2024-04-25 | |
| CVE-2024-3265 | WP Advanced Search WordPress plugin Admin+ SQL injection | 4.7CISA ADP v3.1 | 0.4% | 2024-04-25 | |
| CVE-2024-2907 | AGCA Custom Dashboard and Login Page WordPress plugin Admin+ stored XSS via Image URL | 6.8CISA ADP v3.1 | 0.5% | 2024-04-25 | Fix |
| CVE-2024-2905 | Red Hat Enterprise Linux 10 Rpm-ostree: World-readable /etc/shadow file | 6.2CNA v3.1 | 0.3% | 2024-04-25 | Fix |
| CVE-2024-2829 | Inefficient regular expression complexity in GitLab | 7.5CNA v3.1 | 26.0% | 2024-04-25 | Fix |
| CVE-2024-2467 | Red Hat Enterprise Linux 6 perl-crypt-openssl-rsa: Side-channel attack in pkcs#1 padding mode | 5.9CNA v3.1 | 0.5% | 2024-04-25 | Fix |
| CVE-2024-2434 | Improper limitation of a pathname to a restricted directory (path traversal) in GitLab | 8.5CNA v3.1 | 23.2% | 2024-04-25 | Fix |
| CVE-2024-1726 | Quarkus: Security checks in resteasy reactive may trigger a denial of service | 5.3CNA v3.1 | 0.7% | 2024-04-25 | Fix |
| CVE-2024-1657 | Red Hat Ansible Automation Platform event-driven Ansible WebSocket connection cleartext transmission | 8.1CNA v3.1 | 0.4% | 2024-04-25 | Fix |
| CVE-2024-1347 | Authentication bypass by spoofing in GitLab | 4.3CNA v3.1 | 0.5% | 2024-04-25 | Fix |
| CVE-2024-1139 | Red Hat OpenShift Container Platform cluster-monitoring-operator: Credentials leak | 7.7CNA v3.1 | 0.9% | 2024-04-25 | Fix |
| CVE-2024-1102 | Jberet: Jberet-core logging database credentials | 6.5CNA v3.1 | 0.8% | 2024-04-25 | Fix |
| CVE-2024-0916 | Unauthenticated remote code execution in UvDesk Community | 10.0CNA v3.1 | 1.0% | 2024-04-25 | |
| CVE-2024-0874 | Red Hat OpenShift Container Platform coredns: Cd bit response is cached and served later | 5.3CNA v3.1 | 0.8% | 2024-04-25 | Fix |
| CVE-2024-33531 | cdbattags lua-resty-jwt JWT signature verification vulnerability | 8.1CISA ADP v3.1 | 0.5% | 2024-04-24 | |
| CVE-2024-32958 | Slash Admin WordPress plugin CSRF to XSS | 7.1CNA v3.1 | 0.2% | 2024-04-24 | Fix |
| CVE-2024-32956 | Rometheme RTMKit cross-site scripting | 6.5CNA v3.1 | 0.3% | 2024-04-24 | Fix |
| CVE-2024-32955 | FV Flowplayer Video Player WordPress plugin server side request forgery (SSRF) | 4.9CNA v3.1 | 0.3% | 2024-04-24 | Fix |
| CVE-2024-32954 | Newsletters WordPress plugin arbitrary file upload | 9.1CNA v3.1 | 0.6% | 2024-04-24 | Fix |
| CVE-2024-32953 | Newsletters WordPress plugin sensitive data exposure | 7.5CNA v3.1 | 0.7% | 2024-04-24 | Fix |
| CVE-2024-32952 | Max Addons Pro for Bricks WordPress plugin reflected cross-site scripting (XSS) | 7.1CNA v3.1 | 0.4% | 2024-04-24 | Fix |
| CVE-2024-32951 | Max Addons Pro for Bricks WordPress plugin unauthenticated plugin settings reset vulnerability | 6.5CNA v3.1 | 0.4% | 2024-04-24 | Fix |
| CVE-2024-32950 | WP Media Category Management WordPress plugin cross-site scripting (XSS) | 7.1CNA v3.1 | 0.4% | 2024-04-24 | Fix |
| CVE-2024-32948 | ARMember Membership WordPress plugin broken access control | 9.1CNA v3.1 | 0.6% | 2024-04-24 | Fix |
| CVE-2024-32947 | WP ADA Compliance Check Basic WordPress plugin cross-site request forgery (CSRF) | 4.3CNA v3.1 | 0.2% | 2024-04-24 | Fix |
| CVE-2024-32879 | python-social-auth social-app-django social-auth-app-django improper handling of case sensitivity | 4.9CNA v3.1 | 0.6% | 2024-04-24 | Fix |
| CVE-2024-32876 | NewPipe has potential security vulnerability when importing settings | 8.5CNA v3.1 | 0.3% | 2024-04-24 | Fix |
| CVE-2024-32872 | Umbraco Workflow's Backoffice users can execute arbitrary SQL | 5.5CNA v3.1 | 0.4% | 2024-04-24 | Fix |
| CVE-2024-32836 | WP-Lister Lite for eBay WordPress plugin arbitrary file upload | 9.1CNA v3.1 | 0.8% | 2024-04-24 | Fix |
| CVE-2024-32835 | Export and Import Users and Customers WordPress plugin deserialization of untrusted data | 5.4CNA v3.1 | 0.4% | 2024-04-24 | Fix |
| CVE-2024-32834 | WooCommerce Shipping Label WordPress plugin cross-site scripting (XSS) | 5.9CNA v3.1 | 0.3% | 2024-04-24 | Fix |
| CVE-2024-32833 | List Custom Taxonomy Widget WordPress plugin cross-site scripting (XSS) | 5.9CNA v3.1 | 0.3% | 2024-04-24 | Fix |
| CVE-2024-32825 | Simply Static WordPress plugin sensitive data exposure via Log file | 7.5CNA v3.1 | 2.0% | 2024-04-24 | NucleiFix |
| CVE-2024-32823 | Rate My Post WordPress plugin insecure direct object references (IDOR) | 5.3CNA v3.1 | 0.4% | 2024-04-24 | Fix |
| CVE-2024-32819 | Culqi WordPress plugin server side request forgery (SSRF) | 4.9CNA v3.1 | 0.3% | 2024-04-24 | Fix |
| CVE-2024-32817 | Import and export users and customers WordPress plugin PHP object injection | 4.4CNA v3.1 | 0.4% | 2024-04-24 | Fix |
| CVE-2024-32816 | PickPlugins Post Grid information disclosure | 7.5CNA v3.1 | 0.7% | 2024-04-24 | Fix |
| CVE-2024-32815 | All-in-one Like Widget WordPress plugin cross-site scripting (XSS) | 5.9CNA v3.1 | 0.3% | 2024-04-24 | Fix |
| CVE-2024-32812 | Podlove Podcast Publisher WordPress plugin server side request forgery (SSRF) | 5.4v3.1 | 0.4% | 2024-04-24 | Fix |
| CVE-2024-32808 | ProfileGrid WordPress plugin insecure direct object reference (IDOR) | 8.8v3.1 | 0.4% | 2024-04-24 | Fix |
| CVE-2024-32806 | Headline Analyzer WordPress plugin cross-site request forgery (CSRF) | 4.3CNA v3.1 | 0.2% | 2024-04-24 | Fix |
| CVE-2024-32803 | SuperFaktura WooCommerce WordPress plugin server side request forgery (SSRF) | 6.4CNA v3.1 | 0.4% | 2024-04-24 | Fix |
| CVE-2024-32801 | Widget Post Slider WordPress plugin cross-site scripting (XSS) | 5.9CNA v3.1 | 0.3% | 2024-04-24 | Fix |
| CVE-2024-32796 | WP Fusion Lite WordPress plugin sensitive data exposure | 4.3CNA v3.1 | 0.5% | 2024-04-24 | Fix |
| CVE-2024-32795 | WordPress WPCal.io plugin cross-site request forgery (CSRF) | 4.3CNA v3.1 | 0.2% | 2024-04-24 | Fix |
| CVE-2024-32794 | Paid Memberships Pro WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.2% | 2024-04-24 | Fix |
| CVE-2024-32793 | Paid Memberships Pro WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.2% | 2024-04-24 | Fix |
| CVE-2024-32791 | Premium Addons for Elementor WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.3% | 2024-04-24 | Fix |
| CVE-2024-32789 | Seers WordPress plugin cross-site request forgery (CSRF) to XSS | 7.1CNA v3.1 | 0.2% | 2024-04-24 | Fix |
| CVE-2024-32788 | FG Joomla to Wordpress plugin sensitive data exposure via Log file | 5.3CNA v3.1 | 0.5% | 2024-04-24 | Fix |
| CVE-2024-32785 | The Pack Elementor addons WordPress plugin cross-site request forgery (CSRF) to XSS | 6.1NVD v3.1 | 0.3% | 2024-04-24 | Fix |
| CVE-2024-32782 | HT Mega WordPress plugin sensitive data exposure | 6.5v3.1 | 0.9% | 2024-04-24 | Fix |
| CVE-2024-32781 | Email Customizer for WooCommerce WordPress plugin sensitive data exposure | 7.5CNA v3.1 | 0.7% | 2024-04-24 | Fix |
| CVE-2024-32780 | VikRentCar Car Rental Management System WordPress plugin sensitive data exposure via Invoices | 5.9CNA v3.1 | 0.6% | 2024-04-24 | Fix |
| CVE-2024-32775 | Embed Google Photos album WordPress plugin server side request forgery (SSRF) | 4.9CNA v3.1 | 0.3% | 2024-04-24 | Fix |
| CVE-2024-32773 | Royal Elementor Kit WordPress theme cross-site request forgery (CSRF) | 4.3CNA v3.1 | 0.2% | 2024-04-24 | Fix |
| CVE-2024-32772 | ProfileGrid WordPress plugin insecure direct object references (IDOR) | 8.8v3.1 | 0.4% | 2024-04-24 | Fix |
| CVE-2024-32728 | Paid Membership Subscriptions WordPress plugin cross-site request forgery (CSRF) | 4.3CNA v3.1 | 0.2% | 2024-04-24 | Fix |
| CVE-2024-32726 | Frontend Dashboard WordPress plugin sensitive data exposure on PII | 7.5CNA v3.1 | 0.7% | 2024-04-24 | Fix |
| CVE-2024-32723 | Advanced Floating Content WordPress plugin cross-site scripting (XSS) | 5.9CNA v3.1 | 0.3% | 2024-04-24 | Fix |
| CVE-2024-32722 | Coupon and Discount Code Reveal Button WordPress plugin cross-site scripting (XSS) | 5.9CNA v3.1 | 0.3% | 2024-04-24 | Fix |
| CVE-2024-32721 | Jeg Elementor Kit WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.4% | 2024-04-24 | Fix |
| CVE-2024-32718 | The Pack Elementor addons WordPress plugin server side request forgery (SSRF) | 5.4v3.1 | 0.3% | 2024-04-24 | Fix |
| CVE-2024-32716 | StreamWeasels Twitch Integration WordPress plugin API sensitive data exposure | 5.3CNA v3.1 | 0.5% | 2024-04-24 | Fix |
| CVE-2024-32711 | myCred WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.3% | 2024-04-24 | Fix |
| CVE-2024-32710 | WP-Recall WordPress plugin SQL injection | 8.5CNA v3.1 | 0.6% | 2024-04-24 | Fix |
| CVE-2024-32709 | WP-Recall WordPress plugin SQL injection | 9.3CNA v3.1 | 5.8% | 2024-04-24 | NucleiFix |
| CVE-2024-32707 | Image Slider WordPress plugin cross-site scripting (XSS) | 5.9CNA v3.1 | 0.3% | 2024-04-24 | Fix |
| CVE-2024-32706 | ARForms WordPress plugin Subscriber+ SQL injection | 8.8v3.1 | 0.6% | 2024-04-24 | Fix |
| CVE-2024-32702 | ARForms WordPress plugin reflected cross-site scripting (XSS) | 6.1NVD v3.1 | 0.4% | 2024-04-24 | Fix |
| CVE-2024-32699 | YITH WooCommerce Compare WordPress plugin cross-site request forgery (CSRF) | 4.3CNA v3.1 | 0.2% | 2024-04-24 | Fix |
| CVE-2024-32678 | TrackShip for WooCommerce WordPress plugin broken access control | 5.3CNA v3.1 | 0.4% | 2024-04-24 | Fix |
| CVE-2024-32677 | LoginPress Pro WordPress plugin Unauth. License Activation/Deactivation vulnerability | 6.5CNA v3.1 | 0.5% | 2024-04-24 | Fix |
| CVE-2024-32675 | Order Limit for WooCommerce WordPress plugin broken access control | 6.5CNA v3.1 | 0.4% | 2024-04-24 | Fix |
| CVE-2024-32432 | Ovic Addon Toolkit WordPress plugin broken access control | 4.3CNA v3.1 | 0.5% | 2024-04-24 | |
| CVE-2024-32078 | FV Player WordPress plugin Unvalidated Redirects and Forwards vulnerability | 4.1CNA v3.1 | 0.3% | 2024-04-24 | Fix |
| CVE-2024-32051 | RoamWiFi R10 sensitive information in log files | 6.5CISA ADP v3.1 | 0.3% | 2024-04-24 | |
| CVE-2024-31406 | RoamWiFi R10 active debug code | 8.8CISA ADP v3.1 | 0.3% | 2024-04-24 | |
| CVE-2024-28977 | Dell Repository Manager (DRM) path traversal | 3.3CNA v3.1 | 0.2% | 2024-04-24 | Fix |
| CVE-2024-28976 | Dell Repository Manager (DRM) path traversal | 8.8CNA v3.1 | 0.2% | 2024-04-24 | Fix |
| CVE-2024-28963 | Dell Wyse Proprietary OS (Modern ThinOS) information disclosure | 6.2CNA v3.1 | 0.2% | 2024-04-24 | Fix |
| CVE-2024-28825 | Checkmk brute-force protection ineffective for some login methods | 5.9CNA v3.1 | 0.5% | 2024-04-24 | Fix |
| CVE-2024-28613 | Mayuri K PHP Task Management System SQL injection | 9.8v3.1 | 0.6% | 2024-04-24 | |
| CVE-2024-27791 | Apple macOS memory corruption | 7.1v3.1 | 0.2% | 2024-04-24 | Fix |
| CVE-2024-26926 | Linux kernel binder object offset validation vulnerability | 7.8CNA v3.1 | 0.4% | 2024-04-24 | Fix |
| CVE-2024-26925 | Linux kernel netfilter garbage collection sequencing improper locking | 7.8CNA v3.1 | 0.3% | 2024-04-24 | Fix |
| CVE-2024-26924 | Linux kernel nftables pipapo set null pointer dereference | 7.8CNA v3.1 | 0.8% | 2024-04-24 | Fix |
| CVE-2024-26923 | Linux kernel AF_UNIX garbage collector race condition | 7.8CNA v3.1 | 0.2% | 2024-04-24 | Fix |
| CVE-2024-23271 | Apple Safari logic flaw | 6.5NVD v3.1 | 0.8% | 2024-04-24 | Fix |
| CVE-2024-23228 | Apple iOS and iPadOS information disclosure | 3.3NVD v3.1 | 0.3% | 2024-04-24 | Fix |
| CVE-2024-20359 | Cisco ASA and FTD privilege escalation | 6.0CNA v3.1 | 19.4% | 2024-04-24 | KEVKCVFix |
| CVE-2024-20358 | Cisco Secure Firewall Adaptive Security Appliance (ASA) Software OS command injection | 6.0CNA v3.1 | 0.7% | 2024-04-24 | Fix |
| CVE-2024-20356 | Cisco Unified Computing System (Standalone) OS command injection | 8.7CNA v3.1 | 29.6% | 2024-04-24 | Exploit codeFix |
| CVE-2024-20353 | Cisco ASA and FTD denial of service | 8.6CNA v3.1 | 70.7% | 2024-04-24 | KEVKCVFix |
| CVE-2024-20313 | Cisco IOS XE Software buffer overflow | 7.4CNA v3.1 | 0.3% | 2024-04-24 | Fix |
| CVE-2024-20295 | Cisco Unified Computing System (Standalone) OS command injection | 8.8CNA v3.1 | 1.2% | 2024-04-24 | Fix |
| CVE-2024-4141 | Out-of-bounds array write in Xpdf due to incorrect bounds check | 2.9CNA v3.1 | 0.2% | 2024-04-24 | Fix |
| CVE-2024-4127 | Tenda W15E guestWifiRuleRefresh stack-based overflow | 8.8v3.1 | 1.8% | 2024-04-24 | |
| CVE-2024-4126 | Tenda W15E SetSysTimeCfg formSetSysTime stack-based overflow | 8.8v3.1 | 1.8% | 2024-04-24 | |
| CVE-2024-4125 | Tenda W15E setStaticRoute formSetStaticRoute stack-based overflow | 8.8v3.1 | 1.8% | 2024-04-24 | |
| CVE-2024-4124 | Tenda W15E SetRemoteWebManage formSetRemoteWebManage stack-based overflow | 8.8v3.1 | 1.7% | 2024-04-24 | |
| CVE-2024-4123 | Tenda W15E SetPortMapping formSetPortMapping stack-based overflow | 8.8v3.1 | 1.7% | 2024-04-24 | |
| CVE-2024-4122 | Tenda W15E setDebugCfg formSetDebugCfg stack-based overflow | 8.8v3.1 | 1.7% | 2024-04-24 | |
| CVE-2024-4121 | Tenda W15E formQOSRuleDel stack-based overflow | 8.8v3.1 | 1.7% | 2024-04-24 | |
| CVE-2024-4120 | Tenda W15E modifyIpMacBind formIPMacBindModify stack-based overflow | 8.8v3.1 | 1.7% | 2024-04-24 | |
| CVE-2024-4119 | Tenda W15E delIpMacBind formIPMacBindDel stack-based overflow | 8.8v3.1 | 1.7% | 2024-04-24 | |
| CVE-2024-4118 | Tenda W15E addIpMacBind formIPMacBindAdd stack-based overflow | 8.8v3.1 | 1.7% | 2024-04-24 | |
| CVE-2024-4117 | Tenda W15E DelPortMapping formDelPortMapping stack-based overflow | 8.8v3.1 | 1.7% | 2024-04-24 | |
| CVE-2024-4116 | Tenda W15E DelDhcpRule formDelDhcpRule stack-based overflow | 8.8v3.1 | 1.7% | 2024-04-24 | |
| CVE-2024-4115 | Tenda W15E AddDnsForward formAddDnsForward stack-based overflow | 8.8v3.1 | 1.7% | 2024-04-24 | |
| CVE-2024-4114 | Tenda TX9 PowerSaveSet sub_42C014 stack-based overflow | 8.8v3.1 | 1.3% | 2024-04-24 | |
| CVE-2024-4113 | Tenda TX9 SetSysTimeCfg sub_42D4DC stack-based overflow | 8.8v3.1 | 1.5% | 2024-04-24 | |
| CVE-2024-4112 | Tenda TX9 SetVirtualServerCfg sub_42CB94 stack-based overflow | 8.8v3.1 | 1.7% | 2024-04-24 | Emerging Threats |
| CVE-2024-4111 | Tenda TX9 SetLEDCfg sub_42BD7C stack-based overflow | 8.8v3.1 | 1.5% | 2024-04-24 | |
| CVE-2024-4093 | SourceCodester Simple Subscription Website view_application.php SQL injection | 8.8v3.1 | 0.7% | 2024-04-24 | |
| CVE-2024-3371 | Insufficient validation of external input in Compass may enable MITM attacks | 7.1CNA v3.1 | 0.2% | 2024-04-24 | Fix |
| CVE-2024-3261 | Strong Testimonials WordPress plugin Contributor+ stored XSS | 4.8CISA ADP v3.1 | 0.4% | 2024-04-24 | Fix |
| CVE-2024-2972 | Floating Chat Widget WordPress plugin Editor+ stored XSS | 3.8CISA ADP v3.1 | 0.4% | 2024-04-24 | Fix |
| CVE-2024-2404 | Better Comments WordPress plugin Subscriber+ stored XSS | 5.4NVD v3.1 | 0.4% | 2024-04-24 | Fix |
| CVE-2024-2402 | Better Comments WordPress plugin Admin+ stored XSS | 5.4CISA ADP v3.1 | 0.4% | 2024-04-24 | Fix |
| CVE-2024-1756 | WooCommerce Customers Manager WordPress plugin Subscriber+ email disclosure | 6.5CISA ADP v3.1 | 0.3% | 2024-04-24 | Fix |
| CVE-2024-1743 | WooCommerce Customers Manager WordPress plugin reflected XSS | 5.9CISA ADP v3.1 | 0.3% | 2024-04-24 | Fix |
| CVE-2024-0151 | Insufficient argument checking in Secure state Entry functions in software using Cortex-M Security Extensions (CMSE), that has been compiled using toolchains that implement 'Arm v8-M Security Extensions Requirements on Development Tools' prior to version 1.4, allows an attacker to pass values to Sec | 6.5CISA ADP v3.1 | 0.4% | 2024-04-24 | Fix |
| CVE-2024-33217 | Tenda FH1206 stack-based buffer overflow | 7.5CISA ADP v3.1 | 0.6% | 2024-04-23 | |
| CVE-2024-33215 | Tenda FH1206 stack-based buffer overflow | 9.8CISA ADP v3.1 | 0.7% | 2024-04-23 | |
| CVE-2024-33214 | Tenda FH1206 buffer overflow | 7.5CISA ADP v3.1 | 0.6% | 2024-04-23 | |
| CVE-2024-33213 | Tenda FH1206 stack-based buffer overflow | 6.5CISA ADP v3.1 | 0.4% | 2024-04-23 | |
| CVE-2024-33212 | Tenda FH1206 stack-based buffer overflow | 8.8CISA ADP v3.1 | 0.7% | 2024-04-23 | |
| CVE-2024-33211 | Tenda FH1206 stack-based buffer overflow | 7.3CISA ADP v3.1 | 0.4% | 2024-04-23 | |
| CVE-2024-32875 | Hugo doesn't escape markdown title in internal render hooks | 6.1CNA v3.1 | 0.5% | 2024-04-23 | Fix |
| CVE-2024-32869 | Hono vulnerable to Restricted directory traversal in serveStatic with deno | 5.3CNA v3.1 | 0.6% | 2024-04-23 | Fix |
| CVE-2024-32866 | Conform contains prototype pollution vulnerability in `parseWith...` function | 8.6CNA v3.1 | 0.7% | 2024-04-23 | Fix |
| CVE-2024-32679 | Shared Files WordPress plugin broken access control | 5.3CNA v3.1 | 0.4% | 2024-04-23 | Fix |
| CVE-2024-32662 | FreeRDP rdp_redirection_read_base64_wchar out of bound read | 7.5CNA v3.1 | 0.8% | 2024-04-23 | Fix |
| CVE-2024-32661 | FreeRDP rdp_write_logon_info_v1 null access | 7.5CNA v3.1 | 1.2% | 2024-04-23 | Fix |
| CVE-2024-32660 | FreeRDP zgfx_decompress out of memory vulnerability | 7.5CNA v3.1 | 1.2% | 2024-04-23 | Fix |
| CVE-2024-32659 | FreeRDP freerdp_image_copy out of bound read | 9.8CNA v3.1 | 1.2% | 2024-04-23 | Fix |
| CVE-2024-32658 | FreeRDP ExtractRunLengthRegular* out of bound read | 9.8CNA v3.1 | 1.4% | 2024-04-23 | Fix |
| CVE-2024-32482 | Tillitis TKey Signer possible RAM disclosure vulnerability | 2.2CNA v3.1 | 0.1% | 2024-04-23 | Fix |
| CVE-2024-32258 | fceux network server path traversal | 8.8CISA ADP v3.1 | 1.9% | 2024-04-23 | Exploit code |
| CVE-2024-31857 | wpmudev Forminator cross-site scripting | 5.4CISA ADP v3.1 | 0.6% | 2024-04-23 | Fix |
| CVE-2024-31804 | Terratec DMX_6Fire USB v.1.23.0.02 An unquoted search path | 6.7CISA ADP v3.1 | 0.7% | 2024-04-23 | Exploit code |
| CVE-2024-31616 | An issue discovered in RG-RSR10-01G-T(W)-S and RG-RSR10-01G-T(WA)-S routers with firmware version RSR10-01G-T-S_RSR_3.0(1)B9P2, Release(07150910) allows attackers to execute arbitrary code via the common_quick_config.lua file. | 8.8CISA ADP v3.1 | 0.8% | 2024-04-23 | |
| CVE-2024-31208 | Synapse's V2 state resolution weakness allows DoS from remote room members | 6.5CNA v3.1 | 1.5% | 2024-04-23 | Fix |
| CVE-2024-31077 | wpmudev Forminator SQL injection | 7.2CISA ADP v3.1 | 30.4% | 2024-04-23 | Fix |
| CVE-2024-30886 | HadSky remotelink function stored cross-site scripting | 5.4CISA ADP v3.1 | 0.3% | 2024-04-23 | |
| CVE-2024-30800 | Dronecode PX4 Drone Autopilot geofence enforcement vulnerability | 5.6CISA ADP v3.1 | 0.2% | 2024-04-23 | |
| CVE-2024-28890 | wpmudev Forminator unrestricted file upload | 5.3CISA ADP v3.1 | 0.7% | 2024-04-23 | Fix |
| CVE-2024-28627 | Flipsnack reader.gz.js file information disclosure | 7.5CISA ADP v3.1 | 0.4% | 2024-04-23 | |
| CVE-2024-28130 | OFFIS DCMTK incorrect type conversion | 7.5CNA v3.1 | 1.7% | 2024-04-23 | Fix |
| CVE-2024-26922 | Linux kernel AMDGPU buffer object mapping vulnerability | 7.8CNA v3.1 | 0.3% | 2024-04-23 | Fix |
| CVE-2024-21979 | AMD Software: Adrenalin Edition An out-of-bounds write | 5.3CNA v3.1 | 0.2% | 2024-04-23 | Fix |
| CVE-2024-21972 | AMD Software: Adrenalin Edition An out-of-bounds write | 5.3CNA v3.1 | 0.2% | 2024-04-23 | Fix |
| CVE-2024-21511 | MySQL2 for Node arbitrary code injection | 9.8CNA v3.1 | 1.0% | 2024-04-23 | Fix |
| CVE-2024-4075 | Kashipara Online Furniture Shopping Ecommerce Website login.php cross-site scripting | 6.1v3.1 | 0.6% | 2024-04-23 | |
| CVE-2024-4074 | Kashipara Online Furniture Shopping Ecommerce Website prodInfo.php cross-site scripting | 6.1v3.1 | 0.6% | 2024-04-23 | |
| CVE-2024-4073 | Kashipara Online Furniture Shopping Ecommerce Website prodList.php cross-site scripting | 5.4v3.1 | 0.5% | 2024-04-23 | |
| CVE-2024-4072 | Kashipara Online Furniture Shopping Ecommerce Website search.php cross-site scripting | 5.4v3.1 | 0.5% | 2024-04-23 | |
| CVE-2024-4071 | Kashipara Online Furniture Shopping Ecommerce Website prodInfo.php SQL injection | 8.8v3.1 | 0.7% | 2024-04-23 | |
| CVE-2024-4070 | Kashipara Online Furniture Shopping Ecommerce Website prodList.php SQL injection | 7.5v3.1 | 0.6% | 2024-04-23 | |
| CVE-2024-4069 | Kashipara Online Furniture Shopping Ecommerce Website search.php SQL injection | 7.5v3.1 | 0.6% | 2024-04-23 | |
| CVE-2024-4066 | Tenda AC8 AdvSetMacMtuWan fromAdvSetMacMtuWan stack-based overflow | 8.8v3.1 | 1.8% | 2024-04-23 | |
| CVE-2024-4065 | Tenda AC8 SetRebootTimer formSetRebootTimer stack-based overflow | 8.8v3.1 | 1.6% | 2024-04-23 | |
| CVE-2024-4064 | Tenda AC8 execCommand R7WebsSecurityHandler stack-based overflow | 8.8v3.1 | 1.8% | 2024-04-23 | |
| CVE-2024-4063 | EZVIZ CS-C6-21WFR-8 Davinci application certificate validation | 3.7CNA v3.1 | 0.3% | 2024-04-23 | |
| CVE-2024-4062 | Hualai Xiaofang iSC5 improper certificate validation | 3.7CNA v3.1 | 0.4% | 2024-04-23 | |
| CVE-2024-4031 | MEVO WEBCAM APP Windows unquoted service path | 4.4CNA v3.1 | 0.2% | 2024-04-23 | Fix |
| CVE-2024-3911 | Welotec: Clickjacking vulnerability in WebUI | 6.5CISA ADP v3.1 | 0.5% | 2024-04-23 | Fix |
| CVE-2024-3889 | Royal Elementor Addons and Templates WordPress plugin stored cross-site scripting | 6.4CNA v3.1 | 0.3% | 2024-04-23 | Fix |
| CVE-2024-3732 | GeoDirectory WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.3% | 2024-04-23 | Fix |
| CVE-2024-3665 | Rank Math SEO with AI SEO Tools WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.5% | 2024-04-23 | Fix |
| CVE-2024-3664 | Quick Featured Images WordPress plugin unauthorized access | 4.3CNA v3.1 | 0.3% | 2024-04-23 | Fix |
| CVE-2024-3491 | Schema and Structured Data for WP and AMP WordPress plugin stored cross-site scripting | 6.4CNA v3.1 | 0.3% | 2024-04-23 | Fix |
| CVE-2024-3293 | rtMedia for WordPress, BuddyPress and bbPress plugin SQL injection | 8.8CNA v3.1 | 1.4% | 2024-04-23 | Exploit codeFix |
| CVE-2024-3185 | Rapid7 Insight Agent Sensitive Key Exposed to Local Users | 6.8CNA v3.1 | 0.2% | 2024-04-23 | |
| CVE-2024-2799 | Royal Elementor Addons and Templates WordPress plugin stored cross-site scripting | 6.4CNA v3.1 | 0.4% | 2024-04-23 | Fix |
| CVE-2024-2798 | Royal Elementor Addons and Templates WordPress plugin DOM-based stored cross-site scripting | 6.4CNA v3.1 | 0.3% | 2024-04-23 | Fix |
| CVE-2024-2760 | Bkav Home v7816, build 2403161130 Kernel memory leak | 5.5CNA v3.1 | 0.2% | 2024-04-23 | |
| CVE-2024-2493 | Session hijacking vulnerability in Hitachi Ops Center Analyzer | 7.5CNA v3.1 | 0.3% | 2024-04-23 | Fix |
| CVE-2024-2477 | wpDiscuz WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.3% | 2024-04-23 | Fix |
| CVE-2024-1241 | Watchdog Antivirus denial of service | 5.5CNA v3.1 | 0.2% | 2024-04-23 | |
| CVE-2024-0900 | Elespare elespare_create_post function missing authorization | 4.3CNA v3.1 | 0.4% | 2024-04-23 | Fix |
| CVE-2024-32698 | Happy Addons for Elementor WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.3% | 2024-04-22 | Fix |
| CVE-2024-32697 | HelloAsso WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.3% | 2024-04-22 | Fix |
| CVE-2024-32696 | AI Infographic Maker OpenAI WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.3% | 2024-04-22 | Fix |
| CVE-2024-32695 | Language Switcher for Transposh WordPress plugin reflected cross-site scripting (XSS) | 7.1CNA v3.1 | 0.4% | 2024-04-22 | Fix |
| CVE-2024-32694 | 3D FlipBook, PDF Viewer, PDF Embedder WordPress plugin reflected cross-site scripting (XSS) | 7.1CNA v3.1 | 0.4% | 2024-04-22 | Fix |
| CVE-2024-32693 | Automatic WordPress plugin Multiple cross-site request forgery (CSRF) | 7.6CNA v3.1 | 0.2% | 2024-04-22 | Fix |
| CVE-2024-32691 | Active Products Tables for WooCommerce WordPress plugin broken access control | 5.3CNA v3.1 | 0.4% | 2024-04-22 | Fix |
| CVE-2024-32690 | RSS Feed Widget WordPress plugin cross-site scripting (XSS) | 5.9CNA v3.1 | 0.3% | 2024-04-22 | Fix |
| CVE-2024-32688 | MyRewards WordPress plugin broken access control | 6.5CNA v3.1 | 0.5% | 2024-04-22 | Fix |
| CVE-2024-32687 | WPC Frequently Bought Together for WooCommerce WordPress plugin broken access control | 4.3CNA v3.1 | 0.4% | 2024-04-22 | Fix |
| CVE-2024-32684 | WP Ultimate Review WordPress plugin broken access control on Review | 7.5v3.1 | 0.4% | 2024-04-22 | Fix |
| CVE-2024-32682 | Prime Slider WordPress plugin broken access control | 8.8v3.1 | 0.5% | 2024-04-22 | Fix |
| CVE-2024-32681 | Prime Slider WordPress plugin broken access control | 8.8v3.1 | 0.4% | 2024-04-22 | Fix |
| CVE-2024-32657 | Hydra has persistent XSS vulnerability serving HTML build outputs | 4.6CNA v3.1 | 0.5% | 2024-04-22 | Fix |
| CVE-2024-32656 | Ant Media Server vulnerable to local privilege escalation | 7.8CNA v3.1 | 0.2% | 2024-04-22 | Fix |
| CVE-2024-32653 | Skylot jadx package name handling vulnerability | 6.1CNA v3.1 | 0.2% | 2024-04-22 | Fix |
| CVE-2024-32480 | LibreNMS's Time-based blind SQL injection leads to database extraction | 7.2CNA v3.1 | 20.3% | 2024-04-22 | Fix |
| CVE-2024-32479 | LibreNMS's improper sanitization on service template name leads to stored XSS | 7.1CNA v3.1 | 34.1% | 2024-04-22 | Fix |
| CVE-2024-32461 | LibreNMS vulnerable to time-based SQL injection that leads to database extraction | 7.1CNA v3.1 | 19.1% | 2024-04-22 | Fix |
| CVE-2024-32460 | FreeRDP out-of-bounds read in interleaved_decompress | 8.1CNA v3.1 | 1.9% | 2024-04-22 | Fix |
| CVE-2024-32459 | FreeRDP out-of-bounds read in ncrush_decompress | 9.8CNA v3.1 | 3.7% | 2024-04-22 | Exploit codeFix |
| CVE-2024-32458 | FreeRDP out-of-bounds read in planar_skip_plane_rle | 9.8CNA v3.1 | 1.9% | 2024-04-22 | Fix |
| CVE-2024-32418 | Flusity improper privilege management | 9.8CISA ADP v3.1 | 1.1% | 2024-04-22 | |
| CVE-2024-32407 | inducer relate server-side request forgery | 8.8CISA ADP v3.1 | 1.1% | 2024-04-22 | |
| CVE-2024-32405 | inducer relate cross-site scripting | 2.6CISA ADP v3.1 | 0.5% | 2024-04-22 | |
| CVE-2024-32399 | RaidenMAILD Mail Server v.4.9.4 and path traversal | 7.6CISA ADP v3.1 | 3.2% | 2024-04-22 | NucleiExploit code |
| CVE-2024-32394 | Ruijie RG-RSR10-01G-T(WA)-S remote code execution | 8.8CISA ADP v3.1 | 12.6% | 2024-04-22 | |
| CVE-2024-32368 | Insecure Permission vulnerability in Agasta Sanketlife 2.0 Pocket 12-Lead ECG Monitor FW Version 3.0 allows a local attacker to cause a denial of service via the Bluetooth Low Energy (BLE) component. | 7.3CISA ADP v3.1 | 0.3% | 2024-04-22 | |
| CVE-2024-32238 | H3C ER8300G2-X management system login interface insufficiently protected credentials | 9.8CISA ADP v3.1 | 52.9% | 2024-04-22 | NucleiExploit code |
| CVE-2024-32041 | FreeRDP OutOfBound Read in zgfx_decompress_segment | 9.8CNA v3.1 | 1.9% | 2024-04-22 | Fix |
| CVE-2024-32040 | FreeRDP vulnerable to integer underflow in nsc_rle_decode | 8.1CNA v3.1 | 1.9% | 2024-04-22 | Fix |
| CVE-2024-32039 | FreeRDP integer overflow and OutOfBound Write in clear_decompress_residual_data | 9.8CNA v3.1 | 2.3% | 2024-04-22 | Fix |
| CVE-2024-31666 | Flusity code injection | 9.8CISA ADP v3.1 | 1.7% | 2024-04-22 | Exploit code |
| CVE-2024-31545 | oretnom23 Computer Laboratory Management System SQL injection | 9.4CISA ADP v3.1 | 0.6% | 2024-04-22 | |
| CVE-2024-31036 | emqx nanomq heap-based buffer overflow | 6.8CISA ADP v3.1 | 0.3% | 2024-04-22 | |
| CVE-2024-30799 | Dronecode PX4 Drone Autopilot buffer overflow | 4.4v3.1 | 0.3% | 2024-04-22 | |
| CVE-2024-29661 | DedeCMS A file upload | 9.8CISA ADP v3.1 | 0.7% | 2024-04-22 | |
| CVE-2024-29376 | Sylius has potential cross-site scripting vulnerability | 6.4CISA ADP v3.1 | 0.4% | 2024-04-22 | Fix |
| CVE-2024-29368 | moziloCMS file handling module arbitrary file upload | 6.5CISA ADP v3.1 | 0.8% | 2024-04-22 | |
| CVE-2024-28722 | Innovaphone myPBX v.14r1 cross-site scripting | 6.3CISA ADP v3.1 | 0.5% | 2024-04-22 | |
| CVE-2024-28717 | OpenStack Storlets arbitrary code execution | 4.9CISA ADP v3.1 | 0.9% | 2024-04-22 | Fix |
| CVE-2024-28699 | pdf2json v0.70 A buffer overflow | 7.8CISA ADP v3.1 | 0.4% | 2024-04-22 | |
| CVE-2024-28436 | D-Link DAP products DAP-2230 cross-site scripting | 6.1CISA ADP v3.1 | 0.6% | 2024-04-22 | |
| CVE-2024-27574 | Trainme Academy version Ichin v.1.3.2 SQL injection | 9.1CISA ADP v3.1 | 0.6% | 2024-04-22 | |
| CVE-2024-27349 | Apache HugeGraph-Server: Bypass whitelist in Auth mode | 9.1CISA ADP v3.1 | 1.0% | 2024-04-22 | Fix |
| CVE-2024-27348 | Apache HugeGraph-Server improper access control | 9.8NVD v3.1 | 99.2% | 2024-04-22 | KEVNucleiMetasploitEmerging ThreatsExploit codeFix |
| CVE-2024-27347 | Apache HugeGraph-Hubble: SSRF in Hubble connection page | 5.3CISA ADP v3.1 | 1.0% | 2024-04-22 | Fix |
| CVE-2024-22856 | Axefinance Axe Credit Portal Save Favorite Search function SQL injection | 5.4CISA ADP v3.1 | 0.3% | 2024-04-22 | |
| CVE-2024-22815 | Tormach Pathpilot Controller denial of service | 5.3CISA ADP v3.1 | 0.2% | 2024-04-22 | |
| CVE-2024-22813 | Tormach Pathpilot Controller hard-coded credentials | 4.4CISA ADP v3.1 | 0.4% | 2024-04-22 | |
| CVE-2024-22811 | Tormach Pathpilot Controller denial of service | 8.2CISA ADP v3.1 | 0.4% | 2024-04-22 | |
| CVE-2024-22809 | Tormach PathPilot Controller G code shared folder improper access control | 6.5CISA ADP v3.1 | 0.3% | 2024-04-22 | |
| CVE-2024-22808 | Tormach Pathpilot Controller insecure storage of sensitive information | 7.5CISA ADP v3.1 | 0.5% | 2024-04-22 | |
| CVE-2024-22807 | Tormach Pathpilot Controller improper access control | 6.5CISA ADP v3.1 | 0.4% | 2024-04-22 | |
| CVE-2024-4040 | CrushFTP VFS sandbox escape | 10.0NVD v3.1 | 99.5% | 2024-04-22 | KEVNucleiMetasploitEmerging ThreatsExploit codeFix |
| CVE-2024-4026 | Cross-site scripting in the Holded application | 4.6CNA v3.1 | 0.3% | 2024-04-22 | Fix |
| CVE-2024-3645 | Essential Addons for Elementor Pro WordPress plugin stored cross-site scripting | 6.4CNA v3.1 | 0.3% | 2024-04-22 | Fix |
| CVE-2024-3177 | Kubernetes bypassing mountable secrets policy imposed by the ServiceAccount admission plugin | 2.7CNA v3.1 | 2.2% | 2024-04-22 | Exploit codeFix |
| CVE-2024-29733 | Apache Airflow FTP Provider: FTP_TLS instance with unverified SSL context | 2.7CISA ADP v3.1 | 0.6% | 2024-04-21 | Fix |
| CVE-2024-29217 | Apache Answer: XSS vulnerability when changing personal website | 4.6CISA ADP v3.1 | 1.0% | 2024-04-21 | Fix |
| CVE-2024-4022 | Keenetic KN-1010/KN-1410/KN-1711/KN-1810/KN-1910 Version Data version.js information disclosure | 5.3CNA v3.1 | 0.6% | 2024-04-21 | |
| CVE-2024-4021 | Keenetic KN-1010 information disclosure | 5.3CNA v3.1 | 0.6% | 2024-04-21 | |
| CVE-2024-4020 | Tenda FH1206 addressNat fromAddressNat buffer overflow | 8.8v3.1 | 1.6% | 2024-04-20 | |
| CVE-2024-4019 | Byzoro Smart S80 Management Platform importhtml.php deserialization | 6.3CNA v3.1 | 1.0% | 2024-04-20 | |
| CVE-2024-4014 | hCaptcha for WordPress plugin stored cross-site scripting | 6.4CNA v3.1 | 0.3% | 2024-04-20 | Fix |
| CVE-2024-1730 | Prime Slider WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.3% | 2024-04-20 | Fix |
| CVE-2024-1057 | ShopLentor WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.3% | 2024-04-20 | Fix |
| CVE-2024-32683 | WP Ultimate Review WordPress plugin insecure direct object references (IDOR) | 7.5v3.1 | 0.5% | 2024-04-19 | Fix |
| CVE-2024-32652 | @Hono/node-server contains denial of service risk when receiving host header that cannot be parsed | 7.5CNA v3.1 | 0.9% | 2024-04-19 | Fix |
| CVE-2024-32650 | Denial of service vulnerability in Rustls library | 7.5CNA v3.1 | 0.9% | 2024-04-19 | Fix |
| CVE-2024-32644 | Evmos improper synchronization | 9.1CNA v3.1 | 0.9% | 2024-04-19 | Fix |
| CVE-2024-32478 | Git Credential Manager Debian package incorrect permission assignment | 6.9CNA v3.1 | 0.2% | 2024-04-19 | Fix |
| CVE-2024-32409 | SEMCMS cross-site scripting | 7.1CISA ADP v3.1 | 0.5% | 2024-04-19 | |
| CVE-2024-32392 | CMSimple cross-site scripting | 4.5CISA ADP v3.1 | 0.8% | 2024-04-19 | |
| CVE-2024-32391 | MacCMS cross-site scripting | 7.3CISA ADP v3.1 | 0.9% | 2024-04-19 | |
| CVE-2024-32206 | WuzhiCMS component \affiche\admin\index.php stored cross-site scripting | 4.6CISA ADP v3.1 | 0.4% | 2024-04-19 | |
| CVE-2024-32166 | Webidsupport WeBid insecure direct object reference | 8.8CISA ADP v3.1 | 0.7% | 2024-04-19 | |
| CVE-2024-32038 | Wazuh Analysis Engine Event Decoder heap-based buffer overflow remote code execution | 9.8CNA v3.1 | 1.0% | 2024-04-19 | Fix |
| CVE-2024-31994 | Mealie vulnerable to a DoS in recipe image importer (GHSL-2023-228) | 6.5NVD v3.1 | 0.3% | 2024-04-19 | Fix |
| CVE-2024-31993 | Mealie vulnerable to a GET-based SSRF in recipe image importer (GHSL-2023-227) | 4.5NVD v3.1 | 0.4% | 2024-04-19 | Fix |
| CVE-2024-31992 | Mealie contains a DoS vulnerability in recipe importer | 6.5NVD v3.1 | 0.7% | 2024-04-19 | Fix |
| CVE-2024-31991 | Mealie vulnerable to a GET-based SSRF in recipe importer (GHSL-2023-225) | 3.5NVD v3.1 | 0.3% | 2024-04-19 | Fix |
| CVE-2024-31846 | Italtel Embrace improper access control | 7.5CISA ADP v3.1 | 0.7% | 2024-04-19 | |
| CVE-2024-31841 | Italtel Embrace arbitrary file read | 7.5CISA ADP v3.1 | 0.8% | 2024-04-19 | |
| CVE-2024-31750 | F-logic DataCube3 SQL injection | 9.8CISA ADP v3.1 | 19.3% | 2024-04-19 | Nuclei |
| CVE-2024-31744 | In Jasper 4.2.2, the jpc_streamlist_remove function in src/libjasper/jpc/jpc_dec.c:2407 has an assertion failure vulnerability, allowing attackers to cause a denial of service attack through a specific image file. | 7.5CISA ADP v3.1 | 0.7% | 2024-04-19 | Fix |
| CVE-2024-31587 | SecuSTATION Camera device configuration download path traversal | 6.5CISA ADP v3.1 | 0.2% | 2024-04-19 | |
| CVE-2024-31584 | Linux Foundation PyTorch out-of-bounds read | 5.5CISA ADP v3.1 | 0.4% | 2024-04-19 | Fix |
| CVE-2024-31552 | CuteHttpFileServer path traversal | 7.1CISA ADP v3.1 | 0.2% | 2024-04-19 | |
| CVE-2024-31547 | oretnom23 Computer Laboratory Management System SQL injection | 9.1CISA ADP v3.1 | 0.6% | 2024-04-19 | |
| CVE-2024-31546 | oretnom23 Computer Laboratory Management System SQL injection | 9.8CISA ADP v3.1 | 0.7% | 2024-04-19 | |
| CVE-2024-31450 | Owncast vulnerable to arbitrary file deletion in emoji.go (GHSL-2023-277) | 6.5NVD v3.1 | 1.0% | 2024-04-19 | Fix |
| CVE-2024-30974 | Tramyardg Autoexpress SQL injection | 7.3CISA ADP v3.1 | 0.3% | 2024-04-19 | |
| CVE-2024-30938 | SEMCMS SQL injection | 9.8CISA ADP v3.1 | 0.8% | 2024-04-19 | |
| CVE-2024-29991 | Microsoft Edge (Chromium-based) security feature bypass | 5.0CNA v3.1 | 0.6% | 2024-04-19 | Fix |
| CVE-2024-29969 | Brocade SANnav TLS/SSL weak message authentication code ciphers are added by default for port 18082 | 7.5CNA v3.1 | 0.3% | 2024-04-19 | Fix |
| CVE-2024-29968 | Brocade SANnav information disclosure | 7.7CNA v3.1 | 0.5% | 2024-04-19 | Fix |
| CVE-2024-29967 | Brocade SANnav Docker mount points vulnerability | 4.4CNA v3.1 | 0.2% | 2024-04-19 | Fix |
| CVE-2024-29966 | Brocade SANnav documentation hard-coded credentials | 7.5CNA v3.1 | 0.7% | 2024-04-19 | Fix |
| CVE-2024-29965 | Brocade SANnav backup files information disclosure | 6.8CNA v3.1 | 0.4% | 2024-04-19 | Fix |
| CVE-2024-29964 | Brocade SANnav versions do not correctly set permissions on files, including docker files | 5.7CNA v3.1 | 0.5% | 2024-04-19 | Fix |
| CVE-2024-29963 | Brocade SANnav contains hard-coded TLS keys used by Docker | 1.9CNA v3.1 | 0.2% | 2024-04-19 | Fix |
| CVE-2024-29962 | Brocade SANnav insecure file permission setting that makes files world-readable | 5.5CNA v3.1 | 0.2% | 2024-04-19 | Fix |
| CVE-2024-29961 | Brocade SANnav supply-chain attack risk | 8.2CNA v3.1 | 0.8% | 2024-04-19 | Fix |
| CVE-2024-29960 | Brocade SANnav identical SSH keys utilized inside the OVA image | 6.8CNA v3.1 | 0.3% | 2024-04-19 | Fix |
| CVE-2024-29959 | Brocade Fabric OS switch encrypted passwords in the Brocade SANnav Standby node's support save | 8.6CNA v3.1 | 0.5% | 2024-04-19 | Fix |
| CVE-2024-29958 | Brocade SANnav standby node replacement script information disclosure | 7.5CNA v3.1 | 0.3% | 2024-04-19 | Fix |
| CVE-2024-29957 | Brocade SANnav encryption key is stored in the DR log files | 7.5CNA v3.1 | 0.3% | 2024-04-19 | Fix |
| CVE-2024-29204 | Ivanti Avalanche WL heap-based buffer overflow | 9.8v3.1 | 4.3% | 2024-04-19 | Fix |
| CVE-2024-29183 | OpenRASP vulnerable to a reflected cross-site scripting (XSS) attack in /login | 6.1CNA v3.1 | 0.4% | 2024-04-19 | |
| CVE-2024-29030 | memos vulnerable to an SSRF in /API/resource | 5.3NVD v3.1 | 1.1% | 2024-04-19 | NucleiFix |
| CVE-2024-29029 | memos vulnerable to an SSRF in /o/get/image | 6.1NVD v3.1 | 1.1% | 2024-04-19 | NucleiFix |
| CVE-2024-29028 | memos vulnerable to an SSRF in /o/get/httpmeta | 5.3NVD v3.1 | 1.0% | 2024-04-19 | NucleiFix |
| CVE-2024-27984 | Ivanti Avalanche web component path traversal | 7.1v3.1 | 1.8% | 2024-04-19 | Fix |
| CVE-2024-27978 | Ivanti Avalanche WL null pointer dereference | 6.5v3.1 | 1.7% | 2024-04-19 | Fix |
| CVE-2024-27977 | Ivanti Avalanche web component path traversal | 8.1v3.1 | 1.8% | 2024-04-19 | Fix |
| CVE-2024-27976 | Ivanti Avalanche web component path traversal | 8.8v3.1 | 3.2% | 2024-04-19 | Fix |
| CVE-2024-27975 | Ivanti Avalanche WL use-after-free | 8.8v3.1 | 2.6% | 2024-04-19 | Fix |
| CVE-2024-27752 | CSZ CMS cross-site scripting | 5.4CISA ADP v3.1 | 0.6% | 2024-04-19 | |
| CVE-2024-25000 | Ivanti Avalanche web component path traversal | 8.8v3.1 | 3.0% | 2024-04-19 | Fix |
| CVE-2024-24999 | Ivanti Avalanche web component path traversal | 8.8v3.1 | 2.9% | 2024-04-19 | Fix |
| CVE-2024-24998 | Ivanti Avalanche web component path traversal | 8.8v3.1 | 3.2% | 2024-04-19 | Fix |
| CVE-2024-24997 | Ivanti Avalanche web component path traversal | 8.8v3.1 | 3.2% | 2024-04-19 | Fix |
| CVE-2024-24996 | Ivanti Avalanche WLInfoRailService component heap-based buffer overflow | 9.8v3.1 | 32.2% | 2024-04-19 | Fix |
| CVE-2024-24995 | Ivanti Avalanche web component race condition | 7.5v3.1 | 2.4% | 2024-04-19 | Fix |
| CVE-2024-24994 | Ivanti Avalanche web component path traversal | 8.8v3.1 | 68.1% | 2024-04-19 | Fix |
| CVE-2024-24993 | Ivanti Avalanche web component race condition | 7.5v3.1 | 2.4% | 2024-04-19 | Fix |
| CVE-2024-24992 | Ivanti Avalanche web component path traversal | 8.8v3.1 | 70.9% | 2024-04-19 | Fix |
| CVE-2024-24991 | Ivanti Avalanche WL null pointer dereference | 6.5v3.1 | 1.7% | 2024-04-19 | Fix |
| CVE-2024-23535 | Ivanti Avalanche web component path traversal | 8.8v3.1 | 68.1% | 2024-04-19 | Fix |
| CVE-2024-23534 | Ivanti Avalanche web component unrestricted file upload | 8.8v3.1 | 2.7% | 2024-04-19 | Fix |
| CVE-2024-23533 | Ivanti Avalanche WL out-of-bounds read | 6.5v3.1 | 1.4% | 2024-04-19 | Fix |
| CVE-2024-23532 | Ivanti Avalanche WL out-of-bounds read | 7.5v3.1 | 1.8% | 2024-04-19 | Fix |
| CVE-2024-23531 | Ivanti Avalanche WLInfoRailService component integer overflow | 7.5v3.1 | 2.4% | 2024-04-19 | Fix |
| CVE-2024-23530 | Ivanti Avalanche WL out-of-bounds read | 7.5v3.1 | 1.9% | 2024-04-19 | Fix |
| CVE-2024-23529 | Ivanti Avalanche WL out-of-bounds read | 7.5v3.1 | 1.9% | 2024-04-19 | Fix |
| CVE-2024-23528 | Ivanti Avalanche WL out-of-bounds read | 7.5v3.1 | 1.9% | 2024-04-19 | Fix |
| CVE-2024-23526 | Ivanti Avalanche WL out-of-bounds read | 7.5v3.1 | 1.9% | 2024-04-19 | Fix |
| CVE-2024-22905 | Arm Mbed OS buffer overflow | 7.0CISA ADP v3.1 | 0.4% | 2024-04-19 | |
| CVE-2024-22640 | TCPDF vulnerable to regular expression denial of service | 7.5CISA ADP v3.1 | 1.3% | 2024-04-19 | Fix |
| CVE-2024-22061 | Ivanti Avalanche WLInfoRailService component heap-based buffer overflow | 9.8v3.1 | 3.6% | 2024-04-19 | Fix |
| CVE-2024-4018 | Privilege escalation in U-Series Appliance | 8.8CNA v3.1 | 0.2% | 2024-04-19 | Fix |
| CVE-2024-4017 | Privilege escalation in U-Series Appliance | 8.8CNA v3.1 | 0.2% | 2024-04-19 | Fix |
| CVE-2024-3979 | COVESA vsomeip race condition | 4.4CNA v3.1 | 0.2% | 2024-04-19 | |
| CVE-2024-3818 | Essential Blocks WordPress plugin stored cross-site scripting | 5.4CNA v3.1 | 0.3% | 2024-04-19 | Fix |
| CVE-2024-3731 | Customer Reviews for WooCommerce WordPress plugin reflected cross-site scripting via s | 6.1CNA v3.1 | 0.4% | 2024-04-19 | Fix |
| CVE-2024-3684 | GitHub Enterprise Server Management Console server-side request forgery | 8.0CNA v3.1 | 1.1% | 2024-04-19 | Fix |
| CVE-2024-3654 | Cross-site scripting vulnerability in Teixo by Teimas Global | 6.3CNA v3.1 | 0.3% | 2024-04-19 | |
| CVE-2024-3646 | GitHub Enterprise Server Management Console command injection | 8.0CNA v3.1 | 1.7% | 2024-04-19 | Fix |
| CVE-2024-3615 | Media Library Folders WordPress plugin reflected cross-site scripting via s | 6.1CNA v3.1 | 0.4% | 2024-04-19 | Fix |
| CVE-2024-3600 | Poll Maker WordPress plugin stored cross-site scripting | 6.1NVD v3.1 | 0.4% | 2024-04-19 | Fix |
| CVE-2024-3598 | ElementsKit Pro WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.3% | 2024-04-19 | Fix |
| CVE-2024-3560 | LearnPress WordPress LMS plugin authenticated (Contributor+) stored cross-site scripting | 5.4v3.1 | 0.3% | 2024-04-19 | Fix |
| CVE-2024-3470 | GitHub Enterprise Server deploy keys privilege escalation | 5.9CNA v3.1 | 0.6% | 2024-04-19 | Fix |
| CVE-2024-2761 | Genesis Blocks WordPress plugin Contributor+ stored XSS | 6.8CISA ADP v3.1 | 0.7% | 2024-04-19 | Fix |
| CVE-2024-2440 | Race condition was identified in GitHub Enterprise Server that allowed maintaining admin permissions | 5.5CNA v3.1 | 0.5% | 2024-04-19 | Fix |
| CVE-2024-1681 | Log injection vulnerability in corydolphin/Flask-cors | 5.3v3.1 | 0.6% | 2024-04-19 | Fix |
| CVE-2024-1480 | Unitronics Vision Standard Unauthenticated Password Retrieval | 7.5CNA v3.1 | 0.5% | 2024-04-19 | |
| CVE-2024-1065 | Mali GPU Kernel Driver allows improper GPU memory processing operations | 5.9CISA ADP v3.1 | 0.2% | 2024-04-19 | Exploit codeFix |
| CVE-2024-0671 | Mali GPU Kernel Driver allows improper GPU memory processing operations | 6.8CISA ADP v3.1 | 0.2% | 2024-04-19 | Fix |
| CVE-2024-32689 | WP Social Comments WordPress plugin broken access control | 4.3CNA v3.1 | 0.3% | 2024-04-18 | Fix |
| CVE-2024-32686 | Backup Migration WordPress plugin sensitive data exposure via Log | 5.3CNA v3.1 | 0.4% | 2024-04-18 | Fix |
| CVE-2024-32604 | WP-Recall WordPress plugin insecure direct object references (IDOR) | 4.3CNA v3.1 | 0.4% | 2024-04-18 | Fix |
| CVE-2024-32603 | WooBuddy WordPress plugin PHP object injection | 8.8v3.1 | 0.5% | 2024-04-18 | Fix |
| CVE-2024-32602 | WooCommerce Multilingual and Multicurrency WordPress plugin SQL injection | 7.2v3.1 | 0.5% | 2024-04-18 | Fix |
| CVE-2024-32601 | Popup Anything WordPress plugin broken access control | 5.3CNA v3.1 | 0.4% | 2024-04-18 | Fix |
| CVE-2024-32600 | Master Slider WordPress plugin PHP object injection | 9.6v3.1 | 0.5% | 2024-04-18 | Fix |
| CVE-2024-32599 | WP Dummy Content Generator WordPress plugin arbitrary code execution | 10.0CNA v3.1 | 0.7% | 2024-04-18 | Fix |
| CVE-2024-32598 | BA Book Everything WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.3% | 2024-04-18 | Fix |
| CVE-2024-32597 | WP Smart Import WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.3% | 2024-04-18 | Fix |
| CVE-2024-32596 | DSGVO Youtube WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.3% | 2024-04-18 | Fix |
| CVE-2024-32595 | WP Helper Premium WordPress plugin reflected cross-site scripting (XSS) | 7.1CNA v3.1 | 0.4% | 2024-04-18 | Fix |
| CVE-2024-32594 | Attesa Extra WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.3% | 2024-04-18 | Fix |
| CVE-2024-32593 | WPBITS Addons For Elementor Page Builder WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.3% | 2024-04-18 | Fix |
| CVE-2024-32592 | Void Elementor WHMCS Elements For Elementor Page Builder WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.3% | 2024-04-18 | Fix |
| CVE-2024-32591 | Backend Designer WordPress plugin cross-site scripting (XSS) | 5.9CNA v3.1 | 0.3% | 2024-04-18 | Fix |
| CVE-2024-32590 | Kattene WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.3% | 2024-04-18 | Fix |
| CVE-2024-32588 | LearnPress Export Import WordPress plugin reflected cross-site scripting (XSS) | 7.1CNA v3.1 | 0.6% | 2024-04-18 | Fix |
| CVE-2024-32587 | EnvíaloSimple WordPress plugin reflected cross-site scripting (XSS) | 5.8CNA v3.1 | 0.3% | 2024-04-18 | Fix |
| CVE-2024-32586 | Gutenberg Block Editor Toolkit WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.3% | 2024-04-18 | Fix |
| CVE-2024-32585 | Import Content in WordPress and WooCommerce with Excel plugin cross-site scripting (XSS) | 5.9CNA v3.1 | 0.3% | 2024-04-18 | Fix |
| CVE-2024-32584 | TeraWallet WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.3% | 2024-04-18 | Fix |
| CVE-2024-32583 | Photo Gallery by 10Web WordPress plugin reflected cross-site scripting (XSS) | 6.1NVD v3.1 | 0.3% | 2024-04-18 | Fix |
| CVE-2024-32582 | Debug Log Manager WordPress plugin cross-site scripting (XSS) | 7.1CNA v3.1 | 0.3% | 2024-04-18 | Fix |
| CVE-2024-32581 | Mortgage Calculators WP WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.3% | 2024-04-18 | Fix |
| CVE-2024-32580 | Master Slider WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.3% | 2024-04-18 | Fix |
| CVE-2024-32579 | Restaurant Menu Food Ordering System Table Reservation WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.3% | 2024-04-18 | Fix |
| CVE-2024-32578 | 10Web Slider plugin reflected cross-site scripting | 6.1NVD v3.1 | 0.5% | 2024-04-18 | Fix |
| CVE-2024-32577 | CBX Bookmark and Favorite WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.3% | 2024-04-18 | Fix |
| CVE-2024-32576 | BA Book Everything WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.3% | 2024-04-18 | Fix |
| CVE-2024-32575 | Mega Elements WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.3% | 2024-04-18 | Fix |
| CVE-2024-32574 | WP Simple HTML Sitemap WordPress plugin cross-site scripting (XSS) | 7.1CNA v3.1 | 0.4% | 2024-04-18 | Fix |
| CVE-2024-32573 | WP-Lister Lite for eBay WordPress plugin cross-site scripting (XSS) | 5.9CNA v3.1 | 0.3% | 2024-04-18 | Fix |
| CVE-2024-32572 | Element Pack Elementor Addons WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.3% | 2024-04-18 | Fix |
| CVE-2024-32571 | WP Stripe Checkout WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.3% | 2024-04-18 | Fix |
| CVE-2024-32570 | Cornerstone WordPress plugin reflected cross-site scripting (XSS) | 7.1CNA v3.1 | 0.3% | 2024-04-18 | Fix |
| CVE-2024-32569 | Ditty WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.3% | 2024-04-18 | Fix |
| CVE-2024-32568 | WP 2FA WordPress plugin reflected cross-site scripting (XSS) | 6.1NVD v3.1 | 0.4% | 2024-04-18 | Fix |
| CVE-2024-32567 | DirectoryPress WordPress plugin reflected cross-site scripting (XSS) | 6.1NVD v3.1 | 0.4% | 2024-04-18 | Fix |
| CVE-2024-32566 | WP Club Manager WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.3% | 2024-04-18 | Fix |
| CVE-2024-32565 | App Builder WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.3% | 2024-04-18 | Fix |
| CVE-2024-32564 | PostX WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.3% | 2024-04-18 | Fix |
| CVE-2024-32563 | VikBooking Hotel Booking Engine and PMS WordPress plugin reflected cross-site scripting (XSS) | 7.1CNA v3.1 | 0.4% | 2024-04-18 | Fix |
| CVE-2024-32562 | VIICTORY MEDIA Z Y N I T H plugin stored cross-site scripting | 8.6CNA v3.1 | 0.5% | 2024-04-18 | |
| CVE-2024-32561 | Tagembed WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.3% | 2024-04-18 | Fix |
| CVE-2024-32560 | QR Code Composer WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.3% | 2024-04-18 | Fix |
| CVE-2024-32559 | WP 404 Auto Redirect to Similar Post WordPress plugin reflected cross-site scripting (XSS) | 7.1CNA v3.1 | 0.4% | 2024-04-18 | Fix |
| CVE-2024-32558 | eCommerce Product Catalog WordPress plugin cross-site scripting (XSS) | 7.1CNA v3.1 | 0.4% | 2024-04-18 | Fix |
| CVE-2024-32556 | HurryTimer WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.3% | 2024-04-18 | Fix |
| CVE-2024-32554 | Knight Lab Timeline WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.3% | 2024-04-18 | |
| CVE-2024-32553 | Superfly Menu WordPress plugin Subscriber+ Site-Wide stored cross-site scripting (XSS) | 7.1CNA v3.1 | 0.5% | 2024-04-18 | |
| CVE-2024-32552 | Tagbox Taggbox plugin stored cross-site scripting | 6.5CNA v3.1 | 0.3% | 2024-04-18 | Fix |
| CVE-2024-32551 | SP Project and Document Manage WordPress plugin Auth. SQL injection | 7.6CNA v3.1 | 0.5% | 2024-04-18 | |
| CVE-2024-32477 | denoland deno race condition when flushing input stream leads to permission prompt bypass | 7.7CNA v3.1 | 0.3% | 2024-04-18 | Fix |
| CVE-2024-32475 | Envoy RELEASE_ASSERT using auto_sni with :authority header bytes | 7.5CNA v3.1 | 0.7% | 2024-04-18 | Fix |
| CVE-2024-32474 | Sentry's superuser cleartext password leaked in logs | 7.3CNA v3.1 | 0.4% | 2024-04-18 | Fix |
| CVE-2024-32473 | Moby IPv6 enabled on IPv4-only network interfaces | 4.7CNA v3.1 | 0.4% | 2024-04-18 | Fix |
| CVE-2024-32470 | Tolgee' API keys created by server admin users bypass the permission check | 6.5CNA v3.1 | 0.6% | 2024-04-18 | Fix |
| CVE-2024-32466 | Tolgee's API key scopes not checked when querying translation data | 2.7CNA v3.1 | 0.4% | 2024-04-18 | Fix |
| CVE-2024-32462 | Flatpak vulnerable to a sandbox escape via RequestBackground portal due to bad argument parsing | 8.4CNA v3.1 | 0.5% | 2024-04-18 | Exploit codeFix |
| CVE-2024-32335 | TOTOLINK N300RT cross-site scripting | 5.4CISA ADP v3.1 | 0.4% | 2024-04-18 | |
| CVE-2024-32334 | TOTOLINK N300RT cross-site scripting | 6.5CISA ADP v3.1 | 0.4% | 2024-04-18 | |
| CVE-2024-32333 | TOTOLINK N300RT cross-site scripting | 4.3CISA ADP v3.1 | 0.6% | 2024-04-18 | |
| CVE-2024-32332 | TOTOLINK N300RT cross-site scripting | 6.1CISA ADP v3.1 | 0.4% | 2024-04-18 | |
| CVE-2024-32327 | TOTOLINK N300RT cross-site scripting | 5.5CISA ADP v3.1 | 0.4% | 2024-04-18 | |
| CVE-2024-32326 | TOTOLINK EX200 cross-site scripting | 6.8CISA ADP v3.1 | 0.6% | 2024-04-18 | |
| CVE-2024-32325 | TOTOLINK EX200 cross-site scripting | 2.4CISA ADP v3.1 | 0.5% | 2024-04-18 | |
| CVE-2024-32142 | Ovic Responsive WPBakery WordPress plugin broken access control | 5.4CNA v3.1 | 0.4% | 2024-04-18 | |
| CVE-2024-32126 | Navigation menu as dropdown Widget WordPress plugin cross-site scripting (XSS) | 5.9CNA v3.1 | 0.3% | 2024-04-18 | Fix |
| CVE-2024-31869 | Apache Airflow: Sensitive configuration for providers displayed when non-sensitive-only config used | 4.3v3.1 | 1.1% | 2024-04-18 | Fix |
| CVE-2024-31229 | Really Simple SSL WordPress plugin server side request forgery (SSRF) | 5.5CNA v3.1 | 0.3% | 2024-04-18 | Fix |
| CVE-2024-30929 | Derbynet cross-site scripting | 8.0CISA ADP v3.1 | 1.0% | 2024-04-18 | |
| CVE-2024-30928 | Derbynet SQL injection | 8.1CISA ADP v3.1 | 0.7% | 2024-04-18 | |
| CVE-2024-30927 | Derbynet cross-site scripting | 6.3CISA ADP v3.1 | 0.6% | 2024-04-18 | |
| CVE-2024-30926 | Derbynet cross-site scripting | 4.6CISA ADP v3.1 | 0.5% | 2024-04-18 | |
| CVE-2024-30925 | Derbynet cross-site scripting | 6.5CISA ADP v3.1 | 0.6% | 2024-04-18 | |
| CVE-2024-30924 | Derbynet cross-site scripting | 4.6CISA ADP v3.1 | 0.3% | 2024-04-18 | |
| CVE-2024-30923 | Derbynet SQL injection | 9.8CISA ADP v3.1 | 1.4% | 2024-04-18 | |
| CVE-2024-30922 | Derbynet SQL injection | 9.8CISA ADP v3.1 | 1.4% | 2024-04-18 | |
| CVE-2024-30921 | Derbynet cross-site scripting | 5.4CISA ADP v3.1 | 0.6% | 2024-04-18 | |
| CVE-2024-30920 | Derbynet cross-site scripting | 7.4CISA ADP v3.1 | 1.0% | 2024-04-18 | |
| CVE-2024-30564 | @andrei-tatar/nora-firebase-common prototype pollution | 9.8CISA ADP v3.1 | 1.2% | 2024-04-18 | Fix |
| CVE-2024-30257 | 1Panel's password verification is suspected to have a timing attack vulnerability | 3.9CNA v3.1 | 0.4% | 2024-04-18 | Fix |
| CVE-2024-30107 | HCL Connections is vulnerable to broken access control | 3.5CNA v3.1 | 0.3% | 2024-04-18 | Fix |
| CVE-2024-29987 | Microsoft Edge (Chromium-based) information disclosure | 6.5CNA v3.1 | 1.2% | 2024-04-18 | Fix |
| CVE-2024-29986 | Microsoft Edge for Android (Chromium-based) information disclosure | 5.4CNA v3.1 | 0.5% | 2024-04-18 | Fix |
| CVE-2024-29956 | Brocade SANnav supportsave logs information disclosure | 6.5CNA v3.1 | 0.3% | 2024-04-18 | Fix |
| CVE-2024-29021 | judge0 SSRF into sandbox escape through Unsafe Default Configuration | 9.1CNA v3.1 | 20.2% | 2024-04-18 | |
| CVE-2024-29003 | SolarWinds Platform cross-site scripting | 7.5CNA v3.1 | 0.7% | 2024-04-18 | Fix |
| CVE-2024-29001 | SolarWinds Platform SWQL injection | 7.5CNA v3.1 | 0.6% | 2024-04-18 | Fix |
| CVE-2024-28189 | Judge0 vulnerable to sandbox escape Patch Bypass via chown running on Symbolic Link | 10.0CNA v3.1 | 7.2% | 2024-04-18 | MetasploitExploit code |
| CVE-2024-28185 | Judge0 vulnerable to sandbox escape via Symbolic Link | 10.0CNA v3.1 | 7.1% | 2024-04-18 | MetasploitExploit code |
| CVE-2024-28076 | SolarWinds Platform arbitrary open redirection | 7.0CNA v3.1 | 0.3% | 2024-04-18 | Fix |
| CVE-2024-27306 | Aiohttp vulnerable to XSS on index pages for static file handling | 6.1CNA v3.1 | 0.7% | 2024-04-18 | Fix |
| CVE-2024-26921 | Linux kernel IP fragment reassembly vulnerability | 7.8CNA v3.1 | 0.4% | 2024-04-18 | Fix |
| CVE-2024-24910 | A local attacker can erscalate privileges on affected Check Point ZoneAlarm ExtremeSecurity NextGen, Identity Agent for Windows, and Identity Agent for Windows Terminal Server. To exploit this vulnerability, an attacker must first obtain the ability to execute local privileged code on the target sys | 7.3CISA ADP v3.1 | 0.2% | 2024-04-18 | Fix |
| CVE-2024-23557 | HCL Software Connections missing brute-force protection | 3.5CNA v3.1 | 0.3% | 2024-04-18 | Fix |
| CVE-2024-22186 | Electrolink FM/DAB/TV Transmitter reliance on cookies without validation and integrity checking | 8.7CNA v4.0 | 0.5% | 2024-04-18 | |
| CVE-2024-22179 | Electrolink FM/DAB/TV Transmitter authentication bypass by assumed-immutable data | 8.7CNA v4.0 | 0.4% | 2024-04-18 | |
| CVE-2024-21872 | Electrolink FM/DAB/TV Transmitter reliance on cookies without validation and integrity checking | 8.7CNA v4.0 | 0.6% | 2024-04-18 | |
| CVE-2024-21846 | Electrolink FM/DAB/TV Transmitter missing authentication for critical function | 6.9CNA v4.0 | 0.5% | 2024-04-18 | |
| CVE-2024-20380 | Cisco ClamAV HTML parser denial of service | 7.5CNA v3.1 | 1.1% | 2024-04-18 | Fix |
| CVE-2024-3948 | SourceCodester Home Clean Service System Photo student.add.php unrestricted upload | 9.8v3.1 | 0.9% | 2024-04-18 | |
| CVE-2024-3932 | Totara LMS User Selector cross-site request forgery | 2.3CNA v4.0 | 0.3% | 2024-04-18 | |
| CVE-2024-3931 | Totara LMS User Selector check.php cross-site scripting | 5.4v3.1 | 0.4% | 2024-04-18 | Fix |
| CVE-2024-3928 | Dromara open-capacity-platform auth-server heapdump information disclosure | 4.3CNA v3.1 | 0.5% | 2024-04-18 | |
| CVE-2024-3742 | Electrolink FM/DAB/TV Transmitter cleartext storage of sensitive information | 8.7CNA v4.0 | 1.4% | 2024-04-18 | Nuclei |
| CVE-2024-3741 | Electrolink FM/DAB/TV Transmitter authentication bypass by assumed-immutable data | 8.7CNA v4.0 | 0.5% | 2024-04-18 | |
| CVE-2024-2833 | Jobs for WordPress plugin reflected cross-site scripting via job-search | 6.1CNA v3.1 | 0.4% | 2024-04-18 | Fix |
| CVE-2024-2796 | SSRF in Akana API Platform | 9.3CNA v3.1 | 0.4% | 2024-04-18 | Fix |
| CVE-2024-2729 | Otter Blocks WordPress plugin Contributor+ stored XSS | 6.1CISA ADP v3.1 | 0.4% | 2024-04-18 | Fix |
| CVE-2024-1491 | Electrolink FM/DAB/TV Transmitter missing authentication for critical function | 8.7CNA v4.0 | 0.6% | 2024-04-18 | |
| CVE-2024-1429 | Element Pack Elementor Addons WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.3% | 2024-04-18 | Fix |
| CVE-2024-1426 | Element Pack Elementor Addons WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.3% | 2024-04-18 | Fix |
| CVE-2024-32746 | WonderCMS settings section cross-site scripting | 4.6CISA ADP v3.1 | 0.5% | 2024-04-17 | |
| CVE-2024-32745 | WonderCMS settings section cross-site scripting | 5.9CISA ADP v3.1 | 0.3% | 2024-04-17 | |
| CVE-2024-32744 | WonderCMS settings section cross-site scripting | 4.6CISA ADP v3.1 | 0.4% | 2024-04-17 | |
| CVE-2024-32743 | WonderCMS settings section cross-site scripting | 5.5CISA ADP v3.1 | 0.4% | 2024-04-17 | |
| CVE-2024-32550 | BMI Adult and Kid Calculator WordPress plugin CSRF to XSS | 7.1CNA v3.1 | 0.2% | 2024-04-17 | Fix |
| CVE-2024-32549 | Related Posts for WordPress plugin CSRF to XSS | 7.1CNA v3.1 | 0.3% | 2024-04-17 | |
| CVE-2024-32548 | What's New Generator WordPress plugin cross-site scripting (XSS) | 5.9CNA v3.1 | 0.3% | 2024-04-17 | |
| CVE-2024-32547 | Code Insert Manager (Q2W3 Inc Manager) WordPress plugin cross-site scripting (XSS) | 5.8CNA v3.1 | 0.3% | 2024-04-17 | |
| CVE-2024-32546 | Tax Rate Upload WordPress plugin cross-site scripting (XSS) | 7.1CNA v3.1 | 0.4% | 2024-04-17 | |
| CVE-2024-32545 | Canva Design beautiful blog graphics WordPress plugin cross-site scripting (XSS) | 7.1CNA v3.1 | 0.3% | 2024-04-17 | |
| CVE-2024-32544 | Netgsm WordPress plugin reflected cross-site scripting (XSS) | 7.1CNA v3.1 | 0.4% | 2024-04-17 | Fix |
| CVE-2024-32543 | MJ Update History WordPress plugin reflected cross-site scripting (XSS) | 7.1CNA v3.1 | 0.4% | 2024-04-17 | |
| CVE-2024-32542 | Bulk Block Converter WordPress plugin reflected cross-site scripting (XSS) | 7.1CNA v3.1 | 0.3% | 2024-04-17 | |
| CVE-2024-32541 | WP-Cufon WordPress plugin cross-site scripting (XSS) | 7.1CNA v3.1 | 0.3% | 2024-04-17 | |
| CVE-2024-32540 | Web357 Fixed HTML Toolbar plugin stored cross-site scripting | 5.9CNA v3.1 | 0.3% | 2024-04-17 | Fix |
| CVE-2024-32539 | WP File Download Light WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.3% | 2024-04-17 | |
| CVE-2024-32538 | Easy CountDowner WordPress plugin CSRF to XSS | 6.5CNA v3.1 | 0.2% | 2024-04-17 | |
| CVE-2024-32536 | WP TradingView WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.3% | 2024-04-17 | |
| CVE-2024-32535 | Access Category Password WordPress plugin reflected cross-site scripting (XSS) | 7.1CNA v3.1 | 0.3% | 2024-04-17 | |
| CVE-2024-32534 | Form Maker WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.3% | 2024-04-17 | Fix |
| CVE-2024-32533 | LH Add Media From Url WordPress plugin reflected cross-site scripting (XSS) | 7.1CNA v3.1 | 0.4% | 2024-04-17 | Fix |
| CVE-2024-32532 | Speed Optimizer WordPress plugin broken access control | 5.3CNA v3.1 | 0.5% | 2024-04-17 | Fix |
| CVE-2024-32531 | GuCherry Blog WordPress theme reflected cross-site scripting (XSS) | 7.1CNA v3.1 | 0.4% | 2024-04-17 | |
| CVE-2024-32530 | Simple Testimonials Showcase WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.3% | 2024-04-17 | Fix |
| CVE-2024-32529 | Yoga Schedule Momoyoga WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.3% | 2024-04-17 | Fix |
| CVE-2024-32528 | WP Dynamic Keywords Injector WordPress plugin reflected cross-site scripting (XSS) | 7.1CNA v3.1 | 0.4% | 2024-04-17 | Fix |
| CVE-2024-32527 | Jotform Online Forms WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.3% | 2024-04-17 | |
| CVE-2024-32526 | Easy Textillate WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.3% | 2024-04-17 | |
| CVE-2024-32525 | Theme My Login WordPress plugin broken access control | 4.3CNA v3.1 | 0.3% | 2024-04-17 | Fix |
| CVE-2024-32524 | Custom Order Statuses for WooCommerce WordPress plugin broken access control | 4.3CNA v3.1 | 0.5% | 2024-04-17 | |
| CVE-2024-32522 | Open Close WooCommerce Store WordPress plugin broken access control | 4.3CNA v3.1 | 0.3% | 2024-04-17 | Fix |
| CVE-2024-32520 | WPC Grouped Product for WooCommerce WordPress plugin broken access control | 4.3CNA v3.1 | 0.3% | 2024-04-17 | Fix |
| CVE-2024-32519 | GG Woo Feed for WooCommerce WordPress plugin broken access control | 4.3CNA v3.1 | 0.3% | 2024-04-17 | Fix |
| CVE-2024-32518 | PeproDev Ultimate Invoice WordPress plugin broken access control | 5.3CNA v3.1 | 0.4% | 2024-04-17 | Fix |
| CVE-2024-32517 | Binary Carpenter Custom Thank You Page plugin missing authorization | 4.3CNA v3.1 | 0.3% | 2024-04-17 | Fix |
| CVE-2024-32516 | Multi Currency For WooCommerce WordPress plugin broken access control | 4.3CNA v3.1 | 0.5% | 2024-04-17 | Fix |
| CVE-2024-32515 | Mega Addons For Elementor WordPress plugin broken access control | 5.4CNA v3.1 | 0.4% | 2024-04-17 | Fix |
| CVE-2024-32514 | WP Poll Maker WordPress plugin authenticated arbitrary file upload | 9.9CNA v3.1 | 0.7% | 2024-04-17 | Fix |
| CVE-2024-32513 | Product Feed PRO for WooCommerce WordPress plugin sensitive data exposure | 5.3CNA v3.1 | 0.4% | 2024-04-17 | Fix |
| CVE-2024-32510 | WP Cost Estimation and Payment Forms Builder WordPress plugin reflected cross-site scripting (XSS) | 7.1CNA v3.1 | 0.4% | 2024-04-17 | Fix |
| CVE-2024-32509 | WP Cost Estimation and Payment Forms Builder WordPress plugin broken access control | 6.5CNA v3.1 | 0.4% | 2024-04-17 | Fix |
| CVE-2024-32508 | DethemeKit For Elementor WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.3% | 2024-04-17 | Fix |
| CVE-2024-32506 | Radio Player WordPress plugin sensitive data exposure | 5.4CNA v3.1 | 0.4% | 2024-04-17 | Fix |
| CVE-2024-32505 | ElementsKit Elementor addons WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.3% | 2024-04-17 | Fix |
| CVE-2024-32472 | excalidraw vulnerable to a stored XSS in excalidraw's web embed component | 6.1CNA v3.1 | 0.6% | 2024-04-17 | Fix |
| CVE-2024-32463 | Phlex href attribute filter cross-site scripting | 7.1CNA v3.1 | 0.6% | 2024-04-17 | Fix |
| CVE-2024-32457 | Elements Plus! WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.3% | 2024-04-17 | Fix |
| CVE-2024-32456 | Envo Extra WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.3% | 2024-04-17 | Fix |
| CVE-2024-32345 | CMSimple settings menu cross-site scripting | 7.2CISA ADP v3.1 | 0.5% | 2024-04-17 | |
| CVE-2024-32344 | CMSimple settings menu cross-site scripting | 6.8CISA ADP v3.1 | 0.5% | 2024-04-17 | |
| CVE-2024-32343 | BoidCMS A cross-site scripting | 6.1CISA ADP v3.1 | 0.4% | 2024-04-17 | |
| CVE-2024-32342 | BoidCMS A cross-site scripting | 6.1CISA ADP v3.1 | 0.4% | 2024-04-17 | |
| CVE-2024-32341 | WonderCMS Home page cross-site scripting | 5.4CISA ADP v3.1 | 0.4% | 2024-04-17 | |
| CVE-2024-32340 | WonderCMS settings section cross-site scripting | 9.6CISA ADP v3.1 | 0.7% | 2024-04-17 | |
| CVE-2024-32339 | WonderCMS HOW TO page cross-site scripting | 6.1CISA ADP v3.1 | 0.4% | 2024-04-17 | |
| CVE-2024-32338 | WonderCMS settings section cross-site scripting | 5.4CISA ADP v3.1 | 0.4% | 2024-04-17 | |
| CVE-2024-32337 | WonderCMS settings section cross-site scripting | 6.1CISA ADP v3.1 | 0.4% | 2024-04-17 | |
| CVE-2024-32320 | Tenda AC500 stack-based buffer overflow | 5.9CISA ADP v3.1 | 0.6% | 2024-04-17 | |
| CVE-2024-32318 | Tenda AC500 stack-based buffer overflow | 9.8CISA ADP v3.1 | 0.8% | 2024-04-17 | |
| CVE-2024-32317 | Tenda AC10 stack-based buffer overflow | 7.5CISA ADP v3.1 | 0.4% | 2024-04-17 | |
| CVE-2024-32316 | Tenda AC500 stack-based buffer overflow | 6.5CISA ADP v3.1 | 0.4% | 2024-04-17 | |
| CVE-2024-32315 | Tenda FH1202 stack-based buffer overflow | 4.7CISA ADP v3.1 | 0.4% | 2024-04-17 | |
| CVE-2024-32314 | Tenda AC500 command injection | 3.8CISA ADP v3.1 | 1.0% | 2024-04-17 | |
| CVE-2024-32313 | Tenda FH1205 stack-based buffer overflow | 6.5CISA ADP v3.1 | 0.5% | 2024-04-17 | |
| CVE-2024-32312 | Tenda F1203 stack-based buffer overflow | 5.7CISA ADP v3.1 | 0.5% | 2024-04-17 | |
| CVE-2024-32311 | Tenda FH1203 stack-based buffer overflow | 6.5CISA ADP v3.1 | 0.5% | 2024-04-17 | |
| CVE-2024-32310 | Tenda F1203 stack-based buffer overflow | 8.0CISA ADP v3.1 | 0.7% | 2024-04-17 | |
| CVE-2024-32307 | Tenda FH1205 stack-based buffer overflow | 7.4CISA ADP v3.1 | 0.6% | 2024-04-17 | |
| CVE-2024-32306 | Tenda AC10U stack-based buffer overflow | 5.7CISA ADP v3.1 | 0.5% | 2024-04-17 | |
| CVE-2024-32305 | Tenda A18 stack-based buffer overflow | 8.8CISA ADP v3.1 | 0.6% | 2024-04-17 | |
| CVE-2024-32303 | Tenda AC15 stack-based buffer overflow | 8.0CISA ADP v3.1 | 0.4% | 2024-04-17 | |
| CVE-2024-32302 | Tenda FH1202 stack-based buffer overflow | 6.3CISA ADP v3.1 | 0.4% | 2024-04-17 | |
| CVE-2024-32301 | Tenda AC7 out-of-bounds read | 9.8CISA ADP v3.1 | 0.8% | 2024-04-17 | |
| CVE-2024-32299 | Tenda FH1203 stack-based buffer overflow | 8.8CISA ADP v3.1 | 0.8% | 2024-04-17 | |
| CVE-2024-32293 | Tenda W30E stack-based buffer overflow | 8.0CISA ADP v3.1 | 5.6% | 2024-04-17 | Emerging Threats |
| CVE-2024-32292 | Tenda W30E command injection | 8.8CISA ADP v3.1 | 1.7% | 2024-04-17 | |
| CVE-2024-32291 | Tenda W30E stack-based buffer overflow | 7.5CISA ADP v3.1 | 0.7% | 2024-04-17 | |
| CVE-2024-32290 | Tenda W30E stack-based buffer overflow | 6.7CISA ADP v3.1 | 0.7% | 2024-04-17 | |
| CVE-2024-32288 | Tenda W30E stack-based buffer overflow | 6.3CISA ADP v3.1 | 0.5% | 2024-04-17 | |
| CVE-2024-32287 | Tenda W30E stack-based buffer overflow | 6.5CISA ADP v3.1 | 0.5% | 2024-04-17 | |
| CVE-2024-32286 | Tenda W30E out-of-bounds read | 9.8CISA ADP v3.1 | 0.8% | 2024-04-17 | |
| CVE-2024-32285 | Tenda W30E stack-based buffer overflow | 8.0CISA ADP v3.1 | 0.7% | 2024-04-17 | |
| CVE-2024-32283 | Tenda FH1203 command injection | 7.3CISA ADP v3.1 | 0.9% | 2024-04-17 | |
| CVE-2024-32282 | Tenda FH1202 command injection | 6.3CISA ADP v3.1 | 0.8% | 2024-04-17 | |
| CVE-2024-32281 | Tenda AC7 command injection | 8.8CISA ADP v3.1 | 1.8% | 2024-04-17 | |
| CVE-2024-32163 | CmsEasy path traversal | 6.4CISA ADP v3.1 | 0.3% | 2024-04-17 | |
| CVE-2024-32162 | CmsEasy incomplete filtering | 4.3CISA ADP v3.1 | 0.4% | 2024-04-17 | |
| CVE-2024-32161 | jizhiCMS unrestricted file upload | 9.8CISA ADP v3.1 | 0.7% | 2024-04-17 | |
| CVE-2024-32130 | Payment Forms for Paystack WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.3% | 2024-04-17 | |
| CVE-2024-31680 | Shibang Communications Co file upload | 8.8CISA ADP v3.1 | 0.8% | 2024-04-17 | Exploit code |
| CVE-2024-31585 | FFmpeg off-by-one error | 5.3CISA ADP v3.1 | 0.3% | 2024-04-17 | Fix |
| CVE-2024-31583 | PyTorch use-after-free | 7.8CISA ADP v3.1 | 0.3% | 2024-04-17 | Fix |
| CVE-2024-31582 | FFmpeg heap-based buffer overflow | 7.8CISA ADP v3.1 | 0.3% | 2024-04-17 | Fix |
| CVE-2024-31581 | FFmpeg improper array index validation | 9.8CISA ADP v3.1 | 1.1% | 2024-04-17 | Fix |
| CVE-2024-31580 | PyTorch heap buffer overflow | 4.0CISA ADP v3.1 | 0.2% | 2024-04-17 | Fix |
| CVE-2024-31578 | FFmpeg use-after-free | 7.5CISA ADP v3.1 | 1.2% | 2024-04-17 | Fix |
| CVE-2024-31503 | Dolibarr vulnerable to cross-site request forgery | 7.5CISA ADP v3.1 | 0.3% | 2024-04-17 | Fix |
| CVE-2024-31463 | Ironic-image allows unauthenticated local access to Ironic API | 4.7CNA v3.1 | 0.2% | 2024-04-17 | Fix |
| CVE-2024-31041 | emqx nanomq topic_filtern function in mqtt_parser.c null pointer dereference | 7.5CISA ADP v3.1 | 0.6% | 2024-04-17 | |
| CVE-2024-31040 | emqx nanomq get_var_integer function in mqtt_parser.c buffer overflow | 2.7CISA ADP v3.1 | 0.6% | 2024-04-17 | |
| CVE-2024-31031 | libcoap integer overflow | 7.5CISA ADP v3.1 | 0.9% | 2024-04-17 | Fix |
| CVE-2024-30990 | PHPGurukul Client Management System "Invoices" page SQL injection | 9.8CISA ADP v3.1 | 0.6% | 2024-04-17 | |
| CVE-2024-30989 | PHPGurukul Client Management System /edit-client-details.php cross-site scripting | 5.4CISA ADP v3.1 | 0.4% | 2024-04-17 | |
| CVE-2024-30988 | PHPGurukul Client Management System /search-invoices.php cross-site scripting | 6.8CISA ADP v3.1 | 0.6% | 2024-04-17 | |
| CVE-2024-30987 | PHPGurukul Client Management System /bwdates-reports-ds.php cross-site scripting | 6.8CISA ADP v3.1 | 0.6% | 2024-04-17 | |
| CVE-2024-30986 | PHPGurukul Client Management System /edit-services-details.php cross-site scripting | 6.5CISA ADP v3.1 | 0.4% | 2024-04-17 | |
| CVE-2024-30985 | PHPGurukul Client Management System "B/W Dates Reports" page SQL injection | 9.8CISA ADP v3.1 | 0.7% | 2024-04-17 | |
| CVE-2024-30983 | PHPGurukul Cyber Cafe Management System SQL injection | 7.3CISA ADP v3.1 | 0.3% | 2024-04-17 | |
| CVE-2024-30982 | PHPGurukul Cyber Cafe Management System SQL injection | 9.8CISA ADP v3.1 | 0.5% | 2024-04-17 | |
| CVE-2024-30981 | PHPGurukul Cyber Cafe Management System /edit-computer-detail.php SQL injection | 9.8v3.1 | 0.5% | 2024-04-17 | |
| CVE-2024-30980 | PHPGurukul Cyber Cafe Management System SQL injection | 9.8CISA ADP v3.1 | 0.7% | 2024-04-17 | |
| CVE-2024-30979 | PHPGurukul Cyber Cafe Management System cross-site scripting | 5.9CISA ADP v3.1 | 0.5% | 2024-04-17 | |
| CVE-2024-30953 | HTMLy A stored cross-site scripting | 6.1CISA ADP v3.1 | 0.4% | 2024-04-17 | |
| CVE-2024-30952 | PESCMS-TEAM v2.3.6 stored cross-site scripting | 6.1CISA ADP v3.1 | 0.3% | 2024-04-17 | |
| CVE-2024-30951 | Fudforum cross-site scripting | 6.1CISA ADP v3.1 | 0.4% | 2024-04-17 | |
| CVE-2024-30950 | Fudforum A stored cross-site scripting | 3.5CISA ADP v3.1 | 0.4% | 2024-04-17 | |
| CVE-2024-30253 | Solana web3.js denial of service | 7.5CNA v3.1 | 0.6% | 2024-04-17 | Fix |
| CVE-2024-29955 | Insertion of Sensitive Information into Brocade SANnav Log file | 5.0CNA v3.1 | 0.1% | 2024-04-17 | Fix |
| CVE-2024-29952 | Brocade SANnav clear text storage of sensistive information by manipulating command variables | 5.5CNA v3.1 | 0.1% | 2024-04-17 | Fix |
| CVE-2024-29951 | Brocade SANnav has weak encryption in internal SSH ports | 5.7CNA v3.1 | 0.2% | 2024-04-17 | Fix |
| CVE-2024-29950 | Brocade SANnav, uses weak encryption | 7.5CNA v3.1 | 0.3% | 2024-04-17 | Fix |
| CVE-2024-29035 | Umbraco's blind SSRF leads to Port Scan by using Webhooks | 4.1CNA v3.1 | 0.4% | 2024-04-17 | Fix |
| CVE-2024-28073 | SolarWinds Serv-U directory traversal remote code execution | 8.4CNA v3.1 | 1.1% | 2024-04-17 | Fix |
| CVE-2024-26920 | Linux kernel tracing snapshot trigger vulnerability | 5.5NVD v3.1 | 0.3% | 2024-04-17 | Fix |
| CVE-2024-26919 | Linux kernel ULPI driver vulnerability | 7.8CNA v3.1 | 0.2% | 2024-04-17 | Fix |
| CVE-2024-26918 | Linux kernel PCI PME polling vulnerability | 5.5v3.1 | 0.2% | 2024-04-17 | Fix |
| CVE-2024-26917 | Linux kernel FCoE driver deadlock | 5.5v3.1 | 0.2% | 2024-04-17 | Fix |
| CVE-2024-26916 | Linux kernel amdgpu GFXOFF suspend handling deadlock | 5.5v3.1 | 0.2% | 2024-04-17 | Fix |
| CVE-2024-26915 | Linux kernel amdgpu interrupt handler buffer overflow | 5.5CISA ADP v3.1 | 0.2% | 2024-04-17 | Fix |
| CVE-2024-26914 | Linux kernel AMD display driver vulnerability | 7.8CNA v3.1 | 0.2% | 2024-04-17 | Fix |
| CVE-2024-26913 | Linux kernel AMD display driver integer underflow | 7.8v3.1 | 0.3% | 2024-04-17 | Fix |
| CVE-2024-26912 | Linux kernel nouveau GSP-RM driver memory leak | 5.5v3.1 | 0.2% | 2024-04-17 | Fix |
| CVE-2024-26911 | Linux kernel DRM buddy allocator improper error handling | 7.8CNA v3.1 | 0.2% | 2024-04-17 | Fix |
| CVE-2024-26910 | Linux kernel ipset swap and destroy operation race condition | 4.7v3.1 | 0.2% | 2024-04-17 | Fix |
| CVE-2024-26909 | Linux kernel PMIC Glink altmode driver use-after-free | 7.0CNA v3.1 | 0.3% | 2024-04-17 | Fix |
| CVE-2024-26907 | Linux kernel mlx5 RDMA driver vulnerability | 7.8NVD v3.1 | 0.3% | 2024-04-17 | Fix |
| CVE-2024-26906 | Linux kernel vsyscall page handling denial of service | 5.5NVD v3.1 | 0.3% | 2024-04-17 | Fix |
| CVE-2024-26903 | Linux kernel RFCOMM Bluetooth driver null pointer dereference | 5.5NVD v3.1 | 0.3% | 2024-04-17 | Fix |
| CVE-2024-26902 | Linux kernel RISC-V PMU driver null pointer dereference | 5.5v3.1 | 0.2% | 2024-04-17 | Fix |
| CVE-2024-26901 | Linux kernel name_to_handle_at syscall information disclosure | 5.5NVD v3.1 | 0.8% | 2024-04-17 | Fix |
| CVE-2024-26900 | Linux kernel md memory leak | 5.5v3.1 | 0.3% | 2024-04-17 | Fix |
| CVE-2024-26899 | Linux kernel block device holder locking deadlock | 5.5v3.1 | 0.2% | 2024-04-17 | Fix |
| CVE-2024-26898 | Linux kernel ATA over Ethernet driver use-after-free | 7.8CNA v3.1 | 0.3% | 2024-04-17 | Fix |
| CVE-2024-26897 | Linux kernel ath9k Wi-Fi driver race condition | 4.7NVD v3.1 | 0.2% | 2024-04-17 | Fix |