CVE-2024 records published in April 2024
Page two of four: records 1,001 to 2,000 of the 3,133 published in April 2024, newest first. The first page carries the figures for April 2024.
| CVE | Summary | CVSS | EPSS | Published | Signals |
|---|---|---|---|---|---|
| CVE-2024-26896 | Linux kernel wfx Wi-Fi driver memory leak | 5.5v3.1 | 0.2% | 2024-04-17 | Fix |
| CVE-2024-26895 | Linux kernel wilc1000 Wi-Fi driver use-after-free | 7.8CNA v3.1 | 0.2% | 2024-04-17 | Fix |
| CVE-2024-26894 | Linux kernel ACPI processor idle driver memory leak | 6.0CISA ADP v3.1 | 0.3% | 2024-04-17 | Fix |
| CVE-2024-26893 | Linux kernel SCMI SMC transport driver double free | 5.5v3.1 | 0.2% | 2024-04-17 | Fix |
| CVE-2024-26892 | Linux kernel mt7921e Wi-Fi driver use-after-free | 7.8v3.1 | 0.2% | 2024-04-17 | Fix |
| CVE-2024-26891 | In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Don't issue ATS Invalidation request when device is disconnected For those endpoint devices connect to system via hotplug capable ports, users could request a hot reset to the device by flapping device's link through s | 5.5NVD v3.1 | 0.2% | 2024-04-17 | Fix |
| CVE-2024-26890 | Linux kernel btrtl out-of-bounds access | 7.8CNA v3.1 | 0.6% | 2024-04-17 | Fix |
| CVE-2024-26889 | Linux kernel Bluetooth HCI core out-of-bounds write | 5.5CISA ADP v3.1 | 0.3% | 2024-04-17 | Fix |
| CVE-2024-26888 | Linux kernel Bluetooth MSFT extension memory leak | 5.5v3.1 | 0.2% | 2024-04-17 | Fix |
| CVE-2024-26887 | Linux kernel Bluetooth USB driver memory leak | 5.5v3.1 | 0.2% | 2024-04-17 | Fix |
| CVE-2024-26886 | Linux kernel Bluetooth socket layer deadlock | 6.5CISA ADP v3.1 | 0.5% | 2024-04-17 | Fix |
| CVE-2024-26885 | Linux kernel BPF DEVMAP_HASH map vulnerability | 7.8CNA v3.1 | 0.3% | 2024-04-17 | Fix |
| CVE-2024-26884 | Linux kernel BPF hash table integer overflow | 7.8CNA v3.1 | 0.3% | 2024-04-17 | Fix |
| CVE-2024-26883 | Linux kernel BPF stack map vulnerability | 7.8CNA v3.1 | 0.3% | 2024-04-17 | Fix |
| CVE-2024-26882 | Linux kernel IP tunnel driver uninitialized variable use | 7.3CNA v3.1 | 0.7% | 2024-04-17 | Fix |
| CVE-2024-26881 | Linux kernel hns3 crash | 7.5CNA v3.1 | 0.7% | 2024-04-17 | Fix |
| CVE-2024-26880 | Linux kernel dm crash | 7.8CNA v3.1 | 0.7% | 2024-04-17 | Fix |
| CVE-2024-26879 | Linux kernel Meson clock driver null pointer dereference | 5.5v3.1 | 0.2% | 2024-04-17 | Fix |
| CVE-2024-26878 | Linux kernel quota subsystem null pointer dereference | 4.7NVD v3.1 | 0.2% | 2024-04-17 | Fix |
| CVE-2024-26877 | Linux kernel Xilinx crypto driver vulnerability | 9.8CNA v3.1 | 0.7% | 2024-04-17 | Fix |
| CVE-2024-26876 | Linux kernel adv7511 HDMI bridge driver vulnerability | 5.5v3.1 | 0.2% | 2024-04-17 | Fix |
| CVE-2024-26875 | Linux kernel pvrusb2 driver use-after-free | 6.4CISA ADP v3.1 | 0.2% | 2024-04-17 | Fix |
| CVE-2024-26874 | Linux kernel MediaTek DRM driver null pointer dereference | 4.7v3.1 | 0.2% | 2024-04-17 | Fix |
| CVE-2024-26873 | Linux kernel hisi_sas deadlock | 5.5v3.1 | 0.2% | 2024-04-17 | Fix |
| CVE-2024-26872 | Linux kernel RDMA SRPT target driver use-after-free | 7.8CNA v3.1 | 0.2% | 2024-04-17 | Fix |
| CVE-2024-26871 | Linux kernel f2fs page write null pointer dereference | 5.5v3.1 | 0.2% | 2024-04-17 | Fix |
| CVE-2024-26870 | Linux kernel NFSv4.2 listxattr denial of service | 7.8CNA v3.1 | 0.3% | 2024-04-17 | Fix |
| CVE-2024-26869 | Linux kernel f2fs meta inode handling race condition | 7.8CNA v3.1 | 0.2% | 2024-04-17 | Fix |
| CVE-2024-26868 | Linux kernel NFS flexfiles layout driver null pointer dereference | 7.5CNA v3.1 | 0.6% | 2024-04-17 | Fix |
| CVE-2024-26867 | Linux kernel comedi_8255 driver null pointer dereference | 5.5v3.1 | 0.2% | 2024-04-17 | Fix |
| CVE-2024-26866 | Linux kernel lpspi SPI controller driver probe use-after-free | 5.5v3.1 | 0.2% | 2024-04-17 | Fix |
| CVE-2024-26865 | Linux kernel RDS over TCP request socket timer use-after-free | 7.8CNA v3.1 | 0.2% | 2024-04-17 | Fix |
| CVE-2024-26864 | Linux kernel TCP inet hash connect vulnerability | 7.8CNA v3.1 | 0.6% | 2024-04-17 | Fix |
| CVE-2024-26863 | Linux kernel HSR protocol node lookup vulnerability | 5.5NVD v3.1 | 0.2% | 2024-04-17 | Fix |
| CVE-2024-26862 | Linux kernel packet race condition | 4.7v3.1 | 0.2% | 2024-04-17 | Fix |
| CVE-2024-26861 | Linux kernel WireGuard receive path race condition | 4.7NVD v3.1 | 0.2% | 2024-04-17 | Fix |
| CVE-2024-26860 | Linux kernel dm-integrity checksum recheck memory leak | 5.5v3.1 | 0.2% | 2024-04-17 | Fix |
| CVE-2024-26859 | Linux kernel bnx2x driver page pool race condition | 4.7NVD v3.1 | 0.2% | 2024-04-17 | Fix |
| CVE-2024-26858 | Linux kernel net/mlx5e null pointer dereference | 5.5v3.1 | 0.2% | 2024-04-17 | Fix |
| CVE-2024-26857 | Linux kernel GENEVE tunnel receive path vulnerability | 7.3CNA v3.1 | 0.6% | 2024-04-17 | Fix |
| CVE-2024-26856 | Linux kernel sparx5 driver MAC address table use-after-free | 8.8CNA v3.1 | 0.3% | 2024-04-17 | Fix |
| CVE-2024-26855 | Linux kernel ice driver bridge setlink handling null pointer dereference | 5.5NVD v3.1 | 0.3% | 2024-04-17 | Fix |
| CVE-2024-26854 | Linux kernel ice driver DPLL subsystem null pointer dereference | 7.5CISA ADP v3.1 | 0.7% | 2024-04-17 | Fix |
| CVE-2024-26853 | Linux kernel igc driver XDP redirect handling out-of-bounds write | 9.8CNA v3.1 | 0.6% | 2024-04-17 | Fix |
| CVE-2024-26852 | Linux kernel net/ipv6 use-after-free | 7.8CNA v3.1 | 0.3% | 2024-04-17 | Fix |
| CVE-2024-26851 | Linux kernel H.323 conntrack helper out-of-bounds write | 7.5CNA v3.1 | 0.7% | 2024-04-17 | Fix |
| CVE-2024-26850 | Linux kernel debug_vm_pgtable PUD test vulnerability | 5.5v3.1 | 0.2% | 2024-04-17 | Fix |
| CVE-2024-26849 | Linux kernel netlink attribute validation vulnerability | 5.5v3.1 | 0.2% | 2024-04-17 | Fix |
| CVE-2024-26847 | Linux kernel powerpc RTAS TCE table reset vulnerability | 5.1v3.1 | 0.2% | 2024-04-17 | Fix |
| CVE-2024-26846 | Linux kernel nvme-fc double free | 4.4CISA ADP v3.1 | 0.2% | 2024-04-17 | Fix |
| CVE-2024-26845 | Linux kernel SCSI target core task management handling vulnerability | 7.5CNA v3.1 | 0.7% | 2024-04-17 | Fix |
| CVE-2024-26844 | In the Linux kernel, the following vulnerability has been resolved: block: Fix WARNING in _copy_from_iter Syzkaller reports a warning in _copy_from_iter because an iov_iter is supposedly used in the wrong direction. The reason is that syzcaller managed to generate a request with a transfer directi | 5.5v3.1 | 0.2% | 2024-04-17 | Fix |
| CVE-2024-26843 | Linux kernel EFI runtime soft-reserved memory handling out-of-bounds write | 6.0CISA ADP v3.1 | 0.2% | 2024-04-17 | Fix |
| CVE-2024-26842 | Linux kernel UFS host controller driver out-of-bounds write | 7.8v3.1 | 0.2% | 2024-04-17 | Fix |
| CVE-2024-26841 | Linux kernel LoongArch CPU hotplug incomplete cleanup | 5.5v3.1 | 0.2% | 2024-04-17 | Fix |
| CVE-2024-26840 | Linux kernel cachefiles cache registration memory leak | 5.5v3.1 | 0.3% | 2024-04-17 | Fix |
| CVE-2024-26839 | Linux kernel hfi1 credit return allocation memory leak | 5.5v3.1 | 0.2% | 2024-04-17 | Fix |
| CVE-2024-26838 | Linux kernel irdma CEQ tasklet handling use-after-free | 7.8CNA v3.1 | 0.2% | 2024-04-17 | Fix |
| CVE-2024-26837 | Linux kernel bridge switchdev MDB replay race condition | 4.7v3.1 | 0.2% | 2024-04-17 | Fix |
| CVE-2024-26836 | Linux kernel think-lmi password protection vulnerability | 7.8v3.1 | 0.2% | 2024-04-17 | Fix |
| CVE-2024-26835 | Linux kernel nf_tables hook registration vulnerability | 5.5NVD v3.1 | 0.2% | 2024-04-17 | Fix |
| CVE-2024-26834 | Linux kernel netfilter flow offload memory leak | 7.5CNA v3.1 | 0.6% | 2024-04-17 | Fix |
| CVE-2024-26833 | Linux kernel AMD display driver software init memory leak | 5.5v3.1 | 0.2% | 2024-04-17 | Fix |
| CVE-2024-26832 | Linux kernel zswap writeback vulnerability | 5.5v3.1 | 0.2% | 2024-04-17 | Fix |
| CVE-2024-26831 | Linux kernel handshake request destruction test vulnerability | 5.5v3.1 | 0.2% | 2024-04-17 | Fix |
| CVE-2024-26830 | Linux kernel i40e VF MAC address handling vulnerability | 8.4CNA v3.1 | 0.2% | 2024-04-17 | Fix |
| CVE-2024-26829 | Linux kernel IR Toy USB driver memory leak | 5.5v3.1 | 0.2% | 2024-04-17 | Fix |
| CVE-2024-26828 | Linux kernel cifs integer underflow | 9.4CNA v3.1 | 0.8% | 2024-04-17 | Fix |
| CVE-2024-26826 | Linux kernel MPTCP stale subflow recovery vulnerability | 7.5CNA v3.1 | 0.7% | 2024-04-17 | Fix |
| CVE-2024-26825 | Linux kernel NFC NCI device cleanup vulnerability | 5.5v3.1 | 0.2% | 2024-04-17 | Fix |
| CVE-2024-26824 | Linux kernel algif_hash zero-length hashing vulnerability | 7.8CNA v3.1 | 0.2% | 2024-04-17 | Fix |
| CVE-2024-26823 | In the Linux kernel, the following vulnerability has been resolved: irqchip/gic-v3-its: Restore quirk probing for ACPI-based systems While refactoring the way the ITSs are probed, the handling of quirks applicable to ACPI-based platforms was lost. As a result, systems such as HIP07 lose their GICv | 7.8CNA v3.1 | 0.2% | 2024-04-17 | Fix |
| CVE-2024-26822 | Linux kernel SMB client automount vulnerability | 8.7CNA v3.1 | 0.2% | 2024-04-17 | Fix |
| CVE-2024-26820 | Linux kernel hv_netvsc VF registration vulnerability | 5.5NVD v3.1 | 0.2% | 2024-04-17 | Fix |
| CVE-2024-26818 | Linux kernel rtla mount point parsing vulnerability | 5.5v3.1 | 0.2% | 2024-04-17 | Fix |
| CVE-2024-24856 | OpenAnolis Anolis OS null pointer deference in acpi_db_convert_to_package of Linux acpi module | 5.3CNA v3.1 | 0.2% | 2024-04-17 | Fix |
| CVE-2024-22440 | HPE Compute Scale-up Server 3200 Server, Disclosure of Sensitive Information | 6.8CNA v3.1 | 0.4% | 2024-04-17 | Fix |
| CVE-2024-22354 | IBM WebSphere Application Server XML external entity injection | 7.0CNA v3.1 | 0.6% | 2024-04-17 | Fix |
| CVE-2024-22329 | IBM WebSphere Application Server server-side request forgery | 4.3CNA v3.1 | 0.3% | 2024-04-17 | Fix |
| CVE-2024-21990 | Default Privileged Account Credentials vulnerability in ONTAP Select Deploy administration utility | 5.4CNA v3.1 | 0.3% | 2024-04-17 | Fix |
| CVE-2024-21989 | Privilege escalation vulnerability in ONTAP Select Deploy administration utility | 8.1CNA v3.1 | 0.4% | 2024-04-17 | Fix |
| CVE-2024-3914 | Google Chrome V8 use-after-free | 6.5NVD v3.1 | 1.0% | 2024-04-17 | Fix |
| CVE-2024-3910 | Tenda AC500 DhcpListClient fromDhcpListClient stack-based overflow | 8.8v3.1 | 1.7% | 2024-04-17 | |
| CVE-2024-3909 | Tenda AC500 execCommand formexeCommand stack-based overflow | 9.8v3.1 | 1.7% | 2024-04-17 | |
| CVE-2024-3908 | Tenda AC500 WriteFacMac formWriteFacMac command injection | 9.8v3.1 | 8.7% | 2024-04-17 | |
| CVE-2024-3907 | Tenda AC500 setcfm formSetCfm stack-based overflow | 9.8v3.1 | 1.9% | 2024-04-17 | |
| CVE-2024-3906 | Tenda AC500 QuickIndex formQuickIndex stack-based overflow | 8.8v3.1 | 1.7% | 2024-04-17 | |
| CVE-2024-3905 | Tenda AC500 execCommand R7WebsSecurityHandler stack-based overflow | 8.8v3.1 | 1.8% | 2024-04-17 | |
| CVE-2024-3900 | Out-of-bounds stack array write in Xpdf due to missing zero check | 2.9CNA v3.1 | 0.2% | 2024-04-17 | Fix |
| CVE-2024-3847 | Google Chrome WebUI insufficient policy enforcement | 6.1NVD v3.1 | 0.9% | 2024-04-17 | Fix |
| CVE-2024-3846 | Google Chrome Prompts inappropriate implementation | 4.3v3.1 | 0.9% | 2024-04-17 | Fix |
| CVE-2024-3845 | Google Chrome Networks inappropriate implementation | 4.3NVD v3.1 | 0.9% | 2024-04-17 | Fix |
| CVE-2024-3844 | Google Chrome extensions inappropriate implementation | 4.3v3.1 | 0.7% | 2024-04-17 | Fix |
| CVE-2024-3843 | Google Chrome Downloads improper input validation | 4.3v3.1 | 0.6% | 2024-04-17 | Fix |
| CVE-2024-3841 | Google Chrome Browser Switcher improper input validation | 6.1NVD v3.1 | 0.7% | 2024-04-17 | Fix |
| CVE-2024-3840 | Google Chrome Site Isolation insufficient policy enforcement | 7.5v3.1 | 0.9% | 2024-04-17 | Fix |
| CVE-2024-3839 | Google Chrome Fonts out-of-bounds read | 6.5v3.1 | 0.8% | 2024-04-17 | Fix |
| CVE-2024-3838 | Google Chrome Autofill inappropriate implementation | 5.5v3.1 | 0.3% | 2024-04-17 | Fix |
| CVE-2024-3837 | Google Chrome QUIC use-after-free | 8.8v3.1 | 1.2% | 2024-04-17 | Fix |
| CVE-2024-3834 | Google Chrome Downloads use-after-free | 8.8v3.1 | 1.2% | 2024-04-17 | Fix |
| CVE-2024-3833 | Google Chrome WebAssembly vulnerability | 8.8v3.1 | 17.6% | 2024-04-17 | Fix |
| CVE-2024-3832 | Google Chrome memory corruption | 8.8v3.1 | 1.7% | 2024-04-17 | Fix |
| CVE-2024-3825 | CSRF in BlazeMeter Jenkins plugin | 4.3CNA v3.1 | 0.2% | 2024-04-17 | Fix |
| CVE-2024-3817 | HashiCorp go-getter vulnerable to argument injection when Fetching Remote Default Git Branches | 9.8CNA v3.1 | 1.3% | 2024-04-17 | Fix |
| CVE-2024-3333 | Essential Addons for Elementor WordPress plugin Store cross-site scripting | 6.4CNA v3.1 | 0.4% | 2024-04-17 | Fix |
| CVE-2024-3323 | TIBCO JasperReports Server reflected cross-site scripting (XSS) | 8.3CNA v3.1 | 0.4% | 2024-04-17 | Fix |
| CVE-2024-2961 | The GNU C Library glibc out-of-bounds write | 7.3CISA ADP v3.1 | 88.3% | 2024-04-17 | NucleiMetasploitEmerging ThreatsExploit codeKCVFix |
| CVE-2024-2419 | Keycloak: Path traversal in the redirect validation | 7.1CNA v3.1 | 0.5% | 2024-04-17 | Fix |
| CVE-2024-2309 | WP Staging, (Pro Version) Admin+ stored XSS | 4.8CISA ADP v3.1 | 0.4% | 2024-04-17 | Fix |
| CVE-2024-2118 | Social Media Share Buttons WordPress plugin Admin+ stored XSS via settings | 5.9CISA ADP v3.1 | 0.4% | 2024-04-17 | Fix |
| CVE-2024-2102 | Salon booking system WordPress plugin unauthenticated stored XSS | 4.7CISA ADP v3.1 | 0.5% | 2024-04-17 | Fix |
| CVE-2024-2101 | WordPress Plugin Salon Booking System unauthenticated stored cross-site scripting (XSS) | 5.7CISA ADP v3.1 | 0.6% | 2024-04-17 | Fix |
| CVE-2024-1350 | Honeypot for WP Comment WordPress plugin arbitrary file deletion | 5.3CNA v3.1 | 0.4% | 2024-04-17 | |
| CVE-2024-1249 | Keycloak's unvalidated cross-origin messages in checkLoginIframe leads to DDoS | 7.4CNA v3.1 | 0.4% | 2024-04-17 | Fix |
| CVE-2024-1219 | Easy Social Feed WordPress plugin Contributor+ stored XSS | 5.3CISA ADP v3.1 | 0.3% | 2024-04-17 | Fix |
| CVE-2024-1132 | Keycloak: Path transversal in redirection validation | 8.1CNA v3.1 | 1.6% | 2024-04-17 | Fix |
| CVE-2024-0868 | coreActivity WordPress plugin unauthenticated IP spoofing | 5.3CISA ADP v3.1 | 0.5% | 2024-04-17 | Fix |
| CVE-2024-0257 | RoboDK heap-based buffer overflow | 3.3CNA v3.1 | 0.2% | 2024-04-17 | Fix |
| CVE-2024-32634 | ASR Falcon logically dead code | 6.1CNA v3.1 | 0.3% | 2024-04-16 | Fix |
| CVE-2024-32633 | Falcon/Crane eMMC full disk test vulnerability | 4.0CNA v3.1 | 0.2% | 2024-04-16 | Fix |
| CVE-2024-32632 | ASR Falcon/Crane printf arg type mismatch in ATCMD | 6.6CNA v3.1 | 0.2% | 2024-04-16 | Fix |
| CVE-2024-32631 | ASR Falcon/Crane out-of-bounds read in telephony | 7.2CNA v3.1 | 0.3% | 2024-04-16 | Fix |
| CVE-2024-32625 | ASR Falcon/Crane uninitialized scalar field | 5.8CNA v3.1 | 0.4% | 2024-04-16 | Fix |
| CVE-2024-32557 | Exclusive Addons for Elementor WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.3% | 2024-04-16 | Fix |
| CVE-2024-32455 | Fatal Error Notify WordPress plugin broken access control | 4.3CNA v3.1 | 0.3% | 2024-04-16 | Fix |
| CVE-2024-32256 | PHPGurukul Tourism Management System unrestricted file upload | 8.1CISA ADP v3.1 | 0.7% | 2024-04-16 | Exploit code |
| CVE-2024-32254 | PHPGurukul Tourism Management System unrestricted file upload | 8.8CISA ADP v3.1 | 0.8% | 2024-04-16 | |
| CVE-2024-32086 | Citadela Listing WordPress plugin Unauth. sensitive data exposure | 7.5CNA v3.1 | 0.5% | 2024-04-16 | Fix |
| CVE-2024-32027 | Kohya_ss is vulnerable to a command injection in `finetune_gui.py` (`GHSL-2024-022`) | 9.1CNA v3.1 | 3.0% | 2024-04-16 | Fix |
| CVE-2024-32026 | Kohya_ss is vulnerable to a command injection in `git_caption_gui.py` (`GHSL-2024-020`) | 9.1CNA v3.1 | 3.0% | 2024-04-16 | Fix |
| CVE-2024-32025 | Kohya_ss is vulnerable to a command injection in `group_images_gui.py` (`GHSL-2024-021`) | 9.1CNA v3.1 | 2.5% | 2024-04-16 | Fix |
| CVE-2024-32024 | Kohya_ss vulenrable to path injection in `common_gui.py` `add_pre_postfix` function | 6.5CNA v3.1 | 0.7% | 2024-04-16 | Fix |
| CVE-2024-32023 | Kohya_ss vulnerable to path injection in `common_gui.py` `find_and_replace` function | 6.5CNA v3.1 | 0.7% | 2024-04-16 | Fix |
| CVE-2024-32022 | Kohya_ss is vulnerable to a command injection in basic_caption_gui.py (GHSL-2024-019) | 9.1CNA v3.1 | 3.1% | 2024-04-16 | Fix |
| CVE-2024-31887 | IBM Security Verify Privilege information disclosure | 7.5CNA v3.1 | 0.5% | 2024-04-16 | Fix |
| CVE-2024-31784 | Typora authentication bypass by spoofing | 6.1CISA ADP v3.1 | 0.3% | 2024-04-16 | |
| CVE-2024-31783 | Typora cross-site scripting | 6.1CISA ADP v3.1 | 0.4% | 2024-04-16 | |
| CVE-2024-31760 | flipped-aurora gin-vue-admin session expiration privilege escalation | 4.7CISA ADP v3.1 | 0.5% | 2024-04-16 | |
| CVE-2024-31759 | PublicCMS privilege escalation | 8.8CISA ADP v3.1 | 0.9% | 2024-04-16 | |
| CVE-2024-31634 | XunRuiCMS cross-site scripting | 6.1CISA ADP v3.1 | 0.6% | 2024-04-16 | |
| CVE-2024-31452 | OpenFGA authorization bypass | 8.1CNA v3.1 | 0.7% | 2024-04-16 | Fix |
| CVE-2024-31451 | arc53 DocsGPT limited file write in routes.py (GHSL-2023-250) | 5.3CNA v3.1 | 0.6% | 2024-04-16 | Fix |
| CVE-2024-31446 | OpenComputers denial of service using xpcall | 7.7CNA v3.1 | 0.6% | 2024-04-16 | Fix |
| CVE-2024-30567 | JNT Telecom JNT Liftcom UMS network troubleshooting functionality remote code execution | 6.3CISA ADP v3.1 | 0.6% | 2024-04-16 | |
| CVE-2024-30380 | Junos OS and Junos OS Evolved: L2cpd crash upon receipt of a specific TLV | 7.1CNA v4.0 | 0.3% | 2024-04-16 | Fix |
| CVE-2024-30378 | Junos OS: MX Series: Bbe-smgd process crash upon execution of specific CLI commands | 6.9CNA v4.0 | 0.2% | 2024-04-16 | Fix |
| CVE-2024-30256 | open-webui open WebUI vulnerable to server-side request forgery in utils.py | 6.4CNA v3.1 | 0.4% | 2024-04-16 | Fix |
| CVE-2024-29402 | cskefu session management insufficient session expiration | 4.3CISA ADP v3.1 | 0.5% | 2024-04-16 | |
| CVE-2024-29291 | Laravel Framework debug log file information disclosure | – | 1.3% | 2024-04-16 | Exploit code |
| CVE-2024-27086 | MSAL.NET Android activity export configuration denial of service | 3.9CNA v3.1 | 0.2% | 2024-04-16 | Fix |
| CVE-2024-25911 | MoveTo WordPress plugin unauthenticated arbitrary file deletion | 8.6CNA v3.1 | 0.5% | 2024-04-16 | |
| CVE-2024-22262 | Spring Framework URL Parsing with Host Validation | 8.1CNA v3.1 | 1.2% | 2024-04-16 | Fix |
| CVE-2024-21121 | Oracle VM VirtualBox Core component unauthorized data access | 6.5CNA v3.1 | 0.4% | 2024-04-16 | Fix |
| CVE-2024-21120 | Oracle Outside In Technology Outside In Core component unauthorized data modification | 5.3CNA v3.1 | 0.2% | 2024-04-16 | Fix |
| CVE-2024-21119 | Oracle Outside In Technology Outside In Core component unauthorized data modification | 5.3CNA v3.1 | 0.2% | 2024-04-16 | Fix |
| CVE-2024-21118 | Oracle Outside In Technology Outside In Core component unauthorized data modification | 5.3CNA v3.1 | 0.2% | 2024-04-16 | Fix |
| CVE-2024-21117 | Oracle Outside In Technology Outside In Core component unauthorized data modification | 5.3CNA v3.1 | 0.3% | 2024-04-16 | Fix |
| CVE-2024-21116 | Oracle VM VirtualBox Core component takeover | 7.8CNA v3.1 | 0.4% | 2024-04-16 | Fix |
| CVE-2024-21115 | Oracle VM VirtualBox Core component takeover | 8.8CNA v3.1 | 0.5% | 2024-04-16 | Fix |
| CVE-2024-21114 | Oracle VM VirtualBox Core component takeover | 8.8CNA v3.1 | 0.4% | 2024-04-16 | Fix |
| CVE-2024-21113 | Oracle VM VirtualBox Core component takeover | 8.8CNA v3.1 | 0.4% | 2024-04-16 | Fix |
| CVE-2024-21112 | Oracle VM VirtualBox Core component takeover | 8.8CNA v3.1 | 0.4% | 2024-04-16 | Fix |
| CVE-2024-21111 | Oracle VM VirtualBox Core component takeover | 7.8CNA v3.1 | 1.8% | 2024-04-16 | Exploit codeFix |
| CVE-2024-21110 | Oracle VM VirtualBox Core component takeover | 7.3CNA v3.1 | 0.5% | 2024-04-16 | Fix |
| CVE-2024-21109 | Oracle VM VirtualBox Core component unauthorized data access | 5.9CNA v3.1 | 1.1% | 2024-04-16 | Fix |
| CVE-2024-21108 | Oracle VM VirtualBox Core component information disclosure | 3.3CNA v3.1 | 0.3% | 2024-04-16 | Fix |
| CVE-2024-21107 | Oracle VM VirtualBox Core component takeover | 6.7CNA v3.1 | 0.4% | 2024-04-16 | Exploit codeFix |
| CVE-2024-21106 | Oracle VM VirtualBox Core component denial of service | 6.5CNA v3.1 | 0.3% | 2024-04-16 | Fix |
| CVE-2024-21105 | Oracle Solaris utility component information disclosure | 2.0CNA v3.1 | 0.3% | 2024-04-16 | Fix |
| CVE-2024-21104 | Oracle ZFS Storage Appliance Kit Core component takeover | 6.5CNA v3.1 | 0.2% | 2024-04-16 | Fix |
| CVE-2024-21103 | Oracle VM VirtualBox Core component takeover | 7.8CNA v3.1 | 0.3% | 2024-04-16 | Fix |
| CVE-2024-21102 | Oracle MySQL Server Thread Pooling component denial of service | 4.9CNA v3.1 | 1.1% | 2024-04-16 | Fix |
| CVE-2024-21101 | Oracle MySQL Cluster General component information disclosure | 2.2CNA v3.1 | 0.4% | 2024-04-16 | Fix |
| CVE-2024-21100 | Oracle Commerce Platform unauthorized data modification | 4.0CNA v3.1 | 0.3% | 2024-04-16 | Fix |
| CVE-2024-21099 | Oracle Business Intelligence Enterprise Edition Data Visualization component information disclosure | 4.3CNA v3.1 | 0.4% | 2024-04-16 | Fix |
| CVE-2024-21098 | Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition Compiler component denial of service | 3.7CNA v3.1 | 0.6% | 2024-04-16 | Fix |
| CVE-2024-21097 | Oracle PeopleSoft Enterprise PeopleTools Security component unauthorized data access | 4.9CNA v3.1 | 0.5% | 2024-04-16 | Fix |
| CVE-2024-21096 | Oracle MySQL Server client mysqldump component unauthorized data modification | 4.9CNA v3.1 | 0.4% | 2024-04-16 | Fix |
| CVE-2024-21095 | Oracle Primavera P6 Enterprise Project Portfolio Management unauthorized data access | 8.2CNA v3.1 | 0.5% | 2024-04-16 | Fix |
| CVE-2024-21094 | Oracle Java SE JDK and JRE acceptance of untrusted data | 3.7CNA v3.1 | 0.8% | 2024-04-16 | Fix |
| CVE-2024-21093 | Oracle Database unauthorized access | 5.3CNA v3.1 | 0.4% | 2024-04-16 | Fix |
| CVE-2024-21092 | Oracle Agile Product Lifecycle Management for Process unauthorized data access | 8.1CNA v3.1 | 0.6% | 2024-04-16 | Fix |
| CVE-2024-21091 | Oracle Agile Product Lifecycle Management for Process Data Import component unauthorized data access | 6.5CNA v3.1 | 0.4% | 2024-04-16 | Fix |
| CVE-2024-21090 | Oracle MySQL Connectors Connector/Python component denial of service | 7.5CNA v3.1 | 0.7% | 2024-04-16 | Fix |
| CVE-2024-21089 | Oracle E-Business Suite Concurrent Processing unauthorized data access | 6.5CNA v3.1 | 0.5% | 2024-04-16 | Fix |
| CVE-2024-21088 | Oracle E-Business Suite Production Scheduling unauthorized data modification | 7.5CNA v3.1 | 0.5% | 2024-04-16 | Fix |
| CVE-2024-21087 | Oracle MySQL Server Group Replication plugin component denial of service | 4.9CNA v3.1 | 0.9% | 2024-04-16 | Fix |
| CVE-2024-21086 | Oracle E-Business Suite CRM Technical Foundation unauthorized data modification | 4.3CNA v3.1 | 0.4% | 2024-04-16 | Fix |
| CVE-2024-21085 | Oracle Java SE, Oracle GraalVM Enterprise Edition Concurrency component denial of service | 3.7CNA v3.1 | 1.3% | 2024-04-16 | Fix |
| CVE-2024-21084 | Oracle BI Publisher Service Gateway component information disclosure | 5.8CNA v3.1 | 0.4% | 2024-04-16 | Fix |
| CVE-2024-21083 | Oracle BI Publisher Script Engine component takeover | 7.2CNA v3.1 | 0.7% | 2024-04-16 | Fix |
| CVE-2024-21082 | Oracle BI Publisher XML services component takeover | 9.8CNA v3.1 | 0.8% | 2024-04-16 | Fix |
| CVE-2024-21081 | Oracle E-Business Suite Partner Management unauthorized data modification | 4.7CNA v3.1 | 0.4% | 2024-04-16 | Fix |
| CVE-2024-21080 | Oracle E-Business Suite Applications Framework REST services component unauthorized data access | 6.5CNA v3.1 | 0.5% | 2024-04-16 | Fix |
| CVE-2024-21079 | Oracle E-Business Suite Marketing Campaign LOV component unauthorized data access | 7.5CNA v3.1 | 0.6% | 2024-04-16 | Fix |
| CVE-2024-21078 | Oracle E-Business Suite Marketing Campaign LOV component unauthorized data access | 7.5CNA v3.1 | 0.6% | 2024-04-16 | Fix |
| CVE-2024-21077 | Oracle E-Business Suite Trade Management GL Accounts LOV component unauthorized data access | 7.5CNA v3.1 | 0.6% | 2024-04-16 | Fix |
| CVE-2024-21076 | Oracle E-Business Suite Trade Management Offer LOV component unauthorized data access | 7.5CNA v3.1 | 0.6% | 2024-04-16 | Fix |
| CVE-2024-21075 | Oracle E-Business Suite Trade Management Claim Line LOV component unauthorized data access | 7.5CNA v3.1 | 0.7% | 2024-04-16 | Fix |
| CVE-2024-21074 | Oracle E-Business Suite Trade Management Finance LOV component unauthorized data access | 7.5CNA v3.1 | 0.6% | 2024-04-16 | Fix |
| CVE-2024-21073 | Oracle E-Business Suite Trade Management Claim LOV component unauthorized data access | 7.5CNA v3.1 | 0.6% | 2024-04-16 | Fix |
| CVE-2024-21072 | Oracle E-Business Suite Installed Base Data Provider UI component unauthorized data modification | 6.1CNA v3.1 | 0.4% | 2024-04-16 | Fix |
| CVE-2024-21071 | Oracle E-Business Suite Workflow Admin Screens and Grants UI component takeover | 9.1CNA v3.1 | 0.7% | 2024-04-16 | Fix |
| CVE-2024-21070 | Oracle PeopleSoft Enterprise PeopleTools Search Framework component unauthorized data modification | 5.4CNA v3.1 | 0.3% | 2024-04-16 | Fix |
| CVE-2024-21069 | Oracle MySQL Server DDL component denial of service | 4.9CNA v3.1 | 0.8% | 2024-04-16 | Fix |
| CVE-2024-21068 | Oracle Java SE Hotspot vulnerability | 3.7CNA v3.1 | 1.3% | 2024-04-16 | Fix |
| CVE-2024-21067 | Oracle Enterprise Manager Base Platform Host Management component takeover | 8.8CNA v3.1 | 0.2% | 2024-04-16 | Fix |
| CVE-2024-21066 | Oracle Database cross-site scripting | 4.2CNA v3.1 | 0.3% | 2024-04-16 | Fix |
| CVE-2024-21065 | Oracle PeopleSoft Enterprise PeopleTools Workflow component unauthorized data modification | 6.1CNA v3.1 | 0.3% | 2024-04-16 | Fix |
| CVE-2024-21064 | Oracle Business Intelligence Enterprise Edition unauthorized data modification | 5.4CNA v3.1 | 0.3% | 2024-04-16 | Fix |
| CVE-2024-21063 | Oracle PeopleSoft Enterprise HCM Benefits Administration unauthorized data access | 6.1CNA v3.1 | 0.2% | 2024-04-16 | Fix |
| CVE-2024-21062 | Oracle MySQL Server Optimizer component denial of service | 4.9CNA v3.1 | 0.8% | 2024-04-16 | Fix |
| CVE-2024-21061 | Oracle MySQL Server Audit plug-in component denial of service | 4.9CNA v3.1 | 0.9% | 2024-04-16 | Fix |
| CVE-2024-21060 | Oracle MySQL Server Data Dictionary component denial of service | 4.9CNA v3.1 | 0.9% | 2024-04-16 | Fix |
| CVE-2024-21059 | Oracle Solaris utility component takeover | 7.8CNA v3.1 | 0.2% | 2024-04-16 | Fix |
| CVE-2024-21058 | Oracle Database Unified Audit vulnerability | 4.9CNA v3.1 | 0.4% | 2024-04-16 | Fix |
| CVE-2024-21057 | Oracle MySQL Server Optimizer component denial of service | 4.9CNA v3.1 | 1.0% | 2024-04-16 | Fix |
| CVE-2024-21056 | Oracle MySQL Server DML component denial of service | 4.9CNA v3.1 | 0.9% | 2024-04-16 | Fix |
| CVE-2024-21055 | Oracle MySQL Server Optimizer component denial of service | 4.9CNA v3.1 | 0.9% | 2024-04-16 | Fix |
| CVE-2024-21054 | Oracle MySQL Server Optimizer component denial of service | 4.9CNA v3.1 | 1.0% | 2024-04-16 | Fix |
| CVE-2024-21053 | Oracle MySQL Server DML component denial of service | 4.9CNA v3.1 | 1.0% | 2024-04-16 | Fix |
| CVE-2024-21052 | Oracle MySQL Server DML component denial of service | 4.9CNA v3.1 | 0.9% | 2024-04-16 | Fix |
| CVE-2024-21051 | Oracle MySQL Server DML component denial of service | 4.9CNA v3.1 | 1.0% | 2024-04-16 | Fix |
| CVE-2024-21050 | Oracle MySQL Server DML component denial of service | 4.9CNA v3.1 | 1.0% | 2024-04-16 | Fix |
| CVE-2024-21049 | Oracle MySQL Server DML component denial of service | 4.9CNA v3.1 | 1.0% | 2024-04-16 | Fix |
| CVE-2024-21048 | Oracle Web Applications Desktop Integrator XML input component information disclosure | 4.3CNA v3.1 | 0.4% | 2024-04-16 | Fix |
| CVE-2024-21047 | Oracle MySQL Server InnoDB component denial of service | 4.9CNA v3.1 | 0.9% | 2024-04-16 | Fix |
| CVE-2024-21046 | Oracle Complex Maintenance, Repair, and Overhaul LOV component unauthorized data modification | 6.1CNA v3.1 | 0.4% | 2024-04-16 | Fix |
| CVE-2024-21045 | Oracle Complex Maintenance, Repair, and Overhaul LOV component unauthorized data modification | 6.1CNA v3.1 | 0.4% | 2024-04-16 | Fix |
| CVE-2024-21044 | Oracle Complex Maintenance, Repair, and Overhaul LOV component unauthorized data modification | 6.1CNA v3.1 | 0.2% | 2024-04-16 | Fix |
| CVE-2024-21043 | Oracle Complex Maintenance, Repair, and Overhaul LOV component unauthorized data modification | 6.1CNA v3.1 | 0.2% | 2024-04-16 | Fix |
| CVE-2024-21042 | Oracle Complex Maintenance, Repair, and Overhaul LOV component unauthorized data modification | 6.1CNA v3.1 | 0.3% | 2024-04-16 | Fix |
| CVE-2024-21041 | Oracle Complex Maintenance, Repair, and Overhaul LOV component unauthorized data modification | 6.1CNA v3.1 | 0.4% | 2024-04-16 | Fix |
| CVE-2024-21040 | Oracle Complex Maintenance, Repair, and Overhaul LOV component unauthorized data modification | 6.1CNA v3.1 | 0.4% | 2024-04-16 | Fix |
| CVE-2024-21039 | Oracle Complex Maintenance, Repair, and Overhaul LOV component unauthorized data modification | 6.1CNA v3.1 | 0.3% | 2024-04-16 | Fix |
| CVE-2024-21038 | Oracle Complex Maintenance, Repair, and Overhaul LOV component unauthorized data modification | 6.1CNA v3.1 | 0.3% | 2024-04-16 | Fix |
| CVE-2024-21037 | Oracle Complex Maintenance, Repair, and Overhaul LOV component unauthorized data modification | 6.1CNA v3.1 | 0.4% | 2024-04-16 | Fix |
| CVE-2024-21036 | Oracle Complex Maintenance, Repair, and Overhaul LOV component unauthorized data modification | 6.1CNA v3.1 | 0.3% | 2024-04-16 | Fix |
| CVE-2024-21035 | Oracle Complex Maintenance, Repair, and Overhaul LOV component unauthorized data modification | 6.1CNA v3.1 | 0.4% | 2024-04-16 | Fix |
| CVE-2024-21034 | Oracle Complex Maintenance, Repair, and Overhaul LOV component unauthorized data modification | 6.1CNA v3.1 | 0.4% | 2024-04-16 | Fix |
| CVE-2024-21033 | Oracle Complex Maintenance, Repair, and Overhaul LOV component unauthorized data modification | 6.1CNA v3.1 | 0.4% | 2024-04-16 | Fix |
| CVE-2024-21032 | Oracle Complex Maintenance, Repair, and Overhaul LOV component unauthorized data modification | 6.1CNA v3.1 | 0.2% | 2024-04-16 | Fix |
| CVE-2024-21031 | Oracle Complex Maintenance, Repair, and Overhaul LOV component unauthorized data modification | 6.1CNA v3.1 | 0.3% | 2024-04-16 | Fix |
| CVE-2024-21030 | Oracle Complex Maintenance, Repair, and Overhaul LOV component unauthorized data modification | 6.1CNA v3.1 | 0.3% | 2024-04-16 | Fix |
| CVE-2024-21029 | Oracle Complex Maintenance, Repair, and Overhaul LOV component unauthorized data modification | 6.1CNA v3.1 | 0.3% | 2024-04-16 | Fix |
| CVE-2024-21028 | Oracle Complex Maintenance, Repair, and Overhaul LOV component unauthorized data modification | 6.1CNA v3.1 | 0.4% | 2024-04-16 | Fix |
| CVE-2024-21027 | Oracle Complex Maintenance, Repair, and Overhaul LOV component unauthorized data modification | 6.1CNA v3.1 | 0.4% | 2024-04-16 | Fix |
| CVE-2024-21026 | Oracle Complex Maintenance, Repair, and Overhaul LOV component unauthorized data modification | 6.1CNA v3.1 | 0.4% | 2024-04-16 | Fix |
| CVE-2024-21025 | Oracle Complex Maintenance, Repair, and Overhaul LOV component unauthorized data modification | 6.1CNA v3.1 | 0.4% | 2024-04-16 | Fix |
| CVE-2024-21024 | Oracle Complex Maintenance, Repair, and Overhaul LOV component unauthorized data modification | 6.1CNA v3.1 | 0.4% | 2024-04-16 | Fix |
| CVE-2024-21023 | Oracle Complex Maintenance, Repair, and Overhaul LOV component unauthorized data modification | 6.1CNA v3.1 | 0.4% | 2024-04-16 | Fix |
| CVE-2024-21022 | Oracle Complex Maintenance, Repair, and Overhaul LOV component unauthorized data modification | 6.1CNA v3.1 | 0.4% | 2024-04-16 | Fix |
| CVE-2024-21021 | Oracle Complex Maintenance, Repair, and Overhaul LOV component unauthorized data modification | 6.1CNA v3.1 | 0.4% | 2024-04-16 | Fix |
| CVE-2024-21020 | Oracle Complex Maintenance, Repair, and Overhaul LOV component unauthorized data modification | 6.1CNA v3.1 | 0.2% | 2024-04-16 | Fix |
| CVE-2024-21019 | Oracle Complex Maintenance, Repair, and Overhaul LOV component unauthorized data modification | 6.1CNA v3.1 | 0.4% | 2024-04-16 | Fix |
| CVE-2024-21018 | Oracle Complex Maintenance, Repair, and Overhaul LOV component unauthorized data modification | 6.1CNA v3.1 | 0.3% | 2024-04-16 | Fix |
| CVE-2024-21017 | Oracle Complex Maintenance, Repair, and Overhaul LOV component unauthorized data modification | 6.1CNA v3.1 | 0.4% | 2024-04-16 | Fix |
| CVE-2024-21016 | Oracle Complex Maintenance, Repair, and Overhaul LOV component unauthorized data modification | 6.1CNA v3.1 | 0.4% | 2024-04-16 | Fix |
| CVE-2024-21015 | Oracle MySQL Server DML component unauthorized data modification | 5.5CNA v3.1 | 0.8% | 2024-04-16 | Fix |
| CVE-2024-21014 | Oracle Hospitality Simphony Enterprise Server component takeover | 9.8CNA v3.1 | 0.8% | 2024-04-16 | Fix |
| CVE-2024-21013 | Oracle MySQL Server Optimizer component denial of service | 4.4CNA v3.1 | 0.9% | 2024-04-16 | Fix |
| CVE-2024-21012 | Oracle Java SE JDK and JRE incorrect default permissions | 3.7CNA v3.1 | 0.9% | 2024-04-16 | Fix |
| CVE-2024-21011 | Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition denial of service | 3.7CNA v3.1 | 1.4% | 2024-04-16 | Fix |
| CVE-2024-21010 | Oracle Hospitality Simphony Enterprise Server component takeover | 9.9CNA v3.1 | 0.7% | 2024-04-16 | Fix |
| CVE-2024-21009 | Oracle MySQL Server Optimizer component denial of service | 4.9CNA v3.1 | 1.1% | 2024-04-16 | Fix |
| CVE-2024-21008 | Oracle MySQL Server Optimizer component denial of service | 4.4CNA v3.1 | 0.9% | 2024-04-16 | Fix |
| CVE-2024-21007 | Oracle WebLogic Server Core component unauthorized data access | 7.5CNA v3.1 | 0.7% | 2024-04-16 | Fix |
| CVE-2024-21006 | Oracle WebLogic Server Core component unauthorized data access | 7.5CNA v3.1 | 7.9% | 2024-04-16 | Exploit codeFix |
| CVE-2024-21005 | Oracle Java SE, Oracle GraalVM Enterprise Edition JavaFX component unauthorized data modification | 3.1CNA v3.1 | 0.9% | 2024-04-16 | Fix |
| CVE-2024-21004 | Oracle Java SE, Oracle GraalVM Enterprise Edition JavaFX component unauthorized data modification | 2.5CNA v3.1 | 0.4% | 2024-04-16 | Fix |
| CVE-2024-21003 | Oracle Java SE, Oracle GraalVM Enterprise Edition JavaFX component unauthorized data modification | 3.1CNA v3.1 | 0.9% | 2024-04-16 | Fix |
| CVE-2024-21002 | Oracle Java SE, Oracle GraalVM Enterprise Edition JavaFX component unauthorized data modification | 2.5CNA v3.1 | 0.4% | 2024-04-16 | Fix |
| CVE-2024-21001 | Oracle Business Intelligence Enterprise Edition unauthorized data modification | 5.4CNA v3.1 | 0.4% | 2024-04-16 | Fix |
| CVE-2024-21000 | Oracle MySQL Server Security Privileges component unauthorized data modification | 3.8CNA v3.1 | 0.6% | 2024-04-16 | Fix |
| CVE-2024-20999 | Oracle Solaris Zones component takeover | 8.2CNA v3.1 | 0.3% | 2024-04-16 | Fix |
| CVE-2024-20998 | Oracle MySQL Server Optimizer component denial of service | 4.9CNA v3.1 | 1.0% | 2024-04-16 | Fix |
| CVE-2024-20997 | Oracle Hospitality Simphony Enterprise Server component takeover | 9.9CNA v3.1 | 0.8% | 2024-04-16 | Fix |
| CVE-2024-20995 | Oracle Database improper resource release | 2.4CNA v3.1 | 0.5% | 2024-04-16 | Fix |
| CVE-2024-20994 | Oracle MySQL Server Information Schema component denial of service | 5.3CNA v3.1 | 1.0% | 2024-04-16 | Fix |
| CVE-2024-20993 | Oracle MySQL Server Optimizer component denial of service | 4.9CNA v3.1 | 1.1% | 2024-04-16 | Fix |
| CVE-2024-20992 | Oracle WebCenter Portal Content integration component unauthorized data modification | 4.4CNA v3.1 | 0.3% | 2024-04-16 | Fix |
| CVE-2024-20991 | Oracle HTTP Server Web Listener component information disclosure | 5.3CNA v3.1 | 0.6% | 2024-04-16 | Fix |
| CVE-2024-20990 | Oracle E-Business Suite Applications Technology templates component information disclosure | 5.3CNA v3.1 | 0.5% | 2024-04-16 | Fix |
| CVE-2024-20989 | Oracle Hospitality Simphony POS component unauthorized data access | 7.0CNA v3.1 | 0.5% | 2024-04-16 | Fix |
| CVE-2024-20954 | Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition Compiler component information disclosure | 3.7CNA v3.1 | 0.5% | 2024-04-16 | Fix |
| CVE-2024-3882 | Tenda W30E fromRouteStatic stack-based overflow | 8.8v3.1 | 1.4% | 2024-04-16 | |
| CVE-2024-3881 | Tenda W30E frmL7ProtForm frmL7PlotForm stack-based overflow | 8.8v3.1 | 1.5% | 2024-04-16 | |
| CVE-2024-3880 | Tenda W30E WriteFacMac formWriteFacMac os command injection | 8.8v3.1 | 4.4% | 2024-04-16 | |
| CVE-2024-3879 | Tenda W30E setcfm formSetCfm stack-based overflow | 8.8v3.1 | 1.5% | 2024-04-16 | |
| CVE-2024-3878 | Tenda F1202 webExcptypemanFilter fromwebExcptypemanFilter stack-based overflow | 8.8v3.1 | 1.7% | 2024-04-16 | |
| CVE-2024-3877 | Tenda F1202 fromqossetting stack-based overflow | 8.8v3.1 | 1.8% | 2024-04-16 | |
| CVE-2024-3876 | Tenda F1202 VirtualSer fromVirtualSer stack-based overflow | 8.8v3.1 | 1.7% | 2024-04-16 | |
| CVE-2024-3875 | Tenda F1202 Natlimit fromNatlimit stack-based overflow | 8.8v3.1 | 1.6% | 2024-04-16 | |
| CVE-2024-3874 | Tenda W20E SetRemoteWebManage formSetRemoteWebManage stack-based overflow | 8.8v3.1 | 1.3% | 2024-04-16 | |
| CVE-2024-3873 | SMI SMI-EX-5414W web interface cross-site request forgery | 4.3CNA v3.1 | 0.3% | 2024-04-16 | |
| CVE-2024-3872 | Mattermost Mobile deeplink parsing denial of service | 3.1CNA v3.1 | 0.5% | 2024-04-16 | Fix |
| CVE-2024-3871 | Authenticated remote command injection in Delta Electronics DVW | 9.8CNA v3.1 | 1.7% | 2024-04-16 | |
| CVE-2024-3869 | Customer Reviews for WooCommerce WordPress plugin missing authorization authenticated Coupon Search | 4.3CNA v3.1 | 0.5% | 2024-04-16 | Fix |
| CVE-2024-3867 | Tainacan Interface WordPress theme reflected cross-site scripting | 6.1CNA v3.1 | 0.8% | 2024-04-16 | Fix |
| CVE-2024-3865 | Mozilla Firefox memory safety bugs | 8.1CISA ADP v3.1 | 0.5% | 2024-04-16 | Fix |
| CVE-2024-3864 | Mozilla Firefox memory safety bugs | 8.1CISA ADP v3.1 | 0.9% | 2024-04-16 | Fix |
| CVE-2024-3863 | Mozilla Firefox unrestricted file upload | 9.8v3.1 | 0.8% | 2024-04-16 | Fix |
| CVE-2024-3862 | Mozilla Firefox uninitialized resource use | 5.3CISA ADP v3.1 | 0.4% | 2024-04-16 | Fix |
| CVE-2024-3861 | Mozilla Firefox use-after-free | 4.0CISA ADP v3.1 | 0.2% | 2024-04-16 | Fix |
| CVE-2024-3860 | Mozilla Firefox memory leak | 6.2CISA ADP v3.1 | 0.2% | 2024-04-16 | Fix |
| CVE-2024-3859 | Mozilla Firefox out-of-bounds read | 5.9CISA ADP v3.1 | 0.7% | 2024-04-16 | Fix |
| CVE-2024-3858 | Mozilla Firefox null pointer dereference | 7.5CISA ADP v3.1 | 0.6% | 2024-04-16 | Fix |
| CVE-2024-3857 | Mozilla Firefox use-after-free | 7.8CISA ADP v3.1 | 0.2% | 2024-04-16 | Fix |
| CVE-2024-3856 | Mozilla Firefox use-after-free | 8.8CISA ADP v3.1 | 0.6% | 2024-04-16 | Fix |
| CVE-2024-3855 | Mozilla Firefox out-of-bounds read | 6.5CISA ADP v3.1 | 0.4% | 2024-04-16 | Fix |
| CVE-2024-3854 | Mozilla Firefox out-of-bounds read | 8.8CISA ADP v3.1 | 0.7% | 2024-04-16 | Fix |
| CVE-2024-3853 | Mozilla Firefox use-after-free | 7.5CISA ADP v3.1 | 0.4% | 2024-04-16 | Fix |
| CVE-2024-3852 | Mozilla Firefox JIT compiler vulnerability | 7.5CISA ADP v3.1 | 0.6% | 2024-04-16 | Fix |
| CVE-2024-3672 | BA Book Everything WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.3% | 2024-04-16 | Fix |
| CVE-2024-3660 | Arbitrary code injection vulnerability in Keras framework | 9.8CISA ADP v3.1 | 1.7% | 2024-04-16 | Exploit codeFix |
| CVE-2024-3575 | Cross-site scripting (XSS) Stored in mindsdb/mindsdb | 6.1v3.1 | 0.4% | 2024-04-16 | |
| CVE-2024-3574 | Authorization header leak during Cross-Domain Redirect in scrapy/scrapy | 7.5CNA v3.0 | 0.6% | 2024-04-16 | Fix |
| CVE-2024-3573 | Local file inclusion (LFI) via Scheme Confusion in MLflow/MLflow | 9.3v3.1 | 0.7% | 2024-04-16 | Fix |
| CVE-2024-3572 | XML external entity (XXE) vulnerability in scrapy/scrapy | 7.5CNA v3.0 | 0.8% | 2024-04-16 | Fix |
| CVE-2024-3571 | Path traversal in langchain-ai/langchain | 8.8v3.1 | 1.9% | 2024-04-16 | Fix |
| CVE-2024-3367 | Checkmk argument injection to runmqsc | 6.5CNA v3.1 | 0.3% | 2024-04-16 | Fix |
| CVE-2024-3302 | Mozilla Firefox resource exhaustion | 3.7CISA ADP v3.1 | 0.8% | 2024-04-16 | Fix |
| CVE-2024-3271 | Command injection in run-llama/llama_index | 9.8CNA v3.0 | 2.9% | 2024-04-16 | Fix |
| CVE-2024-3243 | CusRev Customer Reviews for WooCommerce plugin missing authorization | 4.3CNA v3.1 | 0.4% | 2024-04-16 | Fix |
| CVE-2024-3067 | WooCommerce Google Feed Manager WordPress plugin SQL injection to reflected cross-site scripting | 7.2CNA v3.1 | 0.7% | 2024-04-16 | Fix |
| CVE-2024-3029 | Improper input validation in mintplex-labs/anything-llm | 8.0NVD v3.1 | 0.7% | 2024-04-16 | Fix |
| CVE-2024-3028 | Improper input validation in mintplex-labs/anything-llm | 7.2CNA v3.0 | 0.8% | 2024-04-16 | Fix |
| CVE-2024-2912 | Insecure deserialization leading to RCE in bentoml/bentoml | 10.0CNA v3.1 | 1.5% | 2024-04-16 | Fix |
| CVE-2024-2260 | Session fixation vulnerability in zenml-io/ZenML | 4.2v3.1 | 0.4% | 2024-04-16 | Fix |
| CVE-2024-2083 | Directory traversal in zenml-io/ZenML | 9.9v3.1 | 37.5% | 2024-04-16 | Exploit codeFix |
| CVE-2024-1961 | Path traversal leading to arbitrary file write and RCE in vertaai/modeldb | 8.8CNA v3.0 | 1.0% | 2024-04-16 | |
| CVE-2024-1739 | Case Insensitive Email Address Validation vulnerability in lunary-ai/Lunary | 9.1v3.1 | 0.6% | 2024-04-16 | Fix |
| CVE-2024-1738 | Incorrect authorization in lunary-ai/Lunary | 7.5v3.1 | 0.6% | 2024-04-16 | Fix |
| CVE-2024-1666 | Unauthorized Radar Creation in lunary-ai/Lunary | 5.3NVD v3.1 | 0.5% | 2024-04-16 | Fix |
| CVE-2024-1646 | Authentication bypass in parisneo/lollms-webui | 8.2CNA v3.0 | 0.7% | 2024-04-16 | Fix |
| CVE-2024-1626 | IDOR vulnerability in lunary-ai/Lunary | 8.1NVD v3.1 | 0.5% | 2024-04-16 | Fix |
| CVE-2024-1601 | SQL injection in parisneo/lollms-webui | 9.8v3.1 | 40.4% | 2024-04-16 | Fix |
| CVE-2024-1594 | Local File Read via path traversal in MLflow/MLflow | 7.5v3.1 | 0.7% | 2024-04-16 | Fix |
| CVE-2024-1593 | Path traversal via Parameter Smuggling in MLflow/MLflow | 7.5v3.1 | 0.7% | 2024-04-16 | Fix |
| CVE-2024-1569 | Uncontrolled resource consumption in parisneo/lollms-webui | 7.5v3.1 | 0.8% | 2024-04-16 | Fix |
| CVE-2024-1561 | Arbitrary Local File Read via component Method Invocation in gradio-app/Gradio | 7.5CNA v3.0 | 9.3% | 2024-04-16 | NucleiExploit codeFix |
| CVE-2024-1560 | Path traversal vulnerability in MLflow/MLflow | 8.1v3.1 | 0.9% | 2024-04-16 | Fix |
| CVE-2024-1558 | Path traversal vulnerability in MLflow/MLflow | 7.5v3.1 | 0.9% | 2024-04-16 | Fix |
| CVE-2024-1483 | Path traversal vulnerability in MLflow/MLflow | 7.5v3.1 | 2.7% | 2024-04-16 | NucleiFix |
| CVE-2024-1456 | S3 Bucket takeover in h2oai/h2o-3 | 7.1CNA v3.0 | 0.2% | 2024-04-16 | |
| CVE-2024-1357 | Shortcodes and extra features for Phlox WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.4% | 2024-04-16 | Fix |
| CVE-2024-1183 | SSRF vulnerability in gradio-app/Gradio | 6.5CNA v3.0 | 1.8% | 2024-04-16 | NucleiFix |
| CVE-2024-1135 | HTTP request smuggling in benoitc/gunicorn | 7.5CNA v3.0 | 3.0% | 2024-04-16 | Fix |
| CVE-2024-0549 | Relative path traversal in mintplex-labs/anything-llm | 8.1CNA v3.0 | 0.8% | 2024-04-16 | Fix |
| CVE-2024-0404 | Mass assignment vulnerability in mintplex-labs/anything-llm | 9.1CNA v3.0 | 0.8% | 2024-04-16 | Fix |
| CVE-2024-32489 | TCPDF cross-site scripting | 6.1CISA ADP v3.1 | 0.6% | 2024-04-15 | Fix |
| CVE-2024-32488 | Foxit PDF Reader improper handling of insufficient permissions | 7.8CISA ADP v3.1 | 0.2% | 2024-04-15 | Fix |
| CVE-2024-32454 | Wappointment WordPress plugin server side request forgery (SSRF) | 4.4CNA v3.1 | 0.3% | 2024-04-15 | Fix |
| CVE-2024-32453 | POEditor WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.3% | 2024-04-15 | Fix |
| CVE-2024-32452 | WP EasyCart WordPress plugin cross-site request forgery | 5.4CNA v3.1 | 0.2% | 2024-04-15 | Fix |
| CVE-2024-32451 | Legal Pages WordPress plugin cross-site request forgery (CSRF) | 4.3CNA v3.1 | 0.2% | 2024-04-15 | Fix |
| CVE-2024-32450 | WpTravelly WordPress plugin cross-site request forgery (CSRF) | 4.3CNA v3.1 | 0.2% | 2024-04-15 | Fix |
| CVE-2024-32449 | RestroPress WordPress plugin cross-site request forgery (CSRF) | 5.4CNA v3.1 | 0.2% | 2024-04-15 | Fix |
| CVE-2024-32448 | Ads.txt Admin WordPress plugin cross-site request forgery (CSRF) | 4.3CNA v3.1 | 0.2% | 2024-04-15 | |
| CVE-2024-32447 | AWP Classifieds WordPress plugin cross-site request forgery (CSRF) | 4.3CNA v3.1 | 0.2% | 2024-04-15 | Fix |
| CVE-2024-32446 | Wallet System for WooCommerce WordPress plugin cross-site request forgery (CSRF) | 5.4CNA v3.1 | 0.2% | 2024-04-15 | Fix |
| CVE-2024-32445 | WebinarIgnition WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.2% | 2024-04-15 | Fix |
| CVE-2024-32443 | IP2Location Country Blocker WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.2% | 2024-04-15 | Fix |
| CVE-2024-32442 | Zoho Campaigns WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.2% | 2024-04-15 | Fix |
| CVE-2024-32441 | Zoho Campaigns WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.2% | 2024-04-15 | Fix |
| CVE-2024-32440 | Asgaros Forum WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.2% | 2024-04-15 | Fix |
| CVE-2024-32439 | WP Client Reports WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.2% | 2024-04-15 | Fix |
| CVE-2024-32438 | SEO Booster WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.2% | 2024-04-15 | Fix |
| CVE-2024-32437 | eCommerce Product Catalog WordPress plugin cross-site request forgery (CSRF) | 4.3CNA v3.1 | 0.2% | 2024-04-15 | Fix |
| CVE-2024-32436 | Gift Cards WordPress plugin cross-site request forgery (CSRF) | 4.3CNA v3.1 | 0.2% | 2024-04-15 | Fix |
| CVE-2024-32435 | AffiEasy WordPress plugin cross-site request forgery (CSRF) | 4.3CNA v3.1 | 0.2% | 2024-04-15 | Fix |
| CVE-2024-32434 | Order Delivery Date for WooCommerce WordPress plugin cross-site request forgery (CSRF) | 4.3CNA v3.1 | 0.2% | 2024-04-15 | Fix |
| CVE-2024-32433 | BEAF WordPress plugin cross-site request forgery (CSRF) | 4.3CNA v3.1 | 0.2% | 2024-04-15 | Fix |
| CVE-2024-32431 | Import Users from CSV WordPress plugin PHP object injection | 7.2v3.1 | 0.4% | 2024-04-15 | Fix |
| CVE-2024-32430 | ActiveCampaign WordPress plugin server side request forgery (SSRF) | 9.8v3.1 | 0.4% | 2024-04-15 | Fix |
| CVE-2024-32429 | WPChill Remove Footer Credit plugin stored cross-site scripting | 4.8v3.1 | 0.3% | 2024-04-15 | Fix |
| CVE-2024-32428 | MWW Disclaimer Buttons WordPress plugin stored cross-site scripting (XSS) | 4.8v3.1 | 0.3% | 2024-04-15 | Fix |
| CVE-2024-32149 | Jobs for WordPress plugin cross-site scripting (XSS) | 6.1NVD v3.1 | 0.4% | 2024-04-15 | Fix |
| CVE-2024-32147 | Contact Form WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.3% | 2024-04-15 | Fix |
| CVE-2024-32145 | PineWise WP Google Analytics Events plugin reflected cross-site scripting | 6.1NVD v3.1 | 0.4% | 2024-04-15 | Fix |
| CVE-2024-32141 | Libsyn Publisher Hub WordPress plugin cross-site request forgery (CSRF) | 4.3CNA v3.1 | 0.2% | 2024-04-15 | |
| CVE-2024-32140 | Libsyn Publisher Hub WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.3% | 2024-04-15 | |
| CVE-2024-32139 | Podlove Podcast Publisher WordPress plugin SQL injection | 8.8v3.1 | 1.0% | 2024-04-15 | Fix |
| CVE-2024-32138 | Short URL WordPress plugin cross-site scripting (XSS) | 6.1NVD v3.1 | 0.4% | 2024-04-15 | |
| CVE-2024-32137 | User Activity Log Pro WordPress plugin Auth. SQL injection | 8.5CNA v3.1 | 0.5% | 2024-04-15 | |
| CVE-2024-32136 | BWL Advanced FAQ Manager WordPress plugin Auth. SQL injection | 7.6CNA v3.1 | 1.3% | 2024-04-15 | Exploit codeFix |
| CVE-2024-32135 | WPZest Disable Comments plugin SQL injection | 7.6CNA v3.1 | 0.5% | 2024-04-15 | |
| CVE-2024-32134 | Forms to Zapier WordPress plugin Auth. SQL injection | 7.6CNA v3.1 | 0.5% | 2024-04-15 | |
| CVE-2024-32133 | EZ Form Calculator WordPress plugin reflected cross-site scripting (XSS) | 6.1NVD v3.1 | 0.4% | 2024-04-15 | |
| CVE-2024-32132 | CBX Bookmark and Favorite WordPress plugin SQL injection | 7.6CNA v3.1 | 0.5% | 2024-04-15 | Fix |
| CVE-2024-32129 | Freshdesk (official) WordPress plugin open redirection | 4.7CNA v3.1 | 0.4% | 2024-04-15 | Fix |
| CVE-2024-32128 | Realtyna Organic IDX plugin + WPL Real Estate WordPress plugin unauthenticated SQL injection | 9.3CNA v3.1 | 1.7% | 2024-04-15 | NucleiFix |
| CVE-2024-32127 | Find Duplicates WordPress plugin Auth. SQL injection | 8.8v3.1 | 0.6% | 2024-04-15 | |
| CVE-2024-32125 | BA Book Everything WordPress plugin Auth. SQL injection | 8.8v3.1 | 0.6% | 2024-04-15 | Fix |
| CVE-2024-32104 | NextMove Lite WordPress plugin cross-site request forgery (CSRF) | 4.3CNA v3.1 | 0.7% | 2024-04-15 | Fix |
| CVE-2024-32103 | Siteimprove WordPress plugin cross-site request forgery (CSRF) | 5.4CNA v3.1 | 0.2% | 2024-04-15 | Fix |
| CVE-2024-32102 | Crony Cronjob Manager WordPress plugin cross-site request forgery (CSRF) | 4.3CNA v3.1 | 0.2% | 2024-04-15 | |
| CVE-2024-32101 | Email Marketing for WooCommerce WordPress plugin cross-site request forgery (CSRF) | 4.3CNA v3.1 | 0.2% | 2024-04-15 | Fix |
| CVE-2024-32099 | WP Mail Catcher WordPress plugin cross-site request forgery | 4.3CNA v3.1 | 0.2% | 2024-04-15 | Fix |
| CVE-2024-32098 | Advanced Page Visit Counter WordPress plugin Auth. SQL injection (SQLi) | 7.6CNA v3.1 | 0.5% | 2024-04-15 | |
| CVE-2024-32097 | GEO my WordPress plugin cross-site request forgery (CSRF) | 5.4CNA v3.1 | 0.2% | 2024-04-15 | Fix |
| CVE-2024-32096 | WP Synchro WordPress plugin cross-site request forgery (CSRF) | 5.4CNA v3.1 | 0.2% | 2024-04-15 | Fix |
| CVE-2024-32095 | MultiParcels Shipping For WooCommerce WordPress plugin cross-site request forgery (CSRF) | 4.3CNA v3.1 | 0.2% | 2024-04-15 | Fix |
| CVE-2024-32094 | Church Content WordPress plugin cross-site request forgery (CSRF) | 4.3CNA v3.1 | 0.2% | 2024-04-15 | Fix |
| CVE-2024-32093 | Novelist WordPress plugin cross-site request forgery (CSRF) | 5.4CNA v3.1 | 0.2% | 2024-04-15 | Fix |
| CVE-2024-32092 | Kimili Flash Embed WordPress plugin cross-site request forgery (CSRF) | 5.4CNA v3.1 | 0.2% | 2024-04-15 | |
| CVE-2024-32091 | Sangar Slider WordPress plugin cross-site request forgery (CSRF) | 6.5CNA v3.1 | 0.3% | 2024-04-15 | |
| CVE-2024-32090 | Church Admin WordPress plugin cross-site request forgery (CSRF) | 4.3CNA v3.1 | 0.2% | 2024-04-15 | Fix |
| CVE-2024-32089 | Digital Publications by Supsystic WordPress plugin cross-site request forgery (CSRF) | 4.3CNA v3.1 | 0.2% | 2024-04-15 | Fix |
| CVE-2024-32088 | SeedProd Coming Soon Page plugin cross-site request forgery | 4.3CNA v3.1 | 0.2% | 2024-04-15 | Fix |
| CVE-2024-32087 | Product Feed on WooCommerce for Google WordPress plugin SQL command improper neutralization | 7.2v3.1 | 0.6% | 2024-04-15 | |
| CVE-2024-32085 | Citadela Listing WordPress plugin cross-site request forgery (CSRF) | 5.4CISA ADP v3.1 | 0.2% | 2024-04-15 | Fix |
| CVE-2024-32084 | Before And After WordPress plugin cross-site request forgery (CSRF) | 4.3CNA v3.1 | 0.2% | 2024-04-15 | |
| CVE-2024-32082 | Sync Post With Other Site WordPress plugin cross-site request forgery (CSRF) to XSS | 6.1NVD v3.1 | 0.2% | 2024-04-15 | Fix |
| CVE-2024-32079 | Advanced iFrame WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.3% | 2024-04-15 | Fix |
| CVE-2024-32036 | SixLabors ImageSharp SixLabors.ImageSharp vulnerable to data leakage | 5.3CNA v3.1 | 0.6% | 2024-04-15 | Fix |
| CVE-2024-32035 | SixLabors ImageSharp memory allocation with excessive size value in SixLabors.ImageSharp | 5.3CNA v3.1 | 0.6% | 2024-04-15 | Fix |
| CVE-2024-31990 | argoproj argo-cd argo CD' API server does not enforce project sourceNamespaces | 4.8CNA v3.1 | 0.4% | 2024-04-15 | Fix |
| CVE-2024-31942 | Calendarista Basic Edition WordPress plugin cross-site request forgery (CSRF) | 4.3CNA v3.1 | 0.2% | 2024-04-15 | Fix |
| CVE-2024-31941 | CP Media Player WordPress plugin cross-site request forgery (CSRF) | 5.4CNA v3.1 | 0.2% | 2024-04-15 | Fix |
| CVE-2024-31940 | Extra Product Options Builder for WooCommerce WordPress plugin cross-site request forgery (CSRF) | 4.3CNA v3.1 | 0.2% | 2024-04-15 | Fix |
| CVE-2024-31938 | NewsXpress WordPress theme cross-site request forgery (CSRF) | 4.3CNA v3.1 | 0.2% | 2024-04-15 | Fix |
| CVE-2024-31933 | Page Builder: Live Composer WordPress plugin cross-site request forgery (CSRF) | 5.4CNA v3.1 | 0.2% | 2024-04-15 | Fix |
| CVE-2024-31923 | Feather Login Page WordPress plugin cross-site request forgery (CSRF) | 4.3CNA v3.1 | 0.2% | 2024-04-15 | Fix |
| CVE-2024-31922 | Hosting Benchmark tool WordPress plugin cross-site request forgery (CSRF) | 4.3CNA v3.1 | 0.2% | 2024-04-15 | Fix |
| CVE-2024-31921 | Ultimate Product Catalog WordPress plugin cross-site request forgery (CSRF) | 4.3CNA v3.1 | 0.2% | 2024-04-15 | Fix |
| CVE-2024-31920 | Currency per Product for WooCommerce WordPress plugin cross-site request forgery (CSRF) | 4.3CNA v3.1 | 0.2% | 2024-04-15 | Fix |
| CVE-2024-31652 | oretnom23 Cosmetics And Beauty Product Online Store cross-site scripting | 6.1CISA ADP v3.1 | 0.4% | 2024-04-15 | |
| CVE-2024-31651 | oretnom23 Cosmetics And Beauty Product Online Store cross-site scripting | 6.1CISA ADP v3.1 | 0.4% | 2024-04-15 | |
| CVE-2024-31650 | oretnom23 Cosmetics And Beauty Product Online Store cross-site scripting | 9.6CISA ADP v3.1 | 0.8% | 2024-04-15 | |
| CVE-2024-31649 | oretnom23 Cosmetics And Beauty Product Online Store cross-site scripting | 5.4CISA ADP v3.1 | 0.4% | 2024-04-15 | |
| CVE-2024-31648 | Munyweki Insurance Management System cross-site scripting | 6.1CISA ADP v3.1 | 0.5% | 2024-04-15 | |
| CVE-2024-31497 | Tigris Tortoisesvn weak random number generator | 5.9v3.1 | 5.8% | 2024-04-15 | Exploit codeFix |
| CVE-2024-31434 | Newsletter WordPress plugin cross-site request forgery (CSRF) | 5.4CNA v3.1 | 0.2% | 2024-04-15 | Fix |
| CVE-2024-31433 | The Events Calendar WordPress plugin cross-site request forgery (CSRF) | 4.3CNA v3.1 | 0.2% | 2024-04-15 | Fix |
| CVE-2024-31432 | StellarWP Restrict Content plugin missing authorization | 5.3CNA v3.1 | 0.4% | 2024-04-15 | Fix |
| CVE-2024-31431 | Product Input Fields for WooCommerce WordPress plugin cross-site request forgery (CSRF) | 4.3CNA v3.1 | 0.2% | 2024-04-15 | Fix |
| CVE-2024-31429 | Sarada Lite WordPress theme cross-site request forgery (CSRF) | 8.8v3.1 | 0.2% | 2024-04-15 | Fix |
| CVE-2024-31428 | The Conference WordPress theme cross-site request forgery (CSRF) | 4.3CNA v3.1 | 0.2% | 2024-04-15 | Fix |
| CVE-2024-31427 | Marker.io WordPress plugin cross-site request forgery (CSRF) | 4.3CNA v3.1 | 0.2% | 2024-04-15 | Fix |
| CVE-2024-31426 | Inline Related Posts WordPress plugin cross-site request forgery (CSRF) | 4.3CNA v3.1 | 0.2% | 2024-04-15 | Fix |
| CVE-2024-31425 | Amelia WordPress plugin cross-site request forgery (CSRF) | 5.4CNA v3.1 | 0.2% | 2024-04-15 | Fix |
| CVE-2024-31424 | Login with Phone Number WordPress plugin cross-site request forgery (CSRF) | 8.8CNA v3.1 | 0.3% | 2024-04-15 | Fix |
| CVE-2024-31422 | Favicon by RealFaviconGenerator WordPress plugin cross-site request forgery (CSRF) | 4.3CNA v3.1 | 0.2% | 2024-04-15 | Fix |
| CVE-2024-31421 | Popup by Supsystic WordPress plugin broken access control | 4.3v3.1 | 0.4% | 2024-04-15 | Fix |
| CVE-2024-31389 | MihanPanel WordPress plugin cross-site request forgery (CSRF) | 5.4CNA v3.1 | 0.2% | 2024-04-15 | Fix |
| CVE-2024-31388 | Pauple Table and Contact Form 7 Database cross-site request forgery | 4.3CNA v3.1 | 0.2% | 2024-04-15 | Fix |
| CVE-2024-31385 | ReDi Restaurant Reservation WordPress plugin cross-site request forgery (CSRF) | 4.3CNA v3.1 | 0.2% | 2024-04-15 | Fix |
| CVE-2024-31384 | Spa and Salon WordPress theme cross-site request forgery (CSRF) | 4.3CNA v3.1 | 0.2% | 2024-04-15 | Fix |
| CVE-2024-31383 | PopularFX WordPress theme cross-site request forgery (CSRF) | 4.3CNA v3.1 | 0.2% | 2024-04-15 | Fix |
| CVE-2024-31382 | Blocksy WordPress theme cross-site request forgery (CSRF) | 8.8v3.1 | 0.2% | 2024-04-15 | Fix |
| CVE-2024-31381 | Spotlight Social Feeds WordPress plugin cross-site request forgery (CSRF) | 4.3CNA v3.1 | 0.2% | 2024-04-15 | Fix |
| CVE-2024-31379 | Smash Balloon Social Post Feed WordPress plugin cross-site request forgery (CSRF) | 4.3CNA v3.1 | 0.2% | 2024-04-15 | Fix |
| CVE-2024-31378 | MailChimp Forms by MailMunch WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.2% | 2024-04-15 | Fix |
| CVE-2024-31376 | Dashboard To-Do List WordPress plugin cross-site request forgery (CSRF) | 4.3CNA v3.1 | 0.2% | 2024-04-15 | Fix |
| CVE-2024-31374 | AppPresser WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.2% | 2024-04-15 | Fix |
| CVE-2024-31373 | E2Pdf WordPress plugin cross-site request forgery (CSRF) | 5.4CNA v3.1 | 0.2% | 2024-04-15 | Fix |
| CVE-2024-31219 | Discourse Reactions plugin user activity reactions page information disclosure | 4.3CNA v3.1 | 0.4% | 2024-04-15 | Fix |
| CVE-2024-31093 | Broken Images WordPress plugin CSRF to XSS | 7.1CNA v3.1 | 0.2% | 2024-04-15 | |
| CVE-2024-31086 | Change default login logo,url and title WordPress plugin CSRF to XSS | 7.1CNA v3.1 | 0.2% | 2024-04-15 | |
| CVE-2024-30840 | Tenda AC15 stack-based buffer overflow | 6.5CISA ADP v3.1 | 0.3% | 2024-04-15 | |
| CVE-2024-30656 | Fire-Boltt Dream denial of service | 7.5v3.1 | 0.4% | 2024-04-15 | Exploit code |
| CVE-2024-30546 | Login With Ajax WordPress plugin cross-site request forgery (CSRF) | 4.3CNA v3.1 | 0.2% | 2024-04-15 | Fix |
| CVE-2024-30545 | Social Author Bio WordPress plugin stored XSS via cross-site request forgery (CSRF) | 7.1CNA v3.1 | 0.2% | 2024-04-15 | |
| CVE-2024-30220 | PLANEX COMMUNICATIONS MZK-MF300N command injection | 8.8CNA v3.1 | 1.0% | 2024-04-15 | Fix |
| CVE-2024-30219 | PLANEX COMMUNICATIONS MZK-MF300N active debug code | 6.8CNA v3.1 | 0.3% | 2024-04-15 | Fix |
| CVE-2024-29844 | CS Technologies Australia Evolution Controller default credentials | 9.8CNA v3.1 | 0.6% | 2024-04-15 | |
| CVE-2024-29843 | CS Technologies Australia Evolution Controller user list endpoint vulnerability | 7.5CNA v3.1 | 0.5% | 2024-04-15 | |
| CVE-2024-29842 | CS Technologies Australia Evolution Controller ABACARD field endpoint improper access control | 7.5CNA v3.1 | 0.5% | 2024-04-15 | |
| CVE-2024-29841 | CS Technologies Australia Evolution Controller keys field endpoint improper access control | 7.5CNA v3.1 | 0.5% | 2024-04-15 | |
| CVE-2024-29840 | CS Technologies Australia Evolution Controller PIN field endpoint improper access control | 7.5CNA v3.1 | 0.5% | 2024-04-15 | |
| CVE-2024-29839 | CS Technologies Australia Evolution Controller card data endpoint improper access control | 7.5CNA v3.1 | 0.5% | 2024-04-15 | |
| CVE-2024-29838 | CS Technologies Evolution Controller DAL_ADD input handling denial of service | 7.5CNA v3.1 | 0.5% | 2024-04-15 | |
| CVE-2024-29837 | CS Technologies Evolution Controller web interface vulnerability | 8.8CNA v3.1 | 0.5% | 2024-04-15 | |
| CVE-2024-29836 | CS Technologies Evolution Controller USER_CHANGE endpoint broken authentication | 9.8CNA v3.1 | 0.6% | 2024-04-15 | |
| CVE-2024-29219 | KEYENCE KV STUDIO out-of-bounds read | 7.8CISA ADP v3.1 | 0.3% | 2024-04-15 | Fix |
| CVE-2024-29218 | KEYENCE KV STUDIO out-of-bounds write | 8.8CISA ADP v3.1 | 0.8% | 2024-04-15 | Fix |
| CVE-2024-28957 | DMG MORI Digital Co., LTD. and NEXT Cente TCP/IPv4 insufficient randomness | 5.3CISA ADP v3.1 | 0.8% | 2024-04-15 | Fix |
| CVE-2024-28894 | DMG MORI Digital Co., LTD. and NEXT Cente IPv6 out-of-bounds read | 5.3CISA ADP v3.1 | 0.5% | 2024-04-15 | Fix |
| CVE-2024-28558 | Mayuri K Petrol Pump Management sourcecodester SQL injection | 8.8CISA ADP v3.1 | 1.2% | 2024-04-15 | |
| CVE-2024-28557 | Mayuri K PHP Task Management System Sourcecodester SQL injection | 9.8CISA ADP v3.1 | 1.2% | 2024-04-15 | |
| CVE-2024-28556 | Mayuri K PHP Task Management System Sourcecodester SQL injection | 9.8CISA ADP v3.1 | 1.2% | 2024-04-15 | |
| CVE-2024-28099 | KEYENCE VT STUDIO uncontrolled search path | 7.8CISA ADP v3.1 | 0.2% | 2024-04-15 | Fix |
| CVE-2024-28056 | AWS Amplify CLI has incorrect trust policy management | 9.8CISA ADP v3.1 | 1.7% | 2024-04-15 | Fix |
| CVE-2024-27794 | Claris FileMaker Server cross-site scripting | 6.1v3.1 | 0.3% | 2024-04-15 | Fix |
| CVE-2024-26023 | Buffalo WCR-1166DS OS command injection | 4.2CISA ADP v3.1 | 0.6% | 2024-04-15 | Fix |
| CVE-2024-24898 | Information leakage in kernel | 6.0CNA v3.1 | 0.2% | 2024-04-15 | |
| CVE-2024-24891 | Information leakage in kernel | 6.0CNA v3.1 | 0.2% | 2024-04-15 | |
| CVE-2024-24487 | Silextechnology Ds-600 Firmware denial of service | 6.8CISA ADP v3.1 | 0.3% | 2024-04-15 | Fix |
| CVE-2024-24486 | Silextechnology Ds-600 Firmware improper access control | 9.1CISA ADP v3.1 | 0.6% | 2024-04-15 | |
| CVE-2024-24485 | Silextechnology Ds-600 Firmware information disclosure | 7.5CISA ADP v3.1 | 0.5% | 2024-04-15 | |
| CVE-2024-23911 | DMG MORI Digital Co., LTD. and NEXT Cente IPv6 out-of-bounds read | 7.5CISA ADP v3.1 | 0.6% | 2024-04-15 | Fix |
| CVE-2024-23594 | Lenovo Windows 7 and 8 PC Preloads stack-based buffer overflow | 6.4CNA v3.1 | 0.2% | 2024-04-15 | Fix |
| CVE-2024-23593 | Lenovo Windows 7 and 8 PC Preloads improper quantity validation | 6.7CNA v3.1 | 0.3% | 2024-04-15 | Fix |
| CVE-2024-23561 | HCL DevOps Deploy / HCL Launch is vulnerable to sensitive information disclosure | 4.3CNA v3.1 | 0.4% | 2024-04-15 | Fix |
| CVE-2024-23560 | HCL DevOps Deploy and Launch custom resource types vulnerability | 4.4CNA v3.1 | 0.3% | 2024-04-15 | Fix |
| CVE-2024-23559 | HCL DevOps Deploy / Launch is generating an obsolete HTTP header | 6.1CNA v3.1 | 0.3% | 2024-04-15 | Fix |
| CVE-2024-23558 | HCL DevOps Deploy / HCL Launch does not invalidate all session authentication cookies after logout | 6.3CNA v3.1 | 0.3% | 2024-04-15 | Fix |
| CVE-2024-23486 | Buffalo WSR-2533DHP plaintext password storage | 9.8CISA ADP v3.1 | 0.6% | 2024-04-15 | Fix |
| CVE-2024-22439 | Certain HPE FlexNetwork and FlexFabric Switches, remote authentication bypass | 6.9CNA v3.1 | 0.2% | 2024-04-15 | |
| CVE-2024-22438 | HPE OfficeConnect 1820 Network switches, cross-site request forgery (CSRF) | 3.5CNA v3.1 | 0.2% | 2024-04-15 | Fix |
| CVE-2024-22437 | HPE MSA SAN Storage VSS Provider and CAPI Proxy Software, elevation of privilege | 7.3CNA v3.1 | 0.2% | 2024-04-15 | Fix |
| CVE-2024-22435 | HPE NonStop Web ViewPoint Enterprise software, unauthorized access | 8.3CNA v3.1 | 0.4% | 2024-04-15 | Fix |
| CVE-2024-22014 | 360 Total Security symlink following | 8.8CISA ADP v3.1 | 0.8% | 2024-04-15 | |
| CVE-2024-3804 | Vesystem Cloud Desktop fileupload2.php unrestricted upload | 6.3CNA v3.1 | 0.5% | 2024-04-15 | |
| CVE-2024-3803 | Vesystem Cloud Desktop fileupload.php unrestricted upload | 6.3CNA v3.1 | 0.5% | 2024-04-15 | |
| CVE-2024-3797 | SourceCodester QR Code Bookmark System SQL injection | 9.8v3.1 | 0.8% | 2024-04-15 | |
| CVE-2024-3786 | Improper neutralization of Server-Side Includes (SSI) vulnerability in WBSAirback | 6.6v3.1 | 0.7% | 2024-04-15 | Fix |
| CVE-2024-3785 | Improper neutralization of Server-Side Includes (SSI) vulnerability in WBSAirback | 6.6v3.1 | 0.7% | 2024-04-15 | Fix |
| CVE-2024-3784 | Improper neutralization of Server-Side Includes (SSI) vulnerability in WBSAirback | 6.6v3.1 | 0.7% | 2024-04-15 | Fix |
| CVE-2024-3783 | Path traversal vulnerability in WBSAirback | 6.5NVD v3.1 | 0.5% | 2024-04-15 | Fix |
| CVE-2024-3782 | Cross-site request forgery (CSRF) vulnerability in WBSAirback | 8.8v3.1 | 0.3% | 2024-04-15 | Fix |
| CVE-2024-3781 | OS command injection vulnerability in WBSAirback | 9.1v3.1 | 1.2% | 2024-04-15 | Fix |
| CVE-2024-3780 | Information exposure vulnerability on Technicolor CGA2121 | 7.8CNA v3.1 | 0.2% | 2024-04-15 | |
| CVE-2024-3778 | Ai3 QbiBot unrestricted file upload | 7.2v3.1 | 0.6% | 2024-04-15 | Fix |
| CVE-2024-3777 | Ai3 QbiBot broken access control | 9.8v3.1 | 0.7% | 2024-04-15 | Fix |
| CVE-2024-3776 | Netvision airPASS reflected XSS | 6.1v3.1 | 0.4% | 2024-04-15 | Fix |
| CVE-2024-3775 | aEnrich Technology a+HRD argument injection | 7.5v3.1 | 0.4% | 2024-04-15 | Fix |
| CVE-2024-3774 | aEnrich Technology a+HRD Exposure of Sensitive Data | 5.3v3.1 | 0.4% | 2024-04-15 | Fix |
| CVE-2024-3772 | Regular expression denial of service in Pydantic | 7.5NVD v3.1 | 1.0% | 2024-04-15 | Fix |
| CVE-2024-3771 | PHPGurukul Student Record System edit-subject.php SQL injection | 8.8v3.1 | 0.8% | 2024-04-15 | |
| CVE-2024-3770 | PHPGurukul Student Record System SQL injection | 9.8v3.1 | 0.8% | 2024-04-15 | |
| CVE-2024-3769 | PHPGurukul Student Record System login.php SQL injection | 9.8v3.1 | 1.0% | 2024-04-15 | |
| CVE-2024-3768 | PHPGurukul/itsourcecode News Portal search.php SQL injection | 9.8v3.1 | 0.8% | 2024-04-15 | |
| CVE-2024-3767 | PHPGurukul News Portal edit-post.php SQL injection | 8.8v3.1 | 0.8% | 2024-04-15 | |
| CVE-2024-3766 | slowlyo OwlAdmin Image file upload upload_image cross-site scripting | 2.4CNA v3.1 | 0.4% | 2024-04-15 | |
| CVE-2024-3701 | Improper authentication in com.transsion.kolun.aiservice | 9.8CISA ADP v3.1 | 0.6% | 2024-04-15 | Fix |
| CVE-2024-3505 | JFrog Self-Hosted Artifactory Proxy configuration accessible to low-privilege users | 4.3CNA v3.1 | 0.4% | 2024-04-15 | Fix |
| CVE-2024-3493 | Rockwell Automation ControlLogix® 5580 improper input validation | 8.6CNA v3.1 | 0.6% | 2024-04-15 | Fix |
| CVE-2024-2858 | Simple Buttons Creator WordPress plugin Aribtrary Button deletion via CSRF | 4.8CISA ADP v3.1 | 0.2% | 2024-04-15 | |
| CVE-2024-2857 | Simple Buttons Creator WordPress plugin unauthenticated stored XSS | 6.1CISA ADP v3.1 | 0.2% | 2024-04-15 | |
| CVE-2024-2836 | Super Socializer WordPress plugin Editor+ stored XSS | 4.8CISA ADP v3.1 | 0.5% | 2024-04-15 | Fix |
| CVE-2024-2739 | Advance Search WordPress plugin shortcode deletion via CSRF | 8.7CISA ADP v3.1 | 0.3% | 2024-04-15 | |
| CVE-2024-2659 | Lenovo SMM OS command injection | 7.2CNA v3.1 | 1.1% | 2024-04-15 | Fix |
| CVE-2024-2424 | Rockwell Automation Input/Output Device vulnerable to Major Nonrecoverable Fault | 7.5CNA v3.1 | 2.6% | 2024-04-15 | Fix |
| CVE-2024-1849 | WP Customer Reviews WordPress plugin Malicious redirect via HTTP-EQUIV injection | 5.4CISA ADP v3.1 | 0.5% | 2024-04-15 | Fix |
| CVE-2024-1846 | Responsive Tabs WordPress plugin Contributor+ stored XSS | 5.4CISA ADP v3.1 | 0.5% | 2024-04-15 | Fix |
| CVE-2024-1755 | NPS computy WordPress plugin Results deletion via CSRF | 8.8CISA ADP v3.1 | 0.4% | 2024-04-15 | Fix |
| CVE-2024-1754 | NPS computy WordPress plugin Admin+ stored XSS | 4.7CISA ADP v3.1 | 0.5% | 2024-04-15 | Fix |
| CVE-2024-1746 | Testimonial Slider WordPress plugin Admin+ stored XSS | 5.4CISA ADP v3.1 | 0.4% | 2024-04-15 | Fix |
| CVE-2024-1712 | Carousel Slider WordPress plugin Editor+ stored XSS | 4.7CISA ADP v3.1 | 0.5% | 2024-04-15 | Fix |
| CVE-2024-1660 | Top Bar WordPress plugin Admin+ stored XSS | 4.8CISA ADP v3.1 | 0.4% | 2024-04-15 | Fix |
| CVE-2024-1655 | ASUS WiFi Router OS command injection | 8.8CNA v3.1 | 2.0% | 2024-04-15 | Exploit codeFix |
| CVE-2024-1310 | WooCommerce WordPress plugin Contributor+ Private/Draft Products access | 4.9CISA ADP v3.1 | 0.7% | 2024-04-15 | Fix |
| CVE-2024-1307 | Smart Forms WordPress plugin Subscriber+ Edit Entries via broken access control | 6.5CISA ADP v3.1 | 0.5% | 2024-04-15 | Fix |
| CVE-2024-1306 | Smart Forms WordPress plugin Edit Entries via CSRF | 5.4CISA ADP v3.1 | 0.2% | 2024-04-15 | Fix |
| CVE-2024-1204 | Meta Box WordPress plugin Contributor+ arbitrary Posts' Custom field disclosure | 4.3CISA ADP v3.1 | 0.5% | 2024-04-15 | Fix |
| CVE-2024-0902 | Fancy Product Designer WordPress plugin Admin+ cross-site scripting via Product Title | 4.8NVD v3.1 | 0.4% | 2024-04-15 | Fix |
| CVE-2024-0399 | WooCommerce Customers Manager WordPress plugin Subscriber+ SQL injection | 8.1CISA ADP v3.1 | 2.9% | 2024-04-15 | Exploit codeFix |
| CVE-2024-3765 | Xiongmai AHB7804R-MH-V2 Sofia service access control | 9.8CNA v3.1 | 1.3% | 2024-04-14 | |
| CVE-2024-3764 | Tuya SDK MQTT Packet denial of service | 2.7CNA v3.1 | 0.6% | 2024-04-14 | |
| CVE-2024-3763 | Emlog Pro Post Tag tag.php cross-site scripting | 5.4v3.1 | 0.5% | 2024-04-14 | |
| CVE-2024-3762 | Emlog Pro Whisper page twitter.php cross-site scripting | 5.4v3.1 | 0.5% | 2024-04-14 | |
| CVE-2024-32487 | Greenwoodsoftware Less static code injection | 8.6CISA ADP v3.1 | 0.6% | 2024-04-13 | Fix |
| CVE-2024-26817 | Linux kernel amdkfd driver integer overflow | 5.5v3.1 | 0.8% | 2024-04-13 | Exploit codeFix |
| CVE-2024-3740 | cym1102 nginxWebUI reload exec deserialization | 9.8v3.1 | 0.8% | 2024-04-13 | |
| CVE-2024-3739 | cym1102 nginxWebUI upload os command injection | 9.8v3.1 | 2.9% | 2024-04-13 | |
| CVE-2024-3738 | cym1102 nginxWebUI saveCmd handlePath certificate validation | 9.8v3.1 | 0.5% | 2024-04-13 | |
| CVE-2024-3737 | cym1102 nginxWebUI addOver findCountByQuery path traversal | 9.8v3.1 | 0.9% | 2024-04-13 | |
| CVE-2024-3736 | cym1102 nginxWebUI upload unrestricted upload | 7.5v3.1 | 0.9% | 2024-04-13 | |
| CVE-2024-3735 | Smart Office Main.aspx weak password | 6.3CNA v4.0 | 0.6% | 2024-04-13 | |
| CVE-2024-3721 | TBK DVR-4104/DVR-4216 os command injection | 6.3CNA v3.1 | 86.5% | 2024-04-13 | Reported exploitedEmerging Threats |
| CVE-2024-3720 | Tianwell Fire Intelligent Command Platform API interface page SQL injection | 6.3CNA v3.1 | 0.5% | 2024-04-13 | |
| CVE-2024-3719 | Campcodes House Rental Management System ajax.php SQL injection | 8.8v3.1 | 0.6% | 2024-04-13 | |
| CVE-2024-3662 | WPZOOM Social Feed Widget and Block WordPress plugin unauthorized access | 4.3CNA v3.1 | 0.5% | 2024-04-13 | Fix |
| CVE-2024-3027 | Smart Slider 3 WordPress plugin missing authorization to limited file upload | 6.4CNA v3.1 | 0.3% | 2024-04-13 | Fix |
| CVE-2024-2583 | Shortcodes Ultimate WordPress plugin Contributor+ stored XSS | 5.4CISA ADP v3.1 | 0.4% | 2024-04-13 | Fix |
| CVE-2024-1957 | GiveWP WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.4% | 2024-04-13 | Fix |
| CVE-2024-32028 | opentelemetry-dotnet information disclosure | 4.1CNA v3.1 | 0.3% | 2024-04-12 | Fix |
| CVE-2024-32019 | netdata ndsudo: Local privilege escalation via untrusted search path | 8.8CNA v3.1 | 1.2% | 2024-04-12 | Exploit codeFix |
| CVE-2024-32005 | Local file inclusion in NiceGUI leaflet component | 8.2CNA v3.1 | 0.8% | 2024-04-12 | Fix |
| CVE-2024-32003 | Winter CMS Dusk plugin testing routes vulnerability | 8.8CNA v3.1 | 0.7% | 2024-04-12 | Fix |
| CVE-2024-32000 | Truncated content of messages can be leaked from matrix-appservice-irc | 4.3CNA v3.1 | 0.5% | 2024-04-12 | Fix |
| CVE-2024-31839 | Tiagorlampert Chaos vulnerable to cross-site scripting | 4.8CISA ADP v3.1 | 8.0% | 2024-04-12 | NucleiMetasploitExploit code |
| CVE-2024-31818 | Derbynet path traversal | 9.8CISA ADP v3.1 | 1.9% | 2024-04-12 | |
| CVE-2024-31462 | Limited file write in Stable-diffusion-webui GHSL-2024-010 | 6.3CNA v3.1 | 0.7% | 2024-04-12 | |
| CVE-2024-31391 | Apache Solr Operator: Solr-Operator liveness and readiness probes may leak basic auth credentials | 6.5CISA ADP v3.1 | 0.8% | 2024-04-12 | Fix |
| CVE-2024-31372 | No-Bot Registration WordPress plugin cross-site request forgery (CSRF) | 4.3CNA v3.1 | 0.2% | 2024-04-12 | Fix |
| CVE-2024-31371 | WP Event Aggregator WordPress plugin cross-site request forgery (CSRF) | 4.3CNA v3.1 | 0.2% | 2024-04-12 | Fix |
| CVE-2024-31364 | ELEX WooCommerce Dynamic Pricing and Discounts WordPress plugin cross-site request forgery (CSRF) | 4.3CNA v3.1 | 0.2% | 2024-04-12 | Fix |
| CVE-2024-31363 | LifterLMS WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2024-04-12 | Fix |
| CVE-2024-31362 | ProfileGrid WordPress plugin Metagauss cross-site request forgery | 8.8v3.1 | 0.2% | 2024-04-12 | Fix |
| CVE-2024-31360 | Benchmark Email Lite WordPress plugin cross-site request forgery (CSRF) | 4.3CNA v3.1 | 0.2% | 2024-04-12 | Fix |
| CVE-2024-31354 | Slideshow Gallery LITE WordPress plugin cross-site request forgery (CSRF) | 4.3CNA v3.1 | 0.2% | 2024-04-12 | Fix |
| CVE-2024-31305 | Transcoder WordPress plugin cross-site request forgery (CSRF) | 4.3CNA v3.1 | 0.2% | 2024-04-12 | Fix |
| CVE-2024-31303 | Sign-up Sheets WordPress plugin cross-site request forgery (CSRF) | 4.3CNA v3.1 | 0.2% | 2024-04-12 | Fix |
| CVE-2024-31301 | Multiple Page Generator Plugin MPG WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.2% | 2024-04-12 | Fix |
| CVE-2024-31293 | Easy Digital Downloads WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.2% | 2024-04-12 | Fix |
| CVE-2024-31289 | Hello Elementor WordPress theme cross-site request forgery (CSRF) | 4.3CNA v3.1 | 0.2% | 2024-04-12 | Fix |
| CVE-2024-31279 | Generate Child WordPress plugin cross-site request forgery (CSRF) | 5.4CNA v3.1 | 0.2% | 2024-04-12 | Fix |
| CVE-2024-31272 | ARForms Form Builder WordPress plugin cross-site request forgery (CSRF) | 6.3CNA v3.1 | 0.2% | 2024-04-12 | Fix |
| CVE-2024-31271 | Ultimate Maps WordPress plugin cross-site request forgery | 4.3CNA v3.1 | 0.2% | 2024-04-12 | Fix |
| CVE-2024-31269 | Easy Google Maps WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.2% | 2024-04-12 | Fix |
| CVE-2024-31268 | AppPresser WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2024-04-12 | Fix |
| CVE-2024-31265 | Sumo WordPress plugin cross-site request forgery (CSRF) | 3.7CNA v3.1 | 0.2% | 2024-04-12 | Fix |
| CVE-2024-31264 | Post Views Counter WordPress plugin cross-site request forgery (CSRF) | 4.3CNA v3.1 | 0.2% | 2024-04-12 | Fix |
| CVE-2024-31263 | Loan Repayment Calculator and Application Form WordPress plugin cross-site request forgery (CSRF) | 5.4CNA v3.1 | 0.2% | 2024-04-12 | Fix |
| CVE-2024-31262 | WooCommerce Checkout Field Editor WordPress plugin cross-site request forgery | 5.4CNA v3.1 | 0.2% | 2024-04-12 | Fix |
| CVE-2024-31251 | Community by PeepSo WordPress plugin cross-site request forgery (CSRF) | 4.3CNA v3.1 | 0.2% | 2024-04-12 | Fix |
| CVE-2024-31250 | WP Server Health Stats WordPress plugin cross-site request forgery (CSRF) | 4.3CNA v3.1 | 0.2% | 2024-04-12 | Fix |
| CVE-2024-31239 | Nudgify Social Proof, Sales Popup and FOMO WordPress plugin cross-site request forgery (CSRF) | 4.3CNA v3.1 | 0.2% | 2024-04-12 | Fix |
| CVE-2024-31238 | Smart Online Order for Clover WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.2% | 2024-04-12 | Fix |
| CVE-2024-31235 | Comments Import and Export WordPress plugin cross-site request forgery (CSRF) | 4.3CNA v3.1 | 0.2% | 2024-04-12 | Fix |
| CVE-2024-31069 | IOSiX IO-1020 Micro ELD use of default credentials | 7.4CNA v3.1 | 0.4% | 2024-04-12 | Fix |
| CVE-2024-30845 | Rainbow External Link Network Disk cross-site scripting | 6.1CISA ADP v3.1 | 0.6% | 2024-04-12 | |
| CVE-2024-30614 | Ametys information disclosure through error messages | 5.3CISA ADP v3.1 | 0.5% | 2024-04-12 | |
| CVE-2024-30410 | Junos OS: EX4300 Series: Loopback filter not blocking traffic despite having discard term | 6.9CNA v4.0 | 0.4% | 2024-04-12 | Fix |
| CVE-2024-30409 | Junos OS and Junos OS Evolved: Higher CPU consumption on routing engine leads to denial of service | 6.9CNA v4.0 | 0.5% | 2024-04-12 | Fix |
| CVE-2024-30407 | JCNR and cRPD: Hard-coded SSH host keys in cRPD may allow Person-in-the-Middle (PitM) attacks | 9.2CNA v4.0 | 0.7% | 2024-04-12 | Fix |
| CVE-2024-30406 | Juniper Paragon Active Assurance Test Agent cleartext storage of sensitive information | 6.7CNA v4.0 | 0.1% | 2024-04-12 | Fix |
| CVE-2024-30405 | Juniper Networks Junos OS An incorrect buffer size calculation | 8.7CNA v4.0 | 0.6% | 2024-04-12 | Fix |
| CVE-2024-30403 | Junos OS Evolved: When MAC learning happens, and an interface gets flapped, the PFE crashes | 7.1CNA v4.0 | 0.3% | 2024-04-12 | Fix |
| CVE-2024-30402 | Juniper Networks Junos OS Layer improper check for exceptional conditions | 8.2CNA v4.0 | 0.5% | 2024-04-12 | Fix |
| CVE-2024-30401 | Junos OS: MX Series and Ex9200-15c: Stack-based buffer overflow in aftman | 8.2CNA v4.0 | 0.6% | 2024-04-12 | Fix |
| CVE-2024-30398 | Juniper Networks Junos OS Packet Forwarding Engine denial of service | 8.7CNA v4.0 | 0.6% | 2024-04-12 | Fix |
| CVE-2024-30397 | Junos OS: An invalid certificate causes a denial of service in the Internet Key Exchange process | 8.7CNA v4.0 | 0.3% | 2024-04-12 | Fix |
| CVE-2024-30395 | Juniper Networks Junos OS Routing protocol daemon improper type validation | 8.7CNA v4.0 | 0.5% | 2024-04-12 | Fix |
| CVE-2024-30394 | Junos OS and Junos OS Evolved: A specific EVPN type-5 route causes rpd crash | 8.7CNA v4.0 | 0.7% | 2024-04-12 | Fix |
| CVE-2024-30392 | Juniper Networks Junos OS Flow Processing daemon stack-based buffer overflow | 8.7CNA v4.0 | 0.7% | 2024-04-12 | Fix |
| CVE-2024-30391 | Juniper Networks Junos OS Packet Forwarding Engine missing authentication | 6.3CNA v4.0 | 0.4% | 2024-04-12 | Fix |
| CVE-2024-30390 | Juniper Networks Junos OS Evolved missing brute-force protection | 6.9CNA v4.0 | 0.5% | 2024-04-12 | Fix |
| CVE-2024-30389 | Junos OS: EX4300 Series: Firewall filter not blocking egress traffic | 6.9CNA v4.0 | 0.4% | 2024-04-12 | Fix |
| CVE-2024-30388 | Junos OS: QFX5000 Series and EX Series: Specific malformed LACP packets will cause flaps | 7.1CNA v4.0 | 0.3% | 2024-04-12 | Fix |
| CVE-2024-30387 | Junos OS: ACX5448 and ACX710: Due to interface flaps the PFE process can crash | 7.1CNA v4.0 | 0.2% | 2024-04-12 | Fix |
| CVE-2024-30386 | Juniper Networks Junos OS Layer use-after-free | 7.1CNA v4.0 | 0.3% | 2024-04-12 | Fix |
| CVE-2024-30384 | Junos OS: EX4300 Series: If a specific CLI command is issued PFE crashes will occur | 6.8CNA v4.0 | 0.2% | 2024-04-12 | Fix |
| CVE-2024-30382 | Junos OS and Junos OS Evolved: RPD crash when CoS-based forwarding (CBF) policy is configured | 8.7CNA v4.0 | 0.7% | 2024-04-12 | Fix |
| CVE-2024-30381 | Paragon Active Assurance: Probe_serviced exposes internal objects to local users | 8.4CNA v4.0 | 0.5% | 2024-04-12 | Fix |
| CVE-2024-30210 | IOSiX IO-1020 Micro ELD use of default credentials | 7.4CNA v3.1 | 0.3% | 2024-04-12 | Fix |
| CVE-2024-29461 | projectfloodlight Open Sdn Controller denial of service | 6.3CISA ADP v3.1 | 0.5% | 2024-04-12 | |
| CVE-2024-29400 | RuoYi information disclosure | 7.5CISA ADP v3.1 | 0.6% | 2024-04-12 | |
| CVE-2024-29023 | xibosignage xibo-cms session hijacking via token exposure on the session page in Xibo CMS | 7.2CNA v3.1 | 0.8% | 2024-04-12 | Fix |
| CVE-2024-29022 | xibosignage xibo-cms session hijacking via XSS attack in header and session grid in Xibo CMS | 8.8CNA v3.1 | 0.7% | 2024-04-12 | Fix |
| CVE-2024-28878 | IOSiX IO-1020 Micro ELD download of code without integrity check | 9.6CNA v3.1 | 0.3% | 2024-04-12 | Fix |
| CVE-2024-28869 | Possible denial of service vulnerability with Content-length header in Traefik | 7.5CNA v3.1 | 1.0% | 2024-04-12 | Fix |
| CVE-2024-28718 | OpenStack Magnum vulnerable to time-of-check to time-of-use (TOCTOU) attack | 9.8CISA ADP v3.1 | 1.1% | 2024-04-12 | Fix |
| CVE-2024-27309 | Apache Kafka: Potential incorrect access control during migration from ZK mode to KRaft mode | 7.4CISA ADP v3.1 | 1.1% | 2024-04-12 | Fix |
| CVE-2024-27261 | IBM Storage Defender Resiliency service privilege escalation | 6.4CNA v3.1 | 0.3% | 2024-04-12 | Fix |
| CVE-2024-25545 | Weave Desktop improperly implemented security check | 7.8CISA ADP v3.1 | 0.2% | 2024-04-12 | |
| CVE-2024-22734 | Amcsgroup Trux Waste Management information disclosure | 6.2CISA ADP v3.1 | 0.7% | 2024-04-12 | Exploit code |
| CVE-2024-22526 | bandisoft Bandiview buffer overflow | 5.5CISA ADP v3.1 | 0.4% | 2024-04-12 | Exploit code |
| CVE-2024-22359 | IBM UrbanCode Deploy cross-site scripting | 6.1CNA v3.1 | 0.4% | 2024-04-12 | Fix |
| CVE-2024-22358 | IBM UrbanCode Deploy session fixation | 6.3CNA v3.1 | 0.4% | 2024-04-12 | Fix |
| CVE-2024-22357 | IBM Sterling B2B Integrator cross-site scripting | 5.4CNA v3.1 | 0.4% | 2024-04-12 | Fix |
| CVE-2024-22339 | IBM UrbanCode Deploy information disclosure | 4.3CNA v3.1 | 0.4% | 2024-04-12 | Fix |
| CVE-2024-22334 | IBM UrbanCode Deploy improper privilege control | 4.4CNA v3.1 | 0.4% | 2024-04-12 | Fix |
| CVE-2024-21618 | Juniper Networks Junos OS Layer-2 Control Protocols daemon out-of-bounds access | 7.1CNA v4.0 | 0.3% | 2024-04-12 | Fix |
| CVE-2024-21615 | Junos OS and Junos OS Evolved: A low-privileged user can access confidential information | 5.1CNA v4.0 | 0.2% | 2024-04-12 | Fix |
| CVE-2024-21610 | Junos OS: If in a scaled CoS scenario information on CoS state is gathered mgd processes get stuck | 5.3CNA v4.0 | 0.5% | 2024-04-12 | Fix |
| CVE-2024-21609 | Juniper Networks Junos OS IKE daemon memory leak | 7.1CNA v4.0 | 0.3% | 2024-04-12 | Fix |
| CVE-2024-21605 | Junos OS: SRX 300 Series: Specific link local traffic causes a control plane overload | 7.1CNA v4.0 | 0.3% | 2024-04-12 | Fix |
| CVE-2024-21598 | Juniper Networks Junos OS Routing protocol daemon improper syntax validation | 8.7CNA v4.0 | 0.6% | 2024-04-12 | Fix |
| CVE-2024-21593 | Juniper Networks Junos OS Packet Forwarding Engine improper exception handling | 7.1CNA v4.0 | 0.3% | 2024-04-12 | Fix |
| CVE-2024-21590 | Junos OS Evolved: Packets which are not destined to the device can reach the RE | 7.1CNA v4.0 | 0.4% | 2024-04-12 | Fix |
| CVE-2024-3707 | Exposure of information through directory listing vulnerability in OpenGnsys | 5.3CNA v3.1 | 0.5% | 2024-04-12 | Fix |
| CVE-2024-3706 | Exposure of sensitive information to an unauthorized actor vulnerability in OpenGnsys | 7.5v3.1 | 0.5% | 2024-04-12 | Fix |
| CVE-2024-3705 | Unrestricted upload of file with dangerous type vulnerability in OpenGnsys | 8.8CNA v3.1 | 0.8% | 2024-04-12 | Fix |
| CVE-2024-3704 | SQL injection vulnerability in OpenGnsys | 9.8CNA v3.1 | 0.7% | 2024-04-12 | Fix |
| CVE-2024-3698 | Campcodes House Rental Management System manage_payment.php SQL injection | 8.8v3.1 | 0.7% | 2024-04-12 | |
| CVE-2024-3697 | Campcodes House Rental Management System manage_tenant.php SQL injection | 8.8v3.1 | 0.7% | 2024-04-12 | |
| CVE-2024-3696 | Campcodes House Rental Management System view_payment.php SQL injection | 8.8v3.1 | 0.7% | 2024-04-12 | |
| CVE-2024-3695 | SourceCodester Computer Laboratory Management System Users.php cross-site scripting | 5.4v3.1 | 0.6% | 2024-04-12 | |
| CVE-2024-3691 | PHPGurukul Small CRM Registration page SQL injection | 9.8v3.1 | 0.9% | 2024-04-12 | |
| CVE-2024-3690 | PHPGurukul Small CRM Change Password SQL injection | 8.8v3.1 | 1.3% | 2024-04-12 | Exploit code |
| CVE-2024-3689 | Zhejiang Land Zongheng Network Technology O2OA information disclosure | 5.9v3.1 | 0.9% | 2024-04-12 | |
| CVE-2024-3688 | Xiamen Four-Faith RMP Router Management Platform SQL injection | 6.3CNA v3.1 | 0.4% | 2024-04-12 | |
| CVE-2024-3687 | bihell Dice Comment cross-site scripting | 3.5CNA v3.1 | 0.5% | 2024-04-12 | |
| CVE-2024-3686 | DedeCMS update_guide.php path traversal | 7.5v3.1 | 0.9% | 2024-04-12 | |
| CVE-2024-3685 | DedeCMS stepselect_main.php SQL injection | 9.8v3.1 | 0.6% | 2024-04-12 | |
| CVE-2024-3400 | Palo Alto Networks PAN-OS command injection | 10.0CNA v3.1 | 100.0% | 2024-04-12 | KEVNucleiMetasploitEmerging ThreatsExploit codeFix |
| CVE-2024-3211 | Shopping Cart and eCommerce Store WordPress plugin authenticated (Contributor+) SQL injection | 8.8CNA v3.1 | 0.6% | 2024-04-12 | Fix |
| CVE-2024-3092 | Improper neutralization of input during web page generation (cross-site scripting) in GitLab | 8.7CNA v3.1 | 0.5% | 2024-04-12 | Fix |
| CVE-2024-3054 | WPvivid Backup and Migration WordPress plugin authenticated (Admin+) PHAR deserialization | 7.2CNA v3.1 | 41.5% | 2024-04-12 | Fix |
| CVE-2024-2801 | Shopkeeper Extender WordPress plugin authenticated (Contributor+) stored cross-site scripting | 6.4CNA v3.1 | 0.4% | 2024-04-12 | Fix |
| CVE-2024-2397 | Infinite loop in the PPP printer of tcpdump | 6.2CNA v3.1 | 0.3% | 2024-04-12 | Fix |
| CVE-2024-2279 | Improper neutralization of input during web page generation (cross-site scripting) in GitLab | 8.7CNA v3.1 | 0.6% | 2024-04-12 | Fix |
| CVE-2024-2137 | All-in-One Addons for Elementor WidgetKit WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.3% | 2024-04-12 | |
| CVE-2024-0157 | Dell Storage Resource Manager session fixation | 5.9CNA v3.1 | 0.4% | 2024-04-12 | Fix |
| CVE-2024-32112 | Leadinfo WordPress plugin cross-site request forgery (CSRF) | 4.3CNA v3.1 | 0.2% | 2024-04-11 | Fix |
| CVE-2024-32109 | WP Matterport Shortcode WordPress plugin cross-site request forgery (CSRF) | 4.3CNA v3.1 | 0.2% | 2024-04-11 | Fix |
| CVE-2024-32108 | Stephanie Leary Convert Post Types plugin cross-site request forgery | 4.3CNA v3.1 | 0.2% | 2024-04-11 | |
| CVE-2024-32107 | Finale Lite WordPress plugin cross-site request forgery (CSRF) | 4.3CNA v3.1 | 0.2% | 2024-04-11 | Fix |
| CVE-2024-32106 | WP Compress WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.2% | 2024-04-11 | Fix |
| CVE-2024-32105 | ELEX WooCommerce Dynamic Pricing and Discounts WordPress plugin cross-site request forgery (CSRF) | 4.3CNA v3.1 | 0.2% | 2024-04-11 | Fix |
| CVE-2024-32083 | Easy Logo WordPress plugin cross-site scripting (XSS) | 5.9CNA v3.1 | 0.3% | 2024-04-11 | |
| CVE-2024-32080 | Search Keyword Redirect WordPress plugin cross-site scripting (XSS) | 5.9CNA v3.1 | 0.3% | 2024-04-11 | |
| CVE-2024-31937 | TWIPLA (Visitor Analytics IO) WordPress plugin cross-site scripting (XSS) | 5.9CNA v3.1 | 0.3% | 2024-04-11 | Fix |
| CVE-2024-31936 | UsersWP WordPress plugin cross-site request forgery (CSRF) | 5.4CNA v3.1 | 0.2% | 2024-04-11 | Fix |
| CVE-2024-31935 | Simple Post Notes WordPress plugin cross-site request forgery (CSRF) | 4.3CNA v3.1 | 0.2% | 2024-04-11 | Fix |
| CVE-2024-31934 | Link Whisper Free WordPress plugin cross-site request forgery (CSRF) | 4.3CNA v3.1 | 0.2% | 2024-04-11 | Fix |
| CVE-2024-31932 | Blocksy Companion WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.2% | 2024-04-11 | Fix |
| CVE-2024-31931 | Save as Image plugin by Pdfcrowd WordPress plugin cross-site scripting (XSS) | 5.9CNA v3.1 | 0.3% | 2024-04-11 | Fix |
| CVE-2024-31930 | Save as PDF by Pdfcrowd WordPress plugin cross-site scripting (XSS) | 5.9CNA v3.1 | 0.3% | 2024-04-11 | Fix |
| CVE-2024-31929 | Intagrate Lite WordPress plugin cross-site scripting (XSS) | 5.9CNA v3.1 | 0.3% | 2024-04-11 | Fix |
| CVE-2024-31928 | Top Bar WordPress plugin cross-site scripting (XSS) | 5.9CNA v3.1 | 0.4% | 2024-04-11 | Fix |
| CVE-2024-31927 | WP Login and Logout Redirect WordPress plugin cross-site scripting (XSS) | 5.9CNA v3.1 | 0.3% | 2024-04-11 | Fix |
| CVE-2024-31926 | Advanced Cron Manager debug and control WordPress plugin cross-site scripting (XSS) | 5.9CNA v3.1 | 0.4% | 2024-04-11 | Fix |
| CVE-2024-31925 | F4 Improvements WordPress plugin cross-site scripting (XSS) | 5.9CNA v3.1 | 0.3% | 2024-04-11 | Fix |
| CVE-2024-31678 | Razormist Loan Management System SQL injection | 9.8CISA ADP v3.1 | 0.6% | 2024-04-11 | |
| CVE-2024-31387 | Popup Likebox WordPress plugin cross-site scripting (XSS) | 5.9CNA v3.1 | 0.3% | 2024-04-11 | Fix |
| CVE-2024-31361 | bunny.net WordPress plugin cross-site scripting (XSS) | 5.9CNA v3.1 | 0.3% | 2024-04-11 | Fix |
| CVE-2024-31285 | WordPress Tooltips plugin cross-site request forgery (CSRF) | 7.1CNA v3.1 | 0.2% | 2024-04-11 | Fix |
| CVE-2024-30917 | eProsima Fast-DDS insecure storage of sensitive information | 5.5CISA ADP v3.1 | 0.2% | 2024-04-11 | Fix |
| CVE-2024-30916 | eProsima Fast-DDS denial of service | 7.1v3.1 | 0.2% | 2024-04-11 | Fix |
| CVE-2024-30915 | Objectcomputing OpenDDS denial of service | 4.3CISA ADP v3.1 | 0.5% | 2024-04-11 | |
| CVE-2024-30885 | HadSky reflected cross-site scripting | 6.1CISA ADP v3.1 | 0.5% | 2024-04-11 | |
| CVE-2024-30884 | DiscuzX reflected cross-site scripting | 7.1CISA ADP v3.1 | 0.5% | 2024-04-11 | |
| CVE-2024-30883 | Rageframe reflected cross-site scripting | 4.7CISA ADP v3.1 | 0.5% | 2024-04-11 | |
| CVE-2024-30880 | Rageframe reflected cross-site scripting | 5.4CISA ADP v3.1 | 0.4% | 2024-04-11 | |
| CVE-2024-30879 | Rageframe reflected cross-site scripting | 6.1CISA ADP v3.1 | 0.4% | 2024-04-11 | |
| CVE-2024-30878 | Rageframe cross-site scripting | 6.1CISA ADP v3.1 | 0.4% | 2024-04-11 | |
| CVE-2024-30273 | Adobe Illustrator 2024 PS file Parsing stack based buffer overflow remote code execution | 7.8CNA v3.1 | 0.4% | 2024-04-11 | Fix |
| CVE-2024-30272 | Adobe Illustrator 2024 GIF file parsing out-of-bound write remote code execution vulnerabiity | 7.8CNA v3.1 | 0.3% | 2024-04-11 | Fix |
| CVE-2024-30271 | Adobe Illustrator 2023 CC memory corruption Out-Of-Bounds-Write vulnerability III | 7.8CNA v3.1 | 0.3% | 2024-04-11 | Fix |
| CVE-2024-29937 | OpenBSD code injection | 9.8CISA ADP v3.1 | 1.8% | 2024-04-11 | Fix |
| CVE-2024-29399 | GNU Savane code injection | 7.6CISA ADP v3.1 | 0.9% | 2024-04-11 | |
| CVE-2024-29220 | Saturday Drive Ninja Forms cross-site scripting | 6.1CISA ADP v3.1 | 0.5% | 2024-04-11 | Fix |
| CVE-2024-29019 | ESPHome vulnerable to authentication bypass via cross-site request forgery | 8.1CNA v3.1 | 0.3% | 2024-04-11 | Fix |
| CVE-2024-28458 | swftools swfdump null pointer dereference | 7.5CISA ADP v3.1 | 0.7% | 2024-04-11 | |
| CVE-2024-28402 | TOTOLINK X2000R cross-site scripting | 5.9CISA ADP v3.1 | 0.4% | 2024-04-11 | |
| CVE-2024-27992 | Link Whisper Free WordPress plugin reflected cross-site scripting (XSS) | 7.1CNA v3.1 | 0.4% | 2024-04-11 | Fix |
| CVE-2024-27991 | SupportCandy WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.3% | 2024-04-11 | Fix |
| CVE-2024-27990 | The Moneytizer WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.3% | 2024-04-11 | Fix |
| CVE-2024-27989 | WP Responsive Tabs horizontal vertical and accordion Tabs WordPress plugin cross-site scripting | 6.5CNA v3.1 | 0.3% | 2024-04-11 | Fix |
| CVE-2024-27988 | WEN Responsive Columns WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.3% | 2024-04-11 | Fix |
| CVE-2024-27985 | PropertyHive WordPress plugin PHP object injection | 8.8v3.1 | 0.4% | 2024-04-11 | Fix |
| CVE-2024-27970 | WP SendFox WordPress plugin broken access control | 5.4CNA v3.1 | 0.3% | 2024-04-11 | Fix |
| CVE-2024-27969 | WP Enhanced Free Downloads WooCommerce plugin stored cross-site scripting | 6.5CNA v3.1 | 0.3% | 2024-04-11 | Fix |
| CVE-2024-27967 | DSGVO All in one for WP WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.2% | 2024-04-11 | Fix |
| CVE-2024-27966 | Quiz And Survey Master WordPress plugin cross-site scripting (XSS) | 5.9CNA v3.1 | 0.3% | 2024-04-11 | Fix |
| CVE-2024-27683 | D-Link Go-rt-ac750 stack-based buffer overflow | 9.8CISA ADP v3.1 | 0.9% | 2024-04-11 | |
| CVE-2024-27592 | Corezoid open redirect | 4.3CISA ADP v3.1 | 0.5% | 2024-04-11 | |
| CVE-2024-26019 | Saturday Drive Ninja Forms cross-site scripting | 5.4CISA ADP v3.1 | 0.5% | 2024-04-11 | Fix |
| CVE-2024-25935 | RegistrationMagic WordPress plugin broken access control | 9.8v3.1 | 0.4% | 2024-04-11 | Fix |
| CVE-2024-25922 | Peach Payments Gateway WordPress plugin broken access control | 5.4CNA v3.1 | 0.4% | 2024-04-11 | Fix |
| CVE-2024-25912 | MoveTo WordPress plugin unauthenticated arbitrary WordPress settings Change vulnerability | 9.8CNA v3.1 | 0.6% | 2024-04-11 | |
| CVE-2024-25908 | WP Media folder WordPress plugin Subscriber+ arbitrary Post/Page modification vulnerability | 4.3CNA v3.1 | 0.3% | 2024-04-11 | Fix |
| CVE-2024-25907 | WP Media folder WordPress plugin plugin settings Change vulnerability | 5.4CNA v3.1 | 0.4% | 2024-04-11 | Fix |
| CVE-2024-25852 | Linksys RE7000 command execution | 8.8CISA ADP v3.1 | 16.5% | 2024-04-11 | Nuclei |
| CVE-2024-25572 | Saturday Drive Ninja Forms cross-site request forgery | 8.8CISA ADP v3.1 | 0.3% | 2024-04-11 | Fix |
| CVE-2024-25376 | Thesycon Tusbaudio code injection | 7.8CISA ADP v3.1 | 0.4% | 2024-04-11 | Exploit code |
| CVE-2024-24883 | Prime Slider WordPress plugin broken access control on Duplicate post | 4.3v3.1 | 0.4% | 2024-04-11 | Fix |
| CVE-2024-24850 | Quicksand Post Filter jQuery WordPress plugin broken access control | 5.3CNA v3.1 | 0.4% | 2024-04-11 | |
| CVE-2024-22722 | Form Tools server-side template injection | 7.2CISA ADP v3.1 | 0.9% | 2024-04-11 | Exploit code |
| CVE-2024-22721 | Form Tools cross-site request forgery | 6.3CISA ADP v3.1 | 0.2% | 2024-04-11 | |
| CVE-2024-22719 | Form Tools SQL injection | 8.1CISA ADP v3.1 | 0.5% | 2024-04-11 | |
| CVE-2024-22718 | Form Tools cross-site scripting | 9.6CISA ADP v3.1 | 0.7% | 2024-04-11 | |
| CVE-2024-22717 | Form Tools cross-site scripting | 6.1CISA ADP v3.1 | 0.4% | 2024-04-11 | |
| CVE-2024-21508 | mysql2 remote code execution (RCE) via the readCodeFor function | 9.8CNA v3.1 | 2.6% | 2024-04-11 | Fix |
| CVE-2024-20798 | Adobe Illustrator 2024 CDR file parsing out of bound read information disclosure | 5.5CNA v3.1 | 0.2% | 2024-04-11 | Fix |
| CVE-2024-20797 | Adobe Animate out-of-bounds read | 7.8CNA v3.1 | 0.4% | 2024-04-11 | Fix |
| CVE-2024-20796 | Adobe Animation SWF File Parsing memory corruption | 5.5CNA v3.1 | 0.3% | 2024-04-11 | Fix |
| CVE-2024-20795 | Adobe Animate has an arbitrary code execution vulnerability when parsing svg files | 7.8CNA v3.1 | 0.4% | 2024-04-11 | Fix |
| CVE-2024-20794 | Adobe Animate 2024 WAV File Parsing null pointer dereference | 5.5CNA v3.1 | 0.3% | 2024-04-11 | Fix |
| CVE-2024-20771 | Adobe Bridge 2024 MOV file parsing memory corruption | 5.5CNA v3.1 | 0.3% | 2024-04-11 | Fix |
| CVE-2024-3652 | IKEv1 default AH/ESP responder can cause Libreswan to abort and restart | 6.5CISA ADP v3.1 | 0.8% | 2024-04-11 | Fix |
| CVE-2024-3621 | SourceCodester Kortex Lite Advocate Office Management System register_case.php SQL injection | 7.2v3.1 | 0.6% | 2024-04-11 | |
| CVE-2024-3620 | SourceCodester Kortex Lite Advocate Office Management System adds.php SQL injection | 7.2v3.1 | 0.6% | 2024-04-11 | |
| CVE-2024-3619 | SourceCodester Kortex Lite Advocate Office Management System addcase_stage.php SQL injection | 7.2v3.1 | 0.7% | 2024-04-11 | |
| CVE-2024-3618 | SourceCodester Kortex Lite Advocate Office Management System activate_case.php SQL injection | 7.2v3.1 | 0.7% | 2024-04-11 | |
| CVE-2024-3617 | SourceCodester Kortex Lite Advocate Office Management System deactivate_case.php SQL injection | 7.2v3.1 | 0.7% | 2024-04-11 | |
| CVE-2024-3616 | SourceCodester Warehouse Management System pengguna.php cross-site scripting | 5.4v3.1 | 0.6% | 2024-04-11 | |
| CVE-2024-3614 | SourceCodester Warehouse Management System customer.php cross-site scripting | 5.4v3.1 | 0.6% | 2024-04-11 | |
| CVE-2024-3613 | SourceCodester Warehouse Management System supplier.php cross-site scripting | 5.4v3.1 | 0.6% | 2024-04-11 | |
| CVE-2024-3612 | SourceCodester Warehouse Management System barang.php cross-site scripting | 5.4v3.1 | 0.6% | 2024-04-11 | |
| CVE-2024-3344 | Otter Blocks WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.3% | 2024-04-11 | Fix |
| CVE-2024-3343 | Otter Blocks WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.3% | 2024-04-11 | Fix |
| CVE-2024-3285 | Slider WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.3% | 2024-04-11 | Fix |
| CVE-2024-2966 | Element Pack Elementor Addons WordPress plugin sensitive information exposure | 7.5v3.1 | 0.5% | 2024-04-11 | Fix |
| CVE-2024-2742 | OS command injection in Planet IGS-4215-16T2S | 6.4CNA v3.1 | 0.5% | 2024-04-11 | |
| CVE-2024-2741 | Cross-site request forgery in Planet IGS-4215-16T2S | 7.1CNA v3.1 | 0.2% | 2024-04-11 | |
| CVE-2024-2740 | Exposure of sensitive information to an unauthorized actor in Planet IGS-4215-16T2S | 7.7CNA v3.1 | 0.3% | 2024-04-11 | |
| CVE-2024-0881 | PickPlugins Post Grid AJAX actions missing authorization | 5.4CISA ADP v3.1 | 16.9% | 2024-04-11 | NucleiFix |
| CVE-2024-32001 | SpiceDB: LookupSubjects may return partial results if a specific kind of relation is used | 2.2CNA v3.1 | 0.6% | 2024-04-10 | Fix |
| CVE-2024-31999 | @fastify/secure-session: Reuse of destroyed secure session cookie | 7.4CNA v3.1 | 0.6% | 2024-04-10 | Fix |
| CVE-2024-31997 | XWiki Platform remote code execution from account through UIExtension parameters | 10.0CNA v3.1 | 73.9% | 2024-04-10 | Fix |
| CVE-2024-31996 | XWiki Platform Velocity escape tool code injection | 10.0CNA v3.1 | 2.1% | 2024-04-10 | Fix |
| CVE-2024-31995 | zcap has incomplete expiration checks in capability chains | 4.3CNA v3.1 | 0.4% | 2024-04-10 | Fix |
| CVE-2024-31988 | XWiki Platform CSRF remote code execution through the realtime HTML Converter API | 9.7CNA v3.1 | 0.7% | 2024-04-10 | Fix |
| CVE-2024-31987 | XWiki Platform remote code execution from account via custom skins support | 10.0CNA v3.1 | 1.4% | 2024-04-10 | Fix |
| CVE-2024-31986 | XWiki Platform CSRF remote code execution through scheduler job's document reference | 9.1CNA v3.1 | 0.5% | 2024-04-10 | Fix |
| CVE-2024-31985 | XWiki Platform CSRF in the job scheduler | 5.4CNA v3.1 | 0.3% | 2024-04-10 | Fix |
| CVE-2024-31984 | XWiki Platform: Remote code execution through space title and Solr space facet | 10.0CNA v3.1 | 83.0% | 2024-04-10 | Fix |
| CVE-2024-31983 | XWiki Platform: Remote code execution from edit in multilingual wikis via translations | 10.0CNA v3.1 | 1.4% | 2024-04-10 | Fix |
| CVE-2024-31982 | XWiki Platform: Remote code execution as guest via DatabaseSearch | 10.0CNA v3.1 | 34.5% | 2024-04-10 | NucleiEmerging ThreatsExploit codeFix |
| CVE-2024-31981 | XWiki Platform: Privilege escalation (PR) from user registration through PDFClass | 10.0CNA v3.1 | 1.4% | 2024-04-10 | Fix |
| CVE-2024-31944 | WooCommerce UPS Shipping WordPress plugin cross-site request forgery (CSRF) | 4.3CNA v3.1 | 0.2% | 2024-04-10 | Fix |
| CVE-2024-31943 | USPS Shipping for WooCommerce WordPress plugin cross-site request forgery (CSRF) | 4.3CNA v3.1 | 0.2% | 2024-04-10 | Fix |
| CVE-2024-31939 | Import any XML or CSV File to WordPress plugin cross-site request forgery (CSRF) | 4.3CNA v3.1 | 0.2% | 2024-04-10 | Fix |
| CVE-2024-31924 | EWWW Image Optimizer WordPress plugin cross-site request forgery (CSRF) | 4.3CNA v3.1 | 0.3% | 2024-04-10 | Fix |
| CVE-2024-31874 | IBM Security Verify Access Appliance denial of service | 6.2CNA v3.1 | 0.3% | 2024-04-10 | Fix |
| CVE-2024-31873 | IBM Security Verify Access Appliance information disclosure | 7.5CNA v3.1 | 1.2% | 2024-04-10 | Fix |
| CVE-2024-31872 | IBM Security Verify Access Appliance missing certificate validation | 7.5CNA v3.1 | 0.6% | 2024-04-10 | Fix |
| CVE-2024-31871 | IBM Security Verify Access Appliance improper certificate validation | 7.5CNA v3.1 | 0.6% | 2024-04-10 | Fix |
| CVE-2024-31819 | WWBN AVideo remote code execution | 9.8CISA ADP v3.1 | 15.6% | 2024-04-10 | MetasploitExploit codeFix |
| CVE-2024-31492 | Fortinet FortiClientMac external control of a file path | 7.8CNA v3.1 | 0.3% | 2024-04-10 | Fix |
| CVE-2024-31465 | XWiki Platform: Remote code execution from account via SearchSuggestSourceSheet | 10.0CNA v3.1 | 75.6% | 2024-04-10 | Fix |
| CVE-2024-31464 | XWiki Platform: Password hash might be leaked by diff once the xobject holding them is deleted | 6.8CNA v3.1 | 0.4% | 2024-04-10 | Fix |
| CVE-2024-31461 | Plane server-side request forgery (SSRF) | 9.1CNA v3.1 | 0.7% | 2024-04-10 | Fix |
| CVE-2024-31430 | Cross-site request forgery (CSRF) vulnerability in realmag777 BEAR and WOLF WordPress plugins | 8.8v3.1 | 0.2% | 2024-04-10 | Fix |
| CVE-2024-31386 | Multiple WordPress themes affected by cross-site request forgery | 4.3CNA v3.1 | 0.4% | 2024-04-10 | Fix |
| CVE-2024-31358 | 5 Stars Rating Funnel WordPress plugin arbitrary content deletion vulnerability | 7.5CNA v3.1 | 0.6% | 2024-04-10 | Fix |
| CVE-2024-31356 | User Activity Log WordPress plugin Auth. SQL injection | 7.6CNA v3.1 | 0.5% | 2024-04-10 | Fix |
| CVE-2024-31355 | Slideshow Gallery LITE WordPress plugin Auth. SQL injection | 8.5CNA v3.1 | 0.5% | 2024-04-10 | Fix |
| CVE-2024-31353 | Slideshow Gallery LITE WordPress plugin sensitive data exposure | 5.3v3.1 | 0.5% | 2024-04-10 | Fix |
| CVE-2024-31343 | MP3 Audio Player for Music, Radio and Podcast by Sonaar WordPress plugin arbitrary file download | 7.5v3.1 | 0.6% | 2024-04-10 | Fix |
| CVE-2024-31342 | Gallery Exporter WordPress plugin arbitrary file download | 6.5CNA v3.1 | 0.5% | 2024-04-10 | |
| CVE-2024-31309 | Apache Traffic Server: HTTP/2 CONTINUATION frames can be utilized for DoS attack | 7.5CISA ADP v3.1 | 94.6% | 2024-04-10 | Fix |
| CVE-2024-31302 | Contact Form Email WordPress plugin sensitive data exposure | 5.3v3.1 | 0.5% | 2024-04-10 | Fix |
| CVE-2024-31299 | ReDi Restaurant Reservation WordPress plugin cross-site request forgery (CSRF) to XSS | 7.1CNA v3.1 | 0.3% | 2024-04-10 | Fix |
| CVE-2024-31298 | User Spam Remover WordPress plugin sensitive data exposure via Log file | 7.5v3.1 | 0.5% | 2024-04-10 | Fix |
| CVE-2024-31297 | Wholesale For WooCommerce WordPress plugin unauthenticated arbitrary Post/Page vulnerability | 5.3NVD v3.1 | 0.4% | 2024-04-10 | Fix |
| CVE-2024-31287 | Media Library Folders WordPress plugin directory traversal | 6.5v3.1 | 0.7% | 2024-04-10 | Fix |
| CVE-2024-31282 | App Builder WordPress plugin open redirection | 6.1v3.1 | 0.3% | 2024-04-10 | Fix |
| CVE-2024-31278 | Premium Addons for Elementor WordPress plugin sensitive data exposure | 6.5v3.1 | 0.5% | 2024-04-10 | Fix |
| CVE-2024-31259 | SearchIQ WordPress plugin sensitive data exposure via Log file | 7.5v3.1 | 0.6% | 2024-04-10 | Fix |
| CVE-2024-31254 | WordPress Backup and Migration plugin sensitive data exposure via Log file | 7.5v3.1 | 0.5% | 2024-04-10 | Fix |
| CVE-2024-31253 | WP OAuth Server (OAuth Authentication) WordPress plugin open redirection | 6.1v3.1 | 0.4% | 2024-04-10 | Fix |
| CVE-2024-31249 | Subscribe To Comments Reloaded WordPress plugin sensitive data exposure | 7.5v3.1 | 0.5% | 2024-04-10 | Fix |
| CVE-2024-31247 | FG Drupal to WordPress plugin sensitive data exposure via Log file | 7.5v3.1 | 0.5% | 2024-04-10 | Fix |
| CVE-2024-31245 | ConvertKit WordPress plugin email disclosure in Log file | 7.5v3.1 | 0.5% | 2024-04-10 | Fix |
| CVE-2024-31242 | Bricksforge WordPress plugin unauthenticated arbitrary email Sending vulnerability | 5.3CNA v3.1 | 0.4% | 2024-04-10 | Fix |
| CVE-2024-31240 | WP Poll Maker WordPress plugin Auth. arbitrary file deletion | 8.1v3.1 | 0.7% | 2024-04-10 | Fix |
| CVE-2024-31230 | ShortPixel Adaptive Images WordPress plugin broken access control | 5.3CNA v3.1 | 0.4% | 2024-04-10 | Fix |
| CVE-2024-31214 | Traccar device image upload API unrestricted file upload | 9.7CNA v3.1 | 17.6% | 2024-04-10 | MetasploitExploit codeKCVFix |
| CVE-2024-29903 | Cosign vulnerable to machine-wide denial of service via malicious artifacts | 4.2CNA v3.1 | 0.9% | 2024-04-10 | Fix |
| CVE-2024-29902 | Cosign vulnerable to system-wide denial of service via malicious attachments | 4.2CNA v3.1 | 0.7% | 2024-04-10 | Fix |
| CVE-2024-29504 | Summernote vulnerable to cross-site scripting | 7.6CISA ADP v3.1 | 0.7% | 2024-04-10 | |
| CVE-2024-29502 | Inteset Secure Lockdown path traversal | 6.5CISA ADP v3.1 | 0.7% | 2024-04-10 | |
| CVE-2024-29500 | Inteset Secure Lockdown code injection | 9.8CISA ADP v3.1 | 1.0% | 2024-04-10 | |
| CVE-2024-29460 | Dronecode PX4 Drone Autopilot crash | 6.6CISA ADP v3.1 | 0.2% | 2024-04-10 | |
| CVE-2024-29296 | Portainer CE allows username enumeration through authentication response timing | 5.3CISA ADP v3.1 | 1.3% | 2024-04-10 | Exploit codeFix |
| CVE-2024-29269 | Telesquare TLR-2005KSH command injection | 8.8CISA ADP v3.1 | 6.3% | 2024-04-10 | NucleiExploit code |
| CVE-2024-28345 | Sipwise Next Generation Communication Platform Journal endpoint vulnerability | 5.5CISA ADP v3.1 | 0.4% | 2024-04-10 | |
| CVE-2024-28344 | Sipwise Next Generation Communication Platform open redirect | 3.1CISA ADP v3.1 | 0.5% | 2024-04-10 | |
| CVE-2024-27477 | Leantime cross-site scripting | 6.1CISA ADP v3.1 | 0.6% | 2024-04-10 | |
| CVE-2024-27476 | Leantime code injection | 4.7CISA ADP v3.1 | 0.6% | 2024-04-10 | |
| CVE-2024-27474 | Leantime cross-site request forgery | 8.8CISA ADP v3.1 | 0.7% | 2024-04-10 | Exploit code |
| CVE-2024-26816 | Linux kernel x86 boot image relocation vulnerability | 5.5NVD v3.1 | 0.3% | 2024-04-10 | Fix |
| CVE-2024-26815 | Linux kernel taprio traffic scheduler out-of-bounds write | 7.8CNA v3.1 | 0.3% | 2024-04-10 | Fix |
| CVE-2024-26362 | Enpass Password Manager HTML injection | 8.8CISA ADP v3.1 | 0.6% | 2024-04-10 | |
| CVE-2024-26122 | Adobe Experience Manager cross-site scripting (stored XSS) | 5.4CNA v3.1 | 0.5% | 2024-04-10 | Fix |
| CVE-2024-26098 | Adobe Experience Manager cross-site scripting (stored XSS) | 5.4CNA v3.1 | 0.5% | 2024-04-10 | Fix |
| CVE-2024-26097 | Adobe Experience Manager cross-site scripting (stored XSS) | 5.4CNA v3.1 | 0.5% | 2024-04-10 | Fix |
| CVE-2024-26087 | Adobe Experience Manager cross-site scripting (stored XSS) | 5.4CNA v3.1 | 0.5% | 2024-04-10 | Fix |
| CVE-2024-26084 | Adobe Experience Manager cross-site scripting (stored XSS) | 5.4CNA v3.1 | 0.5% | 2024-04-10 | Fix |
| CVE-2024-26079 | Adobe Experience Manager cross-site scripting (stored XSS) | 5.4CNA v3.1 | 0.5% | 2024-04-10 | Fix |
| CVE-2024-26076 | Adobe Experience Manager cross-site scripting (stored XSS) | 5.4CNA v3.1 | 0.5% | 2024-04-10 | Fix |
| CVE-2024-26047 | Adobe Experience Manager cross-site scripting (stored XSS) | 5.4CNA v3.1 | 0.5% | 2024-04-10 | Fix |
| CVE-2024-26046 | Adobe Experience Manager cross-site scripting (stored XSS) | 5.4CNA v3.1 | 0.5% | 2024-04-10 | Fix |
| CVE-2024-24809 | Traccar file upload feature unrestricted file upload | 8.5CNA v3.1 | 54.4% | 2024-04-10 | NucleiMetasploitExploit codeKCVFix |
| CVE-2024-23735 | Savignano S-notify cross-site scripting | 6.1CISA ADP v3.1 | 0.2% | 2024-04-10 | Fix |
| CVE-2024-23734 | Savignano S-notify cross-site request forgery | 5.2CISA ADP v3.1 | 0.1% | 2024-04-10 | Fix |
| CVE-2024-23083 | Time4J Base v5.9.3 was discovered to contain a NullPointerException via the component net.time4j.format.internal.FormatUtils::useDefaultWeekmodel(Locale). NOTE: this is disputed by multiple third parties who believe there was not reasonable evidence to determine the existence of a vulnerability. The | 5.3CISA ADP v3.1 | 0.7% | 2024-04-10 | |
| CVE-2024-23080 | Joda Time v2.12.5 was discovered to contain a NullPointerException via the component org.joda.time.format.PeriodFormat::wordBased(Locale). NOTE: this is disputed by multiple third parties who believe there was not reasonable evidence to determine the existence of a vulnerability. The submission may | 9.1CISA ADP v3.1 | 0.8% | 2024-04-10 | |
| CVE-2024-23077 | Jfreechart buffer overflow | 7.5CISA ADP v3.1 | 0.5% | 2024-04-10 | |
| CVE-2024-23076 | Jfreechart null pointer dereference | 7.5CISA ADP v3.1 | 0.8% | 2024-04-10 | |
| CVE-2024-22450 | Dell Alienware Command Center (AWCC) uncontrolled search path | 7.4CNA v3.1 | 0.2% | 2024-04-10 | Fix |
| CVE-2024-22448 | Dell CPG BIOS out-of-bounds write | 4.7CNA v3.1 | 0.2% | 2024-04-10 | Fix |
| CVE-2024-21509 | mysql2 prototype pollution | 6.5CNA v3.1 | 1.0% | 2024-04-10 | Fix |
| CVE-2024-21507 | mysql2 cache poisoning | 5.3v3.1 | 0.7% | 2024-04-10 | Fix |
| CVE-2024-20780 | Adobe Experience Manager cross-site scripting (stored XSS) | 5.4CNA v3.1 | 0.5% | 2024-04-10 | Fix |
| CVE-2024-20779 | Adobe Experience Manager cross-site scripting (stored XSS) | 5.4CNA v3.1 | 0.5% | 2024-04-10 | Fix |
| CVE-2024-20778 | Adobe Experience Manager cross-site scripting (stored XSS) | 5.4CNA v3.1 | 0.5% | 2024-04-10 | Fix |
| CVE-2024-20772 | Adobe Media Encoder 2024 AI file parsing stack based buffer overflow | 7.8CNA v3.1 | 0.6% | 2024-04-10 | Fix |
| CVE-2024-20770 | Adobe Photoshop 2024 TIF file parsing out-of-bound read | 5.5CNA v3.1 | 0.3% | 2024-04-10 | Fix |
| CVE-2024-20766 | Adobe InDesign 2024 TIF File Parsing out-of-bound read information disclosure Vulnerabiity | 5.5CNA v3.1 | 0.3% | 2024-04-10 | Fix |
| CVE-2024-20759 | Adobe Commerce cross-site scripting (stored XSS) | 8.1CNA v3.1 | 1.0% | 2024-04-10 | Fix |
| CVE-2024-20758 | Adobe Commerce improper input validation | 9.0CNA v3.1 | 1.4% | 2024-04-10 | Fix |
| CVE-2024-20737 | Adobe After Effect 2024 RGB file parsing memory corruption | 5.5CNA v3.1 | 0.4% | 2024-04-10 | Fix |
| CVE-2024-3570 | Stored XSS leading to admin account takeover in mintplex-labs/anything-llm | 5.4v3.1 | 0.3% | 2024-04-10 | |
| CVE-2024-3569 | Denial of service (DoS) vulnerability in mintplex-labs/anything-llm | 7.5CNA v3.0 | 0.8% | 2024-04-10 | Fix |
| CVE-2024-3568 | Arbitrary code execution via deserialization in huggingface/Transformers | 9.6v3.1 | 2.1% | 2024-04-10 | Exploit codeFix |
| CVE-2024-3567 | QEMU Qemu-kvm: Net: Assertion failure in update_sctp_checksum | 5.5NVD v3.1 | 0.4% | 2024-04-10 | Fix |
| CVE-2024-3566 | Node.js command injection | 9.8v3.1 | 6.9% | 2024-04-10 | Fix |
| CVE-2024-3542 | Campcodes Church Management System add_visitor.php cross-site scripting | 6.1v3.1 | 0.7% | 2024-04-10 | |
| CVE-2024-3541 | Campcodes Church Management System admin_user.php cross-site scripting | 6.1v3.1 | 0.7% | 2024-04-10 | |
| CVE-2024-3540 | Campcodes Church Management System add_sundaysch.php SQL injection | 8.8v3.1 | 0.9% | 2024-04-10 | |
| CVE-2024-3539 | Campcodes Church Management System addgiving.php SQL injection | 8.8v3.1 | 0.9% | 2024-04-10 | |
| CVE-2024-3538 | Campcodes Church Management System addTithes.php SQL injection | 8.8v3.1 | 0.9% | 2024-04-10 | |
| CVE-2024-3537 | Campcodes Church Management System admin_user.php SQL injection | 8.8v3.1 | 0.9% | 2024-04-10 | |
| CVE-2024-3536 | Campcodes Church Management System delete_log.php SQL injection | 8.8v3.1 | 0.9% | 2024-04-10 | |
| CVE-2024-3535 | Campcodes Church Management System index.php SQL injection | 9.8v3.1 | 1.1% | 2024-04-10 | |
| CVE-2024-3534 | Campcodes Church Management System login.php SQL injection | 9.8v3.1 | 1.1% | 2024-04-10 | |
| CVE-2024-3533 | Campcodes Complete Online Student Management System academic_year_view.php cross-site scripting | 6.1v3.1 | 0.6% | 2024-04-10 | |
| CVE-2024-3532 | Campcodes Complete Online Student Management System attendance_view.php cross-site scripting | 6.1v3.1 | 0.6% | 2024-04-10 | |
| CVE-2024-3531 | Campcodes Complete Online Student Management System courses_view.php cross-site scripting | 6.1v3.1 | 0.6% | 2024-04-10 | |
| CVE-2024-3530 | Campcodes Complete Online Student Management System Marks_view.php cross-site scripting | 6.1v3.1 | 0.7% | 2024-04-10 | |
| CVE-2024-3529 | Campcodes Complete Online Student Management System students_view.php cross-site scripting | 6.1v3.1 | 0.6% | 2024-04-10 | |
| CVE-2024-3528 | Campcodes Complete Online Student Management System units_view.php cross-site scripting | 6.1v3.1 | 0.7% | 2024-04-10 | |
| CVE-2024-3526 | Campcodes Online Event Management System index.php cross-site scripting | 5.4v3.1 | 0.6% | 2024-04-10 | |
| CVE-2024-3525 | Campcodes Online Event Management System index.php cross-site scripting | 5.4v3.1 | 0.5% | 2024-04-10 | |
| CVE-2024-3524 | Campcodes Online Event Management System process.php cross-site scripting | 5.4v3.1 | 0.5% | 2024-04-10 | |
| CVE-2024-3516 | Google Chrome ANGLE heap-based buffer overflow | 6.5NVD v3.1 | 1.0% | 2024-04-10 | Fix |
| CVE-2024-3515 | Google Chrome Dawn use-after-free | 6.5v3.1 | 0.8% | 2024-04-10 | Fix |
| CVE-2024-3448 | Improper access control leads to server-side request forgery in Mautic | 5.0CNA v3.1 | 0.4% | 2024-04-10 | |
| CVE-2024-3388 | PAN-OS: User Impersonation in GlobalProtect SSL VPN | 4.1CNA v3.1 | 0.3% | 2024-04-10 | Fix |
| CVE-2024-3387 | PAN-OS: Weak Certificate Strength in Panorama software leads to sensitive information disclosure | 5.3CNA v3.1 | 0.2% | 2024-04-10 | Fix |
| CVE-2024-3386 | PAN-OS: Predefined Decryption Exclusions Does not Work as Intended | 5.3CNA v3.1 | 0.4% | 2024-04-10 | Fix |
| CVE-2024-3385 | PAN-OS: Firewall denial of service (DoS) when GTP Security is Disabled | 7.5CNA v3.1 | 0.9% | 2024-04-10 | Fix |
| CVE-2024-3384 | PAN-OS: Firewall denial of service (DoS) via Malformed NTLM Packets | 7.5CNA v3.1 | 0.9% | 2024-04-10 | Fix |
| CVE-2024-3383 | PAN-OS: Improper Group Membership Change vulnerability in Cloud Identity Engine (CIE) | 7.4CNA v3.1 | 0.6% | 2024-04-10 | Fix |
| CVE-2024-3382 | PAN-OS: Firewall denial of service (DoS) via a Burst of Crafted Packets | 7.5CNA v3.1 | 0.9% | 2024-04-10 | Fix |
| CVE-2024-3283 | Privilege escalation via mass assignment in mintplex-labs/anything-llm | 7.2CNA v3.0 | 1.0% | 2024-04-10 | Fix |
| CVE-2024-3235 | Essential Grid WordPress plugin unauthenticated Private post disclosure | 5.3CNA v3.1 | 0.7% | 2024-04-10 | Fix |
| CVE-2024-3210 | Paid Membership Plugin WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.4% | 2024-04-10 | Fix |
| CVE-2024-3157 | Google Chrome Compositing out-of-bounds access | 9.6v3.1 | 0.8% | 2024-04-10 | Fix |
| CVE-2024-3120 | Stack-buffer overflow in Content-Length and Warning Header Processing in sngrep | 9.8v3.1 | 1.9% | 2024-04-10 | Fix |
| CVE-2024-3119 | Stack-buffer overflow in Call-ID and X-Call-ID SIP Header Processing in sngrep | 9.8v3.1 | 1.8% | 2024-04-10 | Fix |
| CVE-2024-3101 | Privilege escalation via improper input validation in mintplex-labs/anything-llm | 7.2v3.1 | 0.8% | 2024-04-10 | Fix |
| CVE-2024-3098 | Prompt injection leading to arbitrary code execution in run-llama/llama_index | 9.8CNA v3.0 | 1.0% | 2024-04-10 | Fix |
| CVE-2024-3025 | Path traversal in mintplex-labs/anything-llm | 9.9CNA v3.0 | 1.0% | 2024-04-10 | Fix |
| CVE-2024-3020 | ShapedPlugin Carousel import function PHP object injection | 7.2CNA v3.1 | 1.0% | 2024-04-10 | Fix |
| CVE-2024-2952 | Server-side template injection in BerriAI/LiteLLM | 9.8CNA v3.0 | 1.3% | 2024-04-10 | Fix |
| CVE-2024-2736 | Bold Page Builder WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.5% | 2024-04-10 | Fix |
| CVE-2024-2735 | Bold Page Builder WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.5% | 2024-04-10 | Fix |
| CVE-2024-2734 | Bold Page Builder WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.5% | 2024-04-10 | Fix |
| CVE-2024-2733 | Bold Page Builder WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.5% | 2024-04-10 | Fix |
| CVE-2024-2731 | Improper access control issues lead to sensitive data exposure in Mautic | 5.4CNA v3.1 | 0.4% | 2024-04-10 | |
| CVE-2024-2730 | Predictable Page Indexing might lead to sensitive data exposure in Mautic | 5.3CNA v3.1 | 0.5% | 2024-04-10 | |
| CVE-2024-2666 | Premium Addons for Elementor WordPress plugin DOM-based stored cross-site scripting | 5.4CNA v3.1 | 0.4% | 2024-04-10 | Fix |
| CVE-2024-2665 | Premium Addons for Elementor WordPress plugin stored cross-site scripting | 6.4CNA v3.1 | 0.5% | 2024-04-10 | Fix |
| CVE-2024-2664 | Premium Addons for Elementor WordPress plugin stored cross-site scripting | 6.4CNA v3.1 | 0.5% | 2024-04-10 | Fix |
| CVE-2024-2655 | Elementor Addons by Livemesh WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.5% | 2024-04-10 | Fix |
| CVE-2024-2539 | Elementor Addons by Livemesh WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.4% | 2024-04-10 | Fix |
| CVE-2024-2428 | The Ultimate Video Player For WordPress plugin Contributor+ stored XSS | 4.7CISA ADP v3.1 | 0.5% | 2024-04-10 | Fix |
| CVE-2024-2243 | Csmock: Command injection vulnerability in csmock-plugin-snyk | 8.8NVD v3.1 | 1.1% | 2024-04-10 | |
| CVE-2024-2221 | Path traversal and arbitrary file upload vulnerability in qdrant/qdrant | 9.8CNA v3.0 | 1.8% | 2024-04-10 | Fix |
| CVE-2024-2217 | Improper access control in gaizhenbiao/ChuanhuChatGPT | 7.5CNA v3.0 | 0.8% | 2024-04-10 | Fix |
| CVE-2024-2196 | CSRF vulnerability in aimhubio/aim | 8.8CNA v3.0 | 0.6% | 2024-04-10 | |
| CVE-2024-2195 | Remote code execution in aimhubio/aim | 9.8CNA v3.0 | 1.8% | 2024-04-10 | |
| CVE-2024-2029 | Command injection in mudler/LocalAI | 9.8CNA v3.0 | 2.9% | 2024-04-10 | Fix |
| CVE-2024-1902 | lunary-ai Lunary organization name update route vulnerability | 7.5v3.1 | 0.4% | 2024-04-10 | Fix |
| CVE-2024-1780 | BizCalendar Web WordPress plugin reflected cross-site scripting via tab | 6.1CNA v3.1 | 0.6% | 2024-04-10 | Fix |
| CVE-2024-1741 | Improper authorization in lunary-ai/Lunary | 9.1v3.1 | 0.6% | 2024-04-10 | Fix |
| CVE-2024-1740 | Incorrect authorization in lunary-ai/Lunary | 9.1v3.1 | 0.6% | 2024-04-10 | Fix |
| CVE-2024-1728 | Local file inclusion in gradio-app/Gradio | 7.5v3.1 | 85.4% | 2024-04-10 | NucleiFix |
| CVE-2024-1643 | Unauthorized Organization Access in lunary-ai/lunary | 9.1CNA v3.0 | 0.7% | 2024-04-10 | Fix |
| CVE-2024-1625 | IDOR vulnerability in lunary-ai/Lunary | 6.5NVD v3.1 | 0.4% | 2024-04-10 | Fix |
| CVE-2024-1602 | Stored XSS leading to RCE in parisneo/lollms-webui | 6.1NVD v3.1 | 0.7% | 2024-04-10 | |
| CVE-2024-1600 | Local file inclusion in parisneo/lollms-webui | 9.3CNA v3.0 | 32.5% | 2024-04-10 | Fix |
| CVE-2024-1520 | OS command injection in parisneo/lollms-webui | 9.8CNA v3.0 | 48.2% | 2024-04-10 | Fix |
| CVE-2024-1511 | Path traversal vulnerability in parisneo/lollms-webui | 9.8CNA v3.0 | 1.0% | 2024-04-10 | |
| CVE-2024-1481 | Red Hat FreeIPA kinit argument parsing denial of service | 5.3CNA v3.1 | 1.1% | 2024-04-10 | Fix |
| CVE-2024-1042 | WP Radio Worldwide Online Radio Stations Directory for WordPress plugin missing authorization | 5.4v3.1 | 0.4% | 2024-04-10 | |
| CVE-2024-1041 | WP Radio Worldwide Online Radio Stations Directory for WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.4% | 2024-04-10 | |
| CVE-2024-0218 | DoS on IDS parsing of malformed Radius packets in Guardian | 8.2CNA v4.0 | 0.6% | 2024-04-10 | Fix |
| CVE-2024-0159 | Dell Alienware Command Center (AWCC) improper access control | 6.7CNA v3.1 | 0.2% | 2024-04-10 | Fix |
| CVE-2024-31978 | Siemens SINEC NMS path traversal | 7.6CNA v3.1 | 0.5% | 2024-04-09 | Fix |
| CVE-2024-31868 | Apache Zeppelin: XSS vulnerability in the helium module | 6.1CISA ADP v3.1 | 1.3% | 2024-04-09 | Fix |
| CVE-2024-31867 | Apache Zeppelin: LDAP search filter query injection | 6.5CISA ADP v3.1 | 1.2% | 2024-04-09 | Fix |
| CVE-2024-31866 | Apache Zeppelin: Interpreter download command does not escape malicious code injection | 9.8CISA ADP v3.1 | 1.4% | 2024-04-09 | Fix |
| CVE-2024-31865 | Apache Zeppelin: Cron arbitrary user impersonation with improper privileges | 6.5CISA ADP v3.1 | 1.7% | 2024-04-09 | Fix |
| CVE-2024-31864 | Apache Zeppelin: Remote code execution by adding malicious JDBC connection string | 9.8CISA ADP v3.1 | 1.3% | 2024-04-09 | Fix |
| CVE-2024-31863 | Apache Zeppelin: Replacing other users notebook, bypassing any permissions | 5.3v3.1 | 1.0% | 2024-04-09 | Fix |
| CVE-2024-31862 | Apache Zeppelin: Denial of service with invalid notebook name | 5.3CISA ADP v3.1 | 1.4% | 2024-04-09 | Fix |
| CVE-2024-31860 | Apache Zeppelin: Path traversal | 6.5CISA ADP v3.1 | 1.4% | 2024-04-09 | Fix |
| CVE-2024-31544 | oretnom23 Computer Laboratory Management System stored cross-site scripting | 5.4CISA ADP v3.1 | 0.4% | 2024-04-09 | |
| CVE-2024-31507 | Tamparongj03 Online Graduate Tracer System SQL injection | 8.6CISA ADP v3.1 | 0.5% | 2024-04-09 | |
| CVE-2024-31506 | Tamparongj03 Online Graduate Tracer System SQL injection | 7.5v3.1 | 0.7% | 2024-04-09 | |
| CVE-2024-31487 | Fortinet FortiSandbox path traversal | 5.8CNA v3.1 | 0.9% | 2024-04-09 | Fix |
| CVE-2024-31457 | gin-vue-admin background arbitrary code coverage vulnerability | 7.7CNA v3.1 | 0.9% | 2024-04-09 | Fix |
| CVE-2024-31455 | Minder GetRepositoryByName data leak | 4.3CNA v3.1 | 0.8% | 2024-04-09 | Fix |
| CVE-2024-31454 | PsiTransfer file integrity violation vulnerability | 6.5CNA v3.1 | 0.5% | 2024-04-09 | Fix |
| CVE-2024-31453 | PsiTransfer vulnerable to violation of the integrity of file distribution | 6.5CNA v3.1 | 0.5% | 2024-04-09 | Fix |
| CVE-2024-31370 | CodeisAwesome AIKit WordPress plugin SQL injection | 8.5CNA v3.1 | 0.5% | 2024-04-09 | |
| CVE-2024-31369 | Soledad WordPress theme cross-site request forgery (CSRF) | 5.4CNA v3.1 | 0.2% | 2024-04-09 | Fix |
| CVE-2024-31368 | Soledad WordPress theme unauthenticated broken access control | 6.5CNA v3.1 | 0.4% | 2024-04-09 | Fix |
| CVE-2024-31367 | Soledad WordPress theme authenticated broken access control | 7.1CNA v3.1 | 0.4% | 2024-04-09 | Fix |
| CVE-2024-31366 | Post Type Builder (PTB) WordPress plugin Auth. arbitrary Post/Page creation vulnerability | 7.1CNA v3.1 | 0.5% | 2024-04-09 | Fix |
| CVE-2024-31365 | Post Type Builder (PTB) WordPress plugin reflected cross-site scripting (XSS) | 7.1CNA v3.1 | 0.4% | 2024-04-09 | Fix |
| CVE-2024-30262 | Contao's remember-me tokens will not be cleared after a password change | 5.9CNA v3.1 | 0.5% | 2024-04-09 | Fix |
| CVE-2024-30218 | Denial of service (DOS) vulnerability in SAP NetWeaver AS ABAP and ABAP Platform | 6.5CNA v3.1 | 0.5% | 2024-04-09 | Fix |
| CVE-2024-30217 | Missing authorization check in SAP S/4 HANA (Cash Management) | 4.3CNA v3.1 | 0.3% | 2024-04-09 | Fix |
| CVE-2024-30216 | Missing authorization check in SAP S/4 HANA (Cash Management) | 4.3CNA v3.1 | 0.3% | 2024-04-09 | Fix |
| CVE-2024-30215 | Cross-site scripting (XSS) vulnerability in SAP Business Connector | 4.8CNA v3.1 | 0.3% | 2024-04-09 | Fix |
| CVE-2024-30214 | Cross-site scripting (XSS) vulnerability in SAP Business Connector | 4.8CNA v3.1 | 0.3% | 2024-04-09 | Fix |
| CVE-2024-30191 | Siemens SCALANCE W1748-1 M12 authentication bypass by spoofing | 8.4CNA v3.1 | 0.2% | 2024-04-09 | |
| CVE-2024-30190 | Siemens SCALANCE W1748-1 M12 authentication bypass by spoofing | 6.1CNA v3.1 | 0.2% | 2024-04-09 | |
| CVE-2024-30189 | Siemens SCALANCE W721-1 RJ45 authentication bypass by spoofing | 6.1CNA v3.1 | 0.2% | 2024-04-09 | |
| CVE-2024-29993 | Microsoft Azure CycleCloud elevation of privilege | 8.8CNA v3.1 | 2.0% | 2024-04-09 | Fix |
| CVE-2024-29992 | Microsoft Azure Identity Library for .NET information disclosure | 5.5CNA v3.1 | 0.7% | 2024-04-09 | Fix |
| CVE-2024-29990 | Microsoft Azure Kubernetes Service Confidential Container elevation of privilege | 9.0CNA v3.1 | 18.0% | 2024-04-09 | Fix |
| CVE-2024-29989 | Microsoft Azure Monitor Agent elevation of privilege | 8.4CNA v3.1 | 0.7% | 2024-04-09 | Fix |
| CVE-2024-29988 | Microsoft SmartScreen Prompt security feature bypass | 8.8CNA v3.1 | 44.9% | 2024-04-09 | KEVExploit codeKCVFix |
| CVE-2024-29985 | Microsoft OLE DB Driver for SQL Server remote code execution | 8.8CNA v3.1 | 2.4% | 2024-04-09 | Fix |
| CVE-2024-29984 | Microsoft OLE DB Driver for SQL Server remote code execution | 8.8CNA v3.1 | 2.4% | 2024-04-09 | Fix |
| CVE-2024-29983 | Microsoft OLE DB Driver for SQL Server remote code execution | 8.8CNA v3.1 | 2.4% | 2024-04-09 | Fix |
| CVE-2024-29982 | Microsoft OLE DB Driver for SQL Server remote code execution | 8.8CNA v3.1 | 2.4% | 2024-04-09 | Fix |
| CVE-2024-29905 | DIRAC: Unauthorized users can read proxy contents during generation | 8.1CNA v3.1 | 0.3% | 2024-04-09 | Fix |
| CVE-2024-29066 | Microsoft Windows Distributed File System (DFS) remote code execution | 7.2CNA v3.1 | 1.3% | 2024-04-09 | Fix |
| CVE-2024-29064 | Microsoft Windows Hyper-V denial of service | 6.2CNA v3.1 | 0.7% | 2024-04-09 | Fix |
| CVE-2024-29063 | Microsoft Azure AI Search information disclosure | 7.3CNA v3.1 | 0.8% | 2024-04-09 | Fix |
| CVE-2024-29062 | Microsoft Windows secure Boot security feature bypass | 7.1CNA v3.1 | 0.7% | 2024-04-09 | Fix |
| CVE-2024-29061 | Microsoft Windows secure Boot security feature bypass | 7.8CNA v3.1 | 0.7% | 2024-04-09 | Fix |
| CVE-2024-29056 | Microsoft Windows Authentication elevation of privilege | 4.3CNA v3.1 | 1.0% | 2024-04-09 | Fix |
| CVE-2024-29055 | Microsoft Defender for IoT elevation of privilege | 7.2CNA v3.1 | 2.3% | 2024-04-09 | Fix |
| CVE-2024-29054 | Microsoft Defender for IoT elevation of privilege | 7.2CNA v3.1 | 2.3% | 2024-04-09 | Fix |
| CVE-2024-29053 | Microsoft Defender for IoT remote code execution | 8.8CNA v3.1 | 3.2% | 2024-04-09 | Fix |
| CVE-2024-29052 | Microsoft Windows Storage elevation of privilege | 7.8CNA v3.1 | 0.6% | 2024-04-09 | Fix |