CVE-2024 list

CVE-2024 records published in April 2024

Page three of four: records 2,001 to 3,000 of the 3,133 published in April 2024, newest first. The first page carries the figures for April 2024.

CVE-2024 records published in April 2024, newest first: records 2,001 to 3,000 of 3,133
CVE Summary CVSS EPSS Published Signals
CVE-2024-29050Microsoft Windows Cryptographic services remote code execution8.4CNA v3.11.3%2024-04-09Exploit codeFix
CVE-2024-29048Microsoft OLE DB Driver for SQL Server remote code execution8.8CNA v3.12.4%2024-04-09Fix
CVE-2024-29047Microsoft OLE DB driver for SQL Server remote code execution8.8CNA v3.12.4%2024-04-09Fix
CVE-2024-29046Microsoft OLE DB Driver for SQL Server remote code execution8.8CNA v3.12.4%2024-04-09Fix
CVE-2024-29045Microsoft OLE DB Driver for SQL Server remote code execution7.5CNA v3.11.8%2024-04-09Fix
CVE-2024-29044Microsoft OLE DB Driver for SQL Server remote code execution8.8CNA v3.12.4%2024-04-09Fix
CVE-2024-29043Microsoft ODBC Driver for SQL server remote code execution8.8CNA v3.12.4%2024-04-09Fix
CVE-2024-28945Microsoft OLE DB Driver for SQL Server remote code execution8.8CNA v3.12.3%2024-04-09Fix
CVE-2024-28944Microsoft OLE DB Driver for SQL Server remote code execution8.8CNA v3.12.4%2024-04-09Fix
CVE-2024-28943Microsoft ODBC Driver for SQL server remote code execution8.8CNA v3.12.4%2024-04-09Fix
CVE-2024-28942Microsoft OLE DB Driver for SQL Server remote code execution8.8CNA v3.12.4%2024-04-09Fix
CVE-2024-28941Microsoft ODBC Driver for SQL server remote code execution8.8CNA v3.12.3%2024-04-09Fix
CVE-2024-28940Microsoft OLE DB Driver for SQL Server remote code execution8.8CNA v3.12.4%2024-04-09Fix
CVE-2024-28939Microsoft OLE DB Driver for SQL Server remote code execution8.8CNA v3.12.3%2024-04-09Fix
CVE-2024-28938Microsoft ODBC Driver for SQL server remote code execution8.8CNA v3.12.3%2024-04-09Fix
CVE-2024-28937Microsoft ODBC Driver for SQL server remote code execution8.8CNA v3.12.3%2024-04-09Fix
CVE-2024-28936Microsoft ODBC Driver for SQL server remote code execution8.8CNA v3.12.4%2024-04-09Fix
CVE-2024-28935Microsoft ODBC Driver for SQL server remote code execution8.8CNA v3.12.4%2024-04-09Fix
CVE-2024-28934Microsoft ODBC Driver for SQL server remote code execution8.8CNA v3.12.4%2024-04-09Fix
CVE-2024-28933Microsoft ODBC Driver for SQL server remote code execution8.8CNA v3.12.4%2024-04-09Fix
CVE-2024-28932Microsoft ODBC Driver for SQL server remote code execution8.8CNA v3.12.4%2024-04-09Fix
CVE-2024-28931Microsoft ODBC Driver for SQL server remote code execution8.8CNA v3.12.4%2024-04-09Fix
CVE-2024-28930Microsoft ODBC Driver for SQL server remote code execution8.8CNA v3.12.4%2024-04-09Fix
CVE-2024-28929Microsoft ODBC Driver for SQL server remote code execution8.8CNA v3.12.4%2024-04-09Fix
CVE-2024-28927Microsoft OLE DB Driver for SQL Server remote code execution8.8CNA v3.12.4%2024-04-09Fix
CVE-2024-28926Microsoft OLE DB Driver for SQL Server remote code execution8.8CNA v3.12.3%2024-04-09Fix
CVE-2024-28925Microsoft Windows secure Boot security feature bypass8.0CNA v3.11.2%2024-04-09Fix
CVE-2024-28924Microsoft Windows secure Boot security feature bypass6.7CNA v3.10.6%2024-04-09Fix
CVE-2024-28923Microsoft Windows secure Boot security feature bypass6.4CNA v3.10.5%2024-04-09Fix
CVE-2024-28922Microsoft Windows secure Boot security feature bypass4.1CNA v3.10.7%2024-04-09Fix
CVE-2024-28921Microsoft Windows secure Boot security feature bypass6.7CNA v3.10.7%2024-04-09Fix
CVE-2024-28920Microsoft Windows secure Boot security feature bypass7.8CNA v3.10.7%2024-04-09Fix
CVE-2024-28919Microsoft Windows secure Boot security feature bypass6.7CNA v3.10.6%2024-04-09Fix
CVE-2024-28917Microsoft Azure Arc-enabled Kubernetes Extension Cluster-Scope elevation of privilege6.2CNA v3.10.9%2024-04-09Fix
CVE-2024-28915Microsoft OLE DB Driver for SQL Server remote code execution8.8CNA v3.12.2%2024-04-09Fix
CVE-2024-28914Microsoft OLE DB Driver for SQL Server remote code execution8.8CNA v3.12.4%2024-04-09Fix
CVE-2024-28913Microsoft OLE DB Driver for SQL Server remote code execution8.8CNA v3.12.3%2024-04-09Fix
CVE-2024-28912Microsoft OLE DB Driver for SQL Server remote code execution8.8CNA v3.12.3%2024-04-09Fix
CVE-2024-28911Microsoft OLE DB Driver for SQL Server remote code execution8.8CNA v3.12.2%2024-04-09Fix
CVE-2024-28910Microsoft OLE DB Driver for SQL Server remote code execution8.8CNA v3.12.8%2024-04-09Fix
CVE-2024-28909Microsoft OLE DB Driver for SQL Server remote code execution8.8CNA v3.12.4%2024-04-09Fix
CVE-2024-28908Microsoft OLE DB Driver for SQL Server remote code execution8.8CNA v3.12.4%2024-04-09Fix
CVE-2024-28907Microsoft Brokering File System elevation of privilege7.8CNA v3.10.6%2024-04-09Fix
CVE-2024-28906Microsoft OLE DB Driver for SQL Server remote code execution8.8CNA v3.12.4%2024-04-09Fix
CVE-2024-28905Microsoft Brokering File System elevation of privilege7.8CNA v3.10.5%2024-04-09Fix
CVE-2024-28904Microsoft Brokering File System elevation of privilege7.8CNA v3.10.5%2024-04-09Fix
CVE-2024-28903Microsoft Windows secure Boot security feature bypass6.7CNA v3.10.7%2024-04-09Fix
CVE-2024-28902Microsoft Windows Remote Access Connection Manager information disclosure5.5CNA v3.10.8%2024-04-09Fix
CVE-2024-28901Microsoft Windows Remote Access Connection Manager information disclosure5.5CNA v3.10.7%2024-04-09Fix
CVE-2024-28900Microsoft Windows Remote Access Connection Manager information disclosure5.5CNA v3.10.7%2024-04-09Fix
CVE-2024-28898Microsoft Windows secure Boot security feature bypass6.3CNA v3.10.8%2024-04-09Fix
CVE-2024-28897Microsoft Windows secure Boot security feature bypass6.8CNA v3.10.9%2024-04-09Fix
CVE-2024-28896Microsoft Windows secure Boot security feature bypass7.5CNA v3.11.0%2024-04-09Fix
CVE-2024-28235Contao possible cookie sharing with external domains while checking protected pages for broken links8.4CNA v3.10.7%2024-04-09Fix
CVE-2024-28234Contao has insufficient BBCode sanitizer4.3CNA v3.10.6%2024-04-09Fix
CVE-2024-28191Contao may have unencoded insert tags in the frontend3.1CNA v3.10.5%2024-04-09Fix
CVE-2024-28190Contao core bundle vulnerable to cross-site scripting in the file manager5.4CNA v3.10.5%2024-04-09Fix
CVE-2024-28167Missing authorization check in SAP Group Reporting Data Collection (Enter Package Data)6.5CNA v3.10.4%2024-04-09Fix
CVE-2024-27983Node.js Node race condition8.2CNA v3.087.2%2024-04-09Exploit codeFix
CVE-2024-27901Directory traversal vulnerability in SAP Asset Accounting7.2CNA v3.10.7%2024-04-09Fix
CVE-2024-27899Security misconfiguration vulnerability in SAP NetWeaver AS Java User Management Engine8.8CNA v3.10.4%2024-04-09Fix
CVE-2024-27898Server-side request forgery in SAP NetWeaver5.3CNA v3.10.4%2024-04-09Fix
CVE-2024-27665Unifiedtransform v2.X is vulnerable to Stored Cross-Site Scripting (XSS) via file upload feature in Syllabus module.5.4CISA ADP v3.10.4%2024-04-09Exploit code
CVE-2024-27247Zoom Desktop Client for macOS improper privilege management5.5CNA v3.10.1%2024-04-09Fix
CVE-2024-27242Zoom Desktop Client for Linux cross-site scripting4.1CNA v3.10.5%2024-04-09Fix
CVE-2024-26277Siemens JT2Go null pointer dereference4.8CNA v4.00.2%2024-04-09Fix
CVE-2024-26276Siemens JT2Go resource exhaustion4.8CNA v4.00.2%2024-04-09Fix
CVE-2024-26275Siemens JT2Go out-of-bounds read7.3CNA v4.00.2%2024-04-09Fix
CVE-2024-26257Microsoft Excel remote code execution7.8CNA v3.11.0%2024-04-09Fix
CVE-2024-26256Libarchive remote code execution7.8CNA v3.187.9%2024-04-09Fix
CVE-2024-26255Microsoft Windows Remote Access Connection Manager information disclosure5.5CNA v3.10.8%2024-04-09Fix
CVE-2024-26254Microsoft Virtual Machine Bus (VMBus) denial of service7.5CNA v3.13.1%2024-04-09Fix
CVE-2024-26253Microsoft Windows rndismp6.sys remote code execution6.8CNA v3.10.7%2024-04-09Fix
CVE-2024-26252Microsoft Windows rndismp6.sys remote code execution6.8CNA v3.10.7%2024-04-09Fix
CVE-2024-26251Microsoft SharePoint server spoofing6.8CNA v3.11.4%2024-04-09Fix
CVE-2024-26250Microsoft Windows secure Boot security feature bypass6.7CNA v3.10.6%2024-04-09Fix
CVE-2024-26248Microsoft Windows Kerberos elevation of privilege7.5CNA v3.11.0%2024-04-09Fix
CVE-2024-26245Microsoft Windows SMB elevation of privilege7.8CNA v3.10.7%2024-04-09Fix
CVE-2024-26244Microsoft WDAC OLE DB provider for SQL server remote code execution8.8CNA v3.12.0%2024-04-09Fix
CVE-2024-26243Microsoft Windows USB Print driver elevation of privilege7.0CNA v3.10.4%2024-04-09Fix
CVE-2024-26242Microsoft Windows Telephony Server elevation of privilege7.0CNA v3.10.3%2024-04-09Fix
CVE-2024-26241Microsoft Windows win32k elevation of privilege7.8CNA v3.10.7%2024-04-09Fix
CVE-2024-26240Microsoft Windows secure Boot security feature bypass8.0CNA v3.11.1%2024-04-09Fix
CVE-2024-26239Microsoft Windows Telephony Server elevation of privilege7.8CNA v3.10.6%2024-04-09Fix
CVE-2024-26237Microsoft Windows Defender Credential Guard elevation of privilege7.8CNA v3.10.7%2024-04-09Fix
CVE-2024-26236Microsoft Windows Update Stack elevation of privilege7.0CNA v3.10.4%2024-04-09Fix
CVE-2024-26235Microsoft Windows Update Stack elevation of privilege7.8CNA v3.10.6%2024-04-09Fix
CVE-2024-26234Microsoft Windows proxy driver spoofing6.7CNA v3.14.9%2024-04-09Fix
CVE-2024-26233Microsoft Windows DNS server remote code execution7.2CNA v3.11.6%2024-04-09Fix
CVE-2024-26232Microsoft Message Queuing (MSMQ) remote code execution7.3CNA v3.10.9%2024-04-09Fix
CVE-2024-26231Microsoft Windows DNS server remote code execution7.2CNA v3.11.5%2024-04-09Fix
CVE-2024-26230Microsoft Windows Telephony Server elevation of privilege7.8CNA v3.124.1%2024-04-09Exploit codeFix
CVE-2024-26229Microsoft Windows CSC service elevation of privilege7.8CNA v3.19.4%2024-04-09Exploit codeFix
CVE-2024-26228Microsoft Windows Cryptographic services security feature bypass7.8CNA v3.10.4%2024-04-09Fix
CVE-2024-26227Microsoft Windows DNS server remote code execution7.2CNA v3.11.5%2024-04-09Fix
CVE-2024-26226Microsoft Windows Distributed File System (DFS) information disclosure6.5CNA v3.11.8%2024-04-09Fix
CVE-2024-26224Microsoft Windows DNS server remote code execution7.2CNA v3.11.6%2024-04-09Fix
CVE-2024-26223Microsoft Windows DNS server remote code execution7.2CNA v3.11.6%2024-04-09Fix
CVE-2024-26222Microsoft Windows DNS server remote code execution7.2CNA v3.11.8%2024-04-09Fix
CVE-2024-26221Microsoft Windows DNS server remote code execution7.2CNA v3.11.8%2024-04-09Fix
CVE-2024-26220Microsoft Windows Mobile Hotspot information disclosure5.0CNA v3.11.1%2024-04-09Fix
CVE-2024-26219Microsoft Windows HTTP.sys denial of service7.5CNA v3.13.1%2024-04-09Fix
CVE-2024-26218Microsoft Windows Kernel elevation of privilege7.8CNA v3.112.9%2024-04-09Exploit codeFix
CVE-2024-26217Microsoft Windows Remote Access Connection Manager information disclosure5.5CNA v3.10.7%2024-04-09Fix
CVE-2024-26216Microsoft Windows File Server Resource Management service elevation of privilege7.3CNA v3.10.9%2024-04-09Fix
CVE-2024-26215Microsoft Windows DHCP server service denial of service7.5CNA v3.12.7%2024-04-09Fix
CVE-2024-26214Microsoft WDAC SQL Server ODBC driver remote code execution8.8CNA v3.12.0%2024-04-09Fix
CVE-2024-26213Microsoft Brokering File System elevation of privilege7.0CNA v3.10.6%2024-04-09Fix
CVE-2024-26212Microsoft Windows DHCP server service denial of service7.5CNA v3.162.6%2024-04-09Fix
CVE-2024-26211Microsoft Windows Remote Access Connection Manager elevation of privilege7.8CNA v3.14.1%2024-04-09Fix
CVE-2024-26210Microsoft WDAC OLE DB provider for SQL server remote code execution8.8CNA v3.12.0%2024-04-09Fix
CVE-2024-26209Microsoft Local Security Authority subsystem service information disclosure5.5CNA v3.114.8%2024-04-09Fix
CVE-2024-26208Microsoft Message Queuing (MSMQ) remote code execution7.2CNA v3.12.3%2024-04-09Fix
CVE-2024-26207Microsoft Windows Remote Access Connection Manager information disclosure5.5CNA v3.10.8%2024-04-09Fix
CVE-2024-26205Microsoft Windows Routing and Remote Access Service (RRAS) remote code execution8.8CNA v3.11.8%2024-04-09Fix
CVE-2024-26202Microsoft Windows DHCP server service remote code execution7.2CNA v3.12.2%2024-04-09Fix
CVE-2024-26200Microsoft Windows Routing and Remote Access Service (RRAS) remote code execution8.8CNA v3.11.8%2024-04-09Fix
CVE-2024-26195Microsoft Windows DHCP server service remote code execution7.2CNA v3.12.2%2024-04-09Fix
CVE-2024-26194Microsoft Windows secure Boot security feature bypass7.4CNA v3.10.4%2024-04-09Fix
CVE-2024-26193Microsoft Azure Migrate remote code execution6.4CNA v3.10.9%2024-04-09Fix
CVE-2024-26189Microsoft Windows secure Boot security feature bypass8.0CNA v3.11.4%2024-04-09Fix
CVE-2024-26183Microsoft Windows Kerberos denial of service6.5CNA v3.12.2%2024-04-09Fix
CVE-2024-26180Microsoft Windows secure Boot security feature bypass8.0CNA v3.11.5%2024-04-09Fix
CVE-2024-26179Microsoft Windows Routing and Remote Access Service (RRAS) remote code execution8.8CNA v3.11.8%2024-04-09Fix
CVE-2024-26175Microsoft Windows secure Boot security feature bypass7.8CNA v3.10.6%2024-04-09Fix
CVE-2024-26172Microsoft Windows DWM Core library information disclosure5.5CNA v3.10.7%2024-04-09Fix
CVE-2024-26171Microsoft Windows secure Boot security feature bypass6.7CNA v3.10.6%2024-04-09Fix
CVE-2024-26168Microsoft Windows secure Boot security feature bypass6.8CNA v3.11.0%2024-04-09Fix
CVE-2024-26158Microsoft Install service elevation of privilege7.8CNA v3.112.3%2024-04-09Fix
CVE-2024-25646Information disclosure vulnerability in SAP BusinessObjects Web Intelligence7.7CNA v3.10.4%2024-04-09Fix
CVE-2024-25116RedisBloom specially crafted CF.RESERVE command can lead to denial of service5.5CNA v3.10.2%2024-04-09Fix
CVE-2024-25115RedisBloom heap buffer overflow in CF.LOADCHUNK command7.0CNA v3.10.4%2024-04-09Fix
CVE-2024-24694Zoom Desktop Client for Windows improper privilege management5.9CNA v3.10.2%2024-04-09Fix
CVE-2024-24576Rust standard library batch file argument escaping argument injection10.0CNA v3.120.3%2024-04-09Exploit codeFix
CVE-2024-24245ClamXAV execution with unnecessary privileges7.8CISA ADP v3.10.2%2024-04-09
CVE-2024-23671Fortinet FortiSandbox path traversal7.9CNA v3.11.2%2024-04-09Fix
CVE-2024-23662Fortinet FortiOS An information disclosure5.0CNA v3.10.7%2024-04-09Fix
CVE-2024-22423yt-dlp `--exec` command injection when using `%q` in yt-dlp on Windows8.4CNA v3.11.3%2024-04-09Fix
CVE-2024-21756Fortinet FortiSandbox OS command injection8.6CNA v3.12.2%2024-04-09Fix
CVE-2024-21755Fortinet FortiSandbox OS command injection8.6CNA v3.12.5%2024-04-09Fix
CVE-2024-21447Microsoft Windows Authentication elevation of privilege7.8CNA v3.11.4%2024-04-09Fix
CVE-2024-21424Microsoft Azure Compute Gallery elevation of privilege6.5CNA v3.11.9%2024-04-09Fix
CVE-2024-21409NET, .NET Framework, and Visual Studio remote code execution7.3CNA v3.12.5%2024-04-09Exploit codeFix
CVE-2024-21324Microsoft Defender for IoT elevation of privilege7.2CNA v3.12.3%2024-04-09Fix
CVE-2024-21323Microsoft Defender for IoT remote code execution8.8CNA v3.13.2%2024-04-09Fix
CVE-2024-21322Microsoft Defender for IoT remote code execution7.2CNA v3.13.1%2024-04-09Fix
CVE-2024-20693Microsoft Windows Kernel elevation of privilege7.8CNA v3.10.8%2024-04-09Fix
CVE-2024-20689Microsoft Windows secure Boot security feature bypass7.1CNA v3.11.3%2024-04-09Fix
CVE-2024-20688Microsoft Windows secure Boot security feature bypass7.1CNA v3.11.3%2024-04-09Fix
CVE-2024-20685Microsoft Azure Private 5G Core denial of service5.9CNA v3.15.5%2024-04-09Fix
CVE-2024-20678Microsoft Windows remote Procedure Call Runtime remote code execution8.8CNA v3.12.5%2024-04-09Fix
CVE-2024-20670Microsoft Outlook for Windows spoofing8.1CNA v3.12.3%2024-04-09Fix
CVE-2024-20669Microsoft Windows secure Boot security feature bypass6.7CNA v3.10.6%2024-04-09Fix
CVE-2024-20665Microsoft Windows BitLocker security feature bypass6.1CNA v3.10.7%2024-04-09Fix
CVE-2024-3545Devolutions Remote Desktop Manager vault offline cache feature improper permissions4.3CISA ADP v3.10.3%2024-04-09Fix
CVE-2024-3523Campcodes Online Event Management System index.php SQL injection8.8v3.10.7%2024-04-09
CVE-2024-3522Campcodes Online Event Management System process.php SQL injection8.8v3.10.7%2024-04-09
CVE-2024-3521Byzoro Smart S80 Management Platform userattestation.php unrestricted upload4.7CNA v3.11.2%2024-04-09
CVE-2024-3446Red Hat Enterprise Linux 8 qemu: Virtio: Dma reentrancy issue leads to double free8.2CNA v3.10.3%2024-04-09Fix
CVE-2024-3313SUBNET PowerSYSTEM Server and Substation Server Reliance on insufficiently Trustworthy component8.6CNA v4.00.3%2024-04-09Fix
CVE-2024-3281HP Poly CCX devices missing authentication8.8CISA ADP v3.10.5%2024-04-09Fix
CVE-2024-3267Bold Page Builder WordPress plugin stored cross-site scripting5.4v3.10.4%2024-04-09Fix
CVE-2024-3266Bold Page Builder WordPress plugin stored cross-site scripting5.4v3.10.4%2024-04-09Fix
CVE-2024-3244EmbedPress WordPress plugin stored cross-site scripting5.4v3.10.5%2024-04-09Fix
CVE-2024-3214Relevanssi A Better Search WordPress plugin unauthenticated Second order CSV injection9.8v3.10.8%2024-04-09Fix
CVE-2024-3213Relevanssi WordPress plugin unauthorized access8.2v3.10.8%2024-04-09Fix
CVE-2024-3208Sydney Toolbox WordPress plugin stored cross-site scripting5.4v3.10.4%2024-04-09Fix
CVE-2024-3167Ocean Extra WordPress plugin authenticated (Contributor+) stored cross-site scripting6.4v3.10.5%2024-04-09Fix
CVE-2024-3136MasterStudy LMS WordPress plugin unauthenticated local file inclusion via template9.8CNA v3.15.0%2024-04-09NucleiFix
CVE-2024-3097WordPress Gallery Plugin WordPress plugin unauthorized access5.3v3.138.0%2024-04-09NucleiFix
CVE-2024-3064Elementor Addons, Widgets and Enhancements Stax WordPress plugin stored cross-site scripting6.4CNA v3.10.4%2024-04-09
CVE-2024-3053Forminator WordPress plugin stored cross-site scripting5.4v3.10.4%2024-04-09Fix
CVE-2024-3046Eclipse Foundation Kura flawed authentication7.5CNA v3.10.6%2024-04-09
CVE-2024-2975Octopus Deploy Octopus Server race condition8.8CNA v3.10.4%2024-04-09Fix
CVE-2024-2974Essential Addons for Elementor WordPress plugin information disclosure5.3CNA v3.10.5%2024-04-09Fix
CVE-2024-2946ShopLentor WordPress plugin stored cross-site scripting5.4v3.10.3%2024-04-09Fix
CVE-2024-2918Devolutions Server PAM JIT elevation feature improper input validation3.6CISA ADP v3.10.2%2024-04-09Fix
CVE-2024-2871Media Library Assistant WordPress plugin authenticated (Contributor+) SQL injection via shortcode7.7v3.10.5%2024-04-09Fix
CVE-2024-2847WordPress File Upload plugin authenticated (Contributor+) stored cross-site scripting via shortcode5.4v3.10.4%2024-04-09Fix
CVE-2024-2845BetterDocs WordPress plugin stored cross-site scripting6.4CNA v3.10.4%2024-04-09Fix
CVE-2024-2804Network Summary WordPress plugin unauthenticated SQL injection9.8CNA v3.10.7%2024-04-09
CVE-2024-2792Elementor Addon Elements WordPress plugin DOM-based stored cross-site scripting5.4NVD v3.10.5%2024-04-09Fix
CVE-2024-2789Happy Addons for Elementor WordPress plugin stored cross-site scripting5.4v3.10.3%2024-04-09Fix
CVE-2024-2788Happy Addons for Elementor WordPress plugin stored cross-site scripting5.4v3.10.4%2024-04-09Fix
CVE-2024-2787Happy Addons for Elementor WordPress plugin stored cross-site scripting5.4v3.10.3%2024-04-09Fix
CVE-2024-2786Happy Addons for Elementor WordPress plugin DOM-based stored cross-site scripting5.4CNA v3.10.5%2024-04-09Fix
CVE-2024-2783GamiPress WordPress plugin stored cross-site scripting5.4v3.10.4%2024-04-09Fix
CVE-2024-2738Permalink Manager Lite and Permalink Manager Pro WordPress plugin reflected cross-site scripting6.1CNA v3.10.6%2024-04-09Fix
CVE-2024-2693Link Whisper Free WordPress plugin authenticated (Contributor+) PHP object injection8.8CNA v3.10.8%2024-04-09Fix
CVE-2024-2654File Manager WordPress plugin authenticated (Administrator+) directory traversal6.8CISA ADP v3.10.9%2024-04-09Fix
CVE-2024-2650Essential Addons for Elementor WordPress plugin stored cross-site scripting6.4CNA v3.10.4%2024-04-09Fix
CVE-2024-2623Essential Addons for Elementor WordPress plugin stored cross-site scripting6.4CNA v3.10.4%2024-04-09Fix
CVE-2024-2543Plugin Permalink WordPress plugin missing authorization via get_uri_editor4.3CNA v3.10.6%2024-04-09Fix
CVE-2024-2536Rank Math SEO with AI SEO Tools WordPress plugin stored cross-site scripting5.4v3.10.3%2024-04-09Fix
CVE-2024-2513WP Chat App WordPress plugin stored cross-site scripting5.4v3.10.4%2024-04-09Fix
CVE-2024-2507JetWidgets For Elementor WordPress plugin stored cross-site scripting5.4v3.10.3%2024-04-09Fix
CVE-2024-2504Page Builder: Pagelayer Drag and Drop website builder WordPress plugin stored cross-site scripting5.4v3.10.4%2024-04-09Fix
CVE-2024-2501Hubbub Lite Fast, Reliable Social Network Sharing Buttons WordPress plugin PHP object injection7.5CNA v3.10.9%2024-04-09Fix
CVE-2024-2492PowerPack Addons for Elementor WordPress plugin stored cross-site scripting5.4v3.10.4%2024-04-09Fix
CVE-2024-2457Modal Window create popup modal window WordPress plugin stored cross-site scripting5.4v3.10.3%2024-04-09Fix
CVE-2024-2456Ecwid Ecommerce Shopping Cart WordPress plugin stored cross-site scripting6.4CNA v3.10.4%2024-04-09Fix
CVE-2024-2436Lightweight Accordion WordPress plugin stored cross-site scripting5.4v3.10.4%2024-04-09Fix
CVE-2024-2423UsersWP WordPress plugin Authenticated(Contributor+) stored cross-site scripting via shortcode6.4CISA ADP v3.10.4%2024-04-09Fix
CVE-2024-2348Gum Elementor Addon WordPress plugin stored cross-site scripting6.4CISA ADP v3.10.4%2024-04-09Fix
CVE-2024-2347Astra WordPress theme authenticated (Contributor+) stored cross-site scripting via Display Name6.4CNA v3.10.4%2024-04-09Fix
CVE-2024-2344Avada WordPress theme authenticated (Admin+) SQL injection via entry7.2CNA v3.10.8%2024-04-09Fix
CVE-2024-2343Avada WordPress theme server-side request forgery6.4CNA v3.10.5%2024-04-09Fix
CVE-2024-2342Appointment Booking Calendar Simply Schedule Appointments Booking WordPress plugin SQL injection8.8CNA v3.10.6%2024-04-09Fix
CVE-2024-2341Appointment Booking Calendar Simply Schedule Appointments Booking WordPress plugin SQL injection6.5NVD v3.10.6%2024-04-09Fix
CVE-2024-2340Avada WordPress theme unauthenticated sensitive information exposure5.3CNA v3.128.0%2024-04-09NucleiFix
CVE-2024-2336Popup Maker Popup for opt-ins, lead gen, & more WordPress plugin stored cross-site scripting5.4v3.10.3%2024-04-09Fix
CVE-2024-2335Elements Plus! WordPress plugin stored cross-site scripting6.4CNA v3.10.3%2024-04-09Fix
CVE-2024-2334Template Kit Import WordPress plugin stored cross-site scripting6.4CNA v3.10.4%2024-04-09Fix
CVE-2024-2327Global Elementor Buttons WordPress plugin stored cross-site scripting6.4CNA v3.10.3%2024-04-09
CVE-2024-2325Link Library WordPress plugin reflected cross-site scripting6.1CNA v3.10.4%2024-04-09Fix
CVE-2024-2311Avada WordPress theme authenticated (Contributor+) stored cross-site scripting via shortcode5.4v3.10.7%2024-04-09Fix
CVE-2024-2306Revslider WordPress plugin stored cross-site scripting6.4CNA v3.10.3%2024-04-09Fix
CVE-2024-2305Cards for Beaver Builder WordPress plugin stored cross-site scripting5.4v3.10.3%2024-04-09Fix
CVE-2024-2302Easy Digital Downloads WordPress plugin information disclosure5.3CNA v3.10.6%2024-04-09Fix
CVE-2024-2289PowerPack Lite for Beaver Builder WordPress plugin stored cross-site scripting5.4v3.10.3%2024-04-09Fix
CVE-2024-2287Knight Lab Timeline WordPress plugin stored cross-site scripting6.4CNA v3.10.4%2024-04-09Fix
CVE-2024-2261Event Tickets and Registration WordPress plugin improper authorization to information disclosure4.3CNA v3.10.4%2024-04-09Fix
CVE-2024-2226Otter Blocks WordPress plugin stored cross-site scripting5.4v3.10.4%2024-04-09Fix
CVE-2024-2224Privilege escalation via the GravityZone productManager UpdateServer.KitsManager API (VA-11466)8.1CNA v3.10.7%2024-04-09Fix
CVE-2024-2223Incorrect Regular Expression in GravityZone Update Server (VA-11465)8.1CNA v3.10.5%2024-04-09Fix
CVE-2024-2222pluginsware Advanced Classifieds and Directory Pro missing authorization4.3CNA v3.10.5%2024-04-09Fix
CVE-2024-2200Contact Form by BestWebSoft WordPress plugin reflected cross-site scripting6.1CISA ADP v3.10.5%2024-04-09Fix
CVE-2024-2198Contact Form by BestWebSoft WordPress plugin reflected cross-site scripting6.1CNA v3.10.5%2024-04-09Fix
CVE-2024-2187Beaver Builder Addons by WPZOOM WordPress plugin stored cross-site scripting5.4v3.10.4%2024-04-09Fix
CVE-2024-2186Beaver Builder Addons by WPZOOM WordPress plugin stored cross-site scripting5.4v3.10.4%2024-04-09Fix
CVE-2024-2185Beaver Builder Addons by WPZOOM WordPress plugin stored cross-site scripting5.4v3.10.4%2024-04-09Fix
CVE-2024-2183Beaver Builder Addons by WPZOOM WordPress plugin stored cross-site scripting5.4v3.10.4%2024-04-09Fix
CVE-2024-2181Beaver Builder Addons by WPZOOM WordPress plugin stored cross-site scripting5.4v3.10.4%2024-04-09Fix
CVE-2024-2165SEOPress On-site SEO WordPress plugin authenticated (Author+) stored cross-site scripting5.4v3.10.4%2024-04-09Fix
CVE-2024-2138JetWidgets For Elementor WordPress plugin stored cross-site scripting5.4v3.10.4%2024-04-09Fix
CVE-2024-2125EnvíaloSimple: Email Marketing y Newsletters WordPress plugin cross-site request forgery8.8CNA v3.10.4%2024-04-09Fix
CVE-2024-2117Elementor Website Builder WordPress plugin stored cross-site scripting5.4v3.10.5%2024-04-09Fix
CVE-2024-2112Form Maker by 10Web WordPress plugin information disclosure7.5v3.10.7%2024-04-09Fix
CVE-2024-2093VK All in One Expansion Unit WordPress plugin information exposure5.3v3.10.7%2024-04-09Fix
CVE-2024-2081FooGallery WordPress plugin authenticated (Author+) stored cross-site scripting5.4v3.10.6%2024-04-09Fix
CVE-2024-2039Stackable Page Builder Gutenberg Blocks WordPress plugin stored cross-site scripting6.4CNA v3.10.5%2024-04-09Fix
CVE-2024-2033Video Conferencing with Zoom WordPress plugin sensitive information exposure4.3CNA v3.10.5%2024-04-09Fix
CVE-2024-2027devowl Real Media Library plugin style attribute stored cross-site scripting5.4v3.10.4%2024-04-09Fix
CVE-2024-2026Passster WordPress plugin stored cross-site scripting5.4v3.10.5%2024-04-09Fix
CVE-2024-2018WP Activity Log Premium WordPress plugin authenticated (Subscriber+) SQL injection8.8v3.10.9%2024-04-09Fix
CVE-2024-1999Gutenberg Blocks by Kadence Blocks WordPress plugin stored cross-site scripting5.4v3.10.5%2024-04-09Fix
CVE-2024-1991RegistrationMagic WordPress plugin privilege escalation8.8CNA v3.10.9%2024-04-09Fix
CVE-2024-1990RegistrationMagic WordPress plugin blind SQL injection8.8CNA v3.10.8%2024-04-09Fix
CVE-2024-1984Graphene WordPress theme missing authorization5.3CNA v3.10.5%2024-04-09Fix
CVE-2024-1974HT Mega Absolute Addons For Elementor WordPress plugin directory traversal6.5NVD v3.11.2%2024-04-09Fix
CVE-2024-1960ShopLentor WordPress plugin Authenticated(Contributor+) stored cross-site scripting via Banner Link5.4v3.10.5%2024-04-09Fix
CVE-2024-1948Getwid Gutenberg Blocks WordPress plugin stored cross-site scripting5.4v3.10.4%2024-04-09Fix
CVE-2024-1934WP Compress Image Optimizer WordPress plugin missing authorization unauthenticated CDN modification7.5CNA v3.10.7%2024-04-09Fix
CVE-2024-1904MasterStudy LMS WordPress plugin unauthorized access4.3CNA v3.10.5%2024-04-09Fix
CVE-2024-1893Easy Property Listings WordPress plugin Authenticated(Contributor+) SQL injection via shortcode8.8CNA v3.10.8%2024-04-09Fix
CVE-2024-1852WP-Members Membership WordPress plugin unauthenticated stored cross-site scripting6.1NVD v3.10.7%2024-04-09Fix
CVE-2024-1850AI Post Generator AutoWriter WordPress plugin missing authorization6.3CNA v3.10.5%2024-04-09Fix
CVE-2024-1813Simple Job Board WordPress plugin unauthenticated PHP object injection via Job Application fields9.8CNA v3.11.2%2024-04-09Fix
CVE-2024-1812Everest Forms WordPress plugin unauthenticated server-side request forgery via font_url7.2CNA v3.10.5%2024-04-09Fix
CVE-2024-1794Forminator WordPress plugin unauthenticated stored cross-site scripting via file upload6.1NVD v3.10.5%2024-04-09Fix
CVE-2024-1792CMB2 WordPress plugin authenticated (Contributor+) PHP object injection7.5CNA v3.10.8%2024-04-09Fix
CVE-2024-1790Ajax Load More WordPress plugin authenticated (Admin+) directory traversal to arbitrary file read4.9CNA v3.10.8%2024-04-09Fix
CVE-2024-1774Customily Product Personalizer WordPress plugin unauthenticated stored cross-site scripting7.2CNA v3.10.5%2024-04-09
CVE-2024-1664Responsive Gallery Grid WordPress plugin Admin+ stored XSS6.1CISA ADP v3.10.5%2024-04-09Fix
CVE-2024-1641Accordion WordPress plugin unauthorized access5.4CNA v3.10.5%2024-04-09Fix
CVE-2024-1637360 Javascript Viewer WordPress plugin missing authorization to plugin settings update4.3CNA v3.10.5%2024-04-09Fix
CVE-2024-1587Newsmatic WordPress theme unauthenticated information exposure5.3CISA ADP v3.10.6%2024-04-09Fix
CVE-2024-1571WP Recipe Maker WordPress plugin authenticated stored cross-site scripting via Video Embed4.8v3.10.4%2024-04-09Fix
CVE-2024-1498Happy Addons for Elementor WordPress plugin stored cross-site scripting5.4v3.10.5%2024-04-09Fix
CVE-2024-1466Elementor Addons by Livemesh WordPress plugin stored cross-site scripting5.4v3.10.4%2024-04-09Fix
CVE-2024-1465Elementor Addons by Livemesh WordPress plugin stored cross-site scripting5.4v3.10.4%2024-04-09Fix
CVE-2024-1464Elementor Addons by Livemesh WordPress plugin stored cross-site scripting5.4v3.10.4%2024-04-09Fix
CVE-2024-1463LearnPress WordPress plugin Authenticated(LP Instructor+) stored cross-site scripting4.8v3.10.4%2024-04-09Fix
CVE-2024-1461Elementor Addons by Livemesh WordPress plugin stored cross-site scripting5.4v3.10.4%2024-04-09Fix
CVE-2024-1458Elementor Addons by Livemesh WordPress plugin stored cross-site scripting5.4v3.10.4%2024-04-09Fix
CVE-2024-1424GiveWP Donation Plugin and Fundraising Platform WordPress plugin stored cross-site scripting5.4v3.10.4%2024-04-09Fix
CVE-2024-1412Memberpress WordPress plugin reflected cross-site scripting via message and error6.1v3.10.5%2024-04-09Fix
CVE-2024-1387Happy Addons for Elementor WordPress plugin incorrect authorization to information exposure4.3CNA v3.10.6%2024-04-09Fix
CVE-2024-1352Classified Listing Classified ads and Business Directory WordPress plugin missing authorization5.3v3.10.6%2024-04-09Fix
CVE-2024-1315Classified Listing WordPress plugin cross-site request forgery to account takeover8.8CNA v3.10.5%2024-04-09Fix
CVE-2024-1308WooCommerce Cloak Affiliate Links WordPress plugin unauthorized access7.5CNA v3.10.7%2024-04-09Fix
CVE-2024-1289LearnPress WordPress plugin insecure direct object reference5.4v3.10.4%2024-04-09Fix
CVE-2024-1233Red Hat JBoss Enterprise Application Platform eap: Wildfly-elytron has a SSRF security issue7.3CNA v3.10.8%2024-04-09Fix
CVE-2024-0952WP ERP WordPress plugin authenticated (Accounting Manager+) SQL injection via id7.2CNA v3.10.9%2024-04-09Fix
CVE-2024-0899s2Member WordPress plugin information disclosure5.3CNA v3.10.6%2024-04-09Fix
CVE-2024-0873Watu Quiz WordPress plugin authenticated (Contributor+) stored cross-site scripting5.4v3.10.5%2024-04-09Fix
CVE-2024-0872Watu Quiz WordPress plugin sensitive information disclosure4.3CISA ADP v3.10.5%2024-04-09Fix
CVE-2024-0826Qi Addons For Elementor WordPress plugin authenticated (Contributor+) stored cross-site scripting5.4v3.10.6%2024-04-09Fix
CVE-2024-0662FancyBox for WordPress WordPress plugin stored cross-site scripting4.8v3.10.5%2024-04-09Fix
CVE-2024-0626WooCommerce Clover Payment Gateway WordPress plugin missing authorization via callback_handler5.3CNA v3.10.6%2024-04-09Fix
CVE-2024-0598Gutenberg Blocks by Kadence Blocks WordPress plugin stored cross-site scripting4.8v3.10.7%2024-04-09Fix
CVE-2024-0588Paid Memberships Pro WordPress plugin cross-site request forgery4.3CNA v3.10.9%2024-04-09Exploit codeFix
CVE-2024-0376Premium Addons for Elementor WordPress plugin stored cross-site scripting5.4v3.10.7%2024-04-09Fix
CVE-2024-31817TOTOLINK EX200 information disclosure7.5CISA ADP v3.155.3%2024-04-08
CVE-2024-31816TOTOLINK EX200 information disclosure7.5CISA ADP v3.12.7%2024-04-08
CVE-2024-31815TOTOLINK EX200 insecure direct object reference9.1CISA ADP v3.10.6%2024-04-08
CVE-2024-31814TOTOLINK EX200 authentication bypass8.8CISA ADP v3.18.3%2024-04-08Emerging Threats
CVE-2024-31813TOTOLINK EX200 missing authorization8.4CISA ADP v3.10.2%2024-04-08
CVE-2024-31812TOTOLINK EX200 special element injection6.5CISA ADP v3.10.3%2024-04-08
CVE-2024-31811TOTOLINK EX200 command injection8.0CISA ADP v3.11.0%2024-04-08
CVE-2024-31809TOTOLINK EX200 special element injection8.8CISA ADP v3.11.0%2024-04-08
CVE-2024-31808TOTOLINK EX200 improper parameter handling8.8CISA ADP v3.10.9%2024-04-08
CVE-2024-31807TOTOLINK EX200 code injection9.8CISA ADP v3.11.4%2024-04-08
CVE-2024-31806TOTOLINK EX200 special element injection6.5CISA ADP v3.10.4%2024-04-08
CVE-2024-31805TOTOLINK EX200 improper access control6.5CISA ADP v3.10.5%2024-04-08
CVE-2024-31447Shopware has Improper Session Handling in store-api5.3CNA v3.10.5%2024-04-08Fix
CVE-2024-31442Redon-Hub has incorrect permissions on all admin related commands8.8CNA v3.10.5%2024-04-08Fix
CVE-2024-31375WP2LEADS WordPress plugin broken access control5.4CNA v3.10.4%2024-04-08Fix
CVE-2024-31357Ultimate Store Kit Elementor Addons WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.4%2024-04-08Fix
CVE-2024-31224binary-husky gpt_academic GPT Academic: Pickle deserializing cookies may pose RCE risk9.8CNA v3.11.2%2024-04-08Fix
CVE-2024-31221Clients removed during unpairing process may regain access if Sunshine was not restarted5.9CNA v3.10.5%2024-04-08Fix
CVE-2024-31205Saleor CSRF bypass in refreshToken mutation4.2CNA v3.10.2%2024-04-08Fix
CVE-2024-31047openexr integer overflow3.3CISA ADP v3.10.2%2024-04-08Fix
CVE-2024-31022Steve228uk Candycms code injection9.8CISA ADP v3.10.9%2024-04-08
CVE-2024-30269DataEase has database configuration information exposure5.3CNA v3.115.9%2024-04-08NucleiExploit codeFix
CVE-2024-28744The password is empty in the initial configuration of ACERA 9010-08 firmware v02.04 and earlier, and ACERA 9010-24 firmware v02.04 and earlier. An unauthenticated attacker may log in to the product with no password, and obtain and/or alter information such as network configuration and user informati8.8CISA ADP v3.10.3%2024-04-08
CVE-2024-28732Facuet Ryu infinite loop7.5CISA ADP v3.10.8%2024-04-08
CVE-2024-28270web-flash password reset endpoint vulnerability8.1CISA ADP v3.10.4%2024-04-08
CVE-2024-28224Ollama origin validation error6.6CISA ADP v3.10.4%2024-04-08Fix
CVE-2024-28066Mitel 6905 weak credentials8.8CISA ADP v3.10.4%2024-04-08Fix
CVE-2024-27897Huawei HarmonyOS input verification vulnerability in the call module7.5CISA ADP v3.10.3%2024-04-08Fix
CVE-2024-27896Huawei HarmonyOS input verification vulnerability in the log module7.5CISA ADP v3.10.3%2024-04-08Fix
CVE-2024-27895Huawei HarmonyOS information disclosure7.5v3.10.3%2024-04-08
CVE-2024-27632GNU Savane improper seeding8.8CISA ADP v3.11.3%2024-04-08Exploit code
CVE-2024-27631GNU Savane cross-site request forgery6.0CISA ADP v3.10.4%2024-04-08
CVE-2024-27630GNU Savane insecure direct object reference7.5CISA ADP v3.10.8%2024-04-08
CVE-2024-27488ZLMediaKit HTTP API authentication vulnerability9.8CISA ADP v3.10.6%2024-04-08
CVE-2024-26811Linux kernel ksmbd IPC handling out-of-bounds write9.8CNA v3.10.8%2024-04-08Fix
CVE-2024-26574Wondershare Filmora insecure permissions7.8CISA ADP v3.10.3%2024-04-08Exploit code
CVE-2024-24279Secdiskapp weak password encoding8.8CISA ADP v3.10.1%2024-04-08
CVE-2024-23658UNISOC chipsets camera driver use-after-free4.4CISA ADP v3.10.1%2024-04-08Fix
CVE-2024-23584HCL BigFix Asset Discovery NMAP Importer service information disclosure6.6CNA v3.10.3%2024-04-08
CVE-2024-23192Open-Xchange OX App Suite cross-site scripting6.1CNA v3.10.5%2024-04-08Fix
CVE-2024-23191Open-Xchange OX App Suite cross-site scripting5.4CNA v3.10.5%2024-04-08Fix
CVE-2024-23190Open-Xchange OX App Suite cross-site scripting5.4CNA v3.10.5%2024-04-08Fix
CVE-2024-23189Open-Xchange OX App Suite cross-site scripting5.4CNA v3.10.5%2024-04-08Fix
CVE-2024-23086Mikkotommila Apfloat out-of-bounds read9.8CISA ADP v3.10.7%2024-04-08
CVE-2024-23085Mikkotommila Apfloat null pointer dereference7.5CISA ADP v3.10.5%2024-04-08
CVE-2024-23084Mikkotommila Apfloat improper array index validation7.5CISA ADP v3.10.6%2024-04-08
CVE-2024-23082ThreeTen Backport v1.6.8 was discovered to contain an integer overflow via the component org.threeten.bp.format.DateTimeFormatter::parse(CharSequence, ParsePosition). NOTE: this is disputed by multiple third parties who believe there was not reasonable evidence to determine the existence of a vulner–0.3%2024-04-08
CVE-2024-23081Threeten Backport null pointer dereference3.3v3.10.2%2024-04-08Fix
CVE-2024-23079JGraphT Core ToleranceDoubleComparator vulnerability6.2CISA ADP v3.10.2%2024-04-08
CVE-2024-23078JGraphT Core ToleranceDoubleComparator null pointer dereference9.1CISA ADP v3.10.7%2024-04-08
CVE-2024-22949Jfreechart out-of-bounds read9.1CISA ADP v3.10.7%2024-04-08
CVE-2024-3466SourceCodester Laundry Management System Pengeluaran.php laporan_filter SQL injection8.8v3.10.7%2024-04-08
CVE-2024-3465SourceCodester Laundry Management System Transaki.php laporan_filter SQL injection9.8v3.10.8%2024-04-08
CVE-2024-3464SourceCodester Laundry Management System Pelanggan.php laporan_filter SQL injection9.8v3.10.8%2024-04-08
CVE-2024-3463SourceCodester Laundry Management System edit cross-site scripting5.4v3.10.6%2024-04-08
CVE-2024-3458Netentsec NS-ASG Application Security Gateway add_ikev2.php SQL injection9.8v3.10.7%2024-04-08
CVE-2024-3457Netentsec NS-ASG Application Security Gateway config_ISCGroupNoCache.php SQL injection9.8v3.10.7%2024-04-08
CVE-2024-3456Netentsec NS-ASG Application Security Gateway config_Anticrack.php SQL injection9.8v3.10.8%2024-04-08
CVE-2024-3455Netentsec NS-ASG Application Security Gateway add_postlogin.php SQL injection9.8v3.10.7%2024-04-08
CVE-2024-3445SourceCodester Laundry Management System laporan_filter SQL injection9.8v3.10.8%2024-04-08
CVE-2024-3444Wangshen SecGate 3600 ?g=net_pro_keyword_import_save unrestricted upload4.7CNA v3.10.5%2024-04-08
CVE-2024-3443SourceCodester Prison Management System apply_leave.php cross-site scripting5.4v3.10.6%2024-04-08
CVE-2024-3442SourceCodester Prison Management System delete_leave.php SQL injection8.8v3.10.7%2024-04-08
CVE-2024-3441SourceCodester Prison Management System edit-profile.php SQL injection8.8v3.10.7%2024-04-08
CVE-2024-3440SourceCodester Prison Management System edit_profile.php SQL injection7.2v3.10.7%2024-04-08
CVE-2024-3439SourceCodester Prison Management System login.php SQL injection9.8v3.10.9%2024-04-08
CVE-2024-3438SourceCodester Prison Management System login.php SQL injection9.8v3.10.9%2024-04-08
CVE-2024-3437SourceCodester Prison Management System Avatar add-admin.php unrestricted upload7.2v3.11.1%2024-04-08
CVE-2024-3436SourceCodester Prison Management System Avatar edit-photo.php unrestricted upload7.2v3.10.9%2024-04-08
CVE-2024-3434CP Plus Wi-Fi Camera User Management improper authorization5.4CNA v3.10.5%2024-04-08
CVE-2024-2834OpenText ArcSight Management Center and ArcSight Platform stored XSS8.7CNA v3.10.5%2024-04-08Fix
CVE-2024-2511OpenSSL unbounded memory growth with session handling in TLSv1.35.9CISA ADP v3.152.4%2024-04-08Fix
CVE-2024-1958WPB Show Core WordPress plugin reflected XSS4.8CISA ADP v3.10.5%2024-04-08Fix
CVE-2024-1956WPB Show Core WordPress plugin reflected XSS6.1CISA ADP v3.10.5%2024-04-08Fix
CVE-2024-1752Font Farsi WordPress plugin Admin+ stored XSS in settings6.1CISA ADP v3.10.4%2024-04-08
CVE-2024-1589SendPress Newsletters for WordPress Admin+ stored XSS via form settings6.1CISA ADP v3.10.4%2024-04-08
CVE-2024-1588SendPress Newsletters for WordPress Admin+ stored XSS via settings6.8CISA ADP v3.10.7%2024-04-08
CVE-2024-1292WPB Show Core WordPress plugin reflected XSS4.7CISA ADP v3.10.5%2024-04-08Fix
CVE-2024-0083NVIDIA ChatRTX UI cross-site scripting6.5CNA v3.10.6%2024-04-08Fix
CVE-2024-0082NVIDIA ChatRTX UI improper privilege management8.2CNA v3.10.2%2024-04-08Fix
CVE-2024-31951FRRouting buffer overflow6.5CISA ADP v3.10.5%2024-04-07Fix
CVE-2024-31950FRRouting buffer overflow6.5CISA ADP v3.10.5%2024-04-07Fix
CVE-2024-31949FRRouting infinite loop6.5CISA ADP v3.10.7%2024-04-07Fix
CVE-2024-31948FRRouting improper type validation6.5CISA ADP v3.10.8%2024-04-07Fix
CVE-2024-31349MailMunch Grow your Email List WordPress plugin cross-site scripting (XSS)5.4v3.10.3%2024-04-07Fix
CVE-2024-31348Super Testimonials WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.4%2024-04-07Fix
CVE-2024-31346Gradient Text Widget for Elementor WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.3%2024-04-07
CVE-2024-31345Auto Poster WordPress plugin arbitrary file upload9.1CISA ADP v3.10.9%2024-04-07
CVE-2024-31344Easy Login Styler WordPress plugin cross-site scripting (XSS)5.9CNA v3.10.3%2024-04-07
CVE-2024-31308WP Import Export Lite and WP Import Export WordPress plugin PHP object injection7.2v3.10.4%2024-04-07Fix
CVE-2024-31306Essential Blocks WordPress plugin cross-site scripting (XSS)5.4v3.10.4%2024-04-07Fix
CVE-2024-31296BookingPress WordPress plugin insecure direct object references (IDOR)5.4v3.10.3%2024-04-07Fix
CVE-2024-31292Import XML and RSS Feeds WordPress plugin arbitrary file upload7.2CNA v3.10.6%2024-04-07Fix
CVE-2024-31291ProfileGrid WordPress plugin IDOR on Friend request7.1v3.10.4%2024-04-07Fix
CVE-2024-31288RapidLoad WordPress plugin server side request forgery (SSRF)7.2CNA v3.10.4%2024-04-07Fix
CVE-2024-31286WP Photo Album Plus WordPress plugin arbitrary file upload9.9CNA v3.10.9%2024-04-07Fix
CVE-2024-31280Church Admin WordPress plugin arbitrary file upload8.8NVD v3.10.6%2024-04-07Fix
CVE-2024-31277Product Designer WordPress plugin PHP object injection8.7CISA ADP v3.10.5%2024-04-07Fix
CVE-2024-31260Edwiser Bridge WordPress plugin SQL injection7.2v3.10.5%2024-04-07Fix
CVE-2024-31258Form to Chat App WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.3%2024-04-07Fix
CVE-2024-31257Formsite WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.3%2024-04-07Fix
CVE-2024-31256WebinarPress WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.4%2024-04-07Fix
CVE-2024-31255ELEX WooCommerce Dynamic Pricing and Discounts WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.3%2024-04-07Fix
CVE-2024-31241LearnPress Export Import WordPress plugin Auth. SQL injection7.6CNA v3.10.5%2024-04-07Fix
CVE-2024-31236Royal Elementor Addons WordPress plugin cross-site scripting (XSS)5.4v3.10.4%2024-04-07Fix
CVE-2024-31234REHub Framework WordPress plugin SQL injection8.5CNA v3.10.5%2024-04-07Fix
CVE-2024-31233Rehub WordPress theme Auth. SQL injection8.5CNA v3.10.5%2024-04-07Fix
CVE-2024-30418Huawei HarmonyOS vulnerability of insufficient permission verification in the app management module7.5CISA ADP v3.10.4%2024-04-07Fix
CVE-2024-30417Huawei HarmonyOS path traversal vulnerability in the Bluetooth-based sharing module7.5v3.10.4%2024-04-07Fix
CVE-2024-30416Huawei HarmonyOS use-after-free (UAF) vulnerability in the underlying driver module7.5CISA ADP v3.10.4%2024-04-07Fix
CVE-2024-30415Huawei HarmonyOS vulnerability of improper permission control in the window management module9.1CISA ADP v3.10.4%2024-04-07Fix
CVE-2024-30414Huawei HarmonyOS command injection vulnerability in the AccountManager module7.5CISA ADP v3.10.7%2024-04-07Fix
CVE-2024-30413Huawei HarmonyOS vulnerability of improper permission control in the window management module7.5v3.10.4%2024-04-07Fix
CVE-2024-22155WooCommerce WordPress plugin cross-site request forgery (CSRF)4.3CNA v3.10.2%2024-04-07Fix
CVE-2024-3433PuneethReddyHC Event Management register.php cross-site scripting5.4v3.10.6%2024-04-07
CVE-2024-3432PuneethReddyHC Event Management register.php SQL injection8.8v3.10.6%2024-04-07
CVE-2024-3431EyouCMS Backend deserialization8.8v3.10.7%2024-04-07
CVE-2024-3430QKSMS Backup file androidmanifest.xml backup2.4CNA v3.10.2%2024-04-07
CVE-2024-3428SourceCodester Online Courseware edit.php cross-site scripting6.1v3.10.6%2024-04-07
CVE-2024-3427SourceCodester Online Courseware addq.php cross-site scripting5.4v3.10.6%2024-04-07
CVE-2024-3426SourceCodester Online Courseware editt.php cross-site scripting5.4v3.10.6%2024-04-07
CVE-2024-3425SourceCodester Online Courseware activateall.php SQL injection9.8v3.10.8%2024-04-07
CVE-2024-3424SourceCodester Online Courseware listscore.php SQL injection9.8v3.10.8%2024-04-07
CVE-2024-3423SourceCodester Online Courseware activateteach.php SQL injection9.8v3.10.8%2024-04-07
CVE-2024-3422SourceCodester Online Courseware activatestud.php SQL injection9.8v3.10.8%2024-04-07
CVE-2024-3421SourceCodester Online Courseware deactivatestud.php SQL injection9.8v3.10.7%2024-04-07
CVE-2024-3420SourceCodester Online Courseware saveedit.php SQL injection9.8v3.10.8%2024-04-07
CVE-2024-3419SourceCodester Online Courseware edit.php SQL injection9.8v3.10.8%2024-04-07
CVE-2024-3418SourceCodester Online Courseware deactivateteach.php SQL injection9.8v3.10.7%2024-04-07
CVE-2024-3417SourceCodester Online Courseware saveeditt.php SQL injection9.8v3.10.8%2024-04-07
CVE-2024-3416SourceCodester Online Courseware editt.php SQL injection9.8v3.10.9%2024-04-07
CVE-2024-28741EginDemirbilek NorthStar C2 v1 cross-site scripting8.8CISA ADP v3.178.2%2024-04-06MetasploitExploit code
CVE-2024-27620Ladder API server-side request forgery7.5CISA ADP v3.12.3%2024-04-06Exploit code
CVE-2024-25029IBM Personal Communications code execution9.0CNA v3.10.8%2024-04-06Fix
CVE-2024-24746Apache NimBLE: Denial of service in NimBLE Bluetooth stack7.5CISA ADP v3.11.4%2024-04-06Fix
CVE-2024-22328IBM Maximo Application Suite information disclosure7.5CNA v3.10.8%2024-04-06Fix
CVE-2024-3415SourceCodester Human Resource Information System addbranches_process.php cross-site scripting4.8v3.10.5%2024-04-06
CVE-2024-3414SourceCodester Human Resource Information System addcorporate_process.php cross-site scripting4.8v3.10.5%2024-04-06
CVE-2024-3413SourceCodester Human Resource Information System login_process.php SQL injection9.8v3.11.0%2024-04-06
CVE-2024-3378iboss Secure Web Gateway Login portal login cross-site scripting6.1v3.122.0%2024-04-06Nuclei
CVE-2024-3377SourceCodester Computer Laboratory Management System cross-site scripting6.1v3.10.6%2024-04-06
CVE-2024-3376SourceCodester Computer Laboratory Management System config.php redirect9.8v3.11.3%2024-04-06
CVE-2024-3369code-projects Car Rental add-vehicle.php unrestricted upload8.8v3.10.8%2024-04-06
CVE-2024-3366Xuxueli xxl-job Template JdkSerializeTool.java deserialize injection9.8v3.10.9%2024-04-06
CVE-2024-3365SourceCodester Online Library System controller.php cross-site scripting5.4v3.10.6%2024-04-06
CVE-2024-3364SourceCodester Online Library System index.php cross-site scripting5.4v3.10.6%2024-04-06
CVE-2024-3363SourceCodester Online Library System index.php SQL injection9.8v3.10.9%2024-04-06
CVE-2024-3362SourceCodester Online Library System controller.php SQL injection8.8v3.10.8%2024-04-06
CVE-2024-3361SourceCodester Online Library System deweydecimal.php SQL injection8.8v3.10.8%2024-04-06
CVE-2024-3360SourceCodester Online Library System index.php SQL injection9.8v3.10.9%2024-04-06
CVE-2024-3359SourceCodester Online Library System login.php SQL injection9.8v3.11.0%2024-04-06
CVE-2024-3358SourceCodester Aplaya Beach Resort Online Reservation System index.php cross-site scripting6.1v3.10.6%2024-04-06
CVE-2024-3245EmbedPress WordPress plugin stored cross-site scripting5.4v3.10.3%2024-04-06Fix
CVE-2024-3216WooCommerce PDF Invoices WordPress plugin unauthorized access5.3CNA v3.10.4%2024-04-06Fix
CVE-2024-3159Google Chrome V8 out-of-bounds access8.8v3.11.6%2024-04-06Fix
CVE-2024-3158Google Chrome Bookmarks use-after-free8.8v3.10.8%2024-04-06Fix
CVE-2024-3156Google Chrome V8 inappropriate implementation8.8v3.112.8%2024-04-06Fix
CVE-2024-2950BoldGrid Easy SEO Simple and Effective SEO WordPress plugin information exposure5.3CNA v3.10.5%2024-04-06Fix
CVE-2024-2949Carousel WordPress plugin stored cross-site scripting5.4v3.10.3%2024-04-06Fix
CVE-2024-2656Icegram Express WordPress plugin authenticated (Administrator+) cross-site scripting via CSV import4.4CNA v3.10.3%2024-04-06Fix
CVE-2024-2471FooGallery WordPress plugin stored cross-site scripting5.4v3.10.3%2024-04-06Fix
CVE-2024-2458Powerkit Supercharge your WordPress Site plugin stored cross-site scripting5.4v3.10.3%2024-04-06Fix
CVE-2024-2444Inline Related Posts WordPress plugin Admin+ stored XSS4.8CISA ADP v3.10.4%2024-04-06Fix
CVE-2024-2296Photo Gallery by 10Web Mobile-Friendly Image Gallery WordPress plugin stored cross-site scripting4.8v3.10.4%2024-04-06Fix
CVE-2024-2132Ultimate Bootstrap Elements for Elementor WordPress plugin stored cross-site scripting5.4v3.10.3%2024-04-06Fix
CVE-2024-1994Image Watermark WordPress plugin missing authorization authenticated Watermark modification4.3CNA v3.10.3%2024-04-06Fix
CVE-2024-1428Element Pack Elementor Addons WordPress plugin stored cross-site scripting5.4v3.10.4%2024-04-06Fix
CVE-2024-1385UDX WP-Stateless dismiss_notices function missing authorization7.1v3.10.4%2024-04-06Fix
CVE-2024-0837Element Pack Elementor Addons WordPress plugin stored cross-site scripting5.4v3.10.3%2024-04-06Fix
CVE-2024-0406Mholt/Archiver: Path traversal6.1CNA v3.10.9%2024-04-06Exploit codeFix
CVE-2024-31852LLVM ARM backend vulnerability5.9CISA ADP v3.11.0%2024-04-05Fix
CVE-2024-31851CData Sync Java version path traversal8.6CNA v3.12.9%2024-04-05NucleiFix
CVE-2024-31850CData Arc Java version path traversal8.6CNA v3.13.0%2024-04-05NucleiFix
CVE-2024-31849CData Connect Java version path traversal9.8CNA v3.16.1%2024-04-05NucleiFix
CVE-2024-31848CData API Server Java version path traversal9.8CNA v3.18.1%2024-04-05NucleiExploit codeFix
CVE-2024-31220Sunshine vulnerable to remote unauthenticated arbitrary file read7.3CNA v3.10.5%2024-04-05Fix
CVE-2024-31218Missing authentication for critical function in Webhood backend9.8CNA v3.10.7%2024-04-05Fix
CVE-2024-31213InstantCMS open redirect3.5CNA v3.10.4%2024-04-05Fix
CVE-2024-31083Red Hat Enterprise Linux 6 Extended Lifecycle Support use-after-free7.8CNA v3.11.9%2024-04-05Fix
CVE-2024-30977Secnet Security Network Intelligent AC Management System password settings privilege escalation7.8CISA ADP v3.10.2%2024-04-05
CVE-2024-30891Tenda AC18 /goform/exeCommand command injection8.8CISA ADP v3.11.9%2024-04-05
CVE-2024-30849Donbermoy Complete E-Commerce Site Sourcecodester arbitrary file upload9.8CISA ADP v3.11.1%2024-04-05
CVE-2024-29863installer executable in Qlik Qlikview race condition7.8CISA ADP v3.10.4%2024-04-05Exploit code
CVE-2024-29783Google Android tmu_get_tr_thresholds out-of-bounds read6.7CISA ADP v3.10.1%2024-04-05Fix
CVE-2024-29782Google Android tmu.c out-of-bounds read5.5CISA ADP v3.10.1%2024-04-05Fix
CVE-2024-29757Google Android improper authentication7.3CISA ADP v3.10.1%2024-04-05Fix
CVE-2024-29756Google Android q6afe.c out-of-bounds write9.8CISA ADP v3.10.3%2024-04-05Fix
CVE-2024-29755Google Android tmu.c out-of-bounds read4.4CISA ADP v3.10.1%2024-04-05Fix
CVE-2024-29754Google Android TMU_IPC_GET_TABLE out-of-bounds read6.2CISA ADP v3.10.1%2024-04-05Fix
CVE-2024-29753Google Android tmu.c out-of-bounds write7.7CISA ADP v3.10.1%2024-04-05Fix
CVE-2024-29752Google Android tmu.c out-of-bounds write7.8CISA ADP v3.10.1%2024-04-05Fix
CVE-2024-29751Google Android asn1_common.c out-of-bounds read5.5CISA ADP v3.10.1%2024-04-05Fix
CVE-2024-29750Google Android kmv.c out-of-bounds read5.5CISA ADP v3.10.1%2024-04-05Fix
CVE-2024-29749Google Android tmu.c out-of-bounds write8.4CISA ADP v3.10.1%2024-04-05Fix
CVE-2024-29748Android Pixel privilege escalation7.8v3.10.7%2024-04-05KEVFix
CVE-2024-29747Google Android dvfs.c out-of-bounds read5.9CISA ADP v3.10.1%2024-04-05Fix
CVE-2024-29746Google Android lpm.c out-of-bounds write8.4CISA ADP v3.10.1%2024-04-05Fix
CVE-2024-29745Android Pixel information disclosure5.5v3.10.5%2024-04-05KEVFix
CVE-2024-29744Google Android tmu_get_gov_time_windows out-of-bounds read5.5CISA ADP v3.10.1%2024-04-05Fix
CVE-2024-29743Google Android tmu.c out-of-bounds write7.7CISA ADP v3.10.1%2024-04-05Fix
CVE-2024-29742Google Android dvfs.c out-of-bounds read5.5CISA ADP v3.10.1%2024-04-05Fix
CVE-2024-29741Google Android s2mpu.c privilege escalation7.8CISA ADP v3.10.1%2024-04-05Fix
CVE-2024-29740Google Android tmu.c out-of-bounds write7.4CISA ADP v3.10.1%2024-04-05Fix
CVE-2024-29739Google Android tmu.c out-of-bounds read5.5CISA ADP v3.10.1%2024-04-05Fix
CVE-2024-29738Google Android gov_init out-of-bounds read5.5CISA ADP v3.10.1%2024-04-05Fix
CVE-2024-29672zly2006 Reden path traversal8.8CNA v3.11.3%2024-04-05
CVE-2024-29221Mattermost invite ID available to team admins even without the Add Members permission4.7CNA v3.10.3%2024-04-05Fix
CVE-2024-28949Mattermost DoS via a large number of User Preferences4.3CNA v3.10.6%2024-04-05Fix
CVE-2024-28065Unify CP IP Phone firmware cleartext storage of sensitive information5.9CISA ADP v3.10.2%2024-04-05Fix
CVE-2024-27912Lenovo Printers denial of service7.5CNA v3.10.5%2024-04-05
CVE-2024-27911Lenovo Printers missing authorization7.5CNA v3.10.5%2024-04-05
CVE-2024-27910Lenovo Printers missing authorization5.3CNA v3.10.5%2024-04-05
CVE-2024-27909Lenovo Printers denial of service4.9CNA v3.10.5%2024-04-05
CVE-2024-27908Lenovo Printers buffer overflow4.9CNA v3.10.5%2024-04-05
CVE-2024-27448MailDev remote code execution9.1CISA ADP v3.10.9%2024-04-05
CVE-2024-27437Linux kernel VFIO PCI INTx interrupt handling vulnerability5.5NVD v3.10.2%2024-04-05Fix
CVE-2024-27232Google Android asn1_common.c out-of-bounds read5.5CISA ADP v3.10.1%2024-04-05Fix
CVE-2024-27231Google Android tmu.c out-of-bounds read5.9CISA ADP v3.10.1%2024-04-05Fix
CVE-2024-26814Linux kernel VFIO fsl-mc interrupt handling null pointer dereference5.5v3.10.2%2024-04-05Fix
CVE-2024-26813Linux kernel VFIO platform interrupt handling null pointer dereference5.5v3.10.2%2024-04-05Fix
CVE-2024-26812Linux kernel VFIO PCI INTx interrupt handling null pointer dereference7.8CNA v3.10.3%2024-04-05Fix
CVE-2024-26810Linux kernel VFIO PCI INTx interrupt handling race condition7.8CNA v3.10.2%2024-04-05Fix
CVE-2024-26329Chilkat before v9.5.0.98, allows attackers to obtain sensitive information via predictable PRNG in ChilkatRand::randomBytes function.6.2CISA ADP v3.10.3%2024-04-05
CVE-2024-23592Lenovo Synaptics Fingerprint Readers improperly implemented security check6.3CNA v3.10.3%2024-04-05
CVE-2024-22363SheetJS regular expression denial of service (ReDoS)7.5CISA ADP v3.10.8%2024-04-05Fix
CVE-2024-22004Unchecked length in Trusted application on Google Nest Wifi Pro, leading to out-of-bounds read10.0CNA v3.10.2%2024-04-05Fix
CVE-2024-21848Mattermost users maintain access to active call after being removed from a channel3.1CNA v3.10.3%2024-04-05Fix
CVE-2024-3357SourceCodester Aplaya Beach Resort Online Reservation System index.php cross-site scripting5.4v3.10.6%2024-04-05
CVE-2024-3356SourceCodester Aplaya Beach Resort Online Reservation System SQL injection9.8v3.10.9%2024-04-05
CVE-2024-3355SourceCodester Aplaya Beach Resort Online Reservation System SQL injection9.8v3.10.9%2024-04-05
CVE-2024-3354SourceCodester Aplaya Beach Resort Online Reservation System index.php SQL injection9.8v3.10.9%2024-04-05
CVE-2024-3353SourceCodester Aplaya Beach Resort Online Reservation System index.php SQL injection7.3CNA v3.10.8%2024-04-05
CVE-2024-3352SourceCodester Aplaya Beach Resort Online Reservation System index.php SQL injection9.8v3.10.9%2024-04-05
CVE-2024-3351SourceCodester Aplaya Beach Resort Online Reservation System index.php SQL injection9.8v3.10.9%2024-04-05
CVE-2024-3350SourceCodester Aplaya Beach Resort Online Reservation System index.php SQL injection9.8v3.10.9%2024-04-05
CVE-2024-3349SourceCodester Aplaya Beach Resort Online Reservation System login.php SQL injection9.8v3.10.9%2024-04-05
CVE-2024-3348SourceCodester Aplaya Beach Resort Online Reservation System index.php SQL injection9.8v3.10.9%2024-04-05
CVE-2024-3347SourceCodester Airline Ticket Reservation System activate_jet_details_form_handler.php SQL injection9.8v3.10.9%2024-04-05
CVE-2024-3346Byzoro Smart S80 webmailattach.php os command injection6.3CNA v3.149.3%2024-04-05
CVE-2024-3321SourceCodester eLearning System Maintenance module cross-site scripting4.8v3.10.5%2024-04-05
CVE-2024-3320SourceCodester eLearning System cross-site scripting6.1v3.10.6%2024-04-05
CVE-2024-3217WP Directory Kit WordPress plugin authenticated (Subscriber+) SQL injection8.8CNA v3.11.9%2024-04-05Exploit codeFix
CVE-2024-2509Gutenberg Blocks by Kadence Blocks WordPress plugin Contributor+ stored XSS6.5CISA ADP v3.10.4%2024-04-05Fix
CVE-2024-2499Squelch Tabs and Accordions Shortcodes WordPress plugin stored cross-site scripting6.4CNA v3.10.3%2024-04-05Fix
CVE-2024-2447Mattermost fails to authenticate the source of certain types of post actions6.5CNA v3.10.2%2024-04-05Fix
CVE-2024-2380Checkmk XSS in graph rendering4.6CNA v3.10.3%2024-04-05Fix
CVE-2024-2312GNU GRUB2 use-after-free6.7CNA v3.10.4%2024-04-05Fix
CVE-2024-2115LearnPress WordPress LMS plugin cross-site request forgery to privilege escalation8.8CNA v3.10.3%2024-04-05Fix
CVE-2024-0081NVIDIA NeMo resource exhaustion8.6CNA v3.10.6%2024-04-05
CVE-2024-0080NVIDIA nvTIFF Library improper input validation2.8CNA v3.10.2%2024-04-05Fix
CVE-2024-0076NVIDIA CUDA Toolkit out-of-bounds read3.3CNA v3.10.2%2024-04-05Fix
CVE-2024-0072NVIDIA CUDA Toolkit null pointer dereference3.3CNA v3.10.2%2024-04-05Fix
CVE-2024-31498Yubico YubiKey Manager GUI privilege escalation8.8CISA ADP v3.10.6%2024-04-04
CVE-2024-31215Mobile Security Framework vulnerable to server-side request forgery in firebase database check6.3CNA v3.10.5%2024-04-04Fix
CVE-2024-31212instantsoft icms2 SQL injection in index_chart_data action6.7CNA v3.10.9%2024-04-04
CVE-2024-31211wordpress-develop remote code execution in `WP_HTML_Token`5.5CNA v3.12.8%2024-04-04Exploit codeFix
CVE-2024-31210wordpress-develop PHP file upload bypass via plugin installer7.7CNA v3.10.9%2024-04-04Fix
CVE-2024-31209erlef oidcc provider configuration worker resource exhaustion5.3CNA v3.10.2%2024-04-04Fix
CVE-2024-31207Vite's `server.fs.deny` did not deny requests for patterns with directories5.9CNA v3.10.7%2024-04-04Fix
CVE-2024-31206dectalk-tts Uses Unencrypted HTTP request8.2CNA v3.10.3%2024-04-04Fix
CVE-2024-31204Mailcow cross-site scripting vulnerability via Exception handler6.1CNA v3.18.2%2024-04-04Fix
CVE-2024-31082Red Hat Enterprise Linux 10 buffer over-read7.3CNA v3.10.3%2024-04-04Fix
CVE-2024-31081Red Hat Enterprise Linux 6 Extended Lifecycle Support buffer over-read7.3CNA v3.10.5%2024-04-04Fix
CVE-2024-31080Red Hat Enterprise Linux 6 Extended Lifecycle Support buffer over-read7.3CNA v3.10.5%2024-04-04Fix
CVE-2024-31025ECshop SQL injection7.5CISA ADP v3.10.6%2024-04-04
CVE-2024-30565Seacms code injection8.8CISA ADP v3.11.6%2024-04-04
CVE-2024-30270Mailcow path traversal and arbitrary code execution6.2CNA v3.127.3%2024-04-04Exploit codeFix
CVE-2024-30266Wasmtime vulnerable to panic when using a dropped extenref-typed element segment3.3CNA v3.10.3%2024-04-04Fix
CVE-2024-30264typebot.io sign-in page redirect parameter reflected cross-site scripting8.1CNA v3.10.8%2024-04-04Fix
CVE-2024-30263xwikisas macro-pdfviewer information disclosure7.7CNA v3.10.5%2024-04-04
CVE-2024-30261Node.js undici fetch integrity verification improper access control2.6CNA v3.10.8%2024-04-04Fix
CVE-2024-30260Node.js undici cross-origin redirect handling vulnerability3.9CNA v3.10.7%2024-04-04Fix
CVE-2024-30255envoyproxy envoy HTTP/2: CPU exhaustion due to CONTINUATION frame flood5.3CNA v3.187.8%2024-04-04Exploit codeFix
CVE-2024-30254JCWasmx86 mesonlsp directory traversal allowing overwriting arbitrary files5.8CNA v3.10.2%2024-04-04Fix
CVE-2024-30252GitHub Security Lab (GHSL) vulnerability Report, livemarks: `GHSL-2024-015`2.6CNA v3.10.3%2024-04-04Fix
CVE-2024-30250KindSpells Astro-Shield Content-Security-Policy header generation vulnerability7.5CNA v3.10.3%2024-04-04Fix
CVE-2024-30249Cloudburst Network DoS in RakNet connection handling8.6CNA v3.10.6%2024-04-04Fix
CVE-2024-29981Microsoft Edge (Chromium-based) spoofing4.3CNA v3.10.7%2024-04-04Fix
CVE-2024-29387ProjeQtor unrestricted file upload8.8CISA ADP v3.11.2%2024-04-04
CVE-2024-29386ProjeQtor SQL injection5.4CISA ADP v3.10.4%2024-04-04
CVE-2024-29375Addactis IBNRS v.3.10.3.107 CSV injection9.8CISA ADP v3.11.5%2024-04-04
CVE-2024-29225ELECOM WRC-X3200GST3-B files accessible to external parties4.3CISA ADP v3.10.3%2024-04-04
CVE-2024-29193AlexxIT go2rtc GHSL-2023-207 gotortc DOM-based cross-site scripting6.1CNA v3.10.5%2024-04-04Fix
CVE-2024-29192AlexxIT go2rtc GHSL-2023-206 gotortc cross-site request forgery8.8CNA v3.10.5%2024-04-04Fix
CVE-2024-29191AlexxIT go2rtc GHSL-2023-205 gotortc DOM-based cross-site scripting6.1CNA v3.10.4%2024-04-04Fix
CVE-2024-29182Collabora Online stored cross-site-scripting vulnerability via tooltip6.1CNA v3.10.3%2024-04-04Fix
CVE-2024-29167SEEnergy SVR-116 OS command injection7.2CISA ADP v3.10.7%2024-04-04
CVE-2024-29049Microsoft Edge (Chromium-based) Webview2 spoofing4.1CNA v3.10.7%2024-04-04Fix
CVE-2024-29008Apache CloudStack extraconfig feature improper input validation6.4CISA ADP v3.10.6%2024-04-04Fix
CVE-2024-29007Apache CloudStack template and ISO download server-side request forgery7.3CISA ADP v3.10.8%2024-04-04Fix
CVE-2024-29006Apache CloudStack: X-forwarded-for HTTP header parsed by default9.8v3.10.9%2024-04-04Fix
CVE-2024-28871OISF libhtp excessive CPU used on malformed traffic7.5CNA v3.10.8%2024-04-04Fix
CVE-2024-28787IBM Security Verify Access information disclosure8.7CNA v3.10.8%2024-04-04Fix
CVE-2024-28520File Upload vulnerability in Byzoro Networks Smart multi-service security gateway intelligent management platform version S210, allows an attacker to obtain sensitive information via the uploadfile.php component.6.5CISA ADP v3.10.2%2024-04-04
CVE-2024-28182nghttp2 reading unbounded number of HTTP/2 CONTINUATION frames to cause excessive CPU usage5.3CNA v3.185.0%2024-04-04Fix
CVE-2024-27981Ubiquiti UniFi Network Application Self-Hosted UniFi Network Servers command injection9.8CISA ADP v3.11.2%2024-04-04Fix
CVE-2024-27919envoyproxy envoy HTTP/2: Memory exhaustion due to CONTINUATION frame flood7.5CNA v3.186.7%2024-04-04Fix
CVE-2024-27575INOTEC Sicherheitstechnik WebServer CPS220/64 cgi-bin display script path traversal7.5CISA ADP v3.10.8%2024-04-04
CVE-2024-27316Apache HTTP Server: HTTP/2 DoS by memory exhaustion on endless continuation frames7.5v3.191.3%2024-04-04Exploit codeFix
CVE-2024-27268IBM WebSphere Application Server Liberty denial of service5.9CNA v3.11.3%2024-04-04Fix
CVE-2024-26809Linux kernel netfilter nftables pipapo set vulnerability7.8CNA v3.10.3%2024-04-04Fix
CVE-2024-26808Linux kernel netfilter nftables ingress basechain vulnerability7.8CNA v3.10.3%2024-04-04Fix
CVE-2024-26807Linux kernel Cadence QSPI driver out-of-bounds write7.8CNA v3.10.2%2024-04-04Fix
CVE-2024-26806Linux kernel Cadence QSPI driver deadlock5.5v3.10.1%2024-04-04Fix
CVE-2024-26805Linux kernel netlink datagram handling information disclosure5.5NVD v3.10.2%2024-04-04Fix
CVE-2024-26804Linux kernel IP tunnel driver use-after-free7.8CNA v3.10.2%2024-04-04Fix
CVE-2024-26803Linux kernel veth driver incomplete cleanup5.5v3.10.2%2024-04-04Fix
CVE-2024-26802Linux kernel stmmac Ethernet driver null pointer dereference7.8CNA v3.10.2%2024-04-04Fix
CVE-2024-26801Linux kernel Bluetooth HCI error reset handler use-after-free8.8CNA v3.10.4%2024-04-04Fix
CVE-2024-26800Linux kernel kernel TLS decryption use-after-free9.8CNA v3.10.7%2024-04-04Fix
CVE-2024-26799Linux kernel qcom uninitialized pointer use7.0CNA v3.10.2%2024-04-04Fix
CVE-2024-26798Linux kernel fbcon crash5.5v3.10.3%2024-04-04Fix
CVE-2024-26797Linux kernel AMD display driver buffer overflow7.8CNA v3.10.2%2024-04-04Fix
CVE-2024-26796Linux kernel RISC-V legacy PMU driver null pointer dereference5.5v3.10.2%2024-04-04Fix
CVE-2024-26795Linux kernel RISC-V vmemmap sparse memory mapping vulnerability7.8CNA v3.10.2%2024-04-04Fix
CVE-2024-26793Linux kernel GTP driver use-after-free7.8CNA v3.10.3%2024-04-04Fix
CVE-2024-26792Linux kernel Btrfs snapshot creation double free7.8CNA v3.10.2%2024-04-04Fix
CVE-2024-26791Linux kernel Btrfs device replace out-of-bounds read7.1v3.10.2%2024-04-04Fix
CVE-2024-26790Linux kernel fsl-qdma deadlock5.5v3.10.2%2024-04-04Fix
CVE-2024-26789Linux kernel arm64 NEON bit-sliced AES-CTR implementation out-of-bounds read7.8CNA v3.10.2%2024-04-04Fix
CVE-2024-26788Linux kernel fsl-qdma kernel panic5.5v3.10.2%2024-04-04Fix
CVE-2024-26787Linux kernel STM32 MMCI SD/MMC driver vulnerability5.5NVD v3.10.2%2024-04-04Fix
CVE-2024-26786Linux kernel IOMMUFD access list null pointer dereference7.8CNA v3.10.2%2024-04-04Fix
CVE-2024-26785Linux kernel IOMMUFD test iova conversion null pointer dereference5.5CISA ADP v3.10.2%2024-04-04Fix
CVE-2024-26784Linux kernel SCMI performance domain driver null pointer dereference5.5v3.10.2%2024-04-04Fix
CVE-2024-26783Linux kernel kswapd wakeup vulnerability5.5NVD v3.10.2%2024-04-04Fix
CVE-2024-26782Linux kernel MPTCP socket dismantle double free9.8CNA v3.10.7%2024-04-04Fix
CVE-2024-26781Linux kernel MPTCP subflow diagnostics deadlock5.5v3.10.2%2024-04-04Fix
CVE-2024-26780Linux kernel af_unix infinite loop5.5v3.10.2%2024-04-04Fix
CVE-2024-26750In the Linux kernel, the following vulnerability has been resolved: af_unix: Drop oob_skb ref before purging queue in GC. syzbot reported another task hung in __unix_gc(). [0] The current while loop assumes that all of the left candidates have oob_skb and calling kfree_skb(oob_skb) releases the r5.5v3.10.2%2024-04-04Fix
CVE-2024-26746Linux kernel idxd completion record copy vulnerability5.5v3.10.2%2024-04-04Fix
CVE-2024-26745Linux kernel pseries IOMMU kdump path null pointer dereference4.4CISA ADP v3.10.2%2024-04-04Fix
CVE-2024-26258ELECOM WRC-X3200GST3-B OS command injection7.1CISA ADP v3.10.7%2024-04-04
CVE-2024-25709Esri Portal for ArcGIS Self-XSS style in move item dialog6.1CNA v3.10.4%2024-04-04
CVE-2024-25708Persistent XSS when creating new application using Web App Builder4.8CNA v3.10.4%2024-04-04Fix
CVE-2024-25706Esri Portal for ArcGIS HTMLi at createFolder content injection6.1CNA v3.10.4%2024-04-04Fix
CVE-2024-25705Esri Portal for ArcGIS cross-site scripting issue in embed widget5.4CNA v3.10.5%2024-04-04Fix
CVE-2024-25700Esri ArcGIS Enterprise Builder persistent XSS in URL added to a shared map4.8CNA v3.10.4%2024-04-04
CVE-2024-25699Esri Portal for ArcGIS Home application improper authentication8.5CNA v3.10.7%2024-04-04Fix
CVE-2024-25698Reflected XSS in Portal for ArcGIS6.1CNA v3.10.4%2024-04-04Fix
CVE-2024-25697Stored XSS in Portal for ArcGIS5.4CNA v3.10.4%2024-04-04Fix
CVE-2024-25696Stored XSS in Portal for ArcGIS4.8CNA v3.10.4%2024-04-04Fix
CVE-2024-25695Esri Portal for ArcGIS There is a cross-site scripting7.2CNA v3.10.5%2024-04-04Fix
CVE-2024-25693Portal for ArcGIS has a directory traversal9.9CNA v3.11.3%2024-04-04Fix
CVE-2024-25692Bug-000154722 cross-site request forgery (CSRF) issue in Portal for ArcGIS5.4CNA v3.10.2%2024-04-04Fix
CVE-2024-25690HTML injection in ArcGIS Web AppBuilder4.7CNA v3.10.5%2024-04-04Fix
CVE-2024-25568ELECOM WRC-X3200GST3-B OS command injection8.8CISA ADP v3.11.1%2024-04-04
CVE-2024-25503Advanced REST Client v.17.0.9 cross-site scripting4.7CISA ADP v3.10.9%2024-04-04Exploit code
CVE-2024-25007Ericsson Network Manager improper neutralization of Formula Elements7.1CNA v3.10.4%2024-04-04Fix
CVE-2024-24795Apache HTTP Server: HTTP response splitting in multiple modules6.3CISA ADP v3.12.9%2024-04-04Fix
CVE-2024-22189quic-go QUIC's Connection ID Mechanism vulnerable to memory exhaustion Attack7.5CNA v3.11.1%2024-04-04Fix
CVE-2024-22053Ivanti Connect Secure IPSec component heap-based buffer overflow8.2v3.13.5%2024-04-04Fix
CVE-2024-22052Ivanti Connect Secure IPSec component null pointer dereference7.5v3.13.8%2024-04-04Fix
CVE-2024-22023Ivanti Connect Secure SAML component XML entity expansion5.3v3.13.0%2024-04-04Fix
CVE-2024-21894Ivanti Connect Secure IPSec component heap-based buffer overflow9.8v3.119.0%2024-04-04Fix
CVE-2024-20800Adobe Experience Manager cross-site scripting (DOM-based XSS)5.4CNA v3.10.5%2024-04-04Fix
CVE-2024-3316SourceCodester Computer Laboratory Management System view_category.php SQL injection8.8v3.10.6%2024-04-04
CVE-2024-3315SourceCodester Computer Laboratory Management System user.php SQL injection9.8v3.10.7%2024-04-04
CVE-2024-3314SourceCodester Computer Laboratory Management System Users.php SQL injection9.8v3.10.5%2024-04-04
CVE-2024-3311Dreamer CMS ThemesController.java ZipUtils.unZipFiles path traversal8.8v3.11.0%2024-04-04Fix
CVE-2024-3299Dassault Systèmes eDrawings SLDDRW and SLDPRT file parser out-of-bounds write7.8CNA v3.10.4%2024-04-04
CVE-2024-3298Dassault Systèmes eDrawings file reading procedure out-of-bounds write7.8CNA v3.10.3%2024-04-04
CVE-2024-3296Red Hat Enterprise Linux 8 rust-openssl package side-channel information leak5.9CNA v3.10.4%2024-04-04
CVE-2024-3274D-Link DNS-320L/DNS-320LW/DNS-327L HTTP GET request info.cgi information disclosure5.3CNA v3.133.5%2024-04-04Nuclei
CVE-2024-3273D-Link Multiple NAS Devices command injection9.8NVD v3.1100.0%2024-04-04KEVNucleiEmerging ThreatsExploit codeKCV
CVE-2024-3272D-Link Multiple NAS Devices use of hard-coded credentials9.8v3.198.0%2024-04-04KEVNucleiExploit codeKCV
CVE-2024-3262Information exposure vulnerability in Request Tracker (RT)5.5CNA v3.10.3%2024-04-04Fix
CVE-2024-3250Pebble service manager's file pull API allows access by any user6.5CNA v3.10.2%2024-04-04Fix
CVE-2024-3116Remote code execution vulnerability through the validate binary path API in pgAdmin 47.4CNA v3.165.6%2024-04-04MetasploitExploit codeFix
CVE-2024-3030Announce from the Dashboard WordPress plugin authenticated (Admin+) stored cross-site scripting4.4CNA v3.10.4%2024-04-04Fix
CVE-2024-3022Repute Infosystems BookingPress file upload function unrestricted file upload7.2v3.11.6%2024-04-04Fix
CVE-2024-2919Gutenberg Blocks by Kadence Blocks WordPress plugin stored cross-site scripting5.4v3.10.3%2024-04-04Fix
CVE-2024-2868ShopLentor WordPress plugin stored cross-site scripting6.4CISA ADP v3.10.5%2024-04-04Fix
CVE-2024-2830WordPress Tag and Category Manager AI Autotagger plugin stored cross-site scripting6.4CNA v3.10.4%2024-04-04Fix
CVE-2024-2803ElementsKit Elementor addons WordPress plugin stored cross-site scripting5.4v3.10.3%2024-04-04Fix
CVE-2024-2759Improper access control in Apaczka plugin for PrestaShop7.5CISA ADP v3.10.6%2024-04-04Fix
CVE-2024-2700Quarkus-core: Leak of local configuration properties into quarkus applications7.0CNA v3.10.3%2024-04-04Fix
CVE-2024-2692SiYuan RCE via Server Side XSS9.0v3.10.7%2024-04-04
CVE-2024-2660Vault TLS Cert Auth Method Did not Correctly Validate OCSP Responses6.4CNA v3.10.3%2024-04-04Fix
CVE-2024-2103Inclusion of undocumented features vulnerability accessible when logged on with a privileged access level on the following Schweitzer Engineering Laboratories relays could allow the relay to behave unpredictably: SEL-700BT Motor Bus Transfer Relay, SEL-700G Generator Protection Relay, SEL-710-5 Mot6.5CNA v3.10.5%2024-04-04Fix
CVE-2024-2008Modal Popup Box WordPress plugin PHP object injection8.8CNA v3.10.9%2024-04-04Fix
CVE-2024-1418CGC Maintenance Mode WordPress plugin sensitive information exposure5.3CNA v3.10.4%2024-04-04
CVE-2024-31420Red Hat OpenShift Virtualization 4 cnv: Dos6.5CNA v3.10.6%2024-04-03
CVE-2024-31419Red Hat OpenShift Virtualization 4 cnv: Information disclosure through the usage of vm-dump-metrics4.3CNA v3.10.4%2024-04-03
CVE-2024-31393Dragging Javascript URLs to the address bar could cause them to be loaded, bypassing restrictions and security protections This vulnerability affects Firefox for iOS < 124.4.3CISA ADP v3.10.3%2024-04-03Fix
CVE-2024-31392If an insecure element was added to a page after a delay, Firefox would not replace the secure icon with a mixed content security status This vulnerability affects Firefox for iOS < 124.7.5CISA ADP v3.10.4%2024-04-03Fix
CVE-2024-31390Breakdance WordPress plugin authenticated remote code execution (RCE)9.9CNA v3.10.9%2024-04-03
CVE-2024-31380Oxygen WordPress plugin authenticated remote code execution (RCE)9.9CNA v3.10.8%2024-04-03
CVE-2024-31013emlog cross-site scripting6.1CISA ADP v3.10.5%2024-04-03
CVE-2024-31012SEMCMS unrestricted file upload9.8CISA ADP v3.11.2%2024-04-03
CVE-2024-31011Beescms arbitrary file write9.8CISA ADP v3.11.2%2024-04-03
CVE-2024-31010SEMCMS SQL injection7.5CISA ADP v3.10.8%2024-04-03
CVE-2024-31009SEMCMS SQL injection6.5CISA ADP v3.10.7%2024-04-03
CVE-2024-31008WuzhiCMS authentication bypass by spoofing6.5CISA ADP v3.10.7%2024-04-03
CVE-2024-30998PHPGurukul Men Salon Management System SQL injection9.8CISA ADP v3.11.2%2024-04-03Exploit code
CVE-2024-30572NETGEAR R6850 command injection8.0CISA ADP v3.11.5%2024-04-03Fix
CVE-2024-30571NETGEAR R6850 BRS_top.html component information disclosure7.5CISA ADP v3.113.8%2024-04-03Fix
CVE-2024-30570NETGEAR R6850 debuginfo.htm information disclosure5.3CISA ADP v3.11.2%2024-04-03NucleiFix
CVE-2024-30569NETGEAR R6850 currentsetting.htm information disclosure7.5CISA ADP v3.11.9%2024-04-03NucleiFix
CVE-2024-30568NETGEAR R6850 code injection9.8CISA ADP v3.146.9%2024-04-03NucleiEmerging ThreatsFix
CVE-2024-30366Foxit PDF Reader AcroForm use-after-free remote code execution7.8CNA v3.00.8%2024-04-03Fix
CVE-2024-30334Foxit PDF Reader Doc object use-after-free remote code execution7.8CNA v3.00.9%2024-04-03Fix
CVE-2024-30333Foxit PDF Reader Doc object use-after-free remote code execution7.8CNA v3.00.9%2024-04-03Fix
CVE-2024-30332Foxit PDF Reader Doc object use-after-free remote code execution7.8CNA v3.00.9%2024-04-03Fix
CVE-2024-30331Foxit PDF Reader AcroForm use-after-free remote code execution7.8CNA v3.00.9%2024-04-03Fix
CVE-2024-30330Foxit PDF Reader AcroForm use-after-free remote code execution7.8CISA ADP v3.10.9%2024-04-03Fix
CVE-2024-30329Foxit PDF Reader Annotation use-after-free information disclosure3.3CNA v3.00.7%2024-04-03Fix
CVE-2024-30328Foxit PDF Reader AcroForm use-after-free remote code execution7.8CNA v3.00.9%2024-04-03Fix
CVE-2024-30327Foxit PDF Reader template use-after-free remote code execution7.8CNA v3.00.9%2024-04-03Fix
CVE-2024-30326Foxit PDF Reader Doc object use-after-free remote code execution7.8CNA v3.00.9%2024-04-03Fix
CVE-2024-30325Foxit PDF Reader AcroForm use-after-free remote code execution7.8CNA v3.00.9%2024-04-03Fix
CVE-2024-30324Foxit PDF Reader Doc object use-after-free remote code execution7.8CNA v3.00.9%2024-04-03Fix
CVE-2024-30323Foxit PDF Reader template out-of-bounds read remote code execution7.8CNA v3.00.9%2024-04-03Fix
CVE-2024-30322Foxit PDF Reader AcroForm use-after-free remote code execution7.8CNA v3.00.9%2024-04-03Fix
CVE-2024-30265voila-dashboards voila voilà local file inclusion7.5CNA v3.10.7%2024-04-03Fix
CVE-2024-30166TrustedFirmware Mbed TLS stack-based buffer overflow9.1CISA ADP v3.10.7%2024-04-03Fix
CVE-2024-29734Fujidenolo Solutions SonicDICOM Media Viewer uncontrolled search path7.8CISA ADP v3.10.2%2024-04-03
CVE-2024-29477Dolibarr ERP CRM code injection vulnerability during installation8.8v3.10.8%2024-04-03Fix
CVE-2024-29413Webasyst v.2.9.9 cross-site scripting5.4CISA ADP v3.10.4%2024-04-03
CVE-2024-28870Suricata uses excessive resource use in malformed SSH traffic parsing7.5CNA v3.10.6%2024-04-03Fix
CVE-2024-28836TrustedFirmware Mbed TLS infinite loop5.4CISA ADP v3.10.4%2024-04-03Fix
CVE-2024-28782IBM QRadar Suite Software information disclosure6.3CNA v3.10.4%2024-04-03Fix
CVE-2024-28755TrustedFirmware Mbed TLS inadequate encryption strength6.5CISA ADP v3.10.4%2024-04-03Fix
CVE-2024-28589Axigen Mail Server service initialization vulnerability6.7CISA ADP v3.10.3%2024-04-03Exploit code
CVE-2024-28515CSAPP_Lab CSAPP Lab3 buffer overflow9.8CISA ADP v3.11.5%2024-04-03Exploit code
CVE-2024-28275Puwell Cloud Tech 360Eyes Pro information disclosure6.5CISA ADP v3.10.3%2024-04-03
CVE-2024-28219Pillow buffer overflow5.9v3.11.0%2024-04-03Fix
CVE-2024-27972WP Fusion Lite WordPress plugin remote code execution (RCE)9.9CNA v3.11.6%2024-04-03Fix
CVE-2024-27951Multiple Page Generator WordPress plugin Auth. remote code execution (RCE)7.2NVD v3.10.6%2024-04-03Fix
CVE-2024-27706Huly Platform v.0.6.202 cross-site scripting6.1CISA ADP v3.10.4%2024-04-03
CVE-2024-27705Leantime cross-site scripting7.6CISA ADP v3.10.6%2024-04-03
CVE-2024-27674Macro Expert incorrect default permissions7.8CISA ADP v3.10.3%2024-04-03Exploit code
CVE-2024-27346Kofax Power PDF PDF File Parsing out-of-bounds read information disclosure5.5v3.10.4%2024-04-03
CVE-2024-27345Kofax Power PDF PDF File Parsing out-of-bounds read information disclosure3.3CISA ADP v3.10.4%2024-04-03
CVE-2024-27344Kofax Power PDF PDF File Parsing memory corruption remote code execution7.8v3.10.4%2024-04-03
CVE-2024-27343Kofax Power PDF PDF File Parsing out-of-bounds read information disclosure5.5v3.10.4%2024-04-03
CVE-2024-27342Kofax Power PDF PDF File Parsing out-of-bounds write remote code execution7.8v3.10.4%2024-04-03
CVE-2024-27341Kofax Power PDF PDF File Parsing heap-based buffer overflow remote code execution7.8v3.10.4%2024-04-03
CVE-2024-27340Kofax Power PDF PDF File Parsing heap-based buffer overflow remote code execution7.8v3.10.4%2024-04-03
CVE-2024-27339Kofax Power PDF PDF File Parsing out-of-bounds write remote code execution7.8v3.10.4%2024-04-03
CVE-2024-27338Kofax Power PDF app response out-of-bounds read remote code execution7.8v3.10.4%2024-04-03
CVE-2024-27337Kofax Power PDF TIF File Parsing stack-based buffer overflow remote code execution7.8v3.10.4%2024-04-03
CVE-2024-27336Kofax Power PDF PNG File Parsing out-of-bounds read information disclosure5.5v3.10.4%2024-04-03
CVE-2024-27335Kofax Power PDF PNG File Parsing out-of-bounds read remote code execution7.8CISA ADP v3.10.4%2024-04-03
CVE-2024-27254IBM Db2 for Linux, UNIX and Windows denial of service5.3CNA v3.10.7%2024-04-03Fix
CVE-2024-27201Open Automation Software OAS Platform improper input validation4.9CNA v3.10.7%2024-04-03
CVE-2024-27191Slivery Extender WordPress plugin remote code execution (RCE)8.5CNA v3.10.8%2024-04-03Fix
CVE-2024-26779Linux kernel mac80211 fast-xmit race condition8.8CNA v3.10.3%2024-04-03Fix
CVE-2024-26778Linux kernel Savage framebuffer driver divide by zero5.5v3.10.3%2024-04-03Fix
CVE-2024-26777Linux kernel SiS framebuffer driver divide by zero5.5NVD v3.10.3%2024-04-03Fix
CVE-2024-26776Linux kernel hisi-sfc-v3xx null pointer dereference5.5v3.10.2%2024-04-03Fix
CVE-2024-26775Linux kernel AoE block driver deadlock5.5v3.10.2%2024-04-03Fix
CVE-2024-26774Linux kernel ext4 divide by zero5.5v3.10.2%2024-04-03Fix
CVE-2024-26773Linux kernel ext4 multiblock allocator vulnerability7.8CNA v3.10.3%2024-04-03Fix
CVE-2024-26772In the Linux kernel, the following vulnerability has been resolved: ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal() Places the logic for checking if the group's block bitmap is corrupt under the protection of the group lock to avoid allocating blocks from the group wit7.8CNA v3.10.3%2024-04-03Fix
CVE-2024-26771Linux kernel TI EDMA driver null pointer dereference5.5v3.10.2%2024-04-03Fix
CVE-2024-26770Linux kernel nvidia-shield LED driver null pointer dereference5.5v3.10.2%2024-04-03Fix
CVE-2024-26769Linux kernel nvmet-fc deadlock7.5CNA v3.10.6%2024-04-03Fix
CVE-2024-26768Linux kernel LoongArch ACPI core PIC array buffer overflow7.2CNA v3.10.6%2024-04-03Fix
CVE-2024-26767Linux kernel AMD display driver null pointer dereference5.5v3.10.2%2024-04-03Fix
CVE-2024-26766Linux kernel hfi1 SDMA descriptor array off-by-one error7.8CNA v3.10.3%2024-04-03Fix
CVE-2024-26765Linux kernel LoongArch nonboot CPU hotplug vulnerability5.5v3.10.2%2024-04-03Fix
CVE-2024-26764Linux kernel AIO kiocb cancellation vulnerability3.3v3.10.2%2024-04-03Fix
CVE-2024-26763Linux kernel dm-crypt authenticated encryption out-of-bounds write7.1CNA v3.10.3%2024-04-03Fix
CVE-2024-26762Linux kernel CXL PCI RAS error handling vulnerability7.8CNA v3.10.2%2024-04-03Fix
CVE-2024-26761Linux kernel CXL PCI driver denial of service5.5v3.10.2%2024-04-03Fix
CVE-2024-26760Linux kernel pscsi target backend null pointer dereference9.8CNA v3.10.7%2024-04-03Fix
CVE-2024-26759Linux kernel swap cache race condition7.8CNA v3.10.3%2024-04-03Fix
CVE-2024-26758Linux kernel MD RAID recovery vulnerability5.5CISA ADP v3.10.2%2024-04-03Fix
CVE-2024-26757Linux kernel MD RAID recovery improper resource release5.5CISA ADP v3.10.2%2024-04-03Fix
CVE-2024-26756Linux kernel MD RAID sync thread vulnerability5.5v3.10.2%2024-04-03Fix
CVE-2024-26755Linux kernel md deadlock5.3CISA ADP v3.10.7%2024-04-03Fix
CVE-2024-26754Linux kernel GTP netlink interface use-after-free7.8v3.10.3%2024-04-03Fix
CVE-2024-26753Linux kernel virtio crypto akcipher driver stack buffer overflow7.8v3.10.3%2024-04-03Fix
CVE-2024-26752Linux kernel l2tp incorrect buffer size calculation5.5v3.10.3%2024-04-03Fix
CVE-2024-26751Linux kernel ep93xx GPIO lookup table vulnerability5.5v3.10.2%2024-04-03Fix
CVE-2024-26749Linux kernel cdns3 USB driver use-after-free7.8v3.10.2%2024-04-03Fix
CVE-2024-26748Linux kernel cdns3 USB driver double free7.8CNA v3.10.2%2024-04-03Fix
CVE-2024-26747Linux kernel USB role switch driver null pointer dereference4.4CISA ADP v3.10.2%2024-04-03Fix
CVE-2024-26744Linux kernel ib_srpt driver null pointer dereference5.5CISA ADP v3.10.3%2024-04-03Fix
CVE-2024-26743Linux kernel qedr RDMA driver resource exhaustion5.5v3.10.2%2024-04-03Fix
CVE-2024-26742Linux kernel smartpqi driver out-of-bounds write7.8v3.10.2%2024-04-03Fix
CVE-2024-26741Linux kernel TCP and DCCP bind hash resource exhaustion5.5v3.10.3%2024-04-03Fix
CVE-2024-26740Linux kernel act_mirred packet scheduler action deadlock5.5v3.10.2%2024-04-03Fix
CVE-2024-26739Linux kernel act_mirred packet scheduler action use-after-free7.8CNA v3.10.3%2024-04-03Fix
CVE-2024-26738Linux kernel pseries IOMMU DLPAR null pointer dereference5.5v3.10.2%2024-04-03Fix
CVE-2024-26737Linux kernel BPF timer use-after-free7.8CNA v3.10.3%2024-04-03Fix
CVE-2024-26736Linux kernel AFS volume status buffer out-of-bounds write8.1CNA v3.10.7%2024-04-03Fix
CVE-2024-26735Linux kernel sr use-after-free5.5v3.10.3%2024-04-03Fix
CVE-2024-26734Linux kernel devlink netlink subsystem use-after-free7.0CNA v3.10.2%2024-04-03Fix
CVE-2024-26733Linux kernel ARP ioctl handling out-of-bounds write5.5v3.10.3%2024-04-03Fix
CVE-2024-26732Linux kernel SO_PEEK_OFF socket option handling vulnerability5.5v3.10.2%2024-04-03Fix
CVE-2024-26731Linux kernel sockmap BPF verdict handling null pointer dereference5.3CISA ADP v3.10.8%2024-04-03Fix
CVE-2024-26730Linux kernel hwmon out-of-bounds write7.3CNA v3.10.3%2024-04-03Fix
CVE-2024-26729Linux kernel AMD display DMUB service null pointer dereference5.5v3.10.2%2024-04-03Fix
CVE-2024-26728Linux kernel AMD display driver EDID reading null pointer dereference7.8CNA v3.10.2%2024-04-03Fix
CVE-2024-26727Linux kernel Btrfs subvolume creation denial of service5.5v3.10.2%2024-04-03Fix
CVE-2024-26726Linux kernel Btrfs free space cache denial of service5.5v3.10.3%2024-04-03Fix
CVE-2024-26725Linux kernel DPLL netlink subsystem deadlock5.5v3.10.2%2024-04-03Fix
CVE-2024-26724Linux kernel mlx5 DPLL driver use-after-free7.8v3.10.2%2024-04-03Fix
CVE-2024-26723Linux kernel lan966x Ethernet driver LAG support null pointer dereference7.8CISA ADP v3.10.2%2024-04-03Fix
CVE-2024-26722Linux kernel rt5645 deadlock5.5v3.10.2%2024-04-03Fix
CVE-2024-26721Linux kernel i915 display DSC PPS register addressing vulnerability5.5v3.10.2%2024-04-03Fix
CVE-2024-26719Linux kernel Nouveau GPU driver fence uevents deadlock5.5v3.10.2%2024-04-03Fix
CVE-2024-26718Linux kernel dm-crypt and dm-verity tasklets out-of-bounds write7.8CNA v3.10.2%2024-04-03Fix
CVE-2024-26717Linux kernel I2C HID OF driver null pointer dereference5.5v3.10.2%2024-04-03Fix
CVE-2024-26716Linux kernel USB core port device state null pointer dereference5.5v3.10.2%2024-04-03Fix
CVE-2024-26715Linux kernel dwc3 gadget null pointer dereference5.5v3.10.3%2024-04-03Fix
CVE-2024-26714In the Linux kernel, the following vulnerability has been resolved: interconnect: qcom: sc8180x: Mark CO0 BCM keepalive The CO0 BCM needs to be up at all times, otherwise some hardware (like the UFS controller) loses its connection to the rest of the SoC, resulting in a hang of the platform, accom5.5v3.10.2%2024-04-03Fix
CVE-2024-26712Linux kernel powerpc KASAN region initialization vulnerability7.8CNA v3.10.3%2024-04-03Fix
CVE-2024-26711Linux kernel AD4130 ADC driver clock initialization vulnerability5.5v3.10.2%2024-04-03Fix
CVE-2024-26710Linux kernel powerpc KASAN stack size resource exhaustion5.5v3.10.2%2024-04-03Fix
CVE-2024-26709Linux kernel powerpc IOMMU platform domain attach vulnerability5.5v3.10.2%2024-04-03Fix
CVE-2024-26708Linux kernel MPTCP fastopen subflow state handling race condition5.5CISA ADP v3.10.2%2024-04-03Fix
CVE-2024-26707Linux kernel HSR supervision frame transmission denial of service5.5v3.10.2%2024-04-03Fix
CVE-2024-26706Linux kernel parisc exception fault handler out-of-bounds write7.8CNA v3.10.3%2024-04-03Fix
CVE-2024-26705Linux kernel parisc BTLB CPU bringup handling denial of service5.5v3.10.2%2024-04-03Fix
CVE-2024-26704Linux kernel ext4 extent move handling double free7.8CNA v3.10.3%2024-04-03Fix
CVE-2024-26703Linux kernel timerlat tracing hrtimer initialization null pointer dereference5.5v3.10.2%2024-04-03Fix
CVE-2024-26702Linux kernel RM3100 magnetometer driver out-of-bounds read5.5CISA ADP v3.10.2%2024-04-03Fix
CVE-2024-26700Linux kernel AMD display MST handling null pointer dereference5.5v3.10.2%2024-04-03Fix
CVE-2024-26699Linux kernel AMD display dcn35 clock manager vulnerability7.8CNA v3.10.2%2024-04-03Fix
CVE-2024-26698Linux kernel hv_netvsc race condition4.7v3.10.2%2024-04-03Fix
CVE-2024-26697Linux kernel nilfs2 dsync block recovery out-of-bounds write7.8CNA v3.10.3%2024-04-03Fix
CVE-2024-26696Linux kernel nilfs2 log writer buffer handling deadlock5.5v3.10.2%2024-04-03Fix
CVE-2024-26695Linux kernel CCP SEV platform shutdown handling null pointer dereference5.5v3.10.2%2024-04-03Fix
CVE-2024-26694Linux kernel iwlwifi firmware TLV data storage double free7.8v3.10.3%2024-04-03Fix
CVE-2024-26693Linux kernel iwlwifi mvm station management denial of service5.5v3.10.2%2024-04-03Fix
CVE-2024-26692Linux kernel SMB client write handling out-of-bounds write8.3CNA v3.10.5%2024-04-03Fix
CVE-2024-26691Linux kernel KVM arm64 pKVM VM creation locking vulnerability5.5v3.10.2%2024-04-03Fix
CVE-2024-26690Linux kernel stmmac driver statistics counters vulnerability7.5CNA v3.10.8%2024-04-03Fix
CVE-2024-26689Linux kernel ceph use-after-free8.8CNA v3.10.7%2024-04-03Fix
CVE-2024-26688Linux kernel null pointer dereference5.5v3.10.2%2024-04-03Fix
CVE-2024-26687Linux kernel Xen event channel handling race condition5.5v3.10.2%2024-04-03Fix
CVE-2024-26686Linux kernel proc task statistics reporting denial of service5.5v3.10.2%2024-04-03Fix
CVE-2024-26685Linux kernel nilfs2 buffer write completion handling out-of-bounds write5.5CISA ADP v3.10.3%2024-04-03Fix
CVE-2024-26495Friendica cross-site scripting6.1CISA ADP v3.10.5%2024-04-03
CVE-2024-25918InstaWP Connect WordPress plugin remote code execution8.8NVD v3.10.7%2024-04-03Fix
CVE-2024-25864Friendica versions after v.2023.12 server-side request forgery9.1CISA ADP v3.10.7%2024-04-03
CVE-2024-25096canto WordPress plugin Unauth. remote code execution (RCE)9.8v3.10.7%2024-04-03Exploit codeFix
CVE-2024-25046IBM Db2 for Linux, UNIX and Windows denial of service5.3CNA v3.10.7%2024-04-03Fix
CVE-2024-25030IBM Db2 sensitive information in log files6.2CNA v3.10.2%2024-04-03Fix
CVE-2024-24976Open Automation Software OAS Platform denial of service4.9CNA v3.10.9%2024-04-03
CVE-2024-24724gibbonedu gibbon server-side template injection9.8CISA ADP v3.126.1%2024-04-03Exploit code
CVE-2024-24707Cwicly WordPress plugin Auth. remote code execution (RCE)9.9CNA v3.10.7%2024-04-03Fix
CVE-2024-24506LimeSurvey cross-site scripting6.1CISA ADP v3.10.7%2024-04-03Exploit code
CVE-2024-23540HCL BigFix Inventory is vulnerable to path traversal5.3CNA v3.10.6%2024-04-03
CVE-2024-22360IBM Db2 for Linux, UNIX and Windows denial of service5.3CNA v3.10.7%2024-04-03Fix
CVE-2024-22178Open Automation Software OAS Platform external control of a file path4.9CNA v3.10.7%2024-04-03
CVE-2024-21870Open Automation Software OAS Platform external control of a file path4.9CNA v3.10.7%2024-04-03
CVE-2024-20368Cisco Identity Services Engine Software cross-site request forgery6.5CNA v3.10.3%2024-04-03Fix
CVE-2024-20367Cisco Enterprise Chat and Email cross-site scripting5.4CNA v3.10.4%2024-04-03Fix
CVE-2024-20362Cisco Small Business RV Series Router Firmware cross-site scripting6.1CNA v3.10.5%2024-04-03
CVE-2024-20352Cisco Emergency Responder relative path traversal4.9CNA v3.11.5%2024-04-03Fix
CVE-2024-20348Cisco Data Center Network Manager arbitrary file read7.5CNA v3.10.8%2024-04-03Fix
CVE-2024-20347Cisco Emergency Responder cross-site request forgery4.3CNA v3.10.2%2024-04-03Fix
CVE-2024-20334Cisco TelePresence Management Suite (TMS) cross-site scripting5.5CNA v3.10.4%2024-04-03Fix
CVE-2024-20332Cisco Identity Services Engine Software server-side request forgery5.5CNA v3.10.4%2024-04-03Fix
CVE-2024-20310Cisco IOS XE Software relative path traversal6.1CNA v3.10.5%2024-04-03Fix
CVE-2024-20302Cisco Nexus Dashboard Orchestrator improper access control5.4CNA v3.10.4%2024-04-03Fix
CVE-2024-20283Cisco Nexus Dashboard improper access control4.3CNA v3.10.4%2024-04-03Fix
CVE-2024-20282Cisco Nexus Dashboard improper privilege management6.0CNA v3.10.2%2024-04-03Fix
CVE-2024-20281Cisco Nexus Dashboard cross-site request forgery7.5CNA v3.10.3%2024-04-03Fix
CVE-2024-3270ThingsBoard AdvancedFeature access control6.5v3.10.6%2024-04-03
CVE-2024-3259SourceCodester Internship Portal Management System delete_activity.php SQL injection7.2v3.10.8%2024-04-03
CVE-2024-3258SourceCodester Internship Portal Management System add_activity.php SQL injection7.2v3.10.7%2024-04-03
CVE-2024-3257SourceCodester Internship Portal Management System edit_activity_query.php SQL injection7.2v3.10.7%2024-04-03
CVE-2024-3256SourceCodester Internship Portal Management System edit_activity.php SQL injection7.2v3.10.7%2024-04-03
CVE-2024-3255SourceCodester Internship Portal Management System edit_admin_query.php SQL injection7.2v3.10.8%2024-04-03
CVE-2024-3254SourceCodester Internship Portal Management System edit_admin.php SQL injection7.2v3.10.7%2024-04-03
CVE-2024-3253SourceCodester Internship Portal Management System add_admin.php SQL injection7.2v3.10.7%2024-04-03
CVE-2024-3252SourceCodester Internship Portal Management System check_admin.php SQL injection9.8v3.10.8%2024-04-03
CVE-2024-3251SourceCodester Computer Laboratory Management System SQL injection8.8v3.10.6%2024-04-03
CVE-2024-3227Panwei eoffice OA Backend save_image.php path traversal7.2v3.11.0%2024-04-03
CVE-2024-3226Campcodes Online Patient Record Management System login.php SQL injection7.5v3.10.8%2024-04-03
CVE-2024-3225SourceCodester PHP Task Management System edit-task.php SQL injection6.5v3.10.6%2024-04-03
CVE-2024-3224SourceCodester PHP Task Management System task-details.php SQL injection8.8v3.10.7%2024-04-03
CVE-2024-3223SourceCodester PHP Task Management System admin-manage-user.php SQL injection8.8v3.10.7%2024-04-03
CVE-2024-3222SourceCodester PHP Task Management System admin-password-change.php SQL injection8.8v3.10.7%2024-04-03
CVE-2024-3221SourceCodester PHP Task Management System attendance-info.php SQL injection8.8v3.10.7%2024-04-03
CVE-2024-3218Shibang Communications IP Network Intercom Broadcasting System busyscreenshotpush.php path traversal5.4CNA v3.10.7%2024-04-03
CVE-2024-3181Concrete CMS stored XSS in the Search field3.1CNA v3.10.4%2024-04-03Fix
CVE-2024-3180Concrete CMS stored XSS in blocks of type file3.1CNA v3.10.4%2024-04-03Fix
CVE-2024-3179Concrete CMS stored XSS in the Custom class page editing3.1CNA v3.10.4%2024-04-03Fix
CVE-2024-3178Concrete CMS cross-site scripting (XSS) in the Advanced File Search Filter3.1CNA v3.10.4%2024-04-03Fix
CVE-2024-3162Jeg Elementor Kit WordPress plugin stored cross-site scripting5.4v3.10.3%2024-04-03Fix
CVE-2024-2879LayerSlider WordPress plugin SQL injection7.5NVD v3.118.4%2024-04-03Reported exploitedNucleiExploit codeFix
CVE-2024-2758Tempesta FW rate limiting vulnerability6.3CISA ADP v3.172.8%2024-04-03
CVE-2024-2753Concrete CMS stored XSS on the calendar color settings screen2.0CNA v3.10.4%2024-04-03Fix
CVE-2024-2689Temporal Server denial of service if invalid UTF-8 sent4.4CNA v3.10.5%2024-04-03Fix
CVE-2024-2653AMPHP denial of service via HTTP/2 CONTINUATION Frames8.2CISA ADP v3.183.4%2024-04-03Fix
CVE-2024-2322WooCommerce Cart Abandonment Recovery WordPress plugin Templates/Abandoned orders deletion via CSRF6.8CISA ADP v3.10.4%2024-04-03Fix
CVE-2024-1327Jeg Elementor Kit WordPress plugin stored cross-site scripting5.4v3.10.3%2024-04-03Fix
CVE-2024-1180TP-Link Omada ER605 access control command injection remote code execution8.0v3.11.0%2024-04-03
CVE-2024-0394Rapid7 Minerva Armor privilege escalation7.8CNA v3.10.2%2024-04-03Fix
CVE-2024-0335ABB Symphony Plus S+ Operations Malformed Packet Handling7.5CNA v3.10.6%2024-04-03
CVE-2024-0172Dell PowerEdge Platform improper privilege management7.9CNA v3.10.1%2024-04-03Fix
CVE-2024-31109Woocommerce Social Media Share Buttons WordPress plugin CSRF to cross-site scripting (XSS)7.1CISA ADP v3.10.2%2024-04-02
CVE-2024-31105Tax Rate Upload WordPress plugin CSRF leading to cross-site scripting (XSS)7.1CNA v3.10.2%2024-04-02
CVE-2024-31005Axiosys Bento4 code injection8.1CISA ADP v3.11.2%2024-04-02
CVE-2024-31004Axiosys Bento4 code injection9.8v3.11.5%2024-04-02
CVE-2024-31003Axiosys Bento4 buffer overflow8.8CISA ADP v3.11.5%2024-04-02
CVE-2024-31002Axiosys Bento4 buffer overflow9.8CISA ADP v3.11.4%2024-04-02
CVE-2024-30965DedeCMS cross-site request forgery8.8CISA ADP v3.10.4%2024-04-02
CVE-2024-30946DedeCMS cross-site request forgery5.5CISA ADP v3.10.2%2024-04-02
CVE-2024-30809Axiosys Bento4 use-after-free7.5CISA ADP v3.10.7%2024-04-02
CVE-2024-30808Axiosys Bento4 use-after-free2.7CISA ADP v3.10.6%2024-04-02
CVE-2024-30807Axiosys Bento4 use-after-free7.5CISA ADP v3.10.7%2024-04-02
CVE-2024-30806Axiosys Bento4 heap-based buffer overflow6.5CISA ADP v3.10.5%2024-04-02
CVE-2024-30621Tenda AX1803 stack-based buffer overflow9.8v3.10.7%2024-04-02
CVE-2024-30620Tenda AX1803 buffer overflow9.8v3.10.8%2024-04-02
CVE-2024-30532Builderall Builder for WordPress plugin server side request forgery (SSRF)4.9CNA v3.10.3%2024-04-02Fix
CVE-2024-30531Nelio Content WordPress plugin server side request forgery (SSRF)4.9CNA v3.10.3%2024-04-02Fix
CVE-2024-30371Foxit PDF Reader AcroForm use-after-free remote code execution7.8CNA v3.00.8%2024-04-02Fix
CVE-2024-30370RARLAB WinRAR archive extraction vulnerability4.3CNA v3.01.2%2024-04-02Fix
CVE-2024-30367Foxit PDF Reader AcroForm use-after-free remote code execution7.8CNA v3.00.8%2024-04-02Fix
CVE-2024-30365Foxit PDF Reader AcroForm use-after-free remote code execution7.8CNA v3.00.8%2024-04-02Fix
CVE-2024-30364Foxit PDF Reader U3D File Parsing out-of-bounds read information disclosure3.3CNA v3.00.6%2024-04-02Fix
CVE-2024-30363Foxit PDF Reader U3D File Parsing out-of-bounds read information disclosure5.5v3.10.7%2024-04-02Fix
CVE-2024-30362Foxit PDF Reader PDF File Parsing use-after-free remote code execution7.8CNA v3.00.8%2024-04-02Fix
CVE-2024-30361Foxit PDF Reader AcroForm use-after-free remote code execution7.8CNA v3.00.8%2024-04-02Fix
CVE-2024-30360Foxit PDF Reader AcroForm use-after-free remote code execution7.8CNA v3.00.8%2024-04-02Fix
CVE-2024-30359Foxit PDF Reader AcroForm 3D out-of-bounds read remote code execution7.8CNA v3.00.7%2024-04-02Fix
CVE-2024-30358Foxit PDF Reader AcroForm User-After-free remote code execution7.8CNA v3.00.8%2024-04-02Fix
CVE-2024-30357Foxit PDF Reader AcroForm Annotation type confusion remote code execution7.8CNA v3.00.8%2024-04-02Fix
CVE-2024-30356Foxit PDF Reader AcroForm out-of-bounds read information disclosure3.3CNA v3.00.5%2024-04-02Fix
CVE-2024-30355Foxit PDF Reader AcroForm out-of-bounds write remote code execution7.8CNA v3.00.8%2024-04-02Fix
CVE-2024-30354Foxit PDF Reader AcroForm use-after-free remote code execution7.8CNA v3.00.8%2024-04-02Fix
CVE-2024-30353Foxit PDF Reader AcroForm out-of-bounds read remote code execution7.8CNA v3.00.8%2024-04-02Fix
CVE-2024-30352Foxit PDF Reader AcroForm use-after-free remote code execution7.8CNA v3.00.8%2024-04-02Fix
CVE-2024-30351Foxit PDF Reader AcroForm use-after-free remote code execution7.8CNA v3.00.8%2024-04-02Fix
CVE-2024-30350Foxit PDF Reader Annotation out-of-bounds read information disclosure3.3CNA v3.00.5%2024-04-02Fix
CVE-2024-30349Foxit PDF Reader U3D File Parsing out-of-bounds write remote code execution7.8CNA v3.00.7%2024-04-02Fix
CVE-2024-30348Foxit PDF Reader U3D File Parsing out-of-bounds write remote code execution7.8CNA v3.00.8%2024-04-02Fix
CVE-2024-30347Foxit PDF Reader U3D File Parsing out-of-bounds read information disclosure3.3CISA ADP v3.10.6%2024-04-02Fix
CVE-2024-30346Foxit PDF Reader AcroForm use-after-free remote code execution7.8CNA v3.00.8%2024-04-02Fix
CVE-2024-30345Foxit PDF Reader AcroForm use-after-free remote code execution7.8CNA v3.00.8%2024-04-02Fix
CVE-2024-30344Foxit PDF Reader AcroForm use-after-free remote code execution7.8CNA v3.00.8%2024-04-02Fix
CVE-2024-30343Foxit PDF Reader Annotation use-after-free remote code execution7.8CNA v3.00.8%2024-04-02Fix
CVE-2024-30342Foxit PDF Reader Annotation use-after-free remote code execution7.8CNA v3.00.8%2024-04-02Fix
CVE-2024-30341Foxit PDF Reader Doc object out-of-bounds read remote code execution7.8CISA ADP v3.10.8%2024-04-02Fix
CVE-2024-30340Foxit PDF Reader Annotation out-of-bounds read information disclosure3.3CNA v3.00.5%2024-04-02Fix
CVE-2024-30339Foxit PDF Reader AcroForm use-after-free remote code execution7.8CNA v3.00.8%2024-04-02Fix
CVE-2024-30338Foxit PDF Reader Doc object use-after-free remote code execution7.8CNA v3.00.8%2024-04-02Fix
CVE-2024-30337Foxit PDF Reader AcroForm use-after-free remote code execution7.8CNA v3.00.8%2024-04-02Fix
CVE-2024-30336Foxit PDF Reader AcroForm use-after-free remote code execution7.8CNA v3.00.8%2024-04-02Fix
CVE-2024-30335Foxit PDF Reader AcroForm Annotation out-of-bounds read information disclosure7.1v3.10.7%2024-04-02Fix
CVE-2024-30248Piccolo Admin media upload cross-site scripting7.7CNA v3.10.5%2024-04-02Fix
CVE-2024-29949Hikvision DS-7604NI-K1 / 4P(B) some command injection7.2CNA v3.11.3%2024-04-02
CVE-2024-29948Hikvision DS-7604NXI-K1/4P some out-of-bounds read3.8CNA v3.10.4%2024-04-02
CVE-2024-29947Hikvision DS-7604NI-K1 / 4P(B) some null pointer dereference2.7CNA v3.10.4%2024-04-02
CVE-2024-29834Apache Pulsar: Improper authorization for Namespace and Topic Management endpoints6.4CNA v3.11.4%2024-04-02Fix
CVE-2024-29514Leptoncms lepton v.7.1.0 file upload8.8CISA ADP v3.11.3%2024-04-02
CVE-2024-29434alldata path traversal8.3CISA ADP v3.10.7%2024-04-02
CVE-2024-29432alldata SQL injection9.8CISA ADP v3.10.5%2024-04-02
CVE-2024-29276seeyonOA WorkFlowDesignerController code injection9.8CISA ADP v3.132.8%2024-04-02
CVE-2024-29086OpenHarmony arkcompiler runtime has a stack overflow svulnerability3.3CNA v3.10.2%2024-04-02Fix
CVE-2024-29074OpenHarmony telephony has an improper input validation6.5CNA v3.10.2%2024-04-02Fix
CVE-2024-28951OpenHarmony arkcompiler runtime has a use-after-free5.5CNA v3.10.2%2024-04-02Fix
CVE-2024-28287INSTINCT UI Web Client returnUrl parameter open redirect7.3CISA ADP v3.10.4%2024-04-02
CVE-2024-28226OpenHarmony fs has an improper input validation8.1CNA v3.10.6%2024-04-02Fix
CVE-2024-27605alldata insecure permissions7.5v3.10.4%2024-04-02
CVE-2024-27604alldata deserialization of untrusted data9.8v3.11.0%2024-04-02
CVE-2024-27602alldata improper access control9.1CISA ADP v3.10.4%2024-04-02
CVE-2024-27334Kofax Power PDF JPG File Parsing out-of-bounds read information disclosure5.5v3.10.4%2024-04-02
CVE-2024-26684Linux kernel stmmac XGMAC DMA channel driver vulnerability5.5v3.10.2%2024-04-02Fix
CVE-2024-26683Linux kernel cfg80211 channel switch detection vulnerability5.5v3.10.2%2024-04-02Fix
CVE-2024-26682Linux kernel mac80211 channel switch handling vulnerability5.5v3.10.2%2024-04-02Fix
CVE-2024-26681Linux kernel netdevsim trap report worker infinite loop5.5v3.10.2%2024-04-02Fix
CVE-2024-26680Linux kernel Atlantic driver PTP hardware timestamp ring use-after-free5.5v3.10.2%2024-04-02Fix
CVE-2024-26679Linux kernel inet socket error handling vulnerability5.5NVD v3.10.2%2024-04-02Fix
CVE-2024-26678Linux kernel EFI stub PE/COFF loader out-of-bounds write5.5v3.10.2%2024-04-02Fix
CVE-2024-26677Linux kernel rxrpc null pointer dereference5.5v3.10.2%2024-04-02Fix
CVE-2024-26676Linux kernel AF_UNIX socket garbage collector memory leak5.5CISA ADP v3.10.2%2024-04-02Fix
CVE-2024-26675Linux kernel PPP async driver resource exhaustion5.5v3.10.3%2024-04-02Fix
CVE-2024-26674Linux kernel x86 get_user and put_user fixups denial of service7.1v3.10.3%2024-04-02Fix
CVE-2024-26673Linux kernel nft_ct custom expectations vulnerability7.1v3.10.2%2024-04-02Fix
CVE-2024-26672Linux kernel AMDGPU MCA error handling null pointer dereference7.1CISA ADP v3.10.2%2024-04-02Fix
CVE-2024-26671Linux kernel blk-mq sbitmap tag allocation race condition4.7NVD v3.10.2%2024-04-02Fix
CVE-2024-26670Linux kernel arm64 entry speculative load workaround out-of-bounds write5.5v3.10.2%2024-04-02Fix
CVE-2024-26669Linux kernel tc flower chain template offload out-of-bounds write7.1v3.10.2%2024-04-02Fix
CVE-2024-26668Linux kernel nft_limit netfilter module integer overflow5.5v3.10.2%2024-04-02Fix
CVE-2024-26667Linux kernel MSM DPU display encoder cleanup vulnerability5.5v3.10.2%2024-04-02Fix
CVE-2024-26666Linux kernel mac80211 TDLS fast-xmit vulnerability7.1CNA v3.10.3%2024-04-02Fix
CVE-2024-26665Linux kernel IPv6 tunnel PMTU error handling out-of-bounds read9.1CNA v3.10.7%2024-04-02Fix
CVE-2024-26664Linux kernel coretemp hwmon driver out-of-bounds write7.8CNA v3.10.3%2024-04-02Fix
CVE-2024-26663Linux kernel TIPC UDP bearer null pointer dereference7.8CNA v3.10.3%2024-04-02Fix
CVE-2024-26662Linux kernel DCN21 display backlight control null pointer dereference5.5CISA ADP v3.10.2%2024-04-02Fix
CVE-2024-26661Linux kernel DCN21 display pipe timing generator null pointer dereference5.5CISA ADP v3.10.2%2024-04-02Fix
CVE-2024-26660Linux kernel DCN301 display stream encoder driver out-of-bounds read7.0CNA v3.10.3%2024-04-02Fix
CVE-2024-26659Linux kernel xHCI USB host controller driver out-of-bounds write7.8CNA v3.10.2%2024-04-02Fix
CVE-2024-26658Linux kernel bcachefs filesystem vulnerability5.5v3.10.1%2024-04-02Fix
CVE-2024-26657Linux kernel DRM GPU scheduler entity initialization null pointer dereference5.5v3.10.2%2024-04-02Fix
CVE-2024-26656Linux kernel AMDGPU GEM userptr handling use-after-free7.8CNA v3.10.2%2024-04-02Fix
CVE-2024-25187Xiaocheng-keji 71cms server-side request forgery8.6CISA ADP v3.10.7%2024-04-02
CVE-2024-25075Softing uaToolkit Embedded subscription publish handling vulnerability5.1CISA ADP v3.10.2%2024-04-02
CVE-2024-24888Gutenberg Blocks by Kadence Blocks WordPress plugin server side request forgery (SSRF)6.5v3.10.3%2024-04-02Fix
CVE-2024-24581OpenHarmony arkcompiler runtime has an out-of-bounds write6.5CNA v3.10.2%2024-04-02Fix
CVE-2024-22780CA17 TeamsACS cross-site scripting6.1CISA ADP v3.10.6%2024-04-02
CVE-2024-22248VMware SD-WAN Orchestrator open redirect7.1CNA v3.10.4%2024-04-02
CVE-2024-22247VMware SD-WAN Edge improper authentication4.8CNA v3.10.2%2024-04-02
CVE-2024-22246VMware SD-WAN Edge command injection7.4CNA v3.10.4%2024-04-02
CVE-2024-22180OpenHarmony camera has a use-after-free3.3CNA v3.10.2%2024-04-02Fix
CVE-2024-22177OpenHarmony audio has an improper preservation of permissions3.3CNA v3.10.1%2024-04-02Fix
CVE-2024-22098OpenHarmony AVSession has a use-after-free6.5CNA v3.10.2%2024-04-02Fix
CVE-2024-22092OpenHarmony bundlemanager has an authentication bypass7.7CNA v3.10.4%2024-04-02Fix
CVE-2024-21834OpenHarmony arkui has a type confusion3.3CNA v3.10.2%2024-04-02Fix