CVE-2024 records published in May 2024
This page lists the 3,323 CVE-2024 records published in May 2024, newest first, 1,000 to a page. The Cybersecurity and Infrastructure Security Agency's Known Exploited Vulnerabilities (KEV) catalog lists 12 of them. Each CVE opens on cve-security.com with its sources, detection content and vendor fixes, and the search on the CVE-2024 list filters these records by severity or signal.
- Critical
- 39211.8% of these records
- Listed in CISA KEV
- 120.4% of these records
- Reported exploited
- 50.2% of these records
- Detection signal
- 611.8% of these records
- Exploit code
- 1103.3% of these records
- Actionable vendor fix
- 2,24867.6% of these records
Figures as of 2026-10-24 13:18 UTC. Records published in May 2024 have had from about 29 months to about 30 months to collect KEV listings, exploitation reports, detection content and exploit code. Records published more recently have had less time, which can hold their shares down.
| CVE | Summary | CVSS | EPSS | Published | Signals |
|---|---|---|---|---|---|
| CVE-2024-37032 | Ollama does not validate the format of the digest (sha256 with 64 hex digits) | 8.8CISA ADP v3.1 | 89.6% | 2024-05-31 | Reported exploitedNucleiMetasploitExploit codeFix |
| CVE-2024-37018 | OpenDaylight controller topology discovery vulnerability | 9.1CISA ADP v3.1 | 0.4% | 2024-05-31 | |
| CVE-2024-37017 | asdcplib AS-DCP TimedText reader out-of-bounds read | 8.1CISA ADP v3.1 | 0.5% | 2024-05-31 | |
| CVE-2024-36845 | libmodbus denial of service | 4.3CISA ADP v3.1 | 0.5% | 2024-05-31 | Fix |
| CVE-2024-36844 | libmodbus use-after-free | 7.5CISA ADP v3.1 | 0.6% | 2024-05-31 | Fix |
| CVE-2024-36843 | libmodbus heap-based buffer overflow | 7.5CISA ADP v3.1 | 0.8% | 2024-05-31 | Fix |
| CVE-2024-36246 | Yokogawa Rental & Lease Unifier Cast Unifier and missing authorization | 9.8CISA ADP v3.1 | 0.5% | 2024-05-31 | |
| CVE-2024-36120 | javascript-deobfuscator crafted payload can lead to code execution | 8.2CNA v3.1 | 0.3% | 2024-05-31 | Fix |
| CVE-2024-36108 | Multiple Broken Function-Level Authorization vulnerabilities in casgate | 9.8CNA v3.1 | 0.6% | 2024-05-31 | Fix |
| CVE-2024-35196 | Slack integration leaks sensitive information in logs in Sentry | 2.0CNA v3.1 | 0.6% | 2024-05-31 | Fix |
| CVE-2024-35142 | IBM Security Verify Access privilege escalation | 8.4CNA v3.1 | 0.2% | 2024-05-31 | Fix |
| CVE-2024-35140 | IBM Security Verify Access privilege escalation | 7.7CNA v3.1 | 0.1% | 2024-05-31 | Fix |
| CVE-2024-34009 | Moodle: ReCAPTCHA can be bypassed on the login page | 7.5CISA ADP v3.1 | 0.4% | 2024-05-31 | Fix |
| CVE-2024-34008 | Moodle: CSRF risk in analytics management of models | 8.8NVD v3.1 | 0.4% | 2024-05-31 | Fix |
| CVE-2024-34007 | Moodle: Logout CSRF in admin/tool/mfa/auth.php | 8.8CISA ADP v3.1 | 0.4% | 2024-05-31 | Fix |
| CVE-2024-34006 | Moodle: Unsanitized HTML in site log for config_log_created | 4.3CISA ADP v3.1 | 0.4% | 2024-05-31 | Fix |
| CVE-2024-34005 | Moodle: Authenticated LFI risk in some misconfigured shared hosting environments | 6.5CISA ADP v3.1 | 0.5% | 2024-05-31 | Fix |
| CVE-2024-34004 | Moodle: Authenticated LFI risk in some misconfigured shared hosting environments | 6.5CISA ADP v3.1 | 0.5% | 2024-05-31 | Fix |
| CVE-2024-34003 | Moodle: Authenticated LFI risk in some misconfigured shared hosting environments | 5.9CISA ADP v3.1 | 0.4% | 2024-05-31 | Fix |
| CVE-2024-34002 | Moodle: Authenticated LFI risk in some misconfigured shared hosting environments | 6.5CISA ADP v3.1 | 0.5% | 2024-05-31 | Fix |
| CVE-2024-34001 | Moodle: CSRF risk in admin preset tool management of presets | 8.4CISA ADP v3.1 | 0.4% | 2024-05-31 | Fix |
| CVE-2024-34000 | Moodle: Stored XSS in lesson overview report via user ID number | 4.3CISA ADP v3.1 | 0.5% | 2024-05-31 | Fix |
| CVE-2024-33999 | Moodle: Unsafe direct use of $_SERVER['HTTP_REFERER'] in admin/tool/mfa/index.php | 9.8CISA ADP v3.1 | 0.5% | 2024-05-31 | Fix |
| CVE-2024-33998 | Moodle: Stored XSS via user's name on participants page when opening some options | 5.4CISA ADP v3.1 | 0.4% | 2024-05-31 | Fix |
| CVE-2024-33997 | Moodle: Stored XSS risk when editing another user's equation in equation editor | 6.1CISA ADP v3.1 | 0.4% | 2024-05-31 | Fix |
| CVE-2024-33996 | Moodle: Broken access control when setting calendar event type | 6.2CISA ADP v3.1 | 0.4% | 2024-05-31 | Fix |
| CVE-2024-32850 | Seiko Solutions SkyBridge MB-A100/MB-A110 command improper neutralization | 9.8CISA ADP v3.1 | 1.2% | 2024-05-31 | |
| CVE-2024-31908 | IBM Planning Analytics Local cross-site scripting | 6.4CNA v3.1 | 0.2% | 2024-05-31 | Fix |
| CVE-2024-31907 | IBM Planning Analytics Local cross-site scripting | 5.4CNA v3.1 | 0.2% | 2024-05-31 | Fix |
| CVE-2024-31889 | IBM Planning Analytics Local cross-site scripting | 5.4CNA v3.1 | 0.2% | 2024-05-31 | Fix |
| CVE-2024-31030 | Keith-cullen Freecoap null pointer dereference | 9.1CISA ADP v3.1 | 0.8% | 2024-05-31 | |
| CVE-2024-29848 | Ivanti Avalanche web component arbitrary file upload | 7.2v3.1 | 64.4% | 2024-05-31 | Fix |
| CVE-2024-29846 | Ivanti EPM Core server SQL injection | 8.0v3.1 | 8.5% | 2024-05-31 | |
| CVE-2024-29830 | Ivanti EPM Core server SQL injection | 8.0v3.1 | 8.5% | 2024-05-31 | Fix |
| CVE-2024-29829 | Ivanti EPM Core server SQL injection | 8.0v3.1 | 8.2% | 2024-05-31 | Fix |
| CVE-2024-29828 | Ivanti EPM Core server SQL injection | 8.0v3.1 | 8.5% | 2024-05-31 | Fix |
| CVE-2024-29827 | Ivanti EPM Core server SQL injection | 8.8NVD v3.1 | 71.7% | 2024-05-31 | Fix |
| CVE-2024-29826 | Ivanti EPM Core server SQL injection | 8.8NVD v3.1 | 99.9% | 2024-05-31 | Fix |
| CVE-2024-29825 | Ivanti EPM Core server SQL injection | 8.8NVD v3.1 | 99.9% | 2024-05-31 | Fix |
| CVE-2024-29824 | Ivanti Endpoint Manager (EPM) SQL injection | 8.8NVD v3.1 | 99.9% | 2024-05-31 | KEVNucleiMetasploitEmerging ThreatsExploit codeFix |
| CVE-2024-29823 | Ivanti EPM Core server SQL injection | 8.8NVD v3.1 | 99.9% | 2024-05-31 | Fix |
| CVE-2024-29822 | Ivanti EPM Core server SQL injection | 8.8NVD v3.1 | 64.4% | 2024-05-31 | Fix |
| CVE-2024-28736 | debezium-ui refresh page function code execution | 7.1CISA ADP v3.1 | 2.5% | 2024-05-31 | |
| CVE-2024-23847 | Yokogawa Rental & Lease Unifier Cast Unifier and incorrect default permissions | 5.9CISA ADP v3.1 | 0.2% | 2024-05-31 | |
| CVE-2024-23692 | Rejetto HTTP File Server improper neutralization of special elements used in a template engine | 9.8NVD v3.1 | 99.5% | 2024-05-31 | KEVNucleiMetasploitEmerging ThreatsExploit code |
| CVE-2024-23316 | PingAccess HTTP Request Desynchronization Weakness | 8.8CNA v4.0 | 0.5% | 2024-05-31 | Fix |
| CVE-2024-22338 | IBM Security Verify Access OIDC Provider information disclosure | 4.0CNA v3.1 | 0.2% | 2024-05-31 | Fix |
| CVE-2024-22060 | Ivanti Neurons for ITSM web component arbitrary file upload | 4.9NVD v3.1 | 1.1% | 2024-05-31 | Fix |
| CVE-2024-22059 | Ivanti Neurons for ITSM web component SQL injection | 8.8CNA v3.0 | 1.1% | 2024-05-31 | Fix |
| CVE-2024-22058 | Ivanti EPM heap-based buffer overflow | 7.8CNA v3.0 | 0.4% | 2024-05-31 | |
| CVE-2024-5565 | Prompt injection in ask API with visualization leads to RCE | 8.1CNA v3.1 | 15.2% | 2024-05-31 | |
| CVE-2024-5564 | Red Hat Enterprise Linux 10 libndp: Buffer overflow in route information length field | 8.1CNA v3.1 | 1.2% | 2024-05-31 | Fix |
| CVE-2024-5525 | Improper privilege management vulnerability in Astrotalks | 8.8v3.1 | 0.4% | 2024-05-31 | Fix |
| CVE-2024-5524 | Information exposure vulnerability in Astrotalks | 5.3CNA v3.1 | 0.3% | 2024-05-31 | Fix |
| CVE-2024-5523 | SQL injection vulnerability in Astrotalks | 8.8CNA v3.1 | 0.4% | 2024-05-31 | Fix |
| CVE-2024-5436 | Type confusion in Snapchat Lenscore | 9.8NVD v3.1 | 0.5% | 2024-05-31 | Fix |
| CVE-2024-5427 | WPCafe WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.3% | 2024-05-31 | Fix |
| CVE-2024-5418 | DethemeKit For Elementor WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.3% | 2024-05-31 | Fix |
| CVE-2024-5347 | Happy Addons for Elementor WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.3% | 2024-05-31 | Fix |
| CVE-2024-5345 | Responsive Owl Carousel for Elementor WordPress plugin local file inclusion | 8.8CNA v3.1 | 0.7% | 2024-05-31 | Fix |
| CVE-2024-5176 | Baxter Welch Allyn Configuration Tool insufficiently protected credentials | 9.4CNA v4.0 | 0.5% | 2024-05-31 | Fix |
| CVE-2024-5138 | snapd snapctl auth bypass | 8.1CISA ADP v3.1 | 0.8% | 2024-05-31 | Fix |
| CVE-2024-5041 | Happy Addons for Elementor WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.3% | 2024-05-31 | Fix |
| CVE-2024-4469 | Migration Backup Restore WordPress plugin Admin+ SSRF | 7.5CISA ADP v3.1 | 0.6% | 2024-05-31 | Fix |
| CVE-2024-4379 | Premium Addons for Elementor WordPress plugin DOM-based stored cross-site scripting | 5.4v3.1 | 0.3% | 2024-05-31 | Fix |
| CVE-2024-4376 | Premium Addons for Elementor WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.3% | 2024-05-31 | Fix |
| CVE-2024-4205 | Premium Addons for Elementor WordPress plugin missing authorization to information disclosure | 4.3CNA v3.1 | 0.3% | 2024-05-31 | Fix |
| CVE-2024-4160 | Download Manager WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.3% | 2024-05-31 | Fix |
| CVE-2024-2793 | Atarim plugin for WordPress comments stored cross-site scripting | 7.2CNA v3.1 | 0.5% | 2024-05-31 | Fix |
| CVE-2024-1275 | Use of Default Cryptographic Key vulnerability in Baxter Welch Allyn Connex Spot Monitor may allow Configuration/Environment Manipulation.This issue affects Welch Allyn Connex Spot Monitor in all versions prior to 1.52. | 9.1CNA v4.0 | 0.4% | 2024-05-31 | Fix |
| CVE-2024-36959 | Linux kernel devicetree resource leak | 5.5NVD v3.1 | 0.3% | 2024-05-30 | Fix |
| CVE-2024-36958 | In the Linux kernel, the following vulnerability has been resolved: NFSD: Fix nfsd4_encode_fattr4() crasher Ensure that args.acl is initialized early. It is used in an unconditional call to kfree() on the way out of nfsd4_encode_fattr4(). | 9.8CNA v3.1 | 0.5% | 2024-05-30 | Fix |
| CVE-2024-36957 | Linux kernel octeontx2-af driver off-by-one error | 5.5v3.1 | 0.2% | 2024-05-30 | Fix |
| CVE-2024-36956 | Linux kernel thermal zone debugfs vulnerability | 5.5v3.1 | 0.2% | 2024-05-30 | Fix |
| CVE-2024-36955 | Linux kernel intel-sdw-acpi information disclosure | 7.7CISA ADP v3.1 | 0.2% | 2024-05-30 | Fix |
| CVE-2024-36954 | Linux kernel tipc memory leak | 5.5v3.1 | 0.2% | 2024-05-30 | Fix |
| CVE-2024-36953 | Linux kernel KVM ARM64 vGIC-v2 null pointer dereference | 5.5v3.1 | 0.2% | 2024-05-30 | Fix |
| CVE-2024-36952 | Linux kernel lpfc NPIV transport unregistration race condition | 4.7v3.1 | 0.2% | 2024-05-30 | Fix |
| CVE-2024-36951 | Linux kernel amdkfd exception interrupt handling vulnerability | 5.5v3.1 | 0.2% | 2024-05-30 | Fix |
| CVE-2024-36950 | Linux kernel FireWire OHCI bus reset handling vulnerability | 4.4v3.1 | 0.3% | 2024-05-30 | Fix |
| CVE-2024-36949 | Linux kernel amdkfd process eviction vulnerability | 4.7v3.1 | 0.2% | 2024-05-30 | Fix |
| CVE-2024-36948 | Linux kernel drm/xe/xe_migrate integer overflow | 5.5v3.1 | 0.2% | 2024-05-30 | Fix |
| CVE-2024-36947 | Linux kernel qibfs dentry handling memory leak | 5.5v3.1 | 0.5% | 2024-05-30 | Fix |
| CVE-2024-36946 | Linux kernel phonet memory leak | 5.5v3.1 | 0.3% | 2024-05-30 | Fix |
| CVE-2024-36945 | Linux kernel net/smc resource leak | 7.5CNA v3.1 | 0.5% | 2024-05-30 | Fix |
| CVE-2024-36944 | Linux kernel QXL fence wait vulnerability | 5.5CISA ADP v3.1 | 0.2% | 2024-05-30 | Fix |
| CVE-2024-36943 | Linux kernel procfs pagemap scan race condition | 7.3CNA v3.1 | 0.2% | 2024-05-30 | Fix |
| CVE-2024-36941 | Linux kernel nl80211 coalescing rules null pointer dereference | 5.5v3.1 | 0.2% | 2024-05-30 | Fix |
| CVE-2024-36940 | Linux kernel pinctrl core double free | 7.8CNA v3.1 | 0.2% | 2024-05-30 | Fix |
| CVE-2024-36939 | In the Linux kernel, the following vulnerability has been resolved: nfs: Handle error of rpc_proc_register() in nfs_net_init(). syzkaller reported a warning [0] triggered while destroying immature netns. rpc_proc_register() was called in init_nfs_fs(), but its error has been ignored since at leas | 5.5NVD v3.1 | 0.2% | 2024-05-30 | Fix |
| CVE-2024-36938 | Linux kernel BPF sockmap ingress queue null pointer dereference | 5.5v3.1 | 0.2% | 2024-05-30 | Fix |
| CVE-2024-36937 | Linux kernel XDP broadcast redirect null pointer dereference | 5.5v3.1 | 0.2% | 2024-05-30 | Fix |
| CVE-2024-36936 | Linux kernel EFI unaccepted memory acceptance denial of service | 5.5v3.1 | 0.2% | 2024-05-30 | Fix |
| CVE-2024-36935 | Linux kernel ice Ethernet driver out-of-bounds read | 7.1v3.1 | 0.2% | 2024-05-30 | Fix |
| CVE-2024-36934 | Linux kernel bna out-of-bounds read | 7.8NVD v3.1 | 0.3% | 2024-05-30 | Fix |
| CVE-2024-36933 | Linux kernel NSH GSO segmentation vulnerability | 7.8CNA v3.1 | 0.3% | 2024-05-30 | Fix |
| CVE-2024-36932 | Linux kernel thermal debugfs cooling device use-after-free | 5.5v3.1 | 0.2% | 2024-05-30 | Fix |
| CVE-2024-36931 | Linux kernel s390/cio out-of-bounds read | 7.1v3.1 | 0.2% | 2024-05-30 | Fix |
| CVE-2024-36930 | Linux kernel SPI subsystem null pointer dereference | 5.5v3.1 | 0.2% | 2024-05-30 | Fix |
| CVE-2024-36929 | Linux kernel GSO fraglist skb copy null pointer dereference | 7.5CNA v3.1 | 0.9% | 2024-05-30 | Fix |
| CVE-2024-36928 | Linux kernel s390 qeth network driver null pointer dereference | 7.8CNA v3.1 | 0.2% | 2024-05-30 | Fix |
| CVE-2024-36927 | Linux kernel IPv4 skb construction race condition | 4.7NVD v3.1 | 0.2% | 2024-05-30 | Fix |
| CVE-2024-36926 | Linux kernel pseries IOMMU null pointer dereference | 5.5v3.1 | 0.2% | 2024-05-30 | Fix |
| CVE-2024-36925 | Linux kernel SWIOTLB restricted DMA pool null pointer dereference | 5.5v3.1 | 0.2% | 2024-05-30 | Fix |
| CVE-2024-36924 | Linux kernel lpfc driver worker thread deadlock | 5.5v3.1 | 0.2% | 2024-05-30 | Fix |
| CVE-2024-36922 | In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: read txq->read_ptr under lock If we read txq->read_ptr without lock, we can read the same value twice, then obtain the lock, and reclaim from there to two different places, but crucially reclaim the same entry twice | 8.8CNA v3.1 | 0.3% | 2024-05-30 | Fix |
| CVE-2024-36921 | Linux kernel iwlwifi mvm station removal vulnerability | 8.8CNA v3.1 | 0.3% | 2024-05-30 | Fix |
| CVE-2024-36920 | Linux kernel mpi3mr driver bsg interface vulnerability | 5.5v3.1 | 0.2% | 2024-05-30 | Fix |
| CVE-2024-36919 | Linux kernel bnx2fc driver session release improper locking | 5.5v3.1 | 0.2% | 2024-05-30 | Fix |
| CVE-2024-36918 | Linux kernel BPF bloom filter map integer overflow | 7.8CNA v3.1 | 0.2% | 2024-05-30 | Fix |
| CVE-2024-36917 | Linux kernel block discard ioctl integer overflow | 5.5v3.1 | 0.2% | 2024-05-30 | Fix |
| CVE-2024-36916 | Linux kernel blk-iocost undefined behavior | 7.1NVD v3.1 | 0.7% | 2024-05-30 | Fix |
| CVE-2024-36915 | Linux kernel NFC LLCP socket options out-of-bounds read | 7.1CNA v3.1 | 0.3% | 2024-05-30 | Fix |
| CVE-2024-36914 | Linux kernel AMD display writeback connector vulnerability | 7.8CNA v3.1 | 0.3% | 2024-05-30 | Fix |
| CVE-2024-36913 | In the Linux kernel, the following vulnerability has been resolved: Drivers: hv: vmbus: Leak pages if set_memory_encrypted() fails In CoCo VMs it is possible for the untrusted host to cause set_memory_encrypted() or set_memory_decrypted() to fail such that an error is returned and the resulting me | 9.3CNA v3.1 | 0.7% | 2024-05-30 | Fix |
| CVE-2024-36912 | Linux kernel VMBus GPADL tracking vulnerability | 9.6CNA v3.1 | 1.0% | 2024-05-30 | Fix |
| CVE-2024-36911 | Linux kernel hv_netvsc memory leak | 9.8CNA v3.1 | 0.6% | 2024-05-30 | Fix |
| CVE-2024-36910 | Linux kernel VMBus UIO driver information disclosure | 8.4CNA v3.1 | 0.2% | 2024-05-30 | Fix |
| CVE-2024-36909 | Linux kernel VMBus ring buffer memory leak | 9.3CNA v3.1 | 0.2% | 2024-05-30 | Fix |
| CVE-2024-36908 | In the Linux kernel, the following vulnerability has been resolved: blk-iocost: do not WARN if iocg was already offlined In iocg_pay_debt(), warn is triggered if 'active_list' is empty, which is intended to confirm iocg is active when it has debt. However, warn can be triggered during a blkcg or d | 5.5NVD v3.1 | 0.2% | 2024-05-30 | Fix |
| CVE-2024-36906 | Linux kernel ARM KASAN stack instrumentation out-of-bounds write | 7.8v3.1 | 0.2% | 2024-05-30 | Fix |
| CVE-2024-36905 | Linux kernel TCP shutdown state handling divide by zero | 5.5NVD v3.1 | 0.3% | 2024-05-30 | Fix |
| CVE-2024-36904 | Linux kernel TCP time-wait socket handling use-after-free | 7.8CNA v3.1 | 0.6% | 2024-05-30 | Fix |
| CVE-2024-36903 | Linux kernel IPv6 socket buffer construction vulnerability | 5.5NVD v3.1 | 0.2% | 2024-05-30 | Fix |
| CVE-2024-36902 | Linux kernel fib6_rules null pointer dereference | 5.5NVD v3.1 | 0.3% | 2024-05-30 | Fix |
| CVE-2024-36901 | Linux kernel IPv6 output path null pointer dereference | 5.5v3.1 | 0.3% | 2024-05-30 | Fix |
| CVE-2024-36900 | Linux kernel hns3 Ethernet driver devlink registration improper initialization | 5.5v3.1 | 0.2% | 2024-05-30 | Fix |
| CVE-2024-36899 | Linux kernel GPIO character device line info notifier use-after-free | 7.0NVD v3.1 | 0.2% | 2024-05-30 | Fix |
| CVE-2024-36898 | Linux kernel cdev uninitialized resource use | 7.1CNA v3.1 | 0.2% | 2024-05-30 | Fix |
| CVE-2024-36897 | Linux kernel AMD display BIOS integrated info null pointer dereference | 5.5v3.1 | 0.2% | 2024-05-30 | Fix |
| CVE-2024-36896 | Linux kernel USB hub port device removal null pointer dereference | 9.1CISA ADP v3.1 | 0.9% | 2024-05-30 | Fix |
| CVE-2024-36895 | Linux kernel USB gadget UVC configfs parsing out-of-bounds write | 7.8v3.1 | 0.2% | 2024-05-30 | Fix |
| CVE-2024-36894 | Linux kernel f_fs race condition | 7.8CNA v3.1 | 0.2% | 2024-05-30 | Fix |
| CVE-2024-36893 | Linux kernel USB Type-C port manager null pointer dereference | 5.5v3.1 | 0.2% | 2024-05-30 | Fix |
| CVE-2024-36892 | Linux kernel SLUB allocator freepointer null pointer dereference | 5.5v3.1 | 0.2% | 2024-05-30 | Fix |
| CVE-2024-36891 | Linux kernel maple tree reverse area search null pointer dereference | 5.5v3.1 | 0.2% | 2024-05-30 | Fix |
| CVE-2024-36890 | Linux kernel slab kfree cleanup helper vulnerability | 7.8CNA v3.1 | 0.2% | 2024-05-30 | Fix |
| CVE-2024-36889 | Linux kernel MPTCP connection setup improper initialization | 5.5v3.1 | 0.3% | 2024-05-30 | Fix |
| CVE-2024-36888 | Linux kernel workqueue CPU wake selection null pointer dereference | 6.2CISA ADP v3.1 | 0.2% | 2024-05-30 | Fix |
| CVE-2024-36887 | Linux kernel e1000e PHY MDIC access denial of service | 5.5v3.1 | 0.2% | 2024-05-30 | Fix |
| CVE-2024-36886 | Linux kernel tipc use-after-free | 9.8CNA v3.1 | 1.3% | 2024-05-30 | Exploit codeFix |
| CVE-2024-36884 | Linux kernel iommu/arm-smmu null pointer dereference | 7.8CNA v3.1 | 0.2% | 2024-05-30 | Fix |
| CVE-2024-36883 | Linux kernel net out-of-bounds access | 7.8CNA v3.1 | 0.3% | 2024-05-30 | Fix |
| CVE-2024-36882 | Linux kernel page cache readahead deadlock | 5.5v3.1 | 0.2% | 2024-05-30 | Fix |
| CVE-2024-36881 | Linux kernel userfaultfd vulnerability | 5.5CISA ADP v3.1 | 0.2% | 2024-05-30 | Fix |
| CVE-2024-36880 | Linux kernel qca Bluetooth driver vulnerability | 7.8CNA v3.1 | 0.3% | 2024-05-30 | Fix |
| CVE-2024-36267 | Kontron Redmine DMSF Plugin path traversal | 8.1CISA ADP v3.1 | 0.5% | 2024-05-30 | |
| CVE-2024-36119 | Password confirmation stored in plain text via registration form in statamic/cms | 1.8CNA v3.1 | 0.1% | 2024-05-30 | Fix |
| CVE-2024-36118 | Unauthorized viewing of workspace test cases in MeterSphere | 3.5CNA v3.1 | 0.3% | 2024-05-30 | Fix |
| CVE-2024-36033 | Linux kernel qca Bluetooth driver information disclosure | 7.1v3.1 | 0.2% | 2024-05-30 | Fix |
| CVE-2024-36032 | Linux kernel qca Bluetooth driver information disclosure | 8.1CNA v3.1 | 0.4% | 2024-05-30 | Fix |
| CVE-2024-36031 | In the Linux kernel, the following vulnerability has been resolved: keys: Fix overwrite of key expiration on instantiation The expiry time of a key is unconditionally overwritten during instantiation, defaulting to turn it permanent. This causes a problem for DNS resolution as the expiration set b | 9.8CISA ADP v3.1 | 0.7% | 2024-05-30 | Fix |
| CVE-2024-36030 | Linux kernel OcteonTX2 AF NPC driver double free | 7.1CISA ADP v3.1 | 0.2% | 2024-05-30 | Fix |
| CVE-2024-36029 | Linux kernel sdhci-msm LED device denial of service | 5.5v3.1 | 0.2% | 2024-05-30 | Fix |
| CVE-2024-36028 | Linux kernel hugetlb memory failure handling race condition | 4.7v3.1 | 0.2% | 2024-05-30 | Fix |
| CVE-2024-36027 | Linux kernel btrfs zoned extent buffer writeback vulnerability | 7.1CNA v3.1 | 0.2% | 2024-05-30 | Fix |
| CVE-2024-36026 | Linux kernel AMD SMU S4 resume denial of service | 5.5v3.1 | 0.2% | 2024-05-30 | Fix |
| CVE-2024-36025 | Linux kernel qla2xxx EDIF app statistics off-by-one error | 5.5v3.1 | 0.2% | 2024-05-30 | Fix |
| CVE-2024-36024 | Linux kernel AMD display DMCUB command handling race condition | 4.7v3.1 | 0.2% | 2024-05-30 | Fix |
| CVE-2024-36023 | Linux kernel null pointer dereference | 5.5v3.1 | 0.2% | 2024-05-30 | Fix |
| CVE-2024-36021 | Linux kernel hns3 devlink reload vulnerability | 5.5v3.1 | 0.2% | 2024-05-30 | Fix |
| CVE-2024-36020 | Linux kernel i40e VF pointer handling use of uninitialized resource | 7.8CNA v3.1 | 0.3% | 2024-05-30 | Fix |
| CVE-2024-36019 | Linux kernel regmap maple cache out-of-bounds read | 7.8CNA v3.1 | 0.2% | 2024-05-30 | Fix |
| CVE-2024-36018 | Linux kernel nouveau uvmm remap handling out-of-bounds write | 7.8CNA v3.1 | 0.2% | 2024-05-30 | Fix |
| CVE-2024-36017 | Linux kernel rtnetlink VF VLAN list validation vulnerability | 5.5NVD v3.1 | 0.2% | 2024-05-30 | Fix |
| CVE-2024-35504 | Finesoft login page cross-site scripting | 5.4CISA ADP v3.1 | 0.3% | 2024-05-30 | |
| CVE-2024-35469 | oretnom23 Human Resource Management System /hrm/user/ in SourceCodester SQL injection | 9.8CISA ADP v3.1 | 0.6% | 2024-05-30 | Exploit code |
| CVE-2024-35468 | oretnom23 Human Resource Management System /hrm/index.php in SourceCodester SQL injection | 5.4CISA ADP v3.1 | 0.4% | 2024-05-30 | Exploit code |
| CVE-2024-35433 | ZKTeco ZKBio CVSecurity improper access control | 8.1CISA ADP v3.1 | 0.5% | 2024-05-30 | |
| CVE-2024-35432 | ZKTeco ZKBio CVSecurity cross-site scripting | 6.1CISA ADP v3.1 | 0.4% | 2024-05-30 | |
| CVE-2024-35431 | ZKTeco ZKBio CVSecurity path traversal | 7.5CISA ADP v3.1 | 1.0% | 2024-05-30 | |
| CVE-2024-35430 | ZKTeco ZKBio CVSecurity improper privilege management | 8.1CISA ADP v3.1 | 0.6% | 2024-05-30 | |
| CVE-2024-35429 | ZKTeco ZKBio CVSecurity path traversal | 6.5v3.1 | 0.9% | 2024-05-30 | |
| CVE-2024-35428 | ZKTeco ZKBio CVSecurity path traversal | 7.1v3.1 | 0.8% | 2024-05-30 | |
| CVE-2024-35359 | Dino Physics School Assistant SQL injection | 9.8v3.1 | 0.4% | 2024-05-30 | |
| CVE-2024-35358 | Dino Physics School Assistant SQL injection | 6.5CISA ADP v3.1 | 0.4% | 2024-05-30 | |
| CVE-2024-35357 | Dino Physics School Assistant SQL injection | 5.3CISA ADP v3.1 | 0.2% | 2024-05-30 | |
| CVE-2024-35356 | Dino Physics School Assistant SQL injection | 6.3CISA ADP v3.1 | 0.4% | 2024-05-30 | |
| CVE-2024-35355 | Dino Physics School Assistant SQL injection | 9.8CISA ADP v3.1 | 0.7% | 2024-05-30 | |
| CVE-2024-35354 | Dino Physics School Assistant SQL injection | 9.8CISA ADP v3.1 | 0.7% | 2024-05-30 | |
| CVE-2024-35353 | Dino Physics School Assistant incorrect authorization | 9.8CISA ADP v3.1 | 0.6% | 2024-05-30 | |
| CVE-2024-35352 | Dino Physics School Assistant cross-site scripting | 6.1CISA ADP v3.1 | 0.3% | 2024-05-30 | |
| CVE-2024-35351 | Dino Physics School Assistant cross-site scripting | 5.4CISA ADP v3.1 | 0.3% | 2024-05-30 | |
| CVE-2024-35350 | Dino Physics School Assistant SQL injection | 9.8CISA ADP v3.1 | 0.5% | 2024-05-30 | |
| CVE-2024-35349 | Dino Physics School Assistant SQL injection | 9.8v3.1 | 0.5% | 2024-05-30 | |
| CVE-2024-35345 | Dino Physics School Assistant cross-site scripting | 5.4CISA ADP v3.1 | 0.4% | 2024-05-30 | |
| CVE-2024-35228 | Improper handling of insufficient permissions in Wagtail | 5.5CNA v3.1 | 0.3% | 2024-05-30 | Fix |
| CVE-2024-35189 | Sensitive data disclosure vulnerability in Connection Configuration endpoints in Fides | 6.5CNA v3.1 | 0.6% | 2024-05-30 | Fix |
| CVE-2024-34171 | Fuji Electric Monitouch V-SFT stack-based buffer overflow | 9.8v3.1 | 0.6% | 2024-05-30 | Fix |
| CVE-2024-32877 | Reflected cross-site scripting in yiisoft/yii2 Debug mode | 4.2CNA v3.1 | 0.3% | 2024-05-30 | Fix |
| CVE-2024-5521 | Cross-site scripting stored in Alkacon OpenCMS | 6.4v3.1 | 0.3% | 2024-05-30 | |
| CVE-2024-5520 | Cross-site scripting stored in Alkacon OpenCMS | 5.4v3.1 | 0.3% | 2024-05-30 | Fix |
| CVE-2024-5519 | ItsourceCode Learning Management System Project In PHP login.php SQL injection | 9.8v3.1 | 0.9% | 2024-05-30 | |
| CVE-2024-5518 | itsourcecode Online Discussion Forum change_profile_picture.php unrestricted upload | 8.8v3.1 | 0.8% | 2024-05-30 | |
| CVE-2024-5517 | itsourcecode Online Blood Bank Management System changepwd.php SQL injection | 9.8v3.1 | 0.9% | 2024-05-30 | |
| CVE-2024-5516 | itsourcecode Online Blood Bank Management System massage.php SQL injection | 9.8v3.1 | 0.7% | 2024-05-30 | |
| CVE-2024-5515 | SourceCodester Stock Management System createBrand.php SQL injection | 9.8v3.1 | 0.6% | 2024-05-30 | |
| CVE-2024-5514 | MinMax CMS hidden functionality | 9.8CNA v3.1 | 0.7% | 2024-05-30 | |
| CVE-2024-5499 | Google Chrome Streams API out-of-bounds write | 8.8v3.1 | 1.0% | 2024-05-30 | Fix |
| CVE-2024-5498 | Google Chrome Presentation API use-after-free | 8.8v3.1 | 0.7% | 2024-05-30 | Fix |
| CVE-2024-5497 | Google Chrome Browser UI out-of-bounds access | 8.8v3.1 | 0.9% | 2024-05-30 | Fix |
| CVE-2024-5496 | Google Chrome Media Session use-after-free | 8.8v3.1 | 0.9% | 2024-05-30 | Fix |
| CVE-2024-5495 | Google Chrome Dawn use-after-free | 8.8v3.1 | 0.8% | 2024-05-30 | Fix |
| CVE-2024-5494 | Google Chrome Dawn use-after-free | 8.8v3.1 | 0.8% | 2024-05-30 | Fix |
| CVE-2024-5493 | Google Chrome WebRTC heap-based buffer overflow | 8.8v3.1 | 0.9% | 2024-05-30 | Fix |
| CVE-2024-5341 | The Plus Addons for Elementor Page Builder WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.3% | 2024-05-30 | Fix |
| CVE-2024-5327 | PowerPack Addons for Elementor WordPress plugin DOM-based stored cross-site scripting | 5.4v3.1 | 0.3% | 2024-05-30 | Fix |
| CVE-2024-5326 | Post Grid Gutenberg Blocks and WordPress Blog Plugin WordPress plugin unauthorized access | 8.8CNA v3.1 | 1.4% | 2024-05-30 | Exploit codeFix |
| CVE-2024-5271 | Fuji Electric Monitouch V-SFT access of resource using incompatible type (type confusion) | 8.5CNA v4.0 | 0.4% | 2024-05-30 | Fix |
| CVE-2024-5223 | Post Grid Gutenberg Blocks and WordPress Blog Plugin PostX stored cross-site scripting | 6.4CNA v3.1 | 0.3% | 2024-05-30 | Fix |
| CVE-2024-5207 | POST SMTP WordPress plugin SQL injection | 7.2CNA v3.1 | 0.5% | 2024-05-30 | Fix |
| CVE-2024-5073 | Essential Addons for Elementor WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.3% | 2024-05-30 | Fix |
| CVE-2024-4668 | Gum Elementor Addon WordPress plugin stored cross-site scripting | 6.4CNA v3.1 | 0.3% | 2024-05-30 | Fix |
| CVE-2024-4427 | Comparison Slider WordPress plugin missing authorization | 4.3CNA v3.1 | 0.3% | 2024-05-30 | |
| CVE-2024-4426 | Comparison Slider WordPress plugin cross-site request forgery | 4.3v3.1 | 0.2% | 2024-05-30 | |
| CVE-2024-4422 | Comparison Slider WordPress plugin authenticated (Subscriber+) stored cross-site scripting | 5.4v3.1 | 0.3% | 2024-05-30 | |
| CVE-2024-4356 | List categories WordPress plugin stored cross-site scripting | 6.4CNA v3.1 | 0.3% | 2024-05-30 | Fix |
| CVE-2024-4355 | sminozzi Block Bad Bots missing authorization | 4.3CNA v3.1 | 0.3% | 2024-05-30 | Fix |
| CVE-2024-4330 | Path traversal in parisneo/lollms-webui | 3.3NVD v3.1 | 0.3% | 2024-05-30 | |
| CVE-2024-4218 | AffiEasy WordPress plugin cross-site request forgery to Various actions | 6.5CNA v3.1 | 0.2% | 2024-05-30 | Fix |
| CVE-2024-3947 | WP To Do WordPress plugin cross-site request forgery via wptodo_settings | 4.3CNA v3.1 | 0.2% | 2024-05-30 | Fix |
| CVE-2024-3946 | WP To Do WordPress plugin authenticated (Admin+) stored cross-site scripting via settings | 4.8v3.1 | 0.3% | 2024-05-30 | Fix |
| CVE-2024-3945 | WP To Do WordPress plugin cross-site request forgery via wptodo_manage | 4.3CNA v3.1 | 0.2% | 2024-05-30 | Fix |
| CVE-2024-3943 | WP To Do WordPress plugin cross-site request forgery via wptodo_addcomment | 4.3v3.1 | 0.2% | 2024-05-30 | Fix |
| CVE-2024-3924 | Code injection in huggingface/text-generation-inference | 4.4CNA v3.0 | 0.3% | 2024-05-30 | Fix |
| CVE-2024-3726 | Login Logout Register Menu WordPress plugin stored cross-site scripting | 6.4CNA v3.1 | 0.3% | 2024-05-30 | |
| CVE-2024-3584 | Path traversal in qdrant/qdrant | 7.5NVD v3.1 | 0.5% | 2024-05-30 | Fix |
| CVE-2024-3583 | Simple Like Page WordPress plugin stored cross-site scripting | 6.4CNA v3.1 | 0.3% | 2024-05-30 | Fix |
| CVE-2024-3301 | Dassault Systèmes DELMIA Apriso deserialization of untrusted data | 8.5CNA v3.1 | 0.7% | 2024-05-30 | |
| CVE-2024-3300 | Dassault Systèmes DELMIA Apriso deserialization of untrusted data | 9.0CNA v3.1 | 2.8% | 2024-05-30 | Nuclei |
| CVE-2024-3277 | Yumpu ePaper publishing WordPress plugin unauthorized access | 5.0CNA v3.1 | 0.3% | 2024-05-30 | Fix |
| CVE-2024-3269 | Download Monitor WordPress plugin missing authorization | 5.4CNA v3.1 | 0.3% | 2024-05-30 | Fix |
| CVE-2024-3190 | Unlimited Elements For Elementor WordPress plugin stored cross-site scripting | 4.6v3.1 | 0.3% | 2024-05-30 | Fix |
| CVE-2024-3063 | WPB Elementor Addons WordPress plugin authenticated (Contributor+) stored cross-site scripting | 5.4v3.1 | 0.2% | 2024-05-30 | Fix |
| CVE-2024-2657 | Font Farsi WordPress plugin authenticated (Administrator+) stored cross-site scripting | 4.4CNA v3.1 | 0.3% | 2024-05-30 | |
| CVE-2024-2422 | LenelS2 NetBox improper neutralization of Argumented Delimiters | 9.3CNA v4.0 | 0.5% | 2024-05-30 | Fix |
| CVE-2024-2421 | LenelS2 NetBox improper neutralization of Special Elements | 9.3CNA v4.0 | 0.5% | 2024-05-30 | Fix |
| CVE-2024-2420 | LenelS2 NetBox hard-coded credentials | 8.8CNA v4.0 | 0.5% | 2024-05-30 | Fix |
| CVE-2024-2253 | Testimonial Carousel For Elementor WordPress plugin stored cross-site scripting | 6.4CNA v3.1 | 0.3% | 2024-05-30 | Fix |
| CVE-2024-2089 | Remote Content Shortcode WordPress plugin authenticated (Contributor+) stored cross-site scripting | 5.4CNA v3.1 | 0.3% | 2024-05-30 | |
| CVE-2024-1298 | TianoCore edk2 integer overflow caused by divide by zero during S3 suspension | 6.0CNA v3.1 | 0.2% | 2024-05-30 | Fix |
| CVE-2024-1100 | SQLi in Vadi Corporate Information Systems' DIGIKENT GIS | 9.8CISA ADP v3.1 | 0.4% | 2024-05-30 | |
| CVE-2024-36470 | JetBrains TeamCity authentication bypass | 8.1CNA v3.1 | 0.5% | 2024-05-29 | Fix |
| CVE-2024-36427 | TARGIT Decision Suite file-serving function path traversal | 8.1CISA ADP v3.1 | 0.5% | 2024-05-29 | |
| CVE-2024-36378 | JetBrains TeamCity resource exhaustion | 5.9CNA v3.1 | 0.4% | 2024-05-29 | Fix |
| CVE-2024-36377 | JetBrains TeamCity incorrect authorization | 6.5CNA v3.1 | 0.3% | 2024-05-29 | Fix |
| CVE-2024-36376 | JetBrains TeamCity incorrect authorization | 6.5CNA v3.1 | 0.3% | 2024-05-29 | Fix |
| CVE-2024-36375 | JetBrains TeamCity information disclosure through error messages | 5.3CNA v3.1 | 0.3% | 2024-05-29 | Fix |
| CVE-2024-36374 | JetBrains TeamCity cross-site scripting | 4.6CNA v3.1 | 0.3% | 2024-05-29 | Fix |
| CVE-2024-36373 | JetBrains TeamCity cross-site scripting | 4.6CNA v3.1 | 0.3% | 2024-05-29 | Fix |
| CVE-2024-36372 | JetBrains TeamCity cross-site scripting | 4.6CNA v3.1 | 0.3% | 2024-05-29 | Fix |
| CVE-2024-36371 | JetBrains TeamCity cross-site scripting | 4.6CNA v3.1 | 0.3% | 2024-05-29 | Fix |
| CVE-2024-36370 | JetBrains TeamCity cross-site scripting | 4.6CNA v3.1 | 0.3% | 2024-05-29 | Fix |
| CVE-2024-36369 | JetBrains TeamCity cross-site scripting | 4.6CNA v3.1 | 0.3% | 2024-05-29 | Fix |
| CVE-2024-36368 | JetBrains TeamCity cross-site scripting | 4.6CNA v3.1 | 0.3% | 2024-05-29 | Fix |
| CVE-2024-36367 | JetBrains TeamCity cross-site scripting | 4.6CNA v3.1 | 0.3% | 2024-05-29 | Fix |
| CVE-2024-36366 | JetBrains TeamCity cross-site scripting | 5.4CNA v3.1 | 0.3% | 2024-05-29 | Fix |
| CVE-2024-36365 | JetBrains TeamCity incorrect authorization | 6.8CNA v3.1 | 0.3% | 2024-05-29 | Fix |
| CVE-2024-36364 | JetBrains TeamCity incorrect authorization | 6.5CNA v3.1 | 0.3% | 2024-05-29 | Fix |
| CVE-2024-36363 | JetBrains TeamCity cross-site scripting | 4.6CNA v3.1 | 0.3% | 2024-05-29 | Fix |
| CVE-2024-36362 | JetBrains TeamCity relative path traversal | 6.5CNA v3.1 | 0.5% | 2024-05-29 | Fix |
| CVE-2024-36114 | Decompressors can crash the JVM and leak memory content in Aircompressor | 8.6CNA v3.1 | 0.5% | 2024-05-29 | Fix |
| CVE-2024-36016 | Linux kernel n_gsm out-of-bounds read | 7.8CNA v3.1 | 0.3% | 2024-05-29 | Fix |
| CVE-2024-36015 | Linux kernel ppdev device registration improper array index validation | 7.8v3.1 | 0.3% | 2024-05-29 | Fix |
| CVE-2024-36014 | Linux kernel drm/arm/malidp null pointer dereference | 5.5v3.1 | 0.2% | 2024-05-29 | Fix |
| CVE-2024-35512 | hmq MQTT UNSUBSCRIBE handling null pointer dereference | 5.3CISA ADP v3.1 | 0.5% | 2024-05-29 | |
| CVE-2024-35492 | Cesanta Mongoose MQTT packet parser null pointer dereference | 7.5CISA ADP v3.1 | 0.5% | 2024-05-29 | |
| CVE-2024-35434 | irontec sngrep heap-based buffer overflow | 7.5CISA ADP v3.1 | 0.6% | 2024-05-29 | Fix |
| CVE-2024-35333 | html2xhtml charset declaration parser stack-based buffer overflow | 8.4CISA ADP v3.1 | 0.4% | 2024-05-29 | |
| CVE-2024-35311 | Yubico YubiKey insecure storage of sensitive information | 3.3CISA ADP v3.1 | 0.2% | 2024-05-29 | |
| CVE-2024-35284 | Mitel Micontact Center Business cross-site scripting | 5.4CISA ADP v3.1 | 0.3% | 2024-05-29 | Fix |
| CVE-2024-35283 | Mitel Micontact Center Business cross-site scripting | 6.1CISA ADP v3.1 | 0.3% | 2024-05-29 | Fix |
| CVE-2024-35221 | Denial of service when publishing a package on rubygems.org | 4.3CNA v3.1 | 0.5% | 2024-05-29 | Fix |
| CVE-2024-35200 | F5 NGINX HTTP/3 QUIC module null pointer dereference | 5.3CNA v3.1 | 0.9% | 2024-05-29 | Fix |
| CVE-2024-34715 | Partial password exposure vulnerability in Fides Webserver Logs | 2.3CNA v3.1 | 0.3% | 2024-05-29 | Fix |
| CVE-2024-34161 | F5 NGINX Plus and NGINX Open Source HTTP/3 QUIC module use-after-free | 5.3CNA v3.1 | 0.9% | 2024-05-29 | Fix |
| CVE-2024-32760 | F5 NGINX HTTP/3 QUIC module out-of-bounds write | 6.5CNA v3.1 | 0.9% | 2024-05-29 | Fix |
| CVE-2024-31079 | F5 NGINX HTTP/3 QUIC module vulnerability | 4.8CNA v3.1 | 0.9% | 2024-05-29 | Fix |
| CVE-2024-28974 | Dell Data Protection Advisor inadequate encryption strength | 7.6CNA v3.1 | 0.1% | 2024-05-29 | Fix |
| CVE-2024-28826 | Checkmk unrestricted upload and download paths in check_sftp | 8.8CNA v3.1 | 0.5% | 2024-05-29 | Fix |
| CVE-2024-27313 | ManageEngine PAM360 XSS | 6.3CNA v3.1 | 1.3% | 2024-05-29 | Fix |
| CVE-2024-25977 | HAWKI login and logout function session fixation | 7.3CISA ADP v3.1 | 0.6% | 2024-05-29 | |
| CVE-2024-25976 | HAWKI login.php reflected cross-site scripting | 6.1CISA ADP v3.1 | 0.6% | 2024-05-29 | |
| CVE-2024-25975 | HAWKI upvote and downvote function path traversal | 6.5CISA ADP v3.1 | 0.6% | 2024-05-29 | |
| CVE-2024-21512 | mysql2 vulnerable to prototype pollution | 8.2CNA v3.1 | 3.1% | 2024-05-29 | Fix |
| CVE-2024-5437 | SourceCodester Simple Online Bidding System save_category cross-site scripting | 6.1v3.1 | 0.4% | 2024-05-29 | |
| CVE-2024-5204 | Swiss Toolkit For WP WordPress plugin authenticated (Contributor+) authentication bypass | 8.8CNA v3.1 | 0.6% | 2024-05-29 | Fix |
| CVE-2024-5185 | SamurAIGPT EmbedAI cross-site request forgery | 8.3CNA v4.0 | 0.2% | 2024-05-29 | |
| CVE-2024-5150 | Login with phone number WordPress plugin authentication bypass due to missing Empty Value check | 9.8CNA v3.1 | 0.8% | 2024-05-29 | Fix |
| CVE-2024-5086 | Essential Addons for Elementor PRO WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.3% | 2024-05-29 | Fix |
| CVE-2024-5039 | HUSKY Products Filter Professional for WooCommerce WordPress plugin stored cross-site scripting | 6.4v3.1 | 0.3% | 2024-05-29 | Fix |
| CVE-2024-4611 | AppPresser WordPress plugin improper missing encryption Exception Handling to authentication bypass | 8.1CNA v3.1 | 0.5% | 2024-05-29 | Fix |
| CVE-2024-4419 | Fetch JFT WordPress plugin authenticated (Administrator+) stored cross-site scripting | 4.0v3.1 | 0.2% | 2024-05-29 | Fix |
| CVE-2024-4358 | Progress Telerik Report Server authentication bypass by spoofing | 9.8CNA v3.1 | 97.5% | 2024-05-29 | KEVNucleiMetasploitEmerging ThreatsExploit codeKCVFix |
| CVE-2024-3937 | Playlist for Youtube WordPress plugin Editor+ stored XSS | 4.8CISA ADP v3.1 | 0.3% | 2024-05-29 | Fix |
| CVE-2024-3921 | Gianism WordPress plugin Admin+ stored XSS | 4.8CISA ADP v3.1 | 0.4% | 2024-05-29 | Fix |
| CVE-2024-3412 | WP STAGING WordPress Backup Plugin Migration Backup Restore arbitrary file upload | 9.1CNA v3.1 | 0.8% | 2024-05-29 | Fix |
| CVE-2024-3050 | Site Reviews WordPress plugin IP spoofing | 9.1CISA ADP v3.1 | 0.6% | 2024-05-29 | Fix |
| CVE-2024-0434 | WordPress Tour and Travel Booking Plugin for WooCommerce WordPress plugin unauthorized access | 5.3CNA v3.1 | 0.4% | 2024-05-29 | Fix |
| CVE-2024-36472 | GNOME Shell portal helper origin validation error | 6.5CISA ADP v3.1 | 0.3% | 2024-05-28 | Fix |
| CVE-2024-36112 | Nautobot dynamic-group-members doesn't enforce permission restrictions on member objects | 6.3CNA v3.1 | 0.4% | 2024-05-28 | Fix |
| CVE-2024-36110 | ansibleguy webui cross-site scripting in ansibleguy-webui | 8.2CNA v3.1 | 0.4% | 2024-05-28 | Fix |
| CVE-2024-36109 | Cross-site scripting with Markdown rendering in CoCalc | 7.6CNA v3.1 | 0.4% | 2024-05-28 | Fix |
| CVE-2024-36107 | Information disclosure in minio | 5.3CNA v3.1 | 0.6% | 2024-05-28 | Fix |
| CVE-2024-35621 | Formwork cross-site scripting vulnerability in Markdown fields | 4.8CISA ADP v3.1 | 0.3% | 2024-05-28 | Fix |
| CVE-2024-35583 | oretnom23 Computer Laboratory Management System cross-site scripting | 6.1CISA ADP v3.1 | 0.5% | 2024-05-28 | |
| CVE-2024-35582 | oretnom23 Computer Laboratory Management System cross-site scripting | 6.1CISA ADP v3.1 | 0.4% | 2024-05-28 | |
| CVE-2024-35581 | oretnom23 Computer Laboratory Management System cross-site scripting | 6.1CISA ADP v3.1 | 0.4% | 2024-05-28 | |
| CVE-2024-35563 | CDG Server CDGTempPermissions SQL injection | 9.8CISA ADP v3.1 | 0.4% | 2024-05-28 | |
| CVE-2024-35548 | Mybatis plus versions below SQL injection | 5.4CISA ADP v3.1 | 0.4% | 2024-05-28 | |
| CVE-2024-35511 | PHPGurukul Men Salon Management System SQL injection | 4.7CISA ADP v3.1 | 0.4% | 2024-05-28 | |
| CVE-2024-35510 | DedeCMS /dede/file_manage_control.php arbitrary file upload | 9.8CISA ADP v3.1 | 0.7% | 2024-05-28 | |
| CVE-2024-35403 | TOTOLINK CP900L stack-based buffer overflow | 2.7CISA ADP v3.1 | 0.4% | 2024-05-28 | |
| CVE-2024-35401 | TOTOLINK CP900L command injection | 5.9CISA ADP v3.1 | 0.6% | 2024-05-28 | |
| CVE-2024-35400 | TOTOLINK CP900L buffer overflow | 5.3CISA ADP v3.1 | 0.5% | 2024-05-28 | |
| CVE-2024-35399 | TOTOLINK CP900L stack-based buffer overflow | 8.8CISA ADP v3.1 | 0.4% | 2024-05-28 | |
| CVE-2024-35398 | TOTOLINK CP900L buffer overflow | 9.8CISA ADP v3.1 | 0.6% | 2024-05-28 | |
| CVE-2024-35397 | TOTOLINK CP900L command injection | 8.8CISA ADP v3.1 | 15.1% | 2024-05-28 | |
| CVE-2024-35344 | Anpviz IP cameras firmware hard-coded cryptographic key | 9.9CISA ADP v3.1 | 0.4% | 2024-05-28 | |
| CVE-2024-35343 | Anpviz IP cameras playback file download endpoint information disclosure | 9.8CISA ADP v3.1 | 0.5% | 2024-05-28 | |
| CVE-2024-35342 | Anpviz IP cameras camera settings missing authentication | 4.6CISA ADP v3.1 | 0.2% | 2024-05-28 | |
| CVE-2024-35341 | Anpviz IP cameras configuration download endpoint information disclosure | 7.5CISA ADP v3.1 | 0.4% | 2024-05-28 | |
| CVE-2024-35324 | Douchat path traversal | 9.8CISA ADP v3.1 | 2.1% | 2024-05-28 | |
| CVE-2024-35240 | Stored cross-site scripting on Print Functionality in Umbraco Commerce | 5.4CNA v3.1 | 0.3% | 2024-05-28 | Fix |
| CVE-2024-35239 | Stored cross-site scripting on components of Umbraco forms | 2.7CNA v3.1 | 0.3% | 2024-05-28 | Fix |
| CVE-2024-35226 | PHP code injection by malicious attribute in extends-tag in Smarty | 7.3CNA v3.1 | 0.5% | 2024-05-28 | Fix |
| CVE-2024-34854 | F-logic DataCube3 path traversal | 9.8CISA ADP v3.1 | 12.8% | 2024-05-28 | |
| CVE-2024-34852 | F-logic DataCube3 command injection | 6.3CISA ADP v3.1 | 1.6% | 2024-05-28 | |
| CVE-2024-33849 | ci solution CI-Out-of-Office Manager hard-coded cryptographic key | 6.5CISA ADP v3.1 | 0.4% | 2024-05-28 | |
| CVE-2024-33808 | Campcodes Complete Web-Based School Management System /model/get_timetable.php SQL injection | 9.8CISA ADP v3.1 | 0.5% | 2024-05-28 | |
| CVE-2024-33807 | Campcodes Complete Web-Based School Management System /model/get_teacher_timetable.php SQL injection | 5.4CISA ADP v3.1 | 0.3% | 2024-05-28 | |
| CVE-2024-33806 | Campcodes Complete Web-Based School Management System /model/get_grade.php SQL injection | 9.8CISA ADP v3.1 | 0.5% | 2024-05-28 | |
| CVE-2024-33805 | Campcodes Complete Web-Based School Management System /model/get_student.php SQL injection | 9.8CISA ADP v3.1 | 0.5% | 2024-05-28 | |
| CVE-2024-33804 | Campcodes Complete Web-Based School Management System /model/get_subject.php SQL injection | 6.3CISA ADP v3.1 | 0.3% | 2024-05-28 | |
| CVE-2024-33803 | Campcodes Complete Web-Based School Management System /model/get_exam.php SQL injection | 5.4CISA ADP v3.1 | 0.3% | 2024-05-28 | |
| CVE-2024-33802 | Campcodes Complete Web-Based School Management System /model/get_student_subject.php SQL injection | 6.5CISA ADP v3.1 | 0.4% | 2024-05-28 | |
| CVE-2024-33801 | Campcodes Complete Web-Based School Management System /model/get_subject_routing.php SQL injection | 9.8CISA ADP v3.1 | 0.5% | 2024-05-28 | |
| CVE-2024-33800 | Campcodes Complete Web-Based School Management System /model/get_student1.php SQL injection | 9.8CISA ADP v3.1 | 0.5% | 2024-05-28 | |
| CVE-2024-33799 | Campcodes Complete Web-Based School Management System /model/get_teacher.php SQL injection | 9.8CISA ADP v3.1 | 0.5% | 2024-05-28 | |
| CVE-2024-33450 | Finereport v.8.0 SQL injection | 7.5CISA ADP v3.1 | 0.5% | 2024-05-28 | |
| CVE-2024-33402 | Campcodes Complete Web-Based School Management System /model/approve_petty_cash.php SQL injection | 8.1CISA ADP v3.1 | 0.4% | 2024-05-28 | |
| CVE-2024-32944 | ameya/ayame UTAU path traversal | 3.3CISA ADP v3.1 | 0.2% | 2024-05-28 | |
| CVE-2024-30212 | Microchip Harmony 3 Core Module USB SCSI command handling integer overflow | 7.0CNA v4.0 | 0.6% | 2024-05-28 | Exploit codeFix |
| CVE-2024-30165 | Amazon AWS Client VPN buffer overflow | 7.1CISA ADP v3.1 | 0.2% | 2024-05-28 | |
| CVE-2024-30164 | Amazon AWS Client VPN buffer overflow | 6.7CISA ADP v3.1 | 0.3% | 2024-05-28 | |
| CVE-2024-29078 | esMind MosP kintai kanri incorrect permission assignment | 7.5CISA ADP v3.1 | 0.4% | 2024-05-28 | |
| CVE-2024-29072 | Foxit Reader privilege escalation | 8.2CNA v3.1 | 0.5% | 2024-05-28 | Fix |
| CVE-2024-28886 | ameya/ayame UTAU OS command injection | 8.4CISA ADP v3.1 | 0.7% | 2024-05-28 | |
| CVE-2024-28880 | esMind MosP kintai kanri path traversal | 6.5CISA ADP v3.1 | 0.6% | 2024-05-28 | |
| CVE-2024-28793 | IBM Engineering Workflow Management cross-site scripting | 4.9CNA v3.1 | 0.3% | 2024-05-28 | Fix |
| CVE-2024-28061 | Apiris Kafeo embedded database security feature bypass | 6.3CISA ADP v3.1 | 0.3% | 2024-05-28 | |
| CVE-2024-28060 | Apiris Kafeo DLL hijacking | 7.3CISA ADP v3.1 | 0.2% | 2024-05-28 | |
| CVE-2024-26024 | SUBNET Substation Server Reliance on insufficiently Trustworthy component | 8.6CNA v4.0 | 0.2% | 2024-05-28 | Fix |
| CVE-2024-24963 | AutomationDirect P3-550E stack-based buffer overflow | 9.8CNA v3.1 | 1.2% | 2024-05-28 | Fix |
| CVE-2024-24962 | AutomationDirect P3-550E stack-based buffer overflow | 9.8CNA v3.1 | 1.2% | 2024-05-28 | Fix |
| CVE-2024-24959 | AutomationDirect P3-550E out-of-bounds write | 8.2CNA v3.1 | 0.5% | 2024-05-28 | Fix |
| CVE-2024-24958 | AutomationDirect P3-550E out-of-bounds write | 8.2CNA v3.1 | 0.5% | 2024-05-28 | Fix |
| CVE-2024-24957 | AutomationDirect P3-550E out-of-bounds write | 8.2CNA v3.1 | 0.5% | 2024-05-28 | Fix |
| CVE-2024-24956 | AutomationDirect P3-550E out-of-bounds write | 8.2CNA v3.1 | 0.5% | 2024-05-28 | Fix |
| CVE-2024-24955 | AutomationDirect P3-550E out-of-bounds write | 8.2CNA v3.1 | 0.5% | 2024-05-28 | Fix |
| CVE-2024-24954 | AutomationDirect P3-550E out-of-bounds write | 8.2CNA v3.1 | 0.5% | 2024-05-28 | Fix |
| CVE-2024-24947 | AutomationDirect P3-550E heap-based buffer overflow | 8.2CNA v3.1 | 0.8% | 2024-05-28 | Fix |
| CVE-2024-24946 | AutomationDirect P3-550E heap-based buffer overflow | 8.2CNA v3.1 | 0.8% | 2024-05-28 | Fix |
| CVE-2024-24919 | Check Point Quantum Security Gateways information disclosure | 8.6CNA v3.1 | 100.0% | 2024-05-28 | KEVNucleiMetasploitEmerging ThreatsExploit codeFix |
| CVE-2024-24851 | AutomationDirect P3-550E heap-based buffer overflow | 7.5CNA v3.1 | 1.4% | 2024-05-28 | Fix |
| CVE-2024-24686 | libigl readOFF functionality stack-based buffer overflow | 7.8CNA v3.1 | 0.5% | 2024-05-28 | Exploit code |
| CVE-2024-24685 | libigl readOFF functionality stack-based buffer overflow | 7.8CNA v3.1 | 0.5% | 2024-05-28 | Exploit code |
| CVE-2024-24684 | libigl readOFF functionality stack-based buffer overflow | 7.8CNA v3.1 | 0.7% | 2024-05-28 | Exploit code |
| CVE-2024-24584 | libigl readMSH functionality out-of-bounds read | 4.3CNA v3.1 | 0.5% | 2024-05-28 | |
| CVE-2024-24583 | libigl readMSH functionality out-of-bounds read | 4.3CNA v3.1 | 0.5% | 2024-05-28 | |
| CVE-2024-23951 | libigl readMSH functionality improper array index validation | 8.8CNA v3.1 | 0.9% | 2024-05-28 | |
| CVE-2024-23950 | libigl readMSH functionality improper array index validation | 8.8CNA v3.1 | 0.9% | 2024-05-28 | |
| CVE-2024-23949 | libigl readMSH functionality improper array index validation | 8.8CNA v3.1 | 0.9% | 2024-05-28 | |
| CVE-2024-23948 | libigl readMSH functionality improper array index validation | 8.8CNA v3.1 | 0.9% | 2024-05-28 | |
| CVE-2024-23947 | libigl readMSH functionality improper array index validation | 8.8CNA v3.1 | 0.9% | 2024-05-28 | |
| CVE-2024-23601 | AutomationDirect P3-550E scan_lib.bin functionality code injection | 9.8CNA v3.1 | 0.7% | 2024-05-28 | Fix |
| CVE-2024-23580 | HCL DRYiCE Optibot Reset Station is impacted by insecure encryption of One-Time Passwords (OTPs) | 6.5CNA v3.1 | 0.2% | 2024-05-28 | |
| CVE-2024-23579 | HCL DRYiCE Optibot Reset Station is impacted by insecure encryption of security questions | 6.5CNA v3.1 | 0.2% | 2024-05-28 | |
| CVE-2024-23315 | AutomationDirect P3-550E improper access control | 7.5CNA v3.1 | 1.0% | 2024-05-28 | Fix |
| CVE-2024-22641 | tcpdf unrestricted file upload | 7.5CISA ADP v3.1 | 1.1% | 2024-05-28 | Exploit codeFix |
| CVE-2024-22590 | Kwik TLS engine vulnerability | 9.1CISA ADP v3.1 | 0.6% | 2024-05-28 | |
| CVE-2024-22187 | AutomationDirect P3-550E improper access control | 9.1CNA v3.1 | 1.0% | 2024-05-28 | Fix |
| CVE-2024-22181 | libigl readNODE functionality out-of-bounds write | 7.8CNA v3.1 | 0.4% | 2024-05-28 | |
| CVE-2024-21785 | AutomationDirect P3-550E active debug code | 9.8CNA v3.1 | 1.5% | 2024-05-28 | Fix |
| CVE-2024-5434 | Weak encoding for password vulnerability in Campbell Scientific CSI Web Server and RTMC | 6.9CNA v4.0 | 0.2% | 2024-05-28 | Fix |
| CVE-2024-5433 | Path traversal in Campbell Scientific CSI Web Server and RTMC | 5.3CNA v4.0 | 0.5% | 2024-05-28 | Fix |
| CVE-2024-5428 | SourceCodester Simple Online Bidding System save_product cross-site request forgery | 4.3v3.1 | 0.3% | 2024-05-28 | |
| CVE-2024-5415 | Cross-site scripting (XSS) vulnerability on PhpMyBackupPro | 7.1CNA v3.1 | 0.3% | 2024-05-28 | |
| CVE-2024-5414 | Cross-site scripting (XSS) vulnerability on PhpMyBackupPro | 7.1CNA v3.1 | 0.3% | 2024-05-28 | |
| CVE-2024-5413 | Cross-site scripting (XSS) vulnerability on PhpMyBackupPro | 6.1NVD v3.1 | 0.3% | 2024-05-28 | |
| CVE-2024-5411 | ORing IAP-420 command injection | 8.8NVD v3.1 | 23.4% | 2024-05-28 | |
| CVE-2024-5410 | ORing IAP-420 stored cross-site scripting | 5.4NVD v3.1 | 13.7% | 2024-05-28 | |
| CVE-2024-5274 | Google Chromium V8 type confusion | 9.6NVD v3.1 | 7.5% | 2024-05-28 | KEVExploit codeKCVFix |
| CVE-2024-4429 | Cross-site request forgery vulnerability in iManager | 5.4CNA v3.1 | 0.2% | 2024-05-28 | Fix |
| CVE-2024-3969 | XML external entity injection vulnerability in iManager | 7.8CNA v3.1 | 0.5% | 2024-05-28 | Fix |
| CVE-2024-3657 | Red Hat Directory Server 389-ds-base: Potential denial of service | 7.5CNA v3.1 | 1.3% | 2024-05-28 | Fix |
| CVE-2024-2451 | Improper fingerprint validation in the TeamViewer Client | 6.4CNA v3.1 | 0.1% | 2024-05-28 | Fix |
| CVE-2024-2199 | Red Hat Directory Server userPassword modification denial of service | 5.7CNA v3.1 | 0.6% | 2024-05-28 | Fix |
| CVE-2024-36428 | orangehrm SQL injection | 8.1CISA ADP v3.1 | 1.7% | 2024-05-27 | |
| CVE-2024-36426 | TARGIT Decision Suite session token cleartext transmission | 7.5CISA ADP v3.1 | 0.3% | 2024-05-27 | |
| CVE-2024-36384 | Pointsharp Cryptshare Server notification messages cross-site scripting | 6.1CISA ADP v3.1 | 0.3% | 2024-05-27 | |
| CVE-2024-36383 | Logpoint SAML Authentication incorrectly resolved name or reference | 5.3CISA ADP v3.1 | 0.4% | 2024-05-27 | Fix |
| CVE-2024-36105 | dbt-labs dbt-core dbt allows Binding to an Unrestricted IP Address via socketsocket | 5.3CNA v3.1 | 0.7% | 2024-05-27 | Fix |
| CVE-2024-36037 | ManageEngine ADAudit Plus insufficient access control | 5.5CNA v3.1 | 0.5% | 2024-05-27 | Fix |
| CVE-2024-36036 | ManageEngine ADAudit Plus insufficient access control | 4.2CNA v3.1 | 0.4% | 2024-05-27 | Fix |
| CVE-2024-35297 | aviplugins.com WP Booking cross-site scripting | 4.7CISA ADP v3.1 | 0.4% | 2024-05-27 | Fix |
| CVE-2024-35291 | Chris Younger Splunk Config Explorer cross-site scripting | 6.1CISA ADP v3.1 | 0.3% | 2024-05-27 | |
| CVE-2024-35238 | Denial of service of Minder Server from maliciously crafted GitHub attestations | 5.3CNA v3.1 | 0.5% | 2024-05-27 | Fix |
| CVE-2024-35237 | ZelnickB mit-identibot MIT IdentiBot User-Kerberos Mapping Publicly Available | 7.5CNA v3.1 | 0.5% | 2024-05-27 | |
| CVE-2024-35236 | Audiobookshelf cross-site-scripting vulnerability via crafted ebooks | 4.8CNA v3.1 | 0.8% | 2024-05-27 | Fix |
| CVE-2024-35231 | rack-contrib profiler middleware denial of service | 8.6CNA v3.1 | 0.7% | 2024-05-27 | Fix |
| CVE-2024-35229 | matter-labs era-compiler-solidity ZKsync Era evaluation order of Yul function arguments | 5.3CNA v3.1 | 0.4% | 2024-05-27 | Fix |
| CVE-2024-35219 | OpenAPITools openapi-generator OpenAPI Generator Online arbitrary file read/Delete | 8.3CNA v3.1 | 3.6% | 2024-05-27 | NucleiFix |
| CVE-2024-35182 | GHSL-2024-014 Meshery SQL injection | 8.1NVD v3.1 | 1.6% | 2024-05-27 | Fix |
| CVE-2024-35181 | GHSL-2024-013 Meshery SQL injection | 8.1NVD v3.1 | 1.6% | 2024-05-27 | Fix |
| CVE-2024-34923 | Avocent DSR2030 and SVIP1020 Appliance firmware reflected cross-site scripting | 6.1CISA ADP v3.1 | 0.3% | 2024-05-27 | |
| CVE-2024-34477 | fogproject execution with unnecessary privileges | 7.8CISA ADP v3.1 | 0.3% | 2024-05-27 | |
| CVE-2024-32978 | Kaminari insecure file permissions | 6.6CNA v3.1 | 0.6% | 2024-05-27 | Fix |
| CVE-2024-29415 | Ip SSRF improper categorization in isPublic | 8.1CISA ADP v3.1 | 8.3% | 2024-05-27 | Fix |
| CVE-2024-27314 | ManageEngine ServiceDesk Plus stored XSS | 2.4CNA v3.1 | 1.9% | 2024-05-27 | Fix |
| CVE-2024-27310 | ManageEngine ADSelfService Plus DOS | 5.3CNA v3.1 | 2.3% | 2024-05-27 | Fix |
| CVE-2024-26289 | Remote Code Inclusion vulnerability in multiple PMB Versions | 9.8v3.1 | 0.6% | 2024-05-27 | Fix |
| CVE-2024-5409 | Cross-site scripting vulnerability in RhinOS from SaltOS | 6.1NVD v3.1 | 0.3% | 2024-05-27 | Fix |
| CVE-2024-5408 | Cross-site scripting vulnerability in RhinOS from SaltOS | 6.1NVD v3.1 | 0.3% | 2024-05-27 | Fix |
| CVE-2024-5407 | Code injection vulnerability in RhinOS from SaltOS | 9.8v3.1 | 0.6% | 2024-05-27 | Fix |
| CVE-2024-5406 | Wtriple WinNMP index page contact form cross-site scripting | 6.3CNA v3.1 | 0.3% | 2024-05-27 | |
| CVE-2024-5405 | Wtriple WinNMP Redis management page cross-site scripting | 6.3CNA v3.1 | 0.3% | 2024-05-27 | |
| CVE-2024-5403 | ASKEY 5G NR Small Cell command injection | 7.2CNA v3.1 | 0.6% | 2024-05-27 | |
| CVE-2024-5400 | Openfind Mail2000 OS command injection | 8.8CNA v3.1 | 0.6% | 2024-05-27 | Fix |
| CVE-2024-5399 | Openfind Mail2000 OS command injection | 7.2CNA v3.1 | 0.6% | 2024-05-27 | Fix |
| CVE-2024-5397 | itsourcecode Online Student Enrollment System instructorSubjects.php SQL injection | 8.8v3.1 | 0.6% | 2024-05-27 | |
| CVE-2024-5396 | itsourcecode Online Student Enrollment System newfaculty.php SQL injection | 8.8v3.1 | 0.6% | 2024-05-27 | |
| CVE-2024-5395 | itsourcecode Online Student Enrollment System listofinstructor.php SQL injection | 8.8v3.1 | 0.6% | 2024-05-27 | |
| CVE-2024-5394 | itsourcecode Online Student Enrollment System newDept.php SQL injection | 8.8v3.1 | 0.6% | 2024-05-27 | |
| CVE-2024-5393 | itsourcecode Online Student Enrollment System listofcourse.php SQL injection | 8.8v3.1 | 0.5% | 2024-05-27 | |
| CVE-2024-5392 | itsourcecode Online Student Enrollment System editSubject.php SQL injection | 8.8v3.1 | 0.6% | 2024-05-27 | |
| CVE-2024-5391 | itsourcecode Online Student Enrollment System listofsubject.php SQL injection | 8.8v3.1 | 0.6% | 2024-05-27 | |
| CVE-2024-5390 | itsourcecode Online Student Enrollment System listofstudent.php SQL injection | 8.8v3.1 | 0.6% | 2024-05-27 | |
| CVE-2024-5385 | oretnom23 Online Car Wash Booking System cross-site scripting | 4.1v3.1 | 0.5% | 2024-05-27 | |
| CVE-2024-5384 | SourceCodester Facebook News Feed Like index.php SQL injection | 9.8v3.1 | 0.8% | 2024-05-27 | |
| CVE-2024-5035 | TP-Link Archer C5400X RFTest unauthenticated command injection | 8.8CNA v4.0 | 3.2% | 2024-05-27 | Fix |
| CVE-2024-4535 | KKProgressbar2 Free WordPress plugin Progress Bar deletion via CSRF | 8.8CISA ADP v3.1 | 0.3% | 2024-05-27 | |
| CVE-2024-4534 | KKProgressbar2 Free WordPress plugin stored XSS via CSRF | 6.1CISA ADP v3.1 | 0.2% | 2024-05-27 | |
| CVE-2024-4533 | KKProgressbar2 Free WordPress plugin Admin+ SQL injection | 6.5CISA ADP v3.1 | 0.5% | 2024-05-27 | Fix |
| CVE-2024-4532 | Business Card WordPress plugin arbitrary Card deletion via CSRF | 6.4CISA ADP v3.1 | 0.3% | 2024-05-27 | |
| CVE-2024-4531 | Business Card WordPress plugin Card Edit via CSRF | 7.1CISA ADP v3.1 | 0.3% | 2024-05-27 | |
| CVE-2024-4530 | Business Card WordPress plugin Category Edit via CSRF | 6.3CISA ADP v3.1 | 0.2% | 2024-05-27 | |
| CVE-2024-4529 | Business Card WordPress plugin Category deletion via CSRF | 5.0CISA ADP v3.1 | 0.2% | 2024-05-27 | |
| CVE-2024-3939 | Ditty WordPress plugin Author+ stored XSS | 5.4CISA ADP v3.1 | 0.4% | 2024-05-27 | Fix |
| CVE-2024-3933 | Eclipse Open J9 With -Xgc:concurrentScavenge on IBM Z, could write/read outside of a buffer | 5.3CNA v3.1 | 0.2% | 2024-05-27 | Fix |
| CVE-2024-0851 | SQLi in Grup Arge Energy and Control Systems's Smartpower | 10.0CNA v4.0 | 0.4% | 2024-05-27 | |
| CVE-2024-36255 | Mattermost post actions can run playbook checklist task commands | 5.7CNA v3.1 | 0.2% | 2024-05-26 | Fix |
| CVE-2024-36241 | Mattermost /playbook add slash command allows viewing arbitrary post contents | 3.1CNA v3.1 | 0.3% | 2024-05-26 | Fix |
| CVE-2024-36056 | Marvin Test Solutions HW.exe Hw64.sys driver privilege escalation | 5.4CISA ADP v3.1 | 0.2% | 2024-05-26 | |
| CVE-2024-36055 | Marvin Test Solutions HW.exe Hw64.sys driver denial of service | 5.5CISA ADP v3.1 | 0.1% | 2024-05-26 | |
| CVE-2024-36054 | Marvin Test Solutions HW.exe Hw64.sys driver information disclosure | 7.4CISA ADP v3.1 | 0.2% | 2024-05-26 | |
| CVE-2024-34454 | Nintendo Wii U OS SSL certificate verification vulnerability | 7.4CISA ADP v3.1 | 0.2% | 2024-05-26 | |
| CVE-2024-34152 | Mattermost Playbook Run Metadata leak to Guest | 4.3CNA v3.1 | 0.3% | 2024-05-26 | Fix |
| CVE-2024-34029 | Mattermost AD/LDAP Group Members leak | 4.3CNA v3.1 | 0.3% | 2024-05-26 | Fix |
| CVE-2024-32045 | Mattermost playbook run link to private channel grants channel access | 5.9CNA v3.1 | 0.2% | 2024-05-26 | Fix |
| CVE-2024-31859 | Mattermost member promoted to channel admin via playbooks run linking to channel | 4.3CNA v3.1 | 0.2% | 2024-05-26 | Fix |
| CVE-2024-29215 | Mattermost slash commands run in channel without channel membership via playbook task commands | 4.3CNA v3.1 | 0.2% | 2024-05-26 | Fix |
| CVE-2024-5383 | lakernote EasyAdmin upload cross-site scripting | 5.4v3.1 | 0.3% | 2024-05-26 | |
| CVE-2024-5381 | itsourcecode Student Information Management System view.php SQL injection | 8.8v3.1 | 0.6% | 2024-05-26 | |
| CVE-2024-5380 | jsy-1 short-url admin.php cross-site scripting | 5.3CNA v4.0 | 0.3% | 2024-05-26 | Fix |
| CVE-2024-5379 | JFinalCMS template cross-site scripting | 5.4v3.1 | 0.4% | 2024-05-26 | |
| CVE-2024-5378 | SourceCodester School Intramurals Student Attendance Management System manage_sy.php SQL injection | 9.8v3.1 | 0.6% | 2024-05-26 | |
| CVE-2024-5377 | SourceCodester Vehicle Management System newvehicle.php unrestricted upload | 9.8v3.1 | 0.9% | 2024-05-26 | |
| CVE-2024-5376 | Kashipara College Management System view_each_faculty.php cross-site scripting | 6.1v3.1 | 0.4% | 2024-05-26 | |
| CVE-2024-5375 | Kashipara College Management System submit_student.php cross-site scripting | 6.1v3.1 | 0.4% | 2024-05-26 | |
| CVE-2024-5374 | Kashipara College Management System submit_new_faculty.php cross-site scripting | 6.1v3.1 | 0.4% | 2024-05-26 | |
| CVE-2024-5373 | Kashipara College Management System submit_login.php cross-site scripting | 6.1v3.1 | 0.4% | 2024-05-26 | |
| CVE-2024-5372 | Kashipara College Management System submit_extracurricular_activity.php cross-site scripting | 6.1v3.1 | 0.4% | 2024-05-26 | |
| CVE-2024-5371 | Kashipara College Management System submit_enroll_student.php cross-site scripting | 6.1v3.1 | 0.4% | 2024-05-26 | |
| CVE-2024-5370 | Kashipara College Management System submit_enroll_staff.php cross-site scripting | 6.1v3.1 | 0.4% | 2024-05-26 | |
| CVE-2024-5369 | Kashipara College Management System submit_admin.php cross-site scripting | 6.1v3.1 | 0.4% | 2024-05-26 | |
| CVE-2024-5368 | Kashipara College Management System delete_faculty.php cross-site scripting | 6.1v3.1 | 0.4% | 2024-05-26 | |
| CVE-2024-5367 | Kashipara College Management System each_extracurricula_activities.php cross-site scripting | 6.1v3.1 | 0.4% | 2024-05-26 | |
| CVE-2024-5366 | SourceCodester Best House Rental Management System edit-cate.php SQL injection | 6.5v3.1 | 0.5% | 2024-05-26 | |
| CVE-2024-5365 | SourceCodester Best House Rental Management System manage_payment.php SQL injection | 6.5v3.1 | 0.5% | 2024-05-26 | |
| CVE-2024-5364 | SourceCodester Best House Rental Management System manage_tenant.php SQL injection | 6.5v3.1 | 0.5% | 2024-05-26 | |
| CVE-2024-5363 | SourceCodester Best House Rental Management System manage_user.php SQL injection | 6.5v3.1 | 0.5% | 2024-05-26 | |
| CVE-2024-5362 | SourceCodester Online Hospital Management System departmentDoctor.php SQL injection | 9.8v3.1 | 0.7% | 2024-05-26 | |
| CVE-2024-5361 | PHPGurukul Zoo Management System normal-bwdates-reports-details.php SQL injection | 7.2v3.1 | 0.4% | 2024-05-26 | |
| CVE-2024-5360 | PHPGurukul Zoo Management System foreigner-bwdates-reports-details.php SQL injection | 9.8v3.1 | 0.4% | 2024-05-26 | |
| CVE-2024-5359 | PHPGurukul Zoo Management System foreigner-search.php SQL injection | 9.8v3.1 | 0.4% | 2024-05-26 | |
| CVE-2024-5358 | PHPGurukul Zoo Management System normal-search.php SQL injection | 9.8v3.1 | 0.4% | 2024-05-26 | |
| CVE-2024-5357 | PHPGurukul Zoo Management System forgot-password.php SQL injection | 9.8v3.1 | 0.5% | 2024-05-26 | |
| CVE-2024-5356 | anji-plus AJ-Report testTransform;swagger-ui SQL injection | 9.8v3.1 | 1.0% | 2024-05-26 | Exploit code |
| CVE-2024-5355 | anji-plus AJ-Report IGroovyHandler command injection | 9.8v3.1 | 3.2% | 2024-05-26 | |
| CVE-2024-5354 | anji-plus AJ-Report detailByCode information disclosure | 6.5v3.1 | 0.6% | 2024-05-26 | |
| CVE-2024-5353 | anji-plus AJ-Report ZIP file decompress path traversal | 9.8v3.1 | 0.8% | 2024-05-26 | |
| CVE-2024-5352 | anji-plus AJ-Report validationRules deserialization | 9.8v3.1 | 0.8% | 2024-05-26 | |
| CVE-2024-5351 | anji-plus AJ-Report Javascript getValueFromJs deserialization | 9.8v3.1 | 0.8% | 2024-05-26 | |
| CVE-2024-5272 | Mattermost run Details leak to guest via webhook event custom_playbooks_playbook_run_updated | 4.3CNA v3.1 | 0.3% | 2024-05-26 | Fix |
| CVE-2024-5270 | Mattermost SAML to email switch possible when email signin is disabled | 4.3CNA v3.1 | 0.3% | 2024-05-26 | Fix |
| CVE-2024-4286 | Improper neutralization of Special Elements in mintplex-labs/anything-llm | 4.9CNA v3.0 | 0.4% | 2024-05-26 | Fix |
| CVE-2024-30056 | Microsoft Edge (Chromium-based) information disclosure | 7.1CNA v3.1 | 1.6% | 2024-05-25 | Exploit codeFix |
| CVE-2024-5350 | anji-plus AJ-Report pageList SQL injection | 9.8v3.1 | 0.6% | 2024-05-25 | |
| CVE-2024-5340 | Ruijie RG-UAC sub_commit.php os command injection | 7.2v3.1 | 7.9% | 2024-05-25 | |
| CVE-2024-5339 | Ruijie RG-UAC online_check.php os command injection | 7.2v3.1 | 7.9% | 2024-05-25 | |
| CVE-2024-5338 | Ruijie RG-UAC online.php os command injection | 7.2v3.1 | 7.9% | 2024-05-25 | |
| CVE-2024-5337 | Ruijie RG-UAC user_commit.php os command injection | 7.2v3.1 | 9.1% | 2024-05-25 | |
| CVE-2024-5336 | Ruijie RG-UAC vlan_add_commit.php addVlan os command injection | 7.2v3.1 | 9.1% | 2024-05-25 | |
| CVE-2024-5229 | Primary Addon for Elementor WordPress plugin stored cross-site scripting | 6.4CNA v3.1 | 0.3% | 2024-05-25 | Fix |
| CVE-2024-5220 | ND Shortcodes WordPress plugin authenticated (Author+) stored cross-site scripting | 5.4v3.1 | 0.3% | 2024-05-25 | Fix |
| CVE-2024-5218 | Reviews and Rating Google Reviews WordPress plugin stored cross-site scripting | 6.4CNA v3.1 | 0.4% | 2024-05-25 | Fix |
| CVE-2024-4858 | Testimonial Carousel For Elementor WordPress plugin missing authorization to limited setting update | 5.3v3.1 | 0.4% | 2024-05-25 | Fix |
| CVE-2024-4045 | Popup Builder by OptinMonster WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.3% | 2024-05-25 | Fix |
| CVE-2024-36361 | Pug allows JavaScript code execution if an application accepts untrusted input | 6.8CISA ADP v3.1 | 0.5% | 2024-05-24 | Fix |
| CVE-2024-36079 | Vaultize file upload handler path traversal | 6.5CISA ADP v3.1 | 0.6% | 2024-05-24 | Exploit code |
| CVE-2024-36049 | Aptos Wisal payroll accounting Windows client hard-coded credentials | 6.5CISA ADP v3.1 | 0.5% | 2024-05-24 | |
| CVE-2024-35618 | pingcap tidb null pointer dereference | 7.5CISA ADP v3.1 | 0.4% | 2024-05-24 | |
| CVE-2024-35595 | Xintongda OA file preview feature unrestricted file upload | 6.1CISA ADP v3.1 | 0.4% | 2024-05-24 | |
| CVE-2024-35593 | Raingad IM file preview feature unrestricted file upload | 5.5CISA ADP v3.1 | 0.2% | 2024-05-24 | |
| CVE-2024-35592 | Upload function of Box-IM v2.0 An arbitrary file upload | 9.6CISA ADP v3.1 | 0.6% | 2024-05-24 | |
| CVE-2024-35591 | Zoneland O2OA arbitrary file upload | 5.4CISA ADP v3.1 | 0.4% | 2024-05-24 | |
| CVE-2024-35396 | TOTOLINK CP900L hard-coded credentials | 9.8CISA ADP v3.1 | 0.5% | 2024-05-24 | |
| CVE-2024-35395 | TOTOLINK CP900L hard-coded password | 8.8CISA ADP v3.1 | 0.4% | 2024-05-24 | |
| CVE-2024-35388 | TOTOLINK NR1800X stack-based buffer overflow | 8.8CISA ADP v3.1 | 2.5% | 2024-05-24 | |
| CVE-2024-35387 | TOTOLINK LR350 stack-based buffer overflow | 9.8CISA ADP v3.1 | 6.1% | 2024-05-24 | |
| CVE-2024-35374 | Mocodo vulnerable to SQL injection in `/web/generate.php` | 9.8CISA ADP v3.1 | 2.8% | 2024-05-24 | Fix |
| CVE-2024-35373 | Mocodo Online special element injection | 9.8CISA ADP v3.1 | 1.2% | 2024-05-24 | |
| CVE-2024-35340 | Tenda FH1206 command injection | 8.6CISA ADP v3.1 | 1.2% | 2024-05-24 | |
| CVE-2024-35339 | Tenda FH1206 code injection | 9.8CISA ADP v3.1 | 1.8% | 2024-05-24 | |
| CVE-2024-35232 | Github.com/huandu/facebook may expose access_token in error message | 3.7CNA v3.1 | 0.5% | 2024-05-24 | Fix |
| CVE-2024-34995 | svnWebUI import function vulnerability | 4.3CISA ADP v3.1 | 0.3% | 2024-05-24 | |
| CVE-2024-33809 | pingcap tidb buffer overflow | 6.5CISA ADP v3.1 | 0.4% | 2024-05-24 | |
| CVE-2024-33471 | AVTECH Room Alert 4E sensor settings vulnerability | 7.2CISA ADP v3.1 | 0.3% | 2024-05-24 | |
| CVE-2024-33470 | AVTECH Room Alert 4E SMTP email settings vulnerability | 4.9CISA ADP v3.1 | 0.2% | 2024-05-24 | |
| CVE-2024-31510 | open-quantum-safe liboqs weak cryptographic algorithm | 9.8CISA ADP v3.1 | 0.6% | 2024-05-24 | |
| CVE-2024-22588 | Kwik does not discard unused encryption keys | 6.5CISA ADP v3.1 | 0.3% | 2024-05-24 | Fix |
| CVE-2024-5318 | Missing authorization in GitLab | 4.0CNA v3.1 | 0.4% | 2024-05-24 | Fix |
| CVE-2024-5315 | Dolibarr vulnerable to SQL injection | 9.1v3.1 | 34.5% | 2024-05-24 | NucleiFix |
| CVE-2024-5314 | Dolibarr vulnerable to SQL injection | 9.1v3.1 | 0.6% | 2024-05-24 | Fix |
| CVE-2024-5312 | Cross-site scripting vulnerability in PHP Server Monitor | 6.3CNA v3.1 | 0.3% | 2024-05-24 | Fix |
| CVE-2024-5310 | JFinalCMS content cross-site scripting | 5.4v3.1 | 0.4% | 2024-05-24 | |
| CVE-2024-5273 | Jenkins Report Info Plugin path traversal | 4.3CISA ADP v3.1 | 0.8% | 2024-05-24 | Fix |
| CVE-2024-5205 | Videojs HTML5 Player WordPress plugin stored cross-site scripting | 6.4CNA v3.1 | 0.3% | 2024-05-24 | Fix |
| CVE-2024-5142 | XSS in Hubshare's social module | 7.0CNA v4.0 | 0.3% | 2024-05-24 | Fix |
| CVE-2024-5060 | LottieFiles WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.4% | 2024-05-24 | Fix |
| CVE-2024-4544 | Pie Register - Social Sites Login (Add on) WordPress plugin authentication bypass | 9.8CNA v3.1 | 0.6% | 2024-05-24 | Fix |
| CVE-2024-4485 | The Plus Addons for Elementor WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.3% | 2024-05-24 | Fix |
| CVE-2024-4484 | The Plus Addons for Elementor WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.7% | 2024-05-24 | Fix |
| CVE-2024-4455 | YITH WooCommerce Ajax Search WordPress plugin unauthenticated stored cross-site scripting | 6.1NVD v3.1 | 1.0% | 2024-05-24 | NucleiFix |
| CVE-2024-4409 | WP-ViperGB WordPress plugin cross-site request forgery | 4.3CNA v3.1 | 0.2% | 2024-05-24 | Fix |
| CVE-2024-4366 | Spectra WordPress Gutenberg Blocks plugin authenticated (Author+) stored cross-site scripting | 5.4v3.1 | 0.3% | 2024-05-24 | Fix |
| CVE-2024-4037 | WP Photo Album Plus WordPress plugin unauthenticated arbitrary shortcode execution | 7.3v3.1 | 0.5% | 2024-05-24 | Fix |
| CVE-2024-3718 | The Plus Addons for Elementor WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.4% | 2024-05-24 | Fix |
| CVE-2024-3557 | WP Go Maps (formerly WP Google Maps) WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.3% | 2024-05-24 | Fix |
| CVE-2024-2784 | The Plus Addons for Elementor WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.3% | 2024-05-24 | Fix |
| CVE-2024-2618 | Elementor Header and Footer Builder WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.3% | 2024-05-24 | Fix |
| CVE-2024-1376 | Event post WordPress plugin missing authorization | 4.3CNA v3.1 | 0.3% | 2024-05-24 | Fix |
| CVE-2024-1332 | Custom Fonts Host Your Fonts Locally WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.3% | 2024-05-24 | Fix |
| CVE-2024-1134 | SEOPress On-site SEO WordPress plugin authenticated (Contributor+) stored cross-site scripting | 5.4v3.1 | 0.3% | 2024-05-24 | Fix |
| CVE-2024-0893 | Schema App Structured Data WordPress plugin missing authorization | 4.3v3.1 | 0.3% | 2024-05-24 | Fix |
| CVE-2024-0867 | Email Log WordPress plugin unauthenticated Hook injection | 8.1CNA v3.1 | 0.8% | 2024-05-24 | Fix |
| CVE-2024-36013 | Linux kernel Bluetooth L2CAP connection handling use-after-free | 8.8CNA v3.1 | 0.5% | 2024-05-23 | Fix |
| CVE-2024-36012 | Linux kernel Bluetooth MSFT extension use-after-free | 7.8CNA v3.1 | 0.2% | 2024-05-23 | Fix |
| CVE-2024-36011 | Linux kernel Bluetooth HCI BIG sync event handler null pointer dereference | 5.5v3.1 | 0.2% | 2024-05-23 | Fix |
| CVE-2024-35570 | Inxedu arbitrary file upload | 9.8CISA ADP v3.1 | 0.9% | 2024-05-23 | |
| CVE-2024-35375 | DedeCMS unrestricted file upload | 9.8CISA ADP v3.1 | 0.5% | 2024-05-23 | |
| CVE-2024-35224 | Stored cross-site scripting (XSS) in OpenProject | 7.6CNA v3.1 | 0.3% | 2024-05-23 | Fix |
| CVE-2024-35223 | Dapr API token exposure | 5.3CNA v3.1 | 0.4% | 2024-05-23 | Fix |
| CVE-2024-35222 | IFrames Bypass Origin Checks for Tauri API Access Control | 5.9CNA v3.1 | 0.3% | 2024-05-23 | Fix |
| CVE-2024-35197 | Byron gitoxide Windows device name handling vulnerability | 5.4CNA v3.1 | 0.4% | 2024-05-23 | Fix |
| CVE-2024-35186 | Byron gitoxide gix traversal outside working tree enables arbitrary code execution | 8.8CNA v3.1 | 0.8% | 2024-05-23 | Fix |
| CVE-2024-35091 | J2eeFAST SQL injection | 9.8CISA ADP v3.1 | 0.4% | 2024-05-23 | |
| CVE-2024-35090 | J2eeFAST SQL injection | 8.2CISA ADP v3.1 | 0.3% | 2024-05-23 | |
| CVE-2024-35086 | J2eeFAST SQL injection | 9.8CISA ADP v3.1 | 0.5% | 2024-05-23 | |
| CVE-2024-35085 | J2eeFAST SQL injection | 5.4CISA ADP v3.1 | 0.2% | 2024-05-23 | |
| CVE-2024-35084 | J2eeFAST SQL injection | 9.8CISA ADP v3.1 | 0.4% | 2024-05-23 | |
| CVE-2024-35083 | J2eeFAST SQL injection | 8.8CISA ADP v3.1 | 0.4% | 2024-05-23 | |
| CVE-2024-35082 | J2eeFAST SQL injection | 6.3CISA ADP v3.1 | 0.3% | 2024-05-23 | |
| CVE-2024-35081 | Luckyframeweb path traversal | 7.5CISA ADP v3.1 | 0.5% | 2024-05-23 | |
| CVE-2024-35080 | Inxedu gok4 method arbitrary file upload | 9.8CISA ADP v3.1 | 0.6% | 2024-05-23 | |
| CVE-2024-35079 | Inxedu uploadAudio method arbitrary file upload | 9.8CISA ADP v3.1 | 0.6% | 2024-05-23 | |
| CVE-2024-34936 | Campcodes Complete Web-Based School Management System /view/event1.php SQL injection | 8.6CISA ADP v3.1 | 0.4% | 2024-05-23 | |
| CVE-2024-34935 | Campcodes Complete Web-Based School Management System SQL injection | 9.8CISA ADP v3.1 | 0.5% | 2024-05-23 | |
| CVE-2024-34934 | Campcodes Complete Web-Based School Management System SQL injection | 9.8CISA ADP v3.1 | 0.5% | 2024-05-23 | |
| CVE-2024-34933 | Campcodes Complete Web-Based School Management System /model/update_grade.php SQL injection | 6.3CISA ADP v3.1 | 0.3% | 2024-05-23 | |
| CVE-2024-34932 | Campcodes Complete Web-Based School Management System /model/update_exam.php SQL injection | 9.8CISA ADP v3.1 | 0.5% | 2024-05-23 | |
| CVE-2024-34931 | Campcodes Complete Web-Based School Management System /model/update_subject.php SQL injection | 9.8CISA ADP v3.1 | 0.5% | 2024-05-23 | |
| CVE-2024-34930 | Campcodes Complete Web-Based School Management System /model/all_events1.php SQL injection | 5.3CISA ADP v3.1 | 0.2% | 2024-05-23 | |
| CVE-2024-34929 | Campcodes Complete Web-Based School Management System /view/find_friends.php SQL injection | 9.8CISA ADP v3.1 | 0.5% | 2024-05-23 | |
| CVE-2024-34928 | Campcodes Complete Web-Based School Management System SQL injection | 7.3CISA ADP v3.1 | 0.3% | 2024-05-23 | |
| CVE-2024-34927 | Campcodes Complete Web-Based School Management System /model/update_classroom.php SQL injection | 9.8CISA ADP v3.1 | 0.5% | 2024-05-23 | |
| CVE-2024-34060 | dfir-iris iris-evtx-module arbitrary file write in IRIS EVTX Pipeline | 8.8CNA v3.1 | 1.0% | 2024-05-23 | Fix |
| CVE-2024-32969 | vantage6 collaboration admins can extend their influence by expanding the collaboration | 2.7CNA v3.1 | 0.3% | 2024-05-23 | Fix |
| CVE-2024-31843 | Italtel Embrace OS command injection | 4.1CISA ADP v3.1 | 0.5% | 2024-05-23 | |
| CVE-2024-30280 | Adobe Acrobat Pro DC AcroForm Annotation out-of-bounds read remote code execution | 7.8CNA v3.1 | 6.6% | 2024-05-23 | Fix |
| CVE-2024-30279 | Adobe Acrobat Reader DC JPEG2000 File Parsing out-of-bounds write remote code execution | 7.8CNA v3.1 | 5.9% | 2024-05-23 | Fix |
| CVE-2024-28188 | Jupyter-scheduler's endpoint is missing authentication | 5.3CNA v3.1 | 0.3% | 2024-05-23 | Fix |
| CVE-2024-26139 | OpenCTI authenticated privilege escalation | 8.3CNA v3.1 | 0.4% | 2024-05-23 | Fix |
| CVE-2024-5299 | D-Link D-View execMonitorScript exposed dangerous method remote code execution | 8.8CNA v3.0 | 1.8% | 2024-05-23 | Fix |
| CVE-2024-5298 | D-Link D-View queryDeviceCustomMonitorResult exposed dangerous method remote code execution | 8.8CNA v3.0 | 1.8% | 2024-05-23 | Fix |
| CVE-2024-5297 | D-Link D-View executeWmicCmd command injection remote code execution | 8.8CNA v3.0 | 1.9% | 2024-05-23 | Fix |
| CVE-2024-5296 | D-Link D-View use of hard-coded cryptographic key authentication bypass | 9.8CNA v3.0 | 1.1% | 2024-05-23 | Fix |
| CVE-2024-5295 | D-Link G416 flupl self command injection remote code execution | 8.8v3.1 | 2.0% | 2024-05-23 | Fix |
| CVE-2024-5294 | D-Link DIR-3040 prog.cgi websSecurityHandler memory leak denial of service | 6.5v3.1 | 0.5% | 2024-05-23 | Fix |
| CVE-2024-5293 | D-Link DIR-2640 HTTP Referer stack-based buffer overflow remote code execution | 8.8CNA v3.0 | 1.6% | 2024-05-23 | Fix |
| CVE-2024-5292 | D-Link Network Assistant uncontrolled search path element local privilege escalation | 7.8NVD v3.1 | 0.5% | 2024-05-23 | |
| CVE-2024-5291 | D-Link DIR-2150 GetDeviceSettings Target command injection remote code execution | 8.8CNA v3.0 | 2.0% | 2024-05-23 | Fix |
| CVE-2024-5279 | Qiwen Netdisk File Rename cross-site scripting | 5.3CNA v4.0 | 0.3% | 2024-05-23 | |
| CVE-2024-5264 | Network Key Transfer with AES KHT vulnerability in Luna EFT | 5.9CNA v3.1 | 0.4% | 2024-05-23 | |
| CVE-2024-5258 | Authorization bypass through user-controlled key in GitLab | 4.4CNA v3.1 | 0.3% | 2024-05-23 | Fix |
| CVE-2024-5247 | NETGEAR ProSAFE Network Management System UpLoadServlet unrestricted file upload | 8.8v3.1 | 26.9% | 2024-05-23 | Fix |
| CVE-2024-5246 | NETGEAR ProSAFE Network Management System Tomcat remote code execution | 8.8CISA ADP v3.1 | 31.3% | 2024-05-23 | Exploit codeFix |
| CVE-2024-5245 | NETGEAR ProSAFE Network Management System default credentials local privilege escalation | 7.8v3.1 | 0.6% | 2024-05-23 | Fix |
| CVE-2024-5244 | TP-Link Omada ER605 Reliance on Security through Obscurity vulnerability | 4.2v3.1 | 0.3% | 2024-05-23 | KCV |
| CVE-2024-5243 | TP-Link Omada ER605 buffer overflow remote code execution | 7.5v3.1 | 0.8% | 2024-05-23 | Exploit codeKCV |
| CVE-2024-5242 | TP-Link Omada ER605 stack-based buffer overflow remote code execution | 7.5v3.1 | 0.8% | 2024-05-23 | KCV |
| CVE-2024-5241 | Huashi Private Cloud CDN Live Streaming Acceleration Server ipconfig_new.php os command injection | 5.1CNA v4.0 | 1.9% | 2024-05-23 | |
| CVE-2024-5240 | Campcodes Complete Web-Based School Management System unread_msg.php SQL injection | 6.5v3.1 | 0.4% | 2024-05-23 | |
| CVE-2024-5239 | Campcodes Complete Web-Based School Management System timetable_update_form.php SQL injection | 6.5v3.1 | 0.4% | 2024-05-23 | |
| CVE-2024-5238 | Campcodes Complete Web-Based School Management System timetable_insert_form.php SQL injection | 6.5v3.1 | 0.4% | 2024-05-23 | |
| CVE-2024-5237 | Campcodes Complete Web-Based School Management System timetable_grade_wise.php SQL injection | 6.5v3.1 | 0.4% | 2024-05-23 | |
| CVE-2024-5236 | Campcodes Complete Web-Based School Management System teacher_salary_invoice1.php SQL injection | 6.5v3.1 | 0.4% | 2024-05-23 | |
| CVE-2024-5235 | Campcodes Complete Web-Based School Management System teacher_salary_invoice.php SQL injection | 6.5v3.1 | 0.4% | 2024-05-23 | |
| CVE-2024-5234 | Campcodes Complete Web-Based School Management System teacher_salary_history1.php SQL injection | 6.5v3.1 | 0.4% | 2024-05-23 | |
| CVE-2024-5233 | Campcodes Complete Web-Based School Management System teacher_salary_details3.php SQL injection | 6.5v3.1 | 0.4% | 2024-05-23 | |
| CVE-2024-5232 | Campcodes Complete Web-Based School Management System teacher_salary_details2.php SQL injection | 6.5v3.1 | 0.4% | 2024-05-23 | |
| CVE-2024-5231 | Campcodes Complete Web-Based School Management System teacher_salary_details.php SQL injection | 6.5v3.1 | 0.4% | 2024-05-23 | |
| CVE-2024-5230 | EnvaySoft FleetCart information disclosure | 6.9CNA v4.0 | 18.8% | 2024-05-23 | Nuclei |
| CVE-2024-5228 | TP-Link Omada ER605 Comexe DDNS Response Handling heap-based buffer overflow remote code execution | 7.5v3.1 | 0.5% | 2024-05-23 | |
| CVE-2024-5227 | TP-Link Omada ER605 PPTP VPN username command injection remote code execution | 7.5v3.1 | 0.7% | 2024-05-23 | |
| CVE-2024-5202 | Dimensions RM arbitrary file read | 7.7CNA v3.1 | 0.4% | 2024-05-23 | Fix |
| CVE-2024-5201 | Dimensions RM privilege escalation | 8.8CNA v3.1 | 0.4% | 2024-05-23 | Fix |
| CVE-2024-5177 | Hash Elements WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.3% | 2024-05-23 | Fix |
| CVE-2024-5168 | Improper access control vulnerability in Prodys Quantum Audio codec | 9.8CNA v3.1 | 0.5% | 2024-05-23 | |
| CVE-2024-5165 | Eclipse Ditto User interface vulnerable to XSS due to improper neutralization of Input | 6.5CNA v3.1 | 0.5% | 2024-05-23 | Fix |
| CVE-2024-5143 | Certain HP LaserJet Pro Printers missing authentication | 6.8CISA ADP v3.1 | 0.4% | 2024-05-23 | Fix |
| CVE-2024-5085 | Hash Form Drag and Drop Form Builder WordPress plugin unauthenticated PHP object injection | 9.8v3.1 | 0.8% | 2024-05-23 | Fix |
| CVE-2024-5084 | hashthemes Hash Form file upload action unrestricted file upload | 9.8CNA v3.1 | 50.7% | 2024-05-23 | NucleiMetasploitExploit codeFix |
| CVE-2024-4978 | Justice AV Solutions (JAVS) Viewer Installer embedded malicious code | 8.4v3.1 | 26.9% | 2024-05-23 | KEVEmerging ThreatsFix |
| CVE-2024-4895 | wpDataTables WordPress plugin stored cross-site scripting | 4.7CNA v3.1 | 0.4% | 2024-05-23 | Fix |
| CVE-2024-4835 | Improper neutralization of input during web page generation (cross-site scripting) in GitLab | 8.0CNA v3.1 | 0.8% | 2024-05-23 | Fix |
| CVE-2024-4783 | jQuery T(-) Countdown Widget WordPress plugin stored cross-site scripting | 6.4CNA v3.1 | 0.3% | 2024-05-23 | |
| CVE-2024-4779 | Unlimited Elements for Elementor WordPress plugin SQL injection | 8.8CNA v3.1 | 0.5% | 2024-05-23 | Fix |
| CVE-2024-4706 | WordPress + Microsoft Office 365 / Azure AD WordPress plugin stored cross-site scripting | 6.4CNA v3.1 | 0.3% | 2024-05-23 | Fix |
| CVE-2024-4662 | Oxygen Builder WordPress plugin authenticated (Contributor+) remote code execution | 8.8CNA v3.1 | 0.9% | 2024-05-23 | Fix |
| CVE-2024-4575 | LayerSlider Authenticated (Contributor+) stored cross-site scripting via ls_search_form shortcode | 6.4CNA v3.1 | 0.3% | 2024-05-23 | Fix |
| CVE-2024-4486 | Awesome Contact Form7 for Elementor WordPress plugin stored cross-site scripting | 6.4CNA v3.1 | 0.3% | 2024-05-23 | Fix |
| CVE-2024-4471 | Best Addons For Elementor export_content function deserialization of untrusted data | 8.0CNA v3.1 | 0.6% | 2024-05-23 | Fix |
| CVE-2024-4431 | LA-Studio Element Kit for Elementor WordPress plugin stored cross-site scripting | 6.4CNA v3.1 | 0.4% | 2024-05-23 | Fix |
| CVE-2024-4399 | CAS for WordPress unauthenticated SSRF | 9.1CISA ADP v3.1 | 1.8% | 2024-05-23 | Nuclei |
| CVE-2024-4388 | CAS for WordPress unauthenticated arbitrary file access | 7.5CISA ADP v3.1 | 0.7% | 2024-05-23 | |
| CVE-2024-4378 | Premium Addons for Elementor WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.3% | 2024-05-23 | Fix |
| CVE-2024-4365 | Advanced iFrame WordPress plugin authenticated (Contributor+) stored cross-site scripting | 6.4CNA v3.1 | 0.3% | 2024-05-23 | Fix |
| CVE-2024-4347 | WP Fastest Cache WordPress plugin authenticated (Administrator+) arbitrary file deletion | 7.2CNA v3.1 | 0.9% | 2024-05-23 | Fix |
| CVE-2024-4043 | WP Ultimate Post Grid WordPress plugin stored cross-site scripting | 6.4CNA v3.1 | 0.3% | 2024-05-23 | Fix |
| CVE-2024-3997 | Prime Slider Addons For Elementor WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.3% | 2024-05-23 | Fix |
| CVE-2024-3920 | Flattr WordPress plugin Admin+ stored XSS | 3.5CISA ADP v3.1 | 0.4% | 2024-05-23 | |
| CVE-2024-3918 | Pet Manager WordPress plugin Contributor+ stored XSS | 4.8CISA ADP v3.1 | 0.4% | 2024-05-23 | |
| CVE-2024-3917 | Pet Manager WordPress plugin reflected XSS | 6.1CISA ADP v3.1 | 0.3% | 2024-05-23 | |
| CVE-2024-3711 | Brizy Page Builder WordPress plugin missing authorization | 4.3CNA v3.1 | 0.3% | 2024-05-23 | Fix |
| CVE-2024-3648 | ShareThis Share Buttons WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.3% | 2024-05-23 | Fix |
| CVE-2024-3626 | Email Subscribers by Icegram Express WordPress plugin unauthorized access | 4.3CNA v3.1 | 0.4% | 2024-05-23 | Fix |
| CVE-2024-3594 | IDonate WordPress plugin Admin+ stored XSS | 8.7CISA ADP v3.1 | 0.5% | 2024-05-23 | Fix |
| CVE-2024-3201 | WP DSGVO Tools (GDPR) WordPress plugin stored cross-site scripting | 6.4CNA v3.1 | 0.3% | 2024-05-23 | Fix |
| CVE-2024-3065 | PayPal Pay Now WordPress plugin stored cross-site scripting | 4.4CNA v3.1 | 0.3% | 2024-05-23 | |
| CVE-2024-2874 | Allocation of resources without limits or throttling in GitLab | 6.5CNA v3.1 | 0.6% | 2024-05-23 | Fix |
| CVE-2024-2861 | ProfilePress WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.3% | 2024-05-23 | Fix |
| CVE-2024-2301 | Certain HP LaserJet Pro Devices cross-site scripting | 7.6CISA ADP v3.1 | 0.3% | 2024-05-23 | Fix |
| CVE-2024-2220 | Button contact VR WordPress plugin Admin+ stored XSS | 3.5CISA ADP v3.1 | 0.3% | 2024-05-23 | Fix |
| CVE-2024-2038 | Visual Website Collaboration, Feedback and Project Management WordPress plugin unauthorized access | 7.5CNA v3.1 | 0.5% | 2024-05-23 | Fix |
| CVE-2024-1947 | Improper handling of highly compressed data (data amplification) in GitLab | 4.3CNA v3.1 | 0.5% | 2024-05-23 | Fix |
| CVE-2024-1855 | WPCafe WordPress plugin unauthenticated blind server-side request forgery | 5.3CNA v3.1 | 0.4% | 2024-05-23 | Fix |
| CVE-2024-1815 | Spectra WordPress Gutenberg Blocks plugin stored cross-site scripting | 5.4v3.1 | 0.3% | 2024-05-23 | Fix |
| CVE-2024-1814 | Spectra WordPress Gutenberg Blocks plugin stored cross-site scripting | 5.4v3.1 | 0.3% | 2024-05-23 | Fix |
| CVE-2024-1803 | EmbedPress WordPress plugin unauthorized access | 4.3CNA v3.1 | 0.3% | 2024-05-23 | Fix |
| CVE-2024-36077 | Qlik Sense Enterprise for Windows privilege escalation | 8.8CNA v3.1 | 0.6% | 2024-05-22 | |
| CVE-2024-36010 | Linux kernel igb firmware version string vulnerability | 5.5v3.1 | 0.2% | 2024-05-22 | Fix |
| CVE-2024-35627 | tileserver-gl data endpoint cross-site scripting | 6.1CISA ADP v3.1 | 1.0% | 2024-05-22 | Nuclei |
| CVE-2024-35561 | idcCMS cross-site request forgery | 5.4CISA ADP v3.1 | 0.2% | 2024-05-22 | |
| CVE-2024-35560 | idcCMS cross-site request forgery | 4.3CISA ADP v3.1 | 0.2% | 2024-05-22 | |
| CVE-2024-35559 | idcCMS cross-site request forgery | 8.8CISA ADP v3.1 | 0.3% | 2024-05-22 | |
| CVE-2024-35558 | idcCMS cross-site request forgery | 8.8CISA ADP v3.1 | 0.3% | 2024-05-22 | |
| CVE-2024-35557 | idcCMS cross-site request forgery | 5.5CISA ADP v3.1 | 0.2% | 2024-05-22 | |
| CVE-2024-35556 | idcCMS cross-site request forgery | 8.8CISA ADP v3.1 | 0.3% | 2024-05-22 | |
| CVE-2024-35555 | idcCMS cross-site request forgery | 6.3CISA ADP v3.1 | 0.2% | 2024-05-22 | |
| CVE-2024-35554 | idcCMS cross-site request forgery | 5.4CISA ADP v3.1 | 0.2% | 2024-05-22 | |
| CVE-2024-35553 | idcCMS cross-site request forgery | 8.3CISA ADP v3.1 | 0.2% | 2024-05-22 | |
| CVE-2024-35552 | idcCMS cross-site request forgery | 8.8CISA ADP v3.1 | 0.3% | 2024-05-22 | |
| CVE-2024-35551 | idcCMS cross-site request forgery | 4.3CISA ADP v3.1 | 0.2% | 2024-05-22 | |
| CVE-2024-35550 | idcCMS cross-site request forgery | 6.3CISA ADP v3.1 | 0.2% | 2024-05-22 | |
| CVE-2024-35475 | OpenKM cross-site request forgery | 6.4CISA ADP v3.1 | 0.3% | 2024-05-22 | |
| CVE-2024-35409 | Webidsupport WeBid SQL injection | 9.8CISA ADP v3.1 | 0.5% | 2024-05-22 | |
| CVE-2024-35362 | ShopEx ECShop cross-site scripting | 5.4CISA ADP v3.1 | 0.3% | 2024-05-22 | |
| CVE-2024-35162 | WPFactory Download Plugins and Themes from Dashboard path traversal | 6.5CISA ADP v3.1 | 0.7% | 2024-05-22 | Fix |
| CVE-2024-34448 | Ghost allows CSV injection during member CSV export | 8.8CISA ADP v3.1 | 0.7% | 2024-05-22 | Fix |
| CVE-2024-33228 | Insyde Software SEG Windows Driver segwindrvx64.sys code injection | 8.4CISA ADP v3.1 | 0.3% | 2024-05-22 | |
| CVE-2024-33227 | Nicomsoft WinI2C/DDC ddcdrv.sys privilege escalation | 8.8CISA ADP v3.1 | 0.5% | 2024-05-22 | |
| CVE-2024-33226 | Wistron TBT Force Power Control Access64.sys privilege escalation | 9.9CISA ADP v3.1 | 0.4% | 2024-05-22 | |
| CVE-2024-33225 | Realtek High Definition Audio Function Driver RTKVHD64.sys code injection | 7.8CISA ADP v3.1 | 0.2% | 2024-05-22 | |
| CVE-2024-33224 | An issue in the component rtkio64.sys of Realtek Semiconductor Corp Realtek lO Driver v1.008.0823.2017 allows attackers to escalate privileges and execute arbitrary code via sending crafted IOCTL requests. | 8.4CISA ADP v3.1 | 0.2% | 2024-05-22 | |
| CVE-2024-33223 | An issue in the component IOMap64.sys of ASUSTeK Computer Inc ASUS GPU TweakII v1.4.5.2 allows attackers to escalate privileges and execute arbitrary code via sending crafted IOCTL requests. | 8.8CISA ADP v3.1 | 0.5% | 2024-05-22 | |
| CVE-2024-33222 | ASUS ATSZIO Driver ATSZIO64.sys privilege escalation | 8.4CISA ADP v3.1 | 0.2% | 2024-05-22 | |
| CVE-2024-33221 | ASUS BIOS Flash Driver AsusBSItf.sys privilege escalation | 7.8CISA ADP v3.1 | 0.2% | 2024-05-22 | |
| CVE-2024-33220 | ASUS AI Suite exposed IOCTL without access control | 8.8CISA ADP v3.1 | 0.7% | 2024-05-22 | |
| CVE-2024-33219 | ASUS Sabertooth X99 exposed IOCTL without access control | 7.8CISA ADP v3.1 | 0.3% | 2024-05-22 | |
| CVE-2024-33218 | ASUS USB 3.0 Boost Storage Driver AsUpIO64.sys privilege escalation | 7.8CISA ADP v3.1 | 0.2% | 2024-05-22 | |
| CVE-2024-32988 | i-plug 'OfferBox' App hard-coded credentials | 7.5CISA ADP v3.1 | 0.4% | 2024-05-22 | |
| CVE-2024-31904 | IBM App Connect Enterprise denial of service | 6.5CNA v3.1 | 0.5% | 2024-05-22 | Fix |
| CVE-2024-31895 | IBM App Connect Enterprise information disclosure | 4.3CNA v3.1 | 0.3% | 2024-05-22 | Fix |
| CVE-2024-31894 | IBM App Connect Enterprise information disclosure | 4.3CNA v3.1 | 0.3% | 2024-05-22 | Fix |
| CVE-2024-31893 | IBM App Connect Enterprise information disclosure | 4.3CNA v3.1 | 0.3% | 2024-05-22 | Fix |
| CVE-2024-31617 | litespeedtech openlitespeed resource exhaustion | 5.3CISA ADP v3.1 | 0.4% | 2024-05-22 | Fix |
| CVE-2024-31396 | appleple a-blog cms Ver.3.1.x series code injection | 6.6CISA ADP v3.1 | 0.4% | 2024-05-22 | Fix |
| CVE-2024-31395 | appleple a-blog cms Ver.3.1.x series cross-site scripting | 6.1CISA ADP v3.1 | 0.3% | 2024-05-22 | Fix |
| CVE-2024-31394 | appleple a-blog cms Ver.3.1.x series path traversal | 6.5CISA ADP v3.1 | 0.7% | 2024-05-22 | Fix |
| CVE-2024-31340 | TP-Link Tether improper certificate validation | 4.8CISA ADP v3.1 | 0.2% | 2024-05-22 | |
| CVE-2024-30420 | appleple a-blog cms Ver.3.1.x series server-side request forgery | 4.4CISA ADP v3.1 | 0.3% | 2024-05-22 | Fix |
| CVE-2024-30419 | appleple a-blog cms Ver.3.1.x series cross-site scripting | 5.4CISA ADP v3.1 | 0.2% | 2024-05-22 | Fix |
| CVE-2024-29853 | Veeam Agent authentication bypass | 7.8CNA v3.0 | 0.2% | 2024-05-22 | Fix |
| CVE-2024-29852 | Veeam Backup and Replication improper handling of insufficient permissions | 2.7CNA v3.0 | 0.5% | 2024-05-22 | Fix |
| CVE-2024-29851 | Veeam Backup and Replication authentication bypass by replay | 7.2CNA v3.0 | 0.9% | 2024-05-22 | Fix |
| CVE-2024-29850 | Veeam Backup and Replication authentication bypass by replay | 8.8CNA v3.0 | 0.8% | 2024-05-22 | Fix |
| CVE-2024-29849 | Veeam Backup and Replication improper authentication | 9.8CNA v3.0 | 38.4% | 2024-05-22 | Exploit codeFix |
| CVE-2024-29421 | xmedcon DICOM library buffer overflow | 6.2CISA ADP v3.1 | 0.2% | 2024-05-22 | Fix |
| CVE-2024-29392 | Silverpeas Core vulnerable to cross-site scripting | 5.4CISA ADP v3.1 | 0.4% | 2024-05-22 | |
| CVE-2024-27264 | IBM Performance tools for i privilege escalation | 7.4CNA v3.1 | 0.1% | 2024-05-22 | Fix |
| CVE-2024-25738 | VuFind server-side request forgery (SSRF) | 9.1CISA ADP v3.1 | 0.7% | 2024-05-22 | Fix |
| CVE-2024-25737 | VuFind server-side request forgery (SSRF) | 6.1CISA ADP v3.1 | 0.5% | 2024-05-22 | Fix |
| CVE-2024-22026 | Ivanti EPMM local privilege escalation | 6.7v3.1 | 1.1% | 2024-05-22 | Exploit codeFix |
| CVE-2024-21791 | SQL injection in ADAudit Plus | 4.7CNA v3.1 | 2.2% | 2024-05-22 | Fix |
| CVE-2024-20363 | Cisco Firepower Threat Defense Software authentication bypass by spoofing | 5.8CNA v3.1 | 0.4% | 2024-05-22 | Fix |
| CVE-2024-20361 | Cisco Firepower Management Center access control weakness | 5.8CNA v3.1 | 0.4% | 2024-05-22 | Fix |
| CVE-2024-20360 | Cisco Firepower Management Center SQL injection | 8.8CNA v3.1 | 0.8% | 2024-05-22 | Fix |
| CVE-2024-20355 | Cisco Adaptive Security Appliance (ASA) Software missing authorization | 5.0CNA v3.1 | 0.3% | 2024-05-22 | Fix |
| CVE-2024-20293 | Cisco Adaptive Security Appliance (ASA) Software interpretation conflict | 5.8CNA v3.1 | 0.4% | 2024-05-22 | Fix |
| CVE-2024-20261 | Cisco Firepower Threat Defense Software logic flaw | 5.8CNA v3.1 | 0.4% | 2024-05-22 | Fix |
| CVE-2024-5196 | Arris VAP2500 tools_command.php command injection | 7.2v3.1 | 23.6% | 2024-05-22 | Emerging Threats |
| CVE-2024-5195 | Arris VAP2500 diag_s.php command injection | 7.2v3.1 | 23.6% | 2024-05-22 | Emerging Threats |
| CVE-2024-5194 | Arris VAP2500 assoc_table.php command injection | 7.2v3.1 | 3.6% | 2024-05-22 | |
| CVE-2024-5193 | Ritlabs TinyWeb Server request CRLF injection | 6.9CNA v4.0 | 0.7% | 2024-05-22 | Fix |
| CVE-2024-5166 | Insecure direct object reference in Looker | 6.5CNA v3.1 | 0.2% | 2024-05-22 | |
| CVE-2024-5160 | Google Chrome Dawn heap-based buffer overflow | 8.8v3.1 | 0.6% | 2024-05-22 | Fix |
| CVE-2024-5159 | Google Chrome ANGLE heap-based buffer overflow | 8.8v3.1 | 0.6% | 2024-05-22 | Fix |
| CVE-2024-5158 | Google Chrome V8 type confusion | 8.1v3.1 | 0.6% | 2024-05-22 | Fix |
| CVE-2024-5157 | Google Chrome Scheduling use-after-free | 8.8v3.1 | 0.8% | 2024-05-22 | Fix |
| CVE-2024-5147 | WPZOOM Addons for Elementor WordPress plugin unauthenticated local file inclusion | 9.8CNA v3.1 | 1.0% | 2024-05-22 | Fix |
| CVE-2024-5092 | Elegant Addons for elementor WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.3% | 2024-05-22 | |
| CVE-2024-5031 | MemberPress WordPress plugin blind server-side request forgery | 6.4NVD v3.1 | 0.3% | 2024-05-22 | Fix |
| CVE-2024-5025 | MemberPress WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.3% | 2024-05-22 | Fix |
| CVE-2024-4980 | WPKoi Templates for Elementor WordPress plugin stored cross-site scripting | 6.4CNA v3.1 | 0.3% | 2024-05-22 | Fix |
| CVE-2024-4971 | LearnPress WordPress LMS plugin stored cross-site scripting | 5.4v3.1 | 0.3% | 2024-05-22 | Fix |
| CVE-2024-4896 | WPB Elementor Addons WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.3% | 2024-05-22 | Fix |
| CVE-2024-4563 | Progress MOVEit Automation configuration export function weak cryptographic algorithm | 6.1CNA v3.1 | 0.2% | 2024-05-22 | Fix |
| CVE-2024-4454 | WithSecure Elements Endpoint Protection link following local privilege escalation | 7.8v3.1 | 0.4% | 2024-05-22 | |
| CVE-2024-4453 | GStreamer EXIF Metadata Parsing integer overflow remote code execution | 7.8v3.1 | 1.6% | 2024-05-22 | Fix |
| CVE-2024-4443 | Business Directory Plugin Easy Listing Directories for WordPress unauthenticated SQL injection | 7.5NVD v3.1 | 10.4% | 2024-05-22 | Reported exploitedNucleiExploit codeFix |
| CVE-2024-4362 | SiteOrigin Widgets Bundle WordPress plugin authenticated stored cross-site scripting | 5.4v3.1 | 0.4% | 2024-05-22 | Fix |
| CVE-2024-4267 | Remote code execution in parisneo/lollms-webui | 9.8v3.1 | 1.5% | 2024-05-22 | |
| CVE-2024-4262 | Piotnet Addons For Elementor WordPress plugin stored cross-site scripting | 6.4CNA v3.1 | 0.3% | 2024-05-22 | Fix |
| CVE-2024-4261 | Responsive Contact Form Builder and Lead Generation WordPress plugin arbitrary shortcode execution | 5.4CNA v3.1 | 0.3% | 2024-05-22 | Fix |
| CVE-2024-4157 | Contact Form Plugin by Fluent Forms for Quiz WordPress plugin PHP object injection | 8.8v3.1 | 0.7% | 2024-05-22 | Exploit codeFix |
| CVE-2024-3927 | Element Pack Elementor Addons WordPress plugin form Submission admin email bypass | 5.3CNA v3.1 | 0.4% | 2024-05-22 | Fix |
| CVE-2024-3926 | Element Pack Elementor Addons WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.3% | 2024-05-22 | Fix |
| CVE-2024-3671 | Print-O-Matic WordPress plugin stored cross-site scripting | 6.4CNA v3.1 | 0.3% | 2024-05-22 | |
| CVE-2024-3666 | Opal Estate Pro Property Management and Submission WordPress plugin stored cross-site scripting | 6.4CNA v3.1 | 0.3% | 2024-05-22 | |
| CVE-2024-3663 | WP Scraper WordPress plugin missing authorization to arbitrary Page/Post creation | 4.3CNA v3.1 | 0.3% | 2024-05-22 | Fix |
| CVE-2024-3611 | Toolbar Extras for Elementor and More WordPress plugin stored cross-site scripting | 6.4CNA v3.1 | 0.3% | 2024-05-22 | |
| CVE-2024-3519 | Media Library Assistant WordPress plugin reflected cross-site scripting via lang | 6.1CNA v3.1 | 0.3% | 2024-05-22 | Fix |
| CVE-2024-3518 | Media Library Assistant WordPress plugin authenticated (Contributor+) SQL injection via shortcode | 6.5NVD v3.1 | 0.5% | 2024-05-22 | Fix |
| CVE-2024-3495 | Country State City Dropdown CF7 WordPress plugin unauthenticated SQL injection | 9.8CNA v3.1 | 13.6% | 2024-05-22 | Reported exploitedNucleiExploit codeFix |
| CVE-2024-3198 | WP Font Awesome Share Icons WordPress plugin stored cross-site scripting | 6.4CNA v3.1 | 0.3% | 2024-05-22 | |
| CVE-2024-3066 | Elegant Addons for elementor WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.3% | 2024-05-22 | |
| CVE-2024-2953 | LuckyWP Table of Contents WordPress plugin authenticated (Contributor+) stored cross-site scripting | 4.8v3.1 | 0.3% | 2024-05-22 | Fix |
| CVE-2024-2163 | Ninja Beaver Add-ons for Beaver Builder WordPress plugin stored cross-site scripting | 6.4CNA v3.1 | 0.3% | 2024-05-22 | |
| CVE-2024-2119 | LuckyWP Table of Contents WordPress plugin reflected cross-site scripting | 6.1v3.1 | 0.4% | 2024-05-22 | Fix |
| CVE-2024-2088 | NextScripts: Social Networks Auto-Poster WordPress plugin sensitive information exposure | 6.5NVD v3.1 | 0.3% | 2024-05-22 | Fix |
| CVE-2024-2036 | ApplyOnline WordPress plugin unauthorized access | 4.3CNA v3.1 | 0.4% | 2024-05-22 | Fix |
| CVE-2024-1762 | NextScripts: Social Networks Auto-Poster WordPress plugin stored cross-site scripting | 6.1v3.1 | 0.4% | 2024-05-22 | Fix |
| CVE-2024-1446 | NextScripts: Social Networks Auto-Poster WordPress plugin cross-site request forgery | 4.3v3.1 | 0.2% | 2024-05-22 | Fix |
| CVE-2024-0632 | Automatic Translator with Google Translate WordPress plugin stored cross-site scripting | 4.4CNA v3.1 | 0.3% | 2024-05-22 | |
| CVE-2024-0453 | AI ChatBot WordPress plugin unauthorized access | 7.7v3.1 | 0.4% | 2024-05-22 | Fix |
| CVE-2024-0452 | AI ChatBot WordPress plugin unauthorized access | 7.7v3.1 | 0.4% | 2024-05-22 | Fix |
| CVE-2024-0451 | AI ChatBot WordPress plugin unauthorized access | 5.0v3.1 | 0.4% | 2024-05-22 | Fix |
| CVE-2024-36052 | RARLAB WinRAR escape sequence injection | 7.5CISA ADP v3.1 | 0.7% | 2024-05-21 | Fix |
| CVE-2024-36039 | PyMySQL SQL injection | 6.3CISA ADP v3.1 | 0.7% | 2024-05-21 | Exploit codeFix |
| CVE-2024-35386 | Cesanta mJS denial of service | 7.5CISA ADP v3.1 | 0.6% | 2024-05-21 | |
| CVE-2024-35385 | Cesanta mJS out-of-bounds read | 4.3CISA ADP v3.1 | 0.5% | 2024-05-21 | |
| CVE-2024-35384 | Cesanta mJS denial of service | 5.5CISA ADP v3.1 | 0.3% | 2024-05-21 | |
| CVE-2024-35361 | MTab Bookmark getIcon endpoint SQL injection | 9.8CISA ADP v3.1 | 0.5% | 2024-05-21 | |
| CVE-2024-35220 | @fastify/session reuses destroyed session cookie | 7.4CNA v3.1 | 0.4% | 2024-05-21 | Fix |
| CVE-2024-35218 | Umbraco CMS vulnerable to stored XSS on Content page through Markdown Editor Preview Pane | 4.2CNA v3.1 | 0.4% | 2024-05-21 | Fix |
| CVE-2024-35180 | omero-web OMERO.web JSONP callback vulnerability | 6.1CNA v3.1 | 0.3% | 2024-05-21 | Fix |
| CVE-2024-35061 | NASA AIT-Core uses unencrypted channels to exchange data over the network | 7.3CISA ADP v3.1 | 0.6% | 2024-05-21 | |
| CVE-2024-35060 | nasa AIT-Core cleartext transmission of sensitive information | 7.5CISA ADP v3.1 | 0.5% | 2024-05-21 | |
| CVE-2024-35059 | NASA AIT-Core vulnerable to remote code execution | 7.5CISA ADP v3.1 | 0.5% | 2024-05-21 | |
| CVE-2024-35058 | NASA AIT-Core vulnerable to remote code execution | 7.5CISA ADP v3.1 | 0.4% | 2024-05-21 | |
| CVE-2024-35057 | NASA AIT-Core vulnerable to remote code execution | 7.5CISA ADP v3.1 | 0.4% | 2024-05-21 | |
| CVE-2024-35056 | NASA AIT-Core vulnerable to SQL injection | 9.8CISA ADP v3.1 | 0.6% | 2024-05-21 | |
| CVE-2024-34274 | OpenBD 20210306203917-6cbe797 is vulnerable to Deserialization of Untrusted Data. The cookies bdglobals and bdclient_spot of the OpenBD software uses serialized data, which can be used to execute arbitrary code on the system. NOTE: This vulnerability only affects products that are no longer supporte | 3.9CISA ADP v3.1 | 0.2% | 2024-05-21 | |
| CVE-2024-34240 | QDOCS Smart School cross-site scripting | 6.1CISA ADP v3.1 | 0.4% | 2024-05-21 | |
| CVE-2024-34071 | Umbraco-CMS open redirect Bypass Protection | 6.1CNA v3.1 | 0.4% | 2024-05-21 | Fix |
| CVE-2024-33529 | ILIAS OS command injection | 7.2CISA ADP v3.1 | 0.9% | 2024-05-21 | Fix |
| CVE-2024-33528 | ILIAS stored cross-site scripting | 4.7CISA ADP v3.1 | 0.5% | 2024-05-21 | Fix |
| CVE-2024-33527 | ILIAS stored cross-site scripting | 5.4CISA ADP v3.1 | 0.5% | 2024-05-21 | Fix |
| CVE-2024-33526 | ILIAS stored cross-site scripting | 7.1CISA ADP v3.1 | 0.5% | 2024-05-21 | Fix |
| CVE-2024-33525 | ILIAS organizational units import feature stored cross-site scripting | 4.3CISA ADP v3.1 | 0.5% | 2024-05-21 | |
| CVE-2024-31989 | Argo CD Redis cache weak cryptographic algorithm | 9.1CNA v3.1 | 1.5% | 2024-05-21 | Exploit codeFix |
| CVE-2024-31847 | Italtel Embrace cross-site scripting | 6.1v3.1 | 0.4% | 2024-05-21 | |
| CVE-2024-31845 | Italtel Embrace log injection | 5.3CISA ADP v3.1 | 0.4% | 2024-05-21 | |
| CVE-2024-31844 | Italtel Embrace information disclosure through error messages | 5.3v3.1 | 0.5% | 2024-05-21 | |
| CVE-2024-31840 | Italtel Embrace cleartext storage of sensitive information | 6.5v3.1 | 0.4% | 2024-05-21 | |
| CVE-2024-31757 | TeraByte Unlimited Image for Windows TBOFLHelper driver privilege escalation | 7.8CISA ADP v3.1 | 0.1% | 2024-05-21 | |
| CVE-2024-31756 | MarvinTest Solutions Hardware Access Driver Hw65.sys privilege escalation | 7.8CISA ADP v3.1 | 0.1% | 2024-05-21 | |
| CVE-2024-27130 | QNAP QTS and QuTS hero stack-based buffer overflow | 7.2CNA v3.1 | 37.5% | 2024-05-21 | Exploit codeFix |
| CVE-2024-27129 | QNAP QTS and QuTS hero buffer overflow | 6.4CNA v3.1 | 0.7% | 2024-05-21 | Fix |
| CVE-2024-27128 | QNAP QTS and QuTS hero buffer overflow | 6.4CNA v3.1 | 0.7% | 2024-05-21 | Fix |
| CVE-2024-27127 | QNAP QTS and QuTS hero double free | 7.2CNA v3.1 | 0.7% | 2024-05-21 | Fix |
| CVE-2024-25724 | RTI Connext Professional buffer overflow | 7.3v3.1 | 0.2% | 2024-05-21 | Fix |
| CVE-2024-22275 | VMware vCenter Server arbitrary file read | 4.9CNA v3.1 | 1.0% | 2024-05-21 | Exploit codeFix |
| CVE-2024-22274 | VMware vCenter Server code injection | 7.2CNA v3.1 | 2.5% | 2024-05-21 | Exploit codeFix |
| CVE-2024-22273 | VMware ESXi out-of-bounds read | 8.1CNA v3.1 | 0.2% | 2024-05-21 | Fix |
| CVE-2024-21902 | QNAP QTS and QuTS hero incorrect permission assignment | 6.4CNA v3.1 | 0.4% | 2024-05-21 | Fix |
| CVE-2024-21683 | Atlassian Confluence Data Center code injection | 7.2CNA v3.1 | 88.3% | 2024-05-21 | NucleiMetasploitEmerging ThreatsExploit codeFix |
| CVE-2024-5040 | LCDS LAquis SCADA path traversal | 8.5CNA v4.0 | 0.4% | 2024-05-21 | Fix |
| CVE-2024-4988 | Improper permission control in com.transsion.videocallenhancer | 7.5CISA ADP v3.1 | 0.4% | 2024-05-21 | |
| CVE-2024-4943 | Blocksy WordPress theme authenticated (Contributor+) stored cross-site scripting | 5.4v3.1 | 0.3% | 2024-05-21 | Fix |
| CVE-2024-4876 | HT Mega Absolute Addons For Elementor WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.4% | 2024-05-21 | Fix |
| CVE-2024-4875 | HT Mega Absolute Addons For Elementor WordPress plugin missing authorization to options update | 4.3CNA v3.1 | 0.8% | 2024-05-21 | Exploit codeFix |
| CVE-2024-4710 | UberMenu WordPress plugin stored cross-site scripting | 6.4CNA v3.1 | 0.3% | 2024-05-21 | Fix |
| CVE-2024-4700 | WP Table Builder WordPress Table plugin authenticated (Contributor+) stored cross-site scripting | 5.4v3.1 | 0.3% | 2024-05-21 | Fix |
| CVE-2024-4695 | The Move Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via multiple widgets in all versions up to, and including, 1.3.1 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, | 5.4v3.1 | 0.4% | 2024-05-21 | Fix |
| CVE-2024-4619 | Elementor Website Builder WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.4% | 2024-05-21 | Fix |
| CVE-2024-4566 | ShopLentor WordPress plugin missing authorization to WordPress option modification | 7.1v3.1 | 0.4% | 2024-05-21 | Fix |
| CVE-2024-4553 | WP Shortcodes Plugin Shortcodes Ultimate WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.3% | 2024-05-21 | Fix |
| CVE-2024-4470 | Master Slider Responsive Touch Slider WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.3% | 2024-05-21 | Fix |
| CVE-2024-4452 | ElementsKit Pro WordPress plugin authenticated (Contributor+) stored cross-site scripting | 5.4v3.1 | 0.3% | 2024-05-21 | Fix |
| CVE-2024-4442 | Salon booking system WordPress plugin unauthenticated arbitrary file deletion | 9.1v3.1 | 1.2% | 2024-05-21 | Fix |
| CVE-2024-4435 | Internet Computer ic-stable-structures BTreeMap memory leak when deallocating nodes with overflows | 5.9CNA v3.1 | 0.5% | 2024-05-21 | Fix |
| CVE-2024-4420 | Google Tink denial of service in Tink-cc | 6.8CNA v4.0 | 0.2% | 2024-05-21 | Fix |
| CVE-2024-4372 | Carousel Slider WordPress plugin Editor+ stored XSS | 5.4CISA ADP v3.1 | 0.4% | 2024-05-21 | Fix |
| CVE-2024-4361 | Page Builder by SiteOrigin WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.4% | 2024-05-21 | Fix |
| CVE-2024-4290 | Sailthru Triggermail WordPress plugin Admin+ stored XSS | 7.1CISA ADP v3.1 | 0.4% | 2024-05-21 | |
| CVE-2024-4289 | Sailthru Triggermail WordPress plugin reflected XSS | 6.1CISA ADP v3.1 | 0.4% | 2024-05-21 | |
| CVE-2024-4154 | Incorrect synchronization in lunary-ai/Lunary | 6.5NVD v3.1 | 0.3% | 2024-05-21 | Fix |
| CVE-2024-4061 | Survey Maker WordPress plugin Admin+ stored XSS via plugin settings | 4.8CISA ADP v3.1 | 0.4% | 2024-05-21 | Fix |
| CVE-2024-3345 | ShopLentor WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.4% | 2024-05-21 | Fix |
| CVE-2024-3268 | YouTube Video Gallery by YouTube Showcase WordPress plugin unauthorized access | 5.3CNA v3.1 | 0.3% | 2024-05-21 | Fix |
| CVE-2024-3155 | Post Grid WordPress plugin stored cross-site scripting | 6.4CNA v3.1 | 0.3% | 2024-05-21 | Fix |
| CVE-2024-2189 | Social Icons Widget and Block WordPress plugin Admin+ stored XSS | 6.1CISA ADP v3.1 | 0.4% | 2024-05-21 | Fix |
| CVE-2024-1721 | HYPR Passwordless improper signature verification | 5.6CNA v4.0 | 0.1% | 2024-05-21 | Fix |
| CVE-2024-0816 | Zyxel DX3300-T1 firmware The buffer overflow | 5.5CNA v3.1 | 0.1% | 2024-05-21 | Fix |
| CVE-2024-36009 | Linux kernel AX.25 device reference tracking vulnerability | 7.8CNA v3.1 | 0.2% | 2024-05-20 | Fix |
| CVE-2024-36008 | Linux kernel IPv4 route hint lookup null pointer dereference | 5.5NVD v3.1 | 0.2% | 2024-05-20 | Fix |
| CVE-2024-36007 | Linux kernel mlxsw ACL TCAM rehash vulnerability | 7.8CNA v3.1 | 0.2% | 2024-05-20 | Fix |
| CVE-2024-36006 | Linux kernel mlxsw ACL TCAM chunk migration vulnerability | 5.5NVD v3.1 | 0.2% | 2024-05-20 | Fix |
| CVE-2024-36005 | Linux kernel netfilter nf_tables vulnerability | 5.5NVD v3.1 | 0.2% | 2024-05-20 | Fix |
| CVE-2024-36004 | Linux kernel i40e driver workqueue vulnerability | 5.5NVD v3.1 | 0.2% | 2024-05-20 | Fix |
| CVE-2024-36003 | Linux kernel ice driver VF reset deadlock | 5.5v3.1 | 0.2% | 2024-05-20 | Fix |
| CVE-2024-36002 | Linux kernel dpll pin registration vulnerability | 5.5v3.1 | 0.2% | 2024-05-20 | Fix |
| CVE-2024-36001 | Linux kernel netfs writethrough writes out-of-bounds write | 7.8CNA v3.1 | 0.2% | 2024-05-20 | Fix |
| CVE-2024-36000 | Linux kernel mm/hugetlb reachable assertion | 5.5v3.1 | 0.2% | 2024-05-20 | Fix |
| CVE-2024-35999 | Linux kernel smb3 improper locking | 7.5CNA v3.1 | 0.4% | 2024-05-20 | Fix |
| CVE-2024-35998 | Linux kernel cifs mid result locking deadlock | 7.5CNA v3.1 | 0.4% | 2024-05-20 | Fix |
| CVE-2024-35997 | Linux kernel i2c-hid driver vulnerability | 5.5NVD v3.1 | 0.2% | 2024-05-20 | Fix |
| CVE-2024-35996 | Linux kernel CPU mitigations configuration vulnerability | 5.5NVD v3.1 | 0.2% | 2024-05-20 | Fix |
| CVE-2024-35995 | Linux kernel ACPI CPPC memory access vulnerability | 5.5v3.1 | 0.2% | 2024-05-20 | Fix |
| CVE-2024-35994 | Linux kernel qcom uefisecapp firmware interface memory leak | 7.8CNA v3.1 | 0.2% | 2024-05-20 | Fix |
| CVE-2024-35993 | Linux kernel hugetlb folio type tracking vulnerability | 7.8CNA v3.1 | 0.2% | 2024-05-20 | Fix |
| CVE-2024-35992 | Linux kernel Marvell a3700 comphy driver out-of-bounds read | 5.5v3.1 | 0.2% | 2024-05-20 | Fix |
| CVE-2024-35991 | Linux kernel idxd driver event log workqueue vulnerability | 5.5v3.1 | 0.2% | 2024-05-20 | Fix |
| CVE-2024-35990 | Linux kernel xilinx_dpdma DMA driver vulnerability | 7.8CNA v3.1 | 0.2% | 2024-05-20 | Fix |
| CVE-2024-35989 | Linux kernel idxd driver CPU offline handling vulnerability | 5.5CISA ADP v3.1 | 0.2% | 2024-05-20 | Fix |
| CVE-2024-35988 | Linux kernel RISC-V NOMMU task size vulnerability | 5.5NVD v3.1 | 0.2% | 2024-05-20 | Fix |
| CVE-2024-35987 | Linux kernel RISC-V NOMMU kernel loading vulnerability | 8.4CNA v3.1 | 0.2% | 2024-05-20 | Fix |
| CVE-2024-35986 | Linux kernel tusb1210 USB PHY charger detection use-after-free | 7.0CNA v3.1 | 0.2% | 2024-05-20 | Fix |
| CVE-2024-35985 | Linux kernel EEVDF scheduler null pointer dereference | 5.5v3.1 | 0.2% | 2024-05-20 | Fix |
| CVE-2024-35984 | Linux kernel I2C SMBus core null pointer dereference | 5.5NVD v3.1 | 0.3% | 2024-05-20 | Fix |
| CVE-2024-35983 | Linux kernel CONFIG_NR_CPUS bounds calculation denial of service | 5.5NVD v3.1 | 0.2% | 2024-05-20 | Fix |
| CVE-2024-35982 | Linux kernel batman-adv local translation table infinite loop | 5.5NVD v3.1 | 0.3% | 2024-05-20 | Fix |
| CVE-2024-35981 | Linux kernel virtio_net RSS configuration infinite loop | 5.5v3.1 | 0.2% | 2024-05-20 | Fix |
| CVE-2024-35980 | Linux kernel arm64 TLB range invalidation integer underflow | 8.4CNA v3.1 | 0.2% | 2024-05-20 | Fix |
| CVE-2024-35979 | Linux kernel RAID1 write request use-after-free | 7.8CNA v3.1 | 0.2% | 2024-05-20 | Fix |
| CVE-2024-35978 | Linux kernel Bluetooth HCI request sync memory leak | 5.5NVD v3.1 | 0.3% | 2024-05-20 | Fix |
| CVE-2024-35977 | Linux kernel cros_ec_uart driver race condition | 4.7v3.1 | 0.2% | 2024-05-20 | Fix |
| CVE-2024-35976 | Linux kernel xsk out-of-bounds write | 7.1CNA v3.1 | 0.3% | 2024-05-20 | Fix |
| CVE-2024-35975 | Linux kernel octeontx2 PF transmit scheduler resource leak | 5.5v3.1 | 0.2% | 2024-05-20 | Fix |
| CVE-2024-35974 | Linux kernel block cgroup list on disk rebind vulnerability | 5.5v3.1 | 0.2% | 2024-05-20 | Fix |
| CVE-2024-35973 | Linux kernel Geneve tunnel transmit vulnerability | 5.5CISA ADP v3.1 | 0.3% | 2024-05-20 | Fix |
| CVE-2024-35972 | Linux kernel bnxt_en RDMA auxiliary device memory leak | 5.5v3.1 | 0.2% | 2024-05-20 | Fix |
| CVE-2024-35971 | Linux kernel ks8851 improper locking | 7.5CNA v3.1 | 0.7% | 2024-05-20 | Fix |
| CVE-2024-35970 | Linux kernel AF_UNIX out-of-band data deadlock | 6.3CISA ADP v3.1 | 0.5% | 2024-05-20 | Fix |
| CVE-2024-35969 | Linux kernel IPv6 address list race condition | 8.8CNA v3.1 | 0.4% | 2024-05-20 | Fix |
| CVE-2024-35968 | Linux kernel pds_core PCI health check deadlock | 7.8CNA v3.1 | 0.2% | 2024-05-20 | Fix |
| CVE-2024-35967 | Linux kernel SCO socket options out-of-bounds read | 7.1CNA v3.1 | 0.2% | 2024-05-20 | Fix |
| CVE-2024-35966 | Linux kernel RFCOMM socket options out-of-bounds read | 7.1NVD v3.1 | 0.3% | 2024-05-20 | Fix |
| CVE-2024-35965 | Linux kernel L2CAP socket options improper input validation | 7.1NVD v3.1 | 0.2% | 2024-05-20 | Fix |
| CVE-2024-35964 | Linux kernel ISO socket options improper input validation | 7.1v3.1 | 0.3% | 2024-05-20 | Fix |
| CVE-2024-35963 | Linux kernel HCI socket options improper input validation | 7.1CNA v3.1 | 0.2% | 2024-05-20 | Fix |
| CVE-2024-35962 | Linux kernel netfilter table replace handling vulnerability | 7.1CNA v3.1 | 0.2% | 2024-05-20 | Fix |
| CVE-2024-35961 | Linux kernel mlx5 devlink registration improper locking | 5.5v3.1 | 0.2% | 2024-05-20 | Fix |
| CVE-2024-35960 | Linux kernel mlx5 flow steering rules null pointer dereference | 9.1CISA ADP v3.1 | 1.4% | 2024-05-20 | Fix |
| CVE-2024-35959 | Linux kernel mlx5e priv init cleanup improper locking | 5.5v3.1 | 0.3% | 2024-05-20 | Fix |
| CVE-2024-35958 | Linux kernel ena network driver denial of service | 7.8CNA v3.1 | 0.3% | 2024-05-20 | Fix |
| CVE-2024-35957 | Linux kernel VT-d IOMMU probe path reachable assertion | 5.5v3.1 | 0.2% | 2024-05-20 | Fix |
| CVE-2024-35956 | Linux kernel Btrfs qgroup subvolume operations memory leak | 5.5v3.1 | 0.2% | 2024-05-20 | Fix |
| CVE-2024-35955 | Linux kernel kprobes subsystem use-after-free | 8.8CISA ADP v3.1 | 1.2% | 2024-05-20 | Fix |
| CVE-2024-35954 | Linux kernel sg SCSI generic driver null pointer dereference | 7.8CNA v3.1 | 0.2% | 2024-05-20 | Fix |
| CVE-2024-35953 | Linux kernel ivpu accelerator context management deadlock | 5.5v3.1 | 0.2% | 2024-05-20 | Fix |
| CVE-2024-35952 | Linux kernel drm/ast improper locking | 5.5v3.1 | 0.2% | 2024-05-20 | Fix |
| CVE-2024-35951 | Linux kernel panfrost MMU fault handling vulnerability | 7.8CNA v3.1 | 0.2% | 2024-05-20 | Fix |
| CVE-2024-35950 | Linux kernel DRM client mode list vulnerability | 7.8CNA v3.1 | 0.3% | 2024-05-20 | Fix |
| CVE-2024-35949 | Linux kernel btrfs metadata block validation out-of-bounds write | 7.8CNA v3.1 | 0.2% | 2024-05-20 | Fix |
| CVE-2024-35948 | Linux kernel bcachefs superblock clean section vulnerability | 7.8CNA v3.1 | 0.2% | 2024-05-20 | Fix |
| CVE-2024-35580 | Tenda AX1806 stack-based buffer overflow | 9.8CISA ADP v3.1 | 0.6% | 2024-05-20 | |
| CVE-2024-35579 | Tenda AX1806 stack-based buffer overflow | 7.7CISA ADP v3.1 | 0.4% | 2024-05-20 | |
| CVE-2024-35578 | Tenda AX1806 stack-based buffer overflow | 8.0CISA ADP v3.1 | 0.4% | 2024-05-20 | |
| CVE-2024-35576 | Tenda AX1806 stack-based buffer overflow | 5.2CISA ADP v3.1 | 0.3% | 2024-05-20 | |
| CVE-2024-35571 | Tenda AX1806 buffer overflow | 9.8CISA ADP v3.1 | 0.6% | 2024-05-20 | |
| CVE-2024-35195 | requests `Session` object does not verify requests after making first request with verify=False | 5.6CNA v3.1 | 0.3% | 2024-05-20 | Fix |
| CVE-2024-35194 | Stacklok Minder vulnerable to denial of service from maliciously crafted templates | 5.3CNA v3.1 | 0.4% | 2024-05-20 | Fix |
| CVE-2024-35192 | Trivy possibly leaks registry credential when scanning images from malicious registries | 5.5CNA v3.1 | 0.2% | 2024-05-20 | Fix |
| CVE-2024-35191 | Verbb/formie server-side template injection for variable-enabled settings | 4.4CNA v3.1 | 0.3% | 2024-05-20 | Fix |
| CVE-2024-34953 | taurusxin ncmdump memory exhaustion | 7.5CISA ADP v3.1 | 0.6% | 2024-05-20 | |
| CVE-2024-34952 | taurusxin ncmdump NeteaseCrypt::FixMetadata function null pointer dereference | 5.0CISA ADP v3.1 | 0.2% | 2024-05-20 | |
| CVE-2024-34949 | likeshop SQL injection | 8.2CISA ADP v3.1 | 0.4% | 2024-05-20 | |
| CVE-2024-34948 | Quanxun Huiju Network Technology IK-Q3000 TCP connection handling denial of service | 7.5CISA ADP v3.1 | 0.4% | 2024-05-20 | |
| CVE-2024-34947 | Quanxun Huiju Network Technology (Beijing) Co.,Ltd IK-Q3000 3.7.10 x64 Build202401261655 was discovered to be vulnerable to an ICMP redirect attack. | 9.4CISA ADP v3.1 | 0.4% | 2024-05-20 | |
| CVE-2024-34710 | Requarks wiki wiki.js stored XSS through Client Side template injection | 7.1CNA v3.1 | 0.4% | 2024-05-20 | |
| CVE-2024-34193 | LKW199711 Smanga path traversal | 7.5CISA ADP v3.1 | 0.6% | 2024-05-20 | |
| CVE-2024-33901 | KeePassXC cleartext storage of sensitive information in memory | 6.5CISA ADP v3.1 | 0.7% | 2024-05-20 | Exploit codeFix |
| CVE-2024-33900 | KeePassXC cleartext storage of sensitive information in memory | 6.5CISA ADP v3.1 | 0.3% | 2024-05-20 | Fix |
| CVE-2024-31714 | Waxlab wax v.0.9-3 and buffer overflow | 7.5CISA ADP v3.1 | 0.4% | 2024-05-20 | |
| CVE-2024-29651 | Json-schema-ref-parser prototype pollution issue | 8.1CISA ADP v3.1 | 0.8% | 2024-05-20 | Fix |
| CVE-2024-29000 | SolarWinds Platform reflected XSS | 7.9CNA v3.1 | 0.5% | 2024-05-20 | Fix |
| CVE-2024-27312 | Zoho ManageEngine PAM360 incorrect authorization | 8.1CNA v3.1 | 0.9% | 2024-05-20 | Fix |
| CVE-2024-24294 | Blackprint @blackprint/engine prototype pollution issue | 9.8CISA ADP v3.1 | 0.8% | 2024-05-20 | Fix |
| CVE-2024-24293 | MiguelCastillo @bit/loader prototype pollution issue | 8.8CISA ADP v3.1 | 0.7% | 2024-05-20 | |
| CVE-2024-5145 | SourceCodester Vehicle Management System HTTP POST request newdriver.php unrestricted upload | 8.8v3.1 | 0.7% | 2024-05-20 | |
| CVE-2024-5137 | PHPGurukul Directory Management System Searchbar admin-profile.php cross-site scripting | 4.8v3.1 | 0.5% | 2024-05-20 | |
| CVE-2024-5136 | PHPGurukul Directory Management System search-directory.php. cross-site scripting | 4.8v3.1 | 0.5% | 2024-05-20 | |
| CVE-2024-5135 | PHPGurukul Directory Management System index.php SQL injection | 9.8v3.1 | 0.7% | 2024-05-20 | |
| CVE-2024-5134 | SourceCodester Electricity Consumption Monitoring Tool delete-bill.php SQL injection | 9.8v3.1 | 0.6% | 2024-05-20 | |
| CVE-2024-5123 | SourceCodester Event Registration System cross-site scripting | 6.1v3.1 | 0.6% | 2024-05-20 | |
| CVE-2024-5122 | SourceCodester Event Registration System SQL injection | 9.8v3.1 | 0.7% | 2024-05-20 | |
| CVE-2024-5121 | SourceCodester Event Registration System cross-site scripting | 6.1v3.1 | 0.4% | 2024-05-20 | |
| CVE-2024-5120 | SourceCodester Event Registration System SQL injection | 9.8v3.1 | 0.6% | 2024-05-20 | |
| CVE-2024-5119 | SourceCodester Event Registration System SQL injection | 9.8v3.1 | 0.6% | 2024-05-20 | |
| CVE-2024-5118 | SourceCodester Event Registration System login.php SQL injection | 9.8v3.1 | 0.7% | 2024-05-20 | |
| CVE-2024-5117 | SourceCodester Event Registration System portal.php SQL injection | 9.8v3.1 | 0.7% | 2024-05-20 | |
| CVE-2024-5116 | SourceCodester Online Examination System save.php SQL injection | 9.8v3.1 | 0.8% | 2024-05-20 | |
| CVE-2024-5115 | Campcodes Complete Web-Based School Management System teacher_profile.php SQL injection | 6.5v3.1 | 0.5% | 2024-05-20 | |
| CVE-2024-5114 | Campcodes Complete Web-Based School Management System teacher_attendance_history1.php SQL injection | 6.5v3.1 | 0.5% | 2024-05-20 | |
| CVE-2024-5113 | Campcodes Complete Web-Based School Management System student_profile1.php SQL injection | 6.5v3.1 | 0.5% | 2024-05-20 | |
| CVE-2024-5112 | Campcodes Complete Web-Based School Management System student_profile.php SQL injection | 6.5v3.1 | 0.5% | 2024-05-20 | |
| CVE-2024-5111 | Campcodes Complete Web-Based School Management System student_payment_invoice1.php SQL injection | 6.5v3.1 | 0.4% | 2024-05-20 | |
| CVE-2024-5110 | Campcodes Complete Web-Based School Management System student_payment_invoice.php SQL injection | 6.5v3.1 | 0.4% | 2024-05-20 | |
| CVE-2024-5109 | Campcodes Complete Web-Based School Management System student_payment_history.php SQL injection | 6.5v3.1 | 0.4% | 2024-05-20 | |
| CVE-2024-5108 | Campcodes Complete Web-Based School Management System student_payment_details4.php SQL injection | 6.5v3.1 | 0.4% | 2024-05-20 | |
| CVE-2024-5107 | Campcodes Complete Web-Based School Management System student_payment_details2.php SQL injection | 6.5v3.1 | 0.4% | 2024-05-20 | |
| CVE-2024-4985 | GitHub Enterprise Server flawed authentication | 10.0CNA v4.0 | 2.6% | 2024-05-20 | Fix |
| CVE-2024-4323 | Fluent Bit memory corruption | 9.8NVD v3.1 | 27.2% | 2024-05-20 | Exploit codeFix |
| CVE-2024-4287 | Improper input validation in mintplex-labs/anything-llm | 7.2v3.1 | 0.6% | 2024-05-20 | |
| CVE-2024-4151 | Improper access control in lunary-ai/Lunary | 8.1v3.1 | 0.4% | 2024-05-20 | Fix |
| CVE-2024-3761 | Missing authorization on Delete Datasets in lunary-ai/Lunary | 7.5NVD v3.1 | 0.5% | 2024-05-20 | Fix |
| CVE-2024-3482 | OpenText ArcSight Enterprise Security Manager and ArcSight Platform stored XSS | 8.7CNA v3.1 | 0.4% | 2024-05-20 | Fix |
| CVE-2024-3368 | All in One SEO WordPress plugin Contributor+ stored XSS | 6.1CISA ADP v3.1 | 0.4% | 2024-05-20 | Fix |
| CVE-2024-2835 | OpenText ArcSight Enterprise Security Manager and ArcSight Platform stored XSS | 8.7CNA v3.1 | 0.4% | 2024-05-20 | Fix |
| CVE-2024-1968 | Authorization Header Leakage in scrapy/scrapy on Scheme Change Redirects | 7.5CNA v3.0 | 0.7% | 2024-05-20 | Fix |
| CVE-2024-0401 | ASUS ExpertWiFi OS command injection | 7.2CNA v3.1 | 0.7% | 2024-05-20 | Fix |
| CVE-2024-36081 | Westermo EDW-100 configuration file download plaintext password storage | 9.8CNA v3.1 | 0.6% | 2024-05-19 | Fix |
| CVE-2024-36080 | Westermo EDW-100 root account hard-coded credentials | 9.8CNA v3.1 | 0.6% | 2024-05-19 | Fix |
| CVE-2024-36078 | zammad code injection | 6.7CISA ADP v3.1 | 0.2% | 2024-05-19 | Fix |
| CVE-2024-36076 | Syslifters sysreptor cross-site request forgery | 8.8CISA ADP v3.1 | 0.2% | 2024-05-19 | Fix |
| CVE-2024-36070 | Tine setup.php registry data information disclosure | 7.5CISA ADP v3.1 | 0.6% | 2024-05-19 | |
| CVE-2024-36053 | Linux Mint mintupload service name handling command injection | 9.0CISA ADP v3.1 | 1.0% | 2024-05-19 | |
| CVE-2024-35947 | In the Linux kernel, the following vulnerability has been resolved: dyndbg: fix old BUG_ON in >control parser Fix a BUG_ON from 2009. Even if it looks "unreachable" (I didn't really look), lets make sure by removing it, doing pr_err and return -EINVAL instead. | 5.5CISA ADP v3.1 | 0.3% | 2024-05-19 | Fix |
| CVE-2024-35946 | Linux kernel rtw89 Wi-Fi driver null pointer dereference | 5.5v3.1 | 0.2% | 2024-05-19 | Fix |
| CVE-2024-35945 | Linux kernel PHY driver interrupt handler null pointer dereference | 5.5v3.1 | 0.2% | 2024-05-19 | Fix |
| CVE-2024-35944 | Linux kernel VMCI datagram dispatch vulnerability | 5.5NVD v3.1 | 0.2% | 2024-05-19 | Fix |
| CVE-2024-35943 | Linux kernel OMAP PRM power domain driver null pointer dereference | 5.5v3.1 | 0.2% | 2024-05-19 | Fix |
| CVE-2024-35942 | Linux kernel i.MX8MP HDMI power domain vulnerability | 5.5v3.1 | 0.2% | 2024-05-19 | Fix |
| CVE-2024-35940 | Linux kernel pstore zone kmsg reader null pointer dereference | 5.5CISA ADP v3.1 | 0.2% | 2024-05-19 | Fix |
| CVE-2024-35939 | Linux kernel DMA direct memory decryption vulnerability | 9.3CNA v3.1 | 0.2% | 2024-05-19 | Fix |
| CVE-2024-35938 | Linux kernel ath11k MHI channel buffer allocation vulnerability | 5.5v3.1 | 0.2% | 2024-05-19 | Fix |
| CVE-2024-35937 | Linux kernel cfg80211 A-MSDU parsing out-of-bounds read | 8.1CNA v3.1 | 0.3% | 2024-05-19 | Fix |
| CVE-2024-35936 | Linux kernel btrfs chunk relocation vulnerability | 5.5NVD v3.1 | 0.2% | 2024-05-19 | Fix |
| CVE-2024-35935 | Linux kernel btrfs send information disclosure | 3.3NVD v3.1 | 0.2% | 2024-05-19 | Fix |
| CVE-2024-35934 | Linux kernel SMC PNET ID list creation vulnerability | 5.5NVD v3.1 | 0.2% | 2024-05-19 | Fix |
| CVE-2024-35933 | Linux kernel btintel Bluetooth driver null pointer dereference | 5.5NVD v3.1 | 0.2% | 2024-05-19 | Fix |
| CVE-2024-35932 | Linux kernel vc4 display driver use-after-free | 7.8CNA v3.1 | 0.2% | 2024-05-19 | Fix |
| CVE-2024-35931 | Linux kernel amdgpu RAS error recovery vulnerability | 7.8CNA v3.1 | 0.2% | 2024-05-19 | Fix |
| CVE-2024-35930 | Linux kernel lpfc memory leak | 5.5NVD v3.1 | 0.2% | 2024-05-19 | Fix |
| CVE-2024-35929 | Linux kernel RCU no-callback (NOCB) offload vulnerability | 7.8v3.1 | 0.2% | 2024-05-19 | Fix |
| CVE-2024-35927 | Linux kernel DRM output polling improper initialization | 5.5v3.1 | 0.2% | 2024-05-19 | Fix |
| CVE-2024-35926 | Linux kernel IAA crypto driver memory leak | 5.5v3.1 | 0.2% | 2024-05-19 | Fix |
| CVE-2024-35925 | Linux kernel block layer request statistics divide by zero | 5.5NVD v3.1 | 0.2% | 2024-05-19 | Fix |
| CVE-2024-35924 | Linux kernel USB Type-C UCSI driver vulnerability | 7.1CNA v3.1 | 0.2% | 2024-05-19 | Fix |
| CVE-2024-35922 | Linux kernel fbmon divide by zero | 5.5NVD v3.1 | 0.2% | 2024-05-19 | Fix |
| CVE-2024-35921 | Linux kernel MediaTek HEVC decoder use-after-free | 7.8CNA v3.1 | 0.2% | 2024-05-19 | Fix |
| CVE-2024-35920 | Linux kernel MediaTek video decoder driver null pointer dereference | 7.8CNA v3.1 | 0.2% | 2024-05-19 | Fix |
| CVE-2024-35919 | Linux kernel MediaTek video encoder driver null pointer dereference | 7.8CNA v3.1 | 0.2% | 2024-05-19 | Fix |
| CVE-2024-35917 | Linux kernel s390 BPF JIT null pointer dereference | 5.5v3.1 | 0.2% | 2024-05-19 | Fix |
| CVE-2024-35916 | Linux kernel dma-buf fence chain self-test null pointer dereference | 5.3CISA ADP v3.1 | 0.6% | 2024-05-19 | Fix |
| CVE-2024-35915 | Linux kernel NFC NCI packet handling use of uninitialized resource | 8.8CNA v3.1 | 0.3% | 2024-05-19 | Fix |