CVE-2024 list

CVE-2024 records published in May 2024

Page two of four: records 1,001 to 2,000 of the 3,323 published in May 2024, newest first. The first page carries the figures for May 2024.

CVE-2024 records published in May 2024, newest first: records 1,001 to 2,000 of 3,323
CVE Summary CVSS EPSS Published Signals
CVE-2024-35914Linux kernel nfsd deadlock7.5CNA v3.10.3%2024-05-19Fix
CVE-2024-35913Linux kernel iwlwifi session protection notification vulnerability7.1CNA v3.10.2%2024-05-19Fix
CVE-2024-35912Linux kernel iwlwifi RFI handling memory leak5.5v3.10.2%2024-05-19Fix
CVE-2024-35911Linux kernel ice Ethernet driver out-of-bounds write7.8v3.10.2%2024-05-19Fix
CVE-2024-35910Linux kernel TCP timer handling for kernel sockets vulnerability7.8CNA v3.10.3%2024-05-19Fix
CVE-2024-35909Linux kernel t7xx WWAN driver denial of service5.5v3.10.2%2024-05-19Fix
CVE-2024-35908Linux kernel kernel TLS receive path memory leak5.5v3.10.2%2024-05-19Fix
CVE-2024-35907Linux kernel mlxbf_gige Ethernet driver null pointer dereference5.5v3.10.2%2024-05-19Fix
CVE-2024-35905Linux kernel BPF verifier stack access checks integer overflow7.8CNA v3.10.2%2024-05-19Fix
CVE-2024-35904Linux kernel SELinux filesystem mount handling null pointer dereference5.5v3.10.2%2024-05-19Fix
CVE-2024-35903Linux kernel x86/bpf crash5.5v3.10.2%2024-05-19Fix
CVE-2024-35902Linux kernel RDS RDMA mapping null pointer dereference5.5NVD v3.10.2%2024-05-19Fix
CVE-2024-35901Linux kernel mana Ethernet driver vulnerability7.5CNA v3.10.5%2024-05-19Fix
CVE-2024-35900Linux kernel nftables basechain hook handling vulnerability5.5NVD v3.10.2%2024-05-19Fix
CVE-2024-35899Linux kernel nf_tables use-after-free7.3CNA v3.10.2%2024-05-19Fix
CVE-2024-35898Linux kernel nf_tables flowtable type lookup race condition7.0CNA v3.10.2%2024-05-19Fix
CVE-2024-35897Linux kernel nf_tables basechain hook management vulnerability7.8CNA v3.10.3%2024-05-19Fix
CVE-2024-35896Linux kernel IPv4 netfilter set and replace ioctl out-of-bounds read7.1CNA v3.10.2%2024-05-19Fix
CVE-2024-35895Linux kernel BPF sockmap element deletion deadlock5.5NVD v3.10.2%2024-05-19Fix
CVE-2024-35894Linux kernel MPTCP subflow socket options vulnerability7.8CNA v3.10.2%2024-05-19Fix
CVE-2024-35893Linux kernel act_skbmod uninitialized resource use5.5NVD v3.10.2%2024-05-19Fix
CVE-2024-35892Linux kernel net/sched improper locking5.5v3.10.2%2024-05-19Fix
CVE-2024-35891Linux kernel Micrel PHY timestamping driver null pointer dereference7.5CNA v3.10.6%2024-05-19Fix
CVE-2024-35890Linux kernel GRO fraglist segmentation vulnerability7.8CNA v3.10.2%2024-05-19Fix
CVE-2024-35889Linux kernel idpf packet type handling denial of service8.6CNA v3.10.4%2024-05-19Fix
CVE-2024-35888Linux kernel ERSPAN header parsing vulnerability7.3CNA v3.10.6%2024-05-19Fix
CVE-2024-35887Linux kernel AX.25 device timer handling use-after-free8.8CNA v3.10.3%2024-05-19Fix
CVE-2024-35886Linux kernel IPv6 FIB6 route dump uncontrolled recursion7.8NVD v3.10.3%2024-05-19Fix
CVE-2024-35885Linux kernel mlxbf_gige null pointer dereference5.5v3.10.2%2024-05-19Fix
CVE-2024-35884Linux kernel UDP tunnel GRO handling reachable assertion9.8CNA v3.10.7%2024-05-19Fix
CVE-2024-35883Linux kernel mchp-pci1xxx SPI driver null pointer dereference5.5v3.10.2%2024-05-19Fix
CVE-2024-35882Linux kernel SUNRPC RPC-over-TCP server memory leak7.5CNA v3.10.6%2024-05-19Fix
CVE-2024-35880Linux kernel io_uring buffer list mmap vulnerability7.8CNA v3.10.7%2024-05-19Fix
CVE-2024-35879Linux kernel OF changeset devlink teardown memory leak7.8CNA v3.10.2%2024-05-19Fix
CVE-2024-35878Linux kernel module null pointer dereference5.3CISA ADP v3.10.8%2024-05-19Fix
CVE-2024-35877Linux kernel PAT handling in copy-on-write mappings memory leak5.5NVD v3.10.3%2024-05-19Fix
CVE-2024-35875Linux kernel confidential computing RNG seeding insufficient entropy8.4CNA v3.10.3%2024-05-19Fix
CVE-2024-35874Linux kernel AIO completion wakeup null pointer dereference7.8CNA v3.10.2%2024-05-19Fix
CVE-2024-35873Linux kernel RISC-V vector state signal return vulnerability5.5v3.10.2%2024-05-19Fix
CVE-2024-35872Linux kernel secretmem GUP-fast handling vulnerability7.8CNA v3.10.2%2024-05-19Fix
CVE-2024-35871Linux kernel RISC-V process context switching vulnerability7.1v3.10.3%2024-05-19Fix
CVE-2024-35870Linux kernel SMB client reconnect handling use-after-free9.8CNA v3.10.6%2024-05-19Fix
CVE-2024-35869Linux kernel SMB client DFS session handling use-after-free9.8CNA v3.10.6%2024-05-19Fix
CVE-2024-35868Linux kernel SMB client stats proc handler use-after-free7.8v3.10.2%2024-05-19Fix
CVE-2024-35867Linux kernel SMB client stats proc handler use-after-free7.8CNA v3.10.3%2024-05-19Fix
CVE-2024-35866Linux kernel SMB client key dump handling use-after-free7.8v3.10.2%2024-05-19Fix
CVE-2024-35865Linux kernel SMB client oplock break handling use-after-free9.8CNA v3.10.6%2024-05-19Fix
CVE-2024-35864Linux kernel SMB client lease break handling use-after-free9.8CNA v3.10.7%2024-05-19Fix
CVE-2024-35863Linux kernel SMB client oplock break handling use-after-free9.8CNA v3.10.7%2024-05-19Fix
CVE-2024-35862Linux kernel SMB client network name check use-after-free9.8CNA v3.10.7%2024-05-19Fix
CVE-2024-35861Linux kernel SMB client reconnect handling use-after-free9.8CNA v3.10.7%2024-05-19Fix
CVE-2024-35860Linux kernel BPF link handling vulnerability7.8CNA v3.10.2%2024-05-19Fix
CVE-2024-5106Campcodes Complete Web-Based School Management System student_payment_details3.php SQL injection8.8v3.10.5%2024-05-19
CVE-2024-5105Campcodes Complete Web-Based School Management System student_payment_details.php SQL injection8.8v3.10.5%2024-05-19
CVE-2024-5104Campcodes Complete Web-Based School Management System student_grade_wise.php SQL injection8.8v3.10.5%2024-05-19
CVE-2024-5103Campcodes Complete Web-Based School Management System student_first_payment.php SQL injection8.8v3.10.5%2024-05-19
CVE-2024-5101SourceCodester Simple Inventory System updateproduct.php SQL injection8.8v3.10.6%2024-05-19
CVE-2024-5100SourceCodester Simple Inventory System tableedit.php SQL injection6.5v3.10.5%2024-05-19
CVE-2024-5099SourceCodester Simple Inventory System updateprice.php SQL injection6.5v3.10.5%2024-05-19
CVE-2024-5098SourceCodester Simple Inventory System login.php SQL injection6.5v3.10.5%2024-05-19
CVE-2024-5097SourceCodester Simple Inventory System tableedit.php#page=editprice cross-site request forgery4.3v3.10.4%2024-05-19
CVE-2024-5096Hipcam Device MAC Address wifi.mac information disclosure6.9CNA v4.00.6%2024-05-19
CVE-2024-5095Victor Zsviot Camera MQTT Packet denial of service7.1CNA v4.00.7%2024-05-19
CVE-2024-4284Denial of service in mintplex-labs/anything-llm4.9CNA v3.00.6%2024-05-19Fix
CVE-2024-36050Nix hash cache handling vulnerability4.3CISA ADP v3.10.4%2024-05-18
CVE-2024-36048Qt Network Authorization QAbstractOAuth vulnerability9.8CISA ADP v3.11.0%2024-05-18Fix
CVE-2024-36043SurveyJS Form Library question image YouTube content mode cross-site scripting6.1CISA ADP v3.10.3%2024-05-18
CVE-2024-34083aio-libs aiosmtpd STARTTLS unencrypted commands injection5.4CNA v3.10.2%2024-05-18Fix
CVE-2024-31879IBM i denial of service7.5CNA v3.10.9%2024-05-18Fix
CVE-2024-28064Kiteworks Totemomail EnvelopeOpenServlet directory traversal9.8CISA ADP v3.10.9%2024-05-18
CVE-2024-28063Totemomail cross-site scripting6.1CISA ADP v3.10.3%2024-05-18
CVE-2024-23556HCL BigFix Platform is impacted by a failure to restrict SSL/TLS renegotiation5.9CNA v3.10.4%2024-05-18Fix
CVE-2024-23554HCL BigFix Platform is susceptible to cross-site request forgery5.7CNA v3.10.3%2024-05-18Fix
CVE-2024-5094SourceCodester Best House Rental Management System view_payment.php SQL injection9.8v3.10.7%2024-05-18
CVE-2024-5093SourceCodester Best House Rental Management System login.php SQL injection9.8v3.10.7%2024-05-18
CVE-2024-5088Happy Addons for Elementor WordPress plugin authenticated (Contributor+) stored cross-site scripting5.4v3.10.4%2024-05-18Fix
CVE-2024-4891Essential Blocks WordPress plugin stored cross-site scripting5.4v3.10.5%2024-05-18Fix
CVE-2024-4865Happy Addons for Elementor WordPress plugin stored cross-site scripting5.4v3.10.4%2024-05-18Fix
CVE-2024-4849WordPress Automatic plugin stored cross-site scripting6.4CNA v3.10.3%2024-05-18Fix
CVE-2024-4709Contact Form Plugin by Fluent Forms for Quiz WordPress plugin stored cross-site scripting5.4NVD v3.10.4%2024-05-18Fix
CVE-2024-4698Testimonial Carousel For Elementor WordPress plugin stored cross-site scripting6.4CNA v3.10.4%2024-05-18Fix
CVE-2024-4432Piotnet Addons For Elementor WordPress plugin stored cross-site scripting6.4CNA v3.10.3%2024-05-18Fix
CVE-2024-4374DethemeKit For Elementor WordPress plugin stored cross-site scripting5.4v3.10.4%2024-05-18Fix
CVE-2024-4264Remote code execution in BerriAI/litellm9.8CNA v3.00.9%2024-05-18
CVE-2024-3812Salient Core WordPress plugin authenticated (Contributor+) local file inclusion via shortcode7.5CNA v3.10.6%2024-05-18Fix
CVE-2024-3811Salient Shortcodes WordPress plugin stored cross-site scripting6.4CNA v3.10.3%2024-05-18Fix
CVE-2024-3810Salient Shortcodes WordPress plugin authenticated (Contributor+) local file inclusion via shortcode8.8CNA v3.10.6%2024-05-18Fix
CVE-2024-3745MSI Afterburner Beta 3 ACL Bypass7.8CNA v3.10.2%2024-05-18Fix
CVE-2024-3714GiveWP Donation Plugin and Fundraising Platform WordPress plugin stored cross-site scripting5.4v3.10.3%2024-05-18Fix
CVE-2024-2782Contact Form Plugin by Fluent Forms for Quiz WordPress plugin unauthorized access7.5CNA v3.11.2%2024-05-18NucleiExploit codeFix
CVE-2024-2772Contact Form Plugin by Fluent Forms for Quiz WordPress plugin stored cross-site scripting5.4v3.10.3%2024-05-18Fix
CVE-2024-2771Contact Form Plugin by Fluent Forms for Quiz WordPress plugin privilege escalation9.8CNA v3.12.3%2024-05-18NucleiExploit codeFix
CVE-2024-35859In the Linux kernel, the following vulnerability has been resolved: block: fix module reference leakage from bdev_open_by_dev error path At the time bdev_may_open() is called, module reference is grabbed already, hence module reference should be released if bdev_may_open() failed. This problem is5.5CISA ADP v3.10.2%2024-05-17Fix
CVE-2024-35858Linux kernel bcmasp memory leak7.8CNA v3.10.2%2024-05-17Fix
CVE-2024-35857Linux kernel ICMP probe handling null pointer dereference7.5CNA v3.11.0%2024-05-17Fix
CVE-2024-35856Linux kernel MediaTek Bluetooth USB driver double free8.8CNA v3.10.3%2024-05-17Fix
CVE-2024-35855Linux kernel mlxsw ACL TCAM driver use-after-free7.8CNA v3.10.2%2024-05-17Fix
CVE-2024-35854Linux kernel mlxsw ACL TCAM driver use-after-free7.8CNA v3.10.6%2024-05-17Fix
CVE-2024-35853Linux kernel mlxsw ACL TCAM driver memory leak6.4CISA ADP v3.10.7%2024-05-17Fix
CVE-2024-35852Linux kernel mlxsw ACL TCAM driver memory leak5.5v3.10.3%2024-05-17Fix
CVE-2024-35851Linux kernel Qualcomm Bluetooth driver null pointer dereference5.5v3.10.2%2024-05-17Fix
CVE-2024-35850Linux kernel Qualcomm Bluetooth driver null pointer dereference5.5v3.10.2%2024-05-17Fix
CVE-2024-35849Linux kernel Btrfs ioctl handling information disclosure7.1NVD v3.10.3%2024-05-17Fix
CVE-2024-35848Linux kernel at24 EEPROM driver race condition7.0CNA v3.10.2%2024-05-17Fix
CVE-2024-35847Linux kernel irqchip/gic-v3-its double free7.8CNA v3.10.2%2024-05-17Fix
CVE-2024-35846Linux kernel zswap shrinker null pointer dereference5.5v3.10.2%2024-05-17Fix
CVE-2024-35845Linux kernel iwlwifi debug TLV parsing format string9.1CISA ADP v3.11.2%2024-05-17Fix
CVE-2024-35844Linux kernel f2fs compression block reservation denial of service5.5v3.10.2%2024-05-17Fix
CVE-2024-35843Linux kernel iommu/vt-d use-after-free8.8CNA v3.10.2%2024-05-17Fix
CVE-2024-35842Linux kernel MediaTek sof-common sound driver null pointer dereference5.5v3.10.2%2024-05-17Fix
CVE-2024-35841Linux kernel TLS socket message splice handling vulnerability5.5v3.10.2%2024-05-17Fix
CVE-2024-35840Linux kernel MPTCP subflow handshake vulnerability5.5v3.10.2%2024-05-17Fix
CVE-2024-35839Linux kernel netfilter bridge module vulnerability7.8CNA v3.10.2%2024-05-17Fix
CVE-2024-35838Linux kernel mac80211 station link management memory leak5.5v3.10.2%2024-05-17Fix
CVE-2024-35837Linux kernel mvpp2 kernel panic5.5v3.10.2%2024-05-17Fix
CVE-2024-35836Linux kernel dpll pin management use-after-free5.5v3.10.2%2024-05-17Fix
CVE-2024-35835Linux kernel net/mlx5e double free7.8CNA v3.10.6%2024-05-17Fix
CVE-2024-35834Linux kernel xsk memory leak8.2CNA v3.10.4%2024-05-17Fix
CVE-2024-35833Linux kernel fsl-qdma driver memory leak5.5CISA ADP v3.10.2%2024-05-17Fix
CVE-2024-35832Linux kernel bcachefs snapshot table cleanup denial of service5.5v3.10.2%2024-05-17Fix
CVE-2024-35831Linux kernel io_uring pinned page release memory leak5.5v3.10.2%2024-05-17Fix
CVE-2024-35830In the Linux kernel, the following vulnerability has been resolved: media: tc358743: register v4l2 async device only after successful setup Ensure the device has been setup correctly before registering the v4l2 async device, thus allowing userspace to access.7.8CNA v3.10.2%2024-05-17Fix
CVE-2024-35829Linux kernel lima GPU driver memory leak5.5CISA ADP v3.10.2%2024-05-17Fix
CVE-2024-35828Linux kernel libertas Wi-Fi driver memory leak5.5NVD v3.10.2%2024-05-17Fix
CVE-2024-35827Linux kernel io_uring recvmsg multishot handling integer overflow7.8CNA v3.10.2%2024-05-17Fix
CVE-2024-35826Linux kernel block layer bio page release vulnerability5.5v3.10.2%2024-05-17Fix
CVE-2024-35825Linux kernel USB gadget NCM driver vulnerability5.5v3.10.2%2024-05-17Fix
CVE-2024-35824Linux kernel lis3lv02d_i2c accelerometer driver vulnerability5.5v3.10.2%2024-05-17Fix
CVE-2024-35823Linux kernel vt buffer overflow5.3CISA ADP v3.10.9%2024-05-17Fix
CVE-2024-35822Linux kernel USB gadget endpoint queue vulnerability5.5v3.10.2%2024-05-17Fix
CVE-2024-35821Linux kernel UBIFS page cache write vulnerability5.5NVD v3.10.6%2024-05-17Fix
CVE-2024-35819Linux kernel QBMan congestion group lock vulnerability5.5v3.10.2%2024-05-17Fix
CVE-2024-35818Linux kernel radeon driver ring commit vulnerability5.5v3.10.2%2024-05-17Fix
CVE-2024-35817Linux kernel amdgpu TTM GART memory binding vulnerability7.8CNA v3.10.2%2024-05-17Fix
CVE-2024-35816Linux kernel FireWire OHCI driver IRQ handling memory leak5.5v3.10.2%2024-05-17Fix
CVE-2024-35815Linux kernel AIO request cancellation vulnerability5.5NVD v3.10.2%2024-05-17Fix
CVE-2024-35814Linux kernel SWIOTLB bounce buffer allocation vulnerability7.8CNA v3.10.2%2024-05-17Fix
CVE-2024-35813Linux kernel MMC core array indexing vulnerability7.8CNA v3.10.2%2024-05-17Fix
CVE-2024-35811Linux kernel brcmfmac Wi-Fi driver use-after-free8.8CNA v3.10.4%2024-05-17Fix
CVE-2024-35810Linux kernel vmwgfx cursor buffer object vulnerability7.8CNA v3.10.2%2024-05-17Fix
CVE-2024-35809Linux kernel PCI runtime power management on driver removal race condition4.7NVD v3.10.2%2024-05-17Fix
CVE-2024-35808Linux kernel dm-raid sync thread handling deadlock7.8CNA v3.10.2%2024-05-17Fix
CVE-2024-35807Linux kernel ext4 online resize vulnerability5.5NVD v3.10.3%2024-05-17Fix
CVE-2024-35806Linux kernel QBMan congestion group lock deadlock5.5v3.10.2%2024-05-17Fix
CVE-2024-35805Linux kernel dm-snapshot exception table cleanup denial of service5.5NVD v3.10.2%2024-05-17Fix
CVE-2024-35804Linux kernel KVM emulated atomic instruction handling memory leak8.8CNA v3.10.2%2024-05-17Fix
CVE-2024-35803Linux kernel EFI stub mixed mode boot services vulnerability5.5v3.10.2%2024-05-17Fix
CVE-2024-35801Linux kernel x86 FPU extended feature disable state denial of service5.5NVD v3.10.2%2024-05-17Fix
CVE-2024-35800Linux kernel EFI variable access in kdump kernel null pointer dereference5.5v3.10.2%2024-05-17Fix
CVE-2024-35799Linux kernel amdgpu display stream encoder vulnerability5.5v3.10.2%2024-05-17Fix
CVE-2024-35798Linux kernel Btrfs extent buffer read race condition7.8CNA v3.10.2%2024-05-17Fix
CVE-2024-35797Linux kernel shmem cachestat swap cache lookup out-of-bounds write7.1CNA v3.10.7%2024-05-17Fix
CVE-2024-35796Linux kernel ll_temac ethernet driver null pointer dereference5.5v3.10.2%2024-05-17Fix
CVE-2024-35795Linux kernel amdgpu MQD debugfs interface deadlock5.5v3.10.2%2024-05-17Fix
CVE-2024-35794Linux kernel DM-RAID sync thread suspend handling vulnerability5.5v3.10.2%2024-05-17Fix
CVE-2024-35793Linux kernel debugfs file removal deadlock7.8CNA v3.10.2%2024-05-17Fix
CVE-2024-35792Linux kernel RK3288 crypto driver use-after-free7.8CNA v3.10.2%2024-05-17Fix
CVE-2024-35791Linux kernel KVM SVM encrypted region handling use-after-free7.8CNA v3.10.2%2024-05-17Fix
CVE-2024-35790Linux kernel USB Type-C DisplayPort altmode driver null pointer dereference5.5v3.10.2%2024-05-17Fix
CVE-2024-35789Linux kernel mac80211 fast-RX handling use-after-free8.0CNA v3.10.4%2024-05-17Fix
CVE-2024-35787Linux kernel MD bitmap clustered support denial of service7.8CNA v3.10.2%2024-05-17Fix
CVE-2024-35786Linux kernel Nouveau GPU driver deadlock5.5v3.10.2%2024-05-17Fix
CVE-2024-35785Linux kernel OP-TEE driver improper error handling7.8CNA v3.10.2%2024-05-17Fix
CVE-2024-35784Linux kernel Btrfs fiemap extent locking deadlock5.5v3.10.2%2024-05-17Fix
CVE-2024-35313Tor Arti's STUB circuits incorrectly have a length of 27.3CISA ADP v3.10.3%2024-05-17Fix
CVE-2024-35312Tor Arti's STUB circuits incorrectly have a length of 26.2CISA ADP v3.10.2%2024-05-17Fix
CVE-2024-35190Asterisk' res_pjsip_endpoint_identifier_ip: Wrongly matches ALL unauthorized SIP requests5.8CNA v3.10.6%2024-05-17
CVE-2024-35174Flo Forms WordPress plugin broken access control5.3CNA v3.10.3%2024-05-17Fix
CVE-2024-35110YzmCMS cross-site scripting5.5CISA ADP v3.10.3%2024-05-17
CVE-2024-34997joblib deserialization of untrusted data7.5CISA ADP v3.10.7%2024-05-17
CVE-2024-34982LyLme_spage component /include/file.php arbitrary file upload9.8CISA ADP v3.14.7%2024-05-17Nuclei
CVE-2024-34959DedeCMS cross-site scripting5.5CISA ADP v3.10.3%2024-05-17
CVE-2024-34919Pisay Online E-Learning System modstudent controller.php arbitrary file upload9.8CISA ADP v3.10.9%2024-05-17
CVE-2024-34809EmpowerWP WordPress theme cross-site request forgery (CSRF)4.3CNA v3.10.2%2024-05-17Fix
CVE-2024-34807Fast Custom Social Share by CodeBard WordPress plugin cross-site request forgery (CSRF)4.3v3.10.2%2024-05-17
CVE-2024-34806Clearfy Cache WordPress plugin cross-site request forgery (CSRF)4.3CNA v3.10.2%2024-05-17Fix
CVE-2024-34757Borderless WordPress plugin cross-site scripting (XSS)5.4v3.10.3%2024-05-17Fix
CVE-2024-34756Integration for HubSpot and Contact Form 7 WordPress plugin cross-site request forgery (CSRF)4.3CNA v3.10.2%2024-05-17Fix
CVE-2024-34755CRM Perks Integration for Contact Form 7 and Salesforce cross-site request forgery4.3CNA v3.10.2%2024-05-17Fix
CVE-2024-34752WordPress Landing Page Builder plugin cross-site scripting (XSS)7.1CNA v3.10.3%2024-05-17Fix
CVE-2024-34575DethemeKit For Elementor WordPress plugin cross-site scripting (XSS)5.4v3.10.3%2024-05-17Fix
CVE-2024-34567GhozyLab Popup Builder stored cross-site scripting6.5CNA v3.10.3%2024-05-17Fix
CVE-2024-34434MDTF Meta Data and Taxonomies Filter WordPress plugin arbitrary shortcode execution vulnerability6.5v3.10.3%2024-05-17Fix
CVE-2024-34370EAN for WooCommerce WordPress plugin arbitrary option update to privilege escalation7.2v3.11.1%2024-05-17Exploit codeFix
CVE-2024-34241RocketSoft Rocket LMS cross-site scripting4.8CISA ADP v3.10.8%2024-05-17Exploit code
CVE-2024-34058NethServer WebTop email subject field stored cross-site scripting8.8CISA ADP v3.11.2%2024-05-17
CVE-2024-33917WTI Like Post WordPress plugin IP Restriction bypass vulnerability vulnerability5.3CNA v3.10.4%2024-05-17
CVE-2024-33644Customify Site Library WordPress plugin remote code execution (RCE)9.9CNA v3.11.1%2024-05-17Exploit code
CVE-2024-33569Instant Images WordPress plugin arbitrary option update to privilege escalation7.2CNA v3.10.5%2024-05-17Fix
CVE-2024-33567UkrSolution Barcode Scanner with Inventory and Order Manager improper privilege management9.8CNA v3.10.5%2024-05-17Fix
CVE-2024-33556XStore Core WordPress plugin limited arbitrary file upload9.8v3.10.6%2024-05-17Fix
CVE-2024-33552XStore Core WordPress plugin unauthenticated account takeover9.8v3.10.6%2024-05-17Fix
CVE-2024-33550WP Masquerade WordPress plugin authenticated account takeover8.8CNA v3.10.5%2024-05-17
CVE-2024-33549WZone WordPress plugin privilege escalation8.8CNA v3.10.5%2024-05-17Fix
CVE-2024-32960Booking Ultra Pro WordPress plugin privilege escalation8.8CNA v3.10.4%2024-05-17Fix
CVE-2024-32959Sirv WordPress plugin arbitrary option update to privilege escalation8.8CNA v3.10.4%2024-05-17Fix
CVE-2024-32830buddyforms WordPress plugin arbitrary file read and SSRF7.5v3.10.6%2024-05-17Exploit codeFix
CVE-2024-32827Giveaways and Contests by RafflePress WordPress plugin IP Restriction bypass vulnerability5.3CNA v3.10.4%2024-05-17Fix
CVE-2024-32809ActiveDEMAND WordPress plugin arbitrary file upload10.0CNA v3.10.5%2024-05-17Fix
CVE-2024-32802Better Messages WordPress plugin broken authentication5.3CNA v3.10.3%2024-05-17Fix
CVE-2024-32800Popup Popup More Popups WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2024-05-17Fix
CVE-2024-32790Pricing Table by Supsystic WordPress plugin content injection4.3CNA v3.10.3%2024-05-17Fix
CVE-2024-32786Royal Elementor Addons and Templates WordPress plugin IP bypass vulnerability9.8v3.10.5%2024-05-17Fix
CVE-2024-32774ProfileGrid WordPress plugin Group Members Limit bypass vulnerability8.8v3.10.5%2024-05-17Fix
CVE-2024-32720Appointment Hour Booking WordPress plugin Captcha bypass vulnerability5.3CNA v3.10.4%2024-05-17Fix
CVE-2024-32708Maintenance Mode WordPress plugin IP bypass vulnerability3.7CNA v3.10.4%2024-05-17Fix
CVE-2024-32692Chauffeur Taxi Booking System for WordPress plugin broken authentication8.2CNA v3.10.4%2024-05-17Fix
CVE-2024-32685WP Ultimate Review WordPress plugin Review Score manipulation vulnerability5.3v3.10.4%2024-05-17Fix
CVE-2024-32680HUSKY WordPress plugin remote code execution (RCE)8.8v3.10.7%2024-05-17Fix
CVE-2024-32523Mailster WordPress plugin unauthenticated local file inclusion8.1CNA v3.11.8%2024-05-17Fix
CVE-2024-32521Highfivery Zero Spam client-side enforcement of server-side security5.3CNA v3.10.4%2024-05-17Fix
CVE-2024-32512weForms WordPress plugin form Submission Restriction bypass vulnerability5.3CNA v3.10.3%2024-05-17Fix
CVE-2024-32511Simple Registration for WooCommerce WordPress plugin unauthenticated privilege escalation9.8CNA v3.10.5%2024-05-17Fix
CVE-2024-32507Login with phone number WordPress plugin privilege escalation8.8CNA v3.10.5%2024-05-17Fix
CVE-2024-32131Download Manager WordPress plugin file password Lock bypass vulnerability7.5v3.10.4%2024-05-17Fix
CVE-2024-31974Solarized FireDown Browser and Downloader WebView intent handler code injection6.3CISA ADP v3.10.6%2024-05-17Exploit code
CVE-2024-31351Copymatic WordPress plugin unauthenticated arbitrary file upload9.8v3.11.6%2024-05-17Exploit codeFix
CVE-2024-31341User Profile Builder WordPress plugin bypass vulnerability vulnerability5.3CNA v3.10.2%2024-05-17Fix
CVE-2024-31300Easy Social Share Buttons WordPress plugin local file inclusion8.5CNA v3.10.6%2024-05-17Fix
CVE-2024-31295Captcha by BestWebSoft WordPress plugin Captcha bypass vulnerability5.3CNA v3.10.4%2024-05-17Fix
CVE-2024-31290Demo My WordPress plugin unauthenticated privilege escalation9.8CNA v3.10.5%2024-05-17Fix
CVE-2024-31281Church Admin WordPress plugin broken access control6.3CNA v3.10.3%2024-05-17Fix
CVE-2024-31237s2Member WordPress plugin privilege escalation7.5CNA v3.10.4%2024-05-17Fix
CVE-2024-31232Rehub WordPress theme local file inclusion8.0CNA v3.10.6%2024-05-17Fix
CVE-2024-31231Rehub WordPress theme unauthenticated local file inclusion9.0CNA v3.10.6%2024-05-17Fix
CVE-2024-30542WholesaleX WordPress plugin unauthenticated privilege escalation9.8v3.10.5%2024-05-17Fix
CVE-2024-30540VS Contact Form WordPress plugin Sum Captcha bypass vulnerability5.3CNA v3.10.5%2024-05-17Fix
CVE-2024-30527WP Express Checkout WordPress plugin Price manipulation vulnerability7.5CNA v3.10.5%2024-05-17Fix
CVE-2024-30522Newsletter WordPress plugin IP Blacklist bypass vulnerability5.3CNA v3.10.5%2024-05-17Fix
CVE-2024-30509SellKit WordPress plugin arbitrary file download6.5CNA v3.10.6%2024-05-17Fix
CVE-2024-30480CGC Maintenance Mode WordPress plugin IP Filtering bypass vulnerability3.7CNA v3.10.5%2024-05-17
CVE-2024-30479LionScripts: IP Blocker Lite WordPress plugin bypass vulnerability5.3CNA v3.10.5%2024-05-17
CVE-2024-27971Premmerce Permalink Manager for WooCommerce WordPress plugin local file inclusion8.3CNA v3.11.5%2024-05-17Fix
CVE-2024-27955Automatic WordPress plugin CSRF to privilege escalation8.8CNA v3.10.3%2024-05-17Fix
CVE-2024-27954Automatic WordPress plugin unauthenticated arbitrary file download and SSRF9.3CNA v3.172.8%2024-05-17NucleiEmerging ThreatsExploit codeFix
CVE-2024-27436Linux kernel ALSA USB audio driver out-of-bounds write5.5NVD v3.10.6%2024-05-17Fix
CVE-2024-27435Linux kernel nvme deadlock7.5CNA v3.10.4%2024-05-17Fix
CVE-2024-27434Linux kernel iwlwifi MVM driver denial of service7.1CNA v3.10.3%2024-05-17Fix
CVE-2024-27433Linux kernel MediaTek apmixedsys clock driver double free7.8v3.10.2%2024-05-17Fix
CVE-2024-27432Linux kernel MediaTek Ethernet PPE driver denial of service5.5v3.10.2%2024-05-17Fix
CVE-2024-27431Linux kernel cpumap XDP handling vulnerability7.8CNA v3.10.2%2024-05-17Fix
CVE-2024-27419Linux kernel NetRom sysctl handling race condition4.7NVD v3.10.2%2024-05-17Fix
CVE-2024-27418Linux kernel MCTP local output memory leak5.5v3.10.2%2024-05-17Fix
CVE-2024-27417Linux kernel IPv6 address netlink handler memory leak5.5v3.10.2%2024-05-17Fix
CVE-2024-27416Linux kernel Bluetooth HCI event handling vulnerability8.8CNA v3.10.4%2024-05-17Fix
CVE-2024-27415Linux kernel netfilter bridge multicast handling race condition8.8CNA v3.10.3%2024-05-17Fix
CVE-2024-27414Linux kernel rtnetlink bridge flags handling vulnerability7.8CNA v3.10.2%2024-05-17Fix
CVE-2024-27413Linux kernel EFI capsule loader vulnerability5.5v3.10.2%2024-05-17Fix
CVE-2024-27412Linux kernel bq27xxx battery I2C driver vulnerability5.5v3.10.2%2024-05-17Fix
CVE-2024-27411Linux kernel nouveau GPU driver denial of service7.8CNA v3.10.2%2024-05-17Fix
CVE-2024-27410Linux kernel nl80211 mesh ID handling vulnerability7.8CNA v3.10.3%2024-05-17Fix
CVE-2024-27409Linux kernel dw-edma HDMA driver race condition7.8CNA v3.10.2%2024-05-17Fix
CVE-2024-27408Linux kernel dw-edma eDMA driver race condition7.8CNA v3.10.2%2024-05-17Fix
CVE-2024-27407Linux kernel NTFS3 filesystem driver buffer overflow7.8CNA v3.10.3%2024-05-17Fix
CVE-2024-27406Linux kernel IOV iterator unit test null pointer dereference5.5v3.10.2%2024-05-17Fix
CVE-2024-27405Linux kernel USB NCM gadget driver vulnerability7.5CISA ADP v3.11.3%2024-05-17Fix
CVE-2024-27404Linux kernel MPTCP subflow remote ID handling race condition8.2CNA v3.10.4%2024-05-17Fix
CVE-2024-27403Linux kernel nftables flow offload route handling vulnerability7.8CNA v3.10.2%2024-05-17Fix
CVE-2024-27402Linux kernel Phonet pipe end point receive queue handling race condition5.8CISA ADP v3.10.2%2024-05-17Fix
CVE-2024-25906Comments Like Dislike WordPress plugin IP Restriction bypass vulnerability vulnerability4.3CNA v3.10.4%2024-05-17Fix
CVE-2024-25742Linux kernel AMD SEV-SNP and SEV-ES exception handling vulnerability6.5CISA ADP v3.10.2%2024-05-17Fix
CVE-2024-25595Defender Security WordPress plugin IP Restriction bypass vulnerability5.3v3.10.4%2024-05-17Fix
CVE-2024-24934Elementor WordPress plugin arbitrary file deletion and Phar deserialization8.1v3.10.7%2024-05-17Fix
CVE-2024-24882LMS by Masteriyo WordPress plugin privilege escalation9.8v3.12.1%2024-05-17NucleiFix
CVE-2024-24874Polls CP WordPress plugin content injection5.3CNA v3.10.4%2024-05-17Fix
CVE-2024-24873Polls CP WordPress plugin Polls Limitation bypass vulnerability5.3CNA v3.10.4%2024-05-17Fix
CVE-2024-24869Total Upkeep WordPress plugin arbitrary file download7.5CNA v3.10.7%2024-05-17Fix
CVE-2024-24715WordPress BookIt plugin Price bypass vulnerability vulnerability6.5CNA v3.10.5%2024-05-17Fix
CVE-2024-23583HCL BigFix Platform is susceptible to insufficiently protected credentials6.7CNA v3.10.2%2024-05-17Fix
CVE-2024-23522Formidable Forms WordPress plugin content injection6.1v3.10.3%2024-05-17Fix
CVE-2024-22429Dell CPG BIOS improper input validation7.5CNA v3.10.2%2024-05-17Fix
CVE-2024-22157SalesKing WordPress plugin unauthenticated privilege escalation9.8CNA v3.10.6%2024-05-17Fix
CVE-2024-22145InstaWP Connect WordPress plugin arbitrary option update to privilege escalation8.8v3.11.1%2024-05-17Exploit codeFix
CVE-2024-22139WordPress Manutenção plugin bypass vulnerability3.7CNA v3.10.4%2024-05-17Fix
CVE-2024-22120Time Based SQL injection in Zabbix Server Audit Log9.1CNA v3.176.6%2024-05-17NucleiEmerging ThreatsExploit codeFix
CVE-2024-21746Wp Ultimate Review WordPress plugin IP limit bypass vulnerability7.5v3.10.5%2024-05-17Fix
CVE-2024-5072Devolutions Server PAM JIT elevation feature improper input validation6.5CISA ADP v3.10.7%2024-05-17Fix
CVE-2024-5069SourceCodester Simple Online Mens Salon Management System view_service.php SQL injection9.8v3.10.6%2024-05-17
CVE-2024-5066PHPGurukul Online Course Registration System pincode-verification.php SQL injection8.8v3.10.6%2024-05-17
CVE-2024-5065PHPGurukul Online Course Registration System SQL injection9.8v3.10.7%2024-05-17
CVE-2024-5064PHPGurukul Online Course Registration System news-details.php SQL injection9.8v3.10.7%2024-05-17
CVE-2024-5063PHPGurukul Online Course Registration System index.php SQL injection9.8v3.10.7%2024-05-17
CVE-2024-5055Vulnerability of uncontrolled resource consumption in XAMPP7.5CNA v3.10.4%2024-05-17
CVE-2024-5052Resource consumption vulnerability in Cerberus FTP Enterprise7.5CNA v3.10.4%2024-05-17
CVE-2024-5051SourceCodester Gas Agency Management System edituser.php SQL injection8.8v3.10.6%2024-05-17
CVE-2024-5050Wangshen SecGate 3600 ?g=log_import_save unrestricted upload5.3CNA v4.00.4%2024-05-17
CVE-2024-5049Codezips E-Commerce Site editproduct.php unrestricted upload8.8v3.10.7%2024-05-17
CVE-2024-5048code-projects Budget Management index.php SQL injection9.8v3.10.6%2024-05-17
CVE-2024-5047SourceCodester Student Management System controller.php unrestricted upload9.8v3.10.9%2024-05-17
CVE-2024-5046SourceCodester Online Examination System registeracc.php SQL injection9.8v3.10.7%2024-05-17
CVE-2024-5045SourceCodester Online Birth Certificate Management System admin file access7.5v3.10.5%2024-05-17
CVE-2024-5044Emlog Pro Cookie improper authentication8.1v3.11.0%2024-05-17
CVE-2024-5043Emlog Pro setting.php unrestricted upload8.8v3.10.6%2024-05-17
CVE-2024-5042Red Hat RHODF-4.16-RHEL-9 submariner Operator sets unnecessary RBAC permissions6.6CNA v3.10.5%2024-05-17Fix
CVE-2024-5022Mozilla Focus spoofing4.4CISA ADP v3.10.1%2024-05-17Fix
CVE-2024-4789Cost Calculator Builder Pro WordPress plugin authenticated (Subscriber+) server-side request forgery6.4CNA v3.10.3%2024-05-17Fix
CVE-2024-4214Bill Minozzi Car Dealer cross-site scripting2.7CNA v3.10.4%2024-05-17Fix
CVE-2024-3580Popup4Phone WordPress plugin Editor+ stored XSS6.1CISA ADP v3.10.4%2024-05-17
CVE-2024-3551Penci Soledad Data Migrator WordPress plugin unauthenticated local file inclusion9.8CNA v3.10.7%2024-05-17Fix
CVE-2024-3292Tenable Nessus Agent race condition8.2CNA v3.10.2%2024-05-17Fix
CVE-2024-3291Tenable Nessus Agent privilege escalation7.8CNA v3.10.2%2024-05-17Fix
CVE-2024-3290Tenable Nessus race condition8.2CNA v3.10.2%2024-05-17Fix
CVE-2024-3289Tenable Nessus improper preservation of permissions7.8CNA v3.10.2%2024-05-17Fix
CVE-2024-3231Popup4Phone WordPress plugin unauthenticated stored XSS6.1CISA ADP v3.10.7%2024-05-17Nuclei
CVE-2024-2744Nextgen Gallery WordPress plugin Admin+ stored XSS4.3CISA ADP v3.10.4%2024-05-17Fix
CVE-2024-2697Swift Framework WordPress plugin Contributor+ stored XSS via shortcode6.5CISA ADP v3.10.3%2024-05-17Fix
CVE-2024-35302JetBrains TeamCity cross-site scripting5.4CNA v3.10.3%2024-05-16Fix
CVE-2024-35301JetBrains TeamCity improper handling of insufficient permissions5.5CNA v3.10.3%2024-05-16Fix
CVE-2024-35300JetBrains TeamCity cross-site scripting3.5CNA v3.10.3%2024-05-16Fix
CVE-2024-35299JetBrains YouTrack improper certificate validation5.9CNA v3.10.3%2024-05-16Fix
CVE-2024-35187stalwartlabs mail-server stalwart Mail Server has privilege escalation by design9.1CNA v3.10.7%2024-05-16Fix
CVE-2024-35185Denial of service of Minder Server with attacker-controlled REST endpoint5.3CNA v3.10.5%2024-05-16Fix
CVE-2024-35176REXML contains a denial of service5.3CNA v3.12.1%2024-05-16Exploit codeFix
CVE-2024-35039idcCMS cross-site request forgery3.8CISA ADP v3.10.2%2024-05-16
CVE-2024-34958idcCMS cross-site request forgery6.5CISA ADP v3.10.4%2024-05-16Exploit code
CVE-2024-34957idcCMS cross-site request forgery5.4CISA ADP v3.10.2%2024-05-16
CVE-2024-34905Cloudwise Flyfish buffer overflow7.5v3.10.6%2024-05-16
CVE-2024-34808JCH Optimize WordPress plugin path traversal4.3CNA v3.10.4%2024-05-16Fix
CVE-2024-34805iframe WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.3%2024-05-16Fix
CVE-2024-34760Magazine Blocks WordPress plugin cross-site scripting (XSS)5.9CNA v3.10.3%2024-05-16Fix
CVE-2024-34751Order Export and Order Import for WooCommerce WordPress plugin PHP object injection4.4CNA v3.10.2%2024-05-16Fix
CVE-2024-34582Sunhillo SureLine through 8.10.0 on RICI 5000 devices allows cgi/usrPasswd.cgi userid_change XSS within the Forgot Password feature.6.1CISA ADP v3.10.4%2024-05-16
CVE-2024-34273Njwt prototype pollution5.9CISA ADP v3.10.5%2024-05-16Fix
CVE-2024-31226Sunshine's unquoted executable path could lead to hijacked execution flow4.9CNA v3.10.2%2024-05-16Fix
CVE-2024-31142Xen x86: Incorrect logic for BTC/SRSO mitigations7.5CISA ADP v3.117.4%2024-05-16Fix
CVE-2024-30314Adobe Dreamweaver Desktop improper neutralization of special elements used in an OS command7.8CNA v3.10.9%2024-05-16Fix
CVE-2024-30309Adobe Substance 3D Painter TGA File Parsing Acces Violation Read vulnerability5.5CNA v3.10.2%2024-05-16Fix
CVE-2024-30308Adobe Substance 3D Painter PSD File Parsing Acces Violation Read vulnerability5.5CNA v3.10.2%2024-05-16Fix
CVE-2024-30307Adobe Substance 3D Painter BMP File Parsing out-of-bounds write7.8CNA v3.10.3%2024-05-16Fix
CVE-2024-30298Adobe Animate SWF File Parsing memory corruption5.5CNA v3.10.3%2024-05-16Fix
CVE-2024-30297Adobe Animate out-of-bounds write7.8CNA v3.10.3%2024-05-16Fix
CVE-2024-30296Adobe Animate out-of-bounds write7.8CNA v3.10.3%2024-05-16Fix
CVE-2024-30295Adobe Animate null pointer dereference7.8CNA v3.10.4%2024-05-16Fix
CVE-2024-30294Adobe Animate OGG File Parsing Heap memory corruption remote code execution7.8CNA v3.10.4%2024-05-16Fix
CVE-2024-30293Adobe Animate 2024 AI file parsing Stack base buffer overflow remote code execution7.8CNA v3.10.4%2024-05-16Fix
CVE-2024-30292Adobe FrameMaker GIF file parsing out of bound write7.8CNA v3.10.3%2024-05-16Fix
CVE-2024-30291Adobe FrameMaker TIF file parsing out of bound write7.8CNA v3.10.3%2024-05-16Fix
CVE-2024-30290Adobe FrameMaker WEBP File Parsing out of bound write7.8CNA v3.10.3%2024-05-16Fix
CVE-2024-30289Adobe FrameMaker XLS File Parsing buffer overflow7.8CNA v3.10.3%2024-05-16Fix
CVE-2024-30288Adobe FrameMaker 3DS File Parsing Heap memory corruption7.8CNA v3.10.3%2024-05-16Fix
CVE-2024-30287Adobe FrameMaker PDF File Pparsing out of bound read5.5CNA v3.10.2%2024-05-16Fix
CVE-2024-30286Adobe FrameMaker DOC File Parsing memory corruption5.5CNA v3.10.2%2024-05-16Fix
CVE-2024-30283Adobe FrameMaker ICO File Parsing Heap memory corruption5.5CNA v3.10.2%2024-05-16Fix
CVE-2024-30282Adobe Animate 2024 out of bound write remote code execution7.8CNA v3.10.3%2024-05-16Fix
CVE-2024-30281Adobe Substance3D Designer out-of-bounds read5.5CNA v3.10.3%2024-05-16Fix
CVE-2024-30275Adobe Aero Beta has an arbitrary code execution vulnerability when parsing svg files7.8CNA v3.10.4%2024-05-16Fix
CVE-2024-30274Adobe Substance 3D Painter ABC File Parsing an out-of-bounds write7.8CNA v3.10.3%2024-05-16Fix
CVE-2024-30060Microsoft Azure Monitor Agent elevation of privilege7.8CNA v3.10.5%2024-05-16Fix
CVE-2024-27260IBM AIX command execution8.4CNA v3.10.2%2024-05-16Fix
CVE-2024-24981UEFI firmware for some Intel(R) Server M50FCP Family products improper input validation7.5CNA v3.10.2%2024-05-16
CVE-2024-23980UEFI firmware for some Intel(R) Server D50FCP Family products privilege escalation7.5CNA v3.10.2%2024-05-16
CVE-2024-23487UEFI firmware for some Intel(R) Server D50DNP Family products improper input validation7.5CNA v3.10.2%2024-05-16
CVE-2024-22476Intel(R) Neural Compressor software some improper input validation10.0CNA v3.136.0%2024-05-16Nuclei
CVE-2024-22390Intel(R) FPGA products firmware for some improper input validation4.4CNA v3.10.2%2024-05-16
CVE-2024-22384Intel(R) Trace Analyzer and Collector software out-of-bounds read2.8CNA v3.10.2%2024-05-16
CVE-2024-22382Intel Server D50DNP Family firmware PprRequestLog module privilege escalation7.5CNA v3.10.2%2024-05-16
CVE-2024-22379Intel(R) Inspector software some uncontrolled search path6.7CNA v3.10.2%2024-05-16
CVE-2024-22095UEFI firmware for some Intel(R) Server D50DNP Family products improper input validation7.2CNA v3.10.2%2024-05-16
CVE-2024-22015Intel(R) DLB driver software improper input validation6.5CNA v3.10.2%2024-05-16
CVE-2024-21864Intel(R) Arc(TM) & Iris(R) Xe Graphics software some improper neutralization7.8CNA v3.10.3%2024-05-16
CVE-2024-21862Intel(R) Quartus(R) Prime Standard Edition Design software some uncontrolled search path6.7CNA v3.10.2%2024-05-16Fix
CVE-2024-21861Intel(R) GPA Framework software some uncontrolled search path6.7CNA v3.10.2%2024-05-16Fix
CVE-2024-21843Intel(R) Computing Improvement Program software uncontrolled search path6.7CNA v3.10.2%2024-05-16
CVE-2024-21841Intel(R) Distribution for GDB software uncontrolled search path6.7CNA v3.10.2%2024-05-16
CVE-2024-21837Intel(R) Quartus(R) Prime Lite Edition Design software some uncontrolled search path6.7CNA v3.10.2%2024-05-16Fix
CVE-2024-21835Intel(R) XTU software some insecure inherited permissions6.7CNA v3.10.2%2024-05-16Fix
CVE-2024-21831Intel(R) Processor Diagnostic Tool software some uncontrolled search path6.7CNA v3.10.2%2024-05-16Fix
CVE-2024-21828Intel(R) Ethernet Controller Administrative Tools software some improper access control6.7CNA v3.10.2%2024-05-16
CVE-2024-21823Intel Xeon processors DSA and IAA accelerators privilege escalation7.5CNA v3.10.2%2024-05-16Fix
CVE-2024-21818Intel(R) PCM software some uncontrolled search path6.7CNA v3.10.2%2024-05-16
CVE-2024-21814Intel(R) Chipset Device Software uncontrolled search path6.7CNA v3.10.2%2024-05-16Fix
CVE-2024-21813Intel(R) DTT software installers some resource exposure7.9CNA v3.10.2%2024-05-16
CVE-2024-21809Intel(R) Quartus(R) Prime Lite Edition Design software privilege escalation6.7CNA v3.10.2%2024-05-16Fix
CVE-2024-21792Intel(R) Neural Compressor software time-of-check time-of-use race condition4.7CNA v3.10.1%2024-05-16
CVE-2024-21788Intel(R) GPA software some uncontrolled search path6.7CNA v3.10.2%2024-05-16Fix
CVE-2024-21777Intel(R) Quartus(R) Prime Pro Edition Design Software some uncontrolled search path6.7CNA v3.10.2%2024-05-16Fix
CVE-2024-21774Intel(R) Processor Identification Utility software some uncontrolled search path6.7CNA v3.10.2%2024-05-16
CVE-2024-21772Intel(R) Advisor software some uncontrolled search path6.7CNA v3.10.2%2024-05-16Fix
CVE-2024-20793Adobe Illustrator 2024 TIF file parsing out of bound read information disclosure5.5CNA v3.10.2%2024-05-16Fix
CVE-2024-20792Adobe Illustrator TIF File Parsing use-after-free remote memory corruption7.8CNA v3.10.4%2024-05-16Fix
CVE-2024-20791Adobe Illustrator 2024 BMP File Parsing memory corruption7.8CNA v3.10.3%2024-05-16Fix
CVE-2024-20389Cisco ConfD incorrect privilege assignment7.8CNA v3.10.2%2024-05-16Fix
CVE-2024-20326Cisco ConfD OS command injection7.8CNA v3.10.3%2024-05-16Fix
CVE-2024-5023Arbitrary file read vulnerability in ConsoleMe via Limited Git command RCE9.3CNA v4.00.9%2024-05-16Fix
CVE-2024-4999Ligowave Unity/Pro/Mimo/APC arbitrary command injection9.4CNA v4.012.2%2024-05-16
CVE-2024-4993SQL injection vulnerability in SiAdmin5.4v3.10.3%2024-05-16
CVE-2024-4992SQL injection vulnerability in SiAdmin9.8CNA v3.10.5%2024-05-16
CVE-2024-4991SQL injection vulnerability in SiAdmin9.8CNA v3.10.5%2024-05-16
CVE-2024-4984Yoast SEO WordPress plugin authenticated (Contributor+) stored cross-site scripting6.4CNA v3.10.6%2024-05-16Fix
CVE-2024-4975code-projects Simple Chat System message cross-site scripting6.1v3.10.5%2024-05-16
CVE-2024-4974code-projects Simple Chat System register.php cross-site scripting6.1v3.10.5%2024-05-16
CVE-2024-4973code-projects Simple Chat System register.php SQL injection9.8v3.10.6%2024-05-16
CVE-2024-4972code-projects Simple Chat System login.php SQL injection9.8v3.10.6%2024-05-16
CVE-2024-4968SourceCodester Interactive Map with Marker Add Marker Marker Name cross-site scripting6.1v3.10.5%2024-05-16
CVE-2024-4967SourceCodester Interactive Map with Marker delete-mark.php SQL injection9.8v3.10.6%2024-05-16
CVE-2024-4966SourceCodester SchoolWebTech home.php unrestricted upload9.8v3.10.9%2024-05-16
CVE-2024-4965D-Link DAR-7000-40 resmanage.php os command injection9.8v3.12.9%2024-05-16
CVE-2024-4964D-Link DAR-7000-40 urlblist.php unrestricted upload9.8v3.12.5%2024-05-16
CVE-2024-4963D-Link DAR-7000-40 url.php unrestricted upload9.8v3.13.0%2024-05-16
CVE-2024-4962D-Link DAR-7000-40 resmanage.php unrestricted upload9.8v3.12.5%2024-05-16
CVE-2024-4961D-Link DAR-7000-40 onlineuser.php unrestricted upload9.8v3.12.3%2024-05-16
CVE-2024-4960D-Link DAR-7000-40 licenseauthorization.php unrestricted upload9.8v3.12.3%2024-05-16
CVE-2024-4956Nexus Repository 3 path traversal7.5CNA v3.118.2%2024-05-16Reported exploitedNucleiExploit codeFix
CVE-2024-4946SourceCodester Online Art Gallery Management System adminHome.php unrestricted upload8.8v3.10.7%2024-05-16
CVE-2024-4945SourceCodester Best Courier Management System view_parcel.php unrestricted upload9.8v3.10.9%2024-05-16
CVE-2024-4933SourceCodester Simple Online Bidding System SQL injection9.8v3.10.6%2024-05-16
CVE-2024-4932SourceCodester Simple Online Bidding System SQL injection9.8v3.10.6%2024-05-16
CVE-2024-4931SourceCodester Simple Online Bidding System SQL injection9.8v3.10.6%2024-05-16
CVE-2024-4930SourceCodester Simple Online Bidding System SQL injection8.8v3.10.5%2024-05-16
CVE-2024-4929SourceCodester Simple Online Bidding System cross-site request forgery4.3v3.10.3%2024-05-16
CVE-2024-4928SourceCodester Simple Online Bidding System SQL injection9.8v3.10.6%2024-05-16
CVE-2024-4927SourceCodester Simple Online Bidding System unrestricted upload9.8v3.10.8%2024-05-16
CVE-2024-4926SourceCodester School Intramurals Student Attendance Management System SQL injection6.5v3.10.5%2024-05-16
CVE-2024-4925SourceCodester School Intramurals Student Attendance Management System SQL injection6.5v3.10.5%2024-05-16
CVE-2024-4923Codezips E-Commerce Site addproduct.php unrestricted upload8.8v3.10.7%2024-05-16
CVE-2024-4922SourceCodester Simple Image Stack Website cross-site scripting6.1v3.10.4%2024-05-16
CVE-2024-4921SourceCodester Employee and Visitor Gate Pass Logging System unrestricted upload9.8v3.10.7%2024-05-16
CVE-2024-4920SourceCodester Online Discussion Forum Site registerH.php unrestricted upload9.8v3.10.8%2024-05-16
CVE-2024-4919Campcodes Online Examination System addCourseExe.php SQL injection9.8v3.10.6%2024-05-16
CVE-2024-4844Trellix ePolicy Orchestrator hard-coded credentials7.5CNA v3.10.2%2024-05-16
CVE-2024-4843Trellix ePolicy Orchestrator insecure direct object reference4.3CNA v3.10.3%2024-05-16
CVE-2024-4838ConvertPlus WordPress plugin authenticated (Contributor+) PHP object injection7.5CNA v3.10.6%2024-05-16Fix
CVE-2024-4826SQL injection vulnerability in Simple PHP Shopping Cart9.3CNA v4.00.4%2024-05-16
CVE-2024-4760A voltage glitch during the startup of EEFC NVM controllers on Microchip SAM E70/S70/V70/V71, SAM G55, SAM 4C/4S/4N/4E, and SAM 3S/3N/3U microcontrollers allows access to the memory bus via the debug interface even if the security bit is set.6.3CNA v3.10.2%2024-05-16Fix
CVE-2024-4733ShiftController Employee Shift Scheduling WordPress plugin PHP object injection7.5CNA v3.10.6%2024-05-16Fix
CVE-2024-4635Menu Icons by ThemeIsle WordPress plugin stored cross-site scripting6.4CNA v3.10.4%2024-05-16Fix
CVE-2024-4634Elementor Header and Footer Builder WordPress plugin stored cross-site scripting5.4v3.10.4%2024-05-16Fix
CVE-2024-4617Rank Math SEO with AI Best SEO Tools WordPress plugin stored cross-site scripting6.4CNA v3.10.4%2024-05-16Fix
CVE-2024-4609Rockwell Automation Datalog function within in FactoryTalk® View SE contains SQL injection8.8CNA v4.00.7%2024-05-16Fix
CVE-2024-4603OpenSSL excessive time spent checking DSA keys and parameters5.3CISA ADP v3.11.1%2024-05-16Fix
CVE-2024-4580Master Addons WordPress plugin stored cross-site scripting5.4v3.10.3%2024-05-16Fix
CVE-2024-4546Custom Post Type Attachment WordPress plugin stored cross-site scripting6.4CNA v3.10.3%2024-05-16Fix
CVE-2024-4478Happy Addons for Elementor WordPress plugin stored cross-site scripting5.4v3.10.3%2024-05-16Fix
CVE-2024-4400BoldGrid Post and Page Builder stored cross-site scripting5.4v3.10.3%2024-05-16Fix
CVE-2024-4391Happy Addons for Elementor Authenticated Stored-XSS WordPress plugin stored cross-site scripting5.4v3.10.3%2024-05-16Fix
CVE-2024-4385Envo Extra WordPress plugin authenticated (Contributor+) cross-site scripting5.4v3.10.3%2024-05-16Fix
CVE-2024-4352Tutor LMS Pro WordPress plugin missing authorization to SQL injection8.8CNA v3.11.2%2024-05-16Fix
CVE-2024-4351Tutor LMS Pro WordPress plugin missing authorization to privilege escalation8.8CNA v3.11.0%2024-05-16Fix
CVE-2024-4326Remote code execution via `/apply_settings` and `/execute_code` in parisneo/lollms-webui9.8CNA v3.01.0%2024-05-16Fix
CVE-2024-4322Path traversal in parisneo/lollms-webui7.5CNA v3.031.0%2024-05-16NucleiExploit code
CVE-2024-4321Local file inclusion (LFI) in gaizhenbiao/ChuanhuChatGPT7.5CNA v3.00.6%2024-05-16
CVE-2024-4318Tutor LMS WordPress plugin authenticated (Instructor+) SQL injection6.5NVD v3.10.5%2024-05-16Fix
CVE-2024-4288Appointment Booking Calendar WordPress plugin stored cross-site scripting5.4v3.10.3%2024-05-16Fix
CVE-2024-4279Tutor LMS WordPress plugin insecure direct object reference6.5v3.10.4%2024-05-16Fix
CVE-2024-4263Improper access control in MLflow/MLflow5.4v3.10.3%2024-05-16Fix
CVE-2024-4223Tutor LMS WordPress plugin missing authorization9.8CNA v3.10.5%2024-05-16Fix
CVE-2024-4222Tutor LMS Pro WordPress plugin missing authorization8.2v3.10.3%2024-05-16Fix
CVE-2024-4204Bulk Posts Editing For WordPress WordPress plugin cross-site request forgery4.3CNA v3.10.2%2024-05-16Fix
CVE-2024-4181Command injection in run-llama/llama_index8.8CNA v3.02.1%2024-05-16Fix
CVE-2024-4078Arbitrary code execution in parisneo/lollms9.8CNA v3.00.9%2024-05-16Fix
CVE-2024-3887Royal Elementor Addons and Templates WordPress plugin stored cross-site scripting5.4v3.10.3%2024-05-16Fix
CVE-2024-3851Unrestricted file upload leading to XSS in imartinez/PrivateGPT5.4v3.10.3%2024-05-16
CVE-2024-3848Path traversal Bypass in MLflow/MLflow7.5v3.143.3%2024-05-16NucleiFix
CVE-2024-3750Visualizer: Tables and Charts Manager for WordPress WordPress plugin unauthorized access8.8CNA v3.10.6%2024-05-16Fix
CVE-2024-3644Newsletter Popup WordPress plugin Admin+ stored XSS4.8CISA ADP v3.10.4%2024-05-16
CVE-2024-3643Newsletter Popup WordPress plugin List deletion via CSRF8.8CISA ADP v3.10.3%2024-05-16
CVE-2024-3642Newsletter Popup WordPress plugin Subscriber deletion via CSRF6.9CISA ADP v3.10.3%2024-05-16
CVE-2024-3641Newsletter Popup WordPress plugin unauthenticated stored XSS6.1CISA ADP v3.10.4%2024-05-16
CVE-2024-3640Rockwell Automation FactoryTalk Remote Access installer executable path vulnerability7.0CNA v4.00.3%2024-05-16Exploit codeFix
CVE-2024-3609ReviewX Multi-criteria Rating and Reviews for WooCommerce WordPress plugin missing authorization4.3CNA v3.10.4%2024-05-16Fix
CVE-2024-3435Path traversal in parisneo/lollms-webui8.4CNA v3.00.8%2024-05-16Fix
CVE-2024-3403Local file inclusion in imartinez/PrivateGPT7.5CNA v3.01.1%2024-05-16
CVE-2024-3286Lenovo Printers stack-based buffer overflow7.5CNA v3.10.5%2024-05-16
CVE-2024-3134Master Addons for Elementor WordPress plugin stored cross-site scripting5.4v3.10.3%2024-05-16Fix
CVE-2024-3126Command injection in parisneo/lollms-webui8.4CNA v3.01.3%2024-05-16Fix
CVE-2024-2619Elementor Header and Footer Builder WordPress plugin authenticated (Author+) HTML injection5.4v3.10.4%2024-05-16Fix
CVE-2024-2366Remote code execution in parisneo/lollms-webui9.0CNA v3.00.7%2024-05-16
CVE-2024-2361Arbitrary upload and Read via path traversal in parisneo/lollms-webui9.6CNA v3.00.6%2024-05-16
CVE-2024-2358Path traversal leading to remote code execution in parisneo/lollms-webui9.8CNA v3.01.1%2024-05-16
CVE-2024-1417Local code injection vulnerability in AuthPoint Password Manager App for macOS Safari7.8CNA v3.10.7%2024-05-16
CVE-2024-35184Paperless-ngx's remote user auth via header works even when disabling it for API5.5CNA v3.10.5%2024-05-15Fix
CVE-2024-35183wolfictl leaks GitHub tokens to remote non-GitHub git servers4.4CNA v3.10.2%2024-05-15Fix
CVE-2024-35179stalwartlabs mail-server unprivileged Stalwart Mail Server user can read files as root6.8CNA v3.10.6%2024-05-15Fix
CVE-2024-35109idcCMS cross-site request forgery6.5CISA ADP v3.10.2%2024-05-15
CVE-2024-35108idcCMS cross-site request forgery8.8CISA ADP v3.10.3%2024-05-15
CVE-2024-35102VITEC AvediaServer insecure permissions8.8CISA ADP v3.10.5%2024-05-15
CVE-2024-34955code-projects Budget Management SQL injection9.8CISA ADP v3.10.6%2024-05-15
CVE-2024-34954code-projects Budget Management cross-site scripting6.1CISA ADP v3.10.3%2024-05-15
CVE-2024-34913Technocking R-pan-scaffolding arbitrary file upload5.4v3.10.4%2024-05-15
CVE-2024-34909kykms An arbitrary file upload5.4NVD v3.10.5%2024-05-15
CVE-2024-34906DooTask An arbitrary file upload5.4v3.10.4%2024-05-15
CVE-2024-34101Adobe Acrobat Reader DC PDF File Parsing out-of-bounds read information disclosure5.5CNA v3.10.5%2024-05-15Fix
CVE-2024-34100Adobe Acrobat Reader use-after-free7.8CNA v3.10.4%2024-05-15Fix
CVE-2024-34099Adobe [Pwn2Own] Acrobat sandbox bypass part 2 of 27.8CNA v3.10.4%2024-05-15Fix
CVE-2024-34098Adobe [Pwn2Own] Acrobat sandbox bypass part 1 of 27.8CNA v3.10.4%2024-05-15Fix
CVE-2024-34097Adobe Acrobat Reader DC Annotation use-after-free remote code execution7.8CNA v3.10.6%2024-05-15Fix
CVE-2024-34096Adobe Acrobat Reader DC Annotation use-after-free remote code execution7.8CNA v3.10.6%2024-05-15Fix
CVE-2024-34095Adobe Acrobat Reader DC Annotation use-after-free remote code execution7.8CNA v3.10.6%2024-05-15Fix
CVE-2024-34094Adobe Acrobat Reader DC Annotation use-after-free remote code execution7.8CNA v3.10.6%2024-05-15Fix
CVE-2024-34082Grav arbitrary file read to account takeover8.5CNA v3.13.0%2024-05-15Fix
CVE-2024-34025CyberPower PowerPanel business use of hard-coded password9.8CNA v3.10.6%2024-05-15Fix
CVE-2024-33625CyberPower PowerPanel business use of hard-coded password9.8CNA v3.10.5%2024-05-15Fix
CVE-2024-33615CyberPower PowerPanel business relative path traversal8.8CNA v3.10.7%2024-05-15Fix
CVE-2024-32888AWS amazon-redshift-jdbc-driver amazon JDBC driver for Redshift SQL injection10.0CNA v3.10.8%2024-05-15Fix
CVE-2024-32053CyberPower PowerPanel business use of hard-coded credentials9.8CNA v3.10.5%2024-05-15Fix
CVE-2024-32047CyberPower PowerPanel business active debug code9.8CNA v3.10.5%2024-05-15Fix
CVE-2024-32042CyberPower PowerPanel business storing passwords in a recoverable format7.5v3.10.4%2024-05-15Fix
CVE-2024-31856CyberPower PowerPanel business SQL injection8.8v3.10.5%2024-05-15Fix
CVE-2024-31410CyberPower PowerPanel business use of hard-coded cryptographic key6.5NVD v3.10.2%2024-05-15Fix
CVE-2024-31409CyberPower PowerPanel business incorrect authorization7.5v3.10.4%2024-05-15Fix
CVE-2024-31216source-controller leaks theAzure Storage SAS token into logs on connection errors5.1CNA v3.10.2%2024-05-15Fix
CVE-2024-30312TALOS-2024-1952 Adobe Acrobat Reader Font CPAL numColorRecords out-of-bounds read5.5CNA v3.11.8%2024-05-15Fix
CVE-2024-30311TALOS-2024-1946 Adobe Acrobat Reader Font gvar GlyphVariationData out-of-bounds read5.5CNA v3.12.0%2024-05-15Fix
CVE-2024-30310Adobe Acrobat Reader DC PDF File Parsing out-of-bounds write remote code execution7.8CNA v3.12.8%2024-05-15Fix
CVE-2024-30284Adobe Acrobat Reader DC Annotation use-after-free remote code execution7.8CNA v3.14.3%2024-05-15Fix
CVE-2024-28087Bonitasoft Runtime Community edition's contains an insecure direct object references6.5CISA ADP v3.10.3%2024-05-15Fix
CVE-2024-28042SUBNET PowerSYSTEM Center Reliance on insufficiently Trustworthy component8.6CNA v4.00.2%2024-05-15Fix
CVE-2024-27593Filter function of Eramba Version stored cross-site scripting5.4CISA ADP v3.10.3%2024-05-15
CVE-2024-27353InsydeH2O SdHost and SdMmcDevice drivers memory corruption7.4CISA ADP v3.10.2%2024-05-15
CVE-2024-27244Zoom Workplace VDI App for Windows insufficient verification of data authenticity6.7CNA v3.10.1%2024-05-15Fix
CVE-2024-27243Zoom Apps buffer overflow6.5CNA v3.10.4%2024-05-15Fix
CVE-2024-25743Linux kernel AMD SEV-SNP and SEV-ES interrupt handling improper input validation7.1CISA ADP v3.10.2%2024-05-15Fix
CVE-2024-25079InsydeH2O HddPassword memory corruption7.4CISA ADP v3.10.2%2024-05-15Fix
CVE-2024-25078Insyde Kernel StorageSecurityCommandDxe memory corruption7.4CISA ADP v3.10.2%2024-05-15Fix
CVE-2024-20394Cisco AppDynamics denial of service5.5CNA v3.10.1%2024-05-15Fix
CVE-2024-20392Cisco Secure Email HTTP response splitting6.1CNA v3.10.4%2024-05-15Fix
CVE-2024-20391Cisco Secure Client missing authentication6.8CNA v3.10.3%2024-05-15Fix
CVE-2024-20383Cisco Secure Email and Web Manager stored cross-site scripting4.8CNA v3.10.4%2024-05-15Fix
CVE-2024-20369Cisco Network Services Orchestrator open redirect4.7CNA v3.10.3%2024-05-15Fix
CVE-2024-20366Cisco Network Services Orchestrator external control of a file path7.8CNA v3.10.2%2024-05-15Fix
CVE-2024-20258Cisco Secure Email cross-site scripting6.1CNA v3.10.3%2024-05-15Fix
CVE-2024-20257Cisco Secure Email cross-site scripting4.8CNA v3.10.3%2024-05-15Fix
CVE-2024-20256Cisco Secure Email and Web Manager cross-site scripting4.8CNA v3.10.3%2024-05-15Fix
CVE-2024-4976Out-of-bounds array write in Xpdf due to missing object type check2.1CNA v4.00.2%2024-05-15Fix
CVE-2024-4950Google Chrome Downloads inappropriate implementation6.5v3.10.9%2024-05-15Fix
CVE-2024-4949Google Chrome V8 use-after-free6.5NVD v3.10.9%2024-05-15Fix
CVE-2024-4948Google Chrome Dawn use-after-free6.5NVD v3.11.0%2024-05-15Fix
CVE-2024-4947Google Chromium V8 type confusion9.6v3.115.2%2024-05-15KEVExploit codeFix
CVE-2024-4918Campcodes Online Examination System updateQuestion.php SQL injection9.8v3.10.6%2024-05-15
CVE-2024-4917Campcodes Online Examination System submitAnswerExe.php SQL injection9.8v3.10.6%2024-05-15
CVE-2024-4916Campcodes Online Examination System selExamAttemptExe.php SQL injection9.8v3.10.6%2024-05-15
CVE-2024-4915Campcodes Online Examination System result.php SQL injection9.8v3.10.8%2024-05-15
CVE-2024-4914Campcodes Online Examination System ranking-exam.php SQL injection9.8v3.10.7%2024-05-15
CVE-2024-4913Campcodes Online Examination System exam.php SQL injection9.8v3.10.5%2024-05-15
CVE-2024-4912Campcodes Online Examination System addExamExe.php SQL injection9.8v3.10.5%2024-05-15
CVE-2024-4911Campcodes Complete Web-Based School Management System SQL injection6.5v3.10.4%2024-05-15
CVE-2024-4910Campcodes Complete Web-Based School Management System SQL injection6.5v3.10.4%2024-05-15
CVE-2024-4909Campcodes Complete Web-Based School Management System student_due_payment.php SQL injection6.5v3.10.4%2024-05-15
CVE-2024-4908Campcodes Complete Web-Based School Management System student_attendance_history1.php SQL injection6.5v3.10.4%2024-05-15
CVE-2024-4907Campcodes Complete Web-Based School Management System show_student2.php SQL injection6.5v3.10.4%2024-05-15
CVE-2024-4906Campcodes Complete Web-Based School Management System show_student1.php SQL injection7.5v3.10.4%2024-05-15
CVE-2024-4905Kashipara College Management System view_students_each_detail.php SQL injection8.8v3.10.5%2024-05-15
CVE-2024-4904Byzoro Smart S200 Management Platform userattestation.php unrestricted upload5.3CNA v4.00.6%2024-05-15
CVE-2024-4903Tongda OA delete.php SQL injection5.3CNA v4.00.4%2024-05-15
CVE-2024-4894ITPison OMICARD EDM server-side request forgery5.3CNA v3.10.5%2024-05-15Fix
CVE-2024-4893DigiWin EasyFlow .NET SQL injection9.8CNA v3.10.8%2024-05-15Fix
CVE-2024-4847Alt Text AI WordPress plugin SQL injection8.8CNA v3.10.6%2024-05-15Fix
CVE-2024-4837Progress Software Telerik Report Server trust boundary violation5.3CNA v3.10.4%2024-05-15Fix
CVE-2024-4734Import and export users and customers WordPress plugin stored cross-site scripting4.4CNA v3.10.3%2024-05-15Fix
CVE-2024-4702Mega Elements WordPress plugin stored cross-site scripting5.4v3.10.3%2024-05-15Fix
CVE-2024-4670All-in-One Video Gallery WordPress plugin local file inclusion8.8CNA v3.10.6%2024-05-15Fix
CVE-2024-4656Import and export users and customers WordPress plugin stored cross-site scripting4.4CNA v3.10.3%2024-05-15Fix
CVE-2024-4636Image Optimization by Optimole WordPress plugin stored cross-site scripting6.4CNA v3.10.4%2024-05-15Fix
CVE-2024-4622alpitronic Hypercharger EV Charger use of default credentials8.3CNA v4.00.5%2024-05-15
CVE-2024-4618Exclusive Addons for Elementor WordPress plugin stored cross-site scripting5.4v3.10.4%2024-05-15Fix
CVE-2024-4373Sina Extension for Elementor WordPress plugin stored cross-site scripting5.4v3.10.4%2024-05-15Fix
CVE-2024-4370WPZOOM Addons for Elementor (Templates, Widgets) WordPress plugin stored cross-site scripting5.4v3.10.4%2024-05-15Fix
CVE-2024-4363Visual Portfolio, Photo Gallery and Post Grid WordPress plugin stored cross-site scripting6.4CNA v3.10.4%2024-05-15Fix
CVE-2024-4357Progress Software Telerik Report Server XML external entity Processing information disclosure6.5CNA v3.10.7%2024-05-15Fix
CVE-2024-4208Gutenberg Blocks with AI by Kadence WP WordPress plugin stored cross-site scripting5.4v3.10.3%2024-05-15Fix
CVE-2024-4202Progress Telerik Reporting code injection7.7CNA v3.10.3%2024-05-15Fix
CVE-2024-4200Progress Telerik Reporting Local deserialization7.7CNA v3.10.3%2024-05-15Fix
CVE-2024-4199Bulk Posts Editing For WordPress WordPress plugin unauthorized access4.3CNA v3.10.3%2024-05-15Fix
CVE-2024-4010Email Subscribers by Icegram Express WordPress plugin missing authorization in handle_ajax_request8.8CNA v3.10.4%2024-05-15Fix
CVE-2024-3970Server-side request forgery vulnerability in iManager5.3CNA v3.10.5%2024-05-15Fix
CVE-2024-3968Remote code execution vulnerability in the iManager7.8CNA v3.10.7%2024-05-15Fix
CVE-2024-3967Remote code execution vulnerability in the iManager7.6CNA v3.10.6%2024-05-15Fix
CVE-2024-3892Local code execution vulnerability in Telerik UI for WinForms7.2CNA v3.10.2%2024-05-15Fix
CVE-2024-3824Base64 Encoder/Decoder WordPress plugin settings reset via CSRF5.5CISA ADP v3.10.2%2024-05-15
CVE-2024-3823Base64 Encoder/Decoder WordPress plugin stored XSS via CSRF2.4CISA ADP v3.10.2%2024-05-15
CVE-2024-3822Base64 Encoder/Decoder WordPress plugin reflected XSS4.8CISA ADP v3.10.7%2024-05-15Nuclei
CVE-2024-3749SP Project and Document Manager WordPress plugin Subscriber+ file download via IDOR6.5CISA ADP v3.10.5%2024-05-15
CVE-2024-3748SP Project and Document Manager WordPress plugin data update via IDOR6.5CISA ADP v3.10.4%2024-05-15
CVE-2024-3744Kubernetes azure-file-csi-driver in versions and discloses service account tokens in logs6.5CNA v3.10.3%2024-05-15Fix
CVE-2024-3634month name translation benaceur WordPress plugin Admin+ stored XSS4.8CISA ADP v3.10.4%2024-05-15Fix
CVE-2024-3631HL Twitter WordPress plugin Unlink Twitter account via CSRF4.3CISA ADP v3.10.2%2024-05-15
CVE-2024-3630HL Twitter WordPress plugin Admin+ stored XSS via widget5.4CISA ADP v3.10.3%2024-05-15
CVE-2024-3629HL Twitter WordPress plugin settings update via CSRF2.4CISA ADP v3.10.2%2024-05-15
CVE-2024-3548Shortcodes Ultimate WordPress plugin Contributor+ stored XSS6.1NVD v3.10.4%2024-05-15Fix
CVE-2024-3488File upload vulnerability in unauthenticated session found in iManager5.6CNA v3.10.4%2024-05-15Fix
CVE-2024-3487Broken authentication vulnerability in iManager3.5CNA v3.10.4%2024-05-15Fix
CVE-2024-3486XML external entity injection vulnerability in iManager7.8CNA v3.10.5%2024-05-15Fix
CVE-2024-3485Server-side request forgery vulnerability in iManager5.3CNA v3.10.3%2024-05-15Fix
CVE-2024-3484Path traversal vulnerability found in iManager5.7CNA v3.10.5%2024-05-15Fix
CVE-2024-3483Remote code execution vulnerability in the iManager7.8CNA v3.11.0%2024-05-15Fix
CVE-2024-3407WP Prayer WordPress plugin arbitrary Prayer deletion via CSRF5.3CISA ADP v3.10.2%2024-05-15
CVE-2024-3406WP Prayer WordPress plugin email settings update via CSRF8.8CISA ADP v3.10.3%2024-05-15
CVE-2024-3405WP Prayer WordPress plugin settings update via CSRF7.6CISA ADP v3.10.3%2024-05-15
CVE-2024-3319Security implication in SailPoint Identity Security Cloud IdentityProfile API endpoints9.1CNA v3.10.8%2024-05-15
CVE-2024-3318SailPoint Identity Security Cloud Connector file path traversal4.2CNA v3.10.4%2024-05-15
CVE-2024-3317SailPoint Identity Security Cloud improper access control6.5CNA v3.10.4%2024-05-15
CVE-2024-3189Gutenberg Blocks by Kadence Blocks WordPress plugin stored cross-site scripting5.4v3.10.4%2024-05-15Fix
CVE-2024-3182TIBCO Hawk information disclosure6.5CNA v3.10.2%2024-05-15Fix
CVE-2024-2248JFrog Artifactory header injection6.4CNA v3.10.3%2024-05-15Fix
CVE-2024-0437Password Protected WordPress plugin information disclosure4.3CNA v3.10.3%2024-05-15Fix
CVE-2024-35205The WPS Office (aka cn.wps.moffice_eng) application before 17.0.0 for Android fails to properly sanitize file names before processing them through external application interactions, leading to a form of path traversal. This potentially enables any application to dispatch a crafted library file, aimi7.8CISA ADP v3.10.8%2024-05-14Exploit code
CVE-2024-35204Veritas System Recovery installation folder permissions vulnerability8.4CISA ADP v3.10.2%2024-05-14
CVE-2024-35175Sshpiper's Enabling of Proxy protocol without proper feature flagging allows faking source address5.3CNA v3.10.3%2024-05-14Fix
CVE-2024-35172ShortPixel Adaptive Images WordPress plugin server side request forgery (SSRF)4.4CNA v3.10.4%2024-05-14Fix
CVE-2024-35171Academy LMS WordPress plugin sensitive data exposure5.3v3.10.6%2024-05-14Fix
CVE-2024-35170Sticky banner WordPress plugin cross-site scripting (XSS)5.9CNA v3.10.4%2024-05-14Fix
CVE-2024-35169All Bootstrap Blocks WordPress plugin cross-site scripting (XSS)5.9CNA v3.10.4%2024-05-14Fix
CVE-2024-35167Envo's Elementor Templates and Widgets for WooCommerce WordPress plugin cross-site scripting (XSS)5.4v3.10.4%2024-05-14Fix
CVE-2024-35166FileBird WordPress Media Library Folders and File Manager plugin sensitive data exposure7.5v3.10.6%2024-05-14Fix
CVE-2024-35165Gutenify WordPress plugin sensitive data exposure via API5.3CNA v3.10.6%2024-05-14Fix
CVE-2024-35099TOTOLINK LR350 buffer overflow9.8CISA ADP v3.10.8%2024-05-14
CVE-2024-35050SurveyKing insufficient session expiration8.8CISA ADP v3.10.7%2024-05-14
CVE-2024-35049SurveyKing insufficient session expiration9.1CISA ADP v3.10.7%2024-05-14
CVE-2024-35048SurveyKing insufficient session expiration4.3CISA ADP v3.10.4%2024-05-14
CVE-2024-35012idcCMS cross-site request forgery6.3CISA ADP v3.10.2%2024-05-14
CVE-2024-35011idcCMS cross-site request forgery5.4CISA ADP v3.10.2%2024-05-14
CVE-2024-35010idcCMS cross-site request forgery8.8CISA ADP v3.10.3%2024-05-14
CVE-2024-35009idcCMS cross-site request forgery8.8CISA ADP v3.10.3%2024-05-14
CVE-2024-34974Tenda AC18 out-of-bounds read8.2CISA ADP v3.10.7%2024-05-14
CVE-2024-34950D-Link DIR-822 out-of-bounds read7.5CISA ADP v3.15.2%2024-05-14
CVE-2024-34946Tenda FH1206 stack-based buffer overflow6.5CISA ADP v3.10.7%2024-05-14
CVE-2024-34945Tenda FH1206 buffer overflow9.8CISA ADP v3.10.9%2024-05-14
CVE-2024-34944Tenda FH1206 stack-based buffer overflow8.8CISA ADP v3.10.4%2024-05-14
CVE-2024-34943Tenda FH1206 stack-based buffer overflow9.8CISA ADP v3.10.9%2024-05-14
CVE-2024-34942Tenda FH1206 stack-based buffer overflow8.8CISA ADP v3.10.9%2024-05-14
CVE-2024-34921TOTOLINK X5000R OS command injection8.8CISA ADP v3.19.2%2024-05-14Emerging Threats
CVE-2024-34914PHP Censor uses a weak hashing algorithm for the remember me key5.3CISA ADP v3.10.3%2024-05-14Fix
CVE-2024-34899AVideo cross-site scripting vulnerability in the view/about.php page5.4CISA ADP v3.10.5%2024-05-14Fix
CVE-2024-34828Church Admin WordPress plugin cross-site request forgery (CSRF)4.3CNA v3.10.3%2024-05-14Fix
CVE-2024-34827Translate Multilingual sites TranslatePress WordPress plugin cross-site request forgery (CSRF)4.3CNA v3.10.2%2024-05-14Fix
CVE-2024-34825Social Warfare WordPress plugin cross-site request forgery (CSRF)4.3CNA v3.10.2%2024-05-14Fix
CVE-2024-34823Arigato Autoresponder and Newsletter WordPress plugin cross-site request forgery (CSRF)4.3CNA v3.10.2%2024-05-14Fix
CVE-2024-34818WebinarPress WordPress plugin cross-site request forgery7.1CNA v3.10.2%2024-05-14Fix
CVE-2024-34817CRM Perks Integration for Pipedrive and Contact Form 7 cross-site request forgery4.3CNA v3.10.2%2024-05-14Fix
CVE-2024-34816WPCal.io WordPress plugin cross-site request forgery (CSRF)5.4CNA v3.10.2%2024-05-14Fix
CVE-2024-34814Unyson WordPress plugin cross-site request forgery (CSRF)5.4v3.10.2%2024-05-14Fix
CVE-2024-34812ShopBuilder WordPress plugin sensitive data exposure5.3CNA v3.10.6%2024-05-14Fix
CVE-2024-34811WP SMS WordPress plugin cross-site scripting (XSS)4.8v3.10.4%2024-05-14Fix
CVE-2024-34773Siemens Solid Edge stack-based buffer overflow7.8CNA v3.10.3%2024-05-14Fix
CVE-2024-34772Siemens Solid Edge out-of-bounds read7.8CNA v3.10.3%2024-05-14Fix
CVE-2024-34771Siemens Solid Edge heap-based buffer overflow7.8CNA v3.10.3%2024-05-14Fix
CVE-2024-34749Aidin Phormer cross-site scripting6.1CISA ADP v3.10.7%2024-05-14
CVE-2024-34717PrestaShop invoice download information disclosure5.3CNA v3.10.5%2024-05-14Fix
CVE-2024-34716PrestaShop customer contact form file upload vulnerability9.7CNA v3.156.4%2024-05-14Exploit codeFix
CVE-2024-34714Hoppscotch extension responds to calls made by origins not in the domain list7.6CNA v3.10.3%2024-05-14Fix
CVE-2024-34713sshproxy vulnerable to SSH option injection3.5CNA v3.10.4%2024-05-14Fix
CVE-2024-34712Oceanic allows unsanitized user input to lead to path traversal in URLs6.5CNA v3.10.6%2024-05-14Fix
CVE-2024-34709Directus lacks Session Tokens Invalidation5.4CNA v3.10.5%2024-05-14Fix
CVE-2024-34708Directus allows redacted data extraction on the API through alias4.9CNA v3.10.8%2024-05-14Fix
CVE-2024-34707Nautobot's BANNER_* configuration can be used to inject arbitrary HTML content into Nautobot pages7.5CNA v3.10.6%2024-05-14Fix
CVE-2024-34706valtimo-platform valtimo-frontend-libraries @valtimo/components exposes access token to form.io9.8CNA v3.11.1%2024-05-14Fix
CVE-2024-34704era-compiler-solidity contains a `xor(zext(cmp), -1)` misoptimization5.9CNA v3.10.5%2024-05-14
CVE-2024-34701CreateWiki vulnerable to impersonation of wiki requester5.9CNA v3.10.6%2024-05-14
CVE-2024-34699GZTimeWalker GZ::CTF team name field vulnerability6.5CNA v3.10.6%2024-05-14Fix
CVE-2024-34698freescout-help-desk freescout prototype pollution in getQueryParam Function (URL Query parser)4.6CNA v3.10.5%2024-05-14Fix
CVE-2024-34697Freescout vulnerable to stored HTML injection in Editing Received Emails7.6CNA v3.10.6%2024-05-14Fix
CVE-2024-34695SakuraIsayeki WOWS-Karma WOWS Karma vulnerable to a post submission bounce/timing attack6.3CNA v3.10.8%2024-05-14
CVE-2024-34687Cross-site scripting vulnerability in SAP NetWeaver Application server for ABAP and ABAP Platform6.5CNA v3.10.4%2024-05-14Fix
CVE-2024-34559Ghost WordPress plugin sensitive data exposure via Log file7.5CNA v3.10.7%2024-05-14Fix
CVE-2024-34557Barcode Scanner with Inventory and Order Manager WordPress plugin cross-site request forgery (CSRF)4.3CNA v3.10.3%2024-05-14Fix
CVE-2024-34556Barcode Scanner with Inventory and Order Manager WordPress plugin sensitive data exposure5.3CNA v3.10.6%2024-05-14Fix
CVE-2024-34555Z-Downloads WordPress plugin Auth. arbitrary file upload9.1CNA v3.11.2%2024-05-14Fix
CVE-2024-34550Dynamics 365 Integration WordPress plugin sensitive data exposure5.3CNA v3.10.6%2024-05-14Fix
CVE-2024-34549WP Job Manager WordPress plugin sensitive data exposure5.3CNA v3.10.6%2024-05-14Fix
CVE-2024-34445SKT Addons for Elementor WordPress plugin cross-site scripting (XSS)5.4v3.10.4%2024-05-14Fix
CVE-2024-34441Easy Affiliate Links WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.4%2024-05-14Fix
CVE-2024-34440AI Engine WordPress plugin Auth. arbitrary file upload7.2NVD v3.10.8%2024-05-14Fix
CVE-2024-34439DS Site Message WordPress plugin cross-site request forgery (CSRF)4.3CNA v3.10.2%2024-05-14Fix
CVE-2024-34437Form Maker by 10Web WordPress plugin cross-site scripting (XSS)4.8v3.10.4%2024-05-14Fix
CVE-2024-34436SKT Addons for Elementor WordPress plugin cross-site scripting (XSS)5.4v3.10.4%2024-05-14Fix
CVE-2024-34433One Click Demo Import WordPress plugin PHP object injection7.2v3.10.5%2024-05-14Fix
CVE-2024-34432Better Elementor Addons WordPress plugin cross-site scripting (XSS)5.4v3.10.4%2024-05-14Fix
CVE-2024-34431WP etracker WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.4%2024-05-14
CVE-2024-34430TT Custom Post Type Creator WordPress plugin cross-site scripting (XSS)5.9CNA v3.10.4%2024-05-14
CVE-2024-34429Simple Website Banner WordPress plugin cross-site scripting (XSS)5.9CNA v3.10.4%2024-05-14Fix
CVE-2024-34428AWSOM News Announcement WordPress plugin cross-site scripting (XSS)5.9CNA v3.10.4%2024-05-14
CVE-2024-34427WP Favorite Posts WordPress plugin cross-site request forgery (CSRF)4.3CNA v3.10.2%2024-05-14
CVE-2024-34426Brozzme Scroll Top WordPress plugin cross-site scripting (XSS)5.9CNA v3.10.4%2024-05-14
CVE-2024-34425QuickieBar WordPress plugin cross-site scripting (XSS)5.9CNA v3.10.4%2024-05-14
CVE-2024-34424Featured Content Gallery WordPress plugin cross-site scripting (XSS)5.9CNA v3.10.4%2024-05-14
CVE-2024-34423Forty Four 404 Plugin for WordPress cross-site scripting (XSS)5.9CNA v3.10.4%2024-05-14
CVE-2024-34422Viet Affiliate Link WordPress plugin cross-site scripting (XSS)5.9CNA v3.10.4%2024-05-14
CVE-2024-34421BlogLentor Blog Designer Pack for Elementor WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.4%2024-05-14
CVE-2024-34420Comments Evolved for WordPress plugin cross-site scripting (XSS)5.9CNA v3.10.4%2024-05-14
CVE-2024-34419Configure Login Timeout WordPress plugin cross-site scripting (XSS)5.9CNA v3.10.4%2024-05-14
CVE-2024-34418WPCS ( WordPress Custom Search ) plugin cross-site scripting (XSS)5.9CNA v3.10.4%2024-05-14
CVE-2024-34417Viet Nam Affiliate WordPress plugin cross-site scripting (XSS)5.9CNA v3.10.4%2024-05-14
CVE-2024-34416Pk Favicon Manager WordPress plugin arbitrary file upload9.1CNA v3.10.8%2024-05-14
CVE-2024-34415Thim Elementor Kit WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.4%2024-05-14Fix
CVE-2024-34411canvasio3D Light WordPress plugin arbitrary file upload9.9CNA v3.10.8%2024-05-14
CVE-2024-34365Apache Karaf Cave: Cave SSRF and arbitrary file access9.1CISA ADP v3.11.2%2024-05-14Fix
CVE-2024-34360Spacemesh go-spacemesh activation transaction validation vulnerability8.2CNA v3.10.7%2024-05-14Fix
CVE-2024-34359llama-cpp-python chat template parser server-side template injection9.7CNA v3.126.0%2024-05-14Fix
CVE-2024-34358TYPO3 vulnerable to an uncontrolled resource consumption in the ShowImageController5.3CNA v3.10.5%2024-05-14Fix
CVE-2024-34357TYPO3 vulnerable to cross-site scripting in ShowImageController5.4CNA v3.10.5%2024-05-14Fix
CVE-2024-34356TYPO3 vulnerable to cross-site scripting in the Form Manager module5.4CNA v3.10.5%2024-05-14Fix
CVE-2024-34355TYPO3 vulnerable to an HTML injection in the History module3.5CNA v3.10.6%2024-05-14Fix
CVE-2024-34354CMSaasStarter: JWT Token not Verified on Server Session6.5CNA v3.10.3%2024-05-14
CVE-2024-34353matrix-sdk-crypto contains a log exposure of private key of the server-side key backup5.5CNA v3.10.2%2024-05-14Fix
CVE-2024-34352Arbitrary file write vulnerability in 1Panel6.5CNA v3.11.3%2024-05-14Fix
CVE-2024-34351Next.js server-side request forgery in Server Actions7.5CNA v3.15.5%2024-05-14NucleiExploit codeFix
CVE-2024-34350Next.js vulnerable to HTTP request smuggling7.5CNA v3.11.2%2024-05-14Fix
CVE-2024-34349Sylius potentially vulnerable to cross-site scripting4.8CNA v3.10.4%2024-05-14Fix
CVE-2024-34345@CycloneDX/cyclonedx-library improper restriction of XML external entity reference8.1CNA v3.10.9%2024-05-14Fix
CVE-2024-34340cacti authentication bypass when using using older password hashes9.1CNA v3.11.1%2024-05-14Fix
CVE-2024-34338Tenda O3 command injection7.2CISA ADP v3.12.8%2024-05-14
CVE-2024-34310Jin Fang Times Content Management System id parameter SQL injection8.8CISA ADP v3.10.9%2024-05-14Exploit code
CVE-2024-34308TOTOLINK LR350 stack-based buffer overflow8.8CISA ADP v3.10.6%2024-05-14
CVE-2024-34256OFCMS new table function SQL injection9.8CISA ADP v3.10.7%2024-05-14
CVE-2024-34245DedeCMS An arbitrary file read6.5CISA ADP v3.10.8%2024-05-14
CVE-2024-34243Konga is vulnerable to cross-site scripting (XSS) attacks5.4CISA ADP v3.10.4%2024-05-14
CVE-2024-34231SourceCodester Laboratory Management System cross-site scripting7.1CISA ADP v3.10.5%2024-05-14
CVE-2024-34230SourceCodester Laboratory Management System cross-site scripting6.1CISA ADP v3.10.5%2024-05-14
CVE-2024-34226oretnom23 Visitor Management System SQL injection9.4CISA ADP v3.10.8%2024-05-14
CVE-2024-34225oretnom23 Computer Laboratory Management System php-lms/admin/?page=system_info cross-site scripting6.1CISA ADP v3.10.6%2024-05-14
CVE-2024-34224oretnom23 Computer Laboratory Management System cross-site scripting7.3CISA ADP v3.10.9%2024-05-14Exploit code
CVE-2024-34223oretnom23 Human Resource Management System incorrect default permissions4.3CISA ADP v3.10.5%2024-05-14Exploit code
CVE-2024-34222oretnom23 Human Resource Management System SQL injection5.9CISA ADP v3.10.4%2024-05-14Exploit code
CVE-2024-34221oretnom23 Human Resource Management System incorrect default permissions8.8CISA ADP v3.10.8%2024-05-14
CVE-2024-34220oretnom23 Human Resource Management System SQL injection7.5CISA ADP v3.10.8%2024-05-14Exploit code
CVE-2024-34219TOTOLINK CP450 hard-coded credentials8.6CISA ADP v3.120.8%2024-05-14
CVE-2024-34218TOTOLINK CP450 command injection3.8CISA ADP v3.117.6%2024-05-14
CVE-2024-34217TOTOLINK CP450 stack-based buffer overflow7.7CISA ADP v3.10.6%2024-05-14
CVE-2024-34215TOTOLINK CP450 stack-based buffer overflow7.3CISA ADP v3.10.6%2024-05-14
CVE-2024-34213TOTOLINK CP450 stack-based buffer overflow9.8CISA ADP v3.10.9%2024-05-14
CVE-2024-34212TOTOLINK CP450 stack-based buffer overflow7.3CISA ADP v3.10.6%2024-05-14
CVE-2024-34211TOTOLINK CP450 hard-coded password8.8CISA ADP v3.10.5%2024-05-14
CVE-2024-34210TOTOLINK CP450 OS command injection7.3CISA ADP v3.11.2%2024-05-14
CVE-2024-34209TOTOLINK CP450 stack-based buffer overflow9.8CISA ADP v3.10.9%2024-05-14
CVE-2024-34207TOTOLINK CP450 stack-based buffer overflow8.8CISA ADP v3.10.8%2024-05-14
CVE-2024-34206TOTOLINK CP450 command injection6.5CISA ADP v3.11.3%2024-05-14
CVE-2024-34205TOTOLINK CP450 OS command injection7.3CISA ADP v3.11.2%2024-05-14
CVE-2024-34204TOTOLINK CP450 command injection9.8CISA ADP v3.11.9%2024-05-14
CVE-2024-34203TOTOLINK CP450 stack-based buffer overflow3.8CISA ADP v3.10.6%2024-05-14
CVE-2024-34202TOTOLINK CP450 stack-based buffer overflow6.5CISA ADP v3.10.7%2024-05-14
CVE-2024-34201TOTOLINK CP450 stack-based buffer overflow7.3CISA ADP v3.10.6%2024-05-14
CVE-2024-34200TOTOLINK CP450 out-of-bounds read8.8CISA ADP v3.10.9%2024-05-14
CVE-2024-34199Ritlabs TinyWeb out-of-bounds write8.6CISA ADP v3.11.2%2024-05-14
CVE-2024-34196TOTOLINK A3002ru-v3 Firmware buffer overflow8.8CISA ADP v3.10.7%2024-05-14
CVE-2024-34191HTMLy path traversal6.5CISA ADP v3.10.5%2024-05-14
CVE-2024-34086Siemens JT2Go out-of-bounds write7.8CNA v3.10.2%2024-05-14Fix
CVE-2024-34085Siemens JT2Go stack-based buffer overflow7.8CNA v3.10.2%2024-05-14Fix
CVE-2024-34081MantisBT cross-site scripting6.6CNA v3.10.6%2024-05-14Fix
CVE-2024-34080MantisBT vulnerable to exposure of sensitive information to an unauthorized actor5.3CNA v3.10.7%2024-05-14Fix
CVE-2024-34079octo-sts allows unauthenticated attackers to cause unbounded CPU and memory usage3.7CNA v3.10.6%2024-05-14Fix
CVE-2024-34077MantisBT user account takeover in the signup/reset password process7.3CNA v3.11.2%2024-05-14Fix
CVE-2024-34074Frappe vuilnerable to an open redirect on login page6.1CNA v3.10.6%2024-05-14Fix
CVE-2024-34070Froxlor vulnerable to blind XSS leading to Froxlor Application Compromise9.7CNA v3.11.0%2024-05-14Exploit codeFix
CVE-2024-33956Custom WooCommerce Checkout Fields Editor WordPress plugin broken access control4.3CNA v3.10.4%2024-05-14Fix
CVE-2024-33955Freesia Empire WordPress theme cross-site scripting (XSS)6.5CNA v3.10.4%2024-05-14Fix
CVE-2024-33954Pliska WordPress theme cross-site scripting (XSS)6.5CNA v3.10.4%2024-05-14Fix
CVE-2024-33953Adventure Journal WordPress theme cross-site scripting (XSS)6.5CNA v3.10.4%2024-05-14
CVE-2024-33952Unique WordPress theme cross-site scripting (XSS)6.5CNA v3.10.4%2024-05-14
CVE-2024-33951Perfect Pullquotes WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.4%2024-05-14
CVE-2024-33950Archives Calendar Widget WordPress plugin cross-site scripting (XSS)5.9CNA v3.10.4%2024-05-14
CVE-2024-33942Google Typography WordPress plugin broken access control4.3CNA v3.10.4%2024-05-14
CVE-2024-33938Sliding Widgets WordPress plugin broken access control to XSS6.5CNA v3.10.4%2024-05-14
CVE-2024-33877HDFGroup hdf5 heap-based buffer overflow8.8CISA ADP v3.10.9%2024-05-14Fix
CVE-2024-33876HDFGroup hdf5 buffer overflow5.7CISA ADP v3.10.2%2024-05-14Fix
CVE-2024-33875HDFGroup hdf5 buffer overflow5.7CISA ADP v3.10.2%2024-05-14Fix
CVE-2024-33874HDFGroup hdf5 buffer overflow9.8CISA ADP v3.10.9%2024-05-14Fix
CVE-2024-33873HDFGroup hdf5 heap-based buffer overflow8.8CISA ADP v3.10.9%2024-05-14Fix
CVE-2024-33868linqi LDAP injection9.8CISA ADP v3.10.9%2024-05-14
CVE-2024-33867linqi hard-coded password4.8CISA ADP v3.10.2%2024-05-14
CVE-2024-33866linqi cross-site scripting5.5CISA ADP v3.10.4%2024-05-14
CVE-2024-33865linqi information disclosure7.5CISA ADP v3.10.7%2024-05-14
CVE-2024-33864linqi server-side request forgery5.9CISA ADP v3.10.5%2024-05-14
CVE-2024-33863linqi remote file inclusion9.8CISA ADP v3.10.6%2024-05-14
CVE-2024-33819Globitel SpeechLog Save Query function stored cross-site scripting4.6CISA ADP v3.10.4%2024-05-14
CVE-2024-33818Globitel SpeechLog insecure direct object reference7.5CISA ADP v3.10.6%2024-05-14
CVE-2024-33774D-Link DIR-619L /bin/boa buffer overflow6.5CISA ADP v3.11.0%2024-05-14
CVE-2024-33773D-Link DIR-619L /bin/boa buffer overflow6.5CISA ADP v3.11.0%2024-05-14
CVE-2024-33772D-Link DIR-619L /bin/boa buffer overflow5.7CISA ADP v3.10.7%2024-05-14
CVE-2024-33771D-Link DIR-619L /bin/boa buffer overflow6.5CISA ADP v3.11.0%2024-05-14
CVE-2024-33647Siemens Polarion ALM improper access control6.5CNA v3.10.4%2024-05-14Fix
CVE-2024-33583Siemens SIMATIC RTLS Locating Manager hidden functionality4.8CNA v4.00.2%2024-05-14Fix
CVE-2024-33577Siemens Simcenter Femap stack-based buffer overflow7.3CNA v4.00.2%2024-05-14Fix
CVE-2024-33499Siemens SIMATIC RTLS Locating Manager incorrect permission assignment9.4CNA v4.00.5%2024-05-14Fix
CVE-2024-33498Siemens SIMATIC RTLS Locating Manager resource exhaustion6.9CNA v4.00.6%2024-05-14Fix
CVE-2024-33497Siemens SIMATIC RTLS Locating Manager insufficiently protected credentials4.8CNA v4.00.2%2024-05-14Fix
CVE-2024-33496Siemens SIMATIC RTLS Locating Manager insufficiently protected credentials4.8CNA v4.00.2%2024-05-14Fix
CVE-2024-33495Siemens SIMATIC RTLS Locating Manager resource exhaustion7.1CNA v4.00.6%2024-05-14Fix
CVE-2024-33494Siemens SIMATIC RTLS Locating Manager insufficient verification of data authenticity6.9CNA v4.00.3%2024-05-14Fix
CVE-2024-33493Siemens Solid Edge out-of-bounds read7.8CNA v3.10.2%2024-05-14Fix
CVE-2024-33492Siemens Solid Edge out-of-bounds read7.8CNA v3.10.2%2024-05-14Fix
CVE-2024-33491Siemens Solid Edge out-of-bounds read7.8CNA v3.10.2%2024-05-14Fix
CVE-2024-33490Siemens Solid Edge out-of-bounds read7.8CNA v3.10.2%2024-05-14Fix
CVE-2024-33489Siemens Solid Edge heap-based buffer overflow7.8CNA v3.10.2%2024-05-14Fix
CVE-2024-33485CASAP Automated Enrollment System login.php SQL injection9.8CISA ADP v3.10.7%2024-05-14Exploit code
CVE-2024-33454espressif esp-idf buffer overflow6.5CISA ADP v3.11.1%2024-05-14
CVE-2024-33433TOTOLINK X2000R cross-site scripting4.8CISA ADP v3.10.6%2024-05-14
CVE-2024-33263Bellard QuickJS reachable assertion4.0CISA ADP v3.10.3%2024-05-14Fix
CVE-2024-33250SRS real-time video server remote code execution7.2CISA ADP v3.10.7%2024-05-14
CVE-2024-33009SQL injection vulnerability in SAP Global Label Management (GLM)4.2CNA v3.10.3%2024-05-14Fix
CVE-2024-33008Memory corruption vulnerability in SAP Replication Server4.9CNA v3.10.5%2024-05-14Fix
CVE-2024-33007Client-side script execution vulnerability in SAP UI5(PDFViewer)3.5CNA v3.10.3%2024-05-14Fix
CVE-2024-33006File upload vulnerability in SAP NetWeaver Application Server ABAP and ABAP Platform9.6CNA v3.10.5%2024-05-14Fix
CVE-2024-33004Insecure Storage vulnerability in SAP BusinessObjects Business Intelligence Platform (Webservices)4.3CNA v3.10.2%2024-05-14Fix
CVE-2024-33002Cross-site scripting (XSS) vulnerability in SAP S/4HANA (Document service handler for DPS)6.1CNA v3.10.3%2024-05-14Fix
CVE-2024-33000Missing authorization check in SAP Bank Account Management3.5CNA v3.10.3%2024-05-14Fix
CVE-2024-32999Huawei HarmonyOS cracking vulnerability in the OS security module6.8CNA v3.10.2%2024-05-14Fix
CVE-2024-32998Huawei HarmonyOS null pointer access vulnerability in the clock module5.9CNA v3.10.2%2024-05-14Fix
CVE-2024-32997Huawei HarmonyOS race condition vulnerability in the binder driver module8.4CNA v3.10.1%2024-05-14Fix
CVE-2024-32996Huawei HarmonyOS privilege escalation vulnerability in the account module6.2CNA v3.10.2%2024-05-14Fix
CVE-2024-32995Huawei HarmonyOS denial of service (DoS) vulnerability in the AMS module6.2CNA v3.10.2%2024-05-14Fix
CVE-2024-32993Huawei HarmonyOS out-of-bounds access vulnerability in the memory module5.6CNA v3.10.1%2024-05-14Fix
CVE-2024-32992Huawei HarmonyOS insufficient verification vulnerability in the baseband module7.5CNA v3.10.5%2024-05-14Fix
CVE-2024-32991Huawei HarmonyOS permission verification vulnerability in the wpa_supplicant module7.5CNA v3.10.6%2024-05-14Fix
CVE-2024-32990Huawei HarmonyOS permission verification vulnerability in the system sharing pop-up module6.1CNA v3.10.4%2024-05-14Fix
CVE-2024-32989Huawei HarmonyOS insufficient verification vulnerability in the system sharing pop-up module3.3CNA v3.10.4%2024-05-14Fix
CVE-2024-32985Stellar-core's Overlay security fix for DDoS mitigation5.9CNA v3.10.4%2024-05-14Fix
CVE-2024-32977OctoPrint authentication bypass via X-Forwarded-For header when autologinLocal is enabled7.1CNA v3.10.9%2024-05-14Fix
CVE-2024-32964lobe-chat `/API/proxy` endpoint server-side request forgery9.0CNA v3.153.0%2024-05-14NucleiFix
CVE-2024-32874Frigate filename handling resource exhaustion6.8CNA v3.10.8%2024-05-14Fix
CVE-2024-32776AppPresser WordPress plugin broken access control6.5CNA v3.10.5%2024-05-14Fix
CVE-2024-32742Siemens SIMATIC CN 4100 USB port vulnerability7.6CNA v3.10.4%2024-05-14Fix
CVE-2024-32741Siemens SIMATIC CN 4100 hard-coded password10.0CNA v3.10.6%2024-05-14Fix
CVE-2024-32740Siemens SIMATIC CN 4100 hard-coded credentials9.8CNA v3.10.7%2024-05-14Fix
CVE-2024-32739CyberPower PowerPanel Enterprise SQL injection7.5NVD v3.15.4%2024-05-14NucleiFix
CVE-2024-32738CyberPower PowerPanel Enterprise SQL injection7.5NVD v3.14.6%2024-05-14NucleiFix
CVE-2024-32737CyberPower PowerPanel Enterprise SQL injection7.5NVD v3.15.4%2024-05-14NucleiFix
CVE-2024-32736CyberPower PowerPanel Enterprise SQL injection7.5NVD v3.15.4%2024-05-14NucleiFix
CVE-2024-32735CyberPower PowerPanel Enterprise missing authentication9.8CNA v3.16.8%2024-05-14NucleiFix
CVE-2024-32733Cross-site scripting (XSS) vulnerability in SAP NetWeaver Application Server ABAP and ABAP Platform6.1CNA v3.10.4%2024-05-14Fix
CVE-2024-32731Missing authorization check in SAP My Travel Requests5.5CNA v3.10.4%2024-05-14Fix
CVE-2024-32730Missing authorization check in SAP Enable Now Manager6.5CNA v3.10.6%2024-05-14Fix
CVE-2024-32724Sharkdropship dropshipping for Aliexpress WordPress plugin missing authorization7.5CNA v3.10.8%2024-05-14Fix
CVE-2024-32719WP Club Manager WordPress plugin broken access control5.3CNA v3.10.5%2024-05-14Fix
CVE-2024-32717SchedulePress WordPress plugin broken access control6.5CNA v3.10.6%2024-05-14Fix
CVE-2024-32712Podlove Podcast Publisher WordPress plugin broken access control4.3NVD v3.10.5%2024-05-14Fix
CVE-2024-32700Kognetiks Chatbot for WordPress plugin arbitrary file upload10.0CNA v3.12.6%2024-05-14Exploit codeFix
CVE-2024-32672Samsung Open Source Escargot out-of-bounds write5.3CNA v3.10.8%2024-05-14
CVE-2024-32669Samsung Open Source Escargot possible stack overflow due to a string encoding processing error5.3CNA v3.10.6%2024-05-14
CVE-2024-32655Npgsql vulnerable to SQL injection via protocol Message Size Overflow8.1CNA v3.11.7%2024-05-14Fix
CVE-2024-32639Siemens Tecnomatix Plant Simulation V2302 out-of-bounds write7.8CNA v3.10.4%2024-05-14Fix
CVE-2024-32637Siemens JT2Go null pointer dereference4.8CNA v4.00.2%2024-05-14Fix
CVE-2024-32636Siemens JT2Go out-of-bounds read7.3CNA v4.00.3%2024-05-14Fix
CVE-2024-32635Siemens JT2Go out-of-bounds read7.3CNA v4.00.3%2024-05-14Fix
CVE-2024-32624HDFGroup hdf5 heap-based buffer overflow7.4CISA ADP v3.10.6%2024-05-14Fix
CVE-2024-32623HDFGroup hdf5 heap-based buffer overflow8.8CISA ADP v3.10.9%2024-05-14Fix
CVE-2024-32622HDFGroup hdf5 out-of-bounds read9.1CISA ADP v3.11.0%2024-05-14Fix
CVE-2024-32621HDFGroup hdf5 heap-based buffer overflow9.8CISA ADP v3.10.9%2024-05-14Fix
CVE-2024-32620HDFGroup hdf5 heap-based buffer overflow7.4CISA ADP v3.10.2%2024-05-14Fix
CVE-2024-32619HDFGroup hdf5 heap-based buffer overflow7.4CISA ADP v3.10.2%2024-05-14Fix
CVE-2024-32618HDFGroup hdf5 heap-based buffer overflow7.4CISA ADP v3.10.2%2024-05-14Fix
CVE-2024-32617HDFGroup hdf5 heap-based buffer overflow8.8CISA ADP v3.10.8%2024-05-14Fix
CVE-2024-32616HDFGroup hdf5 heap-based buffer overflow7.4CISA ADP v3.10.3%2024-05-14Fix
CVE-2024-32615HDFGroup hdf5 out-of-bounds write9.8CISA ADP v3.11.1%2024-05-14Fix
CVE-2024-32614HDFGroup hdf5 out-of-bounds read8.8CISA ADP v3.10.9%2024-05-14Fix
CVE-2024-32613HDFGroup hdf5 heap-based buffer overflow7.4CISA ADP v3.10.2%2024-05-14Fix
CVE-2024-32612HDFGroup hdf5 heap-based buffer overflow7.4CISA ADP v3.10.3%2024-05-14Fix
CVE-2024-32611HDFGroup hdf5 uninitialized variable use9.8CISA ADP v3.11.0%2024-05-14Fix
CVE-2024-32610HDFGroup hdf5 use-after-free5.7CISA ADP v3.10.2%2024-05-14Fix
CVE-2024-32609HDFGroup hdf5 uncontrolled recursion7.5CISA ADP v3.10.8%2024-05-14Fix
CVE-2024-32607HDFGroup hdf5 out-of-bounds read5.7CISA ADP v3.10.2%2024-05-14Fix
CVE-2024-32606HDFGroup hdf5 uninitialized resource use5.7CISA ADP v3.10.2%2024-05-14Fix
CVE-2024-32605HDFGroup hdf5 heap-based buffer overflow8.8CISA ADP v3.10.9%2024-05-14Fix
CVE-2024-32476argoproj argo-cd denial of service via malicious jqPathExpressions in ignoreDifferences6.5CNA v3.11.0%2024-05-14Fix
CVE-2024-32465Git's protections for cloning untrusted repositories can be bypassed7.4CNA v3.11.0%2024-05-14Fix
CVE-2024-32355TOTOLINK X5000R command injection8.0CISA ADP v3.11.8%2024-05-14
CVE-2024-32354TOTOLINK X5000R command injection6.0CISA ADP v3.11.0%2024-05-14
CVE-2024-32353TOTOLINK X5000R command injection9.8CISA ADP v3.12.1%2024-05-14
CVE-2024-32352TOTOLINK X5000R code injection8.8CISA ADP v3.12.2%2024-05-14
CVE-2024-32351TOTOLINK X5000R OS command injection8.8CISA ADP v3.12.2%2024-05-14
CVE-2024-32350TOTOLINK X5000R code injection8.8CISA ADP v3.12.2%2024-05-14
CVE-2024-32349TOTOLINK X5000R command injection6.0CISA ADP v3.10.9%2024-05-14
CVE-2024-32100Easy Digital Downloads WordPress plugin sensitive data exposure7.5v3.10.6%2024-05-14Fix
CVE-2024-32077Apache Airflow: XSS vulnerability in Task Instance Log/Log Details5.4v3.11.6%2024-05-14Fix
CVE-2024-32066Siemens Simcenter Femap out-of-bounds read7.3CNA v4.00.4%2024-05-14Fix
CVE-2024-32065Siemens Simcenter Femap out-of-bounds read7.3CNA v4.00.4%2024-05-14Fix
CVE-2024-32064Siemens Simcenter Femap out-of-bounds read7.3CNA v4.00.4%2024-05-14Fix
CVE-2024-32063Siemens Simcenter Femap type confusion7.3CNA v4.00.4%2024-05-14Fix
CVE-2024-32062Siemens Simcenter Femap type confusion7.3CNA v4.00.4%2024-05-14Fix
CVE-2024-32061Siemens Simcenter Femap out-of-bounds read7.3CNA v4.00.4%2024-05-14Fix
CVE-2024-32060Siemens Simcenter Femap out-of-bounds read7.3CNA v4.00.4%2024-05-14Fix
CVE-2024-32059Siemens Simcenter Femap out-of-bounds read7.3CNA v4.00.4%2024-05-14Fix
CVE-2024-32058Siemens Simcenter Femap memory corruption7.3CNA v4.00.4%2024-05-14Fix
CVE-2024-32057Siemens Simcenter Femap type confusion7.3CNA v4.00.4%2024-05-14Fix
CVE-2024-32055Siemens Simcenter Femap out-of-bounds read7.3CNA v4.00.3%2024-05-14Fix
CVE-2024-32021Git symlink-based local cloning vulnerability3.9CNA v3.11.0%2024-05-14Fix
CVE-2024-32020Git local clone hardlinking vulnerability3.9CNA v3.10.5%2024-05-14Fix
CVE-2024-32004Git vulnerable to remote code execution while cloning special-crafted local repositories8.2CNA v3.11.4%2024-05-14Fix
CVE-2024-32002Git submodule cloning remote code execution9.1CNA v3.129.2%2024-05-14Exploit codeFix
CVE-2024-31980Siemens Parasolid out-of-bounds write7.8CNA v3.10.3%2024-05-14Fix
CVE-2024-31954Samsung Portable SSD T5 installer vulnerability7.3CNA v3.10.2%2024-05-14
CVE-2024-31953Samsung Magician improper privilege management6.7v3.10.1%2024-05-14Fix
CVE-2024-31952Samsung Magician link following6.7v3.10.2%2024-05-14Fix
CVE-2024-31810TOTOLINK EX200 hard-coded password9.8CISA ADP v3.10.6%2024-05-14
CVE-2024-31803emp-ot v.0.2.4 buffer overflow6.2CISA ADP v3.10.3%2024-05-14
CVE-2024-31771TotalAV incorrect privilege assignment7.8CISA ADP v3.10.3%2024-05-14Exploit code
CVE-2024-31556Reportico Web fails to invalidate cookies upon logout7.8CISA ADP v3.10.2%2024-05-14
CVE-2024-31491Fortinet FortiSandbox client-side enforcement of server-side security8.6CNA v3.10.8%2024-05-14Fix
CVE-2024-31488Fortinet FortiNAC cross-site scripting6.1CNA v3.11.0%2024-05-14Fix
CVE-2024-31486Siemens OPUPI0 AMQP/MQTT cleartext storage of sensitive information6.0CNA v4.00.5%2024-05-14Fix
CVE-2024-31485Siemens CPCI85 Central Processing/Communication command injection8.6CNA v4.02.4%2024-05-14Fix
CVE-2024-31484Siemens CPC80 Central Processing/Communication improper null termination7.3CNA v4.00.5%2024-05-14Fix
CVE-2024-31483HPE AOS-8 Instant and AOS-10 AP CLI service accessed information disclosure4.9CNA v3.10.4%2024-05-14
CVE-2024-31482HPE AOS-8 Instant and AOS-10 AP ANSI escape code service accessed denial of service5.3CNA v3.10.5%2024-05-14
CVE-2024-31481HPE AOS-8 Instant and AOS-10 AP CLI service accessed denial of service5.3CNA v3.10.6%2024-05-14
CVE-2024-31480HPE AOS-8 Instant and AOS-10 AP CLI service accessed denial of service5.3CNA v3.10.6%2024-05-14
CVE-2024-31479HPE AOS-8 Instant and AOS-10 AP Central Communications service accessed denial of service5.3CNA v3.10.6%2024-05-14
CVE-2024-31478HPE AOS-8 Instant and AOS-10 AP OS command injection5.3CNA v3.10.6%2024-05-14
CVE-2024-31477HPE AOS-8 Instant and AOS-10 AP command line interface command injection7.2CNA v3.11.5%2024-05-14
CVE-2024-31476HPE AOS-8 Instant and AOS-10 AP command line interface command injection7.2CNA v3.11.5%2024-05-14
CVE-2024-31475HPE AOS-8 Instant and AOS-10 AP There is an arbitrary file deletion8.2CNA v3.10.4%2024-05-14
CVE-2024-31474HPE AOS-8 Instant and AOS-10 AP CLI service accessed by PAPI arbitrary file deletion8.2CNA v3.10.4%2024-05-14
CVE-2024-31473HPE AOS-8 Instant and AOS-10 AP underlying deauthentication service command injection9.8CNA v3.11.7%2024-05-14
CVE-2024-31472HPE AOS-8 Instant and AOS-10 AP underlying Soft AP daemon service command injection9.8CNA v3.11.6%2024-05-14
CVE-2024-31471HPE AOS-8 Instant and AOS-10 AP underlying Central Communications service command injection9.8CNA v3.11.6%2024-05-14
CVE-2024-31470HPE AOS-8 Instant and AOS-10 AP underlying SAE buffer overflow9.8CNA v3.11.2%2024-05-14
CVE-2024-31469HPE AOS-8 Instant and AOS-10 AP underlying Central Communications service buffer overflow9.8CNA v3.11.1%2024-05-14
CVE-2024-31468HPE AOS-8 Instant and AOS-10 AP underlying Central Communications service buffer overflow9.8CNA v3.11.1%2024-05-14
CVE-2024-31467HPE AOS-8 Instant and AOS-10 AP underlying CLI service buffer overflow9.8CNA v3.11.1%2024-05-14
CVE-2024-31466HPE AOS-8 Instant and AOS-10 AP underlying CLI service buffer overflow9.8CNA v3.11.1%2024-05-14
CVE-2024-31460Cacti automation tree rules SQL injection6.5CNA v3.11.8%2024-05-14Fix
CVE-2024-31459Cacti RCE vulnerability by file include in lib/plugin.php8.1CNA v3.12.7%2024-05-14KCVFix
CVE-2024-31458Cacti graph template inputs SQL injection4.6CNA v3.112.6%2024-05-14Fix
CVE-2024-31445cacti SQL injection vulnerability in automation_get_new_graphs_sql8.8CNA v3.126.2%2024-05-14KCVFix
CVE-2024-31444Cacti XSS vulnerability in lib/html.php by reading dirty data stored in database4.6CNA v3.114.7%2024-05-14Fix
CVE-2024-31443Cacti XSS vulnerability in lib/html_tree.php by reading dirty data stored in database5.7CNA v3.10.8%2024-05-14Fix
CVE-2024-31441Arbitrary file reading in DataEase7.5CNA v3.10.6%2024-05-14Fix
CVE-2024-31377WP Photo Album Plus WordPress plugin Unauth. arbitrary file upload10.0CNA v3.10.5%2024-05-14Fix
CVE-2024-31113Easy Digital Downloads WordPress plugin cross-site request forgery (CSRF)8.8v3.10.2%2024-05-14Fix
CVE-2024-30802Vehicle Management System login.html privilege escalation9.8CISA ADP v3.10.5%2024-05-14
CVE-2024-30801Cloud based customer service management platform Login.asp SQL injection5.5CISA ADP v3.11.4%2024-05-14
CVE-2024-30268Cacti XSS vulnerability in display_settings6.1CNA v3.10.6%2024-05-14
CVE-2024-30259eProsima Fast-DDS FastDDS heap buffer overflow when publisher sends malformed packet8.2CNA v3.10.9%2024-05-14Fix
CVE-2024-30258eProsima Fast-DDS FastDDS crash when publisher send malformed packet8.2CNA v3.10.8%2024-05-14Fix
CVE-2024-30209Siemens SIMATIC RTLS Locating Manager cleartext transmission of sensitive information9.0CNA v4.00.3%2024-05-14Fix
CVE-2024-30208Siemens SIMATIC RTLS Locating Manager incorrect permission assignment5.2CNA v4.00.2%2024-05-14Fix
CVE-2024-30207Siemens SIMATIC RTLS Locating Manager hard-coded cryptographic key10.0CNA v4.00.8%2024-05-14Fix
CVE-2024-30206Siemens SIMATIC RTLS Locating Manager download without integrity check8.8CNA v4.00.3%2024-05-14Fix
CVE-2024-30172Bouncy Castle crafted signature and public key can be used to trigger an infinite loop7.5CISA ADP v3.10.8%2024-05-14Fix
CVE-2024-30171Bouncy Castle affected by timing side-channel for RSA key exchange (The Marvin Attack)5.9CISA ADP v3.10.9%2024-05-14Fix
CVE-2024-30059Microsoft Intune for Android Mobile Application Management tampering6.1CNA v3.10.6%2024-05-14Fix
CVE-2024-30055Microsoft Edge (Chromium-based) spoofing5.4CNA v3.10.6%2024-05-14Fix
CVE-2024-30054Microsoft Power BI Client JavaScript SDK information disclosure6.5CNA v3.11.7%2024-05-14Fix
CVE-2024-30053Microsoft Azure Migrate cross-site scripting6.5CNA v3.11.0%2024-05-14Fix
CVE-2024-30051Microsoft DWM Core Library privilege escalation7.8CNA v3.15.7%2024-05-14KEVExploit codeFix
CVE-2024-30050Microsoft Windows Mark of the web security feature bypass5.4CNA v3.111.5%2024-05-14Fix
CVE-2024-30049Microsoft Windows Win32 Kernel subsystem elevation of privilege7.8CNA v3.10.7%2024-05-14Fix
CVE-2024-30048Microsoft Dynamics 365 Customer Insights cross-site scripting7.6CNA v3.11.0%2024-05-14Fix
CVE-2024-30047Microsoft Dynamics 365 Customer Insights cross-site scripting7.6CNA v3.11.0%2024-05-14Fix
CVE-2024-30046Visual Studio denial of service5.9CNA v3.11.7%2024-05-14Fix
CVE-2024-30045Microsoft .NET and Visual Studio remote code execution6.3CNA v3.11.2%2024-05-14Fix
CVE-2024-30044Microsoft SharePoint server remote code execution7.2CNA v3.184.0%2024-05-14Fix
CVE-2024-30043Microsoft SharePoint server information disclosure6.5CNA v3.156.1%2024-05-14Emerging ThreatsExploit codeFix
CVE-2024-30042Microsoft Excel remote code execution7.8CNA v3.12.1%2024-05-14Fix
CVE-2024-30041Microsoft Bing Search spoofing5.4CNA v3.10.7%2024-05-14Fix
CVE-2024-30040Microsoft Windows MSHTML Platform security feature bypass8.8CNA v3.13.9%2024-05-14KEVFix
CVE-2024-30039Microsoft Windows Remote Access Connection Manager information disclosure5.5CNA v3.10.7%2024-05-14Fix
CVE-2024-30038Microsoft Windows win32k elevation of privilege7.8CNA v3.12.6%2024-05-14Exploit codeFix
CVE-2024-30037Microsoft Windows Common Log File System driver elevation of privilege5.5CNA v3.15.3%2024-05-14Fix
CVE-2024-30036Microsoft Windows Deployment services information disclosure6.5CNA v3.12.3%2024-05-14Fix
CVE-2024-30035Microsoft Windows DWM Core library elevation of privilege7.8CNA v3.13.5%2024-05-14Fix
CVE-2024-30034Microsoft Windows Cloud Files Mini Filter driver information disclosure5.5CNA v3.16.9%2024-05-14Fix
CVE-2024-30033Microsoft Windows Search service elevation of privilege7.0CNA v3.11.0%2024-05-14Fix
CVE-2024-30032Microsoft Windows DWM Core library elevation of privilege7.8CNA v3.14.5%2024-05-14Fix
CVE-2024-30031Microsoft Windows CNG Key Isolation service elevation of privilege7.8CNA v3.10.4%2024-05-14Fix
CVE-2024-30030Microsoft Windows win32k elevation of privilege7.8CNA v3.10.7%2024-05-14Fix
CVE-2024-30029Microsoft Windows Routing and Remote Access Service (RRAS) remote code execution7.5CNA v3.11.5%2024-05-14Fix
CVE-2024-30028Microsoft Windows win32k elevation of privilege7.8CNA v3.10.7%2024-05-14Fix
CVE-2024-30027Microsoft Windows NTFS elevation of privilege7.8CNA v3.10.6%2024-05-14Fix
CVE-2024-30025Microsoft Windows Common Log File System driver elevation of privilege7.8CNA v3.14.3%2024-05-14Fix
CVE-2024-30024Microsoft Windows Routing and Remote Access Service (RRAS) remote code execution7.5CNA v3.11.5%2024-05-14Fix
CVE-2024-30023Microsoft Windows Routing and Remote Access Service (RRAS) remote code execution7.5CNA v3.11.5%2024-05-14Fix
CVE-2024-30022Microsoft Windows Routing and Remote Access Service (RRAS) remote code execution7.5CNA v3.11.5%2024-05-14Fix
CVE-2024-30021Microsoft Windows Mobile Broadband driver remote code execution6.8CNA v3.10.8%2024-05-14Fix
CVE-2024-30020Microsoft Windows Cryptographic services remote code execution8.1CNA v3.11.3%2024-05-14Fix
CVE-2024-30019Microsoft Windows DHCP server service denial of service6.5CNA v3.12.6%2024-05-14Fix
CVE-2024-30018Microsoft Windows Kernel elevation of privilege7.8CNA v3.10.9%2024-05-14Fix
CVE-2024-30017Microsoft Windows Hyper-V remote code execution8.8CNA v3.11.9%2024-05-14Fix
CVE-2024-30016Microsoft Windows Cryptographic services information disclosure5.5CNA v3.10.8%2024-05-14Fix
CVE-2024-30015Microsoft Windows Routing and Remote Access Service (RRAS) remote code execution7.5CNA v3.11.5%2024-05-14Fix
CVE-2024-30014Microsoft Windows Routing and Remote Access Service (RRAS) remote code execution7.5CNA v3.11.5%2024-05-14Fix
CVE-2024-30012Microsoft Windows Mobile Broadband driver remote code execution6.8CNA v3.10.9%2024-05-14Fix
CVE-2024-30011Microsoft Windows Hyper-V denial of service6.5CNA v3.12.6%2024-05-14Fix
CVE-2024-30010Microsoft Windows Hyper-V remote code execution8.8CNA v3.12.3%2024-05-14Fix
CVE-2024-30009Microsoft Windows Routing and Remote Access Service (RRAS) remote code execution8.8CNA v3.11.7%2024-05-14Fix
CVE-2024-30008Microsoft Windows DWM Core library information disclosure5.5CNA v3.10.8%2024-05-14Fix
CVE-2024-30007Microsoft Brokering File System elevation of privilege8.8CNA v3.10.6%2024-05-14Fix
CVE-2024-30006Microsoft WDAC OLE DB provider for SQL server remote code execution8.8CNA v3.11.7%2024-05-14Fix
CVE-2024-30005Microsoft Windows Mobile Broadband driver remote code execution6.8CNA v3.10.9%2024-05-14Fix
CVE-2024-30004Microsoft Windows Mobile Broadband driver remote code execution6.8CNA v3.10.9%2024-05-14Fix
CVE-2024-30003Microsoft Windows Mobile Broadband driver remote code execution6.8CNA v3.10.9%2024-05-14Fix
CVE-2024-30002Microsoft Windows Mobile Broadband driver remote code execution6.8CNA v3.10.9%2024-05-14Fix
CVE-2024-30001Microsoft Windows Mobile Broadband driver remote code execution6.8CNA v3.10.9%2024-05-14Fix
CVE-2024-30000Microsoft Windows Mobile Broadband driver remote code execution6.8CNA v3.10.9%2024-05-14Fix
CVE-2024-29999Microsoft Windows Mobile Broadband driver remote code execution6.8CNA v3.10.9%2024-05-14Fix
CVE-2024-29998Microsoft Windows Mobile Broadband driver remote code execution6.8CNA v3.10.9%2024-05-14Fix
CVE-2024-29997Microsoft Windows Mobile Broadband driver remote code execution6.8CNA v3.10.9%2024-05-14Fix
CVE-2024-29996Microsoft Windows Common Log File System driver elevation of privilege7.8CNA v3.13.4%2024-05-14Fix
CVE-2024-29994Microsoft Windows SCSI Class System file elevation of privilege7.8CNA v3.10.7%2024-05-14Fix
CVE-2024-29895Cacti command injection in cmd_realtime.php10.0CNA v3.198.5%2024-05-14NucleiExploit code
CVE-2024-29894Cacti cross-site scripting vulnerability when using JavaScript based messaging API5.4CNA v3.10.9%2024-05-14Fix
CVE-2024-29857Bouncy Castle certificate parsing issues cause high CPU usage during parameter evaluation7.5CISA ADP v3.11.1%2024-05-14Fix
CVE-2024-29800Timber WordPress plugin deserialization of untrusted data8.0CNA v3.10.5%2024-05-14Fix
CVE-2024-29513BlueRiSC WindowsSCOPE Cyber Forensics briscKernelDriver.sys vulnerability7.8CISA ADP v3.10.4%2024-05-14
CVE-2024-29212Veeam Service Provider Console deserialization of untrusted data9.9CNA v3.01.6%2024-05-14Fix
CVE-2024-29166HDFGroup hdf5 buffer overflow5.7CISA ADP v3.10.2%2024-05-14Fix
CVE-2024-29165HDFGroup hdf5 heap-based buffer overflow7.4CISA ADP v3.10.2%2024-05-14Fix
CVE-2024-29164HDFGroup hdf5 stack-based buffer overflow9.8CISA ADP v3.10.9%2024-05-14Fix
CVE-2024-29163HDFGroup hdf5 heap-based buffer overflow7.4CISA ADP v3.10.2%2024-05-14Fix
CVE-2024-29162HDFGroup hdf5 heap-based buffer overflow7.4CISA ADP v3.10.2%2024-05-14Fix
CVE-2024-29161HDFGroup hdf5 heap-based buffer overflow8.8CISA ADP v3.10.9%2024-05-14Fix