CVE-2024 list

CVE-2024 records published in May 2024

Page three of four: records 2,001 to 3,000 of the 3,323 published in May 2024, newest first. The first page carries the figures for May 2024.

CVE-2024 records published in May 2024, newest first: records 2,001 to 3,000 of 3,323
CVE Summary CVSS EPSS Published Signals
CVE-2024-29160HDFGroup hdf5 heap-based buffer overflow7.4CISA ADP v3.10.2%2024-05-14Fix
CVE-2024-29159HDFGroup hdf5 buffer overflow9.8CISA ADP v3.10.9%2024-05-14Fix
CVE-2024-29158HDFGroup hdf5 heap-based buffer overflow7.4CISA ADP v3.10.2%2024-05-14Fix
CVE-2024-29157HDFGroup hdf5 heap-based buffer overflow9.8CISA ADP v3.10.9%2024-05-14Fix
CVE-2024-28866GoCD vulnerable to reflected cross-site scripting possible on server loading page during start-up3.1CNA v3.10.4%2024-05-14Fix
CVE-2024-28781IBM UrbanCode Deploy cross-site scripting5.4CNA v3.10.3%2024-05-14Fix
CVE-2024-28761IBM App Connect Enterprise HTML injection5.4CNA v3.10.3%2024-05-14Fix
CVE-2024-28760IBM App Connect Enterprise denial of service4.3CNA v3.10.5%2024-05-14Fix
CVE-2024-28759Wind River VxWorks buffer overflow4.3CNA v3.10.2%2024-05-14
CVE-2024-28285Crypto++ ElGamal decryption function information disclosure9.8CISA ADP v3.10.5%2024-05-14Fix
CVE-2024-28279Carmelo Computer Book Store SQL injection7.3CISA ADP v3.10.3%2024-05-14
CVE-2024-28277Remyandrade School Task Manager cross-site scripting6.1v3.10.4%2024-05-14
CVE-2024-28276Rems School Task Manager cross-site scripting6.1CISA ADP v3.10.3%2024-05-14
CVE-2024-28165Cross-site scripting vulnerability in SAP BusinessObjects Business Intelligence Platform8.1CNA v3.10.6%2024-05-14Fix
CVE-2024-28137Phoenix Contact: Privilege escalation due to a TOCTOU vulnerability in the CHARX Series7.8CNA v3.10.3%2024-05-14Fix
CVE-2024-28136Phoenix Contact: Command injection gains root privileges using the OCPP remote service7.8CNA v3.10.8%2024-05-14Fix
CVE-2024-28135Phoenix Contact: Command injection vulnerability in the API of the CHARX Series5.0CNA v3.11.3%2024-05-14Fix
CVE-2024-28134Phoenix Contact: MitM attack gains privileges of the current logged in user in CHARX Series7.0CNA v3.10.5%2024-05-14Fix
CVE-2024-28133Phoenix Contact: Privilege escalation in CHARX Series7.8CNA v3.10.4%2024-05-14Fix
CVE-2024-28075SolarWinds ARM deserialization of untrusted data remote code execution9.0CNA v3.178.0%2024-05-14Fix
CVE-2024-27947Siemens RUGGEDCOM CROSSBOW information disclosure5.3CNA v3.10.6%2024-05-14Fix
CVE-2024-27946Siemens RUGGEDCOM CROSSBOW path traversal6.5CNA v3.10.9%2024-05-14Fix
CVE-2024-27945Siemens RUGGEDCOM CROSSBOW external control of a file path7.2CNA v3.11.4%2024-05-14Fix
CVE-2024-27944Siemens RUGGEDCOM CROSSBOW external control of a file path7.2CNA v3.11.4%2024-05-14Fix
CVE-2024-27943Siemens RUGGEDCOM CROSSBOW external control of a file path7.2CNA v3.11.3%2024-05-14Fix
CVE-2024-27942Siemens RUGGEDCOM CROSSBOW missing authentication7.5CNA v3.10.7%2024-05-14Fix
CVE-2024-27941Siemens RUGGEDCOM CROSSBOW SQL injection8.8CNA v3.10.8%2024-05-14Fix
CVE-2024-27940Siemens RUGGEDCOM CROSSBOW SQL injection8.8CNA v3.10.8%2024-05-14Fix
CVE-2024-27939Siemens RUGGEDCOM CROSSBOW missing authorization9.8CNA v3.10.8%2024-05-14Fix
CVE-2024-27852Apple iOS and iPadOS alternative app marketplace client ID handling vulnerability6.5v3.10.4%2024-05-14Fix
CVE-2024-27847Apple macOS insecure inherited permissions5.5NVD v3.10.2%2024-05-14Fix
CVE-2024-27843Apple macOS logic flaw7.8v3.10.2%2024-05-14Fix
CVE-2024-27842Apple macOS improperly implemented security check7.8v3.10.3%2024-05-14Fix
CVE-2024-27841Apple macOS improper access control5.5NVD v3.10.4%2024-05-14Fix
CVE-2024-27839Apple iOS and iPadOS observable discrepancy3.3NVD v3.10.2%2024-05-14Fix
CVE-2024-27837Apple macOS improper handling of insufficient permissions3.3NVD v3.10.2%2024-05-14Fix
CVE-2024-27835Apple iOS and iPadOS improper authentication2.4v3.10.3%2024-05-14Fix
CVE-2024-27834Apple Safari insecure inherited permissions5.5NVD v3.10.6%2024-05-14Fix
CVE-2024-27829Apple macOS out-of-bounds access7.8v3.10.6%2024-05-14Fix
CVE-2024-27827Apple macOS path traversal5.5v3.10.2%2024-05-14Fix
CVE-2024-27825Apple macOS insecure inherited permissions7.1v3.10.2%2024-05-14Fix
CVE-2024-27824Apple macOS privilege escalation7.8v3.10.2%2024-05-14Fix
CVE-2024-27822Apple macOS insecure inherited permissions7.8v3.11.5%2024-05-14Exploit codeFix
CVE-2024-27821Apple macOS path traversal4.7NVD v3.10.9%2024-05-14Exploit codeFix
CVE-2024-27818Apple macOS command injection7.8v3.10.7%2024-05-14Fix
CVE-2024-27816Apple macOS logic flaw5.5v3.11.0%2024-05-14Fix
CVE-2024-27813Apple macOS arbitrary code execution8.6v3.10.4%2024-05-14Fix
CVE-2024-27810Apple macOS path traversal5.5NVD v3.10.7%2024-05-14Fix
CVE-2024-27804Apple macOS sequential memory allocation5.5NVD v3.11.3%2024-05-14Exploit codeFix
CVE-2024-27803Apple iOS and iPadOS insecure permissions2.4v3.10.3%2024-05-14Fix
CVE-2024-27798Apple macOS incorrect authorization7.8v3.10.2%2024-05-14Fix
CVE-2024-27796Apple macOS sequential memory allocation7.8v3.10.3%2024-05-14Fix
CVE-2024-27793Apple iTunes code injection7.8v3.10.7%2024-05-14Fix
CVE-2024-27790Claris FileMaker Server unauthorized access7.5v3.10.5%2024-05-14Fix
CVE-2024-27789Apple macOS insecure storage of sensitive information5.5v3.10.6%2024-05-14Fix
CVE-2024-27460HP Plantronics Hub updater privilege escalation6.7CISA ADP v3.11.7%2024-05-14Exploit codeFix
CVE-2024-27399Linux kernel Bluetooth L2CAP channel timeout handling null pointer dereference5.5v3.10.3%2024-05-14Fix
CVE-2024-27282Ruby regex compiler out-of-bounds read6.6CISA ADP v3.10.6%2024-05-14Fix
CVE-2024-27281RDoc RCE vulnerability with .rdoc_options4.5CISA ADP v3.11.6%2024-05-14Fix
CVE-2024-27280StringIO buffer overread9.8CISA ADP v3.12.4%2024-05-14Fix
CVE-2024-27269IBM QRadar SIEM information disclosure6.8CNA v3.10.4%2024-05-14Fix
CVE-2024-27110Elevation of privilege vulnerability in GE HealthCare EchoPAC products8.4CNA v3.10.3%2024-05-14
CVE-2024-27109Insufficiently protected credentials in GE HealthCare EchoPAC products7.6CNA v3.10.3%2024-05-14Fix
CVE-2024-27108Non privileged access to critical file vulnerability in GE HealthCare EchoPAC products6.8CNA v3.10.3%2024-05-14
CVE-2024-27107Weak account password in GE HealthCare EchoPAC products9.6CNA v3.10.3%2024-05-14Fix
CVE-2024-27106Vulnerable data in transit in GE HealthCare EchoPAC products5.7CNA v3.10.2%2024-05-14
CVE-2024-27082Cacti cross-site scripting vulnerability when managing trees7.6CNA v3.10.9%2024-05-14Fix
CVE-2024-26517Rems School Task Manager SQL injection9.1CISA ADP v3.10.8%2024-05-14
CVE-2024-26367Evertz microsystems MViP-II Firmware cross-site scripting6.1CISA ADP v3.10.6%2024-05-14
CVE-2024-26306ES iperf3 timing side channel5.9CISA ADP v3.11.1%2024-05-14Fix
CVE-2024-26238Microsoft PLUGScheduler Scheduled Task elevation of privilege7.8CNA v3.10.8%2024-05-14Fix
CVE-2024-26007Fortinet FortiOS improper exception handling5.0CNA v3.11.2%2024-05-14Fix
CVE-2024-25970Dell PowerScale OneFS improper input validation6.5CNA v3.10.7%2024-05-14Fix
CVE-2024-25969Dell PowerScale OneFS resource exhaustion6.2CNA v3.10.2%2024-05-14Fix
CVE-2024-25968Dell PowerScale OneFS weak cryptographic algorithm5.9CNA v3.10.4%2024-05-14Fix
CVE-2024-25967Dell PowerScale OneFS execution with unnecessary privileges6.7CNA v3.10.3%2024-05-14Fix
CVE-2024-25966Dell PowerScale OneFS improper handling of unexpected data types5.3CNA v3.10.9%2024-05-14Fix
CVE-2024-25965Dell PowerScale OneFS external control of a file path6.1CNA v3.10.2%2024-05-14Fix
CVE-2024-25662Oxygen XML Web Author and Content Fusion cross-site scripting6.1CISA ADP v3.10.4%2024-05-14
CVE-2024-25641Cacti RCE vulnerability when importing packages9.1CNA v3.186.3%2024-05-14MetasploitExploit codeFix
CVE-2024-25581Transfer requests received over DoH can lead to a denial of service in DNSdist7.5CNA v3.11.1%2024-05-14Fix
CVE-2024-24157Sir Gnuboard cross-site scripting6.1CISA ADP v3.10.4%2024-05-14
CVE-2024-23576HCL Commerce is potentially affected by a denial of service and information disclosure7.1CNA v3.10.5%2024-05-14Fix
CVE-2024-23473SolarWinds Access Rights Manager (ARM) hard-coded credentials authentication bypass8.6CNA v3.11.1%2024-05-14Fix
CVE-2024-23236Apple macOS arbitrary file read5.5v3.10.3%2024-05-14Fix
CVE-2024-23229Apple macOS insecure storage of sensitive information5.5v3.10.3%2024-05-14Fix
CVE-2024-23105Fortinet FortiPortal use of a less trusted source7.1CNA v3.10.4%2024-05-14Fix
CVE-2024-22910CrushFTP cross-site scripting6.1CISA ADP v3.10.5%2024-05-14
CVE-2024-22774Panoramic Corporation Digital Imaging Software ccsservice.exe privilege escalation7.8CISA ADP v3.10.5%2024-05-14Fix
CVE-2024-22345IBM TXSeries for Multiplatforms information disclosure6.2CNA v3.10.5%2024-05-14Fix
CVE-2024-22344IBM TXSeries for Multiplatforms information disclosure6.1CNA v3.10.5%2024-05-14Fix
CVE-2024-22343IBM TXSeries for Multiplatforms information disclosure4.0CNA v3.10.2%2024-05-14Fix
CVE-2024-22270VMware Workstation information disclosure7.1CNA v3.10.5%2024-05-14Fix
CVE-2024-22269VMware Workstation information disclosure7.1CNA v3.10.5%2024-05-14Fix
CVE-2024-22268VMware Workstation out-of-bounds write7.1CNA v3.10.5%2024-05-14Fix
CVE-2024-22267VMware Workstation use-after-free9.3CNA v3.10.7%2024-05-14Fix
CVE-2024-22064ZTE ZXUN-ePDG IKE secure connection setup vulnerability8.3CNA v3.10.5%2024-05-14Fix
CVE-2024-4871Red Hat Satellite foreman: Host SSH key not being checked in remote execution6.8CNA v3.10.6%2024-05-14Fix
CVE-2024-4860rebelcode RSS Aggregator cross-site scripting6.1NVD v3.10.4%2024-05-14Fix
CVE-2024-4859solidus cross-site scripting5.7CNA v3.10.4%2024-05-14
CVE-2024-4855Wireshark Foundation editcap use-after-free3.6CNA v3.10.4%2024-05-14Fix
CVE-2024-4854Loop with unreachable exit condition (infinite loop) in Wireshark6.4CNA v3.10.8%2024-05-14Fix
CVE-2024-4853Mismatched Memory Management Routines in editcap3.6CNA v3.10.4%2024-05-14Fix
CVE-2024-4840Red Hat OpenStack Platform rhosp-director: Cleartext passwords exposed in logs5.5CNA v3.10.2%2024-05-14Fix
CVE-2024-4825Unrestricted upload of file with dangerous type vulnerability on Cockpit CMS from Agentejo9.8CNA v3.10.7%2024-05-14Fix
CVE-2024-4824SQL injection in School ERP Pro+Responsive by Arox SOLUTION9.8CNA v3.10.7%2024-05-14
CVE-2024-4823Cross-site scripting in School ERP Pro+Responsive by Arox SOLUTION6.1v3.10.5%2024-05-14
CVE-2024-4822Cross-site scripting in School ERP Pro+Responsive by Arox SOLUTION6.1v3.10.4%2024-05-14
CVE-2024-4820SourceCodester Online Computer and Laptop Store unrestricted upload8.8v3.11.1%2024-05-14
CVE-2024-4819Campcodes Online Laundry Management System admin_class.php improper authorization8.8v3.10.8%2024-05-14
CVE-2024-4818Campcodes Online Laundry Management System index.php file inclusion5.3v3.11.0%2024-05-14
CVE-2024-4817Campcodes Online Laundry Management System HTTP request parameter manage_user.php resource injection8.8v3.10.9%2024-05-14
CVE-2024-4816Ruijie RG-UAC gre_add_commit.php os command injection9.8v3.16.4%2024-05-14
CVE-2024-4815Ruijie RG-UAC detail.php os command injection9.8v3.16.4%2024-05-14
CVE-2024-4814Ruijie RG-UAC static_route_edit_commit.php os command injection9.8v3.16.4%2024-05-14
CVE-2024-4813Ruijie RG-UAC interface_commit.php os command injection9.8v3.16.4%2024-05-14
CVE-2024-4809SourceCodester Open Source Clinic Management System setting.php unrestricted upload9.8v3.11.2%2024-05-14
CVE-2024-4808Kashipara College Management System delete_faculty.php SQL injection8.8v3.10.8%2024-05-14
CVE-2024-4807Kashipara College Management System delete_user.php SQL injection8.8v3.10.8%2024-05-14
CVE-2024-4806Kashipara College Management System each_extracurricula_activities.php SQL injection8.8v3.10.8%2024-05-14
CVE-2024-4805Kashipara College Management System edit_faculty.php SQL injection8.8v3.10.8%2024-05-14
CVE-2024-4804Kashipara College Management System edit_user.php SQL injection8.8v3.10.8%2024-05-14
CVE-2024-4803Kashipara College Management System submit_admin.php SQL injection8.8v3.10.8%2024-05-14
CVE-2024-4802Kashipara College Management System submit_extracurricular_activity.php SQL injection8.8v3.10.8%2024-05-14
CVE-2024-4801Kashipara College Management System submit_new_faculty.php SQL injection8.8v3.10.8%2024-05-14
CVE-2024-4800Kashipara College Management System submit_student.php SQL injection8.8v3.10.8%2024-05-14
CVE-2024-4799Kashipara College Management System view_each_faculty.php SQL injection8.8v3.10.8%2024-05-14
CVE-2024-4798SourceCodester Online Computer and Laptop Store manage_brand.php SQL injection9.8v3.10.9%2024-05-14
CVE-2024-4797Campcodes Online Laundry Management System ajax.php cross-site scripting6.1v3.10.6%2024-05-14
CVE-2024-4796Campcodes Online Laundry Management System manage_inv.php SQL injection8.8v3.10.8%2024-05-14
CVE-2024-4795Campcodes Online Laundry Management System manage_user.php SQL injection8.8v3.10.8%2024-05-14
CVE-2024-4794Campcodes Online Laundry Management System manage_receiving.php SQL injection8.8v3.10.8%2024-05-14
CVE-2024-4793Campcodes Online Laundry Management System manage_laundry.php SQL injection8.8v3.10.8%2024-05-14
CVE-2024-4792Campcodes Online Laundry Management System admin_class.php SQL injection8.8v3.10.8%2024-05-14
CVE-2024-4791Contemporary Control Systems BASrouter BACnet BASRT-B denial of service8.7CNA v4.01.3%2024-05-14
CVE-2024-4790DedeCMS path traversal7.5v3.11.1%2024-05-14
CVE-2024-4778Mozilla Firefox memory safety bugs9.8CISA ADP v3.10.4%2024-05-14Fix
CVE-2024-4777Mozilla Firefox memory safety bugs8.8v3.10.5%2024-05-14Fix
CVE-2024-4776Mozilla Firefox cross-site scripting8.2CISA ADP v3.10.4%2024-05-14Fix
CVE-2024-4775Mozilla Firefox undefined behavior5.9CISA ADP v3.10.2%2024-05-14Fix
CVE-2024-4774Mozilla Firefox undefined behavior6.5v3.10.4%2024-05-14Fix
CVE-2024-4773Mozilla Firefox open redirect7.5CISA ADP v3.10.5%2024-05-14Fix
CVE-2024-4772Mozilla Firefox weak random number generator5.9CISA ADP v3.10.2%2024-05-14Fix
CVE-2024-4771Mozilla Firefox use-after-free8.6CISA ADP v3.10.5%2024-05-14Fix
CVE-2024-4770Mozilla Firefox use-after-free8.8CISA ADP v3.10.6%2024-05-14Fix
CVE-2024-4769Mozilla Firefox and Thunderbird Web Workers vulnerability5.9CISA ADP v3.10.4%2024-05-14Fix
CVE-2024-4768Mozilla Firefox improper preservation of permissions6.1CISA ADP v3.10.5%2024-05-14Fix
CVE-2024-4767Mozilla Firefox personal information exposure4.3CISA ADP v3.10.5%2024-05-14Fix
CVE-2024-4766Mozilla Firefox spoofing4.3CISA ADP v3.10.4%2024-05-14Fix
CVE-2024-4765Mozilla Firefox weak cryptographic algorithm8.1CISA ADP v3.10.3%2024-05-14Fix
CVE-2024-4764Mozilla Firefox use-after-free9.8CISA ADP v3.10.6%2024-05-14Fix
CVE-2024-4761Google Chromium V8 out-of-bounds write8.8v3.111.0%2024-05-14KEVExploit codeFix
CVE-2024-4747Propovoice CRM WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.4%2024-05-14Fix
CVE-2024-4738Campcodes Legal Case Management System cross-site scripting5.4v3.10.6%2024-05-14
CVE-2024-4737Campcodes Legal Case Management System vendor cross-site scripting5.4v3.10.6%2024-05-14
CVE-2024-4736Campcodes Legal Case Management System tax cross-site scripting5.4v3.10.6%2024-05-14
CVE-2024-4735Campcodes Legal Case Management System tasks cross-site scripting5.4v3.10.6%2024-05-14
CVE-2024-4732Campcodes Legal Case Management System service cross-site scripting5.4v3.10.6%2024-05-14
CVE-2024-4731Campcodes Legal Case Management System role cross-site scripting5.4v3.10.6%2024-05-14
CVE-2024-4730Campcodes Legal Case Management System judge cross-site scripting5.4v3.10.6%2024-05-14
CVE-2024-4729Campcodes Legal Case Management System expense-type cross-site scripting5.4v3.10.6%2024-05-14
CVE-2024-4728Campcodes Legal Case Management System court cross-site scripting5.4v3.10.6%2024-05-14
CVE-2024-4727Campcodes Legal Case Management System court-type cross-site scripting5.4v3.10.6%2024-05-14
CVE-2024-4726Campcodes Legal Case Management System clients cross-site scripting5.4v3.10.6%2024-05-14
CVE-2024-4725Campcodes Legal Case Management System client_user cross-site scripting5.4v3.10.6%2024-05-14
CVE-2024-4724Campcodes Legal Case Management System case-type cross-site scripting5.4v3.10.6%2024-05-14
CVE-2024-4723Campcodes Legal Case Management System case-status cross-site scripting5.4v3.10.6%2024-05-14
CVE-2024-4722Campcodes Complete Web-Based School Management System index.php cross-site scripting6.1v3.10.6%2024-05-14
CVE-2024-4721Campcodes Complete Web-Based School Management System add_student_subject.php cross-site scripting5.4v3.10.6%2024-05-14
CVE-2024-4720Campcodes Complete Web-Based School Management System approve_petty_cash.php cross-site scripting6.1v3.10.7%2024-05-14
CVE-2024-4719Campcodes Complete Web-Based School Management System delete_record.php cross-site scripting6.1v3.10.6%2024-05-14
CVE-2024-4718Campcodes Complete Web-Based School Management System cross-site scripting6.1v3.10.6%2024-05-14
CVE-2024-4717Campcodes Complete Web-Based School Management System update_classroom.php cross-site scripting6.1v3.10.7%2024-05-14
CVE-2024-4716Campcodes Complete Web-Based School Management System update_exam.php cross-site scripting6.1v3.10.6%2024-05-14
CVE-2024-4715Campcodes Complete Web-Based School Management System update_grade.php cross-site scripting6.1v3.10.6%2024-05-14
CVE-2024-4714Campcodes Complete Web-Based School Management System update_subject.php cross-site scripting6.1v3.10.6%2024-05-14
CVE-2024-4713Campcodes Complete Web-Based School Management System all_teacher.php cross-site scripting6.1v3.10.6%2024-05-14
CVE-2024-4712Arbitrary file creation in PaperCut NG/MF Web Print Image handler7.8CNA v3.10.4%2024-05-14Fix
CVE-2024-4701Path traversal vulnerability via File Uploads in Genie9.9CNA v3.124.6%2024-05-14Exploit codeFix
CVE-2024-4699D-Link DAR-8000-10 importhtml.php deserialization9.8v3.16.1%2024-05-14
CVE-2024-4693QEMU virtio-pci vulnerability5.5CNA v3.10.3%2024-05-14Fix
CVE-2024-4689ShortPixel Adaptive Images WordPress plugin cross-site request forgery (CSRF)4.3CNA v3.10.3%2024-05-14Fix
CVE-2024-4688Campcodes Complete Web-Based School Management System cross-site scripting6.1v3.10.5%2024-05-14
CVE-2024-4687Campcodes Complete Web-Based School Management System create_events.php cross-site scripting6.1v3.10.5%2024-05-14
CVE-2024-4686Campcodes Complete Web-Based School Management System cross-site scripting6.1v3.10.5%2024-05-14
CVE-2024-4685Campcodes Complete Web-Based School Management System exam_timetable.php cross-site scripting6.1v3.10.5%2024-05-14
CVE-2024-4684Campcodes Complete Web-Based School Management System cross-site scripting6.1v3.10.7%2024-05-14
CVE-2024-4683Campcodes Complete Web-Based School Management System cross-site scripting6.1v3.10.7%2024-05-14
CVE-2024-4682Campcodes Complete Web-Based School Management System cross-site scripting6.1v3.10.7%2024-05-14
CVE-2024-4681Campcodes Legal Case Management System setting general-setting unrestricted upload7.2v3.11.0%2024-05-14
CVE-2024-4678Campcodes Complete Web-Based School Management System find_friends.php cross-site scripting6.1v3.10.7%2024-05-14
CVE-2024-4677Campcodes Complete Web-Based School Management System cross-site scripting6.1v3.10.6%2024-05-14
CVE-2024-4676Campcodes Complete Web-Based School Management System range_grade_text.php cross-site scripting6.1v3.10.6%2024-05-14
CVE-2024-4675Campcodes Complete Web-Based School Management System show_events.php cross-site scripting6.1v3.10.6%2024-05-14
CVE-2024-4674Campcodes Complete Web-Based School Management System show_friend_request.php cross-site scripting6.1v3.10.6%2024-05-14
CVE-2024-4673Campcodes Complete Web-Based School Management System cross-site scripting6.1v3.10.6%2024-05-14
CVE-2024-4672Campcodes Complete Web-Based School Management System show_student_subject.php cross-site scripting6.1v3.10.7%2024-05-14
CVE-2024-4671Google Chromium Visuals use-after-free9.6v3.18.3%2024-05-14KEVKCVFix
CVE-2024-4666Borderless WordPress plugin stored cross-site scripting5.4v3.10.4%2024-05-14Fix
CVE-2024-4630Starter Templates WordPress plugin stored cross-site scripting6.4CNA v3.10.4%2024-05-14Fix
CVE-2024-4624Essential Addons for Elementor WordPress plugin stored cross-site scripting5.4v3.10.4%2024-05-14Fix
CVE-2024-4606Ultimate Store Kit Elementor Addons WordPress plugin BdThemes deserialization of untrusted data5.4CNA v3.10.3%2024-05-14Fix
CVE-2024-4605Breakdance WordPress plugin authenticated (Contributor+) remote code execution8.8CNA v3.10.9%2024-05-14Fix
CVE-2024-4597Cross-site request forgery (CSRF) in GitLab5.7CNA v3.10.3%2024-05-14Fix
CVE-2024-4574Graphina Elementor Charts and Graphs WordPress plugin stored cross-site scripting6.4CNA v3.10.6%2024-05-14Fix
CVE-2024-4567Themify Shortcodes WordPress plugin stored cross-site scripting5.4v3.10.4%2024-05-14Fix
CVE-2024-4562WhatsUp Gold server-side request forgery information disclosure vulnerability5.4CNA v3.10.4%2024-05-14Fix
CVE-2024-4561WhatsUp Gold server-side request forgery information disclosure vulnerability via FaviconController4.2CNA v3.10.4%2024-05-14Fix
CVE-2024-4560Kognetiks Chatbot for WordPress plugin unauthenticated arbitrary file upload9.8CNA v3.10.9%2024-05-14Fix
CVE-2024-4545EDB Postgres Advanced Server (EPAS) authenticated file read permissions bypass using edbldr7.7CNA v3.10.5%2024-05-14Fix
CVE-2024-4539Allocation of resources without limits or throttling in GitLab4.3CNA v3.10.8%2024-05-14Fix
CVE-2024-4490Elegant Themes Divi theme WordPress plugin stored cross-site scripting6.4CNA v3.10.5%2024-05-14Fix
CVE-2024-4487Blocksy Companion WordPress plugin stored cross-site scripting5.4v3.10.4%2024-05-14Fix
CVE-2024-4481Gutenberg Blocks with AI by Kadence WP WordPress plugin stored cross-site scripting5.4v3.10.3%2024-05-14Fix
CVE-2024-4473Sydney Toolbox WordPress plugin stored cross-site scripting5.4v3.10.3%2024-05-14Fix
CVE-2024-4463Squelch Tabs and Accordions Shortcodes WordPress plugin cross-site request forgery4.3CNA v3.10.2%2024-05-14Fix
CVE-2024-4449Essential Addons for Elementor WordPress plugin DOM-based stored cross-site scripting5.4v3.10.3%2024-05-14Fix
CVE-2024-4448Essential Addons for Elementor WordPress plugin stored cross-site scripting6.1NVD v3.10.5%2024-05-14Fix
CVE-2024-4446Content Views WordPress plugin stored cross-site scripting6.4CNA v3.10.4%2024-05-14Fix
CVE-2024-4445WP Compress Image Optimizer [All-In-One] WordPress plugin missing authorization4.3v3.10.3%2024-05-14Fix
CVE-2024-4444LearnPress WordPress LMS plugin unauthenticated bypass to user Registration6.5v3.10.7%2024-05-14Fix
CVE-2024-4441XML Sitemap and Google News WordPress plugin unauthenticated local file inclusion8.1CNA v3.10.7%2024-05-14Fix
CVE-2024-4440140+ Widgets WordPress plugin stored cross-site scripting6.4CNA v3.10.4%2024-05-14Fix
CVE-2024-4434LearnPress WordPress LMS plugin unauthenticated time-based SQL injection9.8CNA v3.136.9%2024-05-14NucleiFix
CVE-2024-4430Beaver Builder WordPress plugin stored cross-site scripting5.4v3.10.5%2024-05-14Fix
CVE-2024-4425Storing credentials in plaintext in CemiPark5.4CISA ADP v3.10.4%2024-05-14
CVE-2024-4424Stored XSS in CemiPark6.1CISA ADP v3.10.4%2024-05-14
CVE-2024-4423Authentication bypass in CemiPark7.2CISA ADP v3.10.9%2024-05-14
CVE-2024-4417Falang multilanguage for WordPress plugin authenticated (Administrator+) stored cross-site scripting4.4CNA v3.10.4%2024-05-14Fix
CVE-2024-4413Hotel Booking Lite WordPress plugin unauthenticated PHP object injection9.8CNA v3.10.9%2024-05-14Fix
CVE-2024-4411Mihdan: Yandex Turbo Feed WordPress plugin stored cross-site scripting6.4CNA v3.10.4%2024-05-14Fix
CVE-2024-4398HTML5 Audio Player- Best WordPress Audio Player plugin stored cross-site scripting6.4CNA v3.10.5%2024-05-14Fix
CVE-2024-4397LearnPress WordPress LMS plugin authenticated (Instructor+) arbitrary file upload8.8CNA v3.11.0%2024-05-14Fix
CVE-2024-4392Jetpack WP Security, Backup, Speed, & Growth WordPress plugin stored cross-site scripting5.4v3.10.4%2024-05-14Fix
CVE-2024-4386Gallery Block (Meow Gallery) WordPress plugin stored cross-site scripting6.4CNA v3.10.4%2024-05-14Fix
CVE-2024-4383Simple Membership WordPress plugin stored cross-site scripting5.4v3.10.4%2024-05-14Fix
CVE-2024-4367Mozilla Firefox PDF.js vulnerable to arbitrary JavaScript execution upon opening a malicious PDF8.8NVD v3.170.7%2024-05-14Emerging ThreatsExploit codeKCVFix
CVE-2024-4339Prime Slider Addons For Elementor WordPress plugin stored cross-site scripting5.4v3.10.3%2024-05-14Fix
CVE-2024-4335Rank Math SEO with AI Best SEO Tools WordPress plugin stored cross-site scripting5.4v3.10.4%2024-05-14Fix
CVE-2024-4333Sina Extension for Elementor WordPress plugin DOM-based cross-site scripting5.4v3.10.4%2024-05-14Fix
CVE-2024-4329Thim Elementor Kit WordPress plugin stored cross-site scripting6.4CNA v3.10.4%2024-05-14Fix
CVE-2024-4317PostgreSQL pg_stats_ext and pg_stats_ext_exprs lack authorization checks3.1CNA v3.10.7%2024-05-14Fix
CVE-2024-4316EmbedPress WordPress plugin stored cross-site scripting5.4v3.10.3%2024-05-14Fix
CVE-2024-4314hostel WordPress plugin cross-site request forgery4.3CNA v3.10.2%2024-05-14Fix
CVE-2024-4312Soccer Engine Soccer Plugin for WordPress cross-site request forgery4.3CNA v3.10.2%2024-05-14Fix
CVE-2024-4280White Label CMS WordPress plugin missing authorization to plugin settings reset5.3CNA v3.10.4%2024-05-14Fix
CVE-2024-4277LearnPress WordPress LMS plugin stored cross-site scripting5.4v3.10.3%2024-05-14Fix
CVE-2024-4275Essential Addons for Elementor WordPress plugin stored cross-site scripting5.4v3.10.3%2024-05-14Fix
CVE-2024-4232Password Storage in Plaintext vulnerability in Digisol Router4.1CISA ADP v3.10.3%2024-05-14Fix
CVE-2024-4231Incorrect access control vulnerability in Digisol Router4.6CISA ADP v3.10.6%2024-05-14Fix
CVE-2024-4213Shopping Cart and eCommerce Store WordPress plugin sensitive information exposure5.3CNA v3.10.5%2024-05-14Fix
CVE-2024-4209Gutenberg Blocks with AI by Kadence WP WordPress plugin stored cross-site scripting5.4v3.10.4%2024-05-14Fix
CVE-2024-4193Testimonial Slider WordPress plugin authenticated (Contributor+) stored cross-site scripting6.4CNA v3.10.4%2024-05-14Fix
CVE-2024-4158Blocksy WordPress theme authenticated (Contributor+) stored cross-site scripting5.4v3.10.3%2024-05-14Fix
CVE-2024-4150Simple Basic Contact Form WordPress plugin reflected cross-site scripting6.1CNA v3.10.5%2024-05-14Fix
CVE-2024-4144Simple Basic Contact Form WordPress plugin unauthenticated arbitrary shortcode execution6.5CNA v3.10.7%2024-05-14Fix
CVE-2024-4139Missing authorization Checks in SAP S/4 HANA (Manage Bank Statement Reprocessing Rules)4.3CNA v3.10.3%2024-05-14Fix
CVE-2024-4138Missing authorization Checks in SAP S/4 HANA (Manage Bank Statement Reprocessing Rules)4.3CNA v3.10.3%2024-05-14Fix
CVE-2024-4129Authentication bypass in Snow License Manager8.8CNA v3.10.5%2024-05-14
CVE-2024-4107Elementor Website Builder Pro WordPress plugin DOM-based stored cross-site scripting5.4v3.10.4%2024-05-14Fix
CVE-2024-4104ADFO Custom data in admin dashboard WordPress plugin reflected cross-site scripting6.1CNA v3.10.5%2024-05-14Fix
CVE-2024-4103ADFO Custom data in admin dashboard WordPress plugin cross-site request forgery4.3CNA v3.10.2%2024-05-14Fix
CVE-2024-4082Joli FAQ SEO WordPress FAQ plugin cross-site request forgery4.3CNA v3.10.2%2024-05-14Fix
CVE-2024-4068Memory exhaustion in braces7.5CNA v3.11.5%2024-05-14Exploit codeFix
CVE-2024-4067Regular expression denial of service in micromatch5.3NVD v3.11.4%2024-05-14Fix
CVE-2024-4046Huawei HarmonyOS cracking vulnerability in the OS security module6.4CNA v3.10.1%2024-05-14Fix
CVE-2024-4044Deserialization of untrusted data vulnerability in FlexLogger and InstrumentStudio7.8CNA v3.114.7%2024-05-14
CVE-2024-4041Yoast SEO WordPress plugin reflected cross-site scripting6.1CNA v3.10.8%2024-05-14Exploit codeFix
CVE-2024-4039Orders Tracking for WooCommerce WordPress plugin unauthenticated arbitrary shortcode execution6.5CNA v3.10.6%2024-05-14Fix
CVE-2024-4038propluginslab Back In Stock Notifier for WooCommerce code injection6.5CNA v3.10.5%2024-05-14Fix
CVE-2024-3990HT Mega Absolute Addons For Elementor WordPress plugin stored cross-site scripting5.4v3.10.4%2024-05-14Fix
CVE-2024-3989HT Mega Absolute Addons For Elementor WordPress plugin stored cross-site scripting5.4v3.10.3%2024-05-14Fix
CVE-2024-3974BuddyPress WordPress plugin authenticated (Subscriber+) stored cross-site scripting5.4v3.10.4%2024-05-14Fix
CVE-2024-3956Pods Custom Content Types and Fields WordPress plugin stored cross-site scripting5.4CNA v3.10.4%2024-05-14Fix
CVE-2024-3954Ditty Responsive News Tickers, Sliders, and Lists WordPress plugin PHP object injection8.8CNA v3.10.7%2024-05-14Fix
CVE-2024-3952Advanced Ads Ad Manager and AdSense WordPress plugin stored cross-site scripting6.4CNA v3.10.4%2024-05-14Fix
CVE-2024-3941reCAPTCHA Jetpack WordPress plugin stored XSS via CSRF4.7CISA ADP v3.10.3%2024-05-14
CVE-2024-3940reCAPTCHA Jetpack WordPress plugin settings update via CSRF8.8CISA ADP v3.10.4%2024-05-14
CVE-2024-3923Beaver Builder WordPress Page Builder plugin stored cross-site scripting5.4v3.10.4%2024-05-14Fix
CVE-2024-3916Swift Framework WordPress plugin stored cross-site scripting6.4CNA v3.10.4%2024-05-14
CVE-2024-3915Swift Framework WordPress plugin missing authorization to unauthenticated arbitrary content update5.3CNA v3.10.4%2024-05-14
CVE-2024-3903Technologicx Add Custom CSS and JS cross-site request forgery7.1CISA ADP v3.10.2%2024-05-14
CVE-2024-3831Enter Addons Ultimate Template Builder for Elementor WordPress plugin stored cross-site scripting5.4v3.10.4%2024-05-14Fix
CVE-2024-3828Spectra Pro WordPress plugin authenticated (Author+) privilege escalation8.8CNA v3.10.6%2024-05-14Fix
CVE-2024-3809Porto Theme - Functionality WordPress plugin local file inclusion8.8CNA v3.11.0%2024-05-14Fix
CVE-2024-3808Porto Theme - Functionality WordPress plugin local file inclusion8.8CNA v3.11.0%2024-05-14Fix
CVE-2024-3807Porto WordPress theme authenticated (Contributor+) local file inclusion via post Meta8.8CNA v3.11.5%2024-05-14Fix
CVE-2024-3806Porto WordPress theme unauthenticated local file inclusion via porto_ajax_posts9.8CNA v3.12.7%2024-05-14Exploit codeFix
CVE-2024-3796Cross-site scripting vulnerability in WBSAirback4.8v3.10.4%2024-05-14Fix
CVE-2024-3795Cross-site scripting vulnerability in WBSAirback4.8v3.10.4%2024-05-14Fix
CVE-2024-3794Cross-site scripting vulnerability in WBSAirback4.8v3.10.4%2024-05-14Fix
CVE-2024-3793Cross-site scripting vulnerability in WBSAirback4.8v3.10.4%2024-05-14Fix
CVE-2024-3792Cross-site scripting vulnerability in WBSAirback4.8v3.10.5%2024-05-14Fix
CVE-2024-3791Cross-site scripting vulnerability in WBSAirback4.8v3.10.4%2024-05-14Fix
CVE-2024-3790Cross-site scripting vulnerability in WBSAirback4.8v3.10.4%2024-05-14Fix
CVE-2024-3789Uncontrolled resource consumption vulnerability in WBSAirback6.5v3.11.0%2024-05-14Fix
CVE-2024-3788Improper neutralization of Server-Side Includes (SSI) vulnerability in WBSAirback6.6v3.10.6%2024-05-14Fix
CVE-2024-3787Improper neutralization of Server-Side Includes (SSI) vulnerability in WBSAirback6.6v3.10.6%2024-05-14Fix
CVE-2024-3722Swift Performance Lite WordPress plugin unauthorized access5.4CNA v3.10.4%2024-05-14Fix
CVE-2024-3680Enter Addons Ultimate Template Builder for Elementor WordPress plugin stored cross-site scripting5.4v3.10.4%2024-05-14Fix
CVE-2024-3676Proofpoint enterprise_protection improper input validation7.5CNA v3.10.4%2024-05-14Fix
CVE-2024-3595Pure Chat Live Chat Plugin and More! WordPress plugin stored cross-site scripting6.4CNA v3.10.4%2024-05-14Fix
CVE-2024-3590LetterPress WordPress plugin Subscriber deletion via CSRF6.1CISA ADP v3.10.2%2024-05-14
CVE-2024-3582Ungallery WordPress plugin stored XSS via CSRF4.8CISA ADP v3.10.2%2024-05-14
CVE-2024-3579XSS in Online Shopping System Advanced6.1CISA ADP v3.10.3%2024-05-14
CVE-2024-3547Unlimited Elements For Elementor WordPress plugin reflected cross-site scripting6.1CNA v3.10.4%2024-05-14Fix
CVE-2024-3462Authorization bypass in Ant Media Server5.4CISA ADP v3.10.5%2024-05-14
CVE-2024-3461Kioware missing brute-force protection5.5v3.10.3%2024-05-14
CVE-2024-3460Kioware unprotected alternate path7.0v3.10.3%2024-05-14
CVE-2024-3459Kioware unprotected alternate path7.8v3.10.3%2024-05-14
CVE-2024-3374MongoDB Server (mongod) may crash when generating ftdc5.3CNA v3.10.5%2024-05-14Fix
CVE-2024-3372MongoDB Server may have unexpected application behaviour due to invalid BSON7.5CNA v3.10.6%2024-05-14Fix
CVE-2024-3263Improper authentication in YMS VIS Pro9.8CNA v3.10.8%2024-05-14
CVE-2024-3241Ultimate Blocks WordPress plugin Contributor+ stored XSS5.4CISA ADP v3.10.4%2024-05-14Fix
CVE-2024-3239PostX WordPress plugin Contributor+ stored XSS5.4CISA ADP v3.10.4%2024-05-14Fix
CVE-2024-3070Last Viewed Posts by WPBeginner WordPress plugin unauthenticated PHP object injection9.8CNA v3.11.2%2024-05-14Fix
CVE-2024-3068Custom Field Suite WordPress plugin authenticated (Admin+) stored cross-site scripting4.8v3.10.6%2024-05-14Fix
CVE-2024-3055Unlimited Elements For Elementor (Free Widgets, Addons, Templates) WordPress plugin SQL injection8.8v3.10.8%2024-05-14Fix
CVE-2024-3044The Document Foundation LibreOffice graphic on-click binding allows unchecked script execution6.5v3.11.0%2024-05-14Fix
CVE-2024-3037Arbitrary file deletion in PaperCut NG/MF Web Print7.8CNA v3.10.4%2024-05-14Fix
CVE-2024-3016NEC Platforms ITK-6DGS-1(BK) TEL hidden functionality9.1CISA ADP v3.10.7%2024-05-14
CVE-2024-2923Magical Addons For Elementor WordPress plugin stored cross-site scripting5.4v3.10.3%2024-05-14Fix
CVE-2024-2846Visual Footer Credit Remover WordPress plugin authenticated (Admin+) stored cross-site scripting4.4CNA v3.10.3%2024-05-14Fix
CVE-2024-2785The Plus Addons for Elementor WordPress plugin stored cross-site scripting5.4v3.10.3%2024-05-14Fix
CVE-2024-2749VikBooking WordPress plugin broken access control5.9CISA ADP v3.10.3%2024-05-14Fix
CVE-2024-2662Unlimited Elements For Elementor WordPress plugin command injection7.2CNA v3.11.7%2024-05-14Fix
CVE-2024-2651Inefficient regular expression complexity in GitLab6.5CNA v3.133.3%2024-05-14Fix
CVE-2024-2637B&R Industrial Automation Scene Viewer Insecure Loading of Code in B&R Products7.2CNA v3.10.2%2024-05-14
CVE-2024-2454Allocation of resources without limits or throttling in GitLab6.5CNA v3.133.3%2024-05-14Fix
CVE-2024-2441VikBooking WordPress plugin insecure direct object references8.1CISA ADP v3.10.6%2024-05-14Fix
CVE-2024-2299Stored cross-site scripting (XSS) via Profile Picture upload in parisneo/lollms-webui6.1NVD v3.10.4%2024-05-14
CVE-2024-2290Advanced Ads Ad Manager and AdSense WordPress plugin authenticated (Admin+) PHP object injection7.2CNA v3.10.9%2024-05-14Fix
CVE-2024-2257Password Policy Bypass vulnerability in Digisol Router9.1CISA ADP v3.11.0%2024-05-14Fix
CVE-2024-1914ABB RobotWare 6 null pointer dereference6.5CNA v3.10.7%2024-05-14Fix
CVE-2024-1913ABB RobotWare 6 out-of-bounds write7.6CNA v3.10.7%2024-05-14Fix
CVE-2024-1693SP Project and Document Manager WordPress plugin arbitrary Folder Name update4.3CNA v3.10.4%2024-05-14
CVE-2024-1630GE HealthCare Venue path traversal7.7CNA v3.10.3%2024-05-14Fix
CVE-2024-1629GE HealthCare Venue path traversal6.2CNA v3.10.3%2024-05-14Fix
CVE-2024-1628OS command injection vulnerabilities in GE HealthCare ultrasound devices8.4CNA v3.10.8%2024-05-14Fix
CVE-2024-1598Phoenix SecureCore™ for Intel Gemini Lake potential buffer overflow when handling UEFI variables7.5CNA v3.10.2%2024-05-14Fix
CVE-2024-1486Elevation of privileges via misconfigured access control list in GE HealthCare ultrasound devices7.4CNA v3.10.2%2024-05-14Fix
CVE-2024-1467Starter Templates WordPress plugin server-side request forgery4.3CNA v3.10.6%2024-05-14Fix
CVE-2024-1230SimpleShop WordPress plugin cross-site request forgery4.3CNA v3.10.6%2024-05-14Fix
CVE-2024-1229SimpleShop WordPress plugin missing authorization5.3CNA v3.10.6%2024-05-14Fix
CVE-2024-1166Image Hover Effects - Elementor Addon WordPress plugin DOM-based stored cross-site scripting6.4CNA v3.10.3%2024-05-14Fix
CVE-2024-0870YITH WooCommerce Gift Cards WordPress plugin unauthorized access5.3CNA v3.10.5%2024-05-14Fix
CVE-2024-0862Proofpoint enterprise_protection server-side request forgery5.0CNA v3.10.2%2024-05-14Fix
CVE-2024-0762Phoenix SecureCore™ for Intel Kaby Lake potential buffer overflow when handling UEFI variables7.5CNA v3.10.8%2024-05-14Exploit codeFix
CVE-2024-0445The Plus Addons for Elementor WordPress plugin stored cross-site scripting5.4v3.10.5%2024-05-14Fix
CVE-2024-0100NVIDIA Triton Inference Server tracing API vulnerability6.5CNA v3.10.7%2024-05-14Fix
CVE-2024-0098NVIDIA ChatRTX UI and backend cleartext transmission of sensitive information5.5CNA v3.10.2%2024-05-14Fix
CVE-2024-0097NVIDIA ChatRTX interprocess communication improper privilege management7.5CNA v3.10.2%2024-05-14Fix
CVE-2024-0096NVIDIA ChatRTX Chat RTX UI improper privilege management7.5CNA v3.10.2%2024-05-14Fix
CVE-2024-0088NVIDIA Triton Inference Server shared memory APIs memory corruption5.5CNA v3.118.9%2024-05-14Fix
CVE-2024-0087NVIDIA Triton Inference Server logging vulnerability9.0CNA v3.119.9%2024-05-14Fix
CVE-2024-34459libxml2 heap-based buffer overflow7.5CISA ADP v3.11.8%2024-05-13Fix
CVE-2024-27401Linux kernel firewire nosy packet buffer handling vulnerability7.8CNA v3.10.3%2024-05-13Fix
CVE-2024-27400Linux kernel amdgpu buffer move handling vulnerability7.8CNA v3.10.2%2024-05-13Fix
CVE-2024-27398Linux kernel Bluetooth SCO socket timeout handling use-after-free8.0CNA v3.10.8%2024-05-13Exploit codeFix
CVE-2024-27397Linux kernel nftables set element timeout handling use-after-free7.8CNA v3.10.3%2024-05-09Fix
CVE-2024-27396Linux kernel GTP tunneling driver use-after-free7.8CNA v3.10.2%2024-05-09Fix
CVE-2024-27395Linux kernel openvswitch use-after-free7.8CNA v3.10.2%2024-05-09Fix
CVE-2024-27394Linux kernel TCP authentication option connection setup use-after-free7.8CNA v3.10.3%2024-05-09Fix
CVE-2024-27393Linux kernel Xen netfront driver memory leak7.5CNA v3.10.8%2024-05-09Fix
CVE-2024-3727Containers/image: Digest type does not guarantee valid type8.3CNA v3.11.3%2024-05-09Fix
CVE-2024-34574Table Maker WordPress plugin cross-site scripting (XSS)5.9CNA v3.10.3%2024-05-08
CVE-2024-34573Pootle Pagebuilder WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.3%2024-05-08
CVE-2024-34572Fancy Elementor Flipbox WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2024-05-08
CVE-2024-34571Himalayas WordPress theme cross-site scripting (XSS)6.5CNA v3.10.3%2024-05-08Fix
CVE-2024-34570Xpro Elementor Addons WordPress plugin cross-site scripting (XSS)4.8v3.10.3%2024-05-08Fix
CVE-2024-34569Zotpress WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.3%2024-05-08Fix
CVE-2024-34568LetterPress Newsletter WordPress plugin cross-site scripting (XSS)5.9CNA v3.10.2%2024-05-08Exploit code
CVE-2024-34566Content Blocks (Custom Post Widget) WordPress plugin cross-site scripting (XSS)5.4v3.10.3%2024-05-08Fix
CVE-2024-34565Debug Info WordPress plugin cross-site scripting (XSS)5.9CNA v3.10.3%2024-05-08
CVE-2024-34564Counter Up WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.3%2024-05-08Fix
CVE-2024-34563Gold Addons for Elementor WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.3%2024-05-08Fix
CVE-2024-34562Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Moveaddons Move Addons for Elementor allows Stored XSS.This issue affects Move Addons for Elementor: from n/a through 1.3.0.5.4v3.10.3%2024-05-08Fix
CVE-2024-34561Real3D Flipbook PDF Viewer Lite WordPress plugin cross-site scripting (XSS)5.9CNA v3.10.3%2024-05-08Fix
CVE-2024-34560gee Search Plus WordPress plugin cross-site scripting (XSS)5.9CNA v3.10.3%2024-05-08
CVE-2024-34558WOLF WordPress plugin cross-site scripting (XSS)4.8v3.10.3%2024-05-08Fix
CVE-2024-34553Stockholm Core WordPress plugin reflected cross-site scripting (XSS)6.1NVD v3.10.3%2024-05-08Fix
CVE-2024-34548All-in-One Addons for Elementor WidgetKit WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.3%2024-05-08Fix
CVE-2024-34547Magical Addons For Elementor WordPress plugin cross-site scripting (XSS)5.4v3.10.3%2024-05-08Fix
CVE-2024-34546Sticky Social Link WordPress plugin cross-site scripting (XSS)5.9CNA v3.10.3%2024-05-08
CVE-2024-34414Raindrops WordPress theme cross-site scripting (XSS)6.5CNA v3.10.2%2024-05-08Fix
CVE-2024-34347@hoppscotch/cli affected by sandbox escape in @hoppscotch/js-sandbox leads to RCE8.4CNA v3.10.6%2024-05-08Fix
CVE-2024-34257TOTOLINK EX1800T improper authorization9.8CISA ADP v3.13.8%2024-05-08Nuclei
CVE-2024-34255jizhiCMS cross-site scripting6.1CISA ADP v3.10.3%2024-05-08
CVE-2024-34244libmodbus buffer overflow7.5CISA ADP v3.10.5%2024-05-08Fix
CVE-2024-33612F5 BIG-IP Next Central Manager improper certificate validation6.8CNA v3.10.2%2024-05-08Fix
CVE-2024-33608F5 BIG-IP Traffic Management Microkernel IPsec handling vulnerability7.5CNA v3.10.6%2024-05-08Fix
CVE-2024-33604BIG-IP Configuration utility XSS6.1CNA v3.10.3%2024-05-08Fix
CVE-2024-33574Vitepos WordPress plugin broken access control4.3CNA v3.10.4%2024-05-08Fix
CVE-2024-33573EPROLO Dropshipping WordPress plugin broken access control4.3CNA v3.10.4%2024-05-08Fix
CVE-2024-33382Open5GS denial of service5.3CISA ADP v3.10.5%2024-05-08
CVE-2024-32980Spin contains a potential network sandbox escape for specifically configured Spin applications9.1CNA v3.10.5%2024-05-08Fix
CVE-2024-32886Vitess vulnerable to infinite memory consumption and vtgate crash4.9CNA v3.10.8%2024-05-08Fix
CVE-2024-32761BIG-IP TMM tenants on VELOS and rSeries vulnerability6.5CNA v3.10.5%2024-05-08Fix
CVE-2024-32674Heateor Social Login WordPress cross-site scripting5.4CISA ADP v3.10.3%2024-05-08Fix
CVE-2024-32113Apache OFBiz path traversal9.8NVD v3.199.9%2024-05-08KEVNucleiMetasploitEmerging ThreatsExploit codeFix
CVE-2024-32049F5 BIG-IP Next Central Manager man-in-the-middle7.4CNA v3.10.5%2024-05-08Fix
CVE-2024-31961unit.php in Sonic Shopfloor.guide A SQL injection9.8CISA ADP v3.10.6%2024-05-08
CVE-2024-31270ARForms Form Builder WordPress plugin broken access control8.0v3.10.4%2024-05-08Fix
CVE-2024-31156BIG-IP Configuration utility XSS8.0CNA v3.10.6%2024-05-08Fix
CVE-2024-30459AI WP Writer WordPress plugin broken access control5.3CNA v3.10.3%2024-05-08Fix
CVE-2024-28971Dell Update Manager Plugin plaintext password storage3.5CNA v3.10.3%2024-05-08Fix
CVE-2024-28889F5 BIG-IP Traffic Management Microkernel vulnerability5.9CNA v3.10.4%2024-05-08Fix
CVE-2024-28883BIG-IP APM browser network access VPN client vulnerability7.4CNA v3.10.2%2024-05-08Fix
CVE-2024-28132F5 BIG-IP Next CNF GSLB container information disclosure4.4CNA v3.10.2%2024-05-08Fix
CVE-2024-27202F5 BIG-IP undisclosed page of the DOM-based cross-site scripting4.7CNA v3.10.3%2024-05-08Fix
CVE-2024-26579Apache InLong deserialization of untrusted data9.8v3.11.1%2024-05-08Fix
CVE-2024-26026BIG-IP Central Manager SQL injection7.5CNA v3.17.2%2024-05-08Emerging ThreatsExploit codeFix
CVE-2024-25560F5 BIG-IP Traffic Management Microkernel null pointer dereference7.5CNA v3.10.5%2024-05-08Fix
CVE-2024-25533Ruvaroa SQL injection9.4CISA ADP v3.10.7%2024-05-08
CVE-2024-25532Ruvaroa SQL injection9.8CISA ADP v3.10.5%2024-05-08
CVE-2024-25531Ruvaroa SQL injection9.8CISA ADP v3.10.6%2024-05-08
CVE-2024-25530Ruvaroa SQL injection9.8CISA ADP v3.10.6%2024-05-08
CVE-2024-25529Ruvaroa SQL injection9.8CISA ADP v3.10.6%2024-05-08
CVE-2024-25528Ruvaroa SQL injection5.9CISA ADP v3.10.3%2024-05-08
CVE-2024-25527Ruvaroa SQL injection9.4CISA ADP v3.10.5%2024-05-08
CVE-2024-25526Ruvaroa SQL injection8.1CISA ADP v3.10.6%2024-05-08
CVE-2024-25525Ruvaroa SQL injection9.8CISA ADP v3.10.6%2024-05-08
CVE-2024-25524Ruvaroa SQL injection9.4CISA ADP v3.10.6%2024-05-08
CVE-2024-25523Ruvaroa SQL injection9.8CISA ADP v3.10.7%2024-05-08
CVE-2024-25522Ruvaroa SQL injection9.4CISA ADP v3.10.6%2024-05-08
CVE-2024-25521Ruvaroa SQL injection9.4CISA ADP v3.10.6%2024-05-08
CVE-2024-25520Ruvaroa SQL injection9.8CISA ADP v3.10.6%2024-05-08
CVE-2024-25519Ruvaroa SQL injection9.8CISA ADP v3.10.7%2024-05-08
CVE-2024-25518Ruvaroa SQL injection9.4CISA ADP v3.10.6%2024-05-08
CVE-2024-25517Ruvaroa SQL injection9.8CISA ADP v3.10.7%2024-05-08
CVE-2024-25515Ruvaroa SQL injection7.3CISA ADP v3.10.6%2024-05-08
CVE-2024-24908Dell Data Manager Appliance Software (DMAS) path traversal6.5CNA v3.10.6%2024-05-08Fix
CVE-2024-24833Happy Addons for Elementor WordPress plugin broken access control on post Clone8.8v3.10.4%2024-05-08Fix
CVE-2024-24788Malformed DNS message can cause infinite loop in net5.9CISA ADP v3.11.0%2024-05-08Fix
CVE-2024-24787Arbitrary code execution during build on Darwin in cmd/go6.4CISA ADP v3.10.8%2024-05-08Exploit codeFix
CVE-2024-22460Dell Data Manager Appliance Software (DMAS) deserialization of untrusted data2.2CNA v3.10.4%2024-05-08Fix
CVE-2024-22266VMware Avi Load Balancer system logs information disclosure6.5CNA v3.10.4%2024-05-08
CVE-2024-22264VMware Avi Load Balancer privilege escalation7.2CNA v3.10.6%2024-05-08
CVE-2024-21793BIG-IP Central Manager OData injection7.5CNA v3.17.1%2024-05-08Emerging ThreatsFix
CVE-2024-4654BlueNet Technology Clinical Browsing System cloudInterface.php SQL injection9.8v3.10.8%2024-05-08
CVE-2024-4653BlueNet Technology Clinical Browsing System outIndex.php SQL injection7.5v3.10.7%2024-05-08
CVE-2024-4652Campcodes Complete Web-Based School Management System show_teacher2.php cross-site scripting6.1v3.10.4%2024-05-08
CVE-2024-4651Campcodes Complete Web-Based School Management System cross-site scripting6.1v3.10.5%2024-05-08
CVE-2024-4650Campcodes Complete Web-Based School Management System student_due_payment.php cross-site scripting6.1v3.10.4%2024-05-08
CVE-2024-4649Campcodes Complete Web-Based School Management System cross-site scripting6.1v3.10.4%2024-05-08
CVE-2024-4648Campcodes Complete Web-Based School Management System cross-site scripting6.1v3.10.4%2024-05-08
CVE-2024-4647Campcodes Complete Web-Based School Management System student_first_payment.php cross-site scripting6.1v3.10.4%2024-05-08
CVE-2024-4646Campcodes Complete Web-Based School Management System cross-site scripting6.1v3.10.5%2024-05-08
CVE-2024-4645SourceCodester Prison Management System changepassword.php cross-site scripting5.4v3.10.5%2024-05-08
CVE-2024-4644SourceCodester Prison Management System changepassword.php cross-site scripting5.4v3.10.5%2024-05-08
CVE-2024-4456Octopus Deploy Octopus Server cross-site scripting4.1CNA v3.10.3%2024-05-08Fix
CVE-2024-4438Red Hat OpenStack Platform etcd package resource exhaustion7.5CNA v3.10.8%2024-05-08Fix
CVE-2024-4437Red Hat OpenStack Platform etcd package resource exhaustion7.5CNA v3.10.8%2024-05-08Fix
CVE-2024-4436Red Hat OpenStack Platform etcd package resource exhaustion7.5CNA v3.10.8%2024-05-08Fix
CVE-2024-4418Red Hat Enterprise Linux 8 libvirt: Stack use-after-free in virnetclientioeventloop6.2CNA v3.10.5%2024-05-08Fix
CVE-2024-4393Social Connect WordPress plugin authentication bypass9.8CNA v3.10.8%2024-05-08
CVE-2024-4281Link Library WordPress plugin stored cross-site scripting5.4v3.10.3%2024-05-08Fix
CVE-2024-4233Print Invoice and Delivery Notes for WooCommerce WordPress plugin missing authorization4.3CNA v3.10.3%2024-05-08Fix
CVE-2024-4162KW Watcher vulnerability ALlows Malicious Read Access to Memory4.4CNA v3.10.2%2024-05-08
CVE-2024-4135WP Latest Posts WordPress plugin authenticated (Subscriber+) arbitrary shortcode execution5.4CNA v3.10.4%2024-05-08Fix
CVE-2024-3951Cross-site scripting in PTC Codebeamer7.1CNA v3.10.3%2024-05-08Fix
CVE-2024-3507Privilege escalation vulnerability in Lunar7.7CNA v3.10.3%2024-05-08Fix
CVE-2024-3494Mesmerize Companion WordPress plugin stored cross-site scripting6.4CNA v3.10.3%2024-05-08Fix
CVE-2024-2860Brocade SANnav missing authentication7.8CNA v3.10.2%2024-05-08Fix
CVE-2024-2746Fedora dnf5daemon-server D-Bus daemon plugin configuration improper input validation8.8CNA v3.10.2%2024-05-08Fix
CVE-2024-1930Fedora dnf5daemon-server No Limit on Number of Open Sessions / Bad Session Close Behaviour6.5CNA v3.10.3%2024-05-08Fix
CVE-2024-1929Fedora dnf5daemon-server Local Root Exploit via Configuration Dictionary8.4NVD v3.10.3%2024-05-08Fix
CVE-2024-1438Rolo Slider WordPress plugin broken access control7.7CNA v3.10.3%2024-05-08
CVE-2024-1076SSL Zen WordPress plugin unauthenticated Private Keys access6.5CISA ADP v3.10.4%2024-05-08Fix
CVE-2024-34523AChecker download.php path traversal7.5CISA ADP v3.10.8%2024-05-07
CVE-2024-34517Neo4j Cypher component mishandles IMMUTABLE privileges6.5v3.10.6%2024-05-07Fix
CVE-2024-34397GNOME GLib authentication bypass by spoofing5.2CISA ADP v3.10.8%2024-05-07Fix
CVE-2024-34346Deno contains a permission escalation via open of privileged files with missing `--deny` flag8.5CNA v3.10.4%2024-05-07Fix
CVE-2024-34342React-pdf's PDF.js vulnerable to arbitrary JavaScript execution upon opening a malicious PDF7.1CNA v3.11.1%2024-05-07Fix
CVE-2024-34341The Trix Editor Contains an arbitrary code execution5.4CNA v3.10.8%2024-05-07Fix
CVE-2024-34315CmsEasy path traversal7.5CISA ADP v3.10.7%2024-05-07
CVE-2024-34314CmsEasy remote file inclusion4.9NVD v3.10.4%2024-05-07
CVE-2024-34084Minder's Github Webhook handler vulnerable to denial of service from un-validated requests7.5CNA v3.10.6%2024-05-07Fix
CVE-2024-33860Logpoint SIEM external control of a file path6.5CISA ADP v3.10.4%2024-05-07Fix
CVE-2024-33859Logpoint SIEM cross-site scripting6.1CISA ADP v3.10.3%2024-05-07Fix
CVE-2024-33858Logpoint SIEM XML injection5.3CISA ADP v3.10.5%2024-05-07Fix
CVE-2024-33857Logpoint SIEM server-side request forgery9.6CISA ADP v3.10.4%2024-05-07Fix
CVE-2024-33856Logpoint SIEM response discrepancy5.3CISA ADP v3.10.4%2024-05-07Fix
CVE-2024-33783Csiro Multi-protocol Spdz buffer overflow6.5CISA ADP v3.10.5%2024-05-07
CVE-2024-33782Csiro Multi-protocol Spdz stack-based buffer overflow7.5CISA ADP v3.10.7%2024-05-07
CVE-2024-33781Csiro Multi-protocol Spdz out-of-bounds read7.5CISA ADP v3.10.7%2024-05-07
CVE-2024-33780Csiro Multi-protocol Spdz buffer overflow6.5CISA ADP v3.10.6%2024-05-07
CVE-2024-33748MS Basic cross-site scripting4.1CISA ADP v3.10.4%2024-05-07
CVE-2024-33434Tiagorlampert CHAOS vulnerable to command injections9.8CISA ADP v3.11.4%2024-05-07Fix
CVE-2024-33164J2eeFAST SQL injection9.8CISA ADP v3.10.6%2024-05-07
CVE-2024-33161J2eeFAST SQL injection5.3CISA ADP v3.10.2%2024-05-07
CVE-2024-33155J2eeFAST SQL injection9.8CISA ADP v3.10.6%2024-05-07
CVE-2024-33153J2eeFAST SQL injection9.8CISA ADP v3.10.6%2024-05-07
CVE-2024-33149J2eeFAST SQL injection8.1CISA ADP v3.10.5%2024-05-07
CVE-2024-33148J2eeFAST SQL injection7.3CISA ADP v3.10.4%2024-05-07
CVE-2024-33147J2eeFAST SQL injection8.8CISA ADP v3.10.5%2024-05-07
CVE-2024-33146J2eeFAST SQL injection9.1CISA ADP v3.10.5%2024-05-07
CVE-2024-33144J2eeFAST SQL injection8.8CISA ADP v3.10.5%2024-05-07
CVE-2024-33139J2eeFAST SQL injection7.5CISA ADP v3.10.5%2024-05-07
CVE-2024-33124Roothub SQL injection9.8CISA ADP v3.10.5%2024-05-07
CVE-2024-33122Roothub SQL injection6.3CISA ADP v3.10.3%2024-05-07
CVE-2024-33120Roothub unrestricted file upload9.8CISA ADP v3.10.8%2024-05-07
CVE-2024-32867Suricata's defrag contains various issues leading to policy bypass5.3CNA v3.10.7%2024-05-07Fix
CVE-2024-32664Suricata's base64 contains an out-of-bounds write5.3CNA v3.10.9%2024-05-07Fix
CVE-2024-32663OISF Suricata HTTP/2 parser resource exhaustion7.5CNA v3.11.0%2024-05-07Fix
CVE-2024-32371Hsclabs Mailinspector improper input validation7.5CISA ADP v3.10.7%2024-05-07Exploit code
CVE-2024-32370Hsclabs Mailinspector exposed IOCTL without access control9.8CISA ADP v3.11.0%2024-05-07
CVE-2024-32369Hsclabs Mailinspector HSC Cybersecurity HC SQL injection4.3CISA ADP v3.10.9%2024-05-07Exploit code
CVE-2024-31456GLPI contains an authenticated SQL injection7.7CNA v3.159.1%2024-05-07Emerging ThreatsFix
CVE-2024-31078OpenHarmony bluetooth service has a use-after-free3.3CNA v3.10.2%2024-05-07Fix
CVE-2024-29889GLPI contains an SQL injection through the saved searches7.1CNA v3.164.7%2024-05-07NucleiEmerging ThreatsFix
CVE-2024-29210KnowBe4 Phish Alert Button (PAB) for Outlook improper privilege management2.8CNA v3.00.2%2024-05-07Fix
CVE-2024-29209KnowBe4 Phish Alert Button (PAB) for Outlook code injection6.0CNA v3.00.4%2024-05-07Fix
CVE-2024-29208Ubiquiti Update UniFi Connect EV Station weak password requirements2.2CNA v3.00.3%2024-05-07Fix
CVE-2024-29207Ubiquiti UniFi Connect Application improper certificate validation7.5CNA v3.00.3%2024-05-07Fix
CVE-2024-29206Ubiquiti UniFi Connect EV Station improper access control2.2CNA v3.00.4%2024-05-07Fix
CVE-2024-29150An issue was discovered in Alcatel-Lucent ALE NOE deskphones through 86x8_NOE-R300.1.40.12.4180 and SIP deskphones through 86x8_SIP-R200.1.01.10.728. Because of improper privilege management, an authenticated attacker is able to create symlinks to sensitive and protected data in locations that are u8.8CISA ADP v3.10.5%2024-05-07
CVE-2024-29149Alcatel-Lucent NOE and SIP deskphones firmware update process race condition7.4CISA ADP v3.10.2%2024-05-07
CVE-2024-28148Apache Superset: Incorrect datasource authorization on explore REST API4.3CNA v3.10.7%2024-05-07Fix
CVE-2024-27982Node.js Node HTTP request smuggling6.5CNA v3.01.2%2024-05-07Fix
CVE-2024-27273IBM AIX privilege escalation8.1CNA v3.10.1%2024-05-07Fix
CVE-2024-27217OpenHarmony MSDP has a use-after-free6.5CNA v3.10.2%2024-05-07Fix
CVE-2024-25514Ruvaroa SQL injection9.4CISA ADP v3.10.6%2024-05-07
CVE-2024-25513Ruvaroa SQL injection7.8CISA ADP v3.10.3%2024-05-07
CVE-2024-25512Ruvaroa SQL injection8.1CISA ADP v3.10.5%2024-05-07
CVE-2024-25511Ruvaroa SQL injection9.4CISA ADP v3.10.6%2024-05-07
CVE-2024-25510Ruvaroa SQL injection9.8CISA ADP v3.10.7%2024-05-07
CVE-2024-25509Ruvaroa SQL injection9.4CISA ADP v3.10.6%2024-05-07
CVE-2024-25508Ruvaroa SQL injection9.8CISA ADP v3.10.7%2024-05-07
CVE-2024-25507Ruvaroa SQL injection9.4CISA ADP v3.10.6%2024-05-07
CVE-2024-23808OpenHarmony arkcompiler ets frontend has an out-of-bounds read5.2CNA v3.10.2%2024-05-07Fix
CVE-2024-23713Google Android NotificationManagerService.java privilege escalation7.8v3.10.1%2024-05-07Fix
CVE-2024-23712Google Android resource exhaustion5.5v3.10.1%2024-05-07Fix
CVE-2024-23710Google Android InstallPackageHelper.java privilege escalation7.8v3.10.1%2024-05-07Fix
CVE-2024-23709Google Android multiple locations out-of-bounds write6.5v3.10.8%2024-05-07Exploit codeFix
CVE-2024-23708Google Android NotificationManagerService.java privilege escalation7.8NVD v3.10.3%2024-05-07Exploit codeFix
CVE-2024-23707Google Android multiple locations insecure permissions7.8v3.10.1%2024-05-07Fix
CVE-2024-23706Google Android multiple locations privilege escalation7.8v3.10.1%2024-05-07Fix
CVE-2024-23705Google Android multiple locations privilege escalation7.8NVD v3.10.3%2024-05-07Fix
CVE-2024-23704Google Android WifiDialogActivity.java privilege escalation7.8v3.10.1%2024-05-07Fix
CVE-2024-23551HCL BigFix Compliance is potentially affected by Oracle database credentials stored at endpoint6.5CNA v3.10.2%2024-05-07
CVE-2024-22472Long S0 frames received by 500 series Z-Wave devices may cause buffer overflow8.1CNA v3.10.8%2024-05-07Fix
CVE-2024-20872Samsung Mobile TalkbackSE improper handling of insufficient privileges6.2CNA v3.10.1%2024-05-07Fix
CVE-2024-20871Samsung Mobile Samsung Keyboard improper authorization4.9CNA v3.10.2%2024-05-07Fix
CVE-2024-20870Samsung Mobile Galaxy Store improper intent verification5.1CNA v3.10.1%2024-05-07Fix
CVE-2024-20869Samsung Mobile Samsung Internet improper privilege management5.5CNA v3.10.1%2024-05-07Fix
CVE-2024-20868Samsung Mobile Samsung Notes improper input validation4.4CNA v3.10.2%2024-05-07Fix
CVE-2024-20867Samsung Mobile Samsung Email improper privilege management5.5CNA v3.10.2%2024-05-07Fix
CVE-2024-20866Samsung Mobile Devices Setupwizard authentication bypass5.7CNA v3.10.3%2024-05-07Fix
CVE-2024-20865Samsung Mobile Devices bootloader authentication bypass6.6CNA v3.10.3%2024-05-07Fix
CVE-2024-20864Samsung Mobile Devices DarManagerService improper access control5.5CNA v3.10.2%2024-05-07Fix
CVE-2024-20863Samsung Mobile Devices SNAP in HAL out-of-bounds write6.7CNA v3.10.2%2024-05-07Fix
CVE-2024-20862Samsung Mobile Devices SveService out-of-bounds write6.0CNA v3.10.2%2024-05-07Fix
CVE-2024-20861Samsung Mobile Devices SveService use-after-free6.0CNA v3.10.2%2024-05-07Fix
CVE-2024-20860Samsung Mobile Devices TelephonyUI improper export of Android application components4.0CNA v3.10.1%2024-05-07Fix
CVE-2024-20859Samsung Mobile Devices FactoryCamera improper access control5.5CNA v3.10.2%2024-05-07Fix
CVE-2024-20858Samsung Mobile Devices improper access control4.0CNA v3.10.2%2024-05-07Fix
CVE-2024-20857Samsung Mobile Devices startListening of CocktailBarService improper access control4.0CNA v3.10.2%2024-05-07Fix
CVE-2024-20856Samsung Mobile Devices Secure Folder improper authentication4.3CNA v3.10.3%2024-05-07Fix
CVE-2024-20855Samsung Mobile Devices multitasking framework improper access control2.4CNA v3.10.2%2024-05-07Fix
CVE-2024-20821Samsung Mobile Devices OTP configuration vulnerability4.4CNA v3.10.2%2024-05-07
CVE-2024-4601Improper authentication vulnerability in Socomec Net vision6.7CNA v3.10.2%2024-05-07
CVE-2024-4600Cross-site request forgery vulnerability in Socomec Net vision7.1CNA v3.10.2%2024-05-07
CVE-2024-4599Denial of service vulnerability in LAN Messenger7.5CNA v3.10.7%2024-05-07
CVE-2024-4596Kimai Session information disclosure6.5v3.10.8%2024-05-07Fix
CVE-2024-4595SEMCMS function.php locate SQL injection6.5v3.10.6%2024-05-07
CVE-2024-4594DedeCMS sys_safe.php cross-site request forgery4.3v3.10.4%2024-05-07
CVE-2024-4593DedeCMS sys_multiserv.php cross-site request forgery4.3v3.10.4%2024-05-07
CVE-2024-4592DedeCMS sys_group_edit.php cross-site request forgery4.3v3.10.4%2024-05-07
CVE-2024-4591DedeCMS sys_group_add.php cross-site request forgery4.3v3.10.4%2024-05-07
CVE-2024-4590DedeCMS sys_info.php cross-site request forgery4.3v3.10.4%2024-05-07
CVE-2024-4589DedeCMS mytag_edit.php cross-site request forgery4.3v3.10.4%2024-05-07
CVE-2024-4588DedeCMS mytag_add.php cross-site request forgery4.3v3.10.4%2024-05-07
CVE-2024-4587DedeCMS tpl.php cross-site request forgery4.3v3.10.4%2024-05-07
CVE-2024-4586DedeCMS shops_delivery.php cross-site request forgery4.3v3.10.4%2024-05-07
CVE-2024-4585DedeCMS member_type.php cross-site request forgery4.3v3.10.4%2024-05-07
CVE-2024-4584Faraday GM8181/GM828x command_port.ini information disclosure5.3CNA v3.10.6%2024-05-07KCV
CVE-2024-4583Faraday GM8181/GM828x request information disclosure5.3CNA v3.10.6%2024-05-07KCV
CVE-2024-4582Faraday GM8181/GM828x NTP service os command injection7.3CNA v3.11.4%2024-05-07KCV
CVE-2024-4559Google Chrome WebAudio heap-based buffer overflow6.5NVD v3.11.2%2024-05-07Fix
CVE-2024-4558Google Chrome ANGLE use-after-free9.6v3.11.5%2024-05-07Fix
CVE-2024-4538IDOR vulnerability in Janto Ticketing Software7.5CNA v3.10.5%2024-05-07
CVE-2024-4537IDOR vulnerability in Janto Ticketing Software7.5CNA v3.10.7%2024-05-07
CVE-2024-4536Eclipse EDC: OAuth2 Credential Exfiltration vulnerability6.8CNA v3.10.4%2024-05-07Fix
CVE-2024-4346Startklar Elementor Addons WordPress plugin unauthenticated arbitrary file deletion9.1CNA v3.11.5%2024-05-07Fix
CVE-2024-4345Startklar Elementor Addons WordPress plugin unauthenticated arbitrary file upload9.8CNA v3.11.4%2024-05-07Fix
CVE-2024-4186Edwiser Bridge WordPress plugin authentication bypass due to missing Empty Value check9.8CNA v3.10.9%2024-05-07Fix
CVE-2024-4030Python CPython tempfile.mkdtemp may be readable and writeable by all users on Windows7.1CISA ADP v3.10.3%2024-05-07Fix
CVE-2024-3759OpenHarmony hmdfs has a use-after-free6.5CNA v3.10.2%2024-05-07Fix
CVE-2024-3758OpenHarmony hmdfs has a heap buffer overflow6.5CNA v3.10.2%2024-05-07Fix
CVE-2024-3757OpenHarmony arkcompiler runtime has an integer overflow3.3CNA v3.10.2%2024-05-07Fix
CVE-2024-3628EasyEvent WordPress plugin Admin+ stored XSS3.8CISA ADP v3.10.4%2024-05-07
CVE-2024-2913Race condition vulnerability in mintplex-labs/anything-llm6.5CNA v3.00.3%2024-05-07
CVE-2024-0043Google Android multiple locations privilege escalation7.8v3.10.1%2024-05-07Fix
CVE-2024-0042Google Android improper certificate validation7.8v3.10.1%2024-05-07Fix
CVE-2024-0027Google Android SnoozeHelper.java denial of service5.5v3.10.1%2024-05-07Fix
CVE-2024-0026Google Android SnoozeHelper.java denial of service5.5v3.10.1%2024-05-07Fix
CVE-2024-0025Google Android ActivityManagerService.java privilege escalation7.8v3.10.1%2024-05-07Fix
CVE-2024-0024Google Android UserManagerService.java privilege escalation7.8v3.10.1%2024-05-07Fix
CVE-2024-0022Google Android CompanionDeviceManagerService.java information disclosure5.5v3.10.1%2024-05-07Fix
CVE-2024-34538Mateso PasswordSafe weak random number generator7.5CISA ADP v3.10.6%2024-05-06
CVE-2024-34534Cybrosys Techno Solutions Text Commander ir_model check_model function SQL injection7.3CISA ADP v3.10.5%2024-05-06
CVE-2024-34533PT Solusi Usaha Mudah Analytic Data Query IZITools query functions SQL injection7.3CISA ADP v3.10.5%2024-05-06
CVE-2024-34532PostgreSQL Query Deluxe query parameter handling SQL injection9.8CISA ADP v3.10.7%2024-05-06
CVE-2024-34529Nebari prints temporary Keycloak root password4.8CISA ADP v3.10.4%2024-05-06Fix
CVE-2024-34528WordOps has TOCTOU race condition7.7CISA ADP v3.10.2%2024-05-06Fix
CVE-2024-34527SolidUI spaces_plugin logging information disclosure7.5CISA ADP v3.10.5%2024-05-06
CVE-2024-34525Lanol FileCodeBox sensitive data in unlocked memory5.3CISA ADP v3.10.2%2024-05-06
CVE-2024-34524XLANG OpenAgents allowed_file protection mechanism authentication bypass9.1CISA ADP v3.10.5%2024-05-06
CVE-2024-34472Hsclabs Mailinspector SQL injection5.5CISA ADP v3.10.7%2024-05-06
CVE-2024-34471Hsclabs Mailinspector path traversal5.4CISA ADP v3.10.7%2024-05-06
CVE-2024-34470Hsclabs Mailinspector path traversal8.6CISA ADP v3.16.7%2024-05-06NucleiExploit code
CVE-2024-34413SliceWP Affiliates WordPress plugin cross-site scripting (XSS)5.9CNA v3.10.4%2024-05-06Fix
CVE-2024-34412ParcelPanel WordPress plugin Auth. SQL injection8.5CNA v3.10.5%2024-05-06Fix
CVE-2024-34390Post Grid Master WordPress plugin Auth. cross-site scripting (XSS)6.5CNA v3.10.3%2024-05-06Fix
CVE-2024-34389WP Post Author WordPress plugin broken access control4.3v3.10.4%2024-05-06Fix
CVE-2024-34388GDPR Compliance WordPress plugin sensitive data exposure7.5CNA v3.10.6%2024-05-06
CVE-2024-34387WP Post Author WordPress plugin Rating Value manipulation vulnerability4.3v3.10.4%2024-05-06Fix
CVE-2024-34386Auto Affiliate Links WordPress plugin SQL injection7.6CNA v3.10.5%2024-05-06Fix
CVE-2024-34383SEOPress WordPress plugin sensitive data exposure5.3CNA v3.10.5%2024-05-06Fix
CVE-2024-34382Photo Gallery, Images, Slider in Rbs Image Gallery WordPress plugin sensitive data exposure5.3CNA v3.10.5%2024-05-06Fix
CVE-2024-34381PropertyHive WordPress plugin cross-site scripting (XSS)5.4v3.10.3%2024-05-06Fix
CVE-2024-34380ChatBot Conversational Forms WordPress plugin cross-site scripting (XSS)5.9CNA v3.10.4%2024-05-06Fix
CVE-2024-34379Restaurant and Cafe WordPress theme cross-site request forgery (CSRF)4.3CNA v3.10.2%2024-05-06Fix
CVE-2024-34378LeadConnector WordPress plugin API broken access control8.6CNA v3.10.4%2024-05-06Fix
CVE-2024-34377Video Gallery Api Gallery, YouTube and Vimeo, Link Gallery WordPress plugin broken access control4.3CNA v3.10.4%2024-05-06Fix
CVE-2024-34376Edge WordPress theme cross-site scripting (XSS)6.5CNA v3.10.3%2024-05-06Fix
CVE-2024-34375Sheets to WP Table Live Sync WordPress plugin cross-site scripting (XSS)5.9CNA v3.10.4%2024-05-06Fix
CVE-2024-34374ElementsReady Addons for Elementor WordPress plugin cross-site scripting (XSS)5.4v3.10.3%2024-05-06Fix
CVE-2024-34373The Plus Addons for Elementor WordPress plugin cross-site scripting (XSS)5.4v3.10.3%2024-05-06Fix
CVE-2024-34372Post Grid Master WordPress plugin broken access control5.3CNA v3.10.4%2024-05-06Fix
CVE-2024-34371Login with phone number WordPress plugin broken access control4.3CNA v3.10.4%2024-05-06Fix
CVE-2024-34369Web Push Notifications Webpushr WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.4%2024-05-06Fix
CVE-2024-34368Mooberry Book Manager WordPress plugin sensitive data exposure5.3CNA v3.10.5%2024-05-06Fix
CVE-2024-34367Popup Box WordPress plugin CSRF to XSS7.1CNA v3.10.2%2024-05-06Fix
CVE-2024-34366AltText.Ai Download Alt Text AI stored cross-site scripting5.9CNA v3.10.4%2024-05-06Fix
CVE-2024-34252wasm3 pywasm3 contains a global buffer overflow which leads to segmentation fault7.5CISA ADP v3.10.6%2024-05-06
CVE-2024-34251bytecodealliance Webassembly Micro Runtime out-of-bounds read7.5CISA ADP v3.10.8%2024-05-06Fix
CVE-2024-34250bytecodealliance Webassembly Micro Runtime heap-based buffer overflow6.2CISA ADP v3.10.3%2024-05-06Fix
CVE-2024-34249wasm3 pywasm3 contains a heap buffer overflow which leads to segmentation fault9.8CISA ADP v3.10.7%2024-05-06
CVE-2024-34246wasm3 out-of-bounds read7.5CISA ADP v3.10.5%2024-05-06
CVE-2024-34093Archerirm Archer improper authentication5.3v3.10.4%2024-05-06Fix
CVE-2024-34092Archerirm Archer insufficient session expiration8.8v3.10.4%2024-05-06Fix
CVE-2024-34091Archerirm Archer cross-site scripting5.4NVD v3.10.5%2024-05-06Fix
CVE-2024-34090Archerirm Archer cross-site scripting5.4NVD v3.10.4%2024-05-06Fix
CVE-2024-34089Archerirm Archer cross-site scripting5.4NVD v3.10.5%2024-05-06Fix
CVE-2024-34078html-sanitizer allows arbitrary HTML present after sanitization because of unicode normalization6.1CNA v3.10.6%2024-05-06Fix
CVE-2024-34069Werkzeug debugger vulnerable to remote execution when interacting with attacker controlled domain7.5CNA v3.13.4%2024-05-06MetasploitExploit codeFix
CVE-2024-34064Jinja vulnerable to HTML attribute injection when passing user input as keys to xmlattr filter5.4CNA v3.11.0%2024-05-06Exploit codeFix
CVE-2024-33912Academy LMS WordPress plugin broken access control on Paid Courses8.8v3.10.4%2024-05-06Fix
CVE-2024-33910Digital Publications by Supsystic WordPress plugin broken access control5.3CNA v3.10.4%2024-05-06Fix
CVE-2024-33908WidgetKit WordPress plugin broken access control5.3CNA v3.10.4%2024-05-06Fix
CVE-2024-33907Print My Blog WordPress plugin broken access control5.3CNA v3.10.5%2024-05-06Fix
CVE-2024-33830idcCMS cross-site request forgery8.1CISA ADP v3.10.3%2024-05-06
CVE-2024-33829idcCMS cross-site request forgery5.4CISA ADP v3.10.2%2024-05-06
CVE-2024-33788Linksys E5600 command injection8.0CISA ADP v3.11.9%2024-05-06
CVE-2024-33753Section Camera V2.5.5.3116-S50-SMA-B20160811 and earlier versions allow the accounts and passwords of administrators and users to be changed without authorization.8.2CISA ADP v3.10.4%2024-05-06
CVE-2024-33752emlog An arbitrary file upload6.3CISA ADP v3.14.6%2024-05-06
CVE-2024-33749DedeCMS improper authorization9.1CISA ADP v3.10.6%2024-05-06
CVE-2024-33602The GNU C Library glibc nscd: Netgroup cache assumes NSS callback uses in-buffer strings7.4CISA ADP v3.10.4%2024-05-06Fix
CVE-2024-33601The GNU C Library glibc nscd: Netgroup cache may terminate daemon on memory allocation failure7.3CISA ADP v3.11.1%2024-05-06Fix
CVE-2024-33600The GNU C Library glibc nscd: Null pointer crashes after notfound response5.9CISA ADP v3.11.2%2024-05-06Fix
CVE-2024-33599The GNU C Library glibc nscd: Stack-based buffer overflow in netgroup cache8.1CISA ADP v3.11.3%2024-05-06Fix
CVE-2024-33576WPPizza WordPress plugin broken access control6.5CNA v3.10.5%2024-05-06Fix
CVE-2024-33570MetForm WordPress plugin broken access control8.8v3.10.4%2024-05-06Fix
CVE-2024-33411Campcodes Complete Web-Based School Management System /model/get_admin_profile.php SQL injection9.8CISA ADP v3.10.7%2024-05-06
CVE-2024-33410Campcodes Complete Web-Based School Management System /model/delete_range_grade.php SQL injection8.1CISA ADP v3.10.6%2024-05-06
CVE-2024-33409Campcodes Complete Web-Based School Management System index.php SQL injection9.8CISA ADP v3.10.7%2024-05-06
CVE-2024-33408Campcodes Complete Web-Based School Management System /model/get_classroom.php SQL injection9.8CISA ADP v3.10.7%2024-05-06
CVE-2024-33407Campcodes Complete Web-Based School Management System /model/delete_record.php SQL injection5.9CISA ADP v3.10.3%2024-05-06
CVE-2024-33406Campcodes Complete Web-Based School Management System SQL injection7.3CISA ADP v3.10.4%2024-05-06
CVE-2024-33405Campcodes Complete Web-Based School Management System add_friends.php SQL injection8.6CISA ADP v3.10.5%2024-05-06
CVE-2024-33404Campcodes Complete Web-Based School Management System SQL injection8.3CISA ADP v3.10.6%2024-05-06
CVE-2024-33403Campcodes Complete Web-Based School Management System /model/get_events.php SQL injection9.8CISA ADP v3.10.7%2024-05-06
CVE-2024-33294Library System student_edit_photo.php code injection9.1CISA ADP v3.10.7%2024-05-06
CVE-2024-33121Roothub SQL injection6.3CISA ADP v3.10.3%2024-05-06
CVE-2024-33118Luckyframeweb download without integrity check7.5CISA ADP v3.10.2%2024-05-06
CVE-2024-33117crmeb_java server-side request forgery5.3CISA ADP v3.10.5%2024-05-06
CVE-2024-33113D-Link Dir-845l command injection5.3CISA ADP v3.13.4%2024-05-06NucleiEmerging ThreatsExploit code
CVE-2024-33112D-Link Dir-845l OS command injection7.5CISA ADP v3.16.5%2024-05-06Emerging Threats
CVE-2024-33111D-Link Dir-845l cross-site scripting5.4CISA ADP v3.10.8%2024-05-06Exploit code
CVE-2024-33110D-Link Dir-845l improper authentication9.1CISA ADP v3.10.7%2024-05-06
CVE-2024-32982Litestar and Starlite affected by improper limitation of a pathname to a restricted directory8.2CNA v3.10.7%2024-05-06Fix
CVE-2024-32972go-ethereum denial of service via malicious p2p message7.5CNA v3.10.8%2024-05-06Fix
CVE-2024-32807Brevo for WooCommerce WordPress plugin arbitrary file download and deletion8.5CNA v3.10.6%2024-05-06Fix
CVE-2024-30973V-SOL G/EPON ONU HG323AC-B boaform web interface vulnerability8.8CISA ADP v3.10.9%2024-05-06
CVE-2024-29941Integrated Control Technology TSEC credential Cloning8.0CISA ADP v3.10.1%2024-05-06
CVE-2024-28725YzmCMS cross-site scripting7.1CISA ADP v3.10.4%2024-05-06
CVE-2024-26312Archerirm Archer information disclosure4.3CISA ADP v3.10.4%2024-05-06Fix
CVE-2024-23354Qualcomm Snapdragon use-after-free in Graphics Linux8.4CNA v3.10.2%2024-05-06Fix
CVE-2024-23351Qualcomm Snapdragon improper access control in Graphics Linux8.4CNA v3.10.1%2024-05-06Fix
CVE-2024-23193Open-Xchange OX App Suite information disclosure5.3CNA v3.10.5%2024-05-06Fix
CVE-2024-23188Open-Xchange OX App Suite cross-site scripting6.5CNA v3.10.5%2024-05-06Fix
CVE-2024-23187Open-Xchange OX App Suite cross-site scripting6.5CNA v3.10.5%2024-05-06Fix
CVE-2024-23186Open-Xchange OX App Suite cross-site scripting6.5CNA v3.10.6%2024-05-06Fix
CVE-2024-21480Qualcomm Snapdragon buffer copy without checking size of input (`Classic buffer overflow`) in Audio7.3CNA v3.10.3%2024-05-06Fix
CVE-2024-21477Qualcomm Snapdragon buffer over-read in WLAN firmware7.5CNA v3.10.3%2024-05-06Fix
CVE-2024-21476Qualcomm Snapdragon improper input validation in Secure Processor7.8CNA v3.10.1%2024-05-06Fix
CVE-2024-21475Qualcomm Snapdragon use of out-of-range pointer offset in Video7.8CNA v3.10.1%2024-05-06Fix
CVE-2024-21474Qualcomm Snapdragon stack-based buffer overflow in PMIC8.4CNA v3.10.1%2024-05-06Fix
CVE-2024-21471Qualcomm Snapdragon use-after-free in Graphics Linux8.4CNA v3.10.1%2024-05-06Fix
CVE-2024-20064MediaTek chipsets improper input validation in wlan service7.8v3.10.1%2024-05-06Fix
CVE-2024-20060MediaTek chipsets improper handling of faults that lead to instruction skips in da5.9CISA ADP v3.10.1%2024-05-06Fix
CVE-2024-20059MediaTek chipsets improper handling of faults that lead to instruction skips in da6.7CISA ADP v3.10.1%2024-05-06Fix
CVE-2024-20058MediaTek chipsets out-of-bounds read in keyInstall4.4CISA ADP v3.10.1%2024-05-06Fix
CVE-2024-20057MediaTek chipsets out-of-bounds write in keyInstall7.2CISA ADP v3.10.3%2024-05-06Fix
CVE-2024-20056MediaTek chipsets improper input validation in preloader6.7CISA ADP v3.10.1%2024-05-06Fix
CVE-2024-20021MediaTek chipsets improper privilege management in atf spm6.7CISA ADP v3.10.1%2024-05-06Fix
CVE-2024-4568Stack overflow in Xpdf due to object loop in PDF resources2.9CNA v3.10.2%2024-05-06Fix
CVE-2024-4549Delta Electronics DIAEnergie SQL injection7.5CNA v3.11.1%2024-05-06
CVE-2024-4548Delta Electronics DIAEnergie SQL injection9.8CNA v3.129.4%2024-05-06MetasploitExploit code
CVE-2024-4547Delta Electronics DIAEnergie unauthenticated SQL injection9.8CNA v3.11.9%2024-05-06
CVE-2024-4528SourceCodester Prison Management System user-record.php cross-site scripting4.8v3.10.6%2024-05-06
CVE-2024-4527Campcodes Complete Web-Based School Management System cross-site scripting6.1v3.10.6%2024-05-06
CVE-2024-4526Campcodes Complete Web-Based School Management System cross-site scripting6.1v3.10.6%2024-05-06
CVE-2024-4525Campcodes Complete Web-Based School Management System cross-site scripting6.1v3.10.6%2024-05-06
CVE-2024-4524Campcodes Complete Web-Based School Management System cross-site scripting6.1v3.10.6%2024-05-06
CVE-2024-4523Campcodes Complete Web-Based School Management System cross-site scripting6.1v3.10.6%2024-05-06
CVE-2024-4522Campcodes Complete Web-Based School Management System cross-site scripting6.1v3.10.6%2024-05-06
CVE-2024-4521Campcodes Complete Web-Based School Management System cross-site scripting6.1v3.10.6%2024-05-06
CVE-2024-4519Campcodes Complete Web-Based School Management System cross-site scripting6.1v3.10.6%2024-05-06
CVE-2024-4518Campcodes Complete Web-Based School Management System cross-site scripting6.1v3.10.6%2024-05-06
CVE-2024-4517Campcodes Complete Web-Based School Management System cross-site scripting6.1v3.10.6%2024-05-06
CVE-2024-4516Campcodes Complete Web-Based School Management System timetable.php cross-site scripting6.1v3.10.6%2024-05-06
CVE-2024-4515Campcodes Complete Web-Based School Management System timetable_grade_wise.php cross-site scripting6.1v3.10.6%2024-05-06
CVE-2024-4514Campcodes Complete Web-Based School Management System timetable_insert_form.php cross-site scripting6.1v3.10.6%2024-05-06
CVE-2024-4513Campcodes Complete Web-Based School Management System timetable_update_form.php cross-site scripting6.1v3.10.6%2024-05-06
CVE-2024-4512SourceCodester Prison Management System edit-profile.php cross-site scripting5.4v3.10.6%2024-05-06
CVE-2024-4511Shanghai Sunfull Automation BACnet Server HMI1002-ARM message buffer overflow6.3CNA v3.10.6%2024-05-06
CVE-2024-4510Ruijie RG-UAC arp_add_commit.php os command injection7.2v3.17.1%2024-05-06
CVE-2024-4509Ruijie RG-UAC add_commit.php os command injection7.2v3.16.9%2024-05-06
CVE-2024-4508Ruijie RG-UAC static_route_edit_ipv6.php os command injection7.2v3.17.1%2024-05-06
CVE-2024-4507Ruijie RG-UAC static_route_add_ipv6.php os command injection7.2v3.17.9%2024-05-06
CVE-2024-3756MF Gig Calendar WordPress plugin arbitrary Event deletion via CSRF7.5CISA ADP v3.10.3%2024-05-06Fix
CVE-2024-3755MF Gig Calendar WordPress plugin Editor+ stored XSS5.4CISA ADP v3.10.4%2024-05-06Fix
CVE-2024-3752Crelly Slider WordPress plugin Admin+ stored XSS5.4CISA ADP v3.10.4%2024-05-06
CVE-2024-3661DHCP routing options can manipulate interface-based VPN traffic7.6v3.14.1%2024-05-06Exploit codeFix
CVE-2024-3576NPort 5100A Series Store XSS8.3CNA v3.10.4%2024-05-06Fix
CVE-2024-1695HP Application Enabling Software Driver privilege escalation5.7CISA ADP v3.10.2%2024-05-06
CVE-2024-0904Fancy Product Designer WordPress plugin Admin+ cross-site scripting5.9CISA ADP v3.10.6%2024-05-06Fix
CVE-2024-34519Avantra Server dashboard auto-login authentication bypass6.8CISA ADP v3.10.4%2024-05-05
CVE-2024-34515Image-optimizer allows PHAR deserialization8.8CISA ADP v3.11.9%2024-05-05Fix
CVE-2024-34510Gradio allows credential leakage on Windows7.5CNA v3.10.6%2024-05-05Fix
CVE-2024-34509OFFIS DCMTK dcmdata DIMSE message parser vulnerability5.3CISA ADP v3.10.7%2024-05-05Fix
CVE-2024-34508OFFIS DCMTK null pointer dereference4.3CISA ADP v3.10.7%2024-05-05Fix
CVE-2024-34507mediawiki cross-site scripting7.4CISA ADP v3.10.7%2024-05-05Fix
CVE-2024-34506mediawiki denial of service7.5CISA ADP v3.10.9%2024-05-05Fix
CVE-2024-34502mediawiki cross-site request forgery9.8CISA ADP v3.10.4%2024-05-05Fix
CVE-2024-34500MediaWiki UnlinkedWikibase cross-site scripting6.1CISA ADP v3.10.5%2024-05-05Fix
CVE-2024-34490Maxima plot2d temporary files insecure temporary file5.1CISA ADP v3.10.2%2024-05-05Fix
CVE-2024-34489Facuet Ryu infinite loop7.5CISA ADP v3.10.7%2024-05-05
CVE-2024-34488Facuet Ryu infinite loop7.5CISA ADP v3.10.7%2024-05-05
CVE-2024-34487Facuet Ryu infinite loop7.5CISA ADP v3.10.7%2024-05-05
CVE-2024-34486Facuet Ryu unchecked loop condition7.5CISA ADP v3.10.6%2024-05-05
CVE-2024-34484Facuet Ryu infinite loop5.3CISA ADP v3.10.5%2024-05-05
CVE-2024-34483Facuet Ryu infinite loop7.5CISA ADP v3.10.7%2024-05-05
CVE-2024-34478btcd susceptible to consensus failures7.5CISA ADP v3.10.6%2024-05-05Fix
CVE-2024-34476Open5GS buffer access with incorrect length5.3CISA ADP v3.10.5%2024-05-05
CVE-2024-34475Open5GS reachable assertion7.5CISA ADP v3.10.6%2024-05-05
CVE-2024-34474Clario for Desktop DLL loading vulnerability7.8CISA ADP v3.10.3%2024-05-05
CVE-2024-4506Ruijie RG-UAC ip_addr_edit_commit.php os command injection7.2v3.17.6%2024-05-05
CVE-2024-4505Ruijie RG-UAC ip_addr_add_commit.php os command injection7.2v3.16.8%2024-05-05
CVE-2024-4504Ruijie RG-UAC commit.php os command injection7.2v3.16.7%2024-05-05
CVE-2024-4503Ruijie RG-UAC dhcp_relay_commit.php os command injection7.2v3.16.8%2024-05-05
CVE-2024-4502Ruijie RG-UAC dhcp_client_commit.php os command injection7.2v3.16.8%2024-05-05
CVE-2024-4501Ruijie RG-UAC commit.php os command injection7.2v3.16.8%2024-05-05
CVE-2024-4500SourceCodester Prison Management System edit-photo.php unrestricted upload8.8v3.10.9%2024-05-05
CVE-2024-4497Tenda i21 formexeCommand stack-based overflow8.8v3.11.5%2024-05-05
CVE-2024-4496Tenda i21 formWifiMacFilterSet stack-based overflow8.8v3.11.5%2024-05-05
CVE-2024-4495Tenda i21 formWifiMacFilterGet stack-based overflow8.8v3.11.5%2024-05-05
CVE-2024-4494Tenda i21 setUplinkInfo formSetUplinkInfo stack-based overflow8.8v3.11.5%2024-05-05
CVE-2024-4493Tenda i21 formSetAutoPing stack-based overflow8.8v3.11.5%2024-05-05
CVE-2024-4492Tenda i21 setStaOffline formOfflineSet stack-based overflow8.8v3.11.5%2024-05-05
CVE-2024-4491Tenda i21 formGetDiagnoseInfo stack-based overflow8.8v3.11.5%2024-05-05
CVE-2024-34473O-RAN Near-RT RIC appmgr xApp registration improper input validation5.3CISA ADP v3.10.4%2024-05-04
CVE-2024-34469Rukovoditel cross-site scripting7.1CISA ADP v3.10.6%2024-05-04Exploit code
CVE-2024-34468Rukovoditel cross-site scripting6.1CISA ADP v3.10.3%2024-05-04
CVE-2024-34467ThinkPHP cross-site scripting6.1CISA ADP v3.10.4%2024-05-04Fix
CVE-2024-34462Alinto SOGo cross-site scripting6.1CISA ADP v3.10.3%2024-05-04Fix
CVE-2024-34461Zenario uses Twig filters insecurely in the Twig Snippet plugin9.8CISA ADP v3.11.0%2024-05-04Fix
CVE-2024-34460Zenario's Tree Explorer tool from Organizer affected by cross-site scripting6.5CISA ADP v3.10.6%2024-05-04Fix
CVE-2024-3868Folders Pro WordPress plugin stored cross-site scripting5.4CNA v3.10.4%2024-05-04Fix
CVE-2024-3240ConvertPlug WordPress plugin PHP object injection8.8CNA v3.10.8%2024-05-04Fix
CVE-2024-3237ConvertPlug WordPress plugin unauthorized access5.4CNA v3.10.4%2024-05-04Fix
CVE-2024-1050Import and export users and customers WordPress plugin missing authorization4.3CNA v3.10.4%2024-05-04Fix
CVE-2024-34455Buildroot /dev/shm directory permissions incorrect default permissions7.5CISA ADP v3.10.7%2024-05-03
CVE-2024-34453TwoNav connectivity_test API endpoint server-side request forgery4.3CISA ADP v3.10.3%2024-05-03
CVE-2024-34449Vditor allows cross-site scripting via an attribute of an `A` element6.1v3.10.4%2024-05-03
CVE-2024-34447Bouncy Castle Java Cryptography API vulnerable to DNS poisoning7.5CISA ADP v3.10.8%2024-05-03Fix
CVE-2024-34446Mullvad VPN blocking state DNS handling vulnerability7.5CISA ADP v3.10.6%2024-05-03
CVE-2024-34408Tencent Libpag heap-based buffer overflow5.3CISA ADP v3.10.2%2024-05-03
CVE-2024-34404Veritas NetBackup Alta Recovery Vault improper access control6.8CNA v3.10.4%2024-05-03
CVE-2024-34403uriparser integer overflow5.9CISA ADP v3.11.3%2024-05-03Fix
CVE-2024-34402uriparser integer overflow8.6CISA ADP v3.11.2%2024-05-03Fix
CVE-2024-34401Techkshetrainfo Savsoft Quiz cross-site scripting6.1CISA ADP v3.10.4%2024-05-03Exploit code
CVE-2024-34075kurwov vulnerable to denial of service due to improper data sanitization6.2CNA v3.10.3%2024-05-03Fix
CVE-2024-34073AWS SageMaker Python SDK command injection in sagemaker-python-sdk7.8CNA v3.11.2%2024-05-03Fix
CVE-2024-34072AWS SageMaker Python SDK deserialization of untrusted data in sagemaker-python-sdk7.8CNA v3.10.4%2024-05-03Fix
CVE-2024-34068Server-side request forgery during remote file pull in Pterodactyl wings6.4CNA v3.10.4%2024-05-03Fix
CVE-2024-34067Multiple cross-site scripting (XSS) vulnerabilities in the admin area of Pterodactyl panel6.1CNA v3.10.5%2024-05-03Fix
CVE-2024-34066Arbitrary file write/Read in Pterodactyl wings8.5CNA v3.10.5%2024-05-03Fix
CVE-2024-34063Degraded secret zeroization capabilities in vodozemac2.5CNA v3.10.1%2024-05-03Fix
CVE-2024-34062tqdm CLI arguments injection attack4.8CNA v3.10.4%2024-05-03Fix
CVE-2024-34033Path traversal vulnerability in Delta Electronics DIAEnergie8.8v3.11.0%2024-05-03Fix
CVE-2024-34032SQL injection in Delta Electronics DIAEnergie8.8v3.18.7%2024-05-03Fix
CVE-2024-34031SQL injection vulnerability in Delta Electronics DIAEnergie8.8v3.10.5%2024-05-03Fix
CVE-2024-33947RegistrationMagic WordPress plugin cross-site scripting (XSS)6.1NVD v3.10.3%2024-05-03Fix
CVE-2024-33946WPify Woo Czech WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.3%2024-05-03Fix
CVE-2024-33945Eleblog Elementor Blog And Magazine Addons WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.3%2024-05-03
CVE-2024-33943Ultimate Under Construction WordPress plugin cross-site scripting (XSS)5.9CNA v3.10.3%2024-05-03Fix
CVE-2024-33941iPanorama 360 WordPress plugin broken access control5.3CNA v3.10.4%2024-05-03Fix
CVE-2024-33940EventON WordPress plugin cross-site scripting (XSS)5.9CNA v3.10.3%2024-05-03Fix
CVE-2024-33937Progressive WordPress (PWA) plugin broken access control4.3CNA v3.10.4%2024-05-03
CVE-2024-33936Print-O-Matic WordPress plugin Auth. cross-site scripting (XSS)6.5CNA v3.10.3%2024-05-03
CVE-2024-33935PB MailCrypt WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.3%2024-05-03
CVE-2024-33934Mini Loops WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.3%2024-05-03
CVE-2024-33932Login Logout Register Menu WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.3%2024-05-03
CVE-2024-33931JW Player for WordPress plugin broken access control6.5CNA v3.10.4%2024-05-03Fix
CVE-2024-33929Directorist WordPress plugin broken access control5.3CNA v3.10.4%2024-05-03Fix
CVE-2024-33928CodeBard's Patron Button and Widgets for Patreon WordPress plugin reflected cross-site scripting6.1NVD v3.10.3%2024-05-03
CVE-2024-33927Giphypress WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.3%2024-05-03
CVE-2024-33926GWP-Histats WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.3%2024-05-03
CVE-2024-33925Embed Google Fonts WordPress plugin broken access control4.3CNA v3.10.3%2024-05-03Fix
CVE-2024-33924Realtyna Organic IDX plugin + WPL Real Estate WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.3%2024-05-03Fix
CVE-2024-33923SP Project and Document Manager WordPress plugin broken access control6.3CNA v3.10.4%2024-05-03
CVE-2024-33921ReviewX WordPress plugin broken access control8.8v3.10.4%2024-05-03Fix
CVE-2024-33920Democracy Poll WordPress plugin broken access control5.3CNA v3.10.4%2024-05-03Fix
CVE-2024-33919RomethemeKit For Elementor WordPress plugin broken access control6.5CNA v3.10.4%2024-05-03Fix
CVE-2024-33918AJAX Login and Registration modal popup + inline form WordPress plugin cross-site scripting (XSS)5.9CNA v3.10.4%2024-05-03Fix
CVE-2024-33916CPO Companion WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.3%2024-05-03
CVE-2024-33915Debug Log Manager WordPress plugin broken access control4.3CNA v3.10.3%2024-05-03Fix
CVE-2024-33914Exclusive Addons for Elementor WordPress plugin broken access control on post Duplication9.8v3.10.4%2024-05-03Fix
CVE-2024-33844Parrot Anafi Firmware improper resource release7.5v3.10.5%2024-05-03Fix
CVE-2024-33793Netis Systems MEX605 OS command injection5.3CISA ADP v3.10.3%2024-05-03
CVE-2024-33792Netis Systems MEX605 OS command injection9.8CISA ADP v3.11.0%2024-05-03
CVE-2024-33791Netis Systems MEX605 cross-site scripting4.6CISA ADP v3.10.4%2024-05-03
CVE-2024-33789Linksys E5600 command injection9.8CISA ADP v3.12.4%2024-05-03
CVE-2024-33787Hengan Weighing Management Information Query Platform search_user.aspx SQL injection8.2CISA ADP v3.10.4%2024-05-03
CVE-2024-33786Zhongcheng Kexin Ticketing Management Platform arbitrary file upload9.8CISA ADP v3.10.8%2024-05-03
CVE-2024-33398Piraeus-operator allows attacker to impersonate service account7.5CISA ADP v3.10.6%2024-05-03
CVE-2024-32986Arbitrary code execution due to improper sanitization of web app properties in PWAsForFirefox9.7CNA v3.10.7%2024-05-03Fix
CVE-2024-32831Accessibility Widget WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.3%2024-05-03Fix
CVE-2024-32810ShortPixel Critical CSS WordPress plugin broken access control7.6CNA v3.10.4%2024-05-03Fix
CVE-2024-31673Kliqqi Cms SQL injection9.8CISA ADP v3.10.6%2024-05-03
CVE-2024-31636LIEF obtain sensitive information via the name parameter3.9CISA ADP v3.10.2%2024-05-03Fix
CVE-2024-30851codesiddhant Jasmin Ransomware path traversal6.5CISA ADP v3.14.6%2024-05-03MetasploitExploit code
CVE-2024-29417e-trust Horacius insecure permissions8.4CISA ADP v3.10.2%2024-05-03
CVE-2024-28519MicroWorld Technologies eScan Antivirus ProcObsrvesx.sys driver privilege escalation7.8CISA ADP v3.10.2%2024-05-03
CVE-2024-28072SolarWinds Serv-U arbitrary file overwrite5.7CNA v3.10.6%2024-05-03Fix
CVE-2024-27453Extreme Networks Extremexos incorrect privilege assignment8.6CISA ADP v3.10.7%2024-05-03Fix
CVE-2024-24710Feed Them Social WordPress plugin broken access control4.3CNA v3.10.3%2024-05-03Fix
CVE-2024-23914Merative Merge DICOM Toolkit C/C++ format string5.7CNA v3.10.3%2024-05-03
CVE-2024-23913Merative Merge DICOM Toolkit C/C++ out-of-range pointer offset4.0CNA v3.10.2%2024-05-03
CVE-2024-23912Merative Merge DICOM Toolkit C/C++ out-of-bounds read4.0CNA v3.10.2%2024-05-03
CVE-2024-4466SQL injection vulnerability in Gescen9.8CNA v3.10.5%2024-05-03
CVE-2024-4461Unquoted path or search item vulnerability in SugarSync7.8CNA v3.10.2%2024-05-03Fix
CVE-2024-4439WordPress cross-site scripting6.1NVD v3.171.0%2024-05-03NucleiExploit codeFix
CVE-2024-3703Carousel Slider WordPress plugin Editor+ stored XSS4.7CISA ADP v3.10.5%2024-05-03Fix
CVE-2024-3692Gutenverse WordPress plugin Contributor+ stored XSS6.1CISA ADP v3.10.4%2024-05-03Fix
CVE-2024-3637Responsive Contact Form Builder and Lead Generation WordPress plugin Admin+ stored XSS6.1CISA ADP v3.10.5%2024-05-03Fix
CVE-2024-3480Motorola Phones implicit intent for sensitive communication2.8CNA v3.10.1%2024-05-03Fix
CVE-2024-3479Motorola Phones improper export of Android application components2.8CNA v3.10.1%2024-05-03Fix
CVE-2024-3109Motorola Phones hard-coded cryptographic key6.3CNA v3.10.3%2024-05-03Fix
CVE-2024-3108Motorola Phones implicit intent for sensitive communication5.5CNA v3.10.2%2024-05-03Fix
CVE-2024-2410Google Protobuf JSON to binary stream parser use-after-free7.6CNA v3.10.3%2024-05-03Fix
CVE-2024-1395Mali GPU Kernel Driver allows improper GPU memory processing operations6.7CISA ADP v3.10.2%2024-05-03Fix
CVE-2024-1067Mali GPU Kernel Driver allows improper GPU memory processing operations7.4CISA ADP v3.10.2%2024-05-03Fix
CVE-2024-34394Libxmljs2 namespaces type confusion RCE8.1CNA v3.11.0%2024-05-02
CVE-2024-34393Libxmljs2 attrs type confusion RCE8.1CNA v3.11.0%2024-05-02
CVE-2024-34392libxmljs namespaces type confusion RCE9.8NVD v3.11.1%2024-05-02
CVE-2024-34391libxmljs attrs type confusion RCE9.8NVD v3.11.1%2024-05-02
CVE-2024-34148Jenkins Subversion Partial Release Manager Plugin programmatically disables the fix for6.8CISA ADP v3.10.8%2024-05-02Fix
CVE-2024-34147Jenkins Telegram Bot Plugin stores the Telegram Bot token in plaintext4.3CISA ADP v3.10.5%2024-05-02Fix
CVE-2024-34146Jenkins Git Server Plugin does not perform a permission check6.5CISA ADP v3.10.5%2024-05-02Fix
CVE-2024-34145Jenkins Script Security Plugin sandbox bypass8.8CISA ADP v3.11.0%2024-05-02Fix
CVE-2024-34144Jenkins Script Security Plugin has sandbox bypass vulnerability involving crafted constructor bodies9.8CISA ADP v3.148.1%2024-05-02Exploit codeFix
CVE-2024-34061Reflected cross-site scripting in changedetection.io4.3CNA v3.11.3%2024-05-02NucleiFix
CVE-2024-33949Min and Max Purchase for WooCommerce WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.3%2024-05-02
CVE-2024-33948TweetScroll Widget WordPress plugin cross-site scripting (XSS)5.5CNA v3.10.3%2024-05-02
CVE-2024-33944WooCommerce AWeber Newsletter Subscription WordPress plugin Kestrel missing authorization6.5CNA v3.10.5%2024-05-02Fix
CVE-2024-33930Share This Image WordPress plugin open redirection4.7CNA v3.10.4%2024-05-02Fix
CVE-2024-33922WP Media Cleaner WordPress plugin sensitive data exposure via Log file5.3CNA v3.10.4%2024-05-02Fix
CVE-2024-33913Xserver Migrator WordPress plugin CSRF to arbitrary file upload9.6CNA v3.10.3%2024-05-02Fix
CVE-2024-33911The School Management Pro WordPress plugin SQL injection7.2v3.11.1%2024-05-02Exploit code
CVE-2024-33530Jitsi Meet lobby feature information disclosure7.5CISA ADP v3.10.8%2024-05-02
CVE-2024-33396Karmada vulnerable to arbitrary code execution via a crafted command8.4CISA ADP v3.10.2%2024-05-02
CVE-2024-33394kubevirt allows a local attacker to execute arbitrary code via a crafted command5.9CISA ADP v3.10.3%2024-05-02Fix
CVE-2024-33305SourceCodester Laboratory Management System cross-site scripting6.1CISA ADP v3.10.4%2024-05-02
CVE-2024-33303oretnom23 Product Show Room Site cross-site scripting8.2CISA ADP v3.10.5%2024-05-02
CVE-2024-33302oretnom23 Product Show Room Site cross-site scripting5.3CISA ADP v3.10.3%2024-05-02
CVE-2024-32971Defect in query plan cache may cause incorrect operations to be executed in Apollo Router9.1CNA v3.10.7%2024-05-02Fix
CVE-2024-32962node-saml xml-crypto improper signature verification10.0CNA v3.10.8%2024-05-02Fix
CVE-2024-32882Permission check bypass when editing a model with per-field restrictions in wagtail2.7CNA v3.10.5%2024-05-02Fix
CVE-2024-32638Apache APISIX: Forward-Auth Request Smuggling6.3CISA ADP v3.11.1%2024-05-02Fix
CVE-2024-32359Carina RBAC improper authorization6.9CISA ADP v3.10.2%2024-05-02
CVE-2024-32114Apache ActiveMQ: Jolokia and REST API were not secured with default configuration8.5CNA v3.17.1%2024-05-02Reported exploitedNucleiEmerging ThreatsExploit codeKCVFix
CVE-2024-31967Mitel 6800 and 6900 Series SIP Phones improper access control9.1CISA ADP v3.10.5%2024-05-02Fix
CVE-2024-31966Mitel 6800 and 6900 Series SIP Phones argument injection6.2CISA ADP v3.10.4%2024-05-02Fix
CVE-2024-31965Mitel 6800 and 6900 Series SIP Phones path traversal4.2CISA ADP v3.10.2%2024-05-02Fix
CVE-2024-31964Mitel 6800 and 6900 Series SIP Phones authentication bypass7.5CISA ADP v3.10.6%2024-05-02Fix
CVE-2024-31963Mitel 6800 and 6900 Series SIP Phones buffer overflow6.4CISA ADP v3.10.3%2024-05-02Fix
CVE-2024-30306Adobe Acrobat Reader DC AcroForm out-of-bounds read remote code execution7.8CNA v3.10.5%2024-05-02Fix
CVE-2024-30305Adobe Acrobat Reader DC AcroForm use-after-free remote code execution7.8CNA v3.10.6%2024-05-02Fix
CVE-2024-30304Adobe Acrobat Reader DC Annotation use-after-free remote code execution7.8CNA v3.10.6%2024-05-02Fix
CVE-2024-30303Adobe Acrobat Reader DC AcroForm use-after-free remote code execution7.8CNA v3.10.6%2024-05-02Fix
CVE-2024-30302Adobe Acrobat Reader DC AcroForm use-after-free information disclosure5.5CNA v3.10.4%2024-05-02Fix
CVE-2024-30301Adobe Acrobat Reader DC AcroForm use-after-free remote code execution7.8CNA v3.10.6%2024-05-02Fix
CVE-2024-30251Denial of service when trying to parse malformed POST requests in Aiohttp7.5CNA v3.11.1%2024-05-02Fix
CVE-2024-29309Alfresco Content Services Transfer Service code injection7.7CISA ADP v3.10.7%2024-05-02
CVE-2024-25290Casa Systems NL1901ACV add function remote code execution8.0CISA ADP v3.10.7%2024-05-02
CVE-2024-25047IBM Cognos Analytics log injection8.6CNA v3.10.6%2024-05-02Fix
CVE-2024-23462Zscaler Client Connector ZCC Mac validinstaller file integrity check missing3.3CNA v3.10.2%2024-05-02Fix
CVE-2024-23461Zscaler Client Connector ZCC macOS Upgrade ZIP bomb DoS4.2CNA v3.10.1%2024-05-02Fix
CVE-2024-23459Zscaler Client Connector multiple Arbitrary Creates/Overwrites by link following7.1CNA v3.10.5%2024-05-02Fix
CVE-2024-4433Simple Image Popup WordPress plugin cross-site scripting (XSS)5.9CNA v3.10.4%2024-05-02Fix
CVE-2024-4406Xiaomi Pro 13 GetApps integral-dialog-page cross-site scripting remote code execution9.6v3.12.2%2024-05-02Exploit code
CVE-2024-4405Xiaomi Pro 13 mimarket manual-upgrade cross-site scripting remote code execution9.6v3.11.2%2024-05-02
CVE-2024-4334Supreme Modules Lite WordPress plugin DOM-based cross-site scripting6.4CNA v3.10.6%2024-05-02Fix
CVE-2024-4324WP Video Lightbox WordPress plugin stored cross-site scripting6.4CNA v3.10.4%2024-05-02Fix
CVE-2024-4265Master Addons WordPress plugin stored cross-site scripting5.4v3.10.6%2024-05-02Fix
CVE-2024-4216XSS vulnerability in /settings/store API response json payload in pgAdmin 47.4CNA v3.10.5%2024-05-02Fix
CVE-2024-4215The Multi Factor authentication bypass vulnerability in pgAdmin 47.4CNA v3.10.6%2024-05-02Fix
CVE-2024-4203Premium Addons for Elementor WordPress plugin stored cross-site scripting5.4CNA v3.10.5%2024-05-02Fix
CVE-2024-4156Essential Addons for Elementor WordPress plugin stored cross-site scripting5.4v3.10.6%2024-05-02Fix
CVE-2024-4140rjbs Email-MIME resource exhaustion7.5CNA v3.11.1%2024-05-02Fix
CVE-2024-4133ARMember WordPress plugin open redirect6.1CNA v3.10.5%2024-05-02Fix
CVE-2024-4128CSRF in firebase-tools emulator suite2.6CNA v3.10.1%2024-05-02Fix
CVE-2024-4097Cost Calculator Builder Pro WordPress plugin unauthenticated cross-site scripting via SVG upload7.2CNA v3.10.6%2024-05-02Fix
CVE-2024-4092Slider Revolution WordPress plugin stored cross-site scripting5.4v3.10.4%2024-05-02Fix
CVE-2024-4086CM Tooltip Glossary Powerful Glossary WordPress plugin cross-site request forgery4.3CNA v3.10.3%2024-05-02Fix
CVE-2024-4085Tabellen von faustball.com WordPress plugin stored cross-site scripting4.4CNA v3.10.4%2024-05-02Fix
CVE-2024-4083Easy Restaurant Table Booking WordPress plugin cross-site request forgery4.3CNA v3.10.3%2024-05-02
CVE-2024-4036Sydney Toolbox WordPress plugin authenticated (Contributor+) stored cross-site scripting5.4v3.10.6%2024-05-02Fix
CVE-2024-4034Virtue WordPress theme authenticated (Contributor+) stored cross-site scripting via post Author6.4CNA v3.10.6%2024-05-02Fix
CVE-2024-4033All-in-One Video Gallery WordPress plugin arbitrary file upload8.8CNA v3.11.6%2024-05-02Fix
CVE-2024-4029Red Hat JBoss Enterprise Application Platform wildfly vulnerable to denial of service4.1CNA v3.10.3%2024-05-02Fix
CVE-2024-4003Essential Addons for Elementor WordPress plugin stored cross-site scripting5.4v3.10.5%2024-05-02Fix
CVE-2024-4000WordPress Header Builder Plugin Pearl stored cross-site scripting6.4CNA v3.10.5%2024-05-02Fix
CVE-2024-3991ShopLentor WordPress plugin stored cross-site scripting5.4v3.10.4%2024-05-02Fix
CVE-2024-3985Exclusive Addons for Elementor WordPress plugin stored cross-site scripting5.4v3.10.4%2024-05-02Fix
CVE-2024-3957Booster for WooCommerce WordPress plugin unauthenticated arbitrary shortcode execution7.3v3.10.9%2024-05-02Fix
CVE-2024-3955Arbitrary code execution in CraftBeerPi 49.8CISA ADP v3.11.1%2024-05-02Fix
CVE-2024-3942MasterStudy LMS WordPress Plugin for Online Courses and Education missing authorization5.4v3.10.4%2024-05-02Fix
CVE-2024-3936The Post Grid WordPress plugin unauthorized access4.3CNA v3.10.6%2024-05-02Fix
CVE-2024-3897Popup Box Best WordPress Popup plugin missing authorization to information exposure5.3CNA v3.10.6%2024-05-02Fix
CVE-2024-3895WP Datepicker WordPress plugin missing authorization authenticated arbitrary options update8.8CNA v3.10.9%2024-05-02Fix
CVE-2024-3891Happy Addons for Elementor WordPress plugin stored cross-site scripting5.4v3.10.4%2024-05-02Fix
CVE-2024-3885Premium Addons for Elementor WordPress plugin stored cross-site scripting5.4v3.10.4%2024-05-02Fix
CVE-2024-38833D FlipBook WordPress plugin authenticated (Author+) stored Cross-Site Scritping via Bookmark URL5.4v3.10.3%2024-05-02Fix
CVE-2024-3870Contact Form 7 Database Addon CFDB7 WordPress plugin unauthenticated sensitive information exposure5.3CNA v3.10.7%2024-05-02Fix
CVE-2024-3849Click to Chat HoliThemes WordPress plugin authenticated (Contributor+) local file inclusion8.8CNA v3.11.7%2024-05-02Fix
CVE-2024-3819Jeg Elementor Kit WordPress plugin stored cross-site scripting5.4v3.10.5%2024-05-02Fix
CVE-2024-3747Blocksy WordPress theme authenticated (Contributor+) stored cross-site scripting via About Me block5.4v3.10.4%2024-05-02Fix
CVE-2024-3743Elementor Addon Elements WordPress plugin authenticated (Contributor+) stored cross-site scripting5.4v3.10.6%2024-05-02Fix
CVE-2024-3734FOX WordPress plugin code injection6.5CNA v3.11.0%2024-05-02Fix
CVE-2024-3729Frontend Admin by DynamiApps WordPress plugin missing encryption9.8CNA v3.10.8%2024-05-02Fix
CVE-2024-3728Essential Addons for Elementor WordPress plugin stored cross-site scripting6.4CNA v3.10.6%2024-05-02Fix
CVE-2024-3725Otter Blocks WordPress plugin stored cross-site scripting5.4v3.10.4%2024-05-02Fix
CVE-2024-3724Happy Addons for Elementor WordPress plugin stored cross-site scripting5.4v3.10.5%2024-05-02Fix
CVE-2024-3717Drag and Drop Multiple File Upload Contact Form 7 WordPress plugin sensitive information exposure7.5v3.10.7%2024-05-02Fix
CVE-2024-3715Database for Contact Form 7 WordPress plugin stored cross-site scripting7.2CNA v3.10.6%2024-05-02Fix
CVE-2024-3681Interactive World Maps WordPress plugin reflected cross-site scripting6.1CNA v3.10.5%2024-05-02Fix
CVE-2024-3677Ultimate 410 Gone Status Code WordPress plugin stored cross-site scripting6.4CNA v3.10.5%2024-05-02Fix
CVE-2024-3675Royal Elementor Addons and Templates WordPress plugin stored cross-site scripting6.4CNA v3.10.6%2024-05-02Fix
CVE-2024-3674Inline Google Spreadsheet Viewer WordPress plugin stored cross-site scripting6.4CNA v3.10.4%2024-05-02
CVE-2024-3670Leaflet Maps Marker WordPress plugin stored cross-site scripting6.4CNA v3.10.4%2024-05-02Fix
CVE-2024-3650ElementsKit Elementor addons WordPress plugin stored cross-site scripting5.4v3.10.4%2024-05-02Fix
CVE-2024-3649WPForms Contact Form by WPForms Stripe payment integration web parameter tampering5.3CNA v3.10.7%2024-05-02Fix
CVE-2024-3647Premium Addons for Elementor WordPress plugin stored cross-site scripting6.4CNA v3.10.4%2024-05-02Fix
CVE-2024-3607PropertyHive WordPress plugin missing authorization authenticated arbitrary post deletion4.3CNA v3.10.6%2024-05-02Fix
CVE-2024-3606Metagauss ProfileGrid cover image upload function missing authorization4.3CNA v3.10.5%2024-05-02Fix
CVE-2024-3601Poll Maker Best WordPress Poll plugin missing authorization to unauthenticated email enumeration5.3CNA v3.10.6%2024-05-02Fix
CVE-2024-3599WP Cookie Consent WordPress plugin missing authorization unauthenticated arbitrary post deletion5.3v3.10.5%2024-05-02Fix
CVE-2024-3588Getwid Gutenberg Blocks WordPress plugin DOM-based stored cross-site scripting5.4v3.10.5%2024-05-02Fix
CVE-2024-3585Send PDF for Contact Form 7 WordPress plugin missing authorization5.3CNA v3.10.7%2024-05-02Fix
CVE-2024-3581MaxGalleria WordPress plugin missing authorization4.3CNA v3.10.6%2024-05-02Fix
CVE-2024-3554All in One SEO WordPress plugin stored cross-site scripting5.4v3.10.5%2024-05-02Fix
CVE-2024-3553Tutor LMS WordPress plugin missing authorization to unauthenticated limited options update6.5CNA v3.10.5%2024-05-02Exploit codeFix
CVE-2024-3550WP Shortcodes Plugin Shortcodes Ultimate WordPress plugin stored cross-site scripting5.4v3.10.6%2024-05-02Fix
CVE-2024-3546WordPress Backup and Migration plugin missing authorization to directory traversal4.3CNA v3.10.5%2024-05-02Fix
CVE-2024-3544LoadMaster Hard-coded SSH Key7.5CNA v3.10.4%2024-05-02Fix
CVE-2024-3543LoadMaster Reversible Password Encryption Algorithm6.4CNA v3.10.3%2024-05-02Fix
CVE-2024-3520Country State City Dropdown CF7 WordPress plugin missing authorization4.3CNA v3.10.4%2024-05-02Fix
CVE-2024-3517Shortcodes and extra features for Phlox WordPress plugin stored cross-site scripting5.4v3.10.5%2024-05-02Fix
CVE-2024-3500ElementsKit Pro WordPress plugin local file inclusion8.8CNA v3.11.1%2024-05-02Fix
CVE-2024-3499ElementsKit Elementor addons WordPress plugin local file inclusion8.8CNA v3.11.1%2024-05-02Fix
CVE-2024-3490WP Recipe Maker WordPress plugin stored cross-site scripting5.4v3.10.3%2024-05-02Fix
CVE-2024-3489Exclusive Addons for Elementor WordPress plugin stored cross-site scripting5.4v3.10.5%2024-05-02Fix
CVE-2024-3481Counter Box WordPress plugin Counter deletion via CSRF5.2CISA ADP v3.10.3%2024-05-02Fix
CVE-2024-3478Herd Effects WordPress plugin Effect deletion via CSRF6.1CISA ADP v3.10.2%2024-05-02Fix
CVE-2024-3477Popup Box WordPress plugin Popup deletion via CSRF4.3CISA ADP v3.10.3%2024-05-02Fix
CVE-2024-3476Side Menu Lite WordPress plugin Menu deletion via CSRF8.8CISA ADP v3.10.4%2024-05-02Fix
CVE-2024-3475Sticky Buttons WordPress plugin Button deletion via CSRF7.5CISA ADP v3.10.3%2024-05-02Fix
CVE-2024-3474Wow Skype Buttons WordPress plugin Button deletion via CSRF8.8NVD v3.10.4%2024-05-02Fix
CVE-2024-3473Header Footer Code Manager Pro WordPress plugin reflected cross-site scripting via message6.1CNA v3.10.5%2024-05-02Fix
CVE-2024-3472Modal Window WordPress plugin Modal deletion via CSRF5.9CISA ADP v3.10.2%2024-05-02Fix
CVE-2024-3471Button Generator WordPress plugin Button deletion via CSRF3.4CISA ADP v3.10.2%2024-05-02Fix
CVE-2024-3341Shortcodes and extra features for Phlox WordPress plugin stored cross-site scripting5.4v3.10.5%2024-05-02Fix
CVE-2024-3340Colibri Page Builder WordPress plugin stored cross-site scripting5.4v3.10.4%2024-05-02Fix
CVE-2024-3338Colibri Page Builder WordPress plugin authenticated (Author+) stored cross-site scripting5.4v3.10.4%2024-05-02Fix