CVE-2024 records published in May 2024
Page four of four: records 3,001 to 3,323 of the 3,323 published in May 2024, newest first. The first page carries the figures for May 2024.
| CVE | Summary | CVSS | EPSS | Published | Signals |
|---|---|---|---|---|---|
| CVE-2024-3337 | Colibri Page Builder WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.4% | 2024-05-02 | Fix |
| CVE-2024-3312 | Easy Custom Auto Excerpt WordPress plugin sensitive information exposure | 5.3CNA v3.1 | 0.6% | 2024-05-02 | Fix |
| CVE-2024-3308 | HT Mega Absolute Addons For Elementor WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.4% | 2024-05-02 | Fix |
| CVE-2024-3307 | HT Mega Absolute Addons For Elementor WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.3% | 2024-05-02 | Fix |
| CVE-2024-3295 | WPEverest User Registration and Membership profile_pic_remove function missing authorization | 6.5CNA v3.1 | 0.9% | 2024-05-02 | Fix |
| CVE-2024-3287 | SmartCrawl WordPress SEO checker, SEO analyzer, SEO optimizer plugin missing authorization | 5.3CNA v3.1 | 0.6% | 2024-05-02 | Fix |
| CVE-2024-3280 | Follow Us Badges WordPress plugin stored cross-site scripting | 6.4CNA v3.1 | 0.3% | 2024-05-02 | Fix |
| CVE-2024-3275 | eRoom Zoom Meetings and Webinar WordPress plugin missing authorization to information exposure | 4.3CNA v3.1 | 0.5% | 2024-05-02 | Fix |
| CVE-2024-3233 | Ivory Search WordPress Search plugin missing authorization authenticated Index creation | 4.3CNA v3.1 | 0.4% | 2024-05-02 | Fix |
| CVE-2024-3215 | Paid Memberships Pro WordPress plugin cross-site request forgery | 4.3v3.1 | 0.3% | 2024-05-02 | Fix |
| CVE-2024-3206 | Different Menu in Different Pages WordPress plugin unauthorized access | 4.3CNA v3.1 | 0.6% | 2024-05-02 | Fix |
| CVE-2024-3199 | The Plus Addons for Elementor WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.5% | 2024-05-02 | Fix |
| CVE-2024-3197 | The Plus Addons for Elementor WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.4% | 2024-05-02 | Fix |
| CVE-2024-3161 | Jeg Elementor Kit WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.4% | 2024-05-02 | Fix |
| CVE-2024-3107 | Spectra WordPress Gutenberg Blocks plugin authenticated (Contributor+) path traversal | 4.3CNA v3.1 | 0.6% | 2024-05-02 | Fix |
| CVE-2024-3074 | Elementor ImageBox WordPress plugin authenticated (Contributor+) stored cross-site scripting | 6.4CNA v3.1 | 0.5% | 2024-05-02 | Fix |
| CVE-2024-3071 | ACF On-The-Go WordPress plugin missing authorization authenticated arbitrary content update | 4.3CNA v3.1 | 0.4% | 2024-05-02 | Fix |
| CVE-2024-3047 | PDF Invoices and Packing Slips for WooCommerce WordPress plugin server-side request forgery | 7.2CNA v3.1 | 0.4% | 2024-05-02 | Fix |
| CVE-2024-3045 | PDF Invoices and Packing Slips for WooCommerce WordPress plugin stored cross-site scripting | 6.1NVD v3.1 | 0.6% | 2024-05-02 | Fix |
| CVE-2024-3023 | AnnounceKit WordPress plugin authenticated (Admin+) stored cross-site scripting | 4.4CNA v3.1 | 0.4% | 2024-05-02 | |
| CVE-2024-3021 | Mhr Post Ticker WordPress plugin authenticated (Admin+) stored cross-site scripting | 4.4CNA v3.1 | 0.5% | 2024-05-02 | Fix |
| CVE-2024-3005 | LA-Studio Element Kit for Elementor WordPress plugin stored cross-site scripting | 6.4CNA v3.1 | 0.3% | 2024-05-02 | Fix |
| CVE-2024-2967 | Guest posting / Frontend Posting wordpress plugin WordPress plugin stored cross-site scripting | 4.4CNA v3.1 | 0.5% | 2024-05-02 | Fix |
| CVE-2024-2960 | SVS Pricing Tables WordPress plugin cross-site request forgery to Pricing Table deletion | 4.3v3.1 | 0.2% | 2024-05-02 | |
| CVE-2024-2959 | SVS Pricing Tables WordPress plugin cross-site request forgery to Pricing Table Edit/Creation | 4.3CNA v3.1 | 0.2% | 2024-05-02 | |
| CVE-2024-2958 | SVS Pricing Tables WordPress plugin authenticated (Admin+) stored cross-site scripting | 4.8v3.1 | 0.3% | 2024-05-02 | |
| CVE-2024-2876 | Email Subscribers by Icegram Express WordPress plugin SQL injection | 9.8CNA v3.1 | 80.6% | 2024-05-02 | NucleiExploit codeFix |
| CVE-2024-2867 | Paid Membership Plugin WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.4% | 2024-05-02 | Fix |
| CVE-2024-2840 | Enhanced Media Library WordPress plugin authenticated (Author+) stored cross-site scripting | 5.4CNA v3.1 | 0.4% | 2024-05-02 | Fix |
| CVE-2024-2831 | Calendar WordPress plugin authenticated (Contributor+) SQL injection via shortcode | 8.8CNA v3.1 | 0.6% | 2024-05-02 | Fix |
| CVE-2024-2797 | MailerLite Signup forms (official) WordPress plugin missing authorization | 5.3CNA v3.1 | 0.5% | 2024-05-02 | Fix |
| CVE-2024-2790 | HT Mega Absolute Addons For Elementor WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.3% | 2024-05-02 | Fix |
| CVE-2024-2765 | Ultimate Member WordPress plugin authenticated (Subscriber+) stored cross-site scripting | 5.4v3.1 | 0.5% | 2024-05-02 | Fix |
| CVE-2024-2752 | wooassist Where Did You Hear About Us Checkout Field for WooCommerce stored cross-site scripting | 5.5CNA v3.1 | 0.4% | 2024-05-02 | Fix |
| CVE-2024-2751 | Exclusive Addons for Elementor WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.3% | 2024-05-02 | Fix |
| CVE-2024-2750 | Exclusive Addons for Elementor WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.3% | 2024-05-02 | Fix |
| CVE-2024-2667 | InstaWP Connect REST API config endpoint unrestricted file upload | 9.8CNA v3.1 | 5.8% | 2024-05-02 | NucleiExploit codeFix |
| CVE-2024-2661 | Barcode Scanner with Inventory and Order Manager WordPress plugin SQL injection | 8.8CNA v3.1 | 0.6% | 2024-05-02 | Fix |
| CVE-2024-2542 | Jotform Online Forms WordPress plugin stored cross-site scripting | 6.4CNA v3.1 | 0.3% | 2024-05-02 | Fix |
| CVE-2024-2503 | Exclusive Addons for Elementor WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.4% | 2024-05-02 | Fix |
| CVE-2024-2417 | User Registration WordPress plugin privilege escalation | 8.8CNA v3.1 | 0.9% | 2024-05-02 | Fix |
| CVE-2024-2405 | Float menu WordPress plugin Menu deletion via CSRF | 4.5CISA ADP v3.1 | 0.3% | 2024-05-02 | Fix |
| CVE-2024-2401 | Admin Page Spider WordPress plugin authenticated (Admin+) stored cross-site scripting | 4.4CNA v3.1 | 0.4% | 2024-05-02 | Fix |
| CVE-2024-2349 | Fancy Elementor Flipbox WordPress plugin stored cross-site scripting | 6.4CNA v3.1 | 0.4% | 2024-05-02 | Fix |
| CVE-2024-2346 | FileBird WordPress Media Library Folders and File Manager plugin insecure direct object reference | 5.4CNA v3.1 | 0.3% | 2024-05-02 | Fix |
| CVE-2024-2345 | FileBird WordPress Media Library Folders and File Manager plugin stored cross-site scripting | 5.4v3.1 | 0.3% | 2024-05-02 | Fix |
| CVE-2024-2328 | Real Media Library WordPress plugin authenticated (Author+) stored cross-site scripting | 5.4v3.1 | 0.4% | 2024-05-02 | Fix |
| CVE-2024-2324 | FileOrganizer and FileOrganizer Pro WordPress plugin authenticated stored cross-site scripting | 5.4v3.1 | 0.3% | 2024-05-02 | Fix |
| CVE-2024-2273 | Gutenberg Blocks by Kadence Blocks WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.3% | 2024-05-02 | Fix |
| CVE-2024-2109 | Booster Extension WordPress plugin Basic information exposure | 5.3CNA v3.1 | 0.5% | 2024-05-02 | Fix |
| CVE-2024-2085 | HT Mega Absolute Addons For Elementor WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.3% | 2024-05-02 | Fix |
| CVE-2024-2084 | HT Mega Absolute Addons For Elementor WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.3% | 2024-05-02 | Fix |
| CVE-2024-2082 | EleForms WordPress plugin stored cross-site scripting | 6.1NVD v3.1 | 0.4% | 2024-05-02 | Fix |
| CVE-2024-2043 | EleForms WordPress plugin unauthorized access | 5.3v3.1 | 0.5% | 2024-05-02 | Fix |
| CVE-2024-1993 | Icon Widget WordPress plugin Authenticated(Contributor+) stored cross-site scripting via shortcode | 6.4CNA v3.1 | 0.4% | 2024-05-02 | Fix |
| CVE-2024-1959 | Social Sharing Plugin Social Warfare WordPress plugin stored cross-site scripting | 6.4CNA v3.1 | 0.4% | 2024-05-02 | Fix |
| CVE-2024-1945 | ARForms Form Builder WordPress plugin missing authorization authenticated arbitrary option deletion | 7.1CNA v3.1 | 0.4% | 2024-05-02 | Fix |
| CVE-2024-1897 | Grid Gallery Photo Image Grid Gallery WordPress plugin PHP object injection | 7.5CNA v3.1 | 0.9% | 2024-05-02 | Fix |
| CVE-2024-1896 | Photo Gallery WordPress plugin Authenticated(Contributor+) PHP object injection via shortcode | 7.5CNA v3.1 | 0.9% | 2024-05-02 | Fix |
| CVE-2024-1842 | WPBakery Visual Composer WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.3% | 2024-05-02 | Fix |
| CVE-2024-1841 | WPBakery Visual Composer WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.3% | 2024-05-02 | Fix |
| CVE-2024-1840 | WPBakery Visual Composer WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.3% | 2024-05-02 | Fix |
| CVE-2024-1809 | Analytify Google Analytics Dashboard For WordPress plugin missing authorization | 5.4CNA v3.1 | 0.3% | 2024-05-02 | Fix |
| CVE-2024-1805 | WPBakery Visual Composer WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.3% | 2024-05-02 | Fix |
| CVE-2024-1797 | WP ULike Most Advanced WordPress Marketing Toolkit plugin SQL injection | 8.8CNA v3.1 | 0.6% | 2024-05-02 | Fix |
| CVE-2024-1759 | WP ULike WordPress plugin authenticated (Subscriber+) stored cross-site scripting | 5.4v3.1 | 0.3% | 2024-05-02 | Fix |
| CVE-2024-1716 | Admin Bar Remover WordPress plugin missing authorization authenticated settings update | 4.3CNA v3.1 | 0.4% | 2024-05-02 | Fix |
| CVE-2024-1688 | Woo Total Sales WordPress plugin missing authorization to unauthenticated Sales Report Retrieval | 5.3CNA v3.1 | 0.5% | 2024-05-02 | |
| CVE-2024-1679 | Print Labels with Barcodes. Create price tags WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.4% | 2024-05-02 | Fix |
| CVE-2024-1678 | Subway WordPress plugin information disclosure | 5.3CNA v3.1 | 0.4% | 2024-05-02 | |
| CVE-2024-1677 | Print Labels with Barcodes. Create price tags WordPress plugin unauthorized access | 8.8v3.1 | 0.5% | 2024-05-02 | Fix |
| CVE-2024-1584 | Analytify WordPress plugin unauthorized access | 5.3CNA v3.1 | 0.4% | 2024-05-02 | Fix |
| CVE-2024-1572 | WP ULike WordPress plugin authenticated (Contributor+) stored cross-site scripting via shortcode | 5.4v3.1 | 0.4% | 2024-05-02 | Fix |
| CVE-2024-1567 | Royal Elementor Addons and Templates WordPress plugin unauthenticated limited file upload | 9.8v3.1 | 1.1% | 2024-05-02 | Fix |
| CVE-2024-1533 | Shortcodes and extra features for Phlox WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.4% | 2024-05-02 | Fix |
| CVE-2024-1416 | Responsive Contact Form Builder and Lead Generation WordPress plugin missing authorization | 4.3CNA v3.1 | 0.3% | 2024-05-02 | Fix |
| CVE-2024-1415 | Responsive Contact Form Builder and Lead Generation WordPress plugin cross-site request forgery | 4.3CNA v3.1 | 0.3% | 2024-05-02 | Fix |
| CVE-2024-1396 | Shortcodes and extra features for Phlox WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.4% | 2024-05-02 | Fix |
| CVE-2024-1386 | MailerLite WordPress plugin stored cross-site scripting | 6.4CNA v3.1 | 0.4% | 2024-05-02 | Fix |
| CVE-2024-1348 | Shortcodes and extra features for Phlox WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.4% | 2024-05-02 | Fix |
| CVE-2024-1173 | WP ERP WordPress plugin SQL injection | 7.2CNA v3.1 | 0.8% | 2024-05-02 | Fix |
| CVE-2024-0908 | Advanced Post Block WordPress plugin unauthorized access | 5.3CNA v3.1 | 0.5% | 2024-05-02 | Fix |
| CVE-2024-0848 | AA Cash Calculator WordPress plugin reflected cross-site scripting via invoice | 6.1CNA v3.1 | 0.4% | 2024-05-02 | |
| CVE-2024-0847 | 5280 Bootstrap Modal Contact Form WordPress plugin cross-site request forgery | 4.3CNA v3.1 | 0.2% | 2024-05-02 | |
| CVE-2024-0710 | GP Unique ID WordPress plugin unauthenticated form Submission Unique ID modification | 5.3CNA v3.1 | 1.0% | 2024-05-02 | Exploit codeFix |
| CVE-2024-0629 | 2Checkout Payment Gateway for WooCommerce WordPress plugin missing authorization via sniff_ins | 5.3CNA v3.1 | 0.4% | 2024-05-02 | |
| CVE-2024-0615 | Content Control WordPress plugin missing authorization to sensitive information exposure | 5.3CNA v3.1 | 0.5% | 2024-05-02 | Fix |
| CVE-2024-0613 | Delete Custom Fields WordPress plugin cross-site request forgery to post Meta deletion | 6.1CNA v3.1 | 0.2% | 2024-05-02 | |
| CVE-2024-33835 | Tenda AC18 stack-based buffer overflow | 9.8CISA ADP v3.1 | 0.8% | 2024-05-01 | |
| CVE-2024-33820 | TOTOLINK A3002R buffer overflow | 7.5CISA ADP v3.1 | 0.6% | 2024-05-01 | |
| CVE-2024-33775 | Nagios XI improper privilege management | 8.8CISA ADP v3.1 | 1.4% | 2024-05-01 | Fix |
| CVE-2024-33768 | Sammycage Lunasvg improper isolation | 9.8CISA ADP v3.1 | 0.8% | 2024-05-01 | |
| CVE-2024-33767 | Sammycage Lunasvg out-of-bounds read | 5.0CISA ADP v3.1 | 0.3% | 2024-05-01 | |
| CVE-2024-33766 | Sammycage Lunasvg divide by zero | 5.3CISA ADP v3.1 | 0.6% | 2024-05-01 | |
| CVE-2024-33764 | Sammycage Lunasvg out-of-bounds write | 5.5v3.1 | 0.3% | 2024-05-01 | |
| CVE-2024-33763 | Sammycage Lunasvg out-of-bounds read | 7.5CISA ADP v3.1 | 0.7% | 2024-05-01 | |
| CVE-2024-33518 | HPE Aruba Mobility Conductor Radio Frequency Manager service accessed denial of service | 5.3CNA v3.1 | 0.5% | 2024-05-01 | |
| CVE-2024-33517 | HPE Aruba Mobility Conductor Radio Frequency Manager service accessed denial of service | 5.3CNA v3.1 | 0.6% | 2024-05-01 | |
| CVE-2024-33516 | HPE Aruba Mobility Conductor Auth service accessed denial of service | 5.3CNA v3.1 | 0.6% | 2024-05-01 | |
| CVE-2024-33515 | HPE Aruba Mobility Conductor AP Management service accessed denial of service | 5.3CNA v3.1 | 0.6% | 2024-05-01 | |
| CVE-2024-33514 | HPE Aruba Mobility Conductor AP Management service accessed denial of service | 5.3CNA v3.1 | 0.6% | 2024-05-01 | |
| CVE-2024-33513 | HPE Aruba Mobility Conductor AP Management service accessed denial of service | 5.9CNA v3.1 | 0.5% | 2024-05-01 | |
| CVE-2024-33512 | HPE Aruba Mobility Conductor There is a buffer overflow | 9.8CNA v3.1 | 14.6% | 2024-05-01 | |
| CVE-2024-33511 | HPE Aruba Mobility Conductor underlying Automatic Reporting service buffer overflow | 9.8CNA v3.1 | 14.6% | 2024-05-01 | |
| CVE-2024-33442 | Flusity code injection | 4.3CISA ADP v3.1 | 0.6% | 2024-05-01 | |
| CVE-2024-33431 | Stsaz Phiola incorrect control flow | 6.5CISA ADP v3.1 | 0.9% | 2024-05-01 | |
| CVE-2024-33430 | Stsaz Phiola code injection | 8.8CISA ADP v3.1 | 1.4% | 2024-05-01 | |
| CVE-2024-33429 | Stsaz Phiola heap-based buffer overflow | 7.1CISA ADP v3.1 | 1.1% | 2024-05-01 | |
| CVE-2024-33428 | Stsaz Phiola heap-based buffer overflow | 8.8CISA ADP v3.1 | 1.2% | 2024-05-01 | |
| CVE-2024-33424 | CMSimple settings menu cross-site scripting | 6.1CISA ADP v3.1 | 0.4% | 2024-05-01 | |
| CVE-2024-33423 | CMSimple settings menu cross-site scripting | 7.4CISA ADP v3.1 | 0.6% | 2024-05-01 | |
| CVE-2024-33393 | spidernet-io Spiderpool token component privilege escalation | 6.2CISA ADP v3.1 | 0.2% | 2024-05-01 | |
| CVE-2024-33307 | SourceCodester Laboratory Management System cross-site scripting | 5.4CISA ADP v3.1 | 0.4% | 2024-05-01 | |
| CVE-2024-33306 | SourceCodester Laboratory Management System cross-site scripting | 7.4CISA ADP v3.1 | 0.7% | 2024-05-01 | |
| CVE-2024-33304 | oretnom23 Product Show Room Site cross-site scripting | 6.1CISA ADP v3.1 | 0.4% | 2024-05-01 | |
| CVE-2024-33300 | Typora cross-site scripting | 7.3CISA ADP v3.1 | 0.6% | 2024-05-01 | |
| CVE-2024-33292 | Realisation MGSD v.1.0 SQL injection | 8.2CISA ADP v3.1 | 0.5% | 2024-05-01 | |
| CVE-2024-33078 | Tencent Libpag integer overflow to buffer overflow | 9.8CISA ADP v3.1 | 1.1% | 2024-05-01 | |
| CVE-2024-32984 | libp2p rust-yamux yamux memory exhaustion vulnerability via Active::pending_frames property | 7.5CNA v3.1 | 0.8% | 2024-05-01 | Fix |
| CVE-2024-32979 | Reflected cross-site scripting potential in all object list views in Nautobot | 7.5CNA v3.1 | 0.5% | 2024-05-01 | Fix |
| CVE-2024-32973 | Remote for TLS session may be trusted despite constraints in Pluto lang | 4.8CNA v3.1 | 0.1% | 2024-05-01 | Fix |
| CVE-2024-32967 | Zitadel exposes internal database user name and host information | 5.3CNA v3.1 | 0.6% | 2024-05-01 | Fix |
| CVE-2024-32966 | Stored cross-site scripting in directory listings via file names in static-web-server | 5.8CNA v3.1 | 0.4% | 2024-05-01 | Fix |
| CVE-2024-32963 | Parameter tampering vulnerability in Navidrome | 4.2CNA v3.1 | 0.4% | 2024-05-01 | Fix |
| CVE-2024-32890 | Stored cross-site scripting in results JSON API in librespeed/speedtest | 6.1CNA v3.1 | 0.5% | 2024-05-01 | Fix |
| CVE-2024-32213 | Logint Lomag Warehouse Management weak password requirements | 5.3CISA ADP v3.1 | 0.9% | 2024-05-01 | |
| CVE-2024-32212 | Logint Lomag Warehouse Management SQL injection | 8.1CISA ADP v3.1 | 0.7% | 2024-05-01 | |
| CVE-2024-32211 | Logint Lomag Warehouse Management insecure storage of sensitive information | 5.5CISA ADP v3.1 | 0.2% | 2024-05-01 | |
| CVE-2024-32210 | Logint Lomag Warehouse Management hard-coded password | 5.3CISA ADP v3.1 | 0.4% | 2024-05-01 | |
| CVE-2024-32018 | Ineffective size check due to assert and buffer overflow in RIOT | 8.8CNA v3.1 | 1.5% | 2024-05-01 | |
| CVE-2024-32017 | RIOT-OS RIOT CoAP proxy buffer overflow | 9.8CNA v3.1 | 1.6% | 2024-05-01 | |
| CVE-2024-31413 | OMRON CX-One and Sysmac Studio project file parser vulnerability | 5.9CISA ADP v3.1 | 0.2% | 2024-05-01 | |
| CVE-2024-31412 | OMRON CX-Programmer out-of-bounds read | 7.8CISA ADP v3.1 | 0.2% | 2024-05-01 | |
| CVE-2024-31225 | Lack of size check and buffer overflow in RIOT | 8.4CNA v3.1 | 1.3% | 2024-05-01 | |
| CVE-2024-30176 | Logpoint SIEM observable discrepancy | 5.3CISA ADP v3.1 | 0.4% | 2024-05-01 | Fix |
| CVE-2024-29011 | SonicWall GMS hard-coded password | 7.5CNA v3.1 | 0.9% | 2024-05-01 | Fix |
| CVE-2024-29010 | SonicWall GMS XML external entity injection | 7.1CNA v3.1 | 0.6% | 2024-05-01 | Fix |
| CVE-2024-28979 | Dell OpenManage Enterprise cross-site scripting | 5.1CNA v3.1 | 0.3% | 2024-05-01 | Fix |
| CVE-2024-28978 | Dell OpenManage Enterprise improper access control | 5.2CNA v3.1 | 0.4% | 2024-05-01 | Fix |
| CVE-2024-28893 | HP software packages (SoftPaqs) code injection | 7.7CISA ADP v3.1 | 0.3% | 2024-05-01 | Fix |
| CVE-2024-28775 | IBM WebSphere Automation cross-site scripting | 4.4CNA v3.1 | 0.4% | 2024-05-01 | Fix |
| CVE-2024-28764 | IBM WebSphere Automation CSV injection | 6.5CNA v3.1 | 0.2% | 2024-05-01 | Fix |
| CVE-2024-27392 | Linux kernel nvme host double free | 7.8CNA v3.1 | 0.3% | 2024-05-01 | Fix |
| CVE-2024-27391 | Linux kernel wilc1000 Wi-Fi driver vulnerability | 5.5v3.1 | 0.3% | 2024-05-01 | Fix |
| CVE-2024-27390 | In the Linux kernel, the following vulnerability has been resolved: ipv6: mcast: remove one synchronize_net() barrier in ipv6_mc_down() As discussed in the past (commit 2d3916f31891 ("ipv6: fix skb drops in igmp6_event_query() and igmp6_event_report()")) I think the synchronize_net() call in ipv6_ | 5.5v3.1 | 0.2% | 2024-05-01 | Fix |
| CVE-2024-27389 | Linux kernel pstore filesystem double free | 7.8CNA v3.1 | 0.2% | 2024-05-01 | Fix |
| CVE-2024-27388 | Linux kernel SUNRPC memory leak | 9.8CNA v3.1 | 1.0% | 2024-05-01 | Fix |
| CVE-2024-27080 | Linux kernel Btrfs fiemap race condition | 4.7v3.1 | 0.2% | 2024-05-01 | Fix |
| CVE-2024-27079 | Linux kernel iommu/vt-d crash | 5.5v3.1 | 0.2% | 2024-05-01 | Fix |
| CVE-2024-27078 | Linux kernel v4l2-tpg memory leak | 5.5NVD v3.1 | 0.3% | 2024-05-01 | Fix |
| CVE-2024-27077 | Linux kernel V4L2 mem2mem framework memory leak | 5.5NVD v3.1 | 0.3% | 2024-05-01 | Fix |
| CVE-2024-27076 | Linux kernel csc/scaler memory leak | 5.5NVD v3.1 | 0.3% | 2024-05-01 | Fix |
| CVE-2024-27075 | Linux kernel stv0367 DVB frontend driver stack overflow | 7.8v3.1 | 0.3% | 2024-05-01 | Fix |
| CVE-2024-27074 | Linux kernel go7007 encoder driver memory leak | 5.5NVD v3.1 | 0.3% | 2024-05-01 | Fix |
| CVE-2024-27073 | Linux kernel ttpci budget_av driver memory leak | 7.8CNA v3.1 | 0.3% | 2024-05-01 | Fix |
| CVE-2024-27072 | Linux kernel usbtv driver deadlock | 5.5CISA ADP v3.1 | 0.2% | 2024-05-01 | Fix |
| CVE-2024-27071 | Linux kernel hx8357 backlight driver null pointer dereference | 5.5v3.1 | 0.2% | 2024-05-01 | Fix |
| CVE-2024-27070 | Linux kernel F2FS file system use-after-free | 7.1CNA v3.1 | 0.2% | 2024-05-01 | Fix |
| CVE-2024-27069 | Linux kernel Overlayfs denial of service | 5.5v3.1 | 0.2% | 2024-05-01 | Fix |
| CVE-2024-27068 | Linux kernel MediaTek LVTS thermal driver memory leak | 5.5v3.1 | 0.2% | 2024-05-01 | Fix |
| CVE-2024-27067 | Linux kernel Xen event channel driver vulnerability | 5.5v3.1 | 0.2% | 2024-05-01 | Fix |
| CVE-2024-27066 | Linux kernel virtio packed ring memory leak | 7.5CNA v3.1 | 0.6% | 2024-05-01 | Fix |
| CVE-2024-27065 | Linux kernel netfilter nf_tables vulnerability | 7.8NVD v3.1 | 0.3% | 2024-05-01 | Fix |
| CVE-2024-27064 | Linux kernel netfilter nf_tables memory leak | 5.5v3.1 | 0.2% | 2024-05-01 | Fix |
| CVE-2024-27063 | Linux kernel netdev LED trigger denial of service | 5.5v3.1 | 0.2% | 2024-05-01 | Fix |
| CVE-2024-27062 | Linux kernel Nouveau driver race condition | 7.8CNA v3.1 | 0.2% | 2024-05-01 | Fix |
| CVE-2024-27061 | Linux kernel sun8i-ce crypto driver use-after-free | 7.8CNA v3.1 | 0.2% | 2024-05-01 | Fix |
| CVE-2024-27060 | Linux kernel Thunderbolt driver null pointer dereference | 5.5v3.1 | 0.2% | 2024-05-01 | Fix |
| CVE-2024-27059 | Linux kernel USB storage isd200 driver vulnerability | 5.5NVD v3.1 | 0.2% | 2024-05-01 | Fix |
| CVE-2024-27058 | Linux kernel tmpfs quota rbtree race condition | 7.8CNA v3.1 | 0.4% | 2024-05-01 | Fix |
| CVE-2024-27057 | Linux kernel SOF IPC4 PCM driver denial of service | 5.5v3.1 | 0.2% | 2024-05-01 | Fix |
| CVE-2024-27056 | Linux kernel iwlwifi Wi-Fi driver denial of service | 7.8CNA v3.1 | 0.3% | 2024-05-01 | Fix |
| CVE-2024-27054 | Linux kernel s390 DASD driver vulnerability | 5.5CISA ADP v3.1 | 0.3% | 2024-05-01 | Fix |
| CVE-2024-27053 | Linux kernel wilc1000 Wi-Fi driver null pointer dereference | 8.8CNA v3.1 | 1.6% | 2024-05-01 | Fix |
| CVE-2024-27052 | Linux kernel rtl8xxxu Wi-Fi driver use-after-free | 7.8CNA v3.1 | 0.3% | 2024-05-01 | Fix |
| CVE-2024-27051 | Linux kernel brcmstb-avs cpufreq driver null pointer dereference | 5.5v3.1 | 0.3% | 2024-05-01 | Fix |
| CVE-2024-27050 | Linux kernel libbpf XDP query options out-of-bounds write | 7.8CNA v3.1 | 0.3% | 2024-05-01 | Fix |
| CVE-2024-27049 | Linux kernel mt7925e use-after-free | 7.8v3.1 | 0.3% | 2024-05-01 | Fix |
| CVE-2024-27048 | Linux kernel brcm80211 Wi-Fi driver null pointer dereference | 5.5v3.1 | 0.3% | 2024-05-01 | Fix |
| CVE-2024-27047 | Linux kernel PHY internal delay configuration null pointer dereference | 5.5NVD v3.1 | 0.3% | 2024-05-01 | Fix |
| CVE-2024-27046 | Linux kernel nfp flower LAG offload null pointer dereference | 5.5v3.1 | 0.3% | 2024-05-01 | Fix |
| CVE-2024-27045 | Linux kernel amdgpu display debugfs DSC clock reporting buffer overflow | 7.0CNA v3.1 | 0.3% | 2024-05-01 | Fix |
| CVE-2024-27044 | Linux kernel amdgpu display DCN10 output transfer function null pointer dereference | 5.5v3.1 | 0.3% | 2024-05-01 | Fix |
| CVE-2024-27043 | Linux kernel DVB device registration use-after-free | 7.8CNA v3.1 | 0.3% | 2024-05-01 | Fix |
| CVE-2024-27041 | Linux kernel amdgpu display driver teardown null pointer dereference | 5.5CISA ADP v3.1 | 0.3% | 2024-05-01 | Fix |
| CVE-2024-27040 | Linux kernel amdgpu display Replay panel control null pointer dereference | 4.7CISA ADP v3.1 | 0.2% | 2024-05-01 | Fix |
| CVE-2024-27039 | Linux kernel HiSilicon hi3559a clock driver vulnerability | 5.5v3.1 | 0.3% | 2024-05-01 | Fix |
| CVE-2024-27038 | Linux kernel clk core framework null pointer dereference | 5.5NVD v3.1 | 0.3% | 2024-05-01 | Fix |
| CVE-2024-27037 | Linux kernel Zynq clock driver null pointer dereference | 5.5CISA ADP v3.1 | 0.3% | 2024-05-01 | Fix |
| CVE-2024-27036 | Linux kernel cifs writeback out-of-bounds write | 7.8v3.1 | 0.3% | 2024-05-01 | Fix |
| CVE-2024-27035 | Linux kernel f2fs compressed block checkpoint vulnerability | 7.3CNA v3.1 | 0.3% | 2024-05-01 | Fix |
| CVE-2024-27034 | Linux kernel f2fs compressed cluster write vulnerability | 7.8CNA v3.1 | 0.3% | 2024-05-01 | Fix |
| CVE-2024-27033 | Linux kernel f2fs block address validation denial of service | 5.5v3.1 | 0.3% | 2024-05-01 | Fix |
| CVE-2024-27032 | Linux kernel f2fs recovery infinite loop | 6.3CISA ADP v3.1 | 0.3% | 2024-05-01 | Fix |
| CVE-2024-27031 | Linux kernel NFS netfs read locking deadlock | 5.5v3.1 | 0.2% | 2024-05-01 | Fix |
| CVE-2024-27030 | Linux kernel octeontx2-af race condition | 7.8CNA v3.1 | 0.2% | 2024-05-01 | Fix |
| CVE-2024-27029 | Linux kernel amdgpu mmhub client id handling out-of-bounds read | 7.1CNA v3.1 | 0.3% | 2024-05-01 | Fix |
| CVE-2024-27028 | Linux kernel spi-mt65xx interrupt handler null pointer dereference | 6.5CISA ADP v3.1 | 1.2% | 2024-05-01 | Fix |
| CVE-2024-27027 | Linux kernel dpll pin registration vulnerability | 5.5v3.1 | 0.3% | 2024-05-01 | Fix |
| CVE-2024-27026 | Linux kernel vmxnet3 XDP handling vulnerability | 7.5CNA v3.1 | 0.8% | 2024-05-01 | Fix |
| CVE-2024-27025 | Linux kernel nbd null pointer dereference | 5.5NVD v3.1 | 0.3% | 2024-05-01 | Fix |
| CVE-2024-27024 | Linux kernel RDS connection handling vulnerability | 7.8NVD v3.1 | 0.3% | 2024-05-01 | Fix |
| CVE-2024-27023 | In the Linux kernel, the following vulnerability has been resolved: md: Fix missing release of 'active_io' for flush submit_flushes atomic_set(&mddev->flush_pending, 1); rdev_for_each_rcu(rdev, mddev) atomic_inc(&mddev->flush_pending); bi->bi_end_io = md_end_flush submit_bio(bi); | 5.5v3.1 | 0.3% | 2024-05-01 | Fix |
| CVE-2024-27022 | Linux kernel fork hugetlbfs VMA handling race condition | 7.8CNA v3.1 | 0.3% | 2024-05-01 | Fix |
| CVE-2024-27021 | Linux kernel r8169 Ethernet driver LED handling deadlock | 7.8v3.1 | 0.2% | 2024-05-01 | Fix |
| CVE-2024-27020 | Linux kernel nf_tables expression type lookup race condition | 7.8CNA v3.1 | 0.2% | 2024-05-01 | Fix |
| CVE-2024-27019 | Linux kernel nf_tables object type lookup race condition | 7.8CNA v3.1 | 0.2% | 2024-05-01 | Fix |
| CVE-2024-27018 | Linux kernel br_netfilter conntrack input hook vulnerability | 8.2CNA v3.1 | 0.6% | 2024-05-01 | Fix |
| CVE-2024-27017 | Linux kernel nft_set_pipapo netlink dump vulnerability | 7.8CNA v3.1 | 0.3% | 2024-05-01 | Fix |
| CVE-2024-27016 | Linux kernel netfilter flowtable PPPoE header parsing vulnerability | 7.1CNA v3.1 | 0.3% | 2024-05-01 | Fix |
| CVE-2024-27015 | Linux kernel netfilter flowtable PPPoE handling vulnerability | 5.5v3.1 | 0.2% | 2024-05-01 | Fix |
| CVE-2024-27014 | Linux kernel net/mlx5e deadlock | 5.5v3.1 | 0.2% | 2024-05-01 | Fix |
| CVE-2024-27013 | Linux kernel tun driver packet logging denial of service | 5.5NVD v3.1 | 0.3% | 2024-05-01 | Fix |
| CVE-2024-27012 | Linux kernel nf_tables set element restoration memory leak | 7.8CNA v3.1 | 0.3% | 2024-05-01 | Fix |
| CVE-2024-27011 | Linux kernel nf_tables set abort path memory leak | 5.5v3.1 | 0.2% | 2024-05-01 | Fix |
| CVE-2024-27010 | Linux kernel net/sched mirred action deadlock | 5.5v3.1 | 0.2% | 2024-05-01 | Fix |
| CVE-2024-27009 | Linux kernel s390 channel I/O race condition | 4.7v3.1 | 0.2% | 2024-05-01 | Fix |
| CVE-2024-27008 | Linux kernel nv04 DRM driver out-of-bounds read | 7.8v3.1 | 0.3% | 2024-05-01 | Fix |
| CVE-2024-27007 | Linux kernel userfaultfd UFFDIO_MOVE vulnerability | 7.8CNA v3.1 | 0.2% | 2024-05-01 | Fix |
| CVE-2024-27006 | Linux kernel thermal zone trip point debugfs vulnerability | 5.5v3.1 | 0.2% | 2024-05-01 | Fix |
| CVE-2024-27005 | Linux kernel interconnect framework race condition | 7.8CNA v3.1 | 0.2% | 2024-05-01 | Fix |
| CVE-2024-27004 | Linux kernel clk improper locking | 5.5NVD v3.1 | 0.2% | 2024-05-01 | Fix |
| CVE-2024-27003 | Linux kernel clk_summary debugfs deadlock | 5.5v3.1 | 0.2% | 2024-05-01 | Fix |
| CVE-2024-27002 | Linux kernel MediaTek clock controller deadlock | 5.5v3.1 | 0.2% | 2024-05-01 | Fix |
| CVE-2024-27001 | Linux kernel comedi vmk80xx driver denial of service | 5.5v3.1 | 0.3% | 2024-05-01 | Fix |
| CVE-2024-27000 | Linux kernel mxs-auart serial driver improper locking | 7.8v3.1 | 0.3% | 2024-05-01 | Fix |
| CVE-2024-26999 | Linux kernel pmac_zilog serial driver improper locking | 5.5v3.1 | 0.2% | 2024-05-01 | Fix |
| CVE-2024-26998 | Linux kernel serial core null pointer dereference | 5.5v3.1 | 0.2% | 2024-05-01 | Fix |
| CVE-2024-26997 | Linux kernel dwc2 USB host DDMA null pointer dereference | 5.5v3.1 | 0.2% | 2024-05-01 | Fix |
| CVE-2024-26996 | Linux kernel USB NCM gadget driver use-after-free | 7.8CNA v3.1 | 0.2% | 2024-05-01 | Fix |
| CVE-2024-26995 | Linux kernel USB Type-C TCPM driver off-by-one error | 7.8v3.1 | 0.2% | 2024-05-01 | Fix |
| CVE-2024-26994 | Linux kernel speakup crash | 7.8CNA v3.1 | 0.3% | 2024-05-01 | Fix |
| CVE-2024-26993 | Linux kernel sysfs active protection memory leak | 5.5NVD v3.1 | 0.3% | 2024-05-01 | Fix |
| CVE-2024-26992 | Linux kernel KVM x86 PMU information disclosure | 7.3CNA v3.1 | 0.2% | 2024-05-01 | Fix |
| CVE-2024-26991 | Linux kernel KVM x86 memory attributes out-of-bounds read | 5.5CISA ADP v3.1 | 0.2% | 2024-05-01 | Fix |
| CVE-2024-26990 | Linux kernel KVM x86 TDP MMU vulnerability | 8.8CNA v3.1 | 0.2% | 2024-05-01 | Fix |
| CVE-2024-26989 | Linux kernel arm64 hibernation vulnerability | 7.8v3.1 | 0.2% | 2024-05-01 | Fix |
| CVE-2024-26988 | Linux kernel kernel command line handling out-of-bounds write | 7.8NVD v3.1 | 0.3% | 2024-05-01 | Fix |
| CVE-2024-26987 | Linux kernel memory failure handling deadlock | 5.5v3.1 | 0.2% | 2024-05-01 | Fix |
| CVE-2024-26986 | Linux kernel amdkfd driver memory leak | 5.5v3.1 | 0.2% | 2024-05-01 | Fix |
| CVE-2024-26985 | Linux kernel drm/xe framebuffer driver memory leak | 5.5v3.1 | 0.2% | 2024-05-01 | Fix |
| CVE-2024-26984 | Linux kernel nouveau driver race condition | 5.5CISA ADP v3.1 | 0.2% | 2024-05-01 | Fix |
| CVE-2024-26983 | Linux kernel bootconfig memory management use-after-free | 7.8CNA v3.1 | 0.2% | 2024-05-01 | Fix |
| CVE-2024-26982 | Linux kernel Squashfs filesystem out-of-bounds read | 7.1NVD v3.1 | 0.3% | 2024-05-01 | Fix |
| CVE-2024-26981 | Linux kernel nilfs2 filesystem vulnerability | 7.8v3.1 | 0.3% | 2024-05-01 | Fix |
| CVE-2024-26980 | Linux kernel ksmbd SMB2 request handling out-of-bounds read | 8.2CNA v3.1 | 0.6% | 2024-05-01 | Fix |
| CVE-2024-26978 | Linux kernel max310x serial driver null pointer dereference | 5.5v3.1 | 0.2% | 2024-05-01 | Fix |
| CVE-2024-26977 | In the Linux kernel, the following vulnerability has been resolved: pci_iounmap(): Fix MMIO mapping leak The #ifdef ARCH_HAS_GENERIC_IOPORT_MAP accidentally also guards iounmap(), which means MMIO mappings are leaked. Move the guard so we call iounmap() for MMIO mappings. | 5.5v3.1 | 0.2% | 2024-05-01 | Fix |
| CVE-2024-26976 | Linux kernel KVM async page fault workqueue vulnerability | 7.8CNA v3.1 | 0.3% | 2024-05-01 | Fix |
| CVE-2024-26975 | Linux kernel intel_rapl power capping driver null pointer dereference | 5.5v3.1 | 0.2% | 2024-05-01 | Fix |
| CVE-2024-26974 | Linux kernel crypto race condition | 7.8CNA v3.1 | 0.2% | 2024-05-01 | Fix |
| CVE-2024-26973 | Linux kernel FAT filesystem information disclosure | 5.5NVD v3.1 | 0.3% | 2024-05-01 | Fix |
| CVE-2024-26971 | Linux kernel gcc-ipq5018 out-of-bounds access | 7.3CNA v3.1 | 0.2% | 2024-05-01 | Fix |
| CVE-2024-26970 | Linux kernel gcc-ipq6018 out-of-bounds access | 5.5CISA ADP v3.1 | 0.2% | 2024-05-01 | Fix |
| CVE-2024-26969 | Linux kernel gcc-ipq8074 out-of-bounds access | 7.3CNA v3.1 | 0.3% | 2024-05-01 | Fix |
| CVE-2024-26968 | Linux kernel gcc-ipq9574 out-of-bounds access | 7.3CNA v3.1 | 0.2% | 2024-05-01 | Fix |
| CVE-2024-26967 | Linux kernel camcc-sc8280xp out-of-bounds access | 7.3CNA v3.1 | 0.2% | 2024-05-01 | Fix |
| CVE-2024-26966 | Linux kernel mmcc-apq8084 out-of-bounds access | 7.8CNA v3.1 | 0.3% | 2024-05-01 | Fix |
| CVE-2024-26965 | Linux kernel mmcc-msm8974 out-of-bounds access | 7.3CNA v3.1 | 0.3% | 2024-05-01 | Fix |
| CVE-2024-26964 | Linux kernel xHCI USB controller driver null pointer dereference | 5.5v3.1 | 0.2% | 2024-05-01 | Fix |
| CVE-2024-26963 | Linux kernel DWC3 AM62 USB driver vulnerability | 5.5v3.1 | 0.2% | 2024-05-01 | Fix |
| CVE-2024-26962 | Linux kernel device-mapper RAID456 deadlock | 5.5v3.1 | 0.2% | 2024-05-01 | Fix |
| CVE-2024-26961 | Linux kernel mac802154 use-after-free | 7.0CNA v3.1 | 0.2% | 2024-05-01 | Fix |
| CVE-2024-26960 | Linux kernel swap subsystem race condition | 7.0CNA v3.1 | 0.2% | 2024-05-01 | Fix |
| CVE-2024-26959 | Linux kernel Bluetooth btnxpuart driver vulnerability | 5.5v3.1 | 0.2% | 2024-05-01 | Fix |
| CVE-2024-26958 | Linux kernel NFS direct write use-after-free | 7.8CNA v3.1 | 0.2% | 2024-05-01 | Fix |
| CVE-2024-26957 | Linux kernel zcrypt crypto card driver use-after-free | 7.8CNA v3.1 | 0.2% | 2024-05-01 | Fix |
| CVE-2024-26956 | Linux kernel nilfs2 file system vulnerability | 7.8v3.1 | 0.3% | 2024-05-01 | Fix |
| CVE-2024-26955 | Linux kernel nilfs2 file system reachable assertion | 7.8v3.1 | 0.3% | 2024-05-01 | Fix |
| CVE-2024-26954 | Linux kernel ksmbd server out-of-bounds read | 8.1CNA v3.1 | 0.7% | 2024-05-01 | Fix |
| CVE-2024-26953 | Linux kernel IPsec ESP output vulnerability | 9.8CNA v3.1 | 0.7% | 2024-05-01 | Fix |
| CVE-2024-26952 | Linux kernel ksmbd server out-of-bounds read | 8.3CNA v3.1 | 0.7% | 2024-05-01 | Fix |
| CVE-2024-26951 | Linux kernel WireGuard netlink interface use-after-free | 7.8CNA v3.1 | 0.2% | 2024-05-01 | Fix |
| CVE-2024-26950 | Linux kernel WireGuard netlink interface null pointer dereference | 7.8CNA v3.1 | 0.2% | 2024-05-01 | Fix |
| CVE-2024-26949 | Linux kernel AMDGPU power management driver null pointer dereference | 5.5v3.1 | 0.2% | 2024-05-01 | Fix |
| CVE-2024-26948 | Linux kernel AMD display driver null pointer dereference | 5.5NVD v3.1 | 0.2% | 2024-05-01 | Fix |
| CVE-2024-26947 | Linux kernel ARM cache flush vulnerability | 5.5v3.1 | 0.2% | 2024-05-01 | Fix |
| CVE-2024-26946 | Linux kernel x86 kprobes reachable assertion | 5.5v3.1 | 0.2% | 2024-05-01 | Fix |
| CVE-2024-26945 | Linux kernel IAA crypto driver divide-by-zero | 8.4CISA ADP v3.1 | 0.2% | 2024-05-01 | Fix |
| CVE-2024-26944 | Linux kernel btrfs zoned block device support use-after-free | 7.8CNA v3.1 | 0.2% | 2024-05-01 | Fix |
| CVE-2024-26943 | Linux kernel nouveau dmem eviction null pointer dereference | 5.5v3.1 | 0.2% | 2024-05-01 | Fix |
| CVE-2024-26942 | Linux kernel at803x PHY driver null pointer dereference | 5.5v3.1 | 0.1% | 2024-05-01 | Fix |
| CVE-2024-26941 | Linux kernel DisplayPort MST bandwidth overhead calculation divide-by-zero | 5.5v3.1 | 0.2% | 2024-05-01 | Fix |
| CVE-2024-26940 | Linux kernel vmwgfx debugfs TTM resource entries vulnerability | 5.5CISA ADP v3.1 | 0.2% | 2024-05-01 | Fix |
| CVE-2024-26939 | Linux kernel i915 VMA object lifecycle use-after-free | 7.8CNA v3.1 | 0.2% | 2024-05-01 | Fix |
| CVE-2024-26938 | Linux kernel i915 VBT DP dual mode encoder check vulnerability | 5.5v3.1 | 0.2% | 2024-05-01 | Fix |
| CVE-2024-26937 | Linux kernel i915 GT request queue reachable assertion | 5.5NVD v3.1 | 0.3% | 2024-05-01 | Fix |
| CVE-2024-26936 | Linux kernel ksmbd SMB2 response buffer allocation buffer overflow | 8.2CNA v3.1 | 0.6% | 2024-05-01 | Fix |
| CVE-2024-26935 | Linux kernel SCSI host procfs directory vulnerability | 5.5NVD v3.1 | 0.2% | 2024-05-01 | Fix |
| CVE-2024-26934 | Linux kernel USB interface authorization sysfs attribute deadlock | 7.8NVD v3.1 | 0.2% | 2024-05-01 | Fix |
| CVE-2024-26933 | Linux kernel USB port disable sysfs attribute deadlock | 7.8v3.1 | 0.2% | 2024-05-01 | Fix |
| CVE-2024-26932 | Linux kernel tcpm double free | 7.8v3.1 | 0.2% | 2024-05-01 | Fix |
| CVE-2024-26931 | Linux kernel qla2xxx NVMe-FC command handling null pointer dereference | 8.8CNA v3.1 | 0.4% | 2024-05-01 | Fix |
| CVE-2024-26930 | Linux kernel qla2xxx driver double free | 7.0CNA v3.1 | 0.2% | 2024-05-01 | Fix |
| CVE-2024-26504 | Wifire Hotspot dst parameter open redirect | 8.8CISA ADP v3.1 | 0.5% | 2024-05-01 | |
| CVE-2024-26305 | HPE Aruba Mobility Conductor underlying utility daemon buffer overflow | 9.8CNA v3.1 | 15.2% | 2024-05-01 | |
| CVE-2024-26304 | HPE Aruba Mobility Conductor underlying L2/L3 Management service buffer overflow | 9.8CNA v3.1 | 44.0% | 2024-05-01 | Exploit code |
| CVE-2024-25676 | An issue was discovered in ViewerJS 0.5.8. A script from the component loads content via URL TAGs without properly sanitizing it. This leads to both open redirection and out-of-band resource loading. | 4.7CISA ADP v3.1 | 0.3% | 2024-05-01 | |
| CVE-2024-25458 | A9 Camera UDP service information disclosure | 7.5CISA ADP v3.1 | 0.6% | 2024-05-01 | |
| CVE-2024-25355 | S3-url-parser vulnerable to denial of service via regexes component | 7.5CISA ADP v3.1 | 0.6% | 2024-05-01 | |
| CVE-2024-25015 | IBM MQ denial of service | 7.5CNA v3.1 | 0.9% | 2024-05-01 | Fix |
| CVE-2024-24978 | TvRock denial of service | 4.3CISA ADP v3.1 | 0.6% | 2024-05-01 | |
| CVE-2024-24912 | Local privilege escalation in Harmony Endpoint Security Client for Windows via crafted DLL file | 6.7CISA ADP v3.1 | 0.2% | 2024-05-01 | Fix |
| CVE-2024-24313 | An issue in Vaales Technologies V_QRS v.2024-01-17 allows a remote attacker to obtain sensitive information via the Models/FormModel.php and QRModel.php component. | 7.5CISA ADP v3.1 | 0.6% | 2024-05-01 | |
| CVE-2024-24312 | Vaales Technologies V_QRS v.2024-01-17 SQL injection | 7.5CISA ADP v3.1 | 0.5% | 2024-05-01 | |
| CVE-2024-23597 | TvRock cross-site request forgery | 4.3CISA ADP v3.1 | 0.2% | 2024-05-01 | |
| CVE-2024-23480 | Zscaler Client Connector insecure MacOS code sign check fallback | 7.5CNA v3.1 | 0.3% | 2024-05-01 | Fix |
| CVE-2024-23457 | Zscaler Client Connector anti-tampering can be disabled with uninstall password enforced | 7.8CNA v3.1 | 0.2% | 2024-05-01 | Fix |
| CVE-2024-23336 | Incomplete disallowed remote addresses list in MyBB | 5.0CNA v3.1 | 0.5% | 2024-05-01 | Fix |
| CVE-2024-23335 | Backups directory .htaccess deletion in. MyBB | 4.7CNA v3.1 | 0.6% | 2024-05-01 | Fix |
| CVE-2024-22830 | Anti-Cheat Expert's Windows kernel module "ACE-BASE.sys" version 1.0.2202.6217 does not perform proper access control when handling system resources. This allows a local attacker to escalate privileges from regular user to System or PPL level. | 5.3CISA ADP v3.1 | 0.1% | 2024-05-01 | |
| CVE-2024-20378 | Cisco IP Phones with Multiplatform Firmware authentication bypass | 7.5CNA v3.1 | 0.8% | 2024-05-01 | Fix |
| CVE-2024-20376 | Cisco IP Phones with Multiplatform Firmware out-of-bounds write | 7.5CNA v3.1 | 0.9% | 2024-05-01 | Fix |
| CVE-2024-20357 | Cisco IP Phones with Multiplatform Firmware out-of-bounds write | 5.9CNA v3.1 | 0.5% | 2024-05-01 | Fix |
| CVE-2024-4369 | Red Hat OpenShift Container Platform information disclosure | 6.8CNA v3.1 | 0.7% | 2024-05-01 | Fix |
| CVE-2024-4368 | Google Chrome Dawn use-after-free | 8.8v3.1 | 1.1% | 2024-05-01 | Fix |
| CVE-2024-4331 | Google Chrome Picture In Picture use-after-free | 8.8v3.1 | 1.2% | 2024-05-01 | Fix |
| CVE-2024-4142 | JFrog Artifactory improper input validation within token creation flow | 9.0CNA v3.1 | 0.7% | 2024-05-01 | Fix |
| CVE-2024-4060 | Google Chrome Dawn use-after-free | 6.5NVD v3.1 | 1.0% | 2024-05-01 | Fix |
| CVE-2024-4059 | Google Chrome V8 API out-of-bounds read | 6.5v3.1 | 0.9% | 2024-05-01 | Fix |
| CVE-2024-4058 | Google Chrome ANGLE type confusion | 8.8NVD v3.1 | 9.0% | 2024-05-01 | Fix |
| CVE-2024-3591 | WordPress Geo Controller plugin PHP object injection | 6.5CISA ADP v3.1 | 0.5% | 2024-05-01 | Fix |
| CVE-2024-0334 | Jeg Elementor Kit WordPress plugin cross-site scripting | 5.4v3.1 | 0.4% | 2024-05-01 | Fix |