CVE-2024 records published in June 2024
This page lists the 2,684 CVE-2024 records published in June 2024, newest first, 1,000 to a page. The Cybersecurity and Infrastructure Security Agency's Known Exploited Vulnerabilities (KEV) catalog lists 13 of them. Each CVE opens on cve-security.com with its sources, detection content and vendor fixes, and the search on the CVE-2024 list filters these records by severity or signal.
- Critical
- 37013.8% of these records
- Listed in CISA KEV
- 130.5% of these records
- Reported exploited
- 80.3% of these records
- Detection signal
- 722.7% of these records
- Exploit code
- 883.3% of these records
- Actionable vendor fix
- 1,95873.0% of these records
Figures as of 2026-10-24 13:18 UTC. Records published in June 2024 have had from about 28 months to about 29 months to collect KEV listings, exploitation reports, detection content and exploit code. Records published more recently have had less time, which can hold their shares down.
| CVE | Summary | CVSS | EPSS | Published | Signals |
|---|---|---|---|---|---|
| CVE-2024-35119 | IBM InfoSphere Information Server information disclosure | 5.3CNA v3.1 | 0.4% | 2024-06-30 | Fix |
| CVE-2024-34703 | Botan vulnerable to denial of service due to Overly Large Elliptic Curve parameters | 7.5CNA v3.1 | 0.5% | 2024-06-30 | Fix |
| CVE-2024-31902 | IBM InfoSphere Information Server cross-site request forgery | 4.3CNA v3.1 | 0.3% | 2024-06-30 | Fix |
| CVE-2024-31898 | IBM InfoSphere Information Server data modification | 5.4CNA v3.1 | 0.3% | 2024-06-30 | Fix |
| CVE-2024-28798 | IBM InfoSphere Information Server cross-site scripting | 7.2CNA v3.1 | 0.3% | 2024-06-30 | Fix |
| CVE-2024-28797 | IBM InfoSphere Information Server cross-site scripting | 6.4CNA v3.1 | 0.3% | 2024-06-30 | Fix |
| CVE-2024-28795 | IBM InfoSphere Information Server cross-site scripting | 5.4CNA v3.1 | 0.3% | 2024-06-30 | Fix |
| CVE-2024-28794 | IBM InfoSphere Information Server cross-site scripting | 5.4CNA v3.1 | 0.3% | 2024-06-30 | Fix |
| CVE-2024-6418 | SourceCodester Medicine Tracker System SQL injection | 5.3NVD v3.1 | 0.5% | 2024-06-30 | |
| CVE-2024-6417 | SourceCodester Simple Online Bidding System SQL injection | 7.5v3.1 | 0.5% | 2024-06-30 | |
| CVE-2024-6416 | SeaCMS SQL injection | 9.8v3.1 | 0.5% | 2024-06-30 | |
| CVE-2024-6415 | Ingenico Estate Manager New widget cross-site scripting | 5.1CNA v4.0 | 0.3% | 2024-06-30 | |
| CVE-2024-6414 | Parsec Automation TrakSYS Export page contentpage direct request | 6.9CNA v4.0 | 0.6% | 2024-06-30 | |
| CVE-2024-5926 | Path traversal in stitionai/Devika | 9.1CNA v3.0 | 0.9% | 2024-06-30 | |
| CVE-2024-5062 | Reflected XSS through survey redirect parameter in zenml-io/ZenML | 6.1v3.1 | 0.4% | 2024-06-30 | Fix |
| CVE-2024-39848 | Internet2 Grouper LDAP authentication authentication bypass | 9.1CISA ADP v3.1 | 0.4% | 2024-06-29 | |
| CVE-2024-39846 | NewPass before 1.2.0 stores passwords (rather than password hashes) directly, which makes it easier to obtain unauthorized access to sensitive information. NOTE: in each case, data at rest is encrypted, but is decrypted within process memory during use. | 3.5CISA ADP v3.1 | 0.2% | 2024-06-29 | |
| CVE-2024-39840 | Factorio before 1.1.101 allows a crafted server to execute arbitrary code on clients via a custom map that leverages the ability of certain Lua base module functions to execute bytecode and generate fake objects. | 8.8CISA ADP v3.1 | 0.6% | 2024-06-29 | |
| CVE-2024-25943 | Integrated Dell Remote Access Controller 9 insufficient randomness | 7.6CNA v3.1 | 0.7% | 2024-06-29 | Fix |
| CVE-2024-6405 | Floating Social Buttons WordPress plugin cross-site request forgery | 5.4v3.1 | 0.2% | 2024-06-29 | |
| CVE-2024-6363 | Stock Ticker WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.3% | 2024-06-29 | Fix |
| CVE-2024-6265 | UsersWP WordPress plugin SQL injection | 9.8CNA v3.1 | 2.4% | 2024-06-29 | NucleiFix |
| CVE-2024-5942 | Page and Post Clone WordPress plugin insecure direct object reference | 5.4v3.1 | 0.3% | 2024-06-29 | Fix |
| CVE-2024-5889 | Events Manager WordPress plugin reflected cross-site scripting | 6.1CNA v3.1 | 0.3% | 2024-06-29 | Fix |
| CVE-2024-5819 | Gutenberg Blocks with AI by Kadence WP WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.3% | 2024-06-29 | Fix |
| CVE-2024-5790 | Happy Addons for Elementor WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.3% | 2024-06-29 | Fix |
| CVE-2024-5666 | Extensions for Elementor WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.4% | 2024-06-29 | Fix |
| CVE-2024-5598 | Advanced File Manager WordPress plugin sensitive information exposure via directory listing | 7.5CNA v3.1 | 0.6% | 2024-06-29 | Fix |
| CVE-2024-5192 | Funnel Builder for WordPress by FunnelKit WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.3% | 2024-06-29 | Fix |
| CVE-2024-2386 | WordPress Plugin for Google Maps WP MAPS authenticated (Contributor+) SQL injection | 8.8CNA v3.1 | 0.5% | 2024-06-29 | Fix |
| CVE-2024-39828 | R74n Sandboxels saved-game file cross-site scripting | 6.1CISA ADP v3.1 | 0.4% | 2024-06-28 | |
| CVE-2024-39708 | Delinea Privilege Manager agent temporary directory privilege escalation | 7.0CNA v3.1 | 0.2% | 2024-06-28 | |
| CVE-2024-39704 | Unknown-corp Melty Blood Actress Again Current Code arbitrary code execution | 9.8v3.1 | 1.4% | 2024-06-28 | |
| CVE-2024-39352 | Synology Camera Firmware incorrect authorization | 4.9CNA v3.1 | 0.9% | 2024-06-28 | Fix |
| CVE-2024-39351 | Synology Camera Firmware OS command injection | 7.2CNA v3.1 | 1.5% | 2024-06-28 | Fix |
| CVE-2024-39350 | Synology Camera Firmware authentication bypass by spoofing | 7.5CNA v3.1 | 0.7% | 2024-06-28 | Fix |
| CVE-2024-39349 | Synology Camera Firmware buffer overflow | 9.8CNA v3.1 | 1.4% | 2024-06-28 | Fix |
| CVE-2024-39348 | Synology Router Manager (SRM) AirPrint functionality download without integrity check | 7.5CNA v3.1 | 0.3% | 2024-06-28 | Fix |
| CVE-2024-39347 | Synology Router Manager (SRM) firewall functionality incorrect default permissions | 5.9CNA v3.1 | 0.5% | 2024-06-28 | Fix |
| CVE-2024-39307 | Cross-site scripting (XSS) vulnerability via crafted ebooks in Kavita | 3.5CNA v3.1 | 0.5% | 2024-06-28 | |
| CVE-2024-39302 | bigbluebutton some bbb-record-core files installed with wrong file permission | 3.7CNA v3.1 | 0.5% | 2024-06-28 | Fix |
| CVE-2024-38533 | matter-labs era-compiler-vyper ZKsync Era invalid stack addressing conversion | 6.5CNA v3.1 | 0.3% | 2024-06-28 | Fix |
| CVE-2024-38532 | usbarmory mxs-dcp TEST_KEY used in example dcp_tool reference implementation | 7.1CNA v3.1 | 0.2% | 2024-06-28 | |
| CVE-2024-38531 | NixOS Nix build sandbox vulnerability | 3.6CNA v3.1 | 0.1% | 2024-06-28 | Fix |
| CVE-2024-38528 | Unlimited number of NTS-KE connections can crash ntpd-rs server | 7.5CNA v3.1 | 0.7% | 2024-06-28 | Fix |
| CVE-2024-38525 | dd-trace-cpp malformed unicode header values may cause crash | 7.5CNA v3.1 | 0.4% | 2024-06-28 | Fix |
| CVE-2024-38522 | scidsg hushline CSP bypass in Hush Line | 6.3CNA v3.1 | 0.3% | 2024-06-28 | Fix |
| CVE-2024-38521 | Persistent cross-site scripting (XSS) in Hushline inbox | 8.8CNA v3.1 | 0.4% | 2024-06-28 | Fix |
| CVE-2024-38518 | bigbluebutton bbb-web API additional parameters considered | 4.6CNA v3.1 | 0.3% | 2024-06-28 | Fix |
| CVE-2024-38514 | ChatGPT-Next-Web NextChat server-side request forgery (SSRF) | 7.4CNA v3.1 | 2.2% | 2024-06-28 | NucleiFix |
| CVE-2024-38374 | Improper restriction of XML external entity reference in org.CycloneDX:cyclonedx-core-java | 7.5CNA v3.1 | 0.6% | 2024-06-28 | Fix |
| CVE-2024-38371 | Insufficient access control for OAuth2 Device Code flow in authentik | 8.6CNA v3.1 | 0.6% | 2024-06-28 | Fix |
| CVE-2024-38322 | IBM Storage Defender information disclosure | 5.3CNA v3.1 | 0.4% | 2024-06-28 | Fix |
| CVE-2024-37905 | Improper access control and incorrect authorization in github.com/goauthentik/authentik | 8.8CNA v3.1 | 0.8% | 2024-06-28 | Fix |
| CVE-2024-37741 | openplcproject OpenPLC_v3 cross-site scripting | 5.4v3.1 | 0.3% | 2024-06-28 | |
| CVE-2024-37371 | MIT Kerberos 5 out-of-bounds read | 9.1NVD v3.1 | 1.9% | 2024-06-28 | Fix |
| CVE-2024-37370 | MIT Kerberos 5 insufficient verification of data authenticity | 7.5NVD v3.1 | 0.7% | 2024-06-28 | Fix |
| CVE-2024-37282 | Elastic Cloud Enterprise improper authorization | 8.1CNA v3.1 | 0.6% | 2024-06-28 | Fix |
| CVE-2024-37137 | Dell CloudLink information disclosure | 3.8CNA v3.1 | 0.1% | 2024-06-28 | Fix |
| CVE-2024-35156 | IBM MQ information disclosure | 6.5CNA v3.1 | 0.5% | 2024-06-28 | Fix |
| CVE-2024-35155 | IBM MQ information disclosure | 6.5CNA v3.1 | 0.6% | 2024-06-28 | Fix |
| CVE-2024-35139 | IBM Security Access Manager Docker information disclosure | 6.2CNA v3.1 | 0.2% | 2024-06-28 | Fix |
| CVE-2024-35137 | IBM Security Access Manager Docker information disclosure | 6.2CNA v3.1 | 0.3% | 2024-06-28 | Fix |
| CVE-2024-35116 | IBM MQ denial of service | 5.9CNA v3.1 | 0.7% | 2024-06-28 | Fix |
| CVE-2024-31919 | IBM MQ denial of service | 5.9CNA v3.1 | 0.5% | 2024-06-28 | Fix |
| CVE-2024-31912 | IBM MQ privilege escalation | 7.5CNA v3.1 | 0.4% | 2024-06-28 | Fix |
| CVE-2024-30135 | Sensitive information disclosure vulnerability affects DRYiCE AEX v10 | 3.3CNA v3.1 | 0.3% | 2024-06-28 | Fix |
| CVE-2024-30111 | Missing Root Detection vulnerability affects DRYiCE AEX v10 | 3.3CNA v3.1 | 0.3% | 2024-06-28 | Fix |
| CVE-2024-30110 | Lack of input validation vulnerability affects DRYiCE AEX v10 | 3.7CNA v3.1 | 0.5% | 2024-06-28 | Fix |
| CVE-2024-30109 | Lack of clickjacking Protection vulnerability affects DRYiCE AEX v10 | 3.7CNA v3.1 | 0.4% | 2024-06-28 | Fix |
| CVE-2024-29040 | tpm2-software tpm2-tss fapi Verify Quote: Does not detect if quote was not generated by TPM | 4.3CNA v3.1 | 0.3% | 2024-06-28 | Fix |
| CVE-2024-29039 | tpm2-tools tpm2_checkquote vulnerability | 9.1CNA v3.1 | 1.0% | 2024-06-28 | Fix |
| CVE-2024-29038 | tpm2-software tpm2-tools tpm2 does not detect if quote was not generated by TPM | 4.3CNA v3.1 | 0.4% | 2024-06-28 | Fix |
| CVE-2024-27629 | An issue in dc2niix before v.1.0.20240202 allows a local attacker to execute arbitrary code via the generated file name is not properly escaped and injected into a system call when certain types of compression are used. | 7.8CISA ADP v3.1 | 0.2% | 2024-06-28 | Fix |
| CVE-2024-27628 | OFFIS DCMTK buffer overflow | 8.1CISA ADP v3.1 | 0.7% | 2024-06-28 | Fix |
| CVE-2024-25053 | IBM Cognos Analytics improper certificate validation | 5.9CNA v3.1 | 0.3% | 2024-06-28 | Fix |
| CVE-2024-25041 | IBM Cognos Analytics cross-site scripting | 5.4CNA v3.1 | 0.4% | 2024-06-28 | Fix |
| CVE-2024-25031 | IBM Storage Defender information disclosure | 6.5CNA v3.1 | 0.2% | 2024-06-28 | Fix |
| CVE-2024-6403 | Tenda A301 SetOnlineDevName formWifiBasicSet stack-based overflow | 9.8v3.1 | 1.0% | 2024-06-28 | |
| CVE-2024-6402 | Tenda A301 SetOnlineDevName fromSetWirelessRepeat stack-based overflow | 9.8v3.1 | 1.0% | 2024-06-28 | |
| CVE-2024-6296 | Stackable Page Builder Gutenberg Blocks WordPress plugin DOM-based stored cross-site scripting | 6.4CNA v3.1 | 0.5% | 2024-06-28 | Fix |
| CVE-2024-6288 | Conversios WordPress plugin reflected cross-site scripting | 4.7CNA v3.1 | 0.4% | 2024-06-28 | Fix |
| CVE-2024-5925 | Theron Lite WordPress theme stored cross-site scripting | 6.4CNA v3.1 | 0.3% | 2024-06-28 | |
| CVE-2024-5922 | Scylla lite WordPress theme stored cross-site scripting | 6.4CNA v3.1 | 0.3% | 2024-06-28 | |
| CVE-2024-5864 | Easy Affiliate Links WordPress plugin missing authorization authenticated settings reset | 4.3CNA v3.1 | 0.4% | 2024-06-28 | Fix |
| CVE-2024-5863 | Easy Image Collage WordPress plugin missing authorization authenticated data Clearance | 5.4CNA v3.1 | 0.5% | 2024-06-28 | Fix |
| CVE-2024-5827 | Arbitrary file write by prompt injection via DuckDB SQL in vanna-ai/vanna | 9.8CNA v3.0 | 3.4% | 2024-06-28 | Nuclei |
| CVE-2024-5796 | Infinite WordPress theme stored cross-site scripting | 6.4CNA v3.1 | 0.3% | 2024-06-28 | |
| CVE-2024-5788 | Silesia WordPress theme stored cross-site scripting | 6.4CNA v3.1 | 0.3% | 2024-06-28 | |
| CVE-2024-5737 | HTML injection in AdmirorFrames Joomla! extension | 6.1v3.1 | 1.1% | 2024-06-28 | Exploit codeFix |
| CVE-2024-5736 | SSRF in AdmirorFrames Joomla! extension | 7.5v3.1 | 1.2% | 2024-06-28 | Exploit codeFix |
| CVE-2024-5735 | Full path disclosure in AdmirorFrames Joomla! extension | 7.5v3.1 | 1.5% | 2024-06-28 | Exploit codeFix |
| CVE-2024-5730 | Pagerank Tools WordPress plugin reflected XSS | 6.1CISA ADP v3.1 | 0.4% | 2024-06-28 | |
| CVE-2024-5729 | Simple AL Slider WordPress plugin reflected XSS | 6.1CISA ADP v3.1 | 0.5% | 2024-06-28 | |
| CVE-2024-5728 | Animated AL List WordPress plugin reflected XSS | 5.4CISA ADP v3.1 | 0.5% | 2024-06-28 | |
| CVE-2024-5727 | Widget4Call WordPress plugin reflected XSS | 4.7CISA ADP v3.1 | 0.6% | 2024-06-28 | |
| CVE-2024-5712 | CSRF vulnerability in stitionai/Devika | 8.1CNA v3.0 | 0.3% | 2024-06-28 | |
| CVE-2024-5662 | Ultimate Post Kit Addons For Elementor WordPress plugin stored cross-site scripting | 6.4CNA v3.1 | 0.4% | 2024-06-28 | Fix |
| CVE-2024-5570 | Simple Photoswipe WordPress plugin Subscriber+ arbitrary settings update | 6.5CISA ADP v3.1 | 0.5% | 2024-06-28 | |
| CVE-2024-5424 | Gallery Blocks with Lightbox. Image Gallery WordPress plugin stored cross-site scripting | 6.4CNA v3.1 | 0.5% | 2024-06-28 | Fix |
| CVE-2024-3995 | Command injection in Helix ALM | 2.0CNA v4.0 | 0.6% | 2024-06-28 | Fix |
| CVE-2024-3816 | Concept Intermedia S@M CMS search bar SQL injection | 9.8v3.1 | 0.5% | 2024-06-28 | |
| CVE-2024-3801 | Concept Intermedia S@M CMS GET header parameter handling reflected cross-site scripting | 6.1v3.1 | 0.3% | 2024-06-28 | |
| CVE-2024-3800 | Concept Intermedia S@M CMS file name handling reflected cross-site scripting | 6.1v3.1 | 0.3% | 2024-06-28 | |
| CVE-2024-2795 | SEO SIMPLE PACK WordPress plugin information exposure | 5.3CNA v3.1 | 0.5% | 2024-06-28 | Fix |
| CVE-2024-39705 | Ntlk unsafe deserialization | 9.8CISA ADP v3.1 | 1.3% | 2024-06-27 | Fix |
| CVE-2024-39669 | Soffid IAM Sync Server console code injection | 9.8CISA ADP v3.1 | 0.8% | 2024-06-27 | |
| CVE-2024-39376 | Improper access control in TELSAT MarKoni FM Transmitter | 9.8v3.1 | 0.5% | 2024-06-27 | Fix |
| CVE-2024-39375 | marKoni FM transmitter client-side authentication | 9.8v3.1 | 0.6% | 2024-06-27 | Fix |
| CVE-2024-39374 | marKoni FM transmitter hidden admin account hard-coded credentials | 9.8v3.1 | 0.5% | 2024-06-27 | Fix |
| CVE-2024-39373 | Improper neutralization of special elements used in a command in TELSAT marKoni FM Transmitter | 7.2NVD v3.1 | 1.2% | 2024-06-27 | Fix |
| CVE-2024-39209 | luci-app-sms-tool score parameter command injection | 6.3CISA ADP v3.1 | 1.0% | 2024-06-27 | |
| CVE-2024-39208 | luci-app-lucky hard-coded credentials | 9.8CISA ADP v3.1 | 0.6% | 2024-06-27 | |
| CVE-2024-39207 | lua-shmem shmem_write function buffer overflow | 8.2CISA ADP v3.1 | 0.5% | 2024-06-27 | |
| CVE-2024-39158 | idcCMS cross-site request forgery | 8.8CISA ADP v3.1 | 0.3% | 2024-06-27 | |
| CVE-2024-39157 | idcCMS cross-site request forgery | 3.8CISA ADP v3.1 | 0.2% | 2024-06-27 | |
| CVE-2024-39156 | idcCMS cross-site request forgery | 3.8CISA ADP v3.1 | 0.2% | 2024-06-27 | |
| CVE-2024-39155 | idcCMS cross-site request forgery | 6.8CISA ADP v3.1 | 0.2% | 2024-06-27 | |
| CVE-2024-39154 | idcCMS cross-site request forgery | 8.8CISA ADP v3.1 | 0.3% | 2024-06-27 | |
| CVE-2024-39153 | idcCMS cross-site request forgery | 4.7CISA ADP v3.1 | 0.2% | 2024-06-27 | |
| CVE-2024-39134 | gdraheim zziplib stack-based buffer overflow | 7.5CISA ADP v3.1 | 0.6% | 2024-06-27 | Fix |
| CVE-2024-39133 | zziplib heap-based buffer overflow | 4.3CISA ADP v3.1 | 0.5% | 2024-06-27 | Fix |
| CVE-2024-39132 | DumpTS v0.1.0-nightly A null pointer dereference | 6.5CISA ADP v3.1 | 0.4% | 2024-06-27 | |
| CVE-2024-39130 | DumpTS v0.1.0-nightly A null pointer dereference | 7.5CISA ADP v3.1 | 0.5% | 2024-06-27 | |
| CVE-2024-39129 | DumpTS v0.1.0-nightly heap-based buffer overflow | 5.3CISA ADP v3.1 | 0.4% | 2024-06-27 | |
| CVE-2024-38523 | scidsg hushline hush Line OTP issue | 7.5CNA v3.1 | 0.5% | 2024-06-27 | Fix |
| CVE-2024-36755 | D-Link Dir-1950 man-in-the-middle | 6.8CISA ADP v3.1 | 0.1% | 2024-06-27 | |
| CVE-2024-36075 | CoSoSys Endpoint Protector and Unify archive extraction arbitrary code execution | 6.5CISA ADP v3.1 | 0.5% | 2024-06-27 | |
| CVE-2024-36074 | CoSoSys Endpoint Protector and Unify EasyLock dependency retrieval remote code execution | 7.2CISA ADP v3.1 | 0.8% | 2024-06-27 | |
| CVE-2024-36073 | CoSoSys Endpoint Protector and Unify shadowing component remote code execution | 7.2CISA ADP v3.1 | 0.8% | 2024-06-27 | |
| CVE-2024-36072 | CoSoSys Endpoint Protector and Unify logging component remote code execution | 9.8CISA ADP v3.1 | 1.0% | 2024-06-27 | |
| CVE-2024-36059 | Directory Traversal vulnerability in Kalkitech ASE ASE61850 IEDSmart upto and including version 2.3.5 allows attackers to read/write arbitrary files via the IEC61850 File Transfer protocol. | 9.4CISA ADP v3.1 | 0.7% | 2024-06-27 | |
| CVE-2024-35260 | Microsoft Dataverse remote code execution | 8.0CNA v3.1 | 0.8% | 2024-06-27 | Fix |
| CVE-2024-35153 | IBM WebSphere Application Server cross-site scripting | 4.8CNA v3.1 | 0.4% | 2024-06-27 | Fix |
| CVE-2024-31916 | IBM OpenBMC information disclosure | 7.5CNA v3.1 | 0.6% | 2024-06-27 | Fix |
| CVE-2024-31883 | IBM Security Verify Access denial of service | 5.3CNA v3.1 | 0.6% | 2024-06-27 | Fix |
| CVE-2024-31802 | DESIGNA ABACUS payment process vulnerability | 6.3CISA ADP v3.1 | 0.3% | 2024-06-27 | |
| CVE-2024-28820 | Three Rings openvpn-auth-ldap extract_openvpn_cr function buffer overflow | 6.3CISA ADP v3.1 | 0.4% | 2024-06-27 | Fix |
| CVE-2024-24792 | Panic when parsing invalid palette-color images in golang.org/x/image | 7.5CISA ADP v3.1 | 0.7% | 2024-06-27 | Fix |
| CVE-2024-22276 | VMware Cloud Director Object Storage Extension sensitive information in log files | 5.3CNA v3.1 | 0.2% | 2024-06-27 | Fix |
| CVE-2024-22272 | VMware Cloud Director missing authorization | 4.9CNA v3.1 | 0.4% | 2024-06-27 | Fix |
| CVE-2024-22260 | VMware Workspace One UEM information disclosure | 6.8CNA v3.1 | 0.4% | 2024-06-27 | |
| CVE-2024-22232 | Specially crafted URL can be created which leads to a directory traversal in the salt file server | 7.7CNA v3.1 | 0.8% | 2024-06-27 | Fix |
| CVE-2024-22231 | VMware Salt Project syndic cache directory creation is vulnerable to a directory traversal attack | 5.0CNA v3.1 | 0.7% | 2024-06-27 | Fix |
| CVE-2024-6388 | Canonical Ubuntu Advantage Desktop Pro system information disclosure | 5.9CNA v3.1 | 0.1% | 2024-06-27 | Fix |
| CVE-2024-6374 | lahirudanushka School Management System Subject page subject.php cross-site scripting | 5.3CNA v4.0 | 0.3% | 2024-06-27 | |
| CVE-2024-6373 | itsourcecode Online Food Ordering System addproduct.php unrestricted upload | 9.8v3.1 | 0.9% | 2024-06-27 | |
| CVE-2024-6372 | itsourcecode Tailoring Management System customeradd.php SQL injection | 9.8v3.1 | 0.6% | 2024-06-27 | |
| CVE-2024-6371 | itsourcecode Pool of Bethesda Online Reservation System controller.php SQL injection | 9.8v3.1 | 0.7% | 2024-06-27 | |
| CVE-2024-6370 | LabVantage LIMS POST request cross-site scripting | 5.4v3.1 | 0.4% | 2024-06-27 | |
| CVE-2024-6369 | LabVantage LIMS POST request cross-site scripting | 5.4v3.1 | 0.4% | 2024-06-27 | |
| CVE-2024-6368 | LabVantage LIMS POST request cross-site scripting | 5.4v3.1 | 0.4% | 2024-06-27 | |
| CVE-2024-6367 | LabVantage LIMS POST request cross-site scripting | 5.4v3.1 | 0.4% | 2024-06-27 | |
| CVE-2024-6323 | Improper isolation or compartmentalization in GitLab | 7.5CNA v3.1 | 0.5% | 2024-06-27 | Fix |
| CVE-2024-6283 | DethemeKit For Elementor WordPress plugin stored cross-site scripting | 5.4CNA v3.1 | 0.3% | 2024-06-27 | Fix |
| CVE-2024-6262 | Portfolio Gallery Image Gallery WordPress plugin DOM-based stored cross-site scripting | 6.4CNA v3.1 | 0.3% | 2024-06-27 | Fix |
| CVE-2024-6250 | Absolute path traversal in parisneo/lollms-webui | 7.5CNA v3.0 | 1.9% | 2024-06-27 | Nuclei |
| CVE-2024-6139 | Path traversal in parisneo/lollms | 7.3CNA v3.0 | 0.5% | 2024-06-27 | |
| CVE-2024-6127 | BC Security Empire path traversal RCE | 9.8CNA v3.1 | 10.3% | 2024-06-27 | MetasploitExploit codeFix |
| CVE-2024-6090 | Path traversal vulnerability in gaizhenbiao/ChuanhuChatGPT | 7.5CNA v3.0 | 0.9% | 2024-06-27 | Fix |
| CVE-2024-6086 | Improper access control in lunary-ai/Lunary | 4.3v3.1 | 0.4% | 2024-06-27 | Fix |
| CVE-2024-6085 | Path traversal in parisneo/lollms | 8.6CNA v3.0 | 0.6% | 2024-06-27 | |
| CVE-2024-6071 | PTC Creo Elements/Direct License Server missing authorization | 10.0CNA v4.0 | 1.1% | 2024-06-27 | Fix |
| CVE-2024-6054 | Auto Featured Image WordPress plugin authenticated (Contributor+) arbitrary file upload | 8.8v3.1 | 0.8% | 2024-06-27 | |
| CVE-2024-6038 | ReDoS vulnerability in gaizhenbiao/ChuanhuChatGPT | 7.5CNA v3.0 | 0.7% | 2024-06-27 | Fix |
| CVE-2024-5980 | Arbitrary file write via /v1/runs API endpoint in lightning-ai/pytorch-lightning | 9.8v3.1 | 1.3% | 2024-06-27 | Fix |
| CVE-2024-5979 | Denial of service via Invalid argument in h2oai/h2o-3 | 7.5CNA v3.0 | 0.8% | 2024-06-27 | Fix |
| CVE-2024-5936 | Open redirect in imartinez/PrivateGPT | 6.1v3.1 | 30.1% | 2024-06-27 | Nuclei |
| CVE-2024-5935 | CSRF vulnerability in imartinez/PrivateGPT | 5.4v3.1 | 0.2% | 2024-06-27 | |
| CVE-2024-5933 | Cross-site scripting (XSS) in parisneo/lollms-webui | 5.4v3.1 | 0.4% | 2024-06-27 | |
| CVE-2024-5885 | Server-side request forgery (SSRF) in stangirard/Quivr | 8.6v3.1 | 0.6% | 2024-06-27 | |
| CVE-2024-5826 | Remote code execution via prompt injection in vanna-ai/vanna | 9.8CNA v3.0 | 0.9% | 2024-06-27 | |
| CVE-2024-5824 | Path traversal in parisneo/lollms | 7.4CNA v3.0 | 0.4% | 2024-06-27 | Fix |
| CVE-2024-5822 | Server-side request forgery (SSRF) in gaizhenbiao/ChuanhuChatGPT | 9.8v3.1 | 0.5% | 2024-06-27 | |
| CVE-2024-5820 | stitionai Devika WebSocket connection missing authorization | 8.8v3.1 | 0.8% | 2024-06-27 | |
| CVE-2024-5755 | Email Validation Bypass in lunary-ai/Lunary | 5.3v3.1 | 0.3% | 2024-06-27 | |
| CVE-2024-5751 | Remote code execution in BerriAI/LiteLLM | 9.8v3.1 | 0.9% | 2024-06-27 | Fix |
| CVE-2024-5714 | Improper access control in lunary-ai/Lunary | 6.8NVD v3.1 | 0.5% | 2024-06-27 | Fix |
| CVE-2024-5710 | Improper access control in Team Management in BerriAI/LiteLLM | 6.5v3.1 | 0.4% | 2024-06-27 | Fix |
| CVE-2024-5655 | Improper access control in GitLab | 9.6CNA v3.1 | 7.5% | 2024-06-27 | Fix |
| CVE-2024-5642 | Python CPython buffer overread when using an empty list with SSLContext.set_npn_protocols | 6.5CISA ADP v3.1 | 0.7% | 2024-06-27 | Fix |
| CVE-2024-5601 | Create by Mediavine WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.3% | 2024-06-27 | Fix |
| CVE-2024-5548 | Directory traversal in stitionai/Devika | 7.5CNA v3.0 | 1.0% | 2024-06-27 | |
| CVE-2024-5547 | Directory traversal in stitionai/Devika | 7.5CNA v3.0 | 1.0% | 2024-06-27 | |
| CVE-2024-5535 | OpenSSL SSL_select_next_proto buffer overread | 9.1CISA ADP v3.1 | 5.6% | 2024-06-27 | Exploit codeFix |
| CVE-2024-5430 | Improper access control in GitLab | 6.8CNA v3.1 | 0.5% | 2024-06-27 | Fix |
| CVE-2024-5334 | Local File Read in stitionai/Devika | 7.5CNA v3.0 | 2.1% | 2024-06-27 | Nuclei |
| CVE-2024-5289 | Gutenberg Blocks with AI by Kadence WP WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.3% | 2024-06-27 | Fix |
| CVE-2024-4983 | The Plus Addons for Elementor WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.4% | 2024-06-27 | Fix |
| CVE-2024-4901 | Improper neutralization of input during web page generation (cross-site scripting) in GitLab | 8.7CNA v3.1 | 33.0% | 2024-06-27 | Fix |
| CVE-2024-4704 | Contact Form 7 WordPress plugin unauthenticated open redirect | 6.1NVD v3.1 | 0.4% | 2024-06-27 | Fix |
| CVE-2024-4664 | WP Chat App WordPress plugin Admin+ stored XSS | 4.8NVD v3.1 | 0.4% | 2024-06-27 | Fix |
| CVE-2024-4578 | Privilege escalation in Arista Wireless Access Points | 8.4CNA v3.1 | 0.5% | 2024-06-27 | |
| CVE-2024-4570 | Elementor Addon Elements WordPress plugin authenticated (Contributor+) stored cross-site scripting | 5.4v3.1 | 0.3% | 2024-06-27 | Fix |
| CVE-2024-4569 | Elementor Addon Elements WordPress plugin authenticated (Contributor+) stored cross-site scripting | 5.4v3.1 | 0.4% | 2024-06-27 | Fix |
| CVE-2024-4557 | Uncontrolled resource consumption in GitLab | 6.5CNA v3.1 | 0.5% | 2024-06-27 | Fix |
| CVE-2024-4395 | Jamf Compliance Editor XPC helper service privilege escalation | 7.3CNA v4.0 | 0.2% | 2024-06-27 | Fix |
| CVE-2024-4011 | Improper access control in GitLab | 3.1CNA v3.1 | 0.3% | 2024-06-27 | Fix |
| CVE-2024-3959 | Improper authorization in GitLab | 6.5CNA v3.1 | 0.5% | 2024-06-27 | Fix |
| CVE-2024-3331 | Spotfire: NTLM token leakage | 6.8CNA v3.1 | 0.4% | 2024-06-27 | |
| CVE-2024-3330 | Spotfire remote code execution | 9.9CNA v3.1 | 0.6% | 2024-06-27 | Fix |
| CVE-2024-3115 | Exposure of sensitive information to an unauthorized actor in GitLab | 4.3CNA v3.1 | 0.3% | 2024-06-27 | Fix |
| CVE-2024-3111 | H5P WordPress plugin Contributor+ stored XSS | 5.4NVD v3.1 | 0.3% | 2024-06-27 | Fix |
| CVE-2024-3043 | silabs.com Ember ZNet SDK zigbee co-ordinator realignment packet may lead to denial of service | 7.5CNA v3.1 | 0.5% | 2024-06-27 | Fix |
| CVE-2024-3017 | silabs.com SiSDK denial of service in multi-protocol gateway Zigbee + Thread | 6.5CNA v3.1 | 0.3% | 2024-06-27 | Fix |
| CVE-2024-2973 | Session Smart Router(SSR): On redundant router deployments API authentication can be bypassed | 10.0CNA v4.0 | 1.1% | 2024-06-27 | Fix |
| CVE-2024-2882 | Missing authorization in SDG Technologies PnPSCADA | 9.3CNA v4.0 | 0.7% | 2024-06-27 | Fix |
| CVE-2024-2191 | Improper access control in GitLab | 5.3CNA v3.1 | 0.4% | 2024-06-27 | Fix |
| CVE-2024-1816 | Uncontrolled resource consumption in GitLab | 5.3CNA v3.1 | 0.3% | 2024-06-27 | Fix |
| CVE-2024-1493 | Uncontrolled resource consumption in GitLab | 6.5CNA v3.1 | 0.5% | 2024-06-27 | Fix |
| CVE-2024-1330 | Kadence Blocks Pro WordPress plugin Contributor+ arbitrary option access | 4.3NVD v3.1 | 0.4% | 2024-06-27 | Fix |
| CVE-2024-1153 | SQL injection vulnerability in Talya Informatics' Travel APPS | 4.6v3.1 | 0.3% | 2024-06-27 | Fix |
| CVE-2024-1107 | IDOR in Talya Informatics' Travel APPS | 9.8v3.1 | 0.5% | 2024-06-27 | Fix |
| CVE-2024-0949 | Improper access control in Talya Informatics' Elektraweb | 9.8CNA v3.1 | 0.5% | 2024-06-27 | Fix |
| CVE-2024-0947 | Talya Informatics Elektraweb cookie reliance without validation | 9.8CNA v3.1 | 0.5% | 2024-06-27 | Fix |
| CVE-2024-39460 | Bitbucket OAuth access token exposed in the build log by Bitbucket Branch Source Plugin | 4.3CISA ADP v3.1 | 0.5% | 2024-06-26 | Fix |
| CVE-2024-39459 | Secret file credentials stored unencrypted in rare cases by Plain Credentials Plugin | 4.3CISA ADP v3.1 | 0.4% | 2024-06-26 | Fix |
| CVE-2024-39458 | Exposure of secrets through system log in Jenkins Structs Plugin | 3.1CISA ADP v3.1 | 0.4% | 2024-06-26 | Fix |
| CVE-2024-39243 | SkyCaiji special element injection | 9.8CISA ADP v3.1 | 0.5% | 2024-06-26 | |
| CVE-2024-39242 | SkyCaiji cross-site scripting | 6.1v3.1 | 0.3% | 2024-06-26 | |
| CVE-2024-39241 | SkyCaiji cross-site scripting | 6.1v3.1 | 0.3% | 2024-06-26 | |
| CVE-2024-38950 | struktur libde265 heap-based buffer overflow | 6.5CISA ADP v3.1 | 0.5% | 2024-06-26 | Fix |
| CVE-2024-38949 | struktur libde265 heap-based buffer overflow | 6.5CISA ADP v3.1 | 0.4% | 2024-06-26 | Fix |
| CVE-2024-38527 | mermaid-js zenuml-core cross-site scripting in ZenUML | 5.4CNA v3.1 | 0.4% | 2024-06-26 | Fix |
| CVE-2024-38526 | pdoc embeds link to malicious CDN if math mode is enabled | 0.0CNA v3.1 | 3.8% | 2024-06-26 | NucleiFix |
| CVE-2024-38520 | SoftEther VPN L2TP denial of service | 5.3CNA v3.1 | 0.5% | 2024-06-26 | |
| CVE-2024-38375 | @Fastly/js-compute use-after-free in some host call implementations | 5.3CNA v3.1 | 0.3% | 2024-06-26 | Fix |
| CVE-2024-38364 | DSpace cross-site scripting (XSS) via a deposited HTML/XML document | 2.6CNA v3.1 | 0.4% | 2024-06-26 | Fix |
| CVE-2024-38272 | Google Nearby Auth Bypass in Quick Share | 7.1CNA v4.0 | 0.2% | 2024-06-26 | KCVFix |
| CVE-2024-38271 | Google Nearby denial of service in Quick Share | 5.9CNA v4.0 | 0.2% | 2024-06-26 | KCVFix |
| CVE-2024-37734 | openemr privilege escalation | 9.8CISA ADP v3.1 | 0.8% | 2024-06-26 | |
| CVE-2024-37571 | SAS Broker buffer overflow | 4.3CISA ADP v3.1 | 0.4% | 2024-06-26 | |
| CVE-2024-37252 | Email Subscribers by Icegram Express WordPress plugin SQL injection | 9.3CNA v3.1 | 0.5% | 2024-06-26 | Fix |
| CVE-2024-37248 | Anima WordPress theme cross-site scripting (XSS) | 6.5CNA v3.1 | 0.3% | 2024-06-26 | Fix |
| CVE-2024-37247 | jQuery T(-) Countdown Widget WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.2% | 2024-06-26 | |
| CVE-2024-37141 | Dell PowerProtect DD open redirect | 3.5CNA v3.1 | 0.3% | 2024-06-26 | Fix |
| CVE-2024-37140 | Dell PowerProtect DD OS command injection | 8.8CNA v3.1 | 1.2% | 2024-06-26 | Fix |
| CVE-2024-37139 | Dell PowerProtect DD improper resource control | 6.5CNA v3.1 | 0.5% | 2024-06-26 | Fix |
| CVE-2024-37138 | Dell PowerProtect DD relative path traversal | 4.1CNA v3.1 | 0.4% | 2024-06-26 | Fix |
| CVE-2024-37098 | BlossomThemes Email Newsletter WordPress plugin server side request forgery (SSRF) | 9.8v3.1 | 0.3% | 2024-06-26 | Fix |
| CVE-2024-36829 | Teldat M1 information disclosure | 7.5CISA ADP v3.1 | 0.4% | 2024-06-26 | |
| CVE-2024-35545 | Map-os cross-site scripting | 6.1CISA ADP v3.1 | 0.3% | 2024-06-26 | |
| CVE-2024-34581 | W3C XML Signature Syntax and Processing specification server-side request forgery | 7.3CISA ADP v3.1 | 0.2% | 2024-06-26 | |
| CVE-2024-34580 | Apache XML Security for C++ KeyInfo element handling server-side request forgery | 5.3CISA ADP v3.1 | 0.2% | 2024-06-26 | |
| CVE-2024-33329 | Lumisxp hard-coded credentials | 7.5CISA ADP v3.1 | 0.7% | 2024-06-26 | |
| CVE-2024-33328 | Lumisxp main.jsp cross-site scripting | 6.1CISA ADP v3.1 | 0.4% | 2024-06-26 | |
| CVE-2024-33327 | Lumisxp UrlAccessibilityEvaluation.jsp cross-site scripting | 6.1CISA ADP v3.1 | 0.4% | 2024-06-26 | |
| CVE-2024-33326 | Lumisxp XsltResultControllerHtml.jsp cross-site scripting | 6.1CISA ADP v3.1 | 0.8% | 2024-06-26 | Nuclei |
| CVE-2024-29954 | Brocade Fabric OS password management API prints sensitive information in log files | 5.9CNA v3.1 | 0.1% | 2024-06-26 | Fix |
| CVE-2024-29953 | Encoded session passwords on session storage for Virtual Fabric platforms | 4.3CNA v3.1 | 0.3% | 2024-06-26 | Fix |
| CVE-2024-29177 | Dell PowerProtect DD sensitive information in log files | 2.7CNA v3.1 | 0.3% | 2024-06-26 | Fix |
| CVE-2024-29176 | Dell PowerProtect DD out-of-bounds write | 8.8CNA v3.1 | 0.6% | 2024-06-26 | Fix |
| CVE-2024-29175 | Dell PowerProtect DD weak cryptographic algorithm | 5.9CNA v3.1 | 0.3% | 2024-06-26 | Fix |
| CVE-2024-29174 | Dell PowerProtect DD SQL injection | 4.4CNA v3.1 | 0.2% | 2024-06-26 | Fix |
| CVE-2024-29173 | Dell PowerProtect DD server-side request forgery | 6.8CNA v3.1 | 0.3% | 2024-06-26 | Fix |
| CVE-2024-28984 | Hitachi Vantara Pentaho Business Analytics Server Analyzer plugin cross-site scripting | 6.1NVD v3.1 | 0.3% | 2024-06-26 | Fix |
| CVE-2024-28983 | Hitachi Vantara Pentaho Business Analytics Server Analyzer plugin cross-site scripting | 6.1NVD v3.1 | 0.3% | 2024-06-26 | Fix |
| CVE-2024-28982 | Hitachi Vantara Pentaho Business Analytics Server ACL service endpoint XML external entity injection | 8.2v3.1 | 0.4% | 2024-06-26 | Fix |
| CVE-2024-28973 | Dell PowerProtect DD cross-site scripting | 5.9CNA v3.1 | 0.2% | 2024-06-26 | Fix |
| CVE-2024-28830 | Checkmk automation user secrets written to audit log | 2.7CNA v3.1 | 0.3% | 2024-06-26 | Fix |
| CVE-2024-27867 | Apple AirPods improper authentication | 4.3v3.1 | 0.8% | 2024-06-26 | Fix |
| CVE-2024-25637 | octobercms october reflected XSS via X-October-Request-Handler header | 3.1CNA v3.1 | 0.3% | 2024-06-26 | Fix |
| CVE-2024-24764 | October open redirect for Administrator Accounts | 3.5CNA v3.1 | 0.3% | 2024-06-26 | Fix |
| CVE-2024-23767 | HMS Anybus X-Gateway AB7832-F HICP protocol improper authentication | 8.8CISA ADP v3.1 | 0.4% | 2024-06-26 | |
| CVE-2024-23766 | HMS Anybus X-Gateway AB7832-F web interface reboot endpoint denial of service | 7.5CISA ADP v3.1 | 0.4% | 2024-06-26 | |
| CVE-2024-23765 | HMS Anybus X-Gateway AB7832-F network service on port 7412 denial of service | 4.0CISA ADP v3.1 | 0.2% | 2024-06-26 | |
| CVE-2024-21520 | Django REST Framework cross-site scripting in djangorestframework | 5.3CNA v4.0 | 1.1% | 2024-06-26 | Fix |
| CVE-2024-6355 | Genexis Tilgin Fiber Home Gateway HG1522 cross-site scripting | 6.9CNA v4.0 | 0.4% | 2024-06-26 | |
| CVE-2024-6354 | Devolutions Remote Desktop Manager PAM dashboard improper access control | 7.2CISA ADP v3.1 | 0.8% | 2024-06-26 | Fix |
| CVE-2024-6344 | ZKTeco ZKBio CVSecurity V5000 Push Configuration Section cross-site scripting | 4.8CNA v4.0 | 0.4% | 2024-06-26 | |
| CVE-2024-5573 | Easy Table of Contents WordPress plugin Admin+ stored XSS | 5.9CISA ADP v3.1 | 0.3% | 2024-06-26 | Fix |
| CVE-2024-5473 | Simple Photoswipe WordPress plugin Admin+ stored XSS | 4.0CISA ADP v3.1 | 0.3% | 2024-06-26 | |
| CVE-2024-5460 | Brocade Fabric OS versions have default community strings | 8.1CNA v3.1 | 0.5% | 2024-06-26 | Fix |
| CVE-2024-5332 | Exclusive Addons for Elementor WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.3% | 2024-06-26 | Fix |
| CVE-2024-5215 | HT Mega Absolute Addons For Elementor WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.4% | 2024-06-26 | Fix |
| CVE-2024-5199 | Spotify Play Button WordPress plugin Contributor+ stored XSS | 5.4NVD v3.1 | 0.4% | 2024-06-26 | |
| CVE-2024-5181 | Command injection in mudler/LocalAI | 9.8CNA v3.0 | 2.7% | 2024-06-26 | Fix |
| CVE-2024-5173 | HT Mega Absolute Addons For Elementor WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.3% | 2024-06-26 | Fix |
| CVE-2024-5169 | Video Widget WordPress plugin Admin+ stored XSS via widget | 4.8NVD v3.1 | 0.4% | 2024-06-26 | |
| CVE-2024-5071 | Bookster WordPress plugin unauthenticated Appointment Status update | 6.5CISA ADP v3.1 | 0.4% | 2024-06-26 | Fix |
| CVE-2024-4959 | Frontend Checklist WordPress plugin Admin+ stored XSS via Items | 4.8CISA ADP v3.1 | 0.3% | 2024-06-26 | |
| CVE-2024-4957 | Frontend Checklist WordPress plugin Admin+ stored XSS | 4.3CISA ADP v3.1 | 0.3% | 2024-06-26 | |
| CVE-2024-4869 | WP Cookie Consent WordPress plugin unauthenticated stored cross-site scripting | 6.1NVD v3.1 | 0.4% | 2024-06-26 | Fix |
| CVE-2024-4758 | Muslim Prayer Time BD WordPress plugin settings reset via CSRF | 7.6CISA ADP v3.1 | 0.3% | 2024-06-26 | Fix |
| CVE-2024-4604 | Open redirect in Magarsus Consultancy's SSO | 6.1CNA v3.1 | 0.2% | 2024-06-26 | Fix |
| CVE-2024-4228 | SQLi in Magarsus Consultancy's SSO | 9.8CNA v3.1 | 0.5% | 2024-06-26 | Fix |
| CVE-2024-4106 | A vulnerability has been found in FAST/TOOLS and CI Server. The affected products have built-in accounts with no passwords set. Therefore, if the product is operated without a password set by default, an attacker can break into the affected product. The affected products and versions are as follows: | 5.3CNA v3.1 | 0.4% | 2024-06-26 | Fix |
| CVE-2024-4105 | Yokogawa Electric FAST/TOOLS cross-site scripting | 5.8CNA v3.1 | 0.5% | 2024-06-26 | Fix |
| CVE-2024-3633 | WebP and SVG Support WordPress plugin Author+ stored XSS via SVG | 5.4CISA ADP v3.1 | 0.3% | 2024-06-26 | |
| CVE-2024-1839 | Intrado 911 Emergency Gateway (EGW) SQL injection | 10.0CNA v4.0 | 0.5% | 2024-06-26 | Fix |
| CVE-2024-39471 | Linux kernel amdgpu SDMA interrupt handling out-of-bounds read | 7.8CNA v3.1 | 0.2% | 2024-06-25 | Fix |
| CVE-2024-39470 | Linux kernel eventfs events lookup null pointer dereference | 5.5v3.1 | 0.2% | 2024-06-25 | Fix |
| CVE-2024-39469 | Linux kernel nilfs2 directory check denial of service | 7.1CNA v3.1 | 0.3% | 2024-06-25 | Fix |
| CVE-2024-39468 | Linux kernel smb client deadlock | 7.5CNA v3.1 | 0.5% | 2024-06-25 | Fix |
| CVE-2024-39467 | Linux kernel F2FS node manager out-of-bounds read | 7.8CNA v3.1 | 0.2% | 2024-06-25 | Fix |
| CVE-2024-39466 | Linux kernel qcom LMh thermal driver null pointer dereference | 5.5v3.1 | 0.2% | 2024-06-25 | Fix |
| CVE-2024-39465 | Linux kernel mgb4 debugfs interface denial of service | 5.5v3.1 | 0.2% | 2024-06-25 | Fix |
| CVE-2024-39464 | Linux kernel V4L2 async notifier null pointer dereference | 5.5v3.1 | 0.2% | 2024-06-25 | Fix |
| CVE-2024-39463 | Linux kernel 9p dentry fid list use-after-free | 7.8CNA v3.1 | 0.3% | 2024-06-25 | Fix |
| CVE-2024-39462 | Linux kernel BCM DVP clock driver vulnerability | 9.8CISA ADP v3.1 | 0.8% | 2024-06-25 | Fix |
| CVE-2024-39461 | Linux kernel rpi improper array index validation | 5.5v3.1 | 0.2% | 2024-06-25 | Fix |
| CVE-2024-39371 | Linux kernel io_uring buffer selection null pointer dereference | 5.5v3.1 | 0.2% | 2024-06-25 | Fix |
| CVE-2024-39301 | Linux kernel 9p client RPC improper initialization | 5.5v3.1 | 0.2% | 2024-06-25 | Fix |
| CVE-2024-39298 | Linux kernel memory failure handler denial of service | 5.5v3.1 | 0.2% | 2024-06-25 | Fix |
| CVE-2024-39296 | Linux kernel bonding driver debugfs cleanup null pointer dereference | 4.7v3.1 | 0.2% | 2024-06-25 | Fix |
| CVE-2024-39293 | Linux kernel AF_XDP socket redirect race condition | 9.8CNA v3.1 | 0.3% | 2024-06-25 | Fix |
| CVE-2024-39276 | Linux kernel ext4 extended attribute cache vulnerability | 5.5CISA ADP v3.1 | 0.2% | 2024-06-25 | Fix |
| CVE-2024-38952 | Dronecode PX4 Drone Autopilot buffer overflow | 7.5CISA ADP v3.1 | 0.7% | 2024-06-25 | |
| CVE-2024-38951 | Dronecode PX4 Drone Autopilot PX4-Autopilot v1.12.3 buffer overflow | 6.5CISA ADP v3.1 | 0.5% | 2024-06-25 | |
| CVE-2024-38661 | Linux kernel s390 AP driver integer overflow | 5.5v3.1 | 0.3% | 2024-06-25 | Fix |
| CVE-2024-38516 | Aimeos HTML client may potentially reveal sensitive information in error log | 8.8CNA v3.1 | 0.5% | 2024-06-25 | Fix |
| CVE-2024-38385 | Linux kernel IRQ descriptor lookup use-after-free | 7.8CNA v3.1 | 0.2% | 2024-06-25 | Fix |
| CVE-2024-38306 | Linux kernel Btrfs extent buffer allocation race condition | 7.8CNA v3.1 | 0.1% | 2024-06-25 | Fix |
| CVE-2024-37894 | Squid vulnerable to heap corruption in ESI assign | 6.3CNA v3.1 | 6.3% | 2024-06-25 | Fix |
| CVE-2024-37855 | Nepstech NTPL-Xpon1GFEVN Wifi router Telnet service vulnerability | 8.4CISA ADP v3.1 | 0.5% | 2024-06-25 | |
| CVE-2024-37843 | Craft CMS SQL injection vulnerability via the GraphQL API endpoint | 9.8v3.1 | 53.2% | 2024-06-25 | NucleiExploit code |
| CVE-2024-37820 | PingCAP TiDB nil pointer dereference | 5.4CISA ADP v3.1 | 0.4% | 2024-06-25 | Fix |
| CVE-2024-37742 | Safe Exam Browser kiosk mode clipboard sharing improper access control | 8.2CISA ADP v3.1 | 0.5% | 2024-06-25 | Exploit code |
| CVE-2024-37354 | Linux kernel Btrfs filesystem race condition | 7.8CNA v3.1 | 0.2% | 2024-06-25 | Fix |
| CVE-2024-37167 | Tuleap has improper permissions of the backlog items | 4.3CNA v3.1 | 0.4% | 2024-06-25 | Fix |
| CVE-2024-37087 | vCenter Server incorrect permission assignment | 5.3CNA v3.1 | 0.7% | 2024-06-25 | Fix |
| CVE-2024-37086 | ESXi out-of-bounds read | 6.8CNA v3.1 | 0.2% | 2024-06-25 | Fix |
| CVE-2024-37085 | VMware ESXi authentication bypass | 6.8CNA v3.1 | 26.8% | 2024-06-25 | KEVExploit codeKCVFix |
| CVE-2024-37078 | Linux kernel nilfs2 file system vulnerability | 7.8CNA v3.1 | 0.3% | 2024-06-25 | Fix |
| CVE-2024-37007 | Multiple ZDI vulnerabilities in Autodesk AutoCAD and certain AutoCAD-based products | 7.8CNA v3.1 | 0.4% | 2024-06-25 | Fix |
| CVE-2024-37006 | Autodesk AutoCAD CC5Dll.dll out-of-bounds write | 7.8CNA v3.1 | 0.4% | 2024-06-25 | Fix |
| CVE-2024-37005 | Autodesk AutoCAD pskernel.dll X_B file parsing out-of-bounds read | 7.8CNA v3.1 | 0.4% | 2024-06-25 | Fix |
| CVE-2024-37004 | Autodesk AutoCAD ASMKERN229A.dll SLDPRT file parsing use-after-free | 7.8CNA v3.1 | 0.4% | 2024-06-25 | Fix |
| CVE-2024-37003 | Autodesk AutoCAD DWG and SLDPRT file parsing stack-based buffer overflow | 7.8CNA v3.1 | 0.3% | 2024-06-25 | Fix |
| CVE-2024-37002 | Autodesk AutoCAD uninitialized variable use | 7.8CNA v3.1 | 0.4% | 2024-06-25 | Fix |
| CVE-2024-37001 | Autodesk AutoCAD opennurbs.dll 3DM file parsing heap-based buffer overflow | 7.8CNA v3.1 | 0.4% | 2024-06-25 | Fix |
| CVE-2024-37000 | Autodesk AutoCAD pskernel.dll X_B file parsing out-of-bounds write | 7.8CNA v3.1 | 0.4% | 2024-06-25 | Fix |
| CVE-2024-36999 | Multiple ZDI vulnerabilities in Autodesk AutoCAD and certain AutoCAD-based products | 7.8CNA v3.1 | 0.4% | 2024-06-25 | Fix |
| CVE-2024-36819 | Map-os cross-site scripting | 5.4CISA ADP v3.1 | 0.3% | 2024-06-25 | |
| CVE-2024-35527 | Daemon PTY Limited FarCry Core framework file upload feature unrestricted file upload | 9.8CISA ADP v3.1 | 0.7% | 2024-06-25 | |
| CVE-2024-35526 | Daemon PTY Limited FarCry Core framework facade directory information disclosure | 5.9CISA ADP v3.1 | 0.2% | 2024-06-25 | |
| CVE-2024-34400 | An issue was discovered in VirtoSoftware Virto Kanban Board Web Part before 5.3.5.1 for SharePoint 2019. There is /_layouts/15/Virto.KanbanTaskManager/api/KanbanData.ashx LinkTitle2 XSS. | 6.1CISA ADP v3.1 | 0.3% | 2024-06-25 | |
| CVE-2024-34142 | Adobe Experience Manager cross-site scripting (stored XSS) | 5.4CNA v3.1 | 0.3% | 2024-06-25 | Fix |
| CVE-2024-34141 | Adobe Experience Manager cross-site scripting (stored XSS) | 5.4CNA v3.1 | 0.3% | 2024-06-25 | Fix |
| CVE-2024-32855 | Dell CPG BIOS out-of-bounds write | 3.8CNA v3.1 | 0.1% | 2024-06-25 | Fix |
| CVE-2024-32111 | Automattic WordPress path traversal | 5.0CNA v3.1 | 0.5% | 2024-06-25 | Fix |
| CVE-2024-31111 | Automattic WordPress stored cross-site scripting | 6.5CNA v3.1 | 0.3% | 2024-06-25 | Fix |
| CVE-2024-30931 | Emby Media Server notifications.html stored cross-site scripting | 6.1CISA ADP v3.1 | 0.3% | 2024-06-25 | |
| CVE-2024-30112 | HCL Connections is vulnerable to a cross-site scripting (XSS) | 5.4CNA v3.1 | 0.3% | 2024-06-25 | Fix |
| CVE-2024-28832 | Checkmk XSS in crash Report page | 4.8CNA v3.1 | 0.3% | 2024-06-25 | Fix |
| CVE-2024-28831 | Checkmk XSS in confirmation pop-up | 5.4CNA v3.1 | 0.3% | 2024-06-25 | Fix |
| CVE-2024-23159 | Multiple ZDI vulnerabilities in Autodesk AutoCAD and certain AutoCAD-based products | 7.8CNA v3.1 | 0.3% | 2024-06-25 | Fix |
| CVE-2024-23158 | Multiple ZDI vulnerabilities in Autodesk AutoCAD and certain AutoCAD-based products | 7.8CNA v3.1 | 0.4% | 2024-06-25 | Fix |
| CVE-2024-23157 | Multiple ZDI vulnerabilities in Autodesk AutoCAD and certain AutoCAD-based products | 7.8CNA v3.1 | 0.4% | 2024-06-25 | Fix |
| CVE-2024-23156 | Multiple ZDI vulnerabilities in Autodesk AutoCAD and certain AutoCAD-based products | 7.8CNA v3.1 | 0.4% | 2024-06-25 | Fix |
| CVE-2024-23155 | Multiple ZDI vulnerabilities in Autodesk AutoCAD and certain AutoCAD-based products | 7.8CNA v3.1 | 0.4% | 2024-06-25 | Fix |
| CVE-2024-23154 | Multiple ZDI vulnerabilities in Autodesk AutoCAD and certain AutoCAD-based products | 7.8CNA v3.1 | 0.4% | 2024-06-25 | Fix |
| CVE-2024-23153 | Multiple ZDI vulnerabilities in Autodesk AutoCAD and certain AutoCAD-based products | 7.8CNA v3.1 | 0.4% | 2024-06-25 | Fix |
| CVE-2024-23152 | Multiple ZDI vulnerabilities in Autodesk AutoCAD and certain AutoCAD-based products | 7.8CNA v3.1 | 0.4% | 2024-06-25 | Fix |
| CVE-2024-23151 | Multiple ZDI vulnerabilities in Autodesk AutoCAD and certain AutoCAD-based products | 7.8CNA v3.1 | 0.4% | 2024-06-25 | Fix |
| CVE-2024-23150 | Multiple ZDI vulnerabilities in Autodesk AutoCAD and certain AutoCAD-based products | 7.8CNA v3.1 | 0.4% | 2024-06-25 | Fix |
| CVE-2024-23149 | Autodesk AutoCAD SLDDRW file parser out-of-bounds read | 7.8CNA v3.1 | 0.4% | 2024-06-25 | Fix |
| CVE-2024-23148 | Autodesk AutoCAD CATPRODUCT file parser out-of-bounds write | 7.8CNA v3.1 | 0.3% | 2024-06-25 | Fix |
| CVE-2024-23147 | Autodesk AutoCAD CATPART, X_B and STEP file parser out-of-bounds write | 7.8CNA v3.1 | 0.4% | 2024-06-25 | Fix |
| CVE-2024-23146 | Autodesk AutoCAD X_B and X_T file parser out-of-bounds write | 7.8CNA v3.1 | 0.4% | 2024-06-25 | Fix |
| CVE-2024-23145 | Autodesk AutoCAD PRT file parser out-of-bounds read | 7.8CNA v3.1 | 0.4% | 2024-06-25 | Fix |
| CVE-2024-23144 | Autodesk AutoCAD CATPART file parser out-of-bounds write | 7.8CNA v3.1 | 0.4% | 2024-06-25 | Fix |
| CVE-2024-23143 | Autodesk AutoCAD 3DM, MODEL and X_B file parser out-of-bounds read | 7.8CNA v3.1 | 0.4% | 2024-06-25 | Fix |
| CVE-2024-23142 | Autodesk AutoCAD CATPART, STP and MODEL file parser use-after-free | 7.8CNA v3.1 | 0.4% | 2024-06-25 | Fix |
| CVE-2024-23141 | Autodesk AutoCAD MODEL file parser double free | 7.8CNA v3.1 | 0.4% | 2024-06-25 | Fix |
| CVE-2024-23140 | Autodesk AutoCAD 3DM and MODEL file parser out-of-bounds read | 7.8CNA v3.1 | 0.4% | 2024-06-25 | Fix |
| CVE-2024-22385 | File and Directory Permission vulnerability in Hitachi Storage Provider for VMware vCenter | 4.4CNA v3.1 | 0.1% | 2024-06-25 | |
| CVE-2024-21827 | TP-Link ER7206 Omada Gigabit VPN Router active debug code | 7.2CNA v3.1 | 0.9% | 2024-06-25 | |
| CVE-2024-21741 | GigaDevice GD32E103C8T6 devices have Incorrect Access Control. | 9.8CISA ADP v3.1 | 0.4% | 2024-06-25 | |
| CVE-2024-21740 | Artery AT32F415CBT7 and AT32F421C8T7 devices have Incorrect Access Control. | 7.4CISA ADP v3.1 | 0.1% | 2024-06-25 | |
| CVE-2024-21739 | Geehy APM32F103CCT6, APM32F103RCT6, APM32F103RCT7, and APM32F103VCT6 devices have Incorrect Access Control. | 5.3CISA ADP v3.1 | 0.3% | 2024-06-25 | |
| CVE-2024-6308 | itsourcecode Simple Online Hotel Reservation System index.php SQL injection | 9.8v3.1 | 0.7% | 2024-06-25 | |
| CVE-2024-6307 | WordPress Core authenticated (Contributor+) stored cross-site scripting via HTML API | 6.4CNA v3.1 | 0.5% | 2024-06-25 | Fix |
| CVE-2024-6303 | Missing authorization in Conduit | 9.9CNA v3.1 | 0.4% | 2024-06-25 | Fix |
| CVE-2024-6302 | Improper handling of insufficient permissions or privileges in Conduit | 8.1CNA v3.1 | 0.3% | 2024-06-25 | Fix |
| CVE-2024-6301 | Origin validation error in Conduit | 5.3CNA v3.1 | 0.2% | 2024-06-25 | Fix |
| CVE-2024-6300 | Incomplete cleanup in Conduit | 3.7CNA v3.1 | 0.3% | 2024-06-25 | Fix |
| CVE-2024-6299 | Conduit signature validation vulnerability | 4.8CNA v3.1 | 0.2% | 2024-06-25 | Fix |
| CVE-2024-6297 | Several plugins for WordPress hosted on WordPress.org have been compromised and injected with malicious PHP scripts. A malicious threat actor compromised the source code of various plugins and injected code that exfiltrates database credentials and is used to create new, malicious, administrator use | 10.0CNA v3.1 | 1.0% | 2024-06-25 | Fix |
| CVE-2024-6295 | udn News App Insecure Data Storage | 3.9CNA v3.1 | 0.2% | 2024-06-25 | Fix |
| CVE-2024-6294 | udn News App sensitive information exposure | 3.9CNA v3.1 | 0.2% | 2024-06-25 | Fix |
| CVE-2024-6257 | HashiCorp go-getter vulnerable to code execution on Git Update via Git Config Manipulation | 8.4CNA v3.1 | 1.0% | 2024-06-25 | Fix |
| CVE-2024-6238 | pgAdmin 4 installation directory permission issue | 7.4CNA v3.1 | 0.2% | 2024-06-25 | Fix |
| CVE-2024-6206 | HPE Athonet Mobile Core code injection | 7.5CNA v3.1 | 0.4% | 2024-06-25 | |
| CVE-2024-6060 | Phloc Webscopes information disclosure | 9.3CNA v4.0 | 0.2% | 2024-06-25 | |
| CVE-2024-6028 | Quiz Maker WordPress plugin unauthenticated SQL injection via ays_questions parameter | 9.8CNA v3.1 | 11.8% | 2024-06-25 | NucleiExploit codeFix |
| CVE-2024-5990 | ThinManager® ThinServer™ improper input validation | 8.7CNA v4.0 | 2.3% | 2024-06-25 | Fix |
| CVE-2024-5989 | Rockwell Automation ThinManager® ThinServer™ improper input validation | 9.3CNA v4.0 | 2.4% | 2024-06-25 | Fix |
| CVE-2024-5988 | Rockwell Automation ThinManager® ThinServer™ improper input validation | 9.3CNA v4.0 | 2.7% | 2024-06-25 | Fix |
| CVE-2024-5806 | MOVEit Transfer authentication bypass | 9.1CNA v3.1 | 81.5% | 2024-06-25 | MetasploitEmerging ThreatsExploit codeFix |
| CVE-2024-5805 | MOVEit Gateway authentication bypass | 9.1CNA v3.1 | 6.8% | 2024-06-25 | Fix |
| CVE-2024-5451 | The7 Website and eCommerce Builder for WordPress theme stored cross-site scripting | 6.4CNA v3.1 | 0.3% | 2024-06-25 | Fix |
| CVE-2024-5431 | WPCafe WordPress plugin local file inclusion | 8.8CNA v3.1 | 0.6% | 2024-06-25 | Fix |
| CVE-2024-5276 | SQL injection vulnerability in FileCatalyst Workflow Build 135 (and earlier) | 9.8CNA v3.1 | 90.1% | 2024-06-25 | NucleiEmerging ThreatsFix |
| CVE-2024-5261 | The Document Foundation LibreOffice improper certificate validation | 10.0CNA v4.0 | 0.4% | 2024-06-25 | Fix |
| CVE-2024-5216 | Denial of service in mintplex-labs/anything-llm | 7.5CNA v3.0 | 0.6% | 2024-06-25 | Fix |
| CVE-2024-5019 | WhatsUp Gold LoadCSSUsingBasePath directory traversal information disclosure | 5.3CNA v3.1 | 0.8% | 2024-06-25 | Fix |
| CVE-2024-5018 | WhatsUp Gold LoadUsingBasePath directory traversal information disclosure | 5.3CNA v3.1 | 0.8% | 2024-06-25 | Fix |
| CVE-2024-5017 | WhatsUp Gold AppProfileImport path traversal | 6.5CNA v3.1 | 1.6% | 2024-06-25 | Fix |
| CVE-2024-5016 | WhatsUp Gold OnMessage deserialization of untrusted data remote code execution | 7.2CNA v3.1 | 22.4% | 2024-06-25 | Fix |
| CVE-2024-5015 | WhatsUp Gold SessionControler server-side request forgery information disclosure | 7.1CNA v3.1 | 0.5% | 2024-06-25 | Fix |
| CVE-2024-5014 | WhatsUp Gold GetASPReport server-side request forgery information disclosure | 7.1CNA v3.1 | 0.5% | 2024-06-25 | Fix |
| CVE-2024-5013 | WhatsUp Gold InstallController denial of service | 7.5CNA v3.1 | 0.8% | 2024-06-25 | Fix |
| CVE-2024-5012 | WhatsUp Gold missing authentication GetWindowsCredential information disclosure | 8.6CNA v3.1 | 0.4% | 2024-06-25 | Fix |
| CVE-2024-5011 | WhatsUp Gold TestController Chart denial of service | 7.5CNA v3.1 | 47.1% | 2024-06-25 | Fix |
| CVE-2024-5010 | WhatsUp Gold TestController multiple information disclosure | 7.5CNA v3.1 | 70.0% | 2024-06-25 | Fix |
| CVE-2024-5009 | WhatsUp Gold SetAdminPassword improper access control privilege escalation | 8.4CNA v3.1 | 17.4% | 2024-06-25 | Emerging ThreatsExploit codeFix |
| CVE-2024-5008 | WhatsUp Gold APM unrestricted file upload remote code execution | 8.8CNA v3.1 | 17.3% | 2024-06-25 | Fix |
| CVE-2024-4885 | Progress WhatsUp Gold path traversal | 9.8CNA v3.1 | 99.3% | 2024-06-25 | KEVNucleiEmerging ThreatsExploit codeFix |
| CVE-2024-4884 | WhatsUp Gold CommunityController unrestricted file upload remote code execution | 9.8CNA v3.1 | 24.3% | 2024-06-25 | Fix |
| CVE-2024-4883 | WhatsUp Gold WriteDataFile directory traversal remote code execution | 9.8CNA v3.1 | 64.5% | 2024-06-25 | Emerging ThreatsExploit codeFix |
| CVE-2024-4846 | Devolutions Server the authentication bypass | 6.3CISA ADP v3.1 | 0.4% | 2024-06-25 | Fix |
| CVE-2024-4759 | Mime Types Extended WordPress plugin Author+ stored XSS via SVG upload | 5.5CISA ADP v3.1 | 0.4% | 2024-06-25 | |
| CVE-2024-4757 | Logo Manager For Enamad WordPress plugin stored XSS via CSRF | 8.1CISA ADP v3.1 | 0.5% | 2024-06-25 | Fix |
| CVE-2024-4641 | OnCell G3470A-LTE Series: Authenticated format string Errors | 6.3CNA v3.1 | 0.3% | 2024-06-25 | Fix |
| CVE-2024-4640 | OnCell G3470A-LTE Series: Authenticated command injection via sendTestEmail | 7.1CNA v3.1 | 0.4% | 2024-06-25 | Fix |
| CVE-2024-4639 | OnCell G3470A-LTE Series: Authenticated command injection via webDelIPSec | 7.1CNA v3.1 | 0.4% | 2024-06-25 | Fix |
| CVE-2024-4638 | OnCell G3470A-LTE Series: Authenticated command injection via webUploadKey | 7.1CNA v3.1 | 0.4% | 2024-06-25 | Fix |
| CVE-2024-4498 | Path traversal and RFI vulnerability in parisneo/lollms-webui | 7.7CNA v3.0 | 0.5% | 2024-06-25 | |
| CVE-2024-4197 | Avaya IP Office One-X portal file upload | 9.9CNA v3.1 | 0.8% | 2024-06-25 | Fix |
| CVE-2024-4196 | Avaya IP Office Web Control RCE | 10.0CNA v3.1 | 0.6% | 2024-06-25 | Fix |
| CVE-2024-3249 | Zita Elementor Site Library WordPress plugin unauthorized access | 4.3CNA v3.1 | 0.3% | 2024-06-25 | Fix |
| CVE-2024-0171 | Dell PowerEdge Platform time-of-check time-of-use race condition | 5.3CNA v3.1 | 0.1% | 2024-06-25 | Fix |
| CVE-2024-39337 | Click Studios Passwordstate Core authentication bypass | 6.5CISA ADP v3.1 | 0.3% | 2024-06-24 | |
| CVE-2024-39292 | Linux kernel um kernel panic | 7.8CNA v3.1 | 0.2% | 2024-06-24 | Fix |
| CVE-2024-39291 | Linux kernel amdgpu GFX microcode loader buffer overflow | 7.8v3.1 | 0.2% | 2024-06-24 | Fix |
| CVE-2024-38903 | H3C Magic R230 command injection | 4.1CISA ADP v3.1 | 0.4% | 2024-06-24 | |
| CVE-2024-38902 | H3C Magic R230 hard-coded password | 9.8CISA ADP v3.1 | 0.5% | 2024-06-24 | |
| CVE-2024-38897 | WAVLINK WN551K1 information disclosure through data queries | 5.3CISA ADP v3.1 | 0.4% | 2024-06-24 | |
| CVE-2024-38896 | WAVLINK WN551K1 command injection | 5.3CISA ADP v3.1 | 1.2% | 2024-06-24 | |
| CVE-2024-38895 | WAVLINK WN551K1 information disclosure through data queries | 5.3CISA ADP v3.1 | 0.4% | 2024-06-24 | |
| CVE-2024-38894 | WAVLINK WN551K1 command injection | 5.3CISA ADP v3.1 | 1.2% | 2024-06-24 | |
| CVE-2024-38892 | WAVLINK WN551K1 information disclosure through data queries | 6.5CISA ADP v3.1 | 0.4% | 2024-06-24 | |
| CVE-2024-38667 | Linux kernel RISC-V secondary hart boot out-of-bounds write | 7.8v3.1 | 0.2% | 2024-06-24 | Fix |
| CVE-2024-38664 | Linux kernel zynqmp_dpsub improper locking | 7.8v3.1 | 0.2% | 2024-06-24 | Fix |
| CVE-2024-38663 | Linux kernel blk-cgroup I/O stat reset vulnerability | 7.8CNA v3.1 | 0.3% | 2024-06-24 | Fix |
| CVE-2024-38384 | Linux kernel blk-cgroup resource exhaustion | 7.8CNA v3.1 | 0.2% | 2024-06-24 | Fix |
| CVE-2024-38373 | FreeRTOS-Plus-TCP buffer over-read in DNS Response parser | 9.6CNA v3.1 | 0.6% | 2024-06-24 | Fix |
| CVE-2024-38369 | XWiki programming rights may be inherited by inclusion | 10.0CNA v3.1 | 0.3% | 2024-06-24 | Fix |
| CVE-2024-37825 | EnvisionWare Computer Access and Reservation Control SelfCheck path traversal | 5.4CISA ADP v3.1 | 0.4% | 2024-06-24 | |
| CVE-2024-37759 | DataGear Data Viewing interface vulnerability | 9.8CISA ADP v3.1 | 2.8% | 2024-06-24 | Exploit code |
| CVE-2024-37732 | Anchor CMS cross-site scripting | 6.1NVD v3.1 | 16.6% | 2024-06-24 | |
| CVE-2024-37681 | Shanxi Internet Chuangxiang Technology background management system index.html denial of service | 6.5CISA ADP v3.1 | 0.5% | 2024-06-24 | |
| CVE-2024-37680 | Finesoft cross-site scripting | 6.1v3.1 | 0.4% | 2024-06-24 | |
| CVE-2024-37679 | Finesoft Hangzhou Meisoft Information Technology Co cross-site scripting | 6.1v3.1 | 0.4% | 2024-06-24 | |
| CVE-2024-37678 | Finesoft Hangzhou Meisoft Information Technology Co cross-site scripting | 5.3CISA ADP v3.1 | 0.3% | 2024-06-24 | |
| CVE-2024-37677 | Access Management Specialist information disclosure | 7.5v3.1 | 0.5% | 2024-06-24 | |
| CVE-2024-37233 | Play.ht WordPress plugin broken access control | 4.3CNA v3.1 | 0.4% | 2024-06-24 | |
| CVE-2024-37231 | Salon booking system WordPress plugin arbitrary file deletion | 9.1v3.1 | 0.6% | 2024-06-24 | Fix |
| CVE-2024-37228 | InstaWP Connect WordPress plugin arbitrary file upload | 9.8v3.1 | 0.5% | 2024-06-24 | Fix |
| CVE-2024-37111 | WishList Member X WordPress plugin unauthenticated denial of service Attack | 7.5v3.1 | 0.5% | 2024-06-24 | Fix |
| CVE-2024-37109 | WishList Member X WordPress plugin authenticated arbitrary PHP code execution | 8.8NVD v3.1 | 0.5% | 2024-06-24 | Fix |
| CVE-2024-37107 | WishList Member X WordPress plugin authenticated privilege escalation | 8.8v3.1 | 0.4% | 2024-06-24 | Fix |
| CVE-2024-37092 | Consulting Elementor Widgets WordPress plugin local file inclusion | 8.8v3.1 | 0.5% | 2024-06-24 | Fix |
| CVE-2024-37091 | Consulting Elementor Widgets WordPress plugin remote code execution (RCE) | 8.8NVD v3.1 | 1.2% | 2024-06-24 | Fix |
| CVE-2024-37089 | Consulting Elementor Widgets WordPress plugin unauthenticated local file inclusion | 9.8v3.1 | 0.6% | 2024-06-24 | Fix |
| CVE-2024-37026 | Linux kernel Xe GPU driver deadlock | 5.5v3.1 | 0.2% | 2024-06-24 | Fix |
| CVE-2024-37021 | Linux kernel FPGA manager null pointer dereference | 5.5v3.1 | 0.2% | 2024-06-24 | Fix |
| CVE-2024-36683 | module "Products Alert" SQL injection | 7.3CISA ADP v3.1 | 1.0% | 2024-06-24 | Nuclei |
| CVE-2024-36682 | Promokit.eu Theme settings maintenance mode email log personal information exposure | 7.5CISA ADP v3.1 | 0.4% | 2024-06-24 | |
| CVE-2024-36681 | module "Isotope" SQL injection | 9.8CISA ADP v3.1 | 0.5% | 2024-06-24 | |
| CVE-2024-36497 | Faronics WINSelect (Standard + Enterprise) Unhashed Storage of Password | 9.1CISA ADP v3.1 | 0.5% | 2024-06-24 | Fix |
| CVE-2024-36496 | Faronics WINSelect (Standard + Enterprise) hard-coded credentials | 7.5CISA ADP v3.1 | 0.7% | 2024-06-24 | Fix |
| CVE-2024-36495 | Faronics WINSelect (Standard + Enterprise) Read/Write Permissions for Everyone on Configuration file | 7.7CISA ADP v3.1 | 0.3% | 2024-06-24 | Fix |
| CVE-2024-36479 | Linux kernel FPGA bridge driver null pointer dereference | 5.5v3.1 | 0.2% | 2024-06-24 | Fix |
| CVE-2024-36038 | ManageEngine OpManager stored XSS | 6.3CNA v3.1 | 1.4% | 2024-06-24 | Fix |
| CVE-2024-35247 | Linux kernel FPGA region driver null pointer dereference | 5.5v3.1 | 0.2% | 2024-06-24 | Fix |
| CVE-2024-34992 | FME Modules PrestaShop Help desk module SQL injection | 8.8CISA ADP v3.1 | 0.4% | 2024-06-24 | |
| CVE-2024-34991 | Quadra Informatique PrestaShop Axepta module information disclosure | 7.5CISA ADP v3.1 | 0.4% | 2024-06-24 | |
| CVE-2024-34988 | SQL injection vulnerability in the module "Complete for Create a Quote in Frontend + Backend Pro" (askforaquotemodul) <= 1.0.51 from Buy Addons for PrestaShop allows attackers to view sensitive information and cause other impacts via methods `AskforaquotemodulcustomernewquoteModuleFrontController::r | 9.8CISA ADP v3.1 | 0.4% | 2024-06-24 | |
| CVE-2024-34313 | VPL Jail System path traversal | 9.8CISA ADP v3.1 | 1.5% | 2024-06-24 | Exploit code |
| CVE-2024-34312 | Moodle Virtual Programming Lab cross-site scripting | 6.1v3.1 | 0.8% | 2024-06-24 | Exploit code |
| CVE-2024-34030 | Linux kernel PCI of_property interrupt map null pointer dereference | 4.7CISA ADP v3.1 | 0.2% | 2024-06-24 | Fix |
| CVE-2024-34027 | Linux kernel f2fs compression race condition | 7.8CNA v3.1 | 0.2% | 2024-06-24 | Fix |
| CVE-2024-33898 | Axiros AXESS Auto Configuration Server authorization bypass | 9.8CISA ADP v3.1 | 0.7% | 2024-06-24 | |
| CVE-2024-33881 | Microsoft SharePoint path traversal | 5.3NVD v3.1 | 0.5% | 2024-06-24 | |
| CVE-2024-33880 | Microsoft SharePoint information disclosure | 5.3v3.1 | 0.3% | 2024-06-24 | |
| CVE-2024-33879 | Microsoft SharePoint path traversal | 9.8v3.1 | 0.6% | 2024-06-24 | |
| CVE-2024-33847 | Linux kernel f2fs compression vulnerability | 7.1CNA v3.1 | 0.2% | 2024-06-24 | Fix |
| CVE-2024-33687 | OMRON NJ Series CPU Unit insufficient verification of data authenticity | 7.5v3.1 | 0.2% | 2024-06-24 | Fix |
| CVE-2024-33278 | ASUS router RT-AX88U buffer overflow | 9.8CISA ADP v3.1 | 0.8% | 2024-06-24 | |
| CVE-2024-32936 | Linux kernel j721e-csi2rx camera driver race condition | 7.8CNA v3.1 | 0.1% | 2024-06-24 | Fix |
| CVE-2024-29868 | Apache StreamPipes weak random number generator | 9.1CISA ADP v3.1 | 6.0% | 2024-06-24 | NucleiExploit codeFix |
| CVE-2024-27136 | Apache JSPWiki: Cross-site scripting vulnerability on upload page | 6.1v3.1 | 60.8% | 2024-06-24 | Fix |
| CVE-2024-24554 | Bludit Insecure Token Generation | 8.2v3.1 | 0.2% | 2024-06-24 | |
| CVE-2024-24553 | Bludit uses SHA1 as Password Hashing Algorithm | 7.5v3.1 | 0.2% | 2024-06-24 | |
| CVE-2024-24552 | Bludit is vulnerable to session fixation | 8.8v3.1 | 0.4% | 2024-06-24 | |
| CVE-2024-24551 | Bludit remote code execution (RCE) through Image API | 8.8v3.1 | 0.8% | 2024-06-24 | |
| CVE-2024-24550 | Bludit remote code execution (RCE) through File API | 8.1v3.1 | 0.7% | 2024-06-24 | |
| CVE-2024-22168 | Cross-site scripting (XSS) vulnerability on Western Digital My Cloud and SanDisk ibi Web Apps | 5.9CNA v4.0 | 0.3% | 2024-06-24 | Fix |
| CVE-2024-6293 | Google Chrome Dawn use-after-free | 8.8v3.1 | 0.6% | 2024-06-24 | Fix |
| CVE-2024-6292 | Google Chrome Dawn use-after-free | 8.8v3.1 | 0.6% | 2024-06-24 | Fix |
| CVE-2024-6291 | Google Chrome Swiftshader use-after-free | 8.8v3.1 | 0.7% | 2024-06-24 | Fix |
| CVE-2024-6290 | Google Chrome Dawn use-after-free | 8.8v3.1 | 0.6% | 2024-06-24 | Fix |
| CVE-2024-6287 | Renesas rcar_gen3_v2.5 Incorrect Address Range Calculations | 7.8v3.1 | 0.2% | 2024-06-24 | |
| CVE-2024-6285 | Integer underflow in Memory Range Check in Renesas RCAR | 6.7NVD v3.1 | 0.2% | 2024-06-24 | |
| CVE-2024-6280 | SourceCodester Simple Online Bidding System unrestricted upload | 9.8v3.1 | 0.7% | 2024-06-24 | |
| CVE-2024-6279 | lahirudanushka School Management System Exam results page examresults-par.php SQL injection | 8.8v3.1 | 0.5% | 2024-06-24 | |
| CVE-2024-6278 | lahirudanushka School Management System Subject page subject.php SQL injection | 8.8v3.1 | 0.6% | 2024-06-24 | |
| CVE-2024-6277 | lahirudanushka School Management System Student page student.php SQL injection | 8.8v3.1 | 0.6% | 2024-06-24 | |
| CVE-2024-6276 | lahirudanushka School Management System Teacher page teacher.php SQL injection | 8.8v3.1 | 0.6% | 2024-06-24 | |
| CVE-2024-6275 | lahirudanushka School Management System Parent page parent.php SQL injection | 8.8v3.1 | 0.6% | 2024-06-24 | |
| CVE-2024-6274 | lahirudanushka School Management System Attendance Report page attendancelist.php SQL injection | 8.8v3.1 | 0.5% | 2024-06-24 | |
| CVE-2024-6160 | SQL injection in MegaBIP | 9.3CNA v4.0 | 0.5% | 2024-06-24 | |
| CVE-2024-6104 | HashiCorp Shared library go-retryablehttp can leak basic auth credentials to log files | 6.0CNA v3.1 | 0.4% | 2024-06-24 | Fix |
| CVE-2024-5862 | User Enumeration in Mia Technology's Mia-Med Health Aplication | 7.5CNA v3.1 | 0.5% | 2024-06-24 | Fix |
| CVE-2024-5683 | Remote code execution in Next4Biz's BPM | 9.8CNA v3.1 | 0.5% | 2024-06-24 | Fix |
| CVE-2024-4900 | SEOPress WordPress plugin Contributor+ open redirect | 6.1CISA ADP v3.1 | 0.3% | 2024-06-24 | Fix |
| CVE-2024-4899 | SEOPress WordPress plugin Contributor+ stored XSS | 5.0CISA ADP v3.1 | 0.3% | 2024-06-24 | Fix |
| CVE-2024-4839 | CSRF in Servers Configurations in parisneo/lollms-webui | 3.3NVD v3.1 | 0.2% | 2024-06-24 | |
| CVE-2024-4754 | Stored XSS in Next4Biz's BPM | 5.4CNA v3.1 | 0.2% | 2024-06-24 | Fix |
| CVE-2024-4748 | J11G CRUDDIY command injection | 7.8v3.1 | 1.1% | 2024-06-24 | |
| CVE-2024-4499 | CSRF vulnerability in parisneo/Lollms XTTS Server | 6.3NVD v3.1 | 0.2% | 2024-06-24 | |
| CVE-2024-3264 | Broken or risky cryptographic algorithm in Mia Technology's Mia-Med Health Aplication | 5.3CNA v3.1 | 0.2% | 2024-06-24 | Fix |
| CVE-2024-3121 | Remote code execution in create_conda_env function in parisneo/Lollms | 3.3NVD v3.1 | 0.4% | 2024-06-24 | Exploit code |
| CVE-2024-39334 | mendelson AS4 client deserialization of untrusted data | 6.5CISA ADP v3.1 | 0.4% | 2024-06-23 | |
| CVE-2024-39331 | GNU Emacs code injection | 9.8CISA ADP v3.1 | 1.3% | 2024-06-23 | Fix |
| CVE-2024-6273 | SourceCodester Clinic Queuing System patient_side.php save_patient cross-site scripting | 6.1v3.1 | 0.6% | 2024-06-23 | |
| CVE-2024-6269 | Ruijie RG-UAC HTTP POST request sxh_vpnlic.php get_ip.addr_details command injection | 7.2v3.1 | 20.6% | 2024-06-23 | |
| CVE-2024-6268 | lahirudanushka School Management System Login page login.php SQL injection | 9.8v3.1 | 0.6% | 2024-06-23 | |
| CVE-2024-6267 | SourceCodester Service Provider Management System System Info page index.php cross-site scripting | 4.8v3.1 | 0.5% | 2024-06-23 | |
| CVE-2024-6266 | Pear Admin Boot loadDictItem SQL injection | 9.8v3.1 | 0.5% | 2024-06-23 | |
| CVE-2024-4841 | Path traversal in parisneo/lollms-webui | 3.3NVD v3.1 | 0.7% | 2024-06-23 | Nuclei |
| CVE-2024-38379 | Apache Allura: Stored authenticated XSS | 4.8v3.1 | 0.7% | 2024-06-22 | Fix |
| CVE-2024-38319 | IBM Security Soar code execution | 7.5CNA v3.1 | 0.5% | 2024-06-22 | Fix |
| CVE-2024-21519 | Arbitrary file creation in OpenCart | 7.2v3.1 | 0.7% | 2024-06-22 | |
| CVE-2024-21518 | opencart/opencart path traversal | 7.2v3.1 | 14.1% | 2024-06-22 | |
| CVE-2024-21517 | Cross-site scripting in OpenCart | 6.1v3.1 | 0.4% | 2024-06-22 | |
| CVE-2024-21516 | Cross-site scripting in OpenCart | 4.7v3.1 | 0.4% | 2024-06-22 | Fix |
| CVE-2024-21515 | Cross-site scripting in OpenCart | 4.7v3.1 | 0.4% | 2024-06-22 | |
| CVE-2024-21514 | SQL injection in OpenCart | 8.1v3.1 | 19.1% | 2024-06-22 | Exploit code |
| CVE-2024-6253 | itsourcecode Online Food Ordering System purchase.php SQL injection | 9.8v3.1 | 0.6% | 2024-06-22 | |
| CVE-2024-6252 | Zorlan SkyCaiji Task cross-site scripting | 6.1v3.1 | 0.4% | 2024-06-22 | |
| CVE-2024-6251 | playSMS New Phonebook cross-site scripting | 6.1v3.1 | 0.4% | 2024-06-22 | |
| CVE-2024-6120 | Sparkle Demo Importer demo data import functions missing authorization | 6.5CNA v3.1 | 0.5% | 2024-06-22 | Fix |
| CVE-2024-5966 | Grey Opaque WordPress theme stored cross-site scripting | 5.4v3.1 | 0.3% | 2024-06-22 | |
| CVE-2024-5965 | Mosaic WordPress theme authenticated (Contributor+) stored cross-site scripting via Button shortcode | 5.4v3.1 | 0.3% | 2024-06-22 | |
| CVE-2024-5791 | vcita Online Booking and Scheduling Calendar processAction function stored cross-site scripting | 6.1NVD v3.1 | 0.3% | 2024-06-22 | Fix |
| CVE-2024-5596 | ARMember Premium WordPress plugin cross-site request forgery via multiple functions | 6.3CNA v3.1 | 0.2% | 2024-06-22 | Fix |
| CVE-2024-5443 | Remote code execution via path traversal in parisneo/lollms | 9.8CNA v3.0 | 1.2% | 2024-06-22 | Fix |
| CVE-2024-5346 | Flatsome Multi-Purpose Responsive WooCommerce WordPress theme stored cross-site scripting | 5.4v3.1 | 0.3% | 2024-06-22 | Fix |
| CVE-2024-4940 | Open redirect in gradio-app/Gradio | 6.1v3.1 | 1.0% | 2024-06-22 | Nuclei |
| CVE-2024-4874 | Bricks Builder WordPress plugin insecure direct object reference | 4.3v3.1 | 0.3% | 2024-06-22 | Fix |
| CVE-2024-4313 | Table Addons for Elementor WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.3% | 2024-06-22 | Fix |
| CVE-2024-3593 | UberMenu WordPress plugin cross-site request forgery to settings reset | 5.4NVD v3.1 | 0.2% | 2024-06-22 | Fix |
| CVE-2024-2484 | Orbit Fox by ThemeIsle WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.4% | 2024-06-22 | Fix |
| CVE-2024-39277 | Linux kernel DMA mapping benchmark out-of-bounds read | 7.8v3.1 | 0.2% | 2024-06-21 | Fix |
| CVE-2024-38874 | Events2 TYPO3 extension insecure direct object reference (IDOR) | 5.4CNA v3.1 | 0.3% | 2024-06-21 | Fix |
| CVE-2024-38873 | FriendlyCaptcha plugin for TYPO3 Captcha Check Bypass | 5.3CNA v3.1 | 0.6% | 2024-06-21 | Fix |
| CVE-2024-38780 | Linux kernel dma-buf sw-sync driver improper locking | 5.5NVD v3.1 | 0.2% | 2024-06-21 | Fix |
| CVE-2024-38662 | Linux kernel BPF sockmap verifier vulnerability | 4.7NVD v3.1 | 0.2% | 2024-06-21 | Fix |
| CVE-2024-38659 | Linux kernel enic Ethernet driver vulnerability | 7.3CNA v3.1 | 0.2% | 2024-06-21 | Fix |
| CVE-2024-38637 | Linux kernel Greybus lights driver null pointer dereference | 5.5v3.1 | 0.2% | 2024-06-21 | Fix |
| CVE-2024-38636 | Linux kernel F2FS multi-device support vulnerability | 5.5v3.1 | 0.2% | 2024-06-21 | Fix |
| CVE-2024-38635 | Linux kernel Cadence SoundWire driver out-of-bounds read | 7.8CNA v3.1 | 0.2% | 2024-06-21 | Fix |
| CVE-2024-38634 | Linux kernel MAX3100 serial driver vulnerability | 5.5v3.1 | 0.2% | 2024-06-21 | Fix |
| CVE-2024-38633 | Linux kernel MAX3100 serial driver null pointer dereference | 5.5v3.1 | 0.2% | 2024-06-21 | Fix |
| CVE-2024-38632 | Linux kernel VFIO PCI driver memory leak | 5.5v3.1 | 0.2% | 2024-06-21 | Fix |
| CVE-2024-38631 | Linux kernel PAC1934 ADC driver vulnerability | 7.8v3.1 | 0.2% | 2024-06-21 | Fix |
| CVE-2024-38630 | Linux kernel cpu5wdt watchdog driver use-after-free | 7.8v3.1 | 0.3% | 2024-06-21 | Fix |
| CVE-2024-38629 | Linux kernel idxd driver use-after-free | 7.8v3.1 | 0.2% | 2024-06-21 | Fix |
| CVE-2024-38628 | Linux kernel USB gadget audio driver race condition | 7.8CNA v3.1 | 0.2% | 2024-06-21 | Fix |
| CVE-2024-38627 | Linux kernel STM class driver double free | 7.8v3.1 | 0.3% | 2024-06-21 | Fix |
| CVE-2024-38626 | Linux kernel FUSE filesystem vulnerability | 7.8CNA v3.1 | 0.2% | 2024-06-21 | Fix |
| CVE-2024-38625 | Linux kernel NTFS3 filesystem null pointer dereference | 5.5v3.1 | 0.2% | 2024-06-21 | Fix |
| CVE-2024-38624 | Linux kernel NTFS3 file system integer overflow | 5.5v3.1 | 0.2% | 2024-06-21 | Fix |
| CVE-2024-38623 | Linux kernel NTFS3 file system label handling vulnerability | 7.8CNA v3.1 | 0.5% | 2024-06-21 | Fix |
| CVE-2024-38622 | Linux kernel DPU display driver null pointer dereference | 5.5v3.1 | 0.2% | 2024-06-21 | Fix |
| CVE-2024-38621 | Linux kernel stk1160 USB video capture driver out-of-bounds write | 7.1NVD v3.1 | 0.3% | 2024-06-21 | Fix |
| CVE-2024-38390 | Linux kernel MSM a6xx GPU driver null pointer dereference | 5.5v3.1 | 0.2% | 2024-06-21 | Fix |
| CVE-2024-38388 | Linux kernel hda/cs_dsp_ctl memory leak | 7.8CNA v3.1 | 0.2% | 2024-06-21 | Fix |
| CVE-2024-38381 | Linux kernel NFC NCI receive worker vulnerability | 8.8CNA v3.1 | 0.4% | 2024-06-21 | Fix |
| CVE-2024-37675 | Tessi Docubase cross-site scripting | 5.4v3.1 | 0.5% | 2024-06-21 | |
| CVE-2024-37673 | Tessi Docubase cross-site scripting | 5.4v3.1 | 0.5% | 2024-06-21 | |
| CVE-2024-37672 | Tessi Docubase cross-site scripting | 5.4v3.1 | 0.5% | 2024-06-21 | |
| CVE-2024-37671 | Tessi Docubase cross-site scripting | 5.4v3.1 | 0.5% | 2024-06-21 | |
| CVE-2024-37654 | An issue in BAS-IP AV-01D, AV-01MD, AV-01MFD, AV-01ED, AV-01KD, AV-01BD, AV-01KBD, AV-02D, AV-02IDE, AV-02IDR, AV-02IPD, AV-02FDE, AV-02FDR, AV-03D, AV-03BD, AV-04AFD, AV-04ASD, AV-04FD, AV-04SD, AV-05FD, AV-05SD, AA-07BD, AA-07BDI, BA-04BD, BA-04MD, BA-08BD, BA-08MD, BA-12BD, BA-12MD, CR-02BD befor | 6.1CISA ADP v3.1 | 0.2% | 2024-06-21 | |
| CVE-2024-37356 | Linux kernel tcp integer overflow | 5.5NVD v3.1 | 0.2% | 2024-06-21 | Fix |
| CVE-2024-37230 | Book Landing Page WordPress theme cross-site request forgery (CSRF) | 8.8v3.1 | 0.2% | 2024-06-21 | Fix |
| CVE-2024-37227 | Newsletters WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.2% | 2024-06-21 | Fix |
| CVE-2024-37212 | AliExpress Dropshipping with AliNext Lite WordPress plugin CSRF to PHP object injection | 8.8v3.1 | 0.2% | 2024-06-21 | Fix |
| CVE-2024-37198 | Digital Newspaper WordPress theme cross-site request forgery (CSRF) | 8.8v3.1 | 0.2% | 2024-06-21 | Fix |
| CVE-2024-37118 | Uncanny Automator Pro WordPress plugin cross-site request forgery Leading to License settings reset | 8.8v3.1 | 0.2% | 2024-06-21 | Fix |
| CVE-2024-36532 | kruise v1.6.2 insecure permissions | 10.0CISA ADP v3.1 | 0.5% | 2024-06-21 | |
| CVE-2024-36489 | Linux kernel tls null pointer dereference | 5.5NVD v3.1 | 0.3% | 2024-06-21 | Fix |
| CVE-2024-36484 | Linux kernel TCP socket accept path vulnerability | 5.5NVD v3.1 | 0.3% | 2024-06-21 | Fix |
| CVE-2024-36481 | Linux kernel tracing probes BTF field parser vulnerability | 5.5v3.1 | 0.2% | 2024-06-21 | Fix |
| CVE-2024-36478 | Linux kernel null_blk driver null pointer dereference | 5.5v3.1 | 0.3% | 2024-06-21 | Fix |
| CVE-2024-36477 | Linux kernel TPM SPI driver out-of-bounds read | 7.8CNA v3.1 | 0.2% | 2024-06-21 | Fix |
| CVE-2024-36288 | Linux kernel SunRPC GSS infinite loop | 9.8CNA v3.1 | 0.8% | 2024-06-21 | Fix |
| CVE-2024-36286 | Linux kernel netfilter nfnetlink_queue vulnerability | 7.8CNA v3.1 | 0.3% | 2024-06-21 | Fix |
| CVE-2024-36281 | Linux kernel mlx5 IPsec driver null pointer dereference | 5.5v3.1 | 0.2% | 2024-06-21 | Fix |
| CVE-2024-36270 | Linux kernel netfilter tproxy null pointer dereference | 5.5NVD v3.1 | 0.3% | 2024-06-21 | Fix |
| CVE-2024-36244 | Linux kernel taprio traffic scheduler vulnerability | 5.5v3.1 | 0.2% | 2024-06-21 | Fix |
| CVE-2024-35781 | Word Balloon WordPress plugin local file inclusion | 6.5v3.1 | 0.5% | 2024-06-21 | Fix |
| CVE-2024-35779 | Page Builder: Live Composer WordPress plugin Contributor+ shortcode cross-site scripting (XSS) | 5.4v3.1 | 0.3% | 2024-06-21 | Fix |
| CVE-2024-35778 | Slideshow SE WordPress plugin Auth. limited local file inclusion | 8.8v3.1 | 0.6% | 2024-06-21 | Fix |
| CVE-2024-35776 | phpinfo WP WordPress plugin unauthenticated data exposure | 7.5v3.1 | 0.4% | 2024-06-21 | Fix |
| CVE-2024-35774 | DImage 360 WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.3% | 2024-06-21 | |
| CVE-2024-35772 | Hueman WordPress theme cross-site request forgery (CSRF) | 8.8v3.1 | 0.2% | 2024-06-21 | Fix |
| CVE-2024-35771 | Customizr WordPress theme cross-site request forgery (CSRF) | 8.8v3.1 | 0.2% | 2024-06-21 | Fix |
| CVE-2024-35770 | Vimeography WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2024-06-21 | Fix |
| CVE-2024-35769 | Slideshow SE WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.3% | 2024-06-21 | Fix |
| CVE-2024-35768 | Page Builder: Live Composer WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.3% | 2024-06-21 | Fix |
| CVE-2024-35767 | Squeeze WordPress plugin arbitrary file upload | 7.2NVD v3.1 | 0.5% | 2024-06-21 | Fix |
| CVE-2024-35766 | WPPizza A Restaurant WordPress plugin reflected cross-site scripting (XSS) | 6.1NVD v3.1 | 0.3% | 2024-06-21 | Fix |
| CVE-2024-35764 | Church Admin WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.3% | 2024-06-21 | Fix |
| CVE-2024-35763 | Excellent WordPress theme cross-site scripting (XSS) | 5.4v3.1 | 0.3% | 2024-06-21 | Fix |
| CVE-2024-35762 | Serious Slider WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.3% | 2024-06-21 | Fix |
| CVE-2024-35761 | Online Booking and Scheduling Calendar for WordPress by vcita plugin cross-site scripting (XSS) | 5.4v3.1 | 0.3% | 2024-06-21 | Fix |
| CVE-2024-35760 | WP Job Portal WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.3% | 2024-06-21 | Fix |
| CVE-2024-35759 | WP Job Portal WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.3% | 2024-06-21 | Fix |
| CVE-2024-35758 | Interface WordPress theme cross-site scripting (XSS) | 5.4v3.1 | 0.3% | 2024-06-21 | Fix |
| CVE-2024-35757 | Easy Age Verify WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.3% | 2024-06-21 | Fix |
| CVE-2024-35537 | Tvsmotor Tvs Connect weak cryptographic algorithm | 7.5v3.1 | 0.3% | 2024-06-21 | |
| CVE-2024-34989 | RSI PrestaShop PDF/HTML catalog evolution module SQL injection | 9.8CISA ADP v3.1 | 0.5% | 2024-06-21 | |
| CVE-2024-34777 | Linux kernel DMA mapping benchmark out-of-bounds read | 7.1v3.1 | 0.2% | 2024-06-21 | Fix |
| CVE-2024-34452 | CMSimple_XH cross-site scripting | 6.1CISA ADP v3.1 | 0.7% | 2024-06-21 | Exploit code |
| CVE-2024-33621 | Linux kernel IPVLAN driver denial of service | 5.5NVD v3.1 | 0.3% | 2024-06-21 | Fix |
| CVE-2024-33619 | Linux kernel libstub uninitialized memory use | 7.8CNA v3.1 | 0.3% | 2024-06-21 | Fix |
| CVE-2024-31890 | IBM i privilege escalation | 7.8CNA v3.1 | 0.2% | 2024-06-21 | Fix |
| CVE-2024-31076 | Linux kernel x86 interrupt vector cleanup on CPU offline vulnerability | 5.5v3.1 | 0.3% | 2024-06-21 | Fix |
| CVE-2024-6241 | Pear Admin Boot getDictItems SQL injection | 9.8v3.1 | 0.5% | 2024-06-21 | |
| CVE-2024-6240 | Improper privilege management vulnerability in Parallels Desktop | 10.0v3.1 | 0.3% | 2024-06-21 | Fix |
| CVE-2024-6239 | Poppler: Pdfinfo: Crash in broken documents when using -dests parameter | 7.5NVD v3.1 | 0.8% | 2024-06-21 | Fix |
| CVE-2024-6225 | Booking for Appointments and Events Calendar WordPress plugin stored cross-site scripting | 4.8v3.1 | 0.3% | 2024-06-21 | Fix |
| CVE-2024-6218 | itsourcecode Vehicle Management System busprofile.php SQL injection | 9.8v3.1 | 0.7% | 2024-06-21 | |
| CVE-2024-6217 | SourceCodester Food Ordering Management System user-router.php SQL injection | 8.8v3.1 | 0.5% | 2024-06-21 | |
| CVE-2024-6216 | SourceCodester Food Ordering Management System add-users.php SQL injection | 8.8v3.1 | 0.5% | 2024-06-21 | |
| CVE-2024-6215 | SourceCodester Food Ordering Management System view-ticket-admin.php SQL injection | 8.8v3.1 | 0.5% | 2024-06-21 | |
| CVE-2024-6214 | SourceCodester Food Ordering Management System add-item.php SQL injection | 8.8v3.1 | 0.5% | 2024-06-21 | |
| CVE-2024-6213 | SourceCodester Food Ordering Management System Login Panel login.php SQL injection | 9.8v3.1 | 0.7% | 2024-06-21 | |
| CVE-2024-6212 | SourceCodester Simple Student Attendance System student_form.php get_student cross-site scripting | 6.1v3.1 | 0.5% | 2024-06-21 | |
| CVE-2024-6027 | Themify - WooCommerce Product Filter WordPress plugin unauthenticated SQL injection | 7.5NVD v3.1 | 0.8% | 2024-06-21 | Fix |
| CVE-2024-5945 | WP SVG Images WordPress plugin authenticated (Author+) stored cross-site scripting via SVG | 5.4v3.1 | 0.3% | 2024-06-21 | Fix |
| CVE-2024-5859 | Appointment Booking and Online Scheduling WordPress plugin reflected cross-site scripting | 6.1CNA v3.1 | 0.3% | 2024-06-21 | Fix |
| CVE-2024-5756 | Email Subscribers by Icegram Express WordPress plugin SQL injection | 9.8CNA v3.1 | 0.7% | 2024-06-21 | Fix |
| CVE-2024-5639 | User Profile Picture WordPress plugin insecure direct object reference to Profile Picture update | 4.3CNA v3.1 | 0.4% | 2024-06-21 | Fix |
| CVE-2024-5503 | WP Blog Post Layouts WordPress plugin authenticated (Contributor+) local file Inlcusion | 8.8CNA v3.1 | 0.8% | 2024-06-21 | Fix |
| CVE-2024-5455 | Plus Addons for Elementor Page Builder WordPress plugin local file inclusion | 8.8v3.1 | 0.6% | 2024-06-21 | Fix |
| CVE-2024-5448 | PayPal Pay Now, Buy Now, Donation and Cart Buttons Shortcode WordPress plugin stored XSS | 5.4NVD v3.1 | 0.3% | 2024-06-21 | |
| CVE-2024-5447 | PayPal Pay Now, Buy Now, Donation and Cart Buttons Shortcode for WordPress Admin+ stored XSS | 4.8NVD v3.1 | 0.3% | 2024-06-21 | |
| CVE-2024-5344 | The Plus Addons for Elementor Page Builder WordPress plugin reflected cross-site scripting | 6.1CNA v3.1 | 0.3% | 2024-06-21 | Fix |
| CVE-2024-5191 | Branda White Label WordPress, Custom Login Page Customizer plugin stored cross-site scripting | 5.4v3.1 | 0.3% | 2024-06-21 | Fix |
| CVE-2024-5059 | Event Monster WordPress plugin sensitive data exposure | 7.5v3.1 | 0.4% | 2024-06-21 | Fix |
| CVE-2024-5058 | Typing Text WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.3% | 2024-06-21 | Fix |
| CVE-2024-4970 | Widget Bundle WordPress plugin Admin+ stored XSS | 4.8NVD v3.1 | 0.4% | 2024-06-21 | |
| CVE-2024-4969 | Widget Bundle WordPress plugin widget Disable/Enable via CSRF | 4.3NVD v3.1 | 0.2% | 2024-06-21 | |
| CVE-2024-4755 | Google CSE WordPress plugin Admin+ stored XSS | 4.8NVD v3.1 | 0.3% | 2024-06-21 | |
| CVE-2024-4616 | Widget Bundle WordPress plugin Unauthencated reflected XSS | 6.1NVD v3.1 | 0.4% | 2024-06-21 | |
| CVE-2024-4477 | WP Logs Book WordPress plugin unauthenticated stored XSS | 5.4NVD v3.1 | 0.3% | 2024-06-21 | |
| CVE-2024-4475 | WP Logs Book WordPress plugin Log Clearing via CSRF | 4.3NVD v3.1 | 0.2% | 2024-06-21 | |
| CVE-2024-4474 | WP Logs Book WordPress plugin Disable Logging via CSRF | 4.3NVD v3.1 | 6.0% | 2024-06-21 | Emerging Threats |
| CVE-2024-4384 | CSSable Countdown WordPress plugin Admin+ stored XSS | 4.8NVD v3.1 | 0.4% | 2024-06-21 | |
| CVE-2024-4382 | CB (legacy) WordPress plugin Code/Timeframe/Booking deletion via CSRF | 6.5NVD v3.1 | 0.2% | 2024-06-21 | |
| CVE-2024-4381 | CB (legacy) WordPress plugin Admin+ stored XSS | 4.8NVD v3.1 | 0.3% | 2024-06-21 | |
| CVE-2024-4377 | DOP Shortcodes WordPress plugin Contributor+ stored XSS via shortcode | 5.4NVD v3.1 | 0.3% | 2024-06-21 | |
| CVE-2024-3961 | ConvertKit WordPress plugin missing authorization | 5.3CNA v3.1 | 0.4% | 2024-06-21 | Fix |
| CVE-2024-3610 | WP Child Theme Generator WordPress plugin unauthorized access | 5.3CNA v3.1 | 0.5% | 2024-06-21 | Fix |
| CVE-2024-3036 | ABB 800xA Base communication DoS | 6.9CNA v4.0 | 0.3% | 2024-06-21 | Fix |
| CVE-2024-2003 | Local privilege escalation in Quarantine of ESET products for Windows | 7.3CNA v3.1 | 0.3% | 2024-06-21 | Fix |
| CVE-2024-1955 | Hide Dashboard Notifications WordPress plugin unauthorized access | 4.3CNA v3.1 | 0.3% | 2024-06-21 | Fix |
| CVE-2024-1639 | License Manager for WooCommerce WordPress plugin unauthorized access | 6.5CNA v3.1 | 0.4% | 2024-06-21 | Fix |
| CVE-2024-38620 | Linux kernel Bluetooth AMP controller support vulnerability | 8.8CNA v3.1 | 0.3% | 2024-06-20 | Fix |
| CVE-2024-38619 | Linux kernel USB storage alauda driver vulnerability | 5.5NVD v3.1 | 0.3% | 2024-06-20 | Fix |
| CVE-2024-38361 | authzed spicedb permissions processing error in spacedb | 3.7CNA v3.1 | 0.4% | 2024-06-20 | Fix |
| CVE-2024-38359 | lightningnetwork lnd Lightning Network Daemon Onion Bomb | 6.5CNA v3.1 | 0.6% | 2024-06-20 | Fix |
| CVE-2024-38093 | Microsoft Edge (Chromium-based) spoofing | 4.3CNA v3.1 | 0.5% | 2024-06-20 | Fix |
| CVE-2024-38082 | Microsoft Edge (Chromium-based) spoofing | 4.7CNA v3.1 | 0.5% | 2024-06-20 | Fix |
| CVE-2024-37899 | Disabling a user account changes its author, allowing RCE from user account in XWiki | 9.1CNA v3.1 | 0.7% | 2024-06-20 | Fix |
| CVE-2024-37897 | Insufficient access control for password reset in sftpgo | 5.4CNA v3.1 | 0.3% | 2024-06-20 | Fix |
| CVE-2024-37818 | Strapi server-side request forgery (SSRF) | 8.6CISA ADP v3.1 | 0.6% | 2024-06-20 | |
| CVE-2024-37699 | DataLife Engine dboption SQL injection | 9.8CISA ADP v3.1 | 0.5% | 2024-06-20 | |
| CVE-2024-37676 | htop Header_populateFromSettings function out-of-bounds write | 8.4CISA ADP v3.1 | 0.2% | 2024-06-20 | Fix |
| CVE-2024-37674 | Moodle cross-site scripting | 5.5CISA ADP v3.1 | 0.6% | 2024-06-20 | Fix |
| CVE-2024-37626 | TOTOLINK A6000R command injection | 8.8CISA ADP v3.1 | 1.5% | 2024-06-20 | |
| CVE-2024-37532 | IBM WebSphere Application Server identity spoofing | 8.8CNA v3.1 | 0.4% | 2024-06-20 | Fix |
| CVE-2024-37352 | Cross-site scripting vulnerability in the Absolute Secure Access administrative console | 4.5CNA v3.1 | 0.3% | 2024-06-20 | Fix |
| CVE-2024-37351 | Cross-site scripting vulnerability in the Absolute Secure Access administrative console | 4.5CNA v3.1 | 0.3% | 2024-06-20 | Fix |
| CVE-2024-37350 | Cross-site scripting vulnerability in the Absolute Secure Access administrative console | 6.5CNA v3.1 | 0.3% | 2024-06-20 | Fix |
| CVE-2024-37349 | Cross-site scripting vulnerability in the Absolute Secure Access administrative console | 4.5CNA v3.1 | 0.3% | 2024-06-20 | Fix |
| CVE-2024-37348 | Cross-site scripting vulnerability in the Absolute Secure Access administrative console | 4.5CNA v3.1 | 0.3% | 2024-06-20 | Fix |
| CVE-2024-37347 | Cross-site scripting vulnerability in the Absolute Secure Access administrative console | 4.5CNA v3.1 | 0.3% | 2024-06-20 | Fix |
| CVE-2024-37346 | Insufficient input validation vulnerability in the Absolute Secure Access Warehouse | 4.9CNA v3.1 | 0.4% | 2024-06-20 | Fix |
| CVE-2024-37345 | Cross-site scripting vulnerability in the Absolute Secure Access administrative console | 5.3CNA v3.1 | 0.2% | 2024-06-20 | Fix |
| CVE-2024-37344 | Cross-site scripting vulnerability in the Absolute Secure Access administrative console | 4.5CNA v3.1 | 0.3% | 2024-06-20 | Fix |
| CVE-2024-37343 | Cross-site scripting vulnerability in the Absolute Secure Access administrative console | 4.8CNA v3.1 | 0.2% | 2024-06-20 | Fix |
| CVE-2024-37222 | Master Slider WordPress plugin reflected cross-site scripting (XSS) | 6.1NVD v3.1 | 0.3% | 2024-06-20 | Fix |
| CVE-2024-37183 | Westermo L210-f2g Lynx cleartext transmission of sensitive information | 7.5v3.1 | 0.2% | 2024-06-20 | |
| CVE-2024-36071 | Samsung Magician untrusted search path | 6.3v3.1 | 0.1% | 2024-06-20 | Fix |
| CVE-2024-35246 | Westermo L210-F2G Lynx improper control of interaction frequency | 8.7CNA v4.0 | 0.5% | 2024-06-20 | |
| CVE-2024-34693 | Apache Superset: Server arbitrary file read | 6.8CNA v3.1 | 1.6% | 2024-06-20 | Exploit codeFix |
| CVE-2024-33335 | H3C SeaSQL DWS SQL injection | 6.3CISA ADP v3.1 | 0.5% | 2024-06-20 | |
| CVE-2024-32943 | Westermo L210-f2g Lynx improper control of interaction frequency | 8.7CNA v4.0 | 0.5% | 2024-06-20 | |
| CVE-2024-31586 | oretnom23 Computer Laboratory Management System cross-site scripting | 6.1CISA ADP v3.1 | 0.5% | 2024-06-20 | |
| CVE-2024-30848 | SilverSky E-mail service version cross-site scripting | 6.1CISA ADP v3.1 | 0.3% | 2024-06-20 | |
| CVE-2024-29390 | Anujk305 Daily Expenses Management System SQL injection | 7.3CISA ADP v3.1 | 0.4% | 2024-06-20 | |
| CVE-2024-29013 | SonicWall SonicOS heap-based buffer overflow | 6.5v3.1 | 0.6% | 2024-06-20 | Fix |
| CVE-2024-29012 | SonicWall SonicOS stack-based buffer overflow | 7.5v3.1 | 0.5% | 2024-06-20 | Fix |
| CVE-2024-28397 | Js2py allows remote code execution | 5.3CISA ADP v3.1 | 4.5% | 2024-06-20 | NucleiMetasploitExploit codeKCVFix |
| CVE-2024-28147 | Unrestricted upload of files in edu-sharing | 7.4CISA ADP v3.1 | 0.8% | 2024-06-20 | Fix |
| CVE-2024-6196 | itsourcecode Banking Management System admin_class.php SQL injection | 9.8v3.1 | 0.6% | 2024-06-20 | |
| CVE-2024-6195 | itsourcecode Tailoring Management System orderadd.php SQL injection | 9.8v3.1 | 0.4% | 2024-06-20 | |
| CVE-2024-6194 | itsourcecode Tailoring Management System editmeasurement.php SQL injection | 9.8v3.1 | 0.4% | 2024-06-20 | |
| CVE-2024-6193 | itsourcecode Vehicle Management System driverprofile.php SQL injection | 9.8v3.1 | 0.5% | 2024-06-20 | |
| CVE-2024-6192 | itsourcecode Loan Management System Login page login.php SQL injection | 9.8v3.1 | 0.6% | 2024-06-20 | |
| CVE-2024-6191 | itsourcecode Student Management System Login page login.php SQL injection | 9.8v3.1 | 0.6% | 2024-06-20 | |
| CVE-2024-6190 | itsourcecode Farm Management System Login index.php SQL injection | 9.8v3.1 | 0.6% | 2024-06-20 | |
| CVE-2024-6189 | Tenda A301 WifiExtraSet fromSetWirelessRepeat stack-based overflow | 8.8v3.1 | 1.4% | 2024-06-20 | |
| CVE-2024-6188 | Parsec Automation TrackSYS pagedefinition direct request | 6.9CNA v4.0 | 2.0% | 2024-06-20 | Nuclei |
| CVE-2024-6187 | Ruijie RG-UAC sub_commit.php os command injection | 9.8v3.1 | 7.6% | 2024-06-20 | |
| CVE-2024-6186 | Ruijie RG-UAC commit.php os command injection | 9.8v3.1 | 8.7% | 2024-06-20 | |
| CVE-2024-6185 | Ruijie RG-UAC commit.php get_ip_addr_details os command injection | 8.8v3.1 | 9.1% | 2024-06-20 | |
| CVE-2024-6184 | Ruijie RG-UAC reboot_commit.php os command injection | 9.8v3.1 | 9.7% | 2024-06-20 | |
| CVE-2024-6183 | EZ-Suite EZ-Partner Forgot Password cross-site scripting | 6.1v3.1 | 0.4% | 2024-06-20 | |
| CVE-2024-6182 | LabVantage LIMS cross-site scripting | 5.4v3.1 | 0.4% | 2024-06-20 | |
| CVE-2024-6181 | LabVantage LIMS cross-site scripting | 5.4v3.1 | 0.4% | 2024-06-20 | |
| CVE-2024-6179 | XSS vulnerability in LG SuperSign CMS | 4.8CNA v4.0 | 0.3% | 2024-06-20 | Fix |
| CVE-2024-6178 | XSS vulnerability in LG SuperSign CMS | 4.8CNA v4.0 | 0.3% | 2024-06-20 | Fix |
| CVE-2024-6177 | XSS vulnerability in LG SuperSign CMS | 4.8CNA v4.0 | 0.3% | 2024-06-20 | Fix |
| CVE-2024-6176 | LG Electronics LG SuperSign CMS resource exhaustion | 4.8CNA v4.0 | 0.2% | 2024-06-20 | Fix |
| CVE-2024-6162 | Red Hat EAP undertow: Url-encoded request path information can be broken on ajp-listener | 7.5CNA v3.1 | 1.7% | 2024-06-20 | Fix |
| CVE-2024-6154 | Parallels Desktop Toolgate heap-based buffer overflow local privilege escalation | 6.7NVD v3.1 | 0.3% | 2024-06-20 | |
| CVE-2024-6153 | Parallels Desktop Updater protection mechanism failure Software Downgrade | 7.8v3.1 | 0.3% | 2024-06-20 | |
| CVE-2024-6147 | Poly Plantronics Hub link following local privilege escalation | 7.8v3.1 | 0.4% | 2024-06-20 | |
| CVE-2024-6113 | itsourcecode Monbela Tourist Inn Online Reservation System login.php SQL injection | 9.8v3.1 | 0.7% | 2024-06-20 | |
| CVE-2024-6103 | Google Chrome Dawn use-after-free | 8.8v3.1 | 0.6% | 2024-06-20 | Fix |
| CVE-2024-6102 | Google Chrome Dawn out-of-bounds access | 8.8v3.1 | 0.7% | 2024-06-20 | Fix |
| CVE-2024-6101 | Google Chrome V8 inappropriate implementation | 8.8v3.1 | 0.8% | 2024-06-20 | Fix |
| CVE-2024-6100 | Google Chrome V8 type confusion | 8.8v3.1 | 1.1% | 2024-06-20 | Fix |
| CVE-2024-5746 | GitHub Enterprise Server server-side request forgery | 7.6CNA v3.1 | 0.9% | 2024-06-20 | |
| CVE-2024-5686 | WPZOOM Addons for Elementor (Templates, Widgets) WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.4% | 2024-06-20 | Fix |
| CVE-2024-5605 | Media Library Assistant WordPress plugin SQL injection | 8.8CNA v3.1 | 0.6% | 2024-06-20 | Fix |
| CVE-2024-5522 | HTML5 Video Player WordPress plugin unauthenticated SQLi | 6.5CISA ADP v3.1 | 2.6% | 2024-06-20 | Reported exploitedNucleiExploit codeFix |
| CVE-2024-5475 | Responsive video embed WordPress plugin Contributor+ stored XSS | 5.4CISA ADP v3.1 | 0.4% | 2024-06-20 | Fix |
| CVE-2024-5432 | Lifeline Donation WordPress plugin authentication bypass | 9.8CNA v3.1 | 0.7% | 2024-06-20 | |
| CVE-2024-5213 | Exposure of sensitive information in mintplex-labs/anything-llm | 6.5v3.1 | 0.5% | 2024-06-20 | Fix |
| CVE-2024-5182 | Path traversal in mudler/LocalAI | 9.1v3.1 | 25.5% | 2024-06-20 | Fix |
| CVE-2024-5156 | Flatsome WordPress theme authenticated (Contributor+) stored cross-site scripting via shortcode | 6.4CNA v3.1 | 0.3% | 2024-06-20 | Fix |
| CVE-2024-5036 | Sina Extension for Elementor WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.4% | 2024-06-20 | Fix |
| CVE-2024-4742 | Youzify WordPress plugin SQL injection | 8.8NVD v3.1 | 0.5% | 2024-06-20 | Fix |
| CVE-2024-4626 | JetWidgets For Elementor WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.3% | 2024-06-20 | Fix |
| CVE-2024-4565 | Advanced Custom Fields WordPress plugin Contributor+ Custom field access | 6.5NVD v3.1 | 0.4% | 2024-06-20 | Fix |
| CVE-2024-4390 | Depicter WordPress plugin authenticated (Contributor+) arbitrary nonce Generation | 6.5CNA v3.1 | 0.5% | 2024-06-20 | Fix |
| CVE-2024-4098 | Shariff Wrapper WordPress plugin unauthenticated local file inclusion | 9.8CNA v3.1 | 1.0% | 2024-06-20 | Fix |
| CVE-2024-3627 | Wheel of Life: Coaching and Assessment Tool for Life Coach WordPress plugin unauthorized access | 5.4CNA v3.1 | 0.4% | 2024-06-20 | Fix |
| CVE-2024-3605 | WP Hotel Booking WordPress plugin unauthenticated SQL injection | 9.8v3.1 | 4.2% | 2024-06-20 | NucleiExploit codeFix |
| CVE-2024-3602 | Promolayer plugin disconnect function missing authorization | 4.3CNA v3.1 | 0.3% | 2024-06-20 | Fix |
| CVE-2024-3597 | Export WP Page to Static HTML/CSS WordPress plugin open redirect | 6.1NVD v3.1 | 0.3% | 2024-06-20 | Fix |
| CVE-2024-3562 | Custom Field Suite WordPress plugin PHP code injection | 8.8CNA v3.1 | 0.6% | 2024-06-20 | |
| CVE-2024-3561 | Custom Field Suite WordPress plugin authenticated (Contributor+) SQL injection via Term Custom field | 8.8CNA v3.1 | 0.5% | 2024-06-20 | |
| CVE-2024-3558 | Custom Field Suite WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.4% | 2024-06-20 | |
| CVE-2024-1168 | SEOPress On-site SEO WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.4% | 2024-06-20 | Fix |
| CVE-2024-38618 | Linux kernel ALSA timer denial of service | 5.5v3.1 | 0.6% | 2024-06-19 | Fix |
| CVE-2024-38617 | Linux kernel KUnit fortify test suite vulnerability | 5.5v3.1 | 0.2% | 2024-06-19 | Fix |
| CVE-2024-38616 | Linux kernel carl9170 Wi-Fi driver resource exhaustion | 8.2CISA ADP v3.1 | 0.7% | 2024-06-19 | Fix |
| CVE-2024-38615 | Linux kernel CPUFreq driver interface null pointer dereference | 5.5NVD v3.1 | 0.2% | 2024-06-19 | Fix |
| CVE-2024-38614 | Linux kernel OpenRISC exception handling vulnerability | 7.8CNA v3.1 | 0.2% | 2024-06-19 | Fix |
| CVE-2024-38613 | Linux kernel kernel thread creation race condition | 4.7v3.1 | 0.2% | 2024-06-19 | Fix |
| CVE-2024-38612 | Linux kernel sr use-after-free | 7.0CNA v3.1 | 0.7% | 2024-06-19 | Fix |
| CVE-2024-38611 | Linux kernel et8ek8 memory leak | 7.3CNA v3.1 | 0.2% | 2024-06-19 | Fix |
| CVE-2024-38610 | Linux kernel ACRN hypervisor driver use-after-free | 7.8CNA v3.1 | 0.2% | 2024-06-19 | Fix |
| CVE-2024-38609 | Linux kernel mt76 connac Wi-Fi driver null pointer dereference | 5.5v3.1 | 0.2% | 2024-06-19 | Fix |
| CVE-2024-38608 | Linux kernel net/mlx5e null pointer dereference | 5.5NVD v3.1 | 0.2% | 2024-06-19 | Fix |
| CVE-2024-38607 | Linux kernel via-macii ADB driver vulnerability | 5.5v3.1 | 0.2% | 2024-06-19 | Fix |
| CVE-2024-38606 | Linux kernel QAT telemetry driver out-of-bounds read | 7.1CNA v3.1 | 0.2% | 2024-06-19 | Fix |
| CVE-2024-38605 | Linux kernel sound card initialization null pointer dereference | 7.8CNA v3.1 | 0.7% | 2024-06-19 | Fix |
| CVE-2024-38604 | In the Linux kernel, the following vulnerability has been resolved: block: refine the EOF check in blkdev_iomap_begin blkdev_iomap_begin rounds down the offset to the logical block size before stashing it in iomap->offset and checking that it still is inside the inode size. Check the i_size check | 5.5v3.1 | 0.2% | 2024-06-19 | Fix |
| CVE-2024-38603 | Linux kernel hns3 memory leak | 5.5v3.1 | 0.2% | 2024-06-19 | Fix |
| CVE-2024-38602 | Linux kernel AX.25 device handling memory leak | 5.5v3.1 | 0.2% | 2024-06-19 | Fix |
| CVE-2024-38601 | Linux kernel ring buffer race condition | 4.7v3.1 | 0.2% | 2024-06-19 | Fix |
| CVE-2024-38600 | Linux kernel ALSA control interface deadlock | 5.5v3.1 | 0.2% | 2024-06-19 | Fix |
| CVE-2024-38599 | Linux kernel JFFS2 xattr node writing vulnerability | 7.8CNA v3.1 | 0.2% | 2024-06-19 | Fix |
| CVE-2024-38598 | Linux kernel MD RAID10 resync bitmap denial of service | 5.5NVD v3.1 | 0.2% | 2024-06-19 | Fix |
| CVE-2024-38597 | Linux kernel sungem Ethernet driver netpoll deadlock | 5.5v3.1 | 0.2% | 2024-06-19 | Fix |
| CVE-2024-38596 | Linux kernel AF_UNIX socket shutdown handling race condition | 4.7NVD v3.1 | 0.2% | 2024-06-19 | Fix |
| CVE-2024-38595 | Linux kernel mlx5 SF representor devlink port vulnerability | 5.5v3.1 | 0.2% | 2024-06-19 | Fix |
| CVE-2024-38594 | Linux kernel stmmac EST lock improper locking | 5.5v3.1 | 0.2% | 2024-06-19 | Fix |
| CVE-2024-38593 | Linux kernel Micrel lan8841 PHY driver vulnerability | 5.5v3.1 | 0.2% | 2024-06-19 | Fix |
| CVE-2024-38592 | Linux kernel MediaTek DRM display pipe vulnerability | 7.8CNA v3.1 | 0.2% | 2024-06-19 | Fix |
| CVE-2024-38591 | Linux kernel RDMA hns SRQ async event handling deadlock | 5.5v3.1 | 0.2% | 2024-06-19 | Fix |
| CVE-2024-38590 | Linux kernel RDMA hns CQE error logging denial of service | 7.1CNA v3.1 | 0.3% | 2024-06-19 | Fix |
| CVE-2024-38589 | Linux kernel NetRom routing ioctl deadlock | 5.5NVD v3.1 | 0.2% | 2024-06-19 | Fix |
| CVE-2024-38588 | Linux kernel ftrace record lookup use-after-free | 7.8CNA v3.1 | 0.2% | 2024-06-19 | Fix |
| CVE-2024-38587 | Linux kernel speakup driver vulnerability | 7.8CNA v3.1 | 0.8% | 2024-06-19 | Fix |
| CVE-2024-38586 | Linux kernel r8169 Ethernet driver Tx ring buffer out-of-bounds write | 7.8v3.1 | 0.3% | 2024-06-19 | Fix |
| CVE-2024-38585 | Linux kernel nolibc realloc out-of-bounds read | 7.1v3.1 | 0.2% | 2024-06-19 | Fix |
| CVE-2024-38584 | Linux kernel icssg_prueth null pointer dereference | 5.5v3.1 | 0.2% | 2024-06-19 | Fix |
| CVE-2024-38583 | Linux kernel nilfs2 log writer timer use-after-free | 7.8CNA v3.1 | 0.3% | 2024-06-19 | Fix |
| CVE-2024-38582 | Linux kernel nilfs2 log writer teardown deadlock | 5.3CISA ADP v3.1 | 0.9% | 2024-06-19 | Fix |
| CVE-2024-38581 | Linux kernel amdgpu MES fence timer use-after-free | 7.8CNA v3.1 | 0.2% | 2024-06-19 | Fix |
| CVE-2024-38580 | Linux kernel epoll file reference handling vulnerability | 7.8CNA v3.1 | 0.2% | 2024-06-19 | Fix |
| CVE-2024-38579 | In the Linux kernel, the following vulnerability has been resolved: crypto: bcm - Fix pointer arithmetic In spu2_dump_omd() value of ptr is increased by ciph_key_len instead of hash_iv_len which could lead to going beyond the buffer boundaries. Fix this bug by changing ciph_key_len to hash_iv_len. | 5.5NVD v3.1 | 0.3% | 2024-06-19 | Fix |
| CVE-2024-38578 | Linux kernel eCryptfs key packet parsing out-of-bounds write | 7.8CNA v3.1 | 0.3% | 2024-06-19 | Fix |
| CVE-2024-38577 | Linux kernel RCU tasks trace reporting buffer overflow | 7.0CNA v3.1 | 0.3% | 2024-06-19 | Fix |
| CVE-2024-38576 | Linux kernel RCU CPU stall reporting buffer overflow | 7.0CNA v3.1 | 0.3% | 2024-06-19 | Fix |
| CVE-2024-38575 | Linux kernel brcmfmac PCIe Wi-Fi driver null pointer dereference | 5.5v3.1 | 0.2% | 2024-06-19 | Fix |
| CVE-2024-38574 | Linux kernel libbpf program loader null pointer dereference | 5.5v3.1 | 0.2% | 2024-06-19 | Fix |
| CVE-2024-38573 | Linux kernel cppc_cpufreq driver null pointer dereference | 7.5CISA ADP v3.1 | 1.0% | 2024-06-19 | Fix |
| CVE-2024-38572 | Linux kernel ath12k QMI message handler out-of-bounds read | 7.8CNA v3.1 | 0.2% | 2024-06-19 | Fix |
| CVE-2024-38571 | Linux kernel tsens thermal driver calibration null pointer dereference | 5.5v3.1 | 0.2% | 2024-06-19 | Fix |
| CVE-2024-38570 | Linux kernel GFS2 glock unmount handling use-after-free | 9.8CNA v3.1 | 0.7% | 2024-06-19 | Fix |
| CVE-2024-38569 | Linux kernel hisi_pcie out-of-bounds access | 7.8CNA v3.1 | 0.2% | 2024-06-19 | Fix |
| CVE-2024-38568 | Linux kernel hns3 out-of-bounds access | 7.8CNA v3.1 | 0.2% | 2024-06-19 | Fix |
| CVE-2024-38567 | Linux kernel carl9170 Wi-Fi driver endpoint handling vulnerability | 5.5NVD v3.1 | 0.3% | 2024-06-19 | Fix |
| CVE-2024-38566 | Linux kernel BPF socket verifier vulnerability | 5.5v3.1 | 0.2% | 2024-06-19 | Fix |
| CVE-2024-38565 | Linux kernel ar5523 Wi-Fi driver endpoint handling vulnerability | 5.5NVD v3.1 | 0.7% | 2024-06-19 | Fix |
| CVE-2024-38564 | Linux kernel BPF cgroup_skb link creation vulnerability | 7.8CNA v3.1 | 0.2% | 2024-06-19 | Fix |
| CVE-2024-38563 | Linux kernel mt76 mt7996 temperature sensor driver memory leak | 5.5v3.1 | 0.2% | 2024-06-19 | Fix |
| CVE-2024-38562 | Linux kernel nl80211 channel request handling vulnerability | 7.8v3.1 | 0.2% | 2024-06-19 | Fix |
| CVE-2024-38561 | Linux kernel kunit kthread handling use-after-free | 7.0v3.1 | 0.2% | 2024-06-19 | Fix |
| CVE-2024-38560 | Linux kernel bfa debugfs interface out-of-bounds read | 7.1NVD v3.1 | 0.3% | 2024-06-19 | Fix |
| CVE-2024-38559 | Linux kernel qedf debugfs interface out-of-bounds read | 4.4CISA ADP v3.1 | 0.3% | 2024-06-19 | Fix |
| CVE-2024-38558 | Linux kernel openvswitch improper initialization | 10.0CNA v3.1 | 0.8% | 2024-06-19 | Fix |
| CVE-2024-38557 | Linux kernel mlx5 lag driver representor reload deadlock | 5.5v3.1 | 0.2% | 2024-06-19 | Fix |
| CVE-2024-38556 | Linux kernel mlx5 command queue semaphore vulnerability | 7.8CNA v3.1 | 0.3% | 2024-06-19 | Fix |
| CVE-2024-38555 | Linux kernel mlx5 command interface use-after-free | 7.0CNA v3.1 | 0.3% | 2024-06-19 | Fix |
| CVE-2024-38554 | Linux kernel AX.25 device reference counting memory leak | 5.5v3.1 | 0.2% | 2024-06-19 | Fix |
| CVE-2024-38553 | Linux kernel fec Ethernet driver netpoll handling deadlock | 5.5v3.1 | 0.2% | 2024-06-19 | Fix |
| CVE-2024-38552 | Linux kernel AMD display color transformation function out-of-bounds write | 7.3CNA v3.1 | 0.3% | 2024-06-19 | Fix |
| CVE-2024-38551 | Linux kernel MediaTek ASoC driver null pointer dereference | 5.5v3.1 | 0.2% | 2024-06-19 | Fix |
| CVE-2024-38550 | Linux kernel kirkwood ASoC driver null pointer dereference | 4.4CISA ADP v3.1 | 0.2% | 2024-06-19 | Fix |
| CVE-2024-38549 | Linux kernel MediaTek GEM driver denial of service | 5.5v3.1 | 0.3% | 2024-06-19 | Fix |
| CVE-2024-38548 | Linux kernel cdns-mhdp8546 null pointer dereference | 5.5CISA ADP v3.1 | 0.3% | 2024-06-19 | Fix |
| CVE-2024-38547 | Linux kernel Atomisp camera driver null pointer dereference | 5.5NVD v3.1 | 0.3% | 2024-06-19 | Fix |
| CVE-2024-38546 | Linux kernel VC4 HDMI audio driver null pointer dereference | 5.5v3.1 | 0.3% | 2024-06-19 | Fix |
| CVE-2024-38545 | Linux kernel HNS RDMA driver use-after-free | 7.8CNA v3.1 | 0.3% | 2024-06-19 | Fix |
| CVE-2024-38544 | Linux kernel RXE software RDMA driver use-after-free | 9.8CNA v3.1 | 0.8% | 2024-06-19 | Fix |
| CVE-2024-38543 | Linux kernel HMM test driver null pointer dereference | 5.5v3.1 | 0.2% | 2024-06-19 | Fix |
| CVE-2024-38542 | Linux kernel mana_ib RDMA driver improper array index validation | 7.8CNA v3.1 | 0.2% | 2024-06-19 | Fix |
| CVE-2024-38541 | Linux kernel module buffer overflow | 7.8CNA v3.1 | 0.9% | 2024-06-19 | Fix |
| CVE-2024-38540 | Linux kernel bnxt_re undefined behavior | 4.4CISA ADP v3.1 | 0.2% | 2024-06-19 | Fix |
| CVE-2024-38539 | Linux kernel RDMA/cma memory leak | 7.5CNA v3.1 | 0.6% | 2024-06-19 | Fix |
| CVE-2024-38538 | Linux kernel bridge device transmit path vulnerability | 7.3CNA v3.1 | 0.3% | 2024-06-19 | Fix |
| CVE-2024-38358 | Symlink bypasses filesystem sandbox in wasmer | 2.9CNA v3.1 | 0.2% | 2024-06-19 | Fix |
| CVE-2024-38357 | TinyMCE cross-site scripting (XSS) vulnerability using noscript elements | 6.1CNA v3.1 | 0.5% | 2024-06-19 | Fix |
| CVE-2024-38356 | TinyMCE cross-site scripting (XSS) vulnerability using noneditable_regexp option | 6.1CNA v3.1 | 0.5% | 2024-06-19 | Fix |
| CVE-2024-38355 | Unhandled error event in socket.io | 7.3CNA v3.1 | 0.8% | 2024-06-19 | Exploit codeFix |
| CVE-2024-38329 | IBM Storage Protect for Virtual Environments Data Protection for VMware incorrect authorization | 7.7CNA v3.1 | 0.5% | 2024-06-19 | Fix |
| CVE-2024-37881 | EG Secure Solutions SiteGuard WP Plugin information disclosure | 5.3CISA ADP v3.1 | 1.2% | 2024-06-19 | NucleiFix |
| CVE-2024-37387 | Ricoh Streamline NX PC Client use of a dangerous function | 4.0CISA ADP v3.1 | 0.2% | 2024-06-19 | |
| CVE-2024-37124 | Ricoh Streamline NX PC Client use of a dangerous function | 9.8CISA ADP v3.1 | 0.5% | 2024-06-19 | |
| CVE-2024-36979 | Linux kernel bridge MST VLAN handling use-after-free | 7.8CNA v3.1 | 0.3% | 2024-06-19 | Fix |
| CVE-2024-36978 | Linux kernel multiq packet scheduler out-of-bounds write | 7.8CNA v3.1 | 0.3% | 2024-06-19 | Fix |
| CVE-2024-36684 | PrestaShop Pk Customlinks SQL injection | 9.8v3.1 | 0.4% | 2024-06-19 | Fix |
| CVE-2024-36680 | Promokit.eu Facebook module for PrestaShop facebookConnect.php SQL injection | 7.5CISA ADP v3.1 | 10.1% | 2024-06-19 | |
| CVE-2024-36679 | Module Live Chat Pro Lcp saveTranslations method code injection | 10.0CISA ADP v3.1 | 0.6% | 2024-06-19 | |
| CVE-2024-36678 | Promokit Pk Themesettings SQL injection | 9.8v3.1 | 0.6% | 2024-06-19 | |
| CVE-2024-36677 | Weblir Login as customer PRO personal information exposure | 7.5CISA ADP v3.1 | 0.4% | 2024-06-19 | |
| CVE-2024-36480 | Ricoh Streamline NX PC Client hard-coded credentials | 9.8CISA ADP v3.1 | 0.4% | 2024-06-19 | |
| CVE-2024-36252 | Ricoh Streamline NX PC Client improper channel restriction | 6.3CISA ADP v3.1 | 0.2% | 2024-06-19 | |
| CVE-2024-36117 | Path traversal while serving Reposilite javadoc expanded files | 8.6CNA v3.1 | 3.1% | 2024-06-19 | NucleiFix |
| CVE-2024-36116 | Path traversal in Reposilite javadoc file expansion | 7.5CNA v3.1 | 1.5% | 2024-06-19 | Fix |
| CVE-2024-36115 | Stored cross-site scripting in Reposilite artifacts | 7.1CNA v3.1 | 0.8% | 2024-06-19 | Fix |
| CVE-2024-35780 | Page Builder: Live Composer WordPress plugin Contributor+ PHP object injection | 8.5CNA v3.1 | 0.4% | 2024-06-19 | Fix |
| CVE-2024-35765 | Greenshift animation and page builder blocks WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.3% | 2024-06-19 | Fix |
| CVE-2024-35298 | 'ZOZOTOWN' App handler for custom URL scheme issue improper authorization | 4.3CISA ADP v3.1 | 0.3% | 2024-06-19 | |
| CVE-2024-34994 | Channable PrestaShop Channable module SQL injection | 9.8CISA ADP v3.1 | 0.4% | 2024-06-19 | |
| CVE-2024-34993 | Buy Addons PrestaShop Google Merchant export module SQL injection | 6.3CISA ADP v3.1 | 0.3% | 2024-06-19 | |
| CVE-2024-34990 | FME Modules PrestaShop Help desk module vulnerability | 10.0CISA ADP v3.1 | 0.5% | 2024-06-19 | |
| CVE-2024-34444 | Slider Revolution WordPress plugin unauthenticated broken access control | 8.8v3.1 | 0.3% | 2024-06-19 | Exploit codeFix |
| CVE-2024-34443 | Slider Revolution WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.3% | 2024-06-19 | Fix |
| CVE-2024-33836 | JA Module for PrestaShop JA Marketplace front controller init method vulnerability | 9.8CISA ADP v3.1 | 0.5% | 2024-06-19 | |
| CVE-2024-32030 | provectus kafka-ui remote code execution via JNDI resolution in JMX metrics collection in Kafka UI | 8.1CNA v3.1 | 51.1% | 2024-06-19 | Fix |
| CVE-2024-23443 | Elastic Kibana resource exhaustion | 4.9CNA v3.1 | 1.8% | 2024-06-19 | Exploit codeFix |
| CVE-2024-22263 | Arbitrary file write vulnerability in Spring Cloud Data Flow | 8.8CNA v3.1 | 17.5% | 2024-06-19 | |
| CVE-2024-6146 | Actiontec WCB6200Q uh_get_postdata_withupload stack-based buffer overflow remote code execution | 8.8v3.1 | 1.1% | 2024-06-19 | |
| CVE-2024-6145 | Actiontec WCB6200Q Cookie format string remote code execution | 8.8v3.1 | 1.2% | 2024-06-19 | |
| CVE-2024-6144 | Actiontec WCB6200Q Multipart Boundary stack-based buffer overflow remote code execution | 8.8v3.1 | 1.1% | 2024-06-19 | |
| CVE-2024-6143 | Actiontec WCB6200Q uh_tcp_recv_header buffer overflow remote code execution | 8.8v3.1 | 1.1% | 2024-06-19 | |
| CVE-2024-6142 | Actiontec WCB6200Q uh_tcp_recv_content buffer overflow remote code execution | 8.8v3.1 | 1.1% | 2024-06-19 | |
| CVE-2024-6132 | Pexels Free Stock Photos image options validation function unrestricted file upload | 8.8CNA v3.1 | 1.4% | 2024-06-19 | Exploit code |
| CVE-2024-6125 | Login with phone number WordPress plugin insecure password reset Mechanism | 8.1CNA v3.1 | 0.5% | 2024-06-19 | Fix |
| CVE-2024-5853 | Image Optimizer, Resizer and CDN Sirv WordPress plugin arbitrary file upload | 8.8NVD v3.1 | 0.8% | 2024-06-19 | Fix |
| CVE-2024-5768 | MIMO Woocommerce Order Tracking WordPress plugin unauthorized access | 6.4CNA v3.1 | 0.2% | 2024-06-19 | |
| CVE-2024-5724 | Photo Video Gallery Master WordPress plugin authenticated (Contributor+) PHP object injection | 8.8CNA v3.1 | 0.6% | 2024-06-19 | |
| CVE-2024-5676 | Paradox IP150 Internet Module cross-site request forgery | 6.8CNA v3.1 | 0.3% | 2024-06-19 | |
| CVE-2024-5649 | Universal Slider WordPress plugin authenticated (Contributor+) PHP object injection | 8.8v3.1 | 0.4% | 2024-06-19 | |
| CVE-2024-5574 | WP Magazine Modules Lite WordPress plugin authenticated (Contributor+) local file inclusion | 7.5CNA v3.1 | 0.8% | 2024-06-19 | Fix |
| CVE-2024-5343 | Photo Gallery WordPress plugin cross-site request forgery | 8.8CNA v3.1 | 0.3% | 2024-06-19 | Fix |
| CVE-2024-5208 | Uncontrolled resource consumption in mintplex-labs/anything-llm | 6.5CNA v3.0 | 0.6% | 2024-06-19 | Fix |
| CVE-2024-5021 | WordPress Picture / Portfolio / Media Gallery plugin unauthenticated server-side request forgery | 9.3CNA v3.1 | 0.4% | 2024-06-19 | |
| CVE-2024-4873 | aspengrovestudios Replace Image image replacement functionality insecure direct object reference | 4.3CNA v3.1 | 0.3% | 2024-06-19 | Fix |
| CVE-2024-4787 | Cost Calculator Builder PRO WordPress plugin unauthenticated arbitrary email Sending | 5.8CNA v3.1 | 0.3% | 2024-06-19 | Fix |
| CVE-2024-4663 | OSM Map Widget for Elementor WordPress plugin stored cross-site scripting | 6.4CNA v3.1 | 0.4% | 2024-06-19 | Fix |
| CVE-2024-4632 | WooCommerce Checkout and Funnel Builder by CartFlows WordPress plugin stored cross-site scripting | 6.4CNA v3.1 | 0.4% | 2024-06-19 | Fix |
| CVE-2024-4623 | Blogmentor Blog Layouts for Elementor WordPress plugin stored cross-site scripting | 6.4CNA v3.1 | 0.3% | 2024-06-19 | Fix |
| CVE-2024-4541 | Custom Product List Table WordPress plugin cross-site request forgery | 4.3CNA v3.1 | 0.2% | 2024-06-19 | |
| CVE-2024-4450 | AliExpress Dropshipping with AliNext Lite WordPress plugin missing authorization | 6.3CNA v3.1 | 0.3% | 2024-06-19 | Fix |
| CVE-2024-3984 | EmbedSocial Social Media Feeds, Reviews and Galleries WordPress plugin stored cross-site scripting | 6.4CNA v3.1 | 0.3% | 2024-06-19 | Fix |
| CVE-2024-3894 | Photo Gallery, Images, Slider in Rbs Image Gallery WordPress plugin stored cross-site scripting | 6.4CNA v3.1 | 0.3% | 2024-06-19 | Fix |
| CVE-2024-3229 | Salon Booking System WordPress plugin unauthenticated arbitrary file upload | 9.8CNA v3.1 | 0.9% | 2024-06-19 | Fix |
| CVE-2024-2381 | AliExpress Dropshipping with AliNext Lite WordPress plugin arbitrary file upload | 8.8CNA v3.1 | 0.9% | 2024-06-19 | Fix |
| CVE-2024-1407 | Paid Memberships Pro WordPress plugin cross-site request forgery to Membership modification | 5.4CNA v3.1 | 0.2% | 2024-06-19 | Fix |
| CVE-2024-0789 | WP Maintenance WordPress plugin IP spoofing to Maintenance Mode bypass | 5.3CNA v3.1 | 0.3% | 2024-06-19 | Fix |
| CVE-2024-0383 | WP Recipe Maker WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.4% | 2024-06-19 | Fix |
| CVE-2024-38507 | JetBrains Hub cross-site scripting | 3.5CNA v3.1 | 0.2% | 2024-06-18 | Fix |
| CVE-2024-38506 | JetBrains YouTrack missing authorization | 6.3CNA v3.1 | 0.3% | 2024-06-18 | Fix |
| CVE-2024-38505 | JetBrains YouTrack insufficiently protected credentials | 5.3CNA v3.1 | 0.4% | 2024-06-18 | Fix |
| CVE-2024-38504 | JetBrains YouTrack missing authorization | 4.3CNA v3.1 | 0.4% | 2024-06-18 | Fix |
| CVE-2024-38351 | pocketbase password auth and OAuth2 unverified email linking | 5.4CNA v3.1 | 0.3% | 2024-06-18 | Fix |
| CVE-2024-38348 | Health Care Hospital Management System SQL injection | 8.8v3.1 | 0.4% | 2024-06-18 | |
| CVE-2024-38347 | Health Care Hospital Management System SQL injection | 8.8v3.1 | 0.6% | 2024-06-18 | |
| CVE-2024-38277 | Moodle uses the same key for QR login and auto-login | 5.4CISA ADP v3.1 | 0.2% | 2024-06-18 | Fix |
| CVE-2024-38276 | Moodle: CSRF risks due to misuse of confirm_sesskey | 8.8NVD v3.1 | 0.5% | 2024-06-18 | Fix |
| CVE-2024-38275 | Moodle: HTTP authorization header is preserved between emulated redirects | 7.5CISA ADP v3.1 | 0.4% | 2024-06-18 | Fix |
| CVE-2024-38274 | Moodle: Stored XSS via calendar's event title when deleting the event | 6.1CISA ADP v3.1 | 0.4% | 2024-06-18 | Fix |
| CVE-2024-38273 | Moodle BigBlueButton web service leaks meeting joining information | 5.4CISA ADP v3.1 | 0.4% | 2024-06-18 | Fix |
| CVE-2024-37904 | Denial of service from maliciously configured Git repository in Minder | 5.7CNA v3.1 | 0.5% | 2024-06-18 | Fix |
| CVE-2024-37821 | Dolibarr arbitrary file upload | 8.8CISA ADP v3.1 | 0.8% | 2024-06-18 | Fix |
| CVE-2024-37803 | Health Care Hospital Management System CodeProjects stored cross-site scripting | 5.4v3.1 | 0.3% | 2024-06-18 | |
| CVE-2024-37802 | Health Care Hospital Management System SQL injection | 8.8NVD v3.1 | 0.6% | 2024-06-18 | |
| CVE-2024-37800 | code-projects Restaurant Reservation System cross-site scripting | 6.1v3.1 | 0.3% | 2024-06-18 | |
| CVE-2024-37799 | code-projects Restaurant Reservation System SQL injection | 5.4CISA ADP v3.1 | 0.3% | 2024-06-18 | |
| CVE-2024-37791 | DuxCMS3 keyword parameter SQL injection | 6.0CISA ADP v3.1 | 0.6% | 2024-06-18 | Exploit code |
| CVE-2024-37081 | VMware vCenter Server local privilege escalation | 7.8CNA v3.1 | 5.0% | 2024-06-18 | Exploit codeFix |
| CVE-2024-37080 | VMware vCenter Server heap-based buffer overflow | 9.8CNA v3.1 | 12.5% | 2024-06-18 | Fix |
| CVE-2024-37079 | Broadcom VMware vCenter Server out-of-bounds write | 9.8CNA v3.1 | 22.4% | 2024-06-18 | KEVFix |
| CVE-2024-36977 | Linux kernel dwc3 EndXfer command handling vulnerability | 7.8CNA v3.1 | 0.2% | 2024-06-18 | Fix |
| CVE-2024-36976 | Linux kernel V4L2 controls log_status deadlock | 5.5v3.1 | 0.1% | 2024-06-18 | Fix |
| CVE-2024-36975 | Linux kernel trusted keys encode error handling denial of service | 5.5v3.1 | 0.2% | 2024-06-18 | Fix |
| CVE-2024-36974 | Linux kernel taprio traffic scheduler vulnerability | 7.8CNA v3.1 | 0.3% | 2024-06-18 | Fix |
| CVE-2024-34024 | Fsas Technologies FUJITSU Business Application ID Link Manager II response discrepancy | 6.3CISA ADP v3.1 | 0.4% | 2024-06-18 | |
| CVE-2024-33622 | Fsas Technologies FUJITSU Business Application ID Link Manager II missing authentication | 6.5CISA ADP v3.1 | 0.4% | 2024-06-18 | |
| CVE-2024-33620 | Fsas Technologies FUJITSU Business Application ID Link Manager II absolute path traversal | 8.6CISA ADP v3.1 | 0.7% | 2024-06-18 | |
| CVE-2024-22002 | Corsair iCUE iCUE Murals installation directory vulnerability | 7.8CISA ADP v3.1 | 0.4% | 2024-06-18 | |
| CVE-2024-21685 | Atlassian Jira Core Data Center information disclosure | 7.4CNA v3.0 | 0.4% | 2024-06-18 | Fix |
| CVE-2024-6129 | spa-cartcms Username login observable behavioral discrepancy | 3.7NVD v3.1 | 0.6% | 2024-06-18 | |
| CVE-2024-6128 | spa-cartcms Checkout page checkout behavioral workflow | 5.3v3.1 | 0.5% | 2024-06-18 | |
| CVE-2024-6116 | itsourcecode Simple Online Hotel Reservation System edit_room.php unrestricted upload | 9.8v3.1 | 0.8% | 2024-06-18 | |
| CVE-2024-6115 | itsourcecode Simple Online Hotel Reservation System add_room.php unrestricted upload | 9.8v3.1 | 0.8% | 2024-06-18 | |
| CVE-2024-6114 | itsourcecode Monbela Tourist Inn Online Reservation System controller.php unrestricted upload | 9.8v3.1 | 0.8% | 2024-06-18 | |
| CVE-2024-6112 | itsourcecode Pool of Bethesda Online Reservation System index.php SQL injection | 9.8v3.1 | 0.6% | 2024-06-18 | |
| CVE-2024-6111 | itsourcecode Pool of Bethesda Online Reservation System login.php SQL injection | 9.8v3.1 | 0.7% | 2024-06-18 | |
| CVE-2024-6110 | itsourcecode Magbanua Beach Resort Online Reservation System controller.php unrestricted upload | 9.8v3.1 | 0.8% | 2024-06-18 | |
| CVE-2024-6109 | itsourcecode Tailoring Management System addmeasurement.php SQL injection | 8.8v3.1 | 0.6% | 2024-06-18 | |
| CVE-2024-6108 | Genexis Tilgin Home Gateway Login cross-site scripting | 6.9CNA v4.0 | 0.4% | 2024-06-18 | |
| CVE-2024-6084 | itsourcecode Pool of Bethesda Online Reservation System uploadImage unrestricted upload | 9.8v3.1 | 0.9% | 2024-06-18 | |
| CVE-2024-6083 | PHPVibe Media upload page upload-mp3.php unrestricted upload | 9.8v3.1 | 0.5% | 2024-06-18 | |
| CVE-2024-5970 | MaxGalleria WordPress plugin stored cross-site scripting | 6.4CNA v3.1 | 0.3% | 2024-06-18 | Fix |
| CVE-2024-5967 | Keycloak: Leak of configured LDAP bind credentials through the keycloak admin console | 2.7CNA v3.1 | 0.6% | 2024-06-18 | Fix |
| CVE-2024-5953 | Red Hat Directory Server 389-ds-base: Malformed userpassword hash may cause denial of service | 5.7CNA v3.1 | 0.6% | 2024-06-18 | Fix |
| CVE-2024-5899 | Improper trust check in Bazel Build intellij plugin | 3.3NVD v3.1 | 0.1% | 2024-06-18 | Fix |
| CVE-2024-5860 | Tickera ticket deletion AJAX action missing authorization | 4.3CNA v3.1 | 0.3% | 2024-06-18 | Fix |
| CVE-2024-5541 | Ibtana - WordPress Website Builder plugin unauthenticated reCAPTCHA settings update | 5.3CNA v3.1 | 0.5% | 2024-06-18 | Fix |
| CVE-2024-5533 | Divi WordPress theme authenticated (Contributor+) stored cross-site scripting | 5.4v3.1 | 0.3% | 2024-06-18 | Fix |
| CVE-2024-5275 | Fortra FileCatalyst Direct FileCatalyst TransferAgent hard-coded credentials | 7.8CNA v3.1 | 0.1% | 2024-06-18 | Fix |
| CVE-2024-5172 | Expert Invoice WordPress plugin Admin+ stored XSS | 4.8NVD v3.1 | 0.4% | 2024-06-18 | |
| CVE-2024-4375 | Master Slider Responsive Touch Slider WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.3% | 2024-06-18 | Fix |
| CVE-2024-4094 | Simple Share Buttons Adder WordPress plugin Admin+ stored XSS | 5.4NVD v3.1 | 0.4% | 2024-06-18 | Fix |
| CVE-2024-3276 | FooBox (Free and Premium) WordPress plugin Admin+ stored XSS | 4.8NVD v3.1 | 0.3% | 2024-06-18 | Fix |
| CVE-2024-1634 | Start Booking Scheduling Plugin service disconnect function missing authorization | 6.5CNA v3.1 | 0.4% | 2024-06-18 | |
| CVE-2024-0845 | PDF Viewer for Elementor WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.3% | 2024-06-18 | |
| CVE-2024-0066 | Axis Communications AXIS OS cleartext transmission of sensitive information | 5.3CNA v3.1 | 0.2% | 2024-06-18 | |
| CVE-2024-38470 | Ibarn cross-site scripting | 6.1CISA ADP v3.1 | 0.3% | 2024-06-17 | |
| CVE-2024-38469 | Ibarn cross-site scripting | 6.3CISA ADP v3.1 | 0.3% | 2024-06-17 | |
| CVE-2024-38449 | KasmVNC path traversal | 7.7CISA ADP v3.1 | 1.0% | 2024-06-17 | |
| CVE-2024-37902 | DeepJavaLibrary API absolute path traversal | 10.0CNA v3.1 | 0.8% | 2024-06-17 | Fix |
| CVE-2024-37896 | SQL injection vulnerability in Gin-vue-admin | 8.8CNA v3.1 | 0.5% | 2024-06-17 | Fix |
| CVE-2024-37895 | API key leak in lobe-chat | 5.7CNA v3.1 | 0.5% | 2024-06-17 | Fix |
| CVE-2024-37893 | firefly-iii MFA bypass in oauth flow in Firefly III | 5.9CNA v3.1 | 0.6% | 2024-06-17 | Fix |
| CVE-2024-37891 | Proxy-Authorization request header isn't stripped during cross-origin redirects in urllib3 | 4.4CNA v3.1 | 1.1% | 2024-06-17 | Fix |
| CVE-2024-37890 | Denial of service when handling a request with many HTTP headers in ws | 7.5CNA v3.1 | 1.3% | 2024-06-17 | Fix |
| CVE-2024-37848 | Angeljudesuarez Online Book Store Project Online-Bookstore-Project-In-PHP v1.0 SQL injection | 8.4CISA ADP v3.1 | 0.2% | 2024-06-17 | |
| CVE-2024-37840 | itsourcecode Learning Management System processscore.php SQL injection | 8.8CISA ADP v3.1 | 0.5% | 2024-06-17 | |
| CVE-2024-37828 | Vermeg Agile Reporter v23.2.1 stored cross-site scripting | 4.8CISA ADP v3.1 | 0.2% | 2024-06-17 | |
| CVE-2024-37798 | PHPGurukul Beauty Parlour Management System cross-site scripting | 5.9CISA ADP v3.1 | 0.3% | 2024-06-17 | |
| CVE-2024-37795 | CVC5 Solver SMT-LIB parser out-of-bounds read | 7.5CISA ADP v3.1 | 0.5% | 2024-06-17 | |
| CVE-2024-37794 | CVC5 Solver v1.1.3 improper input validation | 7.5CISA ADP v3.1 | 0.5% | 2024-06-17 | |
| CVE-2024-37664 | Mi Redmi AX6S improper verification of communication source | 5.2CISA ADP v3.1 | 0.4% | 2024-06-17 | |
| CVE-2024-37663 | Mi Redmi AX6S improper verification of communication source | 4.1CISA ADP v3.1 | 0.3% | 2024-06-17 | |
| CVE-2024-37662 | TP-Link Tl-7dr5130 improper verification of communication source | 6.3CISA ADP v3.1 | 0.4% | 2024-06-17 | |
| CVE-2024-37661 | TP-Link Tl-7dr5130 origin validation error | 6.3CISA ADP v3.1 | 0.3% | 2024-06-17 | |
| CVE-2024-37625 | Zhimengzhel Ibarn cross-site scripting | 6.1v3.1 | 0.3% | 2024-06-17 | |
| CVE-2024-37624 | Rockoa Xinhu cross-site scripting | 6.1v3.1 | 0.3% | 2024-06-17 | |
| CVE-2024-37623 | Rockoa Xinhu cross-site scripting | 6.1CISA ADP v3.1 | 0.3% | 2024-06-17 | |
| CVE-2024-37622 | Rockoa Xinhu cross-site scripting | 6.1CISA ADP v3.1 | 0.3% | 2024-06-17 | |
| CVE-2024-37621 | Strongshop server-side template injection | 7.2CISA ADP v3.1 | 0.7% | 2024-06-17 | |
| CVE-2024-37620 | PHPVOD view.php reflected cross-site scripting | 6.1CISA ADP v3.1 | 0.3% | 2024-06-17 | |
| CVE-2024-37619 | Strongshop cross-site scripting | 6.1NVD v3.1 | 0.4% | 2024-06-17 | |
| CVE-2024-37305 | Buffer overflow in deserialization in oqs-provider | 8.2CNA v3.1 | 0.5% | 2024-06-17 | Fix |
| CVE-2024-37159 | Evmos is missing create validator check | 3.5CNA v3.1 | 0.3% | 2024-06-17 | Fix |
| CVE-2024-37158 | Evmos is missing precompile checks | 3.5CNA v3.1 | 0.4% | 2024-06-17 | Fix |
| CVE-2024-36973 | Linux kernel pci1xxxx auxiliary bus driver double free | 8.4CNA v3.1 | 0.2% | 2024-06-17 | Fix |
| CVE-2024-36583 | byondreal accessor prototype pollution | 8.1CISA ADP v3.1 | 0.6% | 2024-06-17 | |
| CVE-2024-36582 | Object-deep-assign prototype pollution | 9.8CISA ADP v3.1 | 0.6% | 2024-06-17 | |
| CVE-2024-36581 | Badger Database prototype pollution | 7.6CISA ADP v3.1 | 0.5% | 2024-06-17 | |
| CVE-2024-36580 | @cdr0/sg prototype pollution | 9.8CISA ADP v3.1 | 0.8% | 2024-06-17 | |
| CVE-2024-36578 | @akbr/update prototype pollution | 5.9CISA ADP v3.1 | 0.2% | 2024-06-17 | |
| CVE-2024-36577 | Object Resolver prototype pollution | 8.3CISA ADP v3.1 | 0.4% | 2024-06-17 | Fix |
| CVE-2024-36575 | getsetprop A prototype pollution | 9.8CISA ADP v3.1 | 0.6% | 2024-06-17 | |
| CVE-2024-36574 | Flatten-json prototype pollution | 6.3CISA ADP v3.1 | 0.4% | 2024-06-17 | |
| CVE-2024-36573 | Obx prototype pollution | 9.8CISA ADP v3.1 | 0.7% | 2024-06-17 | Fix |
| CVE-2024-36543 | STRIMZI incorrect access control | 9.8CISA ADP v3.1 | 0.5% | 2024-06-17 | |
| CVE-2024-36527 | puppeteer-renderer URL parameter path traversal | 6.5CISA ADP v3.1 | 2.6% | 2024-06-17 | NucleiExploit code |
| CVE-2024-36289 | "FreeFrom nonce reuse | 5.3CISA ADP v3.1 | 0.2% | 2024-06-17 | |
| CVE-2024-36279 | "FreeFrom man-in-the-middle | 5.3CISA ADP v3.1 | 0.1% | 2024-06-17 | |
| CVE-2024-36277 | "FreeFrom improper signature verification | 5.3CISA ADP v3.1 | 0.3% | 2024-06-17 | |
| CVE-2024-34833 | oretnom23 Payroll Management System unrestricted file upload | 9.8CISA ADP v3.1 | 2.0% | 2024-06-17 | |
| CVE-2024-6082 | PHPVibe Global options page functionalities.global.php cross-site scripting | 6.1v3.1 | 0.4% | 2024-06-17 |