CVE-2024 list

CVE-2024 records published in June 2024

Page three of three: records 2,001 to 2,684 of the 2,684 published in June 2024, newest first. The first page carries the figures for June 2024.

CVE-2024 records published in June 2024, newest first: records 2,001 to 2,684 of 2,684
CVE Summary CVSS EPSS Published Signals
CVE-2024-32778Contest Gallery WordPress plugin arbitrary file deletion8.1v3.10.6%2024-06-09Fix
CVE-2024-32777BizPrint WordPress plugin broken access control7.5CNA v3.10.4%2024-06-09Fix
CVE-2024-32727RomethemeForm For Elementor WordPress plugin broken access control5.3CNA v3.10.3%2024-06-09Fix
CVE-2024-327255 Stars Rating Funnel WordPress plugin broken access control5.3CNA v3.10.3%2024-06-09Fix
CVE-2024-32715Olive One Click Demo Import WordPress plugin arbitrary file download5.3CISA ADP v3.10.3%2024-06-09Fix
CVE-2024-32714Academy LMS WordPress plugin broken access control8.8v3.10.3%2024-06-09Fix
CVE-2024-32713AI Post Generator AutoWriter WordPress plugin broken access control8.8v3.10.3%2024-06-09Fix
CVE-2024-32705ARForms WordPress plugin Subscriber+ arbitrary plugin Activation/Deactivation vulnerability8.8v3.10.4%2024-06-09Fix
CVE-2024-32704ARForms WordPress plugin Subscriber+ arbitrary WordPress options Removal vulnerability6.5NVD v3.10.3%2024-06-09Fix
CVE-2024-32703ARForms WordPress plugin Subscriber+ arbitrary file deletion8.1v3.10.6%2024-06-09Fix
CVE-2024-32701InstaWP Connect WordPress plugin broken access control8.8v3.10.3%2024-06-09Fix
CVE-2024-32081Filter Custom Fields and Taxonomies Light WordPress plugin broken access control8.8v3.10.4%2024-06-09
CVE-2024-31423WP Accessibility Helper (WAH) WordPress plugin broken access control8.8v3.10.3%2024-06-09Fix
CVE-2024-31359Premmerce Product Filter for WooCommerce WordPress plugin broken access control8.8v3.10.3%2024-06-09Fix
CVE-2024-31352Icegram Express WordPress plugin broken access control9.8v3.10.4%2024-06-09Fix
CVE-2024-31350AWP Classifieds WordPress plugin broken access control8.8v3.10.3%2024-06-09Fix
CVE-2024-31347Tracking Code Manager WordPress plugin broken access control4.3CNA v3.10.3%2024-06-09Fix
CVE-2024-31307Easy Social Share Buttons WordPress plugin Multiple broken access control6.3CNA v3.10.3%2024-06-09Fix
CVE-2024-31304WordPress MultiVendorX Marketplace plugin broken access control8.8v3.10.4%2024-06-09Fix
CVE-2024-31294WP Sort Order WordPress plugin broken access control8.8v3.10.3%2024-06-09Fix
CVE-2024-31284EmbedPress WordPress plugin broken access control9.8v3.10.4%2024-06-09Fix
CVE-2024-31283Advanced Local Pickup for WooCommerce WordPress plugin broken access control9.8v3.10.4%2024-06-09Fix
CVE-2024-31276Products, Order and Customers Export for WooCommerce WordPress plugin broken access control9.8v3.10.4%2024-06-09Fix
CVE-2024-31275EventPrime WordPress plugin Booking Price manipulation vulnerability9.8v3.10.5%2024-06-09Fix
CVE-2024-31274EmbedPress WordPress plugin broken access control5.3v3.10.3%2024-06-09Fix
CVE-2024-31273JS Help Desk WordPress plugin broken access control9.8v3.10.5%2024-06-09Fix
CVE-2024-31267Flexible Checkout Fields for WooCommerce WordPress plugin broken access control8.8v3.10.3%2024-06-09Fix
CVE-2024-31261Announcer Notification and message bars WordPress plugin broken access control8.8v3.10.3%2024-06-09Fix
CVE-2024-31252Responsive Lightbox and Gallery WordPress plugin broken access control8.8v3.10.4%2024-06-09Fix
CVE-2024-31248All-in-One Video Gallery WordPress plugin broken access control8.8v3.10.4%2024-06-09Fix
CVE-2024-31246PostX WordPress plugin Author+ Post/Page Duplication vulnerability8.8v3.10.3%2024-06-09Fix
CVE-2024-31244Bricksforge WordPress plugin unauthenticated arbitrary WordPress settings Change vulnerability7.5NVD v3.10.4%2024-06-09Fix
CVE-2024-31243Bricksforge WordPress plugin unauthenticated arbitrary WordPress setting deletion vulnerability7.5v3.10.4%2024-06-09Fix
CVE-2024-31098New Order Notification for Woocommerce WordPress plugin broken access control8.8v3.10.4%2024-06-09Fix
CVE-2024-30544Whizzy WordPress plugin broken access control9.8v3.10.4%2024-06-09
CVE-2024-30539Awesome Support WordPress plugin broken access control9.8v3.10.4%2024-06-09Fix
CVE-2024-30538DELUCKS SEO WordPress plugin broken access control9.8v3.10.4%2024-06-09Fix
CVE-2024-30537WPC Badge Management for WooCommerce WordPress plugin broken access control8.8v3.10.3%2024-06-09Fix
CVE-2024-30534Calendarista Basic Edition WordPress plugin broken access control9.8v3.10.4%2024-06-09Fix
CVE-2024-30529Tainacan WordPress plugin broken access control9.8v3.10.4%2024-06-09Fix
CVE-2024-30517Sliced Invoices WordPress plugin broken access control8.8v3.10.3%2024-06-09Fix
CVE-2024-30515Events Manager WordPress plugin broken access control8.8v3.10.3%2024-06-09Fix
CVE-2024-30512weForms WordPress plugin broken access control9.1v3.10.4%2024-06-09Fix
CVE-2024-30485Finale Lite WordPress plugin Subscriber+ arbitrary plugin Installation/Activation vulnerability8.8v3.11.0%2024-06-09Exploit codeFix
CVE-2024-30481JCH Optimize WordPress plugin broken access control8.8v3.10.3%2024-06-09Fix
CVE-2024-30470YITH WooCommerce Account Funds Premium WordPress plugin broken access control8.8v3.10.4%2024-06-09Fix
CVE-2024-30467Essential Blocks WordPress plugin broken access control8.8v3.10.4%2024-06-09Fix
CVE-2024-30466WooCommerce Multilingual and Multicurrency WordPress plugin broken access control8.8v3.10.4%2024-06-09Fix
CVE-2024-30465PageLayer WordPress plugin broken access control8.8v3.10.4%2024-06-09Fix
CVE-2024-30464Social Icons Widget and Block by WPZOOM WordPress plugin broken access control8.8v3.11.5%2024-06-09NucleiFix
CVE-2024-25929Product Catalog Mode For Woocommerce WordPress plugin broken access control9.1v3.10.3%2024-06-09Fix
CVE-2024-25092NextMove Lite WordPress plugin Subscriber+ arbitrary plugin Installation/Activation vulnerability8.8v3.11.4%2024-06-09Exploit codeFix
CVE-2024-24716Awesome Support WordPress plugin broken access control5.4v3.10.3%2024-06-09Fix
CVE-2024-5775SourceCodester Vehicle Management System updatebill.php SQL injection8.8v3.10.6%2024-06-09
CVE-2024-5774SourceCodester Stock Management System Login index.php SQL injection9.8v3.10.7%2024-06-09
CVE-2024-5773Netentsec NS-ASG Application Security Gateway deletemacbind.php SQL injection9.8v3.10.7%2024-06-09
CVE-2024-5772Netentsec NS-ASG Application Security Gateway deleteiscuser.php SQL injection9.8v3.10.7%2024-06-09
CVE-2024-5585PHP command injection via array-ish $command parameter of proc_open (bypass fix)7.7CNA v3.128.8%2024-06-09Fix
CVE-2024-5458PHP filter bypass in filter_var (FILTER_VALIDATE_URL)5.3CNA v3.112.1%2024-06-09Fix
CVE-2024-5389Insufficient access control in lunary-ai/Lunary8.1v3.10.4%2024-06-09
CVE-2024-4577PHP-CGI OS command injection9.8CNA v3.1100.0%2024-06-09KEVNucleiMetasploitEmerging ThreatsExploit codeFix
CVE-2024-2408PHP openssl_private_decrypt function vulnerability5.9v3.11.2%2024-06-09Fix
CVE-2024-37408fprintd pam_fprintd PAM module improper authentication7.3CISA ADP v3.10.3%2024-06-08
CVE-2024-37407libarchive out-of-bounds read9.1v3.11.0%2024-06-08Fix
CVE-2024-36970Linux kernel iwlwifi module loading deadlock5.5v3.10.1%2024-06-08Fix
CVE-2024-36969Linux kernel AMD display DSC configuration divide by zero5.5v3.10.2%2024-06-08Fix
CVE-2024-36968Linux kernel Bluetooth L2CAP flow control initialization divide by zero7.6CNA v3.10.3%2024-06-08Fix
CVE-2024-36967Linux kernel trusted keys TPM2 key encoding memory leak5.5v3.10.2%2024-06-08Fix
CVE-2024-36966Linux kernel erofs fscache mode detection uninitialized pointer access5.5v3.10.2%2024-06-08Fix
CVE-2024-36965Linux kernel MediaTek SCP remoteproc IPI buffer handling vulnerability7.8CNA v3.10.2%2024-06-08Fix
CVE-2024-35756Tooltip CK WordPress plugin cross-site scripting (XSS)4.8v3.10.3%2024-06-08
CVE-2024-35755Weather Widget Pro WordPress plugin cross-site scripting (XSS)5.4v3.10.3%2024-06-08Fix
CVE-2024-35753TemplatesNext OnePager WordPress plugin cross-site scripting (XSS)5.4v3.10.3%2024-06-08
CVE-2024-35752Stellissimo Text Box WordPress plugin cross-site scripting (XSS)4.8v3.10.3%2024-06-08
CVE-2024-35751Woody code snippets WordPress plugin cross-site scripting (XSS)4.8v3.10.3%2024-06-08Fix
CVE-2024-35750Gallery Image and Video Gallery with Thumbnails WordPress plugin SQL injection8.8v3.10.4%2024-06-08
CVE-2024-35740Pixgraphy WordPress theme cross-site scripting (XSS)5.4v3.10.3%2024-06-08Fix
CVE-2024-35739The Post Grid WordPress plugin cross-site scripting (XSS)5.4v3.10.3%2024-06-08Fix
CVE-2024-35738Kognetiks Chatbot for WordPress plugin cross-site scripting (XSS)5.4v3.10.3%2024-06-08Fix
CVE-2024-35737WP Visitors Tracker WordPress plugin reflected cross-site scripting (XSS)6.1NVD v3.10.3%2024-06-08Fix
CVE-2024-35736Visualizer WordPress plugin SQL injection8.8v3.10.4%2024-06-08Fix
CVE-2024-35734WP Time Slots Booking Form WordPress plugin cross-site scripting (XSS)6.1NVD v3.10.3%2024-06-08Fix
CVE-2024-35733Auto Coupons for WooCommerce WordPress plugin reflected cross-site scripting (XSS)6.1NVD v3.10.3%2024-06-08Fix
CVE-2024-35732YITH Custom Login WordPress plugin cross-site scripting (XSS)4.8v3.10.3%2024-06-08Fix
CVE-2024-35731Kenta Gutenberg Blocks WordPress plugin cross-site scripting (XSS)5.4v3.10.3%2024-06-08Fix
CVE-2024-35730Active Products Tables for WooCommerce WordPress plugin reflected cross-site scripting (XSS)6.1NVD v3.10.3%2024-06-08Fix
CVE-2024-35719RestroPress WordPress plugin cross-site scripting (XSS)5.4v3.10.3%2024-06-08Fix
CVE-2024-35718Newsletters WordPress plugin reflected cross-site scripting (XSS)6.1NVD v3.10.3%2024-06-08Fix
CVE-2024-35715WordPress Bloglo and Blogvi themes affected by cross-site scripting (XSS)5.4v3.10.3%2024-06-08Fix
CVE-2024-35714Idyllic WordPress theme cross-site scripting (XSS)5.4v3.10.3%2024-06-08Fix
CVE-2024-35713Testimonial Carousel For Elementor WordPress plugin cross-site scripting (XSS)5.4v3.10.2%2024-06-08Fix
CVE-2024-35711Event WordPress theme cross-site scripting (XSS)5.4v3.10.3%2024-06-08Fix
CVE-2024-35710Podlove Web Player WordPress plugin sensitive data exposure5.3CNA v3.10.4%2024-06-08Fix
CVE-2024-35709The Plus Addons for Elementor WordPress plugin cross-site scripting (XSS)5.4v3.10.3%2024-06-08Fix
CVE-2024-35708Rife Free WordPress theme cross-site scripting (XSS)5.4v3.10.3%2024-06-08Fix
CVE-2024-35707Heateor Social Login WordPress plugin cross-site scripting (XSS)5.4v3.10.3%2024-06-08Fix
CVE-2024-35706Heateor Social Login WordPress plugin cross-site scripting (XSS)6.1NVD v3.10.3%2024-06-08Fix
CVE-2024-35705Block for Font Awesome WordPress plugin cross-site scripting (XSS)5.4v3.10.3%2024-06-08Fix
CVE-2024-35704BlockArt Blocks WordPress plugin cross-site scripting (XSS)5.4v3.10.3%2024-06-08Fix
CVE-2024-35703Sina Extension for Elementor WordPress plugin cross-site scripting (XSS)5.4v3.10.2%2024-06-08Fix
CVE-2024-35702Master Addons for Elementor WordPress plugin cross-site scripting (XSS)5.4v3.10.2%2024-06-08Fix
CVE-2024-35701PropertyHive WordPress plugin cross-site scripting (XSS)5.4v3.10.3%2024-06-08Fix
CVE-2024-35699HT Feed WordPress plugin cross-site scripting (XSS)5.4v3.10.3%2024-06-08Fix
CVE-2024-35698YITH WooCommerce Tab Manager WordPress plugin cross-site scripting (XSS)4.8v3.10.3%2024-06-08Fix
CVE-2024-35697Eduma WordPress theme reflected cross-site scripting (XSS)6.1NVD v3.10.3%2024-06-08Fix
CVE-2024-35696WP Docs WordPress plugin cross-site scripting (XSS)6.1NVD v3.10.3%2024-06-08Fix
CVE-2024-35695WP Docs WordPress plugin cross-site scripting (XSS)5.4v3.10.3%2024-06-08Fix
CVE-2024-35694WPMobile.App WordPress plugin cross-site scripting (XSS)6.1NVD v3.10.7%2024-06-08NucleiFix
CVE-2024-3569312 Step Meeting List WordPress plugin cross-site scripting (XSS)6.1NVD v3.10.6%2024-06-08NucleiFix
CVE-2024-35691Widget Options - Extended WordPress plugin Multiple data exposure6.5CNA v3.10.4%2024-06-08Fix
CVE-2024-35689Analytify WordPress plugin cross-site request forgery (CSRF)8.8v3.10.2%2024-06-08Fix
CVE-2024-35688Master Addons for Elementor WordPress plugin cross-site scripting (XSS)5.4v3.10.3%2024-06-08Fix
CVE-2024-35687Link Library WordPress plugin reflected cross-site scripting (XSS)6.1NVD v3.10.3%2024-06-08Fix
CVE-2024-35684ElasticPress WordPress plugin cross-site request forgery (CSRF)4.3v3.10.2%2024-06-08Fix
CVE-2024-35682Otter Blocks PRO WordPress plugin authenticated sensitive data exposure5.3v3.10.3%2024-06-08Fix
CVE-2024-35681wpDiscuz WordPress plugin cross-site scripting (XSS)5.4v3.10.3%2024-06-08Fix
CVE-2024-35679GiveWP WordPress plugin reflected cross-site scripting (XSS)6.1NVD v3.10.3%2024-06-08Fix
CVE-2024-35678Contact Form to DB by BestWebSoft WordPress plugin SQL injection8.8v3.10.4%2024-06-08Fix
CVE-2024-35676Recurring PayPal Donations WordPress plugin cross-site scripting (XSS)5.4v3.10.3%2024-06-08Fix
CVE-2024-35675Advanced Woo Labels WordPress plugin cross-site scripting (XSS)5.4v3.10.3%2024-06-08Fix
CVE-2024-35659KiviCare WordPress plugin insecure direct object references (IDOR)8.8v3.10.3%2024-06-08Fix
CVE-2024-35657WP-Recall WordPress plugin cross-site request forgery (CSRF)5.4CNA v3.10.2%2024-06-08Fix
CVE-2024-34765Sensei Pro (WC Paid Courses) WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.4%2024-06-08Fix
CVE-2024-22151Import and export users and customers WordPress plugin broken access control5.3CNA v3.10.3%2024-06-08Fix
CVE-2024-21748Icegram Engage WordPress plugin broken access control5.4v3.10.3%2024-06-08Fix
CVE-2024-5771LabVantage LIMS POST request SQL injection5.3CNA v4.00.3%2024-06-08
CVE-2024-5770WP Force SSL and HTTPS SSL Redirect WordPress plugin missing authorization to settings update4.3v3.10.3%2024-06-08Fix
CVE-2024-5766Likeshop Merchandise admin cross-site scripting4.8v3.10.3%2024-06-08
CVE-2024-5663Cards for Beaver Builder WordPress plugin stored cross-site scripting5.4v3.10.3%2024-06-08Fix
CVE-2024-5654CF7 Google Sheets Connector WordPress plugin missing authorization limited site Configuration update6.5v3.10.4%2024-06-08Fix
CVE-2024-5638Formula WordPress theme reflected cross-site scripting6.1CNA v3.10.4%2024-06-08Fix
CVE-2024-5613Formula WordPress theme reflected cross-site scripting via quality_customizer_notify_dismiss_action6.1CNA v3.10.4%2024-06-08Fix
CVE-2024-5091SKT Addons for Elementor WordPress plugin stored cross-site scripting5.4NVD v3.10.3%2024-06-08Fix
CVE-2024-5087Minimal Coming Soon Coming Soon Page WordPress plugin missing authorization limited settings Change5.4v3.10.4%2024-06-08Fix
CVE-2024-4680Insufficient session expiration in zenml-io/ZenML8.8v3.10.4%2024-06-08
CVE-2024-4661WP Reset WordPress plugin missing authorization to License Key modification4.3CNA v3.10.3%2024-06-08Fix
CVE-2024-4468Salon booking system WordPress plugin missing authorization5.4v3.10.4%2024-06-08Fix
CVE-2024-4146Incorrect authorization in lunary-ai/Lunary9.8v3.10.5%2024-06-08Fix
CVE-2024-3668PowerPack Pro for Elementor WordPress plugin authenticated (Contributor+) privilege escalation8.8CNA v3.10.4%2024-06-08Fix
CVE-2024-37388Ebookmeta XML external entity9.1v3.10.5%2024-06-07Fix
CVE-2024-37385Roundcube Webmail command injection9.8CISA ADP v3.11.5%2024-06-07Fix
CVE-2024-37384Roundcube Webmail cross-site scripting6.1CISA ADP v3.10.5%2024-06-07Fix
CVE-2024-37383RoundCube Webmail cross-site scripting (XSS)6.1v3.173.3%2024-06-07KEVEmerging ThreatsExploit codeFix
CVE-2024-37163oslabs-beta SkyScraper SkyScrape Secure API requests6.4CNA v3.10.2%2024-06-07Fix
CVE-2024-37162zsa Generates Error Messages Containing Sensitive Information4.0CNA v3.10.3%2024-06-07Fix
CVE-2024-37160Formwork has a cross-site scripting (XSS) vulnerability in Description metadata4.8CNA v3.10.5%2024-06-07Fix
CVE-2024-36827Ebookmeta XML external entity7.5v3.10.5%2024-06-07Fix
CVE-2024-36792NETGEAR WNR614 cleartext storage of sensitive information in memory8.2CISA ADP v3.10.3%2024-06-07
CVE-2024-36790NETGEAR WNR614 cleartext storage of sensitive information8.8CISA ADP v3.10.3%2024-06-07
CVE-2024-36789NETGEAR WNR614 weak password requirements8.1CISA ADP v3.10.4%2024-06-07
CVE-2024-36788NETGEAR WNR614 insecure storage of sensitive information4.8v3.10.3%2024-06-07
CVE-2024-36787NETGEAR WNR614 weak authentication8.8CISA ADP v3.10.6%2024-06-07
CVE-2024-36773Monstra cross-site scripting4.8v3.10.4%2024-06-07
CVE-2024-36673Pharmacy/medical Store Point Of Sale System SQL injection9.8v3.10.5%2024-06-07
CVE-2024-36082codepeople Music Store SQL injection6.5v3.10.5%2024-06-07Fix
CVE-2024-32503Samsung Exynos 1080 use-after-free7.8v3.10.2%2024-06-07Fix
CVE-2024-32502Samsung Exynos 1080 use-after-free8.4CNA v3.10.2%2024-06-07Fix
CVE-2024-31959Samsung Exynos 1480 code execution7.8v3.10.2%2024-06-07Fix
CVE-2024-31958Samsung Exynos 1480 improper integrity check validation7.8v3.10.1%2024-06-07Fix
CVE-2024-31878IBM i information disclosure5.3CNA v3.10.4%2024-06-07Fix
CVE-2024-30163Invisioncommunity SQL injection9.8v3.18.7%2024-06-07NucleiFix
CVE-2024-30162Invision Community admin editor toolbar plugin installer vulnerability7.2CISA ADP v3.10.7%2024-06-07
CVE-2024-5745itsourcecode Bakery Online Ordering System unrestricted upload9.8v3.10.9%2024-06-07
CVE-2024-5734itsourcecode Online Discussion Forum poster.php unrestricted upload8.8v3.10.6%2024-06-07
CVE-2024-5733itsourcecode Online Discussion Forum register_me.php SQL injection9.8v3.10.6%2024-06-07
CVE-2024-5732Clash Proxy Port improper authentication9.8v3.10.9%2024-06-07
CVE-2024-5645Envo Extra WordPress plugin stored cross-site scripting5.4v3.10.3%2024-06-07Fix
CVE-2024-5640Prime Slider Addons For Elementor WordPress plugin stored cross-site scripting5.4v3.10.3%2024-06-07Fix
CVE-2024-5637Market Exporter WordPress plugin missing authorization to arbitrary file deletion8.1v3.10.8%2024-06-07Fix
CVE-2024-5612Essential Addons for Elementor Pro WordPress plugin stored cross-site scripting5.4v3.10.3%2024-06-07Fix
CVE-2024-5607GDPR CCPA Compliance and Cookie Consent Banner WordPress plugin unauthorized access5.4CNA v3.10.3%2024-06-07Fix
CVE-2024-5599FileOrganizer WordPress plugin sensitive information exposure via directory listing7.5CNA v3.10.5%2024-06-07Fix
CVE-2024-5542Master Addons WordPress plugin stored cross-site scripting6.1NVD v3.10.3%2024-06-07Fix
CVE-2024-5481Photo Gallery by 10Web Mobile-Friendly Image Gallery WordPress plugin path traversal8.8v3.10.7%2024-06-07Fix
CVE-2024-5438Tutor LMS WordPress plugin insecure direct object reference4.3v3.10.3%2024-06-07Fix
CVE-2024-5426Photo Gallery by 10Web Mobile-Friendly Image Gallery WordPress plugin stored cross-site scripting5.4v3.10.3%2024-06-07Fix
CVE-2024-5425WP jQuery Lightbox WordPress plugin stored cross-site scripting5.4v3.10.3%2024-06-07Fix
CVE-2024-5382Master Addons WordPress plugin unauthorized access5.3v3.10.3%2024-06-07Fix
CVE-2024-5003WP Stacker WordPress plugin stored XSS via CSRF5.4NVD v3.10.2%2024-06-07
CVE-2024-4902Tutor LMS eLearning and online course solution WordPress plugin SQL injection7.2v3.10.5%2024-06-07Fix
CVE-2024-4887Qi Addons For Elementor WordPress plugin authenticated (Contributor+) local file inclusion7.5CNA v3.10.6%2024-06-07Fix
CVE-2024-4756WP Backpack WordPress plugin Admin+ stored XSS5.4CISA ADP v3.10.3%2024-06-07
CVE-2024-4703One Page Express Companion WordPress plugin stored cross-site scripting5.4v3.10.3%2024-06-07Fix
CVE-2024-4621ArForms WordPress plugin Admin+ stored XSS4.8CISA ADP v3.10.4%2024-06-07Fix
CVE-2024-4620ArForms WordPress plugin unauthenticated RCE9.8CISA ADP v3.13.3%2024-06-07NucleiFix
CVE-2024-4610Arm Mali GPU Kernel Driver use-after-free7.8v3.10.8%2024-06-07KEVFix
CVE-2024-4489Royal Elementor Addons and Templates WordPress plugin stored cross-site scripting5.4v3.10.3%2024-06-07Fix
CVE-2024-4488Royal Elementor Addons and Templates WordPress plugin stored cross-site scripting5.4v3.10.3%2024-06-07Fix
CVE-2024-4451Colibri Page Builder WordPress plugin stored cross-site scripting5.4v3.10.3%2024-06-07Fix
CVE-2024-4354TablePress Tables in WordPress made easy plugin server-side request forgery6.4CNA v3.10.4%2024-06-07Fix
CVE-2024-4042Post Grid WordPress plugin stored cross-site scripting5.4v3.10.3%2024-06-07Fix
CVE-2024-3987WP Mobile Menu The Mobile-Friendly Responsive Menu WordPress plugin stored cross-site scripting5.4CNA v3.10.3%2024-06-07Fix
CVE-2024-3592Quiz And Survey Master Best Quiz, Exam and Survey Plugin for WordPress SQL injection6.5NVD v3.10.5%2024-06-07Fix
CVE-2024-3288Logo Slider WordPress plugin Contributor+ stored XSS5.4NVD v3.10.3%2024-06-07Fix
CVE-2024-1988Post Grid WordPress plugin stored cross-site scripting5.4v3.10.3%2024-06-07Fix
CVE-2024-1768Clever Fox WordPress plugin authenticated (Contributor+) stored cross-site scripting5.4v3.10.3%2024-06-07Fix
CVE-2024-1694Google Omaha inappropriate implementation7.8v3.10.2%2024-06-07Fix
CVE-2024-1689WooCommerce Tools WordPress plugin missing authorization authenticated plugin Module deactivation4.3CNA v3.10.3%2024-06-07Fix
CVE-2024-0444GStreamer AV1 Video Parsing stack-based buffer overflow remote code execution8.8v3.11.6%2024-06-07Fix
CVE-2024-37364Ariane Allegro Scenario Player Ariane Duo kiosk mode improper privilege management6.8CNA v3.10.3%2024-06-06
CVE-2024-37156SuluFormBundle TokenController formName not sanitized in hidden input6.1CNA v3.10.3%2024-06-06Fix
CVE-2024-37154Evmos allows unvested token delegations5.3CNA v3.10.4%2024-06-06Fix
CVE-2024-37153Evmos's contract balance not updating correctly after interchain transaction7.5CNA v3.10.6%2024-06-06Fix
CVE-2024-37152argoproj argo-cd unauthenticated access to sensitive settings in Argo CD5.3CNA v3.12.3%2024-06-06NucleiFix
CVE-2024-37150denoland deno private npm registry support used scope auth token for downloading tarballs7.6CNA v3.10.4%2024-06-06Fix
CVE-2024-36823Weak encryption in Ninja Core7.5v3.10.8%2024-06-06Exploit code
CVE-2024-36795NETGEAR WNR614 insecure permissions4.0CISA ADP v3.10.3%2024-06-06
CVE-2024-36779Stock Management System SQL injection9.8v3.10.6%2024-06-06
CVE-2024-36775Monstra cross-site scripting5.4v3.10.3%2024-06-06
CVE-2024-36774Monstra An arbitrary file upload7.2v3.10.7%2024-06-06
CVE-2024-36745Oneflow denial of service7.5v3.10.4%2024-06-06
CVE-2024-36743Oneflow improper array index validation7.5CISA ADP v3.10.4%2024-06-06
CVE-2024-36742Oneflow denial of service7.5CISA ADP v3.10.4%2024-06-06
CVE-2024-36740Oneflow improper array index validation7.5CISA ADP v3.10.5%2024-06-06
CVE-2024-36737Oneflow improper input validation7.5CISA ADP v3.10.5%2024-06-06
CVE-2024-36736Oneflow incorrect calculation9.8v3.10.6%2024-06-06
CVE-2024-36735Oneflow incorrect type conversion5.3v3.10.4%2024-06-06
CVE-2024-36734Oneflow improper input validation7.5CISA ADP v3.10.5%2024-06-06
CVE-2024-36732Oneflow infinite loop7.5CISA ADP v3.10.5%2024-06-06
CVE-2024-36730Oneflow improper input validation7.5v3.10.5%2024-06-06
CVE-2024-36399Kanboard affected by Project takeover via IDOR in ProjectPermissionController8.2CNA v3.10.4%2024-06-06Fix
CVE-2024-36394SysAid improper neutralization of special elements used in an OS command (OS command injection)9.8v3.11.1%2024-06-06KCV
CVE-2024-36393SysAid improper neutralization of special elements used in an SQL command (SQL injection)9.8v3.10.4%2024-06-06
CVE-2024-36106argoproj argo-cd argo CD allows authenticated users to enumerate clusters by name4.3CNA v3.10.4%2024-06-06Fix
CVE-2024-35178Jupyter server on Windows discloses Windows user password hash7.5CNA v3.10.7%2024-06-06Fix
CVE-2024-34832CubeCart path traversal9.8v3.15.0%2024-06-06Exploit code
CVE-2024-33655DNS protocol denial of service7.5CISA ADP v3.11.7%2024-06-06Fix
CVE-2024-32873evmos allows transferring unvested tokens after delegations3.5CNA v3.10.4%2024-06-06Fix
CVE-2024-32752Johnson Controls Software House iSTAR Configuration Utility (ICU) tool8.8CNA v4.00.6%2024-06-06Fix
CVE-2024-30375Luxion KeyShot Viewer KSP File Parsing use-after-free remote code execution7.8v3.10.5%2024-06-06
CVE-2024-30374Luxion KeyShot Viewer KSP File Parsing out-of-bounds write remote code execution7.8v3.10.6%2024-06-06
CVE-2024-30373Kofax Power PDF JPF File Parsing out-of-bounds write remote code execution7.8v3.10.6%2024-06-06
CVE-2024-30369A10 Thunder ADC incorrect permission assignment local privilege escalation7.8v3.10.3%2024-06-06Fix
CVE-2024-30368A10 Thunder ADC CsrRequestView command injection remote code execution8.8v3.13.0%2024-06-06Fix
CVE-2024-28995SolarWinds Serv-U path traversal8.6CNA v3.199.6%2024-06-06KEVNucleiMetasploitEmerging ThreatsExploit codeFix
CVE-2024-24199smartdns commit 54b4dc was discovered to contain a misaligned address at smartdns/src/dns.c.7.5v3.10.5%2024-06-06Fix
CVE-2024-24198pymumu SmartDNS utility functions vulnerability7.5v3.10.5%2024-06-06Fix
CVE-2024-24195robdns commit d76d2e6 was discovered to contain a misaligned address at /src/zonefile-insertion.c.7.5v3.10.4%2024-06-06
CVE-2024-24194robdns configuration parser null pointer dereference7.5CISA ADP v3.10.4%2024-06-06
CVE-2024-24192Robertdavidgraham Robdns buffer overflow9.1v3.10.4%2024-06-06
CVE-2024-23793OTRS upload of files outside application directory6.3CNA v3.10.8%2024-06-06
CVE-2024-22525Dnspod Security Recursive null pointer dereference5.5v3.10.2%2024-06-06
CVE-2024-22524Dnspod Security Recursive null pointer dereference5.5v3.10.2%2024-06-06
CVE-2024-22326IBM System Storage improper authentication5.0CNA v3.10.4%2024-06-06Fix
CVE-2024-22074Dynamsoft Service improper access control9.8v3.10.4%2024-06-06Fix
CVE-2024-5684Volkswagen ID.Charger Connect and Pro JWT authentication authentication bypass8.8v3.10.2%2024-06-06
CVE-2024-5675Unreliable data deserialization vulnerability in Mentor9.8v3.10.6%2024-06-06Fix
CVE-2024-5673Cross-site scripting in PHP File Manager by Dulldusk6.1v3.10.3%2024-06-06
CVE-2024-5665Login/Signup Popup - missing authorization to arbitrary Options Exposure4.3v3.10.4%2024-06-06Fix
CVE-2024-5658CraftCMS Plugin Two-factor Authentication TOTP Token Stays Valid after Use6.5v3.10.6%2024-06-06Fix
CVE-2024-5657CraftCMS Plugin Two-factor Authentication password hash disclosure8.1v3.10.8%2024-06-06Fix
CVE-2024-5615Open Graph WordPress plugin unauthenticated sensitive information exposure5.3CNA v3.10.5%2024-06-06Fix
CVE-2024-5552ReDoS in Kubeflow/Kubeflow7.5v3.10.6%2024-06-06
CVE-2024-5550Exposure of sensitive information via arbitrary System Path Lookup in h2oai/h2o-35.3v3.10.8%2024-06-06
CVE-2024-5509Luxion KeyShot BIP File Parsing uncontrolled search path element remote code execution7.8v3.10.5%2024-06-06Fix
CVE-2024-5508Luxion KeyShot Viewer KSP File Parsing out-of-bounds write remote code execution7.8v3.10.7%2024-06-06Fix
CVE-2024-5507Luxion KeyShot Viewer KSP File Parsing stack-based buffer overflow remote code execution7.8v3.10.8%2024-06-06Fix
CVE-2024-5506Luxion KeyShot Viewer KSP File Parsing out-of-bounds write remote code execution7.8v3.10.7%2024-06-06Fix
CVE-2024-5505NETGEAR ProSAFE Network Management System UpLoadServlet directory traversal remote code execution8.8v3.147.0%2024-06-06
CVE-2024-5489Wbcom Designs - Custom Font Uploader WordPress plugin missing authorization to Font deletion4.3CNA v3.10.5%2024-06-06Fix
CVE-2024-5482SSRF in add_webpage endpoint in parisneo/lollms-webui9.8v3.10.7%2024-06-06
CVE-2024-5478Cross-site scripting (XSS) in SAML metadata endpoint in lunary-ai/Lunary6.1NVD v3.10.3%2024-06-06
CVE-2024-5452RCE via Property/Class Pollution in lightning-ai/pytorch-lightning9.8v3.126.5%2024-06-06Exploit codeFix
CVE-2024-5449WP Dark Mode WordPress plugin unauthorized access4.3v3.10.3%2024-06-06Fix
CVE-2024-5342Simple Image Popup Shortcode WordPress plugin stored cross-site scripting5.4v3.10.3%2024-06-06Fix
CVE-2024-5329Unlimited Elements For Elementor WordPress plugin blind SQL injection8.8CNA v3.10.5%2024-06-06Fix
CVE-2024-5328SSRF vulnerability in lunary-ai/Lunary9.3v3.10.4%2024-06-06
CVE-2024-5324XootiX Framework import_settings function missing authorization8.8CNA v3.11.5%2024-06-06Exploit codeFix
CVE-2024-5307Kofax Power PDF AcroForm Annotation out-of-bounds read information disclosure3.3v3.10.4%2024-06-06
CVE-2024-5306Kofax Power PDF PDF File Parsing memory corruption remote code execution7.8v3.10.4%2024-06-06
CVE-2024-5305Kofax Power PDF PDF File Parsing stack-based buffer overflow remote code execution7.8v3.10.4%2024-06-06
CVE-2024-5304Kofax Power PDF TGA File Parsing out-of-bounds write remote code execution7.8v3.10.4%2024-06-06
CVE-2024-5303Kofax Power PDF PSD File Parsing out-of-bounds write remote code execution7.8v3.10.5%2024-06-06
CVE-2024-5302Kofax Power PDF PDF File Parsing out-of-bounds write remote code execution7.8v3.10.5%2024-06-06
CVE-2024-5301Kofax Power PDF PSD File Parsing heap-based buffer overflow remote code execution7.8v3.10.5%2024-06-06
CVE-2024-5278Unrestricted file upload leading to RCE in gaizhenbiao/ChuanhuChatGPT6.1v3.10.6%2024-06-06Fix
CVE-2024-5277Weak password recovery Mechanism in lunary-ai/Lunary7.5v3.10.4%2024-06-06
CVE-2024-5269Sonos Era 100 SMB2 Message Handling use-after-free remote code execution8.8v3.11.2%2024-06-06
CVE-2024-5268Sonos Era 100 SMB2 Message Handling out-of-bounds read information disclosure6.5v3.10.5%2024-06-06
CVE-2024-5267Sonos Era 100 SMB2 Message Handling out-of-bounds write remote code execution8.8v3.10.7%2024-06-06
CVE-2024-5259MultiVendorX Marketplace WordPress plugin stored cross-site scripting5.4v3.10.3%2024-06-06Fix
CVE-2024-5256Sonos Era 100 SMB2 Message Handling integer underflow information disclosure4.3v3.10.4%2024-06-06
CVE-2024-5248Improper access control in lunary-ai/Lunary6.5v3.10.5%2024-06-06Fix
CVE-2024-5225SQL injection in BerriAI/LiteLLM7.2v3.10.4%2024-06-06Fix
CVE-2024-5224Easy Social Like Box Popup Sidebar Widget WordPress plugin stored cross-site scripting5.4v3.10.3%2024-06-06Fix
CVE-2024-5221Qi Blocks WordPress plugin authenticated (Author+) stored cross-site scripting5.4v3.10.3%2024-06-06Fix
CVE-2024-5206Scikit-learn sensitive data leakage4.7v3.10.2%2024-06-06Fix
CVE-2024-5188Essential Addons for Elementor WordPress plugin stored cross-site scripting5.4v3.10.3%2024-06-06Fix
CVE-2024-5187Arbitrary file overwrite in download_model_with_test_data in onnx/onnx8.8v3.11.2%2024-06-06Fix
CVE-2024-5186Server side request forgery (SSRF) in imartinez/PrivateGPT7.2v3.10.3%2024-06-06
CVE-2024-5179Cowidgets Elementor Addons WordPress plugin authenticated (Contributor+) local file inclusion8.8CNA v3.10.9%2024-06-06Fix
CVE-2024-5162WordPress prettyPhoto plugin stored cross-site scripting5.4v3.10.3%2024-06-06Fix
CVE-2024-5161Magical Addons For Elementor WordPress plugin stored cross-site scripting5.4v3.10.3%2024-06-06Fix
CVE-2024-5153Startklar Elementor Addons WordPress plugin path traversal9.8NVD v3.11.0%2024-06-06Fix
CVE-2024-5152ElementsReady Addons for Elementor WordPress plugin stored cross-site scripting5.4v3.10.3%2024-06-06Fix
CVE-2024-5141Rotating Tweets (Twitter widget and shortcode) WordPress plugin stored cross-site scripting5.4v3.10.3%2024-06-06Fix
CVE-2024-5133Account takeover via Exposed Recovery Token in lunary-ai/Lunary8.1NVD v3.10.5%2024-06-06
CVE-2024-5131Improper access control in lunary-ai/Lunary6.5NVD v3.10.5%2024-06-06Fix
CVE-2024-5130Incorrect authorization in lunary-ai/Lunary7.5v3.10.5%2024-06-06Fix
CVE-2024-5129Privilege escalation vulnerability in lunary-ai/Lunary8.2v3.10.5%2024-06-06Fix
CVE-2024-5128IDOR vulnerability in lunary-ai/Lunary8.8NVD v3.10.5%2024-06-06Fix
CVE-2024-5127Improper access control in lunary-ai/Lunary5.4v3.10.3%2024-06-06Fix
CVE-2024-5126Improper access control in lunary-ai/Lunary6.5NVD v3.10.3%2024-06-06Fix
CVE-2024-5124gaizhenbiao ChuanhuChatGPT password comparison vulnerability7.5v3.11.4%2024-06-06Exploit codeFix
CVE-2024-5038Colibri Page Builder WordPress plugin stored cross-site scripting5.4v3.10.3%2024-06-06Fix
CVE-2024-5001Image Hover Effects for Elementor plugin stored cross-site scripting5.4v3.10.3%2024-06-06Fix
CVE-2024-4942Custom Dash WordPress plugin authenticated (Administrator+) stored cross-site scripting4.8v3.10.3%2024-06-06
CVE-2024-4941Local file inclusion in JSON component in gradio-app/Gradio7.5v3.10.8%2024-06-06Fix
CVE-2024-4890Blind SQL injection in BerriAI/LiteLLM4.9v3.10.6%2024-06-06Exploit code
CVE-2024-4889Code injection in BerriAI/LiteLLM7.2v3.10.9%2024-06-06
CVE-2024-4888Arbitrary file deletion in BerriAI/LiteLLM8.1v3.10.6%2024-06-06Fix
CVE-2024-4881Path traversal in parisneo/Lollms7.5v3.10.9%2024-06-06Fix
CVE-2024-4851SSRF vulnerability in stangirard/Quivr7.7v3.10.6%2024-06-06
CVE-2024-4788Boostify Header Footer Builder for Elementor WordPress plugin unauthorized access4.3v3.10.3%2024-06-06Fix
CVE-2024-4707Materialis Companion WordPress plugin Store cross-site scripting5.4v3.10.3%2024-06-06Fix
CVE-2024-4705Testimonials Widget WordPress plugin stored cross-site scripting5.4v3.10.3%2024-06-06Fix
CVE-2024-4608SellKit WordPress plugin stored cross-site scripting5.4v3.10.3%2024-06-06Fix
CVE-2024-4459Themesflat Addons For Elementor WordPress plugin stored cross-site scripting5.4v3.10.3%2024-06-06Fix
CVE-2024-4458Themesflat Addons For Elementor WordPress plugin stored cross-site scripting5.4v3.10.3%2024-06-06Fix
CVE-2024-4364Qi Addons For Elementor WordPress plugin stored cross-site scripting5.4v3.10.3%2024-06-06Fix
CVE-2024-4325Server-side request forgery (SSRF) in gradio-app/Gradio8.6v3.137.4%2024-06-06Nuclei
CVE-2024-4320Remote code execution due to LFI in /install_extension in parisneo/lollms-webui9.8v3.134.4%2024-06-06Exploit code
CVE-2024-4212Themesflat Addons For Elementor WordPress plugin stored cross-site scripting in Multiple Widgets5.4v3.10.4%2024-06-06Fix
CVE-2024-4194Album and Image Gallery plus Lightbox WordPress plugin unauthenticated arbitrary shortcode execution7.3v3.10.5%2024-06-06Fix
CVE-2024-4177Host whitelist parser issue in GravityZone Console On-Premise (VA-11554)8.1CNA v3.10.4%2024-06-06Fix
CVE-2024-4013silabs.com Gecko SDK Failure to update BT Mesh Replay Protection List5.6CNA v3.10.3%2024-06-06Fix
CVE-2024-3504Improper access control in lunary-ai/Lunary6.5NVD v3.10.5%2024-06-06Fix
CVE-2024-3429Path traversal in parisneo/Lollms9.8v3.128.3%2024-06-06Fix
CVE-2024-3408Authentication bypass and RCE in man-group/dtale9.8v3.178.0%2024-06-06Reported exploitedNucleiMetasploitEmerging ThreatsExploit codeFix
CVE-2024-3404Improper access control in gaizhenbiao/ChuanhuChatGPT6.5v3.10.5%2024-06-06Fix
CVE-2024-3402Stored XSS vulnerability in gaizhenbiao/ChuanhuChatGPT5.4v3.10.5%2024-06-06
CVE-2024-3322Path traversal in parisneo/lollms-webui9.8v3.10.7%2024-06-06Fix
CVE-2024-3234Path traversal in gaizhenbiao/ChuanhuChatGPT9.8v3.13.7%2024-06-06NucleiFix
CVE-2024-3166Cross-site scripting (XSS) Vulnerability in mintplex-labs/anything-llm9.6v3.11.0%2024-06-06Fix
CVE-2024-3153Uncontrolled resource consumption in mintplex-labs/anything-llm6.5v3.10.7%2024-06-06Fix
CVE-2024-3152Privilege escalation and local file inclusion in mintplex-labs/anything-llm8.8v3.10.6%2024-06-06Fix
CVE-2024-3150Privilege escalation in mintplex-labs/anything-llm8.8v3.10.8%2024-06-06Fix
CVE-2024-3149SSRF in mintplex-labs/anything-llm8.8NVD v3.10.5%2024-06-06Fix
CVE-2024-3110Stored XSS leading to admin account takeover in mintplex-labs/anything-llm8.7v3.10.7%2024-06-06Fix
CVE-2024-3104Remote code execution in mintplex-labs/anything-llm9.8v3.11.0%2024-06-06Fix
CVE-2024-3102JSON injection in mintplex-labs/anything-llm5.3v3.10.5%2024-06-06Fix
CVE-2024-3099Denial of service and Data Model Poisoning via URL Encoding in MLflow/MLflow5.4v3.10.4%2024-06-06Fix
CVE-2024-3095SSRF in Langchain Web Research Retriever in langchain-ai/langchain7.7v3.10.7%2024-06-06Fix
CVE-2024-3049Booth: Specially crafted hash can lead to invalid hmac being accepted by Booth server5.9NVD v3.10.5%2024-06-06Fix
CVE-2024-3033Improper authorization in mintplex-labs/anything-llm9.4v3.10.6%2024-06-06Fix
CVE-2024-2965Denial of service in LangChain SitemapLoader in langchain-ai/langchain4.7v3.10.3%2024-06-06Fix
CVE-2024-2928Local file inclusion (LFI) via URI Fragment Parsing in MLflow/MLflow7.5NVD v3.121.8%2024-06-06NucleiExploit codeFix
CVE-2024-2922Themesflat Addons For Elementor WordPress plugin stored cross-site scripting5.4v3.10.3%2024-06-06Fix
CVE-2024-2914Deep Java Library tar extraction path traversal8.8v3.10.9%2024-06-06Fix
CVE-2024-2624Path traversal and arbitrary file upload vulnerability in parisneo/lollms-webui9.8v3.11.4%2024-06-06Fix
CVE-2024-2548Path traversal in parisneo/lollms-webui7.5v3.10.9%2024-06-06Fix
CVE-2024-2383Clickjacking vulnerability in zenml-io/ZenML6.1v3.10.4%2024-06-06Fix
CVE-2024-2362Path traversal in parisneo/lollms-webui9.1v3.11.2%2024-06-06
CVE-2024-2360Path traversal leading to remote code execution in parisneo/lollms-webui9.8v3.11.9%2024-06-06
CVE-2024-2359Improper neutralization of special elements used in an OS command in parisneo/lollms-webui9.8v3.11.2%2024-06-06
CVE-2024-2350Clever Addons for Elementor WordPress plugin stored cross-site scripting5.4v3.10.3%2024-06-06Fix
CVE-2024-2288CSRF file upload vulnerability in parisneo/lollms-webui8.3v3.10.3%2024-06-06Fix
CVE-2024-2213Improper authentication in zenml-io/ZenML3.3v3.10.2%2024-06-06Fix
CVE-2024-2171Stored XSS in zenml-io/ZenML4.8v3.10.4%2024-06-06Fix
CVE-2024-2035Improper authorization in zenml-io/ZenML6.5v3.10.6%2024-06-06Fix
CVE-2024-2032Race condition vulnerability in zenml-io/ZenML3.1v3.10.3%2024-06-06Fix
CVE-2024-2017Countdown WordPress plugin unauthorized access5.4CNA v3.10.3%2024-06-06Fix
CVE-2024-1881Improper neutralization of special elements used in an OS command in Significant-Gravitas/autogpt9.8v3.11.4%2024-06-06Fix
CVE-2024-1880OS command injection in MacOS Text-To-Speech class in Significant-Gravitas/autogpt7.8v3.11.0%2024-06-06Fix
CVE-2024-1879CSRF to RCE in Significant-Gravitas/autogpt8.8v3.10.5%2024-06-06Fix
CVE-2024-1873Path traversal and denial of service in parisneo/lollms-webui9.1v3.113.4%2024-06-06Fix
CVE-2024-1175WP-Recall delete_payment function missing authorization5.3v3.10.4%2024-06-06Fix
CVE-2024-0972BuddyPress Members Only WordPress plugin improper access control to sensitive information exposure5.3CNA v3.10.4%2024-06-06Fix
CVE-2024-0912Johnson Controls Software House C•CURE 9000 CCURE passwords exposed to administrators8.5CNA v4.00.2%2024-06-06Fix
CVE-2024-0910The Restrict for Elementor plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.0.7 due to improper restrictions on hidden data that make it accessible through the REST API. This makes it possible for unauthenticated attackers to extract potent5.3CNA v3.10.5%2024-06-06Fix
CVE-2024-0520Remote code execution due to Full Controlled File Write in MLflow/MLflow8.8NVD v3.12.4%2024-06-06Fix
CVE-2024-36837CRMEB ProductController getProductList function SQL injection7.5v3.18.3%2024-06-05NucleiExploit code
CVE-2024-36670idcCMS cross-site request forgery8.8CISA ADP v3.10.3%2024-06-05
CVE-2024-36669idcCMS cross-site request forgery8.8v3.10.2%2024-06-05
CVE-2024-36668idcCMS cross-site request forgery8.8v3.10.2%2024-06-05
CVE-2024-36667idcCMS cross-site request forgery8.8v3.10.2%2024-06-05
CVE-2024-36129opentelemetry-collector OpenTelemetry Collector has a denial of service8.2CNA v3.11.2%2024-06-05Fix
CVE-2024-35674Unlimited Elements For Elementor WordPress plugin broken access control8.8v3.10.4%2024-06-05Fix
CVE-2024-35673Pure Chat WordPress plugin cross-site request forgery (CSRF)4.3v3.10.2%2024-06-05Fix
CVE-2024-34055Cyrus IMAP resource exhaustion6.5v3.10.8%2024-06-05Fix
CVE-2024-28818Samsung Exynos Modem 5123 improper access control7.5v3.10.3%2024-06-05Fix
CVE-2024-27382Samsung Exynos 1280 out-of-bounds read7.1v3.10.2%2024-06-05Fix
CVE-2024-27381Samsung Exynos 1280 out-of-bounds read6.0v3.10.2%2024-06-05Fix
CVE-2024-27380Samsung Exynos 1280 out-of-bounds read6.0v3.10.2%2024-06-05Fix
CVE-2024-27379Samsung Exynos 1280 out-of-bounds write7.8v3.10.2%2024-06-05Fix
CVE-2024-27378Samsung Exynos 1280 out-of-bounds read7.1v3.10.2%2024-06-05Fix
CVE-2024-27377Samsung Exynos 1280 out-of-bounds write7.8v3.10.2%2024-06-05Fix
CVE-2024-27376Samsung Exynos 1280 out-of-bounds write7.8v3.10.2%2024-06-05Fix
CVE-2024-27375Samsung Exynos 1280 out-of-bounds write7.8v3.10.2%2024-06-05Fix
CVE-2024-27374Samsung Exynos 1280 heap-based buffer overflow7.8v3.10.2%2024-06-05Fix
CVE-2024-27373Samsung Exynos 1280 out-of-bounds write7.8v3.10.2%2024-06-05Fix
CVE-2024-27372Samsung Exynos 1280 heap-based buffer overflow7.8v3.10.2%2024-06-05Fix
CVE-2024-27371Samsung Exynos 1280 out-of-bounds write7.8v3.10.2%2024-06-05Fix
CVE-2024-27370Samsung Exynos 1280 out-of-bounds write7.8v3.10.2%2024-06-05Fix
CVE-2024-24790Unexpected behavior from Is methods for IPv4-mapped IPv6 addresses in net/netip9.8v3.12.0%2024-06-05Fix
CVE-2024-24789Mishandling of corrupt central directory record in archive/zip5.5v3.10.4%2024-06-05Fix
CVE-2024-23669Fortinet FortiWebManager improper authorization6.4CNA v3.10.5%2024-06-05Fix
CVE-2024-20405Cisco Finesse stored cross-site scripting4.8CNA v3.10.6%2024-06-05Exploit codeFix
CVE-2024-20404Cisco Finesse server-side request forgery7.2CNA v3.122.6%2024-06-05NucleiExploit codeFix
CVE-2024-5653Chanjet Smooth T+system keyEdit.aspx SQL injection9.8v3.10.5%2024-06-05
CVE-2024-5636itsourcecode Bakery Online Ordering System index.php SQL injection9.8v3.10.7%2024-06-05
CVE-2024-5629Out-of-bounds read in bson module of PyMongo4.7CNA v3.10.7%2024-06-05Fix
CVE-2024-5571EmbedPress WordPress plugin stored cross-site scripting5.4v3.10.3%2024-06-05Fix
CVE-2024-5536GamiPress Link WordPress plugin authenticated (Contributor+) stored cross-site scripting5.4v3.10.3%2024-06-05Fix
CVE-2024-5526Grafana OnCall server-side request forgery7.7CNA v3.10.4%2024-06-05Fix
CVE-2024-5483LearnPress WordPress LMS plugin Basic information disclosure via JSON API5.3CNA v3.11.0%2024-06-05NucleiFix
CVE-2024-5459Restaurant Menu and Food Ordering WordPress plugin missing authorization to Menu creation4.3CNA v3.10.4%2024-06-05Fix
CVE-2024-5453ProfileGrid WordPress plugin missing authorization4.3v3.10.4%2024-06-05Fix
CVE-2024-5439Blocksy WordPress theme authenticated (Contributor+) stored cross-site scripting5.4v3.10.3%2024-06-05Fix
CVE-2024-5317Newsletter WordPress plugin unauthenticated stored cross-site scripting via np16.1v3.10.3%2024-06-05Fix
CVE-2024-5262ProjectDiscovery Interactsh files or directories accessible to external parties9.8v3.10.6%2024-06-05Fix
CVE-2024-5222Responsive Addons WordPress plugin stored cross-site scripting5.4v3.10.3%2024-06-05Fix
CVE-2024-5184Prompt injection in EmailGPT9.1v3.10.5%2024-06-05
CVE-2024-5171Heap buffer overflow in libaom9.8NVD v3.11.3%2024-06-05Fix
CVE-2024-5149BuddyForms WordPress plugin email verification bypass due to insufficient randomness5.3v3.10.4%2024-06-05Fix
CVE-2024-5037Openshift/telemeter: Iss check during JWT authentication can be bypassed7.5CNA v3.10.8%2024-06-05Fix
CVE-2024-5006Boostify Header Footer Builder for Elementor WordPress plugin stored cross-site scripting5.4v3.10.3%2024-06-05Fix
CVE-2024-4939Weaver Xtreme Theme Support WordPress plugin stored cross-site scripting5.4v3.10.3%2024-06-05Fix
CVE-2024-4886BuddyBoss Platform WordPress plugin Subscriber+ comment on Private post via IDOR4.3NVD v3.10.4%2024-06-05Fix
CVE-2024-4821WP Shortcodes Plugin Shortcodes Ultimate WordPress plugin stored cross-site scripting5.4v3.10.3%2024-06-05Fix
CVE-2024-4812Katello: Potential cross-site scripting exploit in UI4.8CNA v3.10.3%2024-06-05
CVE-2024-4743LifterLMS WordPress LMS Plugin for eLearning SQL injection6.5NVD v3.10.5%2024-06-05Fix
CVE-2024-4295Email Subscribers by Icegram Express WordPress plugin unauthenticated SQL injection via hash9.8v3.110.2%2024-06-05NucleiExploit codeFix
CVE-2024-4088Gutenberg Blocks and Page Layouts Attire Blocks WordPress plugin missing authorization4.3v3.10.3%2024-06-05Fix
CVE-2024-4084SSRF vulnerability in mintplex-labs/anything-llm7.5v3.10.5%2024-06-05
CVE-2024-4009Replay Attack in KNX Secure Devices7.3CNA v4.00.1%2024-06-05Fix
CVE-2024-4008FDSK leak in KNX Secure Devices7.3CNA v4.00.3%2024-06-05Fix
CVE-2024-4001Download Manager WordPress plugin stored cross-site scripting5.4v3.10.3%2024-06-05Fix
CVE-2024-3716Red Hat Satellite foreman-installer information disclosure6.2CNA v3.10.2%2024-06-05
CVE-2024-3667Brizy Page Builder WordPress plugin Store cross-site scripting5.4NVD v3.10.3%2024-06-05Fix
CVE-2024-3469GP Premium WordPress plugin reflected cross-site scripting6.1v3.10.6%2024-06-05NucleiFix
CVE-2024-2368Mollie Forms WordPress plugin cross-site request forgery to arbitrary post Duplication4.3CNA v3.10.2%2024-06-05Fix
CVE-2024-2087Brizy Page Builder WordPress plugin unauthenticated stored cross-site scripting via form6.1NVD v3.10.4%2024-06-05Fix
CVE-2024-1940Brizy Page Builder WordPress plugin Authenticated(Contributor+) stored cross-site scripting5.4NVD v3.10.3%2024-06-05Fix
CVE-2024-1662Information disclosure in Porty's PowerBank7.5v3.10.4%2024-06-05Fix
CVE-2024-1272Information disclosure to Source Code in TNB Mobile Solutions' Cockpit Software7.5v3.10.4%2024-06-05Fix
CVE-2024-1164Brizy Page Builder WordPress plugin stored cross-site scripting5.4v3.10.3%2024-06-05Fix
CVE-2024-1161Brizy Page Builder WordPress plugin stored cross-site scripting5.4v3.10.3%2024-06-05Fix
CVE-2024-37273Homebrew jan /v1/app/appendFileSync interface arbitrary file upload9.8v3.11.0%2024-06-04
CVE-2024-37065Skops unsafe deserialization7.8CNA v3.10.2%2024-06-04
CVE-2024-37064YdataAI ydata-profiling ydata unsafe deserialization7.8CNA v3.10.2%2024-06-04
CVE-2024-37063YdataAI ydata-profiling ydata cross-site scripting7.8CNA v3.10.3%2024-06-04
CVE-2024-37062YdataAI ydata-profiling ydata unsafe deserialization7.8CNA v3.10.2%2024-06-04
CVE-2024-37061MLFlow improper input validation8.8NVD v3.10.9%2024-06-04Fix
CVE-2024-37060MLFlow unsafe deserialization8.8NVD v3.10.8%2024-06-04Fix
CVE-2024-37059MLFlow unsafe deserialization8.8NVD v3.10.6%2024-06-04Fix
CVE-2024-37058MLFlow unsafe deserialization8.8NVD v3.10.6%2024-06-04Fix
CVE-2024-37057MLFlow unsafe deserialization8.8NVD v3.10.6%2024-06-04
CVE-2024-37056MLFlow unsafe deserialization8.8NVD v3.10.6%2024-06-04Fix
CVE-2024-37055MLFlow unsafe deserialization8.8NVD v3.10.6%2024-06-04Fix
CVE-2024-37054MLFlow unsafe deserialization8.8NVD v3.10.7%2024-06-04Exploit codeFix
CVE-2024-37053MLFlow unsafe deserialization8.8NVD v3.10.6%2024-06-04Fix
CVE-2024-37052MLFlow unsafe deserialization8.8NVD v3.10.7%2024-06-04Fix
CVE-2024-36858Homebrew jan /v1/app/writeFileSync interface arbitrary file upload9.8v3.13.0%2024-06-04Nuclei
CVE-2024-36857Homebrew jan arbitrary file read7.5v3.12.1%2024-06-04Nuclei
CVE-2024-36801SEMCMS A SQL injection5.9CISA ADP v3.10.4%2024-06-04
CVE-2024-36800SEMCMS A SQL injection7.5CISA ADP v3.10.7%2024-06-04
CVE-2024-36675LyLme_spage server-side request forgery9.1v3.11.4%2024-06-04Nuclei
CVE-2024-36604Tenda O3 command injection9.8v3.12.0%2024-06-04
CVE-2024-36550idcCMS cross-site request forgery8.8v3.10.2%2024-06-04
CVE-2024-36549idcCMS cross-site request forgery8.8v3.10.3%2024-06-04
CVE-2024-36548idcCMS cross-site request forgery8.8v3.10.2%2024-06-04
CVE-2024-36547idcCMS cross-site request forgery8.8v3.10.2%2024-06-04
CVE-2024-36400nano-id is unable to generate the correct character set9.4CNA v3.10.8%2024-06-04Fix
CVE-2024-36121Netty-incubator-codec-ohttp's BoringSSLAEADContext Repeats Nonces5.9CNA v3.10.3%2024-06-04Fix
CVE-2024-36104Apache OFBiz: Path traversal leading to a RCE9.1CISA ADP v3.187.9%2024-06-04NucleiEmerging ThreatsExploit codeFix
CVE-2024-35782Cowidgets Elementor Addons WordPress plugin cross-site scripting (XSS)5.4v3.10.2%2024-06-04
CVE-2024-35700UserPro WordPress plugin unauthenticated account takeover9.8v3.10.5%2024-06-04Fix
CVE-2024-35672Netgsm WordPress plugin broken access control9.8v3.10.5%2024-06-04Fix
CVE-2024-35670Integrate Google Drive WordPress plugin broken access control9.8v3.10.4%2024-06-04Fix
CVE-2024-35668Brevo Newsletter plugin reflected cross-site scripting6.1NVD v3.10.3%2024-06-04Fix
CVE-2024-35666Themesflat Addons For Elementor WordPress plugin cross-site scripting (XSS)5.4v3.10.2%2024-06-04
CVE-2024-35664WPvivid Backup for MainWP WordPress plugin reflected cross-site scripting (XSS)6.1NVD v3.10.3%2024-06-04Fix
CVE-2024-35655Brave Interactive Content WordPress plugin cross-site scripting (XSS)4.8v3.10.3%2024-06-04Fix
CVE-2024-35654Responsive WordPress theme cross-site scripting (XSS)5.4v3.10.3%2024-06-04Fix
CVE-2024-35653Visual Composer Website Builder cross-site scripting5.4v3.10.3%2024-06-04Fix
CVE-2024-35652Event Tickets with Ticket Scanner WordPress plugin reflected cross-site scripting (XSS)6.1NVD v3.10.3%2024-06-04Fix
CVE-2024-35651WP Flow Plus WordPress plugin cross-site scripting (XSS)5.4v3.10.3%2024-06-04Fix
CVE-2024-35649Save as PDF Plugin by Pdfcrowd WordPress plugin cross-site scripting (XSS)5.4v3.10.3%2024-06-04Fix
CVE-2024-35634Woocommerce Recent Purchases WordPress plugin file inclusion4.9v3.10.5%2024-06-04
CVE-2024-35629Easy Digital Downloads Recent Purchases WordPress plugin remote file inclusion9.8v3.10.5%2024-06-04
CVE-2024-34792Dextaz Ping WordPress plugin remote code execution (RCE)7.2NVD v3.11.1%2024-06-04
CVE-2024-34759Picture Gallery WordPress plugin cross-site scripting (XSS)5.4v3.10.3%2024-06-04Fix
CVE-2024-34554Stockholm Core WordPress plugin local file inclusion8.8v3.10.5%2024-06-04Fix
CVE-2024-34552Stockholm WordPress theme local file inclusion8.8v3.10.5%2024-06-04Fix
CVE-2024-34551Stockholm WordPress theme unauthenticated local file inclusion9.8v3.10.5%2024-06-04Fix
CVE-2024-34384Sina Extension for Elementor WordPress plugin local file inclusion8.8v3.10.6%2024-06-04Fix
CVE-2024-34364Envoy OOM vector from HTTP async client with unbounded response buffer for mirror response5.7CNA v3.10.5%2024-06-04Fix
CVE-2024-34363Envoy can crash due to uncaught nlohmann JSON exception7.5CNA v3.10.7%2024-06-04Fix
CVE-2024-34362Envoy affected by a crash (use-after-free) in EnvoyQuicServerStream5.9CNA v3.10.6%2024-06-04Fix
CVE-2024-33628XforWooCommerce WordPress plugin authenticated local file inclusion8.8CNA v3.10.6%2024-06-04
CVE-2024-33568Element Pack Pro WordPress plugin arbitrary file read and Phar deserialization6.5NVD v3.10.5%2024-06-04Fix
CVE-2024-33560XStore WordPress theme unauthenticated local file inclusion9.0CNA v3.10.6%2024-06-04Fix
CVE-2024-33557XStore Core WordPress plugin local file inclusion8.8v3.10.6%2024-06-04Fix
CVE-2024-33541Better Elementor Addons WordPress plugin local file inclusion6.5v3.10.5%2024-06-04Fix
CVE-2024-32976Envoy can enter an endless loop while decompressing Brotli data with extra input7.5CNA v3.10.7%2024-06-04Fix
CVE-2024-32975Envoy crashes in QuicheDataReader::PeekVarInt62Length5.9CNA v3.10.7%2024-06-04Fix
CVE-2024-32974Envoy affected by a crash in EnvoyQuicServerStream::OnInitialHeadersComplete5.9CNA v3.10.7%2024-06-04Fix
CVE-2024-32871Pimcore vulnerable to Flooding Server with Thumbnail files7.5CNA v3.10.8%2024-06-04Fix
CVE-2024-32464rails ActionText ContentAttachment can Contain Unsanitized HTML6.1CNA v3.10.4%2024-06-04Fix
CVE-2024-30889Web-audimex Audimexee cross-site scripting5.4v3.10.5%2024-06-04
CVE-2024-30528Spiffy Calendar WordPress plugin broken access control6.3v3.10.3%2024-06-04Fix
CVE-2024-30525Missing Authorization vulnerability in moveaddons Move Addons for Elementor.This issue affects Move Addons for Elementor: from n/a through 1.2.9.7.3v3.10.3%2024-06-04Fix
CVE-2024-30484RT Easy Builder WordPress plugin broken access control8.8v3.10.3%2024-06-04Fix
CVE-2024-29976Zyxel NAS326 firmware improper privilege management6.5CNA v3.19.0%2024-06-04Emerging ThreatsFix
CVE-2024-29975Zyxel NAS326 firmware improper privilege management6.7CNA v3.10.5%2024-06-04Fix
CVE-2024-29974Zyxel NAS326 firmware unrestricted file upload9.8CNA v3.122.8%2024-06-04Emerging ThreatsFix
CVE-2024-29973Zyxel NAS326 firmware OS command injection9.8CNA v3.186.1%2024-06-04Reported exploitedNucleiEmerging ThreatsExploit codeFix
CVE-2024-29972Zyxel NAS326 firmware OS command injection9.8CNA v3.189.3%2024-06-04Reported exploitedNucleiEmerging ThreatsExploit codeFix
CVE-2024-29170Dell PowerScale OneFS hard-coded credentials8.1CNA v3.10.3%2024-06-04Fix
CVE-2024-29152An issue was discovered in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 980, Exynos 990, Exynos 1080, Exynos 2100, Exynos 2200, Exynos 1280, Exynos 1380, Exynos 1330, Exynos 2400, Exynos Modem 5123, and Exynos Modem 5300. The baseband software does not properly check states specifi7.5v3.10.4%2024-06-04Fix
CVE-2024-29004SolarWinds Platform stored XSS7.1CNA v3.10.3%2024-06-04Fix
CVE-2024-28999SolarWinds Platform race condition6.4CNA v3.113.9%2024-06-04Exploit codeFix
CVE-2024-28996SolarWinds Platform SWQL injection7.5CNA v3.10.3%2024-06-04Fix
CVE-2024-28103rails action Pack is missing security headers on non-HTML responses5.4CNA v3.10.7%2024-06-04Fix
CVE-2024-25600Bricks WordPress theme unauthenticated remote code execution (RCE)10.0CNA v3.188.2%2024-06-04Reported exploitedNucleiMetasploitEmerging ThreatsExploit codeFix
CVE-2024-25095Easy Forms for Mailchimp WordPress plugin sensitive data exposure via Log file7.5v3.10.4%2024-06-04
CVE-2024-23326Envoy incorrectly accepts HTTP 200 response for entering upgrade mode5.9CNA v3.10.4%2024-06-04Fix
CVE-2024-20887Arbitrary directory creation in GalaxyBudsManager PC prior to version 2.1.240315.51 allows attacker to create arbitrary directory.6.2CNA v3.10.3%2024-06-04Fix
CVE-2024-20886Arbitrary directory creation in Samsung Live Wallpaper PC prior to version 3.3.8.0 allows attacker to create arbitrary directory.6.2CNA v3.10.2%2024-06-04
CVE-2024-20885Samsung Android Samsung Dialer vulnerability5.1CNA v3.10.1%2024-06-04Fix
CVE-2024-20884Samsung Android BatteryStatsService vulnerability6.2CNA v3.10.1%2024-06-04Fix
CVE-2024-20883Samsung Android BatteryStatsService vulnerability6.2CNA v3.10.1%2024-06-04Fix
CVE-2024-20882Samsung Mobile Devices bootloader out-of-bounds read4.6CNA v3.10.2%2024-06-04Fix
CVE-2024-20881Samsung Mobile Devices chnactiv TA improper input validation6.4CNA v3.10.2%2024-06-04Fix
CVE-2024-20880Samsung Mobile Devices bootloader stack-based buffer overflow6.4CNA v3.10.3%2024-06-04Fix
CVE-2024-20879Samsung Mobile Devices libsavscmn.so improper input validation4.0CNA v3.10.1%2024-06-04Fix
CVE-2024-20878Samsung Mobile Devices parsing grid image in libsavscmn.so out-of-bounds write7.3CNA v3.10.2%2024-06-04Fix
CVE-2024-20877Samsung Mobile Devices Heap out-of-bounds write7.3CNA v3.10.2%2024-06-04Fix
CVE-2024-20876Samsung Mobile Devices libsheifdecadapter.so improper input validation6.1CNA v3.10.1%2024-06-04Fix
CVE-2024-20875Samsung Android SemClipboard vulnerability4.0CNA v3.10.1%2024-06-04Fix
CVE-2024-20874Samsung Mobile Devices SmartManagerCN improper access control7.9CNA v3.10.2%2024-06-04Fix
CVE-2024-20873Samsung Mobile Devices caminfo driver improper input validation4.2CNA v3.10.1%2024-06-04Fix
CVE-2024-5635itsourcecode Bakery Online Ordering System index.php SQL injection9.8v3.10.7%2024-06-04
CVE-2024-5485SureTriggers WordPress plugin stored cross-site scripting6.4CNA v3.10.4%2024-06-04Fix
CVE-2024-5463Synology Camera Firmware buffer overflow6.5CNA v3.10.4%2024-06-04Fix
CVE-2024-5422SEH Computertechnik utnserver Pro denial of service7.1CNA v4.00.7%2024-06-04
CVE-2024-5421SEH Computertechnik utnserver Pro authenticated command injection8.7CNA v4.03.7%2024-06-04Nuclei
CVE-2024-5420Stored cross-site scripting in SEH Computertechnik utnserver Pro8.3CNA v4.05.5%2024-06-04NucleiExploit code
CVE-2024-5000CODESYS: Incorrect calculation of buffer size can cause DoS on CODESYS OPC UA products7.5CNA v3.10.6%2024-06-04Fix
CVE-2024-4997WPUpper Share Buttons WordPress plugin missing authorization5.3CNA v3.10.4%2024-06-04Fix
CVE-2024-4870Frontend Registration Contact Form 7 WordPress plugin authenticated (Editor+) privilege escalation7.2CNA v3.10.5%2024-06-04
CVE-2024-4857FS Product Inquiry WordPress plugin unauthenticated stored XSS6.1CISA ADP v3.10.4%2024-06-04
CVE-2024-4856FS Product Inquiry WordPress plugin reflected XSS8.2CISA ADP v3.10.5%2024-06-04
CVE-2024-4750BuddyBoss Platform WordPress plugin insecure direct object reference on Like comment5.3CISA ADP v3.10.4%2024-06-04Fix
CVE-2024-4749WP eMember WordPress plugin reflected XSS8.3CISA ADP v3.10.4%2024-06-04Fix
CVE-2024-4697Cowidgets Elementor Addons WordPress plugin stored cross-site scripting5.4v3.10.3%2024-06-04Fix
CVE-2024-4637Slider Revolution WordPress plugin stored cross-site scripting5.4v3.10.3%2024-06-04Fix
CVE-2024-4581Slider Revolution WordPress plugin stored cross-site scripting5.4v3.10.3%2024-06-04Fix
CVE-2024-4552Social Login Lite For WooCommerce WordPress plugin authentication bypass9.8CNA v3.10.6%2024-06-04
CVE-2024-4520Improper access control in gaizhenbiao/ChuanhuChatGPT7.5v3.10.5%2024-06-04Fix
CVE-2024-4462Nafeza Prayer Time WordPress plugin authenticated (Administrator+) stored cross-site scripting4.4CNA v3.10.3%2024-06-04
CVE-2024-4274G5Theme Essential Real Estate insecure direct object reference4.3CNA v3.10.5%2024-06-04Fix
CVE-2024-4273Essential Real Estate WordPress plugin stored cross-site scripting5.4v3.10.3%2024-06-04Fix
CVE-2024-4254Gradio deploy-website.yml workflow improper authorization7.1CNA v3.00.5%2024-06-04Exploit code
CVE-2024-4253Command injection in gradio-app/Gradio9.1v3.11.7%2024-06-04Fix
CVE-2024-4220Information disclosure in BeyondInsight4.3CNA v3.10.3%2024-06-04Fix
CVE-2024-4219SSRF In BeyondInsight4.8CNA v3.10.2%2024-06-04Fix
CVE-2024-4180The Events Calendar WordPress plugin reflected XSS9.1CISA ADP v3.11.8%2024-06-04NucleiFix
CVE-2024-4057Gutenberg Blocks by Kadence Blocks WordPress plugin Contributor+ stored XSS6.1CISA ADP v3.10.4%2024-06-04Fix
CVE-2024-3888tagDiv Composer WordPress plugin stored cross-site scripting6.4CNA v3.10.3%2024-06-04Fix
CVE-2024-3555gelform Social Link Pages plugin page import function missing authorization7.2CNA v3.10.3%2024-06-04
CVE-2024-3230Download Attachments WordPress plugin authenticated (Contributor+) stored cross-site scripting6.4CNA v3.10.3%2024-06-04Fix
CVE-2024-3031Fluid Notification Bar WordPress plugin authenticated (Admin+) stored cross-site scripting4.4CNA v3.10.3%2024-06-04
CVE-2024-2470Simple Ajax Chat WordPress plugin Admin+ stored XSS5.4CISA ADP v3.10.3%2024-06-04Fix
CVE-2024-2382The Authorize.net Payment Gateway For WooCommerce plugin for WordPress is vulnerable to payment bypass in all versions up to, and including, 8.0. This is due to the plugin not properly verifying the authenticity of the request that updates a orders payment status. This makes it possible for unauthen5.3CNA v3.10.2%2024-06-04
CVE-2024-2019WP-DB-Table-Editor WordPress plugin missing authorization authenticated Database access7.5CNA v3.10.4%2024-06-04
CVE-2024-1718Claudio Sanches WordPress plugin unauthorized access5.3CNA v3.10.2%2024-06-04
CVE-2024-1717Admin Notices Manager WordPress plugin missing authorization authenticated user email Retrieval4.3CNA v3.10.4%2024-06-04Fix
CVE-2024-0757Insert or Embed Articulate Content into WordPress plugin Author+ upload to RCE5.4CISA ADP v3.10.9%2024-06-04Exploit codeFix
CVE-2024-0756Insert or Embed Articulate Content into WordPress plugin Iframe injection5.4NVD v3.10.2%2024-06-04Fix
CVE-2024-37031Activeadmin vulnerable to stored persistent cross-site scripting (XSS) in dynamic form legends6.1CISA ADP v3.10.4%2024-06-03Fix
CVE-2024-37019Northern.tech Mender Enterprise improper authentication9.8CISA ADP v3.10.6%2024-06-03
CVE-2024-36964Linux kernel 9P2000 protocol permission handling vulnerability8.8CNA v3.10.5%2024-06-03Fix
CVE-2024-36963Linux kernel tracefs permission handling incorrect authorization7.8CNA v3.10.2%2024-06-03Fix
CVE-2024-36962Linux kernel ks8851 Ethernet driver vulnerability7.5CNA v3.10.5%2024-06-03Fix
CVE-2024-36961Linux kernel thermal zone debugfs interface improper locking7.8CNA v3.10.2%2024-06-03Fix
CVE-2024-36960Linux kernel vmwgfx fence signaled events out-of-bounds read7.1CNA v3.10.3%2024-06-03Fix
CVE-2024-36783TOTOLINK LR350 command injection9.8CISA ADP v3.11.4%2024-06-03
CVE-2024-36782TOTOLINK CP300 hard-coded credentials9.8CISA ADP v3.10.4%2024-06-03
CVE-2024-36729TRENDnet Tew-827dru stack-based buffer overflow6.3CISA ADP v3.15.3%2024-06-03
CVE-2024-36728TRENDnet Tew-827dru stack-based buffer overflow8.1CISA ADP v3.15.2%2024-06-03
CVE-2024-36674LyLme_spage cross-site scripting6.1CISA ADP v3.10.3%2024-06-03
CVE-2024-36569Mayuri K Gas Agency Management System remote file inclusion8.1CISA ADP v3.10.6%2024-06-03
CVE-2024-36568Mayuri K Gas Agency Management System code injection9.8CISA ADP v3.10.5%2024-06-03
CVE-2024-36128Directus is soft-locked by providing a string value to random string util7.5CNA v3.10.6%2024-06-03Fix
CVE-2024-36127apko Exposure of HTTP basic auth credentials in log output7.5CNA v3.10.4%2024-06-03Fix
CVE-2024-36124Iq80 Snappy has an out-of-bounds read when uncompressing data, leading to JVM crash5.3CNA v3.10.5%2024-06-03Fix
CVE-2024-36123Citizen has a stored cross-site scripting vulnerability by editing MediaWiki:Tagline6.5CNA v3.10.5%2024-06-03Fix
CVE-2024-36042Silverpeas authentication bypass9.8CISA ADP v3.10.9%2024-06-03Fix
CVE-2024-35643WP Back Button WordPress plugin cross-site scripting (XSS)5.9CNA v3.10.3%2024-06-03
CVE-2024-35642Site Favicon WordPress plugin cross-site scripting (XSS)5.9CNA v3.10.3%2024-06-03Fix
CVE-2024-35641Just Writing Statistics WordPress plugin cross-site scripting (XSS)5.9CNA v3.10.3%2024-06-03Fix
CVE-2024-35640Safety Exit WordPress plugin cross-site scripting (XSS)5.9CNA v3.10.3%2024-06-03Fix
CVE-2024-35639Simple Spoiler WordPress plugin cross-site scripting (XSS)5.9CNA v3.10.3%2024-06-03Fix
CVE-2024-35638ActiveDEMAND WordPress plugin cross-site request forgery (CSRF)4.3CNA v3.10.2%2024-06-03Fix
CVE-2024-35637Church Admin WordPress plugin server side request forgery (SSRF)4.4CNA v3.10.2%2024-06-03Fix
CVE-2024-35635Ninja Tables WordPress plugin server side request forgery (SSRF)4.9v3.10.2%2024-06-03Fix
CVE-2024-35633Blocksy Companion WordPress plugin server side request forgery (SSRF)4.9v3.10.3%2024-06-03Fix
CVE-2024-35632CRM Perks Integration for Contact Form 7 and Constant Contact cross-site request forgery4.3CNA v3.10.2%2024-06-03Fix
CVE-2024-35631FV Flowplayer Video Player WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.3%2024-06-03Fix
CVE-2024-35630WP TripAdvisor Review Slider WordPress plugin SQL injection7.6CNA v3.10.4%2024-06-03Fix
CVE-2024-34987PHPGurukul Online Fire Reporting System `ofrs/admin/index.php` script SQL injection9.1CISA ADP v3.10.6%2024-06-03Exploit code
CVE-2024-34803Fastly WordPress plugin broken access control4.3CNA v3.10.3%2024-06-03Fix
CVE-2024-34801Praison SEO WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.3%2024-06-03Fix
CVE-2024-34798Debug Log Manger Tool WordPress plugin sensitive data exposure5.3CNA v3.10.3%2024-06-03Fix
CVE-2024-34797Simple Popup Manager WordPress plugin cross-site scripting (XSS)5.9CNA v3.10.3%2024-06-03
CVE-2024-34796PopupAlly WordPress plugin cross-site scripting (XSS)4.8v3.10.3%2024-06-03Fix
CVE-2024-34795Tainacan WordPress plugin cross-site scripting (XSS)5.4v3.10.3%2024-06-03Fix
CVE-2024-34794Tainacan WordPress plugin cross-site scripting (XSS)6.1NVD v3.10.3%2024-06-03Fix
CVE-2024-34793WP Next Post Navi WordPress plugin cross-site scripting (XSS)5.9CNA v3.10.3%2024-06-03
CVE-2024-34791WPB Elementor Addons WordPress plugin cross-site scripting (XSS)5.4v3.10.3%2024-06-03Fix
CVE-2024-34790Download ImageMagick Sharpen Resized Images WordPress plugin cross-site scripting (XSS)5.9CNA v3.10.3%2024-06-03
CVE-2024-34789Post Grid Elementor Addon WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.3%2024-06-03Fix
CVE-2024-34770Popup Maker WP WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.3%2024-06-03Fix
CVE-2024-34769Elegant Blocks Amazing Gutenberg Blocks WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2024-06-03
CVE-2024-34767ShopLentor WordPress plugin cross-site scripting (XSS)5.4v3.10.3%2024-06-03Fix
CVE-2024-34766ChaosTheory WordPress theme cross-site scripting (XSS)6.5CNA v3.10.3%2024-06-03Fix
CVE-2024-34754Contact Form Widget WordPress plugin sensitive data exposure5.3CNA v3.10.3%2024-06-03Fix
CVE-2024-34385YITH WooCommerce Wishlist WordPress plugin cross-site scripting (XSS)5.9CNA v3.10.3%2024-06-03Fix
CVE-2024-34051Reflected cross-site scripting (XSS) in Dolibarr4.6CISA ADP v3.112.0%2024-06-03Fix
CVE-2024-32983Misskey allows the impersonation and takeover of remote accounts with unnormalized signed activities8.2CNA v3.10.4%2024-06-03Fix
CVE-2024-31684Bitdefender Mobile Security fingerprint authentication authentication bypass3.5CISA ADP v3.10.2%2024-06-03
CVE-2024-31682Phone Cleaner: Boost and Clean fingerprint authentication authentication bypass9.8CISA ADP v3.10.5%2024-06-03
CVE-2024-31493Fortinet FortiSOAR improper removal of sensitive information6.0CNA v3.10.5%2024-06-03Fix
CVE-2024-23670Fortinet FortiWebManager improper authorization7.6CNA v3.10.4%2024-06-03Fix
CVE-2024-23668Fortinet FortiWebManager improper authorization8.6CNA v3.10.7%2024-06-03Fix
CVE-2024-23667Fortinet FortiWebManager improper authorization7.6CNA v3.10.4%2024-06-03Fix
CVE-2024-23665Fortinet FortiWeb improper authorization5.6CNA v3.10.5%2024-06-03Fix
CVE-2024-23664Fortinet FortiAuthenticator open redirect5.8CNA v3.10.3%2024-06-03Fix
CVE-2024-23363Qualcomm Snapdragon buffer over-read in WLAN firmware7.5CNA v3.10.3%2024-06-03Fix
CVE-2024-23360Qualcomm Snapdragon improper access control in Graphics Windows8.4CNA v3.10.1%2024-06-03Fix
CVE-2024-23107Fortinet FortiWeb information disclosure5.2CNA v3.10.2%2024-06-03Fix
CVE-2024-21478Qualcomm Snapdragon null pointer dereference in Graphics6.2CNA v3.10.1%2024-06-03Fix
CVE-2024-20075MediaTek chipsets out-of-bounds write in eemgpu6.7v3.10.1%2024-06-03Fix
CVE-2024-20074MediaTek chipsets out-of-bounds write in dmc6.6CISA ADP v3.10.2%2024-06-03Fix
CVE-2024-20073MediaTek MT6890, MT7622 out-of-bounds write in wlan service6.6CISA ADP v3.10.4%2024-06-03Fix
CVE-2024-20072MediaTek chipsets out-of-bounds write in wlan driver6.6CISA ADP v3.10.4%2024-06-03Fix
CVE-2024-20071MediaTek chipsets out-of-bounds read in wlan driver4.4CISA ADP v3.10.2%2024-06-03Fix
CVE-2024-20070MediaTek chipsets use of a broken or risky cryptographic algorithm in Modem5.1CISA ADP v3.10.1%2024-06-03Fix
CVE-2024-20069MediaTek chipsets selection of less-secure algorithm during negotiation in Modem6.5CISA ADP v3.10.6%2024-06-03Fix
CVE-2024-20068MediaTek chipsets out-of-bounds write in Modem5.9CISA ADP v3.10.6%2024-06-03Fix
CVE-2024-20067MediaTek chipsets out-of-bounds write in Modem9.8CISA ADP v3.10.7%2024-06-03Fix
CVE-2024-20066MediaTek chipsets out-of-bounds write in Modem7.5v3.10.7%2024-06-03Fix
CVE-2024-20065MediaTek chipsets improper access control in telephony4.0CISA ADP v3.10.1%2024-06-03Fix
CVE-2024-5590Netentsec NS-ASG Application Security Gateway JSON Content uploadiscuser.php SQL injection9.8v3.10.6%2024-06-03
CVE-2024-5589Netentsec NS-ASG Application Security Gateway SQL injection9.8v3.10.5%2024-06-03
CVE-2024-5404ifm moneo appliance password recovery mechanism weak password recovery9.8CNA v3.10.6%2024-06-03Fix
CVE-2024-5311DigiWin EasyFlow .NET SQL injection9.8CNA v3.10.6%2024-06-03Fix
CVE-2024-5197Integer overflow in libvpx5.9CNA v4.00.8%2024-06-03Fix
CVE-2024-4540Keycloak: Exposure of sensitive information in pushed authorization requests (par) kc_restart cookie7.5CNA v3.10.6%2024-06-03Fix
CVE-2024-4332Improper authentication in Tripwire Enterprise APIs9.3CNA v4.00.6%2024-06-03
CVE-2024-3829Arbitrary file read and Write during Snapshot Recovery in qdrant/qdrant9.1v3.10.9%2024-06-03Exploit codeFix
CVE-2024-0336Improper access control in EMTA Grups PDKS9.4CNA v4.00.4%2024-06-03Fix
CVE-2024-36392MileSight DeviceHub improper neutralization of input during web page generation6.1v3.10.3%2024-06-02
CVE-2024-36391MileSight DeviceHub Key Management Errors7.4NVD v3.10.4%2024-06-02
CVE-2024-36390MileSight DeviceHub improper input validation7.5v3.10.4%2024-06-02
CVE-2024-36389MileSight DeviceHub use of insufficiently random values9.8v3.10.5%2024-06-02
CVE-2024-36388MileSight DeviceHub missing authentication for critical function9.8v3.10.5%2024-06-02
CVE-2024-35647Global Notification Bar WordPress plugin cross-site scripting (XSS)5.9CNA v3.10.3%2024-06-02
CVE-2024-35646Smartarget Message Bar WordPress plugin cross-site scripting (XSS)5.9CNA v3.10.3%2024-06-02
CVE-2024-35645Random Banner WordPress plugin cross-site scripting (XSS)5.9CNA v3.10.3%2024-06-02
CVE-2024-27776MileSight DeviceHub improper limitation of a pathname to a restricted directory (path traversal)9.8v3.10.6%2024-06-02
CVE-2024-5588itsourcecode Learning Management System processscore.php SQL injection8.8v3.10.6%2024-06-02
CVE-2024-5587Casdoor Configuration file app.conf file access6.9CNA v4.00.5%2024-06-02
CVE-2024-4344Shield Security WordPress plugin cross-site request forgery4.3CNA v3.10.2%2024-06-02Fix
CVE-2024-2178Path traversal vulnerability in parisneo/lollms-webui7.5CNA v3.00.6%2024-06-02
CVE-2024-35636Uploadcare File Uploader and Adaptive Delivery WordPress plugin cross-site request forgery (CSRF)4.3CNA v3.10.2%2024-06-01Fix
CVE-2024-5501Supreme Modules Lite WordPress plugin stored cross-site scripting6.4CNA v3.10.3%2024-06-01Fix
CVE-2024-5348Elements For Elementor WordPress plugin local file inclusion8.8CNA v3.10.8%2024-06-01Fix
CVE-2024-4958User Registration WordPress plugin unauthorized access7.1CNA v3.10.3%2024-06-01Fix
CVE-2024-4711WordPress Infinite Scroll Ajax Load More plugin authenticated (Contributor+) cross-site scripting5.4v3.10.4%2024-06-01Fix
CVE-2024-4342Royal Elementor Addons and Templates WordPress plugin stored cross-site scripting5.4v3.10.3%2024-06-01Fix
CVE-2024-4148Redos (regular expression denial of service) in lunary-ai/Lunary7.5v3.10.6%2024-06-01Fix
CVE-2024-4087Royal Elementor Addons and Templates WordPress plugin stored cross-site scripting5.4v3.10.3%2024-06-01Fix
CVE-2024-3821wpDataTables WordPress plugin unauthorized access7.3CNA v3.10.3%2024-06-01Fix
CVE-2024-3820wpDataTables - Tables and Table Charts (Premium) WordPress plugin unauthenticated SQL injection10.0CNA v3.10.7%2024-06-01Fix
CVE-2024-3565Content Blocks (Custom Post Widget) WordPress plugin stored cross-site scripting5.4v3.10.3%2024-06-01Fix
CVE-2024-3564Content Blocks (Custom Post Widget) WordPress plugin local file inclusion8.8CNA v3.10.6%2024-06-01Fix
CVE-2024-3200wpForo Forum WordPress plugin authenticated (Contributor+) SQL injection6.5NVD v3.10.5%2024-06-01Fix
CVE-2024-2933Page Builder Gutenberg Blocks CoBlocks WordPress plugin stored cross-site scripting6.4CNA v3.10.3%2024-06-01Fix
CVE-2024-2506Popup Builder WordPress plugin Authenticated(Contributor+) stored cross-site scripting via Custom JS6.4CNA v3.10.3%2024-06-01Fix
CVE-2024-2295Contact Form Manager WordPress plugin authenticated (Contributor+) stored cross-site scripting6.4CNA v3.10.3%2024-06-01Fix
CVE-2024-1324QQWorld Auto Save Images WordPress plugin missing authorization to arbitrary post content Retrieval5.3CNA v3.10.3%2024-06-01