CVE-2024 records published in July 2024
This page lists the 2,858 CVE-2024 records published in July 2024, newest first, 1,000 to a page. The Cybersecurity and Infrastructure Security Agency's Known Exploited Vulnerabilities (KEV) catalog lists 11 of them. Each CVE opens on cve-security.com with its sources, detection content and vendor fixes, and the search on the CVE-2024 list filters these records by severity or signal.
- Critical
- 31411.0% of these records
- Listed in CISA KEV
- 110.4% of these records
- Reported exploited
- 20.1% of these records
- Detection signal
- 682.4% of these records
- Exploit code
- 863.0% of these records
- Actionable vendor fix
- 2,08372.9% of these records
Figures as of 2026-10-24 13:18 UTC. Records published in July 2024 have had from about 27 months to about 28 months to collect KEV listings, exploitation reports, detection content and exploit code. Records published more recently have had less time, which can hold their shares down.
| CVE | Summary | CVSS | EPSS | Published | Signals |
|---|---|---|---|---|---|
| CVE-2024-42381 | Homebrew ELF binary loader code execution | 8.3CNA v3.1 | 0.6% | 2024-07-31 | |
| CVE-2024-41955 | Mobile Security Framework (MobSF) has an open redirect in Login Redirect | 5.2CNA v3.1 | 1.0% | 2024-07-31 | NucleiFix |
| CVE-2024-41954 | fogproject FOG Weak file permissions | 5.3CNA v3.1 | 0.3% | 2024-07-31 | Fix |
| CVE-2024-41953 | Zitadel improperly sanitizes HTML in emails and Console UI | 4.3CNA v3.1 | 0.7% | 2024-07-31 | Fix |
| CVE-2024-41952 | Zitadel has an Ignoring unknown usernames vulnerability | 5.3CNA v3.1 | 0.6% | 2024-07-31 | Fix |
| CVE-2024-41951 | PheonixAppAPI has visible Encoding Maps | 4.4CNA v3.1 | 0.2% | 2024-07-31 | Fix |
| CVE-2024-41950 | Insecure Jinja2 templates rendered in Haystack components can lead to RCE | 7.5CNA v3.1 | 1.2% | 2024-07-31 | Fix |
| CVE-2024-41947 | XWiki Platform XSS through conflict resolution | 9.1CNA v3.1 | 1.7% | 2024-07-31 | Exploit codeFix |
| CVE-2024-41660 | slpd-lite unauthenticated memory corruption | 9.8CNA v3.1 | 0.9% | 2024-07-31 | Emerging Threats |
| CVE-2024-41630 | Tenda AC18 stack-based buffer overflow | 7.6CISA ADP v3.1 | 1.0% | 2024-07-31 | |
| CVE-2024-41262 | codenotary immudb cleartext transmission of sensitive information | 7.4CISA ADP v3.1 | 0.2% | 2024-07-31 | |
| CVE-2024-41258 | Filestash improper certificate validation | 5.3v3.1 | 0.2% | 2024-07-31 | |
| CVE-2024-41256 | Filestash skips TLS certificate verification process when sending out email verification codes | 5.9v3.1 | 0.2% | 2024-07-31 | |
| CVE-2024-41255 | Filestash configured to skip TLS certificate verification when using the FTPS protocol | 7.5CISA ADP v3.1 | 0.3% | 2024-07-31 | |
| CVE-2024-41254 | Litestream improper signature verification | 5.3v3.1 | 0.2% | 2024-07-31 | |
| CVE-2024-41253 | GoFrame gclient component vulnerability | 7.1CISA ADP v3.1 | 0.1% | 2024-07-31 | |
| CVE-2024-41108 | fogproject FOG sensitive information disclosure | 7.5CNA v3.1 | 0.6% | 2024-07-31 | Fix |
| CVE-2024-40645 | fogproject FOG authenticated file upload RCE | 8.8CNA v3.1 | 1.0% | 2024-07-31 | Fix |
| CVE-2024-40465 | Beego privilege escalation | 8.8v3.1 | 0.4% | 2024-07-31 | Fix |
| CVE-2024-40464 | Beego privilege escalation | 8.8v3.1 | 0.6% | 2024-07-31 | Fix |
| CVE-2024-39950 | Dahua NVR4XXX and IPC-HX8XXX stack-based buffer overflow | 8.6CNA v3.1 | 0.5% | 2024-07-31 | Fix |
| CVE-2024-39949 | Dahua NVR4XXX reachable assertion | 7.5CNA v3.1 | 0.6% | 2024-07-31 | Fix |
| CVE-2024-39948 | Dahua NVR4XXX null pointer dereference | 7.5CNA v3.1 | 0.6% | 2024-07-31 | Fix |
| CVE-2024-39947 | Dahua NVR4XXX crash | 6.5CNA v3.1 | 0.5% | 2024-07-31 | Fix |
| CVE-2024-39946 | A vulnerability has been found in Dahua products.After obtaining the administrator's username and password, the attacker can send a carefully crafted data packet to the interface with vulnerabilities, causing device initialization. | 6.0CNA v3.1 | 0.4% | 2024-07-31 | Fix |
| CVE-2024-39945 | Dahua NVR4XXX crash | 4.9CNA v3.1 | 0.5% | 2024-07-31 | Fix |
| CVE-2024-39944 | Dahua IPC-HX8XXX and NVR4XXX resource exhaustion | 7.5CNA v3.1 | 0.6% | 2024-07-31 | Fix |
| CVE-2024-39694 | Duende IdentityServer open redirect | 4.7CNA v3.1 | 0.5% | 2024-07-31 | Fix |
| CVE-2024-39379 | Adobe Acrobat for Edge out-of-bounds read | 5.5CNA v3.1 | 0.3% | 2024-07-31 | Fix |
| CVE-2024-39318 | Ibexa Admin UI vulnerable to DOM-based cross-site scripting in file upload widget | 5.4CNA v3.1 | 0.4% | 2024-07-31 | Fix |
| CVE-2024-38182 | Microsoft Dynamics 365 elevation of privilege | 9.0CNA v3.1 | 0.9% | 2024-07-31 | Fix |
| CVE-2024-37901 | XWiki Platform vulnerable to remote code execution from account via SearchSuggestConfigSheet | 10.0CNA v3.1 | 1.1% | 2024-07-31 | Fix |
| CVE-2024-37900 | XWiki Platform vulnerable to cross-site scripting through attachment filename in uploader | 6.4CNA v3.1 | 15.8% | 2024-07-31 | Fix |
| CVE-2024-37898 | XWiki Platform vulnerable to document deletion and overwrite from edit | 4.3CNA v3.1 | 0.4% | 2024-07-31 | Fix |
| CVE-2024-37142 | Dell Peripheral Manager uncontrolled search path | 7.3CNA v3.1 | 0.2% | 2024-07-31 | Fix |
| CVE-2024-37135 | Dell Data Manager Appliance Software (DMAS) plaintext password storage | 3.3CNA v3.1 | 0.1% | 2024-07-31 | Fix |
| CVE-2024-37129 | Dell Inventory Collector path traversal | 6.7CNA v3.1 | 0.2% | 2024-07-31 | Fix |
| CVE-2024-37127 | Dell Peripheral Manager uncontrolled search path | 7.8CNA v3.1 | 0.2% | 2024-07-31 | Fix |
| CVE-2024-32857 | Dell Peripheral Manager uncontrolled search path | 7.3CNA v3.1 | 0.2% | 2024-07-31 | Fix |
| CVE-2024-31203 | Plug&Track Thermoscan IP stack-based buffer overflow | 5.5NVD v3.1 | 0.1% | 2024-07-31 | |
| CVE-2024-31202 | Plug&Track Thermoscan IP incorrect permission assignment | 7.8NVD v3.1 | 0.2% | 2024-07-31 | |
| CVE-2024-31201 | Plug&Track Thermoscan IP unquoted search path | 6.7NVD v3.1 | 0.2% | 2024-07-31 | |
| CVE-2024-31200 | Plug&Track Sensor Net Connect V2 information disclosure | 4.6NVD v3.1 | 0.2% | 2024-07-31 | |
| CVE-2024-31199 | Plug&Track Sensor Net Connect V2 cross-site scripting | 6.1NVD v3.1 | 0.3% | 2024-07-31 | |
| CVE-2024-23444 | Elasticsearch elasticsearch-certutil csr fails to encrypt private key | 4.9CNA v3.1 | 0.2% | 2024-07-31 | Fix |
| CVE-2024-7340 | W&B Weave server remote arbitrary file leak and privilege escalation | 8.8CNA v3.1 | 5.0% | 2024-07-31 | NucleiEmerging ThreatsFix |
| CVE-2024-7329 | YouDianCMS image_upload.php unrestricted upload | 9.8v3.1 | 0.7% | 2024-07-31 | |
| CVE-2024-7328 | YouDianCMS information disclosure | 5.3v3.1 | 0.7% | 2024-07-31 | |
| CVE-2024-7327 | Xinhu RockOA openmodhetongAction.php dataAction SQL injection | 8.8v3.1 | 0.5% | 2024-07-31 | |
| CVE-2024-7326 | IObit DualSafe Password Manager BPL RTL120.BPL uncontrolled search path | 7.8v3.1 | 0.3% | 2024-07-31 | |
| CVE-2024-7325 | IObit Driver Booster BPL VCL120.BPL uncontrolled search path | 7.8v3.1 | 0.2% | 2024-07-31 | |
| CVE-2024-7324 | IObit iTop Data Recovery Pro BPL madbasic_.bpl uncontrolled search path | 8.5CNA v4.0 | 0.2% | 2024-07-31 | |
| CVE-2024-7321 | itsourcecode Online Blood Bank Management System User Registration signup.php cross-site scripting | 6.1v3.1 | 0.6% | 2024-07-31 | |
| CVE-2024-7320 | itsourcecode Online Blood Bank Management System Admin Login index.php SQL injection | 9.8v3.1 | 0.7% | 2024-07-31 | |
| CVE-2024-7311 | code-projects Online Bus Reservation Site register.php SQL injection | 9.8v3.1 | 0.6% | 2024-07-31 | |
| CVE-2024-7310 | SourceCodester Record Management System sort_user.php cross-site scripting | 6.1v3.1 | 0.5% | 2024-07-31 | |
| CVE-2024-7309 | SourceCodester Record Management System entry.php cross-site scripting | 5.4v3.1 | 0.4% | 2024-07-31 | |
| CVE-2024-7308 | SourceCodester Establishment Billing Management System view_bill.php SQL injection | 8.8v3.1 | 0.6% | 2024-07-31 | |
| CVE-2024-7307 | SourceCodester Establishment Billing Management System manage_billing.php SQL injection | 8.8v3.1 | 0.6% | 2024-07-31 | |
| CVE-2024-7306 | SourceCodester Establishment Billing Management System manage_block.php SQL injection | 8.8v3.1 | 0.6% | 2024-07-31 | |
| CVE-2024-7303 | itsourcecode Online Blood Bank Management System Send Blood Request page cross-site scripting | 5.4v3.1 | 0.5% | 2024-07-31 | |
| CVE-2024-7300 | Bolt CMS Showcase Creation showcases cross-site scripting | 5.4v3.1 | 0.4% | 2024-07-31 | |
| CVE-2024-7299 | Bolt CMS Entry Preview page cross-site scripting | 5.4v3.1 | 0.4% | 2024-07-31 | |
| CVE-2024-7290 | SourceCodester Establishment Billing Management System manage_tenant.php SQL injection | 8.8v3.1 | 0.5% | 2024-07-31 | |
| CVE-2024-7289 | SourceCodester Establishment Billing Management System manage_payment.php SQL injection | 8.8v3.1 | 0.6% | 2024-07-31 | |
| CVE-2024-7288 | SourceCodester Establishment Billing Management System SQL injection | 8.8v3.1 | 0.5% | 2024-07-31 | |
| CVE-2024-7287 | SourceCodester Establishment Billing Management System manage_user.php SQL injection | 8.8v3.1 | 0.5% | 2024-07-31 | |
| CVE-2024-7286 | SourceCodester Establishment Billing Management System Login SQL injection | 9.8v3.1 | 0.6% | 2024-07-31 | |
| CVE-2024-7285 | SourceCodester Establishment Billing Management System cross-site scripting | 5.4v3.1 | 0.4% | 2024-07-31 | |
| CVE-2024-7284 | SourceCodester Lot Reservation Management System cross-site scripting | 5.4v3.1 | 0.5% | 2024-07-31 | |
| CVE-2024-7283 | SourceCodester Lot Reservation Management System manage_user.php SQL injection | 8.8v3.1 | 0.6% | 2024-07-31 | |
| CVE-2024-7282 | SourceCodester Lot Reservation Management System manage_model.php SQL injection | 9.8v3.1 | 0.6% | 2024-07-31 | |
| CVE-2024-7281 | SourceCodester Lot Reservation Management System SQL injection | 9.8v3.1 | 0.6% | 2024-07-31 | |
| CVE-2024-7280 | SourceCodester Lot Reservation Management System view_reserved.php SQL injection | 9.8v3.1 | 0.6% | 2024-07-31 | |
| CVE-2024-7279 | SourceCodester Lot Reservation Management System SQL injection | 9.8v3.1 | 0.7% | 2024-07-31 | |
| CVE-2024-7278 | itsourcecode Alton Management System team_save.php SQL injection | 7.2v3.1 | 0.5% | 2024-07-31 | |
| CVE-2024-7277 | itsourcecode Alton Management System Add a menu menu.php unrestricted upload | 7.2v3.1 | 0.5% | 2024-07-31 | |
| CVE-2024-7264 | curl ASN.1 date parser overread | 6.5NVD v3.1 | 20.2% | 2024-07-31 | Fix |
| CVE-2024-7205 | CoolKit Technology eWeLink Cloud Service device sharing homepage module information disclosure | 9.4CNA v4.0 | 0.5% | 2024-07-31 | Fix |
| CVE-2024-7135 | Tainacan WordPress plugin missing authorization to authenticated (Subscriber+) arbitrary file read | 6.5CNA v3.1 | 2.7% | 2024-07-31 | Exploit codeFix |
| CVE-2024-6980 | Verbose error handling issue in GravityZone Update Server proxy service | 9.2CNA v4.0 | 0.6% | 2024-07-31 | Fix |
| CVE-2024-6978 | Cato Networks Windows SDP Client Local root certificates can be installed by low-privileged users | 5.6CNA v3.1 | 0.1% | 2024-07-31 | Fix |
| CVE-2024-6977 | Cato Networks Windows SDP Client Sensitive data in trace logs can lead to account takeover | 6.5CNA v3.1 | 0.2% | 2024-07-31 | Fix |
| CVE-2024-6975 | Cato Networks Windows SDP Client local privilege escalation via openssl configuration file | 8.8CNA v3.1 | 0.3% | 2024-07-31 | Fix |
| CVE-2024-6974 | Cato Networks Windows SDP Client local privilege escalation via self-upgrade | 8.8CNA v3.1 | 0.2% | 2024-07-31 | Fix |
| CVE-2024-6973 | Remote code execution in Cato Windows SDP client via crafted URLs | 7.5CNA v3.1 | 0.8% | 2024-07-31 | Fix |
| CVE-2024-6770 | Vikas Ratudi VPSUForm stored cross-site scripting | 7.2CNA v3.1 | 0.4% | 2024-07-31 | Fix |
| CVE-2024-6725 | Formidable Forms WordPress plugin authenticated (Subscriber+) stored cross-site scripting | 5.4v3.1 | 0.4% | 2024-07-31 | Fix |
| CVE-2024-6695 | Cozmoslabs Profile Builder plugin user registration process privilege escalation | 9.8CISA ADP v3.1 | 0.8% | 2024-07-31 | Fix |
| CVE-2024-6412 | HTML Forms Simple WordPress Forms plugin Bulk delete via CSRF | 6.5CISA ADP v3.1 | 0.3% | 2024-07-31 | Fix |
| CVE-2024-6408 | Slider by 10Web WordPress plugin Editor+ stored XSS | 5.4CISA ADP v3.1 | 0.4% | 2024-07-31 | Fix |
| CVE-2024-6272 | SpiderContacts WordPress plugin reflected XSS | 6.1CISA ADP v3.1 | 0.3% | 2024-07-31 | |
| CVE-2024-6255 | Path traversal in gaizhenbiao/ChuanhuChatGPT | 9.1v3.1 | 13.1% | 2024-07-31 | |
| CVE-2024-6208 | Download Manager WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.4% | 2024-07-31 | Fix |
| CVE-2024-6165 | WANotifier WordPress plugin Admin+ stored XSS | 4.8CISA ADP v3.1 | 0.4% | 2024-07-31 | Fix |
| CVE-2024-4187 | OpenText Filr stored cross-site scripting | 2.1CNA v4.0 | 0.2% | 2024-07-31 | Fix |
| CVE-2024-3083 | Plug&Track Sensor Net Connect V2 cross-site request forgery | 8.3NVD v3.1 | 0.2% | 2024-07-31 | Fix |
| CVE-2024-3082 | Plug&Track Sensor Net Connect V2 plaintext password storage | 4.6NVD v3.1 | 0.1% | 2024-07-31 | |
| CVE-2024-2508 | WP Mobile Menu WordPress plugin missing authorization to _mobmenu_icon post Meta modification | 5.3CNA v3.1 | 0.4% | 2024-07-31 | Fix |
| CVE-2024-42231 | Linux kernel btrfs zoned mode free space calculation incorrect calculation | 5.5v3.1 | 0.2% | 2024-07-30 | Fix |
| CVE-2024-42230 | Linux kernel pseries kexec AIL handling denial of service | 4.4v3.1 | 0.2% | 2024-07-30 | Fix |
| CVE-2024-42229 | Linux kernel AEAD and cipher key buffer handling vulnerability | 4.1v3.1 | 0.2% | 2024-07-30 | Fix |
| CVE-2024-42228 | Linux kernel amdgpu VCE command submission vulnerability | 7.0v3.1 | 0.2% | 2024-07-30 | Fix |
| CVE-2024-42227 | Linux kernel AMD display mode programming vulnerability | 4.7v3.1 | 0.2% | 2024-07-30 | Fix |
| CVE-2024-42225 | Linux kernel mt76 Wi-Fi driver vulnerability | 8.3CNA v3.1 | 0.5% | 2024-07-30 | Fix |
| CVE-2024-42224 | Linux kernel mv88e6xxx MDIO bus handling vulnerability | 7.0CNA v3.1 | 0.2% | 2024-07-30 | Fix |
| CVE-2024-42223 | Linux kernel tda10048 DVB frontend driver integer overflow | 5.5v3.1 | 0.2% | 2024-07-30 | Fix |
| CVE-2024-42162 | Linux kernel gve NIC statistics reporting vulnerability | 7.8CNA v3.1 | 0.2% | 2024-07-30 | Fix |
| CVE-2024-42161 | Linux kernel BPF CO-RE bitfield reader vulnerability | 6.3v3.1 | 0.2% | 2024-07-30 | Fix |
| CVE-2024-42160 | Linux kernel f2fs fault injection configuration vulnerability | 7.8v3.1 | 0.2% | 2024-07-30 | Fix |
| CVE-2024-42159 | Linux kernel mpi3mr SAS port PHY handling vulnerability | 7.8v3.1 | 0.2% | 2024-07-30 | Fix |
| CVE-2024-42158 | Linux kernel s390/pkey incorrect resource transfer | 4.1v3.1 | 0.2% | 2024-07-30 | Fix |
| CVE-2024-42157 | Linux kernel s390 pkey ioctl handling vulnerability | 4.1v3.1 | 0.2% | 2024-07-30 | Fix |
| CVE-2024-42156 | Linux kernel s390 pkey clear-key conversion vulnerability | 4.1v3.1 | 0.2% | 2024-07-30 | Fix |
| CVE-2024-42155 | Linux kernel s390 pkey protected and secure key handling vulnerability | 1.9NVD v3.1 | 0.2% | 2024-07-30 | Fix |
| CVE-2024-42154 | Linux kernel TCP metrics netlink interface vulnerability | 4.4NVD v3.1 | 0.3% | 2024-07-30 | Fix |
| CVE-2024-42153 | Linux kernel pnx deadlock | 5.5v3.1 | 0.2% | 2024-07-30 | Fix |
| CVE-2024-42152 | Linux kernel NVMe target controller memory leak | 7.5CNA v3.1 | 0.7% | 2024-07-30 | Fix |
| CVE-2024-42151 | Linux kernel BPF struct_ops testing null pointer dereference | 5.5v3.1 | 0.2% | 2024-07-30 | Fix |
| CVE-2024-42150 | Linux kernel txgbe crash | 5.5v3.1 | 0.2% | 2024-07-30 | Fix |
| CVE-2024-42149 | Linux kernel block device freeze and thaw null pointer dereference | 5.5v3.1 | 0.2% | 2024-07-30 | Fix |
| CVE-2024-42148 | Linux kernel bnx2x driver statistics vulnerability | 7.8v3.1 | 0.3% | 2024-07-30 | Fix |
| CVE-2024-42147 | Linux kernel HiSilicon crypto debugfs double free | 7.8v3.1 | 0.2% | 2024-07-30 | Fix |
| CVE-2024-42146 | Linux kernel Xe GPU dma-buf kunit test vulnerability | 5.5v3.1 | 0.2% | 2024-07-30 | Fix |
| CVE-2024-42145 | Linux kernel IB/core resource exhaustion | 7.5CNA v3.1 | 0.9% | 2024-07-30 | Fix |
| CVE-2024-42144 | Linux kernel MediaTek LVTS thermal driver null pointer dereference | 5.5v3.1 | 0.2% | 2024-07-30 | Fix |
| CVE-2024-42142 | Linux kernel mlx5 E-switch ingress ACL vulnerability | 5.5v3.1 | 0.2% | 2024-07-30 | Fix |
| CVE-2024-42141 | Linux kernel Bluetooth ISO socket handling null pointer dereference | 5.5v3.1 | 0.2% | 2024-07-30 | Fix |
| CVE-2024-42140 | Linux kernel RISC-V kexec crash path deadlock | 5.5v3.1 | 0.2% | 2024-07-30 | Fix |
| CVE-2024-42139 | Linux kernel ice PTP extts handling denial of service | 5.5NVD v3.1 | 0.2% | 2024-07-30 | Fix |
| CVE-2024-42138 | Linux kernel core_linecards double free | 7.8v3.1 | 0.2% | 2024-07-30 | Fix |
| CVE-2024-42137 | Linux kernel QCA6390 Bluetooth driver denial of service | 5.5v3.1 | 0.2% | 2024-07-30 | Fix |
| CVE-2024-42136 | Linux kernel cdrom driver integer overflow | 7.8v3.1 | 0.2% | 2024-07-30 | Fix |
| CVE-2024-42135 | Linux kernel vhost worker task handling vulnerability | 5.5v3.1 | 0.2% | 2024-07-30 | Fix |
| CVE-2024-42134 | Linux kernel virtio-pci driver null pointer dereference | 5.5v3.1 | 0.2% | 2024-07-30 | Fix |
| CVE-2024-42133 | Linux kernel Bluetooth BIG handle handling vulnerability | 7.6CNA v3.1 | 0.3% | 2024-07-30 | Fix |
| CVE-2024-42132 | Linux kernel Bluetooth HCI connection handle handling vulnerability | 7.6CNA v3.1 | 0.3% | 2024-07-30 | Fix |
| CVE-2024-42131 | Linux kernel dirty page writeback throttling integer overflow | 4.4NVD v3.1 | 0.3% | 2024-07-30 | Fix |
| CVE-2024-42129 | Linux kernel mlxreg LED driver vulnerability | 5.5v3.1 | 0.2% | 2024-07-30 | Fix |
| CVE-2024-42128 | Linux kernel an30259a LED driver vulnerability | 5.5v3.1 | 0.2% | 2024-07-30 | Fix |
| CVE-2024-42127 | Linux kernel lima GPU driver vulnerability | 5.5v3.1 | 0.2% | 2024-07-30 | Fix |
| CVE-2024-42126 | Linux kernel powerpc real-mode interrupt handling denial of service | 5.5v3.1 | 0.2% | 2024-07-30 | Fix |
| CVE-2024-42125 | Linux kernel rtw89 Wi-Fi driver firmware scan offload null pointer dereference | 5.5v3.1 | 0.2% | 2024-07-30 | Fix |
| CVE-2024-42124 | Linux kernel qedf SCSI driver task management denial of service | 5.5v3.1 | 0.3% | 2024-07-30 | Fix |
| CVE-2024-42123 | Linux kernel amdgpu UMC bad page handling double free | 7.0CNA v3.1 | 0.2% | 2024-07-30 | Fix |
| CVE-2024-42122 | Linux kernel drm/amd/display null pointer dereference | 5.5v3.1 | 0.3% | 2024-07-30 | Fix |
| CVE-2024-42121 | Linux kernel amdgpu display HDCP messaging vulnerability | 7.8v3.1 | 0.3% | 2024-07-30 | Fix |
| CVE-2024-42120 | Linux kernel amdgpu display vblank handling vulnerability | 7.8CNA v3.1 | 0.3% | 2024-07-30 | Fix |
| CVE-2024-42119 | Linux kernel amdgpu display audio engine lookup vulnerability | 7.8v3.1 | 0.3% | 2024-07-30 | Fix |
| CVE-2024-42118 | Linux kernel amdgpu display stream index lookup vulnerability | 7.8v3.1 | 0.2% | 2024-07-30 | Fix |
| CVE-2024-42117 | Linux kernel amdgpu display stream configuration vulnerability | 7.8CNA v3.1 | 0.2% | 2024-07-30 | Fix |
| CVE-2024-42115 | Linux kernel jffs2 inode deallocation vulnerability | 7.8CNA v3.1 | 0.3% | 2024-07-30 | Fix |
| CVE-2024-42114 | Linux kernel cfg80211 TXQ quantum handling denial of service | 4.4NVD v3.1 | 0.2% | 2024-07-30 | Fix |
| CVE-2024-42113 | Linux kernel txgbe Ethernet driver queue vector allocation denial of service | 5.5v3.1 | 0.2% | 2024-07-30 | Fix |
| CVE-2024-42112 | Linux kernel txgbe Ethernet driver interrupt handling use-after-free | 7.8CNA v3.1 | 0.2% | 2024-07-30 | Fix |
| CVE-2024-42111 | Linux kernel Btrfs quota group inheritance out-of-bounds read | 7.8CNA v3.1 | 0.2% | 2024-07-30 | Fix |
| CVE-2024-42110 | In the Linux kernel, the following vulnerability has been resolved: net: ntb_netdev: Move ntb_netdev_rx_handler() to call netif_rx() from __netif_rx() The following is emitted when using idxd (DSA) dmanegine as the data mover for ntb_transport that ntb_netdev uses. [74412.546922] BUG: using smp_p | 7.5CNA v3.1 | 0.6% | 2024-07-30 | Fix |
| CVE-2024-42109 | Linux kernel nf_tables netfilter use-after-free | 7.8CNA v3.1 | 0.2% | 2024-07-30 | Fix |
| CVE-2024-42108 | Linux kernel rswitch Ethernet driver use-after-free | 9.8CNA v3.1 | 0.6% | 2024-07-30 | Fix |
| CVE-2024-42107 | Linux kernel ice driver PTP timestamp handling null pointer dereference | 4.7NVD v3.1 | 0.2% | 2024-07-30 | Fix |
| CVE-2024-42106 | Linux kernel inet_diag raw socket diagnostics vulnerability | 5.5NVD v3.1 | 0.3% | 2024-07-30 | Fix |
| CVE-2024-42105 | Linux kernel nilfs2 inode number validation use-after-free | 7.8CNA v3.1 | 0.3% | 2024-07-30 | Fix |
| CVE-2024-42104 | Linux kernel nilfs2 directory entry validation use-after-free | 7.8CNA v3.1 | 0.3% | 2024-07-30 | Fix |
| CVE-2024-42103 | Linux kernel Btrfs block group reclaim vulnerability | 7.8CNA v3.1 | 0.2% | 2024-07-30 | Fix |
| CVE-2024-42102 | Linux kernel writeback dirty throttling divide by zero | 4.7v3.1 | 0.3% | 2024-07-30 | Fix |
| CVE-2024-42101 | Linux kernel nouveau graphics driver null pointer dereference | 5.5v3.1 | 0.3% | 2024-07-30 | Fix |
| CVE-2024-42100 | Linux kernel sunxi-ng clock controller driver null pointer dereference | 5.5v3.1 | 0.2% | 2024-07-30 | Fix |
| CVE-2024-42099 | Linux kernel s390 DASD driver CCW sense data null pointer dereference | 7.8CNA v3.1 | 0.2% | 2024-07-30 | Fix |
| CVE-2024-41945 | The fuels-ts typescript SDK has no awareness of to-be-spent transactions | 3.1CNA v3.1 | 0.3% | 2024-07-30 | Fix |
| CVE-2024-41944 | Xibo Signage Xibo CMS proof of play report SQL injection | 6.5CNA v3.1 | 0.4% | 2024-07-30 | Fix |
| CVE-2024-41943 | mkucej i-librarian-free I, Librarian stored XSS vulnerability in Item Summary | 4.6CNA v3.1 | 0.3% | 2024-07-30 | Fix |
| CVE-2024-41924 | EC-CUBE 4 series acceptance of untrusted data | 7.2CISA ADP v3.1 | 0.3% | 2024-07-30 | |
| CVE-2024-41916 | Authenticated sensitive information disclosure in ClearPass Policy Manager | 6.8CNA v3.1 | 0.4% | 2024-07-30 | Fix |
| CVE-2024-41915 | Authenticated SQL injection vulnerability in ClearPass Policy Manager Web-based Management interface | 7.2CNA v3.1 | 0.5% | 2024-07-30 | Fix |
| CVE-2024-41804 | Xibo Signage Xibo CMS DataSet Column Formula SQL injection | 6.5CNA v3.1 | 0.4% | 2024-07-30 | Fix |
| CVE-2024-41803 | Xibo allows sensitive information disclosure abusing SQL injection in Xibo CMS DataSet Filter | 4.9CNA v3.1 | 0.4% | 2024-07-30 | Fix |
| CVE-2024-41802 | Xibo allows sensitive information disclosure abusing SQL injection in Xibo CMS DataSet Data Import | 8.1CNA v3.1 | 0.5% | 2024-07-30 | Fix |
| CVE-2024-41702 | SiberianCMS improper neutralization of special elements used in an SQL command (SQL injection) | 9.8v3.1 | 0.5% | 2024-07-30 | Fix |
| CVE-2024-41701 | AccuPOS exposure of sensitive information to an unauthorized actor | 5.3CNA v3.1 | 0.3% | 2024-07-30 | |
| CVE-2024-41696 | Priority Software PRI WEB Portal Add-On for Priority ERP information disclosure | 7.5CNA v3.1 | 0.4% | 2024-07-30 | Fix |
| CVE-2024-41695 | Cybonet improper limitation of a pathname to a restricted directory | 7.5CNA v3.1 | 0.6% | 2024-07-30 | Fix |
| CVE-2024-41694 | Cybonet exposure of sensitive information to an unauthorized actor | 5.3CNA v3.1 | 0.3% | 2024-07-30 | Fix |
| CVE-2024-41693 | Mashov improper neutralization of script-related HTML tags in a web page (basic XSS) | 6.1v3.1 | 0.3% | 2024-07-30 | Fix |
| CVE-2024-41611 | D-Link DIR-860L hard-coded credentials | 9.8CISA ADP v3.1 | 0.8% | 2024-07-30 | |
| CVE-2024-41610 | D-Link DIR-820LW hard-coded credentials | 9.8CISA ADP v3.1 | 0.9% | 2024-07-30 | |
| CVE-2024-41443 | Dbohdan Hicolor function cp_dynamic stack-based buffer overflow | 5.5v3.1 | 0.4% | 2024-07-30 | |
| CVE-2024-41440 | Dbohdan Hicolor function png_quantize heap-based buffer overflow | 6.2CISA ADP v3.1 | 0.8% | 2024-07-30 | |
| CVE-2024-41439 | Dbohdan Hicolor function cp_block heap-based buffer overflow | 5.5v3.1 | 0.4% | 2024-07-30 | |
| CVE-2024-41438 | Dbohdan Hicolor function cp_stored heap-based buffer overflow | 6.2CISA ADP v3.1 | 0.8% | 2024-07-30 | |
| CVE-2024-41437 | Dbohdan Hicolor function cp_unfilter heap-based buffer overflow | 5.5v3.1 | 0.4% | 2024-07-30 | |
| CVE-2024-41305 | WonderCMS plugins page server-side request forgery | 4.7NVD v3.1 | 0.2% | 2024-07-30 | |
| CVE-2024-41304 | WonderCMS uploadFileAction function arbitrary file upload | 5.4CISA ADP v3.1 | 0.4% | 2024-07-30 | |
| CVE-2024-41141 | EC-CUBE Web API Plugin stored cross-site scripting | 6.1CISA ADP v3.1 | 0.3% | 2024-07-30 | |
| CVE-2024-41109 | Pimcore vulnerable to disclosure of system and database information behind /admin firewall | 6.3CNA v3.1 | 0.5% | 2024-07-30 | Fix |
| CVE-2024-40895 | FFRI AMC OS command injection | 6.4CISA ADP v3.1 | 0.5% | 2024-07-30 | |
| CVE-2024-40094 | GraphQL Java introspection queries denial of service | 5.3CISA ADP v3.1 | 0.9% | 2024-07-30 | Exploit codeFix |
| CVE-2024-39320 | Discourse allows iframe injection though default site setting | 6.1CNA v3.1 | 0.3% | 2024-07-30 | Fix |
| CVE-2024-39012 | Ais Strategyen prototype pollution | 9.8v3.1 | 1.0% | 2024-07-30 | |
| CVE-2024-39011 | Chargeover/redoc prototype pollution | 9.8v3.1 | 0.9% | 2024-07-30 | |
| CVE-2024-39010 | Chasemoskal Snapstate prototype pollution | 9.8v3.1 | 0.9% | 2024-07-30 | |
| CVE-2024-38986 | @75LB/deep-merge prototype pollution | 9.8v3.1 | 1.0% | 2024-07-30 | Fix |
| CVE-2024-38984 | Lukebond Json-override prototype pollution | 9.8v3.1 | 1.0% | 2024-07-30 | |
| CVE-2024-38983 | Alykoshin Mini-deep-assign prototype pollution | 9.8v3.1 | 1.0% | 2024-07-30 | |
| CVE-2024-38909 | Studio 42 elFinder vulnerable to Incorrect Access Control | 9.8CISA ADP v3.1 | 0.5% | 2024-07-30 | |
| CVE-2024-38432 | Matrix Tafnit v8 Reliance on File Name or extension of Externally-Supplied file | 9.8v3.1 | 0.2% | 2024-07-30 | Fix |
| CVE-2024-38431 | Matrix Tafnit v8 observable response discrepancy | 7.5v3.1 | 0.4% | 2024-07-30 | Fix |
| CVE-2024-38430 | Matrix improper neutralization of input during web page generation (cross-site scripting) | 6.1v3.1 | 0.3% | 2024-07-30 | Fix |
| CVE-2024-38429 | Matrix files or directories accessible to external parties | 7.5v3.1 | 0.4% | 2024-07-30 | Fix |
| CVE-2024-37299 | Discourse vulnerable to DoS via Tag Group | 4.9CNA v3.1 | 0.6% | 2024-07-30 | Fix |
| CVE-2024-37281 | Kibana denial of service issue | 6.5CNA v3.1 | 0.4% | 2024-07-30 | Fix |
| CVE-2024-37165 | Discourse has an XSS via Onebox system | 6.3CNA v3.1 | 0.4% | 2024-07-30 | Fix |
| CVE-2024-36572 | Allpro Formmanager DATA Handler prototype pollution | 9.8v3.1 | 0.7% | 2024-07-30 | |
| CVE-2024-23091 | digitaldruid HotelDruid funzioni.php weak credentials | 7.5v3.1 | 0.4% | 2024-07-30 | |
| CVE-2024-7297 | Langflow privilege escalation | 8.8CNA v3.1 | 21.2% | 2024-07-30 | Fix |
| CVE-2024-7276 | itsourcecode Alton Management System member_save.php SQL injection | 7.2v3.1 | 0.6% | 2024-07-30 | |
| CVE-2024-7275 | itsourcecode Alton Management System category_save.php SQL injection | 7.2v3.1 | 0.6% | 2024-07-30 | |
| CVE-2024-7274 | itsourcecode Alton Management System reservation_status.php SQL injection | 7.2v3.1 | 0.6% | 2024-07-30 | |
| CVE-2024-7273 | itsourcecode Alton Management System search.php SQL injection | 9.8v3.1 | 0.7% | 2024-07-30 | |
| CVE-2024-7226 | SourceCodester Medicine Tracker System Password Change cross-site request forgery | 8.8v3.1 | 0.4% | 2024-07-30 | |
| CVE-2024-7225 | SourceCodester Insurance Management System Edit Insurance Policy page cross-site scripting | 5.4v3.1 | 0.5% | 2024-07-30 | |
| CVE-2024-7224 | SourceCodester Lot Reservation Management System lot_details.php SQL injection | 9.8v3.1 | 0.5% | 2024-07-30 | |
| CVE-2024-7223 | SourceCodester Lot Reservation Management System view_model.php SQL injection | 9.8v3.1 | 0.5% | 2024-07-30 | |
| CVE-2024-7222 | SourceCodester Lot Reservation Management System home.php SQL injection | 9.8v3.1 | 0.6% | 2024-07-30 | |
| CVE-2024-7221 | SourceCodester/Campcodes School Log Management System manage_user.php SQL injection | 9.8v3.1 | 0.6% | 2024-07-30 | |
| CVE-2024-7220 | SourceCodester/Campcodes School Log Management System print_barcode.php SQL injection | 9.8v3.1 | 0.6% | 2024-07-30 | |
| CVE-2024-7219 | SourceCodester/Campcodes School Log Management System ajax.php SQL injection | 9.8v3.1 | 0.8% | 2024-07-30 | |
| CVE-2024-7218 | SourceCodester/Campcodes School Log Management System ajax.php cross-site scripting | 6.1v3.1 | 0.5% | 2024-07-30 | |
| CVE-2024-7217 | TOTOLINK CA300-PoE cstecgi.cgi loginauth buffer overflow | 8.8v3.1 | 7.1% | 2024-07-30 | |
| CVE-2024-7216 | TOTOLINK LR1200 shadow.sample hard-coded password | 5.3v3.1 | 0.4% | 2024-07-30 | |
| CVE-2024-7215 | TOTOLINK LR1200 cstecgi.cgi NTPSyncWithHost command injection | 8.8v3.1 | 3.3% | 2024-07-30 | |
| CVE-2024-7214 | TOTOLINK LR350 cstecgi.cgi setWanCfg command injection | 8.8v3.1 | 3.2% | 2024-07-30 | |
| CVE-2024-7213 | TOTOLINK A7000R cstecgi.cgi setWizardCfg buffer overflow | 8.8v3.1 | 1.1% | 2024-07-30 | |
| CVE-2024-7212 | TOTOLINK A7000R cstecgi.cgi loginauth buffer overflow | 8.8v3.1 | 1.0% | 2024-07-30 | |
| CVE-2024-7209 | NetWin shared SPF records email spoofing | 6.5CISA ADP v3.1 | 0.3% | 2024-07-30 | |
| CVE-2024-7208 | HostGator multi-tenant hosting email spoofing | 6.5CISA ADP v3.1 | 0.4% | 2024-07-30 | |
| CVE-2024-7127 | XSS in Stackposts Social Marketing Tool | 6.1NVD v3.1 | 0.4% | 2024-07-30 | |
| CVE-2024-7100 | Bold Page Builder WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.4% | 2024-07-30 | Fix |
| CVE-2024-6699 | SQLi in Mikafon Electronic's Mikafon MA7 | 9.8v3.1 | 0.4% | 2024-07-30 | Fix |
| CVE-2024-6536 | Zephyr Project Manager WordPress plugin Editor+ XSS | 5.4CISA ADP v3.1 | 0.8% | 2024-07-30 | Exploit codeFix |
| CVE-2024-6230 | Pardakht Delkhah WordPress plugin form fields reset via CSRF | 6.5CISA ADP v3.1 | 0.3% | 2024-07-30 | Fix |
| CVE-2024-6226 | WpStickyBar WordPress plugin reflected XSS | 6.1CISA ADP v3.1 | 0.4% | 2024-07-30 | |
| CVE-2024-6224 | Send email only on Reply to My Comment WordPress plugin stored XSS via CSRF | 5.9CISA ADP v3.1 | 0.2% | 2024-07-30 | |
| CVE-2024-6223 | Send email only on Reply to My Comment WordPress plugin reflected XSS | 6.1CISA ADP v3.1 | 0.4% | 2024-07-30 | |
| CVE-2024-6021 | Donation Block for PayPal WordPress plugin unauthenticated stored XSS | 6.8CISA ADP v3.1 | 0.4% | 2024-07-30 | Fix |
| CVE-2024-5975 | CZ Loan Management WordPress plugin unauthenticated SQLi | 9.1CISA ADP v3.1 | 2.0% | 2024-07-30 | Nuclei |
| CVE-2024-5901 | SiteOrigin Widgets Bundle WordPress plugin stored cross-site scripting in Image Grid widget | 5.4v3.1 | 0.4% | 2024-07-30 | Fix |
| CVE-2024-5809 | WP Ajax Contact Form WordPress plugin reflected cross-site scripting | 6.1CISA ADP v3.1 | 0.4% | 2024-07-30 | |
| CVE-2024-5808 | WP Ajax Contact Form WordPress plugin arbitrary email deletion via CSRF | 4.3CISA ADP v3.1 | 0.2% | 2024-07-30 | |
| CVE-2024-5807 | Business Card WordPress plugin Admin+ file upload | 7.2CISA ADP v3.1 | 0.6% | 2024-07-30 | |
| CVE-2024-5765 | WpStickyBar WordPress plugin unauthenticated SQLi | 9.8CISA ADP v3.1 | 27.2% | 2024-07-30 | Nuclei |
| CVE-2024-5486 | Authenticated sensitive information disclosure in ClearPass Policy Manager | 5.8CNA v3.1 | 0.3% | 2024-07-30 | Fix |
| CVE-2024-5250 | Akana API Platform Overly Verbose Errors in SAML Integration | 3.5CNA v3.1 | 0.3% | 2024-07-30 | Fix |
| CVE-2024-5249 | Akana API Platform SAML authentication vulnerability | 5.4CNA v3.1 | 0.2% | 2024-07-30 | Fix |
| CVE-2024-4188 | OpenText Documentum™ Server unprotected transport of credentials | 7.1CNA v4.0 | 0.2% | 2024-07-30 | |
| CVE-2024-4096 | Responsive Tabs WordPress plugin Contributor+ stored XSS | 5.9CISA ADP v3.1 | 0.4% | 2024-07-30 | Fix |
| CVE-2024-3986 | SportsPress WordPress plugin Admin+ stored XSS | 4.8NVD v3.1 | 0.4% | 2024-07-30 | Fix |
| CVE-2024-3930 | XML external entity in Akana | 6.3CNA v3.1 | 0.3% | 2024-07-30 | Fix |
| CVE-2024-3669 | Web Directory Free WordPress plugin reflected XSS | 6.8CISA ADP v3.1 | 0.5% | 2024-07-30 | Fix |
| CVE-2024-3113 | FormFlow WordPress plugin Admin+ stored XSS | 5.9CISA ADP v3.1 | 0.3% | 2024-07-30 | Fix |
| CVE-2024-1287 | Paid Memberships Pro - Member Directory Add On WordPress plugin sensitive information disclosure | 6.5CISA ADP v3.1 | 0.5% | 2024-07-30 | Fix |
| CVE-2024-1286 | Paid Memberships Pro - Membership Maps Add On WordPress plugin sensitive information disclosure | 4.9CISA ADP v3.1 | 0.6% | 2024-07-30 | Fix |
| CVE-2024-42098 | Linux kernel ECDH crypto key handling vulnerability | 5.5v3.1 | 0.2% | 2024-07-29 | Fix |
| CVE-2024-42097 | Linux kernel ALSA emux synthesizer patch loading vulnerability | 7.8CNA v3.1 | 0.2% | 2024-07-29 | Fix |
| CVE-2024-42096 | Linux kernel x86 timer-based profiling vulnerability | 5.5NVD v3.1 | 0.2% | 2024-07-29 | Fix |
| CVE-2024-42095 | In the Linux kernel, the following vulnerability has been resolved: serial: 8250_omap: Implementation of Errata i2310 As per Errata i2310[0], Erroneous timeout can be triggered, if this Erroneous interrupt is not cleared then it may leads to storm of interrupts, therefore apply Errata i2310 soluti | 5.5v3.1 | 0.2% | 2024-07-29 | Fix |
| CVE-2024-42094 | Linux kernel net/iucv stack-based buffer overflow | 7.1NVD v3.1 | 0.2% | 2024-07-29 | Fix |
| CVE-2024-42093 | Linux kernel DPAA2 Ethernet driver out-of-bounds write | 7.3NVD v3.1 | 0.2% | 2024-07-29 | Fix |
| CVE-2024-42092 | Linux kernel davinci GPIO driver improper array index validation | 7.8v3.1 | 0.2% | 2024-07-29 | Fix |
| CVE-2024-42091 | Linux kernel Xe GPU driver PAT settings null pointer dereference | 5.5v3.1 | 0.2% | 2024-07-29 | Fix |
| CVE-2024-42090 | Linux kernel pinctrl deadlock | 5.5NVD v3.1 | 0.2% | 2024-07-29 | Fix |
| CVE-2024-42089 | Linux kernel fsl-asoc-card audio driver null pointer dereference | 5.5v3.1 | 0.2% | 2024-07-29 | Fix |
| CVE-2024-42088 | Linux kernel MediaTek MT8195 sound card driver improper array index validation | 7.3CNA v3.1 | 0.2% | 2024-07-29 | Fix |
| CVE-2024-42087 | Linux kernel ili9881c display panel driver vulnerability | 5.5v3.1 | 0.2% | 2024-07-29 | Fix |
| CVE-2024-42086 | Linux kernel BME680 gas sensor driver out-of-bounds write | 7.8v3.1 | 0.2% | 2024-07-29 | Fix |
| CVE-2024-42085 | Linux kernel dwc3 USB controller driver deadlock | 5.5v3.1 | 0.2% | 2024-07-29 | Fix |
| CVE-2024-42084 | Linux kernel ftruncate compat syscall vulnerability | 5.5v3.1 | 0.2% | 2024-07-29 | Fix |
| CVE-2024-42083 | Linux kernel ionic kernel panic | 8.8CNA v3.1 | 0.3% | 2024-07-29 | Fix |
| CVE-2024-42082 | Linux kernel XDP memory model registration resource exhaustion | 5.5NVD v3.1 | 0.2% | 2024-07-29 | Fix |
| CVE-2024-42081 | Linux kernel Xe GPU driver devcoredump null pointer dereference | 5.5v3.1 | 0.2% | 2024-07-29 | Fix |
| CVE-2024-42080 | Linux kernel RDMA/restrack out-of-bounds write | 5.5v3.1 | 0.2% | 2024-07-29 | Fix |
| CVE-2024-42079 | Linux kernel GFS2 log flush null pointer dereference | 5.5NVD v3.1 | 0.3% | 2024-07-29 | Fix |
| CVE-2024-42078 | Linux kernel nfsd improper initialization | 5.5v3.1 | 0.2% | 2024-07-29 | Fix |
| CVE-2024-42077 | Linux kernel OCFS2 direct I/O vulnerability | 5.5v3.1 | 0.2% | 2024-07-29 | Fix |
| CVE-2024-42076 | Linux kernel J1939 CAN protocol information disclosure | 5.5v3.1 | 0.2% | 2024-07-29 | Fix |
| CVE-2024-42075 | Linux kernel BPF arena memory remapping use-after-free | 7.8CNA v3.1 | 0.2% | 2024-07-29 | Fix |
| CVE-2024-42074 | Linux kernel AMD ACP audio driver resume handling null pointer dereference | 5.5v3.1 | 0.2% | 2024-07-29 | Fix |
| CVE-2024-42073 | Linux kernel Spectrum-4 shared buffer register handling use-after-free | 5.5v3.1 | 0.2% | 2024-07-29 | Fix |
| CVE-2024-42072 | Linux kernel BPF verifier may_goto handling denial of service | 7.8CNA v3.1 | 0.2% | 2024-07-29 | Fix |
| CVE-2024-42071 | Linux kernel ionic excessive iteration | 7.8CNA v3.1 | 0.2% | 2024-07-29 | Fix |
| CVE-2024-42070 | Linux kernel netfilter nf_tables register validation memory leak | 5.5NVD v3.1 | 0.3% | 2024-07-29 | Fix |
| CVE-2024-42069 | Linux kernel mana double free | 7.8CNA v3.1 | 0.2% | 2024-07-29 | Fix |
| CVE-2024-42068 | Linux kernel BPF program memory protection unchecked return value | 7.8CNA v3.1 | 0.2% | 2024-07-29 | Fix |
| CVE-2024-42067 | Linux kernel BPF JIT binary locking unchecked return value | 7.8CNA v3.1 | 0.2% | 2024-07-29 | Fix |
| CVE-2024-42066 | Linux kernel Xe GPU page size calculation integer overflow | 7.8CNA v3.1 | 0.2% | 2024-07-29 | Fix |
| CVE-2024-42065 | Linux kernel drm/xe null pointer dereference | 5.5v3.1 | 0.2% | 2024-07-29 | Fix |
| CVE-2024-42064 | Linux kernel AMD display driver pipe handling denial of service | 7.8CNA v3.1 | 0.2% | 2024-07-29 | Fix |
| CVE-2024-42063 | Linux kernel BPF device map lookup vulnerability | 5.5v3.1 | 0.2% | 2024-07-29 | Fix |
| CVE-2024-41881 | Philip Hazel SDoP stack-based buffer overflow | 8.8CISA ADP v3.1 | 0.6% | 2024-07-29 | |
| CVE-2024-41819 | enchant97 note-mark note Mark has a stored XSS in the note link href attribute | 8.7CNA v3.1 | 0.8% | 2024-07-29 | |
| CVE-2024-41818 | ReDOS at currency parsing fast-xml-parser | 7.5CNA v3.1 | 0.8% | 2024-07-29 | Fix |
| CVE-2024-41817 | Arbitrary code execution in `AppImage` version `ImageMagick` | 7.0CNA v3.1 | 0.9% | 2024-07-29 | Exploit codeFix |
| CVE-2024-41810 | twisted HTML injection in HTTP redirect body | 6.1CNA v3.1 | 1.2% | 2024-07-29 | NucleiFix |
| CVE-2024-41799 | tgstation13 tgstation-server DreamMaker compiler path traversal | 8.4CNA v3.1 | 1.2% | 2024-07-29 | Fix |
| CVE-2024-41726 | SKYSEA Client View path traversal | 7.5CISA ADP v3.1 | 0.6% | 2024-07-29 | Fix |
| CVE-2024-41676 | Magento LTS vulnerable to stored cross-site scripting (XSS) in admin system configs | 4.1CNA v3.1 | 0.4% | 2024-07-29 | Fix |
| CVE-2024-41671 | twisted twisted.web has disordered HTTP pipeline response | 8.3CNA v3.1 | 0.9% | 2024-07-29 | Fix |
| CVE-2024-41640 | AML Surety Eco up to cross-site scripting | 6.1CISA ADP v3.1 | 0.6% | 2024-07-29 | |
| CVE-2024-41637 | RaspAP allows an attacker to escalate privileges | 8.3CISA ADP v3.1 | 0.8% | 2024-07-29 | |
| CVE-2024-41631 | host-host NEUQ_board v.1.0 buffer overflow | 7.5CISA ADP v3.1 | 0.7% | 2024-07-29 | |
| CVE-2024-41624 | Himalaya Xiaoya nano smart speaker improper access control | 6.3CISA ADP v3.1 | 0.3% | 2024-07-29 | |
| CVE-2024-41143 | SKYSEA Client View origin validation error | 7.8v3.1 | 0.1% | 2024-07-29 | Fix |
| CVE-2024-41139 | SKYSEA Client View incorrect privilege assignment | 7.8CISA ADP v3.1 | 0.2% | 2024-07-29 | Fix |
| CVE-2024-41098 | Linux kernel libata host allocation null pointer dereference | 5.5v3.1 | 0.3% | 2024-07-29 | Fix |
| CVE-2024-41097 | Linux kernel cxacru USB ATM driver vulnerability | 5.5v3.1 | 0.2% | 2024-07-29 | Fix |
| CVE-2024-41096 | Linux kernel PCI MSI subsystem use-after-free | 7.8CNA v3.1 | 0.2% | 2024-07-29 | Fix |
| CVE-2024-41095 | Linux kernel drm/nouveau/dispnv04 null pointer dereference | 5.5v3.1 | 0.2% | 2024-07-29 | Fix |
| CVE-2024-41094 | Linux kernel fbdev-dma driver vulnerability | 5.5v3.1 | 0.2% | 2024-07-29 | Fix |
| CVE-2024-41093 | Linux kernel amdgpu framebuffer handling null pointer dereference | 5.5v3.1 | 0.2% | 2024-07-29 | Fix |
| CVE-2024-41092 | Linux kernel i915 GT fence register revocation use-after-free | 7.8CNA v3.1 | 0.3% | 2024-07-29 | Fix |
| CVE-2024-41091 | Linux kernel tun driver out-of-bounds read | 8.8CNA v3.1 | 0.3% | 2024-07-29 | Fix |
| CVE-2024-41090 | Linux kernel tap driver out-of-bounds read | 8.8CNA v3.1 | 0.3% | 2024-07-29 | Fix |
| CVE-2024-41089 | Linux kernel drm/nouveau/dispnv04 null pointer dereference | 5.5v3.1 | 0.2% | 2024-07-29 | Fix |
| CVE-2024-41088 | Linux kernel mcp251xfd CAN driver transmit path infinite loop | 5.5v3.1 | 0.2% | 2024-07-29 | Fix |
| CVE-2024-41087 | Linux kernel libata host allocation double free | 7.8CNA v3.1 | 0.2% | 2024-07-29 | Fix |
| CVE-2024-41086 | Linux kernel bcachefs superblock downgrade field vulnerability | 7.8CNA v3.1 | 0.2% | 2024-07-29 | Fix |
| CVE-2024-41085 | Linux kernel CXL persistent memory region driver null pointer dereference | 5.5NVD v3.1 | 0.2% | 2024-07-29 | Fix |
| CVE-2024-41084 | Linux kernel CXL region lookup null pointer dereference | 5.5v3.1 | 0.2% | 2024-07-29 | Fix |
| CVE-2024-41083 | Linux kernel netfs page fault handler null pointer dereference | 5.5v3.1 | 0.2% | 2024-07-29 | Fix |
| CVE-2024-41082 | Linux kernel NVMe fabrics register read/write path denial of service | 5.5NVD v3.1 | 0.3% | 2024-07-29 | Fix |
| CVE-2024-41081 | Linux kernel ILA output path race condition | 9.8CNA v3.1 | 0.9% | 2024-07-29 | Fix |
| CVE-2024-41080 | Linux kernel io_uring IO worker registration deadlock | 5.5v3.1 | 0.2% | 2024-07-29 | Fix |
| CVE-2024-41079 | Linux kernel NVMe target RDMA transport information disclosure | 7.5CNA v3.1 | 0.6% | 2024-07-29 | Fix |
| CVE-2024-41078 | Linux kernel Btrfs qgroup quota tree memory leak | 5.5v3.1 | 0.2% | 2024-07-29 | Fix |
| CVE-2024-41077 | Linux kernel null_blk block size validation null pointer dereference | 5.5v3.1 | 0.2% | 2024-07-29 | Fix |
| CVE-2024-41076 | Linux kernel NFSv4 security label handling memory leak | 5.5v3.1 | 0.2% | 2024-07-29 | Fix |
| CVE-2024-41075 | Linux kernel cachefiles on-demand read denial of service | 7.8CNA v3.1 | 0.2% | 2024-07-29 | Fix |
| CVE-2024-41074 | Linux kernel cachefiles on-demand read use-after-free | 7.8v3.1 | 0.2% | 2024-07-29 | Fix |
| CVE-2024-41073 | Linux kernel NVMe discard request handling double free | 9.8CNA v3.1 | 0.7% | 2024-07-29 | Fix |
| CVE-2024-41072 | In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: wext: add extra SIOCSIWSCAN data check In 'cfg80211_wext_siwscan()', add extra check whether number of channels passed via 'ioctl(sock, SIOCSIWSCAN, ...)' doesn't exceed IW_MAX_FREQUENCIES and reject invalid reques | 5.5v3.1 | 0.2% | 2024-07-29 | Fix |
| CVE-2024-41070 | Linux kernel SPAPR TCE IOMMU group attachment use-after-free | 7.8CNA v3.1 | 0.2% | 2024-07-29 | Fix |
| CVE-2024-41069 | Linux kernel ASoC topology parser use-after-free | 7.8CNA v3.1 | 0.2% | 2024-07-29 | Fix |
| CVE-2024-41068 | Linux kernel SCLP interface initialization vulnerability | 5.5v3.1 | 0.2% | 2024-07-29 | Fix |
| CVE-2024-41067 | Linux kernel btrfs scrub RAID stripe tree lookup vulnerability | 5.5v3.1 | 0.2% | 2024-07-29 | Fix |
| CVE-2024-41066 | Linux kernel ibmvnic memory leak | 7.5CNA v3.1 | 0.5% | 2024-07-29 | Fix |
| CVE-2024-41065 | Linux kernel dispatch trace log interface denial of service | 5.5v3.1 | 0.2% | 2024-07-29 | Fix |
| CVE-2024-41064 | Linux kernel EEH PCI error handling vulnerability | 7.8CNA v3.1 | 0.2% | 2024-07-29 | Fix |
| CVE-2024-41063 | Linux kernel HCI core work queue handling deadlock | 5.5v3.1 | 0.2% | 2024-07-29 | Fix |
| CVE-2024-41062 | Linux kernel L2CAP socket handling vulnerability | 8.8CNA v3.1 | 0.3% | 2024-07-29 | Fix |
| CVE-2024-41061 | Linux kernel AMD display mode library vulnerability | 7.8v3.1 | 0.2% | 2024-07-29 | Fix |
| CVE-2024-41060 | Linux kernel radeon graphics driver null pointer dereference | 7.8CNA v3.1 | 0.2% | 2024-07-29 | Fix |
| CVE-2024-41059 | Linux kernel hfsplus extended attribute name copying vulnerability | 7.8CNA v3.1 | 0.3% | 2024-07-29 | Fix |
| CVE-2024-41058 | Linux kernel cachefiles volume withdrawal use-after-free | 7.8v3.1 | 0.3% | 2024-07-29 | Fix |
| CVE-2024-41057 | Linux kernel cachefiles cookie withdrawal use-after-free | 7.8CNA v3.1 | 0.3% | 2024-07-29 | Fix |
| CVE-2024-41056 | Linux kernel cs_dsp firmware name parsing vulnerability | 7.3CNA v3.1 | 0.3% | 2024-07-29 | Fix |
| CVE-2024-41055 | Linux kernel sparse memory section validation null pointer dereference | 5.5v3.1 | 0.3% | 2024-07-29 | Fix |
| CVE-2024-41054 | Linux kernel UFS host controller driver null pointer dereference | 5.5v3.1 | 0.3% | 2024-07-29 | Fix |
| CVE-2024-41053 | Linux kernel UFS host controller driver null pointer dereference | 5.5v3.1 | 0.3% | 2024-07-29 | Fix |
| CVE-2024-41052 | Linux kernel VFIO PCI hot-reset device enumeration vulnerability | 5.5v3.1 | 0.3% | 2024-07-29 | Fix |
| CVE-2024-41051 | Linux kernel cachefiles on-demand object worker use-after-free | 7.8CNA v3.1 | 0.3% | 2024-07-29 | Fix |
| CVE-2024-41050 | Linux kernel cachefiles on-demand read use-after-free | 7.8v3.1 | 0.3% | 2024-07-29 | Fix |
| CVE-2024-41049 | Linux kernel POSIX file lock tracing use-after-free | 7.8CNA v3.1 | 0.3% | 2024-07-29 | Fix |
| CVE-2024-41048 | Linux kernel sockmap message receive null pointer dereference | 7.5CNA v3.1 | 0.8% | 2024-07-29 | Fix |
| CVE-2024-41047 | Linux kernel i40e XDP program handling vulnerability | 5.5v3.1 | 0.3% | 2024-07-29 | Fix |
| CVE-2024-41046 | Linux kernel lantiq_etop Ethernet driver double free | 8.8CNA v3.1 | 0.5% | 2024-07-29 | Fix |
| CVE-2024-41045 | Linux kernel BPF timer use-after-free | 7.8CNA v3.1 | 0.3% | 2024-07-29 | Fix |
| CVE-2024-41044 | Linux kernel PPP LCP packet handling vulnerability | 5.5v3.1 | 0.3% | 2024-07-29 | Fix |
| CVE-2024-41043 | Linux kernel nfnetlink_queue reachable assertion | 5.5v3.1 | 0.2% | 2024-07-29 | Fix |
| CVE-2024-41042 | Linux kernel nf_tables chain validation out-of-bounds write | 7.8v3.1 | 0.3% | 2024-07-29 | Fix |
| CVE-2024-41041 | Linux kernel UDP port binding race condition | 7.8CNA v3.1 | 0.3% | 2024-07-29 | Fix |
| CVE-2024-41040 | Linux kernel net/sched use-after-free | 9.8CNA v3.1 | 1.0% | 2024-07-29 | Fix |
| CVE-2024-41039 | Linux kernel cs_dsp wmfw header parser vulnerability | 7.8v3.1 | 0.3% | 2024-07-29 | Fix |
| CVE-2024-41038 | Linux kernel cs_dsp firmware header parser vulnerability | 7.8CNA v3.1 | 0.3% | 2024-07-29 | Fix |
| CVE-2024-41037 | Linux kernel Intel HDA audio driver suspend handling null pointer dereference | 5.5v3.1 | 0.3% | 2024-07-29 | Fix |
| CVE-2024-41036 | Linux kernel ks8851 deadlock | 7.5CNA v3.1 | 0.8% | 2024-07-29 | Fix |
| CVE-2024-41035 | Linux kernel USB endpoint descriptor parsing vulnerability | 5.5v3.1 | 0.3% | 2024-07-29 | Fix |
| CVE-2024-41034 | Linux kernel nilfs2 directory rename reachable assertion | 7.8CNA v3.1 | 0.3% | 2024-07-29 | Fix |
| CVE-2024-41033 | Linux kernel cachestat recency check vulnerability | 5.5v3.1 | 0.3% | 2024-07-29 | Fix |
| CVE-2024-41032 | Linux kernel vmalloc per-CPU hash table vulnerability | 7.8CNA v3.1 | 0.3% | 2024-07-29 | Fix |
| CVE-2024-41031 | Linux kernel page cache management vulnerability | 5.5v3.1 | 0.3% | 2024-07-29 | Fix |
| CVE-2024-41030 | Linux kernel ksmbd directory open handling null pointer dereference | 5.5v3.1 | 0.3% | 2024-07-29 | Fix |
| CVE-2024-41029 | Linux kernel NVMEM cell sysfs interface information disclosure | 5.5v3.1 | 0.3% | 2024-07-29 | Fix |
| CVE-2024-41028 | Linux kernel Toshiba ACPI driver vulnerability | 7.1CNA v3.1 | 0.3% | 2024-07-29 | Fix |
| CVE-2024-41027 | Linux kernel userfaultfd API vulnerability | 3.3v3.1 | 0.3% | 2024-07-29 | Fix |
| CVE-2024-41026 | Linux kernel DaVinci MMC driver vulnerability | 7.8CNA v3.1 | 0.3% | 2024-07-29 | Fix |
| CVE-2024-41025 | Linux kernel fastrpc audio daemon attach memory leak | 5.5v3.1 | 0.3% | 2024-07-29 | Fix |
| CVE-2024-41023 | Linux kernel deadline scheduler memory leak | 5.5NVD v3.1 | 0.3% | 2024-07-29 | Fix |
| CVE-2024-41022 | Linux kernel amdgpu SDMA trap interrupt handler vulnerability | 7.0CNA v3.1 | 0.2% | 2024-07-29 | Fix |
| CVE-2024-41021 | Linux kernel s390 page fault handling vulnerability | 5.5v3.1 | 0.2% | 2024-07-29 | Fix |
| CVE-2024-41020 | Linux kernel fcntl/close file locking compat path race condition | 7.8CNA v3.1 | 0.2% | 2024-07-29 | Fix |
| CVE-2024-41019 | Linux kernel NTFS3 free space parsing out-of-bounds read | 7.8CNA v3.1 | 0.2% | 2024-07-29 | Fix |
| CVE-2024-41018 | Linux kernel NTFS3 attribute name parsing vulnerability | 7.8CNA v3.1 | 0.2% | 2024-07-29 | Fix |
| CVE-2024-41017 | In the Linux kernel, the following vulnerability has been resolved: jfs: don't walk off the end of ealist Add a check before visiting the members of ea to make sure each ea stays within the ealist. | 7.8CNA v3.1 | 0.2% | 2024-07-29 | Fix |
| CVE-2024-41016 | In the Linux kernel, the following vulnerability has been resolved: ocfs2: strict bound check before memcmp in ocfs2_xattr_find_entry() xattr in ocfs2 maybe 'non-indexed', which saved with additional space requested. It's better to check if the memory is out of bound before memcmp, although this | 7.8CNA v3.1 | 0.2% | 2024-07-29 | Fix |
| CVE-2024-41015 | Linux kernel OCFS2 directory entry parsing vulnerability | 7.8CNA v3.1 | 0.2% | 2024-07-29 | Fix |
| CVE-2024-41014 | Linux kernel XFS log recovery out-of-bounds read | 7.1CNA v3.1 | 0.2% | 2024-07-29 | Fix |
| CVE-2024-41013 | Linux kernel XFS directory data block parsing out-of-bounds read | 7.1v3.1 | 0.2% | 2024-07-29 | Fix |
| CVE-2024-40836 | Apple macOS logic flaw | 5.5NVD v3.1 | 0.6% | 2024-07-29 | Fix |
| CVE-2024-40835 | Apple macOS logic flaw | 5.5v3.1 | 0.3% | 2024-07-29 | Fix |
| CVE-2024-40834 | Apple macOS missing authorization | 4.4v3.1 | 0.3% | 2024-07-29 | Fix |
| CVE-2024-40833 | Apple macOS logic flaw | 5.5v3.1 | 0.3% | 2024-07-29 | Fix |
| CVE-2024-40832 | Apple macOS insecure storage of sensitive information | 3.3v3.1 | 0.2% | 2024-07-29 | Fix |
| CVE-2024-40829 | Apple macOS use-after-free | 4.6NVD v3.1 | 0.8% | 2024-07-29 | Fix |
| CVE-2024-40828 | Apple macOS improper preservation of permissions | 7.8v3.1 | 0.3% | 2024-07-29 | Fix |
| CVE-2024-40827 | Apple macOS arbitrary file write | 5.5v3.1 | 0.3% | 2024-07-29 | Fix |
| CVE-2024-40824 | Apple macOS improper preservation of permissions | 5.5NVD v3.1 | 0.3% | 2024-07-29 | Fix |
| CVE-2024-40823 | Apple macOS information disclosure | 5.5v3.1 | 0.3% | 2024-07-29 | Fix |
| CVE-2024-40822 | Apple macOS improper access control | 2.4v3.1 | 0.4% | 2024-07-29 | Fix |
| CVE-2024-40821 | Apple macOS improper preservation of permissions | 7.1v3.1 | 0.2% | 2024-07-29 | Fix |
| CVE-2024-40818 | Apple macOS information disclosure | 4.6v3.1 | 0.4% | 2024-07-29 | Fix |
| CVE-2024-40817 | Apple Safari clickjacking | 6.1v3.1 | 0.7% | 2024-07-29 | Fix |
| CVE-2024-40816 | Apple macOS out-of-bounds read | 5.5v3.1 | 0.2% | 2024-07-29 | Fix |
| CVE-2024-40815 | Apple macOS cross-site request forgery | 7.5v3.1 | 1.1% | 2024-07-29 | Exploit codeFix |
| CVE-2024-40814 | Apple macOS improper authorization | 7.1v3.1 | 0.2% | 2024-07-29 | Fix |
| CVE-2024-40813 | Apple watchOS insecure storage of sensitive information | 4.6v3.1 | 0.4% | 2024-07-29 | Fix |
| CVE-2024-40812 | Apple macOS logic flaw | 7.8v3.1 | 0.3% | 2024-07-29 | Fix |
| CVE-2024-40811 | Apple macOS improper preservation of permissions | 5.5NVD v3.1 | 0.2% | 2024-07-29 | Fix |
| CVE-2024-40809 | Apple macOS logic flaw | 7.8v3.1 | 0.3% | 2024-07-29 | Fix |
| CVE-2024-40807 | Apple macOS improper authorization | 5.5v3.1 | 0.2% | 2024-07-29 | Fix |
| CVE-2024-40806 | Apple macOS out-of-bounds read | 5.5v3.1 | 0.3% | 2024-07-29 | Fix |
| CVE-2024-40805 | Apple macOS incorrect default permissions | 7.1v3.1 | 0.2% | 2024-07-29 | Fix |
| CVE-2024-40804 | Apple macOS information disclosure | 5.5v3.1 | 0.2% | 2024-07-29 | Fix |
| CVE-2024-40803 | Apple macOS type confusion | 7.5v3.1 | 1.2% | 2024-07-29 | Fix |
| CVE-2024-40802 | Apple macOS improper privilege management | 7.8v3.1 | 0.2% | 2024-07-29 | Fix |
| CVE-2024-40800 | Apple macOS improper preservation of permissions | 5.5NVD v3.1 | 0.3% | 2024-07-29 | Fix |
| CVE-2024-40799 | Apple macOS out-of-bounds read | 7.1v3.1 | 0.4% | 2024-07-29 | Fix |
| CVE-2024-40798 | Apple macOS information disclosure | 3.3v3.1 | 0.3% | 2024-07-29 | Fix |
| CVE-2024-40796 | Apple macOS personal information exposure | 5.3v3.1 | 0.9% | 2024-07-29 | Fix |
| CVE-2024-40795 | Apple macOS information disclosure | 3.3v3.1 | 0.3% | 2024-07-29 | Fix |
| CVE-2024-40794 | Apple Safari improper authentication | 5.3v3.1 | 1.2% | 2024-07-29 | Fix |
| CVE-2024-40793 | Apple macOS information disclosure | 5.5v3.1 | 0.3% | 2024-07-29 | Fix |
| CVE-2024-40789 | Apple Safari out-of-bounds read | 6.5v3.1 | 1.1% | 2024-07-29 | Fix |
| CVE-2024-40788 | Apple macOS type confusion | 5.5v3.1 | 0.3% | 2024-07-29 | Fix |
| CVE-2024-40787 | This issue was addressed by adding an additional prompt for user consent. This issue is fixed in iOS 17.6 and iPadOS 17.6, macOS Monterey 12.7.6, macOS Sonoma 14.6, macOS Ventura 13.6.8, watchOS 10.6. A shortcut may be able to bypass Internet permission requirements. | 7.1v3.1 | 0.3% | 2024-07-29 | Fix |
| CVE-2024-40786 | Apple macOS improper access control | 7.5v3.1 | 1.0% | 2024-07-29 | Fix |
| CVE-2024-40785 | Apple Safari cross-site scripting | 6.1v3.1 | 0.8% | 2024-07-29 | Fix |
| CVE-2024-40784 | Apple macOS integer overflow | 5.5NVD v3.1 | 0.3% | 2024-07-29 | Fix |
| CVE-2024-40783 | Apple macOS improper authorization | 5.5NVD v3.1 | 0.3% | 2024-07-29 | Fix |
| CVE-2024-40782 | Apple Safari use-after-free | 6.5NVD v3.1 | 1.0% | 2024-07-29 | Fix |
| CVE-2024-40781 | Apple macOS improper privilege management | 7.8v3.1 | 0.2% | 2024-07-29 | Fix |
| CVE-2024-40780 | Apple Safari out-of-bounds read | 5.5v3.1 | 0.7% | 2024-07-29 | Fix |
| CVE-2024-40779 | Apple Safari out-of-bounds read | 5.5v3.1 | 0.3% | 2024-07-29 | Fix |
| CVE-2024-40778 | Apple macOS improper authentication | 3.3v3.1 | 0.3% | 2024-07-29 | Fix |
| CVE-2024-40777 | Apple macOS out-of-bounds read | 5.5v3.1 | 7.8% | 2024-07-29 | Fix |
| CVE-2024-40776 | Apple Safari use-after-free | 4.3v3.1 | 1.0% | 2024-07-29 | Fix |
| CVE-2024-40775 | Apple macOS information disclosure | 5.5v3.1 | 0.3% | 2024-07-29 | Fix |
| CVE-2024-40774 | A downgrade issue was addressed with additional code-signing restrictions. This issue is fixed in iOS 17.6 and iPadOS 17.6, macOS Monterey 12.7.6, macOS Sonoma 14.6, macOS Ventura 13.6.8, tvOS 17.6, watchOS 10.6. An app may be able to bypass Privacy preferences. | 7.1v3.1 | 0.3% | 2024-07-29 | Fix |
| CVE-2024-40576 | Mayuri K Best House Rental Management System cross-site scripting | 4.7CISA ADP v3.1 | 0.8% | 2024-07-29 | |
| CVE-2024-38529 | Admidio vulnerable to RCE via arbitrary file upload in Message Attachment | 9.1CNA v3.1 | 1.2% | 2024-07-29 | Fix |
| CVE-2024-37906 | Admidio has blind SQL injection in ecard_send.php | 10.0CNA v3.1 | 0.9% | 2024-07-29 | Fix |
| CVE-2024-37859 | oretnom23 Lost and Found Information System cross-site scripting | 6.1CISA ADP v3.1 | 0.4% | 2024-07-29 | |
| CVE-2024-37858 | oretnom23 Lost and Found Information System SQL injection | 9.8CISA ADP v3.1 | 0.8% | 2024-07-29 | |
| CVE-2024-37857 | oretnom23 Lost and Found Information System SQL injection | 8.8CISA ADP v3.1 | 0.8% | 2024-07-29 | |
| CVE-2024-37856 | oretnom23 Lost and Found Information System cross-site scripting | 5.4v3.1 | 0.3% | 2024-07-29 | |
| CVE-2024-37381 | Ivanti EPM Core server SQL injection | 8.0v3.1 | 3.1% | 2024-07-29 | Fix |
| CVE-2024-33365 | Tenda AC10 buffer overflow | 7.5CISA ADP v3.1 | 1.0% | 2024-07-29 | |
| CVE-2024-32671 | Samsung Open Source Escargot heap-based buffer overflow | 6.9CNA v4.0 | 0.5% | 2024-07-29 | |
| CVE-2024-28806 | Italtel I-mcs Nfv absolute path traversal | 7.5CISA ADP v3.1 | 0.6% | 2024-07-29 | |
| CVE-2024-28805 | Italtel I-mcs Nfv improper access control | 9.1CISA ADP v3.1 | 0.4% | 2024-07-29 | |
| CVE-2024-28804 | Italtel I-mcs Nfv cross-site scripting | 7.1CISA ADP v3.1 | 0.3% | 2024-07-29 | |
| CVE-2024-27888 | Apple macOS incorrect default permissions | 5.5NVD v3.1 | 0.2% | 2024-07-29 | Fix |
| CVE-2024-27887 | Apple macOS path traversal | 5.5v3.1 | 0.2% | 2024-07-29 | Fix |
| CVE-2024-27886 | Apple macOS logic flaw | 5.5NVD v3.1 | 0.5% | 2024-07-29 | Fix |
| CVE-2024-27884 | Apple macOS information disclosure | 5.5v3.1 | 0.3% | 2024-07-29 | Fix |
| CVE-2024-27883 | Apple macOS incorrect permission assignment | 4.4v3.1 | 0.3% | 2024-07-29 | Fix |
| CVE-2024-27882 | Apple macOS insecure permissions | 4.4v3.1 | 0.3% | 2024-07-29 | Fix |
| CVE-2024-27881 | Apple macOS personal information exposure | 5.3v3.1 | 0.8% | 2024-07-29 | Fix |
| CVE-2024-27878 | Apple macOS buffer overflow | 6.7v3.1 | 0.3% | 2024-07-29 | Fix |
| CVE-2024-27877 | Apple macOS denial of service | 6.1v3.1 | 0.4% | 2024-07-29 | Fix |
| CVE-2024-27873 | Apple macOS out-of-bounds write | 5.5v3.1 | 0.3% | 2024-07-29 | Fix |
| CVE-2024-27872 | Apple macOS symlink following | 5.5v3.1 | 0.3% | 2024-07-29 | Fix |
| CVE-2024-27871 | Apple macOS path traversal | 5.5v3.1 | 0.3% | 2024-07-29 | Fix |
| CVE-2024-27863 | Apple macOS information disclosure | 5.5v3.1 | 0.3% | 2024-07-29 | Fix |
| CVE-2024-27862 | Apple macOS logic flaw | 2.4NVD v3.1 | 0.6% | 2024-07-29 | Fix |
| CVE-2024-27853 | Apple macOS authentication bypass by spoofing | 4.4v3.1 | 0.2% | 2024-07-29 | Fix |
| CVE-2024-27826 | Apple macOS improper privilege management | 7.8v3.1 | 0.3% | 2024-07-29 | Fix |
| CVE-2024-27823 | Apple macOS race condition | 5.9v3.1 | 0.7% | 2024-07-29 | Fix |
| CVE-2024-27809 | Apple macOS log entry redaction information disclosure | 5.5v3.1 | 0.2% | 2024-07-29 | Fix |
| CVE-2024-23261 | Apple macOS logic flaw | 7.5v3.1 | 0.9% | 2024-07-29 | Fix |
| CVE-2024-7252 | Comodo Internet Security Pro cmdagent link following local privilege escalation | 7.8v3.1 | 0.3% | 2024-07-29 | |
| CVE-2024-7251 | Comodo Internet Security Pro cmdagent link following local privilege escalation | 7.8v3.1 | 0.3% | 2024-07-29 | |
| CVE-2024-7250 | Comodo Internet Security Pro cmdagent link following local privilege escalation | 7.8v3.1 | 0.3% | 2024-07-29 | |
| CVE-2024-7249 | Comodo Firewall link following local privilege escalation | 7.8v3.1 | 0.3% | 2024-07-29 | |
| CVE-2024-7248 | Comodo Internet Security Pro directory traversal local privilege escalation | 7.8v3.1 | 0.5% | 2024-07-29 | |
| CVE-2024-7202 | Simopro Technology WinMatrix3 Web package SQL injection | 9.8v3.1 | 0.7% | 2024-07-29 | Fix |
| CVE-2024-7201 | Simopro Technology WinMatrix3 Web package SQL injection | 9.8CNA v3.1 | 0.7% | 2024-07-29 | Fix |
| CVE-2024-7200 | SourceCodester Complaints Report Management System cross-site scripting | 5.4v3.1 | 0.4% | 2024-07-29 | |
| CVE-2024-7199 | SourceCodester Complaints Report Management System manage_user.php SQL injection | 8.8v3.1 | 0.5% | 2024-07-29 | |
| CVE-2024-7198 | SourceCodester Complaints Report Management System manage_station.php SQL injection | 8.8v3.1 | 0.5% | 2024-07-29 | |
| CVE-2024-7197 | SourceCodester Complaints Report Management System manage_complaint.php SQL injection | 8.8v3.1 | 0.5% | 2024-07-29 | |
| CVE-2024-7196 | SourceCodester Complaints Report Management System SQL injection | 9.8v3.1 | 0.6% | 2024-07-29 | |
| CVE-2024-7195 | itsourcecode Society Management System check_admin.php SQL injection | 9.8v3.1 | 0.5% | 2024-07-29 | |
| CVE-2024-7194 | itsourcecode Society Management System check_student.php SQL injection | 8.8v3.1 | 0.5% | 2024-07-29 | |
| CVE-2024-7193 | Mp3tag DLL tak_deco_lib.dll uncontrolled search path | 7.8v3.1 | 0.4% | 2024-07-29 | Fix |
| CVE-2024-7192 | itsourcecode Society Management System student.php unrestricted upload | 8.8v3.1 | 0.6% | 2024-07-29 | |
| CVE-2024-7191 | itsourcecode Society Management System get_balance.php SQL injection | 9.8v3.1 | 0.6% | 2024-07-29 | |
| CVE-2024-7190 | itsourcecode Society Management System get_price.php SQL injection | 9.8v3.1 | 0.5% | 2024-07-29 | |
| CVE-2024-7189 | itsourcecode Online Food Ordering System editproduct.php unrestricted upload | 9.8v3.1 | 0.6% | 2024-07-29 | |
| CVE-2024-7188 | Bylancer Quicklancer GET parameter listing SQL injection | 9.8v3.1 | 7.0% | 2024-07-29 | Nuclei |
| CVE-2024-7187 | TOTOLINK A3600R cstecgi.cgi UploadCustomModule buffer overflow | 8.8v3.1 | 1.2% | 2024-07-29 | |
| CVE-2024-7186 | TOTOLINK A3600R cstecgi.cgi setWiFiAclAddConfig buffer overflow | 8.8v3.1 | 1.1% | 2024-07-29 | |
| CVE-2024-7185 | TOTOLINK A3600R cstecgi.cgi setWebWlanIdx buffer overflow | 8.8v3.1 | 1.1% | 2024-07-29 | |
| CVE-2024-7184 | TOTOLINK A3600R cstecgi.cgi setUrlFilterRules buffer overflow | 8.8v3.1 | 1.1% | 2024-07-29 | |
| CVE-2024-7183 | TOTOLINK A3600R cstecgi.cgi setUploadSetting buffer overflow | 8.8v3.1 | 1.1% | 2024-07-29 | |
| CVE-2024-7182 | TOTOLINK A3600R cstecgi.cgi setUpgradeFW buffer overflow | 8.8v3.1 | 1.1% | 2024-07-29 | |
| CVE-2024-7181 | TOTOLINK A3600R cstecgi.cgi setTelnetCfg command injection | 8.8v3.1 | 3.1% | 2024-07-29 | |
| CVE-2024-7180 | TOTOLINK A3600R cstecgi.cgi setPortForwardRules buffer overflow | 8.8v3.1 | 1.1% | 2024-07-29 | |
| CVE-2024-7179 | TOTOLINK A3600R cstecgi.cgi setParentalRules buffer overflow | 8.8v3.1 | 1.1% | 2024-07-29 | |
| CVE-2024-7178 | TOTOLINK A3600R cstecgi.cgi setMacQos buffer overflow | 8.8v3.1 | 1.1% | 2024-07-29 | |
| CVE-2024-7177 | TOTOLINK A3600R cstecgi.cgi setLanguageCfg buffer overflow | 8.8v3.1 | 1.2% | 2024-07-29 | |
| CVE-2024-7176 | TOTOLINK A3600R cstecgi.cgi setIpQosRules buffer overflow | 8.8v3.1 | 1.1% | 2024-07-29 | |
| CVE-2024-7175 | TOTOLINK A3600R cstecgi.cgi setDiagnosisCfg os command injection | 8.8v3.1 | 3.1% | 2024-07-29 | |
| CVE-2024-7174 | TOTOLINK A3600R cstecgi.cgi setdeviceName buffer overflow | 8.8v3.1 | 1.2% | 2024-07-29 | |
| CVE-2024-7173 | TOTOLINK A3600R cstecgi.cgi loginauth buffer overflow | 8.8v3.1 | 1.1% | 2024-07-29 | |
| CVE-2024-6984 | Canonical Juju information disclosure through error messages | 8.8CNA v3.1 | 0.4% | 2024-07-29 | Fix |
| CVE-2024-6881 | M-Files Hubshare stored XSS | 8.5CNA v4.0 | 0.3% | 2024-07-29 | Fix |
| CVE-2024-6748 | ManageEngine OpManager SQL injection | 8.3CNA v3.1 | 23.8% | 2024-07-29 | Fix |
| CVE-2024-6727 | Broken access control in Delphix | 5.4CNA v3.1 | 0.3% | 2024-07-29 | Fix |
| CVE-2024-6726 | Remote code execution (RCE) in Delphix | 8.8CNA v3.1 | 0.7% | 2024-07-29 | Fix |
| CVE-2024-6620 | Honeywell PC42t cross-site scripting | 3.5CNA v3.1 | 0.3% | 2024-07-29 | Fix |
| CVE-2024-6578 | Stored XSS in aimhubio/aim | 5.4NVD v3.1 | 0.3% | 2024-07-29 | |
| CVE-2024-6576 | MOVEit Transfer privilege escalation | 7.3CNA v3.1 | 0.6% | 2024-07-29 | Fix |
| CVE-2024-6487 | Inline Related Posts WordPress plugin Admin+ stored XSS | 5.9CISA ADP v3.1 | 0.4% | 2024-07-29 | Fix |
| CVE-2024-6366 | User Profile Builder WordPress plugin unauthenticated Media upload | 9.1CISA ADP v3.1 | 29.0% | 2024-07-29 | NucleiExploit codeFix |
| CVE-2024-6362 | Ultimate Blocks for WordPress Contributor+ stored XSS | 4.6CISA ADP v3.1 | 0.3% | 2024-07-29 | Fix |
| CVE-2024-6124 | Reflected XSS in Hubshare via open redirect | 8.5CNA v4.0 | 0.3% | 2024-07-29 | Fix |
| CVE-2024-5883 | Ultimate Classified Listings WordPress plugin reflected XSS | 4.7CISA ADP v3.1 | 0.4% | 2024-07-29 | Fix |
| CVE-2024-5882 | Ultimate Classified Listings WordPress plugin unauthenticated LFI | 7.5CISA ADP v3.1 | 0.8% | 2024-07-29 | Fix |
| CVE-2024-5670 | Softnext Mail SQR Expert and Mail Archiving Expert OS command injection | 9.8CNA v3.1 | 0.9% | 2024-07-29 | Fix |
| CVE-2024-5285 | WP Affiliate Platform WordPress plugin Affiliate deletion via CSRF | 5.5CISA ADP v3.1 | 0.2% | 2024-07-29 | Fix |
| CVE-2024-4483 | Email Encoder WordPress plugin Admin+ stored XSS | 5.4CISA ADP v3.1 | 0.4% | 2024-07-29 | Fix |
| CVE-2024-3219 | Python CPython Pure-Python fallback of socket.socketpair doesn’t authenticate peer connection | 5.1CNA v4.0 | 0.2% | 2024-07-29 | Fix |
| CVE-2024-42055 | Cervantessec Cervantes cross-site scripting | 5.4v3.1 | 0.4% | 2024-07-28 | |
| CVE-2024-42054 | Cervantessec Cervantes unrestricted file upload | 5.4v3.1 | 0.4% | 2024-07-28 | |
| CVE-2024-42053 | Splashtop Streamer incorrect default permissions | 7.8CNA v3.1 | 0.2% | 2024-07-28 | Fix |
| CVE-2024-42052 | Splashtop Streamer insecure temporary file | 7.8v3.1 | 0.2% | 2024-07-28 | Fix |
| CVE-2024-42051 | Splashtop Streamer weak credentials | 7.8CNA v3.1 | 0.2% | 2024-07-28 | Fix |
| CVE-2024-42050 | Splashtop Streamer improper privilege management | 7.0v3.1 | 0.1% | 2024-07-28 | Fix |
| CVE-2024-42049 | TightVNC Server for Windows control pipe information disclosure | 9.1CISA ADP v3.1 | 2.1% | 2024-07-28 | Exploit code |
| CVE-2024-7172 | TOTOLINK A3600R getSaveConfig buffer overflow | 8.8v3.1 | 1.1% | 2024-07-28 | |
| CVE-2024-7171 | TOTOLINK A3600R cstecgi.cgi NTPSyncWithHost os command injection | 8.8v3.1 | 3.1% | 2024-07-28 | |
| CVE-2024-7170 | TOTOLINK A3000RU product.ini hard-coded password | 8.8v3.1 | 0.7% | 2024-07-28 | |
| CVE-2024-7169 | SourceCodester School Fees Payment System ajax.php cross-site request forgery | 8.8v3.1 | 0.3% | 2024-07-28 | |
| CVE-2024-7168 | SourceCodester School Fees Payment System manage_user.php SQL injection | 8.8v3.1 | 0.5% | 2024-07-28 | |
| CVE-2024-7167 | SourceCodester School Fees Payment System manage_course.php SQL injection | 8.8v3.1 | 0.5% | 2024-07-28 | |
| CVE-2024-7166 | SourceCodester School Fees Payment System receipt.php SQL injection | 8.8v3.1 | 0.5% | 2024-07-28 | |
| CVE-2024-7165 | SourceCodester School Fees Payment System view_payment.php SQL injection | 8.8v3.1 | 0.5% | 2024-07-28 | |
| CVE-2024-7164 | SourceCodester School Fees Payment System SQL injection | 9.8v3.1 | 0.6% | 2024-07-28 | |
| CVE-2024-7163 | SeaCMS index.php cross-site scripting | 6.1v3.1 | 0.4% | 2024-07-28 | |
| CVE-2024-7162 | SeaCMS cross-site scripting | 5.4v3.1 | 0.5% | 2024-07-28 | |
| CVE-2024-7161 | SeaCMS Password Change cross-site request forgery | 6.5v3.1 | 0.3% | 2024-07-28 | |
| CVE-2024-7160 | TOTOLINK A3700R cstecgi.cgi setWanCfg command injection | 8.8v3.1 | 3.0% | 2024-07-28 | |
| CVE-2024-7159 | TOTOLINK A3600R Telnet service product.ini hard-coded password | 8.8v3.1 | 0.6% | 2024-07-28 | |
| CVE-2024-7158 | TOTOLINK A3100R HTTP POST request cstecgi.cgi setTelnetCfg command injection | 8.8v3.1 | 3.1% | 2024-07-28 | |
| CVE-2024-7157 | TOTOLINK A3100R getSaveConfig buffer overflow | 8.8v3.1 | 7.4% | 2024-07-28 | |
| CVE-2024-7156 | TOTOLINK A3700R apmib Configuration ExportSettings.sh information disclosure | 7.5v3.1 | 13.3% | 2024-07-28 | |
| CVE-2024-7155 | TOTOLINK A3300R shadow.sample hard-coded password | 4.7v3.1 | 0.3% | 2024-07-28 | |
| CVE-2024-7154 | TOTOLINK A3700R Password Reset wizard.html access control | 7.5v3.1 | 0.4% | 2024-07-28 | |
| CVE-2024-42029 | xdg-desktop-portal-hyprland app ID and title handling OS command injection | 6.3CISA ADP v3.1 | 0.8% | 2024-07-27 | |
| CVE-2024-7153 | Netgear WN604 siteSurvey.php direct request | 6.9CNA v4.0 | 0.5% | 2024-07-27 | |
| CVE-2024-7152 | Tenda O3 setMacFilterList fromSafeSetMacFilter stack-based overflow | 8.8v3.1 | 1.3% | 2024-07-27 | |
| CVE-2024-7151 | Tenda O3 setMacFilter fromMacFilterSet stack-based overflow | 9.8v3.1 | 1.1% | 2024-07-27 | |
| CVE-2024-6897 | aThemes Starter Sites WordPress plugin stored cross-site scripting | 6.4CNA v3.1 | 0.3% | 2024-07-27 | Fix |
| CVE-2024-6703 | Contact Form Plugin by Fluent Forms for Quiz WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.3% | 2024-07-27 | Fix |
| CVE-2024-6661 | ParityPress WordPress plugin authenticated (Administrator+) stored cross-site scripting | 4.4CNA v3.1 | 0.3% | 2024-07-27 | Fix |
| CVE-2024-6634 | Master Currency WP WordPress plugin stored cross-site scripting | 6.4CNA v3.1 | 0.3% | 2024-07-27 | |
| CVE-2024-6627 | Happy Addons for Elementor WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.3% | 2024-07-27 | Fix |
| CVE-2024-6591 | Ultimate WordPress Auction plugin missing authorization to unauthenticated email creation | 5.8CNA v3.1 | 0.4% | 2024-07-27 | Fix |
| CVE-2024-6573 | Intelligence WordPress plugin unauthenticated full path disclosure | 5.3CNA v3.1 | 0.4% | 2024-07-27 | |
| CVE-2024-6569 | Campaign Monitor for WordPress plugin unauthenticated full path disclosure | 5.3CNA v3.1 | 0.9% | 2024-07-27 | NucleiFix |
| CVE-2024-6566 | Aramex Shipping WooCommerce WordPress plugin unauthenticated full path disclosure | 5.3CNA v3.1 | 0.4% | 2024-07-27 | |
| CVE-2024-6549 | Admin Post Navigation WordPress plugin unauthenticated full path disclosure | 5.3CNA v3.1 | 0.4% | 2024-07-27 | |
| CVE-2024-6548 | coffee2code Add Admin JavaScript information disclosure | 5.3CNA v3.1 | 0.4% | 2024-07-27 | |
| CVE-2024-6547 | coffee2code Add Admin CSS information disclosure | 5.3CNA v3.1 | 0.4% | 2024-07-27 | Fix |
| CVE-2024-6546 | One Click Close Comments WordPress plugin unauthenticated full path disclosure | 5.3CNA v3.1 | 0.4% | 2024-07-27 | Fix |
| CVE-2024-6545 | Admin Trim Interface WordPress plugin unauthenticated full path disclosure | 5.3CNA v3.1 | 0.4% | 2024-07-27 | |
| CVE-2024-6521 | Contact Form Plugin by Fluent Forms for Quiz WordPress plugin stored cross-site scripting | 4.8NVD v3.1 | 0.3% | 2024-07-27 | Fix |
| CVE-2024-6520 | Contact Form Plugin by Fluent Forms for Quiz WordPress plugin stored cross-site scripting | 4.8NVD v3.1 | 0.3% | 2024-07-27 | Fix |
| CVE-2024-6518 | Contact Form Plugin by Fluent Forms for Quiz WordPress plugin stored cross-site scripting | 4.8NVD v3.1 | 0.3% | 2024-07-27 | Fix |
| CVE-2024-6458 | WooCommerce Product Table Lite WordPress plugin missing authorization stored cross-site scripting | 6.4CNA v3.1 | 0.3% | 2024-07-27 | Fix |
| CVE-2024-6431 | Media.net Ads Manager WordPress plugin missing authorization authenticated arbitrary file upload | 8.8CNA v3.1 | 0.8% | 2024-07-27 | |
| CVE-2024-6152 | Flipbox Builder WordPress plugin authenticated (Contributor+) PHP object injection | 8.8CNA v3.1 | 0.6% | 2024-07-27 | |
| CVE-2024-5969 | AIomatic - Automatic AI Content Writer WordPress plugin unauthenticated arbitrary email Sending | 5.3v3.1 | 0.3% | 2024-07-27 | Fix |
| CVE-2024-5614 | Piotnet Addons For Elementor WordPress plugin unauthenticated sensitive information exposure | 5.3CNA v3.1 | 0.4% | 2024-07-27 | Fix |
| CVE-2024-4410 | IgnitionDeck Crowdfunding Platform WordPress plugin missing authorization | 5.4CNA v3.1 | 0.4% | 2024-07-27 | Fix |
| CVE-2024-1804 | Tutor LMS Migration Tool WordPress plugin missing authorization in tutor_import_from_xml | 4.3v3.1 | 0.3% | 2024-07-27 | Fix |
| CVE-2024-1798 | Tutor LMS Migration Tool WordPress plugin missing authorization in tutor_lp_export_xml | 5.3v3.1 | 0.4% | 2024-07-27 | Fix |
| CVE-2024-42007 | SPX SPX_UI_URI parameter path traversal | 5.8CNA v3.1 | 0.6% | 2024-07-26 | Exploit code |
| CVE-2024-41815 | Starship vulnerable to shell injection | 7.4CNA v3.1 | 0.5% | 2024-07-26 | Fix |
| CVE-2024-41813 | TxtDot SSRF vulnerability in /proxy | 7.5CNA v3.1 | 0.7% | 2024-07-26 | Fix |
| CVE-2024-41812 | TxtDot SSRF vulnerability in /get | 7.5CNA v3.1 | 0.7% | 2024-07-26 | Fix |
| CVE-2024-41805 | Tracks vulnerable to reflected cross-site scripting | 6.1CNA v3.1 | 0.4% | 2024-07-26 | Fix |
| CVE-2024-41692 | SyroTech SY-GPON-1110-WDONT router incorrect access control vulnerability | 8.6CNA v4.0 | 0.3% | 2024-07-26 | Fix |
| CVE-2024-41691 | SyroTech SY-GPON-1110-WDONT router insecure storage of sensitive information | 4.6NVD v3.1 | 0.2% | 2024-07-26 | Fix |
| CVE-2024-41690 | SyroTech SY-GPON-1110-WDONT router Default Credential Storage in Plaintext vulnerability | 4.6NVD v3.1 | 0.2% | 2024-07-26 | Fix |
| CVE-2024-41689 | SyroTech SY-GPON-1110-WDONT router hard-coded credentials | 4.6v3.1 | 0.2% | 2024-07-26 | Fix |
| CVE-2024-41688 | SyroTech SY-GPON-1110-WDONT router cleartext storage of sensitive information | 4.6NVD v3.1 | 0.1% | 2024-07-26 | Fix |
| CVE-2024-41687 | SyroTech SY-GPON-1110-WDONT router cleartext transmission of sensitive information | 7.5v3.1 | 0.3% | 2024-07-26 | Fix |
| CVE-2024-41686 | SyroTech SY-GPON-1110-WDONT router Password Policy Bypass vulnerability | 3.3NVD v3.1 | 0.2% | 2024-07-26 | Fix |
| CVE-2024-41685 | SyroTech SY-GPON-1110-WDONT router Cookie without HTTPOnly Flag Set vulnerability | 7.5v3.1 | 0.5% | 2024-07-26 | Fix |
| CVE-2024-41684 | SyroTech SY-GPON-1110-WDONT router Cookie without Secure Flag Set vulnerability | 5.3v3.1 | 0.2% | 2024-07-26 | Fix |
| CVE-2024-41670 | PayPal Official module for PrestaShop has improperly implemented security check for standard | 7.5CNA v3.1 | 0.4% | 2024-07-26 | Fix |
| CVE-2024-41628 | Severalnines Cluster Control path traversal | 7.5CISA ADP v3.1 | 6.5% | 2024-07-26 | NucleiExploit code |
| CVE-2024-41375 | ICEcoder vulnerable to cross-site scripting | 6.1CISA ADP v3.1 | 0.3% | 2024-07-26 | |
| CVE-2024-41374 | ICEcoder vulnerable to cross-site scripting | 6.1CISA ADP v3.1 | 0.3% | 2024-07-26 | |
| CVE-2024-41373 | ICEcoder path traversal | 6.3CISA ADP v3.1 | 0.4% | 2024-07-26 | |
| CVE-2024-41357 | phpipam cross-site scripting | 7.1CISA ADP v3.1 | 1.1% | 2024-07-26 | Exploit code |
| CVE-2024-41356 | phpipam cross-site scripting | 4.7CISA ADP v3.1 | 0.4% | 2024-07-26 | |
| CVE-2024-41355 | phpipam cross-site scripting | 6.5CISA ADP v3.1 | 0.4% | 2024-07-26 | |
| CVE-2024-41354 | phpipam cross-site scripting | 7.1CISA ADP v3.1 | 0.3% | 2024-07-26 | |
| CVE-2024-41353 | phpipam cross-site scripting | 7.1CISA ADP v3.1 | 0.3% | 2024-07-26 | |
| CVE-2024-41120 | streamlit-geospatial blind SSRF in pages/9_🔲_Vector_Data_Visualization.py | 9.8NVD v3.1 | 0.8% | 2024-07-26 | |
| CVE-2024-41119 | streamlit-geospatial remote code execution in pages/8_🏜️_Raster_Data_Visualization.py | 9.8NVD v3.1 | 1.4% | 2024-07-26 | |
| CVE-2024-41118 | streamlit-geospatial blind SSRF in pages/7_📦_Web_Map_Service.py | 9.8NVD v3.1 | 0.7% | 2024-07-26 | |
| CVE-2024-41117 | opengeos streamlit-geospatial Earth Engine Datasets page eval remote code execution | 9.8NVD v3.1 | 1.3% | 2024-07-26 | |
| CVE-2024-41116 | opengeos streamlit-geospatial Timelapse page eval remote code execution | 9.8NVD v3.1 | 1.3% | 2024-07-26 | |
| CVE-2024-41115 | opengeos streamlit-geospatial Timelapse page MODIS ocean color palette input code injection | 9.8NVD v3.1 | 1.5% | 2024-07-26 | |
| CVE-2024-41114 | opengeos streamlit-geospatial code injection | 9.8NVD v3.1 | 1.4% | 2024-07-26 | |
| CVE-2024-41113 | opengeos streamlit-geospatial Timelapse page vis_params input code injection | 9.8NVD v3.1 | 1.4% | 2024-07-26 | |
| CVE-2024-41112 | opengeos streamlit-geospatial Timelapse page ImageCollection palette input code injection | 9.8NVD v3.1 | 1.4% | 2024-07-26 | |
| CVE-2024-40897 | GStreamer ORC stack-based buffer overflow | 6.7NVD v3.1 | 0.4% | 2024-07-26 | Fix |
| CVE-2024-40689 | IBM InfoSphere Information Server SQL injection | 6.0CNA v3.1 | 0.5% | 2024-07-26 | Fix |
| CVE-2024-40433 | Tencent WeChat insecure permissions | 8.8CISA ADP v3.1 | 1.2% | 2024-07-26 | |
| CVE-2024-40117 | Solar-Log 1000 web administration server improper access control | 9.8CISA ADP v3.1 | 0.7% | 2024-07-26 | |
| CVE-2024-40116 | Solar-Log 1000 configuration export pages plaintext password storage | 8.1CISA ADP v3.1 | 0.4% | 2024-07-26 | |
| CVE-2024-39304 | ChurchCRM SQL injection | 8.8CNA v3.1 | 3.0% | 2024-07-26 | Exploit codeFix |
| CVE-2024-38872 | ManageEngine Exchange Reporter Plus SQL injection | 8.3CNA v3.1 | 3.1% | 2024-07-26 | Fix |
| CVE-2024-38871 | ManageEngine Exchange Reporter Plus SQL injection | 8.3CNA v3.1 | 3.1% | 2024-07-26 | Fix |
| CVE-2024-38512 | Lenovo XClarity Controller OS command injection | 7.2CNA v3.1 | 1.0% | 2024-07-26 | |
| CVE-2024-38511 | Lenovo XClarity Controller OS command injection | 7.2CNA v3.1 | 1.0% | 2024-07-26 | |
| CVE-2024-38510 | Lenovo XClarity Controller OS command injection | 7.2CNA v3.1 | 1.1% | 2024-07-26 | |
| CVE-2024-38509 | Lenovo XClarity Controller stack-based buffer overflow | 7.2CNA v3.1 | 0.6% | 2024-07-26 | |
| CVE-2024-38508 | Lenovo XClarity Controller OS command injection | 7.2CNA v3.1 | 1.0% | 2024-07-26 | |
| CVE-2024-37034 | Couchbase Server inadequate encryption strength | 5.9v3.1 | 0.2% | 2024-07-26 | Fix |
| CVE-2024-35296 | Apache Traffic Server: Invalid Accept-Encoding can force forwarding requests | 8.2v3.1 | 1.1% | 2024-07-26 | Fix |
| CVE-2024-35161 | Apache Traffic Server: Incomplete check for chunked trailer section allows request smuggling | 7.5NVD v3.1 | 1.0% | 2024-07-26 | Fix |
| CVE-2024-27358 | WithSecure Elements Agent and Elements Client Security installation process denial of service | 3.3CISA ADP v3.1 | 0.2% | 2024-07-26 | |
| CVE-2024-27357 | WithSecure Elements Agent, Elements Client Security and MDR privilege escalation | 5.8CISA ADP v3.1 | 0.2% | 2024-07-26 | |
| CVE-2024-26520 | An issue in Hangzhou Xiongwei Technology Development Co., Ltd. Restaurant Digital Comprehensive Management platform v1 allows an attacker to bypass authentication and perform arbitrary password resets. | 9.8CISA ADP v3.1 | 0.5% | 2024-07-26 | |
| CVE-2024-25090 | Apache Roller Profile name & screenname improper input validation | 5.4v3.1 | 0.8% | 2024-07-26 | Fix |
| CVE-2024-24257 | SKTeco Central Control Attendance Machine csl/user endpoint information disclosure | 7.5CISA ADP v3.1 | 0.4% | 2024-07-26 | |
| CVE-2024-7128 | Red Hat OpenShift Container Platform openshift-console: Unauthenticated data exposure | 5.3CNA v3.1 | 0.4% | 2024-07-26 | Fix |
| CVE-2024-7120 | Raisecom MSG1200/MSG2100E/MSG2200/MSG2300 Web interface list_base_config.php os command injection | 9.8v3.1 | 93.4% | 2024-07-26 | NucleiEmerging ThreatsExploit code |
| CVE-2024-7119 | MD-MAFUJUL-HASAN Online-Payroll-Management-System employee_viewmore.php SQL injection | 8.8v3.1 | 0.6% | 2024-07-26 | |
| CVE-2024-7118 | MD-MAFUJUL-HASAN Online-Payroll-Management-System department_viewmore.php SQL injection | 8.8v3.1 | 0.5% | 2024-07-26 | |
| CVE-2024-7117 | MD-MAFUJUL-HASAN Online-Payroll-Management-System shift_viewmore.php SQL injection | 8.8v3.1 | 0.6% | 2024-07-26 | |
| CVE-2024-7116 | MD-MAFUJUL-HASAN Online-Payroll-Management-System branch_viewmore.php SQL injection | 8.8v3.1 | 0.5% | 2024-07-26 | |
| CVE-2024-7115 | MD-MAFUJUL-HASAN Online-Payroll-Management-System designation_viewmore.php SQL injection | 8.8v3.1 | 0.5% | 2024-07-26 | |
| CVE-2024-7114 | Tianchoy Blog so.php SQL injection | 8.8v3.1 | 0.6% | 2024-07-26 | |
| CVE-2024-7062 | Local privilege escalation in Nimble Commander, Build 4087 | 7.8v3.1 | 0.2% | 2024-07-26 | |
| CVE-2024-7050 | OpenText Directory Services improper authentication | 8.3CNA v4.0 | 0.6% | 2024-07-26 | |
| CVE-2024-6922 | Server-side request forgery in Automation 360 | 6.9CNA v4.0 | 30.2% | 2024-07-26 | Nuclei |
| CVE-2024-6490 | Master Slider Responsive Touch Slider for WordPress CSRF to slider deletion | 6.5CISA ADP v3.1 | 0.2% | 2024-07-26 | |
| CVE-2024-4786 | Lenovo Tab K10 improper certificate validation | 2.8CNA v3.1 | 0.1% | 2024-07-26 | |
| CVE-2024-4447 | dotCMS core incorrect authorization | 9.9CNA v3.1 | 0.5% | 2024-07-26 | |
| CVE-2024-41809 | OpenObserve cross-site scripting vulnerability in `openobserve/web/src/views/MemberSubscription.vue` | 7.2CNA v3.1 | 0.4% | 2024-07-25 | Fix |
| CVE-2024-41808 | OpenObserve stored XSS vulnerability may lead to complete account takeover | 8.8CNA v3.1 | 0.5% | 2024-07-25 | |
| CVE-2024-41806 | Open edX Platform instructor cohort CSV upload improper access control | 5.3CNA v3.1 | 0.3% | 2024-07-25 | |
| CVE-2024-41801 | OpenProject sign-in open redirect | 4.7CNA v3.1 | 0.3% | 2024-07-25 | Fix |
| CVE-2024-41800 | Craft CMS allows TOTP Token to Stay Valid after Use | 4.8CNA v3.1 | 0.5% | 2024-07-25 | Fix |
| CVE-2024-41707 | Archerirm Archer cross-site scripting | 5.4v3.1 | 0.3% | 2024-07-25 | Fix |
| CVE-2024-41706 | Archerirm Archer stored cross-site scripting | 5.4NVD v3.1 | 0.3% | 2024-07-25 | Fix |
| CVE-2024-41705 | Archerirm Archer stored cross-site scripting | 5.4NVD v3.1 | 0.3% | 2024-07-25 | Fix |
| CVE-2024-41473 | Tendacn FH1201 OS command injection | 9.8v3.1 | 6.7% | 2024-07-25 | |
| CVE-2024-41468 | Tendacn FH1201 OS command injection | 9.8v3.1 | 4.6% | 2024-07-25 | |
| CVE-2024-40873 | XSS in Secure Access administrative console | 4.5CNA v3.1 | 0.3% | 2024-07-25 | Fix |
| CVE-2024-40872 | Elevation of privilege in Absolute Secure Access clients and servers | 8.4CNA v3.1 | 0.2% | 2024-07-25 | Fix |
| CVE-2024-40324 | Datex-soft E-staff CRLF injection | 5.4NVD v3.1 | 0.7% | 2024-07-25 | |
| CVE-2024-40318 | Webkul QloApps arbitrary file upload | 7.2v3.1 | 1.2% | 2024-07-25 | Exploit code |
| CVE-2024-39674 | Huawei HarmonyOS plaintext vulnerability in the Gallery search module | 6.2CNA v3.1 | 0.1% | 2024-07-25 | Fix |
| CVE-2024-39673 | Huawei HarmonyOS vulnerability of serialization/deserialization mismatch in the iAware module | 6.8CNA v3.1 | 0.1% | 2024-07-25 | Fix |
| CVE-2024-39672 | Huawei HarmonyOS memory request logic vulnerability in the memory module | 8.4CNA v3.1 | 0.1% | 2024-07-25 | Fix |
| CVE-2024-39671 | Huawei HarmonyOS access control vulnerability in the security verification module | 9.3CNA v3.1 | 0.1% | 2024-07-25 | Fix |
| CVE-2024-39670 | Huawei HarmonyOS privilege escalation vulnerability in the account synchronization module | 6.2CNA v3.1 | 0.1% | 2024-07-25 | Fix |
| CVE-2024-38289 | Rhubcom Turbomeeting Virtual Meeting Password SQL injection | 9.8v3.1 | 40.9% | 2024-07-25 | Nuclei |
| CVE-2024-38288 | Rhubcom Turbomeeting Certificate Signing request command injection | 7.2v3.1 | 3.2% | 2024-07-25 | Nuclei |
| CVE-2024-38287 | Rhubcom Turbomeeting weak password recovery | 9.8v3.1 | 0.5% | 2024-07-25 | |
| CVE-2024-38103 | Microsoft Edge (Chromium-based) information disclosure | 5.9CNA v3.1 | 0.5% | 2024-07-25 | Fix |
| CVE-2024-37084 | Remote code execution in Spring Cloud Data Flow | 9.8CNA v3.1 | 35.2% | 2024-07-25 | Exploit codeFix |
| CVE-2024-36542 | kuma v2.7.0 insecure permissions | 8.8CISA ADP v3.1 | 0.5% | 2024-07-25 | |
| CVE-2024-36111 | KubePi's JWT token validation has a defect | 6.3CNA v3.1 | 8.4% | 2024-07-25 | Fix |
| CVE-2024-29069 | snapd will follow archived symlinks when unpacking a filesystem | 4.8CNA v3.1 | 0.2% | 2024-07-25 | Fix |
| CVE-2024-29068 | snapd non-regular file indefinite blocking read | 5.8CNA v3.1 | 0.2% | 2024-07-25 | Fix |
| CVE-2024-28772 | IBM Security Directory Integrator cross-site scripting | 6.8CNA v3.1 | 0.3% | 2024-07-25 | Fix |
| CVE-2024-24623 | Softaculous Webuzo FTP management command injection | 8.8v3.1 | 1.9% | 2024-07-25 | |
| CVE-2024-24622 | Softaculous Webuzo Password Reset command injection | 8.8v3.1 | 1.9% | 2024-07-25 | |
| CVE-2024-24621 | Softaculous Webuzo authentication bypass | 9.8v3.1 | 1.2% | 2024-07-25 | |
| CVE-2024-7106 | Spina CMS media_folders cross-site request forgery | 8.8v3.1 | 0.4% | 2024-07-25 | |
| CVE-2024-7105 | ForIP Tecnologia Administração PABX Lista Ura page detalheIdUra SQL injection | 8.8v3.1 | 0.4% | 2024-07-25 | |
| CVE-2024-7101 | ForIP Tecnologia Administração PABX Authentication form login SQL injection | 6.9CNA v4.0 | 0.5% | 2024-07-25 | |
| CVE-2024-7057 | Improper access control in GitLab | 4.3CNA v3.1 | 0.4% | 2024-07-25 | Fix |
| CVE-2024-7047 | Improper neutralization of input during web page generation (cross-site scripting) in GitLab | 7.7CNA v3.1 | 0.3% | 2024-07-25 | Fix |
| CVE-2024-7007 | Positron Broadcast Signal Processor TRA7005 authentication bypass | 9.8v3.1 | 0.6% | 2024-07-25 | |
| CVE-2024-6972 | Octopus Deploy Octopus Server cleartext transmission of sensitive information | 6.5CNA v3.1 | 0.2% | 2024-07-25 | Fix |
| CVE-2024-6589 | LearnPress WordPress plugin authenticated (Contributor+) local file inclusion | 8.8CNA v3.1 | 0.8% | 2024-07-25 | Fix |
| CVE-2024-6558 | HMS Industrial Networks Anybus-CompactCom 30 cross-site scripting | 6.1v3.1 | 0.3% | 2024-07-25 | Fix |
| CVE-2024-4811 | Octopus Deploy Octopus Server incorrect authorization | 2.2CNA v3.1 | 0.2% | 2024-07-25 | Fix |
| CVE-2024-3938 | dotCMS core HTML injection | 5.4CNA v3.1 | 0.3% | 2024-07-25 | Fix |
| CVE-2024-1724 | snapd allows $HOME/bin symlink | 6.3CNA v3.1 | 0.3% | 2024-07-25 | Fix |
| CVE-2024-41914 | HPE Aruba Networking EdgeConnect SD-WAN Orchestrator cross-site scripting | 8.1CNA v3.1 | 0.5% | 2024-07-24 | Fix |
| CVE-2024-41672 | DuckDB: Sniff_csv provides filesystem access even when enable_external_access is disabled | 7.5CNA v3.1 | 0.8% | 2024-07-24 | Fix |
| CVE-2024-41667 | OpenAM FreeMarker template injection | 8.8CNA v3.1 | 3.5% | 2024-07-24 | NucleiFix |
| CVE-2024-41666 | Argo CD web terminal improper privilege management | 4.7CNA v3.1 | 0.7% | 2024-07-24 | Fix |
| CVE-2024-41662 | VNote vulnerable to Markdown XSS, which leads to RCE | 8.6CNA v3.1 | 1.7% | 2024-07-24 | Exploit code |
| CVE-2024-41551 | Campcodes Supplier Management System SQL injection | 9.8v3.1 | 0.4% | 2024-07-24 | |
| CVE-2024-41550 | Campcodes Supplier Management System SQL injection | 7.2CISA ADP v3.1 | 0.5% | 2024-07-24 | |
| CVE-2024-41466 | Tendacn FH1201 stack-based buffer overflow | 7.5v3.1 | 0.6% | 2024-07-24 | |
| CVE-2024-41465 | Tendacn FH1201 stack-based buffer overflow | 7.5v3.1 | 0.6% | 2024-07-24 | |
| CVE-2024-41464 | Tendacn FH1201 buffer overflow | 7.5NVD v3.1 | 0.6% | 2024-07-24 | |
| CVE-2024-41463 | Tendacn FH1201 stack-based buffer overflow | 7.5v3.1 | 0.5% | 2024-07-24 | |
| CVE-2024-41462 | Tendacn FH1201 stack-based buffer overflow | 7.5v3.1 | 0.6% | 2024-07-24 | Emerging Threats |
| CVE-2024-41461 | Tendacn FH1201 out-of-bounds write | 9.8v3.1 | 0.6% | 2024-07-24 | |
| CVE-2024-41460 | Tendacn FH1201 stack-based buffer overflow | 9.8v3.1 | 0.6% | 2024-07-24 | |
| CVE-2024-41459 | Tendacn FH1201 stack-based buffer overflow | 9.8v3.1 | 0.6% | 2024-07-24 | |
| CVE-2024-41136 | Authenticated command injection in HPE Aruba Networking EdgeConnect SD-WAN Command Line interface | 6.8CNA v3.1 | 0.9% | 2024-07-24 | Fix |
| CVE-2024-41135 | HPE Aruba Networking EdgeConnect SD-WAN command line interface command injection | 7.2CNA v3.1 | 0.8% | 2024-07-24 | |
| CVE-2024-41134 | HPE Aruba Networking EdgeConnect SD-WAN command line interface command injection | 7.2CNA v3.1 | 0.7% | 2024-07-24 | |
| CVE-2024-41133 | HPE Aruba Networking EdgeConnect SD-WAN command line interface command injection | 7.2CNA v3.1 | 0.8% | 2024-07-24 | |
| CVE-2024-41110 | Moby authz zero length regression | 10.0CNA v3.1 | 16.5% | 2024-07-24 | Fix |
| CVE-2024-40767 | OpenStack Nova vulnerable to unauthorized access to potentially sensitive data | 6.5v3.1 | 0.9% | 2024-07-24 | Fix |
| CVE-2024-40575 | Huawei Opengauss denial of service | 5.5v3.1 | 0.1% | 2024-07-24 | |
| CVE-2024-40495 | Linksys E2500 code injection | 8.0CISA ADP v3.1 | 0.8% | 2024-07-24 | |
| CVE-2024-40422 | stitionai Devika path traversal | 9.1v3.1 | 11.4% | 2024-07-24 | NucleiExploit code |
| CVE-2024-40137 | Dolibarr ERP CRM vulnerable to remote code execution (RCE) | 5.5CISA ADP v3.1 | 0.7% | 2024-07-24 | Fix |
| CVE-2024-39676 | Apache Pinot: Unauthorized endpoint exposed sensitive information | 7.5v3.1 | 0.8% | 2024-07-24 | Fix |
| CVE-2024-39345 | Adtran 834-5 hard-coded password | 7.2v3.1 | 0.5% | 2024-07-24 | |
| CVE-2024-37533 | IBM InfoSphere Information Server information disclosure | 2.4CNA v3.1 | 0.2% | 2024-07-24 | Fix |
| CVE-2024-36541 | kube-logging logging-operator insecure permissions | 8.8v3.1 | 0.4% | 2024-07-24 | |
| CVE-2024-36540 | External Secrets Operator insecure permissions | 9.8CISA ADP v3.1 | 0.4% | 2024-07-24 | |
| CVE-2024-36539 | projectcontour contour insecure permissions | 9.8CISA ADP v3.1 | 1.3% | 2024-07-24 | Fix |
| CVE-2024-36538 | Chaos Mesh insecure permissions | 8.8CISA ADP v3.1 | 0.6% | 2024-07-24 | |
| CVE-2024-36537 | cert-manager insecure permissions | 7.2CISA ADP v3.1 | 0.4% | 2024-07-24 | Fix |
| CVE-2024-36536 | Fabedge has insecure permissions | 9.8CISA ADP v3.1 | 0.5% | 2024-07-24 | |
| CVE-2024-36535 | Layer5 meshery insecure permissions | 9.8CISA ADP v3.1 | 0.5% | 2024-07-24 | |
| CVE-2024-36534 | hwameistor v0.14.3 insecure permissions | 8.4CISA ADP v3.1 | 0.2% | 2024-07-24 | |
| CVE-2024-36533 | Volcano has insecure permissions | 9.8CISA ADP v3.1 | 0.5% | 2024-07-24 | Fix |
| CVE-2024-33519 | HPE Aruba Networking EdgeConnect SD-WAN prototype pollution | 7.2CNA v3.1 | 0.7% | 2024-07-24 | |
| CVE-2024-31977 | Adtran 834-5 OS command injection | 8.8v3.1 | 1.7% | 2024-07-24 | |
| CVE-2024-31971 | Adtran Netvanta 3120 cross-site scripting | 4.8v3.1 | 0.4% | 2024-07-24 | |
| CVE-2024-31970 | Adtran 834-5 incorrect authorization | 8.8v3.1 | 0.6% | 2024-07-24 | |
| CVE-2024-22444 | HPE Aruba Networking EdgeConnect SD-WAN Orchestrator cross-site scripting | 6.1CNA v3.1 | 0.3% | 2024-07-24 | Fix |
| CVE-2024-22443 | HPE Aruba Networking EdgeConnect SD-WAN Orchestrator prototype pollution | 7.2CNA v3.1 | 0.8% | 2024-07-24 | Fix |
| CVE-2024-21684 | Atlassian Bitbucket Data Center open redirect | 3.1CNA v3.0 | 0.2% | 2024-07-24 | Fix |
| CVE-2024-7091 | Exposure of sensitive information to an unauthorized actor in GitLab | 4.1CNA v3.1 | 0.3% | 2024-07-24 | Fix |
| CVE-2024-7081 | itsourcecode Tailoring Management System expcatadd.php SQL injection | 9.8v3.1 | 0.6% | 2024-07-24 | |
| CVE-2024-7080 | SourceCodester Insurance Management System direct request | 7.5v3.1 | 1.0% | 2024-07-24 | |
| CVE-2024-7079 | Red Hat OpenShift Container Platform openshift-console: Unauthenticated installation of helm charts | 6.5CNA v3.1 | 0.4% | 2024-07-24 | |
| CVE-2024-7069 | SourceCodester Employee and Visitor Gate Pass Logging System SQL injection | 7.5v3.1 | 0.4% | 2024-07-24 | |
| CVE-2024-7068 | SourceCodester Insurance Management System update_sub_category cross-site scripting | 4.6v3.1 | 0.4% | 2024-07-24 | |
| CVE-2024-7067 | kirilkirkov Ecommerce-Laravel-Bootstrap Cart.php getCartProductsIds deserialization | 8.8v3.1 | 0.8% | 2024-07-24 | |
| CVE-2024-7066 | F-logic DataCube3 HTTP POST request config_time_sync.php os command injection | 9.8v3.1 | 3.4% | 2024-07-24 | |
| CVE-2024-7065 | Spina CMS cross-site request forgery | 4.3v3.1 | 0.4% | 2024-07-24 | |
| CVE-2024-7060 | Exposure of sensitive information to an unauthorized actor in GitLab | 2.6CNA v3.1 | 0.3% | 2024-07-24 | Fix |
| CVE-2024-7027 | WooCommerce - PDF Vouchers WordPress plugin authentication bypass to Voucher Vendor | 7.3CNA v3.1 | 0.4% | 2024-07-24 | Fix |
| CVE-2024-6930 | WP Booking Calendar WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.3% | 2024-07-24 | Fix |
| CVE-2024-6896 | AMP for WP Accelerated Mobile Pages WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.3% | 2024-07-24 | Fix |
| CVE-2024-6874 | curl macidn punycode buffer overread | 4.3v3.1 | 0.8% | 2024-07-24 | Fix |
| CVE-2024-6836 | Funnel Builder for WordPress by FunnelKit WordPress plugin unauthorized access | 4.3CNA v3.1 | 0.3% | 2024-07-24 | Fix |
| CVE-2024-6756 | Social Auto Poster WordPress plugin authenticated (Contributor+) arbitrary file upload | 8.8CNA v3.1 | 0.8% | 2024-07-24 | Fix |
| CVE-2024-6755 | Social Auto Poster WordPress plugin missing authorization to unauthenticated arbitrary post deletion | 5.3v3.1 | 0.3% | 2024-07-24 | Fix |
| CVE-2024-6754 | Social Auto Poster WordPress plugin missing authorization authenticated arbitrary post Meta update | 4.3v3.1 | 0.3% | 2024-07-24 | Fix |
| CVE-2024-6753 | Social Auto Poster WordPress plugin unauthenticated stored cross-site scripting | 6.1NVD v3.1 | 0.8% | 2024-07-24 | NucleiFix |
| CVE-2024-6752 | Social Auto Poster WordPress plugin authenticated (Subscriber+) stored cross-site scripting | 5.4v3.1 | 0.3% | 2024-07-24 | Fix |
| CVE-2024-6751 | Social Auto Poster WordPress plugin cross-site request forgery via Multiple Functions | 6.5v3.1 | 0.2% | 2024-07-24 | Fix |
| CVE-2024-6750 | Social Auto Poster WordPress plugin missing authorization via Multiple Functions | 7.5v3.1 | 0.3% | 2024-07-24 | Fix |
| CVE-2024-6629 | All-in-One Video Gallery WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.3% | 2024-07-24 | Fix |
| CVE-2024-6571 | Optimize Images ALT Text (alt tag) & names for SEO using AI WordPress plugin information disclosure | 5.3CNA v3.1 | 0.4% | 2024-07-24 | Fix |
| CVE-2024-6553 | WP Meteor Website Speed Optimization Addon WordPress plugin unauthenticated full path disclosure | 5.3CNA v3.1 | 0.4% | 2024-07-24 | Fix |
| CVE-2024-6327 | Progress Telerik Report Server deserialization | 9.9CNA v3.1 | 2.0% | 2024-07-24 | Fix |
| CVE-2024-6197 | curl freeing stack buffer in utf8asn1str | 7.5v3.1 | 4.3% | 2024-07-24 | Fix |
| CVE-2024-6096 | Progress Software Telerik Reporting unsafe deserialization | 8.8CNA v3.1 | 0.9% | 2024-07-24 | Fix |
| CVE-2024-6094 | WP ULike WordPress plugin Admin+ stored XSS | 4.8NVD v3.1 | 0.4% | 2024-07-24 | Fix |
| CVE-2024-5861 | WP Easy Pay (Free) WordPress plugin missing authorization to unauthenticated service Disconnection | 6.5v3.1 | 0.4% | 2024-07-24 | Fix |
| CVE-2024-5818 | Royal Elementor Addons and Templates WordPress plugin DOM-based stored cross-site scripting | 5.4v3.1 | 0.3% | 2024-07-24 | Fix |
| CVE-2024-5067 | Exposure of sensitive information to an unauthorized actor in GitLab | 4.4CNA v3.1 | 0.5% | 2024-07-24 | Fix |
| CVE-2024-3896 | Photo Gallery, Images, Slider in Rbs Image Gallery WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.3% | 2024-07-24 | Fix |
| CVE-2024-3454 | In-Fabric Matter Cluster Attribute Disclosure | 3.5NVD v3.1 | 0.2% | 2024-07-24 | |
| CVE-2024-3297 | Connectivity Standards Alliance Matter CASE session establishment resource exhaustion | 6.5NVD v3.1 | 0.2% | 2024-07-24 | Fix |
| CVE-2024-3246 | LiteSpeed Cache WordPress plugin cross-site request forgery to stored cross-site scripting | 5.4v3.1 | 0.2% | 2024-07-24 | Fix |
| CVE-2024-0231 | Improper control of resource identifiers (resource injection) in GitLab | 2.7CNA v3.1 | 0.3% | 2024-07-24 | Fix |
| CVE-2024-41839 | Adobe Experience Manager improper input validation | 3.5CNA v3.1 | 0.4% | 2024-07-23 | Fix |
| CVE-2024-41836 | Adobe InDesign Desktop null pointer dereference | 5.5CNA v3.1 | 0.2% | 2024-07-23 | Fix |
| CVE-2024-41668 | cBioPortal Proxy Endpoint Vulnerabliity | 8.3CNA v3.1 | 0.6% | 2024-07-23 | Fix |
| CVE-2024-41665 | Ampache stored cross-site scripting | 5.5CNA v3.1 | 0.5% | 2024-07-23 | Fix |
| CVE-2024-41664 | thinkst canarytokens blind SSRF via Canarytoken Webhook | 5.4CNA v3.1 | 0.4% | 2024-07-23 | |
| CVE-2024-41663 | thinkst canarytokens canarytoken Cloned Website vulnerable to stored cross-site scripting | 3.5CNA v3.1 | 0.3% | 2024-07-23 | |
| CVE-2024-41656 | Sentry vulnerable to stored cross-site scripting (XSS) | 7.1CNA v3.1 | 0.5% | 2024-07-23 | Fix |
| CVE-2024-41655 | danocmx node-tf2-item-format TF2 Item Format regular expression denial of service | 7.5CNA v3.1 | 0.8% | 2024-07-23 | Fix |
| CVE-2024-41319 | TOTOLINK A6000R command injection | 9.8v3.1 | 5.5% | 2024-07-23 | Exploit code |
| CVE-2024-41178 | Apache Arrow Rust Object Store: AWS WebIdentityToken exposure in log files | 7.5CISA ADP v3.1 | 0.7% | 2024-07-23 | Fix |
| CVE-2024-41012 | Linux kernel fcntl/close file locking use-after-free | 7.8CNA v3.1 | 0.2% | 2024-07-23 | Fix |
| CVE-2024-40060 | Wcharczuk Go-chart infinite loop | 7.5v3.1 | 0.6% | 2024-07-23 | |
| CVE-2024-39702 | openresty algorithmic complexity | 5.9CISA ADP v3.1 | 0.6% | 2024-07-23 | Fix |
| CVE-2024-38176 | Microsoft GroupMe elevation of privilege | 8.1CNA v3.1 | 0.9% | 2024-07-23 | Fix |
| CVE-2024-38164 | Microsoft GroupMe elevation of privilege | 9.6CNA v3.1 | 1.0% | 2024-07-23 | Fix |
| CVE-2024-34128 | Adobe Experience Manager cross-site scripting (stored XSS) | 5.4CNA v3.1 | 0.3% | 2024-07-23 | Fix |
| CVE-2024-29070 | Apache StreamPark: Session not invalidated after logout | 9.1CISA ADP v3.1 | 0.8% | 2024-07-23 | Fix |
| CVE-2024-7014 | Improper multimedia file attachment validation in Telegram for Android app | 8.1NVD v3.1 | 1.4% | 2024-07-23 | Exploit code |
| CVE-2024-6885 | MaxiBlocks: 2200+ Patterns, 190 Pages WordPress plugin arbitrary file deletion | 8.1CNA v3.1 | 1.1% | 2024-07-23 | Fix |
| CVE-2024-6828 | Redux Framework - Unauthenticated JSON file upload to stored cross-site scripting | 7.2CNA v3.1 | 1.0% | 2024-07-23 | Fix |
| CVE-2024-6783 | Vue client-side XSS via prototype pollution | 4.8CNA v3.1 | 0.5% | 2024-07-23 | Exploit code |
| CVE-2024-6717 | Nomad vulnerable to Allocation Directory Path Escape through Archive Unpacking | 7.7CNA v3.1 | 0.4% | 2024-07-23 | Fix |
| CVE-2024-6714 | Canonical Ubuntu Desktop Provision external control of a file path | 8.8CNA v3.1 | 0.3% | 2024-07-23 | Fix |
| CVE-2024-6420 | Hide My WP Ghost WordPress plugin Hidden login page disclosure | 8.6CISA ADP v3.1 | 1.8% | 2024-07-23 | NucleiFix |
| CVE-2024-6231 | Request a Quote WordPress plugin Admin+ stored XSS | 5.9CISA ADP v3.1 | 0.4% | 2024-07-23 | Fix |
| CVE-2024-5602 | Stack-based buffer overflow vulnerability in NI I/O Trace Tool | 7.8CNA v3.1 | 0.3% | 2024-07-23 | Fix |
| CVE-2024-4260 | CoBlocks WordPress plugin Contributor+ SSRF | 6.5CISA ADP v3.1 | 0.5% | 2024-07-23 | Fix |
| CVE-2024-4081 | Memory corruption due to Improper Length Check in NI LabVIEW | 8.4CNA v4.0 | 0.3% | 2024-07-23 | Fix |
| CVE-2024-4080 | Memory corruption due to Improper Length Checks in LabVIEW tdcore.dll | 8.4CNA v4.0 | 0.3% | 2024-07-23 | Fix |
| CVE-2024-4079 | Out-of-bounds read due to Missing Bounds Check in LabVIEW | 7.8CNA v3.1 | 0.3% | 2024-07-23 | Fix |
| CVE-2024-4076 | ISC BIND 9 assertion failure when serving both stale cache data and authoritative zone content | 7.5CNA v3.1 | 2.1% | 2024-07-23 | Fix |
| CVE-2024-1975 | ISC BIND 9 SIG(0) can be used to exhaust CPU resources | 7.5CNA v3.1 | 2.1% | 2024-07-23 | Fix |
| CVE-2024-1737 | BIND's database will be slow if a very large number of RRs exist at the same name | 7.5CNA v3.1 | 2.1% | 2024-07-23 | Fix |
| CVE-2024-1575 | Zyxel WBE660S firmware improper privilege management | 6.5CNA v3.1 | 0.3% | 2024-07-23 | Fix |
| CVE-2024-0981 | Okta Browser Plugin cross-site scripting | 7.1CNA v3.1 | 0.4% | 2024-07-23 | Fix |
| CVE-2024-0760 | ISC BIND 9 A flood of DNS messages over TCP may make the server unstable | 7.5CNA v3.1 | 4.7% | 2024-07-23 | Exploit codeFix |
| CVE-2024-41880 | Veilid veilid-core ping function vulnerability | 5.3CISA ADP v3.1 | 0.3% | 2024-07-22 | |
| CVE-2024-41829 | JetBrains TeamCity flawed authentication | 3.5CNA v3.1 | 0.3% | 2024-07-22 | Fix |
| CVE-2024-41828 | JetBrains TeamCity timing side channel | 2.6CNA v3.1 | 0.3% | 2024-07-22 | Fix |
| CVE-2024-41827 | JetBrains TeamCity insufficient session expiration | 7.4CNA v3.1 | 0.4% | 2024-07-22 | Fix |
| CVE-2024-41826 | JetBrains TeamCity cross-site scripting | 3.5CNA v3.1 | 0.3% | 2024-07-22 | Fix |
| CVE-2024-41825 | JetBrains TeamCity cross-site scripting | 4.6CNA v3.1 | 0.3% | 2024-07-22 | Fix |
| CVE-2024-41824 | JetBrains TeamCity sensitive information in log files | 6.4CNA v3.1 | 0.3% | 2024-07-22 | Fix |
| CVE-2024-41709 | Backdrop CMS does not sufficiently sanitize field labels before they are displayed in certain places | 4.8v3.1 | 0.3% | 2024-07-22 | Fix |
| CVE-2024-41704 | LibreChat path traversal | 9.8v3.1 | 0.7% | 2024-07-22 | |
| CVE-2024-41703 | LibreChat improper access control | 9.8v3.1 | 0.4% | 2024-07-22 | |
| CVE-2024-41320 | TOTOLINK A6000R command injection | 8.8CISA ADP v3.1 | 2.2% | 2024-07-22 | |
| CVE-2024-41318 | TOTOLINK A6000R command injection | 9.8CISA ADP v3.1 | 2.4% | 2024-07-22 | |
| CVE-2024-41317 | TOTOLINK A6000R OS command injection | 8.0CISA ADP v3.1 | 2.3% | 2024-07-22 | |
| CVE-2024-41316 | TOTOLINK A6000R command injection | 9.8CISA ADP v3.1 | 2.5% | 2024-07-22 | |
| CVE-2024-41315 | TOTOLINK A6000R OS command injection | 6.8CISA ADP v3.1 | 2.1% | 2024-07-22 | |
| CVE-2024-41314 | TOTOLINK A6000R OS command injection | 6.8CISA ADP v3.1 | 2.1% | 2024-07-22 | |
| CVE-2024-41132 | SixLabors ImageSharp allows excessive memory allocation in Gif Decoder | 5.3CNA v3.1 | 0.8% | 2024-07-22 | Fix |
| CVE-2024-41131 | Out-of-bounds write in SixLabors ImageSharp | 7.5CNA v3.1 | 0.7% | 2024-07-22 | Fix |
| CVE-2024-41130 | llama.cpp null pointer dereference in gguf_init_from_file | 5.4CNA v3.1 | 0.3% | 2024-07-22 | |
| CVE-2024-41129 | Canonical operator sensitive information in log files | 4.4CNA v3.1 | 0.2% | 2024-07-22 | Fix |
| CVE-2024-40634 | argoproj argo-cd argo CD unauthenticated denial of service vulnerability | 7.5CNA v3.1 | 1.4% | 2024-07-22 | Fix |
| CVE-2024-40502 | Angeljudesuarez Hospital Management System SQL injection | 9.8CISA ADP v3.1 | 1.3% | 2024-07-22 | |
| CVE-2024-40075 | Laravel XML external entity injection | 4.3CISA ADP v3.1 | 0.5% | 2024-07-22 | |
| CVE-2024-40051 | Ip-guard path traversal | 7.5v3.1 | 0.7% | 2024-07-22 | |
| CVE-2024-39902 | Tuleap's recursive permissions to document manager folder are not properly applied | 4.8CNA v3.1 | 0.3% | 2024-07-22 | Fix |
| CVE-2024-39688 | FishAudio/Bert-VITS2 Limited File Write in webui_preprocess.py generate_config function | 6.5NVD v3.1 | 0.5% | 2024-07-22 | |
| CVE-2024-39686 | FishAudio/Bert-VITS2 command injection in webui_preprocess.py bert_gen function | 9.8NVD v3.1 | 1.2% | 2024-07-22 | |
| CVE-2024-39685 | FishAudio/Bert-VITS2 command injection in webui_preprocess.py resample function | 9.8NVD v3.1 | 1.1% | 2024-07-22 | |
| CVE-2024-39601 | Siemens CPCI85 Central Processing/Communication missing authentication | 7.1CNA v4.0 | 0.5% | 2024-07-22 | Fix |
| CVE-2024-39250 | Efrotech Timetrax SQL injection | 9.8CISA ADP v3.1 | 4.9% | 2024-07-22 | Nuclei |
| CVE-2024-38944 | An issue in Intelight X-1L Traffic controller Maxtime v.1.9.6 allows a remote attacker to execute arbitrary code via the /cgi-bin/generateForm.cgi?formID=142 component. | 9.8CISA ADP v3.1 | 2.4% | 2024-07-22 | Exploit code |
| CVE-2024-38788 | UiPress lite WordPress plugin SQL injection | 7.2v3.1 | 0.6% | 2024-07-22 | Fix |
| CVE-2024-38773 | formlift WordPress plugin unauthenticated blind SQL injection | 9.8v3.1 | 2.0% | 2024-07-22 | NucleiFix |
| CVE-2024-38759 | Search and Replace WordPress plugin deserialization of untrusted data | 9.8v3.1 | 0.3% | 2024-07-22 | Fix |
| CVE-2024-38755 | DirectoryPress WordPress plugin SQL injection | 8.8v3.1 | 0.7% | 2024-07-22 | Fix |
| CVE-2024-38730 | Magical Addons For Elementor WordPress plugin server side request forgery (SSRF) | 6.4v3.1 | 0.2% | 2024-07-22 | Fix |
| CVE-2024-38728 | Seraphinite Post .DOCX Source WordPress plugin server side request forgery (SSRF) | 6.4NVD v3.1 | 0.3% | 2024-07-22 | Fix |
| CVE-2024-38723 | Get Use APIs JSON Content Importer WordPress plugin server side request forgery (SSRF) | 6.4v3.1 | 0.3% | 2024-07-22 | Fix |
| CVE-2024-38708 | Barcode Scanner and Inventory manager WordPress plugin SQL injection | 8.8v3.1 | 0.5% | 2024-07-22 | Fix |
| CVE-2024-38701 | Academy LMS WordPress plugin broken access control | 8.8v3.1 | 0.4% | 2024-07-22 | Fix |
| CVE-2024-38692 | Spiffy Calendar WordPress plugin SQL command improper neutralization | 7.2v3.1 | 0.7% | 2024-07-22 | Fix |
| CVE-2024-38503 | Apache Syncope: HTML tags can be injected into console or Enduser text fields | 5.4v3.1 | 0.7% | 2024-07-22 | Fix |
| CVE-2024-37998 | Siemens CPCI85 Central Processing/Communication unverified password change | 9.3CNA v4.0 | 0.5% | 2024-07-22 | Fix |
| CVE-2024-37942 | BerqWP WordPress plugin unauthenticated Non-blind server side request forgery (SSRF) | 7.2v3.1 | 0.3% | 2024-07-22 | Fix |
| CVE-2024-37445 | HTML5 Audio Player WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.3% | 2024-07-22 | Fix |
| CVE-2024-37436 | Uncanny Toolkit Pro for LearnDash WordPress plugin reflected cross-site scripting (XSS) | 7.1CNA v3.1 | 0.3% | 2024-07-22 | Fix |
| CVE-2024-37434 | Atarim WordPress plugin authenticated cross-site scripting (XSS) | 4.8v3.1 | 0.3% | 2024-07-22 | Fix |
| CVE-2024-37433 | Mailster WordPress plugin reflected cross-site scripting (XSS) | 6.1NVD v3.1 | 0.3% | 2024-07-22 | Fix |
| CVE-2024-37432 | Esteem WordPress theme cross-site scripting (XSS) | 6.1v3.1 | 0.3% | 2024-07-22 | Fix |
| CVE-2024-37429 | Login with phone number WordPress plugin Admin+ cross-site scripting (XSS) | 4.8v3.1 | 0.3% | 2024-07-22 | Fix |
| CVE-2024-37428 | All-in-One Addons for Elementor WidgetKit WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.3% | 2024-07-22 | Fix |
| CVE-2024-37422 | Progress Planner WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.3% | 2024-07-22 | Fix |
| CVE-2024-37416 | WP Photo Album Plus WordPress plugin reflected cross-site scripting (XSS) | 6.1NVD v3.1 | 0.3% | 2024-07-22 | Fix |
| CVE-2024-37414 | Depicter Slider WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.3% | 2024-07-22 | Fix |
| CVE-2024-37409 | PowerPack Lite for Beaver Builder WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.3% | 2024-07-22 | Fix |
| CVE-2024-37391 | ProtonVPN OS command injection | 7.8v3.1 | 0.3% | 2024-07-22 | |
| CVE-2024-37380 | Ubiquiti UniFi U6+ Access Point meshed VLAN traffic forwarding vulnerability | 5.3CNA v3.0 | 0.2% | 2024-07-22 | Fix |
| CVE-2024-37278 | Cards for Beaver Builder WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.3% | 2024-07-22 | Fix |
| CVE-2024-37275 | NextScripts WordPress plugin cross-site scripting (XSS) | 6.1NVD v3.1 | 0.3% | 2024-07-22 | Fix |
| CVE-2024-37271 | Print My Blog WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.3% | 2024-07-22 | Fix |
| CVE-2024-37267 | Striking WordPress theme reflected cross-site scripting (XSS) | 6.1NVD v3.1 | 0.3% | 2024-07-22 | Fix |
| CVE-2024-37265 | IdeaPush WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.3% | 2024-07-22 | Fix |
| CVE-2024-37264 | Groundhogg WordPress plugin reflected cross-site scripting (XSS) | 6.1NVD v3.1 | 0.3% | 2024-07-22 | Fix |
| CVE-2024-37263 | Enter Addons Ultimate Template Builder for Elementor WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.3% | 2024-07-22 | Fix |
| CVE-2024-37262 | Online Booking and Scheduling Calendar WordPress plugin reflected cross-site scripting (XSS) | 6.1NVD v3.1 | 0.3% | 2024-07-22 | Fix |
| CVE-2024-37261 | WP-Lister Lite for Amazon WordPress plugin reflected cross-site scripting (XSS) | 6.1NVD v3.1 | 0.6% | 2024-07-22 | NucleiFix |
| CVE-2024-37259 | WP Extended WordPress plugin cross-site scripting (XSS) | 6.1NVD v3.1 | 0.6% | 2024-07-22 | NucleiFix |
| CVE-2024-37258 | Social Rocket WordPress plugin reflected cross-site scripting (XSS) | 6.1NVD v3.1 | 0.3% | 2024-07-22 | Fix |
| CVE-2024-37257 | Permalink Manager Lite WordPress plugin reflected cross-site scripting (XSS) | 6.1NVD v3.1 | 0.3% | 2024-07-22 | Fix |
| CVE-2024-37246 | Gallery Slideshow WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.3% | 2024-07-22 | |
| CVE-2024-37245 | All In One Redirection WordPress plugin cross-site scripting (XSS) | 6.1NVD v3.1 | 0.3% | 2024-07-22 | Fix |
| CVE-2024-37244 | Ninja Beaver Add-ons for Beaver Builder WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.2% | 2024-07-22 | |
| CVE-2024-37239 | Branda WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.3% | 2024-07-22 | Fix |
| CVE-2024-37229 | Blogmentor Blog Layouts for Elementor WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.2% | 2024-07-22 | |
| CVE-2024-37223 | Restaurant Reservations WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.3% | 2024-07-22 | |
| CVE-2024-37221 | Kimili Flash Embed WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.3% | 2024-07-22 | |
| CVE-2024-37219 | Page Builder Sandwich WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.3% | 2024-07-22 | |
| CVE-2024-37217 | Empty Cart Button for WooCommerce WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.3% | 2024-07-22 | |
| CVE-2024-37216 | Sketchfab Embed WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.3% | 2024-07-22 | |
| CVE-2024-37215 | Transition Slider Responsive Image Slider and Gallery WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.3% | 2024-07-22 | |
| CVE-2024-37211 | AliExpress Dropshipping with AliNext Lite WordPress plugin reflected cross-site scripting (XSS) | 6.1NVD v3.1 | 0.3% | 2024-07-22 | Fix |
| CVE-2024-37206 | Demo Awesome WordPress plugin reflected cross-site scripting (XSS) | 6.1NVD v3.1 | 0.3% | 2024-07-22 | Fix |
| CVE-2024-37199 | Enfold WordPress theme reflected cross-site scripting (XSS) | 6.1NVD v3.1 | 0.3% | 2024-07-22 | Fix |
| CVE-2024-37122 | Accordions WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.3% | 2024-07-22 | |
| CVE-2024-37121 | Shortcode Addons WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.3% | 2024-07-22 | |
| CVE-2024-37120 | Tabs WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.3% | 2024-07-22 | |
| CVE-2024-37117 | Uncanny Automator Pro WordPress plugin reflected cross-site scripting (XSS) | 6.1NVD v3.1 | 0.3% | 2024-07-22 | Fix |
| CVE-2024-37116 | Sinatra WordPress theme cross-site scripting (XSS) | 5.4v3.1 | 0.3% | 2024-07-22 | Fix |
| CVE-2024-37114 | My Favorites WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.3% | 2024-07-22 | Fix |
| CVE-2024-37101 | WP Post Author WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.3% | 2024-07-22 | Fix |
| CVE-2024-37100 | Elegant Themes Icons WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.3% | 2024-07-22 | |
| CVE-2024-37097 | Shortcodes by United Themes WordPress plugin reflected cross-site scripting (XSS) | 6.1NVD v3.1 | 0.3% | 2024-07-22 | Fix |
| CVE-2024-35656 | WordPress Elementor Pro plugin reflected cross-site scripting (XSS) | 6.1NVD v3.1 | 0.3% | 2024-07-22 | Fix |
| CVE-2024-34457 | Apache StreamPark IDOR | 6.5v3.1 | 0.7% | 2024-07-22 | Fix |
| CVE-2024-34329 | Insecure permissions in Entrust Datacard XPS Card Printer Driver 8.5 and earlier without the dxp1-patch-E24-004 patch allows unauthenticated attackers to execute arbitrary code as SYSTEM via a crafted DLL payload. | 8.4CISA ADP v3.1 | 0.6% | 2024-07-22 | |
| CVE-2024-33933 | Elementor Header and Footer Builder WordPress plugin DOM-based cross-site scripting (XSS) | 5.4v3.1 | 0.4% | 2024-07-22 | Fix |
| CVE-2024-32484 | Ankitects Anki reflected cross-site scripting | 8.2v3.1 | 21.4% | 2024-07-22 | |
| CVE-2024-32152 | Ankitects Anki LaTeX Blocklist Bypass vulnerability | 4.3v3.1 | 12.1% | 2024-07-22 | Fix |
| CVE-2024-29073 | Anki Latex Incomplete Blocklist vulnerability | 6.5v3.1 | 11.5% | 2024-07-22 | Fix |
| CVE-2024-28698 | CLSA directory traversal | 9.8CISA ADP v3.1 | 1.5% | 2024-07-22 | Fix |
| CVE-2024-26020 | Ankitects Anki arbitrary code execution | 8.8NVD v3.1 | 15.2% | 2024-07-22 | Fix |
| CVE-2024-25638 | dnsjava insufficient verification of data authenticity | 8.9CNA v3.1 | 0.4% | 2024-07-22 | Fix |
| CVE-2024-24507 | Act-on cross-site scripting | 6.1v3.1 | 0.4% | 2024-07-22 | |
| CVE-2024-23321 | Apache RocketMQ: Unauthorized Exposure of Sensitive Data | 8.8v3.1 | 0.9% | 2024-07-22 | Fix |
| CVE-2024-21552 | SuperAGI code injection | 9.8CNA v3.1 | 0.6% | 2024-07-22 | |
| CVE-2024-6970 | itsourcecode Tailoring Management System staffcatadd.php SQL injection | 9.8v3.1 | 0.4% | 2024-07-22 | |
| CVE-2024-6969 | SourceCodester Clinics Patient Management System get_patient_history.php SQL injection | 7.5v3.1 | 0.4% | 2024-07-22 | |
| CVE-2024-6968 | SourceCodester Clinics Patient Management System print_patients_visits.php SQL injection | 7.5v3.1 | 0.4% | 2024-07-22 | |
| CVE-2024-6967 | SourceCodester Employee and Visitor Gate Pass Logging System SQL injection | 7.5v3.1 | 0.5% | 2024-07-22 | |
| CVE-2024-6966 | itsourcecode Online Blood Bank Management System Login login.php SQL injection | 9.8v3.1 | 0.7% | 2024-07-22 | |
| CVE-2024-6965 | Tenda O3 fromVirtualSet stack-based overflow | 8.8v3.1 | 1.3% | 2024-07-22 | |
| CVE-2024-6964 | Tenda O3 fromDhcpSetSer stack-based overflow | 8.8v3.1 | 1.2% | 2024-07-22 | |
| CVE-2024-6963 | Tenda O3 formexeCommand stack-based overflow | 8.8v3.1 | 1.3% | 2024-07-22 | |
| CVE-2024-6962 | Tenda O3 formQosSet stack-based overflow | 8.8v3.1 | 1.2% | 2024-07-22 | |
| CVE-2024-6913 | PerkinElmer ProcessPlus execution with unnecessary privileges | 8.8NVD v3.1 | 1.4% | 2024-07-22 | |
| CVE-2024-6912 | PerkinElmer ProcessPlus hard-coded MSSQL Credentials | 9.8NVD v3.1 | 1.1% | 2024-07-22 | |
| CVE-2024-6911 | PerkinElmer ProcessPlus unauthenticated local file inclusion | 7.5NVD v3.1 | 4.9% | 2024-07-22 | Nuclei |
| CVE-2024-6806 | Missing authorization Checks in NI VeriStand Gateway for Project Resources | 9.8CNA v3.1 | 1.0% | 2024-07-22 | Fix |
| CVE-2024-6805 | Missing authorization Checks in NI VeriStand Gateway for File Transfer Resources | 7.5CNA v3.1 | 1.0% | 2024-07-22 | Fix |
| CVE-2024-6794 | Deserialization of untrusted data in NI VeriStand Waveform Streaming Server | 9.8CNA v3.1 | 1.2% | 2024-07-22 | Fix |
| CVE-2024-6793 | Deserialization of untrusted data in NI VeriStand DataLogging Server | 9.8CNA v3.1 | 1.2% | 2024-07-22 | Fix |
| CVE-2024-6791 | Directory path traversal vulnerability in NI VeriStand with vsmodel files | 7.8CNA v3.1 | 0.5% | 2024-07-22 | Fix |
| CVE-2024-6675 | Deserialization of untrusted data vulnerability in NI VeriStand Project file | 7.8CNA v3.1 | 0.4% | 2024-07-22 | |
| CVE-2024-6638 | Integer overflow vulnerability Reading TDMS files in LabVIEW | 5.5CNA v3.1 | 0.2% | 2024-07-22 | Fix |
| CVE-2024-6542 | Checkmk livestatus injection in mknotifyd | 6.5CNA v3.1 | 0.5% | 2024-07-22 | Fix |
| CVE-2024-6271 | Community Events WordPress plugin Event deletion via CSRF | 5.4NVD v3.1 | 0.3% | 2024-07-22 | Fix |
| CVE-2024-6244 | PZ Frontend Manager profile picture change function cross-site request forgery | 8.8NVD v3.1 | 2.8% | 2024-07-22 | Exploit codeFix |
| CVE-2024-6243 | HTML Forms WordPress plugin Admin+ stored XSS | 4.8NVD v3.1 | 0.4% | 2024-07-22 | Fix |
| CVE-2024-6122 | Incorrect Default Directory Permissions for NI SystemLink Redis service | 5.5CNA v3.1 | 0.2% | 2024-07-22 | Fix |
| CVE-2024-6121 | NI SystemLink Server Ships Out of Date Redis Version | 7.8CNA v3.1 | 0.3% | 2024-07-22 | Fix |
| CVE-2024-5973 | MasterStudy LMS WordPress plugin privilege escalation to Instructor | 8.8NVD v3.1 | 0.5% | 2024-07-22 | Fix |
| CVE-2024-5529 | WP QuickLaTeX WordPress plugin Admin+ stored XSS | 4.8NVD v3.1 | 0.4% | 2024-07-22 | Fix |
| CVE-2024-5004 | CM Popup Plugin for WordPress Contributor+ stored XSS | 4.8NVD v3.1 | 0.3% | 2024-07-22 | Fix |
| CVE-2024-38786 | CoziPress WordPress theme cross-site scripting (XSS) | 5.4v3.1 | 0.3% | 2024-07-21 | |
| CVE-2024-38785 | Gutenverse WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.3% | 2024-07-21 | Fix |
| CVE-2024-38784 | Livemesh Addons for Beaver Builder WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.3% | 2024-07-21 | Fix |
| CVE-2024-38782 | Leaflet Maps Marker WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.3% | 2024-07-21 | Fix |
| CVE-2024-38781 | CopySafe Web Protection WordPress plugin reflected cross-site scripting (XSS) | 6.1NVD v3.1 | 0.3% | 2024-07-21 | Fix |
| CVE-2024-38438 | D-Link authentication bypass by capture-replay | 9.8v3.1 | 0.7% | 2024-07-21 | |
| CVE-2024-38437 | D-Link authentication bypass using an alternate path or channel | 9.8v3.1 | 0.7% | 2024-07-21 | |
| CVE-2024-38436 | Commugen SOX 365 improper neutralization of input during web page generation (cross-site scripting) | 6.1v3.1 | 0.3% | 2024-07-21 | Fix |
| CVE-2024-38435 | Unitronics Vision PLC improper check or handling of exceptional conditions | 7.5v3.1 | 0.4% | 2024-07-21 | Fix |
| CVE-2024-38434 | Unitronics Vision PLC use of potentially dangerous function | 6.5CNA v3.1 | 0.4% | 2024-07-21 | Fix |
| CVE-2024-37559 | counterpoint WordPress theme reflected cross-site scripting (XSS) | 6.1NVD v3.1 | 0.3% | 2024-07-21 | |
| CVE-2024-37558 | WPFavicon WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.3% | 2024-07-21 | |
| CVE-2024-37557 | WP Cookie Law Info WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.3% | 2024-07-21 | |
| CVE-2024-37556 | WordPress Notification Bar plugin cross-site scripting (XSS) | 4.8v3.1 | 0.3% | 2024-07-21 | |
| CVE-2024-37552 | Social Media Share Buttons and Social Sharing Icons WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.3% | 2024-07-21 | Fix |
| CVE-2024-37551 | Simple Social Share WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.3% | 2024-07-21 | |
| CVE-2024-37550 | Template Kit Export WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.3% | 2024-07-21 | Fix |
| CVE-2024-37549 | Save as PDF plugin by Pdfcrowd WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.3% | 2024-07-21 | Fix |
| CVE-2024-37548 | Meks Easy Ads Widget WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.3% | 2024-07-21 | Fix |
| CVE-2024-37545 | Floating Social Media Links WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.3% | 2024-07-21 | |
| CVE-2024-37538 | Link To Bible WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.3% | 2024-07-21 | Fix |
| CVE-2024-37537 | WS Contact Form WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.3% | 2024-07-21 | Fix |
| CVE-2024-37536 | Easy Custom Code (LESS/CSS/JS) WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.3% | 2024-07-21 | Fix |
| CVE-2024-37523 | Login Logo Editor WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.3% | 2024-07-21 | |
| CVE-2024-37522 | CC and BCC for Woocommerce Order Emails WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.3% | 2024-07-21 | |
| CVE-2024-37521 | zBench WordPress theme cross-site scripting (XSS) | 5.4v3.1 | 0.3% | 2024-07-21 | |
| CVE-2024-37519 | Premium Blocks Gutenberg Blocks for WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.3% | 2024-07-21 | Fix |
| CVE-2024-37515 | XPlainer WordPress plugin cross-site scripting | 5.8CNA v3.1 | 0.2% | 2024-07-21 | Fix |
| CVE-2024-37514 | CopySafe Web Protection WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.3% | 2024-07-21 | Fix |
| CVE-2024-37512 | NEX-Forms Ultimate Form Builder WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.3% | 2024-07-21 | Fix |
| CVE-2024-37509 | MakeCommerce for WooCommerce WordPress plugin reflected cross-site scripting (XSS) | 6.1NVD v3.1 | 0.3% | 2024-07-21 | Fix |
| CVE-2024-37507 | Eventin WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.3% | 2024-07-21 | Fix |
| CVE-2024-37500 | Beaver Builder WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.3% | 2024-07-21 | Fix |
| CVE-2024-37495 | Create by Mediavine WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.3% | 2024-07-21 | Fix |
| CVE-2024-37492 | Gutenberg WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.3% | 2024-07-21 | Fix |
| CVE-2024-37489 | Ocean Extra WordPress plugin authenticated cross-site scripting (XSS) | 5.4v3.1 | 0.3% | 2024-07-21 | Fix |
| CVE-2024-37488 | HelloAsso WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.3% | 2024-07-21 | Fix |
| CVE-2024-37487 | WP Directory Kit WordPress plugin reflected cross-site scripting (XSS) | 6.1NVD v3.1 | 0.3% | 2024-07-21 | Fix |
| CVE-2024-37485 | bbPress Notify (No-Spam) WordPress plugin reflected cross-site scripting (XSS) | 6.1NVD v3.1 | 0.3% | 2024-07-21 | Fix |
| CVE-2024-37480 | Apollo13 Framework Extensions WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.3% | 2024-07-21 | Fix |
| CVE-2024-37466 | Mega Elements WordPress plugin Contributor+ cross-site scripting (XSS) | 5.4v3.1 | 0.3% | 2024-07-21 | Fix |
| CVE-2024-37465 | AI Power: Complete AI Pack Powered by GPT-4 WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.3% | 2024-07-21 | Fix |
| CVE-2024-37461 | IdeaPush WordPress plugin cross-site scripting (XSS) | 6.1NVD v3.1 | 0.3% | 2024-07-21 | Fix |
| CVE-2024-37460 | SuperSaaS online appointment scheduling WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.3% | 2024-07-21 | Fix |
| CVE-2024-37459 | PayPlus Payment Gateway WordPress plugin reflected cross-site scripting (XSS) | 6.1NVD v3.1 | 0.3% | 2024-07-21 | Fix |
| CVE-2024-37457 | Ultimate Blocks WordPress Blocks plugin cross-site scripting (XSS) | 5.4v3.1 | 0.2% | 2024-07-21 | Fix |
| CVE-2024-37449 | Slider Revolution WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.3% | 2024-07-21 | Fix |
| CVE-2024-37447 | PixelYourSite WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.3% | 2024-07-21 | Fix |
| CVE-2024-37446 | Chained Quiz WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.3% | 2024-07-21 | Fix |
| CVE-2024-6961 | XXE in Guardrails AI when consuming RAIL documents | 5.9CNA v3.1 | 0.4% | 2024-07-21 | Fix |
| CVE-2024-6960 | H2O deserializes ML models without filtering, potentially allowing execution of malicious code | 7.5CNA v3.1 | 0.7% | 2024-07-21 | |
| CVE-2024-6958 | itsourcecode University Management System Avatar file st_update.php unrestricted upload | 8.8v3.1 | 0.6% | 2024-07-21 |