CVE-2024 list

CVE-2024 records published in July 2024

Page two of three: records 1,001 to 2,000 of the 2,858 published in July 2024, newest first. The first page carries the figures for July 2024.

CVE-2024 records published in July 2024, newest first: records 1,001 to 2,000 of 2,858
CVE Summary CVSS EPSS Published Signals
CVE-2024-6957itsourcecode University Management System Login functions.php SQL injection9.8v3.10.7%2024-07-21
CVE-2024-6956itsourcecode University Management System view_cgpa.php SQL injection7.2v3.10.6%2024-07-21
CVE-2024-6955SourceCodester Record Management System sort2.php cross-site scripting6.1v3.10.5%2024-07-21
CVE-2024-6954SourceCodester Record Management System sort1.php cross-site scripting6.1v3.10.4%2024-07-21
CVE-2024-6953itsourcecode Tailoring Management System sms.php SQL injection9.8v3.10.5%2024-07-21
CVE-2024-6952itsourcecode University Management System SQL injection8.8v3.10.5%2024-07-21
CVE-2024-6951SourceCodester Simple Online Book Store System admin_delete.php SQL injection9.8v3.10.5%2024-07-21
CVE-2024-6950Prain HTTP POST request ?import code injection5.3CNA v4.00.4%2024-07-21
CVE-2024-6949Gargaj wuhu path traversal5.3v3.10.5%2024-07-21
CVE-2024-6948Gargaj wuhu Slide Editor slideeditor.php unrestricted upload9.8v3.10.5%2024-07-21
CVE-2024-6947Flute CMS Notification ContentParser.php replaceContent code injection8.8v3.10.6%2024-07-21
CVE-2024-6946Flute CMS list code injection8.8v3.10.6%2024-07-21
CVE-2024-6945Flute CMS Avatar upload Page ImagesController.php unrestricted upload9.8v3.10.6%2024-07-21
CVE-2024-6944ZhongBangKeJi CRMEB PublicController.php get_image_base64 deserialization7.5v3.13.8%2024-07-21
CVE-2024-6943ZhongBangKeJi CRMEB CopyTaobaoServices.php downloadImage deserialization8.8v3.10.6%2024-07-21
CVE-2024-6942ThinkSAAS Admin Panel Security Center anti.php cross-site scripting5.4v3.10.4%2024-07-21
CVE-2024-6941ThinkSAAS do.php cross-site scripting5.4v3.10.4%2024-07-21
CVE-2024-6940DedeCMS article_template_rand.php code injection7.2v3.10.7%2024-07-21
CVE-2024-6939Xinhu RockOA tpl_upload.html okla cross-site scripting6.1v3.10.5%2024-07-21
CVE-2024-6938SiYuan PDF PDF.js cross-site scripting5.4v3.10.4%2024-07-21
CVE-2024-6937Formtools.org Form Tools Import Option List edit.php curl_exec file inclusion2.7NVD v3.10.4%2024-07-21
CVE-2024-6936Formtools.org Form Tools setting code injection4.9v3.10.4%2024-07-21
CVE-2024-6935Formtools.org Form Tools User settings page cross-site scripting4.8v3.10.3%2024-07-21
CVE-2024-6934Formtools.org Form Tools cross-site scripting4.8v3.10.4%2024-07-21
CVE-2024-6933LimeSurvey Survey General Settings handler SQL injection9.8v3.10.6%2024-07-21Fix
CVE-2024-40348bazarr path traversal8.2CISA ADP v3.18.2%2024-07-20NucleiExploit code
CVE-2024-40347Hyland Alfresco Content Services reflected cross-site scripting6.1v3.10.4%2024-07-20
CVE-2024-38767BSK PDF Manager WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.3%2024-07-20Fix
CVE-2024-38758WappPress WordPress plugin blind server side request forgery (SSRF)4.9CNA v3.10.2%2024-07-20Fix
CVE-2024-38757Typebot WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.3%2024-07-20Fix
CVE-2024-38750Advanced post slider WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.3%2024-07-20
CVE-2024-38741Amazing Hover Effects WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.3%2024-07-20
CVE-2024-38739OnePress WordPress theme cross-site scripting (XSS)5.1CNA v3.10.2%2024-07-20Fix
CVE-2024-38738Change From Email WordPress plugin cross-site scripting (XSS)5.9CNA v3.10.3%2024-07-20
CVE-2024-38725Admin Dashboard RSS Feed WordPress plugin cross-site scripting (XSS)5.9CNA v3.10.3%2024-07-20Fix
CVE-2024-38722Job Board Manager WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.3%2024-07-20Fix
CVE-2024-38720EazyDocs WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.3%2024-07-20Fix
CVE-2024-38718Download Button for Elementor WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.3%2024-07-20
CVE-2024-38713WP Photo Album Plus WordPress plugin authenticated stored cross-site scripting (XSS)6.5CNA v3.10.3%2024-07-20Fix
CVE-2024-38712Qi Blocks WordPress plugin cross-site scripting (XSS)5.4v3.10.3%2024-07-20Fix
CVE-2024-38711Link Library WordPress plugin reflected cross-site scripting (XSS)6.1NVD v3.10.4%2024-07-20Fix
CVE-2024-38710Jewel Theme Master Addons for Elementor stored cross-site scripting4.8v3.10.3%2024-07-20Fix
CVE-2024-38705ElementInvader Addons for Elementor WordPress plugin cross-site scripting (XSS)5.4v3.10.3%2024-07-20Fix
CVE-2024-38703WP Event Aggregator WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.3%2024-07-20Fix
CVE-2024-38698SKT Skill Bar WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.3%2024-07-20Fix
CVE-2024-38697Goftino WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.3%2024-07-20Fix
CVE-2024-38696Zoho CRM Lead Magnet WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.3%2024-07-20Fix
CVE-2024-38694Moloni WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.3%2024-07-20Fix
CVE-2024-38689Simple Popup WordPress plugin cross-site scripting (XSS)5.9CNA v3.10.3%2024-07-20Fix
CVE-2024-38687Sky Addons for Elementor WordPress plugin cross-site scripting (XSS)5.4v3.10.3%2024-07-20Fix
CVE-2024-38686FancyPost WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.3%2024-07-20Fix
CVE-2024-38685WP Announcement WordPress plugin cross-site scripting (XSS)5.9CNA v3.10.3%2024-07-20Fix
CVE-2024-38684SlingBlocks WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.3%2024-07-20Fix
CVE-2024-38683WooCommerce Report WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.4%2024-07-20Fix
CVE-2024-38682Post Layouts for Gutenberg WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.3%2024-07-20Fix
CVE-2024-38681Magical Addons For Elementor WordPress plugin cross-site scripting (XSS)5.4v3.10.3%2024-07-20Fix
CVE-2024-38680Appmaker WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.4%2024-07-20
CVE-2024-38679Animated Typed JS Shortcode WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.3%2024-07-20Fix
CVE-2024-38678Calendar.online / Kalender.digital WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.3%2024-07-20Fix
CVE-2024-38677REVIEWS.io WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.3%2024-07-20Fix
CVE-2024-38676Booking Ultra Pro Appointments Booking Calendar WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.3%2024-07-20Fix
CVE-2024-38675Arkhe Blocks WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.3%2024-07-20Fix
CVE-2024-38674SKT Addons for Elementor WordPress plugin cross-site scripting (XSS)5.4v3.10.3%2024-07-20Fix
CVE-2024-38673Multisite Content Copier/Updater WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.4%2024-07-20Fix
CVE-2024-38672AdPush WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.4%2024-07-20
CVE-2024-38671WP GoToWebinar WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.3%2024-07-20Fix
CVE-2024-38670Team Members WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.3%2024-07-20Fix
CVE-2024-38669Predictive Search for WooCommerce WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.4%2024-07-20Fix
CVE-2024-37961codoc WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.4%2024-07-20Fix
CVE-2024-37960CodePen Embedded Pens Shortcode WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.3%2024-07-20Fix
CVE-2024-37959Power BI Embedded for WordPress plugin cross-site scripting (XSS)5.4v3.10.3%2024-07-20
CVE-2024-37958Meks Smart Author Widget WordPress plugin cross-site scripting (XSS)5.4v3.10.4%2024-07-20Fix
CVE-2024-37957Bradmax Player WordPress plugin cross-site scripting (XSS)5.4v3.10.3%2024-07-20Fix
CVE-2024-37956VK All in One Expansion Unit WordPress plugin cross-site scripting (XSS)5.4v3.10.3%2024-07-20Fix
CVE-2024-37955GutSlider All in One Block Slider WordPress plugin cross-site scripting (XSS)5.4v3.10.3%2024-07-20Fix
CVE-2024-37954Simple Responsive Slider WordPress plugin reflected cross-site scripting (XSS)6.1NVD v3.10.3%2024-07-20
CVE-2024-37953MBE eShip WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.3%2024-07-20Fix
CVE-2024-37951Magical Posts Display WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.3%2024-07-20Fix
CVE-2024-37950Master Popups WordPress plugin cross-site scripting (XSS)5.9CNA v3.10.3%2024-07-20
CVE-2024-37949Responsive Mobile WordPress theme cross-site scripting (XSS)6.5CNA v3.10.3%2024-07-20
CVE-2024-37948Caxton Create Pro page layouts in Gutenberg WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.3%2024-07-20
CVE-2024-37947Tutor LMS WordPress plugin cross-site scripting (XSS)4.8v3.10.4%2024-07-20Fix
CVE-2024-37946ReCaptcha Integration for WordPress plugin cross-site scripting (XSS)5.9CNA v3.10.3%2024-07-20Fix
CVE-2024-37944WP Travel Engine Tour Booking Plugin Tour Operator Software WordPress plugin cross-site scripting5.4v3.10.3%2024-07-20Fix
CVE-2024-37943YITH WooCommerce Ajax Product Filter WordPress plugin reflected cross-site scripting (XSS)5.8CNA v3.10.3%2024-07-20Fix
CVE-2024-37936Tabs For WPBakery Page Builder WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.3%2024-07-20
CVE-2024-37922Premium Addons for Elementor WordPress plugin cross-site scripting (XSS)5.4v3.10.3%2024-07-20Fix
CVE-2024-37920ARForms Form Builder WordPress plugin reflected cross-site scripting (XSS)6.1NVD v3.10.3%2024-07-20Fix
CVE-2024-37919Timeline Module for Beaver Builder WordPress plugin cross-site scripting (XSS)5.9CNA v3.10.3%2024-07-20Fix
CVE-2024-37918ConeBlog WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.3%2024-07-20Fix
CVE-2024-37565Gum Elementor Addon WordPress plugin cross-site scripting (XSS)5.9CNA v3.10.3%2024-07-20Fix
CVE-2024-37563TOCHAT.BE WordPress plugin unauthenticated stored cross-site scripting (XSS)6.5CNA v3.10.4%2024-07-20Fix
CVE-2024-37562Simple Post Notes WordPress plugin cross-site scripting (XSS)5.9CNA v3.10.3%2024-07-20Fix
CVE-2024-37561Plugin Notes Plus WordPress plugin cross-site scripting (XSS)5.9CNA v3.10.3%2024-07-20Fix
CVE-2024-6932ClassCMS cross-site scripting5.4v3.10.4%2024-07-20
CVE-2024-6848Post and Page Builder by BoldGrid WordPress plugin stored cross-site scripting5.4v3.10.5%2024-07-20Fix
CVE-2024-6694WP Mail SMTP WordPress plugin authenticated (Admin+) SMTP password exposure2.7CNA v3.10.6%2024-07-20Fix
CVE-2024-6637WooCommerce - Social Login WordPress plugin unauthenticated privilege escalation7.3CNA v3.10.4%2024-07-20Fix
CVE-2024-6636WooCommerce WordPress plugin unauthorized access9.8CNA v3.10.5%2024-07-20Fix
CVE-2024-6635WooCommerce - Social Login WordPress plugin unauthenticated authentication bypass7.3CNA v3.10.4%2024-07-20Fix
CVE-2024-6560Addonify Quick View For WooCommerce WordPress plugin unauthenticated full path Dislcosure5.3CNA v3.10.6%2024-07-20Fix
CVE-2024-6497SEO Plugin by Squirrly SEO WordPress plugin SQL injection6.1NVD v3.111.0%2024-07-20Fix
CVE-2024-6491Getwid Gutenberg Blocks WordPress plugin missing authentication to MailChimp API key update4.3CNA v3.10.4%2024-07-20Fix
CVE-2024-6489Getwid Gutenberg Blocks WordPress plugin missing authorization to Google API key update5.3CNA v3.10.3%2024-07-20Fix
CVE-2024-6281Path traversal in parisneo/lollms7.3CNA v3.00.3%2024-07-20Fix
CVE-2024-5804Conditional Fields for Contact Form 7 WordPress plugin cross-site request forgery4.3CNA v3.10.2%2024-07-20Fix
CVE-2024-3934Mercado Pago payments for WooCommerce - Authenticated (Subscriber+) arbitrary file download6.5CNA v3.10.7%2024-07-20Fix
CVE-2024-2337Easy Testimonials WordPress plugin stored cross-site scripting5.4v3.10.4%2024-07-20
CVE-2024-41603Denkgroot Spina cross-site request forgery9.6CISA ADP v3.10.2%2024-07-19
CVE-2024-41602Denkgroot Spina cross-site request forgery8.8CISA ADP v3.10.3%2024-07-19
CVE-2024-41601lin-CMS v.0.2.0 and insecure permissions7.5CISA ADP v3.10.5%2024-07-19
CVE-2024-41600TaleLin lin-cms-spring-boot lin-CMS Springboot v.0.2.1 and insecure permissions7.5v3.10.4%2024-07-19
CVE-2024-41599RuoYi cross-site scripting6.1v3.10.5%2024-07-19
CVE-2024-41597ProcessWire cross-site request forgery4.2CISA ADP v3.10.2%2024-07-19
CVE-2024-41492Tenda AX1806 stack-based buffer overflow7.5CISA ADP v3.10.6%2024-07-19
CVE-2024-41281Linksys WRT54G stack-based buffer overflow8.8CISA ADP v3.10.3%2024-07-19
CVE-2024-41172Apache CXF: Unrestricted memory consumption in CXF HTTP clients7.5v3.11.2%2024-07-19Fix
CVE-2024-41124Puncia cleartext transmission of sensitive information via HTTP urls in `API_URLS`6.3CNA v3.10.3%2024-07-19Fix
CVE-2024-41122Custom environment variables allow to alter execution flow of plugins in Woodpecker7.5CNA v3.10.6%2024-07-19Fix
CVE-2024-41121Custom workspace allow to overwrite plugin entrypoint executable in Woodpecker8.8CNA v3.10.7%2024-07-19Fix
CVE-2024-41107Apache CloudStack: SAML Signature Exclusion8.1v3.117.8%2024-07-19NucleiEmerging ThreatsExploit codeFix
CVE-2024-40724Open Asset Import Library Assimp heap-based buffer overflow7.8v3.10.3%2024-07-19Fix
CVE-2024-40400Automad arbitrary file upload8.8CISA ADP v3.10.8%2024-07-19Fix
CVE-2024-39963Tenda AX12 command injection8.0CISA ADP v3.11.5%2024-07-19
CVE-2024-39962D-Link DIR-823X code injection9.8CISA ADP v3.12.1%2024-07-19
CVE-2024-39906Remote code execution in Haven IndieAuthClient (GHSL-2024-093)8.4CNA v3.11.0%2024-07-19
CVE-2024-39457Cybozu Garoon cross-site scripting5.4v3.10.2%2024-07-19Fix
CVE-2024-39123Calibre-Web cross-site scripting (XSS)5.4CISA ADP v3.123.1%2024-07-19Exploit code
CVE-2024-38156Microsoft Edge (Chromium-based) spoofing6.1CNA v3.10.4%2024-07-19Fix
CVE-2024-37066Wyze Cam V4 Pro command injection8.8NVD v3.11.8%2024-07-19Fix
CVE-2024-35199TorchServe gRPC Port Exposure8.2CNA v3.10.6%2024-07-19Fix
CVE-2024-35198TorchServe bypass allowed_urls configuration9.8CNA v3.10.8%2024-07-19Fix
CVE-2024-32007Apache CXF denial of service vulnerability in JOSE7.5v3.11.3%2024-07-19Fix
CVE-2024-30130HCL Nomad server on Domino browser cache vulnerability3.7CNA v3.10.3%2024-07-19Fix
CVE-2024-29736Apache CXF: SSRF vulnerability via WADL stylesheet parameter9.1v3.11.0%2024-07-19Fix
CVE-2024-29080HP Display Control improper preservation of permissions6.5CISA ADP v3.10.1%2024-07-19
CVE-2024-27489WMCMS DelFile function arbitrary file deletion7.5CISA ADP v3.10.4%2024-07-19
CVE-2024-24970HP Display Control improper privilege management6.5CISA ADP v3.10.1%2024-07-19
CVE-2024-21583github.com/gitpod-io/gitpod vulnerable to Cookie Tossing4.1CNA v3.10.6%2024-07-19Fix
CVE-2024-21527github.com/gotenberg/gotenberg/v8/pkg/gotenberg server-side request forgery8.8CNA v4.00.6%2024-07-19Fix
CVE-2024-6916Zowe CLI --show-inputs-only displays securely stored properties5.9CNA v3.10.1%2024-07-19Fix
CVE-2024-6908YugabyteDB Anywhere Admin can Escalate Privileges to SuperAdmin using Manual PUT request6.0CNA v4.00.3%2024-07-19
CVE-2024-6907SourceCodester Record Management System sort.php cross-site scripting5.4v3.10.4%2024-07-19
CVE-2024-6906SourceCodester Record Management System add_leave_non_user.php SQL injection8.8v3.10.5%2024-07-19
CVE-2024-6905SourceCodester Record Management System view_info_user.php SQL injection8.8v3.10.6%2024-07-19
CVE-2024-6904SourceCodester Record Management System sort2_user.php SQL injection8.8v3.10.5%2024-07-19
CVE-2024-6903SourceCodester Record Management System sort1_user.php SQL injection8.8v3.10.5%2024-07-19
CVE-2024-6902SourceCodester Record Management System sort_user.php SQL injection8.8v3.10.5%2024-07-19
CVE-2024-6901SourceCodester Record Management System entry.php SQL injection8.8v3.10.5%2024-07-19
CVE-2024-6900SourceCodester Record Management System edit_emp.php SQL injection8.8v3.10.5%2024-07-19
CVE-2024-6899SourceCodester Record Management System view_info.php SQL injection9.8v3.10.6%2024-07-19
CVE-2024-6898SourceCodester Record Management System index.php SQL injection9.8v3.10.6%2024-07-19
CVE-2024-6895YugabyteDB Anywhere Insecure Account Profile Management6.1CNA v4.00.2%2024-07-19
CVE-2024-6799YITH Essential Kit for WooCommerce #1 WordPress plugin unauthorized access4.3CNA v3.10.3%2024-07-19Fix
CVE-2024-6338FV Player WordPress plugin authenticated (Subscriber+) SQL injection via exclude parameter8.8CNA v3.10.5%2024-07-19Fix
CVE-2024-6205PayPlus Payment Gateway WordPress plugin unauthenticated SQLi9.8NVD v3.14.1%2024-07-19NucleiExploit codeFix
CVE-2024-5977GiveWP WordPress plugin insecure direct object reference5.4v3.10.4%2024-07-19Fix
CVE-2024-5604Bug Library WordPress plugin Admin+ stored XSS5.9CISA ADP v3.10.4%2024-07-19Fix
CVE-2024-0006YugabyteDB Anywhere DB user password leak in Application Log5.4CNA v4.00.3%2024-07-19
CVE-2024-41184keepalived vrrp_ipsets_handler integer overflow9.8CISA ADP v3.10.6%2024-07-18Fix
CVE-2024-41111BishopFox Sliver Authenticated remote code execution7.2CNA v3.10.7%2024-07-18Fix
CVE-2024-41011Linux kernel amdkfd HDP MMIO mapping incorrect calculation7.8CNA v3.10.2%2024-07-18Fix
CVE-2024-40898Apache HTTP Server: SSRF with mod_rewrite in server/vhost context on Windows7.5NVD v3.11.5%2024-07-18Fix
CVE-2024-40764SonicWall SonicOS heap-based buffer overflow7.5v3.10.7%2024-07-18Fix
CVE-2024-40725Apache HTTP Server: Source code disclosure with handlers configured via AddType5.3v3.14.2%2024-07-18Exploit codeFix
CVE-2024-40648matrix.org matrix-rust-sdk user identity verification improper authentication5.4CNA v3.10.3%2024-07-18Fix
CVE-2024-40647sentry-python Stdlib subprocess integration information disclosure5.3CNA v3.10.2%2024-07-18Fix
CVE-2024-40644Gitoxide's gix-path can use a fake program files location6.8CNA v3.10.2%2024-07-18Fix
CVE-2024-40642Absent Input Validation in BinaryHttpParser in the netty incubator codec.bhttp8.1CNA v3.10.7%2024-07-18Fix
CVE-2024-40629Arbitrary file write in Ansible Playbooks leads to RCE in Jumpserver10.0CNA v3.11.3%2024-07-18Fix
CVE-2024-40628Arbitrary file read in Ansible Playbooks in Jumpserver10.0CNA v3.10.9%2024-07-18Fix
CVE-2024-399111Panel SQL injection10.0CNA v3.14.5%2024-07-18Fix
CVE-2024-399071Panel has an SQL injection issue related to the orderBy clause9.8CNA v3.129.2%2024-07-18NucleiFix
CVE-2024-39682WordPress Cooked Plugin Authenticated (Contributor+) HTML injection via Recipe Excerpt6.4CNA v3.10.4%2024-07-18Fix
CVE-2024-39681WordPress Cooked plugin cross-site request forgery to Apply template to All Recipes5.4CNA v3.10.4%2024-07-18Fix
CVE-2024-39680WordPress Cooked plugin cross-site request forgery to Default Recipe Template Save5.4CNA v3.10.4%2024-07-18Fix
CVE-2024-39679WordPress Cooked plugin cross-site request forgery to Recipe Template Reset4.3CNA v3.10.4%2024-07-18Fix
CVE-2024-39678WordPress Cooked plugin cross-site request forgery to Get Recipe IDs4.3CNA v3.10.4%2024-07-18Fix
CVE-2024-39173calculator-boilerplate calculator route code injection9.8CISA ADP v3.10.8%2024-07-18
CVE-2024-39090PHPGurukul Online Shopping Portal cross-site request forgery6.1CISA ADP v3.10.5%2024-07-18Exploit code
CVE-2024-38806UAA failure to Remove Shadow User’s Access3.9CNA v3.10.1%2024-07-18
CVE-2024-38302Dell Data Lakehouse missing encryption6.8CNA v3.10.1%2024-07-18Fix
CVE-2024-34013Acronis True Image OS command injection7.8CNA v3.00.6%2024-07-18Fix
CVE-2024-31143Xen double unlock in x86 guest IRQ handling7.5CISA ADP v3.10.5%2024-07-18Fix
CVE-2024-30473Dell ECS improper privilege management4.9CNA v3.10.3%2024-07-18Fix
CVE-2024-30126HCL BigFix Compliance is affected by a missing X-Frame-Options header vulnerability4.7CNA v3.10.2%2024-07-18Fix
CVE-2024-30125HCL BigFix Compliance is affected by an internal server error6.2CNA v3.10.1%2024-07-18Fix
CVE-2024-29178Apache StreamPark: FreeMarker SSTI RCE8.8v3.11.2%2024-07-18Fix
CVE-2024-29014SonicWall NetExtender code injection8.8v3.11.9%2024-07-18Emerging ThreatsFix
CVE-2024-6705RegLevel WordPress plugin authenticated (Administrator+) stored cross-site scripting5.5CNA v3.10.3%2024-07-18
CVE-2024-6599Meks Video Importer WordPress plugin missing authorization authenticated API Keys modification4.3CNA v3.10.3%2024-07-18Fix
CVE-2024-6504Rapid7 InsightVM protection mechanism failure4.3CNA v3.10.3%2024-07-18Fix
CVE-2024-6455ElementsKit Elementor addons WordPress plugin unauthenticated information exposure5.3CNA v3.10.4%2024-07-18Fix
CVE-2024-6175Booking Ultra Pro WordPress plugin missing authorization authenticated plugin settings Updates5.4CNA v3.10.3%2024-07-18Fix
CVE-2024-6164Filter and Grids WordPress plugin unauthenticated LFI9.8NVD v3.11.1%2024-07-18Fix
CVE-2024-5997Duplica WordPress plugin missing authorization Users/Posts Duplicates creation4.3CNA v3.10.4%2024-07-18Fix
CVE-2024-5964Zenon Lite WordPress theme stored cross-site scripting6.4CNA v3.10.3%2024-07-18
CVE-2024-5726Timeline Event History WordPress plugin authenticated (Contributor+) PHP object injection8.8CNA v3.10.7%2024-07-18Fix
CVE-2024-5625XML external entity injection in PruvaSoft Informatics' Apinizer Management Console6.5CNA v3.10.4%2024-07-18Fix
CVE-2024-5620Authentication bypass in PruvaSoft Informatics' Apinizer Management Console6.5CNA v3.10.3%2024-07-18Fix
CVE-2024-5619IDOR in PruvaSoft Informatics' Apinizer Management Console9.6CNA v3.10.4%2024-07-18Fix
CVE-2024-5618Broken access control in PruvaSoft Informatics' Apinizer Management Console9.9CNA v3.10.4%2024-07-18Fix
CVE-2024-5555Element Pack Elementor Addons WordPress plugin stored cross-site scripting6.4CNA v3.10.5%2024-07-18Fix
CVE-2024-5554Element Pack Elementor Addons WordPress plugin stored cross-site scripting6.4CNA v3.10.3%2024-07-18Fix
CVE-2024-5321Kubernetes incorrect permissions on Windows containers logs6.1CNA v3.10.3%2024-07-18Fix
CVE-2024-3242Brizy Page Builder WordPress plugin authenticated (Contributor+) arbitrary file upload8.8CNA v3.11.0%2024-07-18Fix
CVE-2024-0857SQLi in Universal Software's FlexWater Corporate Water Management9.8CNA v3.10.4%2024-07-18Fix
CVE-2024-41010Linux kernel BPF tcx traffic control use-after-free7.8CNA v3.10.4%2024-07-17Fix
CVE-2024-41009Linux kernel BPF ring buffer resource exhaustion7.8CNA v3.10.3%2024-07-17Fix
CVE-2024-40641Unsigned code template execution through workflows in projectdiscovery/nuclei7.4CNA v3.10.3%2024-07-17Fix
CVE-2024-40640Usage of non-constant time base64 decoder could lead to leakage of secret key material in vodozemac2.9CNA v3.10.2%2024-07-17Fix
CVE-2024-40636SteeltoeOSS security-advisories sensitive information in log files5.3CNA v3.10.4%2024-07-17Fix
CVE-2024-40633Sylius has a security vulnerability via adjustments API endpoint5.3CNA v3.10.4%2024-07-17Fix
CVE-2024-40617FUJITSU Network Edgiot GW1500 path traversal6.5v3.11.4%2024-07-17Exploit codeFix
CVE-2024-40492Heartbeat cross-site scripting7.1CISA ADP v3.10.8%2024-07-17
CVE-2024-40402Nikhil-bhalerao Simple Library Management System SQL injection6.3CISA ADP v3.10.4%2024-07-17
CVE-2024-40119Nepstech Wifi Router xpon NTPL-Xpon1GFEVN password change function cross-site request forgery8.8CISA ADP v3.10.5%2024-07-17Exploit code
CVE-2024-39877Apache Airflow: DAG Author code execution possibility in airflow-scheduler8.8v3.11.7%2024-07-17Fix
CVE-2024-39863Apache Airflow: Potential XSS5.4NVD v3.11.0%2024-07-17Fix
CVE-2024-39126Roundup cross-site scripting5.4v3.10.3%2024-07-17Fix
CVE-2024-39125Roundup cross-site scripting5.4v3.10.3%2024-07-17Fix
CVE-2024-39124Roundup cross-site scripting5.4v3.10.3%2024-07-17Fix
CVE-2024-38870ManageEngine OpManager stored XSS3.5CNA v3.10.3%2024-07-17Fix
CVE-2024-38447Ncia Advisor Network insecure direct object reference8.1CISA ADP v3.10.4%2024-07-17
CVE-2024-38446Ncia Advisor Network insecure direct object reference6.5CISA ADP v3.10.3%2024-07-17
CVE-2024-36491Century Systems FutureNet NXR-1300 series OS command injection9.8v3.10.7%2024-07-17Fix
CVE-2024-36475Century Systems FutureNet NXR-1300 series active debug code8.8v3.10.6%2024-07-17Fix
CVE-2024-32981Cross-site scripting vulnerability with encoded payload in silverstripe/Framework5.4CNA v3.10.3%2024-07-17Fix
CVE-2024-31979Apache StreamPipes: Possibility of SSRF in pipeline element installation process4.3NVD v3.10.7%2024-07-17Fix
CVE-2024-31411Apache StreamPipes: Potential remote code execution (RCE) via file upload8.8v3.11.1%2024-07-17Fix
CVE-2024-31070Century Systems FutureNet NXR-1300 series FutureNet NXR series insecure default initialization9.1v3.10.8%2024-07-17Fix
CVE-2024-30471Apache StreamPipes: Potential creation of multiple identical accounts3.7NVD v3.10.7%2024-07-17Fix
CVE-2024-29885Reports are still accessible even when `canView` returns false in silverstripe/Reports4.3CNA v3.10.4%2024-07-17Fix
CVE-2024-29737Apache StreamPark (incubating): Maven build params could trigger remote command execution4.7NVD v3.11.1%2024-07-17Fix
CVE-2024-29120Apache StreamPark: Information leakage5.9CISA ADP v3.10.3%2024-07-17Fix
CVE-2024-28993SolarWinds Access Rights Manager directory traversal and information disclosure7.6CNA v3.11.0%2024-07-17Fix
CVE-2024-28992SolarWinds Access Rights Manager directory traversal and information disclosure7.6CNA v3.11.9%2024-07-17Fix
CVE-2024-28796IBM ClearQuest cross-site scripting6.4CNA v3.10.3%2024-07-17Fix
CVE-2024-28074SolarWinds Access Rights Manager (ARM) Internal deserialization remote code execution9.6CNA v3.110.9%2024-07-17Fix
CVE-2024-27311Zoho ManageEngine DDI Central file upload path traversal5.5CNA v3.11.5%2024-07-17Fix
CVE-2024-23475SolarWinds Access Rights Manager directory traversal and information disclosure9.6CNA v3.12.1%2024-07-17Fix
CVE-2024-23474SolarWinds Access Rights Manager deleteTransferFile function path traversal7.6CNA v3.11.5%2024-07-17Fix
CVE-2024-23472SolarWinds Access Rights Manager path traversal9.6CNA v3.118.6%2024-07-17Fix
CVE-2024-23471SolarWinds Access Rights Manager (ARM) CreateFile directory traversal remote code execution9.6CNA v3.11.3%2024-07-17Fix
CVE-2024-23470SolarWinds Access Rights Manager UserScriptHumster exposed dangerous method remote command execution9.6CNA v3.11.2%2024-07-17Fix
CVE-2024-23469SolarWinds Access Rights Manager exposed dangerous method remote code execution9.6CNA v3.117.9%2024-07-17Fix
CVE-2024-23468SolarWinds Access Rights Manager directory traversal and information disclosure7.6CNA v3.13.4%2024-07-17Fix
CVE-2024-23467SolarWinds Access Rights Manager directory traversal remote code execution9.6CNA v3.12.9%2024-07-17Fix
CVE-2024-23466SolarWinds Access Rights Manager directory traversal remote code execution9.6CNA v3.12.5%2024-07-17Fix
CVE-2024-23465SolarWinds Access Rights Manager (ARM) ChangeHumster exposed dangerous method authentication bypass8.3CNA v3.11.9%2024-07-17Fix
CVE-2024-20435Cisco Secure Web Appliance execution with unnecessary privileges8.8CNA v3.10.2%2024-07-17Fix
CVE-2024-20429Cisco Secure Email improper input validation6.5CNA v3.10.6%2024-07-17Fix
CVE-2024-20419Cisco Smart Software Manager On-Prem unverified password change10.0CNA v3.180.6%2024-07-17NucleiMetasploitEmerging ThreatsExploit codeFix
CVE-2024-20416Cisco Small Business RV Series Router Firmware improper length parameter handling6.5CNA v3.10.9%2024-07-17Fix
CVE-2024-20401Cisco Secure Email absolute path traversal9.8CNA v3.12.3%2024-07-17Fix
CVE-2024-20400Cisco TelePresence Video Communication Server (VCS) Expressway open redirect4.7CNA v3.10.4%2024-07-17Fix
CVE-2024-20396Cisco Webex Teams information disclosure5.3CNA v3.10.4%2024-07-17Fix
CVE-2024-20395Cisco Webex Teams unprotected transport of credentials6.4CNA v3.10.2%2024-07-17Fix
CVE-2024-20323Cisco Intelligent Node Manager hard-coded cryptographic key7.5CNA v3.10.2%2024-07-17Fix
CVE-2024-20296Cisco Identity Services Engine Software unrestricted file upload4.7CNA v3.10.5%2024-07-17Fix
CVE-2024-6834Open Mainframe Project Zowe Imperative Local command injection allows Activity Masking9.0CNA v3.10.3%2024-07-17Fix
CVE-2024-6833Zowe CLI Auto-Init leaks credentials Locally5.9CNA v3.10.1%2024-07-17Fix
CVE-2024-6830SourceCodester Simple Inventory Management System Order action.php SQL injection7.5v3.10.4%2024-07-17
CVE-2024-6808itsourcecode Simple Task List signUp.php insertUserRecord SQL injection9.8v3.10.7%2024-07-17
CVE-2024-6807SourceCodester Student Study Center Desk Management System cross-site scripting3.4NVD v3.10.7%2024-07-17
CVE-2024-6803itsourcecode Document Management System insert.php SQL injection9.8v3.10.5%2024-07-17
CVE-2024-6802SourceCodester Computer Laboratory Management System Master.php SQL injection9.8v3.19.1%2024-07-17
CVE-2024-6801SourceCodester Online Student Management System add-students.php unrestricted upload9.8v3.10.8%2024-07-17
CVE-2024-6669AI ChatBot for WordPress WPBot plugin authenticated (Administrator+) stored cross-site scripting4.8v3.10.3%2024-07-17Fix
CVE-2024-6660BookingPress WordPress plugin unauthorized access8.8CNA v3.10.6%2024-07-17Fix
CVE-2024-6595Uncontrolled search path element in GitLab3.0CNA v3.10.5%2024-07-17Fix
CVE-2024-6535Red Hat Service Interconnect skupper: Potential authentication bypass to skupper console5.3NVD v3.10.5%2024-07-17Fix
CVE-2024-6467BookingPress Appointment Booking WordPress plugin arbitrary file read to arbitrary file creation8.8CNA v3.10.9%2024-07-17Fix
CVE-2024-6220简数采集器 (Keydatas) WordPress plugin unauthenticated arbitrary file upload9.8CNA v3.135.5%2024-07-17NucleiFix
CVE-2024-6033Themewinter Eventin event data import function missing authorization4.3CNA v3.10.4%2024-07-17Fix
CVE-2024-5703Icegram Email Subscribers and Newsletters API missing authorization4.3CNA v3.10.4%2024-07-17Fix
CVE-2024-5582Schema and Structured Data for WP and AMP WordPress plugin stored cross-site scripting5.4v3.10.4%2024-07-17Fix
CVE-2024-5471ManageEngine DDI Central agent takeover8.8CNA v3.12.5%2024-07-17Fix
CVE-2024-5255Ultimate Addons for WPBakery Page Builder WordPress plugin stored cross-site scripting5.4v3.10.3%2024-07-17Fix
CVE-2024-5254Ultimate Addons for WPBakery Page Builder WordPress plugin stored cross-site scripting5.4v3.10.3%2024-07-17Fix
CVE-2024-5253Ultimate Addons for WPBakery Page Builder WordPress plugin stored cross-site scripting5.4v3.10.3%2024-07-17Fix
CVE-2024-5252Ultimate Addons for WPBakery Page Builder WordPress plugin stored cross-site scripting5.4v3.10.3%2024-07-17Fix
CVE-2024-5251Ultimate Addons for WPBakery Page Builder WordPress plugin stored cross-site scripting5.4v3.10.3%2024-07-17Fix
CVE-2024-41008Linux kernel amdgpu VM task info vulnerability7.8CNA v3.10.2%2024-07-16Fix
CVE-2024-40637Implicit override for built-in materializations from installed packages in dbt-core4.2CNA v3.10.4%2024-07-16Fix
CVE-2024-40626Stored cross-site scripting (XSS) vulnerability in Outline editor7.3CNA v3.10.5%2024-07-16Fix
CVE-2024-40536Szlbt Lbt-t300-t400 buffer overflow5.3CISA ADP v3.10.4%2024-07-16
CVE-2024-40535Szlbt Lbt-t300-t400 stack-based buffer overflow9.8CISA ADP v3.10.6%2024-07-16
CVE-2024-40516H3C Magic RC3000 routing functionality remote code execution8.8CISA ADP v3.10.3%2024-07-16
CVE-2024-40515Tenda AX2 Pro improper verification of communication source9.8CISA ADP v3.10.7%2024-07-16
CVE-2024-40505D-Link Dap-1650 Firmware path traversal9.3CISA ADP v3.10.4%2024-07-16Fix
CVE-2024-40503Tenda AX12 improper verification of communication source6.5CISA ADP v3.10.4%2024-07-16
CVE-2024-40456ThinkSAAS SQL injection9.8CISA ADP v3.10.5%2024-07-16
CVE-2024-40455ThinkSAAS An arbitrary file deletion2.7CISA ADP v3.10.2%2024-07-16
CVE-2024-40425SparkShop Nanjin Xingyuantu Technology Co file upload9.8CISA ADP v3.10.7%2024-07-16
CVE-2024-40394oretnom23 Simple Library Management System unrestricted file upload9.8CISA ADP v3.10.7%2024-07-16
CVE-2024-40393Angeljudesuarez Online Clinic Management System SQL injection9.8v3.10.6%2024-07-16
CVE-2024-40392Fkgeo Pharmacy/medical Store Point Of Sale System SQL injection9.8CISA ADP v3.10.5%2024-07-16
CVE-2024-40322JFinalCMS SQL injection8.8v3.10.4%2024-07-16
CVE-2024-40130Open5GS buffer overflow9.8v3.10.6%2024-07-16
CVE-2024-40129Open5GS heap-based buffer overflow9.8v3.10.5%2024-07-16
CVE-2024-39908Denial of service in REXML4.3CNA v3.11.5%2024-07-16Exploit codeFix
CVE-2024-39887Apache Superset: Improper SQL authorisation, parse not checking for specific engine functions4.3CNA v3.14.4%2024-07-16NucleiFix
CVE-2024-39700JupyterLab extension template update-integration-tests GitHub Action code injection10.0CNA v3.11.1%2024-07-16Exploit codeFix
CVE-2024-39036Seacms path traversal6.5v3.10.6%2024-07-16
CVE-2024-35338Tendacn I29 hard-coded credentials9.8v3.10.5%2024-07-16
CVE-2024-33182Tendacn AC18 stack-based buffer overflow9.8v3.10.6%2024-07-16
CVE-2024-33181Tenda AC18 stack-based buffer overflow8.8CISA ADP v3.10.6%2024-07-16
CVE-2024-33180Tendacn AC18 buffer overflow9.8v3.10.6%2024-07-16
CVE-2024-32861Software House C•CURE CouchDB executable protection7.8CNA v3.10.1%2024-07-16
CVE-2024-22442HPE 3PAR Service Processor improper authentication9.8CNA v3.10.6%2024-07-16Fix
CVE-2024-21687Atlassian Bamboo Data Center remote file inclusion8.1CNA v3.00.7%2024-07-16Fix
CVE-2024-21686Atlassian Confluence Data Center cross-site scripting7.3CNA v3.00.9%2024-07-16Fix
CVE-2024-21188Oracle Financial Services Revenue Management and Billing unauthorized data modification6.1CNA v3.10.3%2024-07-16Fix
CVE-2024-21185Oracle MySQL Server InnoDB component denial of service4.9CNA v3.10.9%2024-07-16Fix
CVE-2024-21184Oracle Database execution with unnecessary privileges7.2CNA v3.10.5%2024-07-16Fix
CVE-2024-21183Oracle WebLogic Server Core component unauthorized data access7.5CNA v3.10.4%2024-07-16Fix
CVE-2024-21182Oracle WebLogic Server vulnerability7.5CNA v3.174.2%2024-07-16KEVExploit codeFix
CVE-2024-21181Oracle WebLogic Server Core component takeover9.8CNA v3.11.1%2024-07-16Fix
CVE-2024-21180Oracle PeopleSoft Enterprise PeopleTools OpenSearch Dashboards component information disclosure4.1CNA v3.10.3%2024-07-16Fix
CVE-2024-21179Oracle MySQL Server InnoDB component denial of service4.9CNA v3.10.7%2024-07-16Fix
CVE-2024-21178Oracle PeopleSoft Enterprise PeopleTools portal component unauthorized data modification6.1CNA v3.10.3%2024-07-16Fix
CVE-2024-21177Oracle MySQL Server Optimizer component denial of service6.5CNA v3.10.8%2024-07-16Fix
CVE-2024-21176Oracle MySQL Server Thread Pooling component denial of service5.3CNA v3.10.7%2024-07-16Fix
CVE-2024-21175Oracle WebLogic Server Core component unauthorized data modification7.5CNA v3.10.4%2024-07-16Fix
CVE-2024-21174Oracle Database resource exhaustion3.1CNA v3.10.3%2024-07-16Fix
CVE-2024-21173Oracle MySQL Server InnoDB component denial of service4.9CNA v3.10.8%2024-07-16Fix
CVE-2024-21171Oracle MySQL Server Optimizer component denial of service6.5CNA v3.10.9%2024-07-16Fix
CVE-2024-21170Oracle MySQL Connectors Connector/Python component unauthorized data modification6.3CNA v3.10.4%2024-07-16Fix
CVE-2024-21169Oracle E-Business Suite Marketing Partners component unauthorized data modification6.5CNA v3.10.3%2024-07-16Fix
CVE-2024-21168Oracle JD Edwards EnterpriseOne Orchestrator unauthorized data access6.5CNA v3.10.5%2024-07-16Fix
CVE-2024-21167Oracle E-Business Suite Trading Community Party Search UI component unauthorized data access8.1CNA v3.10.4%2024-07-16Fix
CVE-2024-21166Oracle MySQL Server InnoDB component unauthorized data modification5.9CNA v3.10.7%2024-07-16Fix
CVE-2024-21165Oracle MySQL Server Pluggable Auth component denial of service4.9CNA v3.10.9%2024-07-16Fix
CVE-2024-21164Oracle VM VirtualBox Core component information disclosure2.5CNA v3.10.5%2024-07-16Fix
CVE-2024-21163Oracle MySQL Server Optimizer component unauthorized data modification5.5CNA v3.10.8%2024-07-16Fix
CVE-2024-21162Oracle MySQL Server Optimizer component denial of service4.9CNA v3.10.9%2024-07-16Fix
CVE-2024-21161Oracle VM VirtualBox Core component denial of service5.5CNA v3.10.3%2024-07-16Fix
CVE-2024-21160Oracle MySQL Server InnoDB component denial of service4.9CNA v3.10.9%2024-07-16Fix
CVE-2024-21159Oracle MySQL Server InnoDB component denial of service4.9CNA v3.10.8%2024-07-16Fix
CVE-2024-21158Oracle PeopleSoft Enterprise PeopleTools portal component unauthorized data modification6.4CNA v3.10.3%2024-07-16Fix
CVE-2024-21157Oracle MySQL Server InnoDB component denial of service4.9CNA v3.10.9%2024-07-16Fix
CVE-2024-21155Oracle ZFS Storage Appliance Kit User interface component information disclosure4.7CNA v3.10.4%2024-07-16Fix
CVE-2024-21154Oracle PeopleSoft Enterprise HCM Human Resources information disclosure4.3CNA v3.10.4%2024-07-16Fix
CVE-2024-21153Oracle Process Manufacturing Product Development unauthorized data access8.1CNA v3.10.4%2024-07-16Fix
CVE-2024-21152Oracle E-Business Suite Process Manufacturing Financials unauthorized data access8.1CNA v3.10.4%2024-07-16Fix
CVE-2024-21151Oracle Solaris Filesystem component denial of service3.3CNA v3.10.2%2024-07-16Fix
CVE-2024-21150Oracle JD Edwards EnterpriseOne Tools Web Runtime SEC component unauthorized data modification6.1CNA v3.10.3%2024-07-16Fix
CVE-2024-21149Oracle E-Business Suite Enterprise Asset Management unauthorized data access8.1CNA v3.10.4%2024-07-16Fix
CVE-2024-21148Oracle E-Business Suite Applications Framework unauthorized data modification4.8CNA v3.10.3%2024-07-16Fix
CVE-2024-21147Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition unauthorized data access7.4CNA v3.11.1%2024-07-16Fix
CVE-2024-21146Oracle E-Business Suite Trade Management GL Accounts component unauthorized data access8.1CNA v3.10.4%2024-07-16Fix
CVE-2024-21145Oracle Java SE JDK and JRE improper access control4.8CNA v3.10.9%2024-07-16Fix
CVE-2024-21144Oracle Java SE, Oracle GraalVM Enterprise Edition Concurrency component denial of service3.7CNA v3.11.1%2024-07-16Fix
CVE-2024-21143Oracle E-Business Suite iStore User Management component information disclosure5.3CNA v3.10.4%2024-07-16Fix
CVE-2024-21142Oracle MySQL Server Security Privileges component denial of service4.9CNA v3.10.9%2024-07-16Fix
CVE-2024-21141Oracle VM VirtualBox Core component takeover8.2CNA v3.10.3%2024-07-16Fix
CVE-2024-21140Oracle Java SE JDK and JRE information disclosure4.8CNA v3.10.9%2024-07-16Fix
CVE-2024-21139Oracle Business Intelligence Enterprise Edition unauthorized data modification5.4CNA v3.10.3%2024-07-16Fix
CVE-2024-21138Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition denial of service3.7CNA v3.11.3%2024-07-16Fix
CVE-2024-21137Oracle MySQL Server Optimizer component denial of service4.9CNA v3.10.8%2024-07-16Fix
CVE-2024-21136Oracle Retail Applications Retail Xstore Office Security component unauthorized data access8.6CNA v3.11.8%2024-07-16NucleiFix
CVE-2024-21135Oracle MySQL Server Optimizer component denial of service4.9CNA v3.10.9%2024-07-16Fix
CVE-2024-21134Oracle MySQL Server Connection Handling component denial of service4.3CNA v3.10.8%2024-07-16Fix
CVE-2024-21133Oracle Reports Developer Servlet component unauthorized data modification6.1CNA v3.10.3%2024-07-16Fix
CVE-2024-21132Oracle E-Business Suite Purchasing Approvals component unauthorized data modification5.4CNA v3.10.3%2024-07-16Fix
CVE-2024-21131Oracle Java SE Hotspot vulnerability3.7CNA v3.11.0%2024-07-16Fix
CVE-2024-21130Oracle MySQL Server Optimizer component denial of service4.9CNA v3.10.8%2024-07-16Fix
CVE-2024-21129Oracle MySQL Server DDL component denial of service4.9CNA v3.10.9%2024-07-16Fix
CVE-2024-21128Oracle E-Business Suite Application Object Library APIs component unauthorized data modification5.4CNA v3.10.3%2024-07-16Fix
CVE-2024-21127Oracle MySQL Server DDL component denial of service4.9CNA v3.10.9%2024-07-16Fix
CVE-2024-21126Oracle Database resource exhaustion5.8CNA v3.10.5%2024-07-16Fix
CVE-2024-21125Oracle MySQL Server FTS component denial of service4.9CNA v3.10.9%2024-07-16Fix
CVE-2024-21123Oracle Database incorrect default permissions2.3CNA v3.10.2%2024-07-16Fix
CVE-2024-21122Oracle PeopleSoft Enterprise HCM Shared Components unauthorized data modification5.4CNA v3.10.3%2024-07-16Fix
CVE-2024-20996Oracle MySQL Server InnoDB component denial of service4.9CNA v3.10.9%2024-07-16Fix
CVE-2024-6780Improper permission control in com.android.server.telecom3.3CISA ADP v3.10.2%2024-07-16
CVE-2024-6779Google Chrome V8 out-of-bounds access9.6v3.16.2%2024-07-16Fix
CVE-2024-6778Google Chrome race condition7.5v3.10.8%2024-07-16Exploit codeFix
CVE-2024-6777Google Chrome Navigation use-after-free6.5NVD v3.10.3%2024-07-16Fix
CVE-2024-6776Google Chrome Audio use-after-free8.8v3.10.5%2024-07-16Fix
CVE-2024-6775Google Chrome Media Stream use-after-free8.8v3.10.5%2024-07-16Fix
CVE-2024-6774Google Chrome Screen Capture use-after-free8.8v3.10.5%2024-07-16Fix
CVE-2024-6773Google Chrome V8 inappropriate implementation8.8v3.10.5%2024-07-16Fix
CVE-2024-6772Google Chrome V8 inappropriate implementation8.8v3.10.5%2024-07-16Fix
CVE-2024-6655Red Hat Enterprise Linux 8 gtk3: Gtk2: Library injection from cwd7.0CNA v3.10.5%2024-07-16Fix
CVE-2024-6621WP RSS Aggregator WordPress plugin missing authorization authenticated Feed State update4.3v3.10.4%2024-07-16Fix
CVE-2024-6579genetechproducts Web and WooCommerce Addons for WPBakery Builder missing authorization4.3CNA v3.10.4%2024-07-16Fix
CVE-2024-6570Glossary WordPress plugin unauthenticated full path disclosure5.3CNA v3.10.4%2024-07-16Fix
CVE-2024-6565AForms WordPress plugin unauthenticated full path disclosure5.3CNA v3.10.4%2024-07-16Fix
CVE-2024-6559XCloner WordPress plugin unauthenticated full path disclosure5.3CNA v3.10.4%2024-07-16Fix
CVE-2024-6557SchedulePress WordPress plugin unauthenticated full path disclosure5.3CNA v3.10.4%2024-07-16Fix
CVE-2024-6492Devolutions Remote Desktop Manager edge browser session proxy feature information disclosure7.4CISA ADP v3.10.6%2024-07-16Fix
CVE-2024-6457HUSKY WordPress plugin SQL injection7.5NVD v3.119.7%2024-07-16Fix
CVE-2024-6435Rockwell Automation privilege escalation vulnerability in Pavilion8®8.7CNA v4.00.5%2024-07-16Fix
CVE-2024-6395GitHub Enterprise Server information disclosure vulnerability exposes Private Repository Names6.3CNA v4.00.5%2024-07-16Fix
CVE-2024-6336GitHub Enterprise Server organization ruleset feature information disclosure6.9CNA v4.00.4%2024-07-16Fix
CVE-2024-6326Rockwell Automation Unsecured Private Keys in FactoryTalk® System Services1.8CNA v4.00.2%2024-07-16Fix
CVE-2024-6325Rockwell Automation Unsecured Private Keys in FactoryTalk® System Services6.0CNA v4.00.3%2024-07-16Fix
CVE-2024-6089Rockwell Automation Major nonrecoverable fault in 5015 AENFTXT8.7CNA v4.02.1%2024-07-16Fix
CVE-2024-5852WordPress File Upload plugin authenticated (Contributor+) directory traversal4.3CNA v3.10.7%2024-07-16Fix
CVE-2024-5817Improper authorization allows read access to issue content in GitHub Enterprise Server5.9CNA v4.00.5%2024-07-16Fix
CVE-2024-5816Improper authorization allows persistent access in GitHub Enterprise Server6.9CNA v4.00.5%2024-07-16Fix
CVE-2024-5815GitHub Enterprise Server A cross-site request forgery6.8CNA v4.00.3%2024-07-16Fix
CVE-2024-5795GitHub Enterprise Server Git server denial of service7.7CNA v3.10.6%2024-07-16Fix
CVE-2024-5566GitHub Enterprise Server repository migration improper privilege management5.8CNA v3.10.5%2024-07-16Fix
CVE-2024-5500Google Chrome Sign-In inappropriate implementation6.5v3.10.3%2024-07-16Fix
CVE-2024-4780Image Hover Effects Elementor Addon WordPress plugin stored cross-site scripting6.4CNA v3.10.5%2024-07-16Fix
CVE-2024-3779Denial of service in ESET products for Windows6.1CNA v3.10.2%2024-07-16Fix
CVE-2024-3587Premium Portfolio Features for Phlox WordPress plugin stored cross-site scripting5.4v3.10.4%2024-07-16Fix
CVE-2024-3232Tenable Identity Exposure formula injection7.6CNA v3.10.5%2024-07-16
CVE-2024-3176Google Chrome SwiftShader out-of-bounds write8.8v3.10.3%2024-07-16Fix
CVE-2024-3175Google Chrome extensions improper input validation6.3NVD v3.10.2%2024-07-16Fix
CVE-2024-3174Google Chrome V8 inappropriate implementation8.8v3.10.4%2024-07-16Fix
CVE-2024-3173Google Chrome Updater improper input validation8.8v3.10.2%2024-07-16Fix
CVE-2024-3172Google Chrome DevTools improper input validation8.8v3.10.4%2024-07-16Fix
CVE-2024-3171Google Chrome Accessibility use-after-free8.8v3.10.3%2024-07-16Fix
CVE-2024-3170Google Chrome WebRTC use-after-free8.8v3.10.3%2024-07-16Fix
CVE-2024-3169Google Chrome V8 use-after-free8.8v3.10.3%2024-07-16Fix
CVE-2024-3168Google Chrome DevTools use-after-free8.8v3.10.3%2024-07-16Fix
CVE-2024-2884Google Chrome V8 out-of-bounds read6.5v3.10.2%2024-07-16Fix
CVE-2024-2691WP Event Manager WordPress plugin stored cross-site scripting5.4v3.10.3%2024-07-16Fix
CVE-2024-1937Brizy Page Builder WordPress plugin missing authorization authenticated post modification6.5NVD v3.10.4%2024-07-16Fix
CVE-2024-41007Linux kernel TCP retransmission timer vulnerability7.5CNA v3.10.8%2024-07-15Fix
CVE-2024-40632Linkerd potential access to the shutdown endpoint3.7CNA v3.10.4%2024-07-15Fix
CVE-2024-40631Cross-site scripting (XSS) in media embed element when using custom URL parsers in plate media8.1CNA v3.10.5%2024-07-15Fix
CVE-2024-40630HEIF heap OOB read in OpenImageIO4.3CNA v3.10.4%2024-07-15Fix
CVE-2024-40627busykoala fastapi-opa OpaMiddleware does not filter HTTP OPTIONS requests5.8CNA v3.10.6%2024-07-15Fix
CVE-2024-40624Deserialization of untrusted data in torrentpier/torrentpier9.8CNA v3.11.0%2024-07-15Fix
CVE-2024-40560Project Team Tmall Demo SQL injection7.3CISA ADP v3.10.3%2024-07-15
CVE-2024-40555Project Team Tmall Demo unrestricted file upload5.3CISA ADP v3.10.3%2024-07-15
CVE-2024-40554Project Team Tmall Demo Tmall_demo v2024.07.03 improper access control7.5CISA ADP v3.10.4%2024-07-15
CVE-2024-40553Project Team Tmall Demo unrestricted file upload4.9CISA ADP v3.10.3%2024-07-15
CVE-2024-40524xmind2testcase v.1.5 path traversal9.8CISA ADP v3.11.4%2024-07-15
CVE-2024-40416Tenda AX1806 stack-based buffer overflow9.8v3.10.6%2024-07-15Emerging Threats
CVE-2024-40415Tenda AX1806 buffer overflow9.8v3.10.5%2024-07-15
CVE-2024-40414Tenda AX1806 stack-based buffer overflow9.8v3.10.5%2024-07-15
CVE-2024-39919Capture screenshot of localhost web services (unauthenticated pages) in @jmondi/url-to-png3.1CNA v3.10.4%2024-07-15Fix
CVE-2024-39918Path Traveral in @jmondi/url-to-png4.3CNA v3.10.5%2024-07-15Fix
CVE-2024-39915Authenticated remote code execution in Thruk10.0CNA v3.10.6%2024-07-15Fix
CVE-2024-39912Enumeration of valid usernames in web-auth/webauthn-lib5.3CNA v3.10.4%2024-07-15Fix
CVE-2024-39827Zoom Workplace Desktop App for Windows improper input validation5.5CNA v3.10.2%2024-07-15Fix
CVE-2024-39826Zoom Workplace Apps and SDKs path traversal6.8CNA v3.10.4%2024-07-15Fix
CVE-2024-39821Zoom Workplace App for Windows and Zoom Rooms App for Windows race condition6.6CNA v3.10.1%2024-07-15Fix
CVE-2024-39820Zoom Workplace Desktop App for macOS uncontrolled search path element6.6CNA v3.10.2%2024-07-15Fix
CVE-2024-39819Zoom Workplace Apps and SDK for Windows improper privilege management6.7CNA v3.10.1%2024-07-15Fix
CVE-2024-39767Mattermost spoofed push notifications from malicious server4.2CNA v3.10.2%2024-07-15Fix
CVE-2024-39741IBM Datacap Navigator directory traversal4.3CNA v3.10.7%2024-07-15Fix
CVE-2024-39740IBM Datacap Navigator information disclosure4.3CNA v3.10.4%2024-07-15Fix
CVE-2024-39739IBM Datacap Navigator server-side request forgery5.4CNA v3.10.2%2024-07-15Fix
CVE-2024-39737IBM Datacap Navigator information disclosure5.4CNA v3.10.4%2024-07-15Fix
CVE-2024-39736IBM Datacap Navigator HTTP host header injection6.5CNA v3.10.4%2024-07-15Fix
CVE-2024-39735IBM Datacap Navigator cross-site scripting5.4CNA v3.10.3%2024-07-15Fix
CVE-2024-39731IBM Datacap Navigator information disclosure5.9CNA v3.10.3%2024-07-15Fix
CVE-2024-39729IBM Datacap Navigator information disclosure4.3CNA v3.10.4%2024-07-15Fix
CVE-2024-39728IBM Datacap Navigator cross-site scripting6.4CNA v3.10.3%2024-07-15Fix
CVE-2024-38496Symantec Privileged Access Manager insecure direct object reference5.1CNA v4.00.3%2024-07-15
CVE-2024-38495Symantec Privileged Access Manager User Enumeration vulnerability5.3CNA v4.00.3%2024-07-15
CVE-2024-38494Symantec Privileged Access Manager remote command execution8.6CNA v4.00.6%2024-07-15
CVE-2024-38493Symantec Privileged Access Manager reflected cross-site scripting6.8CNA v4.00.3%2024-07-15
CVE-2024-38492Symantec Privileged Access Manager remote command execution9.4CNA v4.00.9%2024-07-15
CVE-2024-38491Symantec Privileged Access Manager SQL injection8.4CNA v4.00.3%2024-07-15
CVE-2024-38360Denial of service via Watched Words in Discourse4.9CNA v3.10.5%2024-07-15Fix
CVE-2024-37386Stormshield Network Security secure boot single-user mode improper access control4.2CISA ADP v3.10.2%2024-07-15
CVE-2024-37016Mengshen Wireless Door Alarm M70 authentication bypass6.8CISA ADP v3.10.3%2024-07-15
CVE-2024-36458Symantec Privileged Access Manager privilege escalation5.1CNA v4.00.2%2024-07-15
CVE-2024-36457Symantec Privileged Access Manager authentication bypass5.3CNA v4.00.3%2024-07-15
CVE-2024-36456Symantec Privileged Access Manager remote command execution9.4CNA v4.00.9%2024-07-15
CVE-2024-36455Symantec Privileged Access Manager remote command execution9.4CNA v4.00.5%2024-07-15
CVE-2024-36438eLinkSmart Hidden Smart Cabinet Lock improper access control7.3CISA ADP v3.10.2%2024-07-15
CVE-2024-36434An SMM callout vulnerability was discovered in Supermicro X11DPH-T, X11DPH-Tq, and X11DPH-i motherboards with BIOS firmware before 4.4.7.5CNA v3.10.2%2024-07-15
CVE-2024-36433An arbitrary memory write vulnerability was discovered in Supermicro X11DPH-T, X11DPH-Tq, and X11DPH-i motherboards with BIOS firmware before 4.4.7.5CNA v3.10.2%2024-07-15
CVE-2024-36432An arbitrary memory write vulnerability was discovered in Supermicro X11DPG-HGX2, X11PDG-QT, X11PDG-OT, and X11PDG-SN motherboards with BIOS firmware before 4.4.7.5CNA v3.10.2%2024-07-15
CVE-2024-32945Mattermost LaTeX post content manipulation via renderer state leak across contexts2.6CNA v3.10.2%2024-07-15Fix
CVE-2024-31946Stormshield Network Security email alert preview vulnerability4.2CISA ADP v3.10.2%2024-07-15
CVE-2024-27241Zoom Apps and SDKs improper input validation5.3CNA v3.10.4%2024-07-15Fix
CVE-2024-27240Zoom Apps for Windows improper input validation7.1CNA v3.10.2%2024-07-15Fix
CVE-2024-27238Zoom Apps and SDKs race condition7.1CNA v3.10.1%2024-07-15Fix
CVE-2024-23794OTRS inline editing functionality incorrect privilege assignment5.2CNA v3.10.3%2024-07-15Fix
CVE-2024-21513langchain-experimental vulnerable to arbitrary code execution8.5v3.11.9%2024-07-15Exploit codeFix
CVE-2024-6746NaiboWang EasySpider HTTP GET request server.js path traversal8.8v3.13.3%2024-07-15Nuclei
CVE-2024-6745code-projects Simple Ticket Booking Login adminauthenticate.php SQL injection9.8v3.10.7%2024-07-15
CVE-2024-6744Cellopoint Secure Email Gateway stack-based buffer overflow9.8CNA v3.10.8%2024-07-15Fix
CVE-2024-6743AguardNet Space Management System SQL injection9.8CNA v3.10.7%2024-07-15Fix
CVE-2024-6742AguardNet Space Management System reflected cross-site scripting5.4CNA v3.10.3%2024-07-15Fix
CVE-2024-6741Openfind Mail2000 HttpOnly flag bypass5.3v3.10.6%2024-07-15Fix
CVE-2024-6740Openfind Mail2000 stored XSS6.1v3.10.5%2024-07-15Fix
CVE-2024-6739Openfind MailGates and MailAudit Sensitive Cookie without HttpOnly Flag6.1v3.10.4%2024-07-15Fix
CVE-2024-6738WisdomGarden Tronclass broken access control5.3CNA v3.10.5%2024-07-15Fix
CVE-2024-67372100 Technology Electronic Official Document Management System broken access control8.8CNA v3.10.6%2024-07-15Fix
CVE-2024-6736SourceCodester Employee and Visitor Gate Pass Logging System view_employee.php SQL injection8.8v3.10.5%2024-07-15
CVE-2024-6735itsourcecode Tailoring Management System setgeneral.php SQL injection8.8v3.10.6%2024-07-15
CVE-2024-6734itsourcecode Tailoring Management System templateadd.php SQL injection8.8v3.10.6%2024-07-15
CVE-2024-6689Local privilege escalation vulnerability in baramundi Management Agent via MSI Installer7.8CNA v3.10.2%2024-07-15Fix
CVE-2024-6540OTRS information exlosure in external interface5.7CNA v3.10.4%2024-07-15Fix
CVE-2024-6398Skyhigh Secure Web Gateway SWG in versions information disclosure4.3CNA v3.10.3%2024-07-15
CVE-2024-6345Remote code execution in pypa/setuptools8.8CNA v3.01.9%2024-07-15Fix
CVE-2024-6289WPS Hide Login WordPress plugin Hidden login page disclosure6.1NVD v3.10.9%2024-07-15NucleiFix
CVE-2024-6076WP eStore WordPress plugin reflected XSS in Category Editing6.1NVD v3.10.4%2024-07-15Fix
CVE-2024-6075WP eStore WordPress plugin Coupon deletion via CSRF8.8NVD v3.10.4%2024-07-15Fix
CVE-2024-6074Tips and Tricks HQ WP eStore customer editing page reflected cross-site scripting6.1NVD v3.10.3%2024-07-15Fix
CVE-2024-6073WP eStore WordPress plugin reflected XSS in Discount Editing6.1NVD v3.10.3%2024-07-15Fix
CVE-2024-6072WP eStore WordPress plugin reflected XSS via $_SERVER['REQUEST_URI']6.1NVD v3.10.3%2024-07-15Fix
CVE-2024-5630Insert or Embed Articulate Content into WordPress plugin Author+ arbitrary file upload8.8NVD v3.10.7%2024-07-15Fix
CVE-2024-5402Mint WorkBench I unquoted service path Enumeration6.2CNA v4.00.2%2024-07-15Fix
CVE-2024-4224TP-Link TL-SG1016DE XSS5.4CISA ADP v3.10.3%2024-07-15Fix
CVE-2024-4143Certain HP PC products using AMI BIOS buffer overflow9.8CISA ADP v3.10.6%2024-07-15
CVE-2024-39734IBM Datacap Navigator information disclosure4.3CNA v3.10.2%2024-07-14Fix
CVE-2024-39733IBM Datacap Navigator information disclosure5.5CNA v3.10.1%2024-07-14Fix
CVE-2024-39732IBM Datacap Navigator information disclosure4.1CNA v3.10.2%2024-07-14Fix
CVE-2024-6733itsourcecode Tailoring Management System templateedit.php SQL injection8.8v3.10.6%2024-07-14
CVE-2024-6732SourceCodester Student Study Center Desk Management System Users.php SQL injection8.8v3.10.6%2024-07-14
CVE-2024-6731SourceCodester Student Study Center Desk Management System Master.php SQL injection8.8v3.10.6%2024-07-14
CVE-2024-6730Nanjing Xingyuantu Technology SparkShop uploadFile unrestricted upload5.3CNA v4.00.4%2024-07-14
CVE-2024-6729SourceCodester Kortex Lite Advocate Office Management System add_act.php SQL injection8.8v3.10.6%2024-07-14
CVE-2024-6728itsourcecode Tailoring Management System typeedit.php SQL injection9.8v3.10.6%2024-07-14
CVE-2024-6574Laposta WordPress plugin unauthenticated full path disclosure5.3CNA v3.10.4%2024-07-13
CVE-2024-6465WP Links Page WordPress plugin missing authorization authenticated limited Image update4.3CNA v3.10.4%2024-07-13Fix
CVE-2024-6070if-so WordPress plugin Admin+ stored XSS4.8CISA ADP v3.10.4%2024-07-13Fix
CVE-2024-5744WP eMember WordPress plugin reflected XSS6.8CISA ADP v3.10.4%2024-07-13Fix
CVE-2024-5715WP eMember WordPress plugin reflected XSS via Member Edit7.1CISA ADP v3.10.4%2024-07-13Fix
CVE-2024-5713if-so WordPress plugin reflected XSS5.4CISA ADP v3.10.4%2024-07-13Fix
CVE-2024-5644WordPress Plugin Tournamatch Admin+ stored XSS via Ladders5.4CISA ADP v3.10.4%2024-07-13Fix
CVE-2024-5627WordPress Plugin Tournamatch Subscriber+ stored XSS5.4CISA ADP v3.10.3%2024-07-13Fix
CVE-2024-5575Ditty WordPress plugin Author+ stored XSS4.7CISA ADP v3.10.4%2024-07-13Fix
CVE-2024-5472WP QuickLaTeX WordPress plugin Admin+ stored XSS in Background Color field7.1CISA ADP v3.10.4%2024-07-13Fix
CVE-2024-5450Bug Library WordPress plugin unauthenticated RCE9.1CISA ADP v3.10.8%2024-07-13Fix
CVE-2024-5442NextGEN Gallery WordPress plugin Admin+ stored XSS5.9CISA ADP v3.10.4%2024-07-13Fix
CVE-2024-5287WP Affiliate Platform WordPress plugin Profile update via CSRF7.1CISA ADP v3.10.2%2024-07-13Fix
CVE-2024-5286WP Affiliate Platform WordPress plugin reflected XSS via Banner Editing4.8CISA ADP v3.10.4%2024-07-13Fix
CVE-2024-5284WP Affiliate Platform WordPress plugin stored XSS via CSRF6.8CISA ADP v3.10.2%2024-07-13Fix
CVE-2024-5283WP Affiliate Platform WordPress plugin reflected XSS via Lead Editing6.1CISA ADP v3.10.4%2024-07-13Fix
CVE-2024-5282WP Affiliate Platform WordPress plugin reflected XSS via Registration form6.1CISA ADP v3.10.3%2024-07-13Fix
CVE-2024-5281WP Affiliate Platform WordPress plugin reflected XSS via Affiliate Editing6.1CISA ADP v3.10.4%2024-07-13Fix
CVE-2024-5280WP Affiliate Platform WordPress plugin POST reflected XSS4.7CISA ADP v3.10.2%2024-07-13Fix
CVE-2024-5167Cminds CM Email Registration Blacklist and Whitelist cross-site request forgery8.1CISA ADP v3.10.3%2024-07-13Fix
CVE-2024-5151SULly WordPress plugin Admin+ stored XSS7.1CISA ADP v3.10.4%2024-07-13Fix
CVE-2024-5080WP eMember WordPress plugin Admin+ arbitrary file upload8.8CISA ADP v3.10.7%2024-07-13Fix
CVE-2024-5079WP eMember WordPress plugin unauthenticated stored XSS via Member Registration6.1CISA ADP v3.10.4%2024-07-13Fix
CVE-2024-5077WP eMember WordPress plugin stored XSS in Blacklist via CSRF6.8CISA ADP v3.10.2%2024-07-13Fix
CVE-2024-5076WP eMember WordPress plugin Bulk delete via CSRF8.8CISA ADP v3.10.3%2024-07-13Fix
CVE-2024-5075WP eMember WordPress plugin reflected XSS5.9CISA ADP v3.10.3%2024-07-13Fix
CVE-2024-5074WP eMember WordPress plugin reflected XSS5.4CISA ADP v3.10.4%2024-07-13Fix
CVE-2024-5034SULly WordPress plugin plugin reset via CSRF8.8CISA ADP v3.10.4%2024-07-13Fix
CVE-2024-5033SULly WordPress plugin Admin+ stored XSS via CSRF5.9CISA ADP v3.10.2%2024-07-13Fix
CVE-2024-5032SULly WordPress plugin reflected XSS4.7CISA ADP v3.10.5%2024-07-13Fix
CVE-2024-5028CM WordPress Search And Replace plugin plugin reset via CSRF6.5CISA ADP v3.10.2%2024-07-13Fix
CVE-2024-5002User Submitted Posts WordPress plugin Admin+ stored XSS4.8CISA ADP v3.10.4%2024-07-13Fix
CVE-2024-4977Index WP MySQL For Speed WordPress plugin Admin+ reflected XSS6.8CISA ADP v3.10.5%2024-07-13Fix
CVE-2024-4752EventON for WordPress Admin+ stored cross-site scripting via event subtitle5.9CISA ADP v3.10.4%2024-07-13Fix
CVE-2024-4602Embed Peertube Playlist WordPress plugin Editor+ stored XSS5.4CISA ADP v3.10.4%2024-07-13Fix
CVE-2024-4272Support SVG WordPress plugin stored XSS via SVG upload6.1CISA ADP v3.10.4%2024-07-13Fix
CVE-2024-4269SVG Block WordPress plugin Author+ stored XSS via SVG file upload6.1CISA ADP v3.10.4%2024-07-13Fix
CVE-2024-4217Shortcodes Ultimate Pro WordPress plugin Contributor+ stored cross-site scripting XSS4.7CISA ADP v3.10.5%2024-07-13Fix
CVE-2024-3964Product Enquiry for WooCommerce WordPress plugin Admin+ stored XSS5.9CISA ADP v3.10.5%2024-07-13Fix
CVE-2024-3963RafflePress Lite WordPress plugin Editor+ stored XSS6.5CISA ADP v3.10.5%2024-07-13Fix
CVE-2024-3919OpenPGP Form Encryption for WordPress plugin Contributor+ stored XSS4.6CISA ADP v3.10.3%2024-07-13Fix
CVE-2024-3753Hostel WordPress plugin reflected XSS5.9CISA ADP v3.10.8%2024-07-13NucleiFix
CVE-2024-3751Seriously Simple Podcasting WordPress plugin Admin+ stored XSS4.8CISA ADP v3.10.5%2024-07-13Fix
CVE-2024-3710Image Photo Gallery Final Tiles Grid WordPress plugin Contributor+ stored XSS6.8CISA ADP v3.10.5%2024-07-13Fix
CVE-2024-3632Smart Image Gallery WordPress plugin Update/Delete Google API Key via CSRF6.8CISA ADP v3.10.3%2024-07-13Fix
CVE-2024-3026WordPress Button Plugin MaxButtons Editor+ stored XSS5.4CISA ADP v3.10.5%2024-07-13Fix
CVE-2024-2870Swift Framework WordPress plugin reflected XSS6.1CISA ADP v3.10.4%2024-07-13Fix
CVE-2024-41006Linux kernel NetRom protocol memory leak5.5NVD v3.10.2%2024-07-12Fix
CVE-2024-41005Linux kernel netpoll race condition4.7NVD v3.10.2%2024-07-12Fix
CVE-2024-41004Linux kernel kprobe event generation self-tests vulnerability5.5NVD v3.10.3%2024-07-12Fix
CVE-2024-41003Linux kernel BPF verifier out-of-bounds write7.8CNA v3.10.3%2024-07-12Fix
CVE-2024-41002Linux kernel SEC crypto driver memory leak5.5v3.10.3%2024-07-12Fix
CVE-2024-41001Linux kernel io_uring SQPOLL connect handling memory leak5.5v3.10.3%2024-07-12Fix
CVE-2024-41000Linux kernel block device ioctl integer overflow7.8NVD v3.10.3%2024-07-12Fix
CVE-2024-40999Linux kernel ENA driver RX completion descriptors vulnerability9.8CNA v3.10.6%2024-07-12Fix
CVE-2024-40998Linux kernel ext4 superblock ratelimit state vulnerability5.5v3.10.3%2024-07-12Fix
CVE-2024-40997Linux kernel amd-pstate driver EPP exit memory leak5.5v3.10.3%2024-07-12Fix
CVE-2024-40996In the Linux kernel, the following vulnerability has been resolved: bpf: Avoid splat in pskb_pull_reason syzkaller builds (CONFIG_DEBUG_NET=y) frequently trigger a debug hint in pskb_may_pull. We'd like to retain this debug check because it might hint at integer overflows and other issues (kernel7.8v3.10.3%2024-07-12Fix
CVE-2024-40995Linux kernel act_api infinite loop5.5NVD v3.10.3%2024-07-12Fix
CVE-2024-40994Linux kernel PTP virtual clocks integer overflow7.8v3.10.3%2024-07-12Fix
CVE-2024-40993Linux kernel ipset netfilter subsystem vulnerability5.5NVD v3.10.3%2024-07-12Fix
CVE-2024-40992Linux kernel RXE UD packet handling vulnerability7.5CNA v3.10.6%2024-07-12Fix
CVE-2024-40991Linux kernel TI K3 UDMA glue layer vulnerability7.8CNA v3.10.2%2024-07-12Fix
CVE-2024-40990In the Linux kernel, the following vulnerability has been resolved: RDMA/mlx5: Add check for srq max_sge attribute max_sge attribute is passed by the user, and is inserted and used unchecked, so verify that the value doesn't exceed maximum allowed value before using it.7.8CNA v3.10.3%2024-07-12Fix
CVE-2024-40989Linux kernel arm64 use-after-free7.8CNA v3.10.3%2024-07-12Fix
CVE-2024-40988Linux kernel radeon kv_dpm driver vulnerability5.5v3.10.3%2024-07-12Fix
CVE-2024-40987Linux kernel amdgpu kv_dpm driver out-of-bounds write5.5v3.10.3%2024-07-12Fix
CVE-2024-40986Linux kernel Xilinx XDMA driver vulnerability7.8CNA v3.10.2%2024-07-12Fix
CVE-2024-40985In the Linux kernel, the following vulnerability has been resolved: net/tcp_ao: Don't leak ao_info on error-path It seems I introduced it together with TCP_AO_CMDF_AO_REQUIRED, on version 5 [1] of TCP-AO patches. Quite frustrative that having all these selftests that I've written, running kmemtest5.5v3.10.2%2024-07-12Fix
CVE-2024-40984Linux kernel ACPICA operation region mapping null pointer dereference7.8CNA v3.10.3%2024-07-12Fix
CVE-2024-40983Linux kernel TIPC decryption path vulnerability9.8CNA v3.10.9%2024-07-12Fix
CVE-2024-40981Linux kernel batman-adv improper locking5.5v3.10.2%2024-07-12Fix
CVE-2024-40980Linux kernel drop monitor improper locking7.5CNA v3.10.8%2024-07-12Fix
CVE-2024-40979Linux kernel ath12k Wi-Fi driver memory leak7.8CNA v3.10.3%2024-07-12Fix
CVE-2024-40978Linux kernel qedi driver debugfs interface out-of-bounds read7.1NVD v3.10.3%2024-07-12Fix
CVE-2024-40977Linux kernel mt7921s Wi-Fi driver deadlock5.5v3.10.2%2024-07-12Fix
CVE-2024-40976Linux kernel Lima GPU driver race condition5.5v3.10.2%2024-07-12Fix
CVE-2024-40975Linux kernel x86-android-tablets platform driver vulnerability5.5v3.10.3%2024-07-12Fix
CVE-2024-40974Linux kernel powerpc pseries hcall interface out-of-bounds write7.8CNA v3.10.3%2024-07-12Fix
CVE-2024-40973Linux kernel mtk-vcodec SCP driver null pointer dereference5.5v3.10.3%2024-07-12Fix
CVE-2024-40972Linux kernel ext4 deadlock5.5v3.10.2%2024-07-12Fix
CVE-2024-40971Linux kernel f2fs remount option handling vulnerability7.3CNA v3.10.3%2024-07-12Fix
CVE-2024-40970Linux kernel dw-axi-dmac driver vulnerability7.8CNA v3.10.3%2024-07-12Fix
CVE-2024-40969Linux kernel f2fs shutdown handling deadlock5.5v3.10.2%2024-07-12Fix
CVE-2024-40968Linux kernel MIPS Octeon PCIe driver improper check for exceptional conditions5.5v3.10.3%2024-07-12Fix
CVE-2024-40967Linux kernel imx serial driver deadlock5.5v3.10.2%2024-07-12Fix
CVE-2024-40966In the Linux kernel, the following vulnerability has been resolved: tty: add the option to have a tty reject a new ldisc ... and use it to limit the virtual terminals to just N_TTY. They are kind of special, and in particular, the "con_write()" routine violates the "writes cannot sleep" rule that5.5v3.10.3%2024-07-12Fix
CVE-2024-40965Linux kernel i2c lpi2c driver deadlock5.5v3.10.2%2024-07-12Fix
CVE-2024-40964Linux kernel ALSA cs35l41 HDA codec driver null pointer dereference5.5v3.10.3%2024-07-12Fix
CVE-2024-40963Linux kernel MIPS BCM6358 CBR setup improper check for exceptional conditions5.5v3.10.3%2024-07-12Fix
CVE-2024-40962Linux kernel Btrfs zoned device writes null pointer dereference5.5v3.10.2%2024-07-12Fix
CVE-2024-40961Linux kernel ipv6 null pointer dereference5.5NVD v3.10.3%2024-07-12Fix
CVE-2024-40960Linux kernel ipv6 null pointer dereference5.5NVD v3.10.3%2024-07-12Fix
CVE-2024-40959Linux kernel xfrm6 source address selection null pointer dereference5.5NVD v3.10.3%2024-07-12Fix
CVE-2024-40958Linux kernel netns use-after-free7.8CNA v3.10.3%2024-07-12Fix
CVE-2024-40957Linux kernel seg6 End.DX4 and End.DX6 handling null pointer dereference7.5CNA v3.10.7%2024-07-12Fix
CVE-2024-40956Linux kernel idxd use-after-free7.8CNA v3.10.3%2024-07-12Fix
CVE-2024-40955Linux kernel ext4 multiblock allocator out-of-bounds write5.5v3.10.2%2024-07-12Fix
CVE-2024-40954Linux kernel socket creation use-after-free7.8CNA v3.10.3%2024-07-12Fix
CVE-2024-40953Linux kernel KVM vCPU boosting race condition7.9CNA v3.10.2%2024-07-12Fix
CVE-2024-40952Linux kernel OCFS2 journal null pointer dereference5.5v3.10.2%2024-07-12Fix
CVE-2024-40951Linux kernel OCFS2 journal trigger null pointer dereference5.5v3.10.2%2024-07-12Fix
CVE-2024-40950Linux kernel huge page splitting for anonymous folios vulnerability5.5v3.10.2%2024-07-12Fix
CVE-2024-40949Linux kernel shmem folio swap-in lruvec handling denial of service7.8CNA v3.10.2%2024-07-12Fix
CVE-2024-40948Linux kernel page table check for ZONE_DEVICE pages denial of service5.5v3.10.2%2024-07-12Fix
CVE-2024-40947Linux kernel IMA policy matching null pointer dereference7.8CNA v3.10.3%2024-07-12Fix
CVE-2024-40945Linux kernel iommu null pointer dereference5.5NVD v3.10.3%2024-07-12Fix
CVE-2024-40944Linux kernel x86 kexec call depth tracking vulnerability5.5v3.10.2%2024-07-12Fix
CVE-2024-40943Linux kernel OCFS2 hole punching and direct I/O race condition7.8CNA v3.10.2%2024-07-12Fix
CVE-2024-40942Linux kernel mac80211 mesh path discovery memory leak5.5NVD v3.10.3%2024-07-12Fix
CVE-2024-40941Linux kernel iwlwifi mfuart notification handling vulnerability8.1CNA v3.10.4%2024-07-12Fix
CVE-2024-40940Linux kernel mlx5 LAG flow rule creation double free7.8v3.10.3%2024-07-12Fix
CVE-2024-40939Linux kernel iosm WWAN driver use-after-free7.8v3.10.3%2024-07-12Fix
CVE-2024-40938Linux kernel Landlock security module path walk denial of service5.5v3.10.3%2024-07-12Fix
CVE-2024-40937In the Linux kernel, the following vulnerability has been resolved: gve: Clear napi->skb before dev_kfree_skb_any() gve_rx_free_skb incorrectly leaves napi->skb referencing an skb after it is freed with dev_kfree_skb_any(). This can result in a subsequent call to napi_get_frags returning a danglin9.8CNA v3.10.7%2024-07-12Fix
CVE-2024-40936Linux kernel CXL region driver memory leak5.5v3.10.2%2024-07-12Fix
CVE-2024-40935Linux kernel cachefiles on-demand read requests use-after-free7.8v3.10.3%2024-07-12Fix
CVE-2024-40934Linux kernel Logitech DJ HID receiver driver memory leak5.5NVD v3.10.3%2024-07-12Fix
CVE-2024-40933Linux kernel mlx90635 temperature sensor driver vulnerability5.5v3.10.2%2024-07-12Fix
CVE-2024-40932Linux kernel Exynos VIDI display driver memory leak5.5v3.10.3%2024-07-12Fix
CVE-2024-40931Linux kernel MPTCP connection setup vulnerability5.5v3.10.3%2024-07-12Fix
CVE-2024-40930Linux kernel cfg80211 HE operation element parsing vulnerability7.1CNA v3.10.2%2024-07-12Fix
CVE-2024-40929Linux kernel iwlwifi Wi-Fi driver out-of-bounds read7.1CNA v3.10.4%2024-07-12Fix
CVE-2024-40928Linux kernel ethtool PHY statistics null pointer dereference5.5v3.10.2%2024-07-12Fix
CVE-2024-40927Linux kernel xHCI USB host controller driver use-after-free7.8v3.10.3%2024-07-12Fix
CVE-2024-40926Linux kernel nouveau display driver hotplug handling vulnerability5.5v3.10.2%2024-07-12Fix
CVE-2024-40925Linux kernel block layer flush state machine vulnerability7.8CNA v3.10.3%2024-07-12Fix
CVE-2024-40924Linux kernel i915 DPT framebuffer mapping vulnerability7.8CNA v3.10.3%2024-07-12Fix
CVE-2024-40923Linux kernel vmxnet3 RX data ring handling vulnerability9.8CNA v3.10.8%2024-07-12Fix
CVE-2024-40922Linux kernel io_uring resource quiesce handling improper locking5.5v3.10.2%2024-07-12Fix
CVE-2024-40921Linux kernel bridge MST VLAN group handling vulnerability5.5v3.10.3%2024-07-12Fix
CVE-2024-40920Linux kernel bridge MST VLAN state handling use-after-free7.1CNA v3.10.4%2024-07-12Fix
CVE-2024-40919Linux kernel bnxt_en firmware message logging null pointer dereference5.5v3.10.3%2024-07-12Fix
CVE-2024-40918Linux kernel PA-RISC cache flushing memory corruption7.8CNA v3.10.3%2024-07-12Fix
CVE-2024-40917Linux kernel memblock NUMA node assignment vulnerability5.5v3.10.3%2024-07-12Fix
CVE-2024-40916Linux kernel Exynos HDMI driver EDID fallback vulnerability5.5NVD v3.10.3%2024-07-12Fix
CVE-2024-40915Linux kernel RISC-V kernel page mapping debug code improper locking5.5v3.10.2%2024-07-12Fix
CVE-2024-40914Linux kernel transparent huge page zero folio handling denial of service5.5v3.10.3%2024-07-12Fix
CVE-2024-40913Linux kernel cachefiles anonymous file descriptor handling use-after-free7.8v3.10.3%2024-07-12Fix
CVE-2024-40912Linux kernel mac80211 power-save wakeup handling deadlock5.5NVD v3.10.2%2024-07-12Fix
CVE-2024-40911Linux kernel cfg80211 station info retrieval null pointer dereference8.8CNA v3.10.4%2024-07-12Fix
CVE-2024-40910Linux kernel AX.25 socket refcounting use-after-free8.8CNA v3.10.4%2024-07-12Fix
CVE-2024-40909Linux kernel BPF link teardown use-after-free7.8CNA v3.10.3%2024-07-12Fix
CVE-2024-40908Linux kernel BPF rawtp test_run callback vulnerability5.5v3.10.3%2024-07-12Fix
CVE-2024-40907Linux kernel ionic driver XDP_TX path use-after-free9.8CNA v3.10.6%2024-07-12Fix
CVE-2024-40906Linux kernel mlx5 driver health monitor use-after-free7.8v3.10.3%2024-07-12Fix
CVE-2024-40905Linux kernel ipv6 null pointer dereference4.7NVD v3.10.3%2024-07-12Fix
CVE-2024-40904Linux kernel cdc-wdm USB driver denial of service5.5v3.10.3%2024-07-12Fix
CVE-2024-40903Linux kernel USB Type-C port manager use-after-free7.8v3.10.3%2024-07-12Fix
CVE-2024-40902Linux kernel xattr buffer overflow7.8CNA v3.10.3%2024-07-12Fix
CVE-2024-40901Linux kernel mpt3sas driver device bitmap out-of-bounds write7.3CNA v3.10.3%2024-07-12Fix
CVE-2024-40900Linux kernel cachefiles on-demand read requests use-after-free7.8CNA v3.10.3%2024-07-12Fix
CVE-2024-40899Linux kernel cachefiles on-demand read use-after-free7.8v3.10.3%2024-07-12Fix
CVE-2024-40690IBM InfoSphere Server cross-site scripting5.4CNA v3.10.2%2024-07-12Fix
CVE-2024-40552PublicCMS code injection8.8v3.10.7%2024-07-12
CVE-2024-40551PublicCMS component /admin/cmsTemplate/doUpload arbitrary file upload8.8v3.10.4%2024-07-12
CVE-2024-40550PublicCMS An arbitrary file upload8.8v3.11.0%2024-07-12
CVE-2024-40549PublicCMS component /admin/cmsTemplate/savePlace arbitrary file upload8.8v3.10.7%2024-07-12
CVE-2024-40548PublicCMS component /admin/cmsTemplate/save arbitrary file upload8.8v3.10.7%2024-07-12
CVE-2024-40547PublicCMS improper access control6.5v3.10.3%2024-07-12
CVE-2024-40546PublicCMS component /admin/cmsWebFile/save arbitrary file upload8.8v3.10.7%2024-07-12
CVE-2024-40545PublicCMS component /admin/cmsWebFile/doUpload arbitrary file upload8.8v3.10.7%2024-07-12
CVE-2024-40544PublicCMS server-side request forgery8.8v3.10.5%2024-07-12
CVE-2024-40543PublicCMS server-side request forgery8.8v3.10.3%2024-07-12
CVE-2024-40542Codermy my-springsecurity-plus SQL injection9.8v3.10.4%2024-07-12
CVE-2024-40541Codermy my-springsecurity-plus SQL injection9.8v3.10.4%2024-07-12
CVE-2024-40540Codermy my-springsecurity-plus SQL injection9.8v3.10.5%2024-07-12
CVE-2024-40539Codermy my-springsecurity-plus SQL injection9.8v3.10.5%2024-07-12
CVE-2024-40522Seacms There is a remote code execution8.8v3.11.2%2024-07-12
CVE-2024-40521Seacms code injection8.8v3.11.3%2024-07-12
CVE-2024-40520Seacms arbitrary command execution8.8v3.11.1%2024-07-12
CVE-2024-40519Seacms arbitrary command execution8.8v3.11.1%2024-07-12
CVE-2024-40518Seacms arbitrary command execution8.8v3.11.2%2024-07-12
CVE-2024-40110Nikhil-bhalerao Poultry Farm Management System command injection9.8CISA ADP v3.11.9%2024-07-12Exploit code
CVE-2024-39917xrdp allows an ininite number of login attempts7.2CNA v3.10.6%2024-07-12Fix
CVE-2024-39916fogproject NFS server misconfiguration allows file access outside the exported directory6.4CNA v3.10.3%2024-07-12Fix
CVE-2024-39914fogproject FOG has a command injection in /fog/management/export.php?filename=9.8CNA v3.123.2%2024-07-12NucleiExploit codeFix
CVE-2024-39909SQL injection in the KubeClarity REST API6.5CNA v3.10.4%2024-07-12Fix
CVE-2024-39903Local file inclusion in Solara8.6CNA v3.12.9%2024-07-12NucleiFix
CVE-2024-39510Linux kernel cachefiles on-demand read use-after-free7.8v3.10.3%2024-07-12Fix
CVE-2024-39509Linux kernel HID report implement function reachable assertion5.5NVD v3.10.3%2024-07-12Fix
CVE-2024-39508Linux kernel io_uring/io-wq race condition7.8CNA v3.10.2%2024-07-12Fix
CVE-2024-39507Linux kernel HNS3 Ethernet driver vulnerability7.0CNA v3.10.3%2024-07-12Fix
CVE-2024-39506Linux kernel LiquidIO VF representor driver null pointer dereference5.5v3.10.3%2024-07-12Fix
CVE-2024-39505Linux kernel Komeda display driver null pointer dereference5.5v3.10.3%2024-07-12Fix
CVE-2024-39504Linux kernel netfilter nft_inner expression null pointer dereference5.5v3.10.3%2024-07-12Fix
CVE-2024-39503Linux kernel netfilter ipset list:set type use-after-free7.8CNA v3.10.2%2024-07-12Fix
CVE-2024-39502Linux kernel ionic Ethernet driver use-after-free7.8CNA v3.10.3%2024-07-12Fix
CVE-2024-39500Linux kernel sock_map socket close handling race condition7.8CNA v3.10.2%2024-07-12Fix
CVE-2024-39499Linux kernel VMCI event delivery information disclosure7.1v3.10.3%2024-07-12Fix
CVE-2024-39498Linux kernel drm/mst null pointer dereference5.5v3.10.2%2024-07-12Fix
CVE-2024-39497Linux kernel DRM SHMEM helper mmap reachable assertion5.5v3.10.3%2024-07-12Fix
CVE-2024-39496Linux kernel Btrfs zoned device replace use-after-free7.8CNA v3.10.3%2024-07-12Fix
CVE-2024-39495Linux kernel Greybus interface release use-after-free7.8CNA v3.10.3%2024-07-12Fix
CVE-2024-39494Linux kernel IMA dentry name handling use-after-free7.8CNA v3.10.3%2024-07-12Fix
CVE-2024-39340Securepoint UTM OTP verification authentication bypass8.8CISA ADP v3.10.9%2024-07-12
CVE-2024-38736Realtyna Organic IDX WordPress plugin arbitrary file upload9.1CNA v3.10.5%2024-07-12Fix
CVE-2024-38735Event post WordPress plugin local file inclusion7.5CNA v3.10.5%2024-07-12Fix
CVE-2024-38734Import Spreadsheets from Microsoft Excel WordPress plugin arbitrary file upload9.1CNA v3.10.5%2024-07-12Fix
CVE-2024-38717Booking Ultra Pro Appointments Booking Calendar WordPress plugin local file inclusion7.1CNA v3.10.4%2024-07-12Fix
CVE-2024-38716Events Calendar for Google WordPress plugin local file inclusion6.5CNA v3.10.5%2024-07-12Fix
CVE-2024-38715ExS Widgets WordPress plugin local file inclusion6.5CNA v3.10.5%2024-07-12Fix
CVE-2024-38709GD Rating System WordPress plugin local file inclusion5.3CNA v3.10.5%2024-07-12Fix
CVE-2024-38706HT Mega WordPress plugin JSON path traversal8.8v3.10.7%2024-07-12Fix
CVE-2024-38704DynamicWebLab Team Manager path traversal6.5CNA v3.10.5%2024-07-12Fix
CVE-2024-38700WPCS WordPress Currency Switcher Professional plugin arbitrary shortcode execution vulnerability6.5CNA v3.10.3%2024-07-12Fix
CVE-2024-37941Internal Link Juicer: SEO Auto Linker for WordPress plugin cross-site request forgery (CSRF)4.3CNA v3.10.2%2024-07-12Fix
CVE-2024-37940Seraphinite Accelerator (Full, premium) WordPress plugin CSRF Leading to arbitrary file deletion7.4CNA v3.10.2%2024-07-12Fix
CVE-2024-37939Patricia Lite WordPress theme cross-site request forgery (CSRF)4.3CNA v3.10.2%2024-07-12
CVE-2024-37938SociallyViral WordPress theme cross-site request forgery (CSRF)4.3CNA v3.10.2%2024-07-12
CVE-2024-37933Woocommerce OpenPos WordPress plugin unauthenticated SQL injection9.3CNA v3.10.4%2024-07-12Fix
CVE-2024-37932Woocommerce OpenPos WordPress plugin unauthenticated arbitrary file deletion8.6CNA v3.10.6%2024-07-12Fix
CVE-2024-37928Jobmonster WordPress theme unauthenticated arbitrary file deletion8.6CNA v3.10.6%2024-07-12Fix
CVE-2024-37927Jobmonster WordPress theme unauthenticated privilege escalation9.8CNA v3.10.5%2024-07-12Fix
CVE-2024-37564PayPlus Payment Gateway WordPress plugin SQL injection8.5CNA v3.10.4%2024-07-12Fix
CVE-2024-37560WP User Switch WordPress plugin privilege escalation8.0CNA v3.10.4%2024-07-12
CVE-2024-37544Get Better Reviews for WooCommerce WordPress plugin broken access control4.3CNA v3.10.3%2024-07-12
CVE-2024-37405Rocket.Chat code injection6.5CNA v3.00.5%2024-07-12Fix
CVE-2024-37213AliExpress Dropshipping with AliNext Lite WordPress plugin CSRF to XSS7.1CNA v3.10.2%2024-07-12Fix
CVE-2024-37202BinaryCarpenter Custom Add To Cart Button for WooCommerce missing authorization6.5CNA v3.10.2%2024-07-12
CVE-2024-36522Apache Wicket: Remote code execution via XSLT injection9.8CISA ADP v3.12.1%2024-07-12Fix
CVE-2024-35773Comment Reply Email WordPress plugin CSRF to stored XSS7.1CNA v3.10.2%2024-07-12Fix
CVE-2024-31947StoneFly Storage Concentrator path traversal6.5v3.10.7%2024-07-12Fix
CVE-2024-30213StoneFly Storage Concentrator Ping URL command injection8.8CISA ADP v3.11.3%2024-07-12
CVE-2024-6677Citrix uberAgent privilege escalation7.3CNA v4.00.2%2024-07-12Fix
CVE-2024-6625WP Total Branding WordPress plugin stored cross-site scripting5.5CNA v3.10.4%2024-07-12Fix
CVE-2024-6588PowerPress Podcasting plugin by Blubrry WordPress plugin stored cross-site scripting6.4CNA v3.10.4%2024-07-12Fix
CVE-2024-6555WP Popups WordPress Popup builder plugin unauthenticated full path disclosure5.3CNA v3.10.9%2024-07-12NucleiFix
CVE-2024-6495Premium Addons for Elementor WordPress plugin stored DOM-based cross-site scripting5.4v3.10.3%2024-07-12Fix
CVE-2024-6396Arbitrary file overwrite and Data Exfiltration in aimhubio/aim9.8CNA v3.053.1%2024-07-12Nuclei
CVE-2024-6353Wallet for WooCommerce WordPress plugin authenticated (Subscriber+) SQL injection via search[value]6.5NVD v3.10.5%2024-07-12Fix
CVE-2024-6328MStore API Create Native Android and iOS Apps On The Cloud WordPress plugin authentication bypass9.8CNA v3.10.7%2024-07-12Fix
CVE-2024-6024ContentLock WordPress plugin Groups/Emails deletion via CSRF8.8CISA ADP v3.10.3%2024-07-12Fix
CVE-2024-6023ContentLock WordPress plugin email Adding via CSRF8.8NVD v3.10.3%2024-07-12Fix
CVE-2024-6022ContentLock WordPress plugin settings update via CSRF8.8NVD v3.10.3%2024-07-12Fix
CVE-2024-5902UserFeedback Lite WordPress plugin unauthenticated stored cross-site scripting via Name parameter6.1NVD v3.10.4%2024-07-12Fix
CVE-2024-5811Simple Video Directory WordPress plugin Contributor+ stored XSS5.4NVD v3.10.3%2024-07-12Fix
CVE-2024-5626Inline Related Posts WordPress plugin reflected XSS6.1NVD v3.10.4%2024-07-12Fix
CVE-2024-5325Form Vibes WordPress plugin authenticated (Subscriber+) SQL injection via fv_export_data6.5NVD v3.10.5%2024-07-12Fix
CVE-2024-4753WP Secure Maintenance WordPress plugin Admin+ stored XSS4.8NVD v3.10.3%2024-07-12Fix
CVE-2024-3112Quotes and Tips WordPress plugin Admin+ arbitrary file upload4.8NVD v3.10.4%2024-07-12Fix
CVE-2024-2696Swift Framework WordPress plugin Admin+ stored XSS via settings4.8CISA ADP v3.10.4%2024-07-12Fix
CVE-2024-2640Watu Quiz WordPress plugin Author+ stored XSS5.4NVD v3.10.4%2024-07-12Fix
CVE-2024-2430Website Content in Page or Post WordPress plugin Contributor+ stored cross-site scripting5.4NVD v3.10.3%2024-07-12Fix
CVE-2024-1375Event post WordPress plugin cross-site request forgery4.3CNA v3.10.2%2024-07-12
CVE-2024-0974Social Media Widget WordPress plugin Admin+ stored XSS4.8CISA ADP v3.10.3%2024-07-12Fix
CVE-2024-40618NAVER Whale browser cross-site scripting9.6CISA ADP v3.10.4%2024-07-11Fix
CVE-2024-39905Red-DiscordBot vulnerable to incorrect authorization in commands API5.3CNA v3.10.4%2024-07-11Fix
CVE-2024-39904Code execution vulnerability via local file path traversal in Vnote8.8CNA v3.10.7%2024-07-11Fix
CVE-2024-39553Juniper Networks Junos OS Evolved sampling service resource exposure6.9CNA v4.00.4%2024-07-11Fix
CVE-2024-39552Junos OS and Junos OS Evolved: Malformed BGP UPDATE causes RPD crash8.7CNA v4.00.6%2024-07-11Fix
CVE-2024-39551Juniper Networks Junos OS H.323 ALG resource exhaustion8.7CNA v4.00.5%2024-07-11Fix
CVE-2024-39550Juniper Networks Junos OS rtlogd process memory leak7.1CNA v4.00.3%2024-07-11Fix
CVE-2024-39549Junos OS and Junos OS Evolved: Receipt of malformed BGP path attributes leads to a memory leak8.7CNA v4.00.5%2024-07-11Fix
CVE-2024-39548Junos OS Evolved: Receipt of specific packets in the aftmand process will lead to a memory leak7.1CNA v4.00.5%2024-07-11Fix
CVE-2024-39546Junos OS Evolved: Local low-privilege user can gain root permissions leading to privilege escalation7.0CNA v4.00.2%2024-07-11Fix
CVE-2024-39545Juniper Networks Junos OS the IKE daemon improper check for exceptional conditions8.7CNA v4.00.5%2024-07-11Fix
CVE-2024-39543Junos OS and Junos OS Evolved: Receipt of a large RPKI-RTR PDU packet can cause rpd to crash7.1CNA v4.00.3%2024-07-11Fix
CVE-2024-39542Junos OS and Junos OS Evolved: A malformed CFM packet or specific transit traffic leads to FPC crash8.7CNA v4.00.5%2024-07-11Fix
CVE-2024-39541Junos OS and Junos OS Evolved: Inconsistent information in the TE database can lead to an rpd crash7.1CNA v4.00.3%2024-07-11Fix
CVE-2024-39540Junos OS: SRX Series, and MX Series with SPC3: Specific valid TCP traffic can cause a pfe crash8.7CNA v4.00.5%2024-07-11Fix
CVE-2024-39539Juniper Networks Junos OS A memory leak6.0CNA v4.00.2%2024-07-11Fix
CVE-2024-39538Juniper Networks Junos OS Evolved PFE management daemon buffer overflow7.1CNA v4.00.3%2024-07-11Fix
CVE-2024-39537Juniper Networks Junos OS Evolved improper channel restriction6.9CNA v4.00.3%2024-07-11Fix
CVE-2024-39536Junos OS and Junos OS Evolved: Flaps of BFD sessions with authentication cause a ppmd memory leak6.0CNA v4.00.2%2024-07-11Fix
CVE-2024-39535Juniper Networks Junos OS Evolved Packet Forwarding Engine improper check for exceptional conditions7.1CNA v4.00.3%2024-07-11Fix
CVE-2024-39533Juniper Networks Junos OS output firewall filter vulnerability6.9CNA v4.00.3%2024-07-11Fix
CVE-2024-39532Junos OS and Junos OS Evolved: Confidential information in logs can be accessed by another user6.3CNA v3.10.2%2024-07-11Fix
CVE-2024-39531Junos OS Evolved: ACX 7000 Series: Protocol specific DDoS configuration affects other protocols8.7CNA v4.00.4%2024-07-11Fix
CVE-2024-39530Juniper Networks Junos OS chassis management daemon improper check for exceptional conditions8.7CNA v4.00.5%2024-07-11Fix
CVE-2024-39529Juniper Networks Junos OS Packet Forwarding Engine format string8.7CNA v4.00.5%2024-07-11Fix
CVE-2024-39528Juniper Networks Junos OS Routing protocol daemon use-after-free6.0CNA v4.00.3%2024-07-11Fix
CVE-2024-39524Junos OS Evolved: CLI parameter processing issue allows privilege escalation8.5CNA v4.00.3%2024-07-11Fix
CVE-2024-39523Junos OS Evolved: CLI parameter processing issue allows privilege escalation8.5CNA v4.00.3%2024-07-11Fix
CVE-2024-39522Junos OS Evolved: CLI parameter processing issue allows privilege escalation8.5CNA v4.00.3%2024-07-11Fix
CVE-2024-39521Junos OS Evolved: CLI parameter processing issue allows privilege escalation8.5CNA v4.00.3%2024-07-11Fix
CVE-2024-39520Junos OS Evolved: CLI parameter processing issue allows privilege escalation8.5CNA v4.00.3%2024-07-11Fix
CVE-2024-39519Junos OS Evolved: ACX 7000 Series: Multicast traffic is looped in a multihoming EVPN MPLS scenario7.1CNA v4.00.2%2024-07-11Fix
CVE-2024-39317Wagtail regular expression denial of service via search query parsing6.5CNA v3.10.6%2024-07-11Fix
CVE-2024-38536Suricata HTTP/range: Null-ptr deref when http.memcap is reached7.5CNA v3.10.9%2024-07-11Fix
CVE-2024-38535Suricata http2: Oom from duplicate headers7.5CNA v3.11.2%2024-07-11Fix
CVE-2024-38534Suricata modbus: Txs without responses are never freed7.5CNA v3.10.9%2024-07-11Fix
CVE-2024-38433Nuvoton authentication bypass by primary weakness6.7v3.10.2%2024-07-11Fix
CVE-2024-37151Suricata defrag: IP ID reuse can lead to policy bypass5.3CNA v3.10.6%2024-07-11Fix
CVE-2024-36435Supermicro BMC firmware stack-based buffer overflow9.8CNA v3.11.3%2024-07-11Emerging Threats
CVE-2024-32753TYCO Illustra Pro Gen 4 JQuery version7.0CNA v4.00.4%2024-07-11
CVE-2024-28872ISC Stork incorrect TLS certificate validation can lead to escalated privileges8.9CNA v3.10.3%2024-07-11Fix
CVE-2024-23485Gallagher Controller 6000 and 7000 Aperio door lock control vulnerability4.6CNA v3.10.2%2024-07-11Fix
CVE-2024-23317Gallagher Controller 6000 and Controller 7000 external control of a file path6.3CNA v3.10.2%2024-07-11Fix
CVE-2024-23194Gallagher Command Centre log injection3.3CNA v3.10.1%2024-07-11Fix
CVE-2024-22387Gallagher Controller 6000 and Controller 7000 external control of critical state data6.8CNA v3.10.3%2024-07-11Fix
CVE-2024-22280VMSA-2024-0017: VMware Aria Automation updates address SQL-injection vulnerability8.5CNA v3.10.5%2024-07-11Fix
CVE-2024-6681witmy my-springsecurity-plus dept SQL injection9.8v3.10.5%2024-07-11
CVE-2024-6680witmy my-springsecurity-plus build SQL injection9.8v3.10.5%2024-07-11
CVE-2024-6679witmy my-springsecurity-plus role SQL injection9.8v3.10.6%2024-07-11
CVE-2024-6676witmy my-springsecurity-plus user SQL injection8.8v3.10.4%2024-07-11
CVE-2024-6666WP ERP WordPress plugin authenticated (Accounting Manager+) SQL injection via vendor_id8.8CNA v3.10.5%2024-07-11Fix
CVE-2024-6653code-projects Simple Task List Login loginForm.php SQL injection9.8v3.10.8%2024-07-11
CVE-2024-6624JSON API User WordPress plugin unauthenticated privilege escalation9.8CNA v3.12.9%2024-07-11Exploit codeFix
CVE-2024-6554Branda WordPress plugin information disclosure5.3CNA v3.10.5%2024-07-11Fix
CVE-2024-6528Schneider Electric Modicon Controllers M241/M251 cross-site scripting5.4CNA v3.10.3%2024-07-11Fix
CVE-2024-6485XSS in Bootstrap button component6.4CNA v3.10.5%2024-07-11Exploit codeFix
CVE-2024-6468Vault vulnerable to denial of service when setting a Proxy Protocol Behavior7.5CNA v3.10.5%2024-07-11Fix
CVE-2024-6447FULL WordPress plugin unauthenticated stored cross-site scripting via License Plan parameter7.2CNA v3.10.5%2024-07-11Fix
CVE-2024-6407Schneider Electric Wiser Home Controller WHC-5918A information disclosure9.8CNA v3.10.4%2024-07-11
CVE-2024-6397InstaWP Connect 1-click WP Staging and Migration WordPress plugin authentication bypass to admin9.8CNA v3.10.7%2024-07-11Fix
CVE-2024-6392Image Optimizer, Resizer and CDN Sirv WordPress plugin missing authorization plugin settings update5.4CNA v3.10.3%2024-07-11Fix
CVE-2024-6385Improper access control in GitLab9.6CNA v3.17.2%2024-07-11Fix
CVE-2024-6256Feeds for YouTube WordPress plugin DOM-based stored cross-site scripting5.4v3.10.4%2024-07-11Fix
CVE-2024-6210Duplicator WordPress plugin full path disclosure5.3CNA v3.10.6%2024-07-11Fix
CVE-2024-6138Secure Copy Content Protection WordPress plugin Admin+ stored XSS4.8NVD v3.10.4%2024-07-11Fix
CVE-2024-6035Stored XSS in gaizhenbiao/ChuanhuChatGPT6.1NVD v3.10.4%2024-07-11
CVE-2024-6026Slider by 10Web WordPress plugin Editor+ stored XSS5.4NVD v3.10.4%2024-07-11Fix
CVE-2024-6025Quiz and Survey Master WordPress plugin Contributor+ stored XSS5.4NVD v3.10.4%2024-07-11Fix
CVE-2024-5681Schneider Electric EcoStruxure Foxboro DCS Core Control Services improper input validation7.8CNA v3.10.2%2024-07-11Fix
CVE-2024-5680Schneider Electric EcoStruxure Foxboro DCS Core Control Services improper array index validation7.1CNA v3.10.1%2024-07-11Fix
CVE-2024-5679Schneider Electric EcoStruxure Foxboro DCS Core Control Services out-of-bounds write7.1CNA v3.10.1%2024-07-11Fix
CVE-2024-5470Improper access control in GitLab3.8CNA v3.10.3%2024-07-11Fix
CVE-2024-5444Bible Text WordPress plugin Contributor+ stored XSS5.4NVD v3.10.3%2024-07-11
CVE-2024-5257Improper access control in GitLab4.9CNA v3.10.4%2024-07-11Fix
CVE-2024-4655Ultimate Blocks WordPress plugin Contributor+ stored XSS5.4NVD v3.10.4%2024-07-11Fix
CVE-2024-2880Improper access control in GitLab2.7CNA v3.10.3%2024-07-11Fix
CVE-2024-2602Schneider Electric FoxRTU Station path traversal7.3CNA v3.10.3%2024-07-11Fix
CVE-2024-1845VikRentCar Car Rental Management System WordPress plugin cross-site request forgery8.8NVD v3.10.3%2024-07-11Fix
CVE-2024-0619Payflex Payment Gateway WordPress plugin missing authorization to order Status update5.3CNA v3.10.4%2024-07-11Fix
CVE-2024-40417Tenda AX1806 stack-based buffer overflow6.5CISA ADP v3.10.4%2024-07-10Emerging Threats
CVE-2024-40412Tenda AX12 stack-based buffer overflow6.8CISA ADP v3.10.3%2024-07-10
CVE-2024-40336idcCMS cross-site scripting6.1CISA ADP v3.10.4%2024-07-10
CVE-2024-40334idcCMS cross-site request forgery8.8v3.10.3%2024-07-10
CVE-2024-40333idcCMS cross-site scripting8.8CISA ADP v3.10.6%2024-07-10
CVE-2024-40332idcCMS cross-site request forgery8.8v3.10.2%2024-07-10
CVE-2024-40331idcCMS cross-site request forgery8.8CISA ADP v3.10.3%2024-07-10
CVE-2024-40329idcCMS cross-site request forgery8.8CISA ADP v3.10.3%2024-07-10
CVE-2024-40328idcCMS cross-site request forgery6.3CISA ADP v3.10.2%2024-07-10
CVE-2024-39927Ricoh IM C3510/C3010 out-of-bounds write8.2CISA ADP v3.10.6%2024-07-10
CVE-2024-39886DREAM TRAIN INTERNET TONE store App man-in-the-middle3.7CISA ADP v3.10.3%2024-07-10
CVE-2024-39693Next.js denial of service (DoS) condition7.5CNA v3.10.5%2024-07-10Fix
CVE-2024-39614Django vulnerable to denial of service7.5CISA ADP v3.128.6%2024-07-10Exploit codeFix
CVE-2024-39565Juniper Networks Junos OS J-Web XPath injection7.7CNA v4.00.5%2024-07-10Fix
CVE-2024-39562Junos OS Evolved: A high rate of SSH connections causes a denial of service8.7CNA v4.00.4%2024-07-10Fix
CVE-2024-39561Juniper Networks Junos OS flow daemon improper check for exceptional conditions6.9CNA v4.00.3%2024-07-10Fix
CVE-2024-39560Juniper Networks Junos OS routing protocol daemon improper exception handling7.1CNA v4.00.2%2024-07-10Fix
CVE-2024-39559Juniper Networks Junos OS Evolved packet processing improper check for exceptional conditions8.2CNA v4.00.4%2024-07-10Fix
CVE-2024-39558Juniper Networks Junos OS Routing protocol daemon unchecked return value7.1CNA v4.00.3%2024-07-10Fix
CVE-2024-39557Junos OS Evolved: MAC table changes cause a memory leak7.1CNA v4.00.2%2024-07-10Fix
CVE-2024-39556Juniper Networks Junos OS Evolved stack-based buffer overflow7.1CNA v4.00.1%2024-07-10Fix
CVE-2024-39555Juniper Networks Junos OS Routing protocol daemon improper exception handling8.7CNA v4.00.5%2024-07-10Fix
CVE-2024-39554Junos OS and Junos OS Evolved: BGP multipath incremental calculation is resulting in an rpd crash8.2CNA v4.00.4%2024-07-10Fix
CVE-2024-39518Juniper Networks Junos OS telemetry sensor process heap-based buffer overflow8.7CNA v4.00.4%2024-07-10Fix
CVE-2024-39517Juniper Networks Junos OS Layer improper check for exceptional conditions7.1CNA v4.00.2%2024-07-10Fix
CVE-2024-39514Juniper Networks Junos OS Routing protocol daemon improper exception handling7.1CNA v4.00.2%2024-07-10Fix
CVE-2024-39513Junos OS Evolved: Execution of a specific CLI command will cause a crash in the AFT manager6.8CNA v4.00.1%2024-07-10Fix
CVE-2024-39512Junos OS Evolved: User is not logged out when the console cable is disconnected7.0CNA v4.00.2%2024-07-10Fix
CVE-2024-39511Junos OS: The 802.1X Authentication daemon crashes on running a specific command6.8CNA v4.00.1%2024-07-10Fix
CVE-2024-39493Linux kernel QAT device reset synchronization memory leak5.5NVD v3.10.2%2024-07-10Fix
CVE-2024-39492Linux kernel mtk-cmdq mailbox driver unchecked return value7.0CISA ADP v3.10.2%2024-07-10Fix
CVE-2024-39491Linux kernel cs35l56 HDA codec DSP driver vulnerability5.5v3.10.2%2024-07-10Fix
CVE-2024-39490Linux kernel sr memory leak6.2CISA ADP v3.10.2%2024-07-10Fix
CVE-2024-39489Linux kernel IPv6 segment routing HMAC init memory leak5.5NVD v3.10.2%2024-07-10Fix
CVE-2024-39488Linux kernel arm64 bug table alignment denial of service5.5v3.10.2%2024-07-10Fix
CVE-2024-39330Django path traversal4.3CISA ADP v3.11.0%2024-07-10Fix
CVE-2024-39329Django vulnerable to user enumeration attack5.3CISA ADP v3.10.9%2024-07-10Fix
CVE-2024-38875Django vulnerable to denial of service7.5CISA ADP v3.11.2%2024-07-10Fix
CVE-2024-38354hackmdio codimd cross-site scripting in HackMD.io Notes lead by HTML injection8.1CNA v3.10.4%2024-07-10Fix
CVE-2024-38353CodiMD Missing Image Access Controls and Unauthorized Image Access5.3CNA v3.11.1%2024-07-10NucleiFix
CVE-2024-38301Dell Alienware Command Center (AWCC) improper access control6.7CNA v3.10.1%2024-07-10Fix
CVE-2024-37770B1ACKC4T 14finger code injection9.1CISA ADP v3.11.6%2024-07-10Exploit code
CVE-2024-37504FileBird Document Library WordPress plugin sensitive data exposure5.3CNA v3.10.4%2024-07-10Fix
CVE-2024-37498Pauple Table and Contact Form 7 Database information disclosure5.3CNA v3.10.4%2024-07-10Fix
CVE-2024-37310EVerest has an integer overflow in the v2g_incoming_v2gtp function9.1CNA v3.10.7%2024-07-10Fix
CVE-2024-37270TrustedLogin Vendor WordPress plugin sensitive data exposure5.3CNA v3.10.4%2024-07-10Fix
CVE-2024-37205affiliate-toolkit WordPress plugin sensitive data exposure via Log file5.3CNA v3.10.4%2024-07-10Fix
CVE-2024-37149GLPI allows remote code execution through the plugin loader7.2CNA v3.121.1%2024-07-10Emerging ThreatsFix
CVE-2024-37148GLPI allows account takeover via SQL injection in AJAX scripts8.1CNA v3.120.2%2024-07-10Emerging ThreatsFix
CVE-2024-37147GLPI allows authenticated file upload to Restricted Tickets4.3CNA v3.10.7%2024-07-10Fix
CVE-2024-37115Newspack Blocks WordPress plugin sensitive data exposure7.5CNA v3.10.6%2024-07-10Fix
CVE-2024-37113WishList Member X WordPress plugin unauthenticated Database Backup download vulnerability9.8CNA v3.10.5%2024-07-10Fix
CVE-2024-37110WishList Member X WordPress plugin unauthenticated settings and users data Dump vulnerability7.5CNA v3.10.6%2024-07-10Fix
CVE-2024-36453Webmin session_login.cgi cross-site scripting6.1CISA ADP v3.10.4%2024-07-10Fix
CVE-2024-36452Webmin ajaxterm module cross-site request forgery3.1CISA ADP v3.10.2%2024-07-10Fix
CVE-2024-36451Webmin ajaxterm module improper handling of insufficient permissions8.8CISA ADP v3.10.6%2024-07-10Fix
CVE-2024-36450Webmin sysinfo.cgi cross-site scripting5.4v3.10.3%2024-07-10Fix
CVE-2024-32759Johnson Controls Software House C●CURE 9000 installer password strength7.7CNA v4.00.4%2024-07-10Fix
CVE-2024-32670Samsung Galaxy SmartTag2 information disclosure7.0CNA v4.00.2%2024-07-10
CVE-2024-32469Decidim has cross-site scripting (XSS) in the pagination7.1CNA v3.10.4%2024-07-10Fix
CVE-2024-28828Checkmk 1-Click compromize via CSRF8.8CNA v3.10.2%2024-07-10Fix
CVE-2024-28827Checkmk privilege escalation in Windows agent8.8CNA v3.10.2%2024-07-10Fix
CVE-2024-27095Decidim cross-site scripting (XSS) in the admin panel5.4CNA v3.10.3%2024-07-10Fix
CVE-2024-27090Decidim vulnerable to data disclosure through the embed feature5.3CNA v3.10.5%2024-07-10Fix
CVE-2024-25077An issue was discovered on Renesas SmartBond DA14691, DA14695, DA14697, and DA14699 devices. The Nonce used for on-the-fly decryption of flash images is stored in an unsigned header, allowing its value to be modified without invalidating the signature used for secureboot image verification. Because9.8CISA ADP v3.10.4%2024-07-10
CVE-2024-25076An issue was discovered on Renesas SmartBond DA14691, DA14695, DA14697, and DA14699 devices. The bootrom function responsible for validating the Flash Product Header directly uses a user-controllable size value (Length of Flash Config Section) to control a read from the QSPI device into a fixed size6.8CISA ADP v3.10.4%2024-07-10
CVE-2024-25023IBM QRadar Suite Software information disclosure5.5CNA v3.10.1%2024-07-10Fix
CVE-2024-22018Node.js permission model vulnerability2.9CNA v3.00.5%2024-07-10Fix
CVE-2024-21526speaker vulnerable to denial of service7.5CNA v3.10.6%2024-07-10
CVE-2024-21525node-twain vulnerable to improper check or handling of exceptional conditions8.3CNA v3.10.5%2024-07-10
CVE-2024-21524node-stringbuilder vulnerable to out-of-bounds read9.1v3.10.8%2024-07-10
CVE-2024-21523images vulnerable to denial of service7.5CNA v3.10.6%2024-07-10
CVE-2024-21522audify vulnerable to improper validation of array index7.5CNA v3.10.6%2024-07-10
CVE-2024-21521@discordjs/opus vulnerable to denial of service7.5CNA v3.10.6%2024-07-10
CVE-2024-21417Microsoft Windows Text Services Framework elevation of privilege8.8CNA v3.10.4%2024-07-10Fix
CVE-2024-20456Cisco IOS XR Software incorrect permission assignment6.7CNA v3.10.2%2024-07-10Fix
CVE-2024-6652itsourcecode Gym Management System manage_member.php SQL injection8.8v3.10.6%2024-07-10
CVE-2024-6650SourceCodester Employee and Visitor Gate Pass Logging System cross-site scripting4.8v3.10.5%2024-07-10
CVE-2024-6649SourceCodester Employee and Visitor Gate Pass Logging System cross-site request forgery6.5v3.10.3%2024-07-10
CVE-2024-6647Croogo setting theme unrestricted upload5.1CNA v4.00.5%2024-07-10
CVE-2024-6646Netgear WN604 Web interface downloadFile.php information disclosure6.9CNA v4.045.7%2024-07-10Nuclei
CVE-2024-6645WuKongOpenSource Wukong_nocode AviatorScript ExpressionUtil.java deserialization5.3CNA v4.00.5%2024-07-10
CVE-2024-6644zmops ArgusDBM AviatorScript CalculateAlarm.java getDefaultClassLoader deserialization5.3CNA v4.00.5%2024-07-10
CVE-2024-6556SmartCrawl WordPress SEO checker WordPress plugin information disclosure5.3CNA v3.10.4%2024-07-10Fix
CVE-2024-6550Gravity Forms: Multiple Form Instances WordPress plugin unauthenticated full path disclosure5.3CNA v3.10.5%2024-07-10Fix
CVE-2024-6433Local file inclusion in stitionai/devika7.5CNA v3.00.6%2024-07-10
CVE-2024-6422Pepperl+Fuchs: OIT Products can be manipulated via unintended Telnet access9.8CNA v3.10.6%2024-07-10
CVE-2024-6421Pepperl+Fuchs: Incorrectly configured FTP-Server in OIT Products7.5CNA v3.10.5%2024-07-10
CVE-2024-6411ProfileGrid WordPress plugin privilege escalation8.8CNA v3.10.8%2024-07-10Fix
CVE-2024-6410ProfileGrid WordPress plugin authenticated (Subscriber+) insecure direct object reference4.3CNA v3.10.4%2024-07-10Fix
CVE-2024-6286Citrix Workspace app privilege escalation8.5CNA v4.00.4%2024-07-10Fix
CVE-2024-6236NetSclaer NetScaler Console denial of service7.1CNA v4.00.7%2024-07-10Fix
CVE-2024-6235NetScaler Console sensitive information disclosure9.4CNA v4.021.2%2024-07-10NucleiEmerging ThreatsFix
CVE-2024-6151Citrix Virtual Delivery Agent for Windows privilege escalation8.5CNA v4.00.2%2024-07-10Fix
CVE-2024-6150Citrix Provisioning incorrect authorization4.8CNA v4.00.2%2024-07-10Fix
CVE-2024-6149Citrix Workspace app for HTML5 open redirect4.8CNA v4.00.2%2024-07-10Fix
CVE-2024-6148Citrix Workspace app for HTML5 incorrect default permissions5.3CNA v4.00.4%2024-07-10Fix
CVE-2024-6037ChuanhuChatGPT resource exhaustion9.1v3.110.6%2024-07-10Fix
CVE-2024-6036Denial of service in gaizhenbiao/ChuanhuChatGPT9.1v3.110.8%2024-07-10
CVE-2024-5913PAN-OS: Improper input validation vulnerability in PAN-OS6.1CNA v3.10.2%2024-07-10Fix
CVE-2024-5912Cortex XDR Agent: Improper file signature verification Checks6.8CNA v4.00.1%2024-07-10Fix
CVE-2024-5911PAN-OS: File upload vulnerability in the Panorama Web interface7.0CNA v4.00.6%2024-07-10Fix
CVE-2024-5910Palo Alto Networks Expedition missing authentication9.3CNA v4.091.7%2024-07-10KEVNucleiMetasploitEmerging ThreatsExploit codeKCVFix
CVE-2024-5792Houzez CRM WordPress plugin authenticated (Seller+) SQL injection8.8CNA v3.10.5%2024-07-10Fix
CVE-2024-5677Featured Image Generator WordPress plugin missing authorization authenticated Images upload4.3CNA v3.10.3%2024-07-10Fix
CVE-2024-5664MP3 Audio Player for Music, Radio and Podcast by Sonaar WordPress plugin stored cross-site scripting5.4v3.10.3%2024-07-10Fix
CVE-2024-5492NetScaler ADC and NetScaler Gateway open redirect5.1CNA v4.00.6%2024-07-10Fix
CVE-2024-5491NetScaler ADC denial of service7.2CNA v4.00.8%2024-07-10Fix
CVE-2024-5217ServiceNow incomplete list of disallowed inputs9.2CNA v4.099.6%2024-07-10KEVNucleiEmerging ThreatsKCVFix
CVE-2024-5178ServiceNow Now Platform Incomplete Input Validation in SecurelyAccess API6.9CNA v4.033.6%2024-07-10KCVFix
CVE-2024-4879ServiceNow improper input validation9.3CNA v4.0100.0%2024-07-10KEVNucleiEmerging ThreatsExploit codeKCVFix
CVE-2024-4866UltraAddons WordPress plugin stored cross-site scripting5.4v3.10.4%2024-07-10Fix
CVE-2024-3799Shell command injection in Phoniebox8.7CNA v4.014.6%2024-07-10Fix
CVE-2024-3798Insecure handling of GET argument in Phoniebox8.7CNA v4.00.5%2024-07-10Fix
CVE-2024-3325JasperReports Server driver upload vulnerability8.6CNA v4.00.6%2024-07-10Fix
CVE-2024-40750Linksys MX6200 cleartext storage of sensitive information5.3CISA ADP v3.10.1%2024-07-09
CVE-2024-40742NetBox A cross-site scripting6.1v3.10.5%2024-07-09
CVE-2024-40741NetBox A cross-site scripting6.1NVD v3.10.4%2024-07-09
CVE-2024-40740NetBox A cross-site scripting6.1NVD v3.10.4%2024-07-09
CVE-2024-40739NetBox A cross-site scripting6.1v3.10.4%2024-07-09
CVE-2024-40738NetBox A cross-site scripting6.1NVD v3.10.4%2024-07-09
CVE-2024-40737NetBox A cross-site scripting6.1v3.10.4%2024-07-09
CVE-2024-40736NetBox A cross-site scripting6.1v3.10.4%2024-07-09
CVE-2024-40735NetBox A cross-site scripting6.1v3.10.4%2024-07-09
CVE-2024-40734NetBox A cross-site scripting6.1v3.10.4%2024-07-09
CVE-2024-40733NetBox A cross-site scripting6.1v3.10.4%2024-07-09
CVE-2024-40732NetBox A cross-site scripting6.1NVD v3.10.4%2024-07-09
CVE-2024-40731NetBox A cross-site scripting6.1v3.10.4%2024-07-09
CVE-2024-40730NetBox A cross-site scripting6.1v3.10.4%2024-07-09
CVE-2024-40729NetBox A cross-site scripting6.1NVD v3.10.4%2024-07-09
CVE-2024-40728NetBox A cross-site scripting6.1NVD v3.10.4%2024-07-09
CVE-2024-40727NetBox A cross-site scripting6.1v3.10.4%2024-07-09
CVE-2024-40726NetBox A cross-site scripting6.1v3.10.4%2024-07-09
CVE-2024-40039idcCMS cross-site request forgery8.8v3.10.3%2024-07-09
CVE-2024-40038idcCMS cross-site request forgery5.3CISA ADP v3.10.2%2024-07-09
CVE-2024-40037idcCMS cross-site request forgery8.8v3.10.3%2024-07-09
CVE-2024-40036idcCMS cross-site scripting8.8CISA ADP v3.10.6%2024-07-09
CVE-2024-40035idcCMS cross-site request forgery5.9CISA ADP v3.10.2%2024-07-09
CVE-2024-40034idcCMS cross-site request forgery8.8v3.10.3%2024-07-09
CVE-2024-39901OpenSearch Observability does not properly restrict access to private tenant resources4.2CNA v3.10.3%2024-07-09Fix
CVE-2024-39900OpenSearch Dashboards Reports does not properly restrict access to private tenant resources5.4CNA v3.10.3%2024-07-09Fix
CVE-2024-39899PrivateBin allows shortening of URLs for other domains5.3CNA v3.10.6%2024-07-09Fix
CVE-2024-39897project-zot zot cache driver GetBlob allows read access to any blob without access control check4.3CNA v3.10.3%2024-07-09Fix
CVE-2024-39888Siemens Mendix Encryption hard-coded security constants8.7CNA v4.00.2%2024-07-09Fix
CVE-2024-39883Heap-based buffer overflow in Delta Electronics CNCSoft-G28.8v3.10.7%2024-07-09Fix
CVE-2024-39882Out-of-bounds read in Delta Electronics CNCSoft-G28.8v3.10.7%2024-07-09Fix
CVE-2024-39881Out-of-bounds write in Delta Electronics CNCSoft-G28.8v3.10.7%2024-07-09Fix
CVE-2024-39880Stack-based buffer overflow in Delta Electronics CNCSoft-G28.8v3.10.7%2024-07-09Fix
CVE-2024-39876Siemens SINEMA Remote Connect Server resource exhaustion5.3CNA v4.00.2%2024-07-09Fix
CVE-2024-39875Siemens SINEMA Remote Connect Server incorrect permission assignment5.3CNA v4.00.3%2024-07-09Fix
CVE-2024-39874Siemens SINEMA Remote Connect Server missing brute-force protection8.7CNA v4.00.4%2024-07-09Fix
CVE-2024-39873Siemens SINEMA Remote Connect Server missing brute-force protection8.7CNA v4.00.4%2024-07-09Fix
CVE-2024-39872Siemens SINEMA Remote Connect Server insecure temporary file9.3CNA v4.00.5%2024-07-09Fix
CVE-2024-39871Siemens SINEMA Remote Connect Server incorrect authorization5.3CNA v4.00.2%2024-07-09Fix
CVE-2024-39870Siemens SINEMA Remote Connect Server client-side enforcement of server-side security7.1CNA v4.00.2%2024-07-09Fix
CVE-2024-39869Siemens SINEMA Remote Connect Server improper check for exceptional conditions7.1CNA v4.00.3%2024-07-09Fix
CVE-2024-39868Siemens SINEMA Remote Connect Server forced browsing7.2CNA v4.00.4%2024-07-09Fix
CVE-2024-39867Siemens SINEMA Remote Connect Server forced browsing7.2CNA v4.00.4%2024-07-09Fix
CVE-2024-39866Siemens SINEMA Remote Connect Server unsafe privilege definition8.7CNA v4.00.2%2024-07-09Fix