CVE-2024 records published in July 2024
Page three of three: records 2,001 to 2,858 of the 2,858 published in July 2024, newest first. The first page carries the figures for July 2024.
| CVE | Summary | CVSS | EPSS | Published | Signals |
|---|---|---|---|---|---|
| CVE-2024-39865 | Siemens SINEMA Remote Connect Server unrestricted file upload | 8.7CNA v4.0 | 0.4% | 2024-07-09 | Fix |
| CVE-2024-39698 | electron-userland electron-builder Code Signing Bypass on Windows in electron-updater | 7.5CNA v3.1 | 0.4% | 2024-07-09 | Fix |
| CVE-2024-39697 | whisperfish rust-phonenumber phonenumber panics on parsing crafted phonenumber inputs | 8.6CNA v3.1 | 0.7% | 2024-07-09 | Fix |
| CVE-2024-39684 | Tencent RapidJSON ParseNumber exponent parsing integer overflow | 6.8CNA v3.1 | 0.4% | 2024-07-09 | Fix |
| CVE-2024-39675 | Siemens RUGGEDCOM RMC30 system information disclosure | 8.7CNA v4.0 | 0.3% | 2024-07-09 | Fix |
| CVE-2024-39600 | Information disclosure vulnerability in SAP GUI for Windows | 5.0CNA v3.1 | 0.1% | 2024-07-09 | Fix |
| CVE-2024-39599 | Protection mechanism failure in SAP NetWeaver Application Server for ABAP and ABAP Platform | 4.7CNA v3.1 | 0.3% | 2024-07-09 | Fix |
| CVE-2024-39598 | SAP CRM WebClient UI server-side request forgery | 5.0CNA v3.1 | 0.3% | 2024-07-09 | Fix |
| CVE-2024-39597 | Improper authorization Checks on Early Login Composable Storefront B2B sites of SAP Commerce | 7.2CNA v3.1 | 0.3% | 2024-07-09 | Fix |
| CVE-2024-39596 | Missing authorization check vulnerability in SAP Enable Now | 4.3CNA v3.1 | 0.3% | 2024-07-09 | Fix |
| CVE-2024-39595 | SAP Business Warehouse Business Planning and Simulation stored cross-site scripting | 5.4CNA v3.1 | 0.2% | 2024-07-09 | Fix |
| CVE-2024-39594 | SAP Business Warehouse Business Planning and Simulation reflected cross-site scripting | 6.1CNA v3.1 | 0.3% | 2024-07-09 | Fix |
| CVE-2024-39593 | Information disclosure vulnerability in SAP Landscape Management | 6.9CNA v3.1 | 0.3% | 2024-07-09 | Fix |
| CVE-2024-39592 | Missing authorization check in SAP PDCE | 7.7CNA v3.1 | 0.4% | 2024-07-09 | Fix |
| CVE-2024-39571 | Siemens SINEMA Remote Connect Server command injection | 8.7CNA v4.0 | 1.3% | 2024-07-09 | Fix |
| CVE-2024-39570 | Siemens SINEMA Remote Connect Server command injection | 8.7CNA v4.0 | 1.4% | 2024-07-09 | Fix |
| CVE-2024-39569 | Siemens SINEMA Remote Connect Client command injection | 7.5CNA v4.0 | 1.0% | 2024-07-09 | Fix |
| CVE-2024-39568 | Siemens SINEMA Remote Connect Client command injection | 8.5CNA v4.0 | 0.9% | 2024-07-09 | Fix |
| CVE-2024-39567 | Siemens SINEMA Remote Connect Client command injection | 8.5CNA v4.0 | 0.9% | 2024-07-09 | Fix |
| CVE-2024-39487 | Linux kernel bonding driver ARP IP target parsing out-of-bounds read | 7.1CNA v3.1 | 0.2% | 2024-07-09 | Fix |
| CVE-2024-39181 | Szlbt Lbt-t300-t400 buffer overflow | 6.5CISA ADP v3.1 | 0.5% | 2024-07-09 | |
| CVE-2024-39171 | PHPVibe path traversal | 9.8v3.1 | 1.2% | 2024-07-09 | |
| CVE-2024-39118 | Mommyheather Advanced Backups out-of-bounds write | 5.5v3.1 | 0.3% | 2024-07-09 | |
| CVE-2024-39072 | Amttgroup HiBOS SQL injection | 5.5CISA ADP v3.1 | 0.4% | 2024-07-09 | |
| CVE-2024-39071 | Fujian Kelixun send_event.php SQL injection | 9.8CISA ADP v3.1 | 0.8% | 2024-07-09 | |
| CVE-2024-39069 | An issue in ifood Order Manager v3.35.5 'Gestor de Peddios.exe' allows attackers to execute arbitrary code via a DLL hijacking attack. | 7.8CISA ADP v3.1 | 0.6% | 2024-07-09 | Exploit code |
| CVE-2024-39063 | LimeSurvey cross-site request forgery | 8.8CISA ADP v3.1 | 0.3% | 2024-07-09 | |
| CVE-2024-39031 | Silverpeas Core cross-site scripting | 5.4CISA ADP v3.1 | 0.8% | 2024-07-09 | |
| CVE-2024-38972 | NetBox A cross-site scripting | 6.1v3.1 | 0.4% | 2024-07-09 | |
| CVE-2024-38971 | Vaethink cross-site scripting | 5.4v3.1 | 0.3% | 2024-07-09 | |
| CVE-2024-38970 | Vaethink information disclosure | 4.9v3.1 | 0.4% | 2024-07-09 | |
| CVE-2024-38963 | nopCommerce cross-site scripting | 6.1CISA ADP v3.1 | 0.3% | 2024-07-09 | |
| CVE-2024-38959 | Creativeitem Academy LMS cross-site scripting | 6.1CISA ADP v3.1 | 0.7% | 2024-07-09 | |
| CVE-2024-38867 | Siemens SIPROTEC 5 6MD84 (CP300) inadequate encryption strength | 8.2CNA v4.0 | 0.2% | 2024-07-09 | Fix |
| CVE-2024-38517 | Tencent RapidJSON number parser integer underflow | 6.8CNA v3.1 | 0.4% | 2024-07-09 | Fix |
| CVE-2024-38363 | Remote code execution (RCE) via server side template injection (SSTI) in Airbyte | 8.6CNA v3.1 | 0.7% | 2024-07-09 | Fix |
| CVE-2024-38278 | Siemens RUGGEDCOM RMC8388 V5.X incorrect privilege assignment | 7.5CNA v4.0 | 0.3% | 2024-07-09 | Fix |
| CVE-2024-38112 | Microsoft Windows MSHTML Platform spoofing | 7.5CNA v3.1 | 84.2% | 2024-07-09 | KEVKCVFix |
| CVE-2024-38105 | Microsoft Windows Layer-2 Bridge Network driver denial of service | 6.5CNA v3.1 | 0.8% | 2024-07-09 | Fix |
| CVE-2024-38104 | Microsoft Windows Fax service remote code execution | 8.8CNA v3.1 | 1.8% | 2024-07-09 | Fix |
| CVE-2024-38102 | Microsoft Windows Layer-2 Bridge Network driver denial of service | 6.5CNA v3.1 | 0.8% | 2024-07-09 | Fix |
| CVE-2024-38101 | Microsoft Windows Layer-2 Bridge Network driver denial of service | 6.5CNA v3.1 | 0.8% | 2024-07-09 | Fix |
| CVE-2024-38100 | Microsoft Windows File Explorer elevation of privilege | 7.8CNA v3.1 | 4.5% | 2024-07-09 | Fix |
| CVE-2024-38099 | Microsoft Windows Remote Desktop Licensing service denial of service | 5.9CNA v3.1 | 1.3% | 2024-07-09 | Fix |
| CVE-2024-38095 | NET and Visual Studio denial of service | 7.5CNA v3.1 | 2.7% | 2024-07-09 | Fix |
| CVE-2024-38094 | Microsoft SharePoint deserialization | 7.2CNA v3.1 | 50.9% | 2024-07-09 | KEVEmerging ThreatsFix |
| CVE-2024-38092 | Microsoft Azure CycleCloud elevation of privilege | 8.8CNA v3.1 | 1.6% | 2024-07-09 | Fix |
| CVE-2024-38091 | Microsoft WS-Discovery denial of service | 7.5CNA v3.1 | 1.9% | 2024-07-09 | Fix |
| CVE-2024-38089 | Microsoft Defender for IoT elevation of privilege | 9.1CNA v3.1 | 1.2% | 2024-07-09 | Fix |
| CVE-2024-38088 | SQL Server Native Client OLE DB Provider remote code execution | 8.8CNA v3.1 | 1.7% | 2024-07-09 | Fix |
| CVE-2024-38087 | SQL Server Native Client OLE DB Provider remote code execution | 8.8CNA v3.1 | 1.7% | 2024-07-09 | Fix |
| CVE-2024-38086 | Microsoft Azure Kinect SDK remote code execution | 6.4CNA v3.1 | 0.6% | 2024-07-09 | Fix |
| CVE-2024-38085 | Microsoft Windows Graphics component elevation of privilege | 7.8CNA v3.1 | 5.3% | 2024-07-09 | Fix |
| CVE-2024-38081 | NET, .NET Framework, and Visual Studio elevation of privilege | 7.3CNA v3.1 | 1.3% | 2024-07-09 | Fix |
| CVE-2024-38080 | Microsoft Windows Hyper-V privilege escalation | 7.8CNA v3.1 | 7.1% | 2024-07-09 | KEVExploit codeFix |
| CVE-2024-38079 | Microsoft Windows Graphics component elevation of privilege | 7.8CNA v3.1 | 0.7% | 2024-07-09 | Fix |
| CVE-2024-38078 | Microsoft Windows xbox Wireless Adapter remote code execution | 7.5CNA v3.1 | 0.7% | 2024-07-09 | Fix |
| CVE-2024-38077 | Microsoft Windows Remote Desktop Licensing service remote code execution | 9.8CNA v3.1 | 84.2% | 2024-07-09 | Exploit codeFix |
| CVE-2024-38076 | Microsoft Windows Remote Desktop Licensing service remote code execution | 9.8CNA v3.1 | 2.2% | 2024-07-09 | Fix |
| CVE-2024-38074 | Microsoft Windows Remote Desktop Licensing service remote code execution | 9.8CNA v3.1 | 2.2% | 2024-07-09 | Fix |
| CVE-2024-38073 | Microsoft Windows Remote Desktop Licensing service denial of service | 7.5CNA v3.1 | 2.5% | 2024-07-09 | Fix |
| CVE-2024-38072 | Microsoft Windows Remote Desktop Licensing service denial of service | 7.5CNA v3.1 | 2.2% | 2024-07-09 | Fix |
| CVE-2024-38071 | Microsoft Windows Remote Desktop Licensing service denial of service | 7.5CNA v3.1 | 35.9% | 2024-07-09 | Fix |
| CVE-2024-38070 | Microsoft Windows LockDown Policy (WLDP) security feature bypass | 7.8CNA v3.1 | 0.7% | 2024-07-09 | Fix |
| CVE-2024-38069 | Microsoft Windows Enroll Engine security feature bypass | 7.0CNA v3.1 | 0.3% | 2024-07-09 | Fix |
| CVE-2024-38068 | Microsoft Windows Online Certificate Status Protocol (OCSP) server denial of service | 7.5CNA v3.1 | 2.5% | 2024-07-09 | Fix |
| CVE-2024-38067 | Microsoft Windows Online Certificate Status Protocol (OCSP) server denial of service | 7.5CNA v3.1 | 2.5% | 2024-07-09 | Fix |
| CVE-2024-38066 | Microsoft Windows Win32k elevation of privilege | 7.8CNA v3.1 | 0.9% | 2024-07-09 | Fix |
| CVE-2024-38065 | Microsoft Windows secure Boot security feature bypass | 6.8CNA v3.1 | 0.9% | 2024-07-09 | Fix |
| CVE-2024-38064 | Microsoft Windows TCP/IP information disclosure | 7.5CNA v3.1 | 2.2% | 2024-07-09 | Fix |
| CVE-2024-38062 | Microsoft Windows Kernel-Mode driver elevation of privilege | 7.8CNA v3.1 | 1.6% | 2024-07-09 | Fix |
| CVE-2024-38061 | Microsoft Windows DCOM Remote Cross-Session Activation elevation of privilege | 7.5CNA v3.1 | 1.5% | 2024-07-09 | Fix |
| CVE-2024-38060 | Microsoft Windows Imaging component remote code execution | 8.8CNA v3.1 | 15.9% | 2024-07-09 | Fix |
| CVE-2024-38059 | Microsoft Windows win32k elevation of privilege | 7.8CNA v3.1 | 3.7% | 2024-07-09 | Fix |
| CVE-2024-38058 | Microsoft Windows BitLocker security feature bypass | 6.8CNA v3.1 | 0.9% | 2024-07-09 | Fix |
| CVE-2024-38057 | Microsoft Windows kernel Streaming WOW Thunk service driver elevation of privilege | 7.8CNA v3.1 | 0.8% | 2024-07-09 | Fix |
| CVE-2024-38056 | Microsoft Windows Codecs library information disclosure | 5.5CNA v3.1 | 0.8% | 2024-07-09 | Fix |
| CVE-2024-38055 | Microsoft Windows Codecs library information disclosure | 5.5CNA v3.1 | 0.8% | 2024-07-09 | Fix |
| CVE-2024-38054 | Microsoft Windows kernel Streaming WOW Thunk service driver elevation of privilege | 7.8CNA v3.1 | 10.4% | 2024-07-09 | Fix |
| CVE-2024-38053 | Microsoft Windows Layer-2 Bridge Network driver remote code execution | 8.8CNA v3.1 | 1.1% | 2024-07-09 | Fix |
| CVE-2024-38052 | Microsoft Windows kernel Streaming WOW Thunk service driver elevation of privilege | 7.8CNA v3.1 | 7.0% | 2024-07-09 | Fix |
| CVE-2024-38051 | Microsoft Windows Graphics component remote code execution | 7.8CNA v3.1 | 1.1% | 2024-07-09 | Fix |
| CVE-2024-38050 | Microsoft Windows Workstation service elevation of privilege | 7.8CNA v3.1 | 0.7% | 2024-07-09 | Fix |
| CVE-2024-38049 | Microsoft Windows Distributed Transaction Coordinator remote code execution | 6.6CNA v3.1 | 1.6% | 2024-07-09 | Fix |
| CVE-2024-38048 | Microsoft Windows Network driver Interface Specification (NDIS) denial of service | 6.5CNA v3.1 | 1.0% | 2024-07-09 | Fix |
| CVE-2024-38047 | Microsoft Windows PowerShell elevation of privilege | 7.8CNA v3.1 | 0.7% | 2024-07-09 | Fix |
| CVE-2024-38044 | Microsoft Windows DHCP server service remote code execution | 7.2CNA v3.1 | 2.1% | 2024-07-09 | Fix |
| CVE-2024-38043 | Microsoft Windows PowerShell elevation of privilege | 7.8CNA v3.1 | 0.7% | 2024-07-09 | Fix |
| CVE-2024-38041 | Microsoft Windows Kernel information disclosure | 5.5CNA v3.1 | 2.2% | 2024-07-09 | Exploit codeFix |
| CVE-2024-38034 | Microsoft Windows Filtering Platform elevation of privilege | 7.8CNA v3.1 | 0.8% | 2024-07-09 | Fix |
| CVE-2024-38033 | Microsoft Windows PowerShell elevation of privilege | 7.3CNA v3.1 | 1.1% | 2024-07-09 | Fix |
| CVE-2024-38032 | Microsoft Xbox remote code execution | 7.1CNA v3.1 | 1.0% | 2024-07-09 | Fix |
| CVE-2024-38031 | Microsoft Windows Online Certificate Status Protocol (OCSP) server denial of service | 7.5CNA v3.1 | 2.5% | 2024-07-09 | Fix |
| CVE-2024-38030 | Microsoft Windows Themes spoofing | 6.5CNA v3.1 | 51.1% | 2024-07-09 | Emerging ThreatsFix |
| CVE-2024-38028 | Microsoft Windows Performance Data Helper library remote code execution | 7.2CNA v3.1 | 2.1% | 2024-07-09 | Fix |
| CVE-2024-38027 | Microsoft Windows Line Printer daemon service denial of service | 6.5CNA v3.1 | 1.0% | 2024-07-09 | Fix |
| CVE-2024-38025 | Microsoft Windows Performance Data Helper library remote code execution | 7.2CNA v3.1 | 2.1% | 2024-07-09 | Fix |
| CVE-2024-38024 | Microsoft SharePoint server remote code execution | 7.2CNA v3.1 | 45.2% | 2024-07-09 | Fix |
| CVE-2024-38023 | Microsoft SharePoint server remote code execution | 7.2CNA v3.1 | 52.9% | 2024-07-09 | Reported exploitedFix |
| CVE-2024-38022 | Microsoft Windows Image Acquisition elevation of privilege | 7.0CNA v3.1 | 0.6% | 2024-07-09 | Fix |
| CVE-2024-38021 | Microsoft Outlook remote code execution | 8.8CNA v3.1 | 3.5% | 2024-07-09 | Fix |
| CVE-2024-38020 | Microsoft Outlook spoofing | 6.5CNA v3.1 | 1.8% | 2024-07-09 | Fix |
| CVE-2024-38019 | Microsoft Windows Performance Data Helper library remote code execution | 7.2CNA v3.1 | 1.8% | 2024-07-09 | Fix |
| CVE-2024-38017 | Microsoft Message Queuing information disclosure | 5.5CNA v3.1 | 0.9% | 2024-07-09 | Fix |
| CVE-2024-38015 | Microsoft Windows Remote Desktop Gateway (RD Gateway) denial of service | 7.5CNA v3.1 | 2.4% | 2024-07-09 | Fix |
| CVE-2024-38013 | Microsoft Windows Server Backup elevation of privilege | 6.7CNA v3.1 | 0.6% | 2024-07-09 | Fix |
| CVE-2024-38011 | Microsoft Windows secure Boot security feature bypass | 8.0CNA v3.1 | 1.3% | 2024-07-09 | Fix |
| CVE-2024-38010 | Microsoft Windows secure Boot security feature bypass | 8.0CNA v3.1 | 1.0% | 2024-07-09 | Fix |
| CVE-2024-37997 | Siemens JT Open stack-based buffer overflow | 7.3CNA v4.0 | 0.2% | 2024-07-09 | Fix |
| CVE-2024-37996 | Siemens JT Open null pointer dereference | 4.8CNA v4.0 | 0.2% | 2024-07-09 | Fix |
| CVE-2024-37989 | Microsoft Windows secure Boot security feature bypass | 8.0CNA v3.1 | 1.0% | 2024-07-09 | Fix |
| CVE-2024-37988 | Microsoft Windows secure Boot security feature bypass | 8.0CNA v3.1 | 1.0% | 2024-07-09 | Fix |
| CVE-2024-37987 | Microsoft Windows secure Boot security feature bypass | 8.0CNA v3.1 | 1.3% | 2024-07-09 | Fix |
| CVE-2024-37986 | Microsoft Windows secure Boot security feature bypass | 8.0CNA v3.1 | 1.0% | 2024-07-09 | Fix |
| CVE-2024-37984 | Microsoft Windows secure Boot security feature bypass | 8.4CNA v3.1 | 0.7% | 2024-07-09 | Fix |
| CVE-2024-37981 | Microsoft Windows secure Boot security feature bypass | 8.0CNA v3.1 | 1.1% | 2024-07-09 | Fix |
| CVE-2024-37978 | Microsoft Windows secure Boot security feature bypass | 8.0CNA v3.1 | 0.9% | 2024-07-09 | Fix |
| CVE-2024-37977 | Microsoft Windows secure Boot security feature bypass | 8.0CNA v3.1 | 1.1% | 2024-07-09 | Fix |
| CVE-2024-37975 | Microsoft Windows secure Boot security feature bypass | 8.0CNA v3.1 | 1.3% | 2024-07-09 | Fix |
| CVE-2024-37974 | Microsoft Windows secure Boot security feature bypass | 8.0CNA v3.1 | 1.0% | 2024-07-09 | Fix |
| CVE-2024-37973 | Microsoft Windows secure Boot security feature bypass | 8.8CNA v3.1 | 0.6% | 2024-07-09 | Fix |
| CVE-2024-37972 | Microsoft Windows secure Boot security feature bypass | 8.0CNA v3.1 | 1.0% | 2024-07-09 | Fix |
| CVE-2024-37971 | Microsoft Windows secure Boot security feature bypass | 8.0CNA v3.1 | 1.4% | 2024-07-09 | Fix |
| CVE-2024-37970 | Microsoft Windows secure Boot security feature bypass | 8.0CNA v3.1 | 1.1% | 2024-07-09 | Fix |
| CVE-2024-37969 | Microsoft Windows secure Boot security feature bypass | 8.0CNA v3.1 | 1.4% | 2024-07-09 | Fix |
| CVE-2024-37952 | BookYourTravel WordPress theme Subscriber+ privilege escalation | 8.8v3.1 | 0.4% | 2024-07-09 | Fix |
| CVE-2024-37934 | Ninja Forms WordPress plugin Subscriber+ arbitrary shortcode execution vulnerability | 9.8v3.1 | 0.5% | 2024-07-09 | Fix |
| CVE-2024-37923 | Cliengo Chatbot WordPress plugin cross-site request forgery (CSRF) | 5.4CNA v3.1 | 0.2% | 2024-07-09 | Fix |
| CVE-2024-37873 | itsourcecode Payroll Management System Project In PHP With Source Code SQL injection | 9.8v3.1 | 0.7% | 2024-07-09 | |
| CVE-2024-37872 | Angeljudesuarez Billing System process.php in Itsourcecode SQL injection | 8.1CISA ADP v3.1 | 0.5% | 2024-07-09 | |
| CVE-2024-37871 | Emiloi Online Discussion Forum login.php in Itsourcecode SQL injection | 8.2CISA ADP v3.1 | 0.5% | 2024-07-09 | |
| CVE-2024-37870 | itsourcecode Learning Management System processscore.php SQL injection | 9.8CISA ADP v3.1 | 0.5% | 2024-07-09 | |
| CVE-2024-37865 | S3 Browser improper certificate validation | 5.9v3.1 | 0.7% | 2024-07-09 | |
| CVE-2024-37830 | Getoutline Outline open redirect | 6.1v3.1 | 0.3% | 2024-07-09 | |
| CVE-2024-37829 | Getoutline Outline session fixation | 8.8CISA ADP v3.1 | 0.7% | 2024-07-09 | |
| CVE-2024-37555 | Generate PDF using Contact Form 7 WordPress plugin CSRF to arbitrary file upload | 9.8v3.1 | 0.6% | 2024-07-09 | Fix |
| CVE-2024-37520 | ShopBuilder Elementor WooCommerce Builder Addons WordPress plugin local file inclusion | 8.8v3.1 | 0.6% | 2024-07-09 | Fix |
| CVE-2024-37513 | WPCafe WordPress plugin local file inclusion | 8.8v3.1 | 0.6% | 2024-07-09 | Fix |
| CVE-2024-37502 | WooCommerce WordPress plugin wpweb deserialization of untrusted data | 7.5v3.1 | 0.3% | 2024-07-09 | Fix |
| CVE-2024-37501 | Advanced Classifieds and Directory Pro WordPress plugin local file inclusion | 8.5CNA v3.1 | 0.5% | 2024-07-09 | Fix |
| CVE-2024-37499 | Online Booking and Scheduling Calendar for WordPress plugin local file inclusion | 6.5CNA v3.1 | 0.6% | 2024-07-09 | Fix |
| CVE-2024-37497 | JetThemeCore WordPress plugin Subscriber+ arbitrary file deletion | 7.7CNA v3.1 | 0.7% | 2024-07-09 | Fix |
| CVE-2024-37494 | Youzify WordPress plugin SQL injection | 8.8v3.1 | 0.5% | 2024-07-09 | Fix |
| CVE-2024-37486 | Paid Memberships Pro WordPress plugin authenticated SQL injection | 7.2v3.1 | 0.7% | 2024-07-09 | Fix |
| CVE-2024-37484 | Zephyr Project Manager WordPress plugin privilege escalation | 8.8v3.1 | 0.4% | 2024-07-09 | Fix |
| CVE-2024-37464 | Beaver Builder Addons by WPZOOM WordPress plugin local file inclusion | 4.9v3.1 | 0.9% | 2024-07-09 | Fix |
| CVE-2024-37462 | Ultimate Bootstrap Elements for Elementor WordPress plugin local file inclusion | 8.8v3.1 | 0.6% | 2024-07-09 | Fix |
| CVE-2024-37455 | Ultimate Addons for elementor WordPress plugin privilege escalation | 8.8v3.1 | 0.5% | 2024-07-09 | Fix |
| CVE-2024-37454 | AWSM Team Team Showcase WordPress plugin local file inclusion | 8.8v3.1 | 0.6% | 2024-07-09 | Fix |
| CVE-2024-37442 | Photo Gallery by Ays Responsive Image Gallery WordPress plugin HTML injection | 5.5v3.1 | 0.4% | 2024-07-09 | Fix |
| CVE-2024-37437 | Elementor Website Builder WordPress plugin arbitrary SVG file download vulnerability | 5.4v3.1 | 0.3% | 2024-07-09 | Fix |
| CVE-2024-37430 | Patreon WordPress plugin Image Protection bypass vulnerability | 5.3CNA v3.1 | 0.4% | 2024-07-09 | Fix |
| CVE-2024-37424 | Newspack Blocks WordPress plugin arbitrary file upload | 9.9CNA v3.1 | 0.6% | 2024-07-09 | Fix |
| CVE-2024-37420 | Zita Elementor Site Library WordPress plugin arbitrary code execution | 9.9CNA v3.1 | 0.5% | 2024-07-09 | Fix |
| CVE-2024-37419 | Cowidgets Elementor Addons WordPress plugin local file inclusion | 8.8v3.1 | 0.6% | 2024-07-09 | Fix |
| CVE-2024-37418 | Church Admin WordPress plugin arbitrary file upload | 9.9CNA v3.1 | 0.5% | 2024-07-09 | Fix |
| CVE-2024-37410 | PowerPack Lite for Beaver Builder WordPress plugin local file inclusion | 7.2v3.1 | 0.6% | 2024-07-09 | Fix |
| CVE-2024-37336 | SQL Server Native Client OLE DB Provider remote code execution | 8.8CNA v3.1 | 1.7% | 2024-07-09 | Fix |
| CVE-2024-37334 | Microsoft OLE DB Driver for SQL Server remote code execution | 8.8CNA v3.1 | 1.6% | 2024-07-09 | Fix |
| CVE-2024-37333 | SQL Server Native Client OLE DB Provider remote code execution | 8.8CNA v3.1 | 1.6% | 2024-07-09 | Fix |
| CVE-2024-37332 | SQL Server Native Client OLE DB Provider remote code execution | 8.8CNA v3.1 | 1.9% | 2024-07-09 | Fix |
| CVE-2024-37331 | SQL Server Native Client OLE DB Provider remote code execution | 8.8CNA v3.1 | 1.9% | 2024-07-09 | Fix |
| CVE-2024-37330 | SQL Server Native Client OLE DB Provider remote code execution | 8.8CNA v3.1 | 1.6% | 2024-07-09 | Fix |
| CVE-2024-37329 | SQL Server Native Client OLE DB Provider remote code execution | 8.8CNA v3.1 | 1.6% | 2024-07-09 | Fix |
| CVE-2024-37328 | SQL Server Native Client OLE DB Provider remote code execution | 8.8CNA v3.1 | 1.6% | 2024-07-09 | Fix |
| CVE-2024-37327 | SQL Server Native Client OLE DB Provider remote code execution | 8.8CNA v3.1 | 1.6% | 2024-07-09 | Fix |
| CVE-2024-37326 | SQL Server Native Client OLE DB Provider remote code execution | 8.8CNA v3.1 | 1.6% | 2024-07-09 | Fix |
| CVE-2024-37324 | SQL Server Native Client OLE DB Provider remote code execution | 8.8CNA v3.1 | 1.6% | 2024-07-09 | Fix |
| CVE-2024-37323 | SQL Server Native Client OLE DB Provider remote code execution | 8.8CNA v3.1 | 1.6% | 2024-07-09 | Fix |
| CVE-2024-37322 | SQL Server Native Client OLE DB Provider remote code execution | 8.8CNA v3.1 | 1.6% | 2024-07-09 | Fix |
| CVE-2024-37321 | SQL Server Native Client OLE DB Provider remote code execution | 8.8CNA v3.1 | 1.6% | 2024-07-09 | Fix |
| CVE-2024-37320 | SQL Server Native Client OLE DB Provider remote code execution | 8.8CNA v3.1 | 1.6% | 2024-07-09 | Fix |
| CVE-2024-37319 | SQL Server Native Client OLE DB Provider remote code execution | 8.8CNA v3.1 | 1.6% | 2024-07-09 | Fix |
| CVE-2024-37318 | SQL Server Native Client OLE DB Provider remote code execution | 8.8CNA v3.1 | 1.9% | 2024-07-09 | Fix |
| CVE-2024-37268 | Striking WordPress theme local file inclusion | 8.8v3.1 | 0.5% | 2024-07-09 | Fix |
| CVE-2024-37266 | Tutor LMS WordPress plugin path traversal | 7.2v3.1 | 0.6% | 2024-07-09 | Fix |
| CVE-2024-37256 | Tutor LMS WordPress plugin SQL injection | 7.2v3.1 | 0.6% | 2024-07-09 | Fix |
| CVE-2024-37253 | WPDirectoryKit WordPress plugin HTML injection | 2.7v3.1 | 0.3% | 2024-07-09 | Fix |
| CVE-2024-37225 | Zoho Marketing Automation WordPress plugin SQL injection | 8.8v3.1 | 0.5% | 2024-07-09 | Fix |
| CVE-2024-37224 | SP Project and Document Manager WordPress plugin directory traversal | 6.5NVD v3.1 | 0.6% | 2024-07-09 | |
| CVE-2024-37180 | Information disclosure vulnerability in SAP NetWeaver Application Server for ABAP and ABAP Platform | 4.1CNA v3.1 | 0.3% | 2024-07-09 | Fix |
| CVE-2024-37175 | SAP CRM WebClient UI missing authorization | 4.3CNA v3.1 | 0.3% | 2024-07-09 | Fix |
| CVE-2024-37174 | SAP CRM WebClient UI custom CSS support cross-site scripting | 6.1CNA v3.1 | 0.3% | 2024-07-09 | Fix |
| CVE-2024-37173 | SAP CRM WebClient UI cross-site scripting | 6.1CNA v3.1 | 0.3% | 2024-07-09 | Fix |
| CVE-2024-37172 | Missing authorization check in SAP S/4hana Finance (Advanced Payment Management) | 5.4CNA v3.1 | 0.3% | 2024-07-09 | Fix |
| CVE-2024-37171 | Server-side request forgery (SSRF) in SAP Transportation Management (Collaboration portal) | 5.0CNA v3.1 | 0.4% | 2024-07-09 | Fix |
| CVE-2024-37112 | WishList Member X WordPress plugin unauthenticated arbitrary SQL Query execution vulnerability | 9.8v3.1 | 0.5% | 2024-07-09 | Fix |
| CVE-2024-37090 | SQL injection vulnerability in multiple StylemixThemes premium themes | 8.8v3.1 | 0.5% | 2024-07-09 | Fix |
| CVE-2024-36676 | BookStack incorrect access control vulnerability | 7.5CISA ADP v3.1 | 0.6% | 2024-07-09 | Fix |
| CVE-2024-36526 | ZKTeco ZKBio CVSecurity hard-coded password | 9.8CISA ADP v3.1 | 0.9% | 2024-07-09 | |
| CVE-2024-35777 | WooCommerce WordPress plugin content injection | 3.5CNA v3.1 | 0.4% | 2024-07-09 | Fix |
| CVE-2024-35272 | SQL Server Native Client OLE DB Provider remote code execution | 8.8CNA v3.1 | 1.9% | 2024-07-09 | Fix |
| CVE-2024-35271 | SQL Server Native Client OLE DB Provider remote code execution | 8.8CNA v3.1 | 1.9% | 2024-07-09 | Fix |
| CVE-2024-35270 | Microsoft Windows iSCSI service denial of service | 5.3CNA v3.1 | 0.9% | 2024-07-09 | Fix |
| CVE-2024-35267 | Microsoft Azure DevOps Server spoofing | 7.6CNA v3.1 | 1.6% | 2024-07-09 | Fix |
| CVE-2024-35266 | Microsoft Azure DevOps Server spoofing | 7.6CNA v3.1 | 1.6% | 2024-07-09 | Fix |
| CVE-2024-35264 | Microsoft .NET and Visual Studio remote code execution | 8.1CNA v3.1 | 2.6% | 2024-07-09 | Fix |
| CVE-2024-35261 | Microsoft Azure Network Watcher VM Extension elevation of privilege | 7.8CNA v3.1 | 0.7% | 2024-07-09 | Fix |
| CVE-2024-35256 | SQL Server Native Client OLE DB Provider remote code execution | 8.8CNA v3.1 | 1.6% | 2024-07-09 | Fix |
| CVE-2024-35154 | IBM WebSphere Application Server code execution | 7.2CNA v3.1 | 1.2% | 2024-07-09 | Fix |
| CVE-2024-34786 | UniFi iOS app 10.15.0 introduces a misconfiguration on 2nd Generation UniFi Access Points configured as standalone (not using UniFi Network Application) that could cause the SSID name to change and/or the WiFi Password to be removed on the 5GHz Radio. This vulnerability is fixed in UniFi iOS app 10 | 4.8CISA ADP v3.1 | 0.2% | 2024-07-09 | Fix |
| CVE-2024-34726 | Google Android pvr_bridge_k.c arbitrary code execution | 7.8v3.1 | 0.1% | 2024-07-09 | Fix |
| CVE-2024-34725 | Google Android devicemem_server.c arbitrary code execution | 7.0v3.1 | 0.1% | 2024-07-09 | Fix |
| CVE-2024-34724 | Google Android pmr.c arbitrary code execution | 7.0v3.1 | 0.1% | 2024-07-09 | Fix |
| CVE-2024-34723 | Google Android ParcelableListBinder.java privilege escalation | 7.8v3.1 | 0.1% | 2024-07-09 | Fix |
| CVE-2024-34722 | Google Android smp_act.cc authentication bypass | 8.8v3.1 | 0.3% | 2024-07-09 | Fix |
| CVE-2024-34721 | Google Android MediaProvider.java information disclosure | 5.5v3.1 | 0.1% | 2024-07-09 | Fix |
| CVE-2024-34720 | Google Android arbitrary code execution | 7.8v3.1 | 0.1% | 2024-07-09 | Fix |
| CVE-2024-34692 | Unrestricted file upload vulnerability in SAP Enable Now | 3.3CNA v3.1 | 0.2% | 2024-07-09 | Fix |
| CVE-2024-34689 | Server-side request forgery in SAP Business Workflow (WebFlow services) | 5.0CNA v3.1 | 0.4% | 2024-07-09 | Fix |
| CVE-2024-34685 | Cross-site scripting (XSS) vulnerability in SAP NetWeaver Knowledge Management XMLEditor | 6.1CNA v3.1 | 0.3% | 2024-07-09 | Fix |
| CVE-2024-34140 | Adobe Bridge PDF File Parsing memory corruption | 5.5CNA v3.1 | 0.3% | 2024-07-09 | Fix |
| CVE-2024-34139 | Adobe Bridge has an integer overflow vulnerability when parsing SVG file | 7.8CNA v3.1 | 0.4% | 2024-07-09 | Fix |
| CVE-2024-34123 | Adobe Premiere Pro arbitrary DLL loading lead to remote code execution | 7.0CNA v3.1 | 0.3% | 2024-07-09 | Fix |
| CVE-2024-33654 | Siemens Simcenter Femap out-of-bounds read | 7.3CNA v4.0 | 0.2% | 2024-07-09 | Fix |
| CVE-2024-33653 | Siemens Simcenter Femap out-of-bounds read | 7.3CNA v4.0 | 0.2% | 2024-07-09 | Fix |
| CVE-2024-33509 | Fortinet FortiWeb improper certificate validation | 4.4CNA v3.1 | 0.2% | 2024-07-09 | Fix |
| CVE-2024-32987 | Microsoft SharePoint server information disclosure | 7.5CNA v3.1 | 2.3% | 2024-07-09 | Fix |
| CVE-2024-32056 | Siemens Simcenter Femap out-of-bounds write | 7.3CNA v4.0 | 0.2% | 2024-07-09 | Fix |
| CVE-2024-31957 | Samsung Exynos 2200 improper quantity validation | 7.5v3.1 | 0.3% | 2024-07-09 | Fix |
| CVE-2024-31339 | Google Android StatsService.cpp memory corruption | 7.8v3.1 | 0.1% | 2024-07-09 | Fix |
| CVE-2024-31335 | Google Android devicemem_server.c arbitrary code execution | 7.8v3.1 | 0.1% | 2024-07-09 | Fix |
| CVE-2024-31334 | Google Android devicemem_server.c arbitrary code execution | 7.8v3.1 | 0.1% | 2024-07-09 | Fix |
| CVE-2024-31332 | Google Android multiple locations privilege escalation | 7.8v3.1 | 0.1% | 2024-07-09 | Fix |
| CVE-2024-31331 | Google Android PackageManagerService.java privilege escalation | 7.3v3.1 | 0.1% | 2024-07-09 | Fix |
| CVE-2024-31327 | Google Android MessageQueueBase.h out-of-bounds write | 7.0v3.1 | 0.1% | 2024-07-09 | Fix |
| CVE-2024-31326 | Google Android multiple locations privilege escalation | 7.8v3.1 | 0.1% | 2024-07-09 | Fix |
| CVE-2024-31325 | Google Android multiple locations privilege escalation | 7.8v3.1 | 0.1% | 2024-07-09 | Fix |
| CVE-2024-31324 | Google Android WindowState.java privilege escalation | 7.3v3.1 | 0.1% | 2024-07-09 | Fix |
| CVE-2024-31323 | Google Android multiple files privilege escalation | 7.8v3.1 | 0.1% | 2024-07-09 | Fix |
| CVE-2024-31322 | Google Android AccessibilityManagerService.java privilege escalation | 7.8v3.1 | 0.1% | 2024-07-09 | Fix |
| CVE-2024-31320 | Google Android AssociationRequest.java privilege escalation | 7.8v3.1 | 0.3% | 2024-07-09 | Exploit codeFix |
| CVE-2024-31319 | Google Android NotificationManagerService.java information disclosure | 7.8v3.1 | 0.2% | 2024-07-09 | Fix |
| CVE-2024-31318 | Google Android CompanionDeviceManagerService.java privilege escalation | 7.8v3.1 | 0.1% | 2024-07-09 | Fix |
| CVE-2024-31317 | Google Android ZygoteProcess.java code execution | 7.8NVD v3.1 | 0.8% | 2024-07-09 | Exploit codeFix |
| CVE-2024-31316 | Google Android AccountManagerService.java privilege escalation | 7.8v3.1 | 0.1% | 2024-07-09 | Fix |
| CVE-2024-31315 | Google Android ManagedServices.java privilege escalation | 7.8v3.1 | 0.1% | 2024-07-09 | Fix |
| CVE-2024-31314 | Google Android ShortcutService.java denial of service | 5.5v3.1 | 0.1% | 2024-07-09 | Fix |
| CVE-2024-31313 | Google Android MessageQueueBase.h out-of-bounds write | 7.8v3.1 | 0.1% | 2024-07-09 | Fix |
| CVE-2024-31312 | Google Android multiple locations information disclosure | 5.5v3.1 | 0.1% | 2024-07-09 | Fix |
| CVE-2024-31311 | Google Android stats_event.c out-of-bounds write | 7.8v3.1 | 0.1% | 2024-07-09 | Fix |
| CVE-2024-31310 | Google Android AutofillManagerServiceImpl.java privilege escalation | 7.8v3.1 | 0.1% | 2024-07-09 | Fix |
| CVE-2024-30321 | Siemens SIMATIC PCS 7 personal information exposure | 8.2CNA v4.0 | 0.5% | 2024-07-09 | Fix |
| CVE-2024-30105 | Microsoft .NET and Visual Studio denial of service | 7.5CNA v3.1 | 2.9% | 2024-07-09 | Fix |
| CVE-2024-30098 | Microsoft Windows Cryptographic services security feature bypass | 7.5CNA v3.1 | 1.3% | 2024-07-09 | Fix |
| CVE-2024-30081 | Microsoft Windows NTLM spoofing | 7.1CNA v3.1 | 23.8% | 2024-07-09 | Fix |
| CVE-2024-30079 | Microsoft Windows Remote Access Connection Manager elevation of privilege | 7.8CNA v3.1 | 0.7% | 2024-07-09 | Fix |
| CVE-2024-30071 | Microsoft Windows Remote Access Connection Manager information disclosure | 4.7CNA v3.1 | 0.6% | 2024-07-09 | Fix |
| CVE-2024-30061 | Microsoft Dynamics 365 (on-premises) information disclosure | 7.3CNA v3.1 | 1.4% | 2024-07-09 | Fix |
| CVE-2024-30013 | Microsoft Windows MultiPoint services remote code execution | 8.8CNA v3.1 | 1.6% | 2024-07-09 | Fix |
| CVE-2024-29153 | Samsung Exynos Modem 5123 incorrect authorization | 8.1CNA v3.1 | 0.4% | 2024-07-09 | Fix |
| CVE-2024-28928 | SQL Server Native Client OLE DB Provider remote code execution | 8.8CNA v3.1 | 1.6% | 2024-07-09 | Fix |
| CVE-2024-28899 | Microsoft Windows secure Boot security feature bypass | 8.8CNA v3.1 | 1.2% | 2024-07-09 | Fix |
| CVE-2024-28751 | ifm Smart PLC telnet service hard-coded credentials | 9.1CNA v3.1 | 0.6% | 2024-07-09 | Fix |
| CVE-2024-28750 | ifm Smart PLC deleting file function command injection | 7.2CNA v3.1 | 0.8% | 2024-07-09 | Fix |
| CVE-2024-28749 | ifm Smart PLC writing file function command injection | 7.2CNA v3.1 | 0.8% | 2024-07-09 | Fix |
| CVE-2024-28748 | ifm Smart PLC reading file function command injection | 7.2CNA v3.1 | 0.8% | 2024-07-09 | Fix |
| CVE-2024-28747 | ifm Smart PLC SmartSPS hard-coded credentials | 9.8CNA v3.1 | 0.7% | 2024-07-09 | Fix |
| CVE-2024-28068 | Samsung Exynos Modem 5123 null pointer dereference | 5.3CNA v3.1 | 0.2% | 2024-07-09 | Fix |
| CVE-2024-28067 | Samsung Exynos Modem 5300 improper certificate validation | 3.7NVD v3.1 | 0.3% | 2024-07-09 | Fix |
| CVE-2024-27785 | Fortinet FortiAIOps CSV injection | 5.1CNA v3.1 | 0.4% | 2024-07-09 | Fix |
| CVE-2024-27784 | Fortinet FortiAIOps sensitive information in log files | 8.3CNA v3.1 | 0.8% | 2024-07-09 | Fix |
| CVE-2024-27783 | Fortinet FortiAIOps cross-site request forgery | 7.2CNA v3.1 | 0.3% | 2024-07-09 | Fix |
| CVE-2024-27782 | Fortinet FortiAIOps insufficient session expiration | 7.7CNA v3.1 | 0.7% | 2024-07-09 | Fix |
| CVE-2024-27386 | Samsung Exynos 1380 improper input validation | 6.7CNA v3.1 | 0.2% | 2024-07-09 | Fix |
| CVE-2024-27385 | Samsung Exynos 1380 improper input validation | 6.7CNA v3.1 | 0.2% | 2024-07-09 | Fix |
| CVE-2024-27363 | Samsung Exynos mobile processors information disclosure | 6.0CNA v3.1 | 0.2% | 2024-07-09 | |
| CVE-2024-27362 | Samsung Exynos 1280 improper quantity validation | 7.5v3.1 | 0.3% | 2024-07-09 | Fix |
| CVE-2024-27361 | Samsung Exynos 1080 time-of-check time-of-use race condition | 4.1v3.1 | 0.1% | 2024-07-09 | Fix |
| CVE-2024-27360 | Samsung Exynos 1080 improper quantity validation | 7.5v3.1 | 0.4% | 2024-07-09 | Fix |
| CVE-2024-27183 | Extension Dj-extensions.com XSS vulnerability in DJ-HelpfulArticles component for Joomla | 6.1NVD v3.1 | 0.3% | 2024-07-09 | |
| CVE-2024-26279 | Joomla! CMS Core XSS in Wrapper extensions | 6.1v3.1 | 0.5% | 2024-07-09 | Fix |
| CVE-2024-26278 | Joomla! CMS core XSS in com_fields default field value | 6.1v3.1 | 0.4% | 2024-07-09 | Fix |
| CVE-2024-26184 | Microsoft Windows secure Boot security feature bypass | 6.8CNA v3.1 | 1.0% | 2024-07-09 | Fix |
| CVE-2024-26015 | Fortinet FortiOS and FortiProxy IP address validation vulnerability | 3.1CNA v3.1 | 0.5% | 2024-07-09 | Fix |
| CVE-2024-23711 | Google Android devicemem_server.c arbitrary code execution | 7.8v3.1 | 0.1% | 2024-07-09 | Fix |
| CVE-2024-23698 | Google Android rgxfwutils.c arbitrary code execution | 7.8v3.1 | 0.1% | 2024-07-09 | Fix |
| CVE-2024-23697 | Google Android rgxta3d.c arbitrary code execution | 7.8v3.1 | 0.1% | 2024-07-09 | Fix |
| CVE-2024-23696 | Google Android rgxta3d.c arbitrary code execution | 7.8v3.1 | 0.1% | 2024-07-09 | Fix |
| CVE-2024-23695 | Google Android cache_km.c out-of-bounds write | 7.8v3.1 | 0.1% | 2024-07-09 | Fix |
| CVE-2024-23663 | Fortinet FortiExtender improper access control | 8.1CNA v3.1 | 0.6% | 2024-07-09 | Fix |
| CVE-2024-22477 | PingFederate OIDC Policy Management Editor cross-site scripting | 1.8CNA v3.1 | 0.2% | 2024-07-09 | |
| CVE-2024-22377 | PingFederate Runtime Node path traversal | 5.3CNA v3.1 | 0.4% | 2024-07-09 | |
| CVE-2024-22271 | Spring Cloud Function Web DOS | 8.2CNA v3.1 | 0.4% | 2024-07-09 | Fix |
| CVE-2024-22062 | Permissions and access control vulnerability in ZTE ZXCLOUD iRAI | 6.3CNA v3.1 | 0.2% | 2024-07-09 | Fix |
| CVE-2024-22020 | Node.js Node code injection | 6.5CNA v3.0 | 1.1% | 2024-07-09 | Fix |
| CVE-2024-21993 | Information disclosure vulnerability in SnapCenter | 5.7CNA v3.1 | 0.2% | 2024-07-09 | Fix |
| CVE-2024-21832 | PingFederate REST API Data Store injection | 3.5CNA v3.1 | 0.2% | 2024-07-09 | |
| CVE-2024-21759 | Fortinet FortiPortal insecure direct object reference | 3.9CNA v3.1 | 0.3% | 2024-07-09 | Fix |
| CVE-2024-21731 | Joomla! CMS core XSS in StringHelper::truncate method | 6.1v3.1 | 0.4% | 2024-07-09 | Fix |
| CVE-2024-21730 | Joomla! CMS core Self-XSS in fancyselect list field layout | 5.4v3.1 | 0.4% | 2024-07-09 | Fix |
| CVE-2024-21729 | Joomla! CMS core XSS in accessible media selection field | 6.1v3.1 | 0.4% | 2024-07-09 | Fix |
| CVE-2024-21449 | SQL Server Native Client OLE DB Provider remote code execution | 8.8CNA v3.1 | 1.6% | 2024-07-09 | Fix |
| CVE-2024-21428 | SQL Server Native Client OLE DB Provider remote code execution | 8.8CNA v3.1 | 1.8% | 2024-07-09 | Fix |
| CVE-2024-21425 | SQL Server Native Client OLE DB Provider remote code execution | 8.8CNA v3.1 | 1.6% | 2024-07-09 | Fix |
| CVE-2024-21415 | SQL Server Native Client OLE DB Provider remote code execution | 8.8CNA v3.1 | 1.8% | 2024-07-09 | Fix |
| CVE-2024-21414 | SQL Server Native Client OLE DB Provider remote code execution | 8.8CNA v3.1 | 1.9% | 2024-07-09 | Fix |
| CVE-2024-21398 | SQL Server Native Client OLE DB Provider remote code execution | 8.8CNA v3.1 | 1.9% | 2024-07-09 | Fix |
| CVE-2024-21373 | SQL Server Native Client OLE DB Provider remote code execution | 8.8CNA v3.1 | 1.8% | 2024-07-09 | Fix |
| CVE-2024-21335 | SQL Server Native Client OLE DB Provider remote code execution | 8.8CNA v3.1 | 1.8% | 2024-07-09 | Fix |
| CVE-2024-21333 | SQL Server Native Client OLE DB Provider remote code execution | 8.8CNA v3.1 | 1.8% | 2024-07-09 | Fix |
| CVE-2024-21332 | SQL Server Native Client OLE DB Provider remote code execution | 8.8CNA v3.1 | 1.8% | 2024-07-09 | Fix |
| CVE-2024-21331 | SQL Server Native Client OLE DB Provider remote code execution | 8.8CNA v3.1 | 1.6% | 2024-07-09 | Fix |
| CVE-2024-21317 | SQL Server Native Client OLE DB Provider remote code execution | 8.8CNA v3.1 | 1.6% | 2024-07-09 | Fix |
| CVE-2024-21308 | SQL Server Native Client OLE DB Provider remote code execution | 8.8CNA v3.1 | 1.6% | 2024-07-09 | Fix |
| CVE-2024-21303 | SQL Server Native Client OLE DB Provider remote code execution | 8.8CNA v3.1 | 1.5% | 2024-07-09 | Fix |
| CVE-2024-20785 | Adobe InDesign 2024 TIFF File Parsing memory corruption remote code execution | 7.8CNA v3.1 | 0.4% | 2024-07-09 | Fix |
| CVE-2024-20783 | Adobe InDesign 2024 RLE File Parsing Heap memory corruption | 7.8CNA v3.1 | 0.4% | 2024-07-09 | Fix |
| CVE-2024-20782 | Adobe InDesign WMF File Parsing out of bound write | 7.8CNA v3.1 | 0.3% | 2024-07-09 | Fix |
| CVE-2024-20781 | Adobe InDesign TIF File Parsing Heap memory corruption | 7.8CNA v3.1 | 0.3% | 2024-07-09 | Fix |
| CVE-2024-20701 | SQL Server Native Client OLE DB Provider remote code execution | 8.8CNA v3.1 | 1.6% | 2024-07-09 | Fix |
| CVE-2024-6615 | Mozilla memory safety bugs fixed in Firefox 128 and Thunderbird 128 | 8.8CISA ADP v3.1 | 0.4% | 2024-07-09 | Fix |
| CVE-2024-6614 | Mozilla Firefox incorrect listing of stack frames | 4.3CISA ADP v3.1 | 0.4% | 2024-07-09 | Fix |
| CVE-2024-6613 | Mozilla Firefox incorrect listing of stack frames | 5.5CISA ADP v3.1 | 0.2% | 2024-07-09 | Fix |
| CVE-2024-6612 | Mozilla Firefox CSP violation leakage when using devtools | 5.3CISA ADP v3.1 | 0.5% | 2024-07-09 | Fix |
| CVE-2024-6611 | Mozilla Firefox incorrect handling of SameSite cookies | 9.8CISA ADP v3.1 | 0.7% | 2024-07-09 | Fix |
| CVE-2024-6610 | Mozilla Firefox form validation popups could block exiting full-screen mode | 4.3v3.1 | 0.3% | 2024-07-09 | Fix |
| CVE-2024-6609 | Mozilla Firefox memory corruption in NSS | 8.8v3.1 | 0.6% | 2024-07-09 | Fix |
| CVE-2024-6608 | Mozilla Firefox cursor could be moved out of the viewport using pointerlock | 4.3v3.1 | 0.4% | 2024-07-09 | Fix |
| CVE-2024-6607 | Mozilla Firefox leaving pointerlock by pressing the escape key could be prevented | 8.8CISA ADP v3.1 | 0.6% | 2024-07-09 | Fix |
| CVE-2024-6606 | Mozilla Firefox out-of-bounds read in clipboard component | 8.2CISA ADP v3.1 | 0.4% | 2024-07-09 | Fix |
| CVE-2024-6605 | Mozilla Firefox Android missed activation delay to prevent tapjacking | 8.8CISA ADP v3.1 | 0.4% | 2024-07-09 | Fix |
| CVE-2024-6604 | Mozilla memory safety bugs fixed in Firefox 128, Firefox ESR, Thunderbird 128, and Thunderbird | 7.5CISA ADP v3.1 | 0.5% | 2024-07-09 | Fix |
| CVE-2024-6603 | Mozilla Firefox memory corruption in thread creation | 7.4CISA ADP v3.1 | 0.5% | 2024-07-09 | Fix |
| CVE-2024-6602 | Mozilla Firefox memory corruption in NSS | 9.8CISA ADP v3.1 | 1.0% | 2024-07-09 | Fix |
| CVE-2024-6601 | Mozilla Firefox race condition in permission assignment | 4.7CISA ADP v3.1 | 0.4% | 2024-07-09 | Fix |
| CVE-2024-6600 | Mozilla Firefox memory corruption in WebGL API | 6.3CISA ADP v3.1 | 0.4% | 2024-07-09 | Fix |
| CVE-2024-6598 | Denial of service on KNIME Business Hub when certain jobs are executed | 7.1CNA v4.0 | 0.5% | 2024-07-09 | Fix |
| CVE-2024-6527 | SQL injection in MegaBIP | 9.3CNA v4.0 | 0.6% | 2024-07-09 | |
| CVE-2024-6501 | Red Hat Enterprise Linux 9 Networkmanager: Denial of service | 3.1CNA v3.1 | 0.5% | 2024-07-09 | Fix |
| CVE-2024-6391 | oik WordPress plugin stored cross-site scripting | 6.4CNA v3.1 | 0.3% | 2024-07-09 | Fix |
| CVE-2024-6365 | Product Table by WBW WordPress plugin unauthenticated remote code execution | 9.8CNA v3.1 | 1.2% | 2024-07-09 | Fix |
| CVE-2024-6334 | Easy Table of Contents WordPress plugin Editor+ stored XSS | 6.1CISA ADP v3.1 | 0.4% | 2024-07-09 | Fix |
| CVE-2024-6321 | ScrollTo Bottom WordPress plugin cross-site request forgery to arbitrary file upload | 8.8CNA v3.1 | 0.4% | 2024-07-09 | |
| CVE-2024-6320 | ScrollTo Top WordPress plugin cross-site request forgery to arbitrary file upload | 8.8CNA v3.1 | 0.4% | 2024-07-09 | |
| CVE-2024-6317 | Generate PDF using Contact Form 7 WordPress plugin cross-site request forgery | 8.8CNA v3.1 | 0.6% | 2024-07-09 | Fix |
| CVE-2024-6316 | Generate PDF using Contact Form 7 WordPress plugin cross-site request forgery | 8.8CNA v3.1 | 0.5% | 2024-07-09 | Fix |
| CVE-2024-6314 | IQ Testimonials WordPress plugin unauthenticated arbitrary file upload | 9.8CNA v3.1 | 0.9% | 2024-07-09 | |
| CVE-2024-6313 | Gutenberg Forms WordPress plugin unauthenticated arbitrary file upload | 9.8CNA v3.1 | 1.1% | 2024-07-09 | |
| CVE-2024-6310 | Advanced AJAX Page Loader WordPress plugin cross-site request forgery to arbitrary file upload | 8.8CNA v3.1 | 0.5% | 2024-07-09 | |
| CVE-2024-6309 | Attachment File Icons WordPress plugin cross-site request forgery to arbitrary file upload | 8.8CNA v3.1 | 0.4% | 2024-07-09 | |
| CVE-2024-6237 | Red Hat Directory Server 389-ds-base: Unauthenticated user can trigger a DoS | 6.5CNA v3.1 | 0.9% | 2024-07-09 | Fix |
| CVE-2024-6222 | Docker Desktop extension and dashboard IPC messaging improper channel restriction | 7.3CNA v4.0 | 0.6% | 2024-07-09 | Fix |
| CVE-2024-6180 | EventON WordPress plugin unauthorized access | 7.2CNA v3.1 | 0.5% | 2024-07-09 | Fix |
| CVE-2024-6171 | Unlimited Elements For Elementor WordPress plugin IP Address spoofing to Antispam bypass | 5.3CNA v3.1 | 0.2% | 2024-07-09 | Fix |
| CVE-2024-6170 | Unlimited Elements For Elementor WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.5% | 2024-07-09 | Fix |
| CVE-2024-6169 | Unlimited Elements For Elementor WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.5% | 2024-07-09 | Fix |
| CVE-2024-6168 | Just Custom Fields WordPress plugin cross-site request forgery via AJAX actions | 4.3CNA v3.1 | 0.2% | 2024-07-09 | |
| CVE-2024-6167 | Just Custom Fields WordPress plugin missing authorization via AJAX actions | 4.3CNA v3.1 | 0.3% | 2024-07-09 | |
| CVE-2024-6166 | Unlimited Elements For Elementor WordPress plugin time-based SQL injection | 8.8CNA v3.1 | 0.5% | 2024-07-09 | Fix |
| CVE-2024-6161 | Default Thumbnail Plus WordPress plugin authenticated (Contributor+) arbitrary file upload | 8.8CNA v3.1 | 0.8% | 2024-07-09 | |
| CVE-2024-6123 | Bit Form WordPress plugin authenticated (Administrator+) arbitrary file upload | 7.2CNA v3.1 | 1.0% | 2024-07-09 | Fix |
| CVE-2024-6069 | Pie Register plugin installation function missing authorization | 8.8CNA v3.1 | 0.6% | 2024-07-09 | Fix |
| CVE-2024-5993 | Cliengo - Chatbot WordPress plugin missing authorization Authorized Chatbot settings update | 5.4CNA v3.1 | 0.5% | 2024-07-09 | Fix |
| CVE-2024-5992 | Cliengo - Chatbot WordPress plugin missing authorization to unauthenticated Chatbot settings update | 6.5CNA v3.1 | 0.5% | 2024-07-09 | Fix |
| CVE-2024-5974 | Firebox Authenticated buffer overflow | 8.6CNA v4.0 | 1.1% | 2024-07-09 | Fix |
| CVE-2024-5946 | Squelch Tabs and Accordions Shortcodes WordPress plugin stored cross-site scripting | 6.4CNA v3.1 | 0.3% | 2024-07-09 | Fix |
| CVE-2024-5937 | Simple Alert Boxes WordPress plugin stored cross-site scripting | 6.4CNA v3.1 | 0.3% | 2024-07-09 | |
| CVE-2024-5881 | Webico Slider Flatsome Addons WordPress plugin stored cross-site scripting | 6.4CNA v3.1 | 0.3% | 2024-07-09 | |
| CVE-2024-5856 | Comment Images Reloaded WordPress plugin authenticated (Subscriber+) arbitrary Media deletion | 4.3CNA v3.1 | 0.4% | 2024-07-09 | |
| CVE-2024-5855 | Media Hygiene WordPress plugin missing authorization authenticated arbitrary Attachment deletion | 4.3CNA v3.1 | 0.4% | 2024-07-09 | Fix |
| CVE-2024-5810 | WP2Speed Faster WordPress plugin unauthorized access | 5.3CNA v3.1 | 0.4% | 2024-07-09 | |
| CVE-2024-5802 | URL Shortener by MyThemeShop WordPress plugin Admin+ stored XSS | 4.8NVD v3.1 | 0.4% | 2024-07-09 | |
| CVE-2024-5793 | Houzez Theme - Functionality WordPress plugin authenticated (Seller+) SQL injection | 8.8CNA v3.1 | 0.5% | 2024-07-09 | Fix |
| CVE-2024-5704 | XPlainer WordPress plugin unauthorized access | 4.3CNA v3.1 | 0.4% | 2024-07-09 | Fix |
| CVE-2024-5669 | XPlainer WordPress plugin unauthorized access | 6.4CNA v3.1 | 0.4% | 2024-07-09 | Fix |
| CVE-2024-5652 | Docker Desktop exec-path daemon configuration denial of service | 6.1CNA v3.1 | 0.4% | 2024-07-09 | Fix |
| CVE-2024-5648 | LearnDash LMS - Reports Free WordPress plugin missing authorization to plugin settings update | 5.4CNA v3.1 | 0.4% | 2024-07-09 | Fix |
| CVE-2024-5634 | Longse Technology LBH30FE200W weak credentials | 8.6CNA v4.0 | 0.2% | 2024-07-09 | |
| CVE-2024-5633 | Longse Technology LBH30FE200W hidden functionality | 7.5CNA v4.0 | 0.6% | 2024-07-09 | Exploit code |
| CVE-2024-5632 | Longse Technology NVR3608PGE2W default credentials | 5.3CNA v4.0 | 0.2% | 2024-07-09 | |
| CVE-2024-5631 | Longse Technology NVR3608PGE2W cleartext transmission of sensitive information | 6.0CNA v4.0 | 0.2% | 2024-07-09 | |
| CVE-2024-5600 | SCSS Happy Compiler WordPress plugin stored cross-site scripting | 5.4CNA v3.1 | 0.3% | 2024-07-09 | |
| CVE-2024-5569 | Denial of service via crafted zip file in jaraco/zipp | 6.2CNA v3.0 | 0.2% | 2024-07-09 | Fix |
| CVE-2024-5549 | Data leak through CORS misconfiguration in stitionai/Devika | 8.1CNA v3.0 | 0.3% | 2024-07-09 | |
| CVE-2024-5488 | SEOPress WordPress plugin unauthenticated object injection | 9.8CISA ADP v3.1 | 3.7% | 2024-07-09 | NucleiFix |
| CVE-2024-5479 | Easy Pixels by JEVNET WordPress plugin unauthenticated stored cross-site scripting | 7.2CNA v3.1 | 0.4% | 2024-07-09 | |
| CVE-2024-5457 | Panda Video WordPress plugin authenticated (Contributor+) stored cross-site scripting | 5.4v3.1 | 0.4% | 2024-07-09 | Fix |
| CVE-2024-5456 | Panda Video WordPress plugin authenticated (Contributor+) local file inclusion | 8.8CNA v3.1 | 0.9% | 2024-07-09 | Fix |
| CVE-2024-5441 | Modern Events Calendar WordPress plugin authenticated (Subscriber+) arbitrary file upload | 8.8CNA v3.1 | 1.1% | 2024-07-09 | Fix |
| CVE-2024-4944 | Mobile VPN with SSL local privilege escalation | 8.6CNA v4.0 | 0.3% | 2024-07-09 | Fix |
| CVE-2024-4868 | Extensions for Elementor WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.4% | 2024-07-09 | Fix |
| CVE-2024-4862 | WPBITS Addons For Elementor Page Builder WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.5% | 2024-07-09 | Fix |
| CVE-2024-4667 | Blog, Posts and Category Filter for Elementor WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.3% | 2024-07-09 | Fix |
| CVE-2024-4102 | Pricing Table WordPress plugin missing authorization | 5.4CNA v3.1 | 0.3% | 2024-07-09 | |
| CVE-2024-4100 | Pricing Table WordPress plugin cross-site request forgery via ajax | 5.3CNA v3.1 | 0.2% | 2024-07-09 | |
| CVE-2024-3608 | PickPlugins Product Designer for WooCommerce attachment deletion function missing authorization | 5.3CNA v3.1 | 0.6% | 2024-07-09 | Fix |
| CVE-2024-3604 | OSM OpenStreetMap WordPress plugin authenticated (Contributor+) SQL injection | 8.8NVD v3.1 | 0.5% | 2024-07-09 | Fix |
| CVE-2024-3603 | OSM OpenStreetMap WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.3% | 2024-07-09 | Fix |
| CVE-2024-3596 | IETF RFC RADIUS protocol under RFC2865 is vulnerable to forgery attacks | 9.0NVD v3.1 | 14.9% | 2024-07-09 | Fix |
| CVE-2024-3563 | Genesis Blocks WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.3% | 2024-07-09 | Fix |
| CVE-2024-3410 | DN Footer Contacts WordPress plugin Admin+ stored XSS | 4.3CISA ADP v3.1 | 0.3% | 2024-07-09 | Fix |
| CVE-2024-3228 | Social Sharing Plugin Kiwi WordPress plugin information disclosure | 5.3CNA v3.1 | 0.4% | 2024-07-09 | Fix |
| CVE-2024-2177 | Improper restriction of rendered UI layers or frames in GitLab | 6.8CNA v3.1 | 0.7% | 2024-07-09 | Fix |
| CVE-2024-39896 | Directus allows SSO User Enumeration | 7.5CNA v3.1 | 0.5% | 2024-07-08 | Fix |
| CVE-2024-39895 | Directus GraphQL Field Duplication denial of service (DoS) | 6.5CNA v3.1 | 0.8% | 2024-07-08 | Fix |
| CVE-2024-39743 | IBM MQ Container denial of service | 5.9CNA v3.1 | 0.6% | 2024-07-08 | Fix |
| CVE-2024-39742 | IBM MQ Container authentication bypass | 8.1CNA v3.1 | 0.8% | 2024-07-08 | Fix |
| CVE-2024-39723 | IBM FlashSystem denial of service | 4.6CNA v3.1 | 0.2% | 2024-07-08 | Fix |
| CVE-2024-39701 | Directus _in filter improper access control | 6.3CNA v3.1 | 0.4% | 2024-07-08 | Fix |
| CVE-2024-39699 | Directus has a blind SSRF on File Import | 5.0CNA v3.1 | 0.4% | 2024-07-08 | Fix |
| CVE-2024-39695 | Exiv2 has an out-of-bounds read in AsfVideo::streamProperties | 5.3CNA v3.1 | 0.6% | 2024-07-08 | Fix |
| CVE-2024-39677 | NHibernate discriminator mappings and HQL queries SQL injection | 5.9CNA v3.1 | 0.6% | 2024-07-08 | Fix |
| CVE-2024-39312 | Botan has an Authorization Error due to Name Constraint Decoding Bug | 5.3CNA v3.1 | 0.3% | 2024-07-08 | Fix |
| CVE-2024-39308 | railsadminteam rails_admin RailsAdmin cross-site scripting vulnerability in the list view | 6.8CNA v3.0 | 0.6% | 2024-07-08 | Fix |
| CVE-2024-39203 | Zblogcn Z-BlogPHP Backend Theme Management module cross-site scripting | 6.1v3.1 | 0.7% | 2024-07-08 | Exploit code |
| CVE-2024-39202 | D-Link Dir-823x AX3000 OS command injection | 8.8v3.1 | 1.4% | 2024-07-08 | |
| CVE-2024-38372 | Undici vulnerable to data leak when using response.arrayBuffer | 2.0CNA v3.1 | 0.5% | 2024-07-08 | Fix |
| CVE-2024-38330 | IBM i privilege escalation | 7.0CNA v3.1 | 0.3% | 2024-07-08 | Fix |
| CVE-2024-37999 | Siemens Medicalis Workflow Orchestrator privilege escalation | 8.5CNA v4.0 | 0.1% | 2024-07-08 | |
| CVE-2024-37528 | IBM Cloud Pak for Business Automation cross-site scripting | 4.8CNA v3.1 | 0.3% | 2024-07-08 | Fix |
| CVE-2024-37389 | Apache NiFi: Improper neutralization of Input in Parameter Context Description | 4.6CNA v3.1 | 24.0% | 2024-07-08 | Fix |
| CVE-2024-34702 | Botan has a denial of service due to Excessive Name Constraints | 5.3CNA v3.1 | 0.8% | 2024-07-08 | Fix |
| CVE-2024-34603 | Samsung Mobile Devices improper access control | 4.0CNA v3.1 | 0.1% | 2024-07-08 | Fix |
| CVE-2024-34602 | Samsung Mobile Devices implicit intent for sensitive communication | 3.3CNA v3.1 | 0.2% | 2024-07-08 | Fix |
| CVE-2024-31897 | IBM Cloud Pak for Business Automation server-side request forgery | 4.3CNA v3.1 | 0.3% | 2024-07-08 | Fix |
| CVE-2024-31504 | Embedded-solutions FreeModbus SILA Embedded Solutions GmbH buffer overflow | 7.5v3.1 | 0.6% | 2024-07-08 | |
| CVE-2024-28882 | OpenVPN missing resource release | 4.3CISA ADP v3.1 | 0.7% | 2024-07-08 | Fix |
| CVE-2024-27903 | OpenVPN Windows plug-in loading vulnerability | 9.8v3.1 | 8.9% | 2024-07-08 | Fix |
| CVE-2024-27459 | OpenVPN-GUI stack-based buffer overflow | 7.8v3.1 | 8.3% | 2024-07-08 | Fix |
| CVE-2024-25639 | Prompt injection triggered XSS vulnerability in Khoj Obsidian, Desktop and Web clients | 5.9CNA v3.1 | 0.6% | 2024-07-08 | Fix |
| CVE-2024-24974 | OpenVPN 2 improper channel restriction | 7.5v3.1 | 9.8% | 2024-07-08 | Fix |
| CVE-2024-23562 | HCL Domino is susceptible to an information disclosure | 5.3CNA v3.1 | 0.5% | 2024-07-08 | |
| CVE-2024-21778 | Realtek rtl819x Jungle SDK heap-based buffer overflow | 7.2v3.1 | 0.9% | 2024-07-08 | |
| CVE-2024-6580 | /n software IPWorks SSH insufficient file access verification | 6.5v3.1 | 0.1% | 2024-07-08 | Fix |
| CVE-2024-6564 | Renesas rcar_gen3_v2.5 buffer overflow in Rensas RCAR | 6.7v3.1 | 0.2% | 2024-07-08 | Fix |
| CVE-2024-6563 | Renesas rcar_gen3_v2.5 buffer overflow arbitrary Write | 6.7NVD v3.1 | 0.2% | 2024-07-08 | Fix |
| CVE-2024-6409 | OpenSSH sshd signal handler race condition | 7.0CNA v3.1 | 27.9% | 2024-07-08 | Emerging ThreatsFix |
| CVE-2024-6227 | Infinite loop in aimhubio/aim | 7.5v3.1 | 0.6% | 2024-07-08 | |
| CVE-2024-6163 | Checkmk local IP restriction of internal HTTP endpoints | 5.3CNA v3.1 | 0.5% | 2024-07-08 | Fix |
| CVE-2024-5971 | Red Hat build of Apache Camel undertow denial of service | 7.5CNA v3.1 | 2.9% | 2024-07-08 | Fix |
| CVE-2024-5711 | Stored XSS in stitionai/Devika | 6.1NVD v3.1 | 0.5% | 2024-07-08 | |
| CVE-2024-4882 | URL redirection to arbitrary Site Exists in Sitefinity | 5.3CNA v4.0 | 0.4% | 2024-07-08 | Fix |
| CVE-2024-4341 | IDOR in ExtremePacs's Extreme XDS | 6.5v3.1 | 0.3% | 2024-07-08 | Fix |
| CVE-2024-3653 | Red Hat build of Quarkus undertow: Learningpushhandler can lead to remote memory DoS attacks | 5.3CNA v3.1 | 1.9% | 2024-07-08 | Fix |
| CVE-2024-1305 | OpenVPN tap-windows6 integer overflow | 9.8CISA ADP v3.1 | 15.4% | 2024-07-08 | Fix |
| CVE-2024-40614 | EGroupware mishandles an ORDER BY clause | 9.8v3.1 | 0.7% | 2024-07-07 | Fix |
| CVE-2024-40605 | mediawiki cross-site scripting | 4.8v3.1 | 0.3% | 2024-07-07 | Fix |
| CVE-2024-40604 | mediawiki cross-site scripting | 4.8v3.1 | 0.3% | 2024-07-07 | Fix |
| CVE-2024-40603 | mediawiki cross-site request forgery | 4.3v3.1 | 0.2% | 2024-07-07 | Fix |
| CVE-2024-40602 | mediawiki cross-site scripting | 4.8v3.1 | 0.3% | 2024-07-07 | Fix |
| CVE-2024-40601 | mediawiki cross-site request forgery | 6.5v3.1 | 0.2% | 2024-07-07 | Fix |
| CVE-2024-40600 | mediawiki cross-site scripting | 4.8v3.1 | 0.3% | 2024-07-07 | Fix |
| CVE-2024-40599 | mediawiki cross-site scripting | 4.8v3.1 | 0.3% | 2024-07-07 | Fix |
| CVE-2024-40598 | mediawiki sensitive information in log files | 4.3v3.1 | 0.3% | 2024-07-07 | Fix |
| CVE-2024-40597 | mediawiki information disclosure | 7.5CISA ADP v3.1 | 0.4% | 2024-07-07 | Fix |
| CVE-2024-40596 | mediawiki sensitive information in log files | 4.3v3.1 | 0.3% | 2024-07-07 | Fix |
| CVE-2024-6539 | heyewei SpringBootCMS Guestbook guestbook cross-site scripting | 4.8v3.1 | 0.3% | 2024-07-07 | |
| CVE-2024-6229 | Stored XSS in stangirard/Quivr | 5.4v3.1 | 0.3% | 2024-07-07 | |
| CVE-2024-3651 | Denial of service via Quadratic Complexity in kjd/idna | 7.5v3.1 | 1.4% | 2024-07-07 | Fix |
| CVE-2024-40594 | OpenAI ChatGPT app for macOS cleartext storage of sensitive information | 2.3CNA v3.1 | 0.1% | 2024-07-06 | |
| CVE-2024-39486 | Linux kernel DRM file pid reference counting use-after-free | 7.8CNA v3.1 | 0.2% | 2024-07-06 | Fix |
| CVE-2024-37554 | UltraAddons WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.2% | 2024-07-06 | |
| CVE-2024-37553 | Testimonials Widget WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.3% | 2024-07-06 | |
| CVE-2024-37547 | Elementor Addons by Livemesh WordPress plugin local file inclusion | 6.5v3.1 | 0.5% | 2024-07-06 | Fix |
| CVE-2024-37546 | Image Hover Effects for Elementor with Lightbox and Flipbox WordPress plugin cross-site scripting | 5.4v3.1 | 0.2% | 2024-07-06 | |
| CVE-2024-37542 | Gallery Image and Video Gallery with Thumbnails WordPress plugin broken access control | 6.3v3.1 | 0.2% | 2024-07-06 | |
| CVE-2024-37541 | Elementor Addons, Widgets and Enhancements Stax WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.2% | 2024-07-06 | Fix |
| CVE-2024-37539 | WP To Do WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.3% | 2024-07-06 | Fix |
| CVE-2024-37260 | Foxiz WordPress theme server side request forgery (SSRF) | 9.3v3.1 | 0.3% | 2024-07-06 | Fix |
| CVE-2024-37234 | Academy LMS WordPress plugin open redirection | 3.5CNA v3.1 | 0.3% | 2024-07-06 | Fix |
| CVE-2024-37208 | WP Scraper WordPress plugin server side request forgery (SSRF) | 4.9CNA v3.1 | 0.2% | 2024-07-06 | Fix |
| CVE-2024-6095 | SSRF and partial LFI in /models/apply endpoint in mudler/LocalAI | 5.8v3.1 | 2.7% | 2024-07-06 | NucleiExploit codeFix |
| CVE-2024-5616 | CSRF vulnerability in mudler/LocalAI | 4.3CNA v3.0 | 0.3% | 2024-07-06 | Fix |
| CVE-2024-39864 | Apache CloudStack: Integration API service uses dynamic port when disabled | 9.8v3.1 | 1.8% | 2024-07-05 | Fix |
| CVE-2024-39696 | Evmos vulnerable to exploit of smart contract account and vesting | 8.8CNA v3.1 | 0.5% | 2024-07-05 | Fix |
| CVE-2024-39691 | Matrix.org matrix-appservice-irc reply event access check vulnerability | 4.3CNA v3.1 | 0.5% | 2024-07-05 | Fix |
| CVE-2024-39689 | Certifi removes GLOBALTRUST root certificate | 7.5CNA v3.1 | 1.0% | 2024-07-05 | Exploit codeFix |
| CVE-2024-39687 | Fedify vulnerable to allowing access to internal network resources | 7.2CNA v3.1 | 0.6% | 2024-07-05 | Fix |
| CVE-2024-39485 | Linux kernel async improper initialization | 5.5v3.1 | 0.2% | 2024-07-05 | Fix |
| CVE-2024-39484 | Linux kernel davinci MMC host driver resource leak | 5.5v3.1 | 0.2% | 2024-07-05 | Fix |
| CVE-2024-39483 | Linux kernel KVM SVM virtual NMI handling vulnerability | 7.1CNA v3.1 | 0.2% | 2024-07-05 | Fix |
| CVE-2024-39482 | Linux kernel bcache btree iterator vulnerability | 7.8CNA v3.1 | 0.2% | 2024-07-05 | Fix |
| CVE-2024-39481 | Linux kernel media controller pipeline graph walk denial of service | 7.8CNA v3.1 | 0.2% | 2024-07-05 | Fix |
| CVE-2024-39480 | Linux kernel kdb tab completion buffer overflow | 8.4CNA v3.1 | 0.3% | 2024-07-05 | Fix |
| CVE-2024-39479 | Linux kernel i915 hwmon driver vulnerability | 7.8CNA v3.1 | 0.2% | 2024-07-05 | Fix |
| CVE-2024-39478 | Linux kernel StarFive crypto driver vulnerability | 7.8CNA v3.1 | 0.2% | 2024-07-05 | Fix |
| CVE-2024-39477 | Linux kernel hugetlb reservation accounting vulnerability | 7.8CNA v3.1 | 0.2% | 2024-07-05 | Fix |
| CVE-2024-39476 | Linux kernel MD RAID5 driver deadlock | 5.5v3.1 | 0.2% | 2024-07-05 | Fix |
| CVE-2024-39475 | Linux kernel Savage framebuffer driver divide by zero | 5.5v3.1 | 0.2% | 2024-07-05 | Fix |
| CVE-2024-39474 | Linux kernel vmalloc allocator vulnerability | 5.5v3.1 | 0.2% | 2024-07-05 | Fix |
| CVE-2024-39473 | Linux kernel SOF IPC4 topology parser null pointer dereference | 5.5v3.1 | 0.2% | 2024-07-05 | Fix |
| CVE-2024-39472 | Linux kernel xfs log recovery out-of-bounds access | 7.3CNA v3.1 | 0.3% | 2024-07-05 | Fix |
| CVE-2024-39321 | Bypassing IP allow-lists in traefik via HTTP/3 early data requests in QUIC 0-RTT handshakes | 7.5CNA v3.1 | 0.6% | 2024-07-05 | Fix |
| CVE-2024-39210 | Mayuri K Best House Rental Management System arbitrary file read | 7.5v3.1 | 0.8% | 2024-07-05 | Exploit code |
| CVE-2024-39182 | ISPmanager v6.98.0 information disclosure | 7.5CISA ADP v3.1 | 0.4% | 2024-07-05 | |
| CVE-2024-39178 | MyPower vc8100 tcpdump.php path traversal | 5.4CISA ADP v3.1 | 0.4% | 2024-07-05 | |
| CVE-2024-39174 | YzmCMS Publish Article function cross-site scripting | 6.1CISA ADP v3.1 | 0.3% | 2024-07-05 | |
| CVE-2024-39150 | b3log vditor arbitrary file read | 5.9CISA ADP v3.1 | 0.3% | 2024-07-05 | |
| CVE-2024-39028 | Seacms command injection | 9.8v3.1 | 1.1% | 2024-07-05 | |
| CVE-2024-39027 | Seacms SQL injection | 7.5v3.1 | 0.4% | 2024-07-05 | |
| CVE-2024-39023 | idcCMS cross-site request forgery | 8.8CISA ADP v3.1 | 0.3% | 2024-07-05 | |
| CVE-2024-39022 | idcCMS cross-site request forgery | 8.8CISA ADP v3.1 | 0.3% | 2024-07-05 | |
| CVE-2024-39021 | idcCMS cross-site request forgery | 5.4CISA ADP v3.1 | 0.2% | 2024-07-05 | |
| CVE-2024-39020 | idcCMS cross-site request forgery | 6.3CISA ADP v3.1 | 0.2% | 2024-07-05 | |
| CVE-2024-39019 | idcCMS cross-site request forgery | 5.4CISA ADP v3.1 | 0.2% | 2024-07-05 | |
| CVE-2024-38346 | Apache CloudStack: Unauthenticated cluster service port leads to remote execution | 9.8v3.1 | 3.3% | 2024-07-05 | Fix |
| CVE-2024-37903 | Mastodon has improper authorship check on audience extension for existing posts | 8.2CNA v3.1 | 0.5% | 2024-07-05 | Fix |
| CVE-2024-37769 | B1ACKC4T 14finger insecure permissions | 8.8v3.1 | 0.5% | 2024-07-05 | |
| CVE-2024-37768 | B1ACKC4T 14Finger /api/admin/user endpoint vulnerability | 9.1v3.1 | 0.6% | 2024-07-05 | |
| CVE-2024-37767 | B1ACKC4T 14finger component /api/admin/user of insecure permissions | 7.5CISA ADP v3.1 | 0.4% | 2024-07-05 | |
| CVE-2024-36041 | KDE Plasma Workspace insufficient session expiration | 7.8v3.1 | 0.3% | 2024-07-05 | Fix |
| CVE-2024-34481 | Kontextwork Drupal Wiki cross-site scripting | 6.1v3.1 | 0.6% | 2024-07-05 | Fix |
| CVE-2024-34361 | Pi-hole Blind server-side request forgery vulnerability can lead to remote code execution | 8.6CNA v3.1 | 2.8% | 2024-07-05 | Exploit codeFix |
| CVE-2024-33862 | OPCFoundation.NetStandard.Opc.Ua.Core buffer-management vulnerability | 7.5CISA ADP v3.1 | 0.6% | 2024-07-05 | Fix |
| CVE-2024-32498 | OpenStack Cinder files accessible to external parties | 6.5v3.1 | 0.8% | 2024-07-05 | Fix |
| CVE-2024-29319 | personal-management-system server-side request forgery | 9.8v3.1 | 0.4% | 2024-07-05 | |
| CVE-2024-29318 | personal-management-system cross-site scripting | 5.4v3.1 | 0.3% | 2024-07-05 | |
| CVE-2024-27717 | Eskooly cross-site request forgery | 6.5CISA ADP v3.1 | 0.2% | 2024-07-05 | |
| CVE-2024-27716 | Eskooly Web Product v.3.0 and cross-site scripting | 5.4CISA ADP v3.1 | 0.4% | 2024-07-05 | |
| CVE-2024-27715 | Eskooly unverified password change | 8.2CISA ADP v3.1 | 0.4% | 2024-07-05 | |
| CVE-2024-27713 | Eskooly privilege escalation | 8.8CISA ADP v3.1 | 0.6% | 2024-07-05 | |
| CVE-2024-27712 | Eskooly privilege escalation | 9.8v3.1 | 0.6% | 2024-07-05 | |
| CVE-2024-27711 | Eskooly improper privilege management | 8.8v3.1 | 0.4% | 2024-07-05 | |
| CVE-2024-27710 | Eskooly improper privilege management | 9.8CISA ADP v3.1 | 0.6% | 2024-07-05 | |
| CVE-2024-27709 | Eskooly Web Product v.3.0 SQL injection | 9.8CISA ADP v3.1 | 0.6% | 2024-07-05 | |
| CVE-2024-23998 | Goanother Another Redis Desktop Manager cross-site scripting | 9.6v3.1 | 0.7% | 2024-07-05 | Exploit code |
| CVE-2024-23997 | Lukasbach Yana cross-site scripting | 9.6v3.1 | 0.7% | 2024-07-05 | Exploit code |
| CVE-2024-23588 | A denial of service vulnerability affects HCL Nomad server on Domino | 5.3CNA v3.1 | 0.3% | 2024-07-05 | |
| CVE-2024-6526 | CodeIgniter Ecommerce-CodeIgniter-Bootstrap cross-site scripting | 6.1v3.1 | 0.5% | 2024-07-05 | |
| CVE-2024-6525 | D-Link DAR-7000 decodmail.php deserialization | 8.8v3.1 | 3.1% | 2024-07-05 | |
| CVE-2024-6524 | ShopXO Uploader.php server-side request forgery | 8.8v3.1 | 0.5% | 2024-07-05 | |
| CVE-2024-6523 | ZKTeco BioTime system-group-add cross-site scripting | 5.4v3.1 | 0.5% | 2024-07-05 | |
| CVE-2024-6505 | QEMU qemu-kvm: Virtio-net: Queue index out-of-bounds access in software rss | 6.8NVD v3.1 | 0.7% | 2024-07-05 | Fix |
| CVE-2024-6298 | ABB ASPECT-Enterprise remote code execution | 9.4CNA v4.0 | 19.0% | 2024-07-05 | Exploit codeFix |
| CVE-2024-6209 | ABB ASPECT-Enterprise unauthorized file access | 9.4CNA v4.0 | 17.2% | 2024-07-05 | Exploit codeFix |
| CVE-2024-5753 | Local File Read (LFI) by prompt injection via Postgres SQL in vanna-ai/vanna | 7.5CNA v3.0 | 0.6% | 2024-07-05 | |
| CVE-2024-39943 | Rejetto HFS vulnerable to OS command execution by remote authenticated users | 8.8NVD v3.1 | 39.5% | 2024-07-04 | Exploit codeFix |
| CVE-2024-39937 | Supos path traversal | 7.5v3.1 | 0.9% | 2024-07-04 | |
| CVE-2024-39936 | Qt time-of-check time-of-use race condition | 5.9NVD v3.1 | 0.5% | 2024-07-04 | Fix |
| CVE-2024-39935 | JC21 nginx-proxy-manager OS command injection | 8.8CISA ADP v3.1 | 0.9% | 2024-07-04 | |
| CVE-2024-39934 | Robotmk shared holotree usage feature privilege escalation | 7.8CNA v3.1 | 0.2% | 2024-07-04 | |
| CVE-2024-39933 | Gogs allows argument injection when tagging new releases | 7.7v3.1 | 0.7% | 2024-07-04 | Fix |
| CVE-2024-39932 | Gogs allows argument injection during the previewing of changes | 9.9v3.1 | 17.2% | 2024-07-04 | Fix |
| CVE-2024-39931 | Gogs allows deletion of internal files | 9.9v3.1 | 52.7% | 2024-07-04 | Fix |
| CVE-2024-39930 | Gogs has an argument injection in the built-in SSH server | 9.9v3.1 | 7.3% | 2024-07-04 | Exploit codeFix |
| CVE-2024-39929 | Exim improper output encoding | 5.4CISA ADP v3.1 | 41.5% | 2024-07-04 | Exploit codeFix |
| CVE-2024-39884 | Apache HTTP Server: Source code disclosure with handlers configured via AddType | 6.2CISA ADP v3.1 | 0.9% | 2024-07-04 | Fix |
| CVE-2024-39211 | Kaiten login endpoint vulnerability | 5.3CISA ADP v3.1 | 1.1% | 2024-07-04 | Exploit code |
| CVE-2024-39165 | QR/demoapp/qr_image.php in Asial JpGraph Professional through 4.2.6-pro allows remote attackers to execute arbitrary code via a PHP payload in the data parameter in conjunction with a .php file name in the filename parameter. This occurs because an unnecessary QR/demoapp folder.is shipped with the p | 9.8CNA v3.1 | 0.8% | 2024-07-04 | |
| CVE-2024-38471 | TP-Link Archer AX3000 OS command injection | 6.8CISA ADP v3.1 | 0.4% | 2024-07-04 | |
| CVE-2024-38345 | SolaPlugins Sola Testimonials cross-site request forgery | 8.1CISA ADP v3.1 | 0.3% | 2024-07-04 | |
| CVE-2024-38344 | SolaPlugins WP Tweet Walls cross-site request forgery | 5.4CISA ADP v3.1 | 0.3% | 2024-07-04 | Fix |
| CVE-2024-37476 | Newspack Campaigns WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.3% | 2024-07-04 | Fix |
| CVE-2024-37474 | Newspack Ads WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.3% | 2024-07-04 | Fix |
| CVE-2024-37472 | Woffice WordPress theme reflected cross-site scripting (XSS) | 6.1NVD v3.1 | 0.3% | 2024-07-04 | Fix |
| CVE-2024-37471 | Woffice Core WordPress plugin site Wide reflected cross-site scripting (XSS) | 6.1NVD v3.1 | 0.3% | 2024-07-04 | Fix |
| CVE-2024-32754 | Johnson Controls Kantech KT1, KT2, and KT400 Door Controllers exposure of sensitive information | 3.1CNA v3.1 | 0.2% | 2024-07-04 | Fix |
| CVE-2024-22277 | VMware Cloud Director Availability cross-site scripting | 6.4CNA v3.1 | 0.3% | 2024-07-04 | Fix |
| CVE-2024-6511 | y_project RuoYi Content-Type isJsonRequest cross-site scripting | 6.1v3.1 | 0.3% | 2024-07-04 | |
| CVE-2024-6507 | Deep Lake Kaggle command injection | 8.1CNA v3.1 | 1.3% | 2024-07-04 | |
| CVE-2024-6506 | Information exposure vulnerability in the MRW plug-in | 8.2CNA v3.1 | 0.5% | 2024-07-04 | |
| CVE-2024-6434 | Premium Addons for Elementor WordPress plugin Regular Expressions denial of service | 4.3v3.1 | 0.6% | 2024-07-04 | Fix |
| CVE-2024-6319 | IMGspider WordPress plugin authenticated (Contributor+) arbitrary file upload via upload | 8.8CNA v3.1 | 0.9% | 2024-07-04 | Fix |
| CVE-2024-6318 | IMGspider WordPress plugin authenticated (Contributor+) arbitrary file upload via upload_img_file | 8.8CNA v3.1 | 0.9% | 2024-07-04 | Fix |
| CVE-2024-5943 | Nested Pages WordPress plugin cross-site request forgery to local file inclusion | 8.8CNA v3.1 | 0.3% | 2024-07-04 | Fix |
| CVE-2024-5641 | One Click Order Re-Order WordPress plugin unauthorized access | 5.4v3.1 | 0.3% | 2024-07-04 | Fix |
| CVE-2024-3904 | Mitsubishi Electric MELIPC Series MI5122-VW incorrect default permissions | 8.8CNA v3.1 | 0.2% | 2024-07-04 | Fix |
| CVE-2024-3639 | Elementor Addons by Livemesh WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.3% | 2024-07-04 | Fix |
| CVE-2024-3638 | Elementor Addons by Livemesh WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.3% | 2024-07-04 | Fix |
| CVE-2024-2926 | Elementor Addons by Livemesh WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.4% | 2024-07-04 | Fix |
| CVE-2024-2385 | Elementor Addons by Livemesh WordPress plugin limited local file inclusion | 8.8CNA v3.1 | 0.9% | 2024-07-04 | Fix |
| CVE-2024-1574 | Mitsubishi Electric Iconics Digital Solutions GENESIS64 unsafe reflection | 6.7CNA v3.1 | 0.2% | 2024-07-04 | Fix |
| CVE-2024-1573 | Mitsubishi Electric Iconics Digital Solutions GENESIS64 missing authentication | 5.9CNA v3.1 | 0.6% | 2024-07-04 | Fix |
| CVE-2024-1182 | Mitsubishi Electric Iconics Digital Solutions GENESIS64 uncontrolled search path | 7.0CNA v3.1 | 0.3% | 2024-07-04 | Fix |
| CVE-2024-39920 | TCP protocol timing side channel | 4.3CISA ADP v3.1 | 0.6% | 2024-07-03 | |
| CVE-2024-39844 | ZNC modtcl module code injection | 9.8CISA ADP v3.1 | 3.9% | 2024-07-03 | Exploit codeFix |
| CVE-2024-39830 | Mattermost timing attack during remote cluster token comparison when shared channels are enabled | 8.1CNA v3.1 | 0.4% | 2024-07-03 | Fix |
| CVE-2024-39807 | Mattermost channel IDs of archived/restored channels leaked via webhook events | 3.1CNA v3.1 | 0.3% | 2024-07-03 | Fix |
| CVE-2024-39683 | ZITADEL vulnerable to Session information leakage | 5.7CNA v3.1 | 0.6% | 2024-07-03 | Fix |
| CVE-2024-39361 | Mattermost creating posts with user-defined IDs permitted in CreatePost API | 3.1CNA v3.1 | 0.3% | 2024-07-03 | Fix |
| CVE-2024-39353 | Mattermost RemoteClusterFrame payloads are audit logged in full | 2.7CNA v3.1 | 0.3% | 2024-07-03 | Fix |
| CVE-2024-39248 | Fikeulous Simpcms A cross-site scripting | 5.4NVD v3.1 | 0.7% | 2024-07-03 | |
| CVE-2024-39223 | Missing key verification in gost | 9.8CISA ADP v3.1 | 0.7% | 2024-07-03 | |
| CVE-2024-39220 | BAS-IP AV-01D, AV-01MD, AV-01MFD, AV-01ED, AV-01KD, AV-01BD, AV-01KBD, AV-02D, AV-02IDE, AV-02IDR, AV-02IPD, AV-02FDE, AV-02FDR, AV-03D, AV-03BD, AV-04AFD, AV-04ASD, AV-04FD, AV-04SD, AV-05FD, AV-05SD, AA-07BD, AA-07BDI, BA-04BD, BA-04MD, BA-08BD, BA-08MD, BA-12BD, BA-12MD, CR-02BD before firmware v | 6.5CISA ADP v3.1 | 0.4% | 2024-07-03 | |
| CVE-2024-38453 | Avalara for Salesforce CPQ API key storage vulnerability | 7.5CISA ADP v3.1 | 0.4% | 2024-07-03 | |
| CVE-2024-37726 | Micro-Star International Co insecure permissions | 6.8CISA ADP v3.1 | 0.9% | 2024-07-03 | Exploit code |
| CVE-2024-37157 | Discourse vulnerable to server-side request forgery via FastImage | 6.4CNA v3.1 | 0.3% | 2024-07-03 | Fix |
| CVE-2024-37082 | Cloud Foundry haproxy-boshrelease authentication bypass by spoofing | 9.1CNA v3.1 | 0.5% | 2024-07-03 | |
| CVE-2024-36257 | Mattermost lack of permission check when updating the profile picture of a remote user | 2.7CNA v3.1 | 0.3% | 2024-07-03 | Fix |
| CVE-2024-36122 | Discourse doesn't limit reviewable user serializer payload | 2.4CNA v3.1 | 0.4% | 2024-07-03 | Fix |
| CVE-2024-36113 | Discourse missing authorization checks for suspending admins/moderators | 4.9CNA v3.1 | 0.4% | 2024-07-03 | Fix |
| CVE-2024-35234 | Discourse vulnerable to stored-dom XSS via Facebook Oneboxes | 4.2CNA v3.1 | 0.3% | 2024-07-03 | Fix |
| CVE-2024-35227 | Discourse vulnerable to DoS through Onebox | 7.5CNA v3.1 | 0.6% | 2024-07-03 | Fix |
| CVE-2024-34750 | Apache Tomcat: HTTP/2 excess header handling DoS | 7.5CISA ADP v3.1 | 4.6% | 2024-07-03 | Fix |
| CVE-2024-33871 | Artifex Ghostscript code injection | 8.8CISA ADP v3.1 | 1.4% | 2024-07-03 | Fix |
| CVE-2024-33870 | Artifex Ghostscript path traversal | 6.3CISA ADP v3.1 | 0.5% | 2024-07-03 | Fix |
| CVE-2024-33869 | Artifex Ghostscript path traversal | 5.3CISA ADP v3.1 | 0.5% | 2024-07-03 | Fix |
| CVE-2024-32937 | Grandstream GXP2135 CWMP SelfDefinedTimeZone functionality OS command injection | 9.8v3.1 | 26.3% | 2024-07-03 | |
| CVE-2024-32673 | Samsung Open Source Walrus improper array index validation | 6.7CNA v4.0 | 0.2% | 2024-07-03 | |
| CVE-2024-31223 | Fides information disclosure vulnerability in Privacy Center of SERVER_SIDE_FIDES_API_URL | 5.3CNA v3.1 | 1.1% | 2024-07-03 | NucleiFix |
| CVE-2024-29511 | Artifex Ghostscript active debug code | 7.5CISA ADP v3.1 | 1.1% | 2024-07-03 | Fix |
| CVE-2024-29510 | Artifex Ghostscript sandbox escape | 6.3CISA ADP v3.1 | 28.0% | 2024-07-03 | Exploit codeFix |
| CVE-2024-29509 | Artifex Ghostscript out-of-bounds write | 8.8v3.1 | 1.4% | 2024-07-03 | Fix |
| CVE-2024-29508 | Artifex Ghostscript heap-based buffer overflow | 3.3v3.1 | 0.4% | 2024-07-03 | Fix |
| CVE-2024-29507 | Artifex Ghostscript buffer overflow | 5.4CISA ADP v3.1 | 0.7% | 2024-07-03 | Fix |
| CVE-2024-29506 | Artifex Ghostscript buffer overflow | 8.8v3.1 | 0.9% | 2024-07-03 | Fix |
| CVE-2024-6471 | SourceCodester Online Tours and Travels Management sms_setting.php SQL injection | 8.8v3.1 | 0.6% | 2024-07-03 | |
| CVE-2024-6470 | playSMS template injection | 2.7NVD v3.1 | 0.4% | 2024-07-03 | |
| CVE-2024-6469 | playSMS template injection | 8.8v3.1 | 0.7% | 2024-07-03 | |
| CVE-2024-6428 | Mattermost limited DoS due to permitting creating users with user-defined IDs | 5.3CNA v3.1 | 0.4% | 2024-07-03 | Fix |
| CVE-2024-6427 | Uncontrolled resource consumption vulnerability in MESbook | 7.5v3.1 | 0.6% | 2024-07-03 | |
| CVE-2024-6426 | Information exposure vulnerability vulnerability in MESbook | 7.1v3.1 | 0.3% | 2024-07-03 | |
| CVE-2024-6383 | MongoDB C driver bson_string_append may be vulnerable to a buffer overflow | 5.3CNA v3.1 | 0.6% | 2024-07-03 | Fix |
| CVE-2024-6340 | Premium Addons for Elementor WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.4% | 2024-07-03 | Fix |
| CVE-2024-6284 | Improper IPv4 and IPv6 byte order storage in github.com/Google/Nftables | 6.3CNA v4.0 | 0.3% | 2024-07-03 | Fix |
| CVE-2024-6263 | WP Lightbox 2 WordPress plugin authenticated (Contributor+) DOM-based stored cross-site scripting | 5.4v3.1 | 0.3% | 2024-07-03 | Fix |
| CVE-2024-6126 | Red Hat Enterprise Linux 9 denial of service | 3.2CNA v3.1 | 0.3% | 2024-07-03 | Fix |
| CVE-2024-6052 | Checkmk XSS in SQL check parameters | 6.5CNA v3.1 | 0.4% | 2024-07-03 | Fix |
| CVE-2024-5821 | Local file inclusion (LFI) in stitionai/devika | 6.2CNA v3.0 | 0.2% | 2024-07-03 | |
| CVE-2024-5672 | Red Lion Europe: MbNET.mini vulnerable to OS command injection | 7.2CNA v3.1 | 1.2% | 2024-07-03 | Fix |
| CVE-2024-4543 | Snippet Shortcodes WordPress plugin cross-site request forgery | 4.3CNA v3.1 | 0.2% | 2024-07-03 | Fix |
| CVE-2024-4482 | The Plus Addons for Elementor WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.4% | 2024-07-03 | Fix |
| CVE-2024-3332 | zephyrproject-rtos Zephyr bt: Host/smp: DoS caused by null pointer dereference | 6.5CNA v3.1 | 0.4% | 2024-07-03 | |
| CVE-2024-2376 | WPQA WordPress plugin arbitrary Category and Tag Follow/Unfollow via CSRF | 8.8NVD v3.1 | 0.4% | 2024-07-03 | Fix |
| CVE-2024-2375 | WPQA WordPress plugin Contributor+ stored XSS | 5.4NVD v3.1 | 0.3% | 2024-07-03 | Fix |
| CVE-2024-2235 | Himer - Social Questions and Answers WordPress theme bypass Poll Voting Restrictions via CSRF | 4.3NVD v3.1 | 0.2% | 2024-07-03 | Fix |
| CVE-2024-2234 | Himer - Social Questions and Answers WordPress theme Contributor+ stored XSS | 5.4NVD v3.1 | 0.3% | 2024-07-03 | Fix |
| CVE-2024-2233 | Himer - Social Questions and Answers WordPress theme Multiple CSRF on the Group Section | 4.3NVD v3.1 | 0.2% | 2024-07-03 | Fix |
| CVE-2024-2231 | Himer - Social Questions and Answers WordPress theme Subscriber+ Private Group Joining via IDOR | 6.5CISA ADP v3.1 | 0.4% | 2024-07-03 | Fix |
| CVE-2024-2040 | Himer - Social Questions and Answers WordPress theme arbitrary Group Joining via CSRF | 4.3NVD v3.1 | 0.2% | 2024-07-03 | Fix |
| CVE-2024-39894 | OpenSSH echo-off password entry vulnerability | 7.5CISA ADP v3.1 | 1.6% | 2024-07-02 | Fix |
| CVE-2024-39891 | Twilio Authy information disclosure | 5.3v3.1 | 1.7% | 2024-07-02 | KEVFix |
| CVE-2024-39326 | National Security Agency SkillTree video and captions upload endpoint cross-site request forgery | 4.4CNA v3.1 | 0.3% | 2024-07-02 | Fix |
| CVE-2024-39325 | Aimeos/ai-controller-frontend doesn't reset payment status in basket | 5.3CNA v3.1 | 0.4% | 2024-07-02 | Fix |
| CVE-2024-39324 | Aimeos/ai-admin-graphql improper access control vulnerability allows editors to manage own services | 3.8CNA v3.1 | 0.4% | 2024-07-02 | Fix |
| CVE-2024-39323 | Aimeos ai-admin-graphql admin account management incorrect authorization | 7.1CNA v3.1 | 0.4% | 2024-07-02 | Fix |
| CVE-2024-39322 | Aimeos ai-admin-jsonadm admin group and locale configuration incorrect authorization | 5.5CNA v3.1 | 0.5% | 2024-07-02 | Fix |
| CVE-2024-39316 | Rack ReDoS vulnerability in HTTP Accept Headers Parsing | 6.5CNA v3.1 | 0.9% | 2024-07-02 | Fix |
| CVE-2024-39315 | Pomerium exposed OAuth2 access and ID tokens in user info endpoint response | 5.7CNA v3.1 | 0.4% | 2024-07-02 | Fix |
| CVE-2024-39206 | MSP360 Backup Agent enginesettings.list vulnerability | 7.5CISA ADP v3.1 | 0.5% | 2024-07-02 | |
| CVE-2024-39143 | Coderberg Residencecms A stored cross-site scripting | 5.4v3.1 | 0.9% | 2024-07-02 | Exploit code |
| CVE-2024-39119 | idcCMS cross-site request forgery | 5.4CISA ADP v3.1 | 0.2% | 2024-07-02 | |
| CVE-2024-38857 | Checkmk reflected links in visuals facilitate phishing attacks | 4.3CNA v3.1 | 0.3% | 2024-07-02 | Fix |
| CVE-2024-38537 | ethyca fides Inclusion of Untrusted polyfill.io Code vulnerability in fides.js | 0.0CNA v3.1 | 1.4% | 2024-07-02 | Fix |
| CVE-2024-38519 | yt-dlp and youtube-dl vulnerable to file system modification and RCE | 7.8CNA v3.1 | 0.3% | 2024-07-02 | Fix |
| CVE-2024-37479 | LA-Studio Element Kit for Elementor WordPress plugin Contributor+ local file inclusion | 8.8v3.1 | 0.4% | 2024-07-02 | Fix |
| CVE-2024-37185 | OpenHarmony Arkcompiler Ets Runtime has an out-of-bounds write | 8.2CNA v3.1 | 0.6% | 2024-07-02 | |
| CVE-2024-37134 | Dell PowerScale OneFS incorrect privilege assignment | 6.7CNA v3.1 | 0.2% | 2024-07-02 | Fix |
| CVE-2024-37133 | Dell PowerScale OneFS improper privilege management | 6.7CNA v3.1 | 0.2% | 2024-07-02 | Fix |
| CVE-2024-37132 | Dell PowerScale OneFS incorrect privilege assignment | 6.7CNA v3.1 | 0.1% | 2024-07-02 | Fix |
| CVE-2024-37126 | Dell PowerScale OneFS improper privilege management | 6.7CNA v3.1 | 0.2% | 2024-07-02 | Fix |
| CVE-2024-37077 | OpenHarmony Arkcompiler Ets Runtime has an out-of-bounds write | 8.2CNA v3.1 | 0.6% | 2024-07-02 | |
| CVE-2024-37030 | OpenHarmony Arkcompiler Ets Runtime has a use-after-free | 8.2CNA v3.1 | 0.6% | 2024-07-02 | |
| CVE-2024-36404 | GeoTools remote code execution (RCE) vulnerability in evaluating XPath expressions | 9.8CNA v3.1 | 76.1% | 2024-07-02 | NucleiFix |
| CVE-2024-36278 | OpenHarmony Arkcompiler Ets Runtime has a type confusion | 3.3CNA v3.1 | 0.1% | 2024-07-02 | |
| CVE-2024-36260 | OpenHarmony Arkcompiler Ets Runtime has an out-of-bounds write | 8.2CNA v3.1 | 0.6% | 2024-07-02 | |
| CVE-2024-36243 | OpenHarmony Arkcompiler Ets Runtime has an out-of-bounds read | 8.2CNA v3.1 | 0.6% | 2024-07-02 | |
| CVE-2024-34601 | Samsung Mobile Galaxy Store improper intent verification | 5.9CNA v3.1 | 0.1% | 2024-07-02 | Fix |
| CVE-2024-34600 | Samsung Mobile Samsung Flow improper intent verification | 4.4CNA v3.1 | 0.1% | 2024-07-02 | Fix |
| CVE-2024-34599 | Samsung Mobile Tips improper input validation | 4.0CNA v3.1 | 0.1% | 2024-07-02 | Fix |
| CVE-2024-34597 | Samsung Mobile Samsung Health improper input validation | 4.4CNA v3.1 | 0.2% | 2024-07-02 | Fix |
| CVE-2024-34596 | Samsung Mobile SmartThings improper authentication | 5.9CNA v3.1 | 0.5% | 2024-07-02 | Fix |
| CVE-2024-34595 | Samsung Mobile Devices clickAdapterItem of SystemUI improper access control | 7.8CNA v3.1 | 0.2% | 2024-07-02 | Fix |
| CVE-2024-34594 | Samsung Mobile Devices proc file system information disclosure | 5.5CNA v3.1 | 0.2% | 2024-07-02 | Fix |
| CVE-2024-34593 | Samsung Mobile Devices improper input validation | 7.5CNA v3.1 | 0.6% | 2024-07-02 | Fix |
| CVE-2024-34592 | Samsung Mobile Devices improper input validation | 5.3CNA v3.1 | 0.4% | 2024-07-02 | Fix |
| CVE-2024-34591 | Samsung Mobile Devices improper input validation | 5.3CNA v3.1 | 0.4% | 2024-07-02 | Fix |
| CVE-2024-34590 | Samsung Mobile Devices denial of service | 5.3CNA v3.1 | 0.4% | 2024-07-02 | Fix |
| CVE-2024-34589 | Samsung Mobile Devices improper input validation | 5.3CNA v3.1 | 0.4% | 2024-07-02 | Fix |
| CVE-2024-34588 | Samsung Mobile Devices denial of service | 5.3CNA v3.1 | 0.4% | 2024-07-02 | Fix |
| CVE-2024-34587 | Samsung Mobile Devices improper input validation | 7.5CNA v3.1 | 0.5% | 2024-07-02 | Fix |
| CVE-2024-34586 | Samsung Mobile Devices KnoxCustomManagerService improper access control | 5.9CNA v3.1 | 0.1% | 2024-07-02 | Fix |
| CVE-2024-34585 | Samsung Mobile Devices launchApp of SystemUI improper access control | 7.8CNA v3.1 | 0.1% | 2024-07-02 | Fix |
| CVE-2024-34583 | Samsung Mobile Devices system property improper access control | 4.0CNA v3.1 | 0.1% | 2024-07-02 | Fix |
| CVE-2024-34122 | Adobe T5 Acrobat vulnerability Exploitable crash in DecodeTile | 7.8CNA v3.1 | 0.3% | 2024-07-02 | Fix |
| CVE-2024-32932 | American Dynamics Illustra Essentials Gen 4 Reversible User Credential stored web interface | 6.8CNA v3.1 | 0.4% | 2024-07-02 | |
| CVE-2024-32854 | Dell PowerScale OneFS improper privilege management | 6.7CNA v3.1 | 0.2% | 2024-07-02 | Fix |
| CVE-2024-32853 | Dell PowerScale OneFS execution with unnecessary privileges | 4.4CNA v3.1 | 0.2% | 2024-07-02 | Fix |
| CVE-2024-32852 | Dell PowerScale OneFS weak cryptographic algorithm | 5.9CNA v3.1 | 0.2% | 2024-07-02 | Fix |
| CVE-2024-32757 | American Dynamics Illustra Essentials Gen 4 Linux credential leak | 6.8CNA v3.1 | 0.4% | 2024-07-02 | |
| CVE-2024-32756 | American Dynamics Illustra Essentials Gen 4 Reversible User Credential Linux | 6.8CNA v3.1 | 0.4% | 2024-07-02 | |
| CVE-2024-32755 | American Dynamics Illustra Essentials Gen 4 Log Filter Input Validation | 9.1CNA v3.1 | 0.5% | 2024-07-02 | |
| CVE-2024-31071 | OpenHarmony Arkcompiler Ets Runtime has a type confusion | 3.3CNA v3.1 | 0.1% | 2024-07-02 | |
| CVE-2024-26314 | Jungo Windriver improper privilege management | 7.8v3.1 | 0.2% | 2024-07-02 | Fix |
| CVE-2024-25088 | Jungo Windriver improper privilege management | 7.8v3.1 | 0.2% | 2024-07-02 | Fix |
| CVE-2024-25087 | Jungo Windriver denial of service | 5.5v3.1 | 0.2% | 2024-07-02 | Fix |
| CVE-2024-25086 | Jungo Windriver improper privilege management | 7.8v3.1 | 0.3% | 2024-07-02 | Fix |
| CVE-2024-24791 | Denial of service due to improper 100-continue handling in net/http | 7.5CISA ADP v3.1 | 1.4% | 2024-07-02 | Fix |
| CVE-2024-22106 | Jungo Windriver improper privilege management | 7.8v3.1 | 0.2% | 2024-07-02 | Fix |
| CVE-2024-22105 | Jungo Windriver denial of service | 5.5v3.1 | 0.2% | 2024-07-02 | Fix |
| CVE-2024-22104 | Jungo Windriver out-of-bounds write | 5.5v3.1 | 0.2% | 2024-07-02 | Fix |
| CVE-2024-22103 | Jungo Windriver out-of-bounds write | 5.5v3.1 | 0.2% | 2024-07-02 | Fix |
| CVE-2024-22102 | Jungo Windriver denial of service | 5.5v3.1 | 0.2% | 2024-07-02 | Fix |
| CVE-2024-20901 | Samsung Mobile Devices improper input validation | 5.9CNA v3.1 | 0.2% | 2024-07-02 | Fix |
| CVE-2024-20900 | Samsung Mobile Devices MTP application improper authentication | 4.0CNA v3.1 | 0.1% | 2024-07-02 | Fix |
| CVE-2024-20899 | Samsung Mobile Devices RCS function in IMS service implicit intent for sensitive communication | 4.0CNA v3.1 | 0.1% | 2024-07-02 | Fix |
| CVE-2024-20898 | Samsung Mobile Devices SoftphoneClient in IMS service implicit intent for sensitive communication | 4.0CNA v3.1 | 0.1% | 2024-07-02 | Fix |
| CVE-2024-20897 | Samsung Mobile Devices FCM function in IMS service implicit intent for sensitive communication | 4.0CNA v3.1 | 0.1% | 2024-07-02 | Fix |
| CVE-2024-20896 | Samsung Mobile Devices Configuration message implicit intent for sensitive communication | 5.5CNA v3.1 | 0.1% | 2024-07-02 | Fix |
| CVE-2024-20895 | Samsung Mobile Devices Dar service improper access control | 7.7CNA v3.1 | 0.1% | 2024-07-02 | Fix |
| CVE-2024-20894 | Samsung Mobile Devices Secure Folder improper exception handling | 4.3CNA v3.1 | 0.2% | 2024-07-02 | Fix |
| CVE-2024-20893 | Samsung Mobile Devices libmediaextractorservice.so improper input validation | 6.1CNA v3.1 | 0.2% | 2024-07-02 | Fix |
| CVE-2024-20892 | Samsung Mobile Devices improper signature verification | 6.5CNA v3.1 | 0.1% | 2024-07-02 | Fix |
| CVE-2024-20891 | Samsung Mobile Devices launchFullscreenIntent of SystemUI improper access control | 7.8CNA v3.1 | 0.1% | 2024-07-02 | Fix |
| CVE-2024-20890 | Samsung Mobile Devices BLE improper input validation | 5.3CNA v3.1 | 0.2% | 2024-07-02 | Fix |
| CVE-2024-20889 | Samsung Mobile Devices BLE improper authentication | 5.9CNA v3.1 | 0.2% | 2024-07-02 | Fix |
| CVE-2024-20888 | Samsung Mobile Devices OneUIHome improper access control | 7.8CNA v3.1 | 0.2% | 2024-07-02 | Fix |
| CVE-2024-6453 | itsourcecode Farm Management System SQL injection | 8.8v3.1 | 0.6% | 2024-07-02 | |
| CVE-2024-6452 | linlinjava litemall AdminGoodscontroller.java SQL injection | 8.8v3.1 | 0.5% | 2024-07-02 | |
| CVE-2024-6441 | ORIPA LoaderXML.java deserialization | 5.3CNA v4.0 | 0.4% | 2024-07-02 | |
| CVE-2024-6440 | SourceCodester Home Owners Collection Management System SQL injection | 9.8v3.1 | 0.5% | 2024-07-02 | |
| CVE-2024-6439 | SourceCodester Home Owners Collection Management System unrestricted upload | 9.8v3.1 | 0.7% | 2024-07-02 | |
| CVE-2024-6438 | Hitout Carsale OrderController.java SQL injection | 6.5v3.1 | 0.4% | 2024-07-02 | |
| CVE-2024-6382 | Adversarial unsanitized input may cause MongoDB Rust Driver to issue unintended commands | 6.4CNA v3.1 | 0.3% | 2024-07-02 | Fix |
| CVE-2024-6381 | MongoDB C driver bson_strfreev may be susceptible to integer overflow | 4.0CNA v3.1 | 0.4% | 2024-07-02 | Fix |
| CVE-2024-6264 | Post Meta Data Manager WordPress plugin authenticated (Contributor+) stored cross-site scripting | 5.4v3.1 | 0.3% | 2024-07-02 | Fix |
| CVE-2024-6172 | Email Subscribers by Icegram Express WordPress plugin SQL injection | 9.8v3.1 | 1.1% | 2024-07-02 | Fix |
| CVE-2024-6099 | LearnPress WordPress LMS plugin unauthenticated bypass to user Registration | 5.3v3.1 | 0.4% | 2024-07-02 | Fix |
| CVE-2024-6088 | LearnPress WordPress LMS plugin missing authorization to unauthenticated user Registration bypass | 5.3v3.1 | 0.6% | 2024-07-02 | Fix |
| CVE-2024-6012 | Cost Calculator Builder WordPress plugin unauthorized access | 4.3CNA v3.1 | 0.4% | 2024-07-02 | Fix |
| CVE-2024-6011 | Cost Calculator Builder WordPress plugin authenticated (Administrator+) stored cross-site scripting | 4.8v3.1 | 0.4% | 2024-07-02 | Fix |
| CVE-2024-5938 | Boot Store WordPress theme stored cross-site scripting | 5.4v3.1 | 0.3% | 2024-07-02 | |
| CVE-2024-5866 | Arbitrary directory listing in Centrify PAS | 4.3NVD v3.1 | 0.4% | 2024-07-02 | |
| CVE-2024-5865 | Arbitrary file reading in Centrify PAS | 6.5NVD v3.1 | 0.5% | 2024-07-02 | |
| CVE-2024-5767 | Sitetweet WordPress plugin stored XSS via CSRF | 8.8NVD v3.1 | 0.3% | 2024-07-02 | |
| CVE-2024-5606 | Quiz And Survey Master for WordPress Contributor+ SQLi | 8.8NVD v3.1 | 0.6% | 2024-07-02 | Fix |
| CVE-2024-5545 | Motors Car Dealer, Classifieds and Listing WordPress plugin missing authorization | 5.3CNA v3.1 | 0.3% | 2024-07-02 | Fix |
| CVE-2024-5544 | Media Library Assistant WordPress plugin reflected cross-site scripting | 6.1v3.1 | 0.4% | 2024-07-02 | Fix |
| CVE-2024-5504 | Rife Elementor Extensions and Templates WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.3% | 2024-07-02 | Fix |
| CVE-2024-5419 | Void Contact Form 7 Widget For Elementor Page Builder WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.3% | 2024-07-02 | Fix |
| CVE-2024-5349 | LA-Studio Element Kit for Elementor WordPress plugin local file inclusion | 8.8CNA v3.1 | 1.0% | 2024-07-02 | Fix |
| CVE-2024-5260 | Sina Extension for Elementor WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.5% | 2024-07-02 | Fix |
| CVE-2024-5219 | Easy Google Maps WordPress plugin authenticated (Author+) stored cross-site scripting | 5.4v3.1 | 0.3% | 2024-07-02 | Fix |
| CVE-2024-4897 | Remote code execution in parisneo/lollms-webui | 8.4CNA v3.0 | 0.4% | 2024-07-02 | |
| CVE-2024-4836 | LFI in sites managed by Edito CMS | 7.5CNA v3.1 | 2.7% | 2024-07-02 | NucleiFix |
| CVE-2024-4708 | mySCADA myPRO use of hard-coded password | 9.8v3.1 | 1.0% | 2024-07-02 | Fix |
| CVE-2024-4679 | Hitachi JP1/Extensible SNMP Agent incorrect default permissions | 7.8CNA v3.1 | 0.2% | 2024-07-02 | Fix |
| CVE-2024-4627 | Rank Math SEO WordPress plugin authenticated stored XSS | 5.4NVD v3.1 | 0.4% | 2024-07-02 | Fix |
| CVE-2024-4467 | Red Hat Advanced Virtualization for RHEL qemu-kvm: Qemu-img info leads to host file read/write | 7.8CNA v3.1 | 0.3% | 2024-07-02 | Fix |
| CVE-2024-4268 | Ultimate Blocks WordPress Blocks plugin stored cross-site scripting | 5.4v3.1 | 0.5% | 2024-07-02 | Fix |
| CVE-2024-3999 | EazyDocs WordPress plugin Admin+ stored XSS | 4.8NVD v3.1 | 0.4% | 2024-07-02 | Fix |
| CVE-2024-3826 | Akana API Platform broken SAML Validation | 8.6CNA v4.0 | 0.3% | 2024-07-02 | Fix |
| CVE-2024-3513 | Ultimate Blocks WordPress Blocks plugin stored cross-site scripting | 5.4v3.1 | 0.3% | 2024-07-02 | Fix |
| CVE-2024-2819 | Hitachi Ops Center Common Services incorrect default permissions | 5.1CNA v3.1 | 0.2% | 2024-07-02 | Fix |
| CVE-2024-1427 | The Post Grid WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.3% | 2024-07-02 | Fix |
| CVE-2024-0158 | Dell CPG BIOS improper input validation | 5.1CNA v3.1 | 0.1% | 2024-07-02 | Fix |
| CVE-2024-39879 | JetBrains TeamCity insufficiently protected credentials | 5.0CNA v3.1 | 0.3% | 2024-07-01 | Fix |
| CVE-2024-39878 | JetBrains TeamCity insufficiently protected credentials | 4.1CNA v3.1 | 0.3% | 2024-07-01 | Fix |
| CVE-2024-39853 | Swiperjs swiper prototype pollution | 6.5CISA ADP v3.1 | 0.5% | 2024-07-01 | |
| CVE-2024-39573 | Apache HTTP Server: Mod_rewrite proxy handler substitution | 7.5CISA ADP v3.1 | 37.2% | 2024-07-01 | Fix |
| CVE-2024-39430 | UNISOC chipsets faceid servive out-of-bounds write | 5.1CNA v3.1 | 0.1% | 2024-07-01 | Fix |
| CVE-2024-39429 | UNISOC chipsets faceid servive out-of-bounds write | 5.1CNA v3.1 | 0.1% | 2024-07-01 | Fix |
| CVE-2024-39428 | UNISOC chipsets trusty service out-of-bounds write | 6.8CNA v3.1 | 0.1% | 2024-07-01 | Fix |
| CVE-2024-39427 | UNISOC chipsets trusty service out-of-bounds write | 5.1CNA v3.1 | 0.1% | 2024-07-01 | Fix |
| CVE-2024-39314 | toy-blog administrative token leaked through the command line parameter | 4.7CNA v3.1 | 0.2% | 2024-07-01 | Fix |
| CVE-2024-39313 | toy-blog improper input validation | 6.5CNA v3.1 | 0.4% | 2024-07-01 | Fix |
| CVE-2024-39310 | WordPress Basil Theme Authenticated (Contributor+) persistent cross-site scripting | 5.4CNA v3.1 | 0.3% | 2024-07-01 | Fix |
| CVE-2024-39309 | parse-community parse-server parse Server literalizeRegexPart SQL injection authentication bypass | 9.8CNA v3.1 | 20.2% | 2024-07-01 | Exploit codeFix |
| CVE-2024-39305 | Envoy Proxy use-after-free when route hash policy is configured with cookie attributes | 6.5CNA v3.1 | 0.6% | 2024-07-01 | Fix |
| CVE-2024-39303 | Weblate vulnerabler to improper sanitization of project backups | 4.4CNA v3.1 | 0.3% | 2024-07-01 | Fix |
| CVE-2024-39251 | An issue in the component ControlCenter.sys/ControlCenter64.sys of ThundeRobot Control Center v2.0.0.10 allows attackers to access sensitive information, execute arbitrary code, or escalate privileges via sending crafted IOCTL requests. | 10.0CISA ADP v3.1 | 0.7% | 2024-07-01 | |
| CVE-2024-39249 | Async autoinject function denial of service | 7.5CISA ADP v3.1 | 0.8% | 2024-07-01 | Fix |
| CVE-2024-39236 | gradio code injection | 9.8CISA ADP v3.1 | 0.9% | 2024-07-01 | |
| CVE-2024-39018 | @cat5th/key-serializer prototype pollution | 6.3CISA ADP v3.1 | 0.4% | 2024-07-01 | |
| CVE-2024-39017 | agreejs shared mergeInternalComponents function prototype pollution | 9.8CISA ADP v3.1 | 0.7% | 2024-07-01 | |
| CVE-2024-39016 | che3vinci c3/utils-1 assign function prototype pollution | 8.1CISA ADP v3.1 | 0.6% | 2024-07-01 | |
| CVE-2024-39015 | cafebazaar hod request function prototype pollution | 9.8CISA ADP v3.1 | 0.7% | 2024-07-01 | |
| CVE-2024-39014 | ahilfoley cahil/utils set function prototype pollution | 9.8CISA ADP v3.1 | 0.7% | 2024-07-01 | |
| CVE-2024-39013 | 2o3t-utility extend function prototype pollution | 9.8CISA ADP v3.1 | 0.8% | 2024-07-01 | |
| CVE-2024-39008 | Robinweser fast-loops vulnerable to prototype pollution | 10.0CISA ADP v3.1 | 0.9% | 2024-07-01 | Fix |
| CVE-2024-39003 | Amoyjs common prototype pollution | 7.3CISA ADP v3.1 | 0.5% | 2024-07-01 | |
| CVE-2024-39002 | Richardrodger Jsonic code injection | 6.3CISA ADP v3.1 | 0.5% | 2024-07-01 | |
| CVE-2024-39001 | Ag-grid packages vulnerable to prototype pollution | 6.3CISA ADP v3.1 | 0.8% | 2024-07-01 | Fix |
| CVE-2024-39000 | Swiperjs swiper prototype pollution | 6.5CISA ADP v3.1 | 0.4% | 2024-07-01 | |
| CVE-2024-38999 | Jrburke requirejs vulnerable to prototype pollution | 10.0CISA ADP v3.1 | 0.8% | 2024-07-01 | Fix |
| CVE-2024-38997 | Swiperjs swiper adolph_dudu ratio-swiper was discovered to contain a prototype pollution | 6.5CISA ADP v3.1 | 0.5% | 2024-07-01 | |
| CVE-2024-38996 | Ag-grid prototype pollution in ag-grid-community via the _.mergeDeep function | 9.8CISA ADP v3.1 | 1.2% | 2024-07-01 | Fix |
| CVE-2024-38994 | @amoy/common v was discovered to contain a prototype pollution via the function extend | 7.3CISA ADP v3.1 | 0.5% | 2024-07-01 | |
| CVE-2024-38993 | Richardrodger Jsonic code injection | 9.8CISA ADP v3.1 | 0.9% | 2024-07-01 | |
| CVE-2024-38992 | Frappejs was discovered to contain a prototype pollution via the function registerView | 8.8CISA ADP v3.1 | 0.8% | 2024-07-01 | |
| CVE-2024-38991 | Akbr patch-into was discovered to contain a prototype pollution via the function patchInto | 8.8CISA ADP v3.1 | 0.8% | 2024-07-01 | |
| CVE-2024-38990 | Tada5hi sp-common mergeDeep function prototype pollution | 6.3CISA ADP v3.1 | 0.5% | 2024-07-01 | |
| CVE-2024-38987 | @aofl/cli-lib prototype pollution | 6.3CISA ADP v3.1 | 0.5% | 2024-07-01 | |
| CVE-2024-38953 | PHPOK cross-site scripting | 6.1v3.1 | 0.3% | 2024-07-01 | |
| CVE-2024-38513 | Fiber Session Middleware Token injection | 10.0CNA v3.1 | 0.7% | 2024-07-01 | Fix |
| CVE-2024-38480 | Kakao piccoma "Piccoma" App hard-coded credentials | 4.0CISA ADP v3.1 | 0.2% | 2024-07-01 | |
| CVE-2024-38477 | Apache HTTP Server: Crash resulting in denial of service in mod_proxy via a malicious request | 7.5v3.1 | 3.2% | 2024-07-01 | Fix |
| CVE-2024-38476 | Apache HTTP Server core module information disclosure | 9.8v3.1 | 41.6% | 2024-07-01 | Exploit codeFix |
| CVE-2024-38475 | Apache HTTP Server improper output encoding | 9.1NVD v3.1 | 100.0% | 2024-07-01 | KEVNucleiEmerging ThreatsExploit codeKCVFix |
| CVE-2024-38474 | Apache HTTP Server weakness with encoded question marks in backreferences | 9.8v3.1 | 2.5% | 2024-07-01 | Fix |
| CVE-2024-38473 | Apache HTTP Server proxy encoding problem | 8.1CISA ADP v3.1 | 25.9% | 2024-07-01 | NucleiExploit codeFix |
| CVE-2024-38472 | Apache HTTP Server on WIndows UNC SSRF | 7.5CISA ADP v3.1 | 69.5% | 2024-07-01 | NucleiExploit codeFix |
| CVE-2024-38368 | CocoaPods trunk's Claim your pod could be used to obtain un-used pods | 9.3CNA v3.1 | 14.9% | 2024-07-01 | Fix |
| CVE-2024-38367 | CocoaPods Trunk session verification session hijacking | 8.2CNA v3.1 | 11.1% | 2024-07-01 | Fix |
| CVE-2024-38366 | CocoaPods CoacoaPods trunk RCE in email verification system rfc-822 | 10.0CNA v3.1 | 17.8% | 2024-07-01 | Exploit codeFix |
| CVE-2024-37765 | Machform SQL injection | 8.8CISA ADP v3.1 | 0.8% | 2024-07-01 | Exploit code |
| CVE-2024-37764 | Machform cross-site scripting | 5.4CISA ADP v3.1 | 0.6% | 2024-07-01 | Exploit code |
| CVE-2024-37763 | Machform cross-site scripting | 5.4CISA ADP v3.1 | 0.7% | 2024-07-01 | Exploit code |
| CVE-2024-37762 | Machform unrestricted file upload | 9.9CISA ADP v3.1 | 1.5% | 2024-07-01 | Exploit code |
| CVE-2024-37298 | gorilla schema potential memory exhaustion attack due to sparse slice deserialization | 7.5CNA v3.1 | 1.1% | 2024-07-01 | Fix |
| CVE-2024-37146 | GHSL-2023-248: Flowise XSS in /API/v1/credentials/id | 6.1NVD v3.1 | 0.4% | 2024-07-01 | |
| CVE-2024-37145 | GHSL-2023-247: Flowise XSS in /API/v1/chatflows-streaming/id | 6.1NVD v3.1 | 0.5% | 2024-07-01 | |
| CVE-2024-36997 | Splunk Enterprise persistent cross-site scripting (XSS) in conf-web/settings REST endpoint | 8.1v3.1 | 0.5% | 2024-07-01 | Fix |
| CVE-2024-36996 | Splunk Enterprise information disclosure of user names | 5.3v3.1 | 0.4% | 2024-07-01 | Fix |
| CVE-2024-36995 | Splunk Enterprise low-privileged user could create experimental items | 3.5NVD v3.1 | 0.2% | 2024-07-01 | Fix |
| CVE-2024-36994 | Splunk Enterprise persistent cross-site scripting (XSS) in Dashboard Elements | 5.4v3.1 | 0.3% | 2024-07-01 | Fix |
| CVE-2024-36993 | Splunk Enterprise persistent cross-site scripting (XSS) in Web Bulletin | 5.4v3.1 | 0.4% | 2024-07-01 | Fix |
| CVE-2024-36992 | Splunk Enterprise persistent cross-site scripting (XSS) in Dashboard Elements | 5.4v3.1 | 0.3% | 2024-07-01 | Fix |
| CVE-2024-36991 | Path traversal on the “/modules/messaging/“ endpoint in Splunk Enterprise on Windows | 7.5v3.1 | 13.1% | 2024-07-01 | NucleiEmerging ThreatsExploit codeFix |
| CVE-2024-36990 | Splunk Enterprise denial of service (DoS) on the datamodel/web REST endpoint | 6.5v3.1 | 0.7% | 2024-07-01 | Fix |
| CVE-2024-36989 | Low-privileged user could create notifications in Splunk Web Bulletin messages | 4.3v3.1 | 0.3% | 2024-07-01 | Fix |
| CVE-2024-36987 | Splunk Enterprise insecure file upload in the indexing/preview REST endpoint | 6.5v3.1 | 0.3% | 2024-07-01 | Fix |
| CVE-2024-36986 | Splunk Enterprise risky command safeguards bypass through Search ID query in Analytics Workspace | 5.7v3.1 | 0.4% | 2024-07-01 | Fix |
| CVE-2024-36985 | Splunk Enterprise splunk_archiver app external lookup remote code execution | 8.8v3.1 | 6.5% | 2024-07-01 | MetasploitExploit codeFix |
| CVE-2024-36984 | Remote code execution through Serialized Session Payload in Splunk Enterprise on Windows | 8.8v3.1 | 1.4% | 2024-07-01 | Fix |
| CVE-2024-36983 | Splunk Enterprise command injection using External Lookups | 8.8v3.1 | 1.0% | 2024-07-01 | Fix |
| CVE-2024-36982 | Splunk Enterprise denial of service through null pointer reference in cluster/config REST endpoint | 7.5v3.1 | 0.5% | 2024-07-01 | Fix |
| CVE-2024-36423 | GHSL-2023-246: Flowise XSS in /API/v1/public-chatflows/id | 6.1NVD v3.1 | 0.4% | 2024-07-01 | |
| CVE-2024-36422 | GHSL-2023-245: Flowise XSS in API/v1/chatflows/id | 6.1NVD v3.1 | 0.4% | 2024-07-01 | |
| CVE-2024-36421 | GHSL-2023-234: Flowise Cors Misconfiguration in packages/server/src/index.ts | 7.5NVD v3.1 | 8.5% | 2024-07-01 | |
| CVE-2024-36420 | GHSL-2023-232: Flowise path injection at /API/v1/openai-assistants-file | 7.5NVD v3.1 | 1.8% | 2024-07-01 | NucleiExploit code |
| CVE-2024-36401 | OSGeo GeoServer GeoTools eval injection | 9.8CNA v3.1 | 99.8% | 2024-07-01 | KEVNucleiMetasploitEmerging ThreatsExploit codeFix |
| CVE-2024-36387 | Apache HTTP Server: DoS by null pointer in websocket over HTTP/2 | 5.4CISA ADP v3.1 | 1.7% | 2024-07-01 | Fix |
| CVE-2024-34696 | GeoServer's Server Status shows sensitive environmental variables and Java properties | 4.5CNA v3.1 | 0.4% | 2024-07-01 | Fix |
| CVE-2024-32230 | FFmpeg buffer overflow | 7.8v3.1 | 0.4% | 2024-07-01 | Fix |
| CVE-2024-32229 | FFmpeg heap-based buffer overflow | 8.4CISA ADP v3.1 | 0.3% | 2024-07-01 | Fix |
| CVE-2024-32228 | FFmpeg buffer overflow | 6.6CISA ADP v3.1 | 0.2% | 2024-07-01 | Fix |
| CVE-2024-28200 | N-central authentication bypass | 9.1CNA v3.1 | 1.9% | 2024-07-01 | NucleiFix |
| CVE-2024-24749 | geoserver Classpath resource disclosure in GWC Web Resource API on Windows / Tomcat | 7.5CNA v3.1 | 0.8% | 2024-07-01 | Fix |
| CVE-2024-23737 | Savignano S-notify cross-site request forgery | 5.4v3.1 | 0.1% | 2024-07-01 | Fix |
| CVE-2024-23736 | savignano S/Notify cross-site request forgery | 8.8CISA ADP v3.1 | 0.1% | 2024-07-01 | |
| CVE-2024-23380 | Qualcomm Snapdragon use-after-free in Graphics | 8.4CNA v3.1 | 0.2% | 2024-07-01 | Fix |
| CVE-2024-23373 | Qualcomm Snapdragon use-after-free in Graphics | 8.4CNA v3.1 | 0.2% | 2024-07-01 | Fix |
| CVE-2024-23372 | Qualcomm Snapdragon integer overflow or wraparound in Graphics | 8.4CNA v3.1 | 0.1% | 2024-07-01 | Fix |
| CVE-2024-23368 | Buffer copy without checking size of input (`Classic buffer overflow`) in Qualcomm IPC | 7.8CNA v3.1 | 0.1% | 2024-07-01 | Fix |
| CVE-2024-21586 | Junos OS: SRX Series and NFX Series: Specific valid traffic leads to a PFE crash | 7.5CNA v3.1 | 0.5% | 2024-07-01 | Fix |
| CVE-2024-21482 | Qualcomm Snapdragon secure boot process authentication bypass | 6.8CNA v3.1 | 0.1% | 2024-07-01 | Fix |
| CVE-2024-21469 | Qualcomm Snapdragon Permissions, Privileges, and Access Control issues in TZ Secure OS | 7.3CNA v3.1 | 0.1% | 2024-07-01 | Fix |
| CVE-2024-21466 | Qualcomm Snapdragon integer underflow (wrap or wraparound) in WLAN Host Communication | 6.5CNA v3.1 | 0.2% | 2024-07-01 | Fix |
| CVE-2024-21465 | Qualcomm Snapdragon buffer over-read in Trusted Execution Environment | 7.8CNA v3.1 | 0.1% | 2024-07-01 | Fix |
| CVE-2024-21462 | Qualcomm Snapdragon buffer over-read in TZ Secure OS | 7.1CNA v3.1 | 0.1% | 2024-07-01 | Fix |
| CVE-2024-21461 | Qualcomm Snapdragon double free in HLOS | 8.4CNA v3.1 | 0.1% | 2024-07-01 | Fix |
| CVE-2024-21460 | Qualcomm Snapdragon use of insufficiently random values in Core | 7.1CNA v3.1 | 0.1% | 2024-07-01 | Fix |
| CVE-2024-21458 | Qualcomm Snapdragon buffer over-read in WLAN host | 6.5CNA v3.1 | 0.2% | 2024-07-01 | Fix |
| CVE-2024-21457 | Qualcomm Snapdragon buffer over-read in WLAN Host Communication | 6.5CNA v3.1 | 0.2% | 2024-07-01 | Fix |
| CVE-2024-21456 | Qualcomm Snapdragon buffer over-read in WLAN host | 6.5CNA v3.1 | 0.3% | 2024-07-01 | Fix |
| CVE-2024-20399 | Cisco NX-OS command injection | 6.0CNA v3.1 | 4.3% | 2024-07-01 | KEVFix |
| CVE-2024-20081 | MediaTek chipsets out-of-bounds write in gnss | 6.7NVD v3.1 | 0.2% | 2024-07-01 | Fix |
| CVE-2024-20080 | MediaTek chipsets improper certificate validation in gnss | 9.8CISA ADP v3.1 | 0.3% | 2024-07-01 | Fix |
| CVE-2024-20079 | MediaTek chipsets out-of-bounds write in gnss | 6.7NVD v3.1 | 0.2% | 2024-07-01 | Fix |
| CVE-2024-20078 | MediaTek chipsets type confusion in venc | 9.8CISA ADP v3.1 | 0.3% | 2024-07-01 | Fix |
| CVE-2024-20077 | MediaTek chipsets improper restriction of operations within the bounds of a memory buffer in Modem | 7.5CISA ADP v3.1 | 0.7% | 2024-07-01 | Fix |
| CVE-2024-20076 | MediaTek chipsets improper restriction of operations within the bounds of a memory buffer in Modem | 7.5CISA ADP v3.1 | 0.7% | 2024-07-01 | Fix |
| CVE-2024-6425 | Incorrect provision of specified functionality vulnerability in MESbook | 9.1CNA v3.1 | 0.5% | 2024-07-01 | |
| CVE-2024-6424 | Server-side request forgery vulnerability in MESbook | 8.2NVD v3.1 | 0.5% | 2024-07-01 | |
| CVE-2024-6419 | SourceCodester Medicine Tracker System SQL injection | 9.8v3.1 | 0.6% | 2024-07-01 | |
| CVE-2024-6387 | OpenSSH: regreSSHion race condition in SSH allows RCE/DoS | 8.1NVD v3.1 | 99.5% | 2024-07-01 | Reported exploitedEmerging ThreatsExploit codeKCVFix |
| CVE-2024-6376 | Ejson shell parser in MongoDB Compass maybe bypassed | 7.0CNA v3.1 | 0.5% | 2024-07-01 | Fix |
| CVE-2024-6375 | MongoDB Server missing authorization check may lead to shard key refinement | 5.4CNA v3.1 | 0.4% | 2024-07-01 | Fix |
| CVE-2024-6130 | Form Maker by 10Web WordPress plugin Admin+ stored XSS | 4.8CISA ADP v3.1 | 0.4% | 2024-07-01 | Fix |
| CVE-2024-6050 | Reflected XSS in SOWA OPAC | 6.1v3.1 | 0.8% | 2024-07-01 | Exploit codeFix |
| CVE-2024-5322 | N-central authentication bypass via Session Rebinding | 9.1CNA v3.1 | 0.4% | 2024-07-01 | Fix |
| CVE-2024-4934 | Quiz And Survey Master WordPress plugin Contributor+ stored XSS | 5.5CISA ADP v3.1 | 0.4% | 2024-07-01 | Fix |
| CVE-2024-4007 | ABB ASPECT Enterprise (ASP-ENT-x) hard coded default credential contained in install package | 8.7CNA v4.0 | 1.5% | 2024-07-01 | Exploit codeFix |
| CVE-2024-3123 | CHANGING Mobile One Time Password arbitrary file upload | 7.2CNA v3.1 | 0.6% | 2024-07-01 | Fix |
| CVE-2024-3122 | CHANGING Mobile One Time Password arbitrary file reading | 4.9CNA v3.1 | 0.6% | 2024-07-01 | Fix |
| CVE-2024-0153 | Mali GPU Firmware allows improper GPU processing operations | 7.8CISA ADP v3.1 | 0.2% | 2024-07-01 | Fix |