CVE-2024 list

CVE-2024 records published in August 2024

This page lists the 2,681 CVE-2024 records published in August 2024, newest first, 1,000 to a page. The Cybersecurity and Infrastructure Security Agency's Known Exploited Vulnerabilities (KEV) catalog lists 21 of them. Each CVE opens on cve-security.com with its sources, detection content and vendor fixes, and the search on the CVE-2024 list filters these records by severity or signal.

Critical
47417.7% of these records
Listed in CISA KEV
210.8% of these records
Reported exploited
60.2% of these records
Detection signal
792.9% of these records
Exploit code
873.2% of these records
Actionable vendor fix
1,74865.2% of these records

Figures as of 2026-10-24 13:18 UTC. Records published in August 2024 have had from about 26 months to about 27 months to collect KEV listings, exploitation reports, detection content and exploit code. Records published more recently have had less time, which can hold their shares down.

CVE-2024 records published in August 2024, newest first: records 1 to 1,000 of 2,681
CVE Summary CVSS EPSS Published Signals
CVE-2024-45304OpenZeppelin cairo-contracts OwnableTwoStep incorrect control flow5.3CNA v3.10.5%2024-08-31Fix
CVE-2024-44946Linux kernel KCM socket sendmsg use-after-free7.8CNA v3.10.9%2024-08-31Exploit codeFix
CVE-2024-44945In the Linux kernel, the following vulnerability has been resolved: netfilter: nfnetlink: Initialise extack before use in ACKs Add missing extack initialisation when ACKing BATCH_BEGIN and BATCH_END.7.1CNA v3.10.2%2024-08-31Fix
CVE-2024-39747IBM Sterling Connect:Direct Web Services information disclosure8.1CNA v3.10.8%2024-08-31Fix
CVE-2024-39579Dell PowerScale OneFS incorrect privilege assignment6.7CNA v3.10.2%2024-08-31Fix
CVE-2024-39578Dell PowerScale OneFS symlink following6.3CNA v3.10.2%2024-08-31Fix
CVE-2024-8366code-projects Pharmacy Management System Update My Profile page index.php cross-site scripting4.7v3.10.5%2024-08-31
CVE-2024-8276WPZOOM Portfolio Lite Filterable Portfolio WordPress plugin stored cross-site scripting5.4v3.10.4%2024-08-31Fix
CVE-2024-8108Share This Image WordPress plugin stored cross-site scripting5.4v3.10.4%2024-08-31Fix
CVE-2024-8006Null pointer dereference in libpcap with remote packet capture support4.4CNA v3.10.2%2024-08-31Fix
CVE-2024-7717WP Events Manager WordPress plugin authenticated (Subscriber+) time-based SQL injection8.8CNA v3.10.5%2024-08-31Fix
CVE-2024-7435Attire WordPress theme authenticated (Contributor+) PHP object injection8.8CNA v3.10.7%2024-08-31Fix
CVE-2024-5212tagDiv Composer WordPress plugin reflected cross-site scripting via envato_code[]6.1CNA v3.10.4%2024-08-31Fix
CVE-2024-3886tagDiv Composer WordPress plugin reflected cross-site scripting via envato_code[]6.1CNA v3.10.4%2024-08-31Fix
CVE-2024-0111NVIDIA CUDA Toolkit improper quantity validation4.4CNA v3.10.2%2024-08-31Fix
CVE-2024-0110NVIDIA CUDA Toolkit out-of-bounds write4.4CNA v3.10.2%2024-08-31Fix
CVE-2024-0109NVIDIA CUDA Toolkit out-of-bounds read3.3CNA v3.10.2%2024-08-31Fix
CVE-2024-45492libexpat integer overflow9.8NVD v3.11.4%2024-08-30Fix
CVE-2024-45491libexpat integer overflow9.8NVD v3.11.1%2024-08-30Fix
CVE-2024-45490libexpat integer overflow7.5NVD v3.11.7%2024-08-30Fix
CVE-2024-45488One Identity Safeguard for Privileged Passwords cookie handling improper access control9.8CISA ADP v3.150.6%2024-08-30Nuclei
CVE-2024-45047Potential mXSS vulnerability due to improper HTML escaping in Svelte5.4CNA v3.10.4%2024-08-30Fix
CVE-2024-44944Linux kernel conntrack netlink expectation ID vulnerability5.5NVD v3.10.2%2024-08-30Fix
CVE-2024-44918Seacms component admin_datarelate.php cross-site scripting3.5CISA ADP v3.10.3%2024-08-30
CVE-2024-44916Seacms command injection7.2CISA ADP v3.11.2%2024-08-30
CVE-2024-44684TpMeCMS cross-site scripting6.1v3.10.3%2024-08-30
CVE-2024-44683Seacms cross-site scripting6.1v3.10.3%2024-08-30
CVE-2024-44682ShopXO cross-site scripting6.1v3.10.3%2024-08-30
CVE-2024-42412ELECOM WAB-I1750-PS cross-site scripting6.1v3.10.3%2024-08-30Fix
CVE-2024-39300ELECOM WAB-I1750-PS Telnet function missing authentication3.7NVD v3.10.5%2024-08-30Fix
CVE-2024-38868ManageEngine Endpoint Central incorrect authorization7.6CNA v3.10.8%2024-08-30Fix
CVE-2024-34577ELECOM WRC-X3000GS2-B cross-site scripting6.1v3.10.3%2024-08-30Fix
CVE-2024-21658Insufficient control of region value length in discourse-calendar4.3CNA v3.10.4%2024-08-30Fix
CVE-2024-8348SourceCodester Computer Laboratory Management System Master.php delete_category SQL injection9.8v3.10.6%2024-08-30
CVE-2024-8347SourceCodester Computer Laboratory Management System Master.php delete_record SQL injection9.8v3.10.6%2024-08-30
CVE-2024-8346SourceCodester Computer Laboratory Management System SystemSettings.php SQL injection9.8v3.10.6%2024-08-30
CVE-2024-8345SourceCodester Music Gallery Site Users.php SQL injection9.8v3.10.6%2024-08-30
CVE-2024-8344Campcodes Supplier Management System edit_area.php SQL injection8.8v3.10.5%2024-08-30
CVE-2024-8343SourceCodester Sentiment Based Movie Rating System User Registration Users.php SQL injection9.8v3.10.7%2024-08-30
CVE-2024-8342SourceCodester Petshop Management System add_client.php unrestricted upload8.8v3.10.6%2024-08-30
CVE-2024-8341SourceCodester Petshop Management System add_user.php unrestricted upload9.8v3.10.7%2024-08-30
CVE-2024-8340SourceCodester Electric Billing Management System Actions.php SQL injection9.8v3.10.7%2024-08-30
CVE-2024-8339SourceCodester Electric Billing Management System Connection Code ?page=tracks SQL injection9.8v3.10.6%2024-08-30
CVE-2024-8338HFO4 shudong-share file extension fileReceive.php unrestricted upload8.8v3.10.5%2024-08-30
CVE-2024-8337SourceCodester Contact Manager with Export to VCF index.html cross-site scripting5.4v3.10.4%2024-08-30
CVE-2024-8336SourceCodester Music Gallery Site Master.php SQL injection9.8v3.10.6%2024-08-30
CVE-2024-8335OpenRapid RapidCMS runlogon.php SQL injection9.8v3.10.6%2024-08-30
CVE-2024-8334master-nan Sweet-CMS log.go LogHandler neutralization for logs8.1v3.10.5%2024-08-30
CVE-2024-8332master-nan Sweet-CMS index SQL injection9.8v3.10.6%2024-08-30
CVE-2024-8331OpenRapid RapidCMS user-move-run.php SQL injection9.8v3.10.6%2024-08-30
CVE-2024-8330Gether Technology 6SHR System unrestricted file upload8.8CNA v3.10.6%2024-08-30
CVE-2024-8329Gether Technology 6SHR System SQL injection8.8CNA v3.10.6%2024-08-30
CVE-2024-8328HWA JIUH DIGITAL TECHNOLOGY Easy test Online Learning and Testing Platform reflected XSS5.4CNA v3.10.3%2024-08-30Fix
CVE-2024-8327HWA JIUH DIGITAL TECHNOLOGY Easy test Online Learning and Testing Platform SQL injection8.8CNA v3.10.7%2024-08-30Fix
CVE-2024-8319Tourfic WordPress plugin cross-site request forgery in Multiple Functions4.3CNA v3.10.2%2024-08-30Fix
CVE-2024-8285Kroxylicious: Missing upstream kafka TLS hostname verification5.9NVD v3.10.4%2024-08-30Fix
CVE-2024-8274WP Booking Calendar WordPress plugin reflected cross-site scripting6.1CNA v3.10.5%2024-08-30Fix
CVE-2024-8260OPA for Windows has an SMB force-authentication vulnerability7.3NVD v3.10.3%2024-08-30Fix
CVE-2024-8252Clean Login WordPress plugin authenticated (Contributor+) local file inclusion8.8v3.13.0%2024-08-30NucleiFix
CVE-2024-8235Libvirt: Crash of virtinterfaced via virconnectlistinterfaces6.2CNA v3.10.2%2024-08-30Fix
CVE-2024-8234Zyxel NWA1100-N firmware OS command injection7.5CNA v3.14.4%2024-08-30
CVE-2024-8016The Events Calendar Pro WordPress plugin PHP object injection to remote code execution7.2NVD v3.10.7%2024-08-30Fix
CVE-2024-7858Media Library Folders WordPress plugin missing authorization on Various Functions6.3CNA v3.10.3%2024-08-30Fix
CVE-2024-7122Elementor Addon Elements WordPress plugin stored cross-site scripting5.4v3.10.4%2024-08-30Fix
CVE-2024-6586Lightdash information disclosure7.3CISA ADP v3.11.9%2024-08-30NucleiFix
CVE-2024-6585Lightdash cross-site scripting5.4CISA ADP v3.10.6%2024-08-30Fix
CVE-2024-6204ManageEngine Exchange Reporter Plus SQL injection8.3CNA v3.12.0%2024-08-30Fix
CVE-2024-5879HubSpot WordPress plugin stored cross-site scripting5.4v3.10.4%2024-08-30Fix
CVE-2024-5784Tutor LMS Pro WordPress plugin missing authorization authenticated insecure direct object reference7.1v3.10.4%2024-08-30Fix
CVE-2024-5061Enfold WordPress theme stored cross-site scripting5.4v3.10.3%2024-08-30Fix
CVE-2024-5024MemberPress WordPress plugin reflected cross-site scripting6.1CNA v3.10.3%2024-08-30Fix
CVE-2024-4401Elementor Addon Elements WordPress plugin stored cross-site scripting5.4v3.10.3%2024-08-30Fix
CVE-2024-3998Betheme Responsive Multipurpose WordPress and WooCommerce theme stored cross-site scripting5.4v3.10.3%2024-08-30
CVE-2024-3673Web Directory Free WordPress plugin unauthenticated LFI9.1CISA ADP v3.15.6%2024-08-30NucleiExploit codeFix
CVE-2024-2881Fault injection of EdDSA signature in WolfCrypt6.7CNA v3.10.5%2024-08-30Fix
CVE-2024-2694Betheme WordPress theme authenticated (Contributor+) PHP object injection8.8CNA v3.10.6%2024-08-30Fix
CVE-2024-45440Drupal Full path disclosure5.3NVD v3.19.3%2024-08-29NucleiExploit codeFix
CVE-2024-45436Ollama can extract members of a ZIP archive outside of the parent directory7.5NVD v3.12.6%2024-08-29Exploit codeFix
CVE-2024-45435Chartist prototype pollution9.8v3.10.6%2024-08-29
CVE-2024-45302CRLF injection in RestSharp's `RestRequest.AddHeader` method6.1CNA v3.10.3%2024-08-29Fix
CVE-2024-45233Powermail TYPO3 extension broken access control in the OutputController9.8v3.10.4%2024-08-29Fix
CVE-2024-45232Powermail (Powermail) insecure direct object reference (IDOR)5.3NVD v3.10.3%2024-08-29Fix
CVE-2024-45056matter-labs era-compiler-solidity incorrect calculation5.9CNA v3.10.4%2024-08-29Fix
CVE-2024-45045JavaScript injection via URL encoded values in links in Collabora Office Android6.3CNA v3.10.3%2024-08-29Fix
CVE-2024-44930Serilog-contrib Serilog-enrichers-clientinfo Serilog Client IP spoofing6.5v3.10.3%2024-08-29Fix
CVE-2024-44919Seacms component admin_ads.php cross-site scripting5.4v3.10.4%2024-08-29
CVE-2024-44779Vtiger CRM viewname parameter in the index page reflected cross-site scripting9.6v3.10.8%2024-08-29
CVE-2024-44778Vtiger CRM parent parameter in the index page reflected cross-site scripting9.6v3.10.7%2024-08-29
CVE-2024-44777Vtiger CRM tag parameter in the index page reflected cross-site scripting9.6v3.10.7%2024-08-29
CVE-2024-44776Vtiger CRM page parameter open redirect6.1v3.10.3%2024-08-29
CVE-2024-44717DedeBIZ A cross-site scripting6.1v3.10.3%2024-08-29Fix
CVE-2024-44716DedeBIZ A cross-site scripting6.1v3.10.3%2024-08-29Fix
CVE-2024-43986E-cab taxi booking manager WordPress plugin cross-site scripting (XSS)4.8v3.10.3%2024-08-29Fix
CVE-2024-43965SendGrid for WordPress plugin SQL injection9.8v3.12.0%2024-08-29NucleiExploit code
CVE-2024-43964DSGVO All in one for WP WordPress plugin cross-site scripting (XSS)5.4v3.10.3%2024-08-29Fix
CVE-2024-43963Visual CSS Style Editor WordPress plugin cross-site scripting (XSS)6.1NVD v3.10.3%2024-08-29Fix
CVE-2024-43961azurecurve Toggle Show/Hide WordPress plugin cross-site scripting (XSS)5.4v3.10.3%2024-08-29
CVE-2024-43960Web and WooCommerce Addons for WPBakery Builder WordPress plugin cross-site scripting (XSS)4.8v3.10.3%2024-08-29
CVE-2024-43958Gianni Porto IntoTheDark theme reflected cross-site scripting6.1NVD v3.10.3%2024-08-29
CVE-2024-43957Animated Number Counters WordPress plugin Editor+ limited local file inclusion8.8v3.10.6%2024-08-29Fix
CVE-2024-43955Droip WordPress plugin unauthenticated arbitrary file download/Deletion7.5NVD v3.10.6%2024-08-29Fix
CVE-2024-43954Droip WordPress plugin Subscriber+ settings Change/data exposure6.3v3.10.3%2024-08-29Fix
CVE-2024-43953Classic Addons WPBakery Page Builder WordPress plugin cross-site scripting (XSS)5.4v3.10.3%2024-08-29Fix
CVE-2024-43952Esotera WordPress theme cross-site scripting (XSS)5.4v3.10.3%2024-08-29Fix
CVE-2024-43951Tempera WordPress theme cross-site scripting (XSS)5.4v3.10.3%2024-08-29
CVE-2024-43950Brickscore WordPress plugin cross-site scripting (XSS)6.1NVD v3.10.3%2024-08-29
CVE-2024-43949GHActivity WordPress plugin cross-site scripting (XSS)5.4v3.10.3%2024-08-29
CVE-2024-43948WP Armour Extended WordPress plugin reflected cross-site scripting (XSS)6.1NVD v3.10.3%2024-08-29Fix
CVE-2024-43947WP Armour Extended WordPress plugin cross-site request forgery (CSRF)4.3v3.10.2%2024-08-29Fix
CVE-2024-43946SKT Blocks WordPress plugin cross-site scripting (XSS)5.4v3.10.3%2024-08-29Fix
CVE-2024-43944Maintenance and Coming Soon Redirect Animation WordPress plugin bypass vulnerability vulnerability3.7CNA v3.10.4%2024-08-29
CVE-2024-43943Greenshift Woocommerce Addon WordPress plugin Subscriber+ SQL injection8.8v3.10.4%2024-08-29Fix
CVE-2024-43942Greenshift Query and Meta Addon WordPress plugin Subscriber+ SQL injection8.8v3.10.4%2024-08-29Fix
CVE-2024-43941Propovoice Pro WordPress plugin unauthenticated SQL injection9.8v3.10.5%2024-08-29
CVE-2024-43940VIICTORY MEDIA Z Y N I T H missing authorization6.5v3.10.4%2024-08-29
CVE-2024-43939VIICTORY MEDIA Z Y N I T H missing authorization6.5v3.10.3%2024-08-29
CVE-2024-43936EmbedPress WordPress plugin cross-site scripting (XSS)5.4v3.10.3%2024-08-29Fix
CVE-2024-43935WP Delicious Recipe Plugin for Food Bloggers WordPress plugin cross-site scripting5.4v3.10.3%2024-08-29Fix
CVE-2024-43934Collapsing Archives WordPress plugin cross-site scripting (XSS)5.4v3.10.3%2024-08-29Fix
CVE-2024-43931JobSearch WP Job Board WordPress plugin PHP object injection9.8v3.10.5%2024-08-29Fix
CVE-2024-43926Beaver Builder WordPress plugin reflected cross-site scripting (XSS)6.1NVD v3.10.3%2024-08-29Fix
CVE-2024-43922NitroPack WordPress plugin unauthenticated arbitrary shortcode execution vulnerability9.8v3.10.4%2024-08-29Fix
CVE-2024-43921Generate Images Magic Post Thumbnail WordPress plugin cross-site scripting (XSS)6.1NVD v3.10.3%2024-08-29Fix
CVE-2024-43920Gutenverse Gutenberg Blocks Page Builder for Site Editor WordPress plugin cross-site scripting (XSS)5.4v3.10.3%2024-08-29Fix
CVE-2024-43918WBW Product Table PRO WordPress plugin unauthenticated arbitrary SQL Query execution vulnerability9.8v3.11.5%2024-08-29Exploit codeFix
CVE-2024-43917TI WooCommerce Wishlist WordPress plugin SQL injection9.8v3.123.0%2024-08-29NucleiExploit codeFix
CVE-2024-43804OS command injection via Port Scan Functionality in Roxy-WI8.8CNA v3.12.6%2024-08-29
CVE-2024-43700Philip Hazel xfpt buffer overflow7.8v3.10.3%2024-08-29Fix
CVE-2024-43144Cost Calculator Builder WordPress plugin SQL injection9.8v3.12.0%2024-08-29NucleiFix
CVE-2024-43132Docket WordPress plugin unauthenticated SQL injection9.8v3.10.5%2024-08-29Fix
CVE-2024-41964Insufficient permission checks in the language settings in Kirby CMS8.1CNA v3.10.5%2024-08-29Fix
CVE-2024-41918'Rakuten Ichiba App' missing authorization6.1v3.10.3%2024-08-29Fix
CVE-2024-41372Organizr SQL injection9.8v3.10.5%2024-08-29
CVE-2024-41371Organizr cross-site scripting6.1v3.10.3%2024-08-29
CVE-2024-41370Organizr SQL injection9.8v3.10.5%2024-08-29
CVE-2024-41369Sourcefabric Phoniebox code injection9.8v3.10.9%2024-08-29
CVE-2024-41368Sourcefabric Phoniebox code injection9.8v3.10.9%2024-08-29
CVE-2024-41367Sourcefabric Phoniebox code injection9.8v3.10.9%2024-08-29
CVE-2024-41366Sourcefabric Phoniebox code injection9.8v3.10.9%2024-08-29
CVE-2024-41364Sourcefabric Phoniebox code injection9.8v3.10.9%2024-08-29
CVE-2024-41361Sourcefabric Phoniebox code injection9.8v3.10.9%2024-08-29
CVE-2024-41358phpipam cross-site scripting6.1v3.11.6%2024-08-29Exploit code
CVE-2024-41351Baijunyao Bjyadmin cross-site scripting6.1v3.10.3%2024-08-29
CVE-2024-41350Baijunyao Bjyadmin cross-site scripting6.1v3.10.3%2024-08-29
CVE-2024-41349unmark cross-site scripting6.1v3.10.3%2024-08-29
CVE-2024-41348Jpatokal Openflights cross-site scripting6.1v3.10.4%2024-08-29
CVE-2024-41347Jpatokal Openflights cross-site scripting6.1v3.10.3%2024-08-29
CVE-2024-41346Jpatokal Openflights cross-site scripting5.4v3.10.3%2024-08-29
CVE-2024-41345Jpatokal Openflights cross-site scripting5.4v3.10.3%2024-08-29
CVE-2024-39658Salon Booking System WordPress plugin authenticated SQL injection7.2v3.10.4%2024-08-29Fix
CVE-2024-39653VikRentCar Car Rental Management System WordPress plugin SQL injection9.8v3.10.5%2024-08-29Fix
CVE-2024-39638Registrations for the Events Calendar WordPress plugin SQL injection8.8v3.10.4%2024-08-29Fix
CVE-2024-39622ListingPro WordPress theme unauthenticated SQL injection9.8v3.10.5%2024-08-29Fix
CVE-2024-39620ListingPro WordPress plugin SQL injection8.8v3.10.4%2024-08-29Fix
CVE-2024-38795ListingPro WordPress plugin unauthenticated SQL injection9.8v3.10.5%2024-08-29Fix
CVE-2024-38793Best Restaurant Menu by Pricelisto WordPress plugin SQL injection8.8v3.11.2%2024-08-29Exploit codeFix
CVE-2024-38693WP User Frontend WordPress plugin SQL injection7.2v3.10.4%2024-08-29Fix
CVE-2024-38304Dell PowerEdge Platform out-of-bounds access3.8CNA v3.10.1%2024-08-29Fix
CVE-2024-38303Dell PowerEdge Platform improper input validation5.3CNA v3.10.1%2024-08-29Fix
CVE-2024-35133IBM Security Verify Access HTTP open redirect6.8CNA v3.11.8%2024-08-29Exploit codeFix
CVE-2024-35118IBM MaaS360 information disclosure4.6CNA v3.10.2%2024-08-29Fix
CVE-2024-34019Acronis Snap Deploy uncontrolled search path6.7CNA v3.00.1%2024-08-29Fix
CVE-2024-34018Acronis Snap Deploy incorrect default permissions5.5CNA v3.00.1%2024-08-29Fix
CVE-2024-34017Acronis Snap Deploy uncontrolled search path6.7CNA v3.00.1%2024-08-29Fix
CVE-2024-29731SportsNET SQL injection9.8v3.10.4%2024-08-29
CVE-2024-29730SportsNET SQL injection9.8v3.10.5%2024-08-29
CVE-2024-29729SportsNET SQL injection9.8v3.10.5%2024-08-29
CVE-2024-29728SportsNET SQL injection9.8v3.10.4%2024-08-29
CVE-2024-29727SportsNET SQL injection9.8v3.10.4%2024-08-29
CVE-2024-29726SportsNET SQL injection9.8v3.10.4%2024-08-29
CVE-2024-29725SportsNET SQL injection9.8v3.10.5%2024-08-29
CVE-2024-29724SportsNET SQL injection9.8v3.10.4%2024-08-29
CVE-2024-29723SportsNET SQL injection9.8v3.10.4%2024-08-29
CVE-2024-8304JPress template module edit path traversal4.9v3.10.6%2024-08-29
CVE-2024-8303dingfanzu CMS getBasicInfo.php SQL injection5.3CNA v4.00.4%2024-08-29
CVE-2024-8302Dingfanzu CMS chpwd.php SQL injection9.8v3.10.8%2024-08-29
CVE-2024-8301Dingfanzu CMS checkin.php SQL injection9.8v3.10.8%2024-08-29
CVE-2024-8297kitsada8621 Digital Library Management System JWT refresh auth middleware log injection7.5v3.10.5%2024-08-29
CVE-2024-8296FeehiCMS index.php insert unrestricted upload9.8v3.10.8%2024-08-29
CVE-2024-8295FeehiCMS index.php createBanner unrestricted upload9.8v3.10.8%2024-08-29
CVE-2024-8294FeehiCMS index.php update unrestricted upload9.8v3.10.8%2024-08-29
CVE-2024-8255Delta Electronics DTN Soft path traversal in Ocean Data Systems Dream Report9.8v3.10.8%2024-08-29Fix
CVE-2024-8250Expired pointer dereference in Wireshark7.8CNA v3.10.3%2024-08-29Fix
CVE-2024-7895Beaver Builder (Lite Version) WordPress plugin stored cross-site scripting5.4v3.10.4%2024-08-29Fix
CVE-2024-7857Media Library Folders WordPress plugin authenticated (Subscriber+) Second-order SQL injection6.5v3.10.5%2024-08-29Fix
CVE-2024-7856MP3 Audio Player WordPress plugin arbitrary file deletion8.1v3.119.3%2024-08-29Exploit codeFix
CVE-2024-7607Front End Users WordPress plugin authenticated (Contributor+) time-based SQL injection8.8CNA v3.10.5%2024-08-29Fix
CVE-2024-7606Front End Users WordPress plugin stored cross-site scripting5.4v3.10.3%2024-08-29Fix
CVE-2024-7418The Post Grid WordPress plugin authenticated (Contributor+) information disclosure4.3v3.10.5%2024-08-29Fix
CVE-2024-7132CoBlocks WordPress plugin Editor+ stored XSS4.8NVD v3.10.4%2024-08-29Fix
CVE-2024-6927Viral Signup WordPress plugin Admin+ stored XSS4.8NVD v3.10.4%2024-08-29
CVE-2024-6672WhatsUp Gold getMonitorJoin SQL injection privilege escalation8.8CNA v3.10.7%2024-08-29Fix
CVE-2024-6671WhatsUp Gold GetStatisticalMonitorList SQL injection authentication bypass9.8CNA v3.119.0%2024-08-29Reported exploitedNucleiEmerging ThreatsFix
CVE-2024-6670Progress WhatsUp Gold SQL injection9.8CNA v3.193.0%2024-08-29KEVNucleiMetasploitEmerging ThreatsExploit codeFix
CVE-2024-6551GiveWP WordPress plugin unauthenticated full path disclosure5.3v3.10.3%2024-08-29Fix
CVE-2024-5987WP Accessibility Helper WordPress plugin missing authorization authenticated limited settings update4.3v3.10.3%2024-08-29Fix
CVE-2024-5857Funnelforms Free media deletion AJAX action missing authorization5.3v3.10.3%2024-08-29Fix
CVE-2024-5624Reflected cross-site scripting (XSS) in Shift Logbook application of B&R APROL5.1CNA v4.00.3%2024-08-29Fix
CVE-2024-5623Untrusted search path vulnerability in B&R APROL5.4CNA v4.00.2%2024-08-29Fix
CVE-2024-5622Untrusted search path vulnerability in the AprolConfigureCCServices of B&R APROL7.3CNA v4.00.2%2024-08-29Fix
CVE-2024-5417Gutentor for WordPress Contributor+ stored XSS5.4NVD v3.10.3%2024-08-29Fix
CVE-2024-5057Easy Digital Downloads WordPress plugin SQL injection9.8v3.12.6%2024-08-29NucleiFix
CVE-2024-4428Sensetive data exposure in Menulux Managment Portal9.8v3.10.5%2024-08-29
CVE-2024-3944WP To Do WordPress plugin authenticated (Admin+) stored cross-site scripting via Task comments4.8v3.10.3%2024-08-29Fix
CVE-2024-3679Premium SEO Pack WP SEO WordPress plugin unauthenticated information exposure7.5v3.10.4%2024-08-29
CVE-2024-2541Popup Builder WordPress plugin sensitive information exposure via Imported Subscribers CSV file7.5v3.10.6%2024-08-29Fix
CVE-2024-2502silabs.com SE Firmware failure to update the tamper reset cause register when a tamper event occurs2.0CNA v3.10.2%2024-08-29Fix
CVE-2024-1545Fault injection of RSA encryption in WolfCrypt5.9CNA v3.10.6%2024-08-29Fix
CVE-2024-1543wolfSSL AES T-Table sub-cache-line leakage4.1CNA v3.10.2%2024-08-29Fix
CVE-2024-1384Premium Portfolio Features for Phlox WordPress plugin stored cross-site scripting5.4v3.10.4%2024-08-29Fix
CVE-2024-1056Funnel Kit Funnel Builder PRO Authenticated stored cross-site scripting5.4v3.10.3%2024-08-29Fix
CVE-2024-45346GetApps application has code execution8.8CNA v3.10.5%2024-08-28Fix
CVE-2024-45059Authenticated SQL injection in i-Educar8.8CNA v3.00.7%2024-08-28Fix
CVE-2024-45058Privilege escalation in i-Educar8.1CNA v3.01.4%2024-08-28Exploit codeFix
CVE-2024-45057Reflected cross-site scripting in i-Educar6.3CNA v3.00.4%2024-08-28Fix
CVE-2024-45054Potential Permission Leakage of Cluster Level in hwameistor2.8CNA v3.10.3%2024-08-28Fix
CVE-2024-45048XML external entity Reference (XXE) in PHPSpreadsheet8.8CNA v3.10.6%2024-08-28Fix
CVE-2024-45046PhpSpreadsheet HTML writer is vulnerable to cross-site scripting via style information5.4CNA v3.10.4%2024-08-28Fix
CVE-2024-45043opentelemetry-collector-contrib OpenTelemetry Collector AWS Firehose Receiver authentication bypass5.3CNA v3.10.5%2024-08-28Fix
CVE-2024-44943Linux kernel GUP page pinning vulnerability5.5v3.10.2%2024-08-28Fix
CVE-2024-44915IrfanView Exr denial of service5.5v3.10.3%2024-08-28
CVE-2024-44914IrfanView Exr denial of service5.5v3.10.3%2024-08-28
CVE-2024-44913IrfanView Exr denial of service5.5v3.10.3%2024-08-28
CVE-2024-44761Gzequan Eq Enterprise Management System path traversal9.8v3.11.1%2024-08-28
CVE-2024-44760Sunmochina Enterprise Management System incorrect default permissions7.5NVD v3.10.5%2024-08-28
CVE-2024-43805HTML injection in Jupyter Notebook and JupyterLab leading to DOM Clobbering7.6CNA v3.10.4%2024-08-28Fix
CVE-2024-42905Digital China DCME-320 ping.php command injection9.8CISA ADP v3.115.4%2024-08-28
CVE-2024-42900RuoYi cross-site scripting6.1CISA ADP v3.10.4%2024-08-28
CVE-2024-42793Lopalopa Music Management System cross-site request forgery8.0v3.10.2%2024-08-28
CVE-2024-42698Shedaniel Roughlyenoughitems improper array index validation5.3v3.10.3%2024-08-28
CVE-2024-41565Mezz Justenoughitems improper array index validation5.3v3.10.3%2024-08-28
CVE-2024-41564Emilyploszaj Emi improper array index validation5.3v3.10.3%2024-08-28
CVE-2024-41236Lopalopa Responsive School Management System /smsa/admin_login.php in Kashipara SQL injection7.2v3.10.4%2024-08-28
CVE-2024-39771Safie QBiC CLOUD CC-2L improper certificate validation6.8v3.10.1%2024-08-28Fix
CVE-2024-39584Dell Client Platform BIOS default credentials8.2CNA v3.10.2%2024-08-28Fix
CVE-2024-34198TOTOLINK A3002RU buffer overflow9.8CISA ADP v3.10.7%2024-08-28
CVE-2024-34195TOTOLINK A3002R Firmware stack-based buffer overflow9.8v3.10.9%2024-08-28
CVE-2024-20478Cisco Application Policy Infrastructure Controller App privilege escalation6.5CNA v3.10.7%2024-08-28Fix
CVE-2024-20446Cisco NX-OS Software DHCPv6 Relay agent denial of service8.6CNA v3.10.8%2024-08-28Fix
CVE-2024-20413Cisco NX-OS Bash privilege escalation6.7CNA v3.10.1%2024-08-28Fix
CVE-2024-20411Cisco NX-OS Bash arbitrary code execution6.7CNA v3.10.2%2024-08-28Fix
CVE-2024-20289Cisco NX-OS Software command injection4.4CNA v3.10.2%2024-08-28Fix
CVE-2024-20286Cisco NX-OS Software Python Parser Escape vulnerability5.3CNA v3.10.2%2024-08-28Fix
CVE-2024-20285Cisco NX-OS Software Python Parser Escape vulnerability5.3CNA v3.10.2%2024-08-28Fix
CVE-2024-20284Cisco NX-OS Software Python Parser Escape vulnerability5.3CNA v3.10.2%2024-08-28Fix
CVE-2024-20279Cisco Application Policy Infrastructure Controller improper access control4.3CNA v3.10.3%2024-08-28Fix
CVE-2024-8231Tenda O6 setPortForward fromVirtualSet stack-based overflow8.8v3.11.2%2024-08-28
CVE-2024-8230Tenda O6 setMacFilterList fromSafeSetMacFilter stack-based overflow9.8v3.11.3%2024-08-28
CVE-2024-8229Tenda O6 operateMacFilter frommacFilterModify stack-based overflow9.8v3.11.3%2024-08-28
CVE-2024-8228Tenda O5 setMacFilterList fromSafeSetMacFilter stack-based overflow9.8v3.11.3%2024-08-28
CVE-2024-8227Tenda O1 DhcpSetSer fromDhcpSetSer stack-based overflow9.8v3.11.2%2024-08-28
CVE-2024-8226Tenda O1 setcfm formSetCfm stack-based overflow9.8v3.11.3%2024-08-28
CVE-2024-8198Google Chrome Skia heap-based buffer overflow8.8v3.10.5%2024-08-28Exploit codeFix
CVE-2024-8195Permalink Manager Lite WordPress plugin unauthorized access5.3v3.10.5%2024-08-28Fix
CVE-2024-8194Google Chrome V8 type confusion8.8v3.10.5%2024-08-28Fix
CVE-2024-8193Google Chrome Skia heap-based buffer overflow8.8v3.10.5%2024-08-28Exploit codeFix
CVE-2024-8030bdthemes Ultimate Store Kit wishlist cookie handler deserialization of untrusted data9.8CNA v3.11.1%2024-08-28Fix
CVE-2024-7745Multi-Factor authentication bypass in Progress WS_FTP Server6.5CNA v3.10.4%2024-08-28Fix
CVE-2024-7744Improper limitation of a pathname to a restricted directory in Progress WS_FTP Server6.5CNA v3.10.7%2024-08-28Fix
CVE-2024-7573Relevanssi Live Ajax Search WordPress plugin unauthenticated WP_Query argument injection5.3CNA v3.10.4%2024-08-28Fix
CVE-2024-7447Funnelforms Free file upload function missing authorization5.3CNA v3.10.4%2024-08-28Fix
CVE-2024-7269Stored XSS in ConnX ESP HR Management5.4NVD v3.10.4%2024-08-28Fix
CVE-2024-6450Reflected XSS in HyperView Geoportal Toolkit6.1v3.10.3%2024-08-28Fix
CVE-2024-6449Arbitrary cross-domain file inclusion in HyperView Geoportal Toolkit6.5v3.10.4%2024-08-28Fix
CVE-2024-6448Mollie Payments for WooCommerce WordPress plugin unauthenticated full path disclosure5.3CNA v3.10.5%2024-08-28Fix
CVE-2024-6312Funnelforms Free WordPress plugin authenticated (Administrator+) arbitrary file deletion6.5CNA v3.11.1%2024-08-28Fix
CVE-2024-6311Funnelforms Free WordPress plugin authenticated (Administrator+) arbitrary file upload7.2CNA v3.10.9%2024-08-28Fix
CVE-2024-6053TeamViewer Meeting improper access control in the clipboard synchronization feature4.3v3.10.4%2024-08-28Fix
CVE-2024-5546ManageEngine Password Manager Pro SQL injection8.3CNA v3.13.0%2024-08-28Fix
CVE-2024-4556Directory traversal vulnerability in NetIQ Access Manager5.7CNA v3.10.4%2024-08-28Fix
CVE-2024-4555OpenText NetIQ Access Manager user impersonation with MFA when configure in specific way7.7CNA v3.10.3%2024-08-28Fix
CVE-2024-4554Multiple XSS vulnerability in NetIQ Access Manager7.3CNA v3.10.3%2024-08-28Fix
CVE-2024-45321App::cpanminus download without integrity check8.1NVD v3.10.7%2024-08-27Fix
CVE-2024-45264Skyss Arfa-cms admin panel in SkySystem cross-site request forgery8.8v3.10.5%2024-08-27Exploit code
CVE-2024-45049Nix Hydra missing authentication when triggering evaluations7.5CNA v3.10.6%2024-08-27Fix
CVE-2024-45038Device crash via malformed MQTT packet when downlink is enabled in Meshtastic device firmware7.5CNA v3.10.6%2024-08-27Fix
CVE-2024-45037AWS CDK RestApi not generating authorizationScope correctly in resultant CFN template6.4CNA v3.10.3%2024-08-27Fix
CVE-2024-44342D-Link Dir-846w OS command injection9.8v3.12.0%2024-08-27
CVE-2024-44341D-Link Dir-846w OS command injection9.8v3.11.8%2024-08-27
CVE-2024-44340D-Link Dir-846w OS command injection8.8v3.11.8%2024-08-27
CVE-2024-43788Webpack's AutoPublicPathRuntimeModule has a DOM Clobbering Gadget that leads to XSS6.4CNA v3.11.0%2024-08-27Fix
CVE-2024-43783Apollo Router Coprocessors may cause denial of service when handling request bodies7.5CNA v3.10.9%2024-08-27Fix
CVE-2024-43414Apollo Query Planner and Apollo Gateway may infinitely loop on sufficiently complex queries7.5CNA v3.11.0%2024-08-27Fix
CVE-2024-42851Aertherwide Exiftags open source buffer overflow7.8v3.10.3%2024-08-27
CVE-2024-41622D-Link Dir-846w OS command injection9.8v3.12.0%2024-08-27
CVE-2024-41176Beckhoff: Local denial of service issue in package MDP included in TwinCAT/BSD7.3v3.10.3%2024-08-27Fix
CVE-2024-41175Beckhoff: Local denial of service vulnerability in TwinCAT/BSD and the IPC-Diagnostics package5.5CNA v3.10.2%2024-08-27Fix
CVE-2024-41174Beckhoff: Improper input neutralization vulnerability in the IPC-Diagnostics package in TwinCAT/BSD7.3v3.10.2%2024-08-27Fix
CVE-2024-41173Beckhoff: Local authentication bypass in the IPC-Diagnostics package included in TwinCAT/BSD7.8CNA v3.10.2%2024-08-27Fix
CVE-2024-40395PTC Thingworx insecure direct object reference6.5v3.10.6%2024-08-27
CVE-2024-36068Rubrik Cloud DATA Management improper access control9.8v3.10.5%2024-08-27Fix
CVE-2024-8225Tenda G3 SetSysTimeCfg formSetSysTime stack-based overflow9.8v3.11.2%2024-08-27
CVE-2024-8224Tenda G3 setDebugCfg formSetDebugCfg stack-based overflow9.8v3.11.2%2024-08-27
CVE-2024-8223SourceCodester Music Gallery Site Master.php SQL injection9.8v3.10.6%2024-08-27
CVE-2024-8222SourceCodester Music Gallery Site SQL injection9.8v3.10.6%2024-08-27
CVE-2024-8221SourceCodester Music Gallery Site manage_category.php SQL injection9.8v3.10.6%2024-08-27
CVE-2024-8220itsourcecode Tailoring Management System staffedit.php SQL injection9.8v3.10.6%2024-08-27
CVE-2024-8219code-projects Responsive Hotel Site index.php SQL injection9.8v3.10.6%2024-08-27
CVE-2024-8218code-projects Online Quiz Site index.php SQL injection9.8v3.10.6%2024-08-27
CVE-2024-8217SourceCodester E-Commerce Website registration.php SQL injection9.8v3.10.7%2024-08-27
CVE-2024-8216Nafisulbari/itsourcecode Insurance Management System Payment editPayment.php access control5.4v3.10.4%2024-08-27
CVE-2024-8214D-Link DNS-1550-04 hd_config.cgi cgi_FMT_Std2R5_2nd_DiskMGR command injection9.8v3.15.2%2024-08-27Emerging Threats
CVE-2024-8213D-Link DNS-1550-04 hd_config.cgi cgi_FMT_R12R5_1st_DiskMGR command injection9.8v3.17.2%2024-08-27Emerging Threats
CVE-2024-8212D-Link DNS-1550-04 hd_config.cgi cgi_FMT_R12R5_2nd_DiskMGR command injection9.8v3.17.5%2024-08-27Emerging Threats
CVE-2024-8211D-Link DNS-1550-04 hd_config.cgi cgi_FMT_Std2R1_DiskMGR command injection9.8v3.15.4%2024-08-27Emerging Threats
CVE-2024-8210D-Link DNS-1550-04 hd_config.cgi sprintf command injection9.8v3.17.5%2024-08-27Emerging Threats
CVE-2024-8209Nafisulbari/itsourcecode Insurance Management System addClient.php cross-site scripting6.1v3.10.3%2024-08-27
CVE-2024-8208Nafisulbari/itsourcecode Insurance Management System editClient.php cross-site scripting6.1v3.10.3%2024-08-27
CVE-2024-8207MongoDB Server binaries may load potentially insecure shared libraries from specific relative paths6.4CNA v3.10.2%2024-08-27Fix
CVE-2024-8200Reviews Feed WordPress plugin cross-site request forgery4.3CNA v3.10.2%2024-08-27Fix
CVE-2024-8199Reviews Feed WordPress plugin unauthorized access4.3CNA v3.10.4%2024-08-27Fix
CVE-2024-8182Flowise denial of service7.5NVD v3.113.9%2024-08-27
CVE-2024-8181Flowise authentication bypass8.1NVD v3.145.1%2024-08-27Nuclei
CVE-2024-8046Logo Showcase Ultimate WordPress plugin stored cross-site scripting6.4CNA v3.10.3%2024-08-27Fix
CVE-2024-7941Hitachi Energy MicroSCADA SYS600 open redirect4.3CNA v3.10.3%2024-08-27Fix
CVE-2024-7940Hitachi Energy MicroSCADA SYS600 missing authentication8.3CNA v3.10.6%2024-08-27Fix
CVE-2024-7791140+ Widgets WordPress plugin stored cross-site scripting5.4v3.10.3%2024-08-27Fix
CVE-2024-7720HP Security Manager potential remote code execution9.8v3.11.1%2024-08-27Fix
CVE-2024-7608Trellix NX path traversal5.9CNA v3.10.3%2024-08-27
CVE-2024-7304Ninja Tables Easiest Data Table Builder WordPress plugin stored cross-site scripting5.4v3.10.4%2024-08-27Fix
CVE-2024-7125Authentication bypass vulnerability in Hitachi Ops Center Common Services7.8CNA v3.10.2%2024-08-27Fix
CVE-2024-7071Unauthenticate SQLi in Brain Information Technologies' Brain Low-Code9.8v3.10.4%2024-08-27Fix
CVE-2024-6804Jeg Elementor Kit WordPress plugin authenticated (Author+) stored cross-site scripting via SVG file5.4v3.10.4%2024-08-27Fix
CVE-2024-6789Path traversal in M-Files API8.4CNA v4.00.6%2024-08-27Fix
CVE-2024-6688Oxygen Builder WordPress plugin missing authorization authenticated Stylesheet update4.3CNA v3.10.3%2024-08-27Fix
CVE-2024-6633Insecure default in FileCatalyst Workflow Build 139 (and earlier)9.8CNA v3.11.2%2024-08-27Emerging ThreatsFix
CVE-2024-6632SQL injection in FileCatalyst Workflow Build 139 (and earlier)7.2CNA v3.10.6%2024-08-27Fix
CVE-2024-5991wolfSSL buffer overread in domain name matching10.0CNA v4.00.6%2024-08-27Fix
CVE-2024-5814wolfSSL Unverifed Ciphersuite used on a client-side TLS1.3 Downgrade5.1CNA v4.00.5%2024-08-27Fix
CVE-2024-5288wolfSSL safe-error attack on TLS 1.3 protocol5.1CNA v3.10.4%2024-08-27Fix
CVE-2024-4872Hitachi Energy MicroSCADA X SYS600 NoSQL injection9.9CNA v3.10.5%2024-08-27Fix
CVE-2024-3982Hitachi Energy MicroSCADA SYS600 authentication bypass by replay8.2CNA v3.10.2%2024-08-27Fix
CVE-2024-3980Hitachi Energy MicroSCADA X SYS600 path traversal9.9CNA v3.10.6%2024-08-27Fix
CVE-2024-1544wolfSSL ECDSA nonce bias caused by truncation4.1CNA v3.10.3%2024-08-27Fix
CVE-2024-45265Skyss Arfa-cms poll component in SkySystem SQL injection9.8v3.11.0%2024-08-26Exploit code
CVE-2024-45256exfiltration endpoint in BYOB An arbitrary file write9.8CISA ADP v3.15.6%2024-08-26MetasploitExploit codeKCV
CVE-2024-45241CentralSquare CryWolf GeneralDocs.aspx path traversal7.5CISA ADP v3.113.6%2024-08-26NucleiExploit code
CVE-2024-45036Improper access control vulnerability when Accessing a Maliciously Crafted Tophat Link4.3CNA v3.00.3%2024-08-26Fix
CVE-2024-44942In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC syzbot reports a f2fs bug as below: ------------[ cut here ]------------ kernel BUG at fs/f2fs/inline.c:258! CPU: 1 PID: 34 Comm: kworker/u8:2 Not tainted 67.8CNA v3.10.2%2024-08-26Fix
CVE-2024-44941Linux kernel f2fs extent cache use-after-free7.8CNA v3.10.2%2024-08-26Fix
CVE-2024-44940In the Linux kernel, the following vulnerability has been resolved: fou: remove warn in gue_gro_receive on unsupported protocol Drop the WARN_ON_ONCE inn gue_gro_receive if the encapsulated type is not known or does not have a GRO handler. Such a packet is easily constructed. Syzbot generates the7.5CNA v3.10.8%2024-08-26Fix
CVE-2024-44939Linux kernel jfs null pointer dereference7.8CNA v3.10.2%2024-08-26Fix
CVE-2024-44938Linux kernel JFS block allocation out-of-bounds write5.5v3.10.2%2024-08-26Fix
CVE-2024-44937Linux kernel intel-vbtn ACPI driver null pointer dereference5.5v3.10.2%2024-08-26Fix
CVE-2024-44936Linux kernel rt5033 power supply driver vulnerability5.5v3.10.2%2024-08-26Fix
CVE-2024-44935Linux kernel SCTP socket reuseport null pointer dereference5.5NVD v3.10.2%2024-08-26Fix
CVE-2024-44934Linux kernel bridge multicast snooping use-after-free7.8CNA v3.10.2%2024-08-26Fix
CVE-2024-44933Linux kernel out-of-bounds write7.3CNA v3.10.2%2024-08-26Fix
CVE-2024-44932Linux kernel idpf use-after-free7.8v3.10.2%2024-08-26Fix
CVE-2024-44931Linux kernel GPIO descriptor lookup information disclosure5.5v3.10.2%2024-08-26Fix
CVE-2024-44797Gazelle component /managers/enable_requests.php cross-site scripting6.1v3.10.3%2024-08-26
CVE-2024-44796Xiebruce Picuploader component /auth/AzureRedirect.php cross-site scripting6.1NVD v3.10.4%2024-08-26
CVE-2024-44795Gazelle component /login/disabled.php cross-site scripting6.1v3.10.3%2024-08-26
CVE-2024-44794Xiebruce Picuploader component /master/auth/OnedriveRedirect.php cross-site scripting6.1v3.10.3%2024-08-26
CVE-2024-44793Gazelle component /managers/multiple_freeleech.php cross-site scripting6.1v3.10.3%2024-08-26
CVE-2024-44565Tenda AX1806 stack-based buffer overflow9.8v3.10.6%2024-08-26
CVE-2024-44563Tenda AX1806 stack-based buffer overflow9.8v3.10.6%2024-08-26
CVE-2024-44558Tenda AX1806 stack-based buffer overflow9.8v3.10.6%2024-08-26
CVE-2024-44557Tenda AX1806 stack-based buffer overflow9.8v3.10.6%2024-08-26
CVE-2024-44556Tenda AX1806 stack-based buffer overflow9.8v3.10.4%2024-08-26
CVE-2024-44555Tenda AX1806 buffer overflow9.8v3.10.7%2024-08-26
CVE-2024-44553Tenda AX1806 stack-based buffer overflow9.8v3.10.6%2024-08-26
CVE-2024-44552Tenda AX1806 out-of-bounds write9.8v3.10.4%2024-08-26
CVE-2024-44551Tenda AX1806 stack-based buffer overflow9.8v3.10.6%2024-08-26
CVE-2024-44550Tenda AX1806 stack-based buffer overflow9.8v3.10.6%2024-08-26
CVE-2024-44549Tenda AX1806 stack-based buffer overflow9.8v3.10.4%2024-08-26
CVE-2024-43967WP Testimonial Widget WordPress plugin cross-site scripting (XSS)4.8v3.10.3%2024-08-26
CVE-2024-43966WP Testimonial Widget WordPress plugin SQL injection7.2v3.10.4%2024-08-26
CVE-2024-43916Zephyr Project Manager WordPress plugin insecure direct object references (IDOR)7.1v3.10.3%2024-08-26Fix
CVE-2024-43915Zephyr Project Manager WordPress plugin cross-site scripting (XSS)5.4v3.10.3%2024-08-26Fix
CVE-2024-43914Linux kernel RAID5 reshape denial of service5.5v3.10.2%2024-08-26Fix
CVE-2024-43913Linux kernel Apple NVMe driver memory leak7.0CNA v3.10.2%2024-08-26Fix
CVE-2024-43912Linux kernel nl80211 AP channel width handling vulnerability5.5v3.10.2%2024-08-26Fix
CVE-2024-43911Linux kernel mac80211 TX block ack session null pointer dereference5.5v3.10.2%2024-08-26Fix
CVE-2024-43910Linux kernel BPF dynptr argument verifier out-of-bounds write7.8CNA v3.10.2%2024-08-26Fix
CVE-2024-43909Linux kernel amdgpu smu7 power management null pointer dereference5.5v3.10.2%2024-08-26Fix
CVE-2024-43908Linux kernel amdgpu RAS manager null pointer dereference5.5v3.10.2%2024-08-26Fix
CVE-2024-43907Linux kernel amdgpu power management state adjustment null pointer dereference5.5v3.10.2%2024-08-26Fix
CVE-2024-43906Linux kernel drm/admgpu null pointer dereference5.5v3.10.2%2024-08-26Fix
CVE-2024-43905Linux kernel AMD power management vega10 hwmgr null pointer dereference5.5v3.10.2%2024-08-26Fix
CVE-2024-43904Linux kernel AMD display idle power optimization null pointer dereference5.5v3.10.2%2024-08-26Fix
CVE-2024-43902Linux kernel AMD display driver null pointer dereference5.5v3.10.2%2024-08-26Fix
CVE-2024-43901Linux kernel AMD display DTN log null pointer dereference5.5v3.10.2%2024-08-26Fix
CVE-2024-43900Linux kernel xc2028 use-after-free7.8v3.10.2%2024-08-26Fix
CVE-2024-43899Linux kernel AMD display DCN20 resource management null pointer dereference5.5v3.10.2%2024-08-26Fix
CVE-2024-43897Linux kernel virtio_net_hdr GSO checksum handling vulnerability7.8CNA v3.10.2%2024-08-26Fix
CVE-2024-43896Linux kernel cs-amp-lib null pointer dereference5.5v3.10.2%2024-08-26Fix
CVE-2024-43894Linux kernel DRM client modeset probe null pointer dereference5.5v3.10.2%2024-08-26Fix
CVE-2024-43893Linux kernel serial core UART clock setting divide by zero5.5NVD v3.10.3%2024-08-26Fix
CVE-2024-43892Linux kernel memory cgroup ID allocator vulnerability7.8CNA v3.10.2%2024-08-26Fix
CVE-2024-43891Linux kernel eventfs format file use-after-free7.8CNA v3.10.2%2024-08-26Fix
CVE-2024-43890Linux kernel tracing map element allocator integer overflow5.5NVD v3.10.3%2024-08-26Fix
CVE-2024-43889Linux kernel padata multithreaded helper divide by zero5.5NVD v3.10.2%2024-08-26Fix
CVE-2024-43888Linux kernel memory cgroup slab lookup use-after-free7.8CNA v3.10.2%2024-08-26Fix
CVE-2024-43887Linux kernel TCP-AO static key handling vulnerability4.7v3.10.2%2024-08-26Fix
CVE-2024-43886Linux kernel AMD display resource manager null pointer dereference5.5v3.10.2%2024-08-26Fix
CVE-2024-43884Linux kernel Bluetooth MGMT pairing null pointer dereference5.5v3.10.3%2024-08-26Fix
CVE-2024-43806`rustix::fs::Dir` iterator with the `linux_raw` backend can cause memory explosion6.5CNA v3.10.5%2024-08-26Fix
CVE-2024-43802Vim typeahead buffer heap-based buffer overflow4.5CNA v3.10.3%2024-08-26Fix
CVE-2024-43798Chisel AUTH environment variable not respected in server entrypoint8.6CNA v3.10.5%2024-08-26Fix
CVE-2024-43444OTRS Passwords are written to Admin Log module8.2CNA v3.10.4%2024-08-26
CVE-2024-43443OTRS stored XSS in process management4.9CNA v3.10.4%2024-08-26
CVE-2024-43442OTRS stored XSS in System Configuration4.9CNA v3.10.4%2024-08-26
CVE-2024-43356oik WordPress plugin arbitrary file deletion4.3v3.10.2%2024-08-26Fix
CVE-2024-43340AFI The Easiest Integration WordPress plugin cross-site request forgery (CSRF)4.3v3.10.2%2024-08-26Fix
CVE-2024-43339WordPress Webinar Plugin WebinarPress cross-site request forgery (CSRF)6.1v3.10.2%2024-08-26Fix
CVE-2024-43337Brave WordPress plugin cross-site request forgery (CSRF)4.3v3.10.2%2024-08-26Fix
CVE-2024-43336WP User Manager User Profile Builder and Membership WordPress plugin cross-site request forgery4.3v3.10.2%2024-08-26Fix
CVE-2024-43325Dark Mode for WP Dashboard WordPress plugin cross-site request forgery8.8v3.10.2%2024-08-26Fix
CVE-2024-43319HTML5 Video Player WordPress plugin sensitive data exposure4.3CNA v3.10.4%2024-08-26Fix
CVE-2024-43316Stripe Payments For WooCommerce WordPress plugin cross-site request forgery (CSRF)4.3v3.10.2%2024-08-26Fix
CVE-2024-43301Fonts WordPress plugin cross-site request forgery (CSRF) to stored XSSvulnerability5.4NVD v3.10.2%2024-08-26Fix
CVE-2024-43299SpeedyCache WordPress plugin cross-site request forgery (CSRF)5.4v3.10.2%2024-08-26Fix
CVE-2024-43295WP Data Access WordPress plugin cross-site request forgery (CSRF)4.3v3.10.2%2024-08-26Fix
CVE-2024-43289wpForo Forum WordPress plugin unauthenticated sensitive data exposure7.5v3.10.4%2024-08-26Fix
CVE-2024-43287Brevo WordPress plugin cross-site request forgery (CSRF)8.8v3.10.2%2024-08-26Fix
CVE-2024-43283Wasiliy Strecker / ContestGallery developer Contest Gallery information disclosure7.5v3.11.1%2024-08-26NucleiFix
CVE-2024-43269Backup and Restore WordPress plugin cross-site request forgery (CSRF)4.3v3.10.2%2024-08-26Fix
CVE-2024-43265Analytify WordPress plugin CSRF Leading to Optout3.5NVD v3.10.2%2024-08-26Fix
CVE-2024-43264Create by Mediavine WordPress plugin sensitive data exposure7.5v3.10.4%2024-08-26Fix
CVE-2024-43259Order Export for WooCommerce WordPress plugin sensitive data exposure7.5v3.10.4%2024-08-26Fix
CVE-2024-43258Store Locator Plus® for WordPress plugin sensitive data exposure7.5v3.10.4%2024-08-26
CVE-2024-43257Leopard WordPress plugin Subscriber+ sensitive data exposure6.5v3.10.4%2024-08-26Fix
CVE-2024-43255MyBookTable Bookstore by Stormhill Media WordPress plugin CSRF to XSS6.1NVD v3.10.2%2024-08-26Fix
CVE-2024-43251Bit Form Pro WordPress plugin authenticated sensitive data exposure6.5v3.10.4%2024-08-26Fix
CVE-2024-43230Anssi Laitila Shared Files information disclosure7.5v3.10.4%2024-08-26Fix
CVE-2024-43214myCred WordPress plugin sensitive data exposure5.3v3.10.3%2024-08-26Fix
CVE-2024-43117Hummingbird WordPress plugin cross-site request forgery (CSRF)8.8v3.10.2%2024-08-26Fix
CVE-2024-43116Simple Local Avatars WordPress plugin cross-site request forgery (CSRF)8.8v3.10.2%2024-08-26Fix
CVE-2024-42913RuoYi SQL injection9.8v3.10.4%2024-08-26
CVE-2024-42906TestLink cross-site scripting6.1v3.10.3%2024-08-26
CVE-2024-42818FastAPI admin cross-site scripting vulnerability in the Config-Create function6.1CISA ADP v3.10.3%2024-08-26
CVE-2024-42816FastAPI admin cross-site scripting (XSS) vulnerability in the Create Product function6.1CISA ADP v3.10.3%2024-08-26
CVE-2024-42792Lopalopa Music Management System cross-site request forgery3.5v3.10.2%2024-08-26
CVE-2024-42791Lopalopa Music Management System cross-site scripting8.8CISA ADP v3.10.6%2024-08-26
CVE-2024-42790Lopalopa Music Management System cross-site scripting5.4v3.10.5%2024-08-26
CVE-2024-42789Lopalopa Music Management System cross-site scripting6.3CISA ADP v3.10.6%2024-08-26
CVE-2024-42788Lopalopa Music Management System cross-site scripting6.1CISA ADP v3.10.5%2024-08-26
CVE-2024-42787Lopalopa Music Management System cross-site scripting6.1CISA ADP v3.10.5%2024-08-26
CVE-2024-41996Validating the order of the public keys in the Diffie-Hellman Key Agreement Protocol, when an approved safe prime is used, allows remote attackers (from the client side) to trigger unnecessarily expensive server-side DHE modular-exponentiation calculations. The client may cause asymmetric resource c7.5CISA ADP v3.11.1%2024-08-26Fix
CVE-2024-41879RE: New Edge T5 MSRC Case [DCMSFT-1294]7.8CNA v3.10.5%2024-08-26Fix
CVE-2024-41444Seacms SQL injection9.8v3.10.5%2024-08-26
CVE-2024-41285Fastcom FW300R stack-based buffer overflow9.8v3.11.1%2024-08-26
CVE-2024-39657Sender WordPress plugin cross-site request forgery (CSRF)8.8v3.10.2%2024-08-26Fix
CVE-2024-39645Tutor LMS WordPress plugin cross-site request forgery (CSRF)8.8v3.10.2%2024-08-26Fix
CVE-2024-39641LearnPress WordPress plugin cross-site request forgery (CSRF)8.8v3.10.2%2024-08-26Fix
CVE-2024-39628Ninja Forms WordPress plugin cross-site request forgery (CSRF)8.8v3.10.2%2024-08-26Fix
CVE-2024-39097Sir Gnuboard There is an open redirect6.1CISA ADP v3.10.4%2024-08-26
CVE-2024-38859Checkmk XSS in view page with SLA column4.8CNA v4.00.4%2024-08-26Fix
CVE-2024-34087BPQ32 HTTP Server in BPQ32 SEH-based buffer overflow9.8CISA ADP v3.11.2%2024-08-26
CVE-2024-28077GL.iNet AR300M16 denial of service7.5v3.10.4%2024-08-26
CVE-2024-8174code-projects Blood Bank System Login page login.php cross-site scripting6.1v3.10.6%2024-08-26
CVE-2024-8173code-projects Blood Bank System Login page login.php SQL injection7.5v3.10.7%2024-08-26
CVE-2024-8172SourceCodester QR Code Attendance System delete-student.php cross-site scripting6.1v3.10.4%2024-08-26
CVE-2024-8171itsourcecode Tailoring Management System staffcatedit.php SQL injection9.8v3.10.5%2024-08-26
CVE-2024-8170SourceCodester Zipped Folder Manager App add-folder.php unrestricted upload9.8v3.10.8%2024-08-26
CVE-2024-8169code-projects Online Quiz Site signupuser.php SQL injection9.8v3.10.6%2024-08-26
CVE-2024-8168code-projects Online Bus Reservation Site login.php SQL injection9.8v3.10.6%2024-08-26
CVE-2024-8167code-projects Job Portal forget.php SQL injection9.8v3.10.6%2024-08-26
CVE-2024-8166Ruijie EG2000K index.php unrestricted upload4.9v3.10.7%2024-08-26
CVE-2024-8165Chengdu Everbrite Network Technology BeikeShop export exportZip path traversal6.5v3.10.6%2024-08-26
CVE-2024-8164Chengdu Everbrite Network Technology BeikeShop FileManagerController.php rename unrestricted upload8.8v3.10.5%2024-08-26
CVE-2024-8163Chengdu Everbrite Network Technology BeikeShop files destroyFiles path traversal8.1v3.10.8%2024-08-26
CVE-2024-8162TOTOLINK T10 AC1200 Telnet service product.ini hard-coded credentials9.8v3.11.7%2024-08-26
CVE-2024-8161SQL injection vulnerability in CIGESv2 system9.8CNA v3.10.5%2024-08-26Fix
CVE-2024-8105Acer vz2694g insecure Platform Key (PK) used in UEFI system firmware signature6.4CISA ADP v3.10.3%2024-08-26Fix
CVE-2024-8073Command injection vulnerability in Hillstone Networks Web Application Firewall9.8CNA v3.11.1%2024-08-26Fix
CVE-2024-7988ThinManager® ThinServer™ information disclosure and remote code execution9.3CNA v4.04.8%2024-08-26Fix
CVE-2024-7987Rockwell Automation ThinManager® ThinServer™ information disclosure and remote code execution8.5CNA v4.00.3%2024-08-26Fix
CVE-2024-7401Netskope Client Client Enrollment Process Bypass8.5CNA v4.00.8%2024-08-26Fix
CVE-2024-7313Shield Security WordPress plugin reflected XSS6.1CISA ADP v3.11.6%2024-08-26NucleiExploit codeFix
CVE-2024-6879Quiz and Survey Master (QSM) WordPress plugin Contributor+ stored XSS4.7CISA ADP v3.10.4%2024-08-26Fix
CVE-2024-45258Req may send an unintended request when a malformed URL is provided9.8CISA ADP v3.10.7%2024-08-25Fix
CVE-2024-45244Hyperledger Fabric does not verify request has a timestamp within the expected time window5.3NVD v3.10.6%2024-08-25Exploit codeFix
CVE-2024-42340CyberArk client-side enforcement of server-side security4.3NVD v3.10.3%2024-08-25
CVE-2024-42339CyberArk exposure of sensitive information to an unauthorized actor4.3v3.10.3%2024-08-25
CVE-2024-42338CyberArk exposure of sensitive information to an unauthorized actor4.3v3.10.3%2024-08-25
CVE-2024-42337CyberArk exposure of sensitive information to an unauthorized actor6.5v3.10.3%2024-08-25
CVE-2024-8158User impersonation for LIB9P based 9p fileservers8.8CNA v4.00.4%2024-08-25
CVE-2024-8155ContiNew Admin tree SQL injection4.9v3.10.4%2024-08-25
CVE-2024-8154SourceCodester QR Code Bookmark System parameter update-bookmark.php cross-site scripting5.4v3.10.4%2024-08-25
CVE-2024-8153SourceCodester QR Code Bookmark System delete-bookmark.php cross-site scripting5.4v3.10.4%2024-08-25
CVE-2024-8152SourceCodester QR Code Bookmark System parameter add-bookmark.php cross-site scripting5.4v3.10.4%2024-08-25
CVE-2024-8151SourceCodester Interactive Map with Marker delete-mark.php cross-site scripting5.4v3.10.5%2024-08-25
CVE-2024-8150ContiNew Admin user SQL injection4.9v3.10.5%2024-08-25
CVE-2024-8147code-projects Pharmacy Management System index.php SQL injection8.8v3.10.6%2024-08-25
CVE-2024-8146code-projects Pharmacy Management System index.php SQL injection9.8v3.10.6%2024-08-25
CVE-2024-8145ClassCMS Article admin cross-site scripting4.8v3.10.4%2024-08-25
CVE-2024-8144ClassCMS Logo admin cross-site scripting6.1v3.10.4%2024-08-25
CVE-2024-8142SourceCodester Daily Calories Monitoring Tool delete-calorie.php cross-site scripting5.4v3.10.4%2024-08-25
CVE-2024-8141SourceCodester Daily Calories Monitoring Tool add-calorie.php cross-site scripting5.4v3.10.4%2024-08-25
CVE-2024-8140SourceCodester Task Progress Tracker update-task.php cross-site scripting5.4v3.10.4%2024-08-25
CVE-2024-8139itsourcecode E-Commerce Website search_list.php SQL injection9.8v3.10.6%2024-08-25
CVE-2024-8138code-projects Pharmacy Management System parameter index.php editManager SQL injection9.8v3.10.6%2024-08-25
CVE-2024-8011Logitech Options incorrect authorization2.0CNA v4.00.1%2024-08-25
CVE-2024-45240TikTok app WebView JavaScript interface vulnerability7.4CISA ADP v3.10.2%2024-08-24
CVE-2024-45239NICMx FORT-validator null pointer dereference7.5v3.10.5%2024-08-24Fix
CVE-2024-45238NICMx FORT-validator null pointer dereference7.5CISA ADP v3.10.3%2024-08-24Fix
CVE-2024-45237NICMx FORT-validator buffer overflow9.8v3.10.4%2024-08-24Fix
CVE-2024-45236NICMx FORT-validator crash7.5v3.10.5%2024-08-24Fix
CVE-2024-45235NICMx FORT-validator null pointer dereference7.5CISA ADP v3.10.3%2024-08-24Fix
CVE-2024-45234NICMx FORT-validator improper certificate validation7.5v3.10.5%2024-08-24Fix
CVE-2024-8137SourceCodester Record Management System search_user.php cross-site scripting6.1v3.10.4%2024-08-24
CVE-2024-8136SourceCodester Record Management System sort1_user.php cross-site scripting6.1v3.10.4%2024-08-24
CVE-2024-8135Go-Tribe gotribe token.go Sign hard-coded credentials9.8v3.10.5%2024-08-24
CVE-2024-8134D-Link DNS-1550-04 HTTP POST request hd_config.cgi cgi_FMT_Std2R5_1st_DiskMGR command injection9.8v3.17.9%2024-08-24Emerging Threats
CVE-2024-8133D-Link DNS-1550-04 HTTP POST request hd_config.cgi cgi_FMT_R5_SpareDsk_DiskMGR command injection9.8v3.17.9%2024-08-24Emerging Threats
CVE-2024-8132D-Link DNS-1550-04 HTTP POST request webdav_mgr.cgi webdav_mgr command injection9.8v3.123.4%2024-08-24Emerging Threats
CVE-2024-8131D-Link DNS-1550-04 HTTP POST request apkg_mgr.cgi module_enable_disable command injection9.8v3.18.2%2024-08-24Emerging Threats
CVE-2024-8130D-Link DNS-1550-04 HTTP POST request s3.cgi cgi_s3 command injection9.8v3.17.9%2024-08-24Emerging Threats
CVE-2024-8129D-Link DNS-1550-04 HTTP POST request s3.cgi cgi_s3_modify command injection9.8v3.122.9%2024-08-24Emerging Threats
CVE-2024-8128D-Link DNS-1550-04 HTTP POST request webfile_mgr.cgi cgi_add_zip command injection9.8v3.18.0%2024-08-24Emerging Threats
CVE-2024-8127D-Link DNS-1550-04 HTTP POST request webfile_mgr.cgi cgi_unzip command injection9.8v3.16.7%2024-08-24Emerging Threats
CVE-2024-8120ImageRecycle pdf and image compression WordPress plugin Cross-Site request in Several AJAX actions4.3v3.10.2%2024-08-24Fix
CVE-2024-7656Image Hotspot by DevVN WordPress plugin authenticated (Author+) PHP object injection8.8CNA v3.10.8%2024-08-24Fix
CVE-2024-7568Favicon Generator WordPress plugin cross-site request forgery to arbitrary file deletion8.1NVD v3.10.3%2024-08-24Fix
CVE-2024-7351Simple Job Board WordPress plugin authenticated (Editor+) PHP object injection7.2CNA v3.10.6%2024-08-24Fix
CVE-2024-6631ImageRecycle pdf and image compression WordPress plugin unauthorized access4.3v3.10.3%2024-08-24Fix
CVE-2024-6499WordPress Button Plugin MaxButtons full path disclosure5.3CNA v3.10.4%2024-08-24Fix
CVE-2024-2254RT Easy Builder Advanced addons for Elementor WordPress plugin stored cross-site scripting5.4v3.10.3%2024-08-24
CVE-2024-45190Mage AI pipeline interaction request remote arbitrary file leak6.5CNA v3.10.9%2024-08-23
CVE-2024-45189Mage AI git content request remote arbitrary file leak6.5NVD v3.10.9%2024-08-23
CVE-2024-45188Mage AI file content request remote arbitrary file leak6.5CNA v3.10.9%2024-08-23
CVE-2024-45187Mage AI incorrectly gives privileges to users with deleted accounts8.8NVD v3.10.5%2024-08-23
CVE-2024-44390Tenda FH1206 stack-based buffer overflow8.8v3.10.3%2024-08-23
CVE-2024-44387Tenda FH1206 stack-based buffer overflow6.5v3.10.3%2024-08-23
CVE-2024-44386Tenda FH1206 stack-based buffer overflow7.3CISA ADP v3.10.3%2024-08-23
CVE-2024-44382D-Link Di 8004w command injection9.8v3.11.5%2024-08-23
CVE-2024-44381D-Link Di 8004w command injection9.8v3.11.4%2024-08-23
CVE-2024-43883Linux kernel vhci-hcd use-after-free9.8CNA v3.10.7%2024-08-23Fix
CVE-2024-43794OpenSearch Dashboards Security plugin nextUrl redirect validation open redirect6.1CNA v3.10.3%2024-08-23Fix
CVE-2024-43791steveklabnik request_store RequestStore has incorrect default permissions7.8CNA v3.10.2%2024-08-23Fix
CVE-2024-43782Openedx-translations's Atlas translations for Open edX missing validation7.7CNA v3.10.5%2024-08-23Fix
CVE-2024-43477Microsoft Entra ID elevation of privilege7.5CNA v3.11.0%2024-08-23Fix
CVE-2024-43105Excessive resource consumption via `/export`4.3CNA v3.10.4%2024-08-23Fix
CVE-2024-43032Autman stack-based buffer overflow4.3CISA ADP v3.10.2%2024-08-23Fix
CVE-2024-43031Autman stack-based buffer overflow4.3CISA ADP v3.10.2%2024-08-23
CVE-2024-42918Adonesevangelista Online Accreditation Management System cross-site scripting5.4v3.10.4%2024-08-23
CVE-2024-42915Staff Appraisal System v1.0 host header injection8.0CISA ADP v3.10.4%2024-08-23
CVE-2024-42914Arrowjs Arrowcms forgot password functionality host header injection9.1CISA ADP v3.10.6%2024-08-23
CVE-2024-42852AcuToWeb server v.10.5.0.7577C8b cross-site scripting6.1CISA ADP v3.10.8%2024-08-23Nuclei
CVE-2024-42845component invesalius/reader/dicom.py of InVesalius An eval injection8.0CISA ADP v3.12.7%2024-08-23Exploit codeFix
CVE-2024-42766Kjayvik Bus Ticket Reservation System improper access control5.4v3.10.3%2024-08-23
CVE-2024-42765Kjayvik Bus Ticket Reservation System "/login.php" of the Kashipara SQL injection9.8CISA ADP v3.10.7%2024-08-23
CVE-2024-42764Kjayvik Bus Ticket Reservation System cross-site request forgery9.4CISA ADP v3.10.3%2024-08-23
CVE-2024-42756NETGEAR DGN1000WW code injection8.8CISA ADP v3.113.5%2024-08-23
CVE-2024-42636DedeCMS command injection7.2CISA ADP v3.10.9%2024-08-23
CVE-2024-42531Ezviz Internet PT Camera CS-CV246 RTSP protocol handling improper input validation9.8CISA ADP v3.10.6%2024-08-23
CVE-2024-42523PublicCMS unrestricted file upload7.2CISA ADP v3.10.5%2024-08-23
CVE-2024-42364homepage DNS rebinding vulnerability (GHSL-2024-096)6.5NVD v3.10.3%2024-08-23
CVE-2024-42040denx U-Boot net/bootp.c in DENEX buffer overflow8.1CISA ADP v3.10.6%2024-08-23Fix
CVE-2024-41878Adobe Experience Manager cross-site scripting (DOM-based XSS)5.4CNA v3.10.3%2024-08-23Fix
CVE-2024-41877Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.3%2024-08-23Fix
CVE-2024-41876Adobe Experience Manager cross-site scripting (reflected XSS)5.4CNA v3.10.3%2024-08-23Fix
CVE-2024-41875Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.3%2024-08-23Fix
CVE-2024-41849Adobe Experience Manager improper input validation4.1CNA v3.10.4%2024-08-23Fix
CVE-2024-41848Adobe Experience Manager cross-site scripting (reflected XSS)5.4CNA v3.10.3%2024-08-23Fix
CVE-2024-41847Adobe Experience Manager cross-site scripting (reflected XSS)5.4CNA v3.10.3%2024-08-23Fix
CVE-2024-41846Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.3%2024-08-23Fix
CVE-2024-41845Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.3%2024-08-23Fix
CVE-2024-41844Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.3%2024-08-23Fix
CVE-2024-41843Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.3%2024-08-23Fix
CVE-2024-41842Adobe Experience Manager cross-site scripting (stored XSS)4.8CNA v3.10.3%2024-08-23Fix
CVE-2024-41841Adobe Experience Manager cross-site scripting (reflected XSS)5.4CNA v3.10.3%2024-08-23Fix
CVE-2024-41150ManageEngine ServiceDesk Plus stored XSS6.3CNA v3.11.3%2024-08-23Fix
CVE-2024-40766SonicWall SonicOS improper access control9.8v3.118.4%2024-08-23KEVFix
CVE-2024-40111automad cross-site scripting4.8CISA ADP v3.10.8%2024-08-23Exploit code
CVE-2024-39841Centreon web service configuration functionality SQL injection8.8CISA ADP v3.11.1%2024-08-23Fix
CVE-2024-38869ManageEngine Endpoint Central incorrect authorization8.3CNA v3.11.1%2024-08-23Fix
CVE-2024-38807Signature Forgery vulnerability in Spring Boot's Loader6.3CNA v3.10.1%2024-08-23Fix
CVE-2024-38207Microsoft Edge (HTML-based) memory corruption6.3CNA v3.10.4%2024-08-23Fix
CVE-2024-37392SMSEagle cross-site scripting6.1v3.10.3%2024-08-23
CVE-2024-37311Collabora Online's remote host TLS certificates are not fully verified8.2CNA v3.10.2%2024-08-23Fix
CVE-2024-36517ManageEngine ADAudit Plus SQL injection8.3CNA v3.15.3%2024-08-23Fix
CVE-2024-36516ManageEngine ADAudit Plus SQL injection8.3CNA v3.14.4%2024-08-23Fix
CVE-2024-36515ManageEngine ADAudit Plus SQL injection8.3CNA v3.14.5%2024-08-23Fix
CVE-2024-36514ManageEngine ADAudit Plus SQL injection8.3CNA v3.14.0%2024-08-23Fix
CVE-2024-33854Centreon web Graph template component SQL injection9.1CISA ADP v3.10.5%2024-08-23Fix
CVE-2024-33853Centreon web Timeperiod component SQL injection9.1CISA ADP v3.10.5%2024-08-23Fix
CVE-2024-33852Centreon web Downtime component SQL injection9.1CISA ADP v3.10.5%2024-08-23Fix
CVE-2024-32501Centreon web updateServiceHost functionality SQL injection9.8CISA ADP v3.119.2%2024-08-23Fix
CVE-2024-8113pretix stored cross-site scripting7.2CNA v4.00.3%2024-08-23Fix
CVE-2024-8112thinkgem JeeSite Cookie login cross-site scripting6.1v3.10.5%2024-08-23
CVE-2024-8089SourceCodester E-Commerce System controller.php unrestricted upload9.8v3.10.7%2024-08-23
CVE-2024-7986Rockwell Automation ThinManager® ThinServer™ information disclosure6.8CNA v4.00.6%2024-08-23Fix
CVE-2024-7954SPIP porte_plume plugin arbitrary PHP Execution9.8CNA v3.190.1%2024-08-23Reported exploitedNucleiMetasploitExploit codeFix
CVE-2024-7559File Manager Pro WordPress plugin authenticated (Subscriber+) arbitrary file upload8.8CNA v3.10.9%2024-08-23Fix
CVE-2024-7428Potential open redirect issues affect OpenText™ Network Node Manager i (NNMi)4.8CNA v4.00.4%2024-08-23
CVE-2024-7427Potential cross-site scripting vulnerability affect OpenText™ Network Node Manager i (NNMi)4.8CNA v4.00.4%2024-08-23
CVE-2024-7258WP Marketing Robot WooCommerce Google Feed Manager feed file deletion function missing authorization8.8v3.10.8%2024-08-23Fix
CVE-2024-6715Ditty Author+ stored XSS6.1CISA ADP v3.10.3%2024-08-23Fix
CVE-2024-5586ManageEngine ADAudit Plus SQL injection8.3CNA v3.15.2%2024-08-23Fix
CVE-2024-5556ManageEngine ADAudit Plus SQL injection8.3CNA v3.14.5%2024-08-23Fix
CVE-2024-5502Piotnet Addons For Elementor WordPress plugin stored cross-site scripting5.4v3.10.3%2024-08-23Fix
CVE-2024-5490ManageEngine ADAudit Plus SQL injection8.3CNA v3.14.0%2024-08-23Fix
CVE-2024-5467ManageEngine ADAudit Plus SQL injection8.3CNA v3.14.5%2024-08-23Fix
CVE-2024-5466Remote code execution8.8CNA v3.17.0%2024-08-23Fix
CVE-2024-3282WP Table Builder WordPress plugin Admin+ stored XSS4.8CISA ADP v3.10.3%2024-08-23Fix
CVE-2024-45201llama_index code injection8.8CISA ADP v3.10.5%2024-08-22Fix
CVE-2024-45193Matrix Olm weak cryptographic algorithm4.3CISA ADP v3.10.3%2024-08-22
CVE-2024-45192Matrix Olm timing side channel5.3CISA ADP v3.10.5%2024-08-22
CVE-2024-45191Matrix Olm timing side channel5.3CISA ADP v3.10.5%2024-08-22
CVE-2024-45169Uci IDOL2 improper input validation9.8CISA ADP v3.11.4%2024-08-22Fix
CVE-2024-45168Uci IDOL2 missing authorization9.1CISA ADP v3.10.7%2024-08-22Fix
CVE-2024-45167Uci IDOL2 improper input validation9.8CISA ADP v3.11.2%2024-08-22Fix
CVE-2024-45166Uci IDOL2 improper input validation9.8CISA ADP v3.11.0%2024-08-22Fix
CVE-2024-45165Uci IDOL2 hard-coded credentials5.3CISA ADP v3.10.2%2024-08-22Fix
CVE-2024-45163The Mirai botnet through 2024-08-19 mishandles simultaneous TCP connections to the CNC (command and control) server. Unauthenticated sessions remain open, causing resource consumption. For example, an attacker can send a recognized username (such as root), or can send arbitrary data.9.1CISA ADP v3.10.8%2024-08-22
CVE-2024-43813Mattermost IDOR when marking read a user's channel4.3CNA v3.10.2%2024-08-22Fix
CVE-2024-43790Vim search pattern display heap-based buffer overflow4.5CNA v3.10.3%2024-08-22Fix
CVE-2024-43787Hono CSRF middleware can be bypassed using crafted Content-Type header5.0CNA v3.10.2%2024-08-22Fix
CVE-2024-43785Byron gitoxide gitoxide-core does not neutralize special characters for terminals2.5CNA v3.10.2%2024-08-22
CVE-2024-43780Mattermost unauthorized channel file upload4.3CNA v3.10.3%2024-08-22Fix
CVE-2024-43398REXML denial of service5.9CNA v3.11.2%2024-08-22Fix
CVE-2024-43331WP SMS WordPress plugin broken access control9.8v3.10.4%2024-08-22Fix
CVE-2024-43033jpress arbitrary file upload8.8CISA ADP v3.11.0%2024-08-22
CVE-2024-42776Jayesh Hotel Management System improper access control7.2CISA ADP v3.10.5%2024-08-22
CVE-2024-42775Jayesh Hotel Management System /admin/add_room_controller.php in Kashipara improper access control9.1CISA ADP v3.10.5%2024-08-22
CVE-2024-42774Jayesh Hotel Management System /admin/delete_room.php in Kashipara improper access control7.5CISA ADP v3.10.4%2024-08-22
CVE-2024-42773Jayesh Hotel Management System /admin/edit_room_controller.php in Kashipara improper access control9.1CISA ADP v3.10.5%2024-08-22
CVE-2024-42772Jayesh Hotel Management System /admin/rooms.php in Kashipara improper access control7.5CISA ADP v3.10.5%2024-08-22
CVE-2024-42771Jayesh Hotel Management System cross-site scripting4.8CISA ADP v3.10.5%2024-08-22
CVE-2024-42770Jayesh Hotel Management System cross-site scripting4.7CISA ADP v3.10.5%2024-08-22
CVE-2024-42769Jayesh Hotel Management System cross-site scripting6.1CISA ADP v3.10.5%2024-08-22
CVE-2024-42768Jayesh Hotel Management System cross-site request forgery6.8CISA ADP v3.10.2%2024-08-22
CVE-2024-42767Jayesh Hotel Management System unrestricted file upload7.2CISA ADP v3.10.6%2024-08-22
CVE-2024-42763Kjayvik Bus Ticket Reservation System cross-site scripting5.4CISA ADP v3.10.4%2024-08-22
CVE-2024-42762Kjayvik Bus Ticket Reservation System cross-site scripting5.4CISA ADP v3.10.4%2024-08-22
CVE-2024-42761Kjayvik Bus Ticket Reservation System cross-site scripting6.1CISA ADP v3.10.5%2024-08-22
CVE-2024-42599Seacms code injection8.8CISA ADP v3.11.4%2024-08-22
CVE-2024-42497Mattermost insufficient permissions checks on teams6.0CNA v3.10.3%2024-08-22Fix
CVE-2024-42490authentik has insufficient authorization for several API endpoints7.5CNA v3.10.5%2024-08-22Fix
CVE-2024-42418Avtec Outpost use of hard-coded cryptographic key7.5v3.10.4%2024-08-22Fix
CVE-2024-42411Mattermost user creation date manipulation in POST /API/v4/users5.3CNA v3.10.3%2024-08-22Fix
CVE-2024-42056Retool cross-site request forgery6.5v3.10.2%2024-08-22Fix
CVE-2024-40886Mattermost one-click Client-Side path traversal leading to CSRF in User Management admin page4.6CNA v3.10.2%2024-08-22Fix
CVE-2024-40884Mattermost unauthorized disabling of invite URL2.7CNA v3.10.4%2024-08-22Fix
CVE-2024-39836Mattermost munged email address used for password resets and notifications4.8CNA v3.10.3%2024-08-22Fix
CVE-2024-39810Mattermost server crash via Elasticsearch certificate file4.9CNA v3.10.5%2024-08-22Fix
CVE-2024-39776Avtec Outpost Storage of file with Sensitive Data under Web Root7.5v3.10.4%2024-08-22Fix
CVE-2024-39746IBM Sterling Connect:Direct Web Services information disclosure5.9CNA v3.10.3%2024-08-22Fix
CVE-2024-39745IBM Sterling Connect:Direct Web Services information disclosure5.9CNA v3.10.3%2024-08-22Fix
CVE-2024-39744IBM Sterling Connect:Direct Web Services cross-site request forgery4.3CNA v3.10.2%2024-08-22Fix
CVE-2024-39717Versa Director unrestricted file upload7.2v3.14.0%2024-08-22KEVFix
CVE-2024-39576Dell Power Manager (DPM) incorrect privilege assignment8.8CNA v3.10.2%2024-08-22Fix
CVE-2024-38210Microsoft Edge (Chromium-based) remote code execution7.8CNA v3.10.7%2024-08-22Fix
CVE-2024-38209Microsoft Edge (Chromium-based) remote code execution7.8CNA v3.10.7%2024-08-22Fix
CVE-2024-38208Microsoft Edge for Android spoofing6.1CNA v3.10.4%2024-08-22Fix
CVE-2024-36445Swissphone DiCal-RED 4009 TELNET service missing authentication9.8CISA ADP v3.11.0%2024-08-22
CVE-2024-36444Swissphone DiCal-RED 4009 fdmcgiwebv2.cgi improper authentication8.1CISA ADP v3.10.5%2024-08-22
CVE-2024-36443Swissphone DiCal-RED 4009 FTP service improper access control7.6CISA ADP v3.10.6%2024-08-22
CVE-2024-36442Swissphone DiCal-RED 4009 fdmcgiwebv2.cgi vulnerability8.8CISA ADP v3.10.7%2024-08-22
CVE-2024-36441Swissphone DiCal-RED 4009 improper access control5.4CISA ADP v3.10.3%2024-08-22
CVE-2024-36440An issue was discovered on Swissphone DiCal-RED 4009 devices. An attacker with access to the file /etc/deviceconfig may recover the administrative device password via password-cracking methods, because unsalted MD5 is used.6.8CISA ADP v3.10.3%2024-08-22
CVE-2024-36439Swissphone DiCal-RED 4009 administrative web interface vulnerability9.4CISA ADP v3.10.9%2024-08-22
CVE-2024-35151IBM OpenPages information disclosure6.5CNA v3.10.4%2024-08-22Fix
CVE-2024-32939Mattermost email addresses of remote users visible in props regardless of server settings4.3CNA v3.10.2%2024-08-22Fix
CVE-2024-8088Python CPython infinite loop when iterating over zip archive entry names from zipfile.Path8.7CNA v4.01.3%2024-08-22Fix
CVE-2024-8087SourceCodester E-Commerce System popup_Item.php SQL injection9.8v3.10.6%2024-08-22
CVE-2024-8086SourceCodester E-Commerce System Admin Login login.php SQL injection9.8v3.10.7%2024-08-22
CVE-2024-8084SourceCodester Online Computer and Laptop Store Setting SystemSettings.php cross-site scripting4.8v3.10.5%2024-08-22
CVE-2024-8083SourceCodester Online Computer and Laptop Store Master.php SQL injection8.8v3.10.6%2024-08-22
CVE-2024-8081itsourcecode Payroll Management System login.php SQL injection9.8v3.10.6%2024-08-22
CVE-2024-8080SourceCodester Online Health Care System search.php SQL injection9.8v3.10.6%2024-08-22
CVE-2024-8079TOTOLINK AC1200 T8 exportOvpn buffer overflow9.8v3.11.1%2024-08-22
CVE-2024-8078TOTOLINK AC1200 T8 setTracerouteCfg buffer overflow9.8v3.11.0%2024-08-22
CVE-2024-8077TOTOLINK AC1200 T8 setTracerouteCfg os command injection9.8v3.12.9%2024-08-22
CVE-2024-8076TOTOLINK AC1200 T8 setDiagnosisCfg buffer overflow9.8v3.10.8%2024-08-22
CVE-2024-8075TOTOLINK AC1200 T8 setDiagnosisCfg os command injection9.8v3.11.9%2024-08-22
CVE-2024-8072Mage AI terminal server information disclosure5.3CNA v3.10.6%2024-08-22
CVE-2024-8071Mattermost system Role with edit access to permissions can elevate themselves to system admin4.7CNA v3.10.3%2024-08-22Fix
CVE-2024-8041Uncontrolled resource consumption in GitLab6.5CNA v3.10.5%2024-08-22Fix
CVE-2024-7848User Private Files WordPress plugin insecure direct object reference6.5v3.10.3%2024-08-22Fix
CVE-2024-7836Themify Builder WordPress plugin missing authorization authenticated post Duplication4.3CNA v3.10.3%2024-08-22Fix
CVE-2024-7778Orbit Fox by ThemeIsle WordPress plugin stored cross-site scripting5.4v3.10.3%2024-08-22Fix
CVE-2024-7634F5 NGINX Agent config_dirs restriction feature path traversal6.9CNA v4.00.5%2024-08-22Fix
CVE-2024-7384AcyMailing WordPress plugin arbitrary file upload8.8v3.11.0%2024-08-22Fix
CVE-2024-7110Improper neutralization of special elements used in a command (command injection) in GitLab6.4CNA v3.10.4%2024-08-22Fix
CVE-2024-6870Responsive Lightbox and Gallery WordPress plugin stored cross-site scripting5.4v3.10.3%2024-08-22Fix
CVE-2024-6502Incorrect provision of specified functionality in GitLab5.7CNA v3.10.4%2024-08-22Fix
CVE-2024-5583The Plus Addons for Elementor WordPress plugin stored cross-site scripting5.4v3.10.3%2024-08-22Fix
CVE-2024-3127Improper access control in GitLab4.3CNA v3.10.4%2024-08-22Fix
CVE-2024-43882Linux kernel execve set-uid/gid handling privilege escalation7.8CNA v3.10.2%2024-08-21Fix
CVE-2024-43881Linux kernel ath12k Wi-Fi driver vulnerability8.8CNA v3.10.3%2024-08-21Fix
CVE-2024-43880Linux kernel mlxsw ACL ERP memory leak7.8CNA v3.10.2%2024-08-21Fix
CVE-2024-43879Linux kernel cfg80211 HE bitrate calculation vulnerability5.5NVD v3.10.2%2024-08-21Fix
CVE-2024-43878Linux kernel xfrm input error path out-of-bounds read8.1CNA v3.10.4%2024-08-21Fix
CVE-2024-43877Linux kernel ivtv DMA mapping out-of-bounds read7.8CNA v3.10.2%2024-08-21Fix
CVE-2024-43876Linux kernel R-Car PCIe wakeup handling vulnerability5.5v3.10.2%2024-08-21Fix
CVE-2024-43875Linux kernel PCI endpoint virtual bus scanning null pointer dereference5.5v3.10.2%2024-08-21Fix
CVE-2024-43874Linux kernel crypto null pointer dereference5.5v3.10.2%2024-08-21Fix
CVE-2024-43873Linux kernel vhost vsock driver improper initialization7.8v3.10.2%2024-08-21Fix
CVE-2024-43872Linux kernel HNS RDMA driver denial of service7.5CNA v3.10.3%2024-08-21Fix
CVE-2024-43871Linux kernel devres per-CPU memory allocator memory leak5.5NVD v3.10.2%2024-08-21Fix
CVE-2024-43870Linux kernel perf event subsystem memory leak5.5v3.10.2%2024-08-21Fix
CVE-2024-43869Linux kernel perf event subsystem memory leak5.5v3.10.2%2024-08-21Fix
CVE-2024-43868Linux kernel RISC-V kexec purgatory denial of service5.5v3.10.2%2024-08-21Fix
CVE-2024-43867Linux kernel nouveau PRIME buffer sharing integer underflow5.5v3.10.2%2024-08-21Fix
CVE-2024-43866Linux kernel mlx5 device health monitor race condition4.7v3.10.2%2024-08-21Fix
CVE-2024-43865Linux kernel s390 FPU state loading vulnerability5.5v3.10.2%2024-08-21Fix
CVE-2024-43863Linux kernel vmwgfx fence polling deadlock5.5v3.10.2%2024-08-21Fix
CVE-2024-43862Linux kernel QMC HDLC driver deadlock5.5v3.10.1%2024-08-21Fix
CVE-2024-43411CKEditor4 has a low risk cross-site scripting (XSS) vulnerability from domain takeover3.1CNA v3.10.4%2024-08-21Fix
CVE-2024-43410Russh has an OOM denial of service due to allocation of untrusted amount7.5CNA v3.10.9%2024-08-21Fix
CVE-2024-43407ckeditor4 code Snippet GeSHi plugin has reflected cross-site scripting (XSS)6.1CNA v3.10.5%2024-08-21Fix
CVE-2024-43371Potential access to sensitive URLs via CKAN extensions (SSRF)4.5CNA v3.10.4%2024-08-21Fix
CVE-2024-43027DrayTek Vigor 2960 command injection8.0CISA ADP v3.11.3%2024-08-21
CVE-2024-43022TOSEI online store management system downloader.php path traversal7.5CISA ADP v3.10.9%2024-08-21
CVE-2024-42939Yzncms component /index/index.html cross-site scripting5.4v3.10.3%2024-08-21
CVE-2024-42786Lopalopa Music Management System "/music/view_user.php" in Kashipara SQL injection8.8v3.10.6%2024-08-21
CVE-2024-42785Lopalopa Music Management System SQL injection8.8v3.10.5%2024-08-21
CVE-2024-42784Lopalopa Music Management System SQL injection9.8v3.10.6%2024-08-21
CVE-2024-42783Lopalopa Music Management System SQL injection9.8v3.10.4%2024-08-21
CVE-2024-42782Lopalopa Music Management System SQL injection9.8v3.10.5%2024-08-21
CVE-2024-42781Lopalopa Music Management System "/music/ajax.php?action=login" of Kashipara SQL injection9.8v3.10.7%2024-08-21
CVE-2024-42780Lopalopa Music Management System unrestricted file upload8.8v3.10.8%2024-08-21
CVE-2024-42779Lopalopa Music Management System unrestricted file upload8.8v3.10.8%2024-08-21
CVE-2024-42778Lopalopa Music Management System unrestricted file upload8.8v3.10.8%2024-08-21
CVE-2024-42777Lopalopa Music Management System unrestricted file upload9.8v3.10.7%2024-08-21
CVE-2024-42550Mini Inventory and Sales Management System welcome.php cross-site scripting5.4CISA ADP v3.10.3%2024-08-21
CVE-2024-41937Apache Airflow: Stored XSS vulnerability on provider link6.1v3.11.7%2024-08-21Fix
CVE-2024-41675CKAN has a cross-site scripting vector in the Datatables view plugin6.8CNA v3.10.4%2024-08-21Fix
CVE-2024-41674CKAN may leak solr credentials via error message in package_search action5.3CNA v3.10.4%2024-08-21Fix
CVE-2024-41572Lang-learn-guy Learning With Texts cross-site scripting6.1v3.10.3%2024-08-21
CVE-2024-40453Squirrelly code injection9.8v3.11.1%2024-08-21Exploit codeFix
CVE-2024-39344Docusign API package for Salesforce authentication object information disclosure8.1CISA ADP v3.10.5%2024-08-21
CVE-2024-38305Dell SupportAssist for Home PCs untrusted search path7.3CNA v3.10.3%2024-08-21Fix
CVE-2024-37008Stack-based overflow vulnerability in Revit software7.8CNA v3.10.2%2024-08-21Fix
CVE-2024-33657AMI AptioV Smm Callout in SmmComputrace module7.8CNA v3.10.2%2024-08-21Fix
CVE-2024-33656AMI AptioV memory leak in SmmComuptrace module7.8CNA v3.10.2%2024-08-21Fix
CVE-2024-28987SolarWinds Web Help Desk hard-coded credential9.1CNA v3.193.3%2024-08-21KEVNucleiMetasploitEmerging ThreatsExploit codeFix
CVE-2024-28000LiteSpeed Cache WordPress plugin unauthenticated privilege escalation9.8v3.168.3%2024-08-21Reported exploitedNucleiExploit codeFix
CVE-2024-21690Atlassian Confluence Data Center cross-site scripting7.1CNA v3.00.8%2024-08-21Fix
CVE-2024-20488Cisco Unified Communications Manager cross-site scripting6.1CNA v3.10.4%2024-08-21Fix
CVE-2024-20486Cisco Identity Services Engine cross-site request forgery6.5CNA v3.10.3%2024-08-21Fix
CVE-2024-20466Cisco Identity Services Engine sensitive information disclosure6.5CNA v3.10.5%2024-08-21Fix
CVE-2024-20417Cisco Identity Services Engine REST API blind SQL injection Vulnerabities6.5CNA v3.10.5%2024-08-21Fix
CVE-2024-20375Cisco Unified Communications Manager out-of-bounds write8.6CNA v3.10.7%2024-08-21Fix
CVE-2024-8035Google Chrome extensions inappropriate implementation4.3v3.10.3%2024-08-21Fix
CVE-2024-8034Google Chrome Custom Tabs inappropriate implementation4.3v3.10.4%2024-08-21Fix
CVE-2024-8033Google Chrome WebApp Installs inappropriate implementation4.3v3.10.3%2024-08-21Fix
CVE-2024-8023chillzhuang SpringBlade list SQL injection9.8v3.10.6%2024-08-21
CVE-2024-8022Genexis Tilgin Home Gateway cross-site scripting5.3CNA v4.00.4%2024-08-21
CVE-2024-8007Red Hat OpenStack Platform improper certificate validation8.1CNA v3.10.4%2024-08-21Fix
CVE-2024-7998Octopus Deploy Octopus Server insufficient session expiration2.6CNA v3.10.2%2024-08-21Fix
CVE-2024-7981Google Chrome Views inappropriate implementation4.3v3.10.4%2024-08-21Fix
CVE-2024-7980Google Chrome Installer improper input validation7.8v3.10.3%2024-08-21Fix
CVE-2024-7979Google Chrome Installer improper input validation7.8v3.10.2%2024-08-21Fix
CVE-2024-7978Google Chrome Data Transfer insufficient policy enforcement4.3v3.10.5%2024-08-21Fix
CVE-2024-7977Google Chrome Installer improper input validation7.8v3.10.3%2024-08-21Fix
CVE-2024-7976Google Chrome FedCM inappropriate implementation4.3v3.10.5%2024-08-21Fix
CVE-2024-7975Google Chrome Permissions inappropriate implementation4.3v3.10.4%2024-08-21Fix
CVE-2024-7974Google Chrome V8 API improper input validation8.8v3.10.5%2024-08-21Fix
CVE-2024-7973Google Chrome PDFium heap-based buffer overflow8.8v3.10.8%2024-08-21Fix
CVE-2024-7972Google Chrome V8 inappropriate implementation8.8v3.10.6%2024-08-21Fix
CVE-2024-7971Google Chromium V8 type confusion9.6v3.120.7%2024-08-21KEVExploit codeKCVFix
CVE-2024-7969Google Chrome V8 type confusion8.8v3.10.5%2024-08-21Fix
CVE-2024-7968Google Chrome Autofill use-after-free8.8v3.10.6%2024-08-21Fix
CVE-2024-7967Google Chrome Fonts heap-based buffer overflow8.8v3.10.6%2024-08-21Fix
CVE-2024-7966Google Chrome Skia out-of-bounds access8.8v3.10.7%2024-08-21Exploit codeFix
CVE-2024-7965Google Chromium V8 inappropriate implementation8.8v3.118.5%2024-08-21KEVExploit codeFix
CVE-2024-7964Google Chrome Passwords use-after-free8.8v3.10.6%2024-08-21Fix
CVE-2024-7885Red Hat HawtIO undertow vulnerable to race condition7.5CNA v3.12.6%2024-08-21Fix
CVE-2024-7854Woo Inquiry WordPress plugin unauthenticated SQL injection9.8v3.14.3%2024-08-21NucleiExploit code
CVE-2024-7795Autel MaxiCharger AC Elite Business C50 stack-based buffer overflow8.8v3.10.5%2024-08-21
CVE-2024-7725Foxit PDF Reader AcroForm use-after-free remote code execution8.8v3.10.8%2024-08-21Fix
CVE-2024-7724Foxit PDF Reader AcroForm use-after-free remote code execution8.8v3.10.8%2024-08-21Fix
CVE-2024-7723Foxit PDF Reader AcroForm use-after-free remote code execution8.8v3.10.8%2024-08-21Fix
CVE-2024-7722Foxit PDF Reader Doc object use-after-free information disclosure4.3v3.10.6%2024-08-21Fix
CVE-2024-7651App Builder WordPress plugin SQL injection7.5v3.10.5%2024-08-21Fix
CVE-2024-7647OTA Sync Booking Engine Widget cross-site request forgery to stored cross-site scripting6.1CNA v3.10.2%2024-08-21Fix
CVE-2024-7629Responsive Video WordPress plugin authenticated (Contributor+) stored cross-site scripting5.4v3.10.3%2024-08-21
CVE-2024-7604Logsign Unified SecOps Platform incorrect authorization authentication bypass7.8v3.10.3%2024-08-21Fix
CVE-2024-7603Logsign Unified SecOps Platform directory traversal arbitrary Directory Deletion8.1v3.12.0%2024-08-21Fix
CVE-2024-7602Logsign Unified SecOps Platform directory traversal information disclosure6.5v3.12.4%2024-08-21Fix
CVE-2024-7601Logsign Unified SecOps Platform Directory data_export_delete_all traversal arbitrary file deletion8.1v3.11.6%2024-08-21Fix
CVE-2024-7600Logsign Unified SecOps Platform directory traversal arbitrary file deletion8.1v3.12.0%2024-08-21Fix
CVE-2024-7448Magnet Forensics AXIOM command injection remote code execution8.0v3.11.7%2024-08-21Fix
CVE-2024-7390WP Testimonial Widget WordPress plugin missing authorization5.3CNA v3.10.3%2024-08-21
CVE-2024-7134LiquidPoll WordPress plugin unauthenticated stored cross-site scripting via form_data parameter7.2CNA v3.10.4%2024-08-21
CVE-2024-7090LH Add Media From Url WordPress plugin reflected cross-site scripting6.1CNA v3.10.4%2024-08-21Fix
CVE-2024-7032elbanyaoui Smart Online Order for Clover plugin deactivation function missing authorization6.5CNA v3.10.5%2024-08-21Fix
CVE-2024-7030Smart Online Order for Clover WordPress plugin unauthorized access4.3v3.10.4%2024-08-21Fix
CVE-2024-7013Panasonic Holdings Control FPWIN Pro stack-based buffer overflow7.8CNA v3.10.3%2024-08-21
CVE-2024-6883Event Espresso plugin settings functions missing authorization4.3CNA v3.10.3%2024-08-21Fix
CVE-2024-6814NETGEAR ProSAFE Network Management System getFilterString SQL injection remote code execution8.8v3.12.1%2024-08-21Fix
CVE-2024-6813NETGEAR ProSAFE Network Management System getSortString SQL injection remote code execution8.8v3.11.8%2024-08-21Fix
CVE-2024-6812IrfanView Wsq File Parsing out-of-bounds write remote code execution7.8v3.10.6%2024-08-21
CVE-2024-6811IrfanView Wsq File Parsing out-of-bounds write remote code execution7.8v3.10.6%2024-08-21
CVE-2024-6767WordSurvey WordPress plugin stored cross-site scripting5.5CNA v3.10.4%2024-08-21
CVE-2024-6568Flamix: Bitrix24 and Contact Form 7 integrations WordPress plugin information disclosure5.3CNA v3.10.5%2024-08-21Fix
CVE-2024-6508Red Hat OpenShift Container Platform openshift-console: Oauth2 insufficient state parameter entropy8.0CNA v3.10.7%2024-08-21Fix
CVE-2024-6386WPML Multilingual CMS WordPress plugin remote code execution8.8NVD v3.125.5%2024-08-21Exploit codeFix
CVE-2024-6339Phlox PRO WordPress theme reflected cross-site scripting via Search parameters6.1CNA v3.10.4%2024-08-21Fix
CVE-2024-6141Windscribe directory traversal local privilege escalation7.8v3.10.6%2024-08-21
CVE-2024-5930VIPRE Advanced Security incorrect permission assignment local privilege escalation7.8v3.10.3%2024-08-21Fix
CVE-2024-5929VIPRE Advanced Security PMAgent uncontrolled search path element local privilege escalation7.8v3.10.4%2024-08-21Fix
CVE-2024-5928VIPRE Advanced Security PMAgent link following local privilege escalation7.8v3.10.4%2024-08-21Fix
CVE-2024-5880Hide My Site WordPress plugin unauthenticated information exposure4.3CNA v3.10.3%2024-08-21
CVE-2024-5762Zen Cart findPluginAdminPage local file inclusion remote code execution8.1v3.171.6%2024-08-21Fix
CVE-2024-5725Centreon initCurveList SQL injection remote code execution8.8v3.147.6%2024-08-21Fix
CVE-2024-5723Centreon updateServiceHost SQL injection remote code execution8.8v3.140.7%2024-08-21
CVE-2024-5335bdthemes Ultimate Store Kit compare products cookie PHP object injection9.8CNA v3.10.9%2024-08-21Fix
CVE-2024-43864Linux kernel net/mlx5e kernel panic9.8CNA v3.10.5%2024-08-20Fix
CVE-2024-43861Linux kernel qmi_wwan USB driver memory leak5.5v3.10.2%2024-08-20Fix
CVE-2024-43688cron crontab entry parser out-of-bounds write7.3CISA ADP v3.10.5%2024-08-20
CVE-2024-43409Ghost's improper authentication allows access to member information and actions6.5CNA v3.10.3%2024-08-20Fix
CVE-2024-43408discourse-placeholder-theme-component cross-site scripting6.3CNA v3.10.3%2024-08-20
CVE-2024-43406LF Edge eKuiper has a SQL injection in sqlKvStore8.8CNA v3.10.9%2024-08-20Fix
CVE-2024-43404Remote code execution vulnerability in MEGABOT9.8CNA v3.11.1%2024-08-20Fix
CVE-2024-43403Kanister has a potential risk which can be leveraged to make a cluster-level privilege escalation8.8CNA v3.10.5%2024-08-20
CVE-2024-43397apolloconfig apollo potential unauthorized access issue in apollo-portal4.3CNA v3.10.3%2024-08-20Fix
CVE-2024-43396Khoj vulnerable to stored cross-site scripting in Automate (Preview feature)5.4CNA v3.10.6%2024-08-20Fix
CVE-2024-43377Umbraco CMS improper access control5.4CNA v3.10.2%2024-08-20Fix
CVE-2024-43376Umbraco CMS vulnerable to generation of error message containing sensitive information4.3CNA v3.10.4%2024-08-20Fix
CVE-2024-43202Apache DolphinScheduler: Remote code execution9.8v3.12.1%2024-08-20Exploit codeFix
CVE-2024-42919Escanav Escan Management Console improper access control9.8CISA ADP v3.11.0%2024-08-20Exploit code
CVE-2024-42662apolloconfig apollo information disclosure7.5v3.10.5%2024-08-20
CVE-2024-42621Pligg Cms cross-site request forgery8.8v3.10.3%2024-08-20
CVE-2024-42619Pligg Cms cross-site request forgery8.8CISA ADP v3.10.3%2024-08-20
CVE-2024-42618Pligg Cms cross-site request forgery8.8v3.10.3%2024-08-20
CVE-2024-42617Pligg Cms cross-site request forgery8.8v3.10.3%2024-08-20
CVE-2024-42616Pligg Cms cross-site request forgery8.8v3.10.3%2024-08-20
CVE-2024-42613Pligg Cms cross-site request forgery8.8v3.10.3%2024-08-20
CVE-2024-42612Pligg Cms cross-site request forgery8.8CISA ADP v3.10.3%2024-08-20
CVE-2024-42611Pligg Cms cross-site request forgery8.8v3.10.3%2024-08-20
CVE-2024-42610Pligg Cms cross-site request forgery8.8v3.10.3%2024-08-20
CVE-2024-42609Pligg Cms cross-site request forgery8.8v3.10.2%2024-08-20
CVE-2024-42608Pligg Cms cross-site request forgery8.8v3.10.3%2024-08-20
CVE-2024-42607Pligg Cms cross-site request forgery8.8v3.10.3%2024-08-20
CVE-2024-42606Pligg Cms cross-site request forgery8.8v3.10.2%2024-08-20
CVE-2024-42605Pligg Cms cross-site request forgery8.8v3.10.2%2024-08-20
CVE-2024-42604Pligg Cms cross-site request forgery8.8v3.10.3%2024-08-20
CVE-2024-42603Pligg Cms cross-site request forgery8.8v3.10.2%2024-08-20
CVE-2024-42598Seacms code injection6.7CISA ADP v3.11.2%2024-08-20
CVE-2024-42586Siamonhasan Warehouse Inventory System component categorie.php cross-site request forgery8.8CISA ADP v3.10.3%2024-08-20
CVE-2024-42585Siamonhasan Warehouse Inventory System component delete_media.php cross-site request forgery8.8CISA ADP v3.10.3%2024-08-20
CVE-2024-42584Siamonhasan Warehouse Inventory System component delete_product.php cross-site request forgery8.8v3.10.3%2024-08-20
CVE-2024-42583Siamonhasan Warehouse Inventory System component delete_user.php cross-site request forgery8.8v3.10.3%2024-08-20
CVE-2024-42582Siamonhasan Warehouse Inventory System component delete_categorie.php cross-site request forgery8.8v3.10.3%2024-08-20
CVE-2024-42581Siamonhasan Warehouse Inventory System component delete_group.php cross-site request forgery8.8NVD v3.10.3%2024-08-20
CVE-2024-42580Siamonhasan Warehouse Inventory System component edit_group.php cross-site request forgery8.8v3.10.2%2024-08-20
CVE-2024-42579Siamonhasan Warehouse Inventory System component add_group.php cross-site request forgery8.8v3.10.3%2024-08-20
CVE-2024-42578Siamonhasan Warehouse Inventory System component edit_product.php cross-site request forgery8.0CISA ADP v3.10.3%2024-08-20
CVE-2024-42577Siamonhasan Warehouse Inventory System component add_product.php cross-site request forgery8.8v3.10.3%2024-08-20
CVE-2024-42576Siamonhasan Warehouse Inventory System component edit_categorie.php cross-site request forgery8.8CISA ADP v3.10.3%2024-08-20
CVE-2024-42575Arajajyothibabu School Management System SQL injection9.8v3.10.6%2024-08-20
CVE-2024-42574Arajajyothibabu School Management System SQL injection9.8v3.10.6%2024-08-20
CVE-2024-42573Arajajyothibabu School Management System SQL injection9.8v3.10.6%2024-08-20
CVE-2024-42572Arajajyothibabu School Management System SQL injection9.8v3.10.6%2024-08-20
CVE-2024-42571Arajajyothibabu School Management System SQL injection9.8CISA ADP v3.10.6%2024-08-20
CVE-2024-42570Arajajyothibabu School Management System SQL injection9.8v3.10.6%2024-08-20
CVE-2024-42569Arajajyothibabu School Management System SQL injection9.8CISA ADP v3.10.6%2024-08-20
CVE-2024-42568Arajajyothibabu School Management System SQL injection9.8v3.10.6%2024-08-20
CVE-2024-42567Arajajyothibabu School Management System SQL injection9.8v3.10.6%2024-08-20
CVE-2024-42566Arajajyothibabu School Management System SQL injection9.8v3.10.6%2024-08-20
CVE-2024-42565jerryhanjj ERP SQL injection9.8CISA ADP v3.10.6%2024-08-20
CVE-2024-42564jerryhanjj ERP SQL injection7.6CISA ADP v3.10.4%2024-08-20
CVE-2024-42563jerryhanjj ERP arbitrary file upload9.8CISA ADP v3.10.8%2024-08-20
CVE-2024-42562krishna9772 Pharmacy Management System SQL injection9.8CISA ADP v3.10.6%2024-08-20
CVE-2024-42561krishna9772 Pharmacy Management System SQL injection8.8CISA ADP v3.19.0%2024-08-20Emerging Threats
CVE-2024-42560varunsardana004 Blood-Bank-And-Donation-Management-System cross-site scripting6.1CISA ADP v3.10.4%2024-08-20
CVE-2024-42559Hotel Management System process_login.php improper access control9.8CISA ADP v3.10.6%2024-08-20
CVE-2024-42558Vaibhavverma9999 Hotel Management System SQL injection9.8CISA ADP v3.10.7%2024-08-20
CVE-2024-42557Vaibhavverma9999 Hotel Management System component admin_modify_room.php cross-site request forgery8.8CISA ADP v3.10.3%2024-08-20
CVE-2024-42556Vaibhavverma9999 Hotel Management System SQL injection9.8CISA ADP v3.10.7%2024-08-20
CVE-2024-42555Vaibhavverma9999 Hotel Management System component admin_room_removed.php cross-site request forgery8.8CISA ADP v3.10.3%2024-08-20
CVE-2024-42554Vaibhavverma9999 Hotel Management System SQL injection8.8CISA ADP v3.10.6%2024-08-20
CVE-2024-42553Vaibhavverma9999 Hotel Management System component admin_room_added.php cross-site request forgery8.8CISA ADP v3.10.3%2024-08-20
CVE-2024-42552Vaibhavverma9999 Hotel Management System SQL injection8.6CISA ADP v3.10.5%2024-08-20
CVE-2024-42369A room with itself as a its predecessor will freeze matrix-js-sdk4.1CNA v3.10.5%2024-08-20Fix
CVE-2024-42363Zendesk Samson Kubernetes role verification deserialization of untrusted data8.8CNA v3.11.1%2024-08-20Fix
CVE-2024-42362GHSL-2023-255: HertzBeat Authenticated RCE8.8NVD v3.11.3%2024-08-20Fix
CVE-2024-42361Apache HertzBeat metric download endpoint SQL injection9.8NVD v3.11.1%2024-08-20
CVE-2024-42336Servision improper authentication9.8v3.10.4%2024-08-20
CVE-2024-423357Twenty improper neutralization of input during web page generation (cross-site scripting)5.4v3.10.3%2024-08-20
CVE-2024-42006Keyfactor AWS Orchestrator information disclosure7.5v3.10.4%2024-08-20Fix
CVE-2024-41773IBM Global Configuration Management incorrect ownership assignment6.5CNA v3.10.3%2024-08-20Fix
CVE-2024-41700Barix exposure of sensitive information to an unauthorized actor7.5v3.10.8%2024-08-20
CVE-2024-41699Priority files or directories accessible to external parties7.5v3.10.3%2024-08-20Fix
CVE-2024-41698Priority exposure of sensitive information to an unauthorized actor7.5v3.10.3%2024-08-20Fix
CVE-2024-41697Priority improper neutralization of script-related HTML tags in a web page (basic XSS)6.1v3.10.3%2024-08-20Fix
CVE-2024-41659GHSL-2024-034: Memos CORS Misconfiguration in server.go8.1CNA v3.10.6%2024-08-20Fix
CVE-2024-41658Casdoor GHSL-2024-036: Reflected XSS in QrCodePage.js6.1NVD v3.10.4%2024-08-20
CVE-2024-41657GHSL-2024-035: Casdoor CORS misconfiguration8.8NVD v3.10.8%2024-08-20
CVE-2024-40743Joomla! CMS core XSS vectors in Outputfilter::strip* methods6.1CISA ADP v3.10.3%2024-08-20Fix
CVE-2024-39690Capsule tenant owner with patch namespace permission can hijack system namespaces8.5CNA v3.10.5%2024-08-20Fix
CVE-2024-39094Friendica cross-site scripting5.4v3.10.3%2024-08-20Fix
CVE-2024-38810Spring Security missing authorization when using @AuthorizeReturnObject6.5CNA v3.10.5%2024-08-20Fix
CVE-2024-38808Spring Expression DoS4.3CNA v3.10.6%2024-08-20Fix
CVE-2024-38175Microsoft Azure Managed Instance for Apache Cassandra elevation of privilege9.6CNA v3.10.8%2024-08-20Fix
CVE-2024-35540Typecho A stored cross-site scripting9.0v3.12.8%2024-08-20Exploit code
CVE-2024-35214Vulnerability in CylanceOPTICS Windows Installer Package Impacts CylanceOPTICS for Windows7.1CNA v4.00.2%2024-08-20
CVE-2024-34458Keyfactor Command SQL injection7.5v3.10.4%2024-08-20Fix
CVE-2024-33872Keyfactor Command SQL injection9.8CISA ADP v3.10.5%2024-08-20
CVE-2024-31842Italtel Embrace incorrect authorization8.8v3.10.4%2024-08-20
CVE-2024-30949newlib integer overflow9.8v3.10.8%2024-08-20Fix
CVE-2024-28829Checkmk privilege escalation in mk_informix plugin5.2CNA v4.00.2%2024-08-20Fix
CVE-2024-27187Joomla! CMS core Improper ACL for backend profile view7.5CISA ADP v3.10.4%2024-08-20Fix
CVE-2024-27186Joomla! CMS Core XSS in HTML Mail templates6.1CISA ADP v3.10.3%2024-08-20Fix
CVE-2024-27185Joomla! CMS core cache poisoning in Pagination9.1CISA ADP v3.10.4%2024-08-20Fix
CVE-2024-27184Joomla! CMS core Inadequate validation of internal URLs6.1CISA ADP v3.10.3%2024-08-20Fix
CVE-2024-25009Ericsson Packet Core Controller (PCC) improper input validation6.5CNA v3.10.3%2024-08-20Fix
CVE-2024-22281Apache Helix Front (UI): Helix front hard-coded secret in the express-session7.5CISA ADP v3.10.7%2024-08-20Fix
CVE-2024-21689Atlassian Bamboo Data Center code injection7.6CNA v3.02.7%2024-08-20Exploit codeFix
CVE-2024-8005demozx gf_cms JWT Authentication auth.go init hard-coded credentials9.8v3.10.7%2024-08-20
CVE-2024-8003Go-Tribe gotribe-admin Log routes.go InitRoutes deserialization9.8v3.10.8%2024-08-20
CVE-2024-7949SourceCodester Online Graduate Tracer System fetch_genderit.php SQL injection8.8v3.10.5%2024-08-20
CVE-2024-7948SourceCodester Accounts Manager App Update Account page update-account.php cross-site scripting5.4v3.10.4%2024-08-20
CVE-2024-7947SourceCodester Point of Sales and Inventory Management System login.php SQL injection9.8v3.10.7%2024-08-20
CVE-2024-7946itsourcecode Online Blood Bank Management System User Signup register.php SQL injection9.8v3.10.7%2024-08-20
CVE-2024-7945itsourcecode Laravel Property Management System Notes page create cross-site scripting5.4v3.10.5%2024-08-20
CVE-2024-7944itsourcecode Laravel Property Management System document update handler unrestricted file upload8.8v3.10.5%2024-08-20
CVE-2024-7943itsourcecode Laravel Property Management System PropertiesController.php upload unrestricted upload8.8v3.10.7%2024-08-20
CVE-2024-7942SourceCodester Leads Manager Tool update-leads.php cross-site scripting5.4v3.10.4%2024-08-20
CVE-2024-7937itsourcecode Project Expense Monitoring System printtransfer.php SQL injection9.8v3.10.6%2024-08-20
CVE-2024-7936itsourcecode Project Expense Monitoring System transferred_report.php SQL injection9.8v3.10.6%2024-08-20
CVE-2024-7850BP Profile Search WordPress plugin cross-site request forgery to reflected cross-site scripting6.1CNA v3.10.2%2024-08-20Fix
CVE-2024-7827Shopping Cart and eCommerce Store WordPress plugin SQL injection8.8CNA v3.10.5%2024-08-20Fix
CVE-2024-7782Contact Form by Bit Form: Multi Step Form WordPress plugin arbitrary file deletion6.5NVD v3.10.9%2024-08-20Fix
CVE-2024-7780Contact Form by Bit Form: Multi Step Form WordPress plugin SQL injection7.2CNA v3.10.5%2024-08-20Fix
CVE-2024-7777Contact Form by Bit Form: Multi Step Form WordPress plugin arbitrary file read9.0v3.11.0%2024-08-20Fix
CVE-2024-7775Bit Apps Contact Form by Bit Form custom code function vulnerability4.8v3.10.3%2024-08-20Fix
CVE-2024-7711GitHub Enterprise Server incorrect authorization5.3CNA v4.00.5%2024-08-20Fix
CVE-2024-7702Contact Form by Bit Form: Multi Step Form WordPress plugin SQL injection7.2CNA v3.10.5%2024-08-20Fix
CVE-2024-7305DWF vulnerability in Autodesk Desktop software7.8CNA v3.10.2%2024-08-20Fix
CVE-2024-7054Popup Maker WordPress plugin authenticated (Contributor+) stored cross-site scripting5.4v3.10.3%2024-08-20Fix
CVE-2024-6918Schneider Electric Accutech Manager buffer overflow7.5CNA v3.10.5%2024-08-20Fix
CVE-2024-6864WP Last Modified Info WordPress plugin stored cross-site scripting5.4v3.10.3%2024-08-20Fix
CVE-2024-6847Webdigit Chatbot with ChatGPT chatbot message handler SQL injection9.8CISA ADP v3.10.7%2024-08-20Fix
CVE-2024-6800GitHub Enterprise Server improper signature verification9.5CNA v4.01.5%2024-08-20Fix
CVE-2024-6575The Plus Addons for Elementor WordPress plugin stored cross-site scripting5.4v3.10.3%2024-08-20Fix
CVE-2024-6379Reflected cross-site scripting vulnerability affecting 3DSwymer from Release 3DEXPERIENCE R2022x7.7CNA v3.10.2%2024-08-20
CVE-2024-6378Dassault Systèmes ENOVIA Collaborative Industry Innovator reflected cross-site scripting8.7CNA v3.10.4%2024-08-20
CVE-2024-6377Dassault Systèmes 3DSwymer 3DPassport open redirect8.1CNA v3.10.3%2024-08-20
CVE-2024-6337Incorrect authorization allows read access to issues in GitHub Enterprise Server5.9CNA v4.00.7%2024-08-20Fix
CVE-2024-6322Grafana plugin data sources vulnerable to access control bypass4.4CNA v3.10.3%2024-08-20Fix
CVE-2024-5941GiveWP WordPress plugin unauthorized access5.4CNA v3.10.4%2024-08-20Fix
CVE-2024-5940GiveWP WordPress plugin unauthorized access5.3v3.10.5%2024-08-20Fix
CVE-2024-5939GiveWP WordPress plugin unauthorized access5.3CNA v3.10.5%2024-08-20Fix
CVE-2024-5932GiveWP WordPress plugin PHP object injection9.8v3.176.8%2024-08-20NucleiMetasploitExploit codeFix
CVE-2024-5763The Plus Addons for Elementor WordPress plugin stored cross-site scripting5.4v3.10.4%2024-08-20Fix
CVE-2024-5576Tutor LMS Elementor Addons WordPress plugin stored cross-site scripting5.4v3.10.3%2024-08-20Fix
CVE-2024-44083Hex-Rays Ida Pro resource exhaustion7.5v3.11.4%2024-08-19Exploit code
CVE-2024-44076Microcks's POST /API/import and POST /API/export endpoints allow non-administrator access9.8v3.10.6%2024-08-19Fix
CVE-2024-44073Rust-bitcoin Miniscript uncontrolled recursion7.5v3.10.6%2024-08-19Fix
CVE-2024-44070FRRouting BGP encapsulation attribute parser vulnerability7.5NVD v3.10.6%2024-08-19Fix
CVE-2024-44069pi-hole missing authorization7.5CISA ADP v3.10.5%2024-08-19
CVE-2024-44067The T-Head XuanTie C910 CPU in the TH1520 SoC and the T-Head XuanTie C920 CPU in the SOPHON SG2042 have instructions that allow unprivileged attackers to write to arbitrary physical memory locations, aka GhostWrite.8.4CISA ADP v3.10.2%2024-08-19
CVE-2024-43401XWiki Platform privilege escalation9.1CNA v3.10.7%2024-08-19Fix
CVE-2024-43400XWiki Platform allows XSS through XClass name in string properties9.1CNA v3.10.5%2024-08-19Exploit codeFix
CVE-2024-43399Mobile Security Framework (MobSF) has a Zip Slip vulnerability in .a Static library files8.0CNA v3.11.0%2024-08-19Fix
CVE-2024-43380fugit parse and parse_nat stall on lengthy input5.3CNA v3.10.8%2024-08-19Fix
CVE-2024-43379TruffleHog has a blind SSRF in some Detectors3.4CNA v3.10.3%2024-08-19Fix
CVE-2024-43354myCred WordPress plugin PHP object injection9.8CNA v3.10.5%2024-08-19Fix
CVE-2024-43345Landing Page Builder WordPress plugin local file inclusion7.5CNA v3.10.5%2024-08-19Fix
CVE-2024-43328EmbedPress WordPress plugin local file inclusion9.8v3.10.5%2024-08-19Fix
CVE-2024-43326Plugin Notes Plus WordPress plugin arbitrary content deletion vulnerability5.4CNA v3.10.3%2024-08-19Fix
CVE-2024-43317RegistrationMagic WordPress plugin cross-site scripting (XSS)6.1v3.10.3%2024-08-19Fix
CVE-2024-43311Login As Users WordPress plugin broken authentication9.8CNA v3.10.5%2024-08-19Fix
CVE-2024-43281Void Elementor Post Grid Addon for Elementor Page builder WordPress plugin local file inclusion5.3CNA v3.10.5%2024-08-19Fix
CVE-2024-43280Salon Booking System WordPress plugin open redirection6.1v3.10.3%2024-08-19Fix
CVE-2024-43272Icegram Engage WordPress plugin unauthenticated Unpublished Campaign Viewer vulnerability5.3CNA v3.10.4%2024-08-19Fix
CVE-2024-43271Widgets for WooCommerce Products on Elementor WordPress plugin local file inclusion8.5CNA v3.10.6%2024-08-19
CVE-2024-43261Compute Links WordPress plugin remote file inclusion9.6CNA v3.10.5%2024-08-19
CVE-2024-43256Leopard WordPress plugin Subscriber+ plugin settings Change vulnerability7.1CNA v3.10.4%2024-08-19Fix
CVE-2024-43252Crew HRM WordPress plugin PHP object injection9.0CNA v3.10.4%2024-08-19Fix
CVE-2024-43250Bit Form Pro WordPress plugin authenticated plugin settings Change vulnerability6.5NVD v3.10.3%2024-08-19Fix
CVE-2024-43249Bit Form Pro WordPress plugin authenticated arbitrary file upload8.8NVD v3.11.0%2024-08-19Fix
CVE-2024-43248Bit Form Pro WordPress plugin unauthenticated arbitrary file deletion9.1v3.10.6%2024-08-19Fix
CVE-2024-43247WHMpress WordPress plugin Subscriber+ arbitrary settings Change vulnerability8.8CNA v3.10.4%2024-08-19
CVE-2024-43245JobSearch WordPress plugin unauthenticated account takeover9.8CNA v3.10.5%2024-08-19
CVE-2024-43242Indeed Ultimate Membership Pro WordPress plugin unauthenticated PHP object injection10.0v3.10.5%2024-08-19Fix
CVE-2024-43240Indeed Ultimate Membership Pro WordPress plugin unauthenticated privilege escalation9.8v3.10.5%2024-08-19Fix
CVE-2024-43236Easy PayPal and Stripe Buy Now Button WordPress plugin open redirection4.7CNA v3.10.3%2024-08-19Fix
CVE-2024-43232Timeline and History slider WordPress plugin local file inclusion8.5CNA v3.10.5%2024-08-19Fix
CVE-2024-43221JetGridBuilder WordPress plugin local file inclusion8.5CNA v3.10.5%2024-08-19Fix
CVE-2024-42815TP-Link RE365 out-of-bounds write9.8CISA ADP v3.10.8%2024-08-19
CVE-2024-42813TRENDnet TEW-752DRU buffer overflow9.8CISA ADP v3.10.7%2024-08-19
CVE-2024-42812D-Link DIR-860L buffer overflow9.8v3.115.5%2024-08-19
CVE-2024-42658Nepstech Ntpl-xpon1gfevn information disclosure9.8NVD v3.11.4%2024-08-19
CVE-2024-42657Nepstech Ntpl-xpon1gfevn missing encryption7.5v3.10.5%2024-08-19Exploit code
CVE-2024-42633Linksys E1500 do_upgrade_post function of the httpd binary command injection8.8v3.12.1%2024-08-19
CVE-2024-37099GiveWP WordPress plugin unauthenticated PHP object injection9.8v3.10.6%2024-08-19Fix
CVE-2024-35539Typecho authentication bypass by spoofing6.5CISA ADP v3.11.4%2024-08-19Exploit code
CVE-2024-35538Typecho authentication bypass by spoofing5.3CISA ADP v3.10.6%2024-08-19Exploit code
CVE-2024-32928Google Nest Speakers improper certificate validation5.9v3.10.2%2024-08-19Fix
CVE-2024-32927Google Android RadioExt.cpp use-after-free7.8v3.10.1%2024-08-19Fix
CVE-2024-25582Open-Xchange OX App Suite cross-site scripting5.4CNA v3.10.4%2024-08-19Fix
CVE-2024-23729Heytap Internet Browser cross-site scripting6.1v3.10.4%2024-08-19Exploit code
CVE-2024-7935itsourcecode Project Expense Monitoring System print.php SQL injection9.8v3.10.5%2024-08-19
CVE-2024-7934itsourcecode Project Expense Monitoring System execute.php SQL injection9.8v3.10.5%2024-08-19
CVE-2024-7933itsourcecode Project Expense Monitoring System Backend Login login1.php SQL injection9.8v3.10.6%2024-08-19
CVE-2024-7931SourceCodester Online Graduate Tracer System view_csprofile.php SQL injection8.8v3.10.6%2024-08-19
CVE-2024-7930SourceCodester Clinics Patient Management System get_packings.php SQL injection8.8v3.10.6%2024-08-19
CVE-2024-7929SourceCodester Simple Forum Website Signup page registration.php cross-site scripting6.1v3.10.5%2024-08-19
CVE-2024-7928FastAdmin lang path traversal7.5v3.116.9%2024-08-19NucleiExploit code
CVE-2024-7927ZZCMS class.php path traversal7.5v3.10.9%2024-08-19
CVE-2024-7926ZZCMS about_edit.php path traversal7.5v3.10.9%2024-08-19
CVE-2024-7925ZZCMS eginfo.php information disclosure7.5v3.10.6%2024-08-19