CVE-2024 list

CVE-2024 records published in August 2024

Page two of three: records 1,001 to 2,000 of the 2,681 published in August 2024, newest first. The first page carries the figures for August 2024.

CVE-2024 records published in August 2024, newest first: records 1,001 to 2,000 of 2,681
CVE Summary CVSS EPSS Published Signals
CVE-2024-7924ZZCMS list.php path traversal7.5v3.11.4%2024-08-19
CVE-2024-7922D-Link DNS-1550-04 myMusic.cgi cgi_write_playlist command injection9.8v3.119.5%2024-08-19Emerging Threats
CVE-2024-7921Anhui Deshun Intelligent Technology Jieshun JieLink+ JSOTC2016 GetDataList access control9.8v3.10.7%2024-08-19
CVE-2024-7920Jieshun JieLink+ JSOTC2016 GetParkInThroughDeivces interface improper access control9.8v3.10.7%2024-08-19
CVE-2024-7919Anhui Deshun Intelligent Technology Jieshun JieLink+ JSOTC2016 GetDataList access control9.8v3.11.1%2024-08-19
CVE-2024-7592Python CPython quadratic complexity parsing cookies with backslashes7.5v3.12.3%2024-08-19Fix
CVE-2024-6843Webdigit Chatbot with ChatGPT stored cross-site scripting6.1CISA ADP v3.10.4%2024-08-19Fix
CVE-2024-6451AI Engine WordPress plugin Admin+ RCE7.2CISA ADP v3.10.8%2024-08-19Fix
CVE-2024-6348Predictable seed generation after ECU reset7.5v3.10.4%2024-08-19
CVE-2024-6330GEO my WordPress plugin unauthenticated RCE via LFI9.8CISA ADP v3.12.1%2024-08-19Exploit codeFix
CVE-2024-4785Zephyr Bluetooth connection update handling divide by zero7.6CNA v3.10.5%2024-08-19Fix
CVE-2024-43353myCred WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.3%2024-08-18Fix
CVE-2024-43352GivingPress Lite WordPress theme cross-site scripting (XSS)6.5CNA v3.10.3%2024-08-18
CVE-2024-43351Bravada WordPress theme cross-site scripting (XSS)6.5CNA v3.10.3%2024-08-18Fix
CVE-2024-43350Propovoice CRM WordPress plugin insecure direct object references (IDOR)5.3CNA v3.10.3%2024-08-18
CVE-2024-43349All Bootstrap Blocks WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.3%2024-08-18Fix
CVE-2024-43348Purity Of Soul WordPress theme reflected cross-site scripting (XSS)7.1CNA v3.10.3%2024-08-18
CVE-2024-43347Button contact VR WordPress plugin cross-site scripting (XSS)5.9CNA v3.10.3%2024-08-18Fix
CVE-2024-43346Modal Window create popup modal window WordPress plugin cross-site scripting (XSS)5.4v3.10.3%2024-08-18Fix
CVE-2024-43344Icegram WordPress plugin cross-site scripting6.5CNA v3.10.3%2024-08-18Fix
CVE-2024-43342bdthemes Ultimate Store Kit Elementor Addons stored cross-site scripting5.4v3.10.3%2024-08-18Fix
CVE-2024-43335Responsive Blocks WordPress Gutenberg Blocks plugin cross-site scripting (XSS)5.4v3.10.3%2024-08-18Fix
CVE-2024-43330PowerPack for Beaver Builder WordPress plugin reflected cross-site scripting (XSS)6.1NVD v3.10.3%2024-08-18Fix
CVE-2024-43329Allegiant WordPress theme cross-site scripting (XSS)5.4v3.10.3%2024-08-18
CVE-2024-43327Invite Anyone WordPress plugin reflected cross-site scripting (XSS)6.1NVD v3.10.3%2024-08-18Fix
CVE-2024-43324Clever Addons for Elementor WordPress plugin cross-site scripting (XSS)4.8v3.10.3%2024-08-18Fix
CVE-2024-43322Zephyr Project Manager WordPress plugin insecure direct object references (IDOR)9.8v3.10.4%2024-08-18Fix
CVE-2024-43321Team Showcase WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.3%2024-08-18Fix
CVE-2024-43320WPBakery Page Builder Addons WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.3%2024-08-18Fix
CVE-2024-43318E2Pdf Export To Pdf Tool for WordPress plugin cross-site scripting (XSS)5.4v3.10.3%2024-08-18Fix
CVE-2024-43315Stripe Payments For WooCommerce WordPress plugin insecure direct object references (IDOR)7.5CNA v3.10.4%2024-08-18Fix
CVE-2024-43313FormFacade WordPress plugin reflected cross-site scripting (XSS)6.1NVD v3.10.3%2024-08-18Fix
CVE-2024-43309WP Telegram Widget and Join Link WordPress plugin cross-site scripting (XSS)5.4v3.10.3%2024-08-18Fix
CVE-2024-43308Gutentor Gutenberg Blocks Page Builder for Gutenberg Editor WordPress plugin cross-site scripting5.4v3.10.3%2024-08-18Fix
CVE-2024-43307Structured Content (JSON-LD) #wpsc WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.3%2024-08-18Fix
CVE-2024-43306WP-Lister Lite for eBay WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.3%2024-08-18Fix
CVE-2024-43305Custom Layouts Post + Product grids made easy WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.3%2024-08-18Fix
CVE-2024-43304Cryptocurrency Widgets WordPress plugin reflected cross-site scripting (XSS)6.1NVD v3.10.3%2024-08-18Fix
CVE-2024-43303White Label CMS WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.3%2024-08-18Fix
CVE-2024-43294Bold Timeline Lite WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.3%2024-08-18Fix
CVE-2024-43292Envo's Elementor Templates and Widgets for WooCommerce WordPress plugin cross-site scripting (XSS)5.4v3.10.3%2024-08-18Fix
CVE-2024-43291Void Contact Form 7 Widget For Elementor Page Builder WordPress plugin cross-site scripting (XSS)4.8v3.10.3%2024-08-18Fix
CVE-2024-43288wpForo Forum WordPress plugin insecure direct object references (IDOR)8.1v3.10.3%2024-08-18Fix
CVE-2024-43286Squirrly SEO WordPress plugin SQL injection8.8v3.10.5%2024-08-18Fix
CVE-2024-43284WP Travel Gutenberg Blocks WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.3%2024-08-18Fix
CVE-2024-43282Tutor LMS WordPress plugin SQL injection7.2v3.10.4%2024-08-18Fix
CVE-2024-43279Newsletters WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.3%2024-08-18Fix
CVE-2024-43278Meta Field Block WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.3%2024-08-18Fix
CVE-2024-43276Child Theme Creator by Orbisius WordPress plugin cross-site scripting (XSS)6.1NVD v3.10.3%2024-08-18Fix
CVE-2024-43267Mega Addons For Elementor WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.3%2024-08-18
CVE-2024-43266WP Job Portal WordPress plugin insecure direct object references (IDOR)8.8v3.10.4%2024-08-18Fix
CVE-2024-43263Visual Composer Starter WordPress theme cross-site scripting (XSS)6.5CNA v3.10.3%2024-08-18Fix
CVE-2024-43262Busiprof WordPress theme cross-site scripting (XSS)6.5CNA v3.10.3%2024-08-18
CVE-2024-43246WHMpress WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.3%2024-08-18
CVE-2024-43244WordPress houzez Theme By FaveThemes cross-site scripting (XSS)7.1CNA v3.10.3%2024-08-18Fix
CVE-2024-43241Indeed Ultimate Membership Pro WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.3%2024-08-18Fix
CVE-2024-43239Masteriyo LMS WordPress plugin insecure direct object reference (IDOR)8.1v3.10.3%2024-08-18Fix
CVE-2024-43238weMail WordPress plugin cross-site scripting (XSS)6.1NVD v3.10.3%2024-08-18Fix
CVE-2024-43207Unite Gallery Lite WordPress plugin SQL injection8.5CNA v3.10.4%2024-08-18
CVE-2024-43145GeoDirectory WordPress plugin SQL injection8.8v3.10.4%2024-08-18Fix
CVE-2024-39666WooCommerce WordPress plugin cross-site scripting (XSS)5.9CNA v3.10.4%2024-08-18Fix
CVE-2024-35686Sensei LMS WordPress plugin broken access control5.3CNA v3.10.6%2024-08-18Fix
CVE-2024-7917DouPHP Favicon system.php unrestricted upload7.2v3.10.6%2024-08-18
CVE-2024-7916nafisulbari Insurance Management System add nominee page cross-site scripting5.4v3.10.4%2024-08-18
CVE-2024-7914SourceCodester Yoga Class Registration System SystemSettings.php cross-site scripting5.4v3.10.4%2024-08-18
CVE-2024-7913itsourcecode Billing System addclient1.php SQL injection9.8v3.10.6%2024-08-18
CVE-2024-7912CodeAstro Online Railway Reservation System assets exposure of information through directory listing5.3v3.10.8%2024-08-18
CVE-2024-7911SourceCodester Simple Online Bidding System index.php file inclusion9.8v3.10.7%2024-08-18
CVE-2024-7910CodeAstro Online Railway Reservation System profile photo upload handler unrestricted file upload7.2v3.10.6%2024-08-18
CVE-2024-7909TOTOLINK EX1200L cstecgi.cgi setLanguageCfg stack-based overflow9.8v3.11.5%2024-08-18
CVE-2024-7908TOTOLINK EX1200L cstecgi.cgi setDefResponse stack-based overflow9.8v3.11.5%2024-08-18
CVE-2024-7907TOTOLINK X6000R cstecgi.cgi setSyslogCfg command injection9.8v3.16.2%2024-08-18
CVE-2024-7906DedeBIZ Attachment settings select_images_post.php get_mime_type unrestricted upload8.8v3.10.5%2024-08-18
CVE-2024-7905DedeBIZ archives_do.php AdminUpload unrestricted upload7.2v3.10.7%2024-08-18
CVE-2024-7904DedeBIZ file extension file_manage_control.php unrestricted upload8.8v3.10.7%2024-08-18
CVE-2024-7903DedeBIZ file extension media_add.php unrestricted upload8.8v3.10.7%2024-08-18
CVE-2024-6221Improper access control in corydolphin/Flask-cors7.5v3.10.7%2024-08-18Fix
CVE-2024-43860Linux kernel i.MX remoteproc driver null pointer dereference5.5v3.10.2%2024-08-17Fix
CVE-2024-43859Linux kernel f2fs file system null pointer dereference5.5v3.10.2%2024-08-17Fix
CVE-2024-43858Linux kernel jfs improper array index validation7.8CNA v3.10.2%2024-08-17Fix
CVE-2024-43857Linux kernel f2fs zoned storage null pointer dereference5.5v3.10.2%2024-08-17Fix
CVE-2024-43856Linux kernel DMA coherent memory allocator vulnerability7.8CNA v3.10.4%2024-08-17Fix
CVE-2024-43855Linux kernel md deadlock5.5v3.10.2%2024-08-17Fix
CVE-2024-43854Linux kernel block layer integrity metadata information disclosure5.5v3.10.2%2024-08-17Fix
CVE-2024-43853Linux kernel cgroup cpuset proc interface use-after-free7.0CNA v3.10.2%2024-08-17Fix
CVE-2024-43852Linux kernel hwmon off-by-one error7.8v3.10.2%2024-08-17Fix
CVE-2024-43851In the Linux kernel, the following vulnerability has been resolved: soc: xilinx: rename cpu_number1 to dummy_cpu_number The per cpu variable cpu_number1 is passed to xlnx_event_handler as argument "dev_id", but it is not used in this function. So drop the initialization of this variable and rename5.5v3.10.2%2024-08-17Fix
CVE-2024-43850In the Linux kernel, the following vulnerability has been resolved: soc: qcom: icc-bwmon: Fix refcount imbalance seen during bwmon_remove The following warning is seen during bwmon_remove due to refcount imbalance, fix this by releasing the OPPs after use. Logs: WARNING: at drivers/opp/core.c:1645.5v3.10.2%2024-08-17Fix
CVE-2024-43849Linux kernel pdr improper locking5.5v3.10.2%2024-08-17Fix
CVE-2024-43848Linux kernel mac80211 TTLM teardown vulnerability8.8CNA v3.10.3%2024-08-17Fix
CVE-2024-43847Linux kernel ath12k Wi-Fi driver vulnerability8.8CNA v3.10.8%2024-08-17Fix
CVE-2024-43846Linux kernel objagg object aggregation vulnerability7.8CNA v3.10.2%2024-08-17Fix
CVE-2024-43845Linux kernel UDF rename vulnerability7.8CNA v3.10.2%2024-08-17Fix
CVE-2024-43844Linux kernel rtw89 Wi-Fi driver GTK offload vulnerability5.5v3.10.2%2024-08-17Fix
CVE-2024-43843Linux kernel incorrect buffer size calculation7.8v3.10.2%2024-08-17Fix
CVE-2024-43842Linux kernel rtw89 Wi-Fi driver vulnerability7.8v3.10.2%2024-08-17Fix
CVE-2024-43841Linux kernel virt_wifi connection handling vulnerability3.3v3.10.2%2024-08-17Fix
CVE-2024-43840In the Linux kernel, the following vulnerability has been resolved: bpf, arm64: Fix trampoline for BPF_TRAMP_F_CALL_ORIG When BPF_TRAMP_F_CALL_ORIG is set, the trampoline calls __bpf_tramp_enter() and __bpf_tramp_exit() functions, passing them the struct bpf_tramp_image *im pointer as an argument7.8CNA v3.10.2%2024-08-17Fix
CVE-2024-43839Linux kernel bna Ethernet driver out-of-bounds write7.8v3.10.3%2024-08-17Fix
CVE-2024-43838Linux kernel BPF jump offset validation integer overflow5.5v3.10.2%2024-08-17Fix
CVE-2024-43837Linux kernel BPF program type resolution null pointer dereference5.5v3.10.2%2024-08-17Fix
CVE-2024-43836Linux kernel PSE-PD ethtool support null pointer dereference5.5v3.10.2%2024-08-17Fix
CVE-2024-43835Linux kernel virtio_net driver improper locking5.5v3.10.3%2024-08-17Fix
CVE-2024-43834Linux kernel XDP page pool improper locking5.5NVD v3.10.2%2024-08-17Fix
CVE-2024-43833Linux kernel V4L2 async ancillary links null pointer dereference5.5v3.10.2%2024-08-17Fix
CVE-2024-43832In the Linux kernel, the following vulnerability has been resolved: s390/uv: Don't call folio_wait_writeback() without a folio reference folio_wait_writeback() requires that no spinlocks are held and that a folio reference is held, as documented. After we dropped the PTL, the folio could get freed7.8CNA v3.10.2%2024-08-17Fix
CVE-2024-43831Linux kernel MediaTek video decoder driver vulnerability5.5v3.10.2%2024-08-17Fix
CVE-2024-43830Linux kernel trigger use-after-free7.8CNA v3.10.3%2024-08-17Fix
CVE-2024-43829Linux kernel QXL display driver null pointer dereference5.5v3.10.2%2024-08-17Fix
CVE-2024-43828Linux kernel ext4 fast_commit replay infinite loop5.5NVD v3.10.2%2024-08-17Fix
CVE-2024-43827Linux kernel AMD display driver null pointer dereference5.5v3.10.2%2024-08-17Fix
CVE-2024-43826Linux kernel NFS trace events null pointer dereference5.5v3.10.2%2024-08-17Fix
CVE-2024-43825Linux kernel IIO gain-time-scale table builder out-of-bounds write7.8CNA v3.10.2%2024-08-17Fix
CVE-2024-43824Linux kernel PCI endpoint test driver null pointer dereference5.5NVD v3.10.2%2024-08-17Fix
CVE-2024-43823Linux kernel Keystone PCI driver null pointer dereference5.5v3.10.2%2024-08-17Fix
CVE-2024-43822Linux kernel PCM6240 audio codec driver null pointer dereference5.5v3.10.2%2024-08-17Fix
CVE-2024-43821Linux kernel lpfc SCSI driver null pointer dereference5.5v3.10.2%2024-08-17Fix
CVE-2024-43820Linux kernel dm-raid driver vulnerability5.5v3.10.2%2024-08-17Fix
CVE-2024-43819Linux kernel KVM s390 ucontrol VM handling null pointer dereference5.5NVD v3.10.2%2024-08-17Fix
CVE-2024-43818Linux kernel AMD ASoC audio driver null pointer dereference5.5v3.10.2%2024-08-17Fix
CVE-2024-43817Linux kernel net crash5.5v3.10.2%2024-08-17Fix
CVE-2024-43816Linux kernel lpfc crash7.8CNA v3.10.2%2024-08-17Fix
CVE-2024-43815Linux kernel mxs-dcp crypto driver information disclosure7.1v3.10.2%2024-08-17Fix
CVE-2024-42322Linux kernel IPVS service registration vulnerability5.5v3.10.2%2024-08-17Fix
CVE-2024-42321Linux kernel flow dissector vulnerability5.5v3.10.2%2024-08-17Fix
CVE-2024-42320Linux kernel s390 DASD copy pair store null pointer dereference5.5v3.10.2%2024-08-17Fix
CVE-2024-42319In the Linux kernel, the following vulnerability has been resolved: mailbox: mtk-cmdq: Move devm_mbox_controller_register() after devm_pm_runtime_enable() When mtk-cmdq unbinds, a WARN_ON message with condition pm_runtime_get_sync() < 0 occurs. According to the call tracei below: cmdq_mbox_shutd5.5v3.10.2%2024-08-17Fix
CVE-2024-42318Linux kernel Landlock security module vulnerability8.8CNA v3.10.3%2024-08-17Fix
CVE-2024-42317Linux kernel transparent huge page cache vulnerability5.5NVD v3.10.2%2024-08-17Fix
CVE-2024-42316Linux kernel MGLRU memory reclaim divide by zero5.5v3.10.2%2024-08-17Fix
CVE-2024-42315Linux kernel exFAT filesystem deadlock5.5v3.10.2%2024-08-17Fix
CVE-2024-42314Linux kernel Btrfs compressed read path use-after-free7.8CNA v3.10.2%2024-08-17Fix
CVE-2024-42313Linux kernel Venus video decoder driver use-after-free7.8CNA v3.10.2%2024-08-17Fix
CVE-2024-42312Linux kernel sysctl interface vulnerability5.5NVD v3.10.2%2024-08-17Fix
CVE-2024-42311Linux kernel HFS filesystem vulnerability7.8CNA v3.10.3%2024-08-17Fix
CVE-2024-42310Linux kernel gma500 LVDS display driver null pointer dereference5.5v3.10.2%2024-08-17Fix
CVE-2024-42309Linux kernel gma500 LVDS display driver null pointer dereference5.5v3.10.2%2024-08-17Fix
CVE-2024-42307Linux kernel CIFS client null pointer dereference5.5v3.10.2%2024-08-17Fix
CVE-2024-42306Linux kernel UDF block bitmap allocation vulnerability7.8CNA v3.10.2%2024-08-17Fix
CVE-2024-42305Linux kernel ext4 indexed directory conversion out-of-bounds read5.5NVD v3.10.2%2024-08-17Fix
CVE-2024-42304Linux kernel ext4 directory block handling vulnerability7.8CNA v3.10.2%2024-08-17Fix
CVE-2024-42303Linux kernel imx-pxp media driver probe null pointer dereference5.5v3.10.2%2024-08-17Fix
CVE-2024-42302Linux kernel PCI/DPC use-after-free7.8NVD v3.10.2%2024-08-17Fix
CVE-2024-42301Linux kernel parport driver improper array index validation7.8CNA v3.10.2%2024-08-17Fix
CVE-2024-42300Linux kernel erofs race condition7.8CNA v3.10.1%2024-08-17Fix
CVE-2024-42299Linux kernel NTFS3 journal log page size handling vulnerability7.8CNA v3.10.2%2024-08-17Fix
CVE-2024-42298Linux kernel fsl_qmc_audio driver null pointer dereference5.5v3.10.2%2024-08-17Fix
CVE-2024-42297Linux kernel F2FS inode eviction on read-only filesystem vulnerability7.8CNA v3.10.2%2024-08-17Fix
CVE-2024-42296Linux kernel F2FS inline inode conversion denial of service7.8CNA v3.10.2%2024-08-17Fix
CVE-2024-42295In the Linux kernel, the following vulnerability has been resolved: nilfs2: handle inconsistent state in nilfs_btnode_create_block() Syzbot reported that a buffer state inconsistency was detected in nilfs_btnode_create_block(), triggering a kernel bug. It is not appropriate to treat this inconsis5.5v3.10.2%2024-08-17Fix
CVE-2024-42294Linux kernel block deadlock5.5v3.10.2%2024-08-17Fix
CVE-2024-42293Linux kernel arm64 fast GUP page table walk out-of-bounds read7.8CNA v3.10.2%2024-08-17Fix
CVE-2024-42292Linux kernel kobject_uevent modalias environment out-of-bounds read7.1NVD v3.10.2%2024-08-17Fix
CVE-2024-42291Linux kernel ice driver flow director filters vulnerability5.5v3.10.2%2024-08-17Fix
CVE-2024-42290Linux kernel imx-irqsteer power management improper locking5.5v3.10.2%2024-08-17Fix
CVE-2024-42289Linux kernel qla2xxx vport deletion null pointer dereference5.5v3.10.2%2024-08-17Fix
CVE-2024-42288Linux kernel qla2xxx memory corruption7.8CNA v3.10.2%2024-08-17Fix
CVE-2024-42287Linux kernel qla2xxx command completion null pointer dereference8.8CNA v3.10.3%2024-08-17Fix
CVE-2024-42286Linux kernel qla2xxx NVMe local port validation null pointer dereference7.5CNA v3.10.9%2024-08-17Fix
CVE-2024-42285Linux kernel RDMA/iwcm use-after-free9.8CNA v3.10.9%2024-08-17Fix
CVE-2024-42284Linux kernel TIPC UDP media address handling improper check for exceptional conditions9.1CNA v3.10.9%2024-08-17Fix
CVE-2024-42283Linux kernel nexthop netlink dump information disclosure5.5NVD v3.10.2%2024-08-17Fix
CVE-2024-42282Linux kernel MediaTek Ethernet driver dummy net_device null pointer dereference5.5NVD v3.10.2%2024-08-17Fix
CVE-2024-42281Linux kernel BPF GSO segmentation denial of service5.5NVD v3.10.2%2024-08-17Fix
CVE-2024-42280Linux kernel mISDN use-after-free7.8CNA v3.10.2%2024-08-17Fix
CVE-2024-42279In the Linux kernel, the following vulnerability has been resolved: spi: microchip-core: ensure TX and RX FIFOs are empty at start of a transfer While transmitting with rx_len == 0, the RX FIFO is not going to be emptied in the interrupt handler. A subsequent transfer could then read crap from the7.8CNA v3.10.2%2024-08-17Fix
CVE-2024-42278Linux kernel TAS2781 null pointer dereference5.5v3.10.2%2024-08-17Fix
CVE-2024-42277Linux kernel sprd null pointer dereference5.5v3.10.2%2024-08-17Fix
CVE-2024-42276Linux kernel NVMe PCI driver data mapping vulnerability7.8CNA v3.10.2%2024-08-17Fix
CVE-2024-42275Linux kernel DRM client buffer mapping vulnerability7.8CNA v3.10.2%2024-08-17Fix
CVE-2024-42274Linux kernel FireWire ALSA PCM stream pointer deadlock5.5v3.10.2%2024-08-17Fix
CVE-2024-42273Linux kernel f2fs compression segment allocation denial of service7.8CNA v3.10.2%2024-08-17Fix
CVE-2024-42272Linux kernel act_ct uninitialized resource use7.8CNA v3.10.2%2024-08-17Fix
CVE-2024-42271Linux kernel IUCV socket layer use-after-free7.8CNA v3.10.2%2024-08-17Fix
CVE-2024-42270Linux kernel iptables NAT table initialization null pointer dereference5.5v3.10.2%2024-08-17Fix
CVE-2024-42269Linux kernel ip6tables NAT table initialization null pointer dereference5.5v3.10.2%2024-08-17Fix
CVE-2024-42268Linux kernel mlx5 driver sync reset reload improper locking5.5v3.10.2%2024-08-17Fix
CVE-2024-42267Linux kernel RISC-V page fault handler vulnerability5.5v3.10.2%2024-08-17Fix
CVE-2024-42266Linux kernel Btrfs inline file write path null pointer dereference7.8CNA v3.10.2%2024-08-17Fix
CVE-2024-42265In the Linux kernel, the following vulnerability has been resolved: protect the fetch of ->fd[fd] in do_dup2() from mispredictions both callers have verified that fd is not greater than ->max_fds; however, misprediction might end up with tofree = fdt->fd[fd]; being speculatively executed.5.5NVD v3.10.3%2024-08-17Fix
CVE-2024-42264Linux kernel V3D GPU driver performance query extension out-of-bounds read7.8CNA v3.10.2%2024-08-17Fix
CVE-2024-42263Linux kernel V3D GPU driver timestamp extension memory leak5.5v3.10.2%2024-08-17Fix
CVE-2024-42262Linux kernel V3D GPU driver performance extension memory leak5.5v3.10.2%2024-08-17Fix
CVE-2024-42261Linux kernel V3D GPU driver timestamp extension vulnerability5.5v3.10.2%2024-08-17Fix
CVE-2024-42260Linux kernel V3D GPU driver performance extension vulnerability5.5v3.10.2%2024-08-17Fix
CVE-2024-7902Public Knowledge Project Open Journal Systems signOut function open redirect6.1v3.10.4%2024-08-17
CVE-2024-7901Scada-LTS Message Scada cross-site scripting5.4v3.10.4%2024-08-17
CVE-2024-7900xiaohe4966 TpMeCMS Basic Configuration config cross-site scripting4.8v3.10.5%2024-08-17
CVE-2024-7899InnoCMS Backend edit code injection7.2v3.10.7%2024-08-17
CVE-2024-7898Tosei Online Store Management System ネット店舗管理システム Backend default credentials9.8v3.10.6%2024-08-17
CVE-2024-7897Tosei Online Store Management System ネット店舗管理システム tosei_kikai.php command injection8.8v3.12.6%2024-08-17
CVE-2024-7896Tosei Online Store Management System ネット店舗管理システム p1_ftpserver.php command injection8.8v3.12.3%2024-08-17
CVE-2024-7887LimeSurvey file upload index.php denial of service4.9v3.10.9%2024-08-17
CVE-2024-7703ARMember WordPress plugin stored cross-site scripting6.4CNA v3.11.1%2024-08-17Exploit codeFix
CVE-2024-6500InPost for WooCommerce plugin and InPost PL WordPress plugin unauthorized access10.0CNA v3.11.0%2024-08-17Fix
CVE-2024-6459News Element Elementor Blog Magazine WordPress plugin unauthenticated LFI9.8CISA ADP v3.11.0%2024-08-17Fix
CVE-2024-43810JetBrains TeamCity cross-site scripting4.6CNA v3.10.3%2024-08-16Fix
CVE-2024-43809JetBrains TeamCity cross-site scripting3.5CNA v3.10.3%2024-08-16Fix
CVE-2024-43808JetBrains TeamCity cross-site scripting3.7CNA v3.10.2%2024-08-16Fix
CVE-2024-43807JetBrains TeamCity cross-site scripting4.6CNA v3.10.3%2024-08-16Fix
CVE-2024-43472Microsoft Edge (Chromium-based) elevation of privilege5.8CNA v3.10.4%2024-08-16Fix
CVE-2024-43395MCJack123 craftos2 CraftOS-PC 2's improperly sanitizied paths cause filesystem escape (Windows)8.2CNA v3.10.4%2024-08-16Fix
CVE-2024-43381reNgine vulnerable to stored cross-site scripting (XSS) via DNS Record Poisoning5.0CNA v3.10.4%2024-08-16
CVE-2024-43378calamares-nixos-extensions LUKS keyfile exposure regression on legacy BIOS systems7.8CNA v3.10.1%2024-08-16Fix
CVE-2024-43374Vim heap-use-after-free in src/arglist.c:2074.5CNA v3.10.4%2024-08-16Fix
CVE-2024-43370gettext.js vulnerable to cross-site scripting (XSS)7.2CNA v3.10.4%2024-08-16Fix
CVE-2024-43369Persistent cross-site scripting in Ibexa RichText Field Type7.2CNA v3.10.4%2024-08-16Fix
CVE-2024-43042pluck-cms Pluck missing brute-force protection9.8v3.10.6%2024-08-16
CVE-2024-43011zzcms admin/del.php file at line arbitrary file deletion4.9CISA ADP v3.10.7%2024-08-16
CVE-2024-43009zzcms user/login.php at line reflected cross-site scripting4.7CISA ADP v3.10.4%2024-08-16
CVE-2024-43006zzcms A stored cross-site scripting5.4CISA ADP v3.10.2%2024-08-16
CVE-2024-43005zzcms component dl_liuyan_save.php reflected cross-site scripting4.7CISA ADP v3.10.3%2024-08-16
CVE-2024-42995Vtiger CRM improper privilege management8.3CISA ADP v3.10.4%2024-08-16
CVE-2024-42994Vtiger CRM SQL injection7.2CISA ADP v3.10.5%2024-08-16
CVE-2024-42850Silverpeas vulnerable to password complexity rule bypass9.8CISA ADP v3.11.4%2024-08-16Exploit code
CVE-2024-42849Silverpeas denial of service6.5CISA ADP v3.11.2%2024-08-16Exploit code
CVE-2024-42758DokuWiki indexmenu plugin stored cross-site scripting5.4CISA ADP v3.10.8%2024-08-16Exploit code
CVE-2024-42639H3C GR-1100-P hard-coded password9.8CISA ADP v3.10.6%2024-08-16
CVE-2024-42638H3C Magic B1ST hard-coded credentials9.8v3.10.6%2024-08-16
CVE-2024-42637H3C R3010 hard-coded credentials9.8CISA ADP v3.10.6%2024-08-16
CVE-2024-42634Tenda AC9 formWriteFacMac of the httpd binary command injection9.8CISA ADP v3.12.2%2024-08-16
CVE-2024-42486Cilium vulnerable to information leakage via incorrect ReferenceGrant update logic in Gateway API5.4CNA v3.10.6%2024-08-16Fix
CVE-2024-42466upKeeper Solutions upKeeper Manager lack of resources and rate limiting login9.5CNA v4.00.7%2024-08-16Fix
CVE-2024-42465upKeeper Solutions upKeeper Manager lack of resources and rate limiting two factor authentication9.0CNA v4.00.5%2024-08-16Fix
CVE-2024-42464upKeeper Solutions upKeeper Manager leak of user information7.6CNA v4.00.3%2024-08-16Fix
CVE-2024-42463upKeeper Solutions upKeeper Manager leak of organizations messages8.6CNA v4.00.4%2024-08-16Fix
CVE-2024-42462upKeeper Solutions upKeeper Manager bypass multifactor authentication10.0CNA v4.00.5%2024-08-16Fix
CVE-2024-25837octobercms october A stored cross-site scripting5.4CISA ADP v3.10.2%2024-08-16
CVE-2024-25008Ericsson RAN Compute and Site Controller 6610 improper input validation6.8CNA v3.10.3%2024-08-16Fix
CVE-2024-7886Scooter Software Beyond Compare 7zxa.dll uncontrolled search path8.5CNA v4.00.2%2024-08-16
CVE-2024-7853SourceCodester Yoga Class Registration System SQL injection8.8v3.10.6%2024-08-16
CVE-2024-7852SourceCodester Yoga Class Registration System view_inquiry.php cross-site scripting5.4v3.10.5%2024-08-16
CVE-2024-7851SourceCodester Yoga Class Registration System Add User Users.php improper authorization9.8v3.10.6%2024-08-16
CVE-2024-7849D-Link DNS-1550-04 photocenter_mgr.cgi cgi_create_album buffer overflow8.7CNA v4.01.2%2024-08-16Emerging Threats
CVE-2024-7845SourceCodester Online Graduate Tracer System fetch_it.php SQL injection7.5v3.10.5%2024-08-16
CVE-2024-7646Kubernetes ingress-nginx improper input validation8.8CNA v3.127.0%2024-08-16Exploit codeFix
CVE-2024-7630Relevanssi (Free) and (Premium) unauthenticated information exposure7.5v3.10.5%2024-08-16Fix
CVE-2024-7501Download Plugins and Themes from Dashboard WordPress plugin cross-site request forgery4.2CNA v3.10.2%2024-08-16Fix
CVE-2024-7422Theme My Login WordPress plugin cross-site request forgery to settings update4.3CNA v3.10.2%2024-08-16Fix
CVE-2024-7301WordPress File Upload plugin unauthenticated stored cross-site scripting via SVG file upload6.1NVD v3.10.5%2024-08-16Fix
CVE-2024-7147JetBlocks WordPress plugin authenticated (Contributor+) stored cross-site scripting6.4CNA v3.10.3%2024-08-16Fix
CVE-2024-7146JetTabs WordPress plugin authenticated (Contributor+) arbitrary local file inclusion8.8CNA v3.11.0%2024-08-16Fix
CVE-2024-7145JetElements WordPress plugin authenticated (Contributor+) arbitrary local file inclusion8.8CNA v3.10.9%2024-08-16Fix
CVE-2024-7144JetElements WordPress plugin authenticated (Contributor+) stored cross-site scripting5.4v3.10.3%2024-08-16Fix
CVE-2024-7136JetSearch WordPress plugin authenticated (Contributor+) stored cross-site scripting6.4CNA v3.10.3%2024-08-16Fix
CVE-2024-6460Grow by Tradedoubler WordPress plugin unauthenticated LFI9.8CISA ADP v3.14.8%2024-08-16NucleiExploit codeFix
CVE-2024-6098PTC Kepware ThingWorx Kepware Server allocation of resources without limits or throttling5.9CNA v4.00.4%2024-08-16
CVE-2024-6004Lenovo Printers resource exhaustion6.5CNA v3.10.3%2024-08-16
CVE-2024-5210Lenovo Printers resource exhaustion6.5CNA v3.10.3%2024-08-16
CVE-2024-5209Lenovo Printers resource exhaustion6.5CNA v3.10.3%2024-08-16
CVE-2024-4782Lenovo Printers resource exhaustion6.5CNA v3.10.3%2024-08-16
CVE-2024-4781Lenovo Printers resource exhaustion6.5CNA v3.10.3%2024-08-16
CVE-2024-4763Lenovo Display Control Center incorrect default permissions7.8CNA v3.10.2%2024-08-16Fix
CVE-2024-2175Lenovo Display Control Center incorrect default permissions7.8CNA v3.10.2%2024-08-16Fix
CVE-2024-43373j4k0xb webcrack bundle unpacking path traversal7.7CNA v3.10.4%2024-08-15Fix
CVE-2024-43367Boa has an uncaught exception when transitioning the state of `AsyncGenerator` objects7.5CNA v3.10.6%2024-08-15Fix
CVE-2024-43366Zkvyper ignored loop range bounds7.5CNA v3.10.5%2024-08-15Fix
CVE-2024-43357tc39 ecma262 uncaught exception8.6CNA v3.10.7%2024-08-15Fix
CVE-2024-42987Tenda FH1206 out-of-bounds write7.5v3.11.3%2024-08-15
CVE-2024-42986Tenda FH1206 out-of-bounds write7.5v3.10.6%2024-08-15
CVE-2024-42985Tenda FH1206 stack-based buffer overflow7.5v3.10.6%2024-08-15
CVE-2024-42984Tenda FH1206 stack-based buffer overflow7.5v3.10.6%2024-08-15
CVE-2024-42983Tenda FH1206 stack-based buffer overflow7.5v3.10.6%2024-08-15
CVE-2024-42982Tenda FH1206 stack-based buffer overflow7.5v3.10.6%2024-08-15
CVE-2024-42981Tenda FH1206 out-of-bounds write7.5v3.10.6%2024-08-15
CVE-2024-42980Tenda FH1206 out-of-bounds write7.5v3.10.6%2024-08-15
CVE-2024-42979Tenda FH1206 stack-based buffer overflow7.5v3.10.6%2024-08-15
CVE-2024-42978Tenda FH1206 OS command injection9.8v3.11.2%2024-08-15
CVE-2024-42977Tenda FH1206 out-of-bounds write7.5v3.10.6%2024-08-15
CVE-2024-42976Tenda FH1206 stack-based buffer overflow7.5v3.10.6%2024-08-15
CVE-2024-42974Tenda FH1206 stack-based buffer overflow7.5v3.10.6%2024-08-15
CVE-2024-42973Tenda FH1206 stack-based buffer overflow7.5v3.10.6%2024-08-15
CVE-2024-42969Tenda FH1206 out-of-bounds write7.5v3.10.6%2024-08-15
CVE-2024-42968Tenda FH1206 stack-based buffer overflow7.5v3.10.6%2024-08-15
CVE-2024-42967TOTOLINK LR350 improper access control9.8v3.10.6%2024-08-15
CVE-2024-42966TOTOLINK N350RT incorrect authorization9.8v3.10.6%2024-08-15
CVE-2024-42955Tenda FH1201 stack-based buffer overflow7.5v3.10.6%2024-08-15
CVE-2024-42954Tendacn FH1201 stack-based buffer overflow7.5v3.10.6%2024-08-15
CVE-2024-42953Tendacn FH1201 stack-based buffer overflow7.5v3.10.6%2024-08-15
CVE-2024-42952Tenda FH1201 out-of-bounds write7.5v3.10.6%2024-08-15
CVE-2024-42951Tenda FH1201 out-of-bounds write7.5v3.10.6%2024-08-15
CVE-2024-42950Tenda FH1201 out-of-bounds write7.5v3.10.6%2024-08-15
CVE-2024-42949Tendacn FH1201 stack-based buffer overflow7.5v3.10.6%2024-08-15
CVE-2024-42948Tenda FH1201 out-of-bounds write7.5v3.110.7%2024-08-15
CVE-2024-42947Tenda FH1201 command injection9.8v3.11.0%2024-08-15
CVE-2024-42946Tenda FH1201 stack-based buffer overflow7.5v3.10.7%2024-08-15
CVE-2024-42945Tendacn FH1201 stack-based buffer overflow7.5v3.10.7%2024-08-15
CVE-2024-42944Tenda FH1201 stack-based buffer overflow7.5v3.10.7%2024-08-15
CVE-2024-42943Tenda FH1201 out-of-bounds write7.5v3.10.7%2024-08-15
CVE-2024-42942Tendacn FH1201 stack-based buffer overflow7.5v3.10.7%2024-08-15
CVE-2024-42941Tenda FH1201 stack-based buffer overflow7.5v3.10.7%2024-08-15
CVE-2024-42940Tenda FH1201 stack-based buffer overflow7.5v3.10.7%2024-08-15
CVE-2024-42843Projectworlds Online Examination System SQL injection9.8v3.10.6%2024-08-15
CVE-2024-42757Asus RT-N15U command injection9.8CISA ADP v3.11.3%2024-08-15
CVE-2024-42681Improper preservation of permissions in xxl-job8.8v3.10.9%2024-08-15Fix
CVE-2024-42680Cysoft168 Super Easy Enterprise Management System path traversal5.5v3.10.3%2024-08-15
CVE-2024-42679Cysoft168 Super Easy Enterprise Management System SQL injection7.8v3.10.3%2024-08-15
CVE-2024-42678Cysoft168 Super Easy Enterprise Management System cross-site scripting6.1v3.10.3%2024-08-15
CVE-2024-42677Isellerpal Enterprise Resource Management System insecure storage of sensitive information5.5v3.10.3%2024-08-15
CVE-2024-42676Isellerpal Enterprise Resource Management System Huizhi file upload8.8v3.11.1%2024-08-15
CVE-2024-42488Cilium agent's race condition may lead to policy bypass for Host Firewall policy6.8CNA v3.10.5%2024-08-15Fix
CVE-2024-42487Cilium's Gateway API route matching order contradicts specification4.0CNA v3.10.5%2024-08-15Fix
CVE-2024-42476CORDEA oauth cross-site request forgery6.5CNA v3.10.2%2024-08-15Fix
CVE-2024-42475OAuth library for Nim generateState function insufficient randomness6.5CNA v3.10.3%2024-08-15Fix
CVE-2024-42472Flatpak may allow access to files outside sandbox for certain apps10.0CNA v3.11.3%2024-08-15Fix
CVE-2024-40705IBM InfoSphere Information Server denial of service6.5CNA v3.10.6%2024-08-15Fix
CVE-2024-40704IBM InfoSphere Information Server information disclosure4.9CNA v3.10.6%2024-08-15Fix
CVE-2024-34743Google Android SurfaceFlinger.cpp privilege escalation7.8v3.10.1%2024-08-15Fix
CVE-2024-34742Google Android OwnersData.java denial of service5.5v3.10.1%2024-08-15Fix
CVE-2024-34741Google Android WindowState.java privilege escalation7.8v3.10.2%2024-08-15Exploit codeFix
CVE-2024-34740Google Android BinaryXmlSerializer.java XML injection7.8v3.10.1%2024-08-15Exploit codeFix
CVE-2024-34739Google Android UsbProfileGroupSettingsManager.java privilege escalation7.8v3.10.2%2024-08-15Exploit codeFix
CVE-2024-34738Google Android AppOpsService.java privilege escalation7.8v3.10.1%2024-08-15Fix
CVE-2024-34737Google Android ActivityClientController.java privilege escalation7.8v3.10.1%2024-08-15Fix
CVE-2024-34736Google Android StagefrightRecorder.cpp privilege escalation7.8v3.10.1%2024-08-15Fix
CVE-2024-34734Google Android FooterActionsViewModel.kt privilege escalation7.8v3.10.1%2024-08-15Fix
CVE-2024-34731Google Android TranscodingResourcePolicy.cpp memory corruption7.0v3.10.1%2024-08-15Fix
CVE-2024-34727Google Android sdp_utils.cc out-of-bounds read7.5v3.10.4%2024-08-15Fix
CVE-2024-32231SQL injection in github.com/Stashapp/Stash6.3CISA ADP v3.11.2%2024-08-15NucleiFix
CVE-2024-31905IBM QRadar Network Packet Capture information disclosure5.9CNA v3.10.3%2024-08-15Fix
CVE-2024-31800Gncchome Gncc C2 GNCC's GC2 Indoor Security Camera authentication bypass6.8v3.10.4%2024-08-15
CVE-2024-31799Gncchome Gncc C2 GNCC's GC2 Indoor Security Camera information disclosure4.6v3.10.3%2024-08-15
CVE-2024-31798Gncchome Gncc C2 hard-coded password6.8v3.10.4%2024-08-15
CVE-2024-31333Google Android mmu_common.c arbitrary code execution7.8v3.10.1%2024-08-15Fix
CVE-2024-27731Friendica cross-site scripting6.1CISA ADP v3.10.3%2024-08-15
CVE-2024-27730Friendica insecure permissions9.8CISA ADP v3.10.8%2024-08-15
CVE-2024-27729Friendica cross-site scripting6.1NVD v3.10.4%2024-08-15
CVE-2024-27728Friendica cross-site scripting6.1CISA ADP v3.10.3%2024-08-15
CVE-2024-25633In eLabFTW, if administrators can create users, users can too5.4CNA v3.10.2%2024-08-15Fix
CVE-2024-25024IBM QRadar Suite Software information disclosure5.5CNA v3.10.1%2024-08-15Fix
CVE-2024-23168Xiexe XSOverlay WebSocket API vulnerability9.8CISA ADP v3.10.4%2024-08-15
CVE-2024-22219Terminalfour XML external entity injection6.3CISA ADP v3.10.5%2024-08-15
CVE-2024-22218Terminalfour XML external entity injection8.8CISA ADP v3.10.7%2024-08-15
CVE-2024-22217Terminalfour server-side request forgery6.5v3.10.3%2024-08-15Fix
CVE-2024-7868Uninitialized variable in Xpdf due to invalid JPEG header2.1CNA v4.00.4%2024-08-15Fix
CVE-2024-7867Integer overflow and divide-by-zero in Xpdf due to bogus page box coordinates2.1CNA v4.00.2%2024-08-15Fix
CVE-2024-7866Stack overflow in Xpdf due to object loop in PDF pattern2.1CNA v4.00.2%2024-08-15Fix
CVE-2024-7844SourceCodester Online Graduate Tracer System add_acc.php cross-site scripting5.4v3.10.5%2024-08-15
CVE-2024-7843SourceCodester Online Graduate Tracer System exportcs.php information disclosure7.5v3.11.0%2024-08-15
CVE-2024-7842SourceCodester Online Graduate Tracer System export_it.php information disclosure7.5v3.11.0%2024-08-15
CVE-2024-7841SourceCodester Clinics Patient Management System check_user_name.php SQL injection7.5v3.10.5%2024-08-15
CVE-2024-7839itsourcecode Billing System addbill.php SQL injection9.8v3.10.6%2024-08-15
CVE-2024-7838itsourcecode Online Food Ordering System addcategory.php SQL injection9.8v3.10.6%2024-08-15
CVE-2024-7833D-Link DI-8100 upgrade_filter.asp upgrade_filter_asp command injection9.8v3.14.7%2024-08-15
CVE-2024-7832D-Link DNS-1550-04 photocenter_mgr.cgi cgi_get_fullscreen_photos buffer overflow8.8v3.12.1%2024-08-15Emerging Threats
CVE-2024-7831D-Link DNS-1550-04 photocenter_mgr.cgi cgi_get_cooliris buffer overflow9.8v3.11.8%2024-08-15Emerging Threats
CVE-2024-7830D-Link DNS-1550-04 photocenter_mgr.cgi cgi_move_photo buffer overflow9.8v3.11.8%2024-08-15Emerging Threats
CVE-2024-7829D-Link DNS-1550-04 photocenter_mgr.cgi cgi_del_photo buffer overflow9.8v3.11.8%2024-08-15Emerging Threats
CVE-2024-7828D-Link DNS-1550-04 photocenter_mgr.cgi cgi_set_cover buffer overflow9.8v3.116.2%2024-08-15Emerging Threats
CVE-2024-7815CodeAstro Online Railway Reservation System update employee page cross-site scripting4.8v3.11.2%2024-08-15Exploit code
CVE-2024-7814CodeAstro Online Railway Reservation System add employee page cross-site scripting4.8v3.10.4%2024-08-15
CVE-2024-7813SourceCodester Prison Management System Profile Image insufficiently protected credentials7.5v3.10.8%2024-08-15
CVE-2024-7812SourceCodester Best House Rental Management System POST parameter ajax.php cross-site scripting5.4v3.10.4%2024-08-15
CVE-2024-7811SourceCodester Daily Expenses Monitoring App delete-expense.php SQL injection9.8v3.10.6%2024-08-15
CVE-2024-7810SourceCodester Online Graduate Tracer System view_itprofile.php SQL injection8.8v3.10.6%2024-08-15
CVE-2024-7809SourceCodester Online Graduate Tracer System nbproject directory directory listing5.3v3.10.8%2024-08-15
CVE-2024-7808code-projects Job Portal logindbc.php SQL injection9.8v3.11.2%2024-08-15Exploit code
CVE-2024-7800SourceCodester Simple Online Bidding System ajax.php SQL injection7.5v3.10.4%2024-08-15
CVE-2024-7799SourceCodester Simple Online Bidding System users.php improper authorization7.3v3.10.6%2024-08-15
CVE-2024-7798SourceCodester Simple Online Bidding System ajax.php SQL injection9.8v3.10.7%2024-08-15
CVE-2024-7797SourceCodester Simple Online Bidding System ajax.php SQL injection9.8v3.10.7%2024-08-15
CVE-2024-7628MStore API WordPress plugin authentication bypass8.1CNA v3.10.7%2024-08-15Fix
CVE-2024-7625Nomad vulnerable to Allocation Directory Escape on Non-Existing File Paths through Archive Unpacking5.8CNA v3.10.3%2024-08-15Fix
CVE-2024-7624Zephyr Project Manager WordPress plugin authenticated (Subscriber+) limited privilege escalation8.1CNA v3.10.4%2024-08-15Fix
CVE-2024-7420Insert PHP Code Snippet WordPress plugin cross-site request forgery6.5v3.10.2%2024-08-15Fix
CVE-2024-7411Newsletters WordPress plugin unauthenticated full path disclosure5.3CNA v3.10.4%2024-08-15Fix
CVE-2024-7263Arbitrary code execution in WPS Office7.8NVD v3.10.4%2024-08-15Fix
CVE-2024-7262Kingsoft WPS Office path traversal7.8NVD v3.12.9%2024-08-15KEVEmerging ThreatsFix
CVE-2024-7064ElementsKit Pro WordPress plugin authenticated (Contributor+) stored cross-site scripting5.4v3.10.3%2024-08-15Fix
CVE-2024-7063ElementsKit Pro WordPress plugin authenticated (Contributor+) sensitive information exposure4.3CNA v3.10.4%2024-08-15Fix
CVE-2024-6534Directus Insecure object reference via path presets4.3v3.10.3%2024-08-15Fix
CVE-2024-6533Directus DOM-based cross-site scripting (XSS) via layout_options5.4v3.10.4%2024-08-15Fix
CVE-2024-6456SQL injection vulnerability in AVEVA Historian Server8.5CNA v4.00.4%2024-08-15Fix
CVE-2024-6347Unauthorized access to ECU functionality6.5v3.10.3%2024-08-15
CVE-2024-43368Trix has a cross-site scripting (XSS) vulnerability on copy and paste6.5CNA v3.10.5%2024-08-14Fix
CVE-2024-42441Zoom Communications Zoom Workplace Desktop App for macOS installer incorrect privilege assignment6.2CNA v3.10.2%2024-08-14Fix
CVE-2024-42440Zoom Communications Zoom Workplace Desktop App for macOS installer improper privilege management6.2CNA v3.10.2%2024-08-14Fix
CVE-2024-42439Zoom Workplace Desktop App for macOS and Zoom Meeting SDK for macOS untrusted search path6.5CNA v3.10.2%2024-08-14Fix
CVE-2024-42438Zoom Workplace Apps, SDKs, Rooms Clients, and Rooms Controllers buffer overflow6.5CNA v3.10.6%2024-08-14Fix
CVE-2024-42437Zoom Workplace Apps, SDKs, Rooms Clients, and Rooms Controllers buffer overflow6.5CNA v3.10.6%2024-08-14Fix
CVE-2024-42436Zoom Workplace Apps, SDKs, Rooms Clients, and Rooms Controllers buffer overflow6.5CNA v3.10.6%2024-08-14Fix
CVE-2024-42435Zoom Workplace Apps, SDKs, Rooms Clients, and Rooms Controllers sensitive information exposure4.9CNA v3.10.5%2024-08-14Fix
CVE-2024-42434Zoom Workplace Apps, SDKs, Rooms Clients, and Rooms Controllers missing authorization4.9CNA v3.10.5%2024-08-14Fix
CVE-2024-42360Command injection in sequenceserver9.8CNA v3.10.6%2024-08-14Fix
CVE-2024-42353WebOb's location header normalization during redirect leads to open redirect6.1CNA v3.10.6%2024-08-14Fix
CVE-2024-42259Linux kernel i915 GEM virtual memory mapping incorrect buffer size calculation7.8CNA v3.10.3%2024-08-14Fix
CVE-2024-41866Adobe InDesign 2024 DOC File Parsing null pointer dereference5.5CNA v3.10.3%2024-08-14Fix
CVE-2024-41865Adobe Dimension untrusted search path lead to load malicious DLL swift.dll7.8CNA v3.10.3%2024-08-14Fix
CVE-2024-41864Adobe Substance 3D Designer ICO Parsing out-of-bounds write7.8CNA v3.10.3%2024-08-14Fix
CVE-2024-41863Adobe Substance3D - Sampler out-of-bounds read5.5CNA v3.10.2%2024-08-14Fix
CVE-2024-41862Adobe Substance3D - Sampler out-of-bounds read5.5CNA v3.10.2%2024-08-14Fix
CVE-2024-41861Adobe Substance3D - Sampler out-of-bounds read5.5CNA v3.10.2%2024-08-14Fix
CVE-2024-41860Adobe Substance 3D Sampler memory corruption vulnerability I, when parsing PSD file5.5CNA v3.10.2%2024-08-14Fix
CVE-2024-41858Adobe InCopy has an integer overflow vulnerability when parsing SVG file7.8CNA v3.10.3%2024-08-14Fix
CVE-2024-41856Adobe Illustrator improper input validation7.8CNA v3.10.4%2024-08-14Fix
CVE-2024-41854Adobe InDesign 2024 PDF file parsing memory corruption5.5CNA v3.10.3%2024-08-14Fix
CVE-2024-41853Adobe InDesign 2024 EPS File Parsing Heap memory corruption remote code execution7.8CNA v3.10.4%2024-08-14Fix
CVE-2024-41852Adobe InDesign 2024 AVI File Parsing stack based buffer overflow7.8CNA v3.10.4%2024-08-14Fix
CVE-2024-41851Adobe InDesign (Beta) has an integer overflow vulnerability when parsing SVG file7.8CNA v3.10.3%2024-08-14Fix
CVE-2024-41850Adobe InDesign 2024 TIF File Parsing Heap memory corruption7.8CNA v3.10.4%2024-08-14Fix
CVE-2024-41840Adobe Bridge JP2 File Parsing out-of-bounds write remote code execution7.8CNA v3.10.4%2024-08-14Fix
CVE-2024-41835TALOS-2024-2003 Adobe Acrobat Reader Font Packed Point Numbers out-of-bounds read5.5CNA v3.12.0%2024-08-14Fix
CVE-2024-41834Adobe Acrobat Reader DC Annotation out-of-bounds read information disclosure5.5CNA v3.11.5%2024-08-14Fix
CVE-2024-41833Adobe Acrobat Reader DC Annotation out-of-bounds read information disclosure5.5CNA v3.11.5%2024-08-14Fix
CVE-2024-41832TALOS-2024-2002 Adobe Acrobat Reader Font gvar TupleVariation data out-of-bounds read5.5CNA v3.12.0%2024-08-14Fix
CVE-2024-41831Adobe Acrobat Reader DC AcroForm use-after-free remote code execution7.8CNA v3.13.2%2024-08-14Fix
CVE-2024-41830Talos Security Advisory for Adobe (TALOS-2024-2009)7.8CNA v3.14.6%2024-08-14Fix
CVE-2024-41727F5 BIG-IP resource exhaustion8.7CNA v4.00.5%2024-08-14Fix
CVE-2024-41723F5 BIG-IP iControl REST information disclosure5.3CNA v4.00.3%2024-08-14Fix
CVE-2024-41719F5 BIG-IP Next Central Manager QKView generation information disclosure5.1CNA v4.00.2%2024-08-14Fix
CVE-2024-41164F5 BIG-IP Multipath TCP profile null pointer dereference8.2CNA v4.00.4%2024-08-14Fix
CVE-2024-40620Rockwell Automation Pavilion8® Unencrypted Data vulnerability via HTTP protocol5.3CNA v4.00.2%2024-08-14Fix
CVE-2024-40619Rockwell Automation GuardLogix/ControlLogix 5580 controller denial of service vulnerability8.7CNA v4.00.6%2024-08-14Fix
CVE-2024-39825Zoom Workplace Apps and Rooms Clients buffer overflow8.5CNA v3.10.6%2024-08-14Fix
CVE-2024-39824Zoom Workplace Apps, SDKs, Rooms Clients, and Rooms Controllers missing authorization4.9CNA v3.10.5%2024-08-14Fix
CVE-2024-39823Zoom Workplace Apps, SDKs, Rooms Clients, and Rooms Controllers missing authorization4.9CNA v3.10.5%2024-08-14Fix
CVE-2024-39822Zoom Workplace Apps, SDKs, Rooms Clients, and Rooms Controllers sensitive information exposure6.5CNA v3.10.5%2024-08-14Fix
CVE-2024-39818Zoom Workplace Apps and SDKs protection mechanism failure7.5CNA v3.10.6%2024-08-14Fix
CVE-2024-39809F5 BIG-IP Next Central Manager user session refresh token insufficient session expiration8.9CNA v4.00.4%2024-08-14Fix
CVE-2024-39792F5 NGINX Plus MQTT pre-read module vulnerability8.7CNA v4.00.6%2024-08-14Fix
CVE-2024-39778F5 BIG-IP High-Speed Bridge vulnerability8.7CNA v4.00.5%2024-08-14Fix
CVE-2024-39426Adobe Acrobat Reader DC Annotation memory corruption remote code execution7.8CNA v3.12.1%2024-08-14Fix
CVE-2024-39425Adobe Acrobat Reader time-of-check time-of-use race condition7.0CNA v3.10.2%2024-08-14Fix
CVE-2024-39424Adobe Acrobat Reader DC Annotation use-after-free remote code execution7.8CNA v3.13.0%2024-08-14Fix
CVE-2024-39423Adobe Acrobat Reader out-of-bounds write7.8CNA v3.13.9%2024-08-14Fix
CVE-2024-39422Adobe Acrobat Reader use-after-free7.8CNA v3.13.0%2024-08-14Fix
CVE-2024-39420Adobe Acrobat Reader time-of-check time-of-use (TOCTOU) race condition7.0CNA v3.13.5%2024-08-14Fix
CVE-2024-39419Adobe Commerce A user without ship permissions can ship the orders4.3CNA v3.10.4%2024-08-14Fix
CVE-2024-39418Adobe Commerce improper authorization5.4CNA v3.10.4%2024-08-14Fix
CVE-2024-39417Adobe Commerce an unauthorized user can export the Shipping Report4.3CNA v3.10.4%2024-08-14Fix
CVE-2024-39416Adobe Commerce Unauthorized user can export Orders Sale Report4.3CNA v3.10.4%2024-08-14Fix
CVE-2024-39415Adobe Commerce an unauthorized user can export the Tax Sales Report4.3CNA v3.10.4%2024-08-14Fix
CVE-2024-39414Adobe Commerce being able to import/export tax rates without proper privileges4.3CNA v3.10.4%2024-08-14Fix
CVE-2024-39413Adobe Commerce an unauthorized user can export the Invoiced Sales Report4.3CNA v3.10.4%2024-08-14Fix
CVE-2024-39412Adobe Commerce improper authorization4.3CNA v3.10.4%2024-08-14Fix
CVE-2024-39411Adobe Commerce improper authorization4.3CNA v3.10.4%2024-08-14Fix
CVE-2024-39410Adobe Commerce cross-site request forgery (CSRF)4.3CNA v3.10.5%2024-08-14Fix
CVE-2024-39409Adobe Commerce cross-site request forgery (CSRF)4.3CNA v3.10.5%2024-08-14Fix
CVE-2024-39408Adobe Commerce cross-site request forgery (CSRF)4.3CNA v3.10.5%2024-08-14Fix
CVE-2024-39407Adobe Commerce improper authorization4.3CNA v3.10.4%2024-08-14Fix
CVE-2024-39406Adobe Commerce improper limitation of a pathname to a restricted directory (path traversal)6.8CNA v3.10.9%2024-08-14Fix
CVE-2024-39405Adobe Commerce improper authorization4.3CNA v3.10.4%2024-08-14Fix
CVE-2024-39404Adobe Commerce magento improper authorization4.3CNA v3.10.5%2024-08-14Fix
CVE-2024-39403Adobe Commerce stored XSS through Webhook module public key configuration7.6CNA v3.10.5%2024-08-14Fix
CVE-2024-39402Adobe Commerce improper neutralization of special elements used in an OS command8.4CNA v3.11.7%2024-08-14Fix
CVE-2024-39401Adobe Commerce improper neutralization of special elements used in an OS command8.4CNA v3.11.7%2024-08-14Fix
CVE-2024-39400Adobe Commerce DOM XSS through integrations can impact other admins8.1CNA v3.10.7%2024-08-14Fix
CVE-2024-39399Adobe Commerce path traversal lead to local file read7.7CNA v3.10.9%2024-08-14Fix
CVE-2024-39398Adobe Commerce magento does not properly restrict excessive authentication attempts7.4CNA v3.10.9%2024-08-14Fix
CVE-2024-39397Adobe Commerce unrestricted upload of file with dangerous type9.0CNA v3.11.1%2024-08-14Fix
CVE-2024-39395Adobe InDesign 2024 DOC File Parsing null pointer dereference5.5CNA v3.10.3%2024-08-14Fix
CVE-2024-39394Adobe InDesign 2024 PDF File Parsing out of bound write remote code execution7.8CNA v3.10.3%2024-08-14Fix
CVE-2024-39393Adobe InDesign 2024 PCT File Parsing memory corruption remote code execution7.8CNA v3.10.3%2024-08-14Fix
CVE-2024-39391Adobe InDesign XLS File Parsing out of bound write remote code execution7.8CNA v3.10.3%2024-08-14Fix
CVE-2024-39390Adobe InDesign 2024 DOC File Parsing memory corruption7.8CNA v3.10.3%2024-08-14Fix
CVE-2024-39389Adobe InDesign PDF File Parsing stack based buffer overflow remote code execution7.8CNA v3.10.4%2024-08-14Fix
CVE-2024-39388Adobe Substance 3D Stager SKP File Parsing use-after-free remote code execution7.8CNA v3.10.4%2024-08-14Fix
CVE-2024-39387Adobe Bridge AVI FIle Parsing out-of-bounds read information disclosure5.5CNA v3.10.4%2024-08-14Fix
CVE-2024-39386Adobe Bridge AVI FIle Parsing out-of-bounds write remote code execution7.8CNA v3.10.4%2024-08-14Fix
CVE-2024-39383Adobe Acrobat Reader PoC sample of unknown vulnerability detected by EXPMON system7.8CNA v3.12.8%2024-08-14Fix
CVE-2024-39283Intel(R) TDX module software incomplete filtering8.5CNA v4.00.2%2024-08-14Fix
CVE-2024-38653Ivanti Avalanche SmartDeviceServer XML external entity injection7.5v3.192.0%2024-08-14NucleiEmerging ThreatsFix
CVE-2024-38652Ivanti Avalanche skin management component path traversal9.1v3.17.6%2024-08-14Fix
CVE-2024-38483Dell Client Platform BIOS externally developed component improper input validation5.8CNA v3.10.2%2024-08-14Fix
CVE-2024-38163Microsoft Windows Update Stack elevation of privilege7.8CNA v3.10.7%2024-08-14Fix
CVE-2024-37529IBM Db2 denial of service6.5CNA v3.10.6%2024-08-14Fix
CVE-2024-37399Ivanti Avalanche WL null pointer dereference7.5v3.127.8%2024-08-14Fix
CVE-2024-37373Ivanti Avalanche Central Filestore improper input validation7.2v3.11.6%2024-08-14Fix
CVE-2024-37028F5 BIG-IP Next Central Manager account lockout vulnerability6.3CNA v4.00.4%2024-08-14Fix
CVE-2024-36136Ivanti Avalanche WLInfoRailService off-by-one error7.5v3.12.2%2024-08-14Fix
CVE-2024-35152IBM Db2 denial of service6.5CNA v3.10.6%2024-08-14Fix
CVE-2024-35136IBM Db2 denial of service5.3CNA v3.10.6%2024-08-14Fix
CVE-2024-34163Intel(R) NUC firmware for some improper input validation8.7CNA v4.00.2%2024-08-14Fix
CVE-2024-34138Adobe Illustrator CGM File Parsing division by zero5.5CNA v3.10.2%2024-08-14Fix
CVE-2024-34137Adobe Illustrator 2024 CGM File Parsing null pointer dereference5.5CNA v3.10.2%2024-08-14Fix
CVE-2024-34136Adobe Illustrator PSD File Parsing null pointer dereference5.5CNA v3.10.2%2024-08-14Fix
CVE-2024-34135Adobe Illustrator out-of-bounds read5.5CNA v3.10.2%2024-08-14Fix
CVE-2024-34134Adobe Illustrator out-of-bounds read5.5CNA v3.10.2%2024-08-14Fix
CVE-2024-34133Adobe Illustrator out-of-bounds write7.8CNA v3.10.3%2024-08-14Fix
CVE-2024-34127Adobe InDesign TIF File Parsing out of bound read5.5CNA v3.10.3%2024-08-14Fix
CVE-2024-34126Adobe Dimension USD File Parsing out-of-bounds read information disclosure5.5CNA v3.10.3%2024-08-14Fix
CVE-2024-34125Adobe Dimension GLB File Parsing out-of-bounds read information disclosure5.5CNA v3.10.3%2024-08-14Fix
CVE-2024-34124Adobe Dimension SKP File Parsing out-of-bounds write remote code execution7.8CNA v3.10.3%2024-08-14Fix
CVE-2024-34118Adobe Illustrator 2024 TIF file parsing division by zero denial of service5.5CNA v3.10.2%2024-08-14Fix
CVE-2024-34117Adobe Photoshop 2024 MPO File Parsing use-after-free7.8CNA v3.10.4%2024-08-14Fix
CVE-2024-31882IBM Db2 denial of service5.3CNA v3.10.6%2024-08-14Fix
CVE-2024-29015Intel(R) VTune(TM) Profiler software some uncontrolled search path5.4CNA v4.00.1%2024-08-14Fix
CVE-2024-28953EMON software some uncontrolled search path5.4CNA v4.00.1%2024-08-14Fix
CVE-2024-28947Intel(R) Server Board S2600ST Family firmware kernel mode driver for some improper input validation7.1CNA v4.00.2%2024-08-14Fix
CVE-2024-28887Intel(R) IPP software some uncontrolled search path5.4CNA v4.00.1%2024-08-14Fix
CVE-2024-28876Intel(R) MPI Library Software uncontrolled search path5.4CNA v4.00.1%2024-08-14Fix
CVE-2024-28799IBM QRadar Suite Software information disclosure5.6CNA v3.10.3%2024-08-14Fix
CVE-2024-28172Intel(R) Trace Analyzer and Collector software uncontrolled search path5.4CNA v4.00.1%2024-08-14Fix
CVE-2024-28050Intel(R) Arc(TM) & Iris(R) Xe Graphics software some improper access control5.1CNA v4.00.1%2024-08-14Fix
CVE-2024-28046Intel(R) GPA software some uncontrolled search path5.4CNA v4.00.1%2024-08-14Fix
CVE-2024-27461Intel(R) MAS (GUI) software installer incorrect default permissions4.3CNA v4.00.1%2024-08-14Fix
CVE-2024-27267IBM SDK, Java Technology Edition denial of service5.9CNA v3.10.4%2024-08-14Fix
CVE-2024-27120Local file inclusion in ComfortKey before7.5v3.10.6%2024-08-14
CVE-2024-26027Intel(R) Simics Package Manager software uncontrolled search path5.4CNA v4.00.1%2024-08-14Fix
CVE-2024-26025Intel(R) Advisor software incorrect default permissions5.4CNA v4.00.1%2024-08-14Fix
CVE-2024-26022Intel(R) UEFI Integrator Tools on Aptio V for Intel(R) NUC some improper access control8.5CNA v4.00.2%2024-08-14Fix
CVE-2024-259393rd Generation Intel(R) Xeon(R) Scalable Processors denial of service6.7CNA v4.00.2%2024-08-14Fix
CVE-2024-25576Intel(R) FPGA products firmware for some improper access control8.5CNA v4.00.2%2024-08-14Fix
CVE-2024-25562Intel(R) Distribution for GDB software denial of service5.8CNA v4.00.1%2024-08-14Fix
CVE-2024-25561Intel(R) HID Event Filter software installers some insecure inherited permissions5.4CNA v4.00.1%2024-08-14Fix
CVE-2024-25157Authentication bypass in GoAnywhere MFT6.5CNA v3.10.5%2024-08-14Fix
CVE-2024-24986Intel(R) Ethernet Network Controllers and Adapters improper access control9.3CNA v4.00.2%2024-08-14Fix
CVE-2024-24983Intel(R) Ethernet Network Controllers and Adapters E810 Series protection mechanism failure7.0CNA v4.00.4%2024-08-14Fix
CVE-2024-249803rd some protection mechanism failure6.9CNA v4.00.2%2024-08-14Fix
CVE-2024-24977Intel(R) License Manager for FLEXlm product software uncontrolled search path5.4CNA v4.00.1%2024-08-14Fix
CVE-2024-24973Intel(R) Distribution for GDB software improper input validation1.0CNA v4.00.1%2024-08-14Fix
CVE-2024-24853Intel(R) Processor incorrect behavior order7.3CNA v4.00.2%2024-08-14Fix
CVE-2024-24580Intel(R) Data Center GPU Max Series 1100 and 1550 products denial of service6.8CNA v4.00.2%2024-08-14Fix
CVE-2024-23981Intel(R) Ethernet Network Controllers and Adapters privilege escalation9.3CNA v4.00.2%2024-08-14Fix
CVE-2024-23974Intel(R) ISH software installers some incorrect default permissions5.4CNA v4.00.1%2024-08-14Fix
CVE-2024-23909Intel(R) FPGA SDK for OpenCL(TM) software technology some uncontrolled search path5.4CNA v4.00.2%2024-08-14
CVE-2024-23908Flexlm License Daemons for Intel(R) FPGA software some insecure inherited permissions5.4CNA v4.00.1%2024-08-14Fix
CVE-2024-23907Intel(R) High Level Synthesis Compiler software some uncontrolled search path5.4CNA v4.00.2%2024-08-14Fix
CVE-2024-23499Intel(R) Ethernet Network Controllers and Adapters E810 Series protection mechanism failure7.0CNA v4.00.5%2024-08-14Fix
CVE-2024-23497Intel(R) Ethernet Network Controllers and Adapters out-of-bounds write9.3CNA v4.00.2%2024-08-14Fix
CVE-2024-23495Intel(R) Distribution for GDB software some incorrect default permissions5.4CNA v4.00.1%2024-08-14Fix
CVE-2024-23491Intel(R) Distribution for GDB software some uncontrolled search path5.4CNA v4.00.2%2024-08-14Fix
CVE-2024-23489Intel(R) VROC software uncontrolled search path5.4CNA v4.00.2%2024-08-14Fix
CVE-2024-22378Intel Unite(R) Client Extended Display Plugin software installers some incorrect default permissions5.4CNA v4.00.1%2024-08-14
CVE-2024-22376installation software for Intel(R) Ethernet Adapter Driver Pack some uncontrolled search path5.4CNA v4.00.2%2024-08-14Fix
CVE-2024-22374Intel(R) Xeon Processors insufficient control flow management6.8CNA v4.00.2%2024-08-14Fix
CVE-2024-22184Intel(R) Quartus(R) Prime Pro Edition Design Software uncontrolled search path5.4CNA v4.00.2%2024-08-14Fix
CVE-2024-21857Intel(R) oneAPI Compiler software uncontrolled search path5.4CNA v4.00.2%2024-08-14Fix
CVE-2024-21844Intel(R) CSME firmware for some integer overflow5.3CNA v4.00.3%2024-08-14Fix
CVE-2024-21810Intel(R) Ethernet Network Controllers and Adapters improper input validation9.3CNA v4.00.2%2024-08-14Fix
CVE-2024-21807Intel(R) Ethernet Network Controllers and Adapters improper initialization9.3CNA v4.00.2%2024-08-14Fix
CVE-2024-21806Intel Ethernet Network Adapters E810 series Linux kernel mode driver denial of service6.8CNA v4.00.2%2024-08-14Fix
CVE-2024-21801Intel(R) TDX module software some insufficient control flow management8.3CNA v4.00.2%2024-08-14Fix
CVE-2024-21787BMRA software inadequate encryption strength7.1CNA v4.00.1%2024-08-14Fix
CVE-2024-21784Intel(R) IPP Cryptography software uncontrolled search path5.4CNA v4.00.2%2024-08-14Fix
CVE-2024-21769Intel(R) Ethernet Connection I219-LM install software some uncontrolled search path5.4CNA v4.00.2%2024-08-14Fix
CVE-2024-21766Intel(R) oneAPI Math Kernel Library software uncontrolled search path5.4CNA v4.00.2%2024-08-14Fix
CVE-2024-20790Adobe Dimension memory corruption Out-of-Bounds-read vulnerability I, when parsing FBX file5.5CNA v3.10.2%2024-08-14Fix
CVE-2024-20789Adobe Dimension SKP File Parsing use-after-free remote code execution7.8CNA v3.10.4%2024-08-14Fix
CVE-2024-20083MediaTek chipsets out-of-bounds write in venc9.8CISA ADP v3.10.3%2024-08-14Fix
CVE-2024-20082MediaTek chipsets improper restriction of operations within the bounds of a memory buffer in Modem9.8CISA ADP v3.11.4%2024-08-14Fix
CVE-2024-7794itsourcecode Vehicle Management System mybill.php SQL injection9.8v3.10.5%2024-08-14
CVE-2024-7793SourceCodester Task Progress Tracker add-task.php cross-site scripting5.4v3.10.4%2024-08-14
CVE-2024-7792SourceCodester Task Progress Tracker delete-task.php SQL injection8.8v3.10.6%2024-08-14
CVE-2024-7790DevikaAI stored cross-site scripting5.4NVD v3.10.3%2024-08-14
CVE-2024-7754SourceCodester Clinics Patient Management System check_medicine_name.php SQL injection7.5v3.10.5%2024-08-14
CVE-2024-7753SourceCodester Clinics Patient Management System user_images direct request7.5v3.10.9%2024-08-14
CVE-2024-7752SourceCodester Clinics Patient Management System update_medicine.php cross-site scripting6.1v3.10.5%2024-08-14
CVE-2024-7732SECOM Dr.ID Attendance system unrestricted file upload9.8CNA v3.10.9%2024-08-14Fix
CVE-2024-7731SECOM Dr.ID Access control system SQL injection9.8CNA v3.10.8%2024-08-14Fix
CVE-2024-7729CAYIN Technology CMS Sensitive File Download7.5CNA v3.10.6%2024-08-14Fix
CVE-2024-7728CAYIN Technology CMS OS command injection7.2CNA v3.10.7%2024-08-14Fix
CVE-2024-7588Gutenberg Blocks, Page Builder WordPress plugin stored cross-site scripting6.4CNA v3.10.3%2024-08-14Fix
CVE-2024-7515Rockwell Automation CompactLogix 5380 affected products denial of service8.7CNA v4.00.5%2024-08-14Fix
CVE-2024-7513Rockwell Automation FactoryTalk® View Site Edition code execution vulnerability via File Permissions8.5CNA v4.01.7%2024-08-14Fix
CVE-2024-7507Rockwell Automation CompactLogix 5380 affected products denial of service8.7CNA v4.00.5%2024-08-14Fix
CVE-2024-7347F5 NGINX ngx_http_mp4_module buffer over-read5.7CNA v4.00.3%2024-08-14Fix
CVE-2024-6532Sheet to Table Live Sync for Google Sheet WordPress plugin stored cross-site scripting6.4CNA v3.10.3%2024-08-14Fix
CVE-2024-6078Rockwell Automation authentication bypass vulnerability in DataMosaix™8.6CNA v4.00.4%2024-08-14Fix
CVE-2024-5916PAN-OS: Cleartext Exposure of External System Secrets6.0CNA v4.00.2%2024-08-14Fix
CVE-2024-5915GlobalProtect App: Local privilege escalation (PE)5.2CNA v4.00.2%2024-08-14Fix
CVE-2024-5914Cortex XSOAR: Command injection in CommonScripts Pack7.0CNA v4.01.2%2024-08-14Fix
CVE-2024-4389averta Depicter uploadFile function unrestricted file upload8.8CNA v3.11.0%2024-08-14Fix
CVE-2024-43165WPSection WordPress plugin Contributor+ limited local file inclusion6.5CNA v3.10.6%2024-08-13Fix
CVE-2024-43160BerqWP WordPress plugin unauthenticated arbitrary file upload10.0CNA v3.14.6%2024-08-13NucleiExploit codeFix
CVE-2024-43153Woffice WordPress theme unauthenticated privilege escalation9.8CNA v3.10.6%2024-08-13Fix
CVE-2024-43141Participants Database WordPress plugin PHP object injection9.8CNA v3.10.6%2024-08-13Fix
CVE-2024-43140Ultimate Bootstrap Elements for Elementor WordPress plugin local file inclusion8.8v3.10.6%2024-08-13Fix
CVE-2024-43138Event Manager and Tickets Selling Plugin for WooCommerce WordPress plugin local file inclusion8.8v3.10.6%2024-08-13Fix
CVE-2024-43135WPCafe WordPress plugin local file inclusion8.8v3.10.5%2024-08-13Fix
CVE-2024-43131Docket WordPress plugin unauthenticated arbitrary Post/Page deletion vulnerability7.5v3.10.5%2024-08-13Fix
CVE-2024-43129BetterDocs WordPress plugin local file inclusion8.8v3.10.6%2024-08-13Fix
CVE-2024-43128WooCommerce Product Table Lite WordPress plugin arbitrary code execution7.3v3.10.3%2024-08-13Fix
CVE-2024-43121HUSKY WordPress plugin privilege escalation7.2NVD v3.10.5%2024-08-13Fix
CVE-2024-42740TOTOLINK X5000R OS command injection6.8CISA ADP v3.12.7%2024-08-13
CVE-2024-42739TOTOLINK X5000R OS command injection8.8v3.11.6%2024-08-13
CVE-2024-42738TOTOLINK X5000R OS command injection8.8v3.11.6%2024-08-13
CVE-2024-42737TOTOLINK X5000R OS command injection8.8NVD v3.11.7%2024-08-13
CVE-2024-42736TOTOLINK X5000R OS command injection7.8CISA ADP v3.11.6%2024-08-13
CVE-2024-42377Multiple missing authorization Check vulnerabilities in SAP Shared Service Framework4.3CNA v3.10.2%2024-08-13Fix
CVE-2024-42376Multiple missing authorization Check vulnerabilities in SAP Shared Service Framework6.5CNA v3.10.3%2024-08-13Fix
CVE-2024-42375SAP BusinessObjects Business Intelligence Platform unrestricted file upload4.3CNA v3.10.4%2024-08-13Fix
CVE-2024-42374XML injection in SAP BEx Web Java Runtime Export Web Service8.2CNA v3.10.5%2024-08-13Fix
CVE-2024-42373Missing authorization Check in SAP Student Life Cycle Management (SLcM)4.3CNA v3.10.3%2024-08-13Fix
CVE-2024-42368open-telemetry has an observable timing discrepancy6.5CNA v3.10.6%2024-08-13Fix
CVE-2024-41978Siemens RUGGEDCOM RM1224 LTE(4G) EU sensitive information in log files7.1CNA v4.00.5%2024-08-13Fix
CVE-2024-41977Siemens RUGGEDCOM RM1224 LTE(4G) EU session data exposure7.3CNA v4.00.4%2024-08-13Fix
CVE-2024-41976Siemens RUGGEDCOM RM1224 LTE(4G) EU improper input validation8.6CNA v4.00.8%2024-08-13Fix
CVE-2024-41941Siemens SINEC NMS incorrect authorization5.3CNA v4.00.3%2024-08-13Fix
CVE-2024-41940Siemens SINEC NMS privilege escalation9.4CNA v4.00.6%2024-08-13Fix
CVE-2024-41939Siemens SINEC NMS incorrect authorization8.7CNA v4.00.5%2024-08-13Fix
CVE-2024-41938Siemens SINEC NMS path traversal5.1CNA v4.00.3%2024-08-13Fix
CVE-2024-41908Siemens NX out-of-bounds read7.3CNA v4.00.2%2024-08-13Fix
CVE-2024-41907Siemens SINEC Traffic Analyzer improperly implemented security check2.1CNA v4.00.2%2024-08-13Fix
CVE-2024-41906Siemens SINEC Traffic Analyzer sensitive information in cache6.3CNA v4.00.2%2024-08-13Fix
CVE-2024-41905Siemens SINEC Traffic Analyzer improper access control7.6CNA v4.00.3%2024-08-13Fix
CVE-2024-41904Siemens SINEC Traffic Analyzer missing brute-force protection8.7CNA v4.00.5%2024-08-13Fix
CVE-2024-41903Siemens SINEC Traffic Analyzer improper privilege management7.5CNA v4.00.4%2024-08-13Fix
CVE-2024-41774IBM Common Licensing cross-site scripting4.8CNA v3.10.3%2024-08-13Fix
CVE-2024-41737Server-side request forgery (SSRF) in SAP CRM ABAP (Insights Management)5.0CNA v3.10.3%2024-08-13Fix
CVE-2024-41736Information disclosure vulnerability in SAP Permit To Work4.3CNA v3.10.3%2024-08-13Fix
CVE-2024-41735Cross-site scripting (XSS) vulnerability in SAP Commerce Backoffice5.4CNA v3.10.2%2024-08-13Fix
CVE-2024-41734Missing authorization check in SAP NetWeaver Application Server ABAP and ABAP Platform4.3CNA v3.10.3%2024-08-13Fix
CVE-2024-41733Information disclosure vulnerability in SAP Commerce5.3CNA v3.10.3%2024-08-13Fix
CVE-2024-41732Improper access control in SAP Netweaver Application Server ABAP4.7CNA v3.10.3%2024-08-13Fix
CVE-2024-41731SAP BusinessObjects Business Intelligence Platform unrestricted file upload3.1CNA v3.10.4%2024-08-13Fix
CVE-2024-41730Missing authentication check in SAP BusinessObjects Business Intelligence Platform9.8CNA v3.175.9%2024-08-13Emerging ThreatsFix
CVE-2024-41711Mitel 6800, 6900 and 6900w Series SIP Phones argument injection6.8CISA ADP v3.10.5%2024-08-13Fix
CVE-2024-41683Siemens Location Intelligence family weak password requirements6.9CNA v4.00.3%2024-08-13Fix
CVE-2024-41682Siemens Location Intelligence family missing brute-force protection6.9CNA v4.00.4%2024-08-13Fix
CVE-2024-41681Siemens Location Intelligence family inadequate encryption strength6.0CNA v4.00.2%2024-08-13Fix
CVE-2024-41623D3D Security D8801 code injection9.8v3.10.6%2024-08-13
CVE-2024-41614Symphony Cms cross-site scripting4.8v3.10.4%2024-08-13
CVE-2024-41613Symphony Cms A cross-site scripting5.4v3.10.4%2024-08-13
CVE-2024-40697IBM Common Licensing information disclosure7.5CNA v3.10.5%2024-08-13Fix
CVE-2024-39922Siemens LOGO! 12/24RCE plaintext password storage5.1CNA v4.00.2%2024-08-13
CVE-2024-39651WooCommerce PDF Vouchers WordPress plugin unauthenticated arbitrary file deletion9.3v3.10.5%2024-08-13Fix
CVE-2024-39642LearnPress WordPress plugin insecure direct object references (IDOR)6.5CNA v3.10.4%2024-08-13Fix
CVE-2024-39591Missing authorization check in SAP Document Builder4.3CNA v3.10.3%2024-08-13Fix
CVE-2024-38787Import and export users and customers WordPress plugin Javier Carazo information disclosure7.5CNA v3.10.4%2024-08-13Fix
CVE-2024-38760Send Users Email WordPress plugin sensitive data exposure5.3CNA v3.10.4%2024-08-13Fix
CVE-2024-38756Coming Soon WordPress plugin Weblizar information disclosure5.3CNA v3.10.4%2024-08-13
CVE-2024-38752Zoho Campaigns WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.3%2024-08-13Fix
CVE-2024-38749Olive One Click Demo Import WordPress plugin sensitive data exposure7.5v3.10.4%2024-08-13
CVE-2024-38747HitPay Payment Gateway for WooCommerce WordPress plugin sensitive data exposure via Log file7.5CNA v3.10.4%2024-08-13Fix
CVE-2024-38742MBE eShip WordPress plugin sensitive data exposure5.3CNA v3.10.4%2024-08-13Fix
CVE-2024-38724Contact Form 7 Summary and Print WordPress plugin cross-site request forgery (CSRF) to XSS7.1CNA v3.10.2%2024-08-13Fix
CVE-2024-38699Wallet System for WooCommerce WordPress plugin sensitive data exposure via Exported file7.5CNA v3.10.4%2024-08-13Fix
CVE-2024-38502Pepperl+Fuchs: Device Master ICDM-RX/* XSS vulnerability allows stored XSS7.1CNA v3.10.3%2024-08-13Fix
CVE-2024-38501Pepperl+Fuchs: Device Master ICDM-RX/* XSS vulnerability allows HTML injection6.1CNA v3.10.3%2024-08-13Fix
CVE-2024-38223Microsoft Windows Initial Machine Configuration elevation of privilege6.8CNA v3.10.7%2024-08-13Fix
CVE-2024-38215Microsoft Windows Cloud Files Mini Filter driver elevation of privilege7.8CNA v3.10.7%2024-08-13Fix
CVE-2024-38214Microsoft Windows Routing and Remote Access Service (RRAS) information disclosure6.5CNA v3.11.6%2024-08-13Fix
CVE-2024-38213Microsoft Windows SmartScreen security feature bypass6.5CNA v3.113.6%2024-08-13KEVFix
CVE-2024-38211Microsoft Dynamics 365 (on-premises) cross-site scripting8.2CNA v3.11.0%2024-08-13Fix
CVE-2024-38201Microsoft Azure Stack Hub elevation of privilege7.0CNA v3.10.6%2024-08-13Fix
CVE-2024-38199Microsoft Windows Line Printer Daemon (LPD) service remote code execution9.8CNA v3.12.2%2024-08-13Fix
CVE-2024-38198Microsoft Windows Print Spooler elevation of privilege7.5CNA v3.10.8%2024-08-13Fix
CVE-2024-38197Microsoft Teams for iOS spoofing6.5CNA v3.116.1%2024-08-13Fix
CVE-2024-38196Microsoft Windows Common Log File System driver elevation of privilege7.8CNA v3.16.0%2024-08-13Fix
CVE-2024-38195Microsoft Azure CycleCloud remote code execution7.8CNA v3.10.5%2024-08-13Fix
CVE-2024-38193Microsoft Windows Ancillary function driver for WinSock privilege escalation7.8CNA v3.128.7%2024-08-13KEVExploit codeFix
CVE-2024-38191Microsoft Windows kernel Streaming service driver elevation of privilege7.8CNA v3.10.5%2024-08-13Fix
CVE-2024-38189Microsoft Project remote code execution8.8CNA v3.18.2%2024-08-13KEVFix
CVE-2024-38187Microsoft Windows Kernel-Mode driver elevation of privilege7.8CNA v3.11.1%2024-08-13Fix
CVE-2024-38186Microsoft Windows Kernel-Mode driver elevation of privilege7.8CNA v3.10.8%2024-08-13Fix
CVE-2024-38185Microsoft Windows Kernel-Mode driver elevation of privilege7.8CNA v3.11.1%2024-08-13Fix
CVE-2024-38184Microsoft Windows Kernel-Mode driver elevation of privilege7.8CNA v3.11.2%2024-08-13Fix
CVE-2024-38180Microsoft Windows SmartScreen security feature bypass8.8CNA v3.11.6%2024-08-13Fix
CVE-2024-38178Microsoft Windows Scripting Engine memory corruption7.5CNA v3.141.4%2024-08-13KEVFix
CVE-2024-38177Microsoft Windows App Installer spoofing7.8CNA v3.10.9%2024-08-13Fix
CVE-2024-38173Microsoft Outlook remote code execution6.7CNA v3.10.7%2024-08-13Fix
CVE-2024-38172Microsoft Excel remote code execution7.8CNA v3.10.9%2024-08-13Fix
CVE-2024-38171Microsoft PowerPoint remote code execution7.8CNA v3.10.9%2024-08-13Fix
CVE-2024-38170Microsoft Excel remote code execution7.1CNA v3.10.8%2024-08-13Fix
CVE-2024-38169Microsoft Office Visio remote code execution7.8CNA v3.10.8%2024-08-13Fix
CVE-2024-38168Microsoft .NET and Visual Studio denial of service7.5CNA v3.12.7%2024-08-13Fix
CVE-2024-38167NET and Visual Studio information disclosure6.5CNA v3.11.4%2024-08-13Fix
CVE-2024-38165Microsoft Windows Compressed Folder tampering6.5CNA v3.11.3%2024-08-13Fix
CVE-2024-38162Microsoft Azure Connected Machine Agent elevation of privilege7.8CNA v3.10.5%2024-08-13Fix
CVE-2024-38161Microsoft Windows Mobile Broadband driver remote code execution6.8CNA v3.10.8%2024-08-13Fix
CVE-2024-38160Microsoft Windows Network Virtualization remote code execution9.1CNA v3.12.2%2024-08-13Fix
CVE-2024-38159Microsoft Windows Network Virtualization remote code execution9.1CNA v3.12.2%2024-08-13Fix
CVE-2024-38158Microsoft Azure IoT SDK remote code execution7.0CNA v3.10.4%2024-08-13Fix
CVE-2024-38157Microsoft Azure IoT SDK remote code execution7.0CNA v3.10.5%2024-08-13Fix
CVE-2024-38155Microsoft Windows Security Center Broker information disclosure5.5CNA v3.10.7%2024-08-13Fix
CVE-2024-38154Microsoft Windows Routing and Remote Access Service (RRAS) remote code execution8.8CNA v3.11.6%2024-08-13Fix
CVE-2024-38153Microsoft Windows Kernel elevation of privilege7.8CNA v3.10.5%2024-08-13Fix
CVE-2024-38152Microsoft Windows OLE remote code execution7.8CNA v3.10.9%2024-08-13Fix
CVE-2024-38151Microsoft Windows Kernel information disclosure5.5CNA v3.10.6%2024-08-13Fix
CVE-2024-38150Microsoft Windows DWM Core library elevation of privilege7.8CNA v3.13.7%2024-08-13Fix
CVE-2024-38148Microsoft Windows Secure Channel denial of service7.5CNA v3.131.8%2024-08-13Fix
CVE-2024-38147Microsoft DWM Core library elevation of privilege7.8CNA v3.13.3%2024-08-13Fix
CVE-2024-38146Microsoft Windows Layer-2 Bridge Network driver denial of service7.5CNA v3.12.5%2024-08-13Fix
CVE-2024-38145Microsoft Windows Layer-2 Bridge Network driver denial of service7.5CNA v3.12.5%2024-08-13Fix
CVE-2024-38144Microsoft Windows kernel Streaming WOW Thunk service driver elevation of privilege8.8CNA v3.132.3%2024-08-13Exploit codeFix
CVE-2024-38143Microsoft Windows WLAN AutoConfig service elevation of privilege4.2CNA v3.11.7%2024-08-13Exploit codeFix
CVE-2024-38142Microsoft Windows Secure Kernel Mode elevation of privilege7.8CNA v3.10.6%2024-08-13Fix
CVE-2024-38141Microsoft Windows Ancillary function driver for WinSock elevation of privilege7.8CNA v3.13.7%2024-08-13Fix
CVE-2024-38140Microsoft Windows Reliable Multicast Transport Driver (RMCAST) remote code execution9.8CNA v3.13.8%2024-08-13Fix
CVE-2024-38138Microsoft Windows Deployment services remote code execution7.5CNA v3.11.7%2024-08-13Fix
CVE-2024-38137Microsoft Windows Resource Manager PSM service extension elevation of privilege7.0CNA v3.10.4%2024-08-13Fix
CVE-2024-38136Microsoft Windows Resource Manager PSM service extension elevation of privilege7.0CNA v3.10.4%2024-08-13Fix
CVE-2024-38135Microsoft Windows Resilient File System (ReFS) elevation of privilege7.8CNA v3.10.7%2024-08-13Fix
CVE-2024-38134Microsoft Windows kernel Streaming WOW Thunk service driver elevation of privilege7.8CNA v3.10.7%2024-08-13Fix
CVE-2024-38133Microsoft Windows Kernel elevation of privilege7.8CNA v3.10.7%2024-08-13Fix
CVE-2024-38132Microsoft Windows Network Address Translation (NAT) denial of service7.5CNA v3.12.5%2024-08-13Fix
CVE-2024-38131Clipboard Virtual Channel extension remote code execution8.8CNA v3.11.3%2024-08-13Fix
CVE-2024-38130Microsoft Windows Routing and Remote Access Service (RRAS) remote code execution8.8CNA v3.11.6%2024-08-13Fix
CVE-2024-38128Microsoft Windows Routing and Remote Access Service (RRAS) remote code execution8.8CNA v3.11.6%2024-08-13Fix
CVE-2024-38127Microsoft Windows Hyper-V elevation of privilege7.8CNA v3.11.6%2024-08-13Exploit codeFix
CVE-2024-38126Microsoft Windows Network Address Translation (NAT) denial of service7.5CNA v3.12.7%2024-08-13Fix
CVE-2024-38125Microsoft Windows kernel Streaming WOW Thunk service driver elevation of privilege7.8CNA v3.15.9%2024-08-13Fix
CVE-2024-38123Microsoft Windows Bluetooth driver information disclosure4.4CNA v3.10.7%2024-08-13Fix
CVE-2024-38122Microsoft Local Security Authority (LSA) server information disclosure5.5CNA v3.10.6%2024-08-13Fix
CVE-2024-38121Microsoft Windows Routing and Remote Access Service (RRAS) remote code execution8.8CNA v3.11.6%2024-08-13Fix
CVE-2024-38120Microsoft Windows Routing and Remote Access Service (RRAS) remote code execution8.8CNA v3.11.6%2024-08-13Fix
CVE-2024-38118Microsoft Local Security Authority (LSA) server information disclosure5.5CNA v3.10.6%2024-08-13Fix
CVE-2024-38117Microsoft Windows NTFS elevation of privilege7.8CNA v3.10.7%2024-08-13Fix
CVE-2024-38116Microsoft Windows IP Routing Management Snapin remote code execution8.8CNA v3.11.8%2024-08-13Fix
CVE-2024-38115Microsoft Windows IP Routing Management Snapin remote code execution8.8CNA v3.11.6%2024-08-13Fix
CVE-2024-38114Microsoft Windows IP Routing Management Snapin remote code execution8.8CNA v3.11.6%2024-08-13Fix
CVE-2024-38109Microsoft Azure Health Bot elevation of privilege9.1CNA v3.11.8%2024-08-13Fix
CVE-2024-38108Microsoft Azure Stack Hub spoofing9.3CNA v3.11.2%2024-08-13Fix
CVE-2024-38107Microsoft Windows Power Dependency Coordinator privilege escalation7.8CNA v3.11.6%2024-08-13KEVFix
CVE-2024-38106Microsoft Windows Kernel privilege escalation7.0CNA v3.16.3%2024-08-13KEVKCVFix
CVE-2024-38098Microsoft Azure Connected Machine Agent elevation of privilege7.8CNA v3.10.6%2024-08-13Fix
CVE-2024-38084Microsoft OfficePlus elevation of privilege7.8CNA v3.10.7%2024-08-13Fix
CVE-2024-38063Microsoft Windows TCP/IP remote code execution9.8CNA v3.170.6%2024-08-13Emerging ThreatsExploit codeFix
CVE-2024-37968Microsoft Windows DNS spoofing7.5CNA v3.11.0%2024-08-13Fix
CVE-2024-37935Woocommerce OpenPos WordPress plugin unauthenticated sensitive data exposure7.5CNA v3.10.4%2024-08-13Fix
CVE-2024-37287Kibana arbitrary code execution via prototype pollution9.1CNA v3.11.6%2024-08-13Fix
CVE-2024-37015An issue was discovered in Ada Web Server 20.0. When configured to use SSL (which is not the default setting), the SSL/TLS used to establish connections to external services is done without proper hostname validation. This is exploitable by man-in-the-middle attackers.7.4CISA ADP v3.10.4%2024-08-13
CVE-2024-36505Fortinet FortiOS improper access control4.7CNA v3.10.2%2024-08-13Fix
CVE-2024-36446Mitel Mivoice Mx-one authentication bypass8.8v3.10.5%2024-08-13Fix
CVE-2024-36398Siemens SINEC NMS execution with unnecessary privileges8.5CNA v4.00.2%2024-08-13Fix
CVE-2024-35124IBM OpenBMC authentication bypass7.5CNA v3.10.5%2024-08-13Fix
CVE-2024-33005SAP NetWeaver Application Server, Web Dispatcher and Content Server missing authorization6.3CNA v3.10.2%2024-08-13Fix
CVE-2024-33003Information disclosure vulnerability in SAP Commerce Cloud7.4CNA v3.10.5%2024-08-13Fix
CVE-2024-29995Microsoft Windows Kerberos elevation of privilege8.1CNA v3.11.5%2024-08-13Fix
CVE-2024-28986SolarWinds Web Help Desk deserialization of untrusted data9.8CNA v3.184.6%2024-08-13KEVNucleiFix
CVE-2024-28166SAP BusinessObjects Business Intelligence Platform unrestricted file upload3.7CNA v3.10.3%2024-08-13Fix
CVE-2024-21981AMD EPYC™ 7001 Series Processors insecure direct object reference5.7CNA v3.10.1%2024-08-13Fix
CVE-2024-21757Fortinet FortiManager unverified password change5.5CNA v3.10.2%2024-08-13Fix
CVE-2024-7751SourceCodester Clinics Patient Management System update_medicine.php SQL injection7.5v3.10.5%2024-08-13
CVE-2024-7750SourceCodester Clinics Patient Management System medicines.php SQL injection7.5v3.10.5%2024-08-13
CVE-2024-7749SourceCodester Accounts Manager App add-account.php cross-site scripting5.4v3.10.5%2024-08-13
CVE-2024-7748SourceCodester Accounts Manager App delete-account.php SQL injection9.8v3.10.7%2024-08-13
CVE-2024-7746traccar Server Tananaev Solutions default credentials9.8v3.10.5%2024-08-13
CVE-2024-7743wanglongcn Ltcms API endpoint downloadUrl server-side request forgery9.8v3.10.8%2024-08-13
CVE-2024-7742wanglongcn Ltcms API endpoint multiDownload server-side request forgery9.8v3.10.8%2024-08-13
CVE-2024-7741wanglongcn Ltcms API endpoint downloadfile downloadFile path traversal5.3v3.10.9%2024-08-13
CVE-2024-7740wanglongcn Ltcms API endpoint download server-side request forgery9.8v3.10.8%2024-08-13
CVE-2024-7739yzane vscode-markdown-pdf cross-site scripting6.1v3.10.4%2024-08-13
CVE-2024-7738yzane vscode-markdown-pdf Markdown file pathname traversal7.8v3.10.3%2024-08-13
CVE-2024-7733FastCMS New Article Category page cross-site scripting5.4v3.10.4%2024-08-13
CVE-2024-7715D-Link DNS-1550-04 photocenter_mgr.cgi sprintf command injection5.3CNA v4.026.2%2024-08-13Emerging Threats
CVE-2024-7709OcoMon URL require_access_recovery.php cross-site scripting6.9CNA v4.00.4%2024-08-13Fix
CVE-2024-7707Tenda FH1206 HTTP POST Request SafeEmailFilter formSafeEmailFilter stack-based overflow9.8v3.11.3%2024-08-13
CVE-2024-7593Ivanti Virtual Traffic Manager authentication bypass9.8CNA v3.1100.0%2024-08-13KEVNucleiMetasploitEmerging ThreatsExploit codeFix
CVE-2024-7570Ivanti Neurons for ITSM Ivanti ITSM on-prem and improper certificate validation8.3CNA v3.10.6%2024-08-13Fix
CVE-2024-7569Ivanti Neurons for ITSM Ivanti ITSM on-prem and information disclosure9.6CNA v3.11.7%2024-08-13Fix
CVE-2024-7567Rockwell Automation Micro850/870 vulnerable to denial of service vulnerability via CIP/Modbus Port6.9CNA v4.00.5%2024-08-13Fix
CVE-2024-7388WP Bannerize Pro WordPress plugin authenticated (Editor+) stored cross-site scripting4.0CNA v3.10.3%2024-08-13Fix
CVE-2024-7247Element Pack Elementor Addons WordPress plugin stored cross-site scripting5.4v3.10.5%2024-08-13Fix
CVE-2024-7113Allocation of resources without limits or throttling in AVEVA SuiteLink Server8.7CNA v4.00.5%2024-08-13Fix
CVE-2024-7094JS Help Desk WordPress plugin code injection9.8CNA v3.137.6%2024-08-13Fix
CVE-2024-7092Essential Addons for Elementor WordPress plugin stored cross-site scripting5.4v3.10.4%2024-08-13Fix
CVE-2024-6823Media Library Assistant WordPress plugin arbitrary file upload8.8CNA v3.11.3%2024-08-13Fix
CVE-2024-6788Phoenix Contact CHARX SEC-3000 default credentials9.8v3.10.5%2024-08-13Fix
CVE-2024-6724Generate Images Magic Post Thumbnail WordPress plugin Admin+ stored XSS4.8CISA ADP v3.10.4%2024-08-13Fix
CVE-2024-6619Incorrect permission assignment for critical resource in Ocean Data Systems Dream Report8.5CNA v4.00.1%2024-08-13Fix
CVE-2024-6618Path traversal in Ocean Data Systems Dream Report8.5CNA v4.00.3%2024-08-13Fix
CVE-2024-6384Backup files may be downloaded by underprivileged users in MongoDB Enterprise Server5.3CNA v3.10.4%2024-08-13Fix
CVE-2024-6079DLL hijacking vulnerability Exists in Rockwell Automation Emulate3D™5.4CNA v4.00.2%2024-08-13Fix
CVE-2024-5849Pepperl+Fuchs: Device Master ICDM-RX/* XSS vulnerability allows reflected XSS7.1CNA v3.10.4%2024-08-13Fix
CVE-2024-3913Phoenix Contact: Start sequence allows attack during the boot process5.3NVD v3.10.5%2024-08-13Fix
CVE-2024-2259Reflected XXS vulnerability in InstaRISPACS software6.4CNA v4.00.5%2024-08-13Fix
CVE-2024-43360ZoneMinder time-based SQL injection9.8CNA v3.16.2%2024-08-12NucleiFix
CVE-2024-43359zoneminder XSS vulnerabilities in montagereview0.0CNA v3.10.4%2024-08-12Fix
CVE-2024-43358zoneminder XSS vulnerability in filter view6.1CNA v3.10.4%2024-08-12Fix
CVE-2024-43233BSK Forms Blacklist WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.3%2024-08-12Fix
CVE-2024-43231Tutor LMS WordPress plugin cross-site scripting (XSS)5.4v3.10.3%2024-08-12Fix
CVE-2024-43227WPDeveloper BetterDocs stored cross-site scripting5.4v3.10.3%2024-08-12Fix
CVE-2024-43226WP Dashboard Notes WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.3%2024-08-12Fix
CVE-2024-43225Enter Addons WordPress plugin cross-site scripting (XSS)5.4v3.10.3%2024-08-12Fix
CVE-2024-43224YaMaps for WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.3%2024-08-12Fix
CVE-2024-43220Form Maker by 10Web WordPress plugin reflected cross-site scripting (XSS)6.1NVD v3.10.3%2024-08-12Fix
CVE-2024-43218Mediavine Control Panel WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.3%2024-08-12Fix
CVE-2024-43217Kodex Posts likes WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.3%2024-08-12
CVE-2024-43216Filr WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.3%2024-08-12Fix
CVE-2024-43213MultiVendorX Marketplace WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.3%2024-08-12Fix
CVE-2024-43210LA-Studio Element Kit for Elementor WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.3%2024-08-12Fix
CVE-2024-43168Red Hat Enterprise Linux 6 Unbound: Heap-buffer-overflow in unbound4.8CNA v3.10.3%2024-08-12Fix
CVE-2024-43167Red Hat Enterprise Linux 6 unbound: Null pointer dereference in unbound2.8CNA v3.10.4%2024-08-12Fix
CVE-2024-43164Blockspare WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.3%2024-08-12Fix
CVE-2024-43163ParcelPanel WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.3%2024-08-12Fix
CVE-2024-43161Slider and Popup Builder by Depicter WordPress plugin cross-site scripting (XSS)4.8v3.10.3%2024-08-12Fix
CVE-2024-43156Post Grid Master WordPress plugin reflected cross-site scripting (XSS)6.1NVD v3.10.3%2024-08-12Fix
CVE-2024-43155ComboBlocks WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.3%2024-08-12Fix
CVE-2024-431523D FlipBook WordPress plugin cross-site scripting (XSS)6.1v3.10.3%2024-08-12Fix
CVE-2024-43151Ultimate Addons for Beaver Builder Lite WordPress plugin cross-site scripting (XSS)5.4v3.10.3%2024-08-12Fix
CVE-2024-43150Xpro Elementor Addons WordPress plugin cross-site scripting (XSS)5.4v3.10.3%2024-08-12Fix
CVE-2024-43149CM Tooltip Glossary WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.3%2024-08-12Fix
CVE-2024-43148WordPress StreamCast plugin stored cross-site scripting (XSS)5.9CNA v3.10.3%2024-08-12Fix
CVE-2024-43147Selection Lite WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.3%2024-08-12Fix
CVE-2024-43139Football Pool WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.3%2024-08-12Fix
CVE-2024-43137WappPress Basic WordPress plugin cross-site scripting (XSS)5.9CNA v3.10.3%2024-08-12Fix
CVE-2024-43133Themify Shortcodes WordPress plugin cross-site scripting (XSS)5.4v3.10.3%2024-08-12Fix
CVE-2024-43130Football Pool WordPress plugin cross-site scripting (XSS)5.9CNA v3.10.3%2024-08-12Fix
CVE-2024-43127Products, Order and Customers Export for WooCommerce WordPress plugin reflected cross-site scripting7.1CNA v3.10.3%2024-08-12Fix
CVE-2024-43126Sender reflected cross-site scripting7.1CNA v3.10.3%2024-08-12Fix
CVE-2024-43125WP Table Builder WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.3%2024-08-12Fix
CVE-2024-43124Graphina WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.3%2024-08-12Fix
CVE-2024-43123Card Elements for Elementor WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.3%2024-08-12Fix
CVE-2024-42748TOTOLINK X5000R OS command injection8.8NVD v3.11.7%2024-08-12
CVE-2024-42747TOTOLINK X5000R OS command injection8.8v3.11.1%2024-08-12
CVE-2024-42745TOTOLINK X5000R OS command injection8.8NVD v3.11.7%2024-08-12
CVE-2024-42744TOTOLINK X5000R OS command injection8.8v3.11.6%2024-08-12
CVE-2024-42743TOTOLINK X5000R OS command injection8.8v3.11.6%2024-08-12
CVE-2024-42742TOTOLINK X5000R OS command injection8.8v3.11.6%2024-08-12
CVE-2024-42741TOTOLINK X5000R OS command injection8.8v3.11.2%2024-08-12
CVE-2024-42632Frog CMS cross-site request forgery8.8v3.10.3%2024-08-12
CVE-2024-42631Frog CMS cross-site request forgery8.8v3.10.3%2024-08-12
CVE-2024-42630Frog CMS cross-site request forgery8.8v3.10.3%2024-08-12
CVE-2024-42629Frog CMS cross-site request forgery8.8v3.10.2%2024-08-12
CVE-2024-42628Frog CMS cross-site request forgery8.8v3.10.3%2024-08-12
CVE-2024-42627Frog CMS cross-site request forgery8.8v3.10.3%2024-08-12
CVE-2024-42626Frog CMS cross-site request forgery8.8v3.10.3%2024-08-12
CVE-2024-42625Frog CMS cross-site request forgery8.8v3.10.2%2024-08-12
CVE-2024-42624Frog CMS cross-site request forgery8.8v3.10.3%2024-08-12
CVE-2024-42623Frog CMS cross-site request forgery8.8v3.10.3%2024-08-12
CVE-2024-42547TOTOLINK A3100R buffer overflow9.8v3.10.6%2024-08-12
CVE-2024-42546TOTOLINK A3100R buffer overflow9.8v3.10.6%2024-08-12
CVE-2024-42545TOTOLINK A3700R buffer overflow9.8v3.10.7%2024-08-12
CVE-2024-42543TOTOLINK A3700R buffer overflow9.8v3.10.7%2024-08-12
CVE-2024-42520TOTOLINK A3002R buffer overflow9.8v3.10.6%2024-08-12
CVE-2024-42489Pro Macros remote code execution via Viewpdf and similar macros10.0CNA v3.11.1%2024-08-12Fix
CVE-2024-42485pxlrbt filament-excel Filament Excel vulnerable to path traversal Attack on Export Download endpoint7.5CNA v3.10.6%2024-08-12Fix
CVE-2024-42482Fish-shop/syntax-check improper neutralization of Delimiters4.8CNA v3.10.8%2024-08-12Fix
CVE-2024-42481Complete crash of host system due to calculateDirectorySize in skyportd7.5CNA v3.10.5%2024-08-12Fix
CVE-2024-42480Kamaji's RBAC Roles for `etcd` are not disjunct8.1CNA v3.10.6%2024-08-12
CVE-2024-42479llama.cpp allows write-what-where in rpc_server::set_tensor10.0CNA v3.12.6%2024-08-12
CVE-2024-42478llama.cpp allows arbitrary Address Read in rpc_server::get_tensor5.3CNA v3.10.6%2024-08-12
CVE-2024-42477llama.cpp global-buffer-overflow in ggml_type_size5.3CNA v3.10.5%2024-08-12Fix
CVE-2024-42474Streamlit path traversal Security vulnerability on Windows5.9CNA v3.00.6%2024-08-12Fix
CVE-2024-42473OpenFGA authorization bypass7.5CNA v3.10.5%2024-08-12Fix
CVE-2024-42470CometVisu Backend for openHAB has a sensitive information disclosure6.5CNA v3.10.5%2024-08-12Fix
CVE-2024-42469CometVisu Backend for openHAB affected by RCE through path traversal9.8CNA v3.11.2%2024-08-12Fix
CVE-2024-42468openhab-webui path traversal (CometVisu)5.3CNA v3.10.8%2024-08-12Fix
CVE-2024-42370Litestar repository vulnerable to Environment variable injection in `docs-preview.yml` workflow8.3CNA v3.10.7%2024-08-12Exploit code
CVE-2024-42367In Aiohttp, compressed files as symlinks are not protected from path traversal4.8CNA v3.10.7%2024-08-12Fix
CVE-2024-42258Linux kernel huge_memory resource exhaustion7.1CNA v3.10.2%2024-08-12Fix
CVE-2024-42167FIWARE Keyrock command injection in Organisationname7.2NVD v3.10.5%2024-08-12
CVE-2024-42166FIWARE Keyrock command injection in Applicationname7.2NVD v3.10.5%2024-08-12
CVE-2024-42165FIWARE Keyrock account activation token generation insufficient randomness5.4NVD v3.10.4%2024-08-12
CVE-2024-42164FIWARE Keyrock disabling MFA without Authentication4.3NVD v3.10.4%2024-08-12
CVE-2024-42163FIWARE Keyrock password reset token generation vulnerability8.1NVD v3.10.3%2024-08-12
CVE-2024-42001Vonets WiFi Bridges forced browsing9.8v3.10.7%2024-08-12
CVE-2024-41936Vonets WiFi Bridges path traversal7.5v3.11.7%2024-08-12
CVE-2024-41909Apache Mina Sshd: Integrity check bypass5.9v3.10.6%2024-08-12Fix
CVE-2024-41890Apache Answer: The link to reset the user's password will remain valid after sending a new link5.3v3.11.1%2024-08-12Fix
CVE-2024-41888Apache Answer: The link for resetting user password is not Single-Use5.3v3.11.2%2024-08-12Fix
CVE-2024-41710Mitel SIP Phones argument injection7.2v3.141.6%2024-08-12KEVEmerging ThreatsFix
CVE-2024-41651PrestaShop server-side request forgery8.1NVD v3.11.3%2024-08-12Exploit code
CVE-2024-41577Ueditor component of productinfoquick v1.0 An arbitrary file upload9.8CISA ADP v3.11.0%2024-08-12
CVE-2024-41570Havocframework Havoc demon callback handling server-side request forgery9.8v3.12.9%2024-08-12Exploit code
CVE-2024-41482Typora cross-site scripting6.1v3.10.3%2024-08-12Fix
CVE-2024-41481Typora cross-site scripting6.1v3.10.4%2024-08-12Fix
CVE-2024-41476Amttgroup HiBOS cross-site scripting9.8CISA ADP v3.10.6%2024-08-12
CVE-2024-41475Sir Gnuboard origin validation error8.8NVD v3.10.3%2024-08-12
CVE-2024-41332oretnom23 Computer Laboratory Management System improper access control6.5v3.10.6%2024-08-12
CVE-2024-40893Firewalla BTLE authenticated command injection6.8CNA v3.11.6%2024-08-12KCVFix
CVE-2024-40892Firewalla BTLE weak credentials7.1CNA v3.10.9%2024-08-12Exploit codeKCVFix
CVE-2024-40500Scilico I, Librarian Martin Kucej i-librarian v.5.11.0 and cross-site scripting8.6v3.10.6%2024-08-12
CVE-2024-40488Lopalopa Live Membership System cross-site request forgery8.8CISA ADP v3.10.3%2024-08-12
CVE-2024-40487Lopalopa Live Membership System code injection7.6CISA ADP v3.11.1%2024-08-12
CVE-2024-40486Lopalopa Live Membership System "/index.php" of Kashipara SQL injection9.8CISA ADP v3.11.0%2024-08-12
CVE-2024-40484PHPGurukul Old Age Home Management System cross-site scripting6.1v3.10.7%2024-08-12
CVE-2024-40482Lopalopa Live Membership System cross-site scripting9.8CISA ADP v3.11.2%2024-08-12
CVE-2024-40481PHPGurukul Old Age Home Management System cross-site scripting5.4v3.10.6%2024-08-12
CVE-2024-40480Jayesh Online Exam System missing authorization9.8v3.10.5%2024-08-12
CVE-2024-40479Jayesh Online Exam System "/admin/quizquestion.php" in Kashipara SQL injection8.1CISA ADP v3.10.8%2024-08-12
CVE-2024-40478Jayesh Online Exam System cross-site scripting5.4v3.10.6%2024-08-12
CVE-2024-40477PHPGurukul Old Age Home Management System "/oahms/admin/forgot-password.php" SQL injection9.8CISA ADP v3.10.8%2024-08-12
CVE-2024-40476Mayuri K Best House Rental Management cross-site request forgery8.0v3.10.3%2024-08-12
CVE-2024-40475Mayuri K Best House Rental Management System improper access control8.8v3.10.5%2024-08-12
CVE-2024-40474Mayuri K Best House Rental Management System cross-site scripting5.4NVD v3.10.5%2024-08-12
CVE-2024-40473Mayuri K Best House Rental Management System cross-site scripting5.4v3.10.6%2024-08-12
CVE-2024-40472Rems Daily Calories Monitoring Tool SQL injection9.8v3.10.7%2024-08-12
CVE-2024-39815Vonets WiFi Bridges improper check or handling of exceptional conditions7.5NVD v3.10.8%2024-08-12
CVE-2024-39791Vonets WiFi Bridges stack-based buffer overflow9.8v3.11.1%2024-08-12
CVE-2024-39338Server-side request forgery in axios7.5v3.11.2%2024-08-12Fix
CVE-2024-39091Annke Crater 2 OS command injection8.8v3.11.7%2024-08-12
CVE-2024-38989Prototype pollution in izatop bunt9.8CISA ADP v3.11.1%2024-08-12Fix
CVE-2024-38530gunet openeclass open eClass Platform allows arbitrary file upload in modules/h5p/save.php9.8CNA v3.10.8%2024-08-12
CVE-2024-38219Microsoft Edge (Chromium-based) remote code execution6.5CNA v3.10.9%2024-08-12Fix
CVE-2024-38218Microsoft Edge (HTML-based) memory corruption8.4CNA v3.10.6%2024-08-12Fix
CVE-2024-38200Microsoft Office spoofing6.5CNA v3.120.5%2024-08-12Emerging ThreatsExploit codeFix
CVE-2024-37930SmartMag WordPress theme sensitive data exposure via Log file7.5v3.10.4%2024-08-12Fix
CVE-2024-37924WP2Speed Faster Optimize PageSpeed Insights Score 90-100 WordPress plugin sensitive data exposure5.3CNA v3.10.4%2024-08-12
CVE-2024-37826Vercot Serva null pointer dereference7.5CISA ADP v3.11.2%2024-08-12
CVE-2024-37283Elastic Agent insertion of sensitive information into log file6.5CNA v4.00.6%2024-08-12Fix
CVE-2024-37023Vonets WiFi Bridges command injection9.9v3.11.3%2024-08-12
CVE-2024-36877Micro-Star International Z-series and B-series motherboards write-what-where condition8.2CISA ADP v3.10.7%2024-08-12Exploit code
CVE-2024-36518ManageEngine ADAudit Plus SQL injection8.3CNA v3.13.1%2024-08-12Fix
CVE-2024-36462Zabbix allocation of resources without limits or throttling (uncontrolled resource consumption)7.5CNA v3.10.9%2024-08-12Fix
CVE-2024-36461Zabbix direct access to memory pointers within the JS engine for modification9.1CNA v3.10.8%2024-08-12Fix
CVE-2024-36460Zabbix front-end audit log shows passwords in plaintext8.1CNA v3.10.6%2024-08-12Fix
CVE-2024-36035ManageEngine ADAudit Plus SQL injection8.3CNA v3.17.4%2024-08-12Fix
CVE-2024-36034ManageEngine ADAudit Plus SQL injection8.3CNA v3.17.4%2024-08-12Fix
CVE-2024-35775Slider by Soliloquy WordPress plugin broken access control to XSS5.9CNA v3.10.3%2024-08-12Fix
CVE-2024-33536Zimbra Collaboration cross-site scripting5.4v3.10.3%2024-08-12Fix
CVE-2024-33535Zimbra Collaboration path traversal7.5v3.10.6%2024-08-12Fix
CVE-2024-33533Zimbra Collaboration cross-site scripting5.4v3.10.3%2024-08-12Fix
CVE-2024-32765QNAP QTS and QuTS hero Network and Virtual Switch missing authentication4.2CNA v3.10.2%2024-08-12Fix
CVE-2024-30188Apache DolphinScheduler: Resource File Read and Write vulnerability8.1v3.16.0%2024-08-12NucleiFix
CVE-2024-29831Apache DolphinScheduler: RCE by arbitrary js execution8.8v3.11.2%2024-08-12Fix
CVE-2024-29082Vonets WiFi Bridges improper access control8.6v3.10.8%2024-08-12
CVE-2024-27443Synacor Zimbra Collaboration Suite (ZCS) cross-site scripting (XSS)6.1v3.123.6%2024-08-12KEVNucleiFix
CVE-2024-27442Zimbra Collaboration improper privilege management7.8v3.10.3%2024-08-12Fix
CVE-2024-22123Zabbix arbitrary file read2.7CNA v3.10.6%2024-08-12Fix
CVE-2024-22122Zabbix AT(GSM) command injection3.0CNA v3.11.6%2024-08-12Fix
CVE-2024-22121Zabbix Agent MSI Installer allows Non-Admin User to Access Change option via msiexec.exe6.1CNA v3.10.2%2024-08-12Fix
CVE-2024-22116Zabbix remote code execution within ping script9.9CNA v3.11.6%2024-08-12Fix
CVE-2024-22114Zabbix System Information widget information disclosure4.3CNA v3.10.6%2024-08-12Fix
CVE-2024-21881Enphase Envoy encrypted package upload vulnerability8.6CNA v4.00.3%2024-08-12Fix
CVE-2024-21880Enphase Envoy command improper neutralization7.2v3.12.4%2024-08-12Fix
CVE-2024-21879Enphase Envoy command improper neutralization8.8v3.12.5%2024-08-12Fix
CVE-2024-21878Enphase Envoy command improper neutralization9.8v3.11.4%2024-08-12Fix
CVE-2024-21877Insecure File Generation Based on User Input in Enphase IQ Gateway version to and6.5NVD v3.10.8%2024-08-12Fix
CVE-2024-21876Unauthenticated path traversal via URL parameter in Enphase IQ Gateway version9.1v3.10.8%2024-08-12Fix
CVE-2024-21550SteVe cross-site scripting6.1v3.10.4%2024-08-12Fix
CVE-2024-7706Fujian mwcms uploadfile.html uploadimage unrestricted upload2.7NVD v3.10.4%2024-08-12
CVE-2024-7705Fujian mwcms Image upload uploadeditor.html uploadeditor unrestricted upload5.3v3.10.3%2024-08-12
CVE-2024-7704Weaver e-cology Source Code ecology_dev.zip information disclosure7.5v3.10.8%2024-08-12
CVE-2024-7700Foreman: Command injection in host init config template via install packages field on Foreman6.5CNA v3.10.8%2024-08-12
CVE-2024-7697Transsion Carlcare information disclosure7.5v3.10.6%2024-08-12Fix
CVE-2024-7694TeamT5 ThreatSonar Anti-Ransomware unrestricted upload of file with dangerous type7.2CNA v3.11.8%2024-08-12KEVFix
CVE-2024-7693Team Johnlong software Raiden MAILD Remote Management System arbitrary file reading7.5v3.11.0%2024-08-12Fix
CVE-2024-7686SourceCodester Kortex Lite Advocate Office Management System register_case.php cross-site scripting5.4v3.10.5%2024-08-12
CVE-2024-7685SourceCodester Kortex Lite Advocate Office Management System adds.php cross-site scripting5.4v3.10.5%2024-08-12
CVE-2024-7684SourceCodester Kortex Lite Advocate Office Management System add_act.php cross-site scripting5.4v3.10.4%2024-08-12
CVE-2024-7683SourceCodester Kortex Lite Advocate Office Management System addcase_stage.php cross-site scripting5.4v3.10.4%2024-08-12
CVE-2024-7682code-projects Job Portal rw_i_nat.php SQL injection9.8v3.10.7%2024-08-12
CVE-2024-7681code-projects College Management System Login page login.php SQL injection9.8v3.10.7%2024-08-12
CVE-2024-7680itsourcecode Tailoring Management System incedit.php SQL injection9.8v3.10.5%2024-08-12
CVE-2024-7678SourceCodester Car Driving School Management System Master.php cross-site scripting6.1v3.10.5%2024-08-12
CVE-2024-7677SourceCodester Car Driving School Management System system settings page cross-site scripting6.1v3.10.5%2024-08-12
CVE-2024-7676SourceCodester Car Driving School Management System Master.php save_package SQL injection5.3v3.10.4%2024-08-12
CVE-2024-7669SourceCodester Car Driving School Management System Master.php delete_enrollment SQL injection5.3v3.10.4%2024-08-12
CVE-2024-7668SourceCodester Car Driving School Management System Master.php delete_package SQL injection5.3v3.10.4%2024-08-12
CVE-2024-7667SourceCodester Car Driving School Management System User.php delete_users SQL injection5.3v3.10.5%2024-08-12
CVE-2024-7666SourceCodester Car Driving School Management System view_package.php SQL injection5.3v3.10.5%2024-08-12
CVE-2024-7665SourceCodester Car Driving School Management System manage_package.php SQL injection4.3v3.10.5%2024-08-12
CVE-2024-7664SourceCodester Car Driving School Management System view_details.php SQL injection4.3v3.10.5%2024-08-12
CVE-2024-7663SourceCodester Car Driving School Management System manage_user.php SQL injection5.3v3.10.5%2024-08-12
CVE-2024-7662SourceCodester Car Driving School Management System cross-site request forgery6.5v3.10.4%2024-08-12
CVE-2024-7661SourceCodester Car Driving School Management System index.php save_users cross-site request forgery8.8v3.10.5%2024-08-12
CVE-2024-7660SourceCodester File Manager App Add File cross-site scripting6.1v3.10.5%2024-08-12
CVE-2024-7659ProjectSend Password Reset Token functions.php generate_random_string random values7.5v3.10.8%2024-08-12Fix
CVE-2024-7658ProjectSend process.php get_preview resource injection5.3v3.10.8%2024-08-12Fix
CVE-2024-7657Gila CMS HTTP POST request page cross-site scripting5.4v3.10.6%2024-08-12
CVE-2024-7649Opal Membership WordPress plugin unauthenticated stored cross-site scripting6.1CNA v3.10.5%2024-08-12
CVE-2024-7648Opal Membership WordPress plugin authenticated (Subscriber+) information disclosure4.3CNA v3.10.6%2024-08-12
CVE-2024-7645SourceCodester Clinics Patient Management System User page users.php cross-site request forgery5.4v3.10.4%2024-08-12
CVE-2024-7644SourceCodester Leads Manager Tool Add Leads add-leads.php cross-site scripting5.4v3.10.7%2024-08-12
CVE-2024-7643SourceCodester Leads Manager Tool Delete Leads delete-leads.php SQL injection9.8v3.10.9%2024-08-12
CVE-2024-7642SourceCodester Kortex Lite Advocate Office Management System activate_act.php SQL injection9.8v3.11.0%2024-08-12
CVE-2024-7641SourceCodester Kortex Lite Advocate Office Management System deactivate_act.php SQL injection9.8v3.10.9%2024-08-12
CVE-2024-7640SourceCodester Kortex Lite Advocate Office Management System delete_register.php SQL injection9.8v3.11.0%2024-08-12
CVE-2024-7639SourceCodester Kortex Lite Advocate Office Management System delete_act.php SQL injection9.8v3.11.0%2024-08-12
CVE-2024-7638SourceCodester Kortex Lite Advocate Office Management System delete_client.php SQL injection9.8v3.11.0%2024-08-12
CVE-2024-7637code-projects Online Polling Registration registeracc.php SQL injection9.8v3.10.9%2024-08-12
CVE-2024-7636code-projects Simple Ticket Booking Login authenticate.php SQL injection9.8v3.10.8%2024-08-12
CVE-2024-7635code-projects Simple Ticket Booking Registration register_insert.php SQL injection9.8v3.10.8%2024-08-12
CVE-2024-7621Visual Website Collaboration, Feedback and Project Management WordPress plugin unauthorized access5.4CNA v3.10.5%2024-08-12Fix
CVE-2024-7616Edimax IC-6220DC/IC-5150W ipcam_cgi cgiFormString command injection9.8v3.14.7%2024-08-12
CVE-2024-7615Tenda FH1206 fromSafeUrlFilter stack-based overflow9.8v3.11.5%2024-08-12
CVE-2024-7614Tenda FH1206 qossetting fromqossetting stack-based overflow9.8v3.11.5%2024-08-12
CVE-2024-7613Tenda FH1206 GstDhcpSetSer fromGstDhcpSetSer buffer overflow9.8v3.11.5%2024-08-12
CVE-2024-7590Spectra WordPress plugin cross-site scripting (XSS)5.4v3.10.3%2024-08-12Fix
CVE-2024-7589FreeBSD OpenSSH pre-authentication async signal safety issue8.1v3.12.0%2024-08-12Fix
CVE-2024-7574Christmasify! WordPress plugin cross-site request forgery to stored cross-site scripting6.1CNA v3.10.2%2024-08-12Fix
CVE-2024-7557Odh-dashboard: Odh-model-controller: Cross-model authentication bypass in Openshift AI8.8CNA v3.10.9%2024-08-12
CVE-2024-7512Concrete CMS stored XSS in Board instances4.6CNA v4.00.4%2024-08-12Fix
CVE-2024-7503WooCommerce - Social Login WordPress plugin authentication bypass to account takeover9.8CNA v3.10.6%2024-08-12Fix
CVE-2024-7416Reveal Template WordPress plugin unauthenticated full path disclosure5.3CNA v3.10.5%2024-08-12
CVE-2024-7414PDF Builder for WPForms WordPress plugin unauthenticated full path disclosure5.3CNA v3.10.6%2024-08-12Fix
CVE-2024-7413Obfuscate Email WordPress plugin unauthenticated full path disclosure5.3CNA v3.10.5%2024-08-12
CVE-2024-7412No Update Nag WordPress plugin unauthenticated full path disclosure5.3CNA v3.10.5%2024-08-12Fix
CVE-2024-7410My Custom CSS PHP and ADS WordPress plugin unauthenticated full path disclosure5.3CNA v3.10.5%2024-08-12
CVE-2024-7408Information disclosure vulnerability in Airveda Air Quality Monitor6.5NVD v3.10.3%2024-08-12Fix
CVE-2024-7382Linkify Text WordPress plugin unauthenticated full path disclosure5.3CNA v3.10.5%2024-08-12
CVE-2024-7272FFmpeg swresample.c fill_audiodata heap-based overflow8.8v3.11.2%2024-08-12Fix
CVE-2024-7006LibTIFF: Null pointer dereference in tif_dirinfo.c7.5NVD v3.11.5%2024-08-12Fix
CVE-2024-6917RCE in Veribilim Software's Veribase Order Management9.8v3.11.3%2024-08-12Fix
CVE-2024-6768Microsoft Windows denial of service in CLFS.sys6.8CNA v4.02.5%2024-08-12Exploit code
CVE-2024-6760FreeBSD ktrace(2) fails to detach when executing a setuid binary7.5v3.10.7%2024-08-12Fix
CVE-2024-6759FreeBSD NFS client accepts file names containing path separators5.3v3.10.7%2024-08-12Fix
CVE-2024-6758Improper privilege management vulnerability in Sprecher Automation SPRECON-E6.5CNA v3.10.4%2024-08-12Fix
CVE-2024-6692Easy Digital Downloads WordPress plugin stored cross-site scripting3.1v3.10.4%2024-08-12Fix
CVE-2024-6691Easy Digital Downloads WordPress plugin stored cross-site scripting4.0v3.10.4%2024-08-12Fix
CVE-2024-6684Authentication bypass in GST Electronics' inohom Nova Panel N79.9CNA v4.00.6%2024-08-12
CVE-2024-6640FreeBSD pf incorrectly matches different ICMPv6 states in the state table6.3CISA ADP v3.10.5%2024-08-12Fix
CVE-2024-6639MDx WordPress theme stored cross-site scripting6.4CNA v3.10.4%2024-08-12Fix
CVE-2024-6562affiliate-toolkit WordPress plugin unauthenticated full path Dislcosure5.3CNA v3.10.6%2024-08-12Fix
CVE-2024-6158Category Posts Widget widget settings output stored cross-site scripting4.8CISA ADP v3.10.4%2024-08-12Fix
CVE-2024-6136WP eStore WordPress plugin settings reset via CSRF5.4CISA ADP v3.10.2%2024-08-12Fix
CVE-2024-6134WP eStore WordPress plugin reflected XSS in Product Editing5.4CISA ADP v3.10.4%2024-08-12Fix
CVE-2024-6133Tips and Tricks HQ WP eStore customer search page reflected cross-site scripting6.5CISA ADP v3.10.5%2024-08-12Fix
CVE-2024-5801B&R Automation Runtime IP forwarding improper isolation5.3CNA v4.00.3%2024-08-12
CVE-2024-5800Diffie-Hellman groups with insufficient strength used in SSL/TLS stack of B&R Automation Runtime8.3CNA v4.00.3%2024-08-12Fix
CVE-2024-5651Fence-agents-remediation: Fence agent command line options leads to remote code execution8.8CNA v3.11.4%2024-08-12Fix
CVE-2024-5527ManageEngine ADAudit Plus SQL injection8.3CNA v3.14.7%2024-08-12Fix
CVE-2024-5487ManageEngine ADAudit Plus SQL injection8.3CNA v3.14.7%2024-08-12Fix
CVE-2024-5445Ecosystem Agent Insufficient Transport Layer Security3.8CNA v3.10.3%2024-08-12Fix
CVE-2024-4360Element Pack Elementor Addons WordPress plugin stored cross-site scripting5.4v3.10.5%2024-08-12Fix
CVE-2024-4359Element Pack Elementor Addons WordPress plugin arbitrary file read6.5CNA v3.10.5%2024-08-12Fix
CVE-2024-4350Concrete CMS stored cross-site scripting5.1CNA v4.00.5%2024-08-12Fix