CVE-2024 records published in August 2024
Page three of three: records 2,001 to 2,681 of the 2,681 published in August 2024, newest first. The first page carries the figures for August 2024.
| CVE | Summary | CVSS | EPSS | Published | Signals |
|---|---|---|---|---|---|
| CVE-2024-3279 | Improper access control in mintplex-labs/anything-llm | 9.1CNA v3.0 | 0.6% | 2024-08-12 | Fix |
| CVE-2024-0115 | NVIDIA CV-CUDA resource exhaustion | 6.1CNA v3.1 | 0.2% | 2024-08-12 | Fix |
| CVE-2024-0113 | NVIDIA Mellanox OS path traversal | 7.5CNA v3.1 | 1.1% | 2024-08-12 | Fix |
| CVE-2024-42467 | CometVisu Backend for openHAB affected by SSRF/XSS | 10.0CNA v3.1 | 1.0% | 2024-08-09 | Fix |
| CVE-2024-7399 | Samsung MagicINFO 9 Server path traversal | 8.8CNA v3.1 | 91.9% | 2024-08-09 | KEVNucleiMetasploitEmerging ThreatsExploit codeFix |
| CVE-2024-42493 | Dorsett Controls InfoScan exposure of sensitive information to an unauthorized actor | 5.3v3.1 | 0.3% | 2024-08-08 | Fix |
| CVE-2024-42408 | Dorsett Controls InfoScan path traversal | 3.7NVD v3.1 | 0.4% | 2024-08-08 | Fix |
| CVE-2024-42366 | VRCX overlay notification browser remote code execution | 9.1CNA v3.1 | 0.8% | 2024-08-08 | Fix |
| CVE-2024-42365 | Asterisk allows `Write=originate` as sufficient permissions for code execution / `System` dialplan | 7.4CNA v3.1 | 4.7% | 2024-08-08 | MetasploitExploit codeFix |
| CVE-2024-42357 | Shopware vulnerable to blind SQL-injection in DAL aggregations | 7.3CNA v3.1 | 0.6% | 2024-08-08 | Fix |
| CVE-2024-42356 | Shopware vulnerable to server side template injection in Twig using Context functions | 8.3CNA v3.1 | 0.6% | 2024-08-08 | Fix |
| CVE-2024-42355 | Shopware vulnerable to server side template injection in Twig using deprecation silence tag | 8.3CNA v3.1 | 0.9% | 2024-08-08 | Fix |
| CVE-2024-42354 | Shopware vulnerable to improper access control with ManyToMany associations in store-api | 5.3CNA v3.1 | 0.4% | 2024-08-08 | Fix |
| CVE-2024-42257 | Linux kernel ext4 volume name field vulnerability | 7.8v3.1 | 0.2% | 2024-08-08 | Fix |
| CVE-2024-42256 | Linux kernel CIFS write retry vulnerability | 7.5CNA v3.1 | 0.7% | 2024-08-08 | Fix |
| CVE-2024-42255 | Linux kernel TPM HMAC session null pointer dereference | 5.5v3.1 | 0.2% | 2024-08-08 | Fix |
| CVE-2024-42254 | Linux kernel io_uring buffer ring null pointer dereference | 5.5v3.1 | 0.2% | 2024-08-08 | Fix |
| CVE-2024-42253 | Linux kernel pca953x GPIO driver race condition | 7.8CNA v3.1 | 0.2% | 2024-08-08 | Fix |
| CVE-2024-42252 | Linux kernel closures subsystem reachable assertion | 5.5v3.1 | 0.2% | 2024-08-08 | Fix |
| CVE-2024-42251 | Linux kernel page_ref reachable assertion | 5.5v3.1 | 0.2% | 2024-08-08 | Fix |
| CVE-2024-42038 | Huawei HarmonyOS vulnerability of PIN enhancement failures in the screen lock module | 8.8CNA v3.1 | 0.1% | 2024-08-08 | Fix |
| CVE-2024-42037 | Huawei HarmonyOS vulnerability of uncaught exceptions in the Graphics module | 9.3CNA v3.1 | 0.1% | 2024-08-08 | Fix |
| CVE-2024-42036 | Huawei HarmonyOS access permission verification vulnerability in the Notepad module | 2.5CNA v3.1 | 0.1% | 2024-08-08 | Fix |
| CVE-2024-42035 | Huawei HarmonyOS Permission control vulnerability in the App Multiplier module | 8.4CNA v3.1 | 0.1% | 2024-08-08 | Fix |
| CVE-2024-42034 | Huawei HarmonyOS LaunchAnywhere vulnerability in the account module | 6.6CNA v3.1 | 0.1% | 2024-08-08 | Fix |
| CVE-2024-42033 | Huawei HarmonyOS access control vulnerability in the security verification module | 6.9CNA v3.1 | 0.1% | 2024-08-08 | Fix |
| CVE-2024-42032 | Huawei HarmonyOS access permission verification vulnerability in the Contacts module | 4.4CNA v3.1 | 0.1% | 2024-08-08 | Fix |
| CVE-2024-42031 | Huawei HarmonyOS access permission verification vulnerability in the settings module | 7.5v3.1 | 0.3% | 2024-08-08 | Fix |
| CVE-2024-42030 | Huawei HarmonyOS access permission verification vulnerability in the content sharing pop | 6.2CNA v3.1 | 0.1% | 2024-08-08 | Fix |
| CVE-2024-41942 | JupyterHub has a privilege escalation vulnerability with the `admin:users` scope | 7.2CNA v3.1 | 0.6% | 2024-08-08 | Fix |
| CVE-2024-41238 | Lopalopa Responsive School Management System /smsa/student_login.php in Kashipara SQL injection | 5.3v3.1 | 0.4% | 2024-08-08 | |
| CVE-2024-41161 | Vonets WiFi Bridges use of hard-coded credentials | 9.8v3.1 | 0.6% | 2024-08-08 | |
| CVE-2024-39287 | Dorsett Controls InfoScan exposure of sensitive information to an unauthorized actor | 7.5v3.1 | 0.3% | 2024-08-08 | Fix |
| CVE-2024-38202 | Microsoft Windows Update Stack elevation of privilege | 7.3CNA v3.1 | 1.7% | 2024-08-08 | Fix |
| CVE-2024-37382 | Abinitio Authorization Gateway code injection | 7.2v3.1 | 0.4% | 2024-08-08 | Fix |
| CVE-2024-22069 | Permission and access control vulnerability in ZXV10 XT802/ET301 | 7.1CNA v3.1 | 0.3% | 2024-08-08 | Fix |
| CVE-2024-21302 | Microsoft Windows Secure Kernel Mode elevation of privilege | 6.7CNA v3.1 | 1.6% | 2024-08-08 | Fix |
| CVE-2024-7610 | Uncontrolled resource consumption in GitLab | 4.3CNA v3.1 | 0.4% | 2024-08-08 | Fix |
| CVE-2024-7561 | The Next WordPress theme authenticated (Contributor+) PHP object injection | 8.8CNA v3.1 | 0.7% | 2024-08-08 | |
| CVE-2024-7560 | News Flash WordPress theme authenticated (Editor+) PHP object injection | 7.2CNA v3.1 | 0.6% | 2024-08-08 | |
| CVE-2024-7554 | Exposure of sensitive information to an unauthorized actor in GitLab | 4.9CNA v3.1 | 0.4% | 2024-08-08 | Fix |
| CVE-2024-7548 | LearnPress WordPress LMS plugin authenticated (Contributor+) SQL injection via order parameter | 6.5NVD v3.1 | 0.6% | 2024-08-08 | Fix |
| CVE-2024-7492 | MainWP Child Reports WordPress plugin cross-site request forgery to arbitrary options update | 8.8CNA v3.1 | 0.3% | 2024-08-08 | Fix |
| CVE-2024-7490 | Remote code execution in Advanced Software Framework DHCP server | 9.5CNA v4.0 | 1.4% | 2024-08-08 | |
| CVE-2024-7486 | MultiPurpose WordPress theme authenticated (Contributor+) PHP object injection | 8.8CNA v3.1 | 0.6% | 2024-08-08 | |
| CVE-2024-7480 | Improper access control in Avaya Aura System Manager | 4.2CNA v3.1 | 0.2% | 2024-08-08 | Fix |
| CVE-2024-7477 | Avaya Aura System Manager SQL injection | 6.5CNA v3.1 | 0.2% | 2024-08-08 | Fix |
| CVE-2024-7394 | Concrete CMS stored XSS in getAttributeSetName | 4.6CNA v4.0 | 0.4% | 2024-08-08 | Fix |
| CVE-2024-7350 | reputeinfosystems BookingPress booking login flow authentication bypass | 9.8CNA v3.1 | 0.7% | 2024-08-08 | Fix |
| CVE-2024-7348 | PostgreSQL relation replacement during pg_dump executes arbitrary SQL | 8.8CNA v3.1 | 1.6% | 2024-08-08 | Fix |
| CVE-2024-7150 | Slider by 10Web Responsive Image Slider WordPress plugin SQL injection | 8.8CNA v3.1 | 0.6% | 2024-08-08 | Fix |
| CVE-2024-6987 | Orchid Store WordPress theme missing authorization authenticated limited plugin activation | 4.3CNA v3.1 | 0.3% | 2024-08-08 | Fix |
| CVE-2024-6893 | Journyx Unauthenticated XML external entities injection | 7.5v3.1 | 32.9% | 2024-08-08 | Nuclei |
| CVE-2024-6892 | Journyx reflected cross-site scripting | 6.1v3.1 | 0.8% | 2024-08-08 | Nuclei |
| CVE-2024-6891 | Journyx Authenticated remote code execution | 8.8v3.1 | 1.0% | 2024-08-08 | |
| CVE-2024-6884 | Gutenberg Blocks with AI by Kadence WP WordPress plugin Contributor+ stored XSS | 5.4CISA ADP v3.1 | 0.4% | 2024-08-08 | Fix |
| CVE-2024-6869 | Falang multilanguage for WordPress WordPress plugin unauthorized access | 7.1v3.1 | 0.3% | 2024-08-08 | Fix |
| CVE-2024-6824 | Premium Addons for Elementor WordPress plugin unauthorized access | 4.3CNA v3.1 | 0.4% | 2024-08-08 | Fix |
| CVE-2024-6552 | Booking for Appointments and Events Calendar WordPress plugin information disclosure | 5.3CNA v3.1 | 0.4% | 2024-08-08 | Fix |
| CVE-2024-6481 | Search Filter Pro WordPress plugin Admin+ stored XSS | 4.8CISA ADP v3.1 | 0.3% | 2024-08-08 | Fix |
| CVE-2024-6329 | Improper encoding or escaping of output in GitLab | 5.7CNA v3.1 | 0.4% | 2024-08-08 | Fix |
| CVE-2024-6254 | Brizy Page Builder WordPress plugin cross-site request forgery | 6.1v3.1 | 0.3% | 2024-08-08 | Fix |
| CVE-2024-5668 | Lightbox and Modal Popup WordPress Plugin FooBox stored DOM-based cross-site scripting | 5.4v3.1 | 0.3% | 2024-08-08 | Fix |
| CVE-2024-5423 | Uncontrolled resource consumption in GitLab | 6.5CNA v3.1 | 0.5% | 2024-08-08 | Fix |
| CVE-2024-5226 | Fuse Social Floating Sidebar WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.3% | 2024-08-08 | Fix |
| CVE-2024-4784 | Authentication bypass by primary weakness in GitLab | 4.2CNA v3.1 | 0.3% | 2024-08-08 | Fix |
| CVE-2024-4210 | Uncontrolled resource consumption in GitLab | 6.5CNA v3.1 | 0.5% | 2024-08-08 | Fix |
| CVE-2024-4207 | Improper neutralization of input during web page generation (cross-site scripting) in GitLab | 4.4CNA v3.1 | 0.3% | 2024-08-08 | Fix |
| CVE-2024-3958 | Improper control of generation of code (code injection) in GitLab | 5.3CNA v3.1 | 0.3% | 2024-08-08 | Fix |
| CVE-2024-3659 | Command injection in KAON AR2140 routers | 7.2NVD v3.1 | 1.6% | 2024-08-08 | Fix |
| CVE-2024-3114 | Uncontrolled resource consumption in GitLab | 4.3CNA v3.1 | 0.5% | 2024-08-08 | Fix |
| CVE-2024-3035 | Authorization bypass through user-controlled key in GitLab | 6.8CNA v3.1 | 0.4% | 2024-08-08 | Fix |
| CVE-2024-2800 | Uncontrolled resource consumption in GitLab | 6.5CNA v3.1 | 0.7% | 2024-08-08 | Fix |
| CVE-2024-0108 | NVIDIA Jetson AGX Xavier series improper exception handling | 8.7CNA v3.1 | 0.2% | 2024-08-08 | Fix |
| CVE-2024-0107 | NVIDIA GPU Display Driver out-of-bounds read | 7.8CNA v3.1 | 0.5% | 2024-08-08 | Fix |
| CVE-2024-0104 | NVIDIA Mellanox OS information disclosure | 4.2CNA v3.1 | 0.3% | 2024-08-08 | Fix |
| CVE-2024-0102 | NVIDIA CUDA Toolkit out-of-bounds read | 3.3CNA v3.1 | 0.2% | 2024-08-08 | Fix |
| CVE-2024-0101 | NVIDIA Mellanox OS denial of service | 7.5CNA v3.1 | 0.5% | 2024-08-08 | Fix |
| CVE-2024-43199 | Nagios Ndoutils improper privilege management | 7.8v3.1 | 1.1% | 2024-08-07 | |
| CVE-2024-43045 | Jenkins does not perform a permission check in an HTTP endpoint | 6.3v3.1 | 4.3% | 2024-08-07 | Fix |
| CVE-2024-43044 | Jenkins Remoting library arbitrary file read | 8.8NVD v3.1 | 28.8% | 2024-08-07 | Exploit codeFix |
| CVE-2024-42250 | Linux kernel cachefiles polling vulnerability | 7.8CNA v3.1 | 0.2% | 2024-08-07 | Fix |
| CVE-2024-42249 | Linux kernel SPI message queue vulnerability | 7.8CNA v3.1 | 0.2% | 2024-08-07 | Fix |
| CVE-2024-42248 | Linux kernel ma35d1 serial driver null pointer dereference | 5.5v3.1 | 0.2% | 2024-08-07 | Fix |
| CVE-2024-42247 | Linux kernel WireGuard allowed IPs denial of service | 7.5CNA v3.1 | 0.7% | 2024-08-07 | Fix |
| CVE-2024-42246 | Linux kernel sunrpc TCP socket setup infinite loop | 5.5v3.1 | 0.2% | 2024-08-07 | Fix |
| CVE-2024-42245 | Linux kernel improper locking | 5.5v3.1 | 0.2% | 2024-08-07 | Fix |
| CVE-2024-42244 | Linux kernel mos7840 USB serial driver denial of service | 5.5v3.1 | 0.2% | 2024-08-07 | Fix |
| CVE-2024-42243 | Linux kernel page cache denial of service | 5.5v3.1 | 0.2% | 2024-08-07 | Fix |
| CVE-2024-42242 | Linux kernel SDHCI driver resource exhaustion | 5.5v3.1 | 0.2% | 2024-08-07 | Fix |
| CVE-2024-42241 | Linux kernel shmem page cache denial of service | 5.5v3.1 | 0.2% | 2024-08-07 | Fix |
| CVE-2024-42240 | Linux kernel SYSENTER debug handler denial of service | 5.5v3.1 | 0.2% | 2024-08-07 | Fix |
| CVE-2024-42239 | Linux kernel BPF timer deadlock | 5.5v3.1 | 0.2% | 2024-08-07 | Fix |
| CVE-2024-42238 | Linux kernel cs_dsp firmware loader buffer overflow | 5.5v3.1 | 0.2% | 2024-08-07 | Fix |
| CVE-2024-42237 | Linux kernel cs_dsp firmware loader vulnerability | 5.5v3.1 | 0.2% | 2024-08-07 | Fix |
| CVE-2024-42236 | Linux kernel USB gadget configfs out-of-bounds write | 7.8CNA v3.1 | 0.2% | 2024-08-07 | Fix |
| CVE-2024-42235 | Linux kernel page table allocator null pointer dereference | 7.8CNA v3.1 | 0.2% | 2024-08-07 | Fix |
| CVE-2024-42234 | Linux kernel deferred split queue double free | 7.8CNA v3.1 | 0.2% | 2024-08-07 | Fix |
| CVE-2024-42233 | Linux kernel page fault handler vulnerability | 7.8CNA v3.1 | 0.2% | 2024-08-07 | Fix |
| CVE-2024-42232 | Linux kernel Ceph monitor client use-after-free | 9.8CNA v3.1 | 0.8% | 2024-08-07 | Fix |
| CVE-2024-42222 | Apache CloudStack: Unauthorised Network List Access | 4.3v3.1 | 1.0% | 2024-08-07 | Fix |
| CVE-2024-42062 | Apache CloudStack: User key exposure to Domain Admins | 7.2v3.1 | 0.9% | 2024-08-07 | Fix |
| CVE-2024-42005 | Django SQL injection | 7.3NVD v3.1 | 1.5% | 2024-08-07 | Fix |
| CVE-2024-41991 | Django vulnerable to denial of service attack | 7.5v3.1 | 1.0% | 2024-08-07 | Fix |
| CVE-2024-41990 | Django vulnerable to a denial of service attack | 7.5v3.1 | 1.3% | 2024-08-07 | Fix |
| CVE-2024-41989 | Django resource exhaustion | 7.5v3.1 | 1.2% | 2024-08-07 | Fix |
| CVE-2024-41912 | HP Poly Clariti Manager improper access control | 9.8v3.1 | 0.5% | 2024-08-07 | Fix |
| CVE-2024-41432 | likeshop authentication bypass by spoofing | 5.3v3.1 | 0.4% | 2024-08-07 | |
| CVE-2024-41309 | Enjayworld Enjay Crm improper access control | 7.8v3.1 | 0.2% | 2024-08-07 | |
| CVE-2024-41308 | Enjayworld Enjay Crm improper access control | 7.8v3.1 | 0.2% | 2024-08-07 | |
| CVE-2024-41252 | Lopalopa Responsive School Management System improper access control | 6.5v3.1 | 0.4% | 2024-08-07 | |
| CVE-2024-41251 | Lopalopa Responsive School Management System improper access control | 6.5v3.1 | 0.4% | 2024-08-07 | |
| CVE-2024-41250 | Lopalopa Responsive School Management System improper access control | 5.3v3.1 | 0.5% | 2024-08-07 | |
| CVE-2024-41249 | Lopalopa Responsive School Management System improper access control | 5.3NVD v3.1 | 0.6% | 2024-08-07 | |
| CVE-2024-41248 | Lopalopa Responsive School Management System improper access control | 5.3NVD v3.1 | 0.5% | 2024-08-07 | |
| CVE-2024-41247 | Lopalopa Responsive School Management System improper access control | 5.3NVD v3.1 | 0.4% | 2024-08-07 | |
| CVE-2024-41246 | Lopalopa Responsive School Management System improper access control | 5.3v3.1 | 0.5% | 2024-08-07 | |
| CVE-2024-41245 | Lopalopa Responsive School Management System improper access control | 5.3NVD v3.1 | 0.5% | 2024-08-07 | |
| CVE-2024-41244 | Lopalopa Responsive School Management System improper access control | 5.3NVD v3.1 | 0.5% | 2024-08-07 | |
| CVE-2024-41243 | Lopalopa Responsive School Management System improper access control | 5.3v3.1 | 0.5% | 2024-08-07 | |
| CVE-2024-41242 | Lopalopa Responsive School Management System cross-site scripting | 6.1v3.1 | 0.5% | 2024-08-07 | |
| CVE-2024-41241 | Lopalopa Responsive School Management System cross-site scripting | 6.1v3.1 | 0.5% | 2024-08-07 | |
| CVE-2024-41240 | Lopalopa Responsive School Management System cross-site scripting | 6.1v3.1 | 0.5% | 2024-08-07 | |
| CVE-2024-41239 | Lopalopa Responsive School Management System cross-site scripting | 4.8v3.1 | 0.5% | 2024-08-07 | |
| CVE-2024-41237 | Lopalopa Responsive School Management System /smsa/teacher_login.php in Kashipara SQL injection | 9.8v3.1 | 0.6% | 2024-08-07 | |
| CVE-2024-37403 | Ivanti Docs@Work path traversal | 5.5v3.1 | 0.5% | 2024-08-07 | Fix |
| CVE-2024-36132 | Ivanti EPMM improper authentication | 7.5v3.1 | 1.2% | 2024-08-07 | Fix |
| CVE-2024-36131 | Ivanti EPMM web component deserialization of untrusted data | 8.8v3.1 | 2.3% | 2024-08-07 | Fix |
| CVE-2024-36130 | Ivanti EPMM web component improper authorization | 9.8v3.1 | 2.3% | 2024-08-07 | Fix |
| CVE-2024-34788 | Ivanti EPMM web component improper authentication | 6.5v3.1 | 0.9% | 2024-08-07 | Fix |
| CVE-2024-34636 | Samsung Mobile Samsung Email implicit intent for sensitive communication | 4.0CNA v3.1 | 0.1% | 2024-08-07 | Fix |
| CVE-2024-34635 | Samsung Mobile Samsung Notes parsing textbox object out-of-bounds read | 4.0CNA v3.1 | 0.1% | 2024-08-07 | Fix |
| CVE-2024-34634 | Samsung Mobile Samsung Notes parsing connected object list out-of-bounds read | 4.0CNA v3.1 | 0.1% | 2024-08-07 | Fix |
| CVE-2024-34633 | Samsung Mobile Samsung Notes parsing object header out-of-bounds read | 4.0CNA v3.1 | 0.1% | 2024-08-07 | Fix |
| CVE-2024-34632 | Samsung Mobile Samsung Notes uuid parsing out-of-bounds read | 4.0CNA v3.1 | 0.1% | 2024-08-07 | Fix |
| CVE-2024-34631 | Samsung Mobile Samsung Notes applying new binary out-of-bounds read | 5.5CNA v3.1 | 0.2% | 2024-08-07 | Fix |
| CVE-2024-34630 | Samsung Mobile Samsung Notes applying own binary out-of-bounds read | 5.5CNA v3.1 | 0.2% | 2024-08-07 | Fix |
| CVE-2024-34629 | Samsung Mobile Samsung Notes applying binary out-of-bounds read | 5.5CNA v3.1 | 0.2% | 2024-08-07 | Fix |
| CVE-2024-34628 | Samsung Mobile Samsung Notes applying binary out-of-bounds read | 5.5CNA v3.1 | 0.2% | 2024-08-07 | Fix |
| CVE-2024-34627 | Samsung Mobile Samsung Notes parsing implemention out-of-bounds read | 5.5CNA v3.1 | 0.2% | 2024-08-07 | Fix |
| CVE-2024-34626 | Samsung Mobile Samsung Notes applying own binary out-of-bounds read | 5.5CNA v3.1 | 0.2% | 2024-08-07 | Fix |
| CVE-2024-34625 | Samsung Mobile Samsung Notes applying connection point out-of-bounds read | 5.5CNA v3.1 | 0.2% | 2024-08-07 | Fix |
| CVE-2024-34624 | Samsung Mobile Samsung Notes applying paragraphs out-of-bounds read | 5.5CNA v3.1 | 0.2% | 2024-08-07 | Fix |
| CVE-2024-34623 | Samsung Mobile Samsung Notes applying connected information out-of-bounds write | 7.8CNA v3.1 | 0.2% | 2024-08-07 | Fix |
| CVE-2024-34622 | Samsung Mobile Samsung Notes appending paragraph out-of-bounds write | 7.8CNA v3.1 | 0.2% | 2024-08-07 | Fix |
| CVE-2024-34621 | Samsung Mobile Samsung Notes applying binary out-of-bounds read | 5.5CNA v3.1 | 0.2% | 2024-08-07 | Fix |
| CVE-2024-34620 | Samsung Mobile Devices SumeNNService improper privilege management | 8.4CNA v3.1 | 0.1% | 2024-08-07 | Fix |
| CVE-2024-34619 | Samsung Mobile Devices librtp.so improper input validation | 7.5CNA v3.1 | 0.5% | 2024-08-07 | Fix |
| CVE-2024-34618 | Samsung Mobile Devices System property improper access control | 4.0CNA v3.1 | 0.1% | 2024-08-07 | Fix |
| CVE-2024-34617 | Samsung Mobile Devices Telephony improper permissions | 4.0CNA v3.1 | 0.1% | 2024-08-07 | Fix |
| CVE-2024-34616 | Samsung Mobile Devices KnoxDualDARPolicy improper permissions | 5.1CNA v3.1 | 0.1% | 2024-08-07 | Fix |
| CVE-2024-34615 | Samsung Mobile Devices libsmat.so out-of-bounds write | 5.1CNA v3.1 | 0.1% | 2024-08-07 | Fix |
| CVE-2024-34614 | Samsung Mobile Devices libsmat.so out-of-bounds write | 7.3CNA v3.1 | 0.2% | 2024-08-07 | Fix |
| CVE-2024-34613 | Samsung Mobile Devices Galaxy Watch improper access control | 4.0CNA v3.1 | 0.1% | 2024-08-07 | Fix |
| CVE-2024-34612 | Samsung Mobile Devices libcodec2secmp4vdec.so out-of-bounds write | 7.3CNA v3.1 | 0.2% | 2024-08-07 | Fix |
| CVE-2024-34611 | Samsung Mobile Devices KnoxService improper access control | 5.1CNA v3.1 | 0.1% | 2024-08-07 | Fix |
| CVE-2024-34610 | Samsung Mobile Devices ExtControlDeviceService improper access control | 5.1CNA v3.1 | 0.1% | 2024-08-07 | Fix |
| CVE-2024-34609 | Samsung Mobile Devices VoiceNoteService improper access control | 6.2CNA v3.1 | 0.1% | 2024-08-07 | Fix |
| CVE-2024-34608 | Samsung Mobile Devices PaymentManagerService improper access control | 6.2CNA v3.1 | 0.1% | 2024-08-07 | Fix |
| CVE-2024-34607 | Samsung Mobile Devices improper access control | 6.2CNA v3.1 | 0.1% | 2024-08-07 | Fix |
| CVE-2024-34606 | Samsung Mobile Devices SmartThingsService improper access control | 6.2CNA v3.1 | 0.1% | 2024-08-07 | Fix |
| CVE-2024-34605 | Samsung Mobile Devices improper access control | 6.2CNA v3.1 | 0.1% | 2024-08-07 | Fix |
| CVE-2024-34604 | Samsung Mobile Devices LedCoverService improper access control | 6.2CNA v3.1 | 0.1% | 2024-08-07 | Fix |
| CVE-2024-34480 | oretnom23 Computer Laboratory Management System SQL injection | 9.8v3.1 | 0.6% | 2024-08-07 | |
| CVE-2024-34479 | oretnom23 Computer Laboratory Management System SQL injection | 9.8v3.1 | 0.7% | 2024-08-07 | |
| CVE-2024-20479 | Cisco Identity Services Engine Software cross-site scripting | 4.8CNA v3.1 | 0.3% | 2024-08-07 | Fix |
| CVE-2024-20454 | Cisco Small Business IP Phones buffer overflow | 9.8CNA v3.1 | 6.6% | 2024-08-07 | |
| CVE-2024-20451 | Cisco Small Business IP Phones buffer overflow | 7.5CNA v3.1 | 0.8% | 2024-08-07 | |
| CVE-2024-20450 | Cisco Small Business IP Phones buffer overflow | 9.8CNA v3.1 | 7.2% | 2024-08-07 | |
| CVE-2024-20443 | Cisco Adaptive Security Appliance (ASA) Software cross-site scripting | 5.4CNA v3.1 | 0.3% | 2024-08-07 | Fix |
| CVE-2024-7585 | Tenda i22 apPortalAuth formApPortalWebAuth buffer overflow | 9.8v3.1 | 1.3% | 2024-08-07 | |
| CVE-2024-7584 | Tenda i22 apPortalPhoneAuth formApPortalPhoneAuth buffer overflow | 9.8v3.1 | 1.3% | 2024-08-07 | |
| CVE-2024-7583 | Tenda i22 apPortalOneKeyAuth formApPortalOneKeyAuth buffer overflow | 9.8v3.1 | 1.4% | 2024-08-07 | |
| CVE-2024-7582 | Tenda i22 apPortalAccessCodeAuth formApPortalAccessCodeAuth buffer overflow | 9.8v3.1 | 1.4% | 2024-08-07 | |
| CVE-2024-7581 | Tenda A301 WifiBasicSet formWifiBasicSet stack-based overflow | 9.8v3.1 | 1.4% | 2024-08-07 | |
| CVE-2024-7580 | Alien Technology ALR-F800 system.html os command injection | 9.8v3.1 | 8.9% | 2024-08-07 | |
| CVE-2024-7579 | Alien Technology ALR-F800 File Name upgrade.cgi popen os command injection | 8.8v3.1 | 8.4% | 2024-08-07 | |
| CVE-2024-7578 | Alien Technology ALR-F800 cmd.php improper authorization | 9.8v3.1 | 0.8% | 2024-08-07 | |
| CVE-2024-7553 | MongoDB Server accessing Untrusted Directory may allow local privilege escalation | 7.3CNA v3.1 | 0.3% | 2024-08-07 | Fix |
| CVE-2024-7355 | Organization chart WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.3% | 2024-08-07 | Fix |
| CVE-2024-7353 | Accept Stripe Payments WordPress plugin stored cross-site scripting | 5.4CNA v3.1 | 0.3% | 2024-08-07 | Fix |
| CVE-2024-7267 | Internal infrastructure data leak in EZD RP | 6.5NVD v3.1 | 0.6% | 2024-08-07 | Fix |
| CVE-2024-7266 | Naukowa i Akademicka Sieć Komputerowa - Państwowy Instytut Badawczy EZD RP incorrect user management | 4.3NVD v3.1 | 0.3% | 2024-08-07 | Fix |
| CVE-2024-7265 | Privilege escalation in EZD RP | 8.8v3.1 | 0.5% | 2024-08-07 | Fix |
| CVE-2024-7143 | Pulpproject pulp pulpcore: Rbac permissions incorrectly assigned in tasks that create objects | 6.7CNA v3.0 | 0.6% | 2024-08-07 | Fix |
| CVE-2024-7061 | Okta Verify path traversal | 5.5CNA v3.1 | 0.2% | 2024-08-07 | Fix |
| CVE-2024-6890 | Journyx Unauthenticated Password Reset Bruteforce | 8.8NVD v3.1 | 0.7% | 2024-08-07 | |
| CVE-2024-6707 | open-webui open WebUI arbitrary file upload + path traversal | 8.8v3.1 | 1.0% | 2024-08-07 | |
| CVE-2024-6706 | open-webui open WebUI stored cross-site scripting | 6.1v3.1 | 0.7% | 2024-08-07 | Fix |
| CVE-2024-6522 | Modern Events Calendar WordPress plugin authenticated (Subscriber+) server side request forgery | 9.6v3.1 | 0.4% | 2024-08-07 | Fix |
| CVE-2024-6494 | WordPress File Upload plugin unauthenticated stored XSS | 6.1CISA ADP v3.1 | 0.4% | 2024-08-07 | Fix |
| CVE-2024-5290 | w1.fi wpa_supplicant uncontrolled search path | 8.8CNA v3.1 | 0.7% | 2024-08-07 | Fix |
| CVE-2024-3973 | House Manager WordPress plugin reflected XSS | 4.8CISA ADP v3.1 | 0.3% | 2024-08-07 | |
| CVE-2024-43114 | JetBrains TeamCity incorrect default permissions | 7.5CNA v3.1 | 0.2% | 2024-08-06 | Fix |
| CVE-2024-43113 | Mozilla Firefox cross-site scripting | 6.1v3.1 | 0.3% | 2024-08-06 | Fix |
| CVE-2024-43112 | Mozilla Firefox cross-site scripting | 6.1v3.1 | 0.3% | 2024-08-06 | Fix |
| CVE-2024-43111 | Mozilla Firefox cross-site scripting | 6.1NVD v3.1 | 0.3% | 2024-08-06 | Fix |
| CVE-2024-42400 | ArubaOS Soft AP daemon denial of service | 5.3CNA v3.1 | 0.4% | 2024-08-06 | Fix |
| CVE-2024-42399 | ArubaOS Soft AP daemon denial of service | 5.3CNA v3.1 | 0.4% | 2024-08-06 | Fix |
| CVE-2024-42398 | ArubaOS Soft AP daemon denial of service | 5.3CNA v3.1 | 0.4% | 2024-08-06 | Fix |
| CVE-2024-42397 | ArubaOS AP Certificate Management daemon denial of service | 5.3CNA v3.1 | 0.3% | 2024-08-06 | Fix |
| CVE-2024-42396 | ArubaOS AP Certificate Management daemon denial of service | 5.3CNA v3.1 | 0.3% | 2024-08-06 | Fix |
| CVE-2024-42395 | ArubaOS and InstantOS AP Certificate Management Service buffer overflow | 9.8CNA v3.1 | 0.4% | 2024-08-06 | Fix |
| CVE-2024-42394 | ArubaOS and InstantOS Soft AP Daemon buffer overflow | 9.8CNA v3.1 | 0.6% | 2024-08-06 | Fix |
| CVE-2024-42393 | ArubaOS and InstantOS Soft AP Daemon buffer overflow | 9.8CNA v3.1 | 0.6% | 2024-08-06 | Fix |
| CVE-2024-42358 | Loop with unreachable exit condition (infinite loop) in pdfio | 6.2CNA v3.1 | 0.3% | 2024-08-06 | Fix |
| CVE-2024-42347 | URL preview setting for a room is controllable by the homeserver in matrix-react-sdk | 7.7CNA v3.1 | 0.4% | 2024-08-06 | Fix |
| CVE-2024-42219 | 1password improper equivalence validation | 7.8v3.1 | 0.3% | 2024-08-06 | Fix |
| CVE-2024-42218 | 1password improper equivalence validation | 4.7v3.1 | 0.2% | 2024-08-06 | Fix |
| CVE-2024-41995 | Ricoh JavaTM Platform insecure default initialization | 7.5CISA ADP v3.1 | 0.5% | 2024-08-06 | |
| CVE-2024-41913 | Clariti Manager arbitrary file upload | 8.8v3.1 | 0.5% | 2024-08-06 | Fix |
| CVE-2024-41911 | HP Poly Clariti Manager cross-site scripting | 5.4v3.1 | 0.3% | 2024-08-06 | Fix |
| CVE-2024-41910 | HP Poly Clariti Manager cross-site scripting | 6.1v3.1 | 0.3% | 2024-08-06 | Fix |
| CVE-2024-41677 | Cross-site scripting (XSS) vulnerability due to improper HTML escaping in Qwik | 6.3CNA v3.1 | 0.5% | 2024-08-06 | Fix |
| CVE-2024-41616 | D-Link DIR-300 hard-coded password | 9.8v3.1 | 0.8% | 2024-08-06 | |
| CVE-2024-41333 | PHPGurukul Tourism Management System reflected cross-site scripting | 6.1v3.1 | 0.5% | 2024-08-06 | |
| CVE-2024-41270 | Gorush uses deprecated TLS versions | 9.1v3.1 | 0.3% | 2024-08-06 | Fix |
| CVE-2024-41226 | Automationanywhere Automation 360 CSV injection | 7.8v3.1 | 0.6% | 2024-08-06 | |
| CVE-2024-40101 | Microweber reflected cross-site scripting (XSS) | 6.1NVD v3.1 | 0.9% | 2024-08-06 | Fix |
| CVE-2024-39817 | Cybozu Office information disclosure | 6.5v3.1 | 0.4% | 2024-08-06 | Fix |
| CVE-2024-39751 | IBM InfoSphere Information Server information disclosure | 4.3CNA v3.1 | 0.4% | 2024-08-06 | Fix |
| CVE-2024-39229 | GL.iNet AR300M16 improper message integrity enforcement | 5.3v3.1 | 0.2% | 2024-08-06 | |
| CVE-2024-39228 | GL.iNet AR300M16 OS command injection | 9.8v3.1 | 0.7% | 2024-08-06 | |
| CVE-2024-39227 | GL.iNet AR300M16 special element injection | 9.8v3.1 | 1.2% | 2024-08-06 | |
| CVE-2024-39226 | GL.iNet AR300M16 path traversal | 9.8v3.1 | 20.6% | 2024-08-06 | Emerging Threats |
| CVE-2024-39225 | GL.iNet AR300M16 missing brute-force protection | 9.8v3.1 | 14.5% | 2024-08-06 | Emerging ThreatsKCV |
| CVE-2024-38206 | Microsoft Copilot Studio information disclosure | 8.5CNA v3.1 | 12.3% | 2024-08-06 | Fix |
| CVE-2024-38166 | Microsoft Dynamics 365 cross-site scripting | 8.2CNA v3.1 | 0.8% | 2024-08-06 | Fix |
| CVE-2024-36424 | K7COMPUTING K7 Ultimate Security null pointer dereference | 5.5v3.1 | 1.0% | 2024-08-06 | Exploit codeFix |
| CVE-2024-33994 | Cross-site scripting (XSS) vulnerability in Janobe School Event Management System | 6.1NVD v3.1 | 0.3% | 2024-08-06 | |
| CVE-2024-33993 | Cross-site scripting (XSS) vulnerability in Janobe School Event Management System | 6.1NVD v3.1 | 0.3% | 2024-08-06 | |
| CVE-2024-33992 | Cross-site scripting (XSS) vulnerability in Janobe School Event Management System | 6.1NVD v3.1 | 0.3% | 2024-08-06 | |
| CVE-2024-33991 | Cross-site scripting (XSS) vulnerability in Janobe School Event Management System | 6.1NVD v3.1 | 0.3% | 2024-08-06 | |
| CVE-2024-33990 | Cross-site scripting (XSS) vulnerability in Janobe School Event Management System | 6.1NVD v3.1 | 0.3% | 2024-08-06 | |
| CVE-2024-33989 | Cross-site scripting (XSS) vulnerability in Janobe School Event Management System | 6.1NVD v3.1 | 0.3% | 2024-08-06 | |
| CVE-2024-33988 | Cross-site scripting (XSS) vulnerability in Janobe products | 6.1NVD v3.1 | 0.3% | 2024-08-06 | |
| CVE-2024-33987 | Cross-site scripting (XSS) vulnerability in Janobe products | 6.1NVD v3.1 | 0.3% | 2024-08-06 | |
| CVE-2024-33986 | Cross-site scripting (XSS) vulnerability in Janobe products | 6.1NVD v3.1 | 0.3% | 2024-08-06 | |
| CVE-2024-33985 | Cross-site scripting (XSS) vulnerability in Janobe products | 6.1NVD v3.1 | 0.3% | 2024-08-06 | |
| CVE-2024-33984 | Cross-site scripting (XSS) vulnerability in Janobe products | 6.1NVD v3.1 | 0.3% | 2024-08-06 | |
| CVE-2024-33983 | Cross-site scripting (XSS) vulnerability in Janobe products | 6.1NVD v3.1 | 0.3% | 2024-08-06 | |
| CVE-2024-33982 | Cross-site scripting (XSS) vulnerability in Janobe products | 6.1NVD v3.1 | 0.3% | 2024-08-06 | |
| CVE-2024-33981 | Cross-site scripting in Janobe products | 6.1NVD v3.1 | 0.3% | 2024-08-06 | |
| CVE-2024-33980 | Cross-site scripting in Janobe products | 6.1NVD v3.1 | 0.3% | 2024-08-06 | |
| CVE-2024-33979 | Cross-site scripting in Janobe products | 6.1NVD v3.1 | 0.3% | 2024-08-06 | |
| CVE-2024-33978 | Cross-site scripting in Janobe E-Negosyo System | 6.1NVD v3.1 | 0.3% | 2024-08-06 | |
| CVE-2024-33977 | Cross-site scripting in Janobe E-Negosyo System | 6.1NVD v3.1 | 0.3% | 2024-08-06 | |
| CVE-2024-33976 | Cross-site scripting in Janobe E-Negosyo System | 6.1NVD v3.1 | 0.3% | 2024-08-06 | |
| CVE-2024-33975 | Cross-site scripting in Janobe E-Negosyo System | 6.1NVD v3.1 | 0.3% | 2024-08-06 | |
| CVE-2024-33974 | SQL injection in Janobe products | 9.8v3.1 | 0.4% | 2024-08-06 | |
| CVE-2024-33973 | SQL injection in Janobe products | 7.5NVD v3.1 | 0.4% | 2024-08-06 | |
| CVE-2024-33972 | SQL injection in Janobe products | 7.5NVD v3.1 | 0.4% | 2024-08-06 | |
| CVE-2024-33971 | SQL injection in Janobe products | 7.5NVD v3.1 | 0.4% | 2024-08-06 | |
| CVE-2024-33970 | SQL injection in Janobe products | 7.5NVD v3.1 | 0.4% | 2024-08-06 | |
| CVE-2024-33969 | SQL injection in Janobe products | 7.5NVD v3.1 | 0.4% | 2024-08-06 | |
| CVE-2024-33968 | SQL injection in Janobe products | 7.5NVD v3.1 | 0.5% | 2024-08-06 | |
| CVE-2024-33967 | SQL injection in Janobe products | 7.5NVD v3.1 | 0.4% | 2024-08-06 | |
| CVE-2024-33966 | SQL injection in Janobe products | 7.5NVD v3.1 | 0.5% | 2024-08-06 | |
| CVE-2024-33965 | SQL injection in Janobe products | 7.5NVD v3.1 | 0.4% | 2024-08-06 | |
| CVE-2024-33964 | SQL injection in Janobe products | 7.5NVD v3.1 | 0.5% | 2024-08-06 | |
| CVE-2024-33963 | SQL injection in Janobe products | 7.5NVD v3.1 | 0.5% | 2024-08-06 | |
| CVE-2024-33962 | SQL injection in Janobe products | 7.5NVD v3.1 | 0.5% | 2024-08-06 | |
| CVE-2024-33961 | SQL injection in Janobe products | 7.5NVD v3.1 | 0.5% | 2024-08-06 | |
| CVE-2024-33960 | SQL injection in Janobe products | 9.8v3.1 | 0.5% | 2024-08-06 | |
| CVE-2024-33959 | SQL injection in Janobe products | 7.5NVD v3.1 | 0.4% | 2024-08-06 | |
| CVE-2024-33958 | SQL injection in Janobe E-Negosyo System | 7.5NVD v3.1 | 0.4% | 2024-08-06 | |
| CVE-2024-33957 | SQL injection in Janobe E-Negosyo System | 7.5NVD v3.1 | 0.4% | 2024-08-06 | |
| CVE-2024-33897 | HMS Networks Ewon Cosy+ 4G Apac forced browsing | 9.1v3.1 | 0.7% | 2024-08-06 | Fix |
| CVE-2024-30170 | SSH Privx denial of service | 9.1v3.1 | 0.6% | 2024-08-06 | Fix |
| CVE-2024-28962 | Dell Update (DU) externally controlled resource reference | 6.5CNA v3.1 | 0.4% | 2024-08-06 | Fix |
| CVE-2024-28740 | Koha cross-site scripting | 9.6v3.1 | 0.7% | 2024-08-06 | |
| CVE-2024-28739 | Koha command injection | 7.2NVD v3.1 | 18.9% | 2024-08-06 | |
| CVE-2024-23483 | Zscaler Client Connector local privilege escalation via lack of input validation | 7.0CNA v3.1 | 0.7% | 2024-08-06 | Fix |
| CVE-2024-23464 | Zscaler bypass with administrative privileges on Windows | 7.2CNA v3.1 | 0.4% | 2024-08-06 | Fix |
| CVE-2024-23460 | Zscaler Client Connector incorrect signature validation of package | 6.4CNA v3.1 | 0.1% | 2024-08-06 | Fix |
| CVE-2024-23458 | Local privilege escalation on Zscaler Client Connector on Windows | 7.3CNA v3.1 | 0.1% | 2024-08-06 | Fix |
| CVE-2024-23456 | Zscaler Client Connector signature validation issue leads to Anti-tampering bypass | 7.8CNA v3.1 | 0.2% | 2024-08-06 | Fix |
| CVE-2024-7564 | Logsign Unified SecOps Platform directory traversal information disclosure | 6.5v3.1 | 1.2% | 2024-08-06 | |
| CVE-2024-7552 | DataGear data schema page expression language injection | 8.8v3.1 | 0.6% | 2024-08-06 | |
| CVE-2024-7551 | juzaweb CMS Theme Editor default path traversal | 4.9v3.1 | 0.9% | 2024-08-06 | |
| CVE-2024-7550 | Google Chrome V8 type confusion | 8.8v3.1 | 0.7% | 2024-08-06 | Fix |
| CVE-2024-7547 | oFono SMS Decoder stack-based buffer overflow privilege escalation | 7.8v3.1 | 0.3% | 2024-08-06 | Fix |
| CVE-2024-7546 | oFono SimToolKit heap-based buffer overflow privilege escalation | 7.8v3.1 | 0.3% | 2024-08-06 | Fix |
| CVE-2024-7545 | oFono SimToolKit heap-based buffer overflow privilege escalation | 7.8v3.1 | 0.3% | 2024-08-06 | Fix |
| CVE-2024-7544 | oFono SimToolKit heap-based buffer overflow privilege escalation | 7.8v3.1 | 0.3% | 2024-08-06 | Fix |
| CVE-2024-7543 | oFono SimToolKit heap-based buffer overflow privilege escalation | 7.8v3.1 | 0.3% | 2024-08-06 | Fix |
| CVE-2024-7542 | oFono AT CMGR command uninitialized variable information disclosure | 3.3v3.1 | 0.3% | 2024-08-06 | Fix |
| CVE-2024-7541 | oFono AT CMT command uninitialized variable information disclosure | 3.3v3.1 | 0.3% | 2024-08-06 | Fix |
| CVE-2024-7540 | oFono AT CMGL command uninitialized variable information disclosure | 3.3v3.1 | 0.3% | 2024-08-06 | Fix |
| CVE-2024-7539 | oFono CUSD stack-based buffer overflow code execution | 7.8v3.1 | 0.3% | 2024-08-06 | Fix |
| CVE-2024-7538 | oFono CUSD AT command stack-based buffer overflow code execution | 7.8v3.1 | 0.3% | 2024-08-06 | Fix |
| CVE-2024-7537 | oFono QMI SMS Handling out-of-bounds read information disclosure | 5.5v3.1 | 0.3% | 2024-08-06 | Fix |
| CVE-2024-7536 | Google Chrome WebAudio use-after-free | 8.8v3.1 | 0.7% | 2024-08-06 | Fix |
| CVE-2024-7535 | Google Chrome V8 inappropriate implementation | 8.8v3.1 | 0.7% | 2024-08-06 | Fix |
| CVE-2024-7534 | Google Chrome Layout heap-based buffer overflow | 8.8v3.1 | 0.8% | 2024-08-06 | Fix |
| CVE-2024-7533 | Google Chrome Sharing use-after-free | 8.8v3.1 | 0.7% | 2024-08-06 | Fix |
| CVE-2024-7532 | Google Chrome ANGLE out-of-bounds access | 8.8v3.1 | 1.1% | 2024-08-06 | Fix |
| CVE-2024-7531 | Mozilla Firefox time-of-check time-of-use race condition | 6.5v3.1 | 0.4% | 2024-08-06 | Fix |
| CVE-2024-7530 | Mozilla Firefox use-after-free | 8.8NVD v3.1 | 0.4% | 2024-08-06 | Fix |
| CVE-2024-7529 | Mozilla Firefox UI misrepresentation | 6.5NVD v3.1 | 0.5% | 2024-08-06 | Fix |
| CVE-2024-7528 | Mozilla Firefox use-after-free | 8.8NVD v3.1 | 0.5% | 2024-08-06 | Fix |
| CVE-2024-7527 | Mozilla Firefox use-after-free | 8.8v3.1 | 0.6% | 2024-08-06 | Fix |
| CVE-2024-7526 | Mozilla Firefox uninitialized resource use | 6.5NVD v3.1 | 0.6% | 2024-08-06 | Fix |
| CVE-2024-7525 | Mozilla Firefox incorrect default permissions | 8.1NVD v3.1 | 0.6% | 2024-08-06 | Fix |
| CVE-2024-7524 | Mozilla Firefox cross-site scripting | 6.1v3.1 | 0.5% | 2024-08-06 | Fix |
| CVE-2024-7523 | Mozilla Firefox clickjacking | 8.1v3.1 | 0.3% | 2024-08-06 | Fix |
| CVE-2024-7522 | Mozilla Firefox out-of-bounds read | 8.8NVD v3.1 | 0.6% | 2024-08-06 | Fix |
| CVE-2024-7521 | Mozilla Firefox improper exception handling | 8.8NVD v3.1 | 0.6% | 2024-08-06 | Fix |
| CVE-2024-7520 | Mozilla Firefox WebAssembly type confusion | 8.8v3.1 | 0.6% | 2024-08-06 | Fix |
| CVE-2024-7519 | Mozilla Firefox out-of-bounds write | 9.6v3.1 | 0.6% | 2024-08-06 | Fix |
| CVE-2024-7518 | Mozilla Firefox clickjacking | 6.5v3.1 | 0.5% | 2024-08-06 | Fix |
| CVE-2024-7506 | itsourcecode Tailoring Management System setlogo.php unrestricted upload | 8.8v3.1 | 0.7% | 2024-08-06 | |
| CVE-2024-7505 | itsourcecode Bike Delivery System contact_us_action.php SQL injection | 9.8v3.1 | 0.7% | 2024-08-06 | |
| CVE-2024-7502 | Delta Electronics DIAScreen stack-based buffer overflow | 7.8v3.1 | 0.4% | 2024-08-06 | Fix |
| CVE-2024-7500 | itsourcecode Airline Reservation System admin_class.php save_settings unrestricted upload | 9.8v3.1 | 0.7% | 2024-08-06 | |
| CVE-2024-7499 | itsourcecode Airline Reservation System flights.php SQL injection | 9.8v3.1 | 0.6% | 2024-08-06 | |
| CVE-2024-7498 | itsourcecode Airline Reservation System Admin Login page login.php login2 SQL injection | 9.8v3.1 | 0.7% | 2024-08-06 | |
| CVE-2024-7497 | itsourcecode Airline Reservation System index.php file inclusion | 8.8v3.1 | 0.7% | 2024-08-06 | |
| CVE-2024-7496 | itsourcecode Airline Reservation System index.php file inclusion | 8.8v3.1 | 0.7% | 2024-08-06 | |
| CVE-2024-7495 | itsourcecode Laravel Accounting System HomeController.php unrestricted upload | 9.8v3.1 | 0.6% | 2024-08-06 | |
| CVE-2024-7485 | Traffic Manager WordPress plugin unauthenticated stored cross-site scripting | 7.2CNA v3.1 | 0.4% | 2024-08-06 | |
| CVE-2024-7484 | CRM Perks Forms WordPress plugin authenticated (Administrator+) arbitrary file upload | 7.2CNA v3.1 | 0.9% | 2024-08-06 | Fix |
| CVE-2024-7317 | Folders WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.4% | 2024-08-06 | Fix |
| CVE-2024-7246 | Google HPACK table poisoning in gRPC C++, Python and Ruby | 6.3CNA v4.0 | 0.2% | 2024-08-06 | Fix |
| CVE-2024-7084 | Ajax Search Lite WordPress plugin Admin+ stored XSS | 4.8CISA ADP v3.1 | 0.4% | 2024-08-06 | Fix |
| CVE-2024-7082 | magazine3 Easy Table of Contents stored cross-site scripting | 6.1CISA ADP v3.1 | 0.4% | 2024-08-06 | Fix |
| CVE-2024-7055 | FFmpeg pnmdec.c pnm_decode_frame heap-based overflow | 8.8v3.1 | 1.4% | 2024-08-06 | Fix |
| CVE-2024-7009 | Calibre SQL injection | 7.1v3.1 | 13.9% | 2024-08-06 | Fix |
| CVE-2024-7008 | Calibre reflected cross-site scripting (XSS) | 6.1v3.1 | 25.6% | 2024-08-06 | NucleiFix |
| CVE-2024-7005 | Google Chrome improper input validation | 4.3NVD v3.1 | 0.5% | 2024-08-06 | Fix |
| CVE-2024-7004 | Google Chrome improper input validation | 4.3v3.1 | 0.4% | 2024-08-06 | Fix |
| CVE-2024-7003 | Google Chrome FedCM inappropriate implementation | 4.3v3.1 | 0.5% | 2024-08-06 | Fix |
| CVE-2024-7001 | Google Chrome HTML inappropriate implementation | 4.3v3.1 | 0.5% | 2024-08-06 | Fix |
| CVE-2024-7000 | Google Chrome CSS use-after-free | 8.8v3.1 | 0.6% | 2024-08-06 | Fix |
| CVE-2024-6999 | Google Chrome FedCM inappropriate implementation | 4.3v3.1 | 0.5% | 2024-08-06 | Fix |
| CVE-2024-6998 | Google Chrome User Education use-after-free | 8.8v3.1 | 0.6% | 2024-08-06 | Fix |
| CVE-2024-6997 | Google Chrome Tabs use-after-free | 8.8v3.1 | 0.6% | 2024-08-06 | Fix |
| CVE-2024-6996 | Google Chrome race condition | 3.1v3.1 | 0.4% | 2024-08-06 | Fix |
| CVE-2024-6995 | Google Chrome Fullscreen inappropriate implementation | 4.7NVD v3.1 | 0.6% | 2024-08-06 | Fix |
| CVE-2024-6994 | Google Chrome Layout heap-based buffer overflow | 8.8v3.1 | 0.6% | 2024-08-06 | Fix |
| CVE-2024-6991 | Google Chrome Dawn use-after-free | 8.8v3.1 | 0.6% | 2024-08-06 | Fix |
| CVE-2024-6989 | Google Chrome Loader use-after-free | 8.8v3.1 | 0.6% | 2024-08-06 | Fix |
| CVE-2024-6988 | Google Chrome Downloads use-after-free | 8.8v3.1 | 0.6% | 2024-08-06 | Fix |
| CVE-2024-6886 | Gitea Open Source Git Server inproper Sanitation of field leading to stored XSS | 10.0CNA v4.0 | 33.0% | 2024-08-06 | NucleiFix |
| CVE-2024-6782 | Calibre remote code execution | 9.8CNA v3.1 | 84.1% | 2024-08-06 | Reported exploitedNucleiMetasploitExploit codeFix |
| CVE-2024-6781 | Calibre arbitrary file read | 7.5v3.1 | 62.7% | 2024-08-06 | NucleiFix |
| CVE-2024-6766 | Shortcodes Ultimate Pro WordPress plugin Contributor+ stored XSS | 5.4CISA ADP v3.1 | 0.3% | 2024-08-06 | Fix |
| CVE-2024-6720 | Light Poll WordPress plugin Poll Answers deletion via CSRF | 8.8NVD v3.1 | 0.2% | 2024-08-06 | |
| CVE-2024-6651 | WordPress File Upload plugin reflected XSS | 6.1CISA ADP v3.1 | 15.7% | 2024-08-06 | NucleiExploit codeFix |
| CVE-2024-6359 | OpenText ArcSight Intelligence privilege escalation | 6.4CNA v3.1 | 0.3% | 2024-08-06 | Fix |
| CVE-2024-6358 | OpenText ArcSight Intelligence incorrect authorization | 6.3CNA v3.1 | 0.3% | 2024-08-06 | Fix |
| CVE-2024-6357 | OpenText ArcSight Intelligence insecure direct object reference | 6.3CNA v3.1 | 0.3% | 2024-08-06 | Fix |
| CVE-2024-6315 | Blox Page Builder WordPress plugin authenticated (Contributor+) arbitrary file upload | 8.8CNA v3.1 | 1.0% | 2024-08-06 | |
| CVE-2024-6203 | HaloITSM Password Reset Poisoning | 8.1v3.1 | 0.4% | 2024-08-06 | Fix |
| CVE-2024-6202 | HaloITSM SAML XML Signature Wrapping (XSW) | 9.8v3.1 | 0.5% | 2024-08-06 | Fix |
| CVE-2024-6201 | HaloITSM Emailing template injection | 5.3v3.1 | 0.3% | 2024-08-06 | Fix |
| CVE-2024-6200 | HaloITSM stored cross-site scripting in Tickets | 5.4NVD v3.1 | 0.4% | 2024-08-06 | Fix |
| CVE-2024-5963 | An unquoted executable path exists in Hitachi Device Manager | 6.7CNA v3.1 | 0.2% | 2024-08-06 | Fix |
| CVE-2024-5828 | EL injection vulnerability in Hitachi Tuning Manager | 8.6CNA v3.1 | 0.4% | 2024-08-06 | Fix |
| CVE-2024-5709 | WPBakery WordPress plugin authenticated (Author+) local file inclusion | 8.8CNA v3.1 | 1.0% | 2024-08-06 | Fix |
| CVE-2024-5708 | WPBakery WordPress plugin authenticated (Author+) stored cross-site scripting | 5.4v3.1 | 0.3% | 2024-08-06 | Fix |
| CVE-2024-42447 | Apache Airflow Providers FAB: FAB provider and did not let user to logout for Airflow | 9.8v3.1 | 0.9% | 2024-08-05 | Fix |
| CVE-2024-42352 | nuxt icon server-side request forgery (SSRF) in nuxt-icon | 8.6CNA v3.1 | 0.6% | 2024-08-05 | Fix |
| CVE-2024-42350 | Public key confusion in third party block in Biscuit | 3.0CNA v3.1 | 0.3% | 2024-08-05 | Fix |
| CVE-2024-42010 | mod_css_styles in Roundcube through 1.5.7 and 1.6.x through 1.6.7 insufficiently filters Cascading Style Sheets (CSS) token sequences in rendered e-mail messages, allowing a remote attacker to obtain sensitive information. | 7.5CISA ADP v3.1 | 66.7% | 2024-08-05 | KCVFix |
| CVE-2024-42009 | RoundCube Webmail cross-site scripting | 9.3v3.1 | 82.9% | 2024-08-05 | KEVNucleiEmerging ThreatsExploit codeKCVFix |
| CVE-2024-42008 | Roundcube Webmail cross-site scripting | 9.3v3.1 | 34.2% | 2024-08-05 | Exploit codeKCVFix |
| CVE-2024-41960 | Cross-site scripting (XSS) via Relay Hosts Configuration in Mailcow: Dockerized | 3.8CNA v3.1 | 0.3% | 2024-08-05 | Fix |
| CVE-2024-41959 | Cross-site scripting (XSS) via API Logs in Mailcow: Dockerized | 7.6CNA v3.1 | 0.4% | 2024-08-05 | Fix |
| CVE-2024-41958 | Two-Factor Authentication (2FA) Bypass in Mailcow: Dockerized | 6.6CNA v3.1 | 1.0% | 2024-08-05 | Exploit codeFix |
| CVE-2024-41889 | Pimax Play improper channel restriction | 9.8v3.1 | 0.7% | 2024-08-05 | Fix |
| CVE-2024-41820 | Cluster-level privilege escalation in kubean | 6.0CNA v3.1 | 0.4% | 2024-08-05 | Fix |
| CVE-2024-41816 | WordPress Cooked plugin persistent cross-site scripting via shortcode | 5.4CNA v3.1 | 0.4% | 2024-08-05 | Fix |
| CVE-2024-41811 | Icinga ipl-web ipl/web susceptible to cross-site request forgery (CSRF) | 3.9CNA v3.1 | 0.2% | 2024-08-05 | Fix |
| CVE-2024-41720 | ZEXELON Zwx-2000csw2-hn Firmware incorrect permission assignment | 8.0v3.1 | 0.2% | 2024-08-05 | Fix |
| CVE-2024-41381 | Microweber cross-site scripting (XSS) | 6.1CISA ADP v3.1 | 0.3% | 2024-08-05 | |
| CVE-2024-41380 | Microweber cross-site scripting (XSS) | 6.1CISA ADP v3.1 | 0.3% | 2024-08-05 | |
| CVE-2024-41376 | Dzzoffice path traversal | 8.8CISA ADP v3.1 | 1.0% | 2024-08-05 | |
| CVE-2024-41200 | Pandora KMPlayer denial of service | 5.5CISA ADP v3.1 | 0.2% | 2024-08-05 | |
| CVE-2024-40531 | Pantera CRM versions mass assignment | 8.8CISA ADP v3.1 | 0.4% | 2024-08-05 | |
| CVE-2024-40530 | Pantera CRM X-Forwarded-For header handling incorrect authorization | 7.5CISA ADP v3.1 | 0.4% | 2024-08-05 | |
| CVE-2024-40498 | SQL Injection vulnerability in PuneethReddyHC Online Shopping sysstem advanced v.1.0 allows an attacker to execute arbitrary code via the register.php | 9.8CISA ADP v3.1 | 1.0% | 2024-08-05 | |
| CVE-2024-40096 | Rd Labs Llc Who sensitive information in log files | 3.3v3.1 | 0.2% | 2024-08-05 | |
| CVE-2024-39838 | ZEXELON ZWX-2000CSW2-HN hard-coded credentials | 8.8v3.1 | 0.3% | 2024-08-05 | Fix |
| CVE-2024-39713 | Rocket.Chat server-side request forgery (SSRF) | 8.6v3.1 | 3.2% | 2024-08-05 | NucleiExploit codeFix |
| CVE-2024-38856 | Apache OFBiz incorrect authorization | 9.8NVD v3.1 | 99.4% | 2024-08-05 | KEVNucleiMetasploitEmerging ThreatsExploit codeKCVFix |
| CVE-2024-36448 | Apache IoTDB Workbench: SSRF vulnerability (EOL) | 7.3v3.1 | 0.7% | 2024-08-05 | Fix |
| CVE-2024-34344 | Remote code execution via the browser when running the test locally in nuxt | 8.8CNA v3.1 | 0.8% | 2024-08-05 | Fix |
| CVE-2024-34343 | Cross-site scripting (XSS) in navigateTo if used after SSR in nuxt | 6.3CNA v3.1 | 0.4% | 2024-08-05 | Fix |
| CVE-2024-33034 | Qualcomm Snapdragon use-after-free in Graphics Linux | 8.4CNA v3.1 | 0.1% | 2024-08-05 | Fix |
| CVE-2024-33028 | Qualcomm Snapdragon use-after-free in Automotive Telematics | 8.4CNA v3.1 | 0.1% | 2024-08-05 | Fix |
| CVE-2024-33027 | Qualcomm Snapdragon improper access control in Graphics Linux | 8.4CNA v3.1 | 0.1% | 2024-08-05 | Fix |
| CVE-2024-33026 | Qualcomm Snapdragon buffer over-read in WLAN host | 7.5CNA v3.1 | 0.3% | 2024-08-05 | Fix |
| CVE-2024-33025 | Qualcomm Snapdragon buffer over-read in WLAN host | 7.5CNA v3.1 | 0.3% | 2024-08-05 | Fix |
| CVE-2024-33024 | Qualcomm Snapdragon integer overflow or wraparound in WLAN host | 7.5CNA v3.1 | 0.3% | 2024-08-05 | Fix |
| CVE-2024-33023 | Qualcomm Snapdragon use-after-free in Graphics Linux | 8.4CNA v3.1 | 0.1% | 2024-08-05 | Fix |
| CVE-2024-33022 | Qualcomm Snapdragon integer overflow or wraparound in Automotive GPU | 8.4CNA v3.1 | 0.1% | 2024-08-05 | Fix |
| CVE-2024-33021 | Qualcomm Snapdragon use of uninitialized variable in Automotive GPU | 8.4CNA v3.1 | 0.1% | 2024-08-05 | Fix |
| CVE-2024-33020 | Qualcomm Snapdragon buffer over-read in WLAN host | 7.5CNA v3.1 | 0.3% | 2024-08-05 | Fix |
| CVE-2024-33019 | Qualcomm Snapdragon buffer over-read in WLAN host | 7.5CNA v3.1 | 0.3% | 2024-08-05 | Fix |
| CVE-2024-33018 | Qualcomm Snapdragon buffer over-read in WLAN host | 7.5CNA v3.1 | 0.3% | 2024-08-05 | Fix |
| CVE-2024-33015 | Qualcomm Snapdragon buffer over-read in WLAN host | 7.5CNA v3.1 | 0.3% | 2024-08-05 | Fix |
| CVE-2024-33014 | Qualcomm Snapdragon buffer over-read in WLAN host | 7.5CNA v3.1 | 0.3% | 2024-08-05 | Fix |
| CVE-2024-33013 | Qualcomm Snapdragon buffer over-read in WLAN host | 7.5CNA v3.1 | 0.3% | 2024-08-05 | Fix |
| CVE-2024-33012 | Qualcomm Snapdragon buffer over-read in WLAN host | 7.5CNA v3.1 | 0.3% | 2024-08-05 | Fix |
| CVE-2024-33011 | Qualcomm Snapdragon buffer over-read in WLAN host | 7.5CNA v3.1 | 0.3% | 2024-08-05 | Fix |
| CVE-2024-33010 | Qualcomm Snapdragon use-after-free in WLAN host | 7.5CNA v3.1 | 0.3% | 2024-08-05 | Fix |
| CVE-2024-23657 | Path traversal: ../filedir in Nuxt Devtools | 8.8CNA v3.1 | 1.2% | 2024-08-05 | Fix |
| CVE-2024-23384 | Qualcomm Snapdragon use-after-free in Graphics Linux | 8.4CNA v3.1 | 0.1% | 2024-08-05 | Fix |
| CVE-2024-23383 | Qualcomm Snapdragon use-after-free in Graphics Linux | 8.4CNA v3.1 | 0.1% | 2024-08-05 | Fix |
| CVE-2024-23382 | Qualcomm Snapdragon use-after-free in Graphics Linux | 8.4CNA v3.1 | 0.1% | 2024-08-05 | Fix |
| CVE-2024-23381 | Qualcomm Snapdragon use-after-free in Graphics Linux | 8.4CNA v3.1 | 0.1% | 2024-08-05 | Fix |
| CVE-2024-23357 | Qualcomm Snapdragon null pointer dereference in HLOS | 6.2CNA v3.1 | 0.1% | 2024-08-05 | Fix |
| CVE-2024-23356 | Qualcomm Snapdragon improper restriction of operations within the bounds of a memory buffer in HLOS | 7.8CNA v3.1 | 0.1% | 2024-08-05 | Fix |
| CVE-2024-23355 | Qualcomm Snapdragon keymaster memory corruption | 7.8CNA v3.1 | 0.1% | 2024-08-05 | Fix |
| CVE-2024-23353 | Qualcomm Snapdragon buffer over-read in Multi Mode Call Processor | 7.5CNA v3.1 | 0.3% | 2024-08-05 | Fix |
| CVE-2024-23352 | Qualcomm Snapdragon loop with unreachable exit condition in Multi Mode Call Processor | 7.5CNA v3.1 | 0.3% | 2024-08-05 | Fix |
| CVE-2024-23350 | Qualcomm Snapdragon reachable assertion in Multi Mode Call Processor | 6.5CNA v3.1 | 0.2% | 2024-08-05 | Fix |
| CVE-2024-21980 | AMD 3rd Gen AMD EPYC™ Processors memory corruption | 7.9CNA v3.1 | 0.4% | 2024-08-05 | Exploit codeFix |
| CVE-2024-21978 | AMD 3rd Gen AMD EPYC™ Processors SEV-SNP improper input validation | 6.0CNA v3.1 | 0.5% | 2024-08-05 | Exploit codeFix |
| CVE-2024-21481 | Qualcomm Snapdragon Resource Manager memory corruption | 8.4CNA v3.1 | 0.1% | 2024-08-05 | Fix |
| CVE-2024-21479 | Qualcomm Snapdragon buffer over-read in Audio | 7.5CNA v3.1 | 0.3% | 2024-08-05 | Fix |
| CVE-2024-21467 | Qualcomm Snapdragon buffer over-read in WLAN Host Communication | 6.5CNA v3.1 | 0.3% | 2024-08-05 | Fix |
| CVE-2024-21459 | Qualcomm Snapdragon buffer over-read in WLAN host | 6.5CNA v3.1 | 0.3% | 2024-08-05 | Fix |
| CVE-2024-7494 | SourceCodester Clinics Patient Management System new_prescription.php SQL injection | 9.8v3.1 | 0.6% | 2024-08-05 | |
| CVE-2024-7470 | Raisecom MSG1200/MSG2100E/MSG2200/MSG2300 web interface vpn_template_style.php OS command injection | 9.8v3.1 | 24.9% | 2024-08-05 | |
| CVE-2024-7469 | Raisecom MSG1200/MSG2100E/MSG2200/MSG2300 web interface list_vpn_web_custom.php OS command injection | 9.8v3.1 | 24.9% | 2024-08-05 | |
| CVE-2024-7468 | Raisecom MSG1200/MSG2100E/MSG2200/MSG2300 web interface list_service_manage.php OS command injection | 9.8v3.1 | 24.9% | 2024-08-05 | |
| CVE-2024-7467 | Raisecom MSG1200/MSG2100E/MSG2200/MSG2300 web interface list_ip_network.php OS command injection | 9.8v3.1 | 23.4% | 2024-08-05 | |
| CVE-2024-7466 | PMWeb Web Application Firewall cross-site scripting | 5.4v3.1 | 0.4% | 2024-08-05 | |
| CVE-2024-7465 | TOTOLINK CP450 cstecgi.cgi loginauth buffer overflow | 9.8v3.1 | 1.3% | 2024-08-05 | |
| CVE-2024-7464 | TOTOLINK CP900 Telnet service setTelnetCfg command injection | 9.8v3.1 | 19.9% | 2024-08-05 | |
| CVE-2024-7463 | TOTOLINK CP900 cstecgi.cgi UploadCustomModule buffer overflow | 9.8v3.1 | 11.0% | 2024-08-05 | |
| CVE-2024-7462 | TOTOLINK N350RT cstecgi.cgi setWizardCfg buffer overflow | 9.8v3.1 | 1.3% | 2024-08-05 | |
| CVE-2024-7461 | ForIP Tecnologia Administração PABX monitcallcenter authMonitCallcenter SQL injection | 9.8v3.1 | 0.5% | 2024-08-05 | |
| CVE-2024-7409 | Red Hat Enterprise Linux 8 qemu: Denial of service | 7.5CNA v3.0 | 1.0% | 2024-08-05 | Fix |
| CVE-2024-7397 | Korenix JetPort 5601v3 unauthenticated command injection | 9.3CNA v4.0 | 1.4% | 2024-08-05 | |
| CVE-2024-7396 | Korenix JetPort 5601v3 missing encryption | 7.1CNA v4.0 | 0.3% | 2024-08-05 | |
| CVE-2024-7395 | Korenix JetPort 5601v3 An authentication bypass | 9.3CNA v4.0 | 0.9% | 2024-08-05 | |
| CVE-2024-7383 | Red Hat Enterprise Linux 8 libnbd: Nbd server improper certificate validation | 7.4CNA v3.1 | 0.4% | 2024-08-05 | Fix |
| CVE-2024-6915 | JFrog Artifactory cache poisoning | 9.3CNA v3.1 | 0.6% | 2024-08-05 | Fix |
| CVE-2024-6710 | Ditty WordPress plugin Author+ stored XSS | 5.4NVD v3.1 | 0.4% | 2024-08-05 | Fix |
| CVE-2024-6498 | CollectChat WordPress plugin Admin+ XSS | 4.8NVD v3.1 | 0.3% | 2024-08-05 | Fix |
| CVE-2024-6472 | The Document Foundation LibreOffice macro signature verification improper certificate validation | 7.8CNA v3.1 | 0.2% | 2024-08-05 | Fix |
| CVE-2024-6361 | Improper neutralization vulnerability (XSS) has been discovered in OpenText™ ALM Octane product | 7.3CNA v4.0 | 0.2% | 2024-08-05 | Fix |
| CVE-2024-6270 | Community Events WordPress plugin Admin+ stored XSS | 4.8CISA ADP v3.1 | 0.4% | 2024-08-05 | Fix |
| CVE-2024-6118 | Hamastar MeetingHub Paperless Meetings plaintext storage of a password | 9.1v3.1 | 0.5% | 2024-08-05 | |
| CVE-2024-6117 | Hamastar MeetingHub Paperless Meetings unrestricted upload of file with dangerous type | 8.8NVD v3.1 | 0.5% | 2024-08-05 | |
| CVE-2024-5081 | WP eMember WordPress plugin stored XSS via CSRF | 6.1CISA ADP v3.1 | 0.2% | 2024-08-05 | Fix |
| CVE-2024-4607 | Mali GPU Kernel Driver allows improper GPU memory processing operations | 7.8v3.1 | 0.2% | 2024-08-05 | Fix |
| CVE-2024-3636 | Pinpoint Booking System WordPress plugin Admin+ stored XSS | 5.4CISA ADP v3.1 | 0.4% | 2024-08-05 | Fix |
| CVE-2024-2937 | Mali GPU Kernel Driver allows improper GPU memory processing operations | 7.8v3.1 | 0.2% | 2024-08-05 | Fix |
| CVE-2024-2232 | Himer - Social Questions and Answers WordPress theme CSRF While Sending the Invites | 8.1CISA ADP v3.1 | 0.3% | 2024-08-05 | Fix |
| CVE-2024-35143 | IBM Planning Analytics Local missing authentication | 6.7CNA v3.1 | 0.4% | 2024-08-04 | Fix |
| CVE-2024-7460 | OSWAPP Warehouse Inventory System change_password.php cross-site request forgery | 8.8v3.1 | 0.4% | 2024-08-04 | |
| CVE-2024-7459 | OSWAPP Warehouse Inventory System edit_account.php cross-site request forgery | 8.8v3.1 | 0.4% | 2024-08-04 | |
| CVE-2024-7458 | elunez Eladmin Database Management/Deployment Management upload path traversal | 9.8v3.1 | 0.8% | 2024-08-04 | |
| CVE-2024-7455 | itsourcecode Tailoring Management System partedit.php SQL injection | 9.8v3.1 | 0.5% | 2024-08-04 | |
| CVE-2024-7454 | SourceCodester Clinics Patient Management System patients.php patient_name SQL injection | 9.8v3.1 | 0.5% | 2024-08-04 | |
| CVE-2024-7453 | FastAdmin Attachment Management Section 4 cross-site scripting | 4.8v3.1 | 0.4% | 2024-08-04 | |
| CVE-2024-7452 | itsourcecode Placement Management System view_company.php SQL injection | 8.7NVD v4.0 | 0.6% | 2024-08-04 | |
| CVE-2024-7451 | itsourcecode Placement Management System apply_now.php SQL injection | 8.7NVD v4.0 | 0.6% | 2024-08-04 | |
| CVE-2024-7450 | itsourcecode Placement Management System Image resume_upload.php unrestricted upload | 8.7NVD v4.0 | 0.6% | 2024-08-04 | |
| CVE-2024-7449 | itsourcecode Placement Management System login.php SQL injection | 9.8v3.1 | 0.7% | 2024-08-04 | |
| CVE-2024-6331 | Injection by prompt injection in stitionai/Devika | 6.5NVD v3.1 | 0.5% | 2024-08-04 | |
| CVE-2024-38321 | IBM Business Automation Workflow information disclosure | 5.3CNA v3.1 | 0.4% | 2024-08-03 | Fix |
| CVE-2024-37286 | APM Server insertion of sensitive information into log file | 5.7CNA v3.1 | 0.5% | 2024-08-03 | Fix |
| CVE-2024-7446 | itsourcecode Ticket Reservation System list_tickets.php SQL injection | 7.2v3.1 | 0.6% | 2024-08-03 | |
| CVE-2024-7445 | itsourcecode Ticket Reservation System checkout_ticket_save.php SQL injection | 7.2v3.1 | 0.6% | 2024-08-03 | |
| CVE-2024-7444 | itsourcecode Ticket Reservation System Login page login.php SQL injection | 9.8v3.1 | 0.6% | 2024-08-03 | |
| CVE-2024-7443 | Vivotek IB8367A upload_file.cgi getenv command injection | 9.8v3.1 | 2.7% | 2024-08-03 | |
| CVE-2024-7442 | Vivotek SD9364 upload_file.cgi getenv command injection | 9.8v3.1 | 2.7% | 2024-08-03 | |
| CVE-2024-7441 | Vivotek SD9364 httpd read stack-based overflow | 9.8v3.1 | 8.1% | 2024-08-03 | |
| CVE-2024-7440 | Vivotek CC8160 upload_file.cgi getenv command injection | 9.8v3.1 | 2.7% | 2024-08-03 | |
| CVE-2024-7439 | Vivotek CC8160 httpd read stack-based overflow | 9.8v3.1 | 1.0% | 2024-08-03 | |
| CVE-2024-7438 | SimpleMachines SMF User Alert Read Status index.php resource injection | 4.3v3.1 | 0.5% | 2024-08-03 | |
| CVE-2024-7437 | SimpleMachines SMF Delete User index.php resource injection | 4.3v3.1 | 0.4% | 2024-08-03 | |
| CVE-2024-7436 | D-Link DI-8100 msp_info.htm msp_info_htm command injection | 8.8v3.1 | 7.8% | 2024-08-03 | |
| CVE-2024-7356 | Zephyr Project Manager WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.3% | 2024-08-03 | Fix |
| CVE-2024-7291 | JetFormBuilder WordPress plugin authenticated (Administrator+) privilege escalation | 7.2CNA v3.1 | 0.5% | 2024-08-03 | Fix |
| CVE-2024-7257 | YayExtra WooCommerce Extra Product Options WordPress plugin unauthenticated arbitrary file upload | 9.8CNA v3.1 | 1.0% | 2024-08-03 | Fix |
| CVE-2024-7031 | File Manager Pro Filester WordPress plugin authenticated plugin settings update | 8.8v3.1 | 0.6% | 2024-08-03 | Fix |
| CVE-2024-6872 | TemplateSpare theme update function missing authorization | 5.4v3.1 | 0.3% | 2024-08-03 | Fix |
| CVE-2024-6709 | Sync Post With Other Site WordPress plugin unauthorized access | 4.3CNA v3.1 | 0.3% | 2024-08-03 | Fix |
| CVE-2024-6477 | UsersWP WordPress plugin users information disclosure | 7.5CISA ADP v3.1 | 0.6% | 2024-08-03 | Fix |
| CVE-2024-6390 | Quiz and Survey Master (QSM) WordPress plugin Contributor+ stored XSS | 5.9CISA ADP v3.1 | 0.3% | 2024-08-03 | Fix |
| CVE-2024-42461 | Elliptic improper signature verification | 9.1NVD v3.1 | 0.6% | 2024-08-02 | Fix |
| CVE-2024-42460 | Elliptic's ECDSA missing check for whether leading bit of r and s is zero | 5.3CISA ADP v3.1 | 0.5% | 2024-08-02 | Fix |
| CVE-2024-42459 | Elliptic's EDDSA missing signature length check | 5.3CISA ADP v3.1 | 0.3% | 2024-08-02 | Fix |
| CVE-2024-42458 | any1 neatvnc improper input validation | 9.8v3.1 | 0.8% | 2024-08-02 | Fix |
| CVE-2024-42349 | fogproject FOG has a Log information disclosure | 5.3CNA v3.1 | 0.6% | 2024-08-02 | Fix |
| CVE-2024-42348 | fogproject FOG leaks sensitive information (AD domain, username and password) | 9.3CNA v3.1 | 0.6% | 2024-08-02 | Fix |
| CVE-2024-41519 | Mecodia Feripro cross-site scripting | 5.4v3.1 | 0.4% | 2024-08-02 | |
| CVE-2024-41518 | Mecodia Feripro improper access control | 7.5v3.1 | 0.7% | 2024-08-02 | |
| CVE-2024-41517 | Mecodia Feripro improper access control | 5.3v3.1 | 0.6% | 2024-08-02 | |
| CVE-2024-41310 | Yanzhenjie Andserver path traversal | 7.5v3.1 | 0.8% | 2024-08-02 | |
| CVE-2024-41127 | Monkeytype ci-failure-comment.yml GitHub workflow code injection | 8.4CNA v3.1 | 0.9% | 2024-08-02 | Exploit codeFix |
| CVE-2024-40723 | CHANGING Information Technology HWATAIServiSign Windows Version stack-based buffer overflow | 4.3CNA v3.1 | 0.5% | 2024-08-02 | Fix |
| CVE-2024-40722 | CHANGING Information Technology TCBServiSign Windows Version stack-based buffer overflow | 4.3CNA v3.1 | 0.5% | 2024-08-02 | Fix |
| CVE-2024-40721 | CHANGING Information Technology TCBServiSign Windows Version improper input validation | 8.8CNA v3.1 | 0.6% | 2024-08-02 | Fix |
| CVE-2024-40720 | CHANGING Information Technology TCBServiSign Windows Version improper input validation | 8.8v3.1 | 0.6% | 2024-08-02 | Fix |
| CVE-2024-40719 | CHANGING Information Technology TCBServiSign Windows Version inadequate encryption strength | 6.5CNA v3.1 | 0.2% | 2024-08-02 | Fix |
| CVE-2024-39396 | Adobe InDesign 2024 PCX File Parsing out of bound read | 5.5CNA v3.1 | 0.2% | 2024-08-02 | Fix |
| CVE-2024-39392 | Adobe InDesign 2024 EPS File Parsing Heap memory corruption remote code execution | 7.8CNA v3.1 | 0.4% | 2024-08-02 | Fix |
| CVE-2024-38891 | Horizoncloud Caterease cleartext transmission of sensitive information | 7.5NVD v3.1 | 0.4% | 2024-08-02 | |
| CVE-2024-38890 | Horizoncloud Caterease authentication bypass by replay | 8.4CISA ADP v3.1 | 0.2% | 2024-08-02 | |
| CVE-2024-38889 | Horizoncloud Caterease OS command injection | 9.8v3.1 | 0.8% | 2024-08-02 | |
| CVE-2024-38888 | Horizoncloud Caterease missing brute-force protection | 6.8CISA ADP v3.1 | 0.2% | 2024-08-02 | |
| CVE-2024-38887 | Horizoncloud Caterease OS command injection | 9.8v3.1 | 1.5% | 2024-08-02 | |
| CVE-2024-38886 | Horizoncloud Caterease improper verification of communication source | 9.8v3.1 | 0.6% | 2024-08-02 | |
| CVE-2024-38885 | Horizoncloud Caterease hard-coded password | 7.5CISA ADP v3.1 | 0.5% | 2024-08-02 | |
| CVE-2024-38884 | Horizoncloud Caterease incorrect authorization | 7.8CISA ADP v3.1 | 0.2% | 2024-08-02 | |
| CVE-2024-38883 | Caterease encryption negotiation vulnerability | 9.1CISA ADP v3.1 | 0.4% | 2024-08-02 | |
| CVE-2024-38882 | Horizoncloud Caterease OS command injection | 9.8CISA ADP v3.1 | 0.8% | 2024-08-02 | |
| CVE-2024-38881 | Horizoncloud Caterease predictable password hash salt | 7.5CISA ADP v3.1 | 0.4% | 2024-08-02 | |
| CVE-2024-38879 | Siemens Omnivise T3000 Application Server R9.2 improper input validation | 8.7CNA v4.0 | 0.8% | 2024-08-02 | Fix |
| CVE-2024-38878 | Siemens Omnivise T3000 Application Server R9.2 path traversal | 6.9CNA v4.0 | 11.5% | 2024-08-02 | Fix |
| CVE-2024-38877 | Siemens Omnivise T3000 Application Server R9.2 cleartext storage of sensitive information | 8.3CNA v4.0 | 0.2% | 2024-08-02 | Fix |
| CVE-2024-38876 | Siemens Omnivise T3000 Application Server R9.2 files accessible to external parties | 8.5CNA v4.0 | 0.2% | 2024-08-02 | Fix |
| CVE-2024-38776 | WP GoToWebinar WordPress plugin CSRF to XSS | 7.1CNA v3.1 | 0.2% | 2024-08-02 | Fix |
| CVE-2024-38482 | Dell CloudLink improper exception handling | 6.6CNA v3.1 | 0.4% | 2024-08-02 | Fix |
| CVE-2024-36268 | Apache InLong TubeMQ Client: Remote code execution | 9.8v3.1 | 1.2% | 2024-08-02 | Fix |
| CVE-2024-33896 | HMS Networks Ewon Cosy+ 4G Apac OS command injection | 7.2v3.1 | 4.0% | 2024-08-02 | Exploit codeFix |
| CVE-2024-33895 | HMS Networks Ewon Cosy+ 4G Apac hard-coded credentials | 6.6v3.1 | 0.5% | 2024-08-02 | Fix |
| CVE-2024-33894 | HMS Networks Ewon Cosy+ 4G Apac improper privilege management | 8.8CISA ADP v3.1 | 0.8% | 2024-08-02 | Fix |
| CVE-2024-33893 | HMS Networks Ewon Cosy+ 4G Apac cross-site scripting | 6.1v3.1 | 0.7% | 2024-08-02 | Fix |
| CVE-2024-33892 | HMS Networks Ewon Cosy+ 4G Apac Cosy+ devices running a firmware insecure permissions | 7.5v3.1 | 0.5% | 2024-08-02 | Fix |
| CVE-2024-28298 | E-bmsoft Bmplanning SQL injection | 8.8v3.1 | 0.5% | 2024-08-02 | |
| CVE-2024-28297 | AzureSoft MyHorus SQL injection | 7.5CISA ADP v3.1 | 0.4% | 2024-08-02 | |
| CVE-2024-27182 | Apache Linkis Basic management services: Engine material management arbitrary file deletion | 4.9v3.1 | 0.7% | 2024-08-02 | Fix |
| CVE-2024-27181 | Apache Linkis Basic management services: Privilege escalation Attack | 8.8CISA ADP v3.1 | 0.6% | 2024-08-02 | Fix |
| CVE-2024-22278 | Harbor fails to validate the user permissions when updating project configurations | 6.4CNA v3.1 | 0.4% | 2024-08-02 | Fix |
| CVE-2024-22169 | Misconfiguration in node.js causing a code execution in WD Discovery | 7.1CNA v4.0 | 0.3% | 2024-08-02 | Fix |
| CVE-2024-7389 | Forminator WordPress plugin HubSpot Developer API Key sensitive information exposure | 7.5CNA v3.1 | 0.7% | 2024-08-02 | Fix |
| CVE-2024-7378 | SourceCodester Simple Realtime Quiz System manage_question.php SQL injection | 9.8v3.1 | 0.6% | 2024-08-02 | |
| CVE-2024-7377 | SourceCodester Simple Realtime Quiz System view_result.php SQL injection | 9.8v3.1 | 0.6% | 2024-08-02 | |
| CVE-2024-7376 | SourceCodester Simple Realtime Quiz System print_quiz_records.php SQL injection | 9.8v3.1 | 0.6% | 2024-08-02 | |
| CVE-2024-7375 | SourceCodester Simple Realtime Quiz System my_quiz_result.php SQL injection | 9.8v3.1 | 0.6% | 2024-08-02 | |
| CVE-2024-7374 | SourceCodester Simple Realtime Quiz System manage_user.php SQL injection | 9.8v3.1 | 0.6% | 2024-08-02 | |
| CVE-2024-7373 | SourceCodester Simple Realtime Quiz System ajax.php SQL injection | 8.8v3.1 | 0.5% | 2024-08-02 | |
| CVE-2024-7372 | SourceCodester Simple Realtime Quiz System quiz_board.php SQL injection | 8.8v3.1 | 0.5% | 2024-08-02 | |
| CVE-2024-7323 | Digiwin EasyFlow .NET arbitrary file download | 6.5CNA v3.1 | 0.6% | 2024-08-02 | Fix |
| CVE-2024-7319 | OpenStack Heat openstack-heat may disclose sensitive information | 5.0CNA v3.1 | 0.4% | 2024-08-02 | |
| CVE-2024-7314 | anji-plus AJ-Report authentication bypass | 9.8v3.1 | 51.5% | 2024-08-02 | Reported exploitedNucleiFix |
| CVE-2024-7204 | Ai3 QbiBot stored XSS | 6.1CNA v3.1 | 0.3% | 2024-08-02 | Fix |
| CVE-2024-7029 | Command injection in AVTech AVM1203 (IP Camera) | 9.8v3.1 | 39.0% | 2024-08-02 | Reported exploitedNucleiEmerging ThreatsExploit code |
| CVE-2024-6704 | Comments wpDiscuz WordPress plugin unauthenticated HTML injection | 6.1v3.1 | 0.6% | 2024-08-02 | Fix |
| CVE-2024-6567 | Ebook Store WordPress plugin unauthenticated full path disclosure | 5.3CNA v3.1 | 0.4% | 2024-08-02 | Fix |
| CVE-2024-5595 | Essential Blocks WordPress plugin Contributor+ stored XSS | 5.4CISA ADP v3.1 | 0.4% | 2024-08-02 | Fix |
| CVE-2024-4643 | Element Pack Elementor Addons WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.4% | 2024-08-02 | Fix |
| CVE-2024-3827 | Spectra Pro WordPress plugin authenticated (Contributor+) stored cross-site scripting via block IDs | 5.4v3.1 | 0.3% | 2024-08-02 | Fix |
| CVE-2024-3238 | WordPress Menu Plugin Superfly Responsive Menu cross-site request forgery to arbitrary file deletion | 8.8CNA v3.1 | 0.4% | 2024-08-02 | Fix |
| CVE-2024-3056 | Podman: Kernel: Containers in shared ipc namespace are vulnerable to denial of service attack | 7.7CNA v3.1 | 0.5% | 2024-08-02 | Fix |
| CVE-2024-41965 | Vim has a double free in dialog_changed | 4.2CNA v3.1 | 0.3% | 2024-08-01 | Fix |
| CVE-2024-41962 | Bostr improper authorization | 4.6CNA v3.1 | 0.3% | 2024-08-01 | Fix |
| CVE-2024-41961 | Elektra vulnerable to remote code execution in universal search | 9.2CNA v3.1 | 0.6% | 2024-08-01 | |
| CVE-2024-41957 | Vim double free in src/alloc.c:616 | 4.5CNA v3.1 | 0.4% | 2024-08-01 | Fix |
| CVE-2024-41956 | charmbracelet soft-serve soft Serve allows arbitrary code execution by crafting git-lfs requests | 8.1CNA v3.1 | 0.5% | 2024-08-01 | Fix |
| CVE-2024-41949 | biscuit-rust vulnerable to public key confusion in third party block | 3.0CNA v3.1 | 0.2% | 2024-08-01 | Fix |
| CVE-2024-41948 | biscuit-java vulnerable to public key confusion in third party block | 3.0CNA v3.1 | 0.3% | 2024-08-01 | Fix |
| CVE-2024-41946 | Ruby REXML SAX2 and pull parser denial of service | 5.3CNA v3.1 | 1.2% | 2024-08-01 | Fix |
| CVE-2024-41926 | Mattermost malicious remote can claim that a user was synced from another remote | 2.7CNA v3.1 | 0.2% | 2024-08-01 | Fix |
| CVE-2024-41265 | Cortex establishes TLS connections with `InsecureSkipVerify` set to `true` | 7.5CISA ADP v3.1 | 0.3% | 2024-08-01 | |
| CVE-2024-41264 | Casdoor's use of`ssh.InsecureIgnoreHostKey` disables host key verification | 7.5v3.1 | 0.5% | 2024-08-01 | |
| CVE-2024-41260 | NetBird uses a static initialization vector (IV) | 7.5CISA ADP v3.1 | 0.5% | 2024-08-01 | Fix |
| CVE-2024-41259 | Navidrome uses MD5 hashing algorithm | 9.1CISA ADP v3.1 | 0.4% | 2024-08-01 | |
| CVE-2024-41162 | Mattermost malicious remote can make an arbitrary local channel read-only | 4.1CNA v3.1 | 0.3% | 2024-08-01 | Fix |
| CVE-2024-41144 | Mattermost malicious remote can create/update/delete arbitrary posts in arbitrary channels | 5.5CNA v3.1 | 0.4% | 2024-08-01 | Fix |
| CVE-2024-41123 | Ruby REXML resource exhaustion | 5.3CNA v3.1 | 1.3% | 2024-08-01 | Fix |
| CVE-2024-40883 | ELECOM WRC-X1500GS-B cross-site request forgery | 8.8v3.1 | 0.2% | 2024-08-01 | Fix |
| CVE-2024-39839 | Mattermost remote username set to an arbitrary string by remote user | 4.3CNA v3.1 | 0.3% | 2024-08-01 | Fix |
| CVE-2024-39837 | Mattermost malicious remote can create arbitrary channels | 3.8CNA v3.1 | 0.3% | 2024-08-01 | Fix |
| CVE-2024-39832 | Mattermost permanently local data deletion by malicious remote | 6.8CNA v3.1 | 0.5% | 2024-08-01 | Fix |
| CVE-2024-39777 | Mattermost malicious remote can invite itself to an arbitrary local channel | 8.7CNA v3.1 | 0.4% | 2024-08-01 | Fix |
| CVE-2024-39668 | Extensions for Elementor WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.3% | 2024-08-01 | Fix |
| CVE-2024-39667 | Element Pack Elementor Addons WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.3% | 2024-08-01 | Fix |
| CVE-2024-39665 | Filter and Grids WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.3% | 2024-08-01 | Fix |
| CVE-2024-39663 | WP Fast Total Search WordPress plugin cross-site scripting (XSS) | 7.1CNA v3.1 | 0.3% | 2024-08-01 | Fix |
| CVE-2024-39662 | Black Widgets For Elementor WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.3% | 2024-08-01 | Fix |
| CVE-2024-39661 | Kubio AI Page Builder WordPress plugin authenticated cross-site scripting (XSS) | 6.5CNA v3.1 | 0.3% | 2024-08-01 | Fix |
| CVE-2024-39660 | Photo Engine (Media Organizer and Lightroom) WordPress plugin cross-site scripting (XSS) | 5.9CNA v3.1 | 0.3% | 2024-08-01 | Fix |
| CVE-2024-39659 | WP-PostRatings WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.3% | 2024-08-01 | Fix |
| CVE-2024-39656 | Tin Canny Reporting for LearnDash WordPress plugin reflected cross-site scripting (XSS) | 7.1CNA v3.1 | 0.3% | 2024-08-01 | Fix |
| CVE-2024-39655 | LiquidPoll WordPress plugin unauthenticated cross-site scripting (XSS) | 6.5CNA v3.1 | 0.4% | 2024-08-01 | Fix |
| CVE-2024-39652 | WooCommerce PDF Vouchers WordPress plugin reflected cross-site scripting (XSS) | 6.1NVD v3.1 | 0.3% | 2024-08-01 | Fix |
| CVE-2024-39649 | Essential Addons for Elementor WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.3% | 2024-08-01 | Fix |
| CVE-2024-39648 | Eventin WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.3% | 2024-08-01 | Fix |
| CVE-2024-39647 | Message Filter for Contact Form 7 WordPress plugin cross-site scripting (XSS) | 6.1NVD v3.1 | 0.3% | 2024-08-01 | Fix |
| CVE-2024-39646 | Custom 404 Pro WordPress plugin reflected cross-site scripting (XSS) | 6.1NVD v3.1 | 0.6% | 2024-08-01 | NucleiFix |
| CVE-2024-39644 | Black Widgets For Elementor WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.3% | 2024-08-01 | Fix |
| CVE-2024-39643 | RegistrationMagic WordPress plugin cross-site scripting (XSS) | 6.1v3.1 | 0.3% | 2024-08-01 | Fix |
| CVE-2024-39637 | Edubin WordPress plugin server side request forgery (SSRF) | 5.4CNA v3.1 | 0.2% | 2024-08-01 | |
| CVE-2024-39636 | Better Find and Replace WordPress plugin PHP object injection | 8.3CNA v3.1 | 0.4% | 2024-08-01 | Fix |
| CVE-2024-39634 | PowerPack Pro for Elementor WordPress plugin Contributor+ privilege escalation | 8.8CNA v3.1 | 0.4% | 2024-08-01 | Fix |
| CVE-2024-39633 | PowerPack for Beaver Builder WordPress plugin Contributor+ privilege escalation | 8.8CNA v3.1 | 0.4% | 2024-08-01 | Fix |
| CVE-2024-39631 | Contest Gallery WordPress plugin cross-site scripting (XSS) | 6.1NVD v3.1 | 0.3% | 2024-08-01 | Fix |
| CVE-2024-39630 | Timetable and Event Schedule by MotoPress WordPress plugin PHP object injection | 5.5CNA v3.1 | 0.3% | 2024-08-01 | Fix |
| CVE-2024-39629 | Himalayas WordPress theme cross-site scripting (XSS) | 4.8v3.1 | 0.3% | 2024-08-01 | |
| CVE-2024-39627 | Photo Gallery, Sliders, Proofing and Themes NextGEN Gallery WordPress plugin cross-site scripting | 4.8v3.1 | 0.3% | 2024-08-01 | Fix |
| CVE-2024-39626 | Pretty Simple Popup Builder WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.3% | 2024-08-01 | Fix |
| CVE-2024-39624 | ListingPro WordPress theme local file inclusion | 8.8v3.1 | 0.5% | 2024-08-01 | Fix |
| CVE-2024-39621 | ListingPro WordPress plugin local file inclusion | 7.2v3.1 | 0.5% | 2024-08-01 | Fix |
| CVE-2024-39619 | ListingPro WordPress plugin unauthenticated local file inclusion | 9.8v3.1 | 0.6% | 2024-08-01 | Fix |
| CVE-2024-39607 | ELECOM WRC-X1500GS-B OS command injection | 6.8CISA ADP v3.1 | 0.9% | 2024-08-01 | |
| CVE-2024-39274 | Mattermost malicious remote can add users to arbitrary teams and channels | 8.7CNA v3.1 | 0.3% | 2024-08-01 | Fix |
| CVE-2024-38791 | AI ENGINE WordPress plugin server side request forgery (SSRF) | 7.1v3.1 | 0.2% | 2024-08-01 | Fix |
| CVE-2024-38775 | CTX Feed WordPress plugin arbitrary options update vulnerability | 7.2CNA v3.1 | 0.6% | 2024-08-01 | Fix |
| CVE-2024-38772 | JetWidgets for Elementor and WooCommerce WordPress plugin Contributor+ limited local file inclusion | 6.5CNA v3.1 | 0.5% | 2024-08-01 | Fix |
| CVE-2024-38770 | Backup and Staging by WP Time Capsule WordPress plugin Revmakx improper privilege management | 9.8CNA v3.1 | 0.5% | 2024-08-01 | Fix |
| CVE-2024-38768 | The Pack Elementor addons WordPress plugin local file inclusion | 8.8v3.1 | 0.5% | 2024-08-01 | Fix |
| CVE-2024-38761 | Zephyr Project Manager WordPress plugin sensitive data exposure via export file | 7.5v3.1 | 0.4% | 2024-08-01 | Fix |
| CVE-2024-38746 | MakeStories (for Google Web Stories) WordPress plugin arbitrary file download and SSRF | 7.1CNA v3.1 | 0.5% | 2024-08-01 | Fix |
| CVE-2024-38490 | Dell iDRAC Service Module (iSM) out-of-bounds write | 5.8CNA v3.1 | 0.2% | 2024-08-01 | Fix |
| CVE-2024-38489 | Dell iDRAC Service Module (iSM) out-of-bounds write | 3.1CNA v3.1 | 0.2% | 2024-08-01 | Fix |
| CVE-2024-38481 | Dell iDRAC Service Module (iSM) out-of-bounds read | 4.8CNA v3.1 | 0.2% | 2024-08-01 | Fix |
| CVE-2024-36492 | Mattermost existing local user overwritten by malicious remote | 7.4CNA v3.1 | 0.3% | 2024-08-01 | Fix |
| CVE-2024-34021 | ELECOM WRC-1167GST2 unrestricted file upload | 6.8CISA ADP v3.1 | 0.4% | 2024-08-01 | |
| CVE-2024-32931 | Johnson Controls exacqVision exacqVison Token Disclosed in URL | 5.7CNA v3.1 | 0.4% | 2024-08-01 | Fix |
| CVE-2024-32865 | Johnson Controls exacqVision exacqVison TLS certificate validation | 6.4CNA v3.1 | 0.1% | 2024-08-01 | Fix |
| CVE-2024-32864 | Johnson Controls exacqVision exacqVison HTTPS Session Establishment | 6.4CNA v3.1 | 0.2% | 2024-08-01 | Fix |
| CVE-2024-32863 | ExacqVison CSRF issues with Web Service | 6.8CNA v3.1 | 0.2% | 2024-08-01 | Fix |
| CVE-2024-32862 | Johnson Controls exacqVision Web Service vulnerability | 6.8CNA v3.1 | 0.4% | 2024-08-01 | Fix |
| CVE-2024-32758 | Johnson Controls exacqVision client-server key exchange vulnerability | 9.0CNA v4.0 | 0.4% | 2024-08-01 | Fix |
| CVE-2024-29977 | Mattermost malicious remote can create arbitrary reactions on arbitrary posts | 2.7CNA v3.1 | 0.3% | 2024-08-01 | Fix |
| CVE-2024-28972 | Dell InsightIQ weak cryptographic algorithm | 5.9CNA v3.1 | 0.3% | 2024-08-01 | Fix |
| CVE-2024-25948 | Dell iDRAC Service Module (iSM) out-of-bounds write | 4.8CNA v3.1 | 0.2% | 2024-08-01 | Fix |
| CVE-2024-25947 | Dell iDRAC Service Module (iSM) out-of-bounds write | 4.8CNA v3.1 | 0.2% | 2024-08-01 | Fix |
| CVE-2024-23600 | Ping Identity PingIDM Query Filter module information disclosure | 2.7CNA v3.1 | 0.7% | 2024-08-01 | |
| CVE-2024-7371 | SourceCodester Simple Realtime Quiz System quiz_view.php SQL injection | 8.8v3.1 | 0.5% | 2024-08-01 | |
| CVE-2024-7370 | SourceCodester Simple Realtime Quiz System manage_quiz.php SQL injection | 8.8v3.1 | 0.5% | 2024-08-01 | |
| CVE-2024-7369 | SourceCodester Simple Realtime Quiz System Login ajax.php SQL injection | 9.8v3.1 | 0.6% | 2024-08-01 | |
| CVE-2024-7368 | SourceCodester Simple Realtime Quiz System ajax.php cross-site scripting | 5.4v3.1 | 0.4% | 2024-08-01 | |
| CVE-2024-7367 | SourceCodester Simple Realtime Quiz System ajax.php cross-site request forgery | 8.8v3.1 | 0.3% | 2024-08-01 | |
| CVE-2024-7366 | SourceCodester Tracking Monitoring Management System Login ajax.php SQL injection | 9.8v3.1 | 0.6% | 2024-08-01 | |
| CVE-2024-7365 | SourceCodester Tracking Monitoring Management System manage_establishment.php SQL injection | 9.8v3.1 | 0.6% | 2024-08-01 | |
| CVE-2024-7364 | SourceCodester Tracking Monitoring Management System manage_records.php SQL injection | 9.8v3.1 | 0.6% | 2024-08-01 | |
| CVE-2024-7363 | SourceCodester Tracking Monitoring Management System manage_person.php SQL injection | 9.8v3.1 | 0.6% | 2024-08-01 | |
| CVE-2024-7362 | SourceCodester Tracking Monitoring Management System manage_user.php SQL injection | 9.8v3.1 | 0.6% | 2024-08-01 | |
| CVE-2024-7361 | SourceCodester Tracking Monitoring Management System ajax.php SQL injection | 9.8v3.1 | 0.5% | 2024-08-01 | |
| CVE-2024-7360 | SourceCodester Tracking Monitoring Management System ajax.php cross-site request forgery | 8.8v3.1 | 0.4% | 2024-08-01 | |
| CVE-2024-7359 | SourceCodester Tracking Monitoring Management System ajax.php cross-site scripting | 6.1v3.1 | 0.5% | 2024-08-01 | |
| CVE-2024-7358 | Point B Ltd Getscreen Agent Installation getscreen.msi temp file | 8.5CNA v4.0 | 0.2% | 2024-08-01 | |
| CVE-2024-7357 | D-Link DIR-600 soap.cgi soapcgi_main os command injection | 9.8v3.1 | 5.7% | 2024-08-01 | |
| CVE-2024-7343 | Baidu UEditor cross-site scripting | 6.1v3.1 | 0.5% | 2024-08-01 | |
| CVE-2024-7342 | Baidu UEditor unrestricted upload | 6.1v3.1 | 0.5% | 2024-08-01 | |
| CVE-2024-7339 | TVT DVR Td-2104ts-cl queryDevInfo information disclosure | 5.3v3.1 | 32.0% | 2024-08-01 | NucleiEmerging ThreatsExploit code |
| CVE-2024-7338 | TOTOLINK EX1200L cstecgi.cgi setParentalRules buffer overflow | 8.8v3.1 | 1.2% | 2024-08-01 | |
| CVE-2024-7337 | TOTOLINK EX1200L cstecgi.cgi loginauth buffer overflow | 8.8v3.1 | 1.2% | 2024-08-01 | |
| CVE-2024-7336 | TOTOLINK EX200 cstecgi.cgi loginauth buffer overflow | 8.8v3.1 | 1.3% | 2024-08-01 | |
| CVE-2024-7335 | TOTOLINK EX200 getSaveConfig buffer overflow | 8.8v3.1 | 1.2% | 2024-08-01 | |
| CVE-2024-7334 | TOTOLINK EX1200L cstecgi.cgi UploadCustomModule buffer overflow | 8.8v3.1 | 1.2% | 2024-08-01 | |
| CVE-2024-7333 | TOTOLINK N350RT cstecgi.cgi setParentalRules buffer overflow | 8.8v3.1 | 1.2% | 2024-08-01 | |
| CVE-2024-7332 | TOTOLINK CP450 Telnet service product.ini hard-coded password | 9.8v3.1 | 20.7% | 2024-08-01 | NucleiEmerging Threats |
| CVE-2024-7331 | TOTOLINK A3300R cstecgi.cgi UploadCustomModule buffer overflow | 8.8v3.1 | 1.2% | 2024-08-01 | |
| CVE-2024-7330 | YouDianCMS ydLib.php curl_exec server-side request forgery | 6.3v3.1 | 0.5% | 2024-08-01 | |
| CVE-2024-7302 | Blog2Social: Social Media Auto Post and Scheduler WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.4% | 2024-08-01 | Fix |
| CVE-2024-7256 | Google Chrome Dawn improper input validation | 8.8v3.1 | 0.6% | 2024-08-01 | Fix |
| CVE-2024-7255 | Google Chrome WebTransport out-of-bounds read | 8.8v3.1 | 0.7% | 2024-08-01 | Fix |
| CVE-2024-7211 | 1E Platform Duende Identity Server open redirect | 6.1v3.1 | 0.2% | 2024-08-01 | |
| CVE-2024-7093 | Server-side template injection in Dispatch message templates | 9.4CNA v4.0 | 0.5% | 2024-08-01 | |
| CVE-2024-6990 | Google Chrome uninitialized variable use | 8.8v3.1 | 0.9% | 2024-08-01 | Fix |
| CVE-2024-6923 | Python CPython email header injection due to unquoted newlines | 5.5CISA ADP v3.1 | 1.1% | 2024-08-01 | Fix |
| CVE-2024-6873 | ClickHouse native interface heap-based buffer overflow | 8.1CNA v3.1 | 0.7% | 2024-08-01 | Fix |
| CVE-2024-6698 | FundEngine Donation and Crowdfunding Platform WordPress plugin privilege escalation | 8.8CNA v3.1 | 0.4% | 2024-08-01 | Fix |
| CVE-2024-6687 | CTT Expresso para WooCommerce WordPress plugin information exposure via Unprotected directory | 7.5v3.1 | 0.4% | 2024-08-01 | Fix |
| CVE-2024-6529 | Ultimate Classified Listings WordPress plugin reflected XSS | 7.1CISA ADP v3.1 | 1.0% | 2024-08-01 | Fix |
| CVE-2024-6496 | Light Poll WordPress plugin Polls deletion via CSRF | 6.5CISA ADP v3.1 | 0.3% | 2024-08-01 | |
| CVE-2024-6346 | Gutenberg Blocks, Page Builder WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.3% | 2024-08-01 | Fix |
| CVE-2024-6242 | Rockwell Automation Chassis Restrictions Bypass vulnerability in Select Logix Devices | 7.3CNA v4.0 | 11.1% | 2024-08-01 | Fix |
| CVE-2024-6040 | lollms-webui binding management endpoints cross-site request forgery | 8.8v3.1 | 0.2% | 2024-08-01 | |
| CVE-2024-5678 | ManageEngine Applications Manager SQL injection | 4.7CNA v3.1 | 2.6% | 2024-08-01 | Fix |
| CVE-2024-5331 | Breakdance WordPress plugin missing authorization | 4.3v3.1 | 0.2% | 2024-08-01 | Fix |
| CVE-2024-5330 | Breakdance WordPress plugin authenticated (Contributor+) stored cross-site scripting | 5.4v3.1 | 0.3% | 2024-08-01 | Fix |
| CVE-2024-4353 | Concrete CMS stored XSS in Generate Board Name Input field | 4.6CNA v4.0 | 0.3% | 2024-08-01 | Fix |
| CVE-2024-4090 | My Sticky Bar WordPress plugin Admin+ stored XSS | 4.8CISA ADP v3.1 | 0.5% | 2024-08-01 | Fix |
| CVE-2024-3983 | WooCommerce Customers Manager WordPress plugin Bulk action via CSRF | 8.1CISA ADP v3.1 | 0.3% | 2024-08-01 | Fix |
| CVE-2024-2872 | Swift Framework WordPress plugin Contributor+ stored XSS | 4.8CISA ADP v3.1 | 0.3% | 2024-08-01 | Fix |
| CVE-2024-2843 | WooCommerce Customers Manager WordPress plugin user deletion via CSRF | 6.5CISA ADP v3.1 | 0.3% | 2024-08-01 | Fix |
| CVE-2024-2455 | Element Pack - Addon for Elementor Page Builder WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.3% | 2024-08-01 | Fix |
| CVE-2024-2090 | Remote Content Shortcode WordPress plugin authenticated (Contributor+) server-side request forgery | 6.4CNA v3.1 | 0.3% | 2024-08-01 | |
| CVE-2024-1747 | WooCommerce Customers Manager WordPress plugin Subscriber+ stored XSS | 6.5CISA ADP v3.1 | 0.2% | 2024-08-01 | Fix |