CVE-2024 records published in September 2024
This page lists the 2,394 CVE-2024 records published in September 2024, newest first, 1,000 to a page. The Cybersecurity and Infrastructure Security Agency's Known Exploited Vulnerabilities (KEV) catalog lists 13 of them. Each CVE opens on cve-security.com with its sources, detection content and vendor fixes, and the search on the CVE-2024 list filters these records by severity or signal.
- Critical
- 28111.7% of these records
- Listed in CISA KEV
- 130.5% of these records
- Reported exploited
- 50.2% of these records
- Detection signal
- 592.5% of these records
- Exploit code
- 793.3% of these records
- Actionable vendor fix
- 1,71671.7% of these records
Figures as of 2026-10-24 13:18 UTC. Records published in September 2024 have had from about 25 months to about 26 months to collect KEV listings, exploitation reports, detection content and exploit code. Records published more recently have had less time, which can hold their shares down.
| CVE | Summary | CVSS | EPSS | Published | Signals |
|---|---|---|---|---|---|
| CVE-2024-47641 | Confetti Fall Animation WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.3% | 2024-09-30 | Fix |
| CVE-2024-47536 | StarCitizenTools/citizen-skin vulnerable to stored, self-XSS in the real name field | 4.8CNA v4.0 | 0.5% | 2024-09-30 | Fix |
| CVE-2024-47532 | RestrictedPython information leakage via `AttributeError.obj` and the `string` module | 8.7CNA v4.0 | 0.7% | 2024-09-30 | Fix |
| CVE-2024-47531 | Scout contains insufficient output escaping of attachment names | 4.6CNA v3.1 | 0.3% | 2024-09-30 | |
| CVE-2024-47530 | Scout contains an open redirect on Login via `next` | 5.4CNA v3.1 | 0.4% | 2024-09-30 | Fix |
| CVE-2024-47178 | Basic-auth-connect's callback uses time unsafe string comparison | 8.7CNA v4.0 | 0.5% | 2024-09-30 | Fix |
| CVE-2024-47172 | Computer Vision Annotation Tool (Cvat) access control is broken in several PATCH endpoints | 5.4CNA v3.1 | 0.3% | 2024-09-30 | Fix |
| CVE-2024-47067 | Alist Contains a reflected cross-site scripting | 6.1NVD v3.1 | 0.4% | 2024-09-30 | Fix |
| CVE-2024-47064 | Computer Vision Annotation Tool (Cvat) contains a reflected XSS via request endpoints | 6.3CNA v4.0 | 0.3% | 2024-09-30 | Fix |
| CVE-2024-47063 | Computer Vision Annotation Tool (Cvat) contains a stored XSS via the quality report data endpoint | 6.2CNA v4.0 | 0.3% | 2024-09-30 | Fix |
| CVE-2024-46869 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btintel_pcie: Allocate memory for driver private data Fix driver not allocating memory for struct btintel_data which is used to store internal data. | 7.8CNA v3.1 | 0.2% | 2024-09-30 | Fix |
| CVE-2024-46635 | INROAD GetCurrentUserInfo API endpoint information disclosure | 5.9CISA ADP v3.1 | 0.3% | 2024-09-30 | Exploit code |
| CVE-2024-46549 | TP-Link Kasa KP125M MQTT broker and API gateway improper privilege management | 7.6CISA ADP v3.1 | 0.4% | 2024-09-30 | |
| CVE-2024-46548 | TP-Link Tapo P125M and Kasa KP125M certificate validation information disclosure | 6.3CISA ADP v3.1 | 0.2% | 2024-09-30 | |
| CVE-2024-46540 | emlog component /admin/store.php remote code execution | 6.3CISA ADP v3.1 | 0.7% | 2024-09-30 | |
| CVE-2024-46511 | LoadZilla LLC LoadLogic v1.4.3 was discovered to contain insecure permissions vulnerability which allows a remote attacker to execute arbitrary code via the LogicLoadEc2DeployLambda and CredsGenFunction function. | 7.5CISA ADP v3.1 | 0.2% | 2024-09-30 | |
| CVE-2024-46510 | ESAFENET CDG SQL injection | 7.6CISA ADP v3.1 | 0.4% | 2024-09-30 | |
| CVE-2024-46475 | Metronic Admin Dashboard Template homepage reflected cross-site scripting | 4.8CISA ADP v3.1 | 0.4% | 2024-09-30 | |
| CVE-2024-46313 | TP-Link WR941ND stack-based buffer overflow | 8.0CISA ADP v3.1 | 2.4% | 2024-09-30 | |
| CVE-2024-46293 | oretnom23 Online Medicine Ordering System missing authentication | 9.8CISA ADP v3.1 | 0.4% | 2024-09-30 | |
| CVE-2024-46280 | PIX-LINK LV-WR22 RE3002-P1-01_V117.0 is vulnerable to Improper Access Control. The TELNET service is enabled with weak credentials for a root-level account, without the possibility of changing them. | 8.8CISA ADP v3.1 | 0.3% | 2024-09-30 | |
| CVE-2024-45993 | giflib heap-based buffer overflow | 6.5CISA ADP v3.1 | 0.4% | 2024-09-30 | Fix |
| CVE-2024-45920 | Solvait stored cross-site scripting | 5.4CISA ADP v3.1 | 0.3% | 2024-09-30 | |
| CVE-2024-45792 | MantisBT vulnerable to information disclosure with user profiles | 5.3CNA v4.0 | 0.5% | 2024-09-30 | Fix |
| CVE-2024-45772 | Apache Lucene Replicator: Security vulnerability in Lucene Replicator deserialization issue | 5.1CNA v3.1 | 0.6% | 2024-09-30 | Fix |
| CVE-2024-45200 | Nintendo Mario Kart 8 Deluxe LAN/LDN multiplayer buffer overflow | 6.3CISA ADP v3.1 | 1.4% | 2024-09-30 | Exploit code |
| CVE-2024-45073 | IBM WebSphere Application Server cross-site scripting | 4.8CNA v3.1 | 0.2% | 2024-09-30 | Fix |
| CVE-2024-42496 | TECHNO SUPPORT Smart-tab Android app plaintext password storage | 2.4CNA v3.0 | 0.2% | 2024-09-30 | |
| CVE-2024-42017 | Atos Eviden iCare web interface missing authentication | 10.0CNA v3.1 | 0.5% | 2024-09-30 | |
| CVE-2024-41999 | TECHNO SUPPORT Smart-tab Android app active debug code | 6.8CISA ADP v3.1 | 0.3% | 2024-09-30 | |
| CVE-2024-35495 | TP-Link Kasa KP125M and Tapo P125M telemetry information disclosure | 4.3CISA ADP v3.1 | 0.2% | 2024-09-30 | |
| CVE-2024-28813 | Nokia Hit 7300 improper privilege management | 8.4CISA ADP v3.1 | 0.2% | 2024-09-30 | |
| CVE-2024-28812 | Nokia Hit 7300 hard-coded credentials | 8.8CISA ADP v3.1 | 0.3% | 2024-09-30 | |
| CVE-2024-28811 | Nokia Hit 7300 code injection | 3.3CISA ADP v3.1 | 0.3% | 2024-09-30 | |
| CVE-2024-28810 | Nokia Hit 7300 cleartext storage of sensitive information | 6.6CISA ADP v3.1 | 0.2% | 2024-09-30 | |
| CVE-2024-28809 | Nokia Hit 7300 cleartext storage of sensitive information | 8.8CISA ADP v3.1 | 0.2% | 2024-09-30 | |
| CVE-2024-28808 | Nokia Hit 7300 insecure storage of sensitive information | 2.7CISA ADP v3.1 | 0.4% | 2024-09-30 | |
| CVE-2024-28807 | Nokia Hit 7300 cleartext storage of sensitive information | 6.5CISA ADP v3.1 | 0.1% | 2024-09-30 | |
| CVE-2024-9329 | Glassfish redirect to untrusted site | 6.9CNA v4.0 | 0.7% | 2024-09-30 | Fix |
| CVE-2024-9194 | SQL injection in the Octopus Server REST API | 8.7CNA v4.0 | 0.4% | 2024-09-30 | Fix |
| CVE-2024-9158 | Tenable Nessus Network Monitor XSS | 8.4CNA v3.1 | 0.3% | 2024-09-30 | Fix |
| CVE-2024-8536 | Ultimate Blocks WordPress plugin Contributor+ stored XSS | 5.4NVD v3.1 | 0.4% | 2024-09-30 | Fix |
| CVE-2024-8459 | PLANET Technology switch devices cleartext storage of SNMPv3 users' passwords | 4.9NVD v3.1 | 0.3% | 2024-09-30 | Fix |
| CVE-2024-8458 | PLANET Technology switch devices cross-site request forgery | 8.8CNA v3.1 | 0.3% | 2024-09-30 | Fix |
| CVE-2024-8457 | PLANET Technology switch devices stored cross-site scripting (XSS) in the User Management | 4.8CNA v3.1 | 0.3% | 2024-09-30 | Fix |
| CVE-2024-8456 | PLANET Technology switch devices missing authentication for multiple HTTP routes | 9.8CNA v3.1 | 0.6% | 2024-09-30 | Fix |
| CVE-2024-8455 | PLANET Technology switch devices Swctrl service exchanges weakly encoded passwords | 5.9NVD v3.1 | 0.3% | 2024-09-30 | Fix |
| CVE-2024-8454 | PLANET Technology switch devices Swctrl service DoS attack | 7.5v3.1 | 0.6% | 2024-09-30 | Fix |
| CVE-2024-8453 | PLANET Technology switch devices weak hash for users' passwords | 4.9v3.1 | 0.3% | 2024-09-30 | Fix |
| CVE-2024-8452 | PLANET Technology switch devices Insecure hash functions used for SNMPv3 credentials | 7.5v3.1 | 0.2% | 2024-09-30 | Fix |
| CVE-2024-8451 | PLANET Technology switch devices SSH server DoS attack | 7.5v3.1 | 0.6% | 2024-09-30 | Fix |
| CVE-2024-8450 | PLANET Technology switch devices Hard-coded SNMPv1 read-write community string | 9.8v3.1 | 0.4% | 2024-09-30 | Fix |
| CVE-2024-8449 | PLANET Technology switch devices Local users' passwords recovery through hard-coded credentials | 6.8CNA v3.1 | 0.3% | 2024-09-30 | Fix |
| CVE-2024-8448 | PLANET Technology switch devices remote privilege escalation using hard-coded credentials | 8.8CNA v3.1 | 0.5% | 2024-09-30 | Fix |
| CVE-2024-8379 | Cost Calculator Builder WordPress plugin Admin+ SQL injection | 7.2NVD v3.1 | 0.5% | 2024-09-30 | Fix |
| CVE-2024-8283 | Slider by 10Web WordPress plugin Admin+ stored XSS | 4.8NVD v3.1 | 0.4% | 2024-09-30 | Fix |
| CVE-2024-8239 | Starbox WordPress plugin Contributor+ stored XSS | 5.4NVD v3.1 | 0.4% | 2024-09-30 | Fix |
| CVE-2024-7675 | DWFX File Parsing vulnerabilities in Autodesk Navisworks Desktop software | 7.8CNA v3.1 | 0.2% | 2024-09-30 | |
| CVE-2024-7674 | DWFX File Parsing vulnerabilities in Autodesk Navisworks Desktop software | 7.8CNA v3.1 | 0.2% | 2024-09-30 | Fix |
| CVE-2024-7673 | DWFX File Parsing vulnerabilities in Autodesk Navisworks Desktop software | 7.8CNA v3.1 | 0.2% | 2024-09-30 | Fix |
| CVE-2024-7672 | DWFX File Parsing vulnerabilities in Autodesk Navisworks Desktop software | 7.8CNA v3.1 | 0.2% | 2024-09-30 | Fix |
| CVE-2024-7671 | DWFX File Parsing vulnerabilities in Autodesk Navisworks Desktop software | 7.8CNA v3.1 | 0.2% | 2024-09-30 | Fix |
| CVE-2024-7670 | DWFX File Parsing vulnerabilities in Autodesk Navisworks Desktop software | 7.8CNA v3.1 | 0.2% | 2024-09-30 | Fix |
| CVE-2024-6394 | Local file inclusion in parisneo/lollms-webui | 7.5CNA v3.0 | 0.6% | 2024-09-30 | |
| CVE-2024-6051 | Cross Application Scripting in Redlink SDK | 4.3CNA v4.0 | 0.2% | 2024-09-30 | |
| CVE-2024-3635 | The Post Grid WordPress plugin Editor+ stored XSS via Grid creation | 4.8NVD v3.1 | 0.3% | 2024-09-30 | Fix |
| CVE-2024-9328 | SourceCodester Advocate Office Management System edit_client.php SQL injection | 9.8v3.1 | 0.6% | 2024-09-29 | |
| CVE-2024-9327 | code-projects Blood Bank System forgot.php SQL injection | 9.8v3.1 | 0.5% | 2024-09-29 | |
| CVE-2024-9326 | PHPGurukul Online Shopping Portal Admin Panel index.php SQL injection | 9.8v3.1 | 1.4% | 2024-09-29 | Exploit code |
| CVE-2024-9325 | Intelbras InControl incontrol-service-watchdog.exe unquoted search path | 7.8v3.1 | 0.3% | 2024-09-29 | Fix |
| CVE-2024-9324 | Intelbras InControl Relatório de Operadores page operador code injection | 8.8v3.1 | 0.6% | 2024-09-29 | Fix |
| CVE-2024-9323 | SourceCodester Inventory Management System add_staff.php cross-site scripting | 5.4v3.1 | 0.4% | 2024-09-29 | |
| CVE-2024-9322 | code-projects Supply Chain Management edit_manufacturer.php SQL injection | 9.8v3.1 | 0.4% | 2024-09-29 | |
| CVE-2024-9321 | SourceCodester Online Railway Reservation System view_details.php access control | 5.3v3.1 | 0.6% | 2024-09-29 | |
| CVE-2024-9320 | SourceCodester Online Timesheet App Add Timesheet form add-timesheet.php cross-site scripting | 5.4v3.1 | 0.4% | 2024-09-29 | |
| CVE-2024-9319 | SourceCodester Online Timesheet App delete-timesheet.php SQL injection | 8.8v3.1 | 0.5% | 2024-09-29 | |
| CVE-2024-23967 | Autel MaxiCharger AC Elite Business C50 WebSocket base64 decoding stack-based buffer overflow | 8.0v3.1 | 0.9% | 2024-09-28 | |
| CVE-2024-23961 | Alpine Halo9 UPDM_wemCmdUpdFSpeDecomp command injection remote code execution | 6.8v3.1 | 1.0% | 2024-09-28 | |
| CVE-2024-23960 | Alpine Halo9 improper verification of cryptographic signature | 4.6v3.1 | 0.3% | 2024-09-28 | |
| CVE-2024-23959 | Autel MaxiCharger AC Elite Business C50 BLE AppChargingControl command stack-based buffer overflow | 8.0v3.1 | 0.8% | 2024-09-28 | |
| CVE-2024-23958 | Autel MaxiCharger AC Elite Business C50 BLE hard-coded credentials authentication bypass | 8.8v3.1 | 0.8% | 2024-09-28 | |
| CVE-2024-23957 | Autel MaxiCharger AC Elite Business C50 DLB_HostHeartBeat handler stack-based buffer overflow | 8.8v3.1 | 1.0% | 2024-09-28 | |
| CVE-2024-23938 | Silicon Labs Gecko OS Debug interface stack-based buffer overflow remote code execution | 8.8v3.1 | 0.9% | 2024-09-28 | Fix |
| CVE-2024-23935 | Alpine Halo9 DecodeUTF7 stack-based buffer overflow remote code execution | 7.5v3.1 | 0.5% | 2024-09-28 | |
| CVE-2024-23924 | Alpine Halo9 UPDM_wemCmdCreatSHA256Hash command injection remote code execution | 6.8v3.1 | 1.0% | 2024-09-28 | |
| CVE-2024-23923 | Alpine Halo9 prh_l2_sar_data_ind use-after-free remote code execution | 8.8v3.1 | 0.8% | 2024-09-28 | |
| CVE-2024-9318 | SourceCodester Advocate Office Management System activate.php SQL injection | 9.8v3.1 | 0.5% | 2024-09-28 | |
| CVE-2024-9317 | SourceCodester Online Eyewear Shop Master.php delete_category SQL injection | 8.8v3.1 | 0.5% | 2024-09-28 | |
| CVE-2024-9316 | code-projects Blood Bank Management System B+.php SQL injection | 7.5v3.1 | 0.4% | 2024-09-28 | |
| CVE-2024-9315 | SourceCodester Employee and Visitor Gate Pass Logging System manage_department.php SQL injection | 8.8v3.1 | 0.5% | 2024-09-28 | |
| CVE-2024-9300 | SourceCodester Online Railway Reservation System Message Us form contact_us.php cross-site scripting | 6.1v3.1 | 0.6% | 2024-09-28 | |
| CVE-2024-9299 | SourceCodester Online Railway Reservation System ?page=reserve cross-site scripting | 5.4v3.1 | 0.5% | 2024-09-28 | |
| CVE-2024-9298 | SourceCodester Online Railway Reservation System ticket handler improper access control | 4.3v3.1 | 0.5% | 2024-09-28 | |
| CVE-2024-9297 | SourceCodester Online Railway Reservation System admin improper authorization | 6.3v3.1 | 0.4% | 2024-09-28 | |
| CVE-2024-9296 | SourceCodester Advocate Office Management System forgot_pass.php SQL injection | 9.8v3.1 | 0.6% | 2024-09-28 | |
| CVE-2024-9295 | SourceCodester Advocate Office Management System login.php SQL injection | 9.8v3.1 | 0.6% | 2024-09-28 | |
| CVE-2024-9189 | EU/UK VAT Manager for WooCommerce WordPress plugin missing authorization | 5.3CNA v3.1 | 0.5% | 2024-09-28 | Fix |
| CVE-2024-9023 | WP-WebAuthn WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.4% | 2024-09-28 | Fix |
| CVE-2024-8788 | EU/UK VAT Manager for WooCommerce WordPress plugin reflected cross-site scripting | 6.1CNA v3.1 | 0.4% | 2024-09-28 | Fix |
| CVE-2024-8715 | Simple LDAP Login WordPress plugin reflected cross-site scripting | 6.1CNA v3.1 | 0.4% | 2024-09-28 | Fix |
| CVE-2024-8712 | GTM Server Side WordPress plugin reflected cross-site scripting | 6.1v3.1 | 0.4% | 2024-09-28 | Fix |
| CVE-2024-8547 | Simple Popup WordPress plugin authenticated (Contributor+) stored cross-site scripting | 5.4v3.1 | 0.4% | 2024-09-28 | Fix |
| CVE-2024-8353 | GiveWP WordPress plugin PHP object injection | 9.8v3.1 | 28.9% | 2024-09-28 | NucleiMetasploitExploit codeFix |
| CVE-2024-8189 | WP MultiTasking - WP Utilities WordPress plugin stored cross-site scripting | 4.8v3.1 | 0.4% | 2024-09-28 | Fix |
| CVE-2024-47294 | Huawei HarmonyOS access permission verification vulnerability in the input method framework module | 4.4CNA v3.1 | 0.2% | 2024-09-27 | Fix |
| CVE-2024-47293 | Huawei HarmonyOS out-of-bounds write vulnerability in the HAL-WIFI module | 4.7CNA v3.1 | 0.2% | 2024-09-27 | Fix |
| CVE-2024-47292 | Huawei HarmonyOS path traversal vulnerability in the Bluetooth module | 6.2CNA v3.1 | 0.1% | 2024-09-27 | Fix |
| CVE-2024-47291 | Huawei HarmonyOS permission vulnerability in the ActivityManagerService (AMS) module | 5.6CNA v3.1 | 0.1% | 2024-09-27 | Fix |
| CVE-2024-47290 | Huawei HarmonyOS input validation vulnerability in the USB service module | 5.5CNA v3.1 | 0.1% | 2024-09-27 | Fix |
| CVE-2024-47186 | Filament has unvalidated ColorColumn and ColorEntry values that can be used for cross-site scripting | 6.1CNA v3.1 | 0.4% | 2024-09-27 | Fix |
| CVE-2024-47184 | Ampache vulnerable to stored XSS via Democratic Playlist Name | 6.1CNA v3.1 | 0.6% | 2024-09-27 | Fix |
| CVE-2024-47182 | Dozzle uses unsafe hash for passwords | 4.8CNA v3.1 | 0.2% | 2024-09-27 | Fix |
| CVE-2024-47077 | authentik cross-provider token validation problems | 6.5CNA v3.1 | 0.4% | 2024-09-27 | Fix |
| CVE-2024-47070 | authentik vulnerable to password authentication bypass via X-Forwarded-For HTTP header | 9.1CNA v3.1 | 0.6% | 2024-09-27 | Fix |
| CVE-2024-46868 | Linux kernel uefisecapp deadlock | 5.5v3.1 | 0.1% | 2024-09-27 | Fix |
| CVE-2024-46867 | Linux kernel Xe GPU driver meminfo reporting deadlock | 5.5v3.1 | 0.1% | 2024-09-27 | Fix |
| CVE-2024-46866 | Linux kernel Xe GPU driver meminfo reporting improper locking | 7.8CNA v3.1 | 0.1% | 2024-09-27 | Fix |
| CVE-2024-46865 | Linux kernel FOU tunneling vulnerability | 9.8CNA v3.1 | 0.5% | 2024-09-27 | Fix |
| CVE-2024-46864 | Linux kernel Hyper-V VP assist page handling denial of service | 5.5v3.1 | 0.2% | 2024-09-27 | Fix |
| CVE-2024-46863 | In the Linux kernel, the following vulnerability has been resolved: ASoC: Intel: soc-acpi-intel-lnl-match: add missing empty item There is no links_num in struct snd_soc_acpi_mach {}, and we test !link->num_adr as a condition to end the loop in hda_sdw_machine_select(). So an empty item in struct | 7.3CNA v3.1 | 0.2% | 2024-09-27 | Fix |
| CVE-2024-46862 | In the Linux kernel, the following vulnerability has been resolved: ASoC: Intel: soc-acpi-intel-mtl-match: add missing empty item There is no links_num in struct snd_soc_acpi_mach {}, and we test !link->num_adr as a condition to end the loop in hda_sdw_machine_select(). So an empty item in struct | 8.0CNA v3.1 | 0.2% | 2024-09-27 | Fix |
| CVE-2024-46861 | In the Linux kernel, the following vulnerability has been resolved: usbnet: ipheth: do not stop RX on failing RX callback RX callbacks can fail for multiple reasons: * Payload too short * Payload formatted incorrecly (e.g. bad NCM framing) * Lack of memory None of these should cause the driver t | 5.5v3.1 | 0.2% | 2024-09-27 | Fix |
| CVE-2024-46860 | Linux kernel mt7921 Wi-Fi driver null pointer dereference | 5.5v3.1 | 0.2% | 2024-09-27 | Fix |
| CVE-2024-46859 | Linux kernel panasonic-laptop driver improper array index validation | 7.8CNA v3.1 | 0.2% | 2024-09-27 | Fix |
| CVE-2024-46858 | Linux kernel MPTCP path manager use-after-free | 8.1CNA v3.1 | 0.6% | 2024-09-27 | Fix |
| CVE-2024-46857 | Linux kernel mlx5 eswitch bridge mode null pointer dereference | 5.5v3.1 | 0.2% | 2024-09-27 | Fix |
| CVE-2024-46856 | Linux kernel dp83822 null pointer dereference | 5.5v3.1 | 0.2% | 2024-09-27 | Fix |
| CVE-2024-46855 | Linux kernel nft_socket module vulnerability | 7.5CNA v3.1 | 0.5% | 2024-09-27 | Fix |
| CVE-2024-46854 | Linux kernel DPAA Ethernet driver vulnerability | 7.1NVD v3.1 | 0.2% | 2024-09-27 | Fix |
| CVE-2024-46853 | Linux kernel nxp-fspi out-of-bounds write | 7.8v3.1 | 0.2% | 2024-09-27 | Fix |
| CVE-2024-46852 | Linux kernel CMA heap fault handler off-by-one error | 7.8CNA v3.1 | 0.2% | 2024-09-27 | Fix |
| CVE-2024-46851 | Linux kernel AMD display DRR handling null pointer dereference | 4.7v3.1 | 0.2% | 2024-09-27 | Fix |
| CVE-2024-46850 | Linux kernel AMD display DRR handling null pointer dereference | 7.8CNA v3.1 | 0.2% | 2024-09-27 | Fix |
| CVE-2024-46849 | Linux kernel axg-card use-after-free | 7.8v3.1 | 0.3% | 2024-09-27 | Fix |
| CVE-2024-46848 | Linux kernel Intel Haswell PMU driver vulnerability | 5.5v3.1 | 0.2% | 2024-09-27 | Fix |
| CVE-2024-46847 | Linux kernel vmap block allocator improper array index validation | 7.8CNA v3.1 | 0.2% | 2024-09-27 | Fix |
| CVE-2024-46846 | Linux kernel Rockchip SPI driver vulnerability | 5.5v3.1 | 0.2% | 2024-09-27 | Fix |
| CVE-2024-46845 | Linux kernel ftrace timerlat tracer use-after-free | 7.8CNA v3.1 | 0.2% | 2024-09-27 | Fix |
| CVE-2024-46844 | Linux kernel line uninitialized pointer access | 7.1CNA v3.1 | 0.3% | 2024-09-27 | Fix |
| CVE-2024-46843 | Linux kernel UFS host controller driver denial of service | 5.5v3.1 | 0.2% | 2024-09-27 | Fix |
| CVE-2024-46842 | Linux kernel lpfc use-after-free | 7.8CNA v3.1 | 0.2% | 2024-09-27 | Fix |
| CVE-2024-46841 | Linux kernel Btrfs extent tree walk vulnerability | 5.5v3.1 | 0.2% | 2024-09-27 | Fix |
| CVE-2024-46840 | Linux kernel Btrfs snapshot deletion improper error handling | 5.5v3.1 | 0.3% | 2024-09-27 | Fix |
| CVE-2024-46838 | Linux kernel userfaultfd page table handling denial of service | 5.5v3.1 | 0.2% | 2024-09-27 | Fix |
| CVE-2024-46837 | Linux kernel Panthor GPU driver improper access control | 5.5v3.1 | 0.2% | 2024-09-27 | Fix |
| CVE-2024-46836 | Linux kernel Aspeed USB gadget driver improper array index validation | 7.8v3.1 | 0.2% | 2024-09-27 | Fix |
| CVE-2024-46835 | Linux kernel AMDGPU IMU driver null pointer dereference | 5.5v3.1 | 0.2% | 2024-09-27 | Fix |
| CVE-2024-46834 | Linux kernel ethtool RSS indirection table vulnerability | 7.8CNA v3.1 | 0.2% | 2024-09-27 | Fix |
| CVE-2024-46833 | Linux kernel HNS3 Ethernet driver improper array index validation | 7.8v3.1 | 0.2% | 2024-09-27 | Fix |
| CVE-2024-46832 | Linux kernel MIPS R4k clock event timer improper locking | 5.5v3.1 | 0.2% | 2024-09-27 | Fix |
| CVE-2024-46831 | Linux kernel Microchip VCAP driver use-after-free | 8.4CNA v3.1 | 0.2% | 2024-09-27 | Fix |
| CVE-2024-46830 | Linux kernel KVM x86 VCPU events handling vulnerability | 7.8CNA v3.1 | 0.2% | 2024-09-27 | Fix |
| CVE-2024-46829 | Linux kernel rtmutex wait lock handling deadlock | 5.5v3.1 | 0.2% | 2024-09-27 | Fix |
| CVE-2024-46828 | In the Linux kernel, the following vulnerability has been resolved: sched: sch_cake: fix bulk flow accounting logic for host fairness In sch_cake, we keep track of the count of active bulk flows per host, when running in dst/src host fairness mode, which is used as the round-robin weight when iter | 7.1CNA v3.1 | 0.3% | 2024-09-27 | Fix |
| CVE-2024-46827 | Linux kernel ath12k Wi-Fi driver denial of service | 5.5v3.1 | 0.2% | 2024-09-27 | Fix |
| CVE-2024-46826 | Linux kernel ELF loader ASLR sysctl read vulnerability | 5.5v3.1 | 0.2% | 2024-09-27 | Fix |
| CVE-2024-46825 | Linux kernel iwlwifi MVM link ID lookup vulnerability | 5.5v3.1 | 0.2% | 2024-09-27 | Fix |
| CVE-2024-46824 | Linux kernel IOMMUFD cache invalidation null pointer dereference | 5.5v3.1 | 0.2% | 2024-09-27 | Fix |
| CVE-2024-46823 | Linux kernel kunit overflow allocation test vulnerability | 8.4CNA v3.1 | 0.2% | 2024-09-27 | Fix |
| CVE-2024-46822 | Linux kernel ACPI CPU interface lookup null pointer dereference | 5.5v3.1 | 0.3% | 2024-09-27 | Fix |
| CVE-2024-46821 | Linux kernel drm/amd/pm improper array index validation | 7.8v3.1 | 0.3% | 2024-09-27 | Fix |
| CVE-2024-46820 | In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/vcn: remove irq disabling in vcn 5 suspend We do not directly enable/disable VCN IRQ in vcn 5.0.0. And we do not handle the IRQ state as well. So the calls to disable IRQ and set state are removed. This effectively gets | 7.8v3.1 | 0.2% | 2024-09-27 | Fix |
| CVE-2024-46819 | Linux kernel drm/amdgpu null pointer dereference | 5.5v3.1 | 0.2% | 2024-09-27 | Fix |
| CVE-2024-46818 | Linux kernel AMD display GPIO handling improper array index validation | 7.8CNA v3.1 | 0.3% | 2024-09-27 | Fix |
| CVE-2024-46817 | Linux kernel AMD display stream count handling vulnerability | 7.4CNA v3.1 | 0.3% | 2024-09-27 | Fix |
| CVE-2024-46816 | Linux kernel AMD display link count handling vulnerability | 7.8CNA v3.1 | 0.3% | 2024-09-27 | Fix |
| CVE-2024-46815 | In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Check num_valid_sets before accessing reader_wm_sets[] [WHY & HOW] num_valid_sets needs to be checked to avoid a negative index when accessing reader_wm_sets[num_valid_sets - 1]. This fixes an OVERRUN issue repor | 7.1CNA v3.1 | 0.3% | 2024-09-27 | Fix |
| CVE-2024-46814 | Linux kernel AMD display HDCP message handling improper array index validation | 7.8v3.1 | 0.2% | 2024-09-27 | Fix |
| CVE-2024-46813 | Linux kernel AMD display link array access improper array index validation | 7.8CNA v3.1 | 0.3% | 2024-09-27 | Fix |
| CVE-2024-46812 | Linux kernel AMD display mode support configuration vulnerability | 7.8CNA v3.1 | 0.3% | 2024-09-27 | Fix |
| CVE-2024-46811 | Linux kernel AMD display bandwidth bounding box calculation improper array index validation | 7.3CNA v3.1 | 0.2% | 2024-09-27 | Fix |
| CVE-2024-46810 | Linux kernel tc358767 null pointer dereference | 5.5v3.1 | 0.2% | 2024-09-27 | Fix |
| CVE-2024-46809 | Linux kernel AMD display BIOS image loading null pointer dereference | 5.5v3.1 | 0.2% | 2024-09-27 | Fix |
| CVE-2024-46808 | Linux kernel AMD display DPCD address range handling null pointer dereference | 5.5NVD v3.1 | 0.2% | 2024-09-27 | Fix |
| CVE-2024-46807 | Linux kernel drm/amd/amdgpu null pointer dereference | 5.5v3.1 | 0.2% | 2024-09-27 | Fix |
| CVE-2024-46806 | Linux kernel drm/amdgpu divide by zero | 5.5v3.1 | 0.2% | 2024-09-27 | Fix |
| CVE-2024-46805 | Linux kernel drm/amdgpu null pointer dereference | 5.5v3.1 | 0.3% | 2024-09-27 | Fix |
| CVE-2024-46804 | Linux kernel AMD display HDCP DDC access improper array index validation | 7.8v3.1 | 0.2% | 2024-09-27 | Fix |
| CVE-2024-46803 | Linux kernel drm/amdkfd null pointer dereference | 7.8CNA v3.1 | 0.3% | 2024-09-27 | Fix |
| CVE-2024-46802 | Linux kernel AMD display stream validation null pointer dereference | 5.5v3.1 | 0.2% | 2024-09-27 | Fix |
| CVE-2024-46472 | CodeAstro Membership Management System SQL injection | 8.6CISA ADP v3.1 | 0.4% | 2024-09-27 | |
| CVE-2024-46471 | CodeAstro Membership Management System /uploads/ Folder directory listing | 7.5CISA ADP v3.1 | 0.5% | 2024-09-27 | |
| CVE-2024-46470 | CodeAstro Membership Management System cross-site scripting | 6.1CISA ADP v3.1 | 0.4% | 2024-09-27 | |
| CVE-2024-46453 | Honeywell IQ3XCITE component /test/ cross-site scripting | 6.1v3.1 | 0.3% | 2024-09-27 | |
| CVE-2024-46441 | YPay An arbitrary file upload | 8.8CISA ADP v3.1 | 0.6% | 2024-09-27 | |
| CVE-2024-46367 | Webkul Krayin CRM stored cross-site scripting | 9.6CISA ADP v3.1 | 0.5% | 2024-09-27 | |
| CVE-2024-46366 | Webkul Krayin CRM server-side template injection | 8.8CISA ADP v3.1 | 0.5% | 2024-09-27 | |
| CVE-2024-46333 | Piwigo authenticated cross-site scripting | 4.8CISA ADP v3.1 | 0.3% | 2024-09-27 | |
| CVE-2024-46331 | Modstart Mostartcms open redirect | 7.2CISA ADP v3.1 | 0.6% | 2024-09-27 | |
| CVE-2024-46257 | JC21 nginx-proxy-manager command injection | 6.3CISA ADP v3.1 | 1.3% | 2024-09-27 | |
| CVE-2024-46256 | JC21 nginx-proxy-manager requestLetsEncryptSsl in NginxProxyManager command injection | 9.8CISA ADP v3.1 | 3.1% | 2024-09-27 | Exploit code |
| CVE-2024-46097 | TestLink improper access control | 8.1CISA ADP v3.1 | 0.4% | 2024-09-27 | |
| CVE-2024-45863 | Facebook Thrift crash | 5.3CISA ADP v3.1 | 0.4% | 2024-09-27 | Fix |
| CVE-2024-45773 | Facebook Thrift use-after-free | 7.5CISA ADP v3.1 | 0.5% | 2024-09-27 | Fix |
| CVE-2024-45745 | TopQuadrant TopBraid EDG JavaScript console XXE | 4.3v3.1 | 0.3% | 2024-09-27 | Fix |
| CVE-2024-45744 | TopQuadrant TopBraid EDG password manager stores external credentials insecurely | 4.3v3.1 | 0.2% | 2024-09-27 | Fix |
| CVE-2024-44912 | nasa CryptoLib out-of-bounds read | 7.5v3.1 | 0.5% | 2024-09-27 | |
| CVE-2024-44911 | nasa CryptoLib out-of-bounds read | 7.5v3.1 | 0.5% | 2024-09-27 | |
| CVE-2024-44910 | nasa CryptoLib out-of-bounds read | 7.5v3.1 | 0.5% | 2024-09-27 | |
| CVE-2024-41930 | Media Fusion MF Teacher Performance Management System cross-site scripting | 6.1CISA ADP v3.1 | 0.3% | 2024-09-27 | |
| CVE-2024-40512 | Openpetra cross-site scripting | 7.3CISA ADP v3.1 | 0.8% | 2024-09-27 | Exploit code |
| CVE-2024-40511 | Openpetra cross-site scripting | 7.3CISA ADP v3.1 | 0.8% | 2024-09-27 | Exploit code |
| CVE-2024-40510 | Openpetra cross-site scripting | 8.2NVD v3.1 | 0.7% | 2024-09-27 | |
| CVE-2024-40509 | Openpetra cross-site scripting | 7.3CISA ADP v3.1 | 0.8% | 2024-09-27 | |
| CVE-2024-39435 | UNISOC chipsets Logmanager service privilege escalation | 6.5CNA v3.1 | 0.1% | 2024-09-27 | Fix |
| CVE-2024-39434 | UNISOC chipsets drm service out-of-bounds read | 6.2CNA v3.1 | 0.1% | 2024-09-27 | Fix |
| CVE-2024-39433 | UNISOC chipsets drm service out-of-bounds write | 6.2CNA v3.1 | 0.1% | 2024-09-27 | Fix |
| CVE-2024-39432 | UNISOC chipsets UMTS RLC driver out-of-bounds read | 8.3CNA v3.1 | 0.2% | 2024-09-27 | Fix |
| CVE-2024-39431 | UNISOC chipsets UMTS RLC driver out-of-bounds write | 8.3CNA v3.1 | 0.2% | 2024-09-27 | Fix |
| CVE-2024-39364 | Advantech ADAM-5630 missing authentication for critical function | 7.0CNA v4.0 | 0.2% | 2024-09-27 | Fix |
| CVE-2024-39275 | Advantech ADAM-5630 Use of Persistent Cookies Containing Sensitive Information | 8.8v3.1 | 0.4% | 2024-09-27 | Fix |
| CVE-2024-38861 | Lack of TLS validation in plugin MikroTik on Checkmk Exchange | 4.9CNA v4.0 | 0.2% | 2024-09-27 | Fix |
| CVE-2024-38809 | Spring Framework DoS via conditional HTTP request | 5.3CNA v3.1 | 0.9% | 2024-09-27 | Fix |
| CVE-2024-38796 | TianoCore edk2 integer overflow in PeCoffLoaderRelocateImage | 5.9CNA v3.1 | 0.4% | 2024-09-27 | Fix |
| CVE-2024-38308 | Advantech ADAM-5550 cross-site scripting | 6.1NVD v3.1 | 0.3% | 2024-09-27 | Fix |
| CVE-2024-37187 | Advantech ADAM-5550 weak encoding for password | 5.7v3.1 | 0.4% | 2024-09-27 | Fix |
| CVE-2024-34542 | Advantech ADAM-5630 weak encoding for password | 5.7v3.1 | 0.2% | 2024-09-27 | Fix |
| CVE-2024-33369 | Plasmoapp Rpshare path traversal | 8.8CNA v3.1 | 1.2% | 2024-09-27 | |
| CVE-2024-33368 | Plasmoapp Rpshare OS command injection | 8.8CNA v3.1 | 0.7% | 2024-09-27 | |
| CVE-2024-28948 | Advantech ADAM-5630 cross-site request forgery | 8.8v3.1 | 0.2% | 2024-09-27 | Fix |
| CVE-2024-25412 | FlatPress cross-site scripting | 6.1v3.1 | 1.0% | 2024-09-27 | Exploit code |
| CVE-2024-25411 | FlatPress cross-site scripting | 6.1CISA ADP v3.1 | 0.9% | 2024-09-27 | Exploit code |
| CVE-2024-23586 | An insufficient session timeout vulnerability affects HCL Nomad server on Domino | 5.3CNA v3.1 | 0.3% | 2024-09-27 | Fix |
| CVE-2024-22170 | Western Digital My Cloud unchecked buffer in Dynamic DNS client | 9.2CNA v4.0 | 0.5% | 2024-09-27 | Fix |
| CVE-2024-9301 | Netflix E2Nest A path traversal | 8.7CNA v4.0 | 0.7% | 2024-09-27 | |
| CVE-2024-9294 | dingfanzu CMS saveNewPwd.php SQL injection | 5.3CNA v4.0 | 0.3% | 2024-09-27 | |
| CVE-2024-9293 | skyselang yylAdmin Backend File.php list SQL injection | 8.8v3.1 | 0.5% | 2024-09-27 | |
| CVE-2024-9291 | kalvinGit kvf-admin XML file cross-site scripting | 5.4v3.1 | 0.4% | 2024-09-27 | |
| CVE-2024-9284 | TP-Link TL-WR841ND popupSiteSurveyRpm.htm stack-based overflow | 7.1CNA v4.0 | 1.0% | 2024-09-27 | |
| CVE-2024-9283 | RelaxedJS ReLaXed Pug to PDF Converter cross-site scripting | 4.8CNA v4.0 | 0.3% | 2024-09-27 | |
| CVE-2024-9282 | bg5sbk MiniCMS page-edit.php cross-site request forgery | 4.3v3.1 | 0.3% | 2024-09-27 | |
| CVE-2024-9281 | bg5sbk MiniCMS post-edit.php cross-site request forgery | 4.3v3.1 | 0.4% | 2024-09-27 | |
| CVE-2024-9280 | kalvinGit kvf-admin FileUploadKit.java fileUpload unrestricted upload | 9.8v3.1 | 0.6% | 2024-09-27 | |
| CVE-2024-9279 | funnyzpc Mee-Admin User Center index cross-site scripting | 4.8v3.1 | 0.5% | 2024-09-27 | |
| CVE-2024-9278 | HuankeMao SCRM domain verification unrestricted file upload | 5.1CNA v4.0 | 0.5% | 2024-09-27 | |
| CVE-2024-9277 | Langflow HTTP POST request utils.py redos | 6.5v3.1 | 1.0% | 2024-09-27 | |
| CVE-2024-9276 | TMsoft MyAuth Gateway index.php cross-site scripting | 5.3CNA v4.0 | 0.4% | 2024-09-27 | |
| CVE-2024-9275 | jeanmarc77 123solar admin_invt2.php file inclusion | 5.3CNA v4.0 | 0.4% | 2024-09-27 | |
| CVE-2024-9202 | Eclipse Dataspace Components EDC DataSetResolver policy filtering missing | 5.3CNA v4.0 | 0.4% | 2024-09-27 | |
| CVE-2024-9160 | Puppet PEADM Forge Module improper certificate validation | 5.4CNA v4.0 | 0.2% | 2024-09-27 | Fix |
| CVE-2024-9136 | Huawei HarmonyOS access permission verification vulnerability in the App Multiplier module | 6.7CNA v3.1 | 0.2% | 2024-09-27 | Fix |
| CVE-2024-9130 | GiveWP Donation Plugin and Fundraising Platform WordPress plugin SQL injection | 7.2CNA v3.1 | 0.7% | 2024-09-27 | Fix |
| CVE-2024-9049 | Beaver Builder WordPress Page Builder plugin stored DOM-based cross-site scripting | 5.4v3.1 | 0.3% | 2024-09-27 | Fix |
| CVE-2024-9029 | FreeImage: Heap buffer overflow in tiff_read_iptc_profile | 7.5CNA v3.1 | 0.5% | 2024-09-27 | |
| CVE-2024-8991 | OSM WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.4% | 2024-09-27 | Fix |
| CVE-2024-8965 | Absolute Reviews WordPress plugin stored DOM-based cross-site scripting | 5.4v3.1 | 0.3% | 2024-09-27 | Fix |
| CVE-2024-8922 | Product Enquiry for WooCommerce WordPress plugin PHP object injection in enquiry_detail.php | 8.8CNA v3.1 | 0.8% | 2024-09-27 | Fix |
| CVE-2024-8681 | Premium Addons for Elementor WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.4% | 2024-09-27 | Fix |
| CVE-2024-8644 | Cleartext storage of sensitive information in Oceanic Software's ValeApp | 7.5NVD v3.1 | 0.3% | 2024-09-27 | Fix |
| CVE-2024-8643 | Session hijacking in Oceanic Software's ValeApp | 9.8v3.1 | 0.5% | 2024-09-27 | Fix |
| CVE-2024-8630 | Alisonic Sibylla SQL injection | 9.8v3.1 | 0.6% | 2024-09-27 | Fix |
| CVE-2024-8609 | Improper access control in Oceanic Software's ValeApp | 7.5v3.1 | 0.5% | 2024-09-27 | Fix |
| CVE-2024-8608 | Stored XSS in Oceanic Software's ValeApp | 5.4NVD v3.1 | 0.3% | 2024-09-27 | Fix |
| CVE-2024-8607 | SQLi in Oceanic Software's ValeApp | 9.8v3.1 | 0.5% | 2024-09-27 | Fix |
| CVE-2024-8310 | OPW Fuel Management Systems SiteSentinel missing authentication for critical function | 9.8CNA v3.1 | 0.7% | 2024-09-27 | Fix |
| CVE-2024-7714 | AI Assistant with ChatGPT by AYS WordPress plugin unauthenticated AJAX Calls | 7.5NVD v3.1 | 0.8% | 2024-09-27 | NucleiFix |
| CVE-2024-7713 | AI Chatbot with ChatGPT by AYS WordPress plugin unauthenticated OpenAI key disclosure | 7.5NVD v3.1 | 0.3% | 2024-09-27 | Fix |
| CVE-2024-7400 | Local privilege escalation in ESET products for Windows | 8.5CNA v4.0 | 0.2% | 2024-09-27 | |
| CVE-2024-7149 | Event Manager, Events Calendar, Tickets, Registrations Eventin WordPress plugin local file inclusion | 8.8v3.1 | 1.0% | 2024-09-27 | Fix |
| CVE-2024-7011 | Sharp NEC Projectors (NP-CB4500UL, NP-CB4500WL, NP-CB4700UL, NP-P525UL, NP-P525UL+, NP-P525ULG, NP-P525ULJL, NP-P525WL, NP-P525WL+, NP-P525WLG, NP-P525WLJL, NP-CG6500UL, NP-CG6500WL, NP-CG6700UL, NP-P605UL, NP-P605UL+, NP-P605ULG, NP-P605ULJL, NP-CA4120X, NP-CA4160W, NP-CA4160X, NP-CA4200U, NP-CA420 | 6.5CISA ADP v3.1 | 0.3% | 2024-09-27 | |
| CVE-2024-6983 | Remote code execution in mudler/LocalAI | 8.8CNA v3.0 | 1.3% | 2024-09-27 | Fix |
| CVE-2024-6981 | OMNTEC Proteus Tank Monitoring missing authentication for critical function | 9.3CNA v4.0 | 0.6% | 2024-09-27 | Fix |
| CVE-2024-6931 | The Events Calendar WordPress plugin unauthenticated stored cross-site scripting | 6.1NVD v3.1 | 16.7% | 2024-09-27 | Fix |
| CVE-2024-6654 | Denial of service vulnerability in ESET products for macOS | 6.8CNA v4.0 | 0.2% | 2024-09-27 | Fix |
| CVE-2024-6436 | Rockwell Automation input validation vulnerability exists in the SequenceManager™ Server | 8.7CNA v4.0 | 2.1% | 2024-09-27 | Fix |
| CVE-2024-3373 | SQLi in RSM Design's Website Template | 9.2CNA v4.0 | 0.4% | 2024-09-27 | Fix |
| CVE-2024-47337 | Joy Of Text Lite WordPress plugin broken access control | 4.3CNA v3.1 | 0.3% | 2024-09-26 | |
| CVE-2024-47330 | Broken access control vulnerability on multiple WordPress plugins by Supsystic | 8.8v3.1 | 0.3% | 2024-09-26 | Fix |
| CVE-2024-47197 | Apache Maven Archetype Plugin archetype integration testing information disclosure | 7.5v3.1 | 0.8% | 2024-09-26 | Fix |
| CVE-2024-47180 | Shields.io remote code execution vulnerability in Dynamic JSON/TOML/YAML badges | 8.8CNA v3.1 | 1.0% | 2024-09-26 | |
| CVE-2024-47179 | DIYgod RSSHub takeover | 8.8CNA v3.1 | 0.7% | 2024-09-26 | Exploit codeFix |
| CVE-2024-47176 | cups-browsed binds to `INADDR_ANY:631`, trusting any packet from any source | 5.3CNA v3.1 | 50.6% | 2024-09-26 | Reported exploitedNucleiEmerging ThreatsExploit codeKCVFix |
| CVE-2024-47175 | Libppd's ppdCreatePPDFromIPP2 function does not sanitize IPP attributes when creating the PPD buffer | 8.6CNA v3.1 | 63.6% | 2024-09-26 | Exploit codeKCVFix |
| CVE-2024-47174 | NixOS Nix fetchurl.nix vulnerability | 5.9CNA v3.1 | 0.3% | 2024-09-26 | Fix |
| CVE-2024-47171 | Agnai vulnerable to relative path traversal in Image upload | 4.3CNA v3.1 | 0.5% | 2024-09-26 | Fix |
| CVE-2024-47170 | Agnai File Disclosure vulnerability: JSON via path traversal | 4.3CNA v3.1 | 0.5% | 2024-09-26 | Fix |
| CVE-2024-47169 | Agnai vulnerable to remote code execution via JS upload using directory traversal | 8.8CNA v3.1 | 0.8% | 2024-09-26 | Fix |
| CVE-2024-47145 | Mattermost unauthorized access on archived channels via file links | 3.1CNA v3.1 | 0.3% | 2024-09-26 | Fix |
| CVE-2024-47130 | Missing authentication for critical function in goTenna Pro | 6.5NVD v3.1 | 0.2% | 2024-09-26 | Fix |
| CVE-2024-47129 | Observable response discrepancy in goTenna Pro | 4.3v3.1 | 0.1% | 2024-09-26 | Fix |
| CVE-2024-47128 | Insertion of sensitive information into sent data in goTenna Pro | 4.3v3.1 | 0.1% | 2024-09-26 | Fix |
| CVE-2024-47127 | Weak authentication in goTenna Pro | 3.1NVD v3.1 | 0.1% | 2024-09-26 | Fix |
| CVE-2024-47126 | goTenna Pro App encryption key sharing weak random number generator | 8.8v3.1 | 0.2% | 2024-09-26 | Fix |
| CVE-2024-47125 | Improper restriction of communication channel to intended endpoints in goTenna Pro | 5.4NVD v3.1 | 0.1% | 2024-09-26 | Fix |
| CVE-2024-47124 | Cleartext transmission of sensitive information in goTenna Pro | 6.5v3.1 | 0.1% | 2024-09-26 | Fix |
| CVE-2024-47123 | Missing support for integrity check in goTenna Pro | 3.1NVD v3.1 | 0.1% | 2024-09-26 | Fix |
| CVE-2024-47122 | Insecure storage of sensitive information in goTenna Pro | 6.5v3.1 | 0.1% | 2024-09-26 | Fix |
| CVE-2024-47121 | Weak passwords Requirements in goTenna Pro | 5.3v3.1 | 0.1% | 2024-09-26 | Fix |
| CVE-2024-47076 | OpenPrinting libcupsfilters cfGetPrinterAttributes5 function improper input validation | 8.6CNA v3.1 | 79.9% | 2024-09-26 | Exploit codeKCVFix |
| CVE-2024-47075 | DOM Clobbering gadgets found in layui that lead to cross-site scripting | 6.4CNA v3.1 | 0.3% | 2024-09-26 | Fix |
| CVE-2024-47045 | National Tax Agency e-Tax software installer vulnerability | 7.8CISA ADP v3.1 | 0.1% | 2024-09-26 | |
| CVE-2024-47044 | NIPPON TELEGRAPH AND TELEPHONE EAST Hikari Denwa router RT-400MI UI misrepresentation | 5.3CISA ADP v3.1 | 0.4% | 2024-09-26 | |
| CVE-2024-47003 | Mattermost DoS via non-string message using permalink embed | 3.1CNA v3.1 | 0.6% | 2024-09-26 | Fix |
| CVE-2024-46632 | assimp heap-based buffer overflow | 4.3CISA ADP v3.1 | 0.5% | 2024-09-26 | |
| CVE-2024-46628 | Tendacn G3 OS command injection | 9.8v3.1 | 11.3% | 2024-09-26 | |
| CVE-2024-46627 | BECN DATAGERRY remote command execution | 9.1CISA ADP v3.1 | 4.1% | 2024-09-26 | Nuclei |
| CVE-2024-46330 | Vonets Vap11g-300 OS command injection | 7.4CISA ADP v3.1 | 0.8% | 2024-09-26 | |
| CVE-2024-46329 | Vonets Vap11g-300 OS command injection | 8.0CISA ADP v3.1 | 0.8% | 2024-09-26 | |
| CVE-2024-46328 | Vonets Vap11g-300 hard-coded password | 8.0CISA ADP v3.1 | 0.2% | 2024-09-26 | |
| CVE-2024-46327 | Vonets Vap11g-300 path traversal | 5.7CISA ADP v3.1 | 0.4% | 2024-09-26 | |
| CVE-2024-45989 | Monica AI Assistant desktop application information disclosure | 4.0CISA ADP v3.1 | 0.3% | 2024-09-26 | |
| CVE-2024-45987 | Online Voting System cross-site request forgery | 6.5v3.1 | 0.2% | 2024-09-26 | |
| CVE-2024-45986 | Projectworlds Online Voting System Project cross-site scripting | 5.4CISA ADP v3.1 | 0.3% | 2024-09-26 | |
| CVE-2024-45985 | varunsardana004 Blood-Bank-And-Donation-Management-System cross-site scripting | 4.7CISA ADP v3.1 | 0.3% | 2024-09-26 | |
| CVE-2024-45984 | varunsardana004 Blood-Bank-And-Donation-Management-System cross-site scripting | 4.7CISA ADP v3.1 | 0.3% | 2024-09-26 | |
| CVE-2024-45983 | kishan0725 Hospital-Management-System cross-site request forgery | 6.3CISA ADP v3.1 | 0.1% | 2024-09-26 | |
| CVE-2024-45982 | scheduleR v0.0.18 A host header injection | 8.8CISA ADP v3.1 | 0.4% | 2024-09-26 | |
| CVE-2024-45981 | BookReviewLibrary host header injection | 8.8CISA ADP v3.1 | 0.4% | 2024-09-26 | |
| CVE-2024-45980 | MEANStore host header injection | 8.8CISA ADP v3.1 | 0.4% | 2024-09-26 | |
| CVE-2024-45979 | Lines Police CAD host header injection | 8.8CISA ADP v3.1 | 0.4% | 2024-09-26 | |
| CVE-2024-45843 | Mattermost weak SSRF Filtering | 3.1CNA v3.1 | 0.2% | 2024-09-26 | Fix |
| CVE-2024-45838 | goTenna Pro ATAK Plugin cleartext transmission of sensitive information | 4.3v3.1 | 0.1% | 2024-09-26 | Fix |
| CVE-2024-45836 | PLANEX COMMUNICATIONS CS-QR10 web management page cross-site scripting | 6.1v3.1 | 0.2% | 2024-09-26 | |
| CVE-2024-45723 | goTenna Pro ATAK Plugin use of cryptographically weak pseudo-random number generator | 6.5NVD v3.1 | 0.1% | 2024-09-26 | Fix |
| CVE-2024-45374 | goTenna Pro ATAK Plugin weak password requirements | 6.5v3.1 | 0.1% | 2024-09-26 | Fix |
| CVE-2024-45372 | PLANEX COMMUNICATIONS MZK-DP300N cross-site request forgery | 6.5v3.1 | 0.2% | 2024-09-26 | Fix |
| CVE-2024-45042 | Ory Kratos's `highest_available` setting does not properly respect code + mfa credentials | 4.4CNA v3.1 | 0.3% | 2024-09-26 | Fix |
| CVE-2024-44860 | Solvait /Letter/PrintQr/ endpoint information disclosure | 7.5CISA ADP v3.1 | 0.5% | 2024-09-26 | |
| CVE-2024-43814 | goTenna Pro ATAK Plugin insertion of sensitive information into sent data | 4.3v3.1 | 0.1% | 2024-09-26 | Fix |
| CVE-2024-43694 | goTenna Pro ATAK Plugin insecure storage of sensitive information | 6.5v3.1 | 0.1% | 2024-09-26 | Fix |
| CVE-2024-43191 | IBM ManageIQ command execution | 7.2CNA v3.1 | 0.8% | 2024-09-26 | Fix |
| CVE-2024-43108 | goTenna Pro ATAK Plugin missing support for integrity check | 6.5v3.1 | 0.1% | 2024-09-26 | Fix |
| CVE-2024-42406 | Mattermost unauthorized access on archived channels | 5.4CNA v3.1 | 0.2% | 2024-09-26 | Fix |
| CVE-2024-41931 | goTenna Pro ATAK Plugin insertion of sensitive information into sent data | 4.3v3.1 | 0.1% | 2024-09-26 | Fix |
| CVE-2024-41722 | goTenna Pro ATAK Plugin weak authentication | 6.5v3.1 | 0.1% | 2024-09-26 | Fix |
| CVE-2024-41715 | goTenna Pro ATAK Plugin observable response discrepancy | 4.3v3.1 | 0.1% | 2024-09-26 | Fix |
| CVE-2024-41605 | Foxit PDF Reader and PDF Editor update service improper access control | 8.4CISA ADP v3.1 | 0.2% | 2024-09-26 | Fix |
| CVE-2024-40508 | Openpetra cross-site scripting | 7.3CISA ADP v3.1 | 0.8% | 2024-09-26 | Exploit code |
| CVE-2024-40507 | Openpetra cross-site scripting | 7.3CISA ADP v3.1 | 0.8% | 2024-09-26 | Exploit code |
| CVE-2024-40506 | Openpetra cross-site scripting | 7.3CISA ADP v3.1 | 0.7% | 2024-09-26 | Exploit code |
| CVE-2024-39577 | Dell SmartFabric OS10 Software command injection | 7.1CNA v3.1 | 0.9% | 2024-09-26 | Fix |
| CVE-2024-39319 | Aimeos/ai-controller-frontend has IDOR vulnerability in account profile page | 5.3CNA v3.0 | 0.5% | 2024-09-26 | Fix |
| CVE-2024-37125 | Dell SmartFabric OS10 Software resource exhaustion | 7.5CNA v3.1 | 0.4% | 2024-09-26 | Fix |
| CVE-2024-31899 | IBM Cognos Command Center information disclosure | 4.3CNA v3.1 | 0.2% | 2024-09-26 | Fix |
| CVE-2024-30134 | HCL Traveler for Microsoft Outlook is susceptible to an application modification vulnerability | 6.7CNA v3.1 | 0.2% | 2024-09-26 | Fix |
| CVE-2024-9203 | Enpass Password Manager sensitive information in memory | 2.0CNA v4.0 | 0.1% | 2024-09-26 | Fix |
| CVE-2024-9199 | Rate limit vulnerability in Clibo Manager | 7.5v3.1 | 0.3% | 2024-09-26 | Fix |
| CVE-2024-9198 | Stored cross-site scripting vulnerability in Clibo Manager | 5.4NVD v3.1 | 0.3% | 2024-09-26 | Fix |
| CVE-2024-9177 | Themedy Toolbox WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.4% | 2024-09-26 | Fix |
| CVE-2024-9173 | GF Custom Style WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.3% | 2024-09-26 | |
| CVE-2024-9166 | OS command injection in Atelmo Atemio AM 520 HD Full HD Satellite Receiver | 9.3CNA v4.0 | 1.6% | 2024-09-26 | Nuclei |
| CVE-2024-9155 | Mattermost insufficient authorization on Unlinked Channel files | 4.3CNA v3.1 | 0.3% | 2024-09-26 | Fix |
| CVE-2024-9127 | Super Testimonials WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.3% | 2024-09-26 | |
| CVE-2024-9125 | king_IE WordPress plugin authenticated (Author+) stored cross-site scripting via SVG file upload | 5.4v3.1 | 0.3% | 2024-09-26 | |
| CVE-2024-9117 | Mapplic Lite WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.3% | 2024-09-26 | |
| CVE-2024-9115 | Common Tools for Site WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.3% | 2024-09-26 | |
| CVE-2024-9025 | Sight WordPress plugin unauthorized access | 5.3CNA v3.1 | 0.4% | 2024-09-26 | Fix |
| CVE-2024-8974 | Incorrect provision of specified functionality in GitLab | 2.6CNA v3.1 | 0.3% | 2024-09-26 | Fix |
| CVE-2024-8872 | Store Hours for WooCommerce WordPress plugin reflected cross-site scripting | 6.1CNA v3.1 | 0.4% | 2024-09-26 | Fix |
| CVE-2024-8861 | ProfileGrid User Profiles, Groups and Communities WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.3% | 2024-09-26 | Fix |
| CVE-2024-8803 | Bulk NoIndex and NoFollow Toolkit WordPress plugin reflected cross-site scripting | 6.1CNA v3.1 | 0.4% | 2024-09-26 | Fix |
| CVE-2024-8771 | Email Subscribers by Icegram Express WordPress plugin unauthorized access | 4.3CNA v3.1 | 0.4% | 2024-09-26 | Fix |
| CVE-2024-8725 | Advanced File Manager WordPress plugin authenticated (Subscriber+) limited file upload | 5.4v3.1 | 0.4% | 2024-09-26 | Fix |
| CVE-2024-8723 | 012 PS Multi Languages WordPress plugin authenticated (Contributor+) stored cross-site scripting | 5.4v3.1 | 0.3% | 2024-09-26 | |
| CVE-2024-8704 | Advanced File Manager WordPress plugin local JavaScript file inclusion | 7.2CNA v3.1 | 0.9% | 2024-09-26 | Fix |
| CVE-2024-8633 | Form Maker WordPress plugin authenticated (Administrator+) stored cross-site scripting | 4.8v3.1 | 0.3% | 2024-09-26 | Fix |
| CVE-2024-8552 | Download Monitor WordPress plugin missing authorization to authenticated (Subscriber+) Shop Enable | 4.3CNA v3.1 | 0.4% | 2024-09-26 | Fix |
| CVE-2024-8405 | Arbitrary file creation in PaperCut NG/MF Web Print leading to a denial of service attack | 6.1CNA v3.1 | 0.2% | 2024-09-26 | Fix |
| CVE-2024-8404 | Arbitrary file deletion in PaperCut NG/MF Web Print Hot folder | 7.8CNA v3.1 | 0.4% | 2024-09-26 | Fix |
| CVE-2024-8126 | Advanced File Manager WordPress plugin authenticated (Subscriber+) arbitrary file upload | 8.8v3.1 | 0.9% | 2024-09-26 | Fix |
| CVE-2024-8118 | Grafana alerting wrong permission on datasource rule write endpoint | 5.1CNA v4.0 | 0.6% | 2024-09-26 | Exploit codeFix |
| CVE-2024-7781 | Jupiter X Core WordPress plugin limited unauthenticated authentication bypass to account takeover | 9.8v3.1 | 1.0% | 2024-09-26 | Fix |
| CVE-2024-7772 | Jupiter X Core WordPress plugin unauthenticated arbitrary file upload | 9.8CNA v3.1 | 1.5% | 2024-09-26 | Fix |
| CVE-2024-7594 | Vault SSH Secrets Engine Configuration Did not Restrict Valid Principals by Default | 7.5CNA v3.1 | 0.3% | 2024-09-26 | Fix |
| CVE-2024-7259 | Ovirt-engine: Potential exposure of cleartext provider passwords via web UI | 4.9CNA v3.1 | 0.3% | 2024-09-26 | Fix |
| CVE-2024-7108 | Incorrect authorization in National Keep's CyberMath | 9.8v3.1 | 0.3% | 2024-09-26 | Fix |
| CVE-2024-7107 | Directory traversal in National Keep's CyberMath | 7.5v3.1 | 0.3% | 2024-09-26 | Fix |
| CVE-2024-6769 | Medium to High Integrity privilege escalation in Microsoft Windows | 8.4CNA v4.0 | 1.1% | 2024-09-26 | Exploit code |
| CVE-2024-6517 | Contact Form 7 Math Captcha WordPress plugin reflected XSS | 6.1NVD v3.1 | 0.7% | 2024-09-26 | NucleiFix |
| CVE-2024-4278 | Incorrect synchronization in GitLab | 5.5CNA v3.1 | 0.2% | 2024-09-26 | Fix |
| CVE-2024-4099 | Improper encoding or escaping of output in GitLab | 3.1CNA v3.1 | 0.3% | 2024-09-26 | Fix |
| CVE-2024-0133 | NVIDIA Container Toolkit time-of-check time-of-use race condition | 4.1CNA v3.1 | 0.2% | 2024-09-26 | Fix |
| CVE-2024-0132 | NVIDIA Container Toolkit contains a time-of-check time-of-use (TOCTOU) | 9.0CNA v3.1 | 40.8% | 2024-09-26 | Exploit codeFix |
| CVE-2024-47315 | GiveWP Donation Plugin and Fundraising Platform WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.2% | 2024-09-25 | Fix |
| CVE-2024-47305 | Dinesh Karki Use Any Font cross-site request forgery | 8.8v3.1 | 0.2% | 2024-09-25 | Fix |
| CVE-2024-47303 | Elementor Addons by Livemesh WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.2% | 2024-09-25 | Fix |
| CVE-2024-47083 | Power Platform Terraform Provider has Improper Masking of Secrets in Logs | 8.8CNA v4.0 | 1.6% | 2024-09-25 | Fix |
| CVE-2024-47082 | Strawberry GraphQL cross-site request forgery (CSRF) | 4.6CNA v3.1 | 0.2% | 2024-09-25 | Fix |
| CVE-2024-47078 | Meshtastic Firmware Authentication/authorization bypass via MQTT | 8.1CNA v3.1 | 0.5% | 2024-09-25 | Fix |
| CVE-2024-47048 | Rocket.Chat cross-site scripting | 5.4v3.1 | 0.4% | 2024-09-25 | Fix |
| CVE-2024-46957 | Mellium allows authentication bypass by spoofing | 9.8CISA ADP v3.1 | 0.6% | 2024-09-25 | Fix |
| CVE-2024-46936 | Rocket.Chat 6.12.0, 6.11.2, 6.10.5, 6.9.6, 6.8.6, 6.7.8, and before is vulnerable to a message forgery / impersonation issue. Attackers can abuse the UpdateOTRAck method to send ephemeral messages as if they were any other user they choose. | 7.5CISA ADP v3.1 | 0.4% | 2024-09-25 | |
| CVE-2024-46935 | Rocket.Chat denial of service in rocket chat message parser | 7.5v3.1 | 0.6% | 2024-09-25 | Fix |
| CVE-2024-46934 | Rocket.Chat cross-site scripting | 6.1v3.1 | 0.3% | 2024-09-25 | Fix |
| CVE-2024-46655 | Ellevo A reflected cross-site scripting | 6.1v3.1 | 0.4% | 2024-09-25 | |
| CVE-2024-46612 | Thecosy IceCMS hard-coded cryptographic key | 9.8CISA ADP v3.1 | 0.6% | 2024-09-25 | |
| CVE-2024-46610 | Thecosy IceCMS An improper access control | 7.5v3.1 | 0.4% | 2024-09-25 | |
| CVE-2024-46609 | Thecosy IceCMS CheckVip function in UserController.java improper access control | 7.5CISA ADP v3.1 | 0.7% | 2024-09-25 | |
| CVE-2024-46607 | Thecosy IceCMS improper access control | 7.6CISA ADP v3.1 | 0.5% | 2024-09-25 | |
| CVE-2024-46600 | Timgreen Dingfanzu Cms cross-site request forgery | 4.7CISA ADP v3.1 | 0.2% | 2024-09-25 | |
| CVE-2024-46489 | Remote command execution in Promptr | 8.8v3.1 | 0.9% | 2024-09-25 | |
| CVE-2024-46488 | Heap-based buffer overflow in Sqlite-vec | 5.5NVD v3.1 | 0.4% | 2024-09-25 | Fix |
| CVE-2024-46485 | Timgreen Dingfanzu Cms cross-site request forgery | 6.3CISA ADP v3.1 | 0.2% | 2024-09-25 | |
| CVE-2024-46461 | VLC media player MMS stream demuxer heap-based buffer overflow | 8.0CISA ADP v3.1 | 0.6% | 2024-09-25 | Fix |
| CVE-2024-45817 | Xen x86: Deadlock in vlapic_error | 7.3CISA ADP v3.1 | 0.5% | 2024-09-25 | Fix |
| CVE-2024-45750 | TheGreenBow VPN Client IKEv2 improper authentication | 7.3CISA ADP v3.1 | 0.5% | 2024-09-25 | |
| CVE-2024-45613 | CKEditor 5 has cross-site scripting vulnerability in the clipboard package | 5.1CNA v4.0 | 0.5% | 2024-09-25 | Fix |
| CVE-2024-45599 | TCC Bypass in Cursor's macOS application | 3.8CNA v3.1 | 0.2% | 2024-09-25 | Fix |
| CVE-2024-45373 | Dover Fueling Solutions ProGauge MAGLINK LX CONSOLE improper privilege management | 8.8v3.1 | 0.4% | 2024-09-25 | Fix |
| CVE-2024-45066 | Dover Fueling Solutions ProGauge MAGLINK LX CONSOLE command injection | 9.8v3.1 | 0.8% | 2024-09-25 | Fix |
| CVE-2024-44825 | InVesalius3 path traversal | 7.5CISA ADP v3.1 | 0.9% | 2024-09-25 | |
| CVE-2024-44678 | Gigastone TR1 Travel Router ssid parameter command injection | 8.0CISA ADP v3.1 | 1.3% | 2024-09-25 | |
| CVE-2024-43990 | Masterstudy LMS Starter WordPress theme sensitive data exposure | 5.3CNA v3.1 | 0.4% | 2024-09-25 | Fix |
| CVE-2024-43959 | Super Testimonials WordPress plugin reflected cross-site scripting (XSS) | 7.1CNA v3.1 | 0.3% | 2024-09-25 | Fix |
| CVE-2024-43693 | Dover Fueling Solutions ProGauge MAGLINK LX CONSOLE command injection | 9.8v3.1 | 0.8% | 2024-09-25 | Fix |
| CVE-2024-43692 | Dover Fueling Solutions ProGauge MAGLINK LX CONSOLE authentication bypass | 9.8v3.1 | 0.5% | 2024-09-25 | Fix |
| CVE-2024-43423 | Dover Fueling Solutions ProGauge MAGLINK LX CONSOLE use of hard-coded password | 9.8v3.1 | 0.7% | 2024-09-25 | Fix |
| CVE-2024-43237 | Tag Groups WordPress plugin sensitive data exposure | 5.3CNA v3.1 | 0.3% | 2024-09-25 | Fix |
| CVE-2024-42797 | Lopalopa Music Management System improper access control | 9.8CISA ADP v3.1 | 0.6% | 2024-09-25 | |
| CVE-2024-42507 | HPE Aruba OS underlying CLI service command injection | 9.8CNA v3.1 | 1.4% | 2024-09-25 | |
| CVE-2024-42506 | HPE Aruba OS underlying CLI service command injection | 9.8CNA v3.1 | 1.4% | 2024-09-25 | |
| CVE-2024-42505 | HPE Aruba OS underlying CLI service command injection | 9.8CNA v3.1 | 1.5% | 2024-09-25 | |
| CVE-2024-41725 | Dover Fueling Solutions ProGauge MAGLINK LX CONSOLE cross-site scripting | 6.1NVD v3.1 | 0.4% | 2024-09-25 | Fix |
| CVE-2024-41708 | An issue was discovered in AdaCore ada_web_services 20.0 allows an attacker to escalate privileges and steal sessions via the Random_String() function in the src/core/aws-utils.adb module. | 7.5CISA ADP v3.1 | 0.4% | 2024-09-25 | |
| CVE-2024-41445 | Ihedvall Mdf Library out-of-bounds write | 6.5v3.1 | 0.4% | 2024-09-25 | |
| CVE-2024-40761 | Apache Answer: Avatar URL leaked user email addresses | 5.3CISA ADP v3.1 | 0.7% | 2024-09-25 | Fix |
| CVE-2024-39928 | Apache Linkis Spark EngineConn vulnerability | 7.5CISA ADP v3.1 | 0.6% | 2024-09-25 | Fix |
| CVE-2024-38324 | IBM Storage Defender improper certificate validation | 5.9CNA v3.1 | 0.3% | 2024-09-25 | Fix |
| CVE-2024-31146 | Xen PCI device pass-through with shared resources | 7.5CISA ADP v3.1 | 0.2% | 2024-09-25 | Fix |
| CVE-2024-31145 | Xen error handling in x86 IOMMU identity mapping | 7.5CISA ADP v3.1 | 0.2% | 2024-09-25 | Fix |
| CVE-2024-30128 | An open proxy vulnerability affects HCL Nomad server on Domino | 8.6CNA v3.1 | 0.4% | 2024-09-25 | Fix |
| CVE-2024-23454 | Apache Hadoop: Temporary File Local information disclosure | 6.2CISA ADP v3.1 | 0.4% | 2024-09-25 | Fix |
| CVE-2024-22893 | OpenSlides improper privilege management | 7.5CISA ADP v3.1 | 0.4% | 2024-09-25 | |
| CVE-2024-22892 | OpenSlides inadequate encryption strength | 7.5v3.1 | 0.2% | 2024-09-25 | |
| CVE-2024-21545 | Proxmox pve-manager external control of a file path | 8.2CNA v3.1 | 0.4% | 2024-09-25 | Exploit codeFix |
| CVE-2024-20510 | Cisco IOS XE Software incorrect authorization | 4.7CNA v3.1 | 0.3% | 2024-09-25 | Fix |
| CVE-2024-20508 | Cisco UTD SNORT IPS Engine Software heap-based buffer overflow | 5.8CNA v3.1 | 0.4% | 2024-09-25 | Fix |
| CVE-2024-20496 | Cisco SD-WAN vEdge Routers denial of service | 6.1CNA v3.1 | 0.2% | 2024-09-25 | Fix |
| CVE-2024-20480 | Cisco IOS XE Software denial of service | 8.6CNA v3.1 | 0.6% | 2024-09-25 | Fix |
| CVE-2024-20475 | Cisco SD-WAN vManage cross-site scripting | 6.4CNA v3.1 | 0.3% | 2024-09-25 | Fix |
| CVE-2024-20467 | Cisco IOS XE Software denial of service | 8.6CNA v3.1 | 1.0% | 2024-09-25 | Fix |
| CVE-2024-20465 | Cisco IOS improper access control | 5.8CNA v3.1 | 0.4% | 2024-09-25 | Fix |
| CVE-2024-20464 | Cisco IOS XE Software denial of service | 8.6CNA v3.1 | 0.6% | 2024-09-25 | Fix |
| CVE-2024-20455 | Cisco IOS XE Software denial of service | 8.6CNA v3.1 | 0.7% | 2024-09-25 | Fix |
| CVE-2024-20437 | Cisco IOS XE Software cross-site request forgery | 8.1CNA v3.1 | 0.3% | 2024-09-25 | Fix |
| CVE-2024-20436 | Cisco IOS XE Software null pointer dereference | 8.6CNA v3.1 | 0.9% | 2024-09-25 | Fix |
| CVE-2024-20434 | Cisco IOS XE Software integer overflow | 4.3CNA v3.1 | 0.3% | 2024-09-25 | Fix |
| CVE-2024-20433 | Cisco IOS stack-based buffer overflow | 8.6CNA v3.1 | 0.6% | 2024-09-25 | Fix |
| CVE-2024-20414 | Cisco IOS improper authorization | 6.5CNA v3.1 | 0.3% | 2024-09-25 | Fix |
| CVE-2024-20350 | Cisco Catalyst Center Static SSH Host Key vulnerability | 7.5CNA v3.1 | 0.4% | 2024-09-25 | Fix |
| CVE-2024-9169 | litespeed cache WordPress plugin authenticated (Administrator+) stored cross-site scripting | 4.8v3.1 | 0.3% | 2024-09-25 | Fix |
| CVE-2024-9148 | Flowise stored cross-site scripting | 6.1NVD v3.1 | 0.6% | 2024-09-25 | Fix |
| CVE-2024-9142 | Local file inclusion (LFI) in Olgu Computer Systems' e-Belediye | 9.8CISA ADP v3.1 | 0.4% | 2024-09-25 | Fix |
| CVE-2024-9141 | Cross-site scripting (XSS) vulnerability in Oct8ne | 5.4CNA v3.1 | 0.3% | 2024-09-25 | |
| CVE-2024-9123 | Google Chrome Skia integer overflow | 8.8v3.1 | 0.4% | 2024-09-25 | Fix |
| CVE-2024-9122 | Google Chrome V8 type confusion | 8.8v3.1 | 5.8% | 2024-09-25 | Fix |
| CVE-2024-9121 | Google Chrome V8 inappropriate implementation | 8.8v3.1 | 0.5% | 2024-09-25 | Fix |
| CVE-2024-9120 | Google Chrome Dawn use-after-free | 8.8v3.1 | 0.4% | 2024-09-25 | Fix |
| CVE-2024-9073 | GutenGeek Free Gutenberg Blocks for WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.3% | 2024-09-25 | |
| CVE-2024-9069 | Graphicsly The ultimate graphics plugin for WordPress website builder stored cross-site scripting | 5.4v3.1 | 0.3% | 2024-09-25 | |
| CVE-2024-9068 | OneElements Best Elementor Addons WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.3% | 2024-09-25 | |
| CVE-2024-9028 | WP GPX Maps WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.4% | 2024-09-25 | Fix |
| CVE-2024-9027 | WPZOOM Shortcodes WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.3% | 2024-09-25 | |
| CVE-2024-9024 | Material Design Icons WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.4% | 2024-09-25 | |
| CVE-2024-8996 | Grafana Agent Flow on Windows unquoted service path | 7.3CNA v3.1 | 0.3% | 2024-09-25 | Fix |
| CVE-2024-8975 | Grafana Alloy on Windows unquoted service path | 7.3CNA v3.1 | 0.3% | 2024-09-25 | Fix |
| CVE-2024-8942 | Cross-site scripting vulnerability on Scriptcase | 8.2v3.1 | 0.3% | 2024-09-25 | Fix |
| CVE-2024-8941 | Path traversal vulnerability on Scriptcase | 5.3NVD v3.1 | 0.6% | 2024-09-25 | Fix |
| CVE-2024-8940 | Unrestricted upload of file with dangerous type vulnerability on Scriptcase | 9.8v3.1 | 0.5% | 2024-09-25 | Fix |
| CVE-2024-8919 | Confetti Fall Animation WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.3% | 2024-09-25 | Fix |
| CVE-2024-8917 | AnWP Football Leagues WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.4% | 2024-09-25 | Fix |
| CVE-2024-8914 | Thanh Toán Quét Mã QR Code Tự Động WordPress plugin stored cross-site scripting | 5.5CISA ADP v3.1 | 0.3% | 2024-09-25 | Fix |
| CVE-2024-8910 | HT Mega Absolute Addons For Elementor WordPress plugin sensitive information exposure | 4.3CNA v3.1 | 0.3% | 2024-09-25 | Fix |
| CVE-2024-8878 | Riello Netman 204 Unauthenticated Password Reset | 9.8NVD v3.1 | 1.3% | 2024-09-25 | |
| CVE-2024-8877 | Riello Netman 204 SQL injection | 9.8NVD v3.1 | 77.3% | 2024-09-25 | NucleiEmerging Threats |
| CVE-2024-8858 | Elementor Addons by Livemesh WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.3% | 2024-09-25 | Fix |
| CVE-2024-8801 | Happy Addons for Elementor WordPress plugin sensitive information exposure | 4.3CNA v3.1 | 0.4% | 2024-09-25 | Fix |
| CVE-2024-8741 | Beam me up Scotty Back to Top Button WordPress plugin reflected cross-site scripting | 6.1CNA v3.1 | 0.4% | 2024-09-25 | Fix |
| CVE-2024-8713 | Kodex Posts likes WordPress plugin reflected cross-site scripting | 6.1CNA v3.1 | 0.4% | 2024-09-25 | |
| CVE-2024-8678 | Revolut Gateway for WooCommerce WordPress plugin unauthorized access | 5.3CNA v3.1 | 0.3% | 2024-09-25 | Fix |
| CVE-2024-8668 | ShopLentor WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.4% | 2024-09-25 | Fix |
| CVE-2024-8658 | saadiqbal myCred database upgrade function missing authorization | 5.3CNA v3.1 | 0.3% | 2024-09-25 | Fix |
| CVE-2024-8621 | Daily Prayer Time WordPress plugin authenticated (Contributor+) SQL injection | 6.5NVD v3.1 | 0.5% | 2024-09-25 | Fix |
| CVE-2024-8549 | Simple Calendar Google Calendar WordPress plugin reflected cross-site scripting | 6.1v3.1 | 0.5% | 2024-09-25 | Fix |
| CVE-2024-8546 | ElementsKit Elementor addons WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.4% | 2024-09-25 | Fix |
| CVE-2024-8516 | Themesflat Addons For Elementor WordPress plugin authenticated (Contributor+) information exposure | 4.3CNA v3.1 | 0.4% | 2024-09-25 | Fix |
| CVE-2024-8515 | Themesflat Addons For Elementor WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.4% | 2024-09-25 | Fix |
| CVE-2024-8514 | Prisna GWT - Google Website Translator WordPress plugin authenticated (Admin+) PHP object injection | 7.2NVD v3.1 | 1.0% | 2024-09-25 | Fix |
| CVE-2024-8497 | Franklin Fueling Systems TS-550 EVO absolute path traversal | 8.7CNA v4.0 | 0.6% | 2024-09-25 | Fix |
| CVE-2024-8485 | REST API TO MiniProgram WordPress plugin privilege escalation | 9.8CNA v3.1 | 0.6% | 2024-09-25 | Fix |
| CVE-2024-8484 | REST API TO MiniProgram WordPress plugin unauthenticated SQL injection | 7.5CNA v3.1 | 3.8% | 2024-09-25 | NucleiExploit codeFix |
| CVE-2024-8483 | MAS Static Content WordPress plugin Private Static content page disclosure | 6.5v3.1 | 0.4% | 2024-09-25 | Fix |
| CVE-2024-8481 | Special Text Boxes WordPress plugin unauthenticated arbitrary shortcode execution | 7.3CNA v3.1 | 0.6% | 2024-09-25 | Fix |
| CVE-2024-8476 | Easy PayPal Events WordPress plugin cross-site request forgery to arbitrary post deletion | 4.3CNA v3.1 | 0.2% | 2024-09-25 | Fix |
| CVE-2024-8437 | WP Easy Gallery WordPress Gallery plugin missing authorization authenticated Gallery manipulation | 4.3CNA v3.1 | 0.3% | 2024-09-25 | |
| CVE-2024-8436 | WP Easy Gallery WordPress Gallery plugin authenticated (Subscriber+) SQL injection | 9.9CISA ADP v3.1 | 0.5% | 2024-09-25 | |
| CVE-2024-8434 | Easy Mega Menu Plugin for WordPress ThemeHunk missing authorization authenticated settings Updates | 4.3CNA v3.1 | 0.4% | 2024-09-25 | Fix |
| CVE-2024-8350 | Uncanny Groups for LearnDash WordPress plugin missing authorization authenticated user Group Add | 2.7CNA v3.1 | 0.4% | 2024-09-25 | Fix |
| CVE-2024-8349 | Uncanny Groups for LearnDash WordPress plugin authenticated (Group Leader+) privilege escalation | 7.2CNA v3.1 | 1.2% | 2024-09-25 | Exploit codeFix |
| CVE-2024-8316 | Progress UI for WPF format provider unsafe deserialization | 7.8CNA v3.1 | 0.2% | 2024-09-25 | Fix |
| CVE-2024-8291 | Concrete CMS stored XSS in Image Editor Background Color | 5.1CNA v4.0 | 0.5% | 2024-09-25 | Fix |
| CVE-2024-8290 | WCFM WordPress plugin insecure direct object reference | 8.8CNA v3.1 | 0.6% | 2024-09-25 | Fix |
| CVE-2024-8275 | The Events Calendar WordPress plugin unauthenticated SQL injection | 9.8CNA v3.1 | 49.9% | 2024-09-25 | Exploit codeFix |
| CVE-2024-8267 | Radio Player WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.3% | 2024-09-25 | Fix |
| CVE-2024-8175 | CODESYS: Web server vulnerable to DoS | 7.5CNA v3.1 | 0.6% | 2024-09-25 | Fix |
| CVE-2024-8103 | WP Category Dropdown WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.3% | 2024-09-25 | Fix |
| CVE-2024-8067 | Helix Core unicode best fit argument injection | 5.8CNA v4.0 | 0.2% | 2024-09-25 | |
| CVE-2024-7892 | adstxt WordPress plugin settings update via CSRF | 4.3NVD v3.1 | 0.2% | 2024-09-25 | |
| CVE-2024-7878 | WP ULike WordPress plugin Admin+ stored XSS | 4.8NVD v3.1 | 0.4% | 2024-09-25 | Fix |
| CVE-2024-7679 | Progress Software Telerik UI for WinForms improper neutralization special element in hyperlinks | 7.8CNA v3.1 | 0.7% | 2024-09-25 | Fix |
| CVE-2024-7617 | Contact Form to Any API WordPress plugin unauthenticated stored cross-site scripting | 6.1NVD v3.1 | 0.6% | 2024-09-25 | Fix |
| CVE-2024-7576 | Progress UI for WPF format provider unsafe deserialization | 7.8CNA v3.1 | 0.5% | 2024-09-25 | Fix |
| CVE-2024-7575 | Progress Software Telerik UI for WPF improper neutralization special element in hyperlinks | 7.8CNA v3.1 | 0.7% | 2024-09-25 | Fix |
| CVE-2024-7491 | HUSKY WordPress plugin insecure direct object reference | 4.3v3.1 | 0.3% | 2024-09-25 | Fix |
| CVE-2024-7481 | Improper signature verification of Printer driver installation in TeamViewer Remote Clients | 8.8CNA v3.1 | 0.3% | 2024-09-25 | Fix |
| CVE-2024-7479 | Improper signature verification of VPN driver installation in TeamViewer Remote Clients | 8.8CNA v3.1 | 0.4% | 2024-09-25 | Exploit codeFix |
| CVE-2024-7426 | Community by PeepSo WordPress plugin information disclosure | 5.3CNA v3.1 | 0.5% | 2024-09-25 | Fix |
| CVE-2024-7421 | Devolutions Remote Desktop Manager information disclosure | 5.5v3.1 | 0.2% | 2024-09-25 | Fix |
| CVE-2024-7398 | Concrete CMS stored XSS vulnerability in Calendar Event Addition feature | 4.6CNA v4.0 | 0.5% | 2024-09-25 | Fix |
| CVE-2024-7386 | Premium Packages Sell Digital Products Securely WordPress plugin cross-site request forgery | 4.3CNA v3.1 | 0.2% | 2024-09-25 | Fix |
| CVE-2024-7385 | WordPress Simple HTML Sitemap plugin authenticated (Admin+) SQL injection | 7.2NVD v3.1 | 1.4% | 2024-09-25 | Fix |
| CVE-2024-6845 | Webdigit Chatbot with ChatGPT REST endpoint missing authorization | 5.3NVD v3.1 | 1.1% | 2024-09-25 | NucleiFix |
| CVE-2024-6594 | WatchGuard Firebox Single Sign-on client denial of service | 8.7CNA v4.0 | 0.6% | 2024-09-25 | Fix |
| CVE-2024-6593 | WatchGuard Firebox Single Sign-On Agent Management interface authentication bypass | 9.3CNA v4.0 | 0.6% | 2024-09-25 | Fix |
| CVE-2024-6592 | WatchGuard Firebox Single Sign-On Agent protocol authorization bypass | 9.3CNA v4.0 | 1.2% | 2024-09-25 | Exploit codeFix |
| CVE-2024-6590 | Spreadsheet Integration WordPress plugin unauthorized access | 4.3v3.1 | 0.3% | 2024-09-25 | Fix |
| CVE-2024-6512 | Devolutions Server PAM access request approval mechanism authorization bypass | 6.5v3.1 | 0.3% | 2024-09-25 | Fix |
| CVE-2024-4657 | Strored XSS in Talent Software's BAP Automation | 9.3CNA v4.0 | 0.4% | 2024-09-25 | Fix |
| CVE-2024-3866 | Ninja Forms Contact Form WordPress plugin reflected Self-based cross-site scripting via Referer | 6.1v3.1 | 0.3% | 2024-09-25 | Fix |
| CVE-2024-38269 | Zyxel VMG8825-T50K firmware memory corruption | 4.9CNA v3.1 | 0.4% | 2024-09-24 | Fix |
| CVE-2024-38268 | Zyxel VMG8825-T50K firmware memory corruption | 4.9CNA v3.1 | 0.4% | 2024-09-24 | Fix |
| CVE-2024-38267 | Zyxel VMG8825-T50K firmware memory corruption | 4.9CNA v3.1 | 0.4% | 2024-09-24 | Fix |
| CVE-2024-38266 | Zyxel VMG8825-T50K firmware memory corruption | 4.9CNA v3.1 | 0.4% | 2024-09-24 | Fix |
| CVE-2024-8795 | BA Book Everything WordPress plugin cross-site request forgery | 8.8CNA v3.1 | 0.3% | 2024-09-24 | Fix |
| CVE-2024-8794 | BA Book Everything WordPress plugin unauthenticated arbitrary user password reset | 5.3CNA v3.1 | 0.4% | 2024-09-24 | Fix |
| CVE-2024-8791 | Donation Forms by Charitable WordPress plugin privilege escalation | 9.8CNA v3.1 | 0.7% | 2024-09-24 | Fix |
| CVE-2024-8738 | Seriously Simple Stats WordPress plugin reflected cross-site scripting | 6.1CNA v3.1 | 0.5% | 2024-09-24 | Fix |
| CVE-2024-8716 | XT Ajax Add To Cart for WooCommerce WordPress plugin reflected cross-site scripting | 6.1CNA v3.1 | 0.5% | 2024-09-24 | Fix |
| CVE-2024-8671 | WooEvents WordPress plugin unauthenticated arbitrary file overwrite | 9.1v3.1 | 1.0% | 2024-09-24 | Fix |
| CVE-2024-8662 | Koko Analytics WordPress plugin reflected cross-site scripting | 6.1CNA v3.1 | 0.5% | 2024-09-24 | Fix |
| CVE-2024-8657 | Garden Gnome Package WordPress plugin authenticated (Contributor+) stored cross-site scripting | 5.4v3.1 | 0.4% | 2024-09-24 | Fix |
| CVE-2024-8628 | Popup WordPress plugin stored cross-site scripting | 5.4CNA v3.1 | 0.3% | 2024-09-24 | Fix |
| CVE-2024-8624 | MDTF Meta Data and Taxonomies Filter WordPress plugin authenticated (Contributor+) SQL injection | 9.9CNA v3.1 | 0.5% | 2024-09-24 | Fix |
| CVE-2024-8623 | MDTF Meta Data and Taxonomies Filter WordPress plugin unauthenticated arbitrary shortcode execution | 7.3CNA v3.1 | 0.6% | 2024-09-24 | Fix |
| CVE-2024-8544 | Pixel Cat Conversion Pixel Manager WordPress plugin reflected cross-site scripting | 6.1CNA v3.1 | 0.5% | 2024-09-24 | Fix |
| CVE-2024-8432 | Appointment and Event Booking Calendar Plugin WordPress plugin unauthorized access | 4.3CNA v3.1 | 0.4% | 2024-09-24 | Fix |
| CVE-2024-47227 | Iredmail Iredadmin cross-site scripting | 6.1v3.1 | 0.4% | 2024-09-23 | Fix |
| CVE-2024-47222 | My Office SDK server-side request forgery | 9.8v3.1 | 0.5% | 2024-09-23 | |
| CVE-2024-47069 | Oveleon Cookiebar reflected cross-site scripting | 6.1CNA v3.1 | 0.4% | 2024-09-23 | Fix |
| CVE-2024-47068 | DOM Clobbering Gadget found in rollup bundled scripts that leads to XSS | 6.1CNA v3.1 | 0.7% | 2024-09-23 | Fix |
| CVE-2024-47066 | LobeHub Lobe Chat proxy request handling server-side request forgery | 9.0CNA v3.1 | 11.8% | 2024-09-23 | Exploit codeFix |
| CVE-2024-46997 | DataEase's H2 datasource has a remote command execution risk | 9.8CNA v3.1 | 1.4% | 2024-09-23 | Fix |
| CVE-2024-46985 | DataEase has an XML external entity Reference | 7.5CNA v3.1 | 0.7% | 2024-09-23 | Fix |
| CVE-2024-46639 | HelpDeskZ v2.0.2 A cross-site scripting | 7.6CISA ADP v3.1 | 0.5% | 2024-09-23 | |
| CVE-2024-46544 | Apache Tomcat Connectors: Mod_jk: Local users can view and modify configuration | 5.9CISA ADP v3.1 | 0.3% | 2024-09-23 | Fix |
| CVE-2024-46241 | PHPGurukul Dairy Farm Shop Management System cross-site scripting | 5.9CISA ADP v3.1 | 0.2% | 2024-09-23 | |
| CVE-2024-45453 | Maintenance Redirect WordPress plugin IP bypass vulnerability | 3.7CNA v3.1 | 0.3% | 2024-09-23 | Fix |
| CVE-2024-45348 | Xiaomi Router AX9000 has a post-authorization command injection | 6.4CNA v3.1 | 0.8% | 2024-09-23 | Fix |
| CVE-2024-44540 | Ubiquiti AirMax UART debugging port privilege escalation | 6.6CISA ADP v3.1 | 0.2% | 2024-09-23 | |
| CVE-2024-44048 | Product Carousel Slider and Grid Ultimate for WooCommerce WordPress plugin local file inclusion | 6.5CNA v3.1 | 0.5% | 2024-09-23 | Fix |
| CVE-2024-43996 | ElementsKit Pro WordPress plugin local file inclusion | 6.5v3.1 | 0.6% | 2024-09-23 | Fix |
| CVE-2024-43989 | Justified Image Grid WordPress plugin unauthenticated server side request forgery (SSRF) | 7.5CNA v3.1 | 12.4% | 2024-09-23 | Emerging ThreatsFix |
| CVE-2024-43201 | Planet Fitness Workouts mobile apps do not properly validate TLS certificates | 5.9NVD v3.1 | 0.4% | 2024-09-23 | Fix |
| CVE-2024-42861 | linuxptp denial of service | 7.5v3.1 | 1.6% | 2024-09-23 | Exploit codeFix |
| CVE-2024-41228 | Pouch cp function symlink following | 7.6CISA ADP v3.1 | 0.3% | 2024-09-23 | |
| CVE-2024-40442 | Doccano Auto Labeling Pipeline module privilege escalation | 7.2CISA ADP v3.1 | 1.0% | 2024-09-23 | |
| CVE-2024-40441 | Doccano model_attribs parameter server-side request forgery | 6.6CISA ADP v3.1 | 0.7% | 2024-09-23 | |
| CVE-2024-39843 | Centreon A SQL injection | 6.7CISA ADP v3.1 | 2.1% | 2024-09-23 | Fix |
| CVE-2024-39842 | Centreon A SQL injection | 7.2CISA ADP v3.1 | 1.8% | 2024-09-23 | Fix |
| CVE-2024-39342 | Entrust Instant Financial Issuance encryption key storage privilege escalation | 6.6CISA ADP v3.1 | 0.1% | 2024-09-23 | |
| CVE-2024-39341 | Entrust Instant Financial Issuance WebAPI configuration file vulnerability | 5.9CISA ADP v3.1 | 0.2% | 2024-09-23 | |
| CVE-2024-37779 | WoodWing Elvis DAM Apache Ant script functionality remote command execution | 8.8CISA ADP v3.1 | 1.1% | 2024-09-23 | |
| CVE-2024-34331 | Parallels Desktop for Mac Parallels Service privilege escalation | 9.8CISA ADP v3.1 | 1.0% | 2024-09-23 | KCV |
| CVE-2024-23972 | Sony XAV-AX5500 USB Configuration Descriptor buffer overflow remote code execution | 6.8v3.1 | 0.9% | 2024-09-23 | Fix |
| CVE-2024-23934 | Sony XAV-AX5500 WMV/ASF Parsing stack-based buffer overflow remote code execution | 8.8CNA v3.1 | 1.0% | 2024-09-23 | Fix |
| CVE-2024-23933 | Sony XAV-AX5500 CarPlay TLV stack-based buffer overflow remote code execution | 6.8CISA ADP v3.1 | 0.8% | 2024-09-23 | Fix |
| CVE-2024-23922 | Sony XAV-AX5500 insufficient firmware update validation remote code execution | 6.8v3.1 | 1.8% | 2024-09-23 | Exploit codeFix |
| CVE-2024-9094 | code-projects Blood Bank System o-.php SQL injection | 9.8v3.1 | 0.6% | 2024-09-23 | |
| CVE-2024-9093 | SourceCodester Profile Registration without Reload Refresh GET parameter del.php SQL injection | 7.2v3.1 | 0.5% | 2024-09-23 | |
| CVE-2024-9092 | SourceCodester Profile Registration without Reload Refresh registration form cross-site scripting | 6.1v3.1 | 0.5% | 2024-09-23 | |
| CVE-2024-9091 | code-projects Student Record System index.php SQL injection | 9.8v3.1 | 0.7% | 2024-09-23 | |
| CVE-2024-9090 | SourceCodester Modern Loan Management System search_member.php SQL injection | 9.8v3.1 | 0.6% | 2024-09-23 | |
| CVE-2024-9089 | SourceCodester Modern Loan Management System update_loan_record.php cross-site scripting | 5.4v3.1 | 0.4% | 2024-09-23 | |
| CVE-2024-9014 | OAuth2 client id and secret exposed through the web browser in pgAdmin 4 | 9.9CNA v3.1 | 9.7% | 2024-09-23 | NucleiFix |
| CVE-2024-8903 | Acronis Cyber Protect Cloud Agent execution with unnecessary privileges | 4.7CNA v3.0 | 0.1% | 2024-09-23 | Fix |
| CVE-2024-8770 | GitHub Enterprise Server cross-site scripting | 5.8CNA v4.0 | 0.4% | 2024-09-23 | Fix |
| CVE-2024-8758 | Quiz and Survey Master (QSM) WordPress plugin Author+ stored XSS | 4.8NVD v3.1 | 0.4% | 2024-09-23 | Fix |
| CVE-2024-8606 | Checkmk fix 2FA bypass via RestAPI | 9.2CNA v4.0 | 0.5% | 2024-09-23 | Fix |
| CVE-2024-8263 | GitHub Enterprise Server improper privilege management | 6.2CNA v4.0 | 0.4% | 2024-09-23 | Fix |
| CVE-2024-7846 | YITH WooCommerce Ajax Search WordPress plugin Contributor+ stored XSS | 5.4CISA ADP v3.1 | 0.3% | 2024-09-23 | Fix |
| CVE-2024-7835 | Reflected XSS in Exnet Informatics Software's Ferry Reservation System | 8.8CNA v4.0 | 0.4% | 2024-09-23 | Fix |
| CVE-2024-7735 | SQLi in Exnet Informatics Software's Ferry Reservation System | 9.3CNA v4.0 | 0.4% | 2024-09-23 | Fix |
| CVE-2024-7024 | Google Chrome V8 inappropriate implementation | 9.6v3.1 | 0.3% | 2024-09-23 | Fix |
| CVE-2024-7023 | Google Chrome Updater improper input validation | 8.8v3.1 | 0.4% | 2024-09-23 | Fix |
| CVE-2024-7022 | Google Chrome uninitialized variable use | 4.3NVD v3.1 | 0.4% | 2024-09-23 | Fix |
| CVE-2024-7020 | Google Chrome Autofill inappropriate implementation | 4.3v3.1 | 0.3% | 2024-09-23 | Fix |
| CVE-2024-7019 | Google Chrome UI inappropriate implementation | 4.3v3.1 | 0.3% | 2024-09-23 | Fix |
| CVE-2024-7018 | Google Chrome PDF heap-based buffer overflow | 7.8v3.1 | 0.2% | 2024-09-23 | Fix |
| CVE-2024-0005 | Pure Storage FlashArray command injection | 8.8NVD v3.1 | 0.6% | 2024-09-23 | Fix |
| CVE-2024-0004 | Pure Storage FlashArray code injection | 7.2NVD v3.1 | 0.6% | 2024-09-23 | Fix |
| CVE-2024-0003 | Pure Storage FlashArray improper privilege management | 7.2NVD v3.1 | 0.5% | 2024-09-23 | Fix |
| CVE-2024-0002 | Pure Storage FlashArray improper authentication | 9.8v3.1 | 0.6% | 2024-09-23 | Fix |
| CVE-2024-0001 | Pure Storage FlashArray insecure default initialization | 9.8v3.1 | 0.9% | 2024-09-23 | Fix |
| CVE-2024-47226 | NetBox A stored cross-site scripting | 5.4CISA ADP v3.1 | 0.3% | 2024-09-22 | Fix |
| CVE-2024-47221 | Rapid SCADA weak password requirements | 7.5v3.1 | 0.4% | 2024-09-22 | |
| CVE-2024-47219 | Vesoft Nebulagraph Database code injection | 9.8CISA ADP v3.1 | 1.2% | 2024-09-22 | |
| CVE-2024-47218 | Vesoft Nebulagraph Database improper authentication | 9.8CISA ADP v3.1 | 0.6% | 2024-09-22 | |
| CVE-2024-40703 | IBM Cognos Analytics information disclosure | 5.5CNA v3.1 | 0.1% | 2024-09-22 | Fix |
| CVE-2024-9088 | SourceCodester Telecom Billing Management System login buffer overflow | 9.8v3.1 | 0.8% | 2024-09-22 | |
| CVE-2024-9087 | code-projects Vehicle Management edit1.php SQL injection | 9.8v3.1 | 0.7% | 2024-09-22 | |
| CVE-2024-9086 | code-projects Restaurant Reservation System filter.php SQL injection | 9.8v3.1 | 0.6% | 2024-09-22 | |
| CVE-2024-9085 | code-projects Restaurant Reservation System index.php SQL injection | 9.8v3.1 | 0.7% | 2024-09-22 | |
| CVE-2024-9084 | code-projects Blood Bank System bbms.php cross-site scripting | 5.4v3.1 | 0.4% | 2024-09-22 | |
| CVE-2024-9083 | SourceCodester Employee Management System add-admin.php cross-site scripting | 4.8v3.1 | 0.4% | 2024-09-22 | |
| CVE-2024-9082 | SourceCodester Online Eyewear Shop User Creation Users.php improper authorization | 9.8v3.1 | 0.5% | 2024-09-22 | |
| CVE-2024-9081 | SourceCodester Online Eyewear Shop view_category.php SQL injection | 7.5v3.1 | 0.5% | 2024-09-22 | |
| CVE-2024-9080 | code-projects Student Record System pincode-verification.php SQL injection | 9.8v3.1 | 0.8% | 2024-09-22 | |
| CVE-2024-9079 | code-projects Student Record System marks.php SQL injection | 9.8v3.1 | 0.7% | 2024-09-22 | |
| CVE-2024-9078 | code-projects Student Record System course.php SQL injection | 9.8v3.1 | 0.7% | 2024-09-22 | |
| CVE-2024-9077 | dingfangzu Order Checkout order.js cross-site scripting | 5.4v3.1 | 0.5% | 2024-09-22 | |
| CVE-2024-9076 | DedeCMS article_string_mix.php os command injection | 8.8v3.1 | 20.8% | 2024-09-22 | |
| CVE-2024-47210 | Gladys Assistant updateMySelf role endpoint privilege escalation | 8.8CISA ADP v3.1 | 0.6% | 2024-09-21 | |
| CVE-2024-42323 | Apache HertzBeat: RCE by snakeYaml deser load malicious XML | 8.8CISA ADP v3.1 | 8.3% | 2024-09-21 | NucleiFix |
| CVE-2024-9075 | Stirling-Tools Stirling-PDF Markdown-to-PDF cross-site scripting | 5.4v3.1 | 0.4% | 2024-09-21 | |
| CVE-2024-9048 | y_project RuoYi Backend User Import SysUserServiceImpl.java SysUserServiceImpl cross-site scripting | 6.1v3.1 | 0.4% | 2024-09-21 | |
| CVE-2024-8680 | MailChimp for Wordpress plugin authenticated (Administrator+) stored cross-site scripting | 5.5v3.1 | 0.5% | 2024-09-21 | Fix |
| CVE-2024-6787 | MXview One Series vulnerable to time-of-check time-of-use (TOCTOU) race condition | 6.0CNA v4.0 | 0.3% | 2024-09-21 | Fix |
| CVE-2024-6786 | MXview One Series vulnerable to path traversal | 6.0CNA v4.0 | 0.6% | 2024-09-21 | Fix |
| CVE-2024-6785 | MXview One and MXview One Central Manager Series store cleartext credentials in a local file | 6.8CNA v4.0 | 0.1% | 2024-09-21 | Fix |
| CVE-2024-47062 | Multiple SQL Injections and ORM leak in navidrome | 9.4CNA v4.0 | 4.5% | 2024-09-20 | NucleiExploit codeFix |
| CVE-2024-47061 | udecode plate arbitrary DOM attributes in element.attributes and leaf.attributes in Platejs | 8.3CNA v3.1 | 0.5% | 2024-09-20 | Fix |
| CVE-2024-47060 | Unauthorized access after Organization or Project Deactivation in Zitadel | 4.3CNA v3.1 | 0.4% | 2024-09-20 | Fix |
| CVE-2024-47000 | Service Users Deactivation not Working in Zitadel | 8.1CNA v3.1 | 0.4% | 2024-09-20 | Fix |
| CVE-2024-46999 | User Grant Deactivation not Working in Zitadel | 7.3CNA v3.1 | 0.4% | 2024-09-20 | Fix |
| CVE-2024-46654 | MacCMS Add Scheduled Task module stored cross-site scripting | 4.8CISA ADP v3.1 | 0.3% | 2024-09-20 | |
| CVE-2024-46652 | Tenda AC8 buffer overflow | 9.8v3.1 | 0.6% | 2024-09-20 | |
| CVE-2024-46649 | eNMS download endpoint path traversal | 7.5CISA ADP v3.1 | 1.0% | 2024-09-20 | |
| CVE-2024-46648 | eNMS scan_folder function path traversal | 7.5CISA ADP v3.1 | 0.9% | 2024-09-20 | |
| CVE-2024-46647 | eNMS upload_files function path traversal | 6.5CISA ADP v3.1 | 0.8% | 2024-09-20 | |
| CVE-2024-46646 | eNMS download/file endpoint path traversal | 6.5CISA ADP v3.1 | 0.8% | 2024-09-20 | |
| CVE-2024-46645 | eNMS get_tree_files function path traversal | 7.5CISA ADP v3.1 | 0.9% | 2024-09-20 | |
| CVE-2024-46644 | eNMS edit_file function path traversal | 6.5CISA ADP v3.1 | 0.8% | 2024-09-20 | |
| CVE-2024-46640 | Seacms code injection | 9.8CISA ADP v3.1 | 1.0% | 2024-09-20 | |
| CVE-2024-46103 | SEMCMS code injection | 9.8CISA ADP v3.1 | 0.5% | 2024-09-20 | |
| CVE-2024-46101 | Gdidees Cms unrestricted file upload | 9.8CISA ADP v3.1 | 0.5% | 2024-09-20 | |
| CVE-2024-45810 | Envoy crashes for LocalReply in HTTP async client | 6.5CNA v3.1 | 0.6% | 2024-09-20 | Fix |
| CVE-2024-45809 | Jwt filter crash in the clear route cache with remote JWKs in envoy | 5.3CNA v3.1 | 0.4% | 2024-09-20 | Fix |
| CVE-2024-45808 | Malicious log injection via access logs in envoy | 6.5CNA v3.1 | 0.4% | 2024-09-20 | Fix |
| CVE-2024-45807 | Oghttp2 crash on OnBeginHeadersForStream in envoy | 7.5CNA v3.1 | 0.5% | 2024-09-20 | Fix |
| CVE-2024-45806 | Potential manipulate `x-envoy` headers from external sources in envoy | 6.5CNA v3.1 | 0.4% | 2024-09-20 | Fix |
| CVE-2024-45793 | Cross-site scripting from in Confidant API call | 4.8CNA v3.1 | 0.4% | 2024-09-20 | Fix |
| CVE-2024-45489 | The Browser Company Arc JavaScript boosts remote code execution | 9.8CISA ADP v3.1 | 1.2% | 2024-09-20 | |
| CVE-2024-45229 | Versa Director missing authentication | 6.6CNA v3.0 | 0.5% | 2024-09-20 | Fix |
| CVE-2024-42697 | Leotheme Leo Product Search Module product search function cross-site scripting | 6.1CISA ADP v3.1 | 0.4% | 2024-09-20 | |
| CVE-2024-42351 | Possible Data tampering and Loss of Public Datasets in Galaxy | 6.5CNA v3.1 | 0.5% | 2024-09-20 | Fix |
| CVE-2024-42346 | Stored cross-site scripting (stored XSS) in Galaxy | 7.6CNA v3.1 | 0.8% | 2024-09-20 | Exploit codeFix |
| CVE-2024-41721 | FreeBSD bhyve(8) out-of-bounds read access via XHCI emulation | 8.1CISA ADP v3.1 | 0.8% | 2024-09-20 | Fix |
| CVE-2024-37879 | /admin/config/save in User-friendly SVN improper input validation | 4.8CISA ADP v3.1 | 0.4% | 2024-09-20 | |
| CVE-2024-9043 | Cellopoint Secure Email Gateway buffer overflow | 9.8CNA v3.1 | 1.4% | 2024-09-20 | Fix |
| CVE-2024-9041 | SourceCodester Best House Rental Management System ajax.php SQL injection | 8.8v3.1 | 0.6% | 2024-09-20 | |
| CVE-2024-9040 | code-projects Blood Bank Management System Password cleartext storage in a file or on disk | 5.5v3.1 | 0.2% | 2024-09-20 | |
| CVE-2024-9039 | SourceCodester Best House Rental Management System ajax.php SQL injection | 9.8v3.1 | 0.7% | 2024-09-20 | |
| CVE-2024-9038 | Codezips Online Shopping Portal insert-product.php unrestricted upload | 9.8v3.1 | 0.7% | 2024-09-20 | |
| CVE-2024-9037 | Codezips Internal Marks Calculation index.php SQL injection | 6.9CNA v4.0 | 0.6% | 2024-09-20 | |
| CVE-2024-9036 | itsourcecode Online Bookstore admin_add.php unrestricted upload | 5.3CNA v4.0 | 0.5% | 2024-09-20 | |
| CVE-2024-9035 | code-projects Blood Bank Management System Admin Login login.php SQL injection | 6.9CNA v4.0 | 0.7% | 2024-09-20 | |
| CVE-2024-9034 | code-projects Patient Record Management System login.php SQL injection | 6.9CNA v4.0 | 0.6% | 2024-09-20 | |
| CVE-2024-9033 | SourceCodester Best House Rental Management System ajax.php cross-site scripting | 5.4v3.1 | 0.5% | 2024-09-20 | |
| CVE-2024-9032 | SourceCodester Simple Forum-Discussion System index.php path traversal | 8.8v3.1 | 0.8% | 2024-09-20 | |
| CVE-2024-9031 | CodeCanyon CRMGo SaaS show cross-site scripting | 5.4v3.1 | 0.4% | 2024-09-20 | |
| CVE-2024-9030 | CodeCanyon CRMGo SaaS note cross-site scripting | 5.4v3.1 | 0.4% | 2024-09-20 | |
| CVE-2024-9011 | code-projects Crud Operation System updata.php SQL injection | 9.8v3.1 | 0.6% | 2024-09-20 | |
| CVE-2024-9009 | code-projects Online Quiz Site showtest.php SQL injection | 9.8v3.1 | 0.6% | 2024-09-20 | |
| CVE-2024-8853 | Webo-facto WordPress plugin unauthenticated privilege escalation | 9.8CNA v3.1 | 0.6% | 2024-09-20 | Fix |
| CVE-2024-8612 | Red Hat Enterprise Linux 10 qemu-kvm: Information leak in virtio devices | 3.8CNA v3.1 | 0.2% | 2024-09-20 | Fix |
| CVE-2024-47162 | JetBrains YouTrack insufficiently protected credentials | 4.1CNA v3.1 | 0.4% | 2024-09-19 | Fix |
| CVE-2024-47160 | JetBrains YouTrack incorrect authorization | 4.3CNA v3.1 | 0.4% | 2024-09-19 | Fix |
| CVE-2024-47159 | JetBrains YouTrack incorrect authorization | 4.3CNA v3.1 | 0.3% | 2024-09-19 | Fix |
| CVE-2024-47089 | Apex Softcell LD Geo Unauthorized Transaction Manipulation vulnerability | 6.5NVD v3.1 | 0.2% | 2024-09-19 | Fix |
| CVE-2024-47088 | Apex Softcell LD Geo API login vulnerability | 9.8v3.1 | 0.6% | 2024-09-19 | Fix |
| CVE-2024-47087 | Apex Softcell LD Geo information disclosure | 6.5NVD v3.1 | 0.4% | 2024-09-19 | Fix |
| CVE-2024-47086 | Apex Softcell LD DP Back Office OTP verification authentication bypass | 6.5NVD v3.1 | 0.5% | 2024-09-19 | Fix |
| CVE-2024-47085 | Apex Softcell LD DP Back Office client code API parameters information disclosure | 6.5NVD v3.1 | 0.4% | 2024-09-19 | Fix |
| CVE-2024-46984 | gematik Reference Validator profile validation XML external entity injection | 8.6CNA v3.1 | 0.6% | 2024-09-19 | Fix |
| CVE-2024-46983 | Remote command execution(RCE) Vulnerbility in sofa-hessian | 9.8CNA v3.1 | 0.7% | 2024-09-19 | Fix |
| CVE-2024-46946 | LangChain Experimental eval injection | 9.8CISA ADP v3.1 | 1.4% | 2024-09-19 | Fix |
| CVE-2024-46394 | Frog CMS cross-site request forgery | 8.8v3.1 | 0.3% | 2024-09-19 | |
| CVE-2024-46382 | linlinjava litemall SQL injection | 7.5v3.1 | 0.6% | 2024-09-19 | |
| CVE-2024-45862 | Cleartext storage of sensitive information in Kastle Systems Access Control System | 7.5v3.1 | 0.2% | 2024-09-19 | Fix |
| CVE-2024-45861 | Kastle Systems Access Control System firmware hard-coded credentials | 7.5NVD v3.1 | 0.4% | 2024-09-19 | Fix |
| CVE-2024-45770 | Red Hat Enterprise Linux 8 pcp: Pmpost symlink attack allows escalating pcp to root user | 4.4CNA v3.1 | 0.3% | 2024-09-19 | Fix |
| CVE-2024-45769 | Red Hat Enterprise Linux 8 pcp: Pmcd heap corruption through metric pmstore operations | 5.5CNA v3.1 | 0.3% | 2024-09-19 | Fix |
| CVE-2024-45752 | Pixlone Logiops improper privilege management | 7.3v3.1 | 0.3% | 2024-09-19 | Fix |
| CVE-2024-45614 | Header normalization allows for client to clobber proxy set headers in Puma | 5.4CNA v3.1 | 0.6% | 2024-09-19 | Exploit codeFix |
| CVE-2024-45410 | HTTP client can remove the X-Forwarded headers in Traefik | 9.8CNA v3.1 | 1.5% | 2024-09-19 | Exploit codeKCVFix |
| CVE-2024-43496 | Microsoft Edge (Chromium-based) remote code execution | 6.5CNA v3.1 | 1.0% | 2024-09-19 | Fix |
| CVE-2024-43489 | Microsoft Edge (Chromium-based) remote code execution | 6.5CNA v3.1 | 0.8% | 2024-09-19 | Fix |
| CVE-2024-40125 | Closed-loop Cless Server arbitrary file upload | 9.8v3.1 | 0.9% | 2024-09-19 | |
| CVE-2024-38221 | Microsoft Edge (Chromium-based) spoofing | 4.3CNA v3.1 | 0.5% | 2024-09-19 | Fix |
| CVE-2024-38016 | Microsoft Office Visio remote code execution | 7.8CNA v3.1 | 0.6% | 2024-09-19 | Fix |
| CVE-2024-33109 | Ergophone Tiptel IP 286 path traversal | 9.8v3.1 | 0.9% | 2024-09-19 | |
| CVE-2024-31570 | FreeImage stack-based buffer overflow | 9.8v3.1 | 0.6% | 2024-09-19 | |
| CVE-2024-25673 | Couchbase Server host header injection | 6.1v3.1 | 0.3% | 2024-09-19 | Fix |
| CVE-2024-9008 | SourceCodester Best Online News Portal Comment Section news-details.php SQL injection | 9.8v3.1 | 0.6% | 2024-09-19 | |
| CVE-2024-9007 | jeanmarc77 123solar detailed.php cross-site scripting | 5.4v3.1 | 1.0% | 2024-09-19 | Nuclei |
| CVE-2024-9006 | jeanmarc77 123solar config_invt1.php code injection | 8.8v3.1 | 0.7% | 2024-09-19 | |
| CVE-2024-9004 | D-Link DAR-7000 Backup_Server_commit.php os command injection | 9.8v3.1 | 16.6% | 2024-09-19 | |
| CVE-2024-9003 | Jinan Chicheng JFlow attachment upload handler improper access control | 5.3v3.1 | 0.3% | 2024-09-19 | |
| CVE-2024-9001 | TOTOLINK T10 cstecgi.cgi setTracerouteCfg os command injection | 8.8v3.1 | 3.3% | 2024-09-19 | |
| CVE-2024-8986 | Information leakage in grafana-plugin-sdk-go | 9.1CNA v4.0 | 0.5% | 2024-09-19 | Fix |
| CVE-2024-8963 | Ivanti Cloud Services Appliance (CSA) path traversal | 9.4CNA v3.1 | 98.6% | 2024-09-19 | KEVNucleiEmerging ThreatsExploit codeKCVFix |
| CVE-2024-8883 | Keycloak: Vulnerable redirect uri validation results in open redirec | 6.1CNA v3.1 | 2.1% | 2024-09-19 | Reported exploitedNucleiFix |
| CVE-2024-8850 | MC4WP: Mailchimp for WordPress - reflected cross-site scripting | 6.1CNA v3.1 | 0.5% | 2024-09-19 | Fix |
| CVE-2024-8698 | Improper Verification of SAML Responses leading to privilege escalation in Keycloak | 7.7CNA v3.1 | 2.0% | 2024-09-19 | NucleiExploit codeFix |
| CVE-2024-8653 | NetCat CMS: Multiple reflected cross-site scripting vulnerabilities in netshop module | 6.1NVD v3.1 | 0.3% | 2024-09-19 | |
| CVE-2024-8652 | NetCat CMS: Reflected cross-site scripting in openstat module | 6.1NVD v3.1 | 0.3% | 2024-09-19 | |
| CVE-2024-8651 | NetCat CMS response discrepancy | 5.3NVD v3.1 | 0.4% | 2024-09-19 | |
| CVE-2024-8375 | Object deserialization in Reverb leading to RCE | 5.7CNA v4.0 | 0.1% | 2024-09-19 | |
| CVE-2024-8364 | WP Custom Fields Search WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.4% | 2024-09-19 | Fix |
| CVE-2024-8354 | QEMU Qemu-kvm: Usb: Assertion failure in usb_ep_get | 5.5NVD v3.1 | 0.3% | 2024-09-19 | Fix |
| CVE-2024-7785 | Reflected XSS in Ece Software's Electronic Ticket System | 9.3CNA v4.0 | 0.4% | 2024-09-19 | Fix |
| CVE-2024-7737 | Dassault Systèmes 3DSwymer stored cross-site scripting | 8.7CNA v3.1 | 0.4% | 2024-09-19 | |
| CVE-2024-7736 | Dassault Systèmes ENOVIA Collaborative Industry Innovator reflected cross-site scripting | 8.7CNA v3.1 | 0.3% | 2024-09-19 | |
| CVE-2024-7254 | Google ProtocolBuffers stack overflow in Protocol Buffers Java Lite | 8.7CNA v4.0 | 2.8% | 2024-09-19 | Fix |
| CVE-2024-47059 | Mautic users enumeration weak password login | 4.3CNA v3.1 | 0.3% | 2024-09-18 | Fix |
| CVE-2024-47058 | Mautic cross-site scripting (XSS) stored (edit form HTML field) | 2.9CNA v3.1 | 0.2% | 2024-09-18 | Fix |
| CVE-2024-47050 | Mautic XSS in contact/company tracking (no authentication) | 5.4CNA v3.1 | 0.3% | 2024-09-18 | Fix |
| CVE-2024-47001 | TAKENAKA ENGINEERING HDVR-400 multiple digital video recorders provided by hidden functionality | 8.8CISA ADP v3.1 | 0.7% | 2024-09-18 | |
| CVE-2024-46990 | SSRF Loopback IP filter bypass in directus | 5.0CNA v3.1 | 0.5% | 2024-09-18 | Fix |
| CVE-2024-46989 | SpiceDB having multiple caveats on resources of the same type may improperly result in no permission | 3.7CNA v3.1 | 0.3% | 2024-09-18 | Fix |
| CVE-2024-46987 | owen2345 CamaleonCMS arbitrary path traversal in Camaleon CMS | 7.7CNA v3.1 | 14.6% | 2024-09-18 | MetasploitExploit codeFix |
| CVE-2024-46986 | owen2345 CamaleonCMS arbitrary file write leading to RCE in Camaleon CMS | 10.0CNA v3.1 | 41.0% | 2024-09-18 | NucleiExploit codeFix |
| CVE-2024-46979 | Data leak of notification filters of users in XWiki Platform | 5.3CNA v3.1 | 0.6% | 2024-09-18 | Fix |
| CVE-2024-46978 | Missing checks for notification filter preferences editions in XWiki Platform | 6.5CNA v3.1 | 0.5% | 2024-09-18 | Fix |
| CVE-2024-46959 | runofast Indoor Security Camera root account hard-coded password | 6.5CISA ADP v3.1 | 0.2% | 2024-09-18 | |
| CVE-2024-46801 | Linux kernel libfs stashed dentry cache use-after-free | 7.8CNA v3.1 | 0.2% | 2024-09-18 | Fix |
| CVE-2024-46800 | Linux kernel netem packet scheduler use-after-free | 7.8CNA v3.1 | 0.3% | 2024-09-18 | Fix |
| CVE-2024-46799 | Linux kernel am65-cpsw Ethernet driver null pointer dereference | 7.5CNA v3.1 | 0.4% | 2024-09-18 | Fix |
| CVE-2024-46798 | Linux kernel ASoC DAPM audio driver use-after-free | 7.8CNA v3.1 | 0.2% | 2024-09-18 | Fix |
| CVE-2024-46797 | Linux kernel powerpc qspinlock deadlock | 5.5v3.1 | 0.2% | 2024-09-18 | Fix |
| CVE-2024-46796 | Linux kernel cifs client file handle use-after-free | 9.8CNA v3.1 | 0.4% | 2024-09-18 | Fix |
| CVE-2024-46795 | Linux kernel ksmbd session binding null pointer dereference | 5.5v3.1 | 0.3% | 2024-09-18 | Fix |
| CVE-2024-46794 | Linux kernel x86/tdx information disclosure | 3.3v3.1 | 0.2% | 2024-09-18 | Fix |
| CVE-2024-46793 | Linux kernel Boards null pointer dereference | 5.5v3.1 | 0.2% | 2024-09-18 | Fix |
| CVE-2024-46792 | Linux kernel RISC-V misaligned access handler vulnerability | 7.8CNA v3.1 | 0.2% | 2024-09-18 | Fix |
| CVE-2024-46791 | Linux kernel mcp251x CAN driver deadlock | 5.5v3.1 | 0.2% | 2024-09-18 | Fix |
| CVE-2024-46790 | Linux kernel page allocation tag counters vulnerability | 5.5v3.1 | 0.2% | 2024-09-18 | Fix |
| CVE-2024-46789 | Linux kernel SLUB allocation tagging vulnerability | 5.5v3.1 | 0.2% | 2024-09-18 | Fix |
| CVE-2024-46788 | Linux kernel osnoise tracer null pointer dereference | 7.8CNA v3.1 | 0.2% | 2024-09-18 | Fix |
| CVE-2024-46787 | Linux kernel userfaultfd subsystem race condition | 7.8CNA v3.1 | 0.2% | 2024-09-18 | Fix |
| CVE-2024-46786 | Linux kernel fscache subsystem use-after-free | 7.8NVD v3.1 | 0.2% | 2024-09-18 | Fix |
| CVE-2024-46785 | Linux kernel eventfs tracefs interface null pointer dereference | 5.5v3.1 | 0.2% | 2024-09-18 | Fix |
| CVE-2024-46784 | Linux kernel mana kernel panic | 5.5v3.1 | 0.2% | 2024-09-18 | Fix |
| CVE-2024-46783 | Linux kernel TCP BPF sendmsg denial of service | 5.5NVD v3.1 | 0.2% | 2024-09-18 | Fix |
| CVE-2024-46782 | Linux kernel ILA netfilter hooks use-after-free | 7.8v3.1 | 0.2% | 2024-09-18 | Fix |
| CVE-2024-46781 | Linux kernel NILFS2 mount recovery use-after-free | 7.8CNA v3.1 | 0.3% | 2024-09-18 | Fix |
| CVE-2024-46780 | Linux kernel NILFS2 sysfs interface vulnerability | 7.8CNA v3.1 | 0.2% | 2024-09-18 | Fix |
| CVE-2024-46779 | Linux kernel drm/imagination memory leak | 5.5v3.1 | 0.2% | 2024-09-18 | Fix |
| CVE-2024-46778 | Linux kernel AMD display driver null pointer dereference | 5.5v3.1 | 0.2% | 2024-09-18 | Fix |
| CVE-2024-46777 | Linux kernel UDF filesystem vulnerability | 7.8CNA v3.1 | 0.3% | 2024-09-18 | Fix |
| CVE-2024-46776 | Linux kernel AMD display driver null pointer dereference | 5.5v3.1 | 0.2% | 2024-09-18 | Fix |
| CVE-2024-46775 | Linux kernel AMD display driver vulnerability | 5.5NVD v3.1 | 0.2% | 2024-09-18 | Fix |
| CVE-2024-46774 | Linux kernel powerpc/rtas out-of-bounds write | 7.1v3.1 | 0.3% | 2024-09-18 | Fix |
| CVE-2024-46773 | Linux kernel AMD display driver divide by zero | 5.5v3.1 | 0.2% | 2024-09-18 | Fix |
| CVE-2024-46772 | Linux kernel AMD display bandwidth calculation divide by zero | 5.5v3.1 | 0.2% | 2024-09-18 | Fix |
| CVE-2024-46771 | Linux kernel CAN broadcast manager proc entry vulnerability | 7.8CNA v3.1 | 0.3% | 2024-09-18 | Fix |
| CVE-2024-46770 | Linux kernel ice PF reset handling null pointer dereference | 5.5v3.1 | 0.2% | 2024-09-18 | Fix |
| CVE-2024-46769 | Linux kernel Intel SPI driver null pointer dereference | 5.5v3.1 | 0.2% | 2024-09-18 | Fix |
| CVE-2024-46768 | Linux kernel HP WMI sensors driver null pointer dereference | 5.5v3.1 | 0.2% | 2024-09-18 | Fix |
| CVE-2024-46767 | In the Linux kernel, the following vulnerability has been resolved: net: phy: Fix missing of_node_put() for leds The call of of_get_child_by_name() will cause refcount incremented for leds, if it succeeds, it should call of_node_put() to decrease it, fix it. | 5.5v3.1 | 0.2% | 2024-09-18 | Fix |
| CVE-2024-46766 | Linux kernel ice NAPI queue mapping out-of-bounds write | 7.8v3.1 | 0.2% | 2024-09-18 | Fix |
| CVE-2024-46765 | Linux kernel ice XDP configuration null pointer dereference | 7.8CNA v3.1 | 0.2% | 2024-09-18 | Fix |
| CVE-2024-46764 | Linux kernel BPF BTF name validation out-of-bounds read | 7.3CNA v3.1 | 0.2% | 2024-09-18 | Fix |
| CVE-2024-46763 | Linux kernel FOU GRO handling null pointer dereference | 7.5CNA v3.1 | 0.7% | 2024-09-18 | Fix |
| CVE-2024-46762 | Linux kernel Xen privcmd irqfd handling use-after-free | 7.8CNA v3.1 | 0.2% | 2024-09-18 | Fix |
| CVE-2024-46761 | Linux kernel PowerNV PCI hotplug driver null pointer dereference | 5.5v3.1 | 0.3% | 2024-09-18 | Fix |
| CVE-2024-46760 | Linux kernel rtw88 USB Wi-Fi driver null pointer dereference | 5.5v3.1 | 0.2% | 2024-09-18 | Fix |
| CVE-2024-46759 | Linux kernel hwmon integer underflow | 7.8NVD v3.1 | 0.3% | 2024-09-18 | Fix |
| CVE-2024-46755 | Linux kernel mwifiex Wi-Fi driver null pointer dereference | 8.8CNA v3.1 | 0.4% | 2024-09-18 | Fix |
| CVE-2024-46754 | Linux kernel BPF LWT seg6local self-test vulnerability | 7.8CNA v3.1 | 0.2% | 2024-09-18 | Fix |
| CVE-2024-46753 | Linux kernel btrfs reachable assertion | 5.5v3.1 | 0.3% | 2024-09-18 | Fix |
| CVE-2024-46752 | Linux kernel btrfs copy-on-write reference handling vulnerability | 5.5v3.1 | 0.2% | 2024-09-18 | Fix |
| CVE-2024-46751 | Linux kernel btrfs extent reference lookup reachable assertion | 7.8CNA v3.1 | 0.3% | 2024-09-18 | Fix |
| CVE-2024-46750 | Linux kernel PCI bus locking vulnerability | 7.8CNA v3.1 | 0.2% | 2024-09-18 | Fix |
| CVE-2024-46749 | Linux kernel btnxpuart Bluetooth driver null pointer dereference | 5.5v3.1 | 0.2% | 2024-09-18 | Fix |
| CVE-2024-46748 | Linux kernel cachefiles write handling vulnerability | 5.5v3.1 | 0.2% | 2024-09-18 | Fix |
| CVE-2024-46747 | Linux kernel Cougar HID driver out-of-bounds read | 7.1v3.1 | 0.3% | 2024-09-18 | Fix |
| CVE-2024-46746 | Linux kernel amd_sfh crash | 7.8CNA v3.1 | 0.2% | 2024-09-18 | Fix |
| CVE-2024-46745 | Linux kernel uinput driver resource exhaustion | 5.5NVD v3.1 | 0.3% | 2024-09-18 | Fix |
| CVE-2024-46744 | Linux kernel Squashfs filesystem integer overflow | 7.8NVD v3.1 | 0.3% | 2024-09-18 | Fix |
| CVE-2024-46743 | Linux kernel devicetree interrupt parsing out-of-bounds read | 7.3CNA v3.1 | 0.3% | 2024-09-18 | Fix |
| CVE-2024-46742 | Linux kernel ksmbd SMB server null pointer dereference | 5.5v3.1 | 0.2% | 2024-09-18 | Fix |
| CVE-2024-46741 | Linux kernel FastRPC driver double free | 7.8CNA v3.1 | 0.2% | 2024-09-18 | Fix |
| CVE-2024-46740 | Linux kernel Binder driver use-after-free | 7.8CNA v3.1 | 0.3% | 2024-09-18 | Fix |
| CVE-2024-46739 | Linux kernel uio_hv_generic null pointer dereference | 5.5v3.1 | 0.3% | 2024-09-18 | Fix |
| CVE-2024-46738 | Linux kernel VMCI driver use-after-free | 7.8CNA v3.1 | 0.3% | 2024-09-18 | Fix |
| CVE-2024-46737 | Linux kernel nvmet-tcp crash | 7.5CNA v3.1 | 0.8% | 2024-09-18 | Fix |
| CVE-2024-46736 | Linux kernel SMB client double free | 9.8CNA v3.1 | 0.6% | 2024-09-18 | Fix |
| CVE-2024-46735 | Linux kernel ublk block driver null pointer dereference | 5.5v3.1 | 0.2% | 2024-09-18 | Fix |
| CVE-2024-46734 | Linux kernel btrfs direct IO write path race condition | 7.8CNA v3.1 | 0.2% | 2024-09-18 | Fix |
| CVE-2024-46733 | Linux kernel btrfs qgroup reservation vulnerability | 5.5v3.1 | 0.2% | 2024-09-18 | Fix |
| CVE-2024-46732 | Linux kernel amdgpu display driver divide by zero | 5.5v3.1 | 0.2% | 2024-09-18 | Fix |
| CVE-2024-46731 | Linux kernel drm/amd/pm out-of-bounds read | 7.1v3.1 | 0.2% | 2024-09-18 | Fix |
| CVE-2024-46730 | Linux kernel amdgpu display driver integer underflow | 7.8CNA v3.1 | 0.2% | 2024-09-18 | Fix |
| CVE-2024-46729 | Linux kernel amdgpu display driver out-of-bounds write | 7.8v3.1 | 0.2% | 2024-09-18 | Fix |
| CVE-2024-46728 | Linux kernel amdgpu display driver vulnerability | 5.5v3.1 | 0.2% | 2024-09-18 | Fix |
| CVE-2024-46727 | Linux kernel amdgpu display driver null pointer dereference | 5.5v3.1 | 0.2% | 2024-09-18 | Fix |
| CVE-2024-46726 | Linux kernel amdgpu display driver integer overflow | 5.5v3.1 | 0.2% | 2024-09-18 | Fix |
| CVE-2024-46725 | Linux kernel amdgpu driver out-of-bounds write | 7.8CNA v3.1 | 0.2% | 2024-09-18 | Fix |
| CVE-2024-46724 | Linux kernel amdgpu driver out-of-bounds read | 7.1v3.1 | 0.2% | 2024-09-18 | Fix |
| CVE-2024-46723 | Linux kernel amdgpu driver out-of-bounds read | 7.1v3.1 | 0.3% | 2024-09-18 | Fix |
| CVE-2024-46722 | Linux kernel amdgpu driver out-of-bounds read | 7.1v3.1 | 0.3% | 2024-09-18 | Fix |
| CVE-2024-46721 | Linux kernel AppArmor profile filesystem null pointer dereference | 5.5v3.1 | 0.2% | 2024-09-18 | Fix |
| CVE-2024-46720 | Linux kernel amdgpu driver null pointer dereference | 5.5v3.1 | 0.2% | 2024-09-18 | Fix |
| CVE-2024-46719 | Linux kernel USB Type-C UCSI trace null pointer dereference | 5.5v3.1 | 0.2% | 2024-09-18 | Fix |
| CVE-2024-46718 | Linux kernel Xe GPU driver VRAM mapping denial of service | 5.5v3.1 | 0.2% | 2024-09-18 | Fix |
| CVE-2024-46717 | Linux kernel mlx5e SHAMPO receive handling vulnerability | 9.8CNA v3.1 | 0.5% | 2024-09-18 | Fix |
| CVE-2024-46716 | Linux kernel Altera mSGDMA driver use-after-free | 7.8CNA v3.1 | 0.2% | 2024-09-18 | Fix |
| CVE-2024-46715 | Linux kernel IIO subsystem callbacks null pointer dereference | 5.5v3.1 | 0.2% | 2024-09-18 | Fix |
| CVE-2024-46714 | Linux kernel AMD display writeback scaler null pointer dereference | 5.5v3.1 | 0.2% | 2024-09-18 | Fix |
| CVE-2024-46598 | DrayTek Vigor3910 buffer overflow | 7.5v3.1 | 0.4% | 2024-09-18 | |
| CVE-2024-46597 | DrayTek Vigor3910 buffer overflow | 7.5v3.1 | 0.5% | 2024-09-18 | |
| CVE-2024-46596 | DrayTek Vigor3910 buffer overflow | 7.5v3.1 | 0.5% | 2024-09-18 | |
| CVE-2024-46595 | DrayTek Vigor3910 buffer overflow | 7.5v3.1 | 0.5% | 2024-09-18 | |
| CVE-2024-46594 | DrayTek Vigor3910 buffer overflow | 7.5v3.1 | 0.5% | 2024-09-18 | |
| CVE-2024-46593 | DrayTek Vigor3910 buffer overflow | 7.5v3.1 | 0.5% | 2024-09-18 | |
| CVE-2024-46592 | DrayTek Vigor3910 buffer overflow | 7.5v3.1 | 0.4% | 2024-09-18 | |
| CVE-2024-46591 | DrayTek Vigor3910 buffer overflow | 7.5v3.1 | 0.4% | 2024-09-18 | |
| CVE-2024-46590 | DrayTek Vigor3910 buffer overflow | 7.5v3.1 | 0.4% | 2024-09-18 | |
| CVE-2024-46589 | DrayTek Vigor3910 buffer overflow | 7.5v3.1 | 0.5% | 2024-09-18 | |
| CVE-2024-46588 | DrayTek Vigor3910 buffer overflow | 7.5v3.1 | 0.5% | 2024-09-18 | |
| CVE-2024-46586 | DrayTek Vigor3910 buffer overflow | 7.5v3.1 | 0.5% | 2024-09-18 | |
| CVE-2024-46585 | DrayTek Vigor3910 buffer overflow | 7.5v3.1 | 0.5% | 2024-09-18 | |
| CVE-2024-46584 | DrayTek Vigor3910 buffer overflow | 7.5v3.1 | 0.5% | 2024-09-18 | |
| CVE-2024-46583 | DrayTek Vigor3910 buffer overflow | 7.5v3.1 | 0.5% | 2024-09-18 | |
| CVE-2024-46582 | DrayTek Vigor3910 buffer overflow | 7.5v3.1 | 0.5% | 2024-09-18 | |
| CVE-2024-46581 | DrayTek Vigor3910 buffer overflow | 7.5v3.1 | 0.5% | 2024-09-18 | |
| CVE-2024-46580 | DrayTek Vigor3910 buffer overflow | 7.5v3.1 | 0.4% | 2024-09-18 | |
| CVE-2024-46571 | DrayTek Vigor3910 buffer overflow | 7.5v3.1 | 0.4% | 2024-09-18 | |
| CVE-2024-46568 | DrayTek Vigor3910 buffer overflow | 7.5v3.1 | 0.4% | 2024-09-18 | |
| CVE-2024-46567 | DrayTek Vigor3910 buffer overflow | 7.5v3.1 | 0.5% | 2024-09-18 | |
| CVE-2024-46566 | DrayTek Vigor3910 buffer overflow | 7.5v3.1 | 0.5% | 2024-09-18 | |
| CVE-2024-46565 | DrayTek Vigor3910 buffer overflow | 7.5v3.1 | 0.5% | 2024-09-18 | |
| CVE-2024-46564 | DrayTek Vigor3910 buffer overflow | 7.5v3.1 | 0.5% | 2024-09-18 | |
| CVE-2024-46561 | DrayTek Vigor3910 buffer overflow | 7.5v3.1 | 0.5% | 2024-09-18 | |
| CVE-2024-46560 | DrayTek Vigor3910 buffer overflow | 7.5v3.1 | 0.5% | 2024-09-18 | |
| CVE-2024-46559 | DrayTek Vigor3910 buffer overflow | 7.5v3.1 | 0.5% | 2024-09-18 | |
| CVE-2024-46558 | DrayTek Vigor3910 buffer overflow | 7.5v3.1 | 0.5% | 2024-09-18 | |
| CVE-2024-46557 | DrayTek Vigor3910 buffer overflow | 7.5v3.1 | 0.5% | 2024-09-18 | |
| CVE-2024-46556 | DrayTek Vigor3910 buffer overflow | 7.5v3.1 | 0.5% | 2024-09-18 | |
| CVE-2024-46555 | DrayTek Vigor3910 buffer overflow | 7.5v3.1 | 0.5% | 2024-09-18 | |
| CVE-2024-46554 | DrayTek Vigor3910 buffer overflow | 7.5v3.1 | 0.5% | 2024-09-18 | |
| CVE-2024-46553 | DrayTek Vigor3910 buffer overflow | 7.5v3.1 | 0.5% | 2024-09-18 | |
| CVE-2024-46552 | DrayTek Vigor3910 buffer overflow | 7.5v3.1 | 0.5% | 2024-09-18 | |
| CVE-2024-46551 | DrayTek Vigor3910 buffer overflow | 7.5v3.1 | 0.5% | 2024-09-18 | |
| CVE-2024-46550 | DrayTek Vigor3910 buffer overflow | 7.5v3.1 | 0.5% | 2024-09-18 | |
| CVE-2024-46377 | Mayuri K Best House Rental Management System unrestricted file upload | 9.8CISA ADP v3.1 | 1.2% | 2024-09-18 | Exploit code |
| CVE-2024-46376 | Mayuri K Best House Rental Management System path traversal | 9.8CISA ADP v3.1 | 1.1% | 2024-09-18 | |
| CVE-2024-46375 | Mayuri K Best House Rental Management System path traversal | 9.8CISA ADP v3.1 | 1.1% | 2024-09-18 | |
| CVE-2024-46374 | Mayuri K Best House Rental Management System SQL injection | 9.8CISA ADP v3.1 | 0.5% | 2024-09-18 | |
| CVE-2024-46373 | DedeCMS unrestricted file upload | 8.8CISA ADP v3.1 | 0.5% | 2024-09-18 | |
| CVE-2024-46372 | DedeCMS cross-site scripting | 6.1v3.1 | 0.3% | 2024-09-18 | |
| CVE-2024-46086 | Frog CMS cross-site request forgery | 8.8v3.1 | 0.3% | 2024-09-18 | |
| CVE-2024-45858 | Guardrails has an arbitrary code execution | 7.8CNA v3.1 | 0.4% | 2024-09-18 | Fix |
| CVE-2024-45813 | ReDoS vulnerability in multiparametric routes in find-my-way | 5.3CNA v3.1 | 0.7% | 2024-09-18 | Fix |
| CVE-2024-45679 | Open Asset Import Library Assimp heap-based buffer overflow | 8.4CISA ADP v3.1 | 0.3% | 2024-09-18 | Fix |
| CVE-2024-45601 | Google local file inclusion via static file serving functionality in Mesop | 7.5CNA v3.1 | 0.3% | 2024-09-18 | Fix |
| CVE-2024-45523 | Bravura Security Fabric SOAP API login vulnerability | 9.1CISA ADP v3.1 | 0.4% | 2024-09-18 | |
| CVE-2024-45366 | Welcart e-Commerce cross-site scripting | 6.1CISA ADP v3.1 | 0.3% | 2024-09-18 | Fix |
| CVE-2024-45298 | Requarks wiki disabled user can bypass lockout by requesting password reset in wiki.js | 4.3CNA v3.1 | 0.4% | 2024-09-18 | |
| CVE-2024-44589 | D-Link DCS-960L Login function in the HNAP service stack-based buffer overflow | 8.8CISA ADP v3.1 | 0.9% | 2024-09-18 | |
| CVE-2024-44542 | ToDesk SQL injection | 9.8CISA ADP v3.1 | 1.1% | 2024-09-18 | |
| CVE-2024-44005 | Greenshift WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.3% | 2024-09-18 | Fix |
| CVE-2024-44003 | Spice Starter Sites WordPress plugin cross-site scripting (XSS) | 6.1NVD v3.1 | 0.3% | 2024-09-18 | |
| CVE-2024-44002 | Team Showcase WordPress plugin reflected cross-site scripting (XSS) | 6.1NVD v3.1 | 0.3% | 2024-09-18 | Fix |
| CVE-2024-44001 | Royal Elementor Addons and Templates WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.3% | 2024-09-18 | Fix |
| CVE-2024-43999 | Ninja Forms WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.3% | 2024-09-18 | Fix |
| CVE-2024-43995 | Posterity WordPress theme cross-site scripting (XSS) | 5.4v3.1 | 0.3% | 2024-09-18 | |
| CVE-2024-43994 | Kahuna WordPress theme cross-site scripting (XSS) | 5.4v3.1 | 0.3% | 2024-09-18 | Fix |
| CVE-2024-43993 | Liquido WordPress theme cross-site scripting (XSS) | 5.4v3.1 | 0.3% | 2024-09-18 | |
| CVE-2024-43992 | LatePoint WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.3% | 2024-09-18 | |
| CVE-2024-43991 | Hotel Galaxy WordPress theme cross-site scripting (XSS) | 5.4v3.1 | 0.3% | 2024-09-18 | |
| CVE-2024-43988 | Mystique WordPress theme cross-site scripting (XSS) | 5.4v3.1 | 0.3% | 2024-09-18 | |
| CVE-2024-43987 | Sliding Door WordPress theme cross-site scripting (XSS) | 5.4v3.1 | 0.3% | 2024-09-18 | |
| CVE-2024-43983 | Podlove Podcast Publisher WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.3% | 2024-09-18 | Fix |
| CVE-2024-43975 | Super Store Finder WordPress plugin cross-site scripting (XSS) | 6.1NVD v3.1 | 0.3% | 2024-09-18 | Fix |
| CVE-2024-43972 | Page Builder: Pagelayer Drag and Drop website builder WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.3% | 2024-09-18 | Fix |
| CVE-2024-43971 | Sunshine Photo Cart WordPress plugin cross-site scripting (XSS) | 6.1NVD v3.1 | 0.6% | 2024-09-18 | NucleiFix |
| CVE-2024-43970 | SureCart WordPress plugin reflected cross-site scripting (XSS) | 6.1NVD v3.1 | 0.3% | 2024-09-18 | Fix |
| CVE-2024-43778 | TAKENAKA ENGINEERING HDVR-400 multiple digital video recorders provided by OS command injection | 8.8CISA ADP v3.1 | 1.0% | 2024-09-18 | |
| CVE-2024-43188 | IBM Business Automation Workflow improper input validation | 4.9CNA v3.1 | 0.3% | 2024-09-18 | Fix |
| CVE-2024-43025 | Rws Multitrans HTML injection | 6.1v3.1 | 0.3% | 2024-09-18 | Fix |
| CVE-2024-43024 | Rws Multitrans stored cross-site scripting | 6.1v3.1 | 0.3% | 2024-09-18 | Fix |
| CVE-2024-42404 | Welcart e-Commerce SQL injection | 8.8CISA ADP v3.1 | 0.5% | 2024-09-18 | Fix |
| CVE-2024-41929 | TAKENAKA ENGINEERING HDVR-400 multiple digital video recorders provided by improper authentication | 8.8CISA ADP v3.1 | 0.5% | 2024-09-18 | |
| CVE-2024-40568 | btstack mesh commit buffer overflow | 9.8CISA ADP v3.1 | 0.7% | 2024-09-18 | |
| CVE-2024-39590 | OpenPLC_v3 incorrect type conversion | 7.5CNA v3.1 | 1.0% | 2024-09-18 | |
| CVE-2024-39589 | OpenPLC_v3 incorrect type conversion | 7.5CNA v3.1 | 1.0% | 2024-09-18 | |
| CVE-2024-39339 | Smartplay headunits information disclosure | 7.5CISA ADP v3.1 | 0.4% | 2024-09-18 | |
| CVE-2024-39081 | Jktyre Smart Tyre Car & Bike authentication bypass by replay | 4.2v3.1 | 0.5% | 2024-09-18 | Exploit code |
| CVE-2024-37406 | Brave Android Browser improper input validation | 7.5CISA ADP v3.1 | 0.4% | 2024-09-18 | Fix |
| CVE-2024-36981 | OpenPLC_v3 out-of-bounds read | 7.5v3.1 | 1.0% | 2024-09-18 | |
| CVE-2024-36980 | OpenPLC_v3 out-of-bounds read | 7.5v3.1 | 1.1% | 2024-09-18 | |
| CVE-2024-35515 | Sqlitedict insecure deserialization | 9.8CISA ADP v3.1 | 0.9% | 2024-09-18 | |
| CVE-2024-34399 | BMC Remedy Mid-tier improper authentication | 9.8CISA ADP v3.1 | 0.5% | 2024-09-18 | |
| CVE-2024-34057 | Triangle MicroWorks Iec 61850 Source Code Library buffer overflow | 7.5v3.1 | 0.4% | 2024-09-18 | Fix |
| CVE-2024-34026 | OpenPLC_v3 A stack-based buffer overflow | 9.8v3.1 | 2.4% | 2024-09-18 | |
| CVE-2024-31198 | Open Networking Foundation (ONF) libfluid out-of-bounds read in libfluid_msg library | 7.5NVD v3.1 | 0.3% | 2024-09-18 | |
| CVE-2024-31197 | Open Networking Foundation (ONF) libfluid improper null termination in libfluid_msg library | 7.5NVD v3.1 | 0.3% | 2024-09-18 | |
| CVE-2024-31196 | Open Networking Foundation (ONF) libfluid null pointer dereference in libfluid_msg library | 7.5NVD v3.1 | 0.4% | 2024-09-18 | |
| CVE-2024-31195 | Open Networking Foundation (ONF) libfluid out-of-bounds read in libfluid_msg library | 7.5NVD v3.1 | 0.4% | 2024-09-18 | |
| CVE-2024-31194 | Open Networking Foundation (ONF) libfluid out-of-bounds read in libfluid_msg library | 7.5NVD v3.1 | 0.4% | 2024-09-18 | |
| CVE-2024-31193 | Open Networking Foundation (ONF) libfluid out-of-bounds read in libfluid_msg library | 7.5NVD v3.1 | 0.4% | 2024-09-18 | |
| CVE-2024-31192 | Open Networking Foundation (ONF) libfluid out-of-bounds read in libfluid_msg library | 7.5NVD v3.1 | 0.4% | 2024-09-18 | |
| CVE-2024-31191 | Open Networking Foundation (ONF) libfluid out-of-bounds read in libfluid_msg library | 7.5NVD v3.1 | 0.4% | 2024-09-18 | |
| CVE-2024-31190 | Open Networking Foundation (ONF) libfluid out-of-bounds read in libfluid_msg library | 7.5NVD v3.1 | 0.4% | 2024-09-18 | |
| CVE-2024-31189 | Open Networking Foundation (ONF) libfluid out-of-bounds read in libfluid_msg library | 7.5NVD v3.1 | 0.4% | 2024-09-18 | |
| CVE-2024-31188 | Open Networking Foundation (ONF) libfluid out-of-bounds read in libfluid_msg library | 7.5NVD v3.1 | 0.4% | 2024-09-18 | |
| CVE-2024-31187 | Open Networking Foundation (ONF) libfluid out-of-bounds read in libfluid_msg library | 7.5NVD v3.1 | 0.4% | 2024-09-18 | |
| CVE-2024-31186 | Open Networking Foundation (ONF) libfluid out-of-bounds read in libfluid_msg library | 7.5NVD v3.1 | 0.4% | 2024-09-18 | |
| CVE-2024-31185 | Open Networking Foundation (ONF) libfluid null pointer dereference in libfluid_msg library | 7.5NVD v3.1 | 0.4% | 2024-09-18 | |
| CVE-2024-31184 | Open Networking Foundation (ONF) libfluid out-of-bounds read in libfluid_msg library | 7.5NVD v3.1 | 0.4% | 2024-09-18 | |
| CVE-2024-31183 | Open Networking Foundation (ONF) libfluid out-of-bounds read in libfluid_msg library | 7.5NVD v3.1 | 0.4% | 2024-09-18 | |
| CVE-2024-31182 | Open Networking Foundation (ONF) libfluid null pointer dereference in libfluid_msg library | 7.5NVD v3.1 | 0.4% | 2024-09-18 | |
| CVE-2024-31181 | Open Networking Foundation (ONF) libfluid out-of-bounds read in libfluid_msg library | 7.5NVD v3.1 | 0.4% | 2024-09-18 | |
| CVE-2024-31180 | Open Networking Foundation (ONF) libfluid out-of-bounds read in libfluid_msg library | 7.5NVD v3.1 | 0.4% | 2024-09-18 | |
| CVE-2024-31179 | Open Networking Foundation (ONF) libfluid out-of-bounds read in libfluid_msg library | 7.5NVD v3.1 | 0.4% | 2024-09-18 | |
| CVE-2024-31178 | Open Networking Foundation (ONF) libfluid out-of-bounds read in libfluid_msg library | 7.5NVD v3.1 | 0.4% | 2024-09-18 | |
| CVE-2024-31177 | Open Networking Foundation (ONF) libfluid out-of-bounds read in libfluid_msg library | 7.5NVD v3.1 | 0.4% | 2024-09-18 | |
| CVE-2024-31176 | Open Networking Foundation (ONF) libfluid out-of-bounds read in libfluid_msg library | 7.5NVD v3.1 | 0.4% | 2024-09-18 | |
| CVE-2024-31175 | Open Networking Foundation (ONF) libfluid null pointer dereference in libfluid_msg library | 7.5NVD v3.1 | 0.5% | 2024-09-18 | |
| CVE-2024-31174 | Open Networking Foundation (ONF) libfluid out-of-bounds read in libfluid_msg library | 7.5NVD v3.1 | 0.5% | 2024-09-18 | |
| CVE-2024-31173 | Open Networking Foundation (ONF) libfluid out-of-bounds read in libfluid_msg library | 7.5NVD v3.1 | 0.5% | 2024-09-18 | |
| CVE-2024-31172 | Open Networking Foundation (ONF) libfluid out-of-bounds read in libfluid_msg library | 7.5NVD v3.1 | 0.5% | 2024-09-18 | |
| CVE-2024-31171 | Open Networking Foundation (ONF) libfluid out-of-bounds read in libfluid_msg library | 7.5NVD v3.1 | 0.5% | 2024-09-18 | |
| CVE-2024-31170 | Open Networking Foundation (ONF) libfluid out-of-bounds read in libfluid_msg library | 7.5NVD v3.1 | 0.5% | 2024-09-18 | |
| CVE-2024-31169 | Open Networking Foundation (ONF) libfluid out-of-bounds read in libfluid_msg library | 7.5NVD v3.1 | 0.5% | 2024-09-18 | |
| CVE-2024-31168 | Open Networking Foundation (ONF) libfluid out-of-bounds read in libfluid_msg library | 7.5NVD v3.1 | 0.5% | 2024-09-18 | |
| CVE-2024-31167 | Open Networking Foundation (ONF) libfluid null pointer dereference in libfluid_msg library | 7.5NVD v3.1 | 0.5% | 2024-09-18 | |
| CVE-2024-31166 | Open Networking Foundation (ONF) libfluid out-of-bounds read in libfluid_msg library | 7.5NVD v3.1 | 0.5% | 2024-09-18 | |
| CVE-2024-31165 | Open Networking Foundation (ONF) libfluid null pointer dereference in libfluid_msg library | 7.5NVD v3.1 | 0.5% | 2024-09-18 | |
| CVE-2024-31164 | Open Networking Foundation (ONF) libfluid null pointer dereference in libfluid_msg library | 7.5NVD v3.1 | 0.5% | 2024-09-18 | |
| CVE-2024-23916 | Open Networking Foundation (ONF) libfluid null pointer dereference in libfluid_msg library | 7.5NVD v3.1 | 0.5% | 2024-09-18 | |
| CVE-2024-23915 | Open Networking Foundation (ONF) libfluid null pointer dereference in libfluid_msg library | 7.5NVD v3.1 | 0.5% | 2024-09-18 | |
| CVE-2024-8969 | The SYSCOM Group OMFLOW Exposure of Sensitive Data | 6.5CNA v3.1 | 0.5% | 2024-09-18 | Fix |
| CVE-2024-8892 | Uncontrolled resource consumption vulnerability on CIRCUTOR Tcp2rs+ | 9.1v3.1 | 0.3% | 2024-09-18 | |
| CVE-2024-8891 | Exposure of private personal information to an unauthorized actor vulnerability on CIRCUTOR Q-smt | 5.3v3.1 | 0.3% | 2024-09-18 | Fix |
| CVE-2024-8890 | Insertion of sensitive information into sent data vulnerability on CIRCUTOR Q-smt | 8.8v3.1 | 0.4% | 2024-09-18 | Fix |
| CVE-2024-8889 | Improper input validation vulnerability on CIRCUTOR Tcp2rs+ | 9.1v3.1 | 0.4% | 2024-09-18 | |
| CVE-2024-8888 | Insufficient session expiration vulnerability on CIRCUTOR Q-smt | 7.5NVD v3.1 | 0.4% | 2024-09-18 | Fix |
| CVE-2024-8887 | Authentication bypass vulnerability on CIRCUTOR Q-smt | 8.6NVD v3.1 | 0.6% | 2024-09-18 | Fix |
| CVE-2024-8287 | Canonical Anbox Cloud improper certificate validation | 7.5CNA v3.1 | 0.2% | 2024-09-18 | Fix |
| CVE-2024-6878 | Directory Browsing in Eliz Software's Panel | 9.2CNA v4.0 | 0.4% | 2024-09-18 | Fix |
| CVE-2024-6877 | Reflected XSS in Eliz Software's Panel | 6.1NVD v3.1 | 0.3% | 2024-09-18 | Fix |
| CVE-2024-6641 | WP Hardening WordPress plugin security feature bypass | 5.3CNA v3.1 | 0.4% | 2024-09-18 | Fix |
| CVE-2024-6406 | Sensetive data exposure in Yordam Information Technology's Mobile Library Application | 8.5CNA v4.0 | 0.4% | 2024-09-18 | Fix |
| CVE-2024-5960 | Plaintext storage of a password in Eliz Software's Panel | 9.8v3.1 | 0.4% | 2024-09-18 | Fix |
| CVE-2024-5959 | Stored XSS in Eliz Software's Panel | 5.4NVD v3.1 | 0.3% | 2024-09-18 | Fix |
| CVE-2024-5958 | SQLi in Eliz Software's Panel | 8.8NVD v3.1 | 0.5% | 2024-09-18 | Fix |
| CVE-2024-5682 | User Enumeration in Yordam Information Technology's Yordam Library Automation System | 6.5CISA ADP v3.1 | 0.4% | 2024-09-18 | Fix |
| CVE-2024-47049 | Czim/File-handling vulnerable to SSRF and directory traversal | 8.2v3.1 | 0.6% | 2024-09-17 | Fix |
| CVE-2024-47047 | Powermail TYPO3 extension has insecure direct object reference | 7.5v3.1 | 0.5% | 2024-09-17 | Fix |
| CVE-2024-46982 | Cache poisoning in next.js | 7.5CNA v3.1 | 59.2% | 2024-09-17 | Reported exploitedEmerging ThreatsExploit codeFix |
| CVE-2024-46976 | Circumvention of cross-site scripting Protection in @backstage/plugin-techdocs-backend | 6.5CNA v3.1 | 0.3% | 2024-09-17 | Fix |
| CVE-2024-46362 | Frog CMS cross-site request forgery | 8.8CISA ADP v3.1 | 0.3% | 2024-09-17 | |
| CVE-2024-46085 | Frog CMS cross-site request forgery | 8.8CISA ADP v3.1 | 0.2% | 2024-09-17 | |
| CVE-2024-45816 | Storage bucket directory traversal in @backstage/plugin-techdocs-backend | 6.5CNA v3.1 | 0.7% | 2024-09-17 | Fix |
| CVE-2024-45815 | Prototype pollution in @backstage/plugin-catalog-backend | 6.5CNA v3.1 | 0.5% | 2024-09-17 | Fix |
| CVE-2024-45812 | DOM Clobbering gadget found in vite bundled scripts that leads to XSS in Vite | 6.4CNA v3.1 | 0.6% | 2024-09-17 | Fix |
| CVE-2024-45811 | Server.fs.deny bypassed when using ?import&raw in vite | 4.8CNA v3.1 | 1.1% | 2024-09-17 | Fix |
| CVE-2024-45803 | Cross-site scripting (XSS) Vulnerability on route /wireui/button?label=Content in wireui | 5.1CNA v4.0 | 0.4% | 2024-09-17 | Fix |
| CVE-2024-45798 | espressif arduino-esp32 Multiple Poisoned Pipeline Execution (PPE) vulnerabilities | 10.0CNA v3.1 | 0.9% | 2024-09-17 | Exploit code |
| CVE-2024-45682 | Millbeck Communications Proroute H685t-w command injection | 9.8v3.1 | 2.0% | 2024-09-17 | Fix |
| CVE-2024-45612 | Insert tag injection via canonical URL in Contao | 5.3CNA v3.1 | 0.3% | 2024-09-17 | Fix |
| CVE-2024-45606 | Improper authorization on muting of alert rules in Sentry | 7.1CNA v3.1 | 0.4% | 2024-09-17 | Fix |
| CVE-2024-45605 | Improper authorization on deletion of user issue alert notifications in Sentry | 6.5CNA v3.1 | 0.4% | 2024-09-17 | Fix |
| CVE-2024-45604 | Directory traversal in the file selector widget in contao/core-bundle | 4.3CNA v3.1 | 0.4% | 2024-09-17 | Fix |
| CVE-2024-45537 | Apache Druid: Users can provide MySQL JDBC properties not on allow list | 6.5v3.1 | 0.6% | 2024-09-17 | Fix |
| CVE-2024-45452 | Septera WordPress theme cross-site scripting (XSS) | 5.4v3.1 | 0.3% | 2024-09-17 | |
| CVE-2024-45451 | Roseta WordPress theme cross-site scripting (XSS) | 5.4v3.1 | 0.3% | 2024-09-17 | |
| CVE-2024-45398 | Remote command execution through file upload in contao/core-bundle | 8.3CNA v3.1 | 0.5% | 2024-09-17 | Fix |
| CVE-2024-45384 | Druid-pac4j, Apache Druid extension, has Padding Oracle vulnerability | 5.3v3.1 | 0.8% | 2024-09-17 | Fix |
| CVE-2024-44202 | Apple Safari improper authentication | 5.3v3.1 | 0.5% | 2024-09-17 | Fix |
| CVE-2024-44198 | Apple macOS integer overflow | 5.5v3.1 | 0.2% | 2024-09-17 | Fix |
| CVE-2024-44191 | Apple Xcode unauthorized access | 5.5v3.1 | 0.3% | 2024-09-17 | Fix |
| CVE-2024-44190 | Apple macOS path traversal | 5.5v3.1 | 0.2% | 2024-09-17 | Fix |
| CVE-2024-44189 | Apple macOS logic flaw | 7.5v3.1 | 0.5% | 2024-09-17 | Fix |
| CVE-2024-44188 | Apple macOS improper preservation of permissions | 5.5v3.1 | 0.2% | 2024-09-17 | Fix |
| CVE-2024-44187 | Apple Safari origin validation error | 6.5v3.1 | 0.6% | 2024-09-17 | Fix |
| CVE-2024-44186 | Apple macOS information disclosure | 5.5v3.1 | 0.2% | 2024-09-17 | Fix |
| CVE-2024-44184 | Apple macOS insecure permissions | 5.5v3.1 | 0.2% | 2024-09-17 | Fix |
| CVE-2024-44183 | Apple macOS logic flaw | 5.5v3.1 | 0.3% | 2024-09-17 | Fix |
| CVE-2024-44182 | Apple macOS information disclosure | 5.5v3.1 | 0.2% | 2024-09-17 | Fix |
| CVE-2024-44181 | Apple macOS information disclosure | 5.5v3.1 | 0.2% | 2024-09-17 | Fix |
| CVE-2024-44180 | Apple iOS and iPadOS information disclosure | 2.4v3.1 | 0.2% | 2024-09-17 | Fix |
| CVE-2024-44178 | Apple macOS link following | 5.5v3.1 | 0.3% | 2024-09-17 | Fix |
| CVE-2024-44177 | Apple macOS information disclosure | 5.5v3.1 | 0.2% | 2024-09-17 | Fix |
| CVE-2024-44176 | Apple macOS out-of-bounds access | 5.5v3.1 | 7.9% | 2024-09-17 | Fix |
| CVE-2024-44171 | Apple iOS and iPadOS accessibility features vulnerability | 4.6v3.1 | 0.3% | 2024-09-17 | Fix |
| CVE-2024-44170 | Apple macOS information disclosure | 5.5v3.1 | 0.2% | 2024-09-17 | Fix |
| CVE-2024-44169 | Apple macOS denial of service | 5.5NVD v3.1 | 0.6% | 2024-09-17 | Fix |
| CVE-2024-44168 | Apple macOS uncontrolled search path | 5.5v3.1 | 0.2% | 2024-09-17 | Fix |
| CVE-2024-44167 | Apple macOS path traversal | 5.5NVD v3.1 | 0.6% | 2024-09-17 | Fix |
| CVE-2024-44166 | Apple macOS sensitive information in log files | 5.5v3.1 | 0.2% | 2024-09-17 | Fix |
| CVE-2024-44165 | Apple macOS logic flaw | 7.5v3.1 | 0.8% | 2024-09-17 | Fix |
| CVE-2024-44164 | Apple macOS Privacy preferences vulnerability | 7.1v3.1 | 0.2% | 2024-09-17 | Fix |
| CVE-2024-44163 | Apple macOS information disclosure | 5.5v3.1 | 0.2% | 2024-09-17 | Fix |
| CVE-2024-44162 | Apple Xcode incorrect authorization | 7.8v3.1 | 0.2% | 2024-09-17 | Fix |
| CVE-2024-44161 | Apple macOS out-of-bounds read | 5.5v3.1 | 0.3% | 2024-09-17 | Fix |
| CVE-2024-44160 | Apple macOS buffer overflow | 5.5NVD v3.1 | 0.5% | 2024-09-17 | Fix |