CVE-2024 records published in September 2024
Page two of three: records 1,001 to 2,000 of the 2,394 published in September 2024, newest first. The first page carries the figures for September 2024.
| CVE | Summary | CVSS | EPSS | Published | Signals |
|---|---|---|---|---|---|
| CVE-2024-44158 | Apple macOS information disclosure | 5.5v3.1 | 0.2% | 2024-09-17 | Fix |
| CVE-2024-44154 | Apple macOS resource exhaustion | 5.5v3.1 | 0.3% | 2024-09-17 | Fix |
| CVE-2024-44153 | Apple macOS information disclosure | 5.5v3.1 | 0.2% | 2024-09-17 | Fix |
| CVE-2024-44152 | Apple macOS information disclosure | 7.5v3.1 | 0.6% | 2024-09-17 | Fix |
| CVE-2024-44151 | Apple macOS incorrect default permissions | 5.5v3.1 | 0.5% | 2024-09-17 | Fix |
| CVE-2024-44149 | Apple macOS improper preservation of permissions | 7.5v3.1 | 0.6% | 2024-09-17 | Fix |
| CVE-2024-44148 | Apple macOS sandbox escape | 10.0v3.1 | 0.7% | 2024-09-17 | Fix |
| CVE-2024-44147 | Apple iOS and iPadOS improper privilege management | 5.5NVD v3.1 | 0.2% | 2024-09-17 | Fix |
| CVE-2024-44146 | Apple macOS logic flaw | 10.0v3.1 | 0.7% | 2024-09-17 | Fix |
| CVE-2024-44139 | Apple iOS and iPadOS information disclosure | 2.4v3.1 | 0.2% | 2024-09-17 | Fix |
| CVE-2024-44135 | Apple macOS incorrect default permissions | 5.5v3.1 | 0.2% | 2024-09-17 | Fix |
| CVE-2024-44134 | Apple macOS out-of-bounds read | 5.5v3.1 | 0.2% | 2024-09-17 | Fix |
| CVE-2024-44133 | Apple macOS Privacy preferences vulnerability | 5.5NVD v3.1 | 7.7% | 2024-09-17 | Fix |
| CVE-2024-44132 | Apple macOS link following | 8.8v3.1 | 0.2% | 2024-09-17 | Fix |
| CVE-2024-44131 | Apple macOS link following | 5.5v3.1 | 0.7% | 2024-09-17 | Fix |
| CVE-2024-44130 | Apple macOS information disclosure | 4.4v3.1 | 0.2% | 2024-09-17 | Fix |
| CVE-2024-44129 | Apple macOS information disclosure | 5.5v3.1 | 0.2% | 2024-09-17 | Fix |
| CVE-2024-44128 | Apple macOS improper workflow enforcement | 5.5v3.1 | 0.2% | 2024-09-17 | Fix |
| CVE-2024-44127 | Apple iOS and iPadOS improper authentication | 5.3v3.1 | 0.6% | 2024-09-17 | Fix |
| CVE-2024-44125 | Apple macOS information disclosure | 5.5v3.1 | 0.2% | 2024-09-17 | Fix |
| CVE-2024-44124 | Apple iOS and iPadOS Bluetooth pairing vulnerability | 6.5v3.1 | 0.3% | 2024-09-17 | Fix |
| CVE-2024-44064 | Like Button Rating LikeBtn WordPress plugin reflected cross-site scripting (XSS) | 6.1NVD v3.1 | 0.2% | 2024-09-17 | Fix |
| CVE-2024-44051 | Content Blocks (Custom Post Widget) WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.3% | 2024-09-17 | Fix |
| CVE-2024-44050 | Verbosa WordPress theme cross-site scripting (XSS) | 5.4v3.1 | 0.3% | 2024-09-17 | Fix |
| CVE-2024-44049 | Gutenberg Blocks Unlimited blocks For Gutenberg WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.3% | 2024-09-17 | Fix |
| CVE-2024-44047 | IMPress for IDX Broker WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.3% | 2024-09-17 | Fix |
| CVE-2024-44009 | WordPress WCFM Marketplace plugin reflected cross-site scripting (XSS) | 6.1NVD v3.1 | 0.3% | 2024-09-17 | Fix |
| CVE-2024-44008 | Geo Mashup WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.3% | 2024-09-17 | Fix |
| CVE-2024-44007 | SKT Templates Elementor and Gutenberg templates WordPress plugin reflected cross-site scripting | 6.1NVD v3.1 | 0.3% | 2024-09-17 | Fix |
| CVE-2024-44004 | WPCargo Track and Trace WordPress plugin SQL injection | 9.8v3.1 | 0.5% | 2024-09-17 | Fix |
| CVE-2024-43985 | Bus Ticket Booking with Seat Reservation WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.3% | 2024-09-17 | Fix |
| CVE-2024-43978 | Super Store Finder WordPress plugin SQL injection | 9.8v3.1 | 0.5% | 2024-09-17 | Fix |
| CVE-2024-43977 | The Plus Addons for Elementor WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.3% | 2024-09-17 | Fix |
| CVE-2024-43976 | Super Store Finder WordPress plugin SQL injection | 9.8v3.1 | 0.5% | 2024-09-17 | Fix |
| CVE-2024-43969 | Spiffy Calendar WordPress plugin SQL injection | 7.6CNA v3.1 | 0.4% | 2024-09-17 | Fix |
| CVE-2024-43938 | Name Directory WordPress plugin reflected cross-site scripting (XSS) | 7.1CNA v3.1 | 0.3% | 2024-09-17 | Fix |
| CVE-2024-43460 | Microsoft Dynamics 365 Business Central elevation of privilege | 8.1CNA v3.1 | 0.7% | 2024-09-17 | Fix |
| CVE-2024-42503 | HPE Aruba OS ArubaOS command line interface command execution | 7.2CNA v3.1 | 1.5% | 2024-09-17 | |
| CVE-2024-42502 | HPE Aruba OS authenticated remote command execution vulnerability in the AOS Command Line interface | 7.2CNA v3.1 | 1.8% | 2024-09-17 | |
| CVE-2024-42501 | HPE Aruba OS authenticated path traversal vulnerability leads to a remote command execution (RCE) | 7.2CNA v3.1 | 1.2% | 2024-09-17 | |
| CVE-2024-40866 | Apple Safari spoofing | 6.5v3.1 | 0.9% | 2024-09-17 | Fix |
| CVE-2024-40863 | Apple iOS and iPadOS information disclosure | 5.5v3.1 | 0.2% | 2024-09-17 | Fix |
| CVE-2024-40862 | Apple Xcode information disclosure | 5.3NVD v3.1 | 0.5% | 2024-09-17 | Fix |
| CVE-2024-40861 | Apple macOS improper privilege management | 7.8v3.1 | 0.2% | 2024-09-17 | Fix |
| CVE-2024-40860 | Apple macOS logic flaw | 5.5v3.1 | 0.2% | 2024-09-17 | Fix |
| CVE-2024-40859 | Apple macOS improper preservation of permissions | 5.5v3.1 | 0.2% | 2024-09-17 | Fix |
| CVE-2024-40857 | Apple Safari cross-site scripting | 6.1v3.1 | 0.6% | 2024-09-17 | Fix |
| CVE-2024-40856 | An integrity issue was addressed with Beacon Protection. This issue is fixed in iOS 18 and iPadOS 18, macOS Sequoia 15, tvOS 18. An attacker may be able to force a device to disconnect from a secure network. | 7.5v3.1 | 0.9% | 2024-09-17 | Fix |
| CVE-2024-40852 | Apple iOS and iPadOS missing authorization | 5.3NVD v3.1 | 0.5% | 2024-09-17 | Fix |
| CVE-2024-40850 | Apple macOS information disclosure | 5.5v3.1 | 0.3% | 2024-09-17 | Fix |
| CVE-2024-40848 | Apple macOS information disclosure | 7.5v3.1 | 0.7% | 2024-09-17 | Fix |
| CVE-2024-40847 | Apple macOS information disclosure | 5.5v3.1 | 0.2% | 2024-09-17 | Fix |
| CVE-2024-40846 | Apple macOS cross-site scripting | 5.5NVD v3.1 | 0.5% | 2024-09-17 | Fix |
| CVE-2024-40845 | Apple macOS cross-site scripting | 5.5v3.1 | 0.4% | 2024-09-17 | Fix |
| CVE-2024-40844 | A privacy issue was addressed with improved handling of temporary files. This issue is fixed in iOS 17.7 and iPadOS 17.7, macOS Sequoia 15, macOS Sonoma 14.7, macOS Ventura 13.7. An app may be able to observe data displayed to the user by Shortcuts. | 5.5v3.1 | 0.2% | 2024-09-17 | Fix |
| CVE-2024-40843 | Apple macOS incorrect authorization | 5.5v3.1 | 0.2% | 2024-09-17 | Fix |
| CVE-2024-40842 | Apple macOS information disclosure | 5.5v3.1 | 0.2% | 2024-09-17 | Fix |
| CVE-2024-40841 | Apple macOS out-of-bounds write | 5.5NVD v3.1 | 0.3% | 2024-09-17 | Fix |
| CVE-2024-40840 | Apple iOS and iPadOS information disclosure | 4.6v3.1 | 0.3% | 2024-09-17 | Fix |
| CVE-2024-40838 | Apple macOS information disclosure | 3.3v3.1 | 0.2% | 2024-09-17 | Fix |
| CVE-2024-40837 | Apple macOS insecure permissions | 5.5v3.1 | 0.2% | 2024-09-17 | Fix |
| CVE-2024-40831 | Apple macOS improper preservation of permissions | 5.5v3.1 | 0.2% | 2024-09-17 | Fix |
| CVE-2024-40830 | This issue was addressed with improved data protection. This issue is fixed in iOS 18 and iPadOS 18. An app may be able to enumerate a user's installed apps. | 3.3v3.1 | 0.2% | 2024-09-17 | Fix |
| CVE-2024-40826 | A privacy issue was addressed with improved handling of files. This issue is fixed in iOS 18 and iPadOS 18, macOS Sequoia 15. An unencrypted document may be written to a temporary file when using print preview. | 6.1v3.1 | 0.2% | 2024-09-17 | Fix |
| CVE-2024-40825 | Apple macOS improper access control | 4.4v3.1 | 0.2% | 2024-09-17 | Fix |
| CVE-2024-40801 | Apple macOS insecure permissions | 5.5v3.1 | 0.2% | 2024-09-17 | Fix |
| CVE-2024-40797 | Apple macOS spoofing | 6.1v3.1 | 0.5% | 2024-09-17 | Fix |
| CVE-2024-40791 | Apple macOS sensitive information in log files | 3.3v3.1 | 0.2% | 2024-09-17 | Fix |
| CVE-2024-40790 | Apple visionOS information disclosure | 5.5v3.1 | 0.2% | 2024-09-17 | Fix |
| CVE-2024-40770 | Apple macOS improper preservation of permissions | 7.5v3.1 | 0.5% | 2024-09-17 | Fix |
| CVE-2024-38860 | Checkmk reflected links in error message facilitate phishing attacks | 5.1CNA v4.0 | 0.3% | 2024-09-17 | Fix |
| CVE-2024-38813 | VMware vCenter Server privilege escalation | 7.5CNA v3.1 | 17.4% | 2024-09-17 | KEVFix |
| CVE-2024-38812 | VMware vCenter Server heap-based buffer overflow | 9.8CNA v3.1 | 54.6% | 2024-09-17 | KEVFix |
| CVE-2024-38380 | Millbeck Communications Proroute H685t-w cross-site scripting | 5.4v3.1 | 0.4% | 2024-09-17 | Fix |
| CVE-2024-38183 | Microsoft GroupMe elevation of privilege | 9.8CNA v3.1 | 0.8% | 2024-09-17 | Fix |
| CVE-2024-37985 | Microsoft Windows Kernel information disclosure | 5.9CNA v3.1 | 0.7% | 2024-09-17 | Fix |
| CVE-2024-27880 | Apple macOS out-of-bounds read | 5.5v3.1 | 0.3% | 2024-09-17 | Fix |
| CVE-2024-27879 | Apple iOS and iPadOS memory corruption | 7.5v3.1 | 0.8% | 2024-09-17 | Fix |
| CVE-2024-27876 | Apple macOS race condition | 5.5NVD v3.1 | 0.5% | 2024-09-17 | Exploit codeFix |
| CVE-2024-27875 | Apple macOS logic flaw | 5.5v3.1 | 0.2% | 2024-09-17 | Fix |
| CVE-2024-27874 | Apple iOS and iPadOS denial of service | 7.5v3.1 | 0.7% | 2024-09-17 | Fix |
| CVE-2024-27869 | Apple macOS path traversal | 5.5NVD v3.1 | 0.5% | 2024-09-17 | Fix |
| CVE-2024-27861 | Apple macOS out-of-bounds read | 5.5v3.1 | 0.2% | 2024-09-17 | Fix |
| CVE-2024-27860 | Apple macOS out-of-bounds read | 5.5v3.1 | 0.2% | 2024-09-17 | Fix |
| CVE-2024-27858 | Apple macOS improper preservation of permissions | 5.5v3.1 | 0.2% | 2024-09-17 | Fix |
| CVE-2024-27795 | Apple macOS improper preservation of permissions | 7.5v3.1 | 0.5% | 2024-09-17 | Fix |
| CVE-2024-23237 | Apple macOS denial of service | 5.5v3.1 | 0.2% | 2024-09-17 | Fix |
| CVE-2024-22303 | Houzez WordPress theme privilege escalation | 8.8CNA v3.1 | 0.4% | 2024-09-17 | Fix |
| CVE-2024-21743 | Houzez Login Register WordPress plugin privilege escalation | 8.8CNA v3.1 | 0.4% | 2024-09-17 | Fix |
| CVE-2024-8957 | PTZOptics PT30X-SDI/NDI Cameras OS command injection | 7.2v3.1 | 79.7% | 2024-09-17 | KEVEmerging ThreatsKCVFix |
| CVE-2024-8956 | PTZOptics PT30X-SDI/NDI Cameras authentication bypass | 9.1v3.1 | 58.8% | 2024-09-17 | KEVEmerging ThreatsKCVFix |
| CVE-2024-8951 | SourceCodester Resort Reservation System manage_fee.php cross-site scripting | 6.1v3.1 | 0.4% | 2024-09-17 | |
| CVE-2024-8949 | SourceCodester Online Eyewear Shop Cart Content Master.php improper ownership management | 8.8NVD v3.1 | 0.7% | 2024-09-17 | |
| CVE-2024-8948 | MicroPython objint.c mpz_as_bytes heap-based overflow | 7.5v3.1 | 1.0% | 2024-09-17 | Fix |
| CVE-2024-8947 | MicroPython objarray.c use-after-free | 8.1v3.1 | 1.0% | 2024-09-17 | Fix |
| CVE-2024-8946 | MicroPython VFS Unmount vfs.c mp_vfs_umount heap-based overflow | 7.5v3.1 | 1.0% | 2024-09-17 | Fix |
| CVE-2024-8945 | CodeCanyon RISE Ultimate Project Manager save SQL injection | 8.8v3.1 | 16.0% | 2024-09-17 | Exploit code |
| CVE-2024-8944 | code-projects Hospital Management System check_availability.php SQL injection | 9.8v3.1 | 1.1% | 2024-09-17 | |
| CVE-2024-8939 | Red Hat Enterprise Linux AI (RHEL AI) vllm: Denials of service in vllm json web API | 6.2CNA v3.1 | 0.2% | 2024-09-17 | |
| CVE-2024-8909 | Google Chrome UI inappropriate implementation | 4.3v3.1 | 0.3% | 2024-09-17 | Fix |
| CVE-2024-8908 | Google Chrome Autofill inappropriate implementation | 4.3v3.1 | 0.4% | 2024-09-17 | Fix |
| CVE-2024-8907 | Google Chrome Omnibox improper input validation | 6.1v3.1 | 0.3% | 2024-09-17 | Fix |
| CVE-2024-8906 | Google Chrome Downloads incorrect security UI | 4.3v3.1 | 0.4% | 2024-09-17 | Fix |
| CVE-2024-8905 | Google Chrome V8 inappropriate implementation | 8.8v3.1 | 0.5% | 2024-09-17 | Fix |
| CVE-2024-8904 | Google Chrome V8 type confusion | 8.8v3.1 | 0.5% | 2024-09-17 | Fix |
| CVE-2024-8900 | Mozilla Firefox incorrect permission assignment | 7.5v3.1 | 0.4% | 2024-09-17 | Fix |
| CVE-2024-8897 | Mozilla Firefox open redirect | 6.1v3.1 | 6.9% | 2024-09-17 | Fix |
| CVE-2024-8796 | devise-two-factor Insufficient Default OTP Shared Secret Length | 5.3v3.1 | 0.6% | 2024-09-17 | Fix |
| CVE-2024-8768 | Red Hat Enterprise Linux AI (RHEL AI) vLLM denial of service | 7.5CNA v3.1 | 0.7% | 2024-09-17 | Fix |
| CVE-2024-8767 | Acronis Backup plugin for cPanel and WHM execution with unnecessary privileges | 9.9CNA v3.0 | 0.5% | 2024-09-17 | Fix |
| CVE-2024-8761 | Share This Image WordPress plugin open redirect via link parameter | 6.1NVD v3.1 | 0.5% | 2024-09-17 | Fix |
| CVE-2024-8660 | Concrete CMS stored XSS in the Top Navigator Bar block | 4.6CNA v4.0 | 0.3% | 2024-09-17 | Fix |
| CVE-2024-8490 | PropertyHive WordPress plugin cross-site request forgery via save_account_details | 6.5NVD v3.1 | 0.4% | 2024-09-17 | Fix |
| CVE-2024-8110 | Yokogawa Electric Dual-redundant Platform for Computer (PC2CKM) unchecked return value | 7.5CNA v3.1 | 0.4% | 2024-09-17 | |
| CVE-2024-8093 | Posts reminder WordPress plugin settings update via CSRF | 6.5NVD v3.1 | 0.2% | 2024-09-17 | |
| CVE-2024-8092 | Accordion Image Menu WordPress plugin stored XSS via CSRF | 5.4NVD v3.1 | 0.2% | 2024-09-17 | |
| CVE-2024-8091 | Enhanced Search Box WordPress plugin settings update via CSRF | 6.5NVD v3.1 | 0.2% | 2024-09-17 | |
| CVE-2024-8052 | Review Ratings WordPress plugin stored XSS via CSRF | 6.1NVD v3.1 | 0.2% | 2024-09-17 | |
| CVE-2024-8051 | Special Feed Items WordPress plugin stored XSS via CSRF | 5.4NVD v3.1 | 0.2% | 2024-09-17 | |
| CVE-2024-8047 | Visual Sound (old) WordPress plugin settings update via CSRF | 6.5NVD v3.1 | 0.2% | 2024-09-17 | |
| CVE-2024-8044 | infolinks Ad Wrap WordPress plugin settings update via CSRF | 6.5NVD v3.1 | 0.2% | 2024-09-17 | |
| CVE-2024-8043 | Vikinghammer Tweet WordPress plugin stored XSS via CSRF | 5.4NVD v3.1 | 0.2% | 2024-09-17 | |
| CVE-2024-7873 | Stored XSS in Veribilim Software's Veribase Order Management | 9.4CNA v4.0 | 0.4% | 2024-09-17 | Fix |
| CVE-2024-7788 | The Document Foundation LibreOffice signatures in repair mode should not be trusted | 7.8CNA v3.1 | 0.2% | 2024-09-17 | Fix |
| CVE-2024-5998 | Deserialization of untrusted data in langchain-ai/langchain | 7.8v3.1 | 0.4% | 2024-09-17 | Fix |
| CVE-2024-5170 | Logo Manager For Enamad WordPress plugin Admin+ stored XSS via widget | 4.8NVD v3.1 | 0.3% | 2024-09-17 | Fix |
| CVE-2024-46970 | JetBrains IntelliJ IDEA cross-site scripting | 3.3CNA v3.1 | 0.4% | 2024-09-16 | Fix |
| CVE-2024-46958 | Nextcloud Desktop Client Linux file sync vulnerability | 9.1v3.1 | 0.6% | 2024-09-16 | Fix |
| CVE-2024-46937 | Mfasoft Secure Authentication Server improper access control | 7.5NVD v3.1 | 0.5% | 2024-09-16 | |
| CVE-2024-46451 | TOTOLINK T8 buffer overflow | 9.8v3.1 | 1.2% | 2024-09-16 | Exploit code |
| CVE-2024-46424 | TOTOLINK T8 buffer overflow | 7.5v3.1 | 0.6% | 2024-09-16 | |
| CVE-2024-46419 | TOTOLINK T8 buffer overflow | 9.8v3.1 | 0.7% | 2024-09-16 | |
| CVE-2024-45835 | Mattermost Insufficient Electron Fuses Configuration | 2.5CNA v3.1 | 0.2% | 2024-09-16 | Fix |
| CVE-2024-45833 | Mobile password gets saved in dictionary under conditions | 4.5CNA v3.1 | 0.3% | 2024-09-16 | Fix |
| CVE-2024-45801 | Tampering by prototype polution in DOMPurify | 7.3CNA v3.1 | 0.9% | 2024-09-16 | Fix |
| CVE-2024-45800 | Multiple mXSS found in snappymail HTML parser | 5.0CNA v3.1 | 0.3% | 2024-09-16 | Fix |
| CVE-2024-45799 | Javascript injection in Vending Info/Buyers Info module in FluxCP | 7.3CNA v3.1 | 0.3% | 2024-09-16 | Fix |
| CVE-2024-45698 | D-Link WiFi router OS command injection | 9.8v3.1 | 1.1% | 2024-09-16 | Fix |
| CVE-2024-45697 | D-Link WiFi router hidden functionality | 9.8CNA v3.1 | 1.0% | 2024-09-16 | Fix |
| CVE-2024-45696 | D-Link WiFi router hidden functionality | 8.8CNA v3.1 | 0.6% | 2024-09-16 | Fix |
| CVE-2024-45695 | D-Link WiFi router stack-based buffer overflow | 9.8CNA v3.1 | 1.6% | 2024-09-16 | Fix |
| CVE-2024-45694 | D-Link WiFi router stack-based buffer overflow | 9.8CNA v3.1 | 1.9% | 2024-09-16 | Fix |
| CVE-2024-45496 | Openshift-controller-manager: Elevated build pods can lead to node compromise in openshift | 9.9CNA v3.1 | 1.0% | 2024-09-16 | Fix |
| CVE-2024-45416 | ZTE routers HTTPD session_init function local file inclusion | 8.1CISA ADP v3.1 | 0.6% | 2024-09-16 | |
| CVE-2024-45415 | ZTE routers HTTPD check_data_integrity function stack-based buffer overflow | 9.8CISA ADP v3.1 | 0.5% | 2024-09-16 | |
| CVE-2024-45414 | ZTE routers HTTPD webPrivateDecrypt function stack-based buffer overflow | 9.8CISA ADP v3.1 | 0.5% | 2024-09-16 | |
| CVE-2024-45413 | ZTE routers HTTPD rsa_decrypt function stack-based buffer overflow | 8.1CISA ADP v3.1 | 0.4% | 2024-09-16 | |
| CVE-2024-44623 | Spx Graphics Controller code injection | 9.8NVD v3.1 | 1.2% | 2024-09-16 | |
| CVE-2024-42798 | Lopalopa Music Management System improper access control | 7.6CISA ADP v3.1 | 0.4% | 2024-09-16 | |
| CVE-2024-42796 | Lopalopa Music Management System improper access control | 5.9CISA ADP v3.1 | 0.2% | 2024-09-16 | |
| CVE-2024-42795 | Lopalopa Music Management System improper access control | 4.2CISA ADP v3.1 | 0.2% | 2024-09-16 | |
| CVE-2024-42794 | Lopalopa Music Management System improper access control | 4.7CISA ADP v3.1 | 0.3% | 2024-09-16 | |
| CVE-2024-39910 | Cross-site scripting (XSS) in the decidim admin panel with QuillJS WYSWYG editor | 5.4CNA v3.1 | 0.3% | 2024-09-16 | Fix |
| CVE-2024-39772 | Silent Desktop Screenshot Capture | 3.7CNA v3.1 | 0.3% | 2024-09-16 | Fix |
| CVE-2024-39613 | RCE in desktop app in Windows by local attacker | 5.3CNA v3.1 | 0.3% | 2024-09-16 | Fix |
| CVE-2024-38315 | IBM Aspera Shares session fixation | 6.3CNA v3.1 | 0.2% | 2024-09-16 | Fix |
| CVE-2024-36261 | Intel(R) RAID Web Console software improper access control | 3.5CNA v3.1 | 0.2% | 2024-09-16 | Fix |
| CVE-2024-36247 | Intel(R) RAID Web Console improper access control | 4.6CNA v3.1 | 0.2% | 2024-09-16 | Fix |
| CVE-2024-34545 | Intel(R) RAID Web Console software some improper input validation | 5.2CNA v3.1 | 0.2% | 2024-09-16 | Fix |
| CVE-2024-34543 | Intel(R) RAID Web Console software improper access control | 6.7CNA v3.1 | 0.1% | 2024-09-16 | Fix |
| CVE-2024-34153 | Intel(R) RAID Web Console software uncontrolled search path | 6.7CNA v3.1 | 0.1% | 2024-09-16 | Fix |
| CVE-2024-34016 | Acronis Cyber Protect Cloud Agent uncontrolled search path | 6.5CNA v3.0 | 0.2% | 2024-09-16 | Fix |
| CVE-2024-33848 | Intel(R) RAID Web Console software improper error handling | 6.5CNA v3.1 | 0.2% | 2024-09-16 | Fix |
| CVE-2024-32940 | Intel(R) RAID Web Console software improper access control | 6.5CNA v3.1 | 0.2% | 2024-09-16 | Fix |
| CVE-2024-32666 | Intel(R) RAID Web Console software null pointer dereference | 4.7CNA v3.1 | 0.1% | 2024-09-16 | Fix |
| CVE-2024-32034 | Cross-site scripting (XSS) in the decidim admin activity log | 6.8CNA v3.1 | 0.4% | 2024-09-16 | Fix |
| CVE-2024-28170 | Intel(R) RAID Web Console improper access control | 3.3CNA v3.1 | 0.2% | 2024-09-16 | Fix |
| CVE-2024-24968 | Intel(R) Processors denial of service | 5.6CNA v4.0 | 0.2% | 2024-09-16 | Fix |
| CVE-2024-23984 | Intel(R) Processors RAPL interface for some observable discrepancy | 6.8CNA v4.0 | 0.2% | 2024-09-16 | Fix |
| CVE-2024-23599 | Seamless Firmware Updates for some Intel® reference platforms race condition | 8.3CNA v4.0 | 0.1% | 2024-09-16 | Fix |
| CVE-2024-22399 | Apache Seata: Remote code execution vulnerability via Hessian deserialization in Apache Seata Server | 9.8v3.1 | 3.3% | 2024-09-16 | Fix |
| CVE-2024-22013 | Google Nest Wifi U-Boot environment partition vulnerability | 5.3CISA ADP v3.1 | 0.2% | 2024-09-16 | Fix |
| CVE-2024-21871 | UEFI firmware for some Intel(R) Processors improper input validation | 7.3CNA v4.0 | 0.2% | 2024-09-16 | Fix |
| CVE-2024-21829 | Intel(R) Processors UEFI firmware error handler for some improper input validation | 8.7CNA v4.0 | 0.2% | 2024-09-16 | Fix |
| CVE-2024-21781 | UEFI firmware for some Intel(R) Processors improper input validation | 7.0CNA v4.0 | 0.2% | 2024-09-16 | Fix |
| CVE-2024-8880 | playSMS template index.php code injection | 9.8v3.1 | 0.7% | 2024-09-16 | |
| CVE-2024-8780 | The SYSCOM Group OMFLOW improper authorization for Data Query function | 6.5CNA v3.1 | 0.4% | 2024-09-16 | Fix |
| CVE-2024-8779 | The SYSCOM Group OMFLOW broken access control | 8.8CNA v3.1 | 0.5% | 2024-09-16 | Fix |
| CVE-2024-8778 | The SYSCOM Group OMFLOW arbitrary file read | 6.5v3.1 | 0.6% | 2024-09-16 | Fix |
| CVE-2024-8777 | The SYSCOM Group OMFLOW information leakage | 7.5CNA v3.1 | 0.5% | 2024-09-16 | Fix |
| CVE-2024-8776 | Intumit SmartRobot cross-site scripting | 6.1CNA v3.1 | 0.3% | 2024-09-16 | Fix |
| CVE-2024-8766 | Acronis Cyber Protect Cloud Agent uncontrolled search path | 6.7CNA v3.0 | 0.1% | 2024-09-16 | Fix |
| CVE-2024-8752 | WebIQ Runtime on Windows directory traversal | 7.5NVD v3.1 | 11.8% | 2024-09-16 | NucleiEmerging ThreatsExploit code |
| CVE-2024-8661 | Concrete CMS to are vulnerable to stored XSS in the Next&Previous Nav block | 4.6CNA v4.0 | 0.4% | 2024-09-16 | Fix |
| CVE-2024-7387 | Openshift/builder: Path traversal allows command injection in privileged buildcontainer | 9.1CNA v3.1 | 2.3% | 2024-09-16 | Fix |
| CVE-2024-7104 | Remote code execution in Sfs Consulting's ww.Winsure | 9.8v3.1 | 0.5% | 2024-09-16 | Fix |
| CVE-2024-7098 | XML injection in Sfs Consulting's ww.Winsure | 9.8v3.1 | 0.5% | 2024-09-16 | Fix |
| CVE-2024-6685 | Authorization bypass through user-controlled key in GitLab | 3.1CNA v3.1 | 0.4% | 2024-09-16 | Fix |
| CVE-2024-6401 | SQLi in Sfs Consulting's InsureE GL | 9.8v3.1 | 0.4% | 2024-09-16 | Fix |
| CVE-2024-4283 | URL redirection to untrusted site (open redirect) in GitLab | 6.4CNA v3.1 | 0.4% | 2024-09-16 | Fix |
| CVE-2024-1578 | Multiple MiCard PLUS card reader dropped characters | 5.3CNA v4.0 | 0.2% | 2024-09-16 | Fix |
| CVE-2024-46943 | OpenDaylight Authentication, Authorization And Accounting (AAA) peer impersonation vulnerability | 7.5NVD v3.1 | 0.6% | 2024-09-15 | Fix |
| CVE-2024-46942 | OpenDayLight Model-driven Service Abstraction Layer improper authorization | 6.5NVD v3.1 | 0.4% | 2024-09-15 | Fix |
| CVE-2024-46938 | Sitecore Experience Commerce arbitrary file read | 7.5v3.1 | 46.1% | 2024-09-15 | NucleiFix |
| CVE-2024-46918 | MISP incorrect authorization | 4.9NVD v3.1 | 0.4% | 2024-09-15 | |
| CVE-2024-45460 | Flipping Cards WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.3% | 2024-09-15 | Fix |
| CVE-2024-45459 | Product Slider for WooCommerce by PickPlugins WordPress plugin reflected cross-site scripting (XSS) | 6.1NVD v3.1 | 0.3% | 2024-09-15 | Fix |
| CVE-2024-45458 | Spiffy Calendar WordPress plugin reflected cross-site scripting (XSS) | 6.1NVD v3.1 | 0.3% | 2024-09-15 | Fix |
| CVE-2024-45457 | Spiffy Calendar WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.3% | 2024-09-15 | Fix |
| CVE-2024-45456 | WP Meta SEO WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.3% | 2024-09-15 | Fix |
| CVE-2024-45455 | WP Meta SEO WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.3% | 2024-09-15 | Fix |
| CVE-2024-44063 | Happyforms WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.3% | 2024-09-15 | Fix |
| CVE-2024-44062 | Custom Field Template WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.3% | 2024-09-15 | Fix |
| CVE-2024-44060 | filmix WordPress theme reflected cross-site scripting (XSS) | 6.1NVD v3.1 | 0.3% | 2024-09-15 | |
| CVE-2024-44059 | Custom Query Blocks WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.3% | 2024-09-15 | Fix |
| CVE-2024-44058 | Parabola WordPress theme cross-site scripting (XSS) | 5.4v3.1 | 0.3% | 2024-09-15 | |
| CVE-2024-44057 | Nirvana WordPress theme cross-site scripting (XSS) | 5.4v3.1 | 0.3% | 2024-09-15 | |
| CVE-2024-44056 | Mantra WordPress theme cross-site scripting (XSS) | 5.4v3.1 | 0.3% | 2024-09-15 | Fix |
| CVE-2024-44054 | Fluida WordPress theme cross-site scripting (XSS) | 5.4v3.1 | 0.3% | 2024-09-15 | Fix |
| CVE-2024-44053 | Opor Ayam WordPress theme reflected cross-site scripting (XSS) | 6.1NVD v3.1 | 0.3% | 2024-09-15 | |
| CVE-2024-8876 | xiaohe4966 TpMeCMS lang path traversal | 7.5v3.1 | 0.8% | 2024-09-15 | |
| CVE-2024-8875 | vedees Wcms finder.php path traversal | 9.1v3.1 | 0.9% | 2024-09-15 | |
| CVE-2024-8869 | TOTOLINK A720R exportOvpn os command injection | 8.1v3.1 | 1.7% | 2024-09-15 | |
| CVE-2024-8868 | code-projects Crud Operation System savedata.php SQL injection | 9.8v3.1 | 0.9% | 2024-09-15 | |
| CVE-2024-8867 | Perfex CRM Parameter Clients.php cross-site scripting | 5.4v3.1 | 0.5% | 2024-09-15 | |
| CVE-2024-8866 | AutoCMS robot.php cross-site scripting | 6.1v3.1 | 0.6% | 2024-09-15 | KCV |
| CVE-2024-8865 | composiohq Composio api.py path path traversal | 4.9v3.1 | 0.9% | 2024-09-15 | |
| CVE-2024-8864 | composiohq Composio calculator.py Calculator code injection | 8.8v3.1 | 0.8% | 2024-09-15 | |
| CVE-2024-8863 | aimhubio aim Text Explorer textbox.tsx dangerouslySetInnerHTML cross-site scripting | 5.4v3.1 | 0.5% | 2024-09-14 | |
| CVE-2024-8862 | h2oai h2o-3 JDBC Connection 1 getConnectionSafe deserialization | 9.8v3.1 | 1.3% | 2024-09-14 | Fix |
| CVE-2024-8797 | WP Booking System Booking Calendar WordPress plugin reflected cross-site scripting | 6.1CNA v3.1 | 0.5% | 2024-09-14 | Fix |
| CVE-2024-8775 | Ansible-core: Exposure of sensitive information in ansible vault files due to improper logging | 5.5CNA v3.1 | 0.3% | 2024-09-14 | Fix |
| CVE-2024-8724 | Waitlist Woocommerce ( Back in stock notifier ) WordPress plugin reflected cross-site scripting | 6.1CNA v3.1 | 0.4% | 2024-09-14 | Fix |
| CVE-2024-8669 | Backuply Backup, Restore, Migrate and Clone WordPress plugin authenticated (Admin+) SQL injection | 7.2NVD v3.1 | 16.6% | 2024-09-14 | Fix |
| CVE-2024-8479 | Simple Spoiler - Unauthenticated arbitrary Shortcode Execution | 7.3CNA v3.1 | 0.6% | 2024-09-14 | Fix |
| CVE-2024-8271 | FOX WordPress plugin code injection | 7.3v3.1 | 0.7% | 2024-09-14 | Fix |
| CVE-2024-8246 | Post Form WordPress plugin privilege escalation | 8.8CNA v3.1 | 0.4% | 2024-09-14 | Fix |
| CVE-2024-8039 | TECNO com.afmobi.boomplayer incorrect permission assignment | 9.8CISA ADP v3.1 | 0.4% | 2024-09-14 | |
| CVE-2024-6482 | Login with phone number WordPress plugin authorization bypass to privilege escalation | 8.8CNA v3.1 | 0.5% | 2024-09-14 | Fix |
| CVE-2024-46713 | Linux kernel perf AUX buffer out-of-bounds write | 7.8CNA v3.1 | 0.3% | 2024-09-13 | Fix |
| CVE-2024-46712 | Linux kernel vmwgfx dumb buffer coherency vulnerability | 5.5v3.1 | 0.2% | 2024-09-13 | Fix |
| CVE-2024-46711 | In the Linux kernel, the following vulnerability has been resolved: mptcp: pm: fix ID 0 endp usage after multiple re-creations 'local_addr_used' and 'add_addr_accepted' are decremented for addresses not related to the initial subflow (ID0), because the source and destination addresses of the initi | 4.7v3.1 | 0.2% | 2024-09-13 | Fix |
| CVE-2024-46710 | Linux kernel vmwgfx cursor buffer mapping race condition | 7.8CNA v3.1 | 0.2% | 2024-09-13 | Fix |
| CVE-2024-46709 | Linux kernel vmwgfx prime buffer handling denial of service | 7.8CNA v3.1 | 0.2% | 2024-09-13 | Fix |
| CVE-2024-46708 | Linux kernel x1e80100 pin controller denial of service | 5.5v3.1 | 0.2% | 2024-09-13 | Fix |
| CVE-2024-46707 | Linux kernel KVM arm64 vGICv3 emulation null pointer dereference | 5.5v3.1 | 0.2% | 2024-09-13 | Fix |
| CVE-2024-46706 | Linux kernel fsl_lpuart driver runtime suspend denial of service | 5.5v3.1 | 0.2% | 2024-09-13 | Fix |
| CVE-2024-46705 | Linux kernel Xe GPU driver MMIO mapping null pointer dereference | 7.8CNA v3.1 | 0.2% | 2024-09-13 | Fix |
| CVE-2024-46704 | Linux kernel workqueue flush handling race condition | 4.7v3.1 | 0.2% | 2024-09-13 | Fix |
| CVE-2024-46703 | Linux kernel 8250_omap serial console suspend denial of service | 5.5v3.1 | 0.2% | 2024-09-13 | Fix |
| CVE-2024-46702 | Linux kernel Thunderbolt XDomain teardown denial of service | 5.5v3.1 | 0.2% | 2024-09-13 | Fix |
| CVE-2024-46701 | Linux kernel tmpfs offset-based directory reads infinite loop | 5.5v3.1 | 0.2% | 2024-09-13 | Fix |
| CVE-2024-46699 | Linux kernel V3D GPU driver statistics vulnerability | 7.8v3.1 | 0.2% | 2024-09-13 | Fix |
| CVE-2024-46698 | Linux kernel framebuffer aperture conflict handling null pointer dereference | 5.5v3.1 | 0.2% | 2024-09-13 | Fix |
| CVE-2024-46697 | Linux kernel nfsd improper initialization | 9.8CNA v3.1 | 0.4% | 2024-09-13 | Fix |
| CVE-2024-46696 | Linux kernel nfsd use-after-free | 9.8CNA v3.1 | 0.4% | 2024-09-13 | Fix |
| CVE-2024-46695 | Linux kernel inode_setsecctx hook vulnerability | 9.8CNA v3.1 | 0.5% | 2024-09-13 | Fix |
| CVE-2024-46694 | Linux kernel AMD display driver null pointer dereference | 5.5v3.1 | 0.2% | 2024-09-13 | Fix |
| CVE-2024-46693 | Linux kernel pmic_glink driver null pointer dereference | 4.7v3.1 | 0.2% | 2024-09-13 | Fix |
| CVE-2024-46692 | Linux kernel scm deadlock | 5.5v3.1 | 0.2% | 2024-09-13 | Fix |
| CVE-2024-46691 | Linux kernel USB Type-C UCSI driver null pointer dereference | 5.5v3.1 | 0.2% | 2024-09-13 | Fix |
| CVE-2024-46690 | In the Linux kernel, the following vulnerability has been resolved: nfsd: fix nfsd4_deleg_getattr_conflict in presence of third party lease It is not safe to dereference fl->c.flc_owner without first confirming fl->fl_lmops is the expected manager. nfsd4_deleg_getattr_conflict() tests fl_lmops bu | 9.8CNA v3.1 | 0.4% | 2024-09-13 | Fix |
| CVE-2024-46689 | Linux kernel cmd-db infinite loop | 5.5v3.1 | 0.3% | 2024-09-13 | Fix |
| CVE-2024-46688 | Linux kernel EROFS global buffer management out-of-bounds write | 5.5v3.1 | 0.2% | 2024-09-13 | Fix |
| CVE-2024-46687 | Linux kernel Btrfs chunk submission use-after-free | 7.8CNA v3.1 | 0.2% | 2024-09-13 | Fix |
| CVE-2024-46686 | Linux kernel SMB client RDMA read null pointer dereference | 5.5v3.1 | 0.2% | 2024-09-13 | Fix |
| CVE-2024-46685 | Linux kernel pinctrl-single driver null pointer dereference | 5.5v3.1 | 0.3% | 2024-09-13 | Fix |
| CVE-2024-46684 | Linux kernel binfmt_elf_fdpic incorrect buffer size calculation | 5.5v3.1 | 0.2% | 2024-09-13 | Fix |
| CVE-2024-46683 | Linux kernel Xe graphics driver use-after-free | 7.8CNA v3.1 | 0.2% | 2024-09-13 | Fix |
| CVE-2024-46682 | Linux kernel nfsd open state display null pointer dereference | 5.5NVD v3.1 | 0.2% | 2024-09-13 | Fix |
| CVE-2024-46681 | In the Linux kernel, the following vulnerability has been resolved: pktgen: use cpus_read_lock() in pg_net_init() I have seen the WARN_ON(smp_processor_id() != cpu) firing in pktgen_thread_worker() during tests. We must use cpus_read_lock()/cpus_read_unlock() around the for_each_online_cpu(cpu) l | 5.5NVD v3.1 | 0.2% | 2024-09-13 | Fix |
| CVE-2024-46680 | Linux kernel btnxpuart Bluetooth driver vulnerability | 7.8CNA v3.1 | 0.2% | 2024-09-13 | Fix |
| CVE-2024-46679 | Linux kernel ethtool link settings interface race condition | 4.7NVD v3.1 | 0.2% | 2024-09-13 | Fix |
| CVE-2024-46678 | Linux kernel bonding driver IPsec locking improper locking | 7.8CNA v3.1 | 0.2% | 2024-09-13 | Fix |
| CVE-2024-46677 | Linux kernel GTP driver null pointer dereference | 5.5v3.1 | 0.3% | 2024-09-13 | Fix |
| CVE-2024-46676 | Linux kernel pn533 NFC driver division by zero | 5.5v3.1 | 0.2% | 2024-09-13 | Fix |
| CVE-2024-46675 | Linux kernel dwc3 USB controller driver vulnerability | 5.5v3.1 | 0.3% | 2024-09-13 | Fix |
| CVE-2024-46674 | Linux kernel dwc3 USB driver use-after-free | 7.8CNA v3.1 | 0.3% | 2024-09-13 | Fix |
| CVE-2024-46673 | Linux kernel aacraid SCSI driver double free | 7.8CNA v3.1 | 0.3% | 2024-09-13 | Fix |
| CVE-2024-46049 | Tenda O6 stack-based buffer overflow | 9.8v3.1 | 0.6% | 2024-09-13 | |
| CVE-2024-46048 | Tenda FH451 command injection | 9.8v3.1 | 10.5% | 2024-09-13 | Emerging Threats |
| CVE-2024-46047 | Tenda FH451 stack-based buffer overflow | 7.5v3.1 | 0.6% | 2024-09-13 | |
| CVE-2024-46046 | Tenda FH451 stack-based buffer overflow | 9.8v3.1 | 0.6% | 2024-09-13 | |
| CVE-2024-46045 | Tenda CH22 buffer overflow | 9.8v3.1 | 0.6% | 2024-09-13 | |
| CVE-2024-46044 | Tenda CH22 stack-based buffer overflow | 9.8v3.1 | 0.6% | 2024-09-13 | |
| CVE-2024-45368 | AutomationDirect DirectLogic H2-DM1E session fixation | 8.7CNA v4.0 | 0.3% | 2024-09-13 | |
| CVE-2024-45113 | Adobe ColdFusion improper authentication | 7.5CNA v3.1 | 0.6% | 2024-09-13 | Fix |
| CVE-2024-45112 | Adobe Acrobat Reader access of resource using incompatible type (type confusion) | 7.8CNA v3.1 | 0.5% | 2024-09-13 | Fix |
| CVE-2024-45111 | Adobe Illustrator out-of-bounds read | 5.5CNA v3.1 | 0.3% | 2024-09-13 | Fix |
| CVE-2024-45109 | Adobe Photoshop Desktop out-of-bounds write | 7.8CNA v3.1 | 0.3% | 2024-09-13 | Fix |
| CVE-2024-45108 | Adobe Photoshop Desktop out-of-bounds write | 7.8CNA v3.1 | 0.3% | 2024-09-13 | Fix |
| CVE-2024-45105 | Lenovo HX5530 Appliance (ThinkAgile) BIOS expired pointer dereference | 6.7CNA v3.1 | 0.2% | 2024-09-13 | Fix |
| CVE-2024-45104 | Lenovo XClarity Administrator web API vulnerability | 6.3CNA v3.1 | 0.2% | 2024-09-13 | Fix |
| CVE-2024-45103 | Lenovo XClarity Administrator web interface vulnerability | 4.3CNA v3.1 | 0.3% | 2024-09-13 | Fix |
| CVE-2024-45101 | Lenovo XClarity Administrator cleartext transmission of sensitive information | 6.8CNA v3.1 | 0.2% | 2024-09-13 | Fix |
| CVE-2024-44798 | Anujk305 Bus Pass Management System cross-site scripting | 4.8v3.1 | 0.3% | 2024-09-13 | |
| CVE-2024-44685 | Titan SFTP and MFT Server SMTP settings page information disclosure | 5.0CISA ADP v3.1 | 0.3% | 2024-09-13 | |
| CVE-2024-44430 | Mayuri K Best Free Law Office Management SQL injection | 9.8v3.1 | 0.7% | 2024-09-13 | |
| CVE-2024-44096 | Google Android insecure default initialization | 4.4v3.1 | 0.1% | 2024-09-13 | Fix |
| CVE-2024-44095 | Google Android drm_fw.c privilege escalation | 7.8v3.1 | 0.1% | 2024-09-13 | Fix |
| CVE-2024-44094 | Google Android drm_fw.c memory corruption | 7.8v3.1 | 0.1% | 2024-09-13 | Fix |
| CVE-2024-44093 | Google Android drm_fw.c memory corruption | 7.8v3.1 | 0.1% | 2024-09-13 | Fix |
| CVE-2024-44092 | Google Android active debug code | 7.8v3.1 | 0.1% | 2024-09-13 | Fix |
| CVE-2024-43760 | Adobe Photoshop Desktop out-of-bounds write | 7.8CNA v3.1 | 0.3% | 2024-09-13 | Fix |
| CVE-2024-43759 | Adobe Illustrator null pointer dereference | 5.5CNA v3.1 | 0.3% | 2024-09-13 | Fix |
| CVE-2024-43758 | Adobe Illustrator use-after-free | 7.8CNA v3.1 | 0.3% | 2024-09-13 | Fix |
| CVE-2024-43756 | Adobe Photoshop Desktop heap-based buffer overflow | 7.8CNA v3.1 | 0.4% | 2024-09-13 | Fix |
| CVE-2024-43180 | IBM Concert information disclosure | 4.3CNA v3.1 | 0.2% | 2024-09-13 | Fix |
| CVE-2024-43099 | AutomationDirect DirectLogic H2-DM1E authentication bypass by capture-replay | 8.7CNA v4.0 | 0.3% | 2024-09-13 | |
| CVE-2024-42025 | Ubiquiti UniFi Network Application Self-Hosted UniFi Network Servers command injection | 7.8v3.1 | 0.8% | 2024-09-13 | Fix |
| CVE-2024-41874 | Adobe ColdFusion deserialization of untrusted data | 9.8CNA v3.1 | 30.3% | 2024-09-13 | Fix |
| CVE-2024-41873 | Adobe Media Encoder out-of-bounds read | 5.5CNA v3.1 | 0.3% | 2024-09-13 | Fix |
| CVE-2024-41872 | Adobe Media Encoder out-of-bounds read | 5.5CNA v3.1 | 0.3% | 2024-09-13 | Fix |
| CVE-2024-41871 | Adobe Media Encoder out-of-bounds read | 5.5CNA v3.1 | 0.3% | 2024-09-13 | Fix |
| CVE-2024-41870 | Adobe Media Encoder out-of-bounds read | 5.5CNA v3.1 | 0.3% | 2024-09-13 | Fix |
| CVE-2024-41869 | Adobe Acrobat Reader use-after-free | 7.8CNA v3.1 | 2.3% | 2024-09-13 | Fix |
| CVE-2024-41867 | Adobe After Effects out-of-bounds read | 5.5CNA v3.1 | 0.3% | 2024-09-13 | Fix |
| CVE-2024-41859 | Adobe After Effects out-of-bounds write | 7.8CNA v3.1 | 0.3% | 2024-09-13 | Fix |
| CVE-2024-41857 | Adobe Illustrator integer underflow (wrap or wraparound) | 7.8CNA v3.1 | 0.4% | 2024-09-13 | Fix |
| CVE-2024-39926 | dani-garcia vaultwarden cross-site scripting | 5.4CISA ADP v3.1 | 0.5% | 2024-09-13 | Fix |
| CVE-2024-39925 | dani-garcia vaultwarden information disclosure | 6.5CISA ADP v3.1 | 0.6% | 2024-09-13 | Fix |
| CVE-2024-39924 | dani-garcia vaultwarden incorrect default permissions | 8.8CISA ADP v3.1 | 13.3% | 2024-09-13 | Fix |
| CVE-2024-39385 | Adobe Premiere Pro use-after-free | 5.5CNA v3.1 | 0.3% | 2024-09-13 | Fix |
| CVE-2024-39384 | Adobe Premiere Pro out-of-bounds write | 7.8CNA v3.1 | 0.3% | 2024-09-13 | Fix |
| CVE-2024-39382 | Adobe After Effects out-of-bounds read | 5.5CNA v3.1 | 0.3% | 2024-09-13 | Fix |
| CVE-2024-39381 | Adobe After Effects out-of-bounds write | 7.8CNA v3.1 | 0.3% | 2024-09-13 | Fix |
| CVE-2024-39380 | Adobe After Effects heap-based buffer overflow | 7.8CNA v3.1 | 0.3% | 2024-09-13 | Fix |
| CVE-2024-39377 | Adobe Media Encoder out-of-bounds write | 7.8CNA v3.1 | 0.4% | 2024-09-13 | Fix |
| CVE-2024-38816 | Spring path traversal vulnerability in functional web frameworks | 7.5CNA v3.1 | 14.7% | 2024-09-13 | NucleiEmerging ThreatsExploit codeFix |
| CVE-2024-34121 | Adobe Illustrator integer overflow or wraparound | 7.8CNA v3.1 | 0.4% | 2024-09-13 | Fix |
| CVE-2024-31416 | Eaton Foreseer integer overflow | 5.6CNA v3.1 | 0.3% | 2024-09-13 | Fix |
| CVE-2024-31415 | Eaton Foreseer cleartext storage of sensitive information | 6.3CNA v3.1 | 0.1% | 2024-09-13 | Fix |
| CVE-2024-31414 | Eaton Foreseer cross-site scripting | 6.7CNA v3.1 | 0.3% | 2024-09-13 | Fix |
| CVE-2024-29779 | Google Android improper privilege management | 7.8v3.1 | 0.1% | 2024-09-13 | Fix |
| CVE-2024-8784 | QDocs Smart School Management System Chat mynewuser SQL injection | 8.8v3.1 | 0.5% | 2024-09-13 | Fix |
| CVE-2024-8783 | OpenTibiaBR MyAAC Post Reply new_post.php cross-site scripting | 5.4v3.1 | 0.4% | 2024-09-13 | |
| CVE-2024-8782 | JFinalCMS edit delete path traversal | 9.8v3.1 | 0.7% | 2024-09-13 | |
| CVE-2024-8762 | code-projects Crud Operation System updatedata.php SQL injection | 9.8v3.1 | 0.7% | 2024-09-13 | |
| CVE-2024-8747 | Email Obfuscate Shortcode WordPress plugin authenticated (Contributor+) stored cross-site scripting | 5.4v3.1 | 0.3% | 2024-09-13 | |
| CVE-2024-8742 | Essential Addons for Elementor WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.4% | 2024-09-13 | Fix |
| CVE-2024-8737 | PDF Thumbnail Generator WordPress plugin reflected cross-site scripting | 6.1CNA v3.1 | 0.4% | 2024-09-13 | Fix |
| CVE-2024-8734 | Lucas String Replace WordPress plugin reflected cross-site scripting | 6.1v3.1 | 0.3% | 2024-09-13 | |
| CVE-2024-8732 | Roles and Capabilities WordPress plugin reflected cross-site scripting | 6.1CNA v3.1 | 0.4% | 2024-09-13 | Fix |
| CVE-2024-8731 | Cron Jobs WordPress plugin reflected cross-site scripting | 6.1CNA v3.1 | 0.4% | 2024-09-13 | Fix |
| CVE-2024-8730 | Exit Notifier WordPress plugin reflected cross-site scripting | 6.1CNA v3.1 | 0.4% | 2024-09-13 | Fix |
| CVE-2024-8714 | WordPress Affiliates Plugin SliceWP Affiliates reflected cross-site scripting | 6.1CNA v3.1 | 0.5% | 2024-09-13 | Fix |
| CVE-2024-8665 | YITH Custom Login WordPress plugin reflected cross-site scripting | 6.1CNA v3.1 | 0.5% | 2024-09-13 | Fix |
| CVE-2024-8664 | WP Test Email WordPress plugin reflected cross-site scripting | 6.1CNA v3.1 | 0.4% | 2024-09-13 | Fix |
| CVE-2024-8663 | WP Simple Booking Calendar WordPress plugin reflected cross-site scripting | 6.1CNA v3.1 | 0.4% | 2024-09-13 | Fix |
| CVE-2024-8656 | WPFactory Helper WordPress plugin reflected cross-site scripting | 6.1CNA v3.1 | 0.4% | 2024-09-13 | Fix |
| CVE-2024-8281 | Lenovo HX5530 Appliance (ThinkAgile) XCC OS command injection | 7.2CNA v3.1 | 1.0% | 2024-09-13 | Fix |
| CVE-2024-8280 | Lenovo HX5530 Appliance (ThinkAgile) XCC OS command injection | 7.2CNA v3.1 | 1.0% | 2024-09-13 | Fix |
| CVE-2024-8279 | Lenovo HX5530 Appliance (ThinkAgile) XCC OS command injection | 7.2CNA v3.1 | 1.1% | 2024-09-13 | Fix |
| CVE-2024-8278 | Lenovo HX5530 Appliance (ThinkAgile) XCC OS command injection | 7.2CNA v3.1 | 1.1% | 2024-09-13 | Fix |
| CVE-2024-8269 | inspireui MStore API user registration function improper access control | 6.5NVD v3.1 | 0.4% | 2024-09-13 | Fix |
| CVE-2024-8242 | inspireui MStore API user profile update function unrestricted file upload | 8.8v3.1 | 0.8% | 2024-09-13 | Fix |
| CVE-2024-8059 | Lenovo HX5530 Appliance (ThinkAgile) XCC cleartext transmission of sensitive information | 4.3CNA v3.1 | 0.2% | 2024-09-13 | Fix |
| CVE-2024-7888 | Classified Listing Classified ads and Business Directory WordPress plugin missing authorization | 4.3v3.1 | 0.3% | 2024-09-13 | Fix |
| CVE-2024-7864 | Favicon Generator for WordPress arbitrary file deletion via CSRF | 6.5NVD v3.1 | 0.3% | 2024-09-13 | Fix |
| CVE-2024-7863 | Favicon Generator WordPress plugin arbitrary file upload via CSRF | 6.8NVD v3.1 | 0.3% | 2024-09-13 | Fix |
| CVE-2024-7756 | Lenovo 10w (Type 82ST, 82SU) Laptop (Lenovo) BIOS active debug code | 6.8CNA v3.1 | 0.3% | 2024-09-13 | Fix |
| CVE-2024-7423 | Stream WordPress plugin cross-site request forgery to arbitrary options update | 8.8CNA v3.1 | 0.3% | 2024-09-13 | Fix |
| CVE-2024-7133 | My Sticky Bar WordPress plugin Admin+ stored XSS | 4.8NVD v3.1 | 0.4% | 2024-09-13 | Fix |
| CVE-2024-7129 | Appointment Booking Calendar WordPress plugin Admin+ template injection to RCE | 7.2NVD v3.1 | 1.1% | 2024-09-13 | Fix |
| CVE-2024-6867 | Information disclosure in lunary-ai/Lunary | 6.5v3.1 | 0.4% | 2024-09-13 | Fix |
| CVE-2024-6862 | Cross-site request forgery (CSRF) in lunary-ai/Lunary | 8.1v3.1 | 0.3% | 2024-09-13 | Fix |
| CVE-2024-6850 | Carousel Slider WordPress plugin Editor+ stored XSS | 4.8NVD v3.1 | 0.3% | 2024-09-13 | Fix |
| CVE-2024-6723 | AI Engine WordPress plugin Admin+ SQLi | 4.7NVD v3.1 | 0.5% | 2024-09-13 | Fix |
| CVE-2024-6656 | Hard-coded Credentals in TNB Mobile Solutions' Cockpit Software | 9.8v3.1 | 0.4% | 2024-09-13 | Fix |
| CVE-2024-6617 | NinjaTeam Header Footer Custom Code WordPress plugin Admin+ stored XSS via CSS Styles | 4.8NVD v3.1 | 0.4% | 2024-09-13 | Fix |
| CVE-2024-6587 | SSRF in BerriAI/LiteLLM | 7.5v3.1 | 34.7% | 2024-09-13 | NucleiFix |
| CVE-2024-6582 | Broken access control in lunary-ai/Lunary | 4.3v3.1 | 0.4% | 2024-09-13 | Fix |
| CVE-2024-6544 | Custom Post Limits WordPress plugin unauthenticated full path disclosure | 5.3CNA v3.1 | 0.4% | 2024-09-13 | |
| CVE-2024-6493 | NinjaTeam Header Footer Custom Code WordPress plugin Admin+ stored XSS | 4.8NVD v3.1 | 0.3% | 2024-09-13 | Fix |
| CVE-2024-6259 | zephyrproject-rtos Zephyr BT: HCI: Adv_ext_report Improper discarding in adv_ext_report | 7.6CNA v3.1 | 0.6% | 2024-09-13 | |
| CVE-2024-6258 | zephyrproject-rtos Zephyr BT: Missing length checks of net_buf in rfcomm_handle_data | 6.8CNA v3.1 | 0.4% | 2024-09-13 | |
| CVE-2024-6137 | zephyrproject-rtos Zephyr BT: Classic: SDP OOB access in get_att_search_list | 7.6CNA v3.1 | 0.6% | 2024-09-13 | |
| CVE-2024-6135 | zephyrproject-rtos Zephyr BT:Classic: Multiple missing buf length checks | 7.6CNA v3.1 | 0.4% | 2024-09-13 | |
| CVE-2024-6087 | Improper access control in lunary-ai/Lunary | 6.5v3.1 | 0.4% | 2024-09-13 | Fix |
| CVE-2024-5931 | zephyrproject-rtos Zephyr BT: Unchecked user input in bap_broadcast_assistant | 6.3CNA v3.1 | 0.4% | 2024-09-13 | |
| CVE-2024-5884 | Beauty WordPress theme stored cross-site scripting | 5.4v3.1 | 0.3% | 2024-09-13 | |
| CVE-2024-5870 | Tweaker5 WordPress theme stored cross-site scripting | 5.4v3.1 | 0.3% | 2024-09-13 | |
| CVE-2024-5869 | Neighborly WordPress theme stored cross-site scripting | 5.4v3.1 | 0.3% | 2024-09-13 | |
| CVE-2024-5867 | Delicate WordPress theme stored cross-site scripting | 5.4v3.1 | 0.3% | 2024-09-13 | |
| CVE-2024-5789 | Triton Lite WordPress theme stored cross-site scripting | 5.4v3.1 | 0.3% | 2024-09-13 | |
| CVE-2024-5754 | zephyrproject-rtos Zephyr BT: Encryption procedure host vulnerability | 8.2CNA v3.1 | 0.3% | 2024-09-13 | |
| CVE-2024-5628 | Avada Website Builder For WordPress and eCommerce plugin stored cross-site scripting | 5.4v3.1 | 0.3% | 2024-09-13 | Fix |
| CVE-2024-5567 | Betheme Responsive Multipurpose WordPress and WooCommerce theme stored cross-site scripting | 5.4v3.1 | 0.3% | 2024-09-13 | Fix |
| CVE-2024-4550 | Lenovo P360 Workstation (ThinkStation) BIOS stack-based buffer overflow | 6.7CNA v3.1 | 0.2% | 2024-09-13 | Fix |
| CVE-2024-3100 | Lenovo 100w Gen 3 Laptop (Lenovo) BIOS stack-based buffer overflow | 6.7CNA v3.1 | 0.2% | 2024-09-13 | Fix |
| CVE-2024-45857 | Cleanlab deserialization of untrusted data | 7.8CNA v3.1 | 0.2% | 2024-09-12 | |
| CVE-2024-45856 | MindsDB cross-site scripting | 5.4NVD v3.1 | 0.5% | 2024-09-12 | |
| CVE-2024-45855 | MindsDB deserialization of untrusted data | 7.5NVD v3.1 | 0.5% | 2024-09-12 | |
| CVE-2024-45854 | MindsDB deserialization of untrusted data | 7.5NVD v3.1 | 0.5% | 2024-09-12 | |
| CVE-2024-45853 | MindsDB deserialization of untrusted data | 7.5NVD v3.1 | 0.5% | 2024-09-12 | |
| CVE-2024-45852 | MindsDB deserialization of untrusted data | 8.8NVD v3.1 | 0.7% | 2024-09-12 | |
| CVE-2024-45851 | MindsDB eval injection | 8.8NVD v3.1 | 0.9% | 2024-09-12 | Fix |
| CVE-2024-45850 | MindsDB eval injection | 8.8NVD v3.1 | 0.9% | 2024-09-12 | Fix |
| CVE-2024-45849 | MindsDB eval injection | 8.8NVD v3.1 | 0.9% | 2024-09-12 | Fix |
| CVE-2024-45848 | MindsDB eval injection | 8.8NVD v3.1 | 0.9% | 2024-09-12 | Fix |
| CVE-2024-45847 | MindsDB eval injection | 8.8NVD v3.1 | 0.9% | 2024-09-12 | Fix |
| CVE-2024-45846 | MindsDB eval injection | 8.8NVD v3.1 | 2.1% | 2024-09-12 | Exploit codeFix |
| CVE-2024-45826 | ThinManager® code execution | 8.5CNA v4.0 | 12.3% | 2024-09-12 | Fix |
| CVE-2024-45825 | 5015-U8IHFT denial of service vulnerability via CIP message | 8.7CNA v4.0 | 0.5% | 2024-09-12 | Fix |
| CVE-2024-45824 | FactoryTalk® View Site Edition remote code execution vulnerability via lack of Input Validation | 9.2CNA v4.0 | 1.3% | 2024-09-12 | Fix |
| CVE-2024-45823 | FactoryTalk® Batch View™ authentication bypass vulnerability via shared secrets | 9.2CNA v4.0 | 0.5% | 2024-09-12 | Fix |
| CVE-2024-45624 | Pgpool Global Development Group Pgpool-II information disclosure | 7.5CISA ADP v3.1 | 0.5% | 2024-09-12 | Fix |
| CVE-2024-45607 | whatsapp-api-js fails to validate message's signature | 5.8CNA v3.1 | 14.5% | 2024-09-12 | Emerging ThreatsFix |
| CVE-2024-45383 | Microsoft HDAudBus.sys denial of service | 5.0v3.1 | 1.5% | 2024-09-12 | Exploit code |
| CVE-2024-45303 | Discourse Calendar plugin event names susceptible to XSS | 6.1CNA v3.1 | 0.3% | 2024-09-12 | Fix |
| CVE-2024-45182 | wibukey out-of-bounds read | 5.5v3.1 | 0.2% | 2024-09-12 | Fix |
| CVE-2024-45181 | wibukey out-of-bounds write | 7.8v3.1 | 0.2% | 2024-09-12 | Fix |
| CVE-2024-44460 | emqx nanomq out-of-bounds read | 7.5v3.1 | 0.5% | 2024-09-12 | |
| CVE-2024-44459 | Octavolabs vernemq resource exhaustion | 7.5v3.1 | 0.5% | 2024-09-12 | |
| CVE-2024-42484 | ESP-NOW OOB vulnerability in Group Type message | 6.5CNA v3.1 | 0.4% | 2024-09-12 | Fix |
| CVE-2024-42483 | Espressif ESP-NOW message cache vulnerability | 6.5CNA v3.1 | 0.3% | 2024-09-12 | Fix |
| CVE-2024-41629 | Ti Fusion Digital Power Designer cleartext storage of sensitive information | 5.5v3.1 | 0.2% | 2024-09-12 | |
| CVE-2024-40457 | No-IP Dynamic Update Client cleartext storage of sensitive information | 9.1CISA ADP v3.1 | 0.6% | 2024-09-12 | Exploit code |
| CVE-2024-38222 | Microsoft Edge (Chromium-based) information disclosure | 6.5CNA v3.1 | 1.2% | 2024-09-12 | Fix |
| CVE-2024-37397 | Ivanti EPM provisioning web service XML external entity injection | 8.2CISA ADP v3.1 | 59.3% | 2024-09-12 | Emerging ThreatsFix |
| CVE-2024-36066 | Keyfactor EJBCA man-in-the-middle | 3.1v3.1 | 0.2% | 2024-09-12 | Fix |
| CVE-2024-34785 | Ivanti EPM unspecified SQL injection | 7.2NVD v3.1 | 25.4% | 2024-09-12 | Fix |
| CVE-2024-34783 | Ivanti EPM unspecified SQL injection | 7.2NVD v3.1 | 43.4% | 2024-09-12 | Fix |
| CVE-2024-34779 | Ivanti EPM unspecified SQL injection | 7.2NVD v3.1 | 24.0% | 2024-09-12 | Fix |
| CVE-2024-34336 | Ordat.erp observable discrepancy | 5.3v3.1 | 0.4% | 2024-09-12 | |
| CVE-2024-34335 | Ordat.erp cross-site scripting | 6.1v3.1 | 0.3% | 2024-09-12 | |
| CVE-2024-34334 | Ordat.erp SQL injection | 7.5NVD v3.1 | 0.5% | 2024-09-12 | |
| CVE-2024-32848 | Ivanti EPM unspecified SQL injection | 7.2NVD v3.1 | 43.4% | 2024-09-12 | Fix |
| CVE-2024-32846 | Ivanti EPM unspecified SQL injection | 7.2NVD v3.1 | 2.2% | 2024-09-12 | Fix |
| CVE-2024-32845 | Ivanti EPM unspecified SQL injection | 7.2NVD v3.1 | 24.0% | 2024-09-12 | Fix |
| CVE-2024-32843 | Ivanti EPM unspecified SQL injection | 7.2NVD v3.1 | 2.2% | 2024-09-12 | Fix |
| CVE-2024-32842 | Ivanti EPM unspecified SQL injection | 7.2NVD v3.1 | 2.2% | 2024-09-12 | Fix |
| CVE-2024-32840 | Ivanti EPM unspecified SQL injection | 7.2NVD v3.1 | 25.4% | 2024-09-12 | Fix |
| CVE-2024-29847 | Ivanti EPM agent portal deserialization of untrusted data | 9.8v3.1 | 52.9% | 2024-09-12 | Exploit codeFix |
| CVE-2024-28991 | SolarWinds Access Rights Manager (ARM) deserialization of untrusted data remote code execution | 9.0CNA v3.1 | 3.1% | 2024-09-12 | Fix |
| CVE-2024-28990 | SolarWinds Access Rights Manager (ARM) hard-coded credentials authentication bypass | 6.3CNA v3.1 | 0.5% | 2024-09-12 | Fix |
| CVE-2024-28981 | Hitachi Vantara Pentaho Data Integration and Analytics insufficiently protected credentials | 8.5CNA v3.1 | 0.3% | 2024-09-12 | Fix |
| CVE-2024-27321 | Refuel Autolab eval injection | 7.8NVD v3.1 | 0.3% | 2024-09-12 | |
| CVE-2024-27320 | Refuel Autolab eval injection | 7.8NVD v3.1 | 0.4% | 2024-09-12 | |
| CVE-2024-25270 | Mirapolis LMS insecure direct object reference | 4.3v3.1 | 0.4% | 2024-09-12 | |
| CVE-2024-20430 | Cisco Meraki Systems Manager Agent for Windows privilege escalation | 7.3CNA v3.1 | 0.2% | 2024-09-12 | Fix |
| CVE-2024-8754 | External control of critical state data in GitLab | 6.4CNA v3.1 | 0.4% | 2024-09-12 | Fix |
| CVE-2024-8751 | SICK MSC800 Sopas ET interface missing authentication | 7.5CNA v3.1 | 0.9% | 2024-09-12 | Fix |
| CVE-2024-8750 | Cross-site scripting vulnerability in Idoit pro | 6.1v3.1 | 0.2% | 2024-09-12 | Fix |
| CVE-2024-8749 | SQL injection vulnerability in Idoit pro | 7.5v3.1 | 0.4% | 2024-09-12 | Fix |
| CVE-2024-8711 | SourceCodester Food Ordering Management System includes directory directory listing | 7.5v3.1 | 0.8% | 2024-09-12 | |
| CVE-2024-8710 | code-projects Inventory Management Products Table page viewProduct.php SQL injection | 8.8v3.1 | 0.6% | 2024-09-12 | |
| CVE-2024-8709 | SourceCodester Best House Rental Management System admin_class.php save_user SQL injection | 8.8v3.1 | 0.6% | 2024-09-12 | |
| CVE-2024-8708 | SourceCodester Best House Rental Management System categories.php cross-site scripting | 6.1v3.1 | 0.3% | 2024-09-12 | |
| CVE-2024-8707 | 云课网络科技有限公司 Yunke Online School System Appadmin.php downfile path traversal | 5.3CNA v4.0 | 0.5% | 2024-09-12 | |
| CVE-2024-8706 | JFinalCMS com.cms.util.TemplateUtils update path traversal | 6.5v3.1 | 0.7% | 2024-09-12 | |
| CVE-2024-8696 | Docker Desktop extension publisher URL remote code execution | 8.9CNA v4.0 | 1.2% | 2024-09-12 | Fix |
| CVE-2024-8695 | Docker Desktop extension description and changelog remote code execution | 9.0CNA v4.0 | 1.3% | 2024-09-12 | Fix |
| CVE-2024-8641 | Privilege Context Switching Error in GitLab | 6.7CNA v3.1 | 0.5% | 2024-09-12 | Fix |
| CVE-2024-8640 | Improper neutralization of special elements used in a command (command injection) in GitLab | 8.5CNA v3.1 | 1.0% | 2024-09-12 | Fix |
| CVE-2024-8635 | Server-side request forgery (SSRF) in GitLab | 7.7CNA v3.1 | 0.6% | 2024-09-12 | Fix |
| CVE-2024-8631 | Privilege defined with unsafe actions in GitLab | 5.5CNA v3.1 | 0.5% | 2024-09-12 | Fix |
| CVE-2024-8622 | amCharts: Charts and Maps WordPress plugin reflected cross-site scripting | 6.1CNA v3.1 | 0.4% | 2024-09-12 | Fix |
| CVE-2024-8533 | Rockwell Automation OptixPanel™ privilege escalation vulnerability via File Permissions | 7.7CNA v4.0 | 1.3% | 2024-09-12 | Fix |
| CVE-2024-8529 | LearnPress WordPress LMS plugin unauthenticated SQL injection via c_fields | 7.5NVD v3.1 | 12.1% | 2024-09-12 | NucleiFix |
| CVE-2024-8522 | LearnPress WordPress LMS plugin unauthenticated SQL injection via c_only_fields | 7.5NVD v3.1 | 62.9% | 2024-09-12 | NucleiExploit codeFix |
| CVE-2024-8311 | Improper protection of alternate path in GitLab | 6.5CNA v3.1 | 0.6% | 2024-09-12 | Fix |
| CVE-2024-8124 | Inefficient regular expression complexity in GitLab | 7.5CNA v3.1 | 40.0% | 2024-09-12 | Fix |
| CVE-2024-8056 | MM-Breaking News WordPress plugin reflected XSS | 6.1NVD v3.1 | 0.3% | 2024-09-12 | |
| CVE-2024-8054 | MM-Breaking News WordPress plugin stored XSS via CSRF | 6.1NVD v3.1 | 0.2% | 2024-09-12 | |
| CVE-2024-7961 | Rockwell Automation path traversal vulnerability in Pavilion8® | 8.6CNA v4.0 | 1.0% | 2024-09-12 | Fix |
| CVE-2024-7960 | Rockwell Automation Incorrect Privileges and path traversal vulnerability in Pavilion8® | 8.8CNA v4.0 | 0.5% | 2024-09-12 | Fix |
| CVE-2024-7862 | Blog Introduction settings update function cross-site request forgery | 6.5NVD v3.1 | 0.2% | 2024-09-12 | |
| CVE-2024-7861 | Misiek Paypal WordPress plugin stored XSS via CSRF | 6.1NVD v3.1 | 0.2% | 2024-09-12 | |
| CVE-2024-7860 | Simple Headline Rotator WordPress plugin stored XSS via CSRF | 6.1NVD v3.1 | 0.2% | 2024-09-12 | |
| CVE-2024-7859 | Visual Sound WordPress plugin settings update via CSRF | 6.5NVD v3.1 | 0.3% | 2024-09-12 | |
| CVE-2024-7822 | Quick Code WordPress plugin stored XSS via CSRF | 6.1NVD v3.1 | 0.2% | 2024-09-12 | |
| CVE-2024-7820 | ILC Thickbox WordPress plugin settings update via CSRF | 6.5NVD v3.1 | 0.2% | 2024-09-12 | |
| CVE-2024-7818 | Misiek Photo Album WordPress plugin stored XSS via CSRF | 6.1NVD v3.1 | 0.2% | 2024-09-12 | |
| CVE-2024-7817 | Misiek Photo Album WordPress plugin Album deletion via CSRF | 6.5NVD v3.1 | 0.2% | 2024-09-12 | |
| CVE-2024-7816 | Gixaw Chat WordPress plugin stored XSS via CSRF | 6.1NVD v3.1 | 0.2% | 2024-09-12 | |
| CVE-2024-7766 | Adicon Server WordPress plugin Admin+ SQL injection | 7.2NVD v3.1 | 0.6% | 2024-09-12 | |
| CVE-2024-6887 | Giveaways and Contests by RafflePress WordPress plugin Editor+ stored XSS | 4.8NVD v3.1 | 0.4% | 2024-09-12 | Fix |
| CVE-2024-6840 | Red Hat Ansible Automation Platform Ansible Automation controller improper authorization | 6.6CNA v3.1 | 0.4% | 2024-09-12 | Fix |
| CVE-2024-6702 | Pegasystems Pega Infinity HTML injection | 5.2CNA v3.1 | 0.3% | 2024-09-12 | Fix |
| CVE-2024-6701 | Pegasystems Pega Infinity cross-site scripting | 5.5CNA v3.1 | 0.3% | 2024-09-12 | Fix |
| CVE-2024-6700 | Pegasystems Pega Infinity cross-site scripting | 5.5CNA v3.1 | 0.3% | 2024-09-12 | Fix |
| CVE-2024-6678 | Authentication bypass by spoofing in GitLab | 9.9CNA v3.1 | 2.0% | 2024-09-12 | Exploit codeFix |
| CVE-2024-6658 | Progress LoadMaster OS command injection | 8.4CNA v3.1 | 0.6% | 2024-09-12 | Fix |
| CVE-2024-6510 | Local privilege escalation vulnerability in AVG Internet Security | 7.8v3.1 | 0.1% | 2024-09-12 | |
| CVE-2024-6446 | Business Logic Errors in GitLab | 3.5CNA v3.1 | 0.4% | 2024-09-12 | Fix |
| CVE-2024-6389 | Exposure of sensitive system information to an unauthorized control sphere in GitLab | 4.3CNA v3.1 | 0.4% | 2024-09-12 | Fix |
| CVE-2024-6077 | Rockwell Automation CompactLogix 5380 denial of service | 8.7CNA v4.0 | 0.6% | 2024-09-12 | Fix |
| CVE-2024-6019 | Music Request Manager WordPress plugin unauthenticated stored XSS | 6.1NVD v3.1 | 0.4% | 2024-09-12 | |
| CVE-2024-6018 | Music Request Manager WordPress plugin reflected XSS | 6.1NVD v3.1 | 0.3% | 2024-09-12 | |
| CVE-2024-6017 | Music Request Manager WordPress plugin stored XSS via CSRF | 6.1NVD v3.1 | 0.2% | 2024-09-12 | |
| CVE-2024-5799 | CM Pop-Up Banners for WordPress plugin Contributor+ stored XSS | 4.8NVD v3.1 | 0.3% | 2024-09-12 | Fix |
| CVE-2024-5435 | Generation of error message containing sensitive information in GitLab | 4.5CNA v3.1 | 0.5% | 2024-09-12 | Fix |
| CVE-2024-4660 | Missing authorization in GitLab | 6.5CNA v3.1 | 0.6% | 2024-09-12 | Fix |
| CVE-2024-4612 | URL redirection to untrusted site (open redirect) in GitLab | 6.4CNA v3.1 | 0.4% | 2024-09-12 | Fix |
| CVE-2024-4472 | Insertion of sensitive information into log file in GitLab | 4.0CNA v3.1 | 0.2% | 2024-09-12 | Fix |
| CVE-2024-3306 | IDOR in Utarit Information's SoliClub | 7.5v3.1 | 0.4% | 2024-09-12 | Fix |
| CVE-2024-3305 | IDOR in Utarit Information's SoliClub | 7.5v3.1 | 0.4% | 2024-09-12 | Fix |
| CVE-2024-3163 | Easy Property Listings WordPress plugin arbitrary Contact deletion via CSRF | 4.3NVD v3.1 | 0.2% | 2024-09-12 | Fix |
| CVE-2024-2743 | Incorrect authorization in GitLab | 5.3CNA v3.1 | 0.4% | 2024-09-12 | Fix |
| CVE-2024-2010 | Reflected XSS in TE Informatics' V5 software | 6.1NVD v3.1 | 0.3% | 2024-09-12 | Fix |
| CVE-2024-46672 | Linux kernel brcmfmac Wi-Fi driver null pointer dereference | 5.5v3.1 | 0.2% | 2024-09-11 | Fix |
| CVE-2024-45790 | Reedos Software Solutions Mutual Fund Distribution Product (aiM-Star) user Enumeration vulnerability | 9.8v3.1 | 0.6% | 2024-09-11 | Fix |
| CVE-2024-45789 | Reedos Software Solutions Mutual Fund Distribution Product (aiM-Star) parameter tampering | 4.3v3.1 | 0.2% | 2024-09-11 | Fix |
| CVE-2024-45788 | Reedos Software Solutions Mutual Fund Distribution Product (aiM-Star) no Rate Limiting vulnerability | 7.5v3.1 | 0.5% | 2024-09-11 | Fix |
| CVE-2024-45787 | Reedos Software Solutions Mutual Fund Distribution Product (aiM-Star) information disclosure | 6.5NVD v3.1 | 0.4% | 2024-09-11 | Fix |
| CVE-2024-45786 | Reedos Software Solutions Mutual Fund Distribution Product (aiM-Star) improper authorization | 6.5NVD v3.1 | 0.4% | 2024-09-11 | Fix |
| CVE-2024-45327 | Fortinet FortiSOAR missing brute-force protection | 7.1CNA v3.1 | 0.3% | 2024-09-11 | Fix |
| CVE-2024-45030 | Linux kernel igb Ethernet driver out-of-bounds write | 9.8CNA v3.1 | 0.5% | 2024-09-11 | Fix |
| CVE-2024-45029 | Linux kernel Tegra I2C ACPI runtime resume improper locking | 5.5v3.1 | 0.2% | 2024-09-11 | Fix |
| CVE-2024-45028 | Linux kernel mmc_test module allocation handling null pointer dereference | 5.5v3.1 | 0.2% | 2024-09-11 | Fix |
| CVE-2024-45027 | Linux kernel xHCI USB host controller cleanup incomplete cleanup | 5.5v3.1 | 0.2% | 2024-09-11 | Fix |
| CVE-2024-45026 | Linux kernel DASD extent space efficient device error recovery out-of-bounds write | 7.0CNA v3.1 | 0.2% | 2024-09-11 | Fix |
| CVE-2024-45025 | Linux kernel file descriptor bitmap handling in close_range out-of-bounds write | 5.5v3.1 | 0.2% | 2024-09-11 | Fix |
| CVE-2024-45024 | Linux kernel hugetlb page table locking improper locking | 7.8CNA v3.1 | 0.1% | 2024-09-11 | Fix |
| CVE-2024-45023 | Linux kernel RAID1 degraded array recovery out-of-bounds write | 7.8CNA v3.1 | 0.2% | 2024-09-11 | Fix |
| CVE-2024-45022 | Linux kernel vmalloc page mapping out-of-bounds write | 7.8CNA v3.1 | 0.2% | 2024-09-11 | Fix |
| CVE-2024-45021 | Linux kernel cgroup memory controller event control null pointer dereference | 7.1CNA v3.1 | 0.3% | 2024-09-11 | Fix |
| CVE-2024-45020 | Linux kernel BPF verifier stack state comparison out-of-bounds write | 7.8CNA v3.1 | 0.2% | 2024-09-11 | Fix |
| CVE-2024-45019 | Linux kernel mlx5e transmit timeout reporter improper locking | 7.8CNA v3.1 | 0.2% | 2024-09-11 | Fix |
| CVE-2024-45018 | Linux kernel netfilter flowtable offload improper initialization | 5.5NVD v3.1 | 0.2% | 2024-09-11 | Fix |
| CVE-2024-45017 | Linux kernel mlx5 IPsec RoCE multi-port device support vulnerability | 7.8CNA v3.1 | 0.2% | 2024-09-11 | Fix |
| CVE-2024-45016 | Linux kernel netem use-after-free | 7.8CNA v3.1 | 0.3% | 2024-09-11 | Fix |
| CVE-2024-45015 | Linux kernel MSM DPU display encoder null pointer dereference | 5.5v3.1 | 0.2% | 2024-09-11 | Fix |
| CVE-2024-45014 | Linux kernel s390 boot KASLR memory allocation vulnerability | 5.5v3.1 | 0.2% | 2024-09-11 | Fix |
| CVE-2024-45013 | Linux kernel NVMe controller keep-alive handling use-after-free | 9.8CNA v3.1 | 0.4% | 2024-09-11 | Fix |
| CVE-2024-45012 | Linux kernel nouveau firmware DMA allocator denial of service | 5.5v3.1 | 0.2% | 2024-09-11 | Fix |
| CVE-2024-45011 | Linux kernel xillybus USB endpoint probing vulnerability | 5.5v3.1 | 0.2% | 2024-09-11 | Fix |
| CVE-2024-45010 | In the Linux kernel, the following vulnerability has been resolved: mptcp: pm: only mark 'subflow' endp as available Adding the following warning ... WARN_ON_ONCE(msk->pm.local_addr_used == 0) ... before decrementing the local_addr_used counter helped to find a bug when running the "remove sin | 5.5v3.1 | 0.2% | 2024-09-11 | Fix |
| CVE-2024-45009 | In the Linux kernel, the following vulnerability has been resolved: mptcp: pm: only decrement add_addr_accepted for MPJ req Adding the following warning ... WARN_ON_ONCE(msk->pm.add_addr_accepted == 0) ... before decrementing the add_addr_accepted counter helped to find a bug when running the | 8.2CNA v3.1 | 0.5% | 2024-09-11 | Fix |
| CVE-2024-44851 | Perfex CRM Discussion section stored cross-site scripting | 5.4v3.1 | 0.4% | 2024-09-11 | |
| CVE-2024-44577 | Relyum Rely-pcie command injection | 8.8CISA ADP v3.1 | 1.0% | 2024-09-11 | |
| CVE-2024-44575 | Relyum Rely-pcie incorrect permission assignment | 3.7CISA ADP v3.1 | 0.3% | 2024-09-11 | |
| CVE-2024-44574 | Relyum Rely-pcie command injection | 8.8CISA ADP v3.1 | 1.0% | 2024-09-11 | |
| CVE-2024-44573 | Relyum Rely-pcie VLAN configuration stored cross-site scripting | 4.7CISA ADP v3.1 | 0.3% | 2024-09-11 | |
| CVE-2024-44572 | Relyum Rely-pcie command injection | 8.8CISA ADP v3.1 | 1.0% | 2024-09-11 | |
| CVE-2024-44571 | Relyum Rely-pcie improper access control | 8.8CISA ADP v3.1 | 0.4% | 2024-09-11 | |
| CVE-2024-44570 | Relyum Rely-pcie command injection | 8.8CISA ADP v3.1 | 0.5% | 2024-09-11 | |
| CVE-2024-44541 | evilnapsis Inventio Lite processlogin SQL injection | 9.8CISA ADP v3.1 | 2.6% | 2024-09-11 | Exploit code |
| CVE-2024-44466 | Comfast Cf-xr11 command injection | 9.8v3.1 | 10.7% | 2024-09-11 | |
| CVE-2024-43793 | Halo's editor has a stored XSS | 6.3CNA v3.1 | 0.3% | 2024-09-11 | Fix |
| CVE-2024-43690 | Gallagher Command Centre Server inclusion of untrusted functionality | 8.0CNA v3.1 | 0.6% | 2024-09-11 | Fix |
| CVE-2024-42760 | Ellevo SQL injection | 7.5CISA ADP v3.1 | 0.6% | 2024-09-11 | |
| CVE-2024-41868 | Adobe Audition out-of-bounds read | 5.5CNA v3.1 | 0.2% | 2024-09-11 | Fix |
| CVE-2024-40662 | Google Android Uri.java privilege escalation | 7.8v3.1 | 0.1% | 2024-09-11 | Fix |
| CVE-2024-40659 | Google Android RemoteProvisioningService.java denial of service | 5.5v3.1 | 0.1% | 2024-09-11 | Fix |
| CVE-2024-40658 | Google Android SoftVideoDecoderOMXComponent.cpp out-of-bounds write | 7.8v3.1 | 0.1% | 2024-09-11 | Fix |
| CVE-2024-40657 | Google Android AccountTypePreferenceLoader.java privilege escalation | 7.8v3.1 | 0.1% | 2024-09-11 | Fix |
| CVE-2024-40656 | Google Android ConnectionServiceWrapper.java information disclosure | 5.5v3.1 | 0.1% | 2024-09-11 | Fix |
| CVE-2024-40655 | Google Android CallScreeningServiceHelper.java privilege escalation | 7.8v3.1 | 0.1% | 2024-09-11 | Fix |
| CVE-2024-40654 | Google Android multiple locations insecure permissions | 7.8v3.1 | 0.1% | 2024-09-11 | Fix |
| CVE-2024-40652 | Google Android SettingsHomepageActivity.java privilege escalation | 7.8v3.1 | 0.1% | 2024-09-11 | Fix |
| CVE-2024-40650 | Google Android styles.xml privilege escalation | 7.8v3.1 | 0.1% | 2024-09-11 | Fix |
| CVE-2024-39808 | Gallagher Controller 6000 and Controller 7000 incorrect buffer size calculation | 4.6CNA v3.1 | 0.2% | 2024-09-11 | Fix |
| CVE-2024-39378 | Adobe Audition out-of-bounds write | 7.8CNA v3.1 | 0.2% | 2024-09-11 | Fix |
| CVE-2024-31336 | Google Android server_rgxta3d_bridge.c arbitrary code execution | 7.8v3.1 | 0.1% | 2024-09-11 | Fix |
| CVE-2024-27115 | Remote code execution through file upload in SOPlanning | 9.8v3.1 | 4.6% | 2024-09-11 | NucleiExploit code |
| CVE-2024-27114 | Remote code execution through file upload in SOPlanning | 9.8v3.1 | 0.5% | 2024-09-11 | |
| CVE-2024-27113 | Insecure direct object reference to export Database in SOPlanning | 9.8v3.1 | 0.4% | 2024-09-11 | |
| CVE-2024-27112 | SQL injection in SOPlanning | 9.8v3.1 | 0.4% | 2024-09-11 | |
| CVE-2024-24972 | Gallagher Controller 6000 and Controller 7000 buffer overflow | 6.5CNA v3.1 | 0.3% | 2024-09-11 | Fix |
| CVE-2024-23906 | Gallagher Controller 6000 and Controller 7000 cross-site scripting | 6.1CNA v3.1 | 0.3% | 2024-09-11 | Fix |
| CVE-2024-23716 | Google Android devicemem_server.c use-after-free | 7.0v3.1 | 0.1% | 2024-09-11 | Fix |
| CVE-2024-21529 | dset prototype pollution | 8.8CNA v4.0 | 0.8% | 2024-09-11 | Fix |
| CVE-2024-20489 | Cisco Routed Passive Optical Network Cleartext Password vulnerability | 8.4CNA v3.1 | 0.1% | 2024-09-11 | |
| CVE-2024-20483 | Cisco IOS XR PON controller command injection | 7.2CNA v3.1 | 1.1% | 2024-09-11 | |
| CVE-2024-20406 | Cisco IOS XR Software Intermediate System-to-Intermediate System denial of service | 7.4CNA v3.1 | 0.2% | 2024-09-11 | Fix |
| CVE-2024-20398 | Cisco IOS XR Software local privilege escalation | 8.8CNA v3.1 | 0.2% | 2024-09-11 | Fix |
| CVE-2024-20390 | Cisco IOS XR Software Dedicated XML Agent TCP denial of service | 5.3CNA v3.1 | 0.4% | 2024-09-11 | Fix |
| CVE-2024-20381 | Cisco Network Services Orchestrator Configuration Update authorization bypass | 8.8CNA v3.1 | 0.6% | 2024-09-11 | Fix |
| CVE-2024-20343 | Cisco IOS XR Software CLI arbitrary file read | 5.5CNA v3.1 | 0.1% | 2024-09-11 | Fix |
| CVE-2024-20317 | Cisco IOS XR Software Layer 2 services denial of service | 7.4CNA v3.1 | 0.2% | 2024-09-11 | Fix |
| CVE-2024-20304 | Cisco IOS XR Software Packet memory exhaustion | 8.6CNA v3.1 | 0.6% | 2024-09-11 | Fix |
| CVE-2024-8705 | A vulnerability was found in Shandong Star Measurement and Control Equipment Heating Network Wireless Monitoring System 5.6.2 and classified as critical. Affected by this issue is the function GetDataKindByType of the file /DataSrvs/UCCGSrv.asmx. The manipulation leads to sql injection. The attack m | 5.3CNA v4.0 | 0.4% | 2024-09-11 | |
| CVE-2024-8694 | JFinalCMS com.cms.controller.admin.TemplateController update path traversal | 5.1CNA v4.0 | 0.8% | 2024-09-11 | |
| CVE-2024-8693 | Kaon CG3000 dhcpcd command cross-site scripting | 5.1CNA v4.0 | 0.3% | 2024-09-11 | |
| CVE-2024-8692 | TDuckCloud TDuckPro password recovery weak password recovery | 9.8v3.1 | 0.5% | 2024-09-11 | |
| CVE-2024-8691 | PAN-OS: User Impersonation in GlobalProtect portal | 5.3CNA v4.0 | 0.3% | 2024-09-11 | Fix |
| CVE-2024-8690 | Cortex XDR Agent: Local Windows Administrator can Disable the Agent | 5.6CNA v4.0 | 0.2% | 2024-09-11 | Fix |
| CVE-2024-8689 | ActiveMQ Content Pack: Cleartext Exposure of Credentials | 6.0CNA v4.0 | 0.2% | 2024-09-11 | Fix |
| CVE-2024-8688 | PAN-OS: Arbitrary file read vulnerability in the Command Line Interface (CLI) | 6.7CNA v4.0 | 0.2% | 2024-09-11 | Fix |
| CVE-2024-8687 | PAN-OS: Cleartext Exposure of GlobalProtect Portal Passcodes | 6.9CNA v4.0 | 0.4% | 2024-09-11 | Fix |
| CVE-2024-8686 | PAN-OS: Command injection | 8.6CNA v4.0 | 1.4% | 2024-09-11 | Fix |
| CVE-2024-8646 | Eclipse Glassfish: URL redirection vulnerability to untrusted sites | 6.1CNA v3.1 | 0.4% | 2024-09-11 | Fix |
| CVE-2024-8642 | Eclipse EDC: Consumer pull transfer token validation checks not applied | 5.0CNA v4.0 | 0.4% | 2024-09-11 | Fix |
| CVE-2024-8639 | Google Chrome Autofill use-after-free | 8.8v3.1 | 0.4% | 2024-09-11 | Fix |
| CVE-2024-8638 | Google Chrome V8 type confusion | 8.8v3.1 | 0.5% | 2024-09-11 | Fix |
| CVE-2024-8637 | Google Chrome Media Router use-after-free | 8.8v3.1 | 0.5% | 2024-09-11 | Fix |
| CVE-2024-8636 | Google Chrome Skia heap-based buffer overflow | 8.8v3.1 | 0.5% | 2024-09-11 | Exploit codeFix |
| CVE-2024-8440 | Essential Addons for Elementor WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.4% | 2024-09-11 | Fix |
| CVE-2024-8306 | Schneider Electric Vijeo Designer improper privilege management | 7.8CNA v3.1 | 0.2% | 2024-09-11 | Fix |
| CVE-2024-8277 | WooCommerce Photo Reviews Premium WordPress plugin authentication bypass | 9.8CNA v3.1 | 1.6% | 2024-09-11 | Fix |
| CVE-2024-8253 | Post Grid and Gutenberg Blocks - Authenticated (Subscriber+) privilege escalation | 8.8CNA v3.1 | 9.4% | 2024-09-11 | Fix |
| CVE-2024-8097 | Payara Platform Payara Server information disclosure | 6.7CNA v4.0 | 0.2% | 2024-09-11 | Fix |
| CVE-2024-8096 | curl OCSP stapling bypass with GnuTLS | 6.5CISA ADP v3.1 | 0.8% | 2024-09-11 | Fix |
| CVE-2024-8045 | Advanced WordPress Backgrounds plugin stored cross-site scripting | 5.4v3.1 | 0.3% | 2024-09-11 | Fix |
| CVE-2024-7890 | Citrix Workspace app privilege escalation | 5.4CNA v4.0 | 0.2% | 2024-09-11 | Fix |
| CVE-2024-7889 | Citrix Workspace app privilege escalation | 7.0CNA v4.0 | 0.2% | 2024-09-11 | Fix |
| CVE-2024-7727 | HTML5 Video Player WordPress plugin unauthorized access | 5.3v3.1 | 0.4% | 2024-09-11 | Fix |
| CVE-2024-7721 | HTML5 Video Player WordPress plugin unauthorized access | 4.3v3.1 | 0.3% | 2024-09-11 | Fix |
| CVE-2024-7716 | GS Logo Slider Lite WordPress plugin Admin+ stored XSS | 4.8NVD v3.1 | 0.4% | 2024-09-11 | Fix |
| CVE-2024-7626 | WP Delicious profile save function path traversal | 8.1CNA v3.1 | 0.8% | 2024-09-11 | Fix |
| CVE-2024-7609 | Directory traversal in Vidco Software's VOC TESTER | 7.5NVD v3.1 | 0.5% | 2024-09-11 | Fix |
| CVE-2024-7312 | Payara Platform Payara Server REST Interface Link Redirection via host parameter | 7.0CNA v4.0 | 0.2% | 2024-09-11 | Fix |
| CVE-2024-6091 | Shell Command Denylist Bypass in Significant-Gravitas/autogpt | 9.8v3.1 | 0.8% | 2024-09-11 | Fix |
| CVE-2024-5760 | HP Samsung Universal Print Driver improper privilege management | 7.8v3.1 | 0.1% | 2024-09-11 | |
| CVE-2024-5416 | Elementor Website Builder More than Just a Page Builder WordPress plugin stored cross-site scripting | 5.4CNA v3.1 | 0.4% | 2024-09-11 | Fix |
| CVE-2024-4465 | Incorrect authorization for Reports configuration in Guardian/CMC | 5.8CNA v4.0 | 0.2% | 2024-09-11 | Fix |
| CVE-2024-3899 | Envira Gallery WordPress plugin Author+ stored XSS | 4.8NVD v3.1 | 0.4% | 2024-09-11 | Fix |
| CVE-2024-1656 | Octopus Deploy Octopus Server content security policy vulnerability | 2.6CNA v3.1 | 0.2% | 2024-09-11 | Fix |
| CVE-2024-45597 | Pluto's http.request allows CR and LF in header values | 5.3CNA v3.1 | 0.3% | 2024-09-10 | Fix |
| CVE-2024-45596 | Directus's session is cached for OpenID and OAuth2 if `redirect` is not used | 7.4CNA v3.1 | 0.7% | 2024-09-10 | Fix |
| CVE-2024-45595 | man-group dtale D-Tale allows remote code execution through the Query input on Chart Builder | 6.1CNA v3.1 | 0.8% | 2024-09-10 | Fix |
| CVE-2024-45593 | Nix affected by unsafe NAR unpacking | 9.1CNA v3.1 | 0.6% | 2024-09-10 | Fix |
| CVE-2024-45592 | auditor-bundle vulnerable to cross-site scripting because name of entity does not get escaped | 8.2CNA v3.1 | 0.4% | 2024-09-10 | Fix |
| CVE-2024-45591 | XWiki Platform document history including authors of any page exposed to unauthorized actors | 5.3CNA v3.1 | 3.4% | 2024-09-10 | NucleiFix |
| CVE-2024-45590 | body-parser vulnerable to denial of service when URL encoding is enabled | 7.5CNA v3.1 | 0.8% | 2024-09-10 | Exploit codeFix |
| CVE-2024-45504 | Alps System Integration InterSafe WebFilter multiple cross-site request forgery | 6.5CISA ADP v3.1 | 0.3% | 2024-09-10 | |
| CVE-2024-45412 | Yeti affected by a Potential denial of service due to the One Milion Unicode characters attack | 5.3CNA v3.1 | 0.8% | 2024-09-10 | Fix |
| CVE-2024-45409 | The Ruby SAML library vulnerable to a SAML authentication bypass via Incorrect XPath selector | 10.0CNA v3.1 | 10.7% | 2024-09-10 | NucleiEmerging ThreatsExploit codeFix |
| CVE-2024-45407 | LizardByte Sunshine pairing process man-in-the-middle | 6.5CNA v3.1 | 0.3% | 2024-09-10 | |
| CVE-2024-45393 | Computer Vision Annotation Tool is missing authorization for endpoints related to webhook deliveries | 6.4CNA v3.1 | 0.2% | 2024-09-10 | Fix |
| CVE-2024-45323 | Fortinet FortiEDR Manager improper access control | 4.6CNA v3.1 | 0.4% | 2024-09-10 | Fix |
| CVE-2024-45286 | Missing authorization check in SAP Production and Revenue Accounting (Tobin interface) | 6.5CNA v3.1 | 0.3% | 2024-09-10 | Fix |
| CVE-2024-45285 | SAP NetWeaver Application Server for ABAP and ABAP Platform missing authorization | 5.4CNA v3.1 | 0.3% | 2024-09-10 | Fix |
| CVE-2024-45284 | Missing authorization check in SAP Student Life Cycle Management (SLcM) | 2.4CNA v3.1 | 0.3% | 2024-09-10 | Fix |
| CVE-2024-45283 | Information disclosure vulnerability in SAP NetWeaver AS for Java (Destination service) | 6.0CNA v3.1 | 0.2% | 2024-09-10 | Fix |
| CVE-2024-45281 | DLL hijacking vulnerability in SAP BusinessObjects Business Intelligence Platform | 5.8CNA v3.1 | 0.2% | 2024-09-10 | Fix |
| CVE-2024-45280 | Cross-site scripting (XSS) vulnerability in SAP NetWeaver AS Java (Logon application) | 4.8CNA v3.1 | 0.2% | 2024-09-10 | Fix |
| CVE-2024-45279 | Cross-site scripting vulnerability in SAP NetWeaver Application Server for ABAP | 6.1CNA v3.1 | 0.3% | 2024-09-10 | Fix |
| CVE-2024-45044 | Bareos's negative command ACLs can be circumvented by abbreviating commands | 8.8CNA v3.1 | 0.5% | 2024-09-10 | Fix |
| CVE-2024-45032 | Siemens Industrial Edge Management Pro insecure direct object reference | 10.0CNA v4.0 | 0.8% | 2024-09-10 | Fix |
| CVE-2024-44893 | Jeecg JimuReport improper privilege management | 9.8CISA ADP v3.1 | 0.5% | 2024-09-10 | |
| CVE-2024-44872 | moziloCMS A reflected cross-site scripting | 6.1v3.1 | 0.5% | 2024-09-10 | |
| CVE-2024-44871 | moziloCMS component /admin/index.php arbitrary file upload | 7.2v3.1 | 16.2% | 2024-09-10 | Exploit code |
| CVE-2024-44867 | PHPOK path traversal | 7.5CISA ADP v3.1 | 1.0% | 2024-09-10 | Exploit code |
| CVE-2024-44815 | Hathway Skyworth Cm5100-511 plaintext password storage | 4.6NVD v3.1 | 0.6% | 2024-09-10 | Exploit code |
| CVE-2024-44677 | eladmin cross-site request forgery | 9.8v3.1 | 0.5% | 2024-09-10 | |
| CVE-2024-44676 | eladmin cross-site scripting | 4.8v3.1 | 0.5% | 2024-09-10 | |
| CVE-2024-44667 | Shenzhen Haichangxing Technology HCX H822 4G LTE Router factory mode reset incorrect authorization | 8.0CISA ADP v3.1 | 0.5% | 2024-09-10 | |
| CVE-2024-44121 | Information disclosure in SAP S/4 HANA (Statutory Reports) | 4.3CNA v3.1 | 0.3% | 2024-09-10 | Fix |
| CVE-2024-44120 | Cross-site scripting (XSS) vulnerability in SAP NetWeaver Enterprise Portal | 4.7CNA v3.1 | 0.2% | 2024-09-10 | Fix |
| CVE-2024-44117 | SAP NetWeaver Application Server for ABAP and ABAP Platform missing authorization | 5.4CNA v3.1 | 0.3% | 2024-09-10 | Fix |
| CVE-2024-44116 | SAP NetWeaver Application Server for ABAP and ABAP Platform missing authorization | 4.3CNA v3.1 | 0.3% | 2024-09-10 | Fix |
| CVE-2024-44115 | SAP NetWeaver Application Server for ABAP and ABAP Platform missing authorization | 4.3CNA v3.1 | 0.3% | 2024-09-10 | Fix |
| CVE-2024-44114 | Missing authorization check in SAP NetWeaver Application Server for ABAP and ABAP Platform | 2.0CNA v3.1 | 0.3% | 2024-09-10 | Fix |
| CVE-2024-44113 | Information disclosure vulnerability in the SAP Business Warehouse (BEx Analyzer) | 4.3CNA v3.1 | 0.3% | 2024-09-10 | Fix |
| CVE-2024-44112 | Missing authorization check in SAP for Oil and Gas (Transportation and Distribution) | 4.3CNA v3.1 | 0.3% | 2024-09-10 | Fix |
| CVE-2024-44107 | Ivanti Workspace Control management console DLL hijacking | 8.8CNA v3.1 | 0.3% | 2024-09-10 | Fix |
| CVE-2024-44106 | Ivanti Workspace Control client-side enforcement of server-side security | 8.8CNA v3.1 | 0.2% | 2024-09-10 | Fix |
| CVE-2024-44105 | Ivanti Workspace Control management console cleartext transmission of sensitive information | 8.2CNA v3.1 | 0.2% | 2024-09-10 | Fix |
| CVE-2024-44104 | Ivanti Workspace Control authentication bypass by spoofing | 8.8CNA v3.1 | 0.2% | 2024-09-10 | Fix |
| CVE-2024-44103 | Ivanti Workspace Control management console DLL hijacking | 8.8CNA v3.1 | 0.2% | 2024-09-10 | Fix |
| CVE-2024-44087 | Siemens Automation License Manager V5 integer overflow | 9.2CNA v4.0 | 10.9% | 2024-09-10 | Fix |
| CVE-2024-44072 | Buffalo WHR-1166DHP2 OS command injection | 5.7CISA ADP v3.1 | 0.6% | 2024-09-10 | |
| CVE-2024-43800 | serve-static affected by template injection that can lead to XSS | 5.0CNA v3.1 | 0.6% | 2024-09-10 | Fix |
| CVE-2024-43799 | send vulnerable to template injection that can lead to XSS | 5.0CNA v3.1 | 0.5% | 2024-09-10 | Fix |
| CVE-2024-43796 | Express vulnerable to XSS via response.redirect | 5.0CNA v3.1 | 0.5% | 2024-09-10 | Fix |
| CVE-2024-43781 | Siemens SINUMERIK 828D V4 sensitive information in log files | 6.8CNA v4.0 | 0.2% | 2024-09-10 | Fix |
| CVE-2024-43647 | Siemens SIMATIC S7-200 SMART CPU CR40 resource exhaustion | 8.7CNA v4.0 | 0.6% | 2024-09-10 | |
| CVE-2024-43495 | Microsoft Windows libarchive remote code execution | 7.3CNA v3.1 | 0.9% | 2024-09-10 | Fix |
| CVE-2024-43492 | Microsoft AutoUpdate (MAU) elevation of privilege | 7.8CNA v3.1 | 0.5% | 2024-09-10 | Fix |
| CVE-2024-43491 | Microsoft Windows Update remote code execution | 9.8CNA v3.1 | 12.9% | 2024-09-10 | Fix |
| CVE-2024-43487 | Microsoft Windows Mark of the web security feature bypass | 6.5CNA v3.1 | 1.2% | 2024-09-10 | Fix |
| CVE-2024-43482 | Microsoft Outlook for iOS information disclosure | 6.5CNA v3.1 | 1.1% | 2024-09-10 | Fix |
| CVE-2024-43479 | Microsoft Power Automate Desktop remote code execution | 8.5CNA v3.1 | 0.9% | 2024-09-10 | Fix |
| CVE-2024-43476 | Microsoft Dynamics 365 (on-premises) cross-site scripting | 7.6CNA v3.1 | 0.9% | 2024-09-10 | Fix |
| CVE-2024-43475 | Microsoft Windows Admin Center information disclosure | 7.3CNA v3.1 | 1.8% | 2024-09-10 | Fix |
| CVE-2024-43474 | Microsoft SQL Server information disclosure | 7.6CNA v3.1 | 1.3% | 2024-09-10 | Fix |
| CVE-2024-43470 | Microsoft Azure Network Watcher VM Agent elevation of privilege | 7.3CNA v3.1 | 0.9% | 2024-09-10 | Fix |
| CVE-2024-43469 | Microsoft Azure CycleCloud remote code execution | 8.8CNA v3.1 | 1.6% | 2024-09-10 | Fix |
| CVE-2024-43467 | Microsoft Windows Remote Desktop Licensing service remote code execution | 7.5CNA v3.1 | 1.1% | 2024-09-10 | Fix |
| CVE-2024-43466 | Microsoft SharePoint server denial of service | 6.5CNA v3.1 | 4.5% | 2024-09-10 | Fix |
| CVE-2024-43465 | Microsoft Excel elevation of privilege | 7.8CNA v3.1 | 0.8% | 2024-09-10 | Fix |
| CVE-2024-43464 | Microsoft SharePoint server remote code execution | 7.2CNA v3.1 | 36.3% | 2024-09-10 | Fix |
| CVE-2024-43463 | Microsoft Office Visio remote code execution | 7.8CNA v3.1 | 0.9% | 2024-09-10 | Fix |
| CVE-2024-43461 | Microsoft Windows MSHTML Platform spoofing | 8.8CNA v3.1 | 54.5% | 2024-09-10 | KEVKCVFix |
| CVE-2024-43458 | Microsoft Windows Networking information disclosure | 7.7CNA v3.1 | 1.8% | 2024-09-10 | Fix |
| CVE-2024-43457 | Microsoft Windows Setup and Deployment elevation of privilege | 7.8CNA v3.1 | 0.6% | 2024-09-10 | Fix |
| CVE-2024-43455 | Microsoft Windows Remote Desktop Licensing service spoofing | 8.8CNA v3.1 | 1.7% | 2024-09-10 | Fix |
| CVE-2024-43454 | Microsoft Windows Remote Desktop Licensing service remote code execution | 7.1CNA v3.1 | 21.9% | 2024-09-10 | Fix |
| CVE-2024-43393 | Phoenix Contact: Configuration changes of the firewall services can lead to DoS in MGUARD devices | 8.1v3.1 | 0.5% | 2024-09-10 | Fix |
| CVE-2024-43392 | Phoenix Contact: Firewall reconfiguration through the FW_environment variables in MGUARD devices | 8.1v3.1 | 0.5% | 2024-09-10 | Fix |
| CVE-2024-43391 | Phoenix Contact: Firewall reconfiguration through the FW_PORTFORWARDING.SRC_IP in MGUARD devices | 8.1v3.1 | 0.5% | 2024-09-10 | Fix |
| CVE-2024-43390 | Phoenix Contact: Firewall reconfiguration due to improper input validation in MGUARD devices | 8.1v3.1 | 0.5% | 2024-09-10 | Fix |
| CVE-2024-43389 | Phoenix Contact: OSPF reconfiguration due to improper input validation in MGUARD devices | 8.1v3.1 | 0.5% | 2024-09-10 | Fix |
| CVE-2024-43388 | Phoenix Contact: SNMP reconfiguration due to improper input validation in MGUARD devices | 8.8CNA v3.1 | 0.6% | 2024-09-10 | Fix |
| CVE-2024-43387 | Phoenix Contact: Access files due to improper neutralization of special elements in MGUARD devices | 8.8CNA v3.1 | 0.6% | 2024-09-10 | Fix |
| CVE-2024-43386 | Phoenix Contact: OS command execution through EMAIL_NOTIFICATION.TO in mGuard devices | 8.8CNA v3.1 | 0.7% | 2024-09-10 | Fix |
| CVE-2024-43385 | Phoenix Contact: OS command execution through PROXY_HTTP_PORT in mGuard devices | 8.8CNA v3.1 | 0.7% | 2024-09-10 | Fix |
| CVE-2024-43040 | Renwoxing Enterprise Intelligent Management System SearchInfo endpoint SQL injection | 9.1CISA ADP v3.1 | 0.4% | 2024-09-10 | |
| CVE-2024-42427 | Dell Wyse Proprietary OS (Modern ThinOS) command injection | 7.6CNA v3.1 | 1.1% | 2024-09-10 | Fix |
| CVE-2024-42425 | Dell Precision Rack BIOS out-of-bounds access | 3.8CNA v3.1 | 0.2% | 2024-09-10 | Fix |
| CVE-2024-42424 | Dell Precision Rack BIOS improper input validation | 5.3CNA v3.1 | 0.1% | 2024-09-10 | Fix |
| CVE-2024-42423 | Dell Wyse Proprietary OS (Modern ThinOS) incorrect authorization | 6.1CNA v3.1 | 0.2% | 2024-09-10 | Fix |
| CVE-2024-42380 | SAP NetWeaver Application Server for ABAP and ABAP Platform missing authorization | 4.3CNA v3.1 | 0.3% | 2024-09-10 | Fix |
| CVE-2024-42378 | Cross-site scripting (XSS) in eProcurement on S/4HANA | 6.1CNA v3.1 | 0.3% | 2024-09-10 | Fix |
| CVE-2024-42371 | SAP NetWeaver Application Server for ABAP and ABAP Platform missing authorization | 5.4CNA v3.1 | 0.3% | 2024-09-10 | Fix |
| CVE-2024-42345 | Siemens SINEMA Remote Connect Server session fixation | 5.3CNA v4.0 | 0.3% | 2024-09-10 | Fix |
| CVE-2024-42344 | Siemens SINEMA Remote Connect Client sensitive information in log files | 4.8CNA v4.0 | 0.2% | 2024-09-10 | Fix |
| CVE-2024-41729 | Information disclosure vulnerability in the SAP NetWeaver BW (BEx Analyzer) | 4.3CNA v3.1 | 0.3% | 2024-09-10 | Fix |
| CVE-2024-41728 | Missing authorization check in SAP NetWeaver Application Server for ABAP and ABAP Platform | 2.7CNA v3.1 | 0.3% | 2024-09-10 | Fix |
| CVE-2024-41171 | Siemens SINUMERIK 828D V4 incorrect permission assignment | 9.3CNA v4.0 | 0.1% | 2024-09-10 | Fix |
| CVE-2024-41170 | Siemens Tecnomatix Plant Simulation V2302 stack-based buffer overflow | 7.3CNA v4.0 | 0.2% | 2024-09-10 | Fix |
| CVE-2024-40754 | Samsung Open Source Escargot heap-based buffer overflow | 6.9CNA v4.0 | 0.5% | 2024-09-10 | |
| CVE-2024-39583 | Dell PowerScale InsightIQ weak cryptographic algorithm | 8.1CNA v3.1 | 0.3% | 2024-09-10 | Fix |
| CVE-2024-39582 | Dell PowerScale InsightIQ hard-coded credentials | 2.3CNA v3.1 | 0.1% | 2024-09-10 | Fix |
| CVE-2024-39581 | Dell PowerScale InsightIQ files accessible to external parties | 7.3CNA v3.1 | 0.4% | 2024-09-10 | Fix |
| CVE-2024-39580 | Dell PowerScale InsightIQ improper access control | 6.7CNA v3.1 | 0.1% | 2024-09-10 | Fix |
| CVE-2024-39574 | Dell PowerScale InsightIQ improper privilege management | 6.7CNA v3.1 | 0.1% | 2024-09-10 | Fix |
| CVE-2024-38270 | Zyxel GS1900-10HP firmware insufficient entropy | 5.3CNA v3.1 | 0.2% | 2024-09-10 | Fix |
| CVE-2024-38263 | Microsoft Windows Remote Desktop Licensing service remote code execution | 7.5CNA v3.1 | 1.2% | 2024-09-10 | Fix |
| CVE-2024-38260 | Microsoft Windows Remote Desktop Licensing service remote code execution | 8.8CNA v3.1 | 1.6% | 2024-09-10 | Fix |
| CVE-2024-38259 | Microsoft Management console remote code execution | 8.8CNA v3.1 | 1.9% | 2024-09-10 | Fix |
| CVE-2024-38258 | Microsoft Windows Remote Desktop Licensing service information disclosure | 6.5CNA v3.1 | 4.7% | 2024-09-10 | Fix |
| CVE-2024-38257 | Microsoft AllJoyn API information disclosure | 7.5CNA v3.1 | 4.5% | 2024-09-10 | Fix |
| CVE-2024-38256 | Microsoft Windows Kernel-Mode driver information disclosure | 5.5CNA v3.1 | 0.7% | 2024-09-10 | Fix |
| CVE-2024-38254 | Microsoft Windows Authentication information disclosure | 5.5CNA v3.1 | 0.7% | 2024-09-10 | Fix |
| CVE-2024-38253 | Microsoft Windows Win32 Kernel subsystem elevation of privilege | 7.8CNA v3.1 | 0.6% | 2024-09-10 | Fix |
| CVE-2024-38252 | Microsoft Windows Win32 Kernel subsystem elevation of privilege | 7.8CNA v3.1 | 0.6% | 2024-09-10 | Fix |
| CVE-2024-38250 | Windows Graphics component elevation of privilege | 7.8CNA v3.1 | 0.7% | 2024-09-10 | Fix |
| CVE-2024-38249 | Microsoft Windows Graphics component elevation of privilege | 7.8CNA v3.1 | 1.0% | 2024-09-10 | Fix |
| CVE-2024-38248 | Microsoft Windows Storage elevation of privilege | 7.0CNA v3.1 | 0.6% | 2024-09-10 | Fix |
| CVE-2024-38247 | Microsoft Windows Graphics component elevation of privilege | 7.8CNA v3.1 | 0.7% | 2024-09-10 | Fix |
| CVE-2024-38246 | Microsoft Windows win32k elevation of privilege | 7.0CNA v3.1 | 0.6% | 2024-09-10 | Fix |
| CVE-2024-38245 | Microsoft Windows kernel Streaming service driver elevation of privilege | 7.8CNA v3.1 | 0.9% | 2024-09-10 | Fix |
| CVE-2024-38244 | Microsoft Windows kernel Streaming service driver elevation of privilege | 7.8CNA v3.1 | 6.2% | 2024-09-10 | Fix |
| CVE-2024-38243 | Microsoft Windows kernel Streaming service driver elevation of privilege | 7.8CNA v3.1 | 0.8% | 2024-09-10 | Fix |
| CVE-2024-38242 | Microsoft Windows kernel Streaming service driver elevation of privilege | 7.8CNA v3.1 | 3.4% | 2024-09-10 | Fix |
| CVE-2024-38241 | Microsoft Windows kernel Streaming service driver elevation of privilege | 7.8CNA v3.1 | 6.0% | 2024-09-10 | Fix |
| CVE-2024-38240 | Microsoft Windows Remote Access Connection Manager elevation of privilege | 8.1CNA v3.1 | 1.5% | 2024-09-10 | Fix |
| CVE-2024-38239 | Microsoft Windows Kerberos elevation of privilege | 7.2CNA v3.1 | 1.7% | 2024-09-10 | Fix |
| CVE-2024-38238 | Microsoft Windows kernel Streaming service driver elevation of privilege | 7.8CNA v3.1 | 0.8% | 2024-09-10 | Fix |
| CVE-2024-38237 | Microsoft Windows kernel Streaming WOW Thunk service driver elevation of privilege | 7.8CNA v3.1 | 3.4% | 2024-09-10 | Fix |
| CVE-2024-38236 | Microsoft Windows DHCP server service denial of service | 7.5CNA v3.1 | 2.3% | 2024-09-10 | Fix |
| CVE-2024-38235 | Microsoft Windows Hyper-V denial of service | 6.5CNA v3.1 | 0.7% | 2024-09-10 | Fix |
| CVE-2024-38234 | Microsoft Windows Networking denial of service | 6.5CNA v3.1 | 0.9% | 2024-09-10 | Fix |
| CVE-2024-38233 | Microsoft Windows Networking denial of service | 7.5CNA v3.1 | 2.4% | 2024-09-10 | Fix |
| CVE-2024-38232 | Microsoft Windows Networking denial of service | 7.5CNA v3.1 | 2.3% | 2024-09-10 | Fix |
| CVE-2024-38231 | Microsoft Windows Remote Desktop Licensing service denial of service | 6.5CNA v3.1 | 1.9% | 2024-09-10 | Fix |
| CVE-2024-38230 | Microsoft Windows Standards-Based Storage Management service denial of service | 6.5CNA v3.1 | 2.4% | 2024-09-10 | Fix |
| CVE-2024-38228 | Microsoft SharePoint server remote code execution | 7.2CNA v3.1 | 4.2% | 2024-09-10 | Fix |
| CVE-2024-38227 | Microsoft SharePoint server remote code execution | 7.2CNA v3.1 | 8.2% | 2024-09-10 | Fix |
| CVE-2024-38226 | Microsoft Publisher protection mechanism failure | 7.3CNA v3.1 | 2.7% | 2024-09-10 | KEVFix |
| CVE-2024-38225 | Microsoft Dynamics 365 Business Central elevation of privilege | 8.8CNA v3.1 | 1.4% | 2024-09-10 | Fix |
| CVE-2024-38220 | Microsoft Azure Stack Hub elevation of privilege | 9.0CNA v3.1 | 1.0% | 2024-09-10 | Fix |
| CVE-2024-38217 | Microsoft Windows Mark of the Web (MOTW) protection mechanism failure | 5.4CNA v3.1 | 10.0% | 2024-09-10 | KEVFix |
| CVE-2024-38216 | Microsoft Azure Stack Hub elevation of privilege | 8.2CNA v3.1 | 0.9% | 2024-09-10 | Fix |
| CVE-2024-38194 | Microsoft Azure Web Apps elevation of privilege | 8.4CNA v3.1 | 1.3% | 2024-09-10 | Fix |
| CVE-2024-38188 | Microsoft Azure Network Watcher VM Agent elevation of privilege | 7.1CNA v3.1 | 0.6% | 2024-09-10 | Fix |
| CVE-2024-38119 | Microsoft Windows Network Address Translation (NAT) remote code execution | 7.5CNA v3.1 | 0.8% | 2024-09-10 | Fix |
| CVE-2024-38046 | Microsoft Windows PowerShell elevation of privilege | 7.8CNA v3.1 | 0.7% | 2024-09-10 | Fix |
| CVE-2024-38045 | Microsoft Windows TCP/IP remote code execution | 8.1CNA v3.1 | 1.4% | 2024-09-10 | Fix |
| CVE-2024-38018 | Microsoft SharePoint server remote code execution | 8.8CNA v3.1 | 51.2% | 2024-09-10 | Emerging ThreatsFix |
| CVE-2024-38014 | Microsoft Windows Installer improper privilege management | 7.8CNA v3.1 | 6.3% | 2024-09-10 | KEVFix |
| CVE-2024-37995 | Siemens SIMATIC Reader RF610R CMIIT improper exception handling | 2.1CNA v4.0 | 0.3% | 2024-09-10 | Fix |
| CVE-2024-37994 | Siemens SIMATIC Reader RF610R CMIIT hidden functionality | 5.3CNA v4.0 | 0.3% | 2024-09-10 | Fix |
| CVE-2024-37993 | Siemens SIMATIC Reader RF610R CMIIT improper access control | 6.9CNA v4.0 | 0.4% | 2024-09-10 | Fix |
| CVE-2024-37992 | Siemens SIMATIC Reader RF610R CMIIT improper exception handling | 5.9CNA v4.0 | 0.4% | 2024-09-10 | Fix |
| CVE-2024-37991 | Siemens SIMATIC Reader RF610R CMIIT information disclosure | 6.0CNA v4.0 | 0.3% | 2024-09-10 | Fix |
| CVE-2024-37990 | Siemens SIMATIC Reader RF610R CMIIT hidden functionality | 7.0CNA v4.0 | 0.4% | 2024-09-10 | Fix |
| CVE-2024-37980 | Microsoft SQL server elevation of privilege | 8.8CNA v3.1 | 1.4% | 2024-09-10 | Fix |
| CVE-2024-37966 | Microsoft SQL Server Native Scoring information disclosure | 7.1CNA v3.1 | 2.2% | 2024-09-10 | Fix |
| CVE-2024-37965 | Microsoft SQL server elevation of privilege | 8.8CNA v3.1 | 1.7% | 2024-09-10 | Fix |
| CVE-2024-37728 | Xi'an Daxi Information Technology Co arbitrary file read | 7.5CISA ADP v3.1 | 1.9% | 2024-09-10 | Nuclei |
| CVE-2024-37342 | Microsoft SQL Server Native Scoring information disclosure | 7.1CNA v3.1 | 1.7% | 2024-09-10 | Fix |
| CVE-2024-37341 | Microsoft SQL server elevation of privilege | 8.8CNA v3.1 | 1.4% | 2024-09-10 | Fix |
| CVE-2024-37340 | Microsoft SQL Server Native Scoring remote code execution | 8.8CNA v3.1 | 1.6% | 2024-09-10 | Fix |
| CVE-2024-37339 | Microsoft SQL Server Native Scoring remote code execution | 8.8CNA v3.1 | 1.6% | 2024-09-10 | Fix |
| CVE-2024-37338 | Microsoft SQL Server Native Scoring remote code execution | 8.8CNA v3.1 | 1.6% | 2024-09-10 | Fix |
| CVE-2024-37337 | Microsoft SQL Server Native Scoring information disclosure | 7.1CNA v3.1 | 1.7% | 2024-09-10 | Fix |
| CVE-2024-37335 | Microsoft SQL Server Native Scoring remote code execution | 8.8CNA v3.1 | 1.6% | 2024-09-10 | Fix |
| CVE-2024-36511 | Fortinet FortiADC improperly implemented security check | 3.4CNA v3.1 | 0.4% | 2024-09-10 | Fix |
| CVE-2024-35783 | Siemens SIMATIC BATCH execution with unnecessary privileges | 9.4CNA v4.0 | 0.6% | 2024-09-10 | Fix |
| CVE-2024-35282 | Fortinet FortiClientiOS cleartext storage of sensitive information in memory | 3.9CNA v3.1 | 0.2% | 2024-09-10 | Fix |
| CVE-2024-34831 | gibbonedu gibbon cross-site scripting | 6.1CISA ADP v3.1 | 0.8% | 2024-09-10 | |
| CVE-2024-33698 | Siemens Opcenter Quality heap-based buffer overflow | 9.3CNA v4.0 | 1.1% | 2024-09-10 | Fix |
| CVE-2024-33508 | Fortinet FortiClientEMS command injection | 6.9CNA v3.1 | 1.3% | 2024-09-10 | Fix |
| CVE-2024-32006 | Siemens SINEMA Remote Connect Client insufficient session expiration | 5.3CNA v4.0 | 0.3% | 2024-09-10 | Fix |
| CVE-2024-31960 | Samsung Exynos 1480 use-after-free | 7.8v3.1 | 0.2% | 2024-09-10 | Fix |
| CVE-2024-31490 | Fortinet FortiSandbox information disclosure | 4.2CNA v3.1 | 0.5% | 2024-09-10 | Fix |
| CVE-2024-31489 | Fortinet FortiClientMac improper certificate validation | 6.4CNA v3.1 | 0.4% | 2024-09-10 | Fix |
| CVE-2024-30073 | Microsoft Windows Security Zone Mapping security feature bypass | 7.8CNA v3.1 | 0.9% | 2024-09-10 | Fix |
| CVE-2024-27257 | IBM OpenPages information disclosure | 4.3CNA v3.1 | 0.3% | 2024-09-10 | Fix |
| CVE-2024-26191 | Microsoft SQL Server Native Scoring remote code execution | 8.8CNA v3.1 | 1.6% | 2024-09-10 | Fix |
| CVE-2024-26186 | Microsoft SQL Server Native Scoring remote code execution | 8.8CNA v3.1 | 1.6% | 2024-09-10 | Fix |
| CVE-2024-25074 | Samsung Exynos Modem 5123 release of an invalid pointer | 5.9CNA v3.1 | 0.4% | 2024-09-10 | Fix |
| CVE-2024-25073 | Samsung Exynos Modem 5123 null pointer dereference | 5.9CNA v3.1 | 0.4% | 2024-09-10 | Fix |
| CVE-2024-23185 | Open-Xchange OX Dovecot Pro resource exhaustion | 7.5CNA v3.1 | 1.3% | 2024-09-10 | Fix |
| CVE-2024-23184 | Open-Xchange OX Dovecot Pro resource exhaustion | 5.0CNA v3.1 | 0.8% | 2024-09-10 | Fix |
| CVE-2024-21753 | Fortinet FortiClientEMS path traversal | 5.5CNA v3.1 | 0.7% | 2024-09-10 | Fix |
| CVE-2024-21528 | node-gettext vulnerable to prototype pollution | 5.9CNA v3.1 | 0.6% | 2024-09-10 | Fix |
| CVE-2024-21416 | Microsoft Windows TCP/IP remote code execution | 8.1CNA v3.1 | 1.4% | 2024-09-10 | Fix |
| CVE-2024-8655 | Mercury MNVR816 web-static file access | 6.9CNA v4.0 | 0.5% | 2024-09-10 | |
| CVE-2024-8654 | MongoDB Server may access non-initialized region of memory leading to unexpected behaviour | 5.0CNA v3.1 | 0.4% | 2024-09-10 | Fix |
| CVE-2024-8645 | Access of uninitialized pointer in Wireshark | 5.5CNA v3.1 | 0.2% | 2024-09-10 | Fix |
| CVE-2024-8543 | Slider comparison image before and after WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.3% | 2024-09-10 | |
| CVE-2024-8504 | VICIdial authenticated remote code execution | 8.8CISA ADP v3.1 | 76.2% | 2024-09-10 | MetasploitExploit code |
| CVE-2024-8503 | VICIdial unauthenticated SQL injection | 9.8CISA ADP v3.1 | 79.3% | 2024-09-10 | Reported exploitedNucleiExploit code |
| CVE-2024-8478 | Affiliate Super Assistent WordPress plugin unauthenticated arbitrary shortcode execution | 7.3CNA v3.1 | 0.6% | 2024-09-10 | Fix |
| CVE-2024-8443 | OpenSC libopensc: Heap buffer overflow in openpgp driver when generating key | 2.9NVD v3.1 | 0.3% | 2024-09-10 | Fix |
| CVE-2024-8441 | Ivanti Endpoint Manager agent uncontrolled search path | 6.7CNA v3.1 | 0.4% | 2024-09-10 | Fix |
| CVE-2024-8369 | EventPrime WordPress plugin unauthorized access | 5.3CNA v3.1 | 0.3% | 2024-09-10 | Fix |
| CVE-2024-8322 | Ivanti Endpoint Manager Patch Management improper authentication | 4.3CNA v3.1 | 1.1% | 2024-09-10 | Fix |
| CVE-2024-8321 | Ivanti Endpoint Manager Network Isolation missing authentication | 5.8CNA v3.1 | 1.8% | 2024-09-10 | Fix |
| CVE-2024-8320 | Ivanti Endpoint Manager Network Isolation missing authentication | 5.3CNA v3.1 | 1.2% | 2024-09-10 | Fix |
| CVE-2024-8268 | Frontend Dashboard WordPress plugin authenticated (Subscriber+) arbitrary function Call | 8.8CNA v3.1 | 0.7% | 2024-09-10 | Fix |
| CVE-2024-8258 | Insecure Electron Fuses in Logitech Options Plus allowing arbitrary code execution on macOS | 2.0CNA v4.0 | 0.4% | 2024-09-10 | Fix |
| CVE-2024-8241 | Nova Blocks by Pixelgrade WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.4% | 2024-09-10 | Fix |
| CVE-2024-8232 | iniNet Solutions SpiderControl SCADA Web Server unrestricted upload of file with dangerous type | 8.7CNA v4.0 | 13.1% | 2024-09-10 | Exploit codeFix |
| CVE-2024-8191 | Ivanti Endpoint Manager management console SQL injection | 7.8CNA v3.1 | 20.3% | 2024-09-10 | Fix |
| CVE-2024-8190 | Ivanti Cloud Services Appliance OS command injection | 7.2CNA v3.1 | 88.5% | 2024-09-10 | KEVEmerging ThreatsExploit codeKCVFix |
| CVE-2024-8012 | Ivanti Workspace Control message broker service authentication bypass | 7.8CNA v3.1 | 0.3% | 2024-09-10 | Fix |
| CVE-2024-7955 | Starbox WordPress plugin Admin+ stored XSS | 4.8CISA ADP v3.1 | 0.4% | 2024-09-10 | Fix |
| CVE-2024-7891 | Floating Contact Button WordPress plugin Admin+ stored XSS | 4.8CISA ADP v3.1 | 0.3% | 2024-09-10 | Fix |
| CVE-2024-7784 | Axis Communications AXIS OS stack-based buffer overflow | 6.1CNA v3.1 | 0.2% | 2024-09-10 | Fix |
| CVE-2024-7770 | Bit Apps File Manager file upload function unrestricted file upload | 8.8CNA v3.1 | 1.1% | 2024-09-10 | Fix |
| CVE-2024-7734 | Phoenix Contact: Multiple mGuard devices are vulnerable to a drain of open file descriptors | 5.3CNA v3.1 | 0.5% | 2024-09-10 | Fix |
| CVE-2024-7699 | Phoenix Contact: OS command execution in MGUARD products | 8.8CNA v3.1 | 0.8% | 2024-09-10 | Fix |
| CVE-2024-7698 | Phoenix Contact: Access to CSRF tokens of higher privileged users in MGUARD products | 5.7CNA v3.1 | 0.4% | 2024-09-10 | Fix |
| CVE-2024-7655 | Community by PeepSo WordPress plugin stored cross-site scripting | 4.8v3.1 | 0.3% | 2024-09-10 | Fix |
| CVE-2024-7618 | Community by PeepSo WordPress plugin stored cross-site scripting | 4.8v3.1 | 0.3% | 2024-09-10 | Fix |
| CVE-2024-6979 | Axis Communications AXIS OS incorrect authorization | 6.8CNA v3.1 | 0.3% | 2024-09-10 | Fix |
| CVE-2024-6876 | oscat.de OSCAT Basic Library out-of-bounds read in OSCAT-Library | 4.4v3.1 | 0.2% | 2024-09-10 | Fix |
| CVE-2024-6596 | ENDRESS+Hauser: Multiple products are vulnerable to code injection | 9.8CNA v3.1 | 0.8% | 2024-09-10 | |
| CVE-2024-6509 | Axis Communications AXIS OS resource exhaustion | 6.5CNA v3.1 | 0.4% | 2024-09-10 | Fix |
| CVE-2024-6342 | Zyxel NAS326 firmware OS command injection | 9.8CNA v3.1 | 2.1% | 2024-09-10 | Fix |
| CVE-2024-6282 | Master Addons WordPress plugin stored cross-site scripting | 5.4CNA v3.1 | 0.3% | 2024-09-10 | Fix |
| CVE-2024-6173 | Axis Communications AXIS OS improper syntax validation | 6.5CNA v3.1 | 0.4% | 2024-09-10 | |
| CVE-2024-0067 | Axis Communications AXIS OS path traversal | 4.3CNA v3.1 | 0.4% | 2024-09-10 | |
| CVE-2024-45625 | wpmudev Forminator cross-site scripting | 6.1v3.1 | 0.4% | 2024-09-09 | Fix |
| CVE-2024-45411 | Twig has a possible sandbox bypass | 8.6CNA v3.1 | 0.8% | 2024-09-09 | Fix |
| CVE-2024-45406 | Craft CMS stored XSS in breadcrumb list and title fields | 5.5CNA v3.1 | 0.4% | 2024-09-09 | Fix |
| CVE-2024-45296 | path-to-regexp outputs backtracking regular expressions | 7.5CNA v3.1 | 0.9% | 2024-09-09 | Fix |
| CVE-2024-45203 | istyle "@cosme" App handler for custom URL scheme issue improper authorization | 4.3v3.1 | 0.3% | 2024-09-09 | Fix |
| CVE-2024-45041 | External Secrets Operator vulnerable to privilege escalation | 8.3CNA v3.1 | 0.6% | 2024-09-09 | Fix |
| CVE-2024-44902 | ThinkPHP deserialization | 9.8NVD v3.1 | 4.2% | 2024-09-09 | Exploit code |
| CVE-2024-44849 | Qualitor unrestricted file upload | 9.8CISA ADP v3.1 | 46.3% | 2024-09-09 | NucleiExploit codeFix |
| CVE-2024-44725 | AutoCMS SQL injection | 7.2CISA ADP v3.1 | 0.5% | 2024-09-09 | |
| CVE-2024-44724 | AutoCMS code injection | 7.2CISA ADP v3.1 | 0.6% | 2024-09-09 | KCV |
| CVE-2024-44721 | Seacms server-side request forgery | 9.8CISA ADP v3.1 | 0.6% | 2024-09-09 | |
| CVE-2024-44720 | Seacms path traversal | 7.5CISA ADP v3.1 | 0.7% | 2024-09-09 | |
| CVE-2024-44411 | D-Link DI-8300 code injection | 9.8CISA ADP v3.1 | 3.7% | 2024-09-09 | |
| CVE-2024-44410 | D-Link DI-8300 command injection | 9.8v3.1 | 3.2% | 2024-09-09 | |
| CVE-2024-44375 | D-Link DI-8100 out-of-bounds write | 7.5v3.1 | 0.7% | 2024-09-09 | |
| CVE-2024-44335 | D-Link DI-7003G v19.12.24A1, DI-7003GV2 v24.04.18D1, DI-7100G+V2 v24.04.18D1, DI-7100GV2 v24.04.18D1, DI-7200GV2 v24.04.18E1, DI-7300G+V2 v24.04.18D1, and DI-7400G+V2 v24.04.18D1 are vulnerable to Remote Command Execution (RCE) via version_upgrade.asp. | 8.8CISA ADP v3.1 | 12.4% | 2024-09-09 | |
| CVE-2024-44334 | D-Link DI-7003GV2 v24.04.18D1, DI-7100G+V2 v24.04.18D1, DI-7100GV2 v24.04.18D1, DI-7200GV2 v24.04.18E1, DI-7300G+V2 v24.04.18D1, and DI-7400G+V2 v24.04.18D1 are vulnerable to Remote Command Execution due to insufficient parameter filtering in the CGI handling function of upgrade_filter.asp. | 8.8CISA ADP v3.1 | 31.8% | 2024-09-09 | |
| CVE-2024-44333 | D-Link DI-7003GV2 v24.04.18D1, DI-7100G+V2 v24.04.18D1, DI-7100GV2 v24.04.18D1, DI-7200GV2 v24.04.18E1, DI-7300G+V2 v24.04.18D1, and DI-7400G+V2 v24.04.18D1 are vulnerable to Remote Command Execution. An attacker can achieve arbitrary command execution by sending a carefully crafted malicious string | 8.8CISA ADP v3.1 | 12.4% | 2024-09-09 | |
| CVE-2024-44085 | OnlyOffice cross-site scripting | 6.1CISA ADP v3.1 | 0.5% | 2024-09-09 | |
| CVE-2024-42759 | Ellevo privilege escalation | 6.3CISA ADP v3.1 | 0.4% | 2024-09-09 | |
| CVE-2024-42500 | HPE HP-UX ONCplus HPE has identified a denial of service | 9.3CISA ADP v3.1 | 0.4% | 2024-09-09 | |
| CVE-2024-40643 | Joplin has a parsing error leading to cross-site scripting (XSS) | 9.7CNA v3.1 | 0.8% | 2024-09-09 | Fix |
| CVE-2024-37288 | Elastic Kibana deserialization of untrusted data | 9.9CNA v3.1 | 1.0% | 2024-09-09 | Fix |
| CVE-2024-27387 | Samsung Exynos 1280 out-of-bounds write | 7.8v3.1 | 0.2% | 2024-09-09 | Fix |
| CVE-2024-27383 | Samsung Exynos 1280 out-of-bounds write | 7.8v3.1 | 0.2% | 2024-09-09 | Fix |
| CVE-2024-27368 | Samsung Exynos 1080 out-of-bounds read | 5.5v3.1 | 0.2% | 2024-09-09 | Fix |
| CVE-2024-27367 | Samsung Exynos 1080 out-of-bounds read | 5.5v3.1 | 0.2% | 2024-09-09 | Fix |
| CVE-2024-27366 | Samsung Exynos 1080 out-of-bounds read | 5.5v3.1 | 0.2% | 2024-09-09 | Fix |
| CVE-2024-27365 | Samsung Exynos 1080 out-of-bounds write | 5.5v3.1 | 0.2% | 2024-09-09 | Fix |
| CVE-2024-27364 | Samsung Exynos 1080 out-of-bounds read | 5.5v3.1 | 0.2% | 2024-09-09 | Fix |
| CVE-2024-24510 | Alinto SOGo cross-site scripting | 6.1CISA ADP v3.1 | 0.5% | 2024-09-09 | Fix |
| CVE-2024-8611 | itsourcecode Tailoring Management System ssms.php SQL injection | 9.8v3.1 | 0.7% | 2024-09-09 | |
| CVE-2024-8610 | SourceCodester Best House Rental Management System New Tenant page index.php cross-site scripting | 5.4v3.1 | 0.5% | 2024-09-09 | |
| CVE-2024-8605 | code-projects Inventory Management Registration form registration.php cross-site scripting | 5.4v3.1 | 0.6% | 2024-09-09 | |
| CVE-2024-8604 | SourceCodester Online Food Ordering System Create an Account page index.php cross-site scripting | 6.1v3.1 | 0.6% | 2024-09-09 | |
| CVE-2024-8601 | Improper access control vulnerability in TechExcel Back Office Software | 6.5NVD v3.1 | 0.5% | 2024-09-09 | Fix |
| CVE-2024-8586 | Uniong WebITR open redirect | 6.1CNA v3.1 | 0.4% | 2024-09-09 | Fix |
| CVE-2024-8585 | Learning Digital Orca HCM arbitrary file download | 6.5CNA v3.1 | 0.7% | 2024-09-09 | Fix |
| CVE-2024-8584 | Learning Digital Orca HCM missing authentication | 9.8CNA v3.1 | 0.7% | 2024-09-09 | Fix |
| CVE-2024-8373 | Google AngularJS allows attackers to bypass common image source restrictions | 4.3NVD v3.1 | 0.6% | 2024-09-09 | Fix |
| CVE-2024-8372 | Google AngularJS improper sanitization in srcset attribute | 4.3NVD v3.1 | 0.6% | 2024-09-09 | Fix |
| CVE-2024-8042 | Rapid7 Insight Platform Unauthorized Empty Group Creation | 2.4CNA v3.1 | 0.2% | 2024-09-09 | Fix |
| CVE-2024-7918 | Pocket Widget WordPress plugin Admin+ stored XSS | 4.8NVD v3.1 | 0.4% | 2024-09-09 | |
| CVE-2024-7689 | Snapshot Backup WordPress plugin stored XSS via CSRF | 4.3NVD v3.1 | 0.2% | 2024-09-09 | |
| CVE-2024-7688 | AZIndex WordPress plugin Index deletion via CSRF | 6.5NVD v3.1 | 0.2% | 2024-09-09 | |
| CVE-2024-7687 | AZIndex WordPress plugin stored XSS via CSRF | 4.3NVD v3.1 | 0.2% | 2024-09-09 | |
| CVE-2024-7341 | Keycloak has session fixation in Elytron SAML adapters | 7.1CNA v3.1 | 0.8% | 2024-09-09 | Fix |
| CVE-2024-7318 | Red Hat Build of Keycloak keycloaks's One Time Passcode is valid longer than expiration timeSeverity | 4.8CNA v3.1 | 0.4% | 2024-09-09 | Fix |
| CVE-2024-7260 | Red Hat Build of Keycloak keycloak-core: Open redirect on account page | 6.1CNA v3.1 | 0.6% | 2024-09-09 | Fix |
| CVE-2024-7015 | Improper authentication in Profelis Informatics and Consulting's PassBOX | 9.8v3.1 | 0.4% | 2024-09-09 | Fix |
| CVE-2024-6910 | EventON WordPress plugin Admin+ stored XSS | 4.8NVD v3.1 | 0.4% | 2024-09-09 | Fix |
| CVE-2024-6796 | Baxter Connex Health Portal improper access control | 8.2CNA v3.1 | 0.4% | 2024-09-09 | Fix |
| CVE-2024-6795 | Baxter Connex Health Portal SQL injection | 10.0CNA v3.1 | 0.6% | 2024-09-09 | Fix |
| CVE-2024-6572 | Checkmk SFTP service check vulnerability | 6.3CNA v4.0 | 0.3% | 2024-09-09 | Fix |
| CVE-2024-5561 | Popup Maker WordPress plugin Admin+ stored XSS | 4.8NVD v3.1 | 0.5% | 2024-09-09 | Fix |
| CVE-2024-42343 | Loway observable response discrepancy | 7.5v3.1 | 0.3% | 2024-09-08 | |
| CVE-2024-42342 | Loway inconsistent interpretation of HTTP requests (HTTP Request/Response Smuggling) | 4.3v3.1 | 0.3% | 2024-09-08 | |
| CVE-2024-42341 | Loway URL redirection to untrusted site (open redirect) | 6.1v3.1 | 0.2% | 2024-09-08 | |
| CVE-2024-8583 | SourceCodester Online Bank Management System Feedback mfeedback.php cross-site scripting | 5.4v3.1 | 0.4% | 2024-09-08 | |
| CVE-2024-8582 | SourceCodester Food Ordering Management System index.php cross-site scripting | 6.1v3.1 | 0.5% | 2024-09-08 | |
| CVE-2024-8580 | TOTOLINK AC1200 T8 shadow.sample hard-coded password | 8.1NVD v3.1 | 1.3% | 2024-09-08 | |
| CVE-2024-8579 | TOTOLINK AC1200 T8 cstecgi.cgi setWiFiRepeaterCfg buffer overflow | 9.8v3.1 | 1.3% | 2024-09-08 | |
| CVE-2024-8578 | TOTOLINK AC1200 T8 cstecgi.cgi setWiFiMeshName buffer overflow | 8.8v3.1 | 1.1% | 2024-09-08 | |
| CVE-2024-8577 | TOTOLINK AC1200 T8/AC1200 T10 cstecgi.cgi setStaticDhcpRules buffer overflow | 8.8v3.1 | 1.1% | 2024-09-08 | |
| CVE-2024-8576 | TOTOLINK AC1200 T8/AC1200 T10 cstecgi.cgi setIpPortFilterRules buffer overflow | 8.8v3.1 | 1.1% | 2024-09-08 | |
| CVE-2024-8575 | TOTOLINK AC1200 T8 cstecgi.cgi setWiFiScheduleCfg buffer overflow | 8.8v3.1 | 1.1% | 2024-09-08 | |
| CVE-2024-8574 | TOTOLINK AC1200 T8 cstecgi.cgi setParentalRules os command injection | 8.8v3.1 | 3.1% | 2024-09-08 | |
| CVE-2024-8573 | TOTOLINK AC1200 T8/AC1200 T10 cstecgi.cgi setParentalRules buffer overflow | 8.8v3.1 | 1.4% | 2024-09-08 | Emerging Threats |
| CVE-2024-8572 | Gouniverse GoLang CMS FrontendHandler.go PageRenderHtmlByAlias cross-site scripting | 6.1v3.1 | 0.4% | 2024-09-08 | Fix |
| CVE-2024-8571 | erjemin roll_cms views.py information exposure | 5.3v3.1 | 0.4% | 2024-09-08 | |
| CVE-2024-8570 | itsourcecode Tailoring Management System inccatadd.php SQL injection | 9.8v3.1 | 0.6% | 2024-09-08 | |
| CVE-2024-8569 | code-projects Hospital Management System user-login.php SQL injection | 9.8v3.1 | 0.8% | 2024-09-08 | |
| CVE-2024-8568 | Mini-Tmall 1 rewardMapper.select SQL injection | 9.8v3.1 | 0.5% | 2024-09-08 | |
| CVE-2024-8567 | itsourcecode Payroll Management System ajax.php SQL injection | 9.8v3.1 | 0.7% | 2024-09-08 | |
| CVE-2024-8566 | code-projects Online Shop Store settings.php cross-site scripting | 6.1v3.1 | 0.4% | 2024-09-08 | |
| CVE-2024-6928 | Opti Marketing WordPress plugin unauthenticated SQLi | 9.8NVD v3.1 | 3.3% | 2024-09-08 | NucleiFix |
| CVE-2024-6925 | TrueBooker WordPress plugin settings update via CSRF | 4.3NVD v3.1 | 0.2% | 2024-09-08 | Fix |
| CVE-2024-6924 | TrueBooker WordPress plugin Multiple unauthenticated SQLi | 9.8NVD v3.1 | 3.3% | 2024-09-08 | NucleiFix |
| CVE-2024-6859 | WP MultiTasking WordPress plugin reflected XSS via shortcode | 5.4NVD v3.1 | 0.2% | 2024-09-08 | |
| CVE-2024-6856 | WP MultiTasking WordPress plugin SMTP settings update via CSRF | 4.3NVD v3.1 | 0.2% | 2024-09-08 | |
| CVE-2024-6855 | WP MultiTasking WordPress plugin Exit Popup update via CSRF | 4.3NVD v3.1 | 0.2% | 2024-09-08 | |
| CVE-2024-6853 | WP MultiTasking WordPress plugin Welcome Popup update via CSRF | 4.3NVD v3.1 | 0.2% | 2024-09-08 | |
| CVE-2024-6852 | WP MultiTasking WordPress plugin settings update via CSRF | 4.3NVD v3.1 | 0.2% | 2024-09-08 | |
| CVE-2024-45498 | Apache Airflow: Command injection in an example DAG | 8.8CISA ADP v3.1 | 1.2% | 2024-09-07 | Fix |
| CVE-2024-45034 | Apache Airflow: Authenticated DAG authors could execute code on scheduler nodes | 8.8CISA ADP v3.1 | 1.7% | 2024-09-07 | Fix |
| CVE-2024-42024 | Veeam One execution with unnecessary privileges | 8.8NVD v3.1 | 1.3% | 2024-09-07 | Fix |
| CVE-2024-42023 | Veeam One improper access control | 8.8v3.1 | 0.5% | 2024-09-07 | Fix |
| CVE-2024-42022 | Veeam One incorrect permission assignment | 5.3NVD v3.1 | 0.3% | 2024-09-07 | Fix |
| CVE-2024-42021 | Veeam One improper access control | 6.5NVD v3.1 | 0.3% | 2024-09-07 | Fix |
| CVE-2024-42020 | Veeam One Reporter widgets cross-site scripting | 5.4NVD v3.1 | 0.4% | 2024-09-07 | Fix |
| CVE-2024-42019 | Veeam One information disclosure | 8.0NVD v3.1 | 0.5% | 2024-09-07 | Fix |
| CVE-2024-40718 | Veeam Nutanix AHV server-side request forgery | 8.8CNA v3.0 | 0.5% | 2024-09-07 | Fix |
| CVE-2024-40714 | Veeam Backup and Recovery TLS improper certificate validation | 8.3v3.1 | 0.4% | 2024-09-07 | Fix |
| CVE-2024-40713 | Veeam Backup and Recovery improper authentication | 7.8v3.1 | 0.3% | 2024-09-07 | Fix |
| CVE-2024-40712 | Veeam Backup and Recovery path traversal | 7.8v3.1 | 0.3% | 2024-09-07 | Fix |
| CVE-2024-40711 | Veeam Backup and Replication deserialization | 9.8v3.1 | 90.4% | 2024-09-07 | KEVNucleiExploit codeFix |
| CVE-2024-40710 | Veeam Backup and Recovery insufficiently protected credentials | 8.8v3.1 | 1.1% | 2024-09-07 | Fix |
| CVE-2024-40709 | Veeam Backup and Recovery missing authorization | 7.8CNA v3.0 | 0.2% | 2024-09-07 | |
| CVE-2024-40681 | IBM MQ incorrect privilege assignment | 7.5CNA v3.1 | 0.5% | 2024-09-07 | Fix |
| CVE-2024-40680 | IBM MQ denial of service | 5.5CNA v3.1 | 0.2% | 2024-09-07 | Fix |
| CVE-2024-39718 | Veeam Backup and Recovery improper input validation | 8.1v3.1 | 0.8% | 2024-09-07 | Fix |
| CVE-2024-39715 | Veeam Service Provider Console code injection | 8.5CNA v3.0 | 0.9% | 2024-09-07 | |
| CVE-2024-39714 | Veeam Service Provider Console code injection | 9.9CNA v3.0 | 1.2% | 2024-09-07 | |
| CVE-2024-38651 | Veeam Service Provider Console code injection | 8.5CNA v3.0 | 0.9% | 2024-09-07 | |
| CVE-2024-38650 | Veeam Service Provider Console authentication bypass | 9.9CNA v3.0 | 0.9% | 2024-09-07 | |
| CVE-2024-37068 | IBM Maximo Application Suite information disclosure | 5.9CNA v3.1 | 0.2% | 2024-09-07 | Fix |
| CVE-2024-36138 | Node.js Node command injection | 8.1CNA v3.0 | 1.1% | 2024-09-07 | Fix |
| CVE-2024-36137 | Node.js permission model vulnerability | 3.3CNA v3.0 | 0.4% | 2024-09-07 | Fix |
| CVE-2024-8565 | SourceCodesters Clinics Patient Management System print_diseases.php SQL injection | 9.8v3.1 | 0.7% | 2024-09-07 | |
| CVE-2024-8564 | SourceCodester PHP CRUD update.php SQL injection | 8.8v3.1 | 0.4% | 2024-09-07 | |
| CVE-2024-8563 | SourceCodester PHP CRUD update.php cross-site scripting | 6.1v3.1 | 0.4% | 2024-09-07 | |
| CVE-2024-8562 | SourceCodester PHP CRUD Add.php cross-site scripting | 6.1v3.1 | 0.3% | 2024-09-07 | |
| CVE-2024-8561 | SourceCodester PHP CRUD Delete Person delete.php SQL injection | 9.8v3.1 | 0.4% | 2024-09-07 | |
| CVE-2024-8560 | SourceCodester Simple Invoice Generator System save_invoice.php SQL injection | 8.8v3.1 | 0.4% | 2024-09-07 | |
| CVE-2024-8559 | SourceCodester Online Food Menu delete-menu.php SQL injection | 7.2v3.1 | 0.4% | 2024-09-07 | |
| CVE-2024-8558 | SourceCodester Food Ordering Management System improper quantity validation | 4.3v3.1 | 0.6% | 2024-09-07 | |
| CVE-2024-8557 | SourceCodester Food Ordering Management System cancel-order.php SQL injection | 7.5v3.1 | 0.5% | 2024-09-07 | |
| CVE-2024-8555 | SourceCodester Clinics Patient Management System congratulations.php redirect | 6.1v3.1 | 0.6% | 2024-09-07 | |
| CVE-2024-8554 | SourceCodester Clinics Patient Management System users.php cross-site scripting | 5.4v3.1 | 0.5% | 2024-09-07 | |
| CVE-2024-8538 | Big File Uploads WordPress plugin authenticated (Author+) full path disclosure | 4.3CNA v3.1 | 0.6% | 2024-09-07 | Fix |
| CVE-2024-8523 | Lmxcms SQL command execution module admin.php formatData code injection | 7.2v3.1 | 1.0% | 2024-09-07 | |
| CVE-2024-8521 | Wavelog Live QSO qso index cross-site scripting | 6.1v3.1 | 0.6% | 2024-09-07 | Fix |
| CVE-2024-7620 | Customizer Export/Import WordPress plugin arbitrary file upload | 6.6CNA v3.1 | 0.7% | 2024-09-07 | Fix |
| CVE-2024-7112 | Pinpoint Booking System WordPress plugin authenticated (Subscriber+) SQL injection | 6.5NVD v3.1 | 0.5% | 2024-09-07 | Fix |
| CVE-2024-6849 | Preloader Plus WordPress Loading Screen plugin stored cross-site scripting | 5.4v3.1 | 0.3% | 2024-09-07 | |
| CVE-2024-6010 | Cost Calculator Builder PRO WordPress plugin unauthenticated Price manipulation | 5.3CNA v3.1 | 0.4% | 2024-09-07 | Fix |
| CVE-2024-1596 | Ninja Forms File Uploads WordPress plugin unauthenticated stored cross-site scripting | 6.1NVD v3.1 | 0.4% | 2024-09-07 | Fix |
| CVE-2024-45771 | OpenRapid RapidCMS SQL injection | 9.8CISA ADP v3.1 | 0.5% | 2024-09-06 | |
| CVE-2024-45758 | H2O.ai H2O vulnerable to deserialization attacks via a JDBC Connection URL | 9.1CISA ADP v3.1 | 0.9% | 2024-09-06 | |
| CVE-2024-45751 | tgt challenge generation weak random number generator | 5.9CISA ADP v3.1 | 0.6% | 2024-09-06 | Fix |
| CVE-2024-45405 | Byron gitoxide gix-path improperly resolves configuration path reported by Git | 6.0CNA v3.1 | 0.3% | 2024-09-06 | Fix |
| CVE-2024-45400 | CKEditor Open Link plugin vulnerable to cross-site scripting | 6.1CNA v3.1 | 0.3% | 2024-09-06 | Fix |
| CVE-2024-45300 | alfio-event alf.io bypassing promo code limitations with race conditions | 7.5CNA v3.1 | 0.4% | 2024-09-06 | Fix |
| CVE-2024-45299 | Alf.io's preloaded data as json is not escaped correctly | 6.5CNA v3.1 | 0.7% | 2024-09-06 | Fix |
| CVE-2024-45294 | `org.hl7.fhir.core` XXE vulnerability in XSLT transforms | 8.6CNA v3.1 | 1.0% | 2024-09-06 | Fix |
| CVE-2024-45040 | Gnark's commitments to private witnesses in Groth16 as implemented break zero-knowledge property | 5.9CNA v3.1 | 0.4% | 2024-09-06 | Fix |
| CVE-2024-45039 | Gnark's Groth16 commitment extension unsound for more than one commitment | 6.2CNA v3.1 | 0.2% | 2024-09-06 | Fix |
| CVE-2024-44845 | DrayTek Vigor3900 command injection | 8.8v3.1 | 2.0% | 2024-09-06 | |
| CVE-2024-44844 | DrayTek Vigor3900 command injection | 8.8v3.1 | 1.9% | 2024-09-06 | |
| CVE-2024-44839 | OpenRapid RapidCMS SQL injection | 9.8CISA ADP v3.1 | 0.5% | 2024-09-06 | |
| CVE-2024-44838 | OpenRapid RapidCMS SQL injection | 9.8CISA ADP v3.1 | 0.5% | 2024-09-06 | |
| CVE-2024-44837 | Deathbreak Drug component \bean\Manager.java cross-site scripting | 5.4v3.1 | 0.3% | 2024-09-06 | |
| CVE-2024-44739 | oretnom23 Simple Forum Website SQL injection | 8.8CISA ADP v3.1 | 0.5% | 2024-09-06 | |
| CVE-2024-44408 | D-Link DIR-823G missing authorization | 7.5v3.1 | 0.6% | 2024-09-06 | |
| CVE-2024-44402 | D-Link DI-8100G command injection | 9.8v3.1 | 3.1% | 2024-09-06 | Emerging Threats |
| CVE-2024-44401 | D-Link DI-8100G command injection | 9.8v3.1 | 2.9% | 2024-09-06 | |
| CVE-2024-44082 | OpenStack Ironic image processing missing authorization | 4.3CISA ADP v3.1 | 0.5% | 2024-09-06 | Fix |
| CVE-2024-40865 | Apple visionOS Persona virtual keyboard vulnerability | 5.3v3.1 | 0.4% | 2024-09-06 | Fix |
| CVE-2024-39585 | Dell SmartFabric OS10 Software hard-coded password | 7.9CNA v3.1 | 0.3% | 2024-09-06 | Fix |
| CVE-2024-38642 | QNAP QuMagie improper certificate validation | 1.0CNA v4.0 | 0.1% | 2024-09-06 | Fix |
| CVE-2024-38641 | QNAP QTS and QuTS hero command injection | 7.3CNA v4.0 | 0.5% | 2024-09-06 | Fix |
| CVE-2024-38640 | QNAP Download Station cross-site scripting | 7.0CNA v4.0 | 0.2% | 2024-09-06 | Fix |
| CVE-2024-38486 | Dell SmartFabric OS10 Software command injection | 7.5CNA v3.1 | 1.2% | 2024-09-06 | Fix |
| CVE-2024-34158 | Stack exhaustion in Parse in go/build/constraint | 7.5CISA ADP v3.1 | 1.0% | 2024-09-06 | Fix |
| CVE-2024-34156 | Stack exhaustion in Decoder.Decode in encoding/gob | 7.5CISA ADP v3.1 | 1.1% | 2024-09-06 | Fix |
| CVE-2024-34155 | Stack exhaustion in all Parse functions in go/parser | 4.3CISA ADP v3.1 | 0.8% | 2024-09-06 | Fix |
| CVE-2024-32771 | QNAP Systems QTS missing brute-force protection | 2.6CNA v3.1 | 0.2% | 2024-09-06 | Fix |
| CVE-2024-32763 | QNAP QTS and QuTS hero heap-based buffer overflow | 5.3CNA v4.0 | 0.6% | 2024-09-06 | Fix |
| CVE-2024-32762 | QNAP QuLog Center cross-site scripting | 8.2CNA v3.1 | 0.3% | 2024-09-06 | Fix |
| CVE-2024-27126 | QNAP Notes Station 3 cross-site scripting | 6.3CNA v3.1 | 0.3% | 2024-09-06 | Fix |
| CVE-2024-27125 | QNAP Helpdesk cross-site scripting | 3.5CNA v3.1 | 0.2% | 2024-09-06 | Fix |
| CVE-2024-27122 | QNAP Notes Station 3 cross-site scripting | 6.3CNA v3.1 | 0.3% | 2024-09-06 | Fix |
| CVE-2024-25584 | Open-Xchange OX Dovecot Pro insufficient verification of data authenticity | 5.3CNA v3.1 | 0.2% | 2024-09-06 | Fix |
| CVE-2024-21906 | QNAP QTS and QuTS hero command injection | 4.7CNA v3.1 | 0.8% | 2024-09-06 | Fix |
| CVE-2024-21904 | QNAP QTS and QuTS hero path traversal | 5.9CNA v3.1 | 0.4% | 2024-09-06 | Fix |
| CVE-2024-21903 | QNAP QTS and QuTS hero command injection | 6.6CNA v3.1 | 0.8% | 2024-09-06 | Fix |
| CVE-2024-21898 | QNAP QTS and QuTS hero command injection | 8.8CNA v3.1 | 1.2% | 2024-09-06 | Fix |
| CVE-2024-21897 | QNAP QTS and QuTS hero cross-site scripting | 8.9CNA v3.1 | 0.3% | 2024-09-06 | Fix |
| CVE-2024-8517 | SPIP Bigup Multipart file upload OS command injection | 9.8v3.1 | 94.6% | 2024-09-06 | NucleiMetasploitExploit codeFix |
| CVE-2024-8509 | Red Hat Migration Toolkit for Virtualization forklift-controller vulnerability | 7.5CNA v3.1 | 0.6% | 2024-09-06 | Fix |
| CVE-2024-8480 | Image Optimizer, Resizer and CDN WordPress plugin unauthorized access | 8.8v3.1 | 0.9% | 2024-09-06 | Fix |
| CVE-2024-8428 | ForumWP WordPress plugin privilege escalation | 8.8CNA v3.1 | 0.5% | 2024-09-06 | Fix |
| CVE-2024-8427 | Frontend Post Submission Manager Lite WordPress plugin unauthorized access | 4.3CNA v3.1 | 0.3% | 2024-09-06 | Fix |
| CVE-2024-8394 | Mozilla Thunderbird use-after-free | 6.5v3.1 | 0.3% | 2024-09-06 | Fix |
| CVE-2024-8317 | WP AdCenter Ad Manager and Adsense Ads WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.3% | 2024-09-06 | Fix |
| CVE-2024-8292 | WP-Recall WordPress plugin privilege escalation | 9.8CNA v3.1 | 0.6% | 2024-09-06 | Fix |
| CVE-2024-8247 | Newsletters WordPress plugin authenticated privilege escalation | 8.8CNA v3.1 | 0.5% | 2024-09-06 | Fix |
| CVE-2024-7652 | Mozilla Firefox type confusion in Async Generators in Javascript Engine | 7.5CISA ADP v3.1 | 0.7% | 2024-09-06 | Fix |
| CVE-2024-7622 | Revision Manager TMC WordPress plugin missing authorization authenticated arbitrary email Sending | 4.3v3.1 | 0.4% | 2024-09-06 | Fix |
| CVE-2024-7611 | Enter Addons Ultimate Template Builder for Elementor WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.3% | 2024-09-06 | Fix |