CVE-2024 records published in September 2024
Page three of three: records 2,001 to 2,394 of the 2,394 published in September 2024, newest first. The first page carries the figures for September 2024.
| CVE | Summary | CVSS | EPSS | Published | Signals |
|---|---|---|---|---|---|
| CVE-2024-7599 | Advanced Sermons WordPress plugin authenticated (Contributor+) stored cross-site scripting | 5.4v3.1 | 0.3% | 2024-09-06 | Fix |
| CVE-2024-7493 | WPCOM Member WordPress plugin unauthenticated privilege escalation via user Meta | 9.8CNA v3.1 | 0.6% | 2024-09-06 | Fix |
| CVE-2024-7415 | Remember Me Controls WordPress plugin unauthenticated full path disclosure | 5.3CNA v3.1 | 0.4% | 2024-09-06 | Fix |
| CVE-2024-7349 | LifterLMS WordPress plugin authenticated (Admin+) SQL injection | 7.2CNA v3.1 | 0.5% | 2024-09-06 | Fix |
| CVE-2024-6792 | WP ULike WordPress plugin Subscriber+ Stored-XSS | 3.5CISA ADP v3.1 | 0.4% | 2024-09-06 | Fix |
| CVE-2024-6445 | Authenticated local file inclusion (LFI) in DataFlowX's DataDiodeX | 7.5NVD v3.1 | 0.6% | 2024-09-06 | Fix |
| CVE-2024-1744 | IDOR in Ariva Computer's Accord ORS | 7.5NVD v3.1 | 0.4% | 2024-09-06 | Fix |
| CVE-2024-45589 | Identityautomation Rapididentity missing brute-force protection | 5.9v3.1 | 0.9% | 2024-09-05 | Exploit codeFix |
| CVE-2024-45401 | stripe-cli path traversal | 7.6CNA v3.1 | 0.2% | 2024-09-05 | Fix |
| CVE-2024-45392 | SuiteCRM has wrong deletion permission checks on API delete call | 7.7CNA v3.1 | 0.3% | 2024-09-05 | Fix |
| CVE-2024-45288 | FreeBSD libnv out-of-bounds write | 8.4CISA ADP v3.1 | 0.3% | 2024-09-05 | Fix |
| CVE-2024-45287 | FreeBSD libnv integer overflow | 7.5NVD v3.1 | 0.5% | 2024-09-05 | Fix |
| CVE-2024-45178 | C-mor Video Surveillance path traversal | 7.1CISA ADP v3.1 | 1.3% | 2024-09-05 | Fix |
| CVE-2024-45176 | C-mor Video Surveillance cross-site scripting | 6.1v3.1 | 1.0% | 2024-09-05 | |
| CVE-2024-45175 | C-mor Video Surveillance path traversal | 8.8CISA ADP v3.1 | 0.7% | 2024-09-05 | Fix |
| CVE-2024-45173 | C-mor Video Surveillance improper privilege management | 8.8CISA ADP v3.1 | 0.9% | 2024-09-05 | Fix |
| CVE-2024-45171 | C-mor Video Surveillance unrestricted file upload | 8.8CISA ADP v3.1 | 0.9% | 2024-09-05 | Fix |
| CVE-2024-45159 | TrustedFirmware Mbed TLS improper certificate validation | 9.8v3.1 | 0.4% | 2024-09-05 | Fix |
| CVE-2024-45158 | TrustedFirmware Mbed TLS stack-based buffer overflow | 9.8CISA ADP v3.1 | 0.7% | 2024-09-05 | Fix |
| CVE-2024-45157 | TrustedFirmware Mbed TLS incorrect behavior order | 5.1v3.1 | 0.2% | 2024-09-05 | Fix |
| CVE-2024-45107 | Adobe Acrobat Reader DC Doc object use-after-free information disclosure | 5.5CNA v3.1 | 0.3% | 2024-09-05 | Fix |
| CVE-2024-45098 | IBM Aspera Faspex improper access control | 6.8CNA v3.1 | 0.4% | 2024-09-05 | Fix |
| CVE-2024-45097 | IBM Aspera Faspex improper access control | 5.9CNA v3.1 | 0.3% | 2024-09-05 | Fix |
| CVE-2024-45096 | IBM Aspera Faspex information disclosure | 6.5CNA v3.1 | 0.4% | 2024-09-05 | Fix |
| CVE-2024-45063 | FreeBSD multiple issues in ctl(4) CAM Target Layer | 8.8NVD v3.1 | 0.5% | 2024-09-05 | Fix |
| CVE-2024-44728 | Angeljudesuarez Event Management System cross-site scripting | 6.1NVD v3.1 | 0.4% | 2024-09-05 | |
| CVE-2024-44727 | Angeljudesuarez Event Management System SQL injection | 9.8v3.1 | 0.5% | 2024-09-05 | |
| CVE-2024-44587 | Adonesevangelista Restaurant Management System SQL injection | 8.8CISA ADP v3.1 | 0.5% | 2024-09-05 | |
| CVE-2024-43110 | FreeBSD multiple issues in ctl(4) CAM Target Layer | 8.8v3.1 | 0.4% | 2024-09-05 | Fix |
| CVE-2024-43102 | FreeBSD umtx kernel panic or use-after-free | 10.0v3.1 | 0.7% | 2024-09-05 | Fix |
| CVE-2024-42885 | ESAFENET CDG SQL injection | 9.1CISA ADP v3.1 | 0.6% | 2024-09-05 | |
| CVE-2024-42495 | Hughes Network Systems WL3000 missing encryption of sensitive data | 7.5v3.1 | 0.3% | 2024-09-05 | Fix |
| CVE-2024-42491 | Sangoma Asterisk res_resolver_unbound module null pointer dereference | 5.7CNA v3.1 | 0.6% | 2024-09-05 | Fix |
| CVE-2024-42416 | FreeBSD multiple issues in ctl(4) CAM Target Layer | 8.8v3.1 | 0.4% | 2024-09-05 | Fix |
| CVE-2024-41928 | FreeBSD bhyve(8) privileged guest escape via TPM device passthrough | 8.4CISA ADP v3.1 | 0.2% | 2024-09-05 | Fix |
| CVE-2024-39278 | Hughes Network Systems insufficiently protected credentials | 4.6v3.1 | 0.2% | 2024-09-05 | Fix |
| CVE-2024-32668 | FreeBSD bhyve(8) privileged guest escape via USB controller | 8.2v3.1 | 0.2% | 2024-09-05 | Fix |
| CVE-2024-24759 | MindsDB vulnerable to Bypass of SSRF Protection with DNS Rebinding | 9.3CNA v3.1 | 4.9% | 2024-09-05 | NucleiFix |
| CVE-2024-8473 | SQL injection vulnerability in Job Portal | 6.1v3.1 | 0.3% | 2024-09-05 | |
| CVE-2024-8472 | SQL injection vulnerability in Job Portal | 6.1v3.1 | 0.3% | 2024-09-05 | |
| CVE-2024-8471 | SQL injection vulnerability in Job Portal | 6.1v3.1 | 0.3% | 2024-09-05 | |
| CVE-2024-8470 | SQL injection vulnerability in Job Portal | 7.5NVD v3.1 | 0.5% | 2024-09-05 | |
| CVE-2024-8469 | SQL injection vulnerability in Job Portal | 7.5NVD v3.1 | 0.5% | 2024-09-05 | |
| CVE-2024-8468 | SQL injection vulnerability in Job Portal | 7.5NVD v3.1 | 0.5% | 2024-09-05 | |
| CVE-2024-8467 | SQL injection vulnerability in Job Portal | 7.5NVD v3.1 | 0.5% | 2024-09-05 | |
| CVE-2024-8466 | SQL injection vulnerability in Job Portal | 7.5NVD v3.1 | 0.5% | 2024-09-05 | |
| CVE-2024-8465 | SQL injection vulnerability in Job Portal | 7.5NVD v3.1 | 0.5% | 2024-09-05 | |
| CVE-2024-8464 | SQL injection vulnerability in Job Portal | 7.5NVD v3.1 | 0.5% | 2024-09-05 | |
| CVE-2024-8463 | File upload restriction bypass vulnerability in Job Portal | 8.8NVD v3.1 | 0.5% | 2024-09-05 | |
| CVE-2024-8462 | Windmill HTTP request users.rs excessive authentication | 6.3CNA v4.0 | 0.5% | 2024-09-05 | Fix |
| CVE-2024-8461 | D-Link DNS-320 Web Management interface discovery.cgi information disclosure | 5.3v3.1 | 1.9% | 2024-09-05 | |
| CVE-2024-8460 | D-Link DNS-320 Web Management interface widget_api.cgi information disclosure | 5.9v3.1 | 2.1% | 2024-09-05 | |
| CVE-2024-8445 | Red Hat Directory Server userPassword modification denial of service | 5.7CNA v3.1 | 0.4% | 2024-09-05 | Fix |
| CVE-2024-8395 | FlyCASS Cockpit Access Security System (CASS) SQL injection | 9.8v3.1 | 0.7% | 2024-09-05 | |
| CVE-2024-8363 | Share This Image WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.4% | 2024-09-05 | Fix |
| CVE-2024-8178 | FreeBSD multiple issues in ctl(4) CAM Target Layer | 8.8NVD v3.1 | 0.6% | 2024-09-05 | Fix |
| CVE-2024-7884 | Memory leak when calling a canister method via `ic_cdk::call` | 7.5CNA v3.1 | 0.7% | 2024-09-05 | Fix |
| CVE-2024-7627 | Bit File Manager - unauthenticated remote code execution via race condition | 8.1CNA v3.1 | 2.8% | 2024-09-05 | Exploit codeFix |
| CVE-2024-7605 | HelloAsso WordPress plugin missing authorization authenticated limited options update | 4.3CNA v3.1 | 0.4% | 2024-09-05 | Fix |
| CVE-2024-7591 | Improper input validation vulnerability in Progress LoadMaster allows OS command injection | 10.0CNA v3.1 | 43.8% | 2024-09-05 | NucleiEmerging ThreatsExploit codeFix |
| CVE-2024-7381 | Geo Controller WordPress plugin missing authorization to unauthenticated shortcode execution | 5.3v3.1 | 0.3% | 2024-09-05 | Fix |
| CVE-2024-7380 | Geo Controller WordPress plugin missing authorization authenticated Menu Creation/Deletion | 4.3CNA v3.1 | 0.3% | 2024-09-05 | Fix |
| CVE-2024-6929 | Dynamic Featured Image WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.3% | 2024-09-05 | |
| CVE-2024-6894 | RD Station WordPress plugin authenticated (Contributor+) stored cross-site scripting | 5.4v3.1 | 0.3% | 2024-09-05 | Fix |
| CVE-2024-6846 | Webdigit Chatbot with ChatGPT REST endpoint vulnerability | 5.3CISA ADP v3.1 | 1.3% | 2024-09-05 | NucleiFix |
| CVE-2024-6835 | Ivory Search WordPress Search plugin information exposure via AJAX Search form | 5.3CNA v3.1 | 0.5% | 2024-09-05 | Fix |
| CVE-2024-6332 | Booking for Appointments and Events Calendar WordPress plugin unauthorized access | 6.5CNA v3.1 | 0.4% | 2024-09-05 | Fix |
| CVE-2024-5957 | Trellix Intrusion Prevention System (IPS) Manager authentication bypass | 6.3CNA v3.1 | 0.4% | 2024-09-05 | |
| CVE-2024-5956 | Trellix Intrusion Prevention System (IPS) Manager authentication bypass | 6.5CNA v3.1 | 0.4% | 2024-09-05 | |
| CVE-2024-5309 | Form Vibes Database Manager for Forms WordPress plugin missing authorization in Multiple Functions | 5.4CNA v3.1 | 0.3% | 2024-09-05 | Fix |
| CVE-2024-45692 | Virtualmin infinite loop | 7.5v3.1 | 0.6% | 2024-09-04 | |
| CVE-2024-45507 | Apache OFBiz: Prevent use of URLs in files when loading them from Java or Groovy, leading to a RCE | 9.8v3.1 | 93.2% | 2024-09-04 | NucleiExploit codeFix |
| CVE-2024-45506 | HAProxy infinite loop | 7.5v3.1 | 1.2% | 2024-09-04 | Fix |
| CVE-2024-45450 | Huawei HarmonyOS permission control vulnerability in the software update module | 4.0CNA v3.1 | 0.2% | 2024-09-04 | Fix |
| CVE-2024-45449 | Huawei HarmonyOS access permission verification vulnerability in the ringtone setting module | 5.1CNA v3.1 | 0.1% | 2024-09-04 | Fix |
| CVE-2024-45448 | Huawei HarmonyOS page table protection configuration vulnerability in the trusted firmware module | 4.1CNA v3.1 | 0.1% | 2024-09-04 | Fix |
| CVE-2024-45447 | Huawei HarmonyOS access control vulnerability in the camera framework module | 4.4CNA v3.1 | 0.1% | 2024-09-04 | Fix |
| CVE-2024-45446 | Huawei HarmonyOS access permission verification vulnerability in the camera driver module | 5.5CNA v3.1 | 0.1% | 2024-09-04 | Fix |
| CVE-2024-45445 | Huawei HarmonyOS vulnerability of resources not being closed or released in the keystore module | 4.0CNA v3.1 | 0.1% | 2024-09-04 | Fix |
| CVE-2024-45444 | Huawei HarmonyOS access permission verification vulnerability in the WMS module | 5.5CNA v3.1 | 0.1% | 2024-09-04 | Fix |
| CVE-2024-45443 | Huawei HarmonyOS directory traversal vulnerability in the cust module | 6.1CNA v3.1 | 0.5% | 2024-09-04 | Fix |
| CVE-2024-45442 | Huawei HarmonyOS denial of service | 5.1CNA v3.1 | 0.2% | 2024-09-04 | Fix |
| CVE-2024-45441 | Huawei HarmonyOS input verification vulnerability in the system service module | 6.2CNA v3.1 | 0.2% | 2024-09-04 | Fix |
| CVE-2024-45429 | WP Engine Advanced Custom Fields cross-site scripting | 6.1v3.1 | 0.4% | 2024-09-04 | Fix |
| CVE-2024-45399 | Indico has a cross-site-scripting during account creation | 4.3CNA v3.1 | 0.4% | 2024-09-04 | Fix |
| CVE-2024-45395 | sigstore-go unbounded loop over untrusted input can lead to endless data attack | 3.1CNA v3.1 | 0.5% | 2024-09-04 | Fix |
| CVE-2024-45314 | Flask-AppBuilder login form allows browser to cache sensitive fields | 3.6CNA v3.1 | 0.3% | 2024-09-04 | Fix |
| CVE-2024-45195 | Apache OFBiz forced browsing | 7.5NVD v3.1 | 100.0% | 2024-09-04 | KEVNucleiEmerging ThreatsExploit codeKCVFix |
| CVE-2024-45177 | C-mor Video Surveillance cross-site scripting | 5.4CISA ADP v3.1 | 0.8% | 2024-09-04 | Fix |
| CVE-2024-45174 | C-mor Video Surveillance SQL injection | 8.1CISA ADP v3.1 | 1.3% | 2024-09-04 | Fix |
| CVE-2024-45172 | C-mor Video Surveillance cross-site request forgery | 6.8CISA ADP v3.1 | 0.4% | 2024-09-04 | Fix |
| CVE-2024-45170 | C-mor Video Surveillance missing authorization | 8.1CISA ADP v3.1 | 0.6% | 2024-09-04 | Fix |
| CVE-2024-45076 | IBM webMethods Integration code execution | 9.9CNA v3.1 | 0.5% | 2024-09-04 | Fix |
| CVE-2024-45075 | IBM webMethods Integration privilege escalation | 8.8CNA v3.1 | 0.4% | 2024-09-04 | Fix |
| CVE-2024-45074 | IBM webMethods Integration directory traversal | 6.5CNA v3.1 | 0.5% | 2024-09-04 | Fix |
| CVE-2024-45053 | Remote code execution vulnerability via SSTI in Fides Webserver Jinja Email Templating Engine | 9.1CNA v3.1 | 1.3% | 2024-09-04 | Fix |
| CVE-2024-45052 | Fides Webserver Authentication Timing-Based Username Enumeration vulnerability | 5.3CNA v3.1 | 0.6% | 2024-09-04 | Fix |
| CVE-2024-45050 | Lif-Platforms New-Ringer-Server Ringer Server Does not Check Members when Loading messages | 7.1CNA v3.1 | 0.3% | 2024-09-04 | Fix |
| CVE-2024-45008 | Linux kernel multitouch input slot allocation vulnerability | 5.5v3.1 | 0.2% | 2024-09-04 | Fix |
| CVE-2024-45007 | Linux kernel xillybus driver workqueue handling vulnerability | 5.5v3.1 | 0.2% | 2024-09-04 | Fix |
| CVE-2024-45006 | Linux kernel xHCI USB host controller driver null pointer dereference | 5.5v3.1 | 0.3% | 2024-09-04 | Fix |
| CVE-2024-45005 | Linux kernel KVM s390 GISA handling vulnerability | 5.5v3.1 | 0.2% | 2024-09-04 | Fix |
| CVE-2024-45004 | Linux kernel DCP trusted keys blob encryption cleartext storage of sensitive information | 5.5v3.1 | 0.1% | 2024-09-04 | Fix |
| CVE-2024-45003 | Linux kernel VFS inode lru traversal deadlock | 4.7v3.1 | 0.2% | 2024-09-04 | Fix |
| CVE-2024-45002 | Linux kernel rtla osnoise error handling null pointer dereference | 5.5v3.1 | 0.2% | 2024-09-04 | Fix |
| CVE-2024-45001 | Linux kernel mana kernel panic | 7.5CNA v3.1 | 0.6% | 2024-09-04 | Fix |
| CVE-2024-45000 | Linux kernel netfs fscache cookie handling null pointer dereference | 7.8CNA v3.1 | 0.2% | 2024-09-04 | Fix |
| CVE-2024-44999 | Linux kernel GTP tunneling driver vulnerability | 7.1v3.1 | 0.3% | 2024-09-04 | Fix |
| CVE-2024-44998 | Linux kernel idt77252 ATM driver use-after-free | 9.8CNA v3.1 | 0.8% | 2024-09-04 | Fix |
| CVE-2024-44997 | Linux kernel mtk_wed use-after-free | 7.8CNA v3.1 | 0.2% | 2024-09-04 | Fix |
| CVE-2024-44996 | Linux kernel vsock BPF sockmap recvmsg uncontrolled recursion | 5.5v3.1 | 0.2% | 2024-09-04 | Fix |
| CVE-2024-44995 | Linux kernel HNS3 Ethernet driver TC configuration deadlock | 7.8CNA v3.1 | 0.2% | 2024-09-04 | Fix |
| CVE-2024-44994 | Linux kernel IOMMU fault reporting vulnerability | 8.8CNA v3.1 | 0.2% | 2024-09-04 | Fix |
| CVE-2024-44993 | Linux kernel V3D GPU driver out-of-bounds read | 7.1v3.1 | 0.2% | 2024-09-04 | Fix |
| CVE-2024-44992 | Linux kernel CIFS client null pointer dereference | 7.5CNA v3.1 | 0.4% | 2024-09-04 | Fix |
| CVE-2024-44991 | In the Linux kernel, the following vulnerability has been resolved: tcp: prevent concurrent execution of tcp_sk_exit_batch Its possible that two threads call tcp_sk_exit_batch() concurrently, once from the cleanup_net workqueue, once from a task that failed to clone a new netns. In the latter cas | 5.5v3.1 | 0.2% | 2024-09-04 | Fix |
| CVE-2024-44990 | Linux kernel bonding IPsec offload null pointer dereference | 5.5NVD v3.1 | 0.2% | 2024-09-04 | Fix |
| CVE-2024-44989 | Linux kernel bonding IPsec offload null pointer dereference | 5.5NVD v3.1 | 0.2% | 2024-09-04 | Fix |
| CVE-2024-44988 | Linux kernel mv88e6xxx DSA driver vulnerability | 8.8CNA v3.1 | 0.4% | 2024-09-04 | Fix |
| CVE-2024-44987 | Linux kernel IPv6 send path use-after-free | 7.8CNA v3.1 | 0.3% | 2024-09-04 | Fix |
| CVE-2024-44986 | Linux kernel IPv6 output handling use-after-free | 8.1CNA v3.1 | 0.7% | 2024-09-04 | Fix |
| CVE-2024-44985 | Linux kernel ipv6 use-after-free | 9.8CNA v3.1 | 0.9% | 2024-09-04 | Fix |
| CVE-2024-44984 | Linux kernel bnxt_en XDP redirect handling vulnerability | 10.0CNA v3.1 | 0.7% | 2024-09-04 | Fix |
| CVE-2024-44983 | Linux kernel netfilter flowtable VLAN handling vulnerability | 7.1v3.1 | 0.3% | 2024-09-04 | Fix |
| CVE-2024-44982 | Linux kernel MSM DPU framebuffer handling vulnerability | 5.5v3.1 | 0.2% | 2024-09-04 | Fix |
| CVE-2024-44981 | Linux kernel workqueue subsystem integer overflow | 5.5v3.1 | 0.2% | 2024-09-04 | Fix |
| CVE-2024-44980 | Linux kernel Xe display driver opregion vulnerability | 5.5v3.1 | 0.2% | 2024-09-04 | Fix |
| CVE-2024-44979 | Linux kernel drm/xe memory leak | 5.5v3.1 | 0.2% | 2024-09-04 | Fix |
| CVE-2024-44978 | Linux kernel Xe driver use-after-free | 7.8CNA v3.1 | 0.2% | 2024-09-04 | Fix |
| CVE-2024-44977 | Linux kernel amdgpu driver out-of-bounds write | 7.8v3.1 | 0.3% | 2024-09-04 | Fix |
| CVE-2024-44976 | Linux kernel pata_macio driver vulnerability | 5.5v3.1 | 0.2% | 2024-09-04 | Fix |
| CVE-2024-44975 | Linux kernel cpuset cgroup controller vulnerability | 5.5v3.1 | 0.2% | 2024-09-04 | Fix |
| CVE-2024-44974 | Linux kernel pm use-after-free | 7.8CNA v3.1 | 0.3% | 2024-09-04 | Fix |
| CVE-2024-44973 | Linux kernel SLUB allocator vulnerability | 8.1CNA v3.1 | 0.4% | 2024-09-04 | Fix |
| CVE-2024-44971 | Linux kernel bcm_sf2 DSA driver memory leak | 5.5v3.1 | 0.2% | 2024-09-04 | Fix |
| CVE-2024-44970 | Linux kernel mlx5e SHAMPO driver vulnerability | 9.8CNA v3.1 | 0.6% | 2024-09-04 | Fix |
| CVE-2024-44969 | Linux kernel s390 SCLP driver memory leak | 5.5v3.1 | 0.2% | 2024-09-04 | Fix |
| CVE-2024-44968 | Linux kernel tick broadcast vulnerability | 5.5v3.1 | 0.2% | 2024-09-04 | Fix |
| CVE-2024-44967 | Linux kernel mgag200 DRM driver vulnerability | 7.8CNA v3.1 | 0.2% | 2024-09-04 | Fix |
| CVE-2024-44966 | Linux kernel binfmt_flat loader vulnerability | 7.8CNA v3.1 | 0.2% | 2024-09-04 | Fix |
| CVE-2024-44965 | Linux kernel x86/mm crash | 5.5NVD v3.1 | 0.2% | 2024-09-04 | Fix |
| CVE-2024-44964 | Linux kernel idpf crash | 7.8v3.1 | 0.2% | 2024-09-04 | Fix |
| CVE-2024-44963 | Linux kernel Btrfs vulnerability | 5.5v3.1 | 0.2% | 2024-09-04 | Fix |
| CVE-2024-44962 | Linux kernel btnxpuart Bluetooth driver vulnerability | 5.5v3.1 | 0.2% | 2024-09-04 | Fix |
| CVE-2024-44961 | Linux kernel amdgpu driver vulnerability | 5.5v3.1 | 0.2% | 2024-09-04 | Fix |
| CVE-2024-44960 | Linux kernel USB gadget core null pointer dereference | 5.5NVD v3.1 | 0.2% | 2024-09-04 | Fix |
| CVE-2024-44959 | Linux kernel tracefs inode handling vulnerability | 7.8CNA v3.1 | 0.2% | 2024-09-04 | Fix |
| CVE-2024-44958 | Linux kernel SMT scheduler vulnerability | 5.5v3.1 | 0.2% | 2024-09-04 | Fix |
| CVE-2024-44957 | Linux kernel Xen privcmd irqfd handling deadlock | 5.5v3.1 | 0.2% | 2024-09-04 | Fix |
| CVE-2024-44956 | Linux kernel Xe preempt fence deadlock | 5.5v3.1 | 0.1% | 2024-09-04 | Fix |
| CVE-2024-44954 | Linux kernel ALSA line6 driver race condition | 7.8CNA v3.1 | 0.2% | 2024-09-04 | Fix |
| CVE-2024-44953 | Linux kernel UFS driver deadlock | 5.5v3.1 | 0.2% | 2024-09-04 | Fix |
| CVE-2024-44951 | Linux kernel sc16is7xx improper locking | 7.8CNA v3.1 | 0.2% | 2024-09-04 | Fix |
| CVE-2024-44950 | In the Linux kernel, the following vulnerability has been resolved: serial: sc16is7xx: fix invalid FIFO access with special register set When enabling access to the special register set, Receiver time-out and RHR interrupts can happen. In this case, the IRQ handler will try to read from the FIFO t | 7.1CNA v3.1 | 0.2% | 2024-09-04 | Fix |
| CVE-2024-44949 | Linux kernel DMA cache alignment vulnerability | 7.8CNA v3.1 | 0.2% | 2024-09-04 | Fix |
| CVE-2024-44948 | Linux kernel MTRR fixed register handling vulnerability | 5.5NVD v3.1 | 0.2% | 2024-09-04 | Fix |
| CVE-2024-44859 | Tenda FH1201 stack-based buffer overflow | 8.0CISA ADP v3.1 | 0.6% | 2024-09-04 | |
| CVE-2024-44821 | zzcms improper authentication | 5.3CISA ADP v3.1 | 0.4% | 2024-09-04 | |
| CVE-2024-44820 | zzcms A information disclosure | 6.1NVD v3.1 | 0.4% | 2024-09-04 | |
| CVE-2024-44819 | zzcms cross-site scripting | 6.1v3.1 | 0.4% | 2024-09-04 | |
| CVE-2024-44818 | zzcms cross-site scripting | 5.4CISA ADP v3.1 | 0.4% | 2024-09-04 | |
| CVE-2024-44817 | ZZCMS adv2.php SQL injection | 8.8CISA ADP v3.1 | 0.7% | 2024-09-04 | |
| CVE-2024-44808 | Vypor Attack API System remote code execution | 9.8CISA ADP v3.1 | 0.9% | 2024-09-04 | |
| CVE-2024-44400 | D-Link DI-8400 command injection | 9.8v3.1 | 14.1% | 2024-09-04 | |
| CVE-2024-44383 | WAYOS Fbm-291w command injection | 6.8NVD v3.1 | 0.5% | 2024-09-04 | |
| CVE-2024-43405 | Nuclei template signature verification Bypass | 7.4CNA v3.1 | 1.1% | 2024-09-04 | Fix |
| CVE-2024-43402 | Rust OS command injection/argument injection | 8.2CNA v3.1 | 0.7% | 2024-09-04 | Fix |
| CVE-2024-42642 | Crucial CT1000MX500SSD1 buffer overflow | 6.7v3.1 | 0.5% | 2024-09-04 | Exploit code |
| CVE-2024-42039 | Huawei EMUI access control vulnerability in the SystemUI module | 4.3CNA v3.1 | 0.2% | 2024-09-04 | Fix |
| CVE-2024-41927 | IDEC FC6A Series MICROSmart All-in-One CPU module cleartext transmission of sensitive information | 4.6v3.1 | 0.2% | 2024-09-04 | Fix |
| CVE-2024-41716 | IDEC WindO/I-NV4 WindLDR and cleartext storage of sensitive information | 8.1v3.1 | 0.4% | 2024-09-04 | Fix |
| CVE-2024-39921 | Fsas Technologies IPCOM EX2 Series timing side channel | 7.5v3.1 | 0.4% | 2024-09-04 | Fix |
| CVE-2024-34661 | Samsung Mobile Samsung Assistant improper handling of insufficient permissions | 4.3CNA v3.1 | 0.3% | 2024-09-04 | Fix |
| CVE-2024-34660 | Samsung Mobile Samsung Notes Heap-based out-of-bounds write | 7.3CNA v3.1 | 0.2% | 2024-09-04 | Fix |
| CVE-2024-34659 | Samsung Mobile Group Sharing information disclosure | 7.5CNA v3.1 | 0.5% | 2024-09-04 | Fix |
| CVE-2024-34658 | Samsung Mobile Samsung Notes out-of-bounds read | 4.0CNA v3.1 | 0.2% | 2024-09-04 | Fix |
| CVE-2024-34657 | Samsung Mobile Samsung Notes Stack-based out-of-bounds write | 8.6CNA v3.1 | 0.6% | 2024-09-04 | Fix |
| CVE-2024-34656 | Samsung Mobile Samsung Notes path traversal | 7.3CNA v3.1 | 0.2% | 2024-09-04 | Fix |
| CVE-2024-34655 | Samsung Android UniversalCredentialManager vulnerability | 6.2CNA v3.1 | 0.1% | 2024-09-04 | Fix |
| CVE-2024-34654 | Samsung Android My Files app vulnerability | 6.2CNA v3.1 | 0.1% | 2024-09-04 | Fix |
| CVE-2024-34653 | Samsung Mobile Devices My files path traversal | 4.6CNA v3.1 | 0.3% | 2024-09-04 | Fix |
| CVE-2024-34652 | Samsung Mobile Devices kperfmon incorrect authorization | 4.0CNA v3.1 | 0.1% | 2024-09-04 | Fix |
| CVE-2024-34651 | Samsung Mobile Devices My files improper authorization | 6.2CNA v3.1 | 0.1% | 2024-09-04 | Fix |
| CVE-2024-34650 | Samsung Mobile Devices CocktailbarService incorrect authorization | 4.0CNA v3.1 | 0.1% | 2024-09-04 | Fix |
| CVE-2024-34649 | Samsung Mobile Devices improper access control | 2.4CNA v3.1 | 0.2% | 2024-09-04 | Fix |
| CVE-2024-34648 | Samsung Mobile Devices KnoxMiscPolicy improper handling of insufficient permissions | 5.1CNA v3.1 | 0.1% | 2024-09-04 | Fix |
| CVE-2024-34647 | Samsung Android DualDarManagerProxy vulnerability | 4.0CNA v3.1 | 0.1% | 2024-09-04 | Fix |
| CVE-2024-34646 | Samsung Mobile Devices DualDarManagerProxy improper access control | 6.6CNA v3.1 | 0.1% | 2024-09-04 | Fix |
| CVE-2024-34645 | Samsung Mobile Devices ThemeCenter improper input validation | 6.1CNA v3.1 | 0.2% | 2024-09-04 | Fix |
| CVE-2024-34644 | Samsung Mobile Devices item selection related in Dressroom improper access control | 4.4CNA v3.1 | 0.1% | 2024-09-04 | Fix |
| CVE-2024-34643 | Samsung Mobile Devices improper access control | 4.4CNA v3.1 | 0.2% | 2024-09-04 | Fix |
| CVE-2024-34642 | Samsung Mobile Devices One UI Home improper authorization | 4.6CNA v3.1 | 0.2% | 2024-09-04 | Fix |
| CVE-2024-34641 | Samsung Mobile Devices FeliCaTest improper export of Android application components | 5.1CNA v3.1 | 0.1% | 2024-09-04 | Fix |
| CVE-2024-34640 | Samsung Mobile Devices BGProtectManager improper access control | 3.3CNA v3.1 | 0.1% | 2024-09-04 | Fix |
| CVE-2024-34639 | Samsung Mobile Devices Setupwizard improper exception handling | 4.6CNA v3.1 | 0.2% | 2024-09-04 | Fix |
| CVE-2024-34638 | Samsung Mobile Devices ThemeCenter improper exception handling | 6.7CNA v3.1 | 0.1% | 2024-09-04 | Fix |
| CVE-2024-34637 | Samsung Mobile Devices WindowManagerService improper access control | 6.2CNA v3.1 | 0.1% | 2024-09-04 | Fix |
| CVE-2024-20506 | Cisco ClamAV Privilege Handling Escalation vulnerability | 6.1CNA v3.1 | 0.3% | 2024-09-04 | Fix |
| CVE-2024-20505 | Cisco ClamAV Memory Handling DoS | 4.0CNA v3.1 | 0.6% | 2024-09-04 | Fix |
| CVE-2024-20503 | Cisco Duo Epic for Hyperdrive information disclosure | 5.5CNA v3.1 | 0.1% | 2024-09-04 | Fix |
| CVE-2024-20497 | Cisco Expressway Edge improper authorization | 4.3CNA v3.1 | 0.3% | 2024-09-04 | Fix |
| CVE-2024-20469 | Cisco Identity Services Engine command injection | 6.0CNA v3.1 | 0.5% | 2024-09-04 | Fix |
| CVE-2024-20440 | Cisco Smart License Utility sensitive information in log files | 7.5CNA v3.1 | 51.9% | 2024-09-04 | Reported exploitedNucleiEmerging ThreatsKCVFix |
| CVE-2024-20439 | Cisco Smart Licensing Utility hard-coded credentials | 9.8CNA v3.1 | 97.1% | 2024-09-04 | KEVNucleiEmerging ThreatsKCVFix |
| CVE-2024-8418 | Containers/aardvark-dns: Tcp query handling flaw in aardvark-dns leading to denial of service | 7.5CNA v3.1 | 0.8% | 2024-09-04 | Fix |
| CVE-2024-8417 | 云课网络科技有限公司 Yunke Online School System videobind.html sensitive information in source | 8.1v3.1 | 0.7% | 2024-09-04 | |
| CVE-2024-8416 | SourceCodester Food Ordering Management System ticket-status.php SQL injection | 9.8v3.1 | 0.6% | 2024-09-04 | |
| CVE-2024-8415 | SourceCodester Food Ordering Management System add-ticket.php SQL injection | 9.8v3.1 | 0.6% | 2024-09-04 | |
| CVE-2024-8414 | SourceCodester Insurance Management System cross-site request forgery | 4.3v3.1 | 0.3% | 2024-09-04 | |
| CVE-2024-8413 | Cross-site scripting (XSS) in RaspControl | 6.1v3.1 | 0.3% | 2024-09-04 | |
| CVE-2024-8412 | LinuxOSsk Shakal-NG comments view open redirect | 6.1v3.1 | 0.4% | 2024-09-04 | |
| CVE-2024-8411 | Abcd ABCD2 buscar_integrada.php cross-site scripting | 4.3v3.1 | 0.5% | 2024-09-04 | |
| CVE-2024-8410 | Abcd ABCD2 otros_sitios.php path traversal | 7.5v3.1 | 0.7% | 2024-09-04 | |
| CVE-2024-8409 | Abcd ABCD2 show_image.php path traversal | 7.5v3.1 | 0.7% | 2024-09-04 | |
| CVE-2024-8408 | Linksys WRT54G POST parameter apply.cgi validate_services_port stack-based overflow | 9.8v3.1 | 0.8% | 2024-09-04 | |
| CVE-2024-8407 | alwindoss akademy handlers.go cross-site scripting | 5.4v3.1 | 0.5% | 2024-09-04 | |
| CVE-2024-8391 | Eclipse Vert.x gRPC server does not limit the maximum message size | 6.9CNA v4.0 | 0.6% | 2024-09-04 | Fix |
| CVE-2024-8325 | BlockSpare WordPress plugin cross-site scripting | 5.4v3.1 | 0.3% | 2024-09-04 | Fix |
| CVE-2024-8318 | Attributes for Blocks WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.3% | 2024-09-04 | Fix |
| CVE-2024-8298 | Huawei HarmonyOS memory request vulnerability in the memory management module | 6.2CNA v3.1 | 0.1% | 2024-09-04 | Fix |
| CVE-2024-8289 | MultiVendorX WordPress plugin privilege escalation | 9.8CNA v3.1 | 1.3% | 2024-09-04 | Exploit codeFix |
| CVE-2024-8123 | The Ultimate WordPress Toolkit WP Extended plugin insecure direct object reference | 5.4v3.1 | 0.3% | 2024-09-04 | Fix |
| CVE-2024-8121 | The Ultimate WordPress Toolkit WP Extended plugin missing authorization to admin Username Change | 4.3v3.1 | 0.3% | 2024-09-04 | Fix |
| CVE-2024-8119 | The Ultimate WordPress Toolkit WP Extended plugin reflected cross-site scripting via page | 6.1CNA v3.1 | 0.4% | 2024-09-04 | Fix |
| CVE-2024-8117 | The Ultimate WordPress Toolkit WP Extended plugin reflected cross-site scripting via selected_option | 6.1CNA v3.1 | 0.4% | 2024-09-04 | Fix |
| CVE-2024-8106 | The Ultimate WordPress Toolkit WP Extended plugin sensitive information exposure | 6.5CNA v3.1 | 0.5% | 2024-09-04 | Fix |
| CVE-2024-8104 | The Ultimate WordPress Toolkit WordPress plugin path traversal | 6.5NVD v3.1 | 1.0% | 2024-09-04 | Fix |
| CVE-2024-8102 | The Ultimate WordPress Toolkit WP Extended plugin arbitrary options update | 8.8CNA v3.1 | 0.5% | 2024-09-04 | Fix |
| CVE-2024-7950 | WP Job Portal WordPress plugin local file inclusion | 9.8CNA v3.1 | 1.2% | 2024-09-04 | Fix |
| CVE-2024-7923 | Red Hat Satellite puppet-pulpcore: An authentication bypass vulnerability exists in pulpcore | 9.8CNA v3.0 | 0.8% | 2024-09-04 | Fix |
| CVE-2024-7870 | PixelYourSite WordPress plugin information disclosure | 7.5v3.1 | 0.5% | 2024-09-04 | Fix |
| CVE-2024-7834 | Local privilege escalation in Overwolf | 7.8v3.1 | 0.3% | 2024-09-04 | Fix |
| CVE-2024-7786 | Sensei LMS WordPress plugin unauthenticated email Template leak | 5.3NVD v3.1 | 1.7% | 2024-09-04 | NucleiFix |
| CVE-2024-7078 | Unauthenticate SQLi in Semtek Informatics Software's Semtek Sempos | 9.8v3.1 | 0.5% | 2024-09-04 | |
| CVE-2024-7077 | Reflected XSS in Semtek Informatics Software's Semtek Sempos | 6.1v3.1 | 0.3% | 2024-09-04 | |
| CVE-2024-7076 | SQLi in Semtek Informatics Software's Semtek Sempos | 9.8v3.1 | 0.5% | 2024-09-04 | |
| CVE-2024-7012 | Red Hat Satellite puppet-foreman: An authentication bypass vulnerability exists in foreman | 9.8CNA v3.1 | 0.8% | 2024-09-04 | Fix |
| CVE-2024-6926 | Viral Signup WordPress plugin unauthenticated SQLi | 9.8NVD v3.1 | 3.3% | 2024-09-04 | Nuclei |
| CVE-2024-6889 | Secure Copy Content Protection and Content Locking WordPress plugin Admin+ stored XSS | 4.8NVD v3.1 | 0.4% | 2024-09-04 | Fix |
| CVE-2024-6888 | Secure Copy Content Protection and Content Locking WordPress plugin Admin+ stored XSS | 4.8NVD v3.1 | 0.4% | 2024-09-04 | Fix |
| CVE-2024-6722 | Chatbot Support AI WordPress plugin Admin+ stored XSS | 4.8NVD v3.1 | 0.3% | 2024-09-04 | |
| CVE-2024-6020 | Sign-up Sheets WordPress plugin reflected XSS | 6.1NVD v3.1 | 0.4% | 2024-09-04 | Fix |
| CVE-2024-2166 | Forcepoint Email Security cross-site scripting | 8.8CNA v3.1 | 0.3% | 2024-09-04 | Fix |
| CVE-2024-45678 | Yubico Yubihsm 2 observable discrepancy | 4.2v3.1 | 0.3% | 2024-09-03 | Fix |
| CVE-2024-45620 | OpenSC libopensc: Incorrect handling of the length of buffers or files in pkcs15init | 3.9NVD v3.1 | 0.3% | 2024-09-03 | Fix |
| CVE-2024-45619 | OpenSC libopensc: Incorrect handling length of buffers or files in libopensc | 4.3NVD v3.1 | 0.3% | 2024-09-03 | Fix |
| CVE-2024-45618 | OpenSC pkcs15init return value checks uninitialized variable use | 3.9NVD v3.1 | 0.3% | 2024-09-03 | Fix |
| CVE-2024-45617 | OpenSC libopensc return value checks uninitialized variable use | 3.9NVD v3.1 | 0.3% | 2024-09-03 | Fix |
| CVE-2024-45616 | OpenSC libopensc APDU response handling uninitialized variable use | 3.9NVD v3.1 | 0.4% | 2024-09-03 | Fix |
| CVE-2024-45615 | OpenSC libopensc: Pkcs15init: Usage of uninitialized values in libopensc and pkcs15init | 3.9NVD v3.1 | 0.4% | 2024-09-03 | Fix |
| CVE-2024-45588 | Symphony Fintech XTS Web Trader information disclosure | 8.1NVD v3.1 | 0.4% | 2024-09-03 | Fix |
| CVE-2024-45587 | Symphony Fintech XTS Web Trader unauthorized modification | 8.8NVD v3.1 | 0.4% | 2024-09-03 | Fix |
| CVE-2024-45586 | Symphony Fintech XTS Web Trader account Take over vulnerability | 8.8NVD v3.1 | 0.4% | 2024-09-03 | Fix |
| CVE-2024-45394 | Authenticator-Extension Authenticator secret encryption vulnerable to brute-force attacks | 8.8CNA v3.1 | 0.1% | 2024-09-03 | Fix |
| CVE-2024-45391 | Tina search token leak via lock file in TinaCMS | 7.5CNA v3.1 | 0.3% | 2024-09-03 | Fix |
| CVE-2024-45390 | @blakeembrey/template vulnerable to code injection when attacker controls template input | 7.3CNA v3.1 | 0.4% | 2024-09-03 | Fix |
| CVE-2024-45389 | Pagefind DOM clobbering could escalate to cross-site scripting (XSS) | 6.4CNA v3.1 | 0.4% | 2024-09-03 | Fix |
| CVE-2024-45310 | runc can be confused to create empty files/directories on the host | 3.6CNA v3.1 | 0.3% | 2024-09-03 | Fix |
| CVE-2024-45307 | SudoBot missing authorization check in `-config` command | 8.8CNA v3.1 | 0.3% | 2024-09-03 | Fix |
| CVE-2024-45180 | Squaredup Ds For Scom cross-site scripting | 5.4v3.1 | 0.2% | 2024-09-03 | Fix |
| CVE-2024-44921 | Seacms SQL injection | 9.8v3.1 | 0.6% | 2024-09-03 | |
| CVE-2024-44920 | Seacms component admin_collect_news.php cross-site scripting | 6.1v3.1 | 0.4% | 2024-09-03 | |
| CVE-2024-44809 | Pi Camera project remote code execution | 9.8CISA ADP v3.1 | 0.8% | 2024-09-03 | |
| CVE-2024-43803 | Metal3 Bare Metal Operator BareMetalHost secret references information disclosure | 4.9CNA v3.1 | 0.6% | 2024-09-03 | Fix |
| CVE-2024-43413 | Xibo CMS XSS vulnerability using DataSet HTML columns | 3.5CNA v3.1 | 0.3% | 2024-09-03 | Fix |
| CVE-2024-43412 | Xibo CMS XSS vulnerability when previewing files uploaded to the library containing HTML/JS | 4.6CNA v3.1 | 0.3% | 2024-09-03 | Fix |
| CVE-2024-42991 | Mingsoft MCMS unrestricted file upload | 8.1CISA ADP v3.1 | 0.8% | 2024-09-03 | |
| CVE-2024-42904 | sysPass cross-site scripting | 6.1v3.1 | 0.3% | 2024-09-03 | |
| CVE-2024-42903 | LimeSurvey password reset function host header injection | 6.5v3.1 | 0.5% | 2024-09-03 | Fix |
| CVE-2024-42902 | LimeSurvey code injection | 8.8CISA ADP v3.1 | 1.0% | 2024-09-03 | Fix |
| CVE-2024-42901 | LimeSurvey Lime Survey v6.5.12 CSV injection | 4.8CISA ADP v3.1 | 0.4% | 2024-09-03 | Fix |
| CVE-2024-42061 | Zyxel ATP series firmware CGI program "dynamic_script.cgi" reflected cross-site scripting | 6.1CNA v3.1 | 0.3% | 2024-09-03 | Fix |
| CVE-2024-42060 | Zyxel ATP series firmware command injection | 7.2CNA v3.1 | 1.3% | 2024-09-03 | Fix |
| CVE-2024-42059 | Zyxel ATP series firmware command injection | 7.2CNA v3.1 | 1.3% | 2024-09-03 | Fix |
| CVE-2024-42058 | Zyxel ATP series firmware null pointer dereference | 7.5CNA v3.1 | 0.6% | 2024-09-03 | Fix |
| CVE-2024-42057 | Zyxel ATP series firmware IPSec VPN feature command injection | 8.1CNA v3.1 | 1.3% | 2024-09-03 | Fix |
| CVE-2024-41436 | ClickHouse buffer overflow | 7.5CISA ADP v3.1 | 0.6% | 2024-09-03 | |
| CVE-2024-41435 | Yugabyte DB buffer overflow | 7.5CISA ADP v3.1 | 0.5% | 2024-09-03 | |
| CVE-2024-41434 | pingcap tidb buffer overflow | 4.3CISA ADP v3.1 | 0.4% | 2024-09-03 | |
| CVE-2024-41433 | pingcap tidb buffer overflow | 9.8CISA ADP v3.1 | 0.6% | 2024-09-03 | |
| CVE-2024-38811 | Fusion code-execution | 8.8CNA v3.1 | 0.3% | 2024-09-03 | Fix |
| CVE-2024-38456 | Vivavis HIGH-LEIT prunsrv.exe privilege escalation | 7.8CISA ADP v3.1 | 0.2% | 2024-09-03 | |
| CVE-2024-37136 | Dell Path to Power personal information exposure | 6.8CNA v3.1 | 0.4% | 2024-09-03 | Fix |
| CVE-2024-34463 | BPL Personal Weighing Scale PWS-01BT BLE communication information disclosure | 5.1CISA ADP v3.1 | 0.7% | 2024-09-03 | |
| CVE-2024-8399 | Mozilla Focus authentication bypass by spoofing | 4.7v3.1 | 0.3% | 2024-09-03 | Fix |
| CVE-2024-8389 | Mozilla Firefox memory safety bugs | 9.8v3.1 | 0.5% | 2024-09-03 | Fix |
| CVE-2024-8388 | Mozilla Firefox clickjacking | 5.3v3.1 | 0.4% | 2024-09-03 | Fix |
| CVE-2024-8387 | Mozilla Firefox memory safety bugs | 9.8v3.1 | 0.6% | 2024-09-03 | Fix |
| CVE-2024-8386 | Mozilla Firefox authentication bypass by spoofing | 6.1v3.1 | 0.4% | 2024-09-03 | Fix |
| CVE-2024-8385 | Mozilla Firefox type confusion | 9.8v3.1 | 0.6% | 2024-09-03 | Fix |
| CVE-2024-8384 | Mozilla Firefox use-after-free | 9.8v3.1 | 0.7% | 2024-09-03 | Fix |
| CVE-2024-8383 | Mozilla Firefox insecure default initialization | 7.5v3.1 | 0.6% | 2024-09-03 | Fix |
| CVE-2024-8382 | Mozilla Firefox privilege escalation | 8.8v3.1 | 0.6% | 2024-09-03 | Fix |
| CVE-2024-8381 | Mozilla Firefox type confusion | 9.8v3.1 | 4.4% | 2024-09-03 | Exploit codeFix |
| CVE-2024-8380 | SourceCodester Contact Manager with Export to VCF Delete Contact delete-account.php SQL injection | 9.8v3.1 | 0.6% | 2024-09-03 | |
| CVE-2024-8374 | Arbitrary code injection in Cura | 7.8NVD v3.1 | 0.4% | 2024-09-03 | Fix |
| CVE-2024-8362 | Google Chrome WebAudio use-after-free | 8.8v3.1 | 0.6% | 2024-09-03 | Fix |
| CVE-2024-7970 | Google Chrome V8 out-of-bounds write | 8.8v3.1 | 0.5% | 2024-09-03 | Fix |
| CVE-2024-7654 | Unauthenticated content injection in OpenEdge Management web interface | 8.3CNA v3.1 | 0.3% | 2024-09-03 | Fix |
| CVE-2024-7346 | Client connections using default TLS certificates from OpenEdge may bypass TLS host name validation | 7.2CNA v3.1 | 0.2% | 2024-09-03 | Fix |
| CVE-2024-7345 | Progress OpenEdge direct local client connections to MS Agents can bypass authentication | 8.3CNA v3.1 | 0.6% | 2024-09-03 | Fix |
| CVE-2024-7261 | Zyxel NWA1123ACv3 firmware parameter "host" in the CGI program improper neutralization | 9.8CNA v3.1 | 11.4% | 2024-09-03 | Fix |
| CVE-2024-7203 | Zyxel ATP series firmware command injection | 7.2CNA v3.1 | 1.3% | 2024-09-03 | Fix |
| CVE-2024-6473 | DLL hijacking in Yandex Browser | 8.4CNA v4.0 | 0.7% | 2024-09-03 | Exploit codeFix |
| CVE-2024-6343 | Zyxel ATP series firmware CGI program buffer overflow | 4.9CNA v3.1 | 0.6% | 2024-09-03 | Fix |
| CVE-2024-6232 | Python CPython regular-expression DoS when parsing TarFile headers | 7.5v3.1 | 2.2% | 2024-09-03 | Exploit codeFix |
| CVE-2024-6119 | OpenSSL possible denial of service in X.509 name checks | 7.5NVD v3.1 | 66.6% | 2024-09-03 | Fix |
| CVE-2024-5412 | Zyxel VMG8825-T50K firmware library "libclinkc" of the Zyxel buffer overflow | 7.5CNA v3.1 | 0.7% | 2024-09-03 | Fix |
| CVE-2024-4629 | Keycloak: Potential bypass of brute force protection | 6.5CNA v3.1 | 0.8% | 2024-09-03 | Fix |
| CVE-2024-4259 | Sensetive data exposure in SAMPAS's Akos | 9.8v3.1 | 0.5% | 2024-09-03 | Fix |
| CVE-2024-3655 | Mali GPU Kernel Driver allows improper GPU memory processing operations | 7.8CISA ADP v3.1 | 0.2% | 2024-09-03 | Fix |
| CVE-2024-45623 | D-Link DAP-2310 ATP binary httpd PHP handler remote code execution | 9.8CISA ADP v3.1 | 1.0% | 2024-09-02 | |
| CVE-2024-45622 | ASIS index.php username parameter SQL injection | 9.8CISA ADP v3.1 | 36.4% | 2024-09-02 | Nuclei |
| CVE-2024-45621 | Rocket.Chat cross-site scripting | 5.4v3.1 | 0.3% | 2024-09-02 | |
| CVE-2024-45528 | CodeAstro Membership Management System cross-site scripting | 5.4CISA ADP v3.1 | 0.3% | 2024-09-02 | |
| CVE-2024-45527 | Vanderbilt REDCap cross-site request forgery | 6.1CISA ADP v3.1 | 0.2% | 2024-09-02 | |
| CVE-2024-45522 | Linen improper access control | 9.8v3.1 | 0.5% | 2024-09-02 | |
| CVE-2024-45388 | Arbitrary file read in the `/API/v2/simulation` endpoint in Hoverfly (`GHSL-2023-274`) | 7.5CNA v3.1 | 55.6% | 2024-09-02 | NucleiEmerging ThreatsFix |
| CVE-2024-45313 | Insecure default setting for Server Pro installed via Overleaf toolkit | 5.4CNA v3.1 | 0.3% | 2024-09-02 | Fix |
| CVE-2024-45312 | Arbitrary language parameter can passed to `aspell` executable via spelling requests in overleaf | 5.3CNA v3.1 | 0.5% | 2024-09-02 | Fix |
| CVE-2024-45311 | quinn-rs quinn denial of service in quinn-proto when using `Endpoint::retry` | 7.5CNA v3.1 | 0.6% | 2024-09-02 | Fix |
| CVE-2024-45308 | MySQL and free URL mode allows to hide existing notes in hedgedoc | 6.5CNA v3.1 | 0.6% | 2024-09-02 | Fix |
| CVE-2024-45306 | Vim cursor position calculation heap-based buffer overflow | 4.5CNA v3.1 | 0.3% | 2024-09-02 | Fix |
| CVE-2024-45305 | Byron gitoxide gix-path uses local config across repos when it is the highest scope | 2.5CNA v3.1 | 0.2% | 2024-09-02 | Fix |
| CVE-2024-45270 | Sayful Islam Carousel Slider cross-site request forgery | 4.3v3.1 | 0.2% | 2024-09-02 | Fix |
| CVE-2024-45269 | Sayful Islam Carousel Slider cross-site request forgery | 4.3v3.1 | 0.3% | 2024-09-02 | Fix |
| CVE-2024-44947 | Linux kernel FUSE beyond-EOF page handling information disclosure | 5.5v3.1 | 0.9% | 2024-09-02 | Exploit codeFix |
| CVE-2024-43801 | Privilege escalation to admin from a low-privileged user via SVG upload in Jellyfin | 4.6CNA v3.1 | 0.3% | 2024-09-02 | Fix |
| CVE-2024-43797 | Path traversal in Audiobookshelf | 6.3CNA v3.1 | 0.5% | 2024-09-02 | Fix |
| CVE-2024-43792 | Halo's editor has a stored cross-site scripting | 6.3CNA v3.1 | 0.4% | 2024-09-02 | Fix |
| CVE-2024-43776 | Huachu Easytest Online Learning Test Platform SQL injection | 8.8v3.1 | 0.5% | 2024-09-02 | |
| CVE-2024-43775 | Huachu Easytest Online Learning Test Platform SQL injection | 8.8v3.1 | 0.5% | 2024-09-02 | |
| CVE-2024-43774 | Huachu Easytest Online Learning Test Platform SQL injection | 8.8v3.1 | 0.5% | 2024-09-02 | |
| CVE-2024-43773 | Huachu Easytest Online Learning Test Platform SQL injection | 9.8v3.1 | 0.5% | 2024-09-02 | |
| CVE-2024-43772 | Huachu Easytest Online Learning Test Platform SQL injection | 9.8v3.1 | 0.5% | 2024-09-02 | |
| CVE-2024-42471 | Arbitrary file write via artifact extraction in Actions/artifact | 7.3CNA v3.1 | 3.2% | 2024-09-02 | Exploit codeFix |
| CVE-2024-41160 | OpenHarmony Liteos-A has an use-after-free | 8.8CNA v3.1 | 0.2% | 2024-09-02 | |
| CVE-2024-41157 | OpenHarmony Liteos-A has an use-after-free | 8.8CNA v3.1 | 0.2% | 2024-09-02 | Fix |
| CVE-2024-39816 | OpenHarmony Arkcompiler Ets Runtime has an out-of-bounds write | 8.4CNA v3.1 | 0.2% | 2024-09-02 | Fix |
| CVE-2024-39775 | OpenHarmony net Manager has an out-of-bounds read permission bypass | 6.5CNA v3.1 | 0.4% | 2024-09-02 | Fix |
| CVE-2024-39612 | OpenHarmony background Task Manager has an out-of-bounds read permission bypass | 5.5CNA v3.1 | 0.2% | 2024-09-02 | Fix |
| CVE-2024-38858 | Checkmk cross-site scripting in Robotmk logs view | 2.3CNA v4.0 | 0.3% | 2024-09-02 | Fix |
| CVE-2024-38402 | Qualcomm Snapdragon use-after-free in DSP services | 7.8CNA v3.1 | 0.2% | 2024-09-02 | Fix |
| CVE-2024-38401 | Qualcomm Snapdragon IPC driver use-after-free | 7.8CNA v3.1 | 0.1% | 2024-09-02 | Fix |
| CVE-2024-38386 | OpenHarmony Arkcompiler Ets Runtime has an out-of-bounds write | 8.4CNA v3.1 | 0.2% | 2024-09-02 | Fix |
| CVE-2024-38382 | OpenHarmony ability Runtime has an out-of-bounds read permission bypass | 5.5CNA v3.1 | 0.2% | 2024-09-02 | Fix |
| CVE-2024-33060 | Qualcomm Snapdragon use-after-free in DSP service | 8.4CNA v3.1 | 0.2% | 2024-09-02 | Fix |
| CVE-2024-33057 | Qualcomm Snapdragon buffer over-read in WLAN Host Communication | 7.5CNA v3.1 | 0.3% | 2024-09-02 | Fix |
| CVE-2024-33054 | Qualcomm Snapdragon buffer copy without checking size of input in Computer Vision | 7.8CNA v3.1 | 0.1% | 2024-09-02 | Fix |
| CVE-2024-33052 | Qualcomm Snapdragon buffer copy without checking size of input in FM host | 7.8CNA v3.1 | 0.1% | 2024-09-02 | Fix |
| CVE-2024-33051 | Qualcomm Snapdragon buffer over-read in WLAN firmware | 7.5CNA v3.1 | 0.3% | 2024-09-02 | Fix |
| CVE-2024-33050 | Qualcomm Snapdragon buffer over-read in WLAN Host Communication | 7.5CNA v3.1 | 0.3% | 2024-09-02 | Fix |
| CVE-2024-33048 | Qualcomm Snapdragon buffer over-read in WLAN host | 7.5CNA v3.1 | 0.3% | 2024-09-02 | Fix |
| CVE-2024-33047 | Qualcomm Snapdragon buffer over-read in Display | 8.4CNA v3.1 | 0.1% | 2024-09-02 | Fix |
| CVE-2024-33045 | Qualcomm Snapdragon Return of Stack Variable Address in Buses | 8.4CNA v3.1 | 0.1% | 2024-09-02 | Fix |
| CVE-2024-33043 | Qualcomm Snapdragon buffer over-read in FM host | 5.5CNA v3.1 | 0.1% | 2024-09-02 | Fix |
| CVE-2024-33042 | Qualcomm Snapdragon buffer copy without checking size of input in FM host | 7.8CNA v3.1 | 0.1% | 2024-09-02 | Fix |
| CVE-2024-33038 | Qualcomm Snapdragon untrusted pointer dereference in Computer Vision | 7.8CNA v3.1 | 0.1% | 2024-09-02 | Fix |
| CVE-2024-33035 | Qualcomm Snapdragon integer overflow or wraparound in Display | 8.4CNA v3.1 | 0.1% | 2024-09-02 | Fix |
| CVE-2024-33016 | Qualcomm Snapdragon firehose loader memory corruption | 6.8CNA v3.1 | 0.2% | 2024-09-02 | Fix |
| CVE-2024-28100 | Stored cross-site scripting leading to arbitrary actions taken on behalf of users in elabftw | 8.9CNA v3.1 | 0.3% | 2024-09-02 | Fix |
| CVE-2024-28044 | OpenHarmony Liteos-A has an integer overflow | 3.3CNA v3.1 | 0.1% | 2024-09-02 | Fix |
| CVE-2024-23365 | Qualcomm Snapdragon use-after-free in SCE-Mink | 8.4CNA v3.1 | 0.1% | 2024-09-02 | Fix |
| CVE-2024-23364 | Qualcomm Snapdragon buffer over-read in WLAN firmware | 7.5CNA v3.1 | 0.3% | 2024-09-02 | Fix |
| CVE-2024-23362 | Qualcomm Snapdragon improper input validation in Trusted Execution Environment | 7.1CNA v3.1 | 0.1% | 2024-09-02 | Fix |
| CVE-2024-23359 | Qualcomm Snapdragon buffer over-read in Multi Mode Call Processor | 8.2CNA v3.1 | 0.3% | 2024-09-02 | Fix |
| CVE-2024-23358 | Qualcomm Snapdragon buffer over-read in Multi Mode Call Processor | 7.5CNA v3.1 | 0.3% | 2024-09-02 | Fix |
| CVE-2024-20089 | MediaTek chipsets improper check or handling of exceptional conditions in wlan | 7.5v3.1 | 0.3% | 2024-09-02 | Fix |
| CVE-2024-20088 | MediaTek chipsets out-of-bounds read in KeyInstall | 4.4v3.1 | 0.1% | 2024-09-02 | Fix |
| CVE-2024-20087 | MediaTek chipsets out-of-bounds write in vdec | 6.7NVD v3.1 | 0.1% | 2024-09-02 | Fix |
| CVE-2024-20086 | MediaTek chipsets out-of-bounds write in vdec | 6.7NVD v3.1 | 0.1% | 2024-09-02 | Fix |
| CVE-2024-20085 | MediaTek chipsets out-of-bounds read in power | 4.4v3.1 | 0.1% | 2024-09-02 | Fix |
| CVE-2024-20084 | MediaTek chipsets out-of-bounds read in power | 4.4v3.1 | 0.1% | 2024-09-02 | Fix |
| CVE-2024-8365 | Vault leaks AppRole client tokens and Accessor in Audit Log | 6.2CNA v3.1 | 0.5% | 2024-09-02 | Fix |
| CVE-2024-8004 | Dassault Systèmes ENOVIA Collaborative Industry Innovator stored cross-site scripting | 8.7CNA v3.1 | 0.3% | 2024-09-02 | |
| CVE-2024-7939 | Dassault Systèmes 3DSwymer stored cross-site scripting | 8.7CNA v3.1 | 0.3% | 2024-09-02 | |
| CVE-2024-7938 | Dassault Systèmes 3DSwymer 3DDashboard stored cross-site scripting | 8.7CNA v3.1 | 0.3% | 2024-09-02 | |
| CVE-2024-7932 | Dassault Systèmes 3DSwymer 3DDashboard stored cross-site scripting | 8.7CNA v3.1 | 0.3% | 2024-09-02 | |
| CVE-2024-7871 | Huachu Easytest Online Learning Test Platform SQL injection | 8.7NVD v4.0 | 0.5% | 2024-09-02 | |
| CVE-2024-7692 | Flaming Forms WordPress plugin reflected XSS | 6.1NVD v3.1 | 0.3% | 2024-09-02 | |
| CVE-2024-7691 | Flaming Forms WordPress plugin unauthenticated stored XSS | 6.1NVD v3.1 | 0.4% | 2024-09-02 | |
| CVE-2024-7690 | DN Popup WordPress plugin settings update via CSRF | 4.3NVD v3.1 | 0.2% | 2024-09-02 | |
| CVE-2024-7354 | Ninja Forms reflected XSS | 6.1NVD v3.1 | 0.7% | 2024-09-02 | NucleiFix |
| CVE-2024-6921 | Cleartext Username and Password in Nac Telecommunication's NACPremium | 7.5v3.1 | 0.2% | 2024-09-02 | |
| CVE-2024-6920 | Stored XSS in Nac Telecommunication's NACPremium | 6.1v3.1 | 0.2% | 2024-09-02 | |
| CVE-2024-6919 | SQLi in Nac Telecommunication's NACPremium | 9.8v3.1 | 0.4% | 2024-09-02 | |
| CVE-2024-5148 | GNOME Remote Desktop D-Bus session handling vulnerability | 7.5CNA v3.1 | 0.6% | 2024-09-02 | Fix |
| CVE-2024-1621 | uniFLOW Online device registration susceptible to compromise | 8.3CNA v4.0 | 0.4% | 2024-09-02 | Fix |
| CVE-2024-45509 | MISP incorrect authorization | 6.5NVD v3.1 | 0.4% | 2024-09-01 | |
| CVE-2024-45508 | htmldoc out-of-bounds write | 9.8v3.1 | 0.7% | 2024-09-01 | Fix |
| CVE-2024-8370 | Grocy SVG file upload recipepictures cross-site scripting | 5.4v3.1 | 0.4% | 2024-09-01 | |
| CVE-2024-8368 | code-projects Hospital Management System Login index.php SQL injection | 9.8v3.1 | 0.8% | 2024-09-01 | |
| CVE-2024-8367 | HM Courts and Tribunals Service Probate Back Office Markdown NotificationService.java injection | 5.1CNA v4.0 | 0.5% | 2024-09-01 | |
| CVE-2024-5053 | Fluent Forms Contact Form plugin Mailchimp integration improper authorization | 4.3v3.1 | 0.4% | 2024-09-01 | Fix |