CVE-2024 records published in October 2024
This page lists the 3,350 CVE-2024 records published in October 2024, newest first, 1,000 to a page. The Cybersecurity and Infrastructure Security Agency's Known Exploited Vulnerabilities (KEV) catalog lists 17 of them. Each CVE opens on cve-security.com with its sources, detection content and vendor fixes, and the search on the CVE-2024 list filters these records by severity or signal.
- Critical
- 43212.9% of these records
- Listed in CISA KEV
- 170.5% of these records
- Reported exploited
- 40.1% of these records
- Detection signal
- 692.1% of these records
- Exploit code
- 1313.9% of these records
- Actionable vendor fix
- 2,31169.0% of these records
Figures as of 2026-10-24 13:18 UTC. Records published in October 2024 have had from about 24 months to about 25 months to collect KEV listings, exploitation reports, detection content and exploit code. Records published more recently have had less time, which can hold their shares down.
| CVE | Summary | CVSS | EPSS | Published | Signals |
|---|---|---|---|---|---|
| CVE-2024-51482 | Boolean-based SQL injection in ZoneMinder* | 10.0CNA v3.1 | 36.6% | 2024-10-31 | NucleiExploit codeFix |
| CVE-2024-51481 | Nix allows macOS sandbox escape via built-in builders | 1.0CNA v4.0 | 0.2% | 2024-10-31 | Fix |
| CVE-2024-51478 | YesWiki Uses a broken or risky cryptographic algorithm | 9.9CNA v3.1 | 0.4% | 2024-10-31 | Fix |
| CVE-2024-51430 | Online Diagnostic Lab Management System add-test.php cross-site scripting | 6.4CISA ADP v3.1 | 0.6% | 2024-10-31 | |
| CVE-2024-51260 | DrayTek Vigor3900 command injection | 9.8CISA ADP v3.1 | 0.6% | 2024-10-31 | |
| CVE-2024-51259 | DrayTek Vigor3900 command injection | 9.8CISA ADP v3.1 | 0.4% | 2024-10-31 | |
| CVE-2024-51255 | DrayTek Vigor3900 command injection | 9.8CISA ADP v3.1 | 0.4% | 2024-10-31 | |
| CVE-2024-51254 | DrayTek Vigor3900 command injection | 8.8CISA ADP v3.1 | 0.4% | 2024-10-31 | |
| CVE-2024-51066 | PHPGurukul Beauty Parlour Management System insecure direct object reference | 7.5CISA ADP v3.1 | 0.5% | 2024-10-31 | |
| CVE-2024-51065 | PHPGurukul Beauty Parlour Management System SQL injection | 9.8CISA ADP v3.1 | 0.5% | 2024-10-31 | |
| CVE-2024-51064 | PHPGurukul Teachers Record Management System SQL injection | 9.8CISA ADP v3.1 | 0.6% | 2024-10-31 | |
| CVE-2024-51063 | PHPGurukul Teachers Record Management System SQL injection | 9.1CISA ADP v3.1 | 0.5% | 2024-10-31 | |
| CVE-2024-51060 | Projectworlds Online Admission System SQL injection | 9.1CISA ADP v3.1 | 0.5% | 2024-10-31 | |
| CVE-2024-50802 | AbanteCart SQL injection | 6.0CISA ADP v3.1 | 0.4% | 2024-10-31 | |
| CVE-2024-50801 | AbanteCart SQL injection | 6.0CISA ADP v3.1 | 0.4% | 2024-10-31 | |
| CVE-2024-50356 | Frappe Press password reset weak password recovery | 0.0CNA v3.1 | 0.4% | 2024-10-31 | |
| CVE-2024-50354 | Consensys gnark out-of-memory during deserialization with crafted inputs | 5.5CNA v3.1 | 0.3% | 2024-10-31 | Fix |
| CVE-2024-50347 | Laravel Reverb has Missing API signature verification | 6.3CNA v4.0 | 0.3% | 2024-10-31 | Fix |
| CVE-2024-49685 | Custom Twitter Feeds WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.2% | 2024-10-31 | Fix |
| CVE-2024-49674 | EKC Tournament Manager WordPress plugin CSRF to arbitrary file upload | 9.6CNA v3.1 | 0.2% | 2024-10-31 | Fix |
| CVE-2024-48910 | DOMPurify vulnerable to tampering by prototype polution | 9.1CNA v3.1 | 1.2% | 2024-10-31 | Exploit codeFix |
| CVE-2024-48360 | Qualitor server-side request forgery | 7.5CISA ADP v3.1 | 3.9% | 2024-10-31 | NucleiExploit codeFix |
| CVE-2024-48359 | Qualitor code injection | 9.8CISA ADP v3.1 | 2.3% | 2024-10-31 | Exploit codeFix |
| CVE-2024-48311 | Piwigo cross-site request forgery | 8.8CISA ADP v3.1 | 0.3% | 2024-10-31 | |
| CVE-2024-48307 | JeecgBoot SQL injection | 9.8CISA ADP v3.1 | 50.0% | 2024-10-31 | NucleiExploit code |
| CVE-2024-48200 | MobaXterm MSI installer privilege escalation | 8.4CISA ADP v3.1 | 0.2% | 2024-10-31 | |
| CVE-2024-43984 | Podlove Podcast Publisher WordPress plugin CSRF to remote code execution (RCE) | 8.8NVD v3.1 | 0.3% | 2024-10-31 | Fix |
| CVE-2024-43933 | WPMobile.App WordPress plugin CSRF to stored XSS | 7.1CNA v3.1 | 0.3% | 2024-10-31 | Fix |
| CVE-2024-43930 | JobSearch WP Job Board WordPress plugin broken access control | 4.3CNA v3.1 | 0.2% | 2024-10-31 | Fix |
| CVE-2024-43383 | Apache Lucene.net.Replicator: Remote code execution in Lucene.net.Replicator | 8.0CNA v3.1 | 1.2% | 2024-10-31 | Fix |
| CVE-2024-42835 | Langflow remote code execution | 9.8CISA ADP v3.1 | 1.2% | 2024-10-31 | |
| CVE-2024-42515 | Glossarizer cross-site scripting | 9.9CISA ADP v3.1 | 0.5% | 2024-10-31 | |
| CVE-2024-39722 | Ollama path traversal | 7.5CISA ADP v3.1 | 4.0% | 2024-10-31 | |
| CVE-2024-39721 | Ollama improper resource release | 7.5CISA ADP v3.1 | 2.7% | 2024-10-31 | |
| CVE-2024-39720 | Ollama out-of-bounds read | 8.2CISA ADP v3.1 | 2.5% | 2024-10-31 | Fix |
| CVE-2024-39719 | Ollama information disclosure through error messages | 7.5CISA ADP v3.1 | 4.3% | 2024-10-31 | |
| CVE-2024-39332 | Webswing path traversal | 9.8CISA ADP v3.1 | 1.3% | 2024-10-31 | |
| CVE-2024-30149 | HCL AppScan Source is affected by an expired TLS/SSL certificate | 4.8CNA v3.1 | 0.2% | 2024-10-31 | Fix |
| CVE-2024-21537 | lilconfig code injection | 9.3CNA v4.0 | 1.1% | 2024-10-31 | Fix |
| CVE-2024-10601 | Tongda OA 2017 delete.php SQL injection | 9.8v3.1 | 0.6% | 2024-10-31 | |
| CVE-2024-10600 | Tongda OA 2017 submenu.php SQL injection | 9.8v3.1 | 6.6% | 2024-10-31 | |
| CVE-2024-10599 | Tongda OA 2017 package_static_resources.php resource consumption | 7.5v3.1 | 1.0% | 2024-10-31 | |
| CVE-2024-10598 | Tongda OA Annual Leave data.php improper authorization | 6.5v3.1 | 0.5% | 2024-10-31 | |
| CVE-2024-10597 | ESAFENET CDG PolicyActionService.java delPolicyAction SQL injection | 9.8v3.1 | 0.6% | 2024-10-31 | |
| CVE-2024-10596 | ESAFENET CDG EncryptPolicyTypeService.java delEntryptPolicySort SQL injection | 8.8v3.1 | 0.6% | 2024-10-31 | |
| CVE-2024-10595 | ESAFENET CDG PublicDocInfoAjax.java delDifferCourseList SQL injection | 9.8v3.1 | 0.6% | 2024-10-31 | |
| CVE-2024-10594 | ESAFENET CDG FileDirectoryService.java docHistory SQL injection | 8.8v3.1 | 0.6% | 2024-10-31 | |
| CVE-2024-10573 | Red Hat Enterprise Linux 8 mpg123: Buffer overflow when writing decoded pcm samples | 6.7CNA v3.1 | 0.3% | 2024-10-31 | Fix |
| CVE-2024-10561 | Codezips Pet Shop Management System birdsupdate.php SQL injection | 9.8v3.1 | 0.9% | 2024-10-31 | |
| CVE-2024-10559 | SourceCodester Airport Booking Management System details buffer overflow | 7.8v3.1 | 0.4% | 2024-10-31 | |
| CVE-2024-10557 | code-projects Blood Bank Management System updateprofile.php cross-site request forgery | 6.5v3.1 | 0.6% | 2024-10-31 | Exploit code |
| CVE-2024-10556 | Codezips Pet Shop Management System birdsadd.php SQL injection | 9.8v3.1 | 0.7% | 2024-10-31 | |
| CVE-2024-10544 | Woo Manage Fraud Orders WordPress plugin unauthenticated information exposure via Log files | 5.3CNA v3.1 | 0.5% | 2024-10-31 | |
| CVE-2024-10454 | Clickjacking vulnerability in Clibo Manager | 6.1CNA v3.1 | 0.2% | 2024-10-31 | |
| CVE-2024-10392 | AI Power: Complete AI Pack WordPress plugin unauthenticated arbitrary file upload | 9.8CNA v3.1 | 15.0% | 2024-10-31 | Fix |
| CVE-2024-9708 | Easy SVG Upload WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.3% | 2024-10-31 | Fix |
| CVE-2024-9700 | Forminator Forms WordPress plugin insecure direct object reference | 5.3CNA v3.1 | 0.4% | 2024-10-31 | Fix |
| CVE-2024-9446 | WP Simple Anchors Links WordPress plugin stored cross-site scripting | 6.4CNA v3.1 | 0.4% | 2024-10-31 | |
| CVE-2024-9434 | WPGlobus Translate Options WordPress plugin cross-site request forgery | 6.1CNA v3.1 | 0.2% | 2024-10-31 | |
| CVE-2024-9430 | Get Quote For Woocommerce WordPress plugin unauthorized access | 5.3CNA v3.1 | 0.4% | 2024-10-31 | |
| CVE-2024-9165 | Gift Cards WordPress plugin stored cross-site scripting | 6.4CNA v3.1 | 0.3% | 2024-10-31 | Fix |
| CVE-2024-8934 | Beckhoff: Local command injection via TwinCAT Package Manager | 6.5CNA v3.1 | 0.2% | 2024-10-31 | Fix |
| CVE-2024-8553 | Red Hat Satellite foreman: Read-only access to entire db from templates | 6.3CNA v3.1 | 0.4% | 2024-10-31 | Fix |
| CVE-2024-8185 | Vault vulnerable to denial of service when Processing Raft Join requests | 7.5CNA v3.1 | 0.5% | 2024-10-31 | Fix |
| CVE-2024-7883 | Arm Compiler for Embedded CMSE secure state may leak from stack to floating-point registers | 3.7CNA v3.1 | 0.5% | 2024-10-31 | Fix |
| CVE-2024-6480 | SIP Reviews Shortcode for WooCommerce WordPress plugin cross-site scripting | 5.4v3.1 | 0.3% | 2024-10-31 | Fix |
| CVE-2024-6479 | SIP Reviews Shortcode for WooCommerce WordPress plugin authenticated (Contributor+) SQL injection | 6.5CNA v3.1 | 0.5% | 2024-10-31 | Fix |
| CVE-2024-51427 | PepeGxng smart contract mint function code injection | 9.8CISA ADP v3.1 | 0.6% | 2024-10-30 | |
| CVE-2024-51426 | PepeGxng smart contract _transfer function incorrect authorization | 8.8CISA ADP v3.1 | 0.5% | 2024-10-30 | |
| CVE-2024-51425 | WaterToken smart contract incorrect authorization | 8.8CISA ADP v3.1 | 0.4% | 2024-10-30 | |
| CVE-2024-51424 | PepeGxng smart contract Owned.setOwner function code injection | 9.8CISA ADP v3.1 | 0.6% | 2024-10-30 | |
| CVE-2024-51419 | Shenzhen Interconnection Harbor Network Technology Ofweek Online Exhibition cross-site scripting | 6.1CISA ADP v3.1 | 0.4% | 2024-10-30 | |
| CVE-2024-51304 | DrayTek Vigor3900 command injection | 8.8CISA ADP v3.1 | 0.6% | 2024-10-30 | |
| CVE-2024-51301 | DrayTek Vigor3900 command injection | 8.8CISA ADP v3.1 | 0.6% | 2024-10-30 | |
| CVE-2024-51300 | DrayTek Vigor3900 command injection | 8.8CISA ADP v3.1 | 0.6% | 2024-10-30 | |
| CVE-2024-51299 | DrayTek Vigor3900 command injection | 8.8CISA ADP v3.1 | 0.6% | 2024-10-30 | |
| CVE-2024-51298 | DrayTek Vigor3900 code injection | 9.8CISA ADP v3.1 | 0.6% | 2024-10-30 | |
| CVE-2024-51296 | DrayTek Vigor3900 command injection | 8.8CISA ADP v3.1 | 0.6% | 2024-10-30 | |
| CVE-2024-51258 | DrayTek Vigor3900 command injection | 8.8CISA ADP v3.1 | 0.6% | 2024-10-30 | |
| CVE-2024-51257 | DrayTek Vigor3900 command injection | 8.8CISA ADP v3.1 | 0.4% | 2024-10-30 | |
| CVE-2024-51243 | eladmin code injection | 7.2CISA ADP v3.1 | 1.0% | 2024-10-30 | |
| CVE-2024-51242 | eladmin server-side request forgery | 6.5CISA ADP v3.1 | 0.4% | 2024-10-30 | |
| CVE-2024-50512 | Posti Shipping WordPress plugin full path disclosure (FPD) | 5.3CNA v3.1 | 0.3% | 2024-10-30 | Fix |
| CVE-2024-50511 | WP donimedia carousel WordPress plugin arbitrary file upload | 9.9CNA v3.1 | 0.5% | 2024-10-30 | |
| CVE-2024-50510 | AR For Woocommerce WordPress plugin arbitrary file upload | 10.0CNA v3.1 | 1.0% | 2024-10-30 | Exploit codeFix |
| CVE-2024-50509 | Woocommerce Product Design WordPress plugin arbitrary file deletion | 8.6CNA v3.1 | 1.4% | 2024-10-30 | Exploit code |
| CVE-2024-50508 | Woocommerce Product Design WordPress plugin arbitrary file download | 7.5CNA v3.1 | 1.1% | 2024-10-30 | Exploit code |
| CVE-2024-50507 | DS.DownloadList WordPress plugin PHP object injection | 9.8CNA v3.1 | 1.0% | 2024-10-30 | Exploit code |
| CVE-2024-50506 | Marketing Automation by AZEXO WordPress plugin privilege escalation | 8.8CNA v3.1 | 0.5% | 2024-10-30 | |
| CVE-2024-50504 | Bulk Change Role WordPress plugin privilege escalation | 8.8CNA v3.1 | 0.5% | 2024-10-30 | |
| CVE-2024-50503 | User Toolkit WordPress plugin account takeover | 9.8CNA v3.1 | 0.5% | 2024-10-30 | Fix |
| CVE-2024-50419 | Greenshift WordPress plugin broken access control | 9.8v3.1 | 0.3% | 2024-10-30 | Fix |
| CVE-2024-50353 | IowaComputerGurus AspNetCore.Utilities.CloudStorage SAS URI token duration improper access control | 5.3CNA v3.1 | 0.3% | 2024-10-30 | Fix |
| CVE-2024-50344 | mkucej i-librarian-free I, Librarian has a stored XSS vulnerability in Supplemental files | 4.6CNA v3.1 | 0.3% | 2024-10-30 | Fix |
| CVE-2024-48807 | PHPGurukul Doctor Appointment Management System cross-site scripting | 5.4CISA ADP v3.1 | 0.3% | 2024-10-30 | |
| CVE-2024-48735 | SAS Studio sasexec workspace endpoint path traversal | 7.7CISA ADP v3.1 | 1.0% | 2024-10-30 | |
| CVE-2024-48734 | SAS Studio sasexec upload endpoint unrestricted file upload | 8.8CISA ADP v3.1 | 0.6% | 2024-10-30 | |
| CVE-2024-48733 | SAS Studio sasexec SQL endpoint SQL injection | 8.8CISA ADP v3.1 | 0.7% | 2024-10-30 | |
| CVE-2024-48648 | Sage Frp 1000 reflected cross-site scripting | 6.1CISA ADP v3.1 | 0.3% | 2024-10-30 | |
| CVE-2024-48647 | Sage Frp 1000 files accessible to external parties | 7.2CISA ADP v3.1 | 0.8% | 2024-10-30 | |
| CVE-2024-48646 | Sage Frp 1000 An arbitrary file upload | 8.1CISA ADP v3.1 | 0.5% | 2024-10-30 | |
| CVE-2024-48569 | Proactive Risk Manager risk strategy control form cross-site scripting | 5.4CISA ADP v3.1 | 0.5% | 2024-10-30 | |
| CVE-2024-48346 | xtreme1 file upload API server-side request forgery | 6.1CISA ADP v3.1 | 0.2% | 2024-10-30 | |
| CVE-2024-48272 | D-Link DSL6740C weak password requirements | 6.5CISA ADP v3.1 | 0.6% | 2024-10-30 | |
| CVE-2024-48271 | D-Link DSL6740C weak password requirements | 8.8CISA ADP v3.1 | 0.9% | 2024-10-30 | |
| CVE-2024-48241 | radare2 out-of-bounds write | 5.5CISA ADP v3.1 | 0.2% | 2024-10-30 | Fix |
| CVE-2024-48214 | KERUI HD 3MP 1080P Tuya Camera QR code network setup command injection | 8.4CISA ADP v3.1 | 1.0% | 2024-10-30 | |
| CVE-2024-48202 | Thecosy IceCMS unrestricted file upload | 9.8CISA ADP v3.1 | 0.6% | 2024-10-30 | |
| CVE-2024-48112 | ThinkPHP deserialization | 9.8CISA ADP v3.1 | 0.9% | 2024-10-30 | |
| CVE-2024-48093 | Discussions tab in Operately v.0.1.0 arbitrary file upload | 8.0CISA ADP v3.1 | 0.6% | 2024-10-30 | |
| CVE-2024-46531 | PHPGurukul Vehicle Record System SQL injection | 6.3CISA ADP v3.1 | 0.3% | 2024-10-30 | |
| CVE-2024-43382 | Snowflake JDBC Security Advisory | 5.9CISA ADP v3.1 | 0.2% | 2024-10-30 | Fix |
| CVE-2024-42041 | All Video Downloader DefaultBrowserActivity component code injection | 8.1CISA ADP v3.1 | 0.3% | 2024-10-30 | |
| CVE-2024-37573 | Talkatone OutgoingCallInterceptor component vulnerability | 8.4CISA ADP v3.1 | 0.2% | 2024-10-30 | |
| CVE-2024-36060 | EnGenius EnStation5-AC ping and speed test tools OS command injection | 8.8CISA ADP v3.1 | 1.4% | 2024-10-30 | |
| CVE-2024-33700 | LevelOne WBR-6012 improper input validation | 7.5CNA v3.1 | 0.8% | 2024-10-30 | |
| CVE-2024-33699 | LevelOne WBR-6012 unverified password change | 8.8NVD v3.1 | 11.2% | 2024-10-30 | |
| CVE-2024-33626 | LevelOne WBR-6012 information disclosure | 5.3CNA v3.1 | 0.4% | 2024-10-30 | |
| CVE-2024-33623 | LevelOne WBR-6012 Web application functionality denial of service | 7.5v3.1 | 11.4% | 2024-10-30 | |
| CVE-2024-33603 | LevelOne WBR-6012 session hijacking | 5.3CNA v3.1 | 8.6% | 2024-10-30 | |
| CVE-2024-32946 | LevelOne WBR-6012 cleartext transmission of sensitive information | 5.9v3.1 | 0.3% | 2024-10-30 | |
| CVE-2024-31975 | Engeniustech Ews356-fit cross-site scripting | 4.8CISA ADP v3.1 | 0.4% | 2024-10-30 | |
| CVE-2024-31973 | Hitron CODA-4582 Network Name (SSID) input field stored cross-site scripting | 5.2CISA ADP v3.1 | 0.5% | 2024-10-30 | |
| CVE-2024-31972 | EnGenius ESR580 Wi-Fi SSID input fields stored cross-site scripting | 4.3CISA ADP v3.1 | 0.4% | 2024-10-30 | |
| CVE-2024-31152 | LevelOne WBR-6012 resource exhaustion | 7.5v3.1 | 17.2% | 2024-10-30 | |
| CVE-2024-31151 | LevelOne WBR-6012 hard-coded credentials | 9.8v3.1 | 0.7% | 2024-10-30 | |
| CVE-2024-28875 | LevelOne WBR-6012 hard-coded credentials | 8.1CNA v3.1 | 0.7% | 2024-10-30 | |
| CVE-2024-28052 | LevelOne WBR-6012 incorrect buffer size calculation | 7.5v3.1 | 0.7% | 2024-10-30 | |
| CVE-2024-24777 | LevelOne WBR-6012 Web application functionality of the LevelOne cross-site request forgery | 8.8v3.1 | 8.1% | 2024-10-30 | |
| CVE-2024-23309 | LevelOne WBR-6012 authentication bypass | 8.1NVD v3.1 | 0.9% | 2024-10-30 | |
| CVE-2024-10546 | open-scratch Teaching 在线教学平台 URL getDictItemsByTable SQL injection | 5.3CNA v4.0 | 0.3% | 2024-10-30 | |
| CVE-2024-10525 | Eclipse Mosquito: Heap buffer overflow in my_subscribe_callback | 7.2CNA v4.0 | 59.5% | 2024-10-30 | Fix |
| CVE-2024-10509 | Codezips Online Institute Management System login.php SQL injection | 9.8v3.1 | 0.8% | 2024-10-30 | |
| CVE-2024-10507 | Codezips Free Exam Hall Seating Management System login.php SQL injection | 9.8v3.1 | 0.8% | 2024-10-30 | |
| CVE-2024-10506 | code-projects Blood Bank System B-.php SQL injection | 7.2v3.1 | 0.6% | 2024-10-30 | |
| CVE-2024-10505 | WuzhiCMS block.php edit code injection | 7.2v3.1 | 0.7% | 2024-10-30 | |
| CVE-2024-10503 | Klokan MapTiler tileserver-gl URL cross-site scripting | 6.1v3.1 | 0.3% | 2024-10-30 | |
| CVE-2024-10502 | ESAFENET CDG FileDirectoryService.java getOneFileDirectory SQL injection | 8.8v3.1 | 0.6% | 2024-10-30 | |
| CVE-2024-10501 | ESAFENET CDG ExamCDGDocService.java findById SQL injection | 8.8v3.1 | 0.6% | 2024-10-30 | |
| CVE-2024-10500 | ESAFENET CDG HookWhiteListService.java SQL injection | 8.8v3.1 | 0.6% | 2024-10-30 | |
| CVE-2024-10456 | Delta Electronics InfraSuite Device Master deserialization of untrusted data | 9.3CNA v4.0 | 17.6% | 2024-10-30 | Fix |
| CVE-2024-10399 | Download Monitor WordPress plugin missing authorization to sensitive information exposure | 4.3CNA v3.1 | 0.4% | 2024-10-30 | Fix |
| CVE-2024-10223 | WP Team WordPress plugin stored cross-site scripting | 6.4CNA v3.1 | 0.3% | 2024-10-30 | Fix |
| CVE-2024-10108 | WPAdverts Classifieds WordPress plugin unauthenticated stored cross-site scripting | 7.2CNA v3.1 | 0.4% | 2024-10-30 | Fix |
| CVE-2024-10086 | Consul vulnerable to reflected XSS on Content-Type Error Manipulation | 6.1CNA v3.1 | 0.4% | 2024-10-30 | Fix |
| CVE-2024-10006 | Consul L7 Intentions vulnerable to Headers Bypass | 8.3CNA v3.1 | 0.5% | 2024-10-30 | Fix |
| CVE-2024-10005 | Consul L7 Intentions vulnerable to URL Path Bypass | 8.1CNA v3.1 | 0.8% | 2024-10-30 | Fix |
| CVE-2024-9886 | WP Baidu Map WordPress plugin authenticated (Contributor+) stored cross-site scripting via shortcode | 6.4CNA v3.1 | 0.4% | 2024-10-30 | |
| CVE-2024-9885 | Widget or Sidebar Shortcode WordPress plugin stored cross-site scripting | 6.4CNA v3.1 | 0.4% | 2024-10-30 | |
| CVE-2024-9884 | T(-) Countdown WordPress plugin stored cross-site scripting | 6.4CNA v3.1 | 0.3% | 2024-10-30 | |
| CVE-2024-9846 | Enable Shortcodes inside Widgets,Comments and Experts WordPress plugin code injection | 7.3CNA v3.1 | 0.6% | 2024-10-30 | |
| CVE-2024-9632 | Red Hat Enterprise Linux 10 heap-based buffer overflow | 7.8CNA v3.1 | 0.9% | 2024-10-30 | Fix |
| CVE-2024-9419 | HP Smart Universal Printing Driver XPS file processing out-of-bounds write | 7.8CNA v3.1 | 0.7% | 2024-10-30 | Fix |
| CVE-2024-9388 | Black Widgets For Elementor WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.3% | 2024-10-30 | Fix |
| CVE-2024-9110 | Cross-site scripting in Privileged Identity | 6.4CNA v3.1 | 0.2% | 2024-10-30 | Fix |
| CVE-2024-8871 | Pricing Tables WordPress Plugin Easy Pricing Tables reflected cross-site scripting | 6.1CNA v3.1 | 0.4% | 2024-10-30 | Fix |
| CVE-2024-8792 | Subscribe to Comments WordPress plugin reflected cross-site scripting | 6.1CNA v3.1 | 0.4% | 2024-10-30 | Fix |
| CVE-2024-8627 | Ultimate TinyMCE WordPress plugin authenticated (Contributor+) stored cross-site scripting | 5.4v3.1 | 0.3% | 2024-10-30 | |
| CVE-2024-8512 | W3SPEEDSTER WordPress plugin authenticated (Administrator+) remote code execution | 9.1CNA v3.1 | 1.0% | 2024-10-30 | Fix |
| CVE-2024-8444 | Download Manager WordPress plugin Contributor+ stored XSS | 5.4CISA ADP v3.1 | 0.3% | 2024-10-30 | Fix |
| CVE-2024-3935 | Eclipse Mosquito: Double free | 6.0CNA v4.0 | 0.7% | 2024-10-30 | Fix |
| CVE-2024-51568 | CyberPanel OS command injection | 9.8NVD v3.1 | 47.7% | 2024-10-29 | NucleiMetasploitEmerging ThreatsExploit codeFix |
| CVE-2024-51567 | CyberPanel incorrect default permissions | 9.8v3.1 | 84.4% | 2024-10-29 | KEVNucleiMetasploitEmerging ThreatsExploit codeFix |
| CVE-2024-51378 | CyberPanel incorrect default permissions | 9.8v3.1 | 94.7% | 2024-10-29 | KEVNucleiMetasploitEmerging ThreatsExploit codeFix |
| CVE-2024-51181 | PHPGurukul Ifsc Code Finder cross-site scripting | 6.1NVD v3.1 | 0.4% | 2024-10-29 | |
| CVE-2024-51180 | PHPGurukul Ifsc Code Finder cross-site scripting | 6.1NVD v3.1 | 0.4% | 2024-10-29 | |
| CVE-2024-51076 | PHPGurukul Online DJ Booking Management System cross-site scripting | 6.1v3.1 | 0.4% | 2024-10-29 | |
| CVE-2024-51075 | PHPGurukul Online DJ Booking Management System cross-site scripting | 6.1v3.1 | 0.4% | 2024-10-29 | |
| CVE-2024-50550 | LiteSpeed Cache WordPress plugin privilege escalation | 9.8v3.1 | 0.9% | 2024-10-29 | Fix |
| CVE-2024-50494 | Sudan Payment Gateway for WooCommerce WordPress plugin arbitrary file upload | 10.0CNA v3.1 | 0.5% | 2024-10-29 | |
| CVE-2024-50493 | Automatic Translation WordPress plugin arbitrary file upload | 10.0CNA v3.1 | 1.1% | 2024-10-29 | Exploit code |
| CVE-2024-50490 | PegaPoll WordPress plugin arbitrary option update to privilege escalation | 9.8CNA v3.1 | 1.0% | 2024-10-29 | Exploit code |
| CVE-2024-50485 | Exam Matrix WordPress plugin privilege escalation | 9.8CNA v3.1 | 1.0% | 2024-10-29 | Exploit code |
| CVE-2024-50484 | Multi Purpose Mail Form WordPress plugin arbitrary file upload | 10.0CNA v3.1 | 0.5% | 2024-10-29 | |
| CVE-2024-50482 | Woocommerce Product Design WordPress plugin arbitrary file upload | 10.0CNA v3.1 | 1.1% | 2024-10-29 | Exploit code |
| CVE-2024-50481 | Bstone Demo Importer WordPress plugin privilege escalation | 8.8CNA v3.1 | 0.4% | 2024-10-29 | |
| CVE-2024-50480 | Marketing Automation by AZEXO WordPress plugin arbitrary file upload | 9.9CNA v3.1 | 0.5% | 2024-10-29 | |
| CVE-2024-50476 | GRÜN spendino Spendenformular WordPress plugin arbitrary option update to privilege escalation | 9.8CNA v3.1 | 1.3% | 2024-10-29 | Exploit code |
| CVE-2024-50475 | Signup Page WordPress plugin arbitrary option update to privilege escalation | 9.8CNA v3.1 | 1.3% | 2024-10-29 | Exploit code |
| CVE-2024-50473 | Ajar in5 Embed WordPress plugin arbitrary file upload | 10.0CNA v3.1 | 1.1% | 2024-10-29 | Exploit codeFix |
| CVE-2024-50466 | DarkMySite Advanced Dark Mode Plugin for WordPress cross-site request forgery (CSRF) | 8.8v3.1 | 0.2% | 2024-10-29 | Fix |
| CVE-2024-50459 | AidWP WordPress plugin broken access control | 9.8v3.1 | 0.4% | 2024-10-29 | Fix |
| CVE-2024-50456 | SEOPress WordPress plugin broken access control | 8.8v3.1 | 0.3% | 2024-10-29 | Fix |
| CVE-2024-50455 | SEOPress WordPress plugin broken access control | 8.8v3.1 | 0.4% | 2024-10-29 | Fix |
| CVE-2024-50454 | SEOPress WordPress plugin unauthenticated broken access control | 5.3CNA v3.1 | 0.3% | 2024-10-29 | Fix |
| CVE-2024-50428 | Multi Step Form WordPress plugin broken access control | 9.8v3.1 | 0.3% | 2024-10-29 | Fix |
| CVE-2024-50427 | SurveyJS WordPress plugin arbitrary file upload | 9.9CNA v3.1 | 1.0% | 2024-10-29 | Exploit codeFix |
| CVE-2024-50426 | Survey Maker WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.3% | 2024-10-29 | Fix |
| CVE-2024-50425 | WP Booking System Booking Calendar WordPress plugin broken access control | 6.5CNA v3.1 | 0.4% | 2024-10-29 | Fix |
| CVE-2024-50424 | Templately WordPress plugin broken access control | 6.5CNA v3.1 | 0.4% | 2024-10-29 | Fix |
| CVE-2024-50423 | Templately WordPress plugin broken access control | 5.4CNA v3.1 | 0.4% | 2024-10-29 | Fix |
| CVE-2024-50422 | Breeze WordPress plugin broken access control | 5.3CNA v3.1 | 0.6% | 2024-10-29 | Fix |
| CVE-2024-50421 | PDF Invoices and Packing Slips for WooCommerce WordPress plugin broken access control | 5.3CNA v3.1 | 0.4% | 2024-10-29 | Fix |
| CVE-2024-50420 | aDirectory WordPress plugin arbitrary file upload | 10.0CNA v3.1 | 0.5% | 2024-10-29 | Fix |
| CVE-2024-50418 | Time Slot WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.3% | 2024-10-29 | Fix |
| CVE-2024-50415 | Ads.txt and App-ads.txt Manager for WordPress plugin stored cross-site scripting (XSS) | 5.9CNA v3.1 | 0.3% | 2024-10-29 | Fix |
| CVE-2024-50414 | Button contact VR WordPress plugin cross-site scripting (XSS) | 5.9CNA v3.1 | 0.3% | 2024-10-29 | Fix |
| CVE-2024-50413 | Import and export users and customers WordPress plugin cross-site scripting (XSS) | 5.9CNA v3.1 | 0.3% | 2024-10-29 | Fix |
| CVE-2024-50412 | Conditional Fields for Contact Form 7 WordPress plugin cross-site scripting (XSS) | 5.9CNA v3.1 | 0.3% | 2024-10-29 | Fix |
| CVE-2024-50411 | WP Abstracts WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.3% | 2024-10-29 | Fix |
| CVE-2024-50410 | Namaste! LMS WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.3% | 2024-10-29 | Fix |
| CVE-2024-50409 | Namaste! LMS WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.3% | 2024-10-29 | Fix |
| CVE-2024-50407 | Namaste! LMS WordPress plugin cross-site scripting (XSS) | 6.1NVD v3.1 | 0.3% | 2024-10-29 | Fix |
| CVE-2024-50348 | InstantCMS has a cross-site scripting | 5.4CNA v3.1 | 0.3% | 2024-10-29 | Fix |
| CVE-2024-50334 | Erudika scoold semicolon path injection on API /API;/config | 8.7CNA v4.0 | 1.0% | 2024-10-29 | NucleiFix |
| CVE-2024-50088 | Linux kernel Btrfs inode reference handling uninitialized pointer access | 7.8CNA v3.1 | 0.2% | 2024-10-29 | Fix |
| CVE-2024-50087 | Linux kernel Btrfs name allocation uninitialized pointer access | 7.8CNA v3.1 | 0.2% | 2024-10-29 | Fix |
| CVE-2024-50086 | Linux kernel ksmbd session management use-after-free | 9.8CNA v3.1 | 0.5% | 2024-10-29 | Fix |
| CVE-2024-50085 | Linux kernel pm use-after-free | 9.8CNA v3.1 | 0.5% | 2024-10-29 | Fix |
| CVE-2024-50084 | Linux kernel Microchip VCAP API memory leak | 5.5NVD v3.1 | 0.2% | 2024-10-29 | Fix |
| CVE-2024-50083 | In the Linux kernel, the following vulnerability has been resolved: tcp: fix mptcp DSS corruption due to large pmtu xmit Syzkaller was able to trigger a DSS corruption: TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. ------------[ cut here ]------------ | 7.5v3.1 | 0.9% | 2024-10-29 | Fix |
| CVE-2024-50082 | Linux kernel blk-rq-qos crash | 7.8CNA v3.1 | 0.2% | 2024-10-29 | Fix |
| CVE-2024-50081 | Linux kernel blk-mq hardware context initialization vulnerability | 5.5v3.1 | 0.2% | 2024-10-29 | Fix |
| CVE-2024-50080 | Linux kernel ublk user copy feature vulnerability | 5.5v3.1 | 0.2% | 2024-10-29 | Fix |
| CVE-2024-50079 | Linux kernel io_uring SQPOLL task work vulnerability | 5.5v3.1 | 0.2% | 2024-10-29 | Fix |
| CVE-2024-50078 | Linux kernel Bluetooth ISO module unload denial of service | 7.8CNA v3.1 | 0.2% | 2024-10-29 | Fix |
| CVE-2024-50077 | Linux kernel Bluetooth ISO socket layer denial of service | 7.8CNA v3.1 | 0.2% | 2024-10-29 | Fix |
| CVE-2024-50076 | Linux kernel vt missing resource initialization | 6.5v3.1 | 0.6% | 2024-10-29 | Fix |
| CVE-2024-50075 | Linux kernel Tegra XHCI USB controller driver vulnerability | 8.0CNA v3.1 | 0.2% | 2024-10-29 | Fix |
| CVE-2024-50074 | Linux kernel parport driver out-of-bounds read | 7.8CNA v3.1 | 0.2% | 2024-10-29 | Fix |
| CVE-2024-50073 | Linux kernel n_gsm use-after-free | 7.8CNA v3.1 | 0.3% | 2024-10-29 | Fix |
| CVE-2024-50072 | In the Linux kernel, the following vulnerability has been resolved: x86/bugs: Use code segment selector for VERW operand Robert Gill reported below #GP in 32-bit mode when dosemu software was executing vm86() system call: general protection fault: 0000 [#1] PREEMPT SMP CPU: 4 PID: 4610 Comm: | 5.5v3.1 | 0.2% | 2024-10-29 | Fix |
| CVE-2024-50071 | Linux kernel Nuvoton MA35 pinctrl driver double free | 7.8v3.1 | 0.2% | 2024-10-29 | Fix |
| CVE-2024-50070 | Linux kernel STM32 pinctrl driver null pointer dereference | 5.5v3.1 | 0.2% | 2024-10-29 | Fix |
| CVE-2024-50069 | Linux kernel Apple pinctrl driver null pointer dereference | 5.5v3.1 | 0.2% | 2024-10-29 | Fix |
| CVE-2024-50068 | Linux kernel DAMON sysfs kunit tests memory leak | 5.5v3.1 | 0.2% | 2024-10-29 | Fix |
| CVE-2024-50052 | Mattermost arbitrary post deletion via Playbooks /ignore-thread endpoint | 4.3CNA v3.1 | 0.3% | 2024-10-29 | Fix |
| CVE-2024-49769 | Waitress has a denial of service leading to high CPU usage/resource exhaustion | 7.5CNA v3.1 | 1.4% | 2024-10-29 | Fix |
| CVE-2024-49768 | Waitress has request processing race condition in HTTP pipelining with invalid first request | 9.1CNA v3.1 | 0.5% | 2024-10-29 | Fix |
| CVE-2024-49692 | AffiliateX WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.2% | 2024-10-29 | Fix |
| CVE-2024-49679 | WPKoi Templates for Elementor WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.3% | 2024-10-29 | Fix |
| CVE-2024-49678 | js paper WordPress theme reflected cross-site scripting (XSS) | 7.1CNA v3.1 | 0.3% | 2024-10-29 | |
| CVE-2024-49673 | LaTeX2HTML WordPress plugin reflected cross-site scripting (XSS) | 6.1NVD v3.1 | 0.3% | 2024-10-29 | Fix |
| CVE-2024-49672 | Google Docs RSVP WordPress plugin CSRF to stored cross-site scripting (XSS) | 6.1NVD v3.1 | 0.2% | 2024-10-29 | |
| CVE-2024-49670 | Client Power Tools Portal WordPress plugin reflected cross-site scripting (XSS) | 6.1NVD v3.1 | 0.3% | 2024-10-29 | Fix |
| CVE-2024-49667 | Local Business Addons For Elementor WordPress plugin stored cross-site scripting (XSS) | 5.4v3.1 | 0.3% | 2024-10-29 | |
| CVE-2024-49665 | Web Bricks Addons for Elementor WordPress plugin stored cross-site scripting (XSS) | 5.4v3.1 | 0.3% | 2024-10-29 | Fix |
| CVE-2024-49664 | chatplusjp WordPress plugin cross-site scripting (XSS) | 6.1NVD v3.1 | 0.3% | 2024-10-29 | |
| CVE-2024-49663 | uCAT Next Story WordPress plugin reflected cross-site scripting (XSS) | 6.1NVD v3.1 | 0.3% | 2024-10-29 | |
| CVE-2024-49662 | Simple Load More WordPress plugin reflected cross-site scripting (XSS) | 6.1NVD v3.1 | 0.3% | 2024-10-29 | |
| CVE-2024-49661 | leenk.me WordPress plugin reflected cross-site scripting (XSS) | 6.1NVD v3.1 | 0.3% | 2024-10-29 | |
| CVE-2024-49660 | Campus Explorer Widget WordPress plugin reflected cross-site scripting (XSS) | 6.1NVD v3.1 | 0.3% | 2024-10-29 | |
| CVE-2024-49659 | Coub WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.3% | 2024-10-29 | |
| CVE-2024-49656 | DocumentPress WordPress plugin reflected cross-site scripting (XSS) | 6.1NVD v3.1 | 0.3% | 2024-10-29 | |
| CVE-2024-49654 | Extra Privacy for Elementor WordPress plugin reflected cross-site scripting (XSS) | 6.1NVD v3.1 | 0.3% | 2024-10-29 | |
| CVE-2024-49651 | WooCommerce Maintenance Mode WordPress plugin reflected cross-site scripting (XSS) | 6.1NVD v3.1 | 0.3% | 2024-10-29 | |
| CVE-2024-49650 | BuddyPress Greeting Message WordPress plugin reflected cross-site scripting (XSS) | 7.1CNA v3.1 | 0.3% | 2024-10-29 | |
| CVE-2024-49648 | SVG Captcha WordPress plugin reflected cross-site scripting (XSS) | 7.1CNA v3.1 | 0.3% | 2024-10-29 | |
| CVE-2024-49647 | Simple Custom Admin WordPress plugin reflected cross-site scripting (XSS) | 7.1CNA v3.1 | 0.3% | 2024-10-29 | |
| CVE-2024-49646 | Code Generate WordPress plugin reflected cross-site scripting (XSS) | 7.1CNA v3.1 | 0.3% | 2024-10-29 | |
| CVE-2024-49645 | Affiliate Platform WordPress plugin reflected cross-site scripting (XSS) | 6.1NVD v3.1 | 0.3% | 2024-10-29 | |
| CVE-2024-49643 | Whitelist WordPress plugin reflected cross-site scripting (XSS) | 6.1NVD v3.1 | 0.3% | 2024-10-29 | |
| CVE-2024-49642 | Todo Custom Field WordPress plugin reflected cross-site scripting (XSS) | 6.1NVD v3.1 | 0.3% | 2024-10-29 | |
| CVE-2024-49641 | Tida URL Screenshot WordPress plugin reflected cross-site scripting (XSS) | 6.1NVD v3.1 | 0.3% | 2024-10-29 | Fix |
| CVE-2024-49640 | ACL Floating Cart for WooCommerce WordPress plugin reflected cross-site scripting (XSS) | 6.1NVD v3.1 | 0.3% | 2024-10-29 | |
| CVE-2024-49639 | Monitor.chat WordPress plugin reflected cross-site scripting (XSS) | 6.1NVD v3.1 | 0.3% | 2024-10-29 | |
| CVE-2024-49638 | Risk Warning Bar WordPress plugin reflected cross-site scripting (XSS) | 6.1NVD v3.1 | 0.3% | 2024-10-29 | |
| CVE-2024-49637 | Bet WC 2018 Russia WordPress plugin reflected cross-site scripting (XSS) | 6.1NVD v3.1 | 0.3% | 2024-10-29 | |
| CVE-2024-49636 | Agile Video Player Lite WordPress plugin reflected cross-site scripting (XSS) | 6.1NVD v3.1 | 0.3% | 2024-10-29 | |
| CVE-2024-49635 | Banner Slider WordPress plugin reflected cross-site scripting (XSS) | 6.1NVD v3.1 | 0.3% | 2024-10-29 | |
| CVE-2024-49634 | BP Member Type Manager WordPress plugin reflected cross-site scripting (XSS) | 6.1NVD v3.1 | 0.3% | 2024-10-29 | |
| CVE-2024-49632 | CWD 3D Image Gallery WordPress plugin reflected cross-site scripting (XSS) | 6.1NVD v3.1 | 0.3% | 2024-10-29 | |
| CVE-2024-48955 | NetAdmin missing authorization | 8.1CISA ADP v3.1 | 0.6% | 2024-10-29 | Exploit code |
| CVE-2024-48921 | Kyverno's PolicyException objects can be created in any namespace by default | 8.7CNA v4.0 | 0.6% | 2024-10-29 | Fix |
| CVE-2024-48573 | AquilaCMS NoSQL injection | 9.8CISA ADP v3.1 | 1.0% | 2024-10-29 | Exploit code |
| CVE-2024-48572 | AquilaCMS incorrect default permissions | 5.3CISA ADP v3.1 | 0.4% | 2024-10-29 | |
| CVE-2024-48461 | TeslaLogger Admin Panel cross-site scripting | 4.8CISA ADP v3.1 | 0.4% | 2024-10-29 | |
| CVE-2024-48206 | chainer v7.8.1.post1 deserialization of untrusted data | 9.8CISA ADP v3.1 | 0.8% | 2024-10-29 | |
| CVE-2024-48138 | PluXml parametres_edittpl.php template editor code injection | 9.8CISA ADP v3.1 | 0.9% | 2024-10-29 | |
| CVE-2024-48063 | Linux Foundation PyTorch deserialization of untrusted data | 9.8v3.1 | 1.6% | 2024-10-29 | Fix |
| CVE-2024-47640 | WP ERP WordPress plugin reflected cross-site scripting (XSS) | 6.1NVD v3.1 | 0.4% | 2024-10-29 | Fix |
| CVE-2024-47401 | Mattermost DoS via Amplified GraphQL Response in Playbooks | 4.3CNA v3.1 | 0.5% | 2024-10-29 | Fix |
| CVE-2024-46872 | Mattermost Client-Side path traversal leading to CSRF in Playbooks | 4.6CNA v3.1 | 0.2% | 2024-10-29 | Fix |
| CVE-2024-45656 | IBM Flexible Service Processor hard coded credentials | 9.8CNA v3.1 | 0.4% | 2024-10-29 | Fix |
| CVE-2024-45477 | Apache NiFi: Improper neutralization of Input in Parameter Description | 4.6CNA v3.1 | 0.7% | 2024-10-29 | Fix |
| CVE-2024-44081 | 8X8 jitsi-meet cross-site scripting | 9.8CISA ADP v3.1 | 0.7% | 2024-10-29 | |
| CVE-2024-44080 | 8X8 jitsi-meet cross-site scripting | 7.5CISA ADP v3.1 | 0.5% | 2024-10-29 | |
| CVE-2024-41156 | Hitachi Energy TRO600 improper removal of sensitive information | 2.7CNA v3.1 | 0.4% | 2024-10-29 | Fix |
| CVE-2024-41153 | Hitachi Energy TRO600 Edge Computing UI for the command injection | 7.2CNA v3.1 | 1.6% | 2024-10-29 | Fix |
| CVE-2024-25566 | Open redirect in PingAM | 5.1CNA v4.0 | 0.2% | 2024-10-29 | Fix |
| CVE-2024-22066 | ZTE ZXR10 1800-2S There is a privilege escalation | 7.5CNA v3.1 | 0.3% | 2024-10-29 | Fix |
| CVE-2024-22065 | ZTE MF258 Pro product has a OS command injection | 6.8CNA v3.1 | 1.2% | 2024-10-29 | Fix |
| CVE-2024-10491 | express preload arbitrary resources by injecting additional `Link` headers | 5.3NVD v3.1 | 0.4% | 2024-10-29 | Fix |
| CVE-2024-10488 | Google Chrome WebRTC use-after-free | 8.8v3.1 | 0.6% | 2024-10-29 | Fix |
| CVE-2024-10487 | Google Chrome Dawn out-of-bounds write | 8.8v3.1 | 0.8% | 2024-10-29 | Fix |
| CVE-2024-10479 | LinZhaoguan pb-cms Theme Management module admin#themes cross-site scripting | 5.4v3.1 | 0.3% | 2024-10-29 | |
| CVE-2024-10478 | LinZhaoguan pb-cms Edit Article edit cross-site scripting | 5.4v3.1 | 0.3% | 2024-10-29 | |
| CVE-2024-10477 | LinZhaoguan pb-cms Permission Management page admin#permissions cross-site scripting | 5.4v3.1 | 0.3% | 2024-10-29 | |
| CVE-2024-10474 | Mozilla Focus improper authentication | 6.5NVD v3.1 | 0.3% | 2024-10-29 | Fix |
| CVE-2024-10468 | Mozilla Firefox race condition | 5.3NVD v3.1 | 0.4% | 2024-10-29 | Fix |
| CVE-2024-10467 | Mozilla Firefox memory safety bugs | 8.8NVD v3.1 | 0.6% | 2024-10-29 | Fix |
| CVE-2024-10466 | Mozilla Firefox resource exhaustion | 7.5v3.1 | 0.8% | 2024-10-29 | Fix |
| CVE-2024-10465 | Mozilla Firefox authentication bypass by spoofing | 6.5NVD v3.1 | 0.5% | 2024-10-29 | Fix |
| CVE-2024-10464 | Mozilla Firefox out-of-bounds read | 6.5NVD v3.1 | 0.6% | 2024-10-29 | Fix |
| CVE-2024-10463 | Mozilla Firefox observable discrepancy | 6.5NVD v3.1 | 0.7% | 2024-10-29 | Fix |
| CVE-2024-10462 | Mozilla Firefox authentication bypass by spoofing | 6.5NVD v3.1 | 0.5% | 2024-10-29 | Fix |
| CVE-2024-10461 | Mozilla Firefox cross-site scripting | 6.1v3.1 | 0.6% | 2024-10-29 | Fix |
| CVE-2024-10460 | Mozilla Firefox origin validation error | 5.3v3.1 | 0.3% | 2024-10-29 | Fix |
| CVE-2024-10459 | Mozilla Firefox use-after-free | 7.5v3.1 | 0.6% | 2024-10-29 | Fix |
| CVE-2024-10458 | Mozilla Firefox improper preservation of permissions | 7.5v3.1 | 0.6% | 2024-10-29 | Fix |
| CVE-2024-10452 | Grafana org admin can delete pending invites in different org | 2.2CNA v3.1 | 0.5% | 2024-10-29 | Fix |
| CVE-2024-10437 | WPClever WPC Smart Messages for WooCommerce missing authorization | 4.3CNA v3.1 | 0.4% | 2024-10-29 | Fix |
| CVE-2024-10436 | WPC Smart Messages for WooCommerce WordPress plugin authenticated (Subscriber+) local file inclusion | 8.8CNA v3.1 | 0.7% | 2024-10-29 | Fix |
| CVE-2024-10360 | The Move Addons for Elementor plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.3.5 via the render function in includes/widgets/accordion/widget.php, includes/widgets/remote-template/widget.php, and other widget.php files. This makes it poss | 4.3CNA v3.1 | 0.4% | 2024-10-29 | Fix |
| CVE-2024-10312 | Exclusive Addons for Elementor WordPress plugin sensitive information exposure | 4.3CNA v3.1 | 0.4% | 2024-10-29 | Fix |
| CVE-2024-10266 | Premium Addons for Elementor WordPress plugin DOM-based stored cross-site scripting | 5.4v3.1 | 0.3% | 2024-10-29 | Fix |
| CVE-2024-10241 | Mattermost private channel names leaked with Ctrl+K when ElasticSearch is enabled | 4.3CNA v3.1 | 0.3% | 2024-10-29 | Fix |
| CVE-2024-10233 | SMS Alert Order Notifications WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.3% | 2024-10-29 | Fix |
| CVE-2024-10228 | Vagrant VMWare Utility installation files vulnerable to modification by unprivileged user | 3.8CNA v3.1 | 0.1% | 2024-10-29 | Fix |
| CVE-2024-10227 | affiliate-toolkit WordPress plugin stored cross-site scripting | 6.4CNA v3.1 | 0.3% | 2024-10-29 | Fix |
| CVE-2024-10226 | Arconix Shortcodes WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.3% | 2024-10-29 | Fix |
| CVE-2024-10185 | StreamWeasels YouTube Integration WordPress plugin stored cross-site scripting | 6.4CNA v3.1 | 0.4% | 2024-10-29 | Fix |
| CVE-2024-10184 | StreamWeasels Kick Integration WordPress plugin stored cross-site scripting | 6.4CNA v3.1 | 0.4% | 2024-10-29 | Fix |
| CVE-2024-10181 | Newsletters WordPress plugin stored cross-site scripting | 6.4CNA v3.1 | 0.4% | 2024-10-29 | Fix |
| CVE-2024-10048 | Post Status Notifier Lite and Premium WordPress plugin reflected cross-site scripting via page | 6.1CNA v3.1 | 0.3% | 2024-10-29 | Fix |
| CVE-2024-10008 | Masteriyo LMS users REST API endpoint privilege escalation | 6.5NVD v3.1 | 0.6% | 2024-10-29 | Fix |
| CVE-2024-10000 | Masteriyo LMS eLearning and Online Course Builder for WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.3% | 2024-10-29 | Fix |
| CVE-2024-9997 | Autodesk AutoCAD DWG File Parsing memory corruption code execution | 7.8CNA v3.1 | 0.2% | 2024-10-29 | Fix |
| CVE-2024-9996 | Autodesk AutoCAD DWG File Parsing out-of-bounds write code execution | 7.8CNA v3.1 | 0.2% | 2024-10-29 | Fix |
| CVE-2024-9990 | Crypto WordPress plugin cross-site request forgery to authentication bypass | 8.8CNA v3.1 | 0.3% | 2024-10-29 | Fix |
| CVE-2024-9989 | Crypto WordPress plugin authentication bypass via log_in | 9.8CNA v3.1 | 7.1% | 2024-10-29 | NucleiFix |
| CVE-2024-9988 | Crypto WordPress plugin authentication bypass via register | 9.8CNA v3.1 | 1.1% | 2024-10-29 | Fix |
| CVE-2024-9827 | Autodesk AutoCAD ACTranslators CATPART File Parsing out-of-bounds read | 7.8CNA v3.1 | 0.2% | 2024-10-29 | Fix |
| CVE-2024-9826 | Autodesk AutoCAD ACTranslators 3DM File Parsing use-after-free code execution | 7.8CNA v3.1 | 0.2% | 2024-10-29 | Fix |
| CVE-2024-9505 | Beaver Builder WordPress Page Builder plugin stored DOM-based cross-site scripting | 5.4v3.1 | 0.3% | 2024-10-29 | Fix |
| CVE-2024-9489 | Autodesk AutoCAD DWG File Parsing memory corruption code execution | 7.8CNA v3.1 | 0.2% | 2024-10-29 | Fix |
| CVE-2024-9438 | SEUR Oficial WordPress plugin reflected cross-site scripting | 6.1CNA v3.1 | 0.4% | 2024-10-29 | Fix |
| CVE-2024-9376 | Kata Plus WordPress plugin stored cross-site scripting | 6.4CNA v3.1 | 0.4% | 2024-10-29 | Fix |
| CVE-2024-8924 | ServiceNow Now Platform unauthenticated blind SQL injection in Core Platform | 8.7CNA v4.0 | 0.5% | 2024-10-29 | Fix |
| CVE-2024-8923 | Sandbox escape in Now Platform | 9.3CNA v4.0 | 1.1% | 2024-10-29 | Fix |
| CVE-2024-8896 | Autodesk AutoCAD DXF File Parsing Unitialized variable code execution | 7.8CNA v3.1 | 0.2% | 2024-10-29 | Fix |
| CVE-2024-8600 | Autodesk AutoCAD memory corruption | 7.8CNA v3.1 | 0.2% | 2024-10-29 | Fix |
| CVE-2024-8599 | Autodesk AutoCAD ACTranslators STP File Parsing memory corruption code execution | 7.8CNA v3.1 | 0.2% | 2024-10-29 | Fix |
| CVE-2024-8598 | Autodesk AutoCAD ACTranslators STEP File Parsing memory corruption code execution | 7.8CNA v3.1 | 0.2% | 2024-10-29 | Fix |
| CVE-2024-8597 | Autodesk AutoCAD STEP File Parsing memory corruption code execution | 7.8CNA v3.1 | 0.2% | 2024-10-29 | Fix |
| CVE-2024-8596 | Autodesk AutoCAD MODEL File Parsing out-of-bounds write code execution | 7.8CNA v3.1 | 0.2% | 2024-10-29 | Fix |
| CVE-2024-8595 | Autodesk AutoCAD MODEL File Parsing use-after-free code execution | 7.8CNA v3.1 | 0.2% | 2024-10-29 | Fix |
| CVE-2024-8594 | Autodesk AutoCAD MODEL File Parsing heap-based buffer overflow code execution | 7.8CNA v3.1 | 0.2% | 2024-10-29 | Fix |
| CVE-2024-8593 | Autodesk AutoCAD CATPART File Parsing out-of-bounds write code execution | 7.8CNA v3.1 | 0.2% | 2024-10-29 | Fix |
| CVE-2024-8592 | Autodesk AutoCAD CATPART File Parsing memory corruption code execution | 7.8CNA v3.1 | 0.2% | 2024-10-29 | Fix |
| CVE-2024-8591 | Autodesk AutoCAD 3DM File Parsing heap-based buffer overflow code execution | 7.8CNA v3.1 | 0.2% | 2024-10-29 | Fix |
| CVE-2024-8590 | Autodesk AutoCAD 3DM File Parsing use-after-free code execution | 7.8CNA v3.1 | 0.2% | 2024-10-29 | Fix |
| CVE-2024-8589 | Autodesk AutoCAD SLDPRT File Parsing out-of-bounds read | 7.8CNA v3.1 | 0.2% | 2024-10-29 | Fix |
| CVE-2024-8588 | Autodesk AutoCAD SLDPRT File Parsing out-of-bounds read | 7.8CNA v3.1 | 0.2% | 2024-10-29 | Fix |
| CVE-2024-8587 | Autodesk AutoCAD SLDPRT File Parsing heap-based buffer overflow code execution | 7.8CNA v3.1 | 0.2% | 2024-10-29 | Fix |
| CVE-2024-8309 | SQL injection in langchain-ai/langchain | 9.8v3.1 | 13.8% | 2024-10-29 | Exploit codeFix |
| CVE-2024-8143 | Unauthorized access to User Chat History in gaizhenbiao/ChuanhuChatGPT | 4.3v3.1 | 0.5% | 2024-10-29 | Fix |
| CVE-2024-7992 | Autodesk AutoCAD DWG stack-based buffer overflow code execution | 7.8CNA v3.1 | 0.2% | 2024-10-29 | Fix |
| CVE-2024-7991 | Autodesk AutoCAD DWG out-of-bounds write code execution | 7.8CNA v3.1 | 0.2% | 2024-10-29 | Fix |
| CVE-2024-7985 | FileOrganizer WordPress plugin authenticated (Subscriber+) arbitrary file upload | 8.8v3.1 | 2.4% | 2024-10-29 | Exploit codeFix |
| CVE-2024-7962 | Arbitrary file read via Insufficient Validation in gaizhenbiao/ChuanhuChatGPT | 7.5v3.1 | 0.8% | 2024-10-29 | Fix |
| CVE-2024-7807 | Denial of service (DOS) in gaizhenbiao/ChuanhuChatGPT | 7.5v3.1 | 0.6% | 2024-10-29 | Fix |
| CVE-2024-7783 | Improper Storage of Sensitive Information in Bearer Token in mintplex-labs/anything-llm | 7.5v3.1 | 0.3% | 2024-10-29 | Fix |
| CVE-2024-7774 | Path traversal in langchain-ai/langchainjs | 9.1v3.1 | 0.6% | 2024-10-29 | Fix |
| CVE-2024-7475 | Improper access control in lunary-ai/Lunary | 9.1v3.1 | 0.7% | 2024-10-29 | Fix |
| CVE-2024-7474 | IDOR in lunary-ai/Lunary | 8.1NVD v3.1 | 0.6% | 2024-10-29 | Fix |
| CVE-2024-7473 | IDOR vulnerability in lunary-ai/Lunary | 6.5NVD v3.1 | 0.4% | 2024-10-29 | Fix |
| CVE-2024-7472 | Email injection vulnerability in lunary-ai/Lunary | 6.5v3.1 | 0.4% | 2024-10-29 | Fix |
| CVE-2024-7042 | Prompt injection in langchain-ai/langchainjs leading to SQL injection | 9.8v3.1 | 0.3% | 2024-10-29 | Fix |
| CVE-2024-7010 | mudler LocalAI password handling timing side channel | 5.9NVD v3.1 | 0.5% | 2024-10-29 | Fix |
| CVE-2024-6868 | Arbitrary file write in mudler/LocalAI | 9.8v3.1 | 1.5% | 2024-10-29 | Fix |
| CVE-2024-6674 | Data leak through CORS Misconfiguration in parisneo/lollms-webui | 7.1v3.1 | 0.2% | 2024-10-29 | Fix |
| CVE-2024-6673 | CSRF vulnerability in parisneo/lollms-webui | 6.5v3.1 | 0.2% | 2024-10-29 | Fix |
| CVE-2024-6581 | Remote code execution due to stored XSS in parisneo/Lollms | 9.0v3.1 | 0.6% | 2024-10-29 | Fix |
| CVE-2024-5982 | Path traversal in gaizhenbiao/ChuanhuChatGPT | 9.8v3.1 | 31.0% | 2024-10-29 | Fix |
| CVE-2024-5823 | gaizhenbiao ChuanhuChatGPT configuration file handling vulnerability | 9.1v3.1 | 0.6% | 2024-10-29 | Fix |
| CVE-2024-51509 | Tiki cross-site scripting | 4.8CISA ADP v3.1 | 0.2% | 2024-10-28 | |
| CVE-2024-51508 | Tiki cross-site scripting | 4.8CISA ADP v3.1 | 0.2% | 2024-10-28 | |
| CVE-2024-51507 | Tiki cross-site scripting | 4.8CISA ADP v3.1 | 0.2% | 2024-10-28 | |
| CVE-2024-51506 | Tiki cross-site scripting | 4.8CISA ADP v3.1 | 0.2% | 2024-10-28 | |
| CVE-2024-50624 | KDE KMail account setup wizard information disclosure | 5.9CISA ADP v3.1 | 0.3% | 2024-10-28 | Fix |
| CVE-2024-50582 | JetBrains YouTrack cross-site scripting | 4.6CNA v3.1 | 0.3% | 2024-10-28 | Fix |
| CVE-2024-50581 | JetBrains YouTrack cross-site scripting | 4.6CNA v3.1 | 0.3% | 2024-10-28 | Fix |
| CVE-2024-50580 | JetBrains YouTrack cross-site scripting | 4.6CNA v3.1 | 0.3% | 2024-10-28 | Fix |
| CVE-2024-50579 | JetBrains YouTrack cross-site scripting | 4.6CNA v3.1 | 0.3% | 2024-10-28 | Fix |
| CVE-2024-50578 | JetBrains YouTrack cross-site scripting | 4.6CNA v3.1 | 0.3% | 2024-10-28 | Fix |
| CVE-2024-50577 | JetBrains YouTrack cross-site scripting | 4.6CNA v3.1 | 0.3% | 2024-10-28 | Fix |
| CVE-2024-50576 | JetBrains YouTrack cross-site scripting | 4.6CNA v3.1 | 0.3% | 2024-10-28 | Fix |
| CVE-2024-50575 | JetBrains YouTrack cross-site scripting | 4.6CNA v3.1 | 0.4% | 2024-10-28 | Fix |
| CVE-2024-50574 | JetBrains YouTrack regular expression denial of service | 5.3CNA v3.1 | 0.6% | 2024-10-28 | Fix |
| CVE-2024-50573 | JetBrains Hub missing authorization | 4.3CNA v3.1 | 0.2% | 2024-10-28 | Fix |
| CVE-2024-50502 | Cozy Blocks WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.2% | 2024-10-28 | Fix |
| CVE-2024-50501 | Kata Plus WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.3% | 2024-10-28 | Fix |
| CVE-2024-50498 | WP Query Console WordPress plugin remote code execution (RCE) | 9.8v3.1 | 53.6% | 2024-10-28 | NucleiExploit code |
| CVE-2024-50497 | Advanced Online Ordering and Delivery Platform WordPress plugin local file inclusion | 9.8v3.1 | 0.5% | 2024-10-28 | |
| CVE-2024-50496 | AR For WordPress plugin arbitrary file upload | 10.0v3.1 | 0.5% | 2024-10-28 | Fix |
| CVE-2024-50495 | Plugin Propagator WordPress plugin arbitrary file upload | 9.8v3.1 | 0.5% | 2024-10-28 | |
| CVE-2024-50492 | ScottCart WordPress plugin remote code execution (RCE) | 9.8v3.1 | 1.4% | 2024-10-28 | Exploit code |
| CVE-2024-50491 | RSVP ME WordPress plugin SQL injection | 9.8v3.1 | 1.0% | 2024-10-28 | Exploit code |
| CVE-2024-50489 | Realty Workstation WordPress plugin account takeover | 9.8v3.1 | 0.5% | 2024-10-28 | |
| CVE-2024-50488 | Token Login WordPress plugin broken authentication | 8.8v3.1 | 0.9% | 2024-10-28 | Exploit code |
| CVE-2024-50487 | MaanStore API WordPress plugin account takeover | 9.8v3.1 | 0.5% | 2024-10-28 | |
| CVE-2024-50486 | Acnoo Flutter API WordPress plugin account takeover | 9.8v3.1 | 0.5% | 2024-10-28 | |
| CVE-2024-50483 | Meetup WordPress plugin broken authentication | 9.8NVD v3.1 | 2.3% | 2024-10-28 | |
| CVE-2024-50479 | Woocommerce Quote Calculator WordPress plugin SQL injection | 9.8v3.1 | 0.5% | 2024-10-28 | |
| CVE-2024-50478 | 1-Click Login: Passwordless Authentication WordPress plugin broken authentication | 9.8v3.1 | 1.1% | 2024-10-28 | Exploit code |
| CVE-2024-50477 | Stacks Mobile App Builder WordPress plugin account takeover | 9.8v3.1 | 8.0% | 2024-10-28 | NucleiExploit code |
| CVE-2024-50472 | Amilia Store WordPress plugin stored cross-site scripting (XSS) | 5.4v3.1 | 0.2% | 2024-10-28 | |
| CVE-2024-50471 | Trip Plan WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.3% | 2024-10-28 | Fix |
| CVE-2024-50470 | Themes4WP YouTube External Subtitles WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.3% | 2024-10-28 | |
| CVE-2024-50469 | Textboxes WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.3% | 2024-10-28 | |
| CVE-2024-50468 | Raptor Editor WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.3% | 2024-10-28 | |
| CVE-2024-50467 | Scrollbar by webxapp WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.3% | 2024-10-28 | |
| CVE-2024-50465 | Premium SEO Pack WordPress plugin SQL injection | 6.5NVD v3.1 | 0.4% | 2024-10-28 | Fix |
| CVE-2024-50464 | Kodex Posts likes WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.3% | 2024-10-28 | |
| CVE-2024-50463 | Sunshine Photo Cart WordPress plugin open redirection | 6.1v3.1 | 0.3% | 2024-10-28 | Fix |
| CVE-2024-50462 | Interactive World Map WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.2% | 2024-10-28 | Fix |
| CVE-2024-50461 | EmbedPress WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.2% | 2024-10-28 | Fix |
| CVE-2024-50460 | Firelight Lightbox WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.2% | 2024-10-28 | Fix |
| CVE-2024-50458 | Advanced Sermons WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.2% | 2024-10-28 | Fix |
| CVE-2024-50457 | Qode Essential Addons WordPress plugin local file inclusion | 8.8v3.1 | 0.6% | 2024-10-28 | Fix |
| CVE-2024-50453 | The Pack Elementor addons WordPress plugin local file inclusion | 8.8v3.1 | 0.6% | 2024-10-28 | Fix |
| CVE-2024-50451 | MDTF Meta Data and Taxonomies Filter WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.3% | 2024-10-28 | Fix |
| CVE-2024-50450 | MDTF Meta Data and Taxonomies Filter WordPress plugin bypass vulnerability vulnerability | 9.8v3.1 | 1.2% | 2024-10-28 | Exploit codeFix |
| CVE-2024-50449 | PDF Generator Addon for Elementor Page Builder WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.3% | 2024-10-28 | Fix |
| CVE-2024-50448 | YITH WooCommerce Product Add-Ons WordPress plugin reflected cross-site scripting (XSS) | 6.1NVD v3.1 | 0.3% | 2024-10-28 | Fix |
| CVE-2024-50447 | Envo's Elementor Templates and Widgets for WooCommerce WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.2% | 2024-10-28 | Fix |
| CVE-2024-50446 | Futurio Extra WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.2% | 2024-10-28 | Fix |
| CVE-2024-50445 | Selection Lite WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.3% | 2024-10-28 | Fix |
| CVE-2024-50443 | PostX WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.3% | 2024-10-28 | Fix |
| CVE-2024-50442 | Royal Elementor Addons and Templates WordPress plugin XML external entity (XXE) | 7.2v3.1 | 0.6% | 2024-10-28 | Fix |
| CVE-2024-50441 | Cozy Blocks WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.3% | 2024-10-28 | Fix |
| CVE-2024-50440 | CodePen Embedded Pens Shortcode WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.2% | 2024-10-28 | Fix |
| CVE-2024-50439 | Astra Widgets WordPress plugin stored cross-site scripting (XSS) | 5.4v3.1 | 0.2% | 2024-10-28 | Fix |
| CVE-2024-50438 | Church Admin WordPress plugin reflected cross-site scripting (XSS) | 6.1NVD v3.1 | 0.3% | 2024-10-28 | Fix |
| CVE-2024-50437 | GeoDirectory WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.2% | 2024-10-28 | Fix |
| CVE-2024-50436 | Clean Retina WordPress theme local file inclusion | 8.8v3.1 | 0.5% | 2024-10-28 | Fix |
| CVE-2024-50435 | Meta News WordPress theme local file inclusion | 8.8v3.1 | 0.5% | 2024-10-28 | Fix |
| CVE-2024-50434 | NewsCard WordPress theme local file inclusion | 8.8v3.1 | 0.5% | 2024-10-28 | Fix |
| CVE-2024-50433 | Sky Addons for Elementor WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.3% | 2024-10-28 | Fix |
| CVE-2024-50432 | Post Grid and Gutenberg Blocks WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.3% | 2024-10-28 | Fix |
| CVE-2024-50431 | Breeze WordPress plugin cross-site scripting (XSS) | 5.9CNA v3.1 | 0.3% | 2024-10-28 | Fix |
| CVE-2024-50429 | Magazine Blocks WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.3% | 2024-10-28 | Fix |
| CVE-2024-50416 | WPC Shop as a Customer for WooCommerce WordPress plugin PHP object injection | 8.8v3.1 | 0.5% | 2024-10-28 | Fix |
| CVE-2024-50408 | Namaste! LMS WordPress plugin PHP object injection | 8.8v3.1 | 0.5% | 2024-10-28 | Fix |
| CVE-2024-50307 | kubell Chatwork Desktop Application (Windows) use of a dangerous function | 5.5CISA ADP v3.1 | 0.3% | 2024-10-28 | |
| CVE-2024-50067 | Linux kernel uprobe argument fetching out-of-bounds write | 7.8CNA v3.1 | 0.2% | 2024-10-28 | Fix |
| CVE-2024-49771 | MPXJ has a potential path traversal | 5.3CNA v3.1 | 0.5% | 2024-10-28 | Fix |
| CVE-2024-49761 | Ruby REXML hex character reference parsing regular expression denial of service | 6.6CNA v4.0 | 1.4% | 2024-10-28 | Fix |
| CVE-2024-49755 | Duende IdentityServer has insufficient validation of DPoP cnf claim in Local APIs | 3.1CNA v3.1 | 0.3% | 2024-10-28 | Fix |
| CVE-2024-48936 | SchedMD Slurm incorrect authorization | 5.0CISA ADP v3.1 | 0.4% | 2024-10-28 | Fix |
| CVE-2024-48826 | Tenda AC7 OS command injection | 8.8v3.1 | 1.7% | 2024-10-28 | |
| CVE-2024-48825 | Tenda AC7 OS command injection | 8.8v3.1 | 1.7% | 2024-10-28 | |
| CVE-2024-48594 | FAST5 Prison Management System file upload | 8.8CISA ADP v3.1 | 3.4% | 2024-10-28 | MetasploitExploit code |
| CVE-2024-48465 | MRBS edit_entry_handler.php SQL injection | 9.8CISA ADP v3.1 | 0.5% | 2024-10-28 | |
| CVE-2024-48357 | LyLme_spage SQL injection | 9.8CISA ADP v3.1 | 0.6% | 2024-10-28 | |
| CVE-2024-48356 | LyLme_spage SQL injection | 9.8CISA ADP v3.1 | 0.6% | 2024-10-28 | |
| CVE-2024-48291 | Timgreen Dingfanzu Cms cross-site request forgery | 6.3CISA ADP v3.1 | 0.2% | 2024-10-28 | |
| CVE-2024-48196 | EyouCMS information disclosure | 7.5CISA ADP v3.1 | 0.5% | 2024-10-28 | |
| CVE-2024-48195 | EyouCMS cross-site scripting | 6.1CISA ADP v3.1 | 0.4% | 2024-10-28 | |
| CVE-2024-48191 | Timgreen Dingfanzu Cms cross-site request forgery | 6.3CISA ADP v3.1 | 0.2% | 2024-10-28 | |
| CVE-2024-48178 | newbee-mall server-side request forgery | 8.1CISA ADP v3.1 | 0.3% | 2024-10-28 | |
| CVE-2024-48177 | MRCMS delete.do SQL injection | 8.8CISA ADP v3.1 | 0.4% | 2024-10-28 | |
| CVE-2024-48107 | SparkShop server-side request forgery | 6.5CISA ADP v3.1 | 0.2% | 2024-10-28 | |
| CVE-2024-48074 | DrayTek Vigor 2960 authorized remote code execution | 8.0CISA ADP v3.1 | 0.7% | 2024-10-28 | |
| CVE-2024-47827 | argoproj argo-workflows Argo Workflows Controller: Denial of service via malicious daemon Workflows | 5.7CNA v3.1 | 0.4% | 2024-10-28 | Fix |
| CVE-2024-45802 | Squid denial of service | 7.5CNA v3.1 | 47.9% | 2024-10-28 | Fix |
| CVE-2024-44302 | Apple iOS, iPadOS and macOS font processing information disclosure | 5.5v3.1 | 0.5% | 2024-10-28 | Fix |
| CVE-2024-44301 | Apple macOS incorrect authorization | 5.5v3.1 | 0.2% | 2024-10-28 | Fix |
| CVE-2024-44297 | Apple macOS denial of service | 6.5v3.1 | 0.8% | 2024-10-28 | Fix |
| CVE-2024-44296 | Apple Safari and iOS Content Security Policy enforcement vulnerability | 5.4v3.1 | 0.7% | 2024-10-28 | Fix |
| CVE-2024-44295 | Apple macOS entitlement checks vulnerability | 5.5NVD v3.1 | 0.2% | 2024-10-28 | Fix |
| CVE-2024-44294 | Apple macOS system files vulnerability | 6.5v3.1 | 0.9% | 2024-10-28 | Fix |
| CVE-2024-44289 | Apple macOS incorrect authorization | 7.5v3.1 | 0.6% | 2024-10-28 | Fix |
| CVE-2024-44287 | Apple macOS incorrect authorization | 5.5v3.1 | 0.2% | 2024-10-28 | Fix |
| CVE-2024-44285 | Apple macOS use-after-free | 7.8v3.1 | 0.7% | 2024-10-28 | Exploit codeFix |
| CVE-2024-44284 | Apple macOS out-of-bounds write | 5.5v3.1 | 0.6% | 2024-10-28 | Fix |
| CVE-2024-44283 | Apple macOS out-of-bounds read | 5.5v3.1 | 0.6% | 2024-10-28 | Fix |
| CVE-2024-44282 | Apple macOS out-of-bounds read | 5.5v3.1 | 0.8% | 2024-10-28 | Fix |
| CVE-2024-44281 | Apple macOS out-of-bounds read | 5.5v3.1 | 0.3% | 2024-10-28 | Fix |
| CVE-2024-44280 | A downgrade issue affecting Intel-based Mac computers was addressed with additional code-signing restrictions. This issue is fixed in macOS Sequoia 15.1, macOS Sonoma 14.7.1, macOS Ventura 13.7.1. An app may be able to modify protected parts of the file system. | 5.5NVD v3.1 | 0.2% | 2024-10-28 | Fix |
| CVE-2024-44279 | Apple macOS out-of-bounds read | 5.5v3.1 | 0.5% | 2024-10-28 | Fix |
| CVE-2024-44278 | Apple macOS information disclosure | 5.5v3.1 | 0.2% | 2024-10-28 | Fix |
| CVE-2024-44277 | Apple macOS out-of-bounds write | 7.8v3.1 | 0.2% | 2024-10-28 | Fix |
| CVE-2024-44275 | Apple macOS insecure storage of sensitive information | 5.5v3.1 | 0.2% | 2024-10-28 | Fix |
| CVE-2024-44274 | Apple iOS, iPadOS and watchOS locked device authentication information disclosure | 4.6v3.1 | 0.4% | 2024-10-28 | Fix |
| CVE-2024-44273 | Apple macOS link following | 5.5v3.1 | 0.3% | 2024-10-28 | Fix |
| CVE-2024-44270 | Apple macOS incorrect authorization | 8.6v3.1 | 0.7% | 2024-10-28 | Fix |
| CVE-2024-44269 | Apple macOS logic flaw | 5.5v3.1 | 0.3% | 2024-10-28 | Fix |
| CVE-2024-44267 | Apple macOS file system protections vulnerability | 5.5v3.1 | 0.4% | 2024-10-28 | Fix |
| CVE-2024-44265 | Apple macOS missing authorization | 2.4NVD v3.1 | 0.6% | 2024-10-28 | Fix |
| CVE-2024-44264 | Apple macOS link following | 5.5NVD v3.1 | 0.6% | 2024-10-28 | Fix |
| CVE-2024-44263 | Apple iOS and iPadOS insecure storage of sensitive information | 5.5v3.1 | 0.2% | 2024-10-28 | Fix |
| CVE-2024-44262 | Apple visionOS information disclosure | 5.5v3.1 | 0.2% | 2024-10-28 | Fix |
| CVE-2024-44261 | Apple iOS and iPadOS locked device options vulnerability | 5.5v3.1 | 0.2% | 2024-10-28 | Fix |
| CVE-2024-44260 | Apple macOS system files vulnerability | 4.4v3.1 | 0.2% | 2024-10-28 | Fix |
| CVE-2024-44259 | Apple Safari and iOS trust relationship handling vulnerability | 7.5v3.1 | 1.0% | 2024-10-28 | Fix |
| CVE-2024-44258 | Apple tvOS link following | 7.1v3.1 | 0.8% | 2024-10-28 | Exploit codeFix |
| CVE-2024-44257 | Apple macOS insecure storage of sensitive information | 5.5v3.1 | 0.2% | 2024-10-28 | Fix |
| CVE-2024-44256 | Apple macOS sandbox escape | 8.6NVD v3.1 | 0.2% | 2024-10-28 | Fix |
| CVE-2024-44255 | Apple macOS path traversal | 7.8v3.1 | 0.3% | 2024-10-28 | Fix |
| CVE-2024-44254 | Apple macOS information disclosure | 5.5v3.1 | 0.3% | 2024-10-28 | Fix |
| CVE-2024-44253 | Apple macOS incorrect authorization | 5.5v3.1 | 0.2% | 2024-10-28 | Fix |
| CVE-2024-44252 | Apple tvOS logic flaw | 7.1v3.1 | 0.3% | 2024-10-28 | Fix |
| CVE-2024-44251 | Apple iOS and iPadOS lock screen information disclosure | 2.4v3.1 | 0.3% | 2024-10-28 | Fix |
| CVE-2024-44247 | Apple macOS incorrect authorization | 5.5v3.1 | 0.2% | 2024-10-28 | Fix |
| CVE-2024-44244 | Apple Safari out-of-bounds write | 4.3v3.1 | 0.9% | 2024-10-28 | Fix |
| CVE-2024-44240 | Apple iOS, iPadOS and macOS font processing information disclosure | 5.5v3.1 | 0.5% | 2024-10-28 | Fix |
| CVE-2024-44239 | Apple macOS sensitive information in log files | 5.5v3.1 | 0.3% | 2024-10-28 | Fix |
| CVE-2024-44237 | Apple macOS out-of-bounds read | 5.5v3.1 | 0.6% | 2024-10-28 | Fix |
| CVE-2024-44236 | Apple macOS out-of-bounds read | 5.5v3.1 | 10.9% | 2024-10-28 | Fix |
| CVE-2024-44235 | Apple iOS and iPadOS improper check for exceptional conditions | 4.6v3.1 | 0.3% | 2024-10-28 | Fix |
| CVE-2024-44229 | Apple Safari information disclosure | 5.3v3.1 | 0.7% | 2024-10-28 | Fix |
| CVE-2024-44228 | Apple Xcode incorrect default permissions | 7.5v3.1 | 0.4% | 2024-10-28 | Fix |
| CVE-2024-44222 | Apple macOS insecure storage of sensitive information | 3.3v3.1 | 0.2% | 2024-10-28 | Fix |
| CVE-2024-44218 | Apple macOS buffer overflow | 7.8v3.1 | 0.3% | 2024-10-28 | Fix |
| CVE-2024-44217 | Apple iOS and iPadOS incorrect authorization | 9.1v3.1 | 0.4% | 2024-10-28 | Fix |
| CVE-2024-44216 | Apple macOS insecure storage of sensitive information | 5.5v3.1 | 0.2% | 2024-10-28 | Fix |
| CVE-2024-44215 | Apple iOS, iPadOS and macOS image processing information disclosure | 5.5v3.1 | 0.3% | 2024-10-28 | Fix |
| CVE-2024-44213 | Apple macOS insecure storage of sensitive information | 5.9NVD v3.1 | 0.7% | 2024-10-28 | Fix |
| CVE-2024-44208 | Apple macOS missing authorization | 7.5v3.1 | 0.4% | 2024-10-28 | Fix |
| CVE-2024-44203 | Apple macOS insecure permissions | 7.5v3.1 | 0.3% | 2024-10-28 | Fix |
| CVE-2024-44197 | Apple macOS denial of service | 5.5v3.1 | 1.0% | 2024-10-28 | Fix |
| CVE-2024-44196 | Apple macOS incorrect authorization | 5.5NVD v3.1 | 0.5% | 2024-10-28 | Fix |
| CVE-2024-44194 | Apple macOS information disclosure | 5.5v3.1 | 0.3% | 2024-10-28 | Fix |
| CVE-2024-44175 | Apple macOS link following | 5.5NVD v3.1 | 0.6% | 2024-10-28 | Fix |
| CVE-2024-44174 | Apple macOS improper check for exceptional conditions | 5.5v3.1 | 0.2% | 2024-10-28 | Fix |
| CVE-2024-44159 | Apple macOS Privacy preferences vulnerability | 7.1v3.1 | 0.3% | 2024-10-28 | Fix |
| CVE-2024-44156 | Apple macOS missing authorization | 7.1v3.1 | 0.2% | 2024-10-28 | Fix |
| CVE-2024-44155 | Apple Safari custom URL scheme handling vulnerability | 6.5v3.1 | 0.5% | 2024-10-28 | Fix |
| CVE-2024-44145 | Apple macOS Sidecar vulnerability | 6.1v3.1 | 0.2% | 2024-10-28 | Fix |
| CVE-2024-44144 | Apple macOS buffer overflow | 5.5v3.1 | 0.3% | 2024-10-28 | Fix |
| CVE-2024-44137 | Apple macOS incorrect authorization | 4.6v3.1 | 0.3% | 2024-10-28 | Fix |
| CVE-2024-44126 | Apple macOS out-of-bounds write | 7.8v3.1 | 0.3% | 2024-10-28 | Fix |
| CVE-2024-44123 | Apple macOS insecure permissions | 2.3v3.1 | 0.2% | 2024-10-28 | Fix |
| CVE-2024-44122 | Apple macOS logic flaw | 8.8v3.1 | 0.3% | 2024-10-28 | Fix |
| CVE-2024-42930 | PbootCMS open redirect | 6.1CISA ADP v3.1 | 0.3% | 2024-10-28 | |
| CVE-2024-42028 | Ubiquiti UniFi Network Application Self-Hosted UniFi Network Server local privilege escalation | 8.8CISA ADP v3.1 | 0.2% | 2024-10-28 | Fix |
| CVE-2024-42011 | Spotify app for iOS strcat function buffer overflow | 7.5CISA ADP v3.1 | 0.6% | 2024-10-28 | |
| CVE-2024-40867 | Apple iOS and iPadOS sandbox escape | 9.6v3.1 | 0.7% | 2024-10-28 | Fix |
| CVE-2024-40855 | Apple macOS incorrect authorization | 5.5v3.1 | 0.2% | 2024-10-28 | Fix |
| CVE-2024-40853 | Apple iOS and iPadOS lock screen vulnerability | 3.3NVD v3.1 | 0.2% | 2024-10-28 | Fix |
| CVE-2024-40851 | Apple iOS and iPadOS lock screen vulnerability | 2.4v3.1 | 0.3% | 2024-10-28 | Fix |
| CVE-2024-40792 | Apple macOS incorrect default permissions | 3.3v3.1 | 0.2% | 2024-10-28 | Fix |
| CVE-2024-39205 | Pyload-ng vulnerable to RCE with js2py sandbox escape | 9.8CISA ADP v3.1 | 16.5% | 2024-10-28 | MetasploitEmerging ThreatsExploit codeKCV |
| CVE-2024-38821 | Spring authorization bypass of Static Resources in WebFlux Applications | 9.1CNA v3.1 | 1.7% | 2024-10-28 | Exploit codeFix |
| CVE-2024-34537 | Denial of service in TYPO3 Bookmark Toolbar | 4.9CISA ADP v3.1 | 0.7% | 2024-10-28 | Fix |
| CVE-2024-30106 | HCL Connections is vulnerable to an information disclosure | 3.5CNA v3.1 | 0.3% | 2024-10-28 | Fix |
| CVE-2024-27849 | Apple macOS sensitive information in log files | 3.3v3.1 | 0.2% | 2024-10-28 | Fix |
| CVE-2024-23843 | Genians Genian NAC SQL command improper neutralization | 2.2CNA v3.1 | 0.3% | 2024-10-28 | Fix |
| CVE-2024-10469 | CERT/CC VINCE versions allows authenticated user to access User Management view | 6.5v3.1 | 0.2% | 2024-10-28 | Fix |
| CVE-2024-10455 | Reachable assertion in µD3TN | 7.5CNA v3.1 | 0.4% | 2024-10-28 | Fix |
| CVE-2024-10450 | SourceCodester Kortex Lite Advocate Office Management System edit_profile.php SQL injection | 9.8v3.1 | 0.6% | 2024-10-28 | |
| CVE-2024-10449 | Codezips Hospital Appointment System loginAction.php SQL injection | 9.8v3.1 | 1.4% | 2024-10-28 | |
| CVE-2024-10448 | code-projects Blood Bank Management System delete.php cross-site request forgery | 6.5v3.1 | 0.4% | 2024-10-28 | Exploit code |
| CVE-2024-10447 | Project Worlds Online Time Table Generator staffdashboard.php SQL injection | 8.8v3.1 | 0.5% | 2024-10-28 | |
| CVE-2024-10446 | Project Worlds Online Time Table Generator admindashboard.php SQL injection | 7.2v3.1 | 0.5% | 2024-10-28 | |
| CVE-2024-10440 | Sunnet eHRD CTMS SQL injection | 9.8CNA v3.1 | 0.5% | 2024-10-28 | Fix |
| CVE-2024-10439 | Sunnet eHRD CTMS insecure direct object reference | 7.5v3.1 | 0.4% | 2024-10-28 | Fix |
| CVE-2024-10438 | Sunnet eHRD CTMS authentication bypass | 7.5v3.1 | 0.5% | 2024-10-28 | Fix |
| CVE-2024-10435 | didi Super-Jacoco triggerEnvCov command injection | 5.3CNA v4.0 | 1.2% | 2024-10-28 | |
| CVE-2024-10434 | Tenda AC1206 ate ate_Tenda_mfg_check_usb3 stack-based overflow | 9.8v3.1 | 1.3% | 2024-10-28 | |
| CVE-2024-10433 | Project Worlds Simple Web-Based Chat Application index.php cross-site scripting | 6.1v3.1 | 0.4% | 2024-10-28 | |
| CVE-2024-10432 | Project Worlds Simple Web-Based Chat Application index.php SQL injection | 9.8v3.1 | 0.6% | 2024-10-28 | |
| CVE-2024-10214 | Mattermost Incorrect Session Creation with Desktop SSO | 3.5CNA v3.1 | 0.4% | 2024-10-28 | Fix |
| CVE-2024-9825 | Chef Habitat Builder personal access token deletion insecure direct object reference | 5.4CNA v3.1 | 0.3% | 2024-10-28 | Fix |
| CVE-2024-9629 | Contact Form 7 + Telegram WordPress plugin unauthorized access | 5.4CNA v3.1 | 0.4% | 2024-10-28 | Fix |
| CVE-2024-9162 | All-in-One WP Migration and Backup WordPress plugin arbitrary PHP code injection | 7.2CNA v3.1 | 2.7% | 2024-10-28 | Exploit codeFix |
| CVE-2024-8013 | MongoDB mongocryptd cleartext transmission of sensitive information | 2.2CNA v3.1 | 0.1% | 2024-10-28 | Fix |
| CVE-2024-6245 | Default credentials in SSH service for SmartPlay in Maruti Suzuki | 7.4CNA v3.1 | 0.2% | 2024-10-28 | |
| CVE-2024-5532 | A stored XSS vulnerability has been discovered on OpenText™ Operations Agent (OA) | 1.8CNA v4.0 | 0.2% | 2024-10-28 | Fix |
| CVE-2024-50623 | Cleo Multiple Products unrestricted file upload | 9.8NVD v3.1 | 98.6% | 2024-10-27 | KEVNucleiEmerging ThreatsExploit codeFix |
| CVE-2024-50616 | Ironman Software PowerShell Universal privilege escalation | 8.8CISA ADP v3.1 | 0.4% | 2024-10-27 | |
| CVE-2024-50615 | Tinyxml2 reachable assertion | 6.5CISA ADP v3.1 | 0.4% | 2024-10-27 | Fix |
| CVE-2024-50614 | Tinyxml2 reachable assertion | 6.5CISA ADP v3.1 | 0.4% | 2024-10-27 | |
| CVE-2024-50613 | libsndfile reachable assertion | 6.5v3.1 | 0.5% | 2024-10-27 | Fix |
| CVE-2024-50612 | libsndfile out-of-bounds read | 5.5v3.1 | 0.3% | 2024-10-27 | Fix |
| CVE-2024-50611 | CycloneDX cdxgen may execute code contained within build-related files | 7.2CISA ADP v3.1 | 0.8% | 2024-10-27 | Fix |
| CVE-2024-50610 | GNU Scientific Library integer overflow | 3.6CISA ADP v3.1 | 0.3% | 2024-10-27 | Fix |
| CVE-2024-50602 | libexpat improper check for exceptional conditions | 5.9CISA ADP v3.1 | 1.1% | 2024-10-27 | Fix |
| CVE-2024-10431 | Codezips Pet Shop Management System deletebird.php SQL injection | 9.8v3.1 | 0.7% | 2024-10-27 | |
| CVE-2024-10430 | Codezips Pet Shop Management System animalsupdate.php SQL injection | 9.8v3.1 | 0.7% | 2024-10-27 | |
| CVE-2024-10429 | WAVLINK WN530H4/WN530HG4/WN572HG3 internet.cgi set_ipv6 command injection | 7.2v3.1 | 18.2% | 2024-10-27 | |
| CVE-2024-10428 | WAVLINK WN530H4/WN530HG4/WN572HG3 firewall.cgi set_ipv6 command injection | 7.2v3.1 | 14.8% | 2024-10-27 | |
| CVE-2024-10427 | Codezips Pet Shop Management System deleteanimal.php SQL injection | 9.8v3.1 | 0.5% | 2024-10-27 | |
| CVE-2024-10426 | Codezips Pet Shop Management System animalsadd.php SQL injection | 9.8v3.1 | 0.6% | 2024-10-27 | |
| CVE-2024-10425 | Project Worlds Student Project Allocation System Project Selection Page SQL injection | 9.8v3.1 | 0.6% | 2024-10-27 | |
| CVE-2024-10424 | Project Worlds Student Project Allocation System Project Selection Page SQL injection | 9.8v3.1 | 0.6% | 2024-10-27 | |
| CVE-2024-10423 | Project Worlds Student Project Allocation System project_selection.php SQL injection | 9.8v3.1 | 0.5% | 2024-10-27 | |
| CVE-2024-10422 | SourceCodester Attendance and Payroll System overtime_add.php SQL injection | 9.8v3.1 | 0.4% | 2024-10-27 | |
| CVE-2024-10421 | SourceCodester Attendance and Payroll System overtime_row.php SQL injection | 9.8v3.1 | 0.4% | 2024-10-27 | |
| CVE-2024-10420 | SourceCodester Attendance and Payroll System update.php upload unrestricted upload | 9.8v3.1 | 0.5% | 2024-10-27 | |
| CVE-2024-10419 | code-projects Blood Bank Management System bloodrequest.php cross-site scripting | 6.1v3.1 | 0.4% | 2024-10-27 | |
| CVE-2024-10418 | code-projects Blood Bank Management System infoAdd.php SQL injection | 9.8v3.1 | 0.6% | 2024-10-27 | |
| CVE-2024-10417 | code-projects Blood Bank Management System delete.php SQL injection | 8.8v3.1 | 0.5% | 2024-10-27 | |
| CVE-2024-10416 | code-projects Blood Bank Management System cancel.php SQL injection | 8.8v3.1 | 0.5% | 2024-10-27 | |
| CVE-2024-10415 | code-projects Blood Bank Management System accept.php SQL injection | 8.8v3.1 | 0.6% | 2024-10-27 | |
| CVE-2024-10414 | PHPGurukul Vehicle Record System edit-brand.php cross-site scripting | 4.8v3.1 | 0.4% | 2024-10-27 | |
| CVE-2024-10413 | SourceCodester Online Hotel Reservation System update.php upload unrestricted upload | 9.8v3.1 | 0.5% | 2024-10-27 | |
| CVE-2024-10412 | Poco-z Guns-Medical file upload upload cross-site scripting | 5.4v3.1 | 0.4% | 2024-10-27 | |
| CVE-2024-10411 | SourceCodester Online Hotel Reservation System controller.php doCheckout SQL injection | 7.2v3.1 | 0.4% | 2024-10-27 | |
| CVE-2024-10410 | SourceCodester Online Hotel Reservation System controller.php upload unrestricted upload | 7.2v3.1 | 1.2% | 2024-10-27 | |
| CVE-2024-10409 | code-projects Blood Bank Management accept.php SQL injection | 8.8v3.1 | 0.5% | 2024-10-27 | |
| CVE-2024-10408 | code-projects Blood Bank Management abs.php SQL injection | 8.8v3.1 | 0.5% | 2024-10-27 | |
| CVE-2024-10407 | SourceCodester Petrol Pump Management Software edit_customer.php SQL injection | 7.2v3.1 | 0.4% | 2024-10-27 | |
| CVE-2024-10406 | SourceCodester Petrol Pump Management Software edit_fuel.php SQL injection | 7.2v3.1 | 0.4% | 2024-10-26 | |
| CVE-2024-10402 | Forminator Forms WordPress plugin unauthorized access | 8.8v3.1 | 0.5% | 2024-10-26 | Fix |
| CVE-2024-10357 | Clever Addons for Elementor WordPress plugin sensitive information exposure | 4.3CNA v3.1 | 0.4% | 2024-10-26 | |
| CVE-2024-10117 | WP Crowdfunding WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.4% | 2024-10-26 | Fix |
| CVE-2024-10092 | Download Monitor WordPress plugin missing authorization to API Key manipulation | 4.3CNA v3.1 | 0.5% | 2024-10-26 | Fix |
| CVE-2024-10091 | ElementsKit Elementor addons WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.3% | 2024-10-26 | Fix |
| CVE-2024-9967 | WP show more WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.3% | 2024-10-26 | Fix |
| CVE-2024-9933 | WatchTowerHQ WordPress plugin authentication bypass | 9.8CNA v3.1 | 2.0% | 2024-10-26 | Exploit codeFix |
| CVE-2024-9932 | Wux Blog Editor WordPress plugin unauthenticated arbitrary file upload | 9.8CNA v3.1 | 36.4% | 2024-10-26 | Exploit code |
| CVE-2024-9931 | Wux Blog Editor WordPress plugin authentication bypass to Administrator | 9.8CNA v3.1 | 0.6% | 2024-10-26 | |
| CVE-2024-9930 | Extensions by HocWP Team WordPress plugin authentication bypass | 9.8CNA v3.1 | 0.6% | 2024-10-26 | |
| CVE-2024-9890 | User Toolkit WordPress plugin authenticated (Subscriber+) authentication bypass | 8.8CNA v3.1 | 1.1% | 2024-10-26 | Exploit codeFix |
| CVE-2024-9853 | ID-SK Toolkit WordPress plugin stored cross-site scripting | 6.4CNA v3.1 | 0.3% | 2024-10-26 | Fix |
| CVE-2024-9772 | UIUX Lab Uix Shortcodes code injection | 7.3v3.1 | 1.5% | 2024-10-26 | NucleiFix |
| CVE-2024-9642 | Editor Custom Color Palette WordPress plugin stored cross-site scripting | 6.4CNA v3.1 | 0.3% | 2024-10-26 | Fix |
| CVE-2024-9637 | School Management System WordPress plugin privilege escalation | 8.8CNA v3.1 | 0.5% | 2024-10-26 | Fix |
| CVE-2024-9626 | Editorial Assistant by Sovrn WordPress plugin unauthorized access | 4.3CNA v3.1 | 0.3% | 2024-10-26 | |
| CVE-2024-9613 | FormFacade WordPress plugin for Google Forms reflected cross-site scripting | 6.1v3.1 | 0.4% | 2024-10-26 | Fix |
| CVE-2024-9501 | Wp Social Login and Register Social Counter WordPress plugin authentication bypass | 9.8CNA v3.1 | 0.8% | 2024-10-26 | Fix |
| CVE-2024-9475 | Poll Maker Versus Polls, Anonymous Polls, Image Polls WordPress plugin SQL injection | 7.2v3.1 | 0.5% | 2024-10-26 | Fix |
| CVE-2024-9462 | Poll Maker Versus Polls, Anonymous Polls, Image Polls WordPress plugin stored cross-site scripting | 4.8v3.1 | 0.3% | 2024-10-26 | Fix |
| CVE-2024-9456 | WP Awesome Login WordPress plugin stored cross-site scripting | 6.4CNA v3.1 | 0.3% | 2024-10-26 | |
| CVE-2024-9454 | PriPre WordPress plugin authenticated (Author+) stored cross-site scripting via SVG file upload | 6.4CNA v3.1 | 0.3% | 2024-10-26 | |
| CVE-2024-9116 | Monkee-Boy Essentials WordPress plugin stored cross-site scripting | 6.4CNA v3.1 | 0.4% | 2024-10-26 | |
| CVE-2024-8870 | Forms for Mailchimp by Optin Cat WordPress plugin reflected cross-site scripting | 6.1CNA v3.1 | 0.5% | 2024-10-26 | Fix |
| CVE-2024-8392 | WordPress Post Grid Layouts with Pagination Sogrid plugin local file inclusion | 7.2CNA v3.1 | 0.7% | 2024-10-26 | Fix |
| CVE-2024-0128 | NVIDIA vGPU and Cloud Gaming incorrect permission assignment | 7.1CNA v3.1 | 0.2% | 2024-10-26 | Fix |
| CVE-2024-0127 | NVIDIA vGPU and Cloud Gaming improper input validation | 7.8CNA v3.1 | 0.2% | 2024-10-26 | Fix |
| CVE-2024-0126 | NVIDIA GPU code execution | 8.2CNA v3.1 | 0.3% | 2024-10-26 | Fix |
| CVE-2024-0121 | NVIDIA GPU out-of-bounds read | 7.8CNA v3.1 | 0.4% | 2024-10-26 | Fix |
| CVE-2024-0120 | NVIDIA GPU out-of-bounds read | 7.8CNA v3.1 | 0.4% | 2024-10-26 | Fix |
| CVE-2024-0119 | NVIDIA GPU out-of-bounds read | 7.8CNA v3.1 | 0.4% | 2024-10-26 | Fix |
| CVE-2024-0118 | NVIDIA GPU out-of-bounds read | 7.8CNA v3.1 | 0.4% | 2024-10-26 | Fix |
| CVE-2024-0117 | NVIDIA GPU out-of-bounds read | 7.8CNA v3.1 | 0.4% | 2024-10-26 | Fix |
| CVE-2024-50583 | Naver Whale browser Installer uncontrolled search path | 6.3CISA ADP v3.1 | 0.3% | 2024-10-25 | Fix |
| CVE-2024-49767 | Werkzeug possible resource exhaustion when parsing file data in forms | 6.9CNA v4.0 | 1.1% | 2024-10-25 | Fix |
| CVE-2024-49766 | Werkzeug safe_join not safe on Windows | 6.3CNA v4.0 | 0.8% | 2024-10-25 | Fix |
| CVE-2024-49757 | Zitadel User Registration Bypass vulnerability | 7.5CNA v3.1 | 2.5% | 2024-10-25 | NucleiFix |
| CVE-2024-49753 | Denied Host Validation Bypass in Zitadel Actions | 5.9CNA v3.1 | 0.7% | 2024-10-25 | Fix |
| CVE-2024-49381 | Plenti arbitrary file deletion | 7.5NVD v3.1 | 0.8% | 2024-10-25 | Fix |
| CVE-2024-49380 | Plenti arbitrary file write | 7.5NVD v3.1 | 2.7% | 2024-10-25 | NucleiFix |
| CVE-2024-49378 | smartUp cross-site scripting | 6.1CISA ADP v3.1 | 0.3% | 2024-10-25 | |
| CVE-2024-49376 | Autolab has Misconfigured Reset Password Permissions | 7.1CNA v4.0 | 0.5% | 2024-10-25 | Fix |
| CVE-2024-48870 | Toshiba Tec e-STUDIO 908 cross-site scripting | 4.8v3.1 | 0.3% | 2024-10-25 | Fix |
| CVE-2024-48743 | Telestream Sentry cross-site scripting | 6.5CISA ADP v3.1 | 0.4% | 2024-10-25 | |
| CVE-2024-48700 | Kliqqi Cms code injection | 7.2CISA ADP v3.1 | 0.6% | 2024-10-25 | |
| CVE-2024-48655 | total.js code injection | 8.8CISA ADP v3.1 | 1.0% | 2024-10-25 | |
| CVE-2024-48654 | Blood Bank v.1 cross-site scripting | 6.1CISA ADP v3.1 | 0.4% | 2024-10-25 | |
| CVE-2024-48581 | Mayuri K Best Courier Management System file upload | 9.8CISA ADP v3.1 | 1.1% | 2024-10-25 | |
| CVE-2024-48580 | Mayuri K Best Courier Management System SQL injection | 9.8CISA ADP v3.1 | 0.9% | 2024-10-25 | |
| CVE-2024-48579 | Mayuri K Best House Rental Management System SQL injection | 9.8CISA ADP v3.1 | 0.9% | 2024-10-25 | |
| CVE-2024-48459 | Tenda AX2 Pro Router OS command injection | 7.3CISA ADP v3.1 | 8.5% | 2024-10-25 | |
| CVE-2024-48450 | Huly Platform v0.6.295 An arbitrary file upload | 6.5CISA ADP v3.1 | 0.5% | 2024-10-25 | |
| CVE-2024-48448 | Huly Platform v0.6.295 An arbitrary file upload | 6.1CISA ADP v3.1 | 0.4% | 2024-10-25 | |
| CVE-2024-48428 | Olivegroup Olivevle weak password recovery | 9.8v3.1 | 0.8% | 2024-10-25 | |
| CVE-2024-48396 | AIML Chatbot message input field cross-site scripting | 6.1CISA ADP v3.1 | 0.3% | 2024-10-25 | |
| CVE-2024-48343 | ESAFENET CDG SQL injection | 6.3CISA ADP v3.1 | 0.4% | 2024-10-25 | |
| CVE-2024-48239 | WTCMS cross-site scripting | 4.8CISA ADP v3.1 | 0.3% | 2024-10-25 | |
| CVE-2024-48238 | WTCMS NavControl.class.php SQL injection | 4.7CISA ADP v3.1 | 0.3% | 2024-10-25 | |
| CVE-2024-48237 | WTCMS incorrect authorization | 9.8CISA ADP v3.1 | 0.5% | 2024-10-25 | |
| CVE-2024-48236 | OFCMS code injection | 6.5CISA ADP v3.1 | 0.7% | 2024-10-25 | |
| CVE-2024-48235 | OFCMS code injection | 6.5CISA ADP v3.1 | 0.7% | 2024-10-25 | |
| CVE-2024-48234 | mipjz ApiAdminTag.php server-side request forgery | 4.9CISA ADP v3.1 | 0.5% | 2024-10-25 | |
| CVE-2024-48233 | Mipjz cross-site scripting | 4.8CISA ADP v3.1 | 0.3% | 2024-10-25 | |
| CVE-2024-48232 | Mipjz server-side request forgery | 4.9CISA ADP v3.1 | 0.5% | 2024-10-25 | |
| CVE-2024-48230 | SQL injection in Funadmin | 7.2NVD v3.1 | 0.5% | 2024-10-25 | |
| CVE-2024-48229 | SQL injection in Funadmin | 7.2NVD v3.1 | 0.4% | 2024-10-25 | |
| CVE-2024-48228 | Funadmin cross-site scripting | 6.1CISA ADP v3.1 | 0.3% | 2024-10-25 | |
| CVE-2024-48227 | Logic flaw in Funadmin | 4.9NVD v3.1 | 0.6% | 2024-10-25 | |
| CVE-2024-48226 | SQL injection in Funadmin | 7.2NVD v3.1 | 0.6% | 2024-10-25 | |
| CVE-2024-48225 | SQL injection in Funadmin | 6.5NVD v3.1 | 0.6% | 2024-10-25 | |
| CVE-2024-48224 | SQL injection in Funadmin | 4.9NVD v3.1 | 0.7% | 2024-10-25 | |
| CVE-2024-48223 | SQL injection in Funadmin | 7.2NVD v3.1 | 0.6% | 2024-10-25 | |
| CVE-2024-48222 | SQL injection in Funadmin | 7.2NVD v3.1 | 0.6% | 2024-10-25 | |
| CVE-2024-48218 | SQL injection in Funadmin | 7.2NVD v3.1 | 0.6% | 2024-10-25 | |
| CVE-2024-48204 | Hanzhou Haobo network management system SQL injection | 9.8CISA ADP v3.1 | 0.8% | 2024-10-25 | |
| CVE-2024-47821 | pyLoad vulnerable to remote code execution by download to /.pyload/scripts using /flashgot API | 9.1CNA v3.1 | 0.7% | 2024-10-25 | Fix |
| CVE-2024-47801 | Sharp Digital Full-color MFPs and Monochrome MFPs cross-site scripting | 6.1NVD v3.1 | 0.4% | 2024-10-25 | Fix |
| CVE-2024-47549 | Sharp Digital Full-color MFPs and Monochrome MFPs HTTP header injection | 6.1NVD v3.1 | 0.4% | 2024-10-25 | Fix |
| CVE-2024-47483 | Dell Data Lakehouse SQL injection | 2.9CNA v3.1 | 0.2% | 2024-10-25 | Fix |
| CVE-2024-47481 | Dell Data Lakehouse improper access control | 6.5CNA v3.1 | 0.2% | 2024-10-25 | Fix |
| CVE-2024-47406 | Sharp Digital Full-color MFPs and Monochrome MFPs authentication bypass | 9.8v3.1 | 0.6% | 2024-10-25 | Fix |
| CVE-2024-47158 | NEUMANN CO.LTD N-LINE code injection | 5.4NVD v3.1 | 0.2% | 2024-10-25 | Fix |
| CVE-2024-47041 | Google Android syscall.c out-of-bounds read | 7.8v3.1 | 0.1% | 2024-10-25 | Fix |
| CVE-2024-47035 | Google Android virtio_ring.h out-of-bounds write | 7.8v3.1 | 0.1% | 2024-10-25 | Fix |
| CVE-2024-47034 | Google Android out-of-bounds read | 5.5v3.1 | 0.1% | 2024-10-25 | Fix |
| CVE-2024-47033 | Google Android lwis_allocator.c memory corruption | 7.8v3.1 | 0.1% | 2024-10-25 | Fix |
| CVE-2024-47031 | Google Android privilege escalation | 7.4CISA ADP v3.1 | 0.1% | 2024-10-25 | Fix |
| CVE-2024-47030 | Google Android information disclosure | 5.1CISA ADP v3.1 | 0.1% | 2024-10-25 | Fix |
| CVE-2024-47029 | Google Android trusty_shared_memory_manager.cc out-of-bounds read | 5.5v3.1 | 0.1% | 2024-10-25 | Fix |
| CVE-2024-47028 | Google Android ffu.c out-of-bounds read | 4.4v3.1 | 0.1% | 2024-10-25 | Fix |
| CVE-2024-47027 | Google Android shared_mem.c privilege escalation | 7.8v3.1 | 0.1% | 2024-10-25 | Fix |
| CVE-2024-47026 | Google Android gsc_gsa.c out-of-bounds read | 5.5v3.1 | 0.1% | 2024-10-25 | Fix |
| CVE-2024-47025 | Google Android drm_fw.c information disclosure | 5.5v3.1 | 0.1% | 2024-10-25 | Fix |
| CVE-2024-47024 | Google Android virtio_ring.h out-of-bounds write | 7.8v3.1 | 0.1% | 2024-10-25 | Fix |
| CVE-2024-47023 | Google Android code man-in-the-middle | 8.1v3.1 | 0.2% | 2024-10-25 | Fix |
| CVE-2024-47022 | Google Android information disclosure | 7.5v3.1 | 0.2% | 2024-10-25 | Fix |
| CVE-2024-47021 | Google Android sms_CellBroadcast.c out-of-bounds read | 7.5v3.1 | 0.2% | 2024-10-25 | Fix |
| CVE-2024-47020 | Google Android information disclosure | 7.5v3.1 | 0.2% | 2024-10-25 | Fix |
| CVE-2024-47019 | Google Android protocolembmsadapter.cpp out-of-bounds read | 5.5v3.1 | 0.1% | 2024-10-25 | Fix |
| CVE-2024-47018 | Google Android flexpmu_cal_rae.c out-of-bounds read | 5.5v3.1 | 0.1% | 2024-10-25 | Fix |
| CVE-2024-47017 | Google Android ufs.c use-after-free | 7.8v3.1 | 0.1% | 2024-10-25 | Fix |
| CVE-2024-47016 | Google Android incorrect default permissions | 7.8CISA ADP v3.1 | 0.1% | 2024-10-25 | Fix |
| CVE-2024-47015 | Google Android protocolmiscadapter.cpp out-of-bounds read | 5.5CISA ADP v3.1 | 0.1% | 2024-10-25 | Fix |
| CVE-2024-47014 | Google Android incorrect default permissions | 8.8CISA ADP v3.1 | 0.2% | 2024-10-25 | Fix |
| CVE-2024-47013 | Google Android flexpmu_cal_rae.c privilege escalation | 7.8CISA ADP v3.1 | 0.1% | 2024-10-25 | Fix |
| CVE-2024-47012 | Google Android mm_GmmPduCodec.c out-of-bounds write | 7.8v3.1 | 0.1% | 2024-10-25 | Fix |
| CVE-2024-47005 | Sharp Digital Full-color MFPs and Monochrome MFPs exposed dangerous method | 8.1v3.1 | 0.5% | 2024-10-25 | Fix |
| CVE-2024-45842 | Sharp Digital Full-color MFPs and Monochrome MFPs path traversal | 5.3v3.1 | 0.6% | 2024-10-25 | Fix |
| CVE-2024-45829 | Sharp Digital Full-color MFPs and Monochrome MFPs out-of-bounds read | 7.5v3.1 | 0.7% | 2024-10-25 | Fix |
| CVE-2024-45785 | NEUMANN CO.LTD MUSASI client-side authentication | 7.5v3.1 | 0.4% | 2024-10-25 | Fix |
| CVE-2024-44101 | Google Android null pointer dereference | 7.5v3.1 | 0.4% | 2024-10-25 | Fix |
| CVE-2024-44100 | Google Android incorrect default permissions | 7.5v3.1 | 0.3% | 2024-10-25 | Fix |
| CVE-2024-44099 | Google Android incorrect authorization | 5.5v3.1 | 0.1% | 2024-10-25 | Fix |
| CVE-2024-44098 | Google Android lwis_event.c privilege escalation | 7.4CISA ADP v3.1 | 0.1% | 2024-10-25 | Fix |
| CVE-2024-43424 | Sharp Digital Full-color MFPs and Monochrome MFPs out-of-bounds read | 7.5v3.1 | 0.8% | 2024-10-25 | Fix |
| CVE-2024-42420 | Sharp Digital Full-color MFPs and Monochrome MFPs out-of-bounds read | 7.5v3.1 | 0.8% | 2024-10-25 | Fix |
| CVE-2024-37847 | Radixiot Mangoapi arbitrary file upload | 8.8NVD v3.1 | 0.9% | 2024-10-25 | |
| CVE-2024-37846 | Radixiot Mango code injection | 4.6NVD v3.1 | 0.3% | 2024-10-25 | |
| CVE-2024-37845 | Radixiot Mango OS command injection | 7.2v3.1 | 0.8% | 2024-10-25 | |
| CVE-2024-37844 | Radixiot Mango stored cross-site scripting | 5.4v3.1 | 0.2% | 2024-10-25 | |
| CVE-2024-10387 | Rockwell Automation FactoryTalk ThinManager denial of service | 8.7CNA v4.0 | 8.0% | 2024-10-25 | Fix |
| CVE-2024-10386 | Rockwell Automation FactoryTalk ThinManager missing authentication | 9.3CNA v4.0 | 19.3% | 2024-10-25 | Fix |
| CVE-2024-10381 | Authentication bypass vulnerability in Matrix Door Controller | 9.8v3.1 | 0.9% | 2024-10-25 | Fix |
| CVE-2024-10380 | SourceCodester Petrol Pump Management Software ajax_product.php SQL injection | 7.5v3.1 | 0.4% | 2024-10-25 | |
| CVE-2024-10379 | ESAFENET CDG DecryptApplicationService.java actionViewDecyptFile path traversal | 7.5v3.1 | 0.7% | 2024-10-25 | |
| CVE-2024-10378 | ESAFENET CDG CDGRenewApplicationService.java actionViewCDGRenewFile SQL injection | 9.8v3.1 | 0.5% | 2024-10-25 | |
| CVE-2024-10377 | ESAFENET CDG DecryptApplicationService.java actionPassDecryptApplication1 SQL injection | 9.8v3.1 | 0.7% | 2024-10-25 | |
| CVE-2024-10376 | ESAFENET CDG AutoSignService.java actionPassOrNotAutoSign SQL injection | 9.8v3.1 | 0.8% | 2024-10-25 | |
| CVE-2024-10374 | WP-Members WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.4% | 2024-10-25 | Fix |
| CVE-2024-10372 | chidiwilliams buzz model_loader.py download_model temp file | 3.6NVD v3.1 | 0.3% | 2024-10-25 | |
| CVE-2024-10371 | SourceCodester Payroll Management System main login buffer overflow | 9.8v3.1 | 0.8% | 2024-10-25 | |
| CVE-2024-10370 | Codezips Sales Management System addcustind.php SQL injection | 9.8v3.1 | 0.7% | 2024-10-25 | |
| CVE-2024-10369 | Codezips Sales Management System addcustcom.php SQL injection | 9.8v3.1 | 0.8% | 2024-10-25 | |
| CVE-2024-10368 | Codezips Sales Management System addstock.php SQL injection | 9.8v3.1 | 0.7% | 2024-10-25 | |
| CVE-2024-10355 | SourceCodester Petrol Pump Management Software invoice.php SQL injection | 4.9v3.1 | 1.0% | 2024-10-25 | |
| CVE-2024-10354 | SourceCodester Petrol Pump Management Software print.php SQL injection | 4.9v3.1 | 0.7% | 2024-10-25 | |
| CVE-2024-10353 | SourceCodester Online Exam System admin-dashboard access control | 7.2v3.1 | 0.5% | 2024-10-25 | |
| CVE-2024-10351 | Tenda RX9 Pro POST request setMacFilterCfg sub_424CE0 stack-based overflow | 8.8v3.1 | 0.9% | 2024-10-25 | |
| CVE-2024-10343 | Beek Widget Extention WordPress plugin stored cross-site scripting | 6.4CNA v3.1 | 0.3% | 2024-10-25 | |
| CVE-2024-10342 | League of Legends Shortcodes WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.3% | 2024-10-25 | |
| CVE-2024-10341 | League of Legends Shortcodes WordPress plugin SQL injection | 6.5v3.1 | 0.4% | 2024-10-25 | |
| CVE-2024-10150 | Bamazoo Button Generator WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.3% | 2024-10-25 | |
| CVE-2024-10148 | Awesome buttons WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.2% | 2024-10-25 | |
| CVE-2024-10112 | Simple News WordPress plugin stored cross-site scripting | 6.4CNA v3.1 | 0.3% | 2024-10-25 | |
| CVE-2024-10016 | File Upload Types by WPForms WordPress plugin stored cross-site scripting | 6.4CNA v3.1 | 0.4% | 2024-10-25 | Fix |
| CVE-2024-10011 | BuddyPress WordPress plugin authenticated (Subscriber+) directory traversal | 8.1v3.1 | 0.9% | 2024-10-25 | Fix |
| CVE-2024-9991 | Cleartext storage of sensitive information vulnerability in Philips Lighting Devices | 7.0CNA v4.0 | 0.2% | 2024-10-25 | Fix |
| CVE-2024-9686 | Order Notification for Telegram missing authorization | 5.3CNA v3.1 | 0.3% | 2024-10-25 | |
| CVE-2024-9630 | WPS Telegram Chat WordPress plugin missing authorization to information exposure | 5.3v3.1 | 0.3% | 2024-10-25 | |
| CVE-2024-9628 | WPS Telegram Chat WordPress plugin unauthorized access to Telegram Bot API | 6.5v3.1 | 0.3% | 2024-10-25 | |
| CVE-2024-9607 | 10Web Social Post Feed WordPress plugin reflected cross-site scripting | 6.1CNA v3.1 | 0.3% | 2024-10-25 | |
| CVE-2024-9598 | AMP for WP WordPress plugin cross-site request forgery | 8.8CNA v3.1 | 0.3% | 2024-10-25 | Fix |
| CVE-2024-9585 | Image Map Pro WordPress plugin authenticated (Contributor+) stored cross-site scripting | 5.4v3.1 | 0.2% | 2024-10-25 | Fix |
| CVE-2024-9584 | Image Map Pro WordPress plugin missing authorization authenticated Map Project Add/Update/Delete | 5.4CNA v3.1 | 0.3% | 2024-10-25 | Fix |
| CVE-2024-9488 | Comments wpDiscuz WordPress plugin authentication bypass via WordPress.com OAuth provider | 9.8CNA v3.1 | 0.8% | 2024-10-25 | Fix |
| CVE-2024-9302 | App Builder WordPress plugin privilege escalation | 9.8v3.1 | 0.6% | 2024-10-25 | Fix |
| CVE-2024-9235 | Mapster WP Maps WordPress plugin incorrect authorization to authenticated arbitrary options update | 8.8v3.1 | 0.5% | 2024-10-25 | Fix |
| CVE-2024-9109 | UPS Live Rates and Access Points WordPress plugin missing authorization to plugin API key reset | 4.3CNA v3.1 | 0.4% | 2024-10-25 | Fix |
| CVE-2024-8666 | Shoutcast Icecast HTML5 Radio Player WordPress plugin stored cross-site scripting | 6.4CNA v3.1 | 0.3% | 2024-10-25 | Fix |
| CVE-2024-8036 | ABB Relion Protection Relays RE_611 IEC Unauthorized Modifications of firmware and Configuration | 4.6CNA v4.0 | 0.2% | 2024-10-25 | |
| CVE-2024-49762 | Pterodactyl Panel two-factor authentication disable endpoint information disclosure | 4.6CNA v3.1 | 0.1% | 2024-10-24 | Fix |
| CVE-2024-49760 | OpenRefine has a path traversal in LoadLanguageCommand | 7.1CNA v3.1 | 0.6% | 2024-10-24 | Fix |
| CVE-2024-49750 | Snowflake Connector for Python has sensitive data in logs | 5.5CNA v3.1 | 0.2% | 2024-10-24 | Fix |
| CVE-2024-49703 | WpEvently WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.3% | 2024-10-24 | Fix |
| CVE-2024-49702 | myCred Elementor WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.3% | 2024-10-24 | Fix |
| CVE-2024-49696 | Photo Gallery, Images, Slider in Rbs Image Gallery WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.3% | 2024-10-24 | Fix |
| CVE-2024-49695 | WP Flow Plus WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.3% | 2024-10-24 | Fix |
| CVE-2024-49693 | Mega Elements Addons for Elementor WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.3% | 2024-10-24 | Fix |
| CVE-2024-49691 | Product Filter by WBW WordPress plugin SQL injection | 7.6CNA v3.1 | 0.4% | 2024-10-24 | Fix |
| CVE-2024-49683 | Schema and Structured Data for WP and AMP WordPress plugin sensitive data exposure | 5.3CNA v3.1 | 0.3% | 2024-10-24 | Fix |
| CVE-2024-49682 | Simple Membership WordPress plugin open redirection | 6.1v3.1 | 0.3% | 2024-10-24 | Fix |
| CVE-2024-49681 | WP Sessions Time Monitoring Full Automatic WordPress plugin SQL injection | 9.3CNA v3.1 | 1.1% | 2024-10-24 | Exploit codeFix |
| CVE-2024-49359 | ZimaOS vulnerable to directory listing via Parameter Manipulation | 7.5CNA v3.1 | 1.0% | 2024-10-24 | |
| CVE-2024-49358 | ZimaOS vulnerable to Username Enumeration via API Responses | 5.3CNA v3.1 | 0.5% | 2024-10-24 | |
| CVE-2024-49357 | ZimaOS (Installed Applications and System Information) has unauthorized sensitive data leak | 7.5CNA v3.1 | 23.7% | 2024-10-24 | Nuclei |
| CVE-2024-48932 | ZimaOS Unauthenticated API Discloses Usernames | 5.3CNA v3.1 | 0.5% | 2024-10-24 | Fix |
| CVE-2024-48931 | ZimaOS arbitrary file read via Parameter Manipulation | 7.5CNA v3.1 | 0.7% | 2024-10-24 | |
| CVE-2024-48548 | Cloud Smart Lock device binding API incorrect authorization | 9.3CISA ADP v3.1 | 0.2% | 2024-10-24 | |
| CVE-2024-48547 | DreamCatcher Life firmware update process incorrect authorization | 8.4CISA ADP v3.1 | 0.2% | 2024-10-24 | |
| CVE-2024-48546 | Wear Sync firmware update process incorrect authorization | 8.4CISA ADP v3.1 | 0.2% | 2024-10-24 | |
| CVE-2024-48545 | IVY Smart firmware update process incorrect authorization | 8.4CISA ADP v3.1 | 0.2% | 2024-10-24 | |
| CVE-2024-48544 | Sylvania Smart Home firmware update process incorrect authorization | 8.4CISA ADP v3.1 | 0.2% | 2024-10-24 | |
| CVE-2024-48542 | Yamaha Headphones Controller firmware update process incorrect authorization | 8.4CISA ADP v3.1 | 0.2% | 2024-10-24 | |
| CVE-2024-48541 | Ruochan Smart firmware update process incorrect authorization | 8.4CISA ADP v3.1 | 0.2% | 2024-10-24 | |
| CVE-2024-48540 | Incorrect access control in XIAO HE Smart 4.3.1 allows attackers to access sensitive information by analyzing the code and data within the APK file. | 6.2CISA ADP v3.1 | 0.2% | 2024-10-24 | |
| CVE-2024-48539 | Neye3C firmware update mechanism hard-coded credentials | 9.8CISA ADP v3.1 | 0.3% | 2024-10-24 | |
| CVE-2024-48538 | Neye3C firmware update process missing authorization | 9.8CISA ADP v3.1 | 0.5% | 2024-10-24 | |
| CVE-2024-48514 | Remote code execution in php-heic-to-jpg | 9.8CISA ADP v3.1 | 1.0% | 2024-10-24 | Fix |
| CVE-2024-48454 | oretnom23 Purchase Order Management System unrestricted file upload | 7.2CISA ADP v3.1 | 0.9% | 2024-10-24 | |
| CVE-2024-48442 | Tuoshi Network Communications 5G CPE Router NR500-EA SSH protocol missing authentication | 6.5CISA ADP v3.1 | 0.3% | 2024-10-24 | |
| CVE-2024-48441 | Wuhan Tianyu Information Industry Tianyu CPE Router at_command.asp command injection | 8.8CISA ADP v3.1 | 1.7% | 2024-10-24 | |
| CVE-2024-48440 | Shenzhen Tuoshi Network Communications 5G CPE Router NR500-EA at_command.asp command injection | 8.8CISA ADP v3.1 | 1.7% | 2024-10-24 | |
| CVE-2024-48427 | oretnom23 Packers And Movers Management System Sourcecodester SQL injection | 8.8v3.1 | 0.9% | 2024-10-24 | Exploit code |
| CVE-2024-48426 | assimp buffer overflow | 6.2CISA ADP v3.1 | 0.2% | 2024-10-24 | Fix |
| CVE-2024-48425 | assimp buffer overflow | 5.5CISA ADP v3.1 | 0.2% | 2024-10-24 | Fix |
| CVE-2024-48424 | assimp buffer overflow | 5.5CISA ADP v3.1 | 0.2% | 2024-10-24 | Fix |
| CVE-2024-48423 | assimp use-after-free | 7.8v3.1 | 0.3% | 2024-10-24 | Fix |
| CVE-2024-48208 | pure-ftpd out-of-bounds read | 8.6CISA ADP v3.1 | 1.6% | 2024-10-24 | NucleiExploit codeFix |
| CVE-2024-48145 | Netangular Technologies ChatNet AI chatbox prompt injection | 9.1CISA ADP v3.1 | 0.6% | 2024-10-24 | |
| CVE-2024-48144 | Fusion Chat Chat AI Assistant Ask Me Anything chatbox prompt injection | 9.1CISA ADP v3.1 | 0.6% | 2024-10-24 | |
| CVE-2024-48143 | Digitory Multi Channel Integrated POS OTP validation vulnerability | 9.1CISA ADP v3.1 | 0.4% | 2024-10-24 | |
| CVE-2024-48142 | Butterfly Effect Limited Monica ChatGPT AI Assistant chatbox prompt injection | 7.5CISA ADP v3.1 | 0.4% | 2024-10-24 | |
| CVE-2024-48141 | Zhipu AI CodeGeeX chatbox prompt injection | 7.5CISA ADP v3.1 | 0.4% | 2024-10-24 | |
| CVE-2024-48140 | Butterfly Effect Limited Monica AI Copilot chatbox prompt injection | 7.5CISA ADP v3.1 | 0.4% | 2024-10-24 | |
| CVE-2024-48139 | chatbox of Blackbox AI v1.3.95 prompt injection | 7.5CISA ADP v3.1 | 0.5% | 2024-10-24 | |
| CVE-2024-47883 | Butterfly has path/URL confusion in resource handling leading to multiple weaknesses | 9.1CNA v3.1 | 1.6% | 2024-10-24 | Fix |
| CVE-2024-47882 | OpenRefine error page cross-site scripting | 5.9CNA v3.1 | 0.5% | 2024-10-24 | Fix |
| CVE-2024-47881 | OpenRefine's SQLite integration allows filesystem access, remote code execution (RCE) | 8.1CNA v3.1 | 0.7% | 2024-10-24 | Fix |
| CVE-2024-47880 | OpenRefine has a reflected cross-site scripting vulnerability from POST request in ExportRowsCommand | 8.1CNA v3.1 | 0.4% | 2024-10-24 | Fix |
| CVE-2024-47879 | OpenRefine preview expression command cross-site request forgery | 7.6CNA v3.1 | 0.4% | 2024-10-24 | Fix |
| CVE-2024-47878 | OpenRefine reflected cross-site scripting vulnerability (XSS) in GData extension (authorized.vt) | 8.1CNA v3.1 | 0.5% | 2024-10-24 | Fix |
| CVE-2024-47173 | Aimeos GraphQL API admin interface denial of service vulnerability in SaaS and marketplace setups | 5.5CNA v3.1 | 0.4% | 2024-10-24 | Fix |
| CVE-2024-46998 | baserCMS has a cross-site scripting (XSS) vulnerability in Edit Email form settings feature | 7.1CNA v3.1 | 0.4% | 2024-10-24 | Fix |
| CVE-2024-46996 | baserCMS has a cross-site scripting (XSS) vulnerability in Blog posts feature | 6.3CNA v3.1 | 0.3% | 2024-10-24 | Fix |
| CVE-2024-46995 | baserCMS has cross-site scripting vulnerability in HTTP 400 Bad request | 6.1CNA v3.1 | 0.3% | 2024-10-24 | Fix |
| CVE-2024-46994 | baserCMS has cross-site scripting vulnerability in Blog posts and Contents list feature | 5.4CNA v3.1 | 0.3% | 2024-10-24 | Fix |
| CVE-2024-46478 | htmldoc buffer overflow | 9.8CISA ADP v3.1 | 0.7% | 2024-10-24 | Fix |
| CVE-2024-45263 | GL.iNet AXT1800 unrestricted file upload | 8.8CISA ADP v3.1 | 0.3% | 2024-10-24 | |
| CVE-2024-45262 | GL.iNet AXT1800 path traversal | 8.8CISA ADP v3.1 | 0.7% | 2024-10-24 | |
| CVE-2024-45261 | GL.iNet AXT1800 incorrect authorization | 8.0CISA ADP v3.1 | 0.5% | 2024-10-24 | Emerging ThreatsKCV |
| CVE-2024-45260 | GL.iNet AXT1800 incorrect authorization | 8.0CISA ADP v3.1 | 4.1% | 2024-10-24 | Emerging ThreatsKCV |
| CVE-2024-45259 | GL.iNet AXT1800 inadequate encryption strength | 6.5CISA ADP v3.1 | 0.2% | 2024-10-24 | |
| CVE-2024-45242 | EnGenius ENH1350EXT ping and speed test utility OS command injection | 7.8CISA ADP v3.1 | 35.4% | 2024-10-24 | Emerging Threats |
| CVE-2024-45031 | Apache Syncope: Stored XSS in console and Enduser | 6.1CISA ADP v3.1 | 0.7% | 2024-10-24 | Fix |
| CVE-2024-44206 | Apple Safari and iOS URL protocol handling vulnerability | 9.3v3.1 | 0.5% | 2024-10-24 | Fix |
| CVE-2024-44205 | Apple macOS sensitive information in log files | 5.5v3.1 | 0.2% | 2024-10-24 | Fix |
| CVE-2024-44185 | Apple Safari and iOS web content processing vulnerability | 5.5v3.1 | 0.3% | 2024-10-24 | Fix |
| CVE-2024-44141 | Apple macOS code execution | 6.8v3.1 | 0.2% | 2024-10-24 | Fix |
| CVE-2024-41618 | Money Manager EX WebApp transaction_delete_group function SQL injection | 9.8CISA ADP v3.1 | 0.5% | 2024-10-24 | |
| CVE-2024-41617 | Money Manager EX WebApp redirect_if_not_loggedin function improper access control | 9.8CISA ADP v3.1 | 1.1% | 2024-10-24 | |
| CVE-2024-40810 | Apple macOS out-of-bounds write | 5.5v3.1 | 0.2% | 2024-10-24 | Fix |
| CVE-2024-40595 | One Identity Safeguard for Privileged Sessions cleartext transmission of sensitive information | 5.3CISA ADP v3.1 | 0.2% | 2024-10-24 | |
| CVE-2024-38314 | IBM Maximo Application Suite Monitor component information disclosure | 5.9CNA v3.1 | 0.3% | 2024-10-24 | Fix |
| CVE-2024-10350 | code-projects Hospital Management System add-doctor.php SQL injection | 9.8v3.1 | 0.6% | 2024-10-24 | |
| CVE-2024-10349 | SourceCodester Best House Rental Management System ajax.php delete_tenant SQL injection | 9.8v3.1 | 0.6% | 2024-10-24 | |
| CVE-2024-10348 | SourceCodester Best House Rental Management System Manage Tenant Details page cross-site scripting | 5.4v3.1 | 0.5% | 2024-10-24 | |
| CVE-2024-10338 | SourceCodeHero Clothes Recommendation System home.php SQL injection | 7.2v3.1 | 0.5% | 2024-10-24 | |
| CVE-2024-10337 | SourceCodeHero Clothes Recommendation System home.php SQL injection | 7.2v3.1 | 0.5% | 2024-10-24 | |
| CVE-2024-10336 | SourceCodeHero Clothes Recommendation System Admin Login page index.php SQL injection | 9.8v3.1 | 0.6% | 2024-10-24 | |
| CVE-2024-10335 | SourceCodester Garbage Collection Management System login.php SQL injection | 9.8v3.1 | 0.7% | 2024-10-24 | |
| CVE-2024-10332 | Janto cross-site scripting | 6.1CNA v3.1 | 0.3% | 2024-10-24 | |
| CVE-2024-10331 | PHPGurukul Vehicle Record System search-vehicle.php SQL injection | 8.8v3.1 | 0.5% | 2024-10-24 | |
| CVE-2024-10327 | Okta Verify improper authentication | 8.1CNA v3.1 | 0.6% | 2024-10-24 | Fix |
| CVE-2024-10313 | iniNet Solutions SpiderControl SCADA PC HMI Editor path traversal | 8.6CNA v4.0 | 0.5% | 2024-10-24 | Fix |
| CVE-2024-10295 | Red Hat 3scale API Management APICast gateway incorrect authorization | 7.5CNA v3.1 | 0.4% | 2024-10-24 | |
| CVE-2024-10180 | Contact Form 7 - Repeatable Fields WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.3% | 2024-10-24 | Fix |
| CVE-2024-10176 | Compact WP Audio Player WordPress plugin stored cross-site scripting | 6.4CNA v3.1 | 0.3% | 2024-10-24 | Fix |
| CVE-2024-10050 | Elementor Header and Footer Builder WordPress plugin information disclosure | 4.3CNA v3.1 | 0.5% | 2024-10-24 | Fix |
| CVE-2024-9943 | MultiVendorX WordPress plugin cross-site request forgery | 6.3CNA v3.1 | 0.2% | 2024-10-24 | Fix |
| CVE-2024-9865 | EventPrime WordPress plugin stored cross-site scripting | 6.1v3.1 | 0.4% | 2024-10-24 | Fix |
| CVE-2024-9864 | EventPrime WordPress plugin stored cross-site scripting | 6.1CNA v3.1 | 0.3% | 2024-10-24 | Fix |
| CVE-2024-9692 | Improper access control in Input in VIMESA VHF/FM Transmitter Blue Plus | 6.9CNA v4.0 | 0.4% | 2024-10-24 | |
| CVE-2024-9650 | WP Recipe Maker WordPress plugin DOM-based stored cross-site scripting | 5.4v3.1 | 0.4% | 2024-10-24 | Fix |
| CVE-2024-9531 | MultiVendorX WordPress plugin unauthorized access | 4.3CNA v3.1 | 0.3% | 2024-10-24 | Fix |
| CVE-2024-9374 | Terms descriptions WordPress plugin reflected cross-site scripting | 6.1CNA v3.1 | 0.3% | 2024-10-24 | Fix |
| CVE-2024-9214 | Extra Product Options Builder for WooCommerce WordPress plugin stored cross-site scripting | 6.1CNA v3.1 | 0.4% | 2024-10-24 | Fix |
| CVE-2024-8959 | WP Adminify Best WordPress Custom Dashboard plugin stored cross-site scripting | 6.4CNA v3.1 | 0.4% | 2024-10-24 | Fix |
| CVE-2024-8717 | PDF Flipbook WordPress plugin reflected cross-site scripting | 6.1CNA v3.1 | 0.5% | 2024-10-24 | Fix |
| CVE-2024-8667 | nlemsieh HurryTimer campaign activation function missing authorization | 4.3CNA v3.1 | 0.3% | 2024-10-24 | Fix |
| CVE-2024-8312 | Improper neutralization of input during web page generation (cross-site scripting) in GitLab | 8.7CNA v3.1 | 0.5% | 2024-10-24 | Fix |
| CVE-2024-7763 | WhatsUp Gold getReport missing authentication authentication bypass | 9.8CNA v3.1 | 0.6% | 2024-10-24 | Fix |
| CVE-2024-6826 | Allocation of resources without limits or throttling in GitLab | 6.5CNA v3.1 | 0.5% | 2024-10-24 | Fix |
| CVE-2024-6049 | Lawo vsm LTC Time Sync (vTimeSync) unauthenticated path traversal | 7.5CISA ADP v3.1 | 4.2% | 2024-10-24 | NucleiFix |
| CVE-2024-5608 | ManageEngine ADAudit Plus SQL injection | 8.3CNA v3.1 | 2.5% | 2024-10-24 | Fix |
| CVE-2024-50383 | botan observable discrepancy | 5.9CISA ADP v3.1 | 0.5% | 2024-10-23 | Fix |
| CVE-2024-50382 | botan observable discrepancy | 5.9CISA ADP v3.1 | 0.5% | 2024-10-23 | Fix |
| CVE-2024-50066 | Linux kernel mremap page table handling race condition | 7.8CNA v3.1 | 0.2% | 2024-10-23 | Fix |
| CVE-2024-50050 | Meta Platforms Llama Stack remote code execution | 6.3CISA ADP v3.1 | 0.9% | 2024-10-23 | Exploit code |
| CVE-2024-49756 | AshPostgres update action policy enforcement vulnerability | 5.3CNA v3.1 | 0.5% | 2024-10-23 | Fix |
| CVE-2024-49751 | Frappe Press possible HTML injection through SaaS Signup inputs | 1.2CNA v4.0 | 0.5% | 2024-10-23 | |
| CVE-2024-49701 | Mags WordPress theme local file inclusion | 8.8v3.1 | 0.5% | 2024-10-23 | Fix |
| CVE-2024-49690 | Qi Blocks WordPress plugin local file inclusion | 8.8v3.1 | 0.6% | 2024-10-23 | Fix |
| CVE-2024-49684 | Backup and Staging by WP Time Capsule WordPress plugin PHP object injection | 7.2CNA v3.1 | 0.5% | 2024-10-23 | Fix |
| CVE-2024-49676 | Custom Icons for Elementor WordPress plugin arbitrary file upload | 6.6CNA v3.1 | 0.3% | 2024-10-23 | Fix |
| CVE-2024-49675 | iBryl Switch User WordPress plugin account takeover | 8.8v3.1 | 0.5% | 2024-10-23 | |
| CVE-2024-49671 | AI Postpix WordPress plugin arbitrary file upload | 9.9CNA v3.1 | 0.5% | 2024-10-23 | Fix |
| CVE-2024-49669 | INK Official WordPress plugin arbitrary file upload | 9.9CNA v3.1 | 0.5% | 2024-10-23 | |
| CVE-2024-49668 | Verbalize WP WordPress plugin arbitrary file upload | 10.0CNA v3.1 | 1.5% | 2024-10-23 | Exploit code |
| CVE-2024-49658 | Woocommerce Custom Profile Picture WordPress plugin arbitrary file upload | 9.9CNA v3.1 | 0.6% | 2024-10-23 | |
| CVE-2024-49657 | 3D Work In Progress WordPress plugin arbitrary file deletion | 7.7CNA v3.1 | 0.4% | 2024-10-23 | |
| CVE-2024-49653 | Portfolleo WordPress plugin arbitrary file upload | 9.9CNA v3.1 | 1.2% | 2024-10-23 | Exploit code |
| CVE-2024-49652 | 3D Work In Progress WordPress plugin arbitrary file upload | 9.9CNA v3.1 | 0.5% | 2024-10-23 | |
| CVE-2024-49370 | pimcore Change-Password via Portal-Profile sets PimcoreBackendUser password without hashing | 8.7CNA v4.0 | 0.5% | 2024-10-23 | Fix |
| CVE-2024-48964 | OS command injection in Snyk Gradle Plugin | 8.8v3.1 | 0.5% | 2024-10-23 | Fix |
| CVE-2024-48963 | OS command injection in Snyk PHP Plugin | 9.8v3.1 | 0.5% | 2024-10-23 | Fix |
| CVE-2024-48213 | Rockoa Xinhu path traversal | 4.3v3.1 | 0.7% | 2024-10-23 | |
| CVE-2024-47904 | Siemens InterMesh 7177 Hybrid incorrect privilege assignment | 8.5CNA v4.0 | 0.2% | 2024-10-23 | Fix |
| CVE-2024-47903 | Siemens InterMesh 7177 Hybrid execution with unnecessary privileges | 6.9CNA v4.0 | 0.4% | 2024-10-23 | Fix |
| CVE-2024-47902 | Siemens InterMesh 7177 Hybrid missing authentication | 6.9CNA v4.0 | 0.5% | 2024-10-23 | Fix |
| CVE-2024-47901 | Siemens InterMesh 7177 Hybrid OS command injection | 10.0CNA v4.0 | 1.2% | 2024-10-23 | Fix |
| CVE-2024-47575 | Fortinet FortiManager missing authentication | 9.8CNA v3.1 | 94.8% | 2024-10-23 | KEVNucleiMetasploitEmerging ThreatsExploit codeFix |
| CVE-2024-43924 | Responsive Lightbox and Gallery WordPress plugin broken access control | 9.8v3.1 | 0.5% | 2024-10-23 | Fix |
| CVE-2024-40432 | Realtek SD card reader driver IOCTL_SFFDISK_DEVICE_COMMAND control denial of service | 6.5CISA ADP v3.1 | 0.4% | 2024-10-23 | |
| CVE-2024-40431 | Realtek SD card reader driver IOCTL_SCSI_PASS_THROUGH control vulnerability | 8.8CISA ADP v3.1 | 1.3% | 2024-10-23 | Exploit codeKCV |
| CVE-2024-31880 | IBM Db2 denial of service | 5.3CNA v3.1 | 0.4% | 2024-10-23 | Fix |
| CVE-2024-30124 | HCL Sametime is impacted by insecure services | 4.0CNA v3.1 | 0.2% | 2024-10-23 | Fix |
| CVE-2024-30122 | HCL Sametime is impacted by misconfigured security related HTTP headers | 5.8CNA v3.1 | 0.2% | 2024-10-23 | Fix |
| CVE-2024-20526 | Cisco Adaptive Security Appliance (ASA) Software logic flaw | 5.3CNA v3.1 | 0.5% | 2024-10-23 | Fix |
| CVE-2024-20495 | Cisco Adaptive Security Appliance (ASA) Software improper input validation | 8.6CNA v3.1 | 0.5% | 2024-10-23 | Fix |
| CVE-2024-20494 | Cisco Adaptive Security Appliance (ASA) Software improper type validation | 8.6CNA v3.1 | 0.5% | 2024-10-23 | Fix |
| CVE-2024-20493 | Cisco Adaptive Security Appliance (ASA) Software missing resource release | 5.3CNA v3.1 | 0.5% | 2024-10-23 | Fix |
| CVE-2024-20485 | Cisco Adaptive Security Appliance (ASA) Software code injection | 6.0CNA v3.1 | 0.2% | 2024-10-23 | Fix |
| CVE-2024-20482 | Cisco Firepower Management Center incorrect authorization | 6.5CNA v3.1 | 0.5% | 2024-10-23 | Fix |
| CVE-2024-20481 | Cisco ASA and FTD denial of service | 5.8CNA v3.1 | 15.9% | 2024-10-23 | KEVFix |
| CVE-2024-20474 | Cisco Secure Client integer underflow | 4.3CNA v3.1 | 0.6% | 2024-10-23 | Fix |
| CVE-2024-20473 | Cisco Firepower Management Center SQL injection | 6.5CNA v3.1 | 0.4% | 2024-10-23 | Fix |
| CVE-2024-20472 | Cisco Firepower Management Center SQL injection | 6.5CNA v3.1 | 0.4% | 2024-10-23 | Fix |
| CVE-2024-20471 | Cisco Firepower Management Center SQL injection | 6.5CNA v3.1 | 0.4% | 2024-10-23 | Fix |
| CVE-2024-20431 | Cisco Firepower Threat Defense Software geolocation access control vulnerability | 5.8CNA v3.1 | 0.4% | 2024-10-23 | Fix |
| CVE-2024-20426 | Cisco Adaptive Security Appliance (ASA) Software null pointer dereference | 8.6CNA v3.1 | 0.5% | 2024-10-23 | Fix |
| CVE-2024-20424 | Cisco Firepower Management Center OS command injection | 9.9CNA v3.1 | 0.9% | 2024-10-23 | Fix |
| CVE-2024-20415 | Cisco Firepower Management Center cross-site scripting | 4.8CNA v3.1 | 0.3% | 2024-10-23 | Fix |
| CVE-2024-20412 | Cisco Firepower Threat Defense Software hard-coded password | 9.3CNA v3.1 | 0.2% | 2024-10-23 | Fix |
| CVE-2024-20410 | Cisco Firepower Management Center cross-site scripting | 5.4CNA v3.1 | 0.3% | 2024-10-23 | Fix |
| CVE-2024-20409 | Cisco Firepower Management Center cross-site scripting | 4.8CNA v3.1 | 0.3% | 2024-10-23 | Fix |
| CVE-2024-20408 | Cisco Adaptive Security Appliance (ASA) Software improper type validation | 7.7CNA v3.1 | 0.4% | 2024-10-23 | Fix |
| CVE-2024-20407 | Cisco Firepower Threat Defense Software logic flaw | 5.8CNA v3.1 | 0.4% | 2024-10-23 | Fix |
| CVE-2024-20403 | Cisco Firepower Management Center cross-site scripting | 4.8CNA v3.1 | 0.3% | 2024-10-23 | Fix |
| CVE-2024-20402 | Cisco Adaptive Security Appliance (ASA) Software out-of-bounds access | 8.6CNA v3.1 | 0.5% | 2024-10-23 | Fix |
| CVE-2024-20388 | Cisco Firepower Management Center information disclosure through data queries | 5.3CNA v3.1 | 0.4% | 2024-10-23 | Fix |
| CVE-2024-20387 | Cisco Firepower Management Center cross-site scripting | 5.4CNA v3.1 | 0.3% | 2024-10-23 | Fix |
| CVE-2024-20386 | Cisco Firepower Management Center cross-site scripting | 4.8CNA v3.1 | 0.4% | 2024-10-23 | Fix |
| CVE-2024-20384 | Cisco Adaptive Security Appliance (ASA) Software authentication bypass by spoofing | 5.8CNA v3.1 | 0.5% | 2024-10-23 | Fix |
| CVE-2024-20382 | Cisco Adaptive Security Appliance (ASA) Software cross-site scripting | 6.1CNA v3.1 | 0.4% | 2024-10-23 | Fix |
| CVE-2024-20379 | Cisco Firepower Management Center absolute path traversal | 6.5CNA v3.1 | 0.6% | 2024-10-23 | Fix |
| CVE-2024-20377 | Cisco Firepower Management Center cross-site scripting | 5.4CNA v3.1 | 0.4% | 2024-10-23 | Fix |
| CVE-2024-20374 | Cisco Firepower Management Center improper privilege management | 6.5CNA v3.1 | 0.8% | 2024-10-23 | Fix |
| CVE-2024-20372 | Cisco Firepower Management Center cross-site scripting | 6.1CNA v3.1 | 0.4% | 2024-10-23 | Fix |
| CVE-2024-20370 | Cisco Adaptive Security Appliance (ASA) Software access control weakness | 6.0CNA v3.1 | 0.2% | 2024-10-23 | Fix |
| CVE-2024-20364 | Cisco Firepower Management Center cross-site scripting | 4.8CNA v3.1 | 0.4% | 2024-10-23 | Fix |
| CVE-2024-20351 | Cisco Firepower Threat Defense Software Snort Firewall denial of service | 8.6CNA v3.1 | 0.7% | 2024-10-23 | Fix |
| CVE-2024-20342 | Cisco Firepower Threat Defense Software Rate Filter Bypass vulnerability | 5.8CNA v3.1 | 0.5% | 2024-10-23 | Fix |
| CVE-2024-20341 | Cisco Adaptive Security Appliance WebVPN cross-site scripting | 6.1CNA v3.1 | 0.4% | 2024-10-23 | Fix |
| CVE-2024-20340 | Cisco Secure Firewall Management Center (FMC) SQL injection | 6.5CNA v3.1 | 0.5% | 2024-10-23 | Fix |
| CVE-2024-20339 | Cisco Firepower Threat Defense Software for Firepower 2100 Series TLS denial of service | 8.6CNA v3.1 | 0.7% | 2024-10-23 | Fix |
| CVE-2024-20331 | Cisco Adaptive Security Appliance and Firepower Threat Defense Software VPN authentication DoS | 6.8CNA v3.1 | 0.7% | 2024-10-23 | Fix |
| CVE-2024-20330 | Cisco Firepower Threat Defense Software Snort detection engine denial of service | 8.6CNA v3.1 | 0.7% | 2024-10-23 | Fix |
| CVE-2024-20329 | Cisco Adaptive Security Appliance Software Remote command injection | 9.9CNA v3.1 | 1.2% | 2024-10-23 | Fix |
| CVE-2024-20300 | Cisco Firepower Management Center software cross-site scripting | 4.8CNA v3.1 | 0.4% | 2024-10-23 | Fix |
| CVE-2024-20299 | Cisco ASA and Firepower Threat Defense Software AnyConnect firewall vulnerability | 5.8CNA v3.1 | 0.5% | 2024-10-23 | Fix |
| CVE-2024-20298 | Cisco Firepower Management Center software cross-site scripting | 4.8CNA v3.1 | 0.4% | 2024-10-23 | Fix |
| CVE-2024-20297 | Cisco ASA and Firepower Threat Defense Software AnyConnect firewall vulnerability | 5.8CNA v3.1 | 0.5% | 2024-10-23 | Fix |
| CVE-2024-20275 | Cisco Secure Firewall Management Center Software Backup Cluster command injection | 6.8CNA v3.1 | 0.5% | 2024-10-23 | Fix |
| CVE-2024-20274 | Cisco Secure Firewall Management Center HTML injection | 5.5CNA v3.1 | 0.4% | 2024-10-23 | Fix |
| CVE-2024-20273 | Cisco Firepower Management Center software cross-site scripting | 6.1CNA v3.1 | 0.4% | 2024-10-23 | Fix |
| CVE-2024-20269 | Cisco Firepower Management Center software cross-site scripting | 4.8CNA v3.1 | 0.4% | 2024-10-23 | Fix |
| CVE-2024-20268 | Cisco ASA and Firepower Threat Defense Software SNMP denial of service | 7.7CNA v3.1 | 0.6% | 2024-10-23 | Fix |
| CVE-2024-20264 | Cisco Firepower Management Center software cross-site scripting | 4.8CNA v3.1 | 0.4% | 2024-10-23 | Fix |
| CVE-2024-20260 | Cisco Secure Firewall ASA and FTD Software VPN and management web servers denial of service | 8.6CNA v3.1 | 0.6% | 2024-10-23 | Fix |
| CVE-2024-10301 | PHPGurukul Medical Card Generation System Search search-medicalcard.php SQL injection | 7.2v3.1 | 0.4% | 2024-10-23 | |
| CVE-2024-10300 | PHPGurukul Medical Card Generation System View Enquiry page view-enquiry.php SQL injection | 7.2v3.1 | 0.4% | 2024-10-23 | |
| CVE-2024-10299 | PHPGurukul Medical Card Generation System view-card-detail.php SQL injection | 7.2v3.1 | 0.4% | 2024-10-23 | |
| CVE-2024-10298 | PHPGurukul Medical Card Generation System edit-card-detail.php SQL injection | 7.2v3.1 | 0.4% | 2024-10-23 | |
| CVE-2024-10297 | PHPGurukul Medical Card Generation System Managecard Edit Image page changeimage.php SQL injection | 7.2v3.1 | 0.5% | 2024-10-23 | |
| CVE-2024-10296 | PHPGurukul Medical Card Generation System card-bwdates-reports-details.php SQL injection | 7.2v3.1 | 0.4% | 2024-10-23 | |
| CVE-2024-10293 | ZZCMS functions.php Ebak_SetGotoPak unrestricted upload | 9.8v3.1 | 0.5% | 2024-10-23 | |
| CVE-2024-10292 | ZZCMS ChangeTable.php unrestricted upload | 9.8v3.1 | 0.5% | 2024-10-23 | |
| CVE-2024-10291 | ZZCMS phome.php Ebak_DotranExecutSQL SQL injection | 9.8v3.1 | 0.5% | 2024-10-23 | |
| CVE-2024-10290 | ZZCMS inc.php information disclosure | 7.5v3.1 | 0.6% | 2024-10-23 | |
| CVE-2024-10289 | Cross-site scripting (XSS) vulnerability in LocalServer | 6.1v3.1 | 0.3% | 2024-10-23 | |
| CVE-2024-10288 | Cross-site scripting (XSS) vulnerability in LocalServer | 6.1v3.1 | 0.3% | 2024-10-23 | |
| CVE-2024-10287 | Cross-site scripting (XSS) vulnerability in LocalServer | 6.1v3.1 | 0.3% | 2024-10-23 | |
| CVE-2024-10286 | Cross-site scripting (XSS) vulnerability in LocalServer | 6.1v3.1 | 0.3% | 2024-10-23 | |
| CVE-2024-10283 | Tenda RX9/RX9 Pro SetNetControlList sub_4337EC stack-based overflow | 8.8v3.1 | 0.9% | 2024-10-23 | |
| CVE-2024-10282 | Tenda RX9/RX9 Pro SetVirtualServerCfg sub_42EA38 stack-based overflow | 8.8v3.1 | 1.2% | 2024-10-23 | Emerging Threats |
| CVE-2024-10281 | Tenda RX9/RX9 Pro SetStaticRouteCfg sub_42EEE0 stack-based overflow | 8.8v3.1 | 1.0% | 2024-10-23 | |
| CVE-2024-10280 | Tenda AC6 null pointer dereference | 7.5v3.1 | 0.8% | 2024-10-23 | |
| CVE-2024-10279 | ESAFENET CDG PrintPolicyService.java SQL injection | 9.8v3.1 | 0.6% | 2024-10-23 | |
| CVE-2024-10278 | ESAFENET CDG ReUserOrganiseService.java SQL injection | 9.8v3.1 | 0.6% | 2024-10-23 | |
| CVE-2024-10277 | ESAFENET CDG UsbKeyAjax.java SQL injection | 9.8v3.1 | 0.6% | 2024-10-23 | |
| CVE-2024-10276 | Telestream Sentry Reports page page cross-site scripting | 6.1v3.1 | 0.4% | 2024-10-23 | |
| CVE-2024-10250 | Nioland WordPress theme reflected cross-site scripting via s | 6.1CNA v3.1 | 0.3% | 2024-10-23 | Fix |
| CVE-2024-10045 | Transients Manager WordPress plugin cross-site request forgery | 4.3CNA v3.1 | 0.2% | 2024-10-23 | Fix |
| CVE-2024-10041 | Red Hat Enterprise Linux 8 pam: Libpam: Libpam vulnerable to read hashed password | 4.7CNA v3.1 | 0.3% | 2024-10-23 | Fix |
| CVE-2024-9949 | Denial of service in Forescout SecureConnector | 5.8CNA v4.0 | 0.1% | 2024-10-23 | Fix |
| CVE-2024-9947 | ProfilePress - Pro WordPress plugin authentication bypass via WordPress.com OAuth provider | 9.8v3.1 | 0.5% | 2024-10-23 | Fix |
| CVE-2024-9927 | WooCommerce Order Proposal WordPress plugin privilege escalation | 7.2CNA v3.1 | 0.5% | 2024-10-23 | Fix |
| CVE-2024-9829 | Download WordPress plugin missing authorization authenticated user Metadata and comment download | 6.5CNA v3.1 | 0.4% | 2024-10-23 | Fix |
| CVE-2024-9583 | rebelcode RSS Aggregator premium support request function missing authorization | 5.4v3.1 | 0.4% | 2024-10-23 | Fix |
| CVE-2024-9530 | Qi Addons For Elementor WordPress plugin sensitive information exposure | 4.3CNA v3.1 | 0.4% | 2024-10-23 | Fix |
| CVE-2024-8500 | WP Shortcodes Plugin Shortcodes Ultimate WordPress plugin DOM-based stored cross-site scripting | 5.4CNA v3.1 | 0.4% | 2024-10-23 | Fix |
| CVE-2024-5764 | Nexus Repository 3 Static hard-coded encryption passphrase used by default | 5.9CNA v4.0 | 0.4% | 2024-10-23 | Exploit codeFix |
| CVE-2024-50312 | Graphql: Information disclosure via graphql introspection in openshift | 5.3CNA v3.1 | 0.6% | 2024-10-22 | Fix |
| CVE-2024-50311 | Red Hat OpenShift Container Platform graphql: Denial of service vulnerability | 6.5CNA v3.1 | 0.6% | 2024-10-22 | Fix |
| CVE-2024-49373 | No Fuss Computing Centurion ERP project visibility vulnerability | 4.1CNA v3.1 | 0.4% | 2024-10-22 | Fix |
| CVE-2024-49211 | Archerirm Archer Dashboard Listing reflected cross-site scripting | 6.1v3.1 | 0.3% | 2024-10-22 | Fix |
| CVE-2024-49210 | Archerirm Archer iView List reflected cross-site scripting | 6.1v3.1 | 0.3% | 2024-10-22 | Fix |
| CVE-2024-49209 | Adobe Archer Platform 2024.03 before authorization bypass | 4.3v3.1 | 0.3% | 2024-10-22 | Fix |
| CVE-2024-49208 | Adobe Archer Platform 2024.03 before authorization bypass | 3.1NVD v3.1 | 0.3% | 2024-10-22 | Fix |
| CVE-2024-48929 | Umbraco CMS has Incomplete Server Termination during Explicit Sign-Out | 4.2CNA v3.1 | 0.3% | 2024-10-22 | Fix |
| CVE-2024-48927 | Umbraco-CMS Potential code execution Risk when Viewing SVG files in Full Screen in Backoffice | 4.6CNA v3.1 | 0.5% | 2024-10-22 | Fix |
| CVE-2024-48926 | Umbraco CMS logout page displayed before session expiration | 4.2CNA v3.1 | 0.3% | 2024-10-22 | Fix |
| CVE-2024-48925 | Umbraco CMS improper access control vulnerability allows Low-Privilege Users to Access Webhook API | 0.0CNA v3.1 | 0.4% | 2024-10-22 | Fix |
| CVE-2024-48919 | RCE via prompt injection into Cursor's Terminal Cmd-K | 9.2CNA v4.0 | 0.5% | 2024-10-22 | Fix |
| CVE-2024-48904 | Trend Micro Cloud Edge An command injection | 9.8CNA v3.1 | 2.4% | 2024-10-22 | Fix |
| CVE-2024-48903 | Trend Micro Deep Security Agent An improper access control | 7.8CNA v3.1 | 0.7% | 2024-10-22 | Fix |
| CVE-2024-48708 | O-dyn Collabtive cross-site scripting | 5.4v3.1 | 0.3% | 2024-10-22 | |
| CVE-2024-48707 | O-dyn Collabtive cross-site scripting | 5.4v3.1 | 0.3% | 2024-10-22 | |
| CVE-2024-48706 | O-dyn Collabtive cross-site scripting | 5.4v3.1 | 0.3% | 2024-10-22 | |
| CVE-2024-48657 | Princelycesar Hospital Management System SQL injection | 7.2v3.1 | 0.9% | 2024-10-22 | |
| CVE-2024-48656 | Angeljudesuarez Student Management System cross-site scripting | 4.8v3.1 | 0.4% | 2024-10-22 | |
| CVE-2024-48652 | tuzitio CamaleonCMS camaleon_cms affected by cross-site scripting | 4.8v3.1 | 1.0% | 2024-10-22 | Exploit code |
| CVE-2024-48644 | Reolink Duo 2 WiFi Camera login component vulnerability | 5.3CISA ADP v3.1 | 0.8% | 2024-10-22 | Exploit code |
| CVE-2024-48605 | Helakuru uncontrolled search path | 7.8v3.1 | 0.5% | 2024-10-22 | Exploit code |