CVE-2024 records published in October 2024
Page two of four: records 1,001 to 2,000 of the 3,350 published in October 2024, newest first. The first page carries the figures for October 2024.
| CVE | Summary | CVSS | EPSS | Published | Signals |
|---|---|---|---|---|---|
| CVE-2024-48570 | PHPGurukul Client Management System SQL injection | 7.5v3.1 | 0.5% | 2024-10-22 | |
| CVE-2024-48415 | Razormist Loan Management System cross-site scripting | 5.0v3.1 | 0.4% | 2024-10-22 | Exploit code |
| CVE-2024-47819 | Umbraco CMS vulnerable to stored cross-site scripting in the dictionary name on Dictionary section | 4.2CNA v3.1 | 0.4% | 2024-10-22 | Fix |
| CVE-2024-46903 | Trend Micro Deep Discovery Inspector SQL injection | 6.5CNA v3.1 | 1.2% | 2024-10-22 | Fix |
| CVE-2024-46902 | Trend Micro Deep Discovery Inspector SQL injection | 4.9CNA v3.1 | 0.7% | 2024-10-22 | Fix |
| CVE-2024-46538 | Netgate pfSense cross-site scripting | 4.8NVD v3.1 | 80.3% | 2024-10-22 | Emerging ThreatsExploit code |
| CVE-2024-46483 | Xlight FTP Server SFTP server packet parsing integer overflow | 9.8CISA ADP v3.1 | 1.1% | 2024-10-22 | Exploit code |
| CVE-2024-46482 | Ladybird Web Solution Faveo Helpdesk ticket generation function unrestricted file upload | 8.2CISA ADP v3.1 | 0.4% | 2024-10-22 | |
| CVE-2024-46240 | O-dyn Collabtive cross-site scripting | 4.8v3.1 | 0.3% | 2024-10-22 | |
| CVE-2024-45526 | Security Update for the OPC UA .NET Standard Stack | 5.3CISA ADP v3.1 | 0.5% | 2024-10-22 | Fix |
| CVE-2024-45518 | Zimbra Collaboration server-side request forgery | 8.8v3.1 | 20.3% | 2024-10-22 | Fix |
| CVE-2024-45335 | Trend Micro Antivirus One virus scan vulnerability | 8.4CNA v3.1 | 0.2% | 2024-10-22 | Fix |
| CVE-2024-45334 | Trend Micro Antivirus One unauthorized access | 7.8CNA v3.1 | 0.1% | 2024-10-22 | Fix |
| CVE-2024-44812 | Janobe Online Complaint Site SQL injection | 9.8v3.1 | 1.2% | 2024-10-22 | Exploit code |
| CVE-2024-44331 | GStreamer RTSP server hexstream request handling improper access control | 7.5CISA ADP v3.1 | 0.7% | 2024-10-22 | Fix |
| CVE-2024-43812 | Kieback&Peter DDC4000 Series path traversal insufficiently protected credentials | 8.6CNA v4.0 | 0.2% | 2024-10-22 | Fix |
| CVE-2024-43698 | Kieback&Peter DDC4000 Series use of weak credentials | 9.3CNA v4.0 | 0.4% | 2024-10-22 | Fix |
| CVE-2024-43177 | IBM Concert improper certificate validation | 5.9CNA v3.1 | 0.3% | 2024-10-22 | Fix |
| CVE-2024-43173 | IBM Concert information disclosure | 3.7CNA v3.1 | 0.2% | 2024-10-22 | Fix |
| CVE-2024-42643 | fast_ping.c in SmartDNS Release46 integer overflow | 7.5CISA ADP v3.1 | 0.6% | 2024-10-22 | Fix |
| CVE-2024-41717 | Kieback&Peter DDC4000 Series path traversal | 9.3CNA v4.0 | 0.6% | 2024-10-22 | Fix |
| CVE-2024-41183 | Trend Micro VPN (consumer) external control of a file path | 7.8CNA v3.1 | 1.0% | 2024-10-22 | Fix |
| CVE-2024-40494 | Keith-cullen Freecoap coap_msg.c buffer overflow | 9.8CISA ADP v3.1 | 1.2% | 2024-10-22 | |
| CVE-2024-40493 | Keith-cullen Freecoap null pointer dereference | 9.8v3.1 | 0.8% | 2024-10-22 | |
| CVE-2024-39753 | Trend Micro Apex One modOSCE SQL injection | 7.5CNA v3.1 | 2.0% | 2024-10-22 | Fix |
| CVE-2024-38002 | Liferay Portal and Liferay DXP Workflow Component Does not Check User Permissions | 9.0CNA v3.1 | 0.6% | 2024-10-22 | Fix |
| CVE-2024-35308 | Pandora FMS Post-auth arbitrary file read in the Server Plugins Section | 8.3CNA v4.0 | 0.6% | 2024-10-22 | Fix |
| CVE-2024-31029 | Keith-cullen Freecoap out-of-bounds read | 8.2CISA ADP v3.1 | 0.6% | 2024-10-22 | |
| CVE-2024-26519 | Casa Systems NTC-221 nas.cgi missing authentication | 9.0CISA ADP v3.1 | 0.3% | 2024-10-22 | |
| CVE-2024-26273 | Liferay Portal and Liferay DXP vulnerable to cross-site request forgery | 8.8CNA v3.1 | 0.4% | 2024-10-22 | Fix |
| CVE-2024-26272 | Liferay Portal and Liferay DXP vulnerable to cross-site request forgery | 8.8CNA v3.1 | 0.4% | 2024-10-22 | Fix |
| CVE-2024-26271 | Liferay Portal and Liferay DXP vulnerable to cross-site request forgery | 8.8CNA v3.1 | 0.4% | 2024-10-22 | Fix |
| CVE-2024-10234 | Red Hat JBoss Enterprise Application Platform 7 wildfly: Wildfly vulnerable to cross-site scripting | 6.1CNA v3.1 | 0.7% | 2024-10-22 | Fix |
| CVE-2024-10231 | Google Chrome V8 type confusion | 8.8v3.1 | 0.5% | 2024-10-22 | Fix |
| CVE-2024-10230 | Google Chrome V8 type confusion | 8.8v3.1 | 0.6% | 2024-10-22 | Fix |
| CVE-2024-10229 | Google Chrome extensions inappropriate implementation | 8.1v3.1 | 0.5% | 2024-10-22 | Fix |
| CVE-2024-10189 | Anchor Episodes Index (Spotify for Podcasters) WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.3% | 2024-10-22 | Fix |
| CVE-2024-10183 | Arbitrary file write vulnerability in Jamf Remote Assist leading to privilege escalation | 5.2CNA v4.0 | 0.1% | 2024-10-22 | |
| CVE-2024-10125 | Amazon.ApplicationLoadBalancer.Identity.AspNetCore Middleware authentication bypass by spoofing | 6.9CNA v4.0 | 0.3% | 2024-10-22 | Fix |
| CVE-2024-10003 | Rover IDX WordPress plugin authenticated (Subscriber+) missing authorization via Multiple Functions | 6.3CNA v3.1 | 0.4% | 2024-10-22 | Fix |
| CVE-2024-10002 | Rover IDX WordPress plugin authenticated (Subscriber+) authentication bypass to Administrator | 8.8CNA v3.1 | 0.6% | 2024-10-22 | Fix |
| CVE-2024-9987 | Pandora FMS SQL injection in CSV Module Data Collection | 8.6CNA v4.0 | 0.4% | 2024-10-22 | Fix |
| CVE-2024-9677 | Zyxel USG FLEX H series uOS firmware CLI command of the insufficiently protected credentials | 5.5CNA v3.1 | 0.2% | 2024-10-22 | Fix |
| CVE-2024-9627 | TeploBot - Telegram Bot for WP WordPress plugin Telegram Bot token disclosure | 7.3v3.1 | 0.4% | 2024-10-22 | |
| CVE-2024-9591 | Category and Taxonomy Image WordPress plugin authenticated (Editor+) stored cross-site scripting | 4.8v3.1 | 0.3% | 2024-10-22 | |
| CVE-2024-9590 | Category and Taxonomy Meta Fields WordPress plugin stored cross-site scripting | 4.8v3.1 | 0.3% | 2024-10-22 | |
| CVE-2024-9589 | Category and Taxonomy Meta Fields WordPress plugin stored cross-site scripting | 4.8v3.1 | 0.3% | 2024-10-22 | |
| CVE-2024-9588 | Category and Taxonomy Meta Fields WordPress plugin cross-site request forgery | 5.4CNA v3.1 | 0.2% | 2024-10-22 | |
| CVE-2024-9541 | News Kit Elementor Addons WordPress plugin sensitive information exposure | 4.3v3.1 | 0.3% | 2024-10-22 | Fix |
| CVE-2024-9287 | Python CPython virtual environment (venv) activation scripts don't quote paths | 5.3CNA v4.0 | 0.6% | 2024-10-22 | Fix |
| CVE-2024-9231 | WP-Members Membership WordPress plugin reflected cross-site scripting | 6.1CNA v3.1 | 0.5% | 2024-10-22 | Fix |
| CVE-2024-9129 | Format string injection in Zend Server | 9.3CNA v4.0 | 0.4% | 2024-10-22 | Fix |
| CVE-2024-9050 | Red Hat Enterprise Linux networkmanager-libreswan: Local privilege escalation via leftupdown | 7.8CNA v3.1 | 0.5% | 2024-10-22 | Fix |
| CVE-2024-8980 | Liferay Portal and Liferay DXP vulnerable to CSRF in the script console | 9.6CNA v3.1 | 0.2% | 2024-10-22 | Fix |
| CVE-2024-8901 | Amazon AWS ALB Route Directive Adapter For Istio lack of JWT issuer and signer validation | 6.9CNA v4.0 | 0.4% | 2024-10-22 | Fix |
| CVE-2024-8852 | All-in-One WP Migration and Backup WordPress plugin unauthenticated information disclosure | 5.3CNA v3.1 | 1.2% | 2024-10-22 | NucleiFix |
| CVE-2024-7587 | Mitsubishi Electric GENESIS64 GenBroker32 incorrect default permissions | 7.8CNA v3.1 | 0.2% | 2024-10-22 | Fix |
| CVE-2024-50065 | Linux kernel NTFS3 directory hash lookup vulnerability | 5.5v3.1 | 0.2% | 2024-10-21 | Fix |
| CVE-2024-50064 | Linux kernel zram multi-stream compression memory leak | 5.5v3.1 | 0.2% | 2024-10-21 | Fix |
| CVE-2024-50063 | Linux kernel BPF tail call verifier vulnerability | 7.8CNA v3.1 | 0.2% | 2024-10-21 | Fix |
| CVE-2024-50062 | Linux kernel RDMA RTRS server driver null pointer dereference | 7.5CNA v3.1 | 0.5% | 2024-10-21 | Fix |
| CVE-2024-50061 | Linux kernel cdns use-after-free | 7.0v3.1 | 0.2% | 2024-10-21 | Fix |
| CVE-2024-50060 | Linux kernel io_uring overflow flush vulnerability | 5.5v3.1 | 0.2% | 2024-10-21 | Fix |
| CVE-2024-50059 | Linux kernel Switchtec NTB driver use-after-free | 7.8CNA v3.1 | 0.2% | 2024-10-21 | Fix |
| CVE-2024-50058 | Linux kernel serial core port shutdown null pointer dereference | 5.5NVD v3.1 | 0.2% | 2024-10-21 | Fix |
| CVE-2024-50057 | Linux kernel TPS6598x USB Type-C driver vulnerability | 3.3v3.1 | 0.2% | 2024-10-21 | Fix |
| CVE-2024-50056 | Linux kernel USB gadget UVC function null pointer dereference | 5.5v3.1 | 0.2% | 2024-10-21 | Fix |
| CVE-2024-50055 | Linux kernel driver core bus registration double free | 7.8CNA v3.1 | 0.3% | 2024-10-21 | Fix |
| CVE-2024-50049 | Linux kernel AMD display driver null pointer dereference | 5.5v3.1 | 0.2% | 2024-10-21 | Fix |
| CVE-2024-50048 | Linux kernel framebuffer console null pointer dereference | 5.5v3.1 | 0.2% | 2024-10-21 | Fix |
| CVE-2024-50047 | Linux kernel SMB client async decryption use-after-free | 9.8CNA v3.1 | 0.5% | 2024-10-21 | Fix |
| CVE-2024-50046 | Linux kernel NFSv4 server-side copy null pointer dereference | 9.8CNA v3.1 | 0.6% | 2024-10-21 | Fix |
| CVE-2024-50045 | Linux kernel bridge netfilter VXLAN handling null pointer dereference | 7.5CNA v3.1 | 0.6% | 2024-10-21 | Fix |
| CVE-2024-50044 | Linux kernel Bluetooth RFCOMM socket state deadlock | 3.3NVD v3.1 | 0.2% | 2024-10-21 | Fix |
| CVE-2024-50043 | Linux kernel nfsd use-after-free | 9.8CNA v3.1 | 0.4% | 2024-10-21 | Fix |
| CVE-2024-50042 | Linux kernel ice Ethernet driver SR-IOV VF MSI-X out-of-bounds read | 7.1v3.1 | 0.2% | 2024-10-21 | Fix |
| CVE-2024-50041 | Linux kernel i40e Ethernet driver MAC filter memory leak | 8.8CNA v3.1 | 0.2% | 2024-10-21 | Fix |
| CVE-2024-50040 | Linux kernel igb Ethernet driver PCIe error recovery improper error handling | 5.5NVD v3.1 | 0.3% | 2024-10-21 | Fix |
| CVE-2024-50039 | Linux kernel net/sched crash | 7.8CNA v3.1 | 0.3% | 2024-10-21 | Fix |
| CVE-2024-50038 | Linux kernel netfilter xtables vulnerability | 5.5v3.1 | 0.2% | 2024-10-21 | Fix |
| CVE-2024-50037 | Linux kernel fbdev DMA framebuffer console null pointer dereference | 5.5v3.1 | 0.2% | 2024-10-21 | Fix |
| CVE-2024-50036 | Linux kernel net use-after-free | 7.8CNA v3.1 | 0.2% | 2024-10-21 | Fix |
| CVE-2024-50035 | Linux kernel PPP asynchronous encoding vulnerability | 7.1NVD v3.1 | 0.3% | 2024-10-21 | Fix |
| CVE-2024-50034 | Linux kernel SMC protocol null pointer dereference | 5.5v3.1 | 0.2% | 2024-10-21 | Fix |
| CVE-2024-50033 | Linux kernel SLIP header compression vulnerability | 9.8CNA v3.1 | 0.8% | 2024-10-21 | Fix |
| CVE-2024-50031 | Linux kernel V3D GPU driver performance monitor vulnerability | 7.8CNA v3.1 | 0.2% | 2024-10-21 | Fix |
| CVE-2024-50030 | Linux kernel drm/xe/ct use-after-free | 7.8CNA v3.1 | 0.2% | 2024-10-21 | Fix |
| CVE-2024-50029 | Linux kernel Bluetooth HCI synchronous connection setup use-after-free | 8.8CNA v3.1 | 0.4% | 2024-10-21 | Fix |
| CVE-2024-50028 | Linux kernel thermal zone lookup vulnerability | 7.8CNA v3.1 | 0.2% | 2024-10-21 | Fix |
| CVE-2024-50027 | Linux kernel thermal zone core use-after-free | 7.8CNA v3.1 | 0.2% | 2024-10-21 | Fix |
| CVE-2024-50026 | Linux kernel wd33c93 SCSI driver vulnerability | 5.5v3.1 | 0.2% | 2024-10-21 | Fix |
| CVE-2024-50025 | Linux kernel fnic SCSI driver workqueue vulnerability | 5.5v3.1 | 0.2% | 2024-10-21 | Fix |
| CVE-2024-50024 | Linux kernel generic netlink family list vulnerability | 7.3CNA v3.1 | 0.3% | 2024-10-21 | Fix |
| CVE-2024-50023 | Linux kernel PHY LED registration vulnerability | 5.5v3.1 | 0.2% | 2024-10-21 | Fix |
| CVE-2024-50022 | Linux kernel device DAX mapping vulnerability | 5.5v3.1 | 0.3% | 2024-10-21 | Fix |
| CVE-2024-50021 | Linux kernel ice DPLL recovered clock pins reference count leak | 5.5v3.1 | 0.2% | 2024-10-21 | Fix |
| CVE-2024-50020 | Linux kernel ice SR-IOV MSI-X configuration reference count leak | 5.5v3.1 | 0.2% | 2024-10-21 | Fix |
| CVE-2024-50019 | Linux kernel kthread parking vulnerability | 5.5v3.1 | 0.2% | 2024-10-21 | Fix |
| CVE-2024-50017 | Linux kernel x86 identity page table mapping vulnerability | 5.5v3.1 | 0.2% | 2024-10-21 | Fix |
| CVE-2024-50015 | Linux kernel ext4 DAX write path vulnerability | 5.5NVD v3.1 | 0.2% | 2024-10-21 | Fix |
| CVE-2024-50014 | Linux kernel ext4 fast commit replay vulnerability | 5.5NVD v3.1 | 0.2% | 2024-10-21 | Fix |
| CVE-2024-50013 | Linux kernel exFAT bitmap loading memory leak | 5.5v3.1 | 0.2% | 2024-10-21 | Fix |
| CVE-2024-50012 | Linux kernel cpufreq performance domain parsing vulnerability | 5.5v3.1 | 0.2% | 2024-10-21 | Fix |
| CVE-2024-50011 | Linux kernel Intel RPL ACPI machine match table infinite loop | 5.5v3.1 | 0.2% | 2024-10-21 | Fix |
| CVE-2024-50010 | Linux kernel execve path_noexec check race condition | 4.7NVD v3.1 | 0.2% | 2024-10-21 | Fix |
| CVE-2024-50009 | Linux kernel amd-pstate CPU frequency driver null pointer dereference | 5.5v3.1 | 0.2% | 2024-10-21 | Fix |
| CVE-2024-50008 | Linux kernel mwifiex Wi-Fi driver vulnerability | 5.5NVD v3.1 | 0.2% | 2024-10-21 | Fix |
| CVE-2024-50007 | Linux kernel ASIHPI sound driver vulnerability | 7.8v3.1 | 0.3% | 2024-10-21 | Fix |
| CVE-2024-50006 | Linux kernel ext4 deadlock | 4.7NVD v3.1 | 0.2% | 2024-10-21 | Fix |
| CVE-2024-50005 | Linux kernel mac802154 scan worker use-after-free | 7.8v3.1 | 0.2% | 2024-10-21 | Fix |
| CVE-2024-50004 | Linux kernel AMD GPU display driver denial of service | 5.5v3.1 | 0.2% | 2024-10-21 | Fix |
| CVE-2024-50003 | Linux kernel AMD GPU display driver null pointer dereference | 5.5v3.1 | 0.2% | 2024-10-21 | Fix |
| CVE-2024-50002 | Linux kernel static call subsystem vulnerability | 5.5v3.1 | 0.2% | 2024-10-21 | Fix |
| CVE-2024-50001 | Linux kernel mlx5 Ethernet driver vulnerability | 7.8CNA v3.1 | 0.3% | 2024-10-21 | Fix |
| CVE-2024-50000 | Linux kernel mlx5e TIR builder allocation null pointer dereference | 5.5v3.1 | 0.2% | 2024-10-21 | Fix |
| CVE-2024-49999 | Linux kernel AFS operation wait handling vulnerability | 7.5CNA v3.1 | 0.6% | 2024-10-21 | Fix |
| CVE-2024-49998 | Linux kernel DSA lan9303 switch shutdown sequence race condition | 4.7NVD v3.1 | 0.2% | 2024-10-21 | Fix |
| CVE-2024-49997 | Linux kernel Lantiq ETOP Ethernet driver vulnerability | 7.5NVD v3.1 | 1.1% | 2024-10-21 | Fix |
| CVE-2024-49996 | Linux kernel CIFS NFS reparse point parsing buffer overflow | 9.4CNA v3.1 | 0.8% | 2024-10-21 | Fix |
| CVE-2024-49994 | Linux kernel BLKSECDISCARD ioctl integer overflow | 5.5NVD v3.1 | 0.2% | 2024-10-21 | Fix |
| CVE-2024-49992 | Linux kernel STM DRM driver use-after-free | 7.8CNA v3.1 | 0.2% | 2024-10-21 | Fix |
| CVE-2024-49991 | Linux kernel amdkfd GTT memory management use-after-free | 7.8CNA v3.1 | 0.3% | 2024-10-21 | Fix |
| CVE-2024-49990 | Linux kernel Xe HDCP driver null pointer dereference | 5.5v3.1 | 0.2% | 2024-10-21 | Fix |
| CVE-2024-49989 | Linux kernel AMD display encoder cleanup double free | 7.8v3.1 | 0.2% | 2024-10-21 | Fix |
| CVE-2024-49988 | Linux kernel ksmbd oplock break handling use-after-free | 8.8CNA v3.1 | 0.6% | 2024-10-21 | Fix |
| CVE-2024-49987 | Linux kernel bpftool netfilter listing null pointer dereference | 5.5v3.1 | 0.2% | 2024-10-21 | Fix |
| CVE-2024-49986 | Linux kernel x86-android-tablets platform driver use-after-free | 7.8CNA v3.1 | 0.2% | 2024-10-21 | Fix |
| CVE-2024-49985 | Linux kernel STM32F7 I2C driver deadlock | 5.5v3.1 | 0.2% | 2024-10-21 | Fix |
| CVE-2024-49984 | Linux kernel V3D GPU performance query extensions out-of-bounds write | 7.8CNA v3.1 | 0.2% | 2024-10-21 | Fix |
| CVE-2024-49983 | Linux kernel ext4 fast commit replay double free | 7.8CNA v3.1 | 0.3% | 2024-10-21 | Fix |
| CVE-2024-49982 | Linux kernel AoE driver use-after-free | 8.8CNA v3.1 | 0.4% | 2024-10-21 | Fix |
| CVE-2024-49981 | Linux kernel venus use-after-free | 7.8CNA v3.1 | 0.2% | 2024-10-21 | Fix |
| CVE-2024-49980 | Linux kernel vrf improper locking | 5.5v3.1 | 0.2% | 2024-10-21 | Fix |
| CVE-2024-49979 | Linux kernel TCP GSO fraglist segmentation null pointer dereference | 7.5CNA v3.1 | 0.6% | 2024-10-21 | Fix |
| CVE-2024-49978 | Linux kernel UDP GSO fraglist segmentation null pointer dereference | 7.5CNA v3.1 | 0.7% | 2024-10-21 | Fix |
| CVE-2024-49977 | Linux kernel stmmac traffic control CBS division by zero | 5.5NVD v3.1 | 0.2% | 2024-10-21 | Fix |
| CVE-2024-49976 | Linux kernel timerlat tracer hotplug handling deadlock | 5.5v3.1 | 0.2% | 2024-10-21 | Fix |
| CVE-2024-49975 | Linux kernel uprobes memory leak | 5.5v3.1 | 0.3% | 2024-10-21 | Fix |
| CVE-2024-49974 | Linux kernel NFS server COPY operations denial of service | 5.5v3.1 | 0.3% | 2024-10-21 | Fix |
| CVE-2024-49973 | Linux kernel RTL8125 tally counter vulnerability | 7.8CNA v3.1 | 0.3% | 2024-10-21 | Fix |
| CVE-2024-49972 | Linux kernel DC state DML memory allocation vulnerability | 5.5v3.1 | 0.2% | 2024-10-21 | Fix |
| CVE-2024-49971 | Linux kernel DML mode support array vulnerability | 5.5v3.1 | 0.2% | 2024-10-21 | Fix |
| CVE-2024-49970 | Linux kernel DCN401 stream encoder creation out-of-bounds write | 5.5NVD v3.1 | 0.3% | 2024-10-21 | Fix |
| CVE-2024-49969 | Linux kernel DCN30 color transformation out-of-bounds write | 7.8CNA v3.1 | 0.3% | 2024-10-21 | Fix |
| CVE-2024-49968 | Linux kernel ext4 casefold hash version check vulnerability | 5.5NVD v3.1 | 0.2% | 2024-10-21 | Fix |
| CVE-2024-49966 | Linux kernel ocfs2 quota sync use-after-free | 7.8CNA v3.1 | 0.3% | 2024-10-21 | Fix |
| CVE-2024-49965 | Linux kernel ocfs2 block read improper locking | 7.8CNA v3.1 | 0.2% | 2024-10-21 | Fix |
| CVE-2024-49964 | Linux kernel hugetlb folio pinning vulnerability | 5.5v3.1 | 0.2% | 2024-10-21 | Fix |
| CVE-2024-49963 | Linux kernel BCM2835 mailbox driver vulnerability | 5.5v3.1 | 0.3% | 2024-10-21 | Fix |
| CVE-2024-49962 | Linux kernel ACPICA debugger null pointer dereference | 5.5v3.1 | 0.3% | 2024-10-21 | Fix |
| CVE-2024-49961 | In the Linux kernel, the following vulnerability has been resolved: media: i2c: ar0521: Use cansleep version of gpiod_set_value() If we use GPIO reset from I2C port expander, we must use *_cansleep() variant of GPIO functions. This was not done in ar0521_power_on()/ar0521_power_off() functions. Le | 5.5v3.1 | 0.2% | 2024-10-21 | Fix |
| CVE-2024-49960 | Linux kernel ext4 error report timer use-after-free | 7.8CNA v3.1 | 0.3% | 2024-10-21 | Fix |
| CVE-2024-49959 | Linux kernel jbd2 journal space reclamation vulnerability | 5.5v3.1 | 0.3% | 2024-10-21 | Fix |
| CVE-2024-49958 | Linux kernel ocfs2 reflink extent list vulnerability | 7.8CNA v3.1 | 0.3% | 2024-10-21 | Fix |
| CVE-2024-49957 | Linux kernel ocfs2 journal null pointer dereference | 5.5v3.1 | 0.3% | 2024-10-21 | Fix |
| CVE-2024-49956 | Linux kernel gfs2 glock hash workqueue vulnerability | 7.8CNA v3.1 | 0.2% | 2024-10-21 | Fix |
| CVE-2024-49955 | Linux kernel ACPI battery hook vulnerability | 5.5NVD v3.1 | 0.3% | 2024-10-21 | Fix |
| CVE-2024-49954 | Linux kernel static call module notifier denial of service | 5.5v3.1 | 0.2% | 2024-10-21 | Fix |
| CVE-2024-49953 | Linux kernel net/mlx5e crash | 5.5v3.1 | 0.3% | 2024-10-21 | Fix |
| CVE-2024-49952 | Linux kernel netfilter nf_tables packet duplication vulnerability | 7.8CNA v3.1 | 0.3% | 2024-10-21 | Fix |
| CVE-2024-49951 | Linux kernel Bluetooth management interface vulnerability | 7.8CNA v3.1 | 0.2% | 2024-10-21 | Fix |
| CVE-2024-49950 | Linux kernel Bluetooth L2CAP connection handling use-after-free | 8.8CNA v3.1 | 0.4% | 2024-10-21 | Fix |
| CVE-2024-49949 | Linux kernel qdisc packet length calculation integer underflow | 5.5NVD v3.1 | 0.3% | 2024-10-21 | Fix |
| CVE-2024-49948 | Linux kernel qdisc packet scheduler vulnerability | 5.5NVD v3.1 | 0.3% | 2024-10-21 | Fix |
| CVE-2024-49947 | Linux kernel virtio_net_hdr packet parsing vulnerability | 5.5v3.1 | 0.2% | 2024-10-21 | Fix |
| CVE-2024-49946 | Linux kernel PPP channel bridge improper locking | 5.5v3.1 | 0.2% | 2024-10-21 | Fix |
| CVE-2024-49945 | Linux kernel net/ncsi use-after-free | 5.5NVD v3.1 | 0.2% | 2024-10-21 | Fix |
| CVE-2024-49944 | Linux kernel SCTP socket listen path null pointer dereference | 5.5NVD v3.1 | 0.3% | 2024-10-21 | Fix |
| CVE-2024-49943 | Linux kernel Xe graphics driver GuC submission use-after-free | 7.8CNA v3.1 | 0.2% | 2024-10-21 | Fix |
| CVE-2024-49942 | Linux kernel Xe graphics driver null pointer dereference | 5.5v3.1 | 0.2% | 2024-10-21 | Fix |
| CVE-2024-49941 | Linux kernel GPIO subsystem null pointer dereference | 5.5v3.1 | 0.2% | 2024-10-21 | Fix |
| CVE-2024-49940 | Linux kernel L2TP subsystem vulnerability | 7.8CNA v3.1 | 0.3% | 2024-10-21 | Fix |
| CVE-2024-49939 | Linux kernel rtw89 Wi-Fi driver vulnerability | 8.8CNA v3.1 | 0.3% | 2024-10-21 | Fix |
| CVE-2024-49938 | Linux kernel ath9k_htc Wi-Fi driver uninitialized pointer access | 5.5NVD v3.1 | 0.3% | 2024-10-21 | Fix |
| CVE-2024-49937 | Linux kernel cfg80211 wireless subsystem vulnerability | 5.5v3.1 | 0.2% | 2024-10-21 | Fix |
| CVE-2024-49936 | Linux kernel Xen netback driver use-after-free | 8.8CNA v3.1 | 0.3% | 2024-10-21 | Fix |
| CVE-2024-49935 | Linux kernel PAD crash | 5.5v3.1 | 0.2% | 2024-10-21 | Fix |
| CVE-2024-49934 | Linux kernel inode dump_mapping vulnerability | 7.1CNA v3.1 | 0.3% | 2024-10-21 | Fix |
| CVE-2024-49933 | Linux kernel blk-iocost block layer controller vulnerability | 5.5v3.1 | 0.2% | 2024-10-21 | Fix |
| CVE-2024-49932 | Linux kernel Btrfs relocation reachable assertion | 7.0CNA v3.1 | 0.2% | 2024-10-21 | Fix |
| CVE-2024-49931 | Linux kernel ath12k Wi-Fi driver vulnerability | 7.8v3.1 | 0.2% | 2024-10-21 | Fix |
| CVE-2024-49930 | Linux kernel ath11k Wi-Fi driver vulnerability | 8.8CNA v3.1 | 0.4% | 2024-10-21 | Fix |
| CVE-2024-49929 | Linux kernel iwlwifi mvm driver null pointer dereference | 5.5v3.1 | 0.2% | 2024-10-21 | Fix |
| CVE-2024-49928 | Linux kernel rtw89 Wi-Fi driver out-of-bounds read | 7.1v3.1 | 0.2% | 2024-10-21 | Fix |
| CVE-2024-49927 | Linux kernel x86 IO-APIC driver vulnerability | 5.5v3.1 | 0.2% | 2024-10-21 | Fix |
| CVE-2024-49926 | Linux kernel RCU tasks subsystem vulnerability | 5.5v3.1 | 0.2% | 2024-10-21 | Fix |
| CVE-2024-49925 | Linux kernel efifb framebuffer driver use-after-free | 7.1CNA v3.1 | 0.3% | 2024-10-21 | Fix |
| CVE-2024-49924 | Linux kernel pxafb framebuffer driver use-after-free | 7.8CNA v3.1 | 0.2% | 2024-10-21 | Fix |
| CVE-2024-49923 | Linux kernel AMD display pipe split validation null pointer dereference | 5.5v3.1 | 0.2% | 2024-10-21 | Fix |
| CVE-2024-49922 | Linux kernel AMD display driver null pointer dereference | 5.5NVD v3.1 | 0.2% | 2024-10-21 | Fix |
| CVE-2024-49921 | Linux kernel AMD display clock manager null pointer dereference | 5.5NVD v3.1 | 0.2% | 2024-10-21 | Fix |
| CVE-2024-49920 | Linux kernel AMD display driver null pointer dereference | 5.5NVD v3.1 | 0.3% | 2024-10-21 | Fix |
| CVE-2024-49919 | Linux kernel AMD display pipe allocation null pointer dereference | 5.5v3.1 | 0.2% | 2024-10-21 | Fix |
| CVE-2024-49918 | Linux kernel AMD display pipe allocation null pointer dereference | 5.5NVD v3.1 | 0.2% | 2024-10-21 | Fix |
| CVE-2024-49917 | Linux kernel AMD display clock manager null pointer dereference | 5.5v3.1 | 0.2% | 2024-10-21 | Fix |
| CVE-2024-49916 | Linux kernel AMD display clock manager null pointer dereference | 5.5v3.1 | 0.2% | 2024-10-21 | Fix |
| CVE-2024-49915 | Linux kernel AMD display clock manager null pointer dereference | 5.5v3.1 | 0.2% | 2024-10-21 | Fix |
| CVE-2024-49914 | Linux kernel AMD display pipe programming null pointer dereference | 5.5v3.1 | 0.2% | 2024-10-21 | Fix |
| CVE-2024-49913 | Linux kernel AMD display pipe programming null pointer dereference | 5.5v3.1 | 0.2% | 2024-10-21 | Fix |
| CVE-2024-49912 | Linux kernel AMD display stream status handling null pointer dereference | 5.5v3.1 | 0.2% | 2024-10-21 | Fix |
| CVE-2024-49911 | Linux kernel AMD display output transfer function handling null pointer dereference | 5.5v3.1 | 0.2% | 2024-10-21 | Fix |
| CVE-2024-49910 | Linux kernel AMD display output transfer function handling null pointer dereference | 5.5v3.1 | 0.2% | 2024-10-21 | Fix |
| CVE-2024-49909 | Linux kernel AMD display output transfer function handling null pointer dereference | 5.5v3.1 | 0.2% | 2024-10-21 | Fix |
| CVE-2024-49908 | Linux kernel AMD display cursor update handling null pointer dereference | 5.5v3.1 | 0.2% | 2024-10-21 | Fix |
| CVE-2024-49907 | Linux kernel AMD display clock manager null pointer dereference | 5.5v3.1 | 0.2% | 2024-10-21 | Fix |
| CVE-2024-49906 | Linux kernel AMD display pipe plane handling null pointer dereference | 5.5v3.1 | 0.2% | 2024-10-21 | Fix |
| CVE-2024-49905 | Linux kernel AMD display cursor plane handling null pointer dereference | 5.5v3.1 | 0.2% | 2024-10-21 | Fix |
| CVE-2024-49904 | Linux kernel AMDGPU driver null pointer dereference | 5.5v3.1 | 0.2% | 2024-10-21 | Fix |
| CVE-2024-49903 | Linux kernel jfs use-after-free | 7.0NVD v3.1 | 0.3% | 2024-10-21 | Fix |
| CVE-2024-49902 | In the Linux kernel, the following vulnerability has been resolved: jfs: check if leafidx greater than num leaves per dmap tree syzbot report a out of bounds in dbSplit, it because dmt_leafidx greater than num leaves per dmap tree, add a checking for dmt_leafidx in dbFindLeaf. Shaggy: Modified sa | 7.8CNA v3.1 | 0.3% | 2024-10-21 | Fix |
| CVE-2024-49901 | Linux kernel MSM Adreno GPU driver null pointer dereference | 5.5v3.1 | 0.2% | 2024-10-21 | Fix |
| CVE-2024-49900 | Linux kernel jfs uninitialized resource use | 7.1NVD v3.1 | 0.3% | 2024-10-21 | Fix |
| CVE-2024-49899 | Linux kernel AMD display driver divide by zero | 5.5v3.1 | 0.3% | 2024-10-21 | Fix |
| CVE-2024-49898 | Linux kernel AMD display driver null pointer dereference | 5.5v3.1 | 0.2% | 2024-10-21 | Fix |
| CVE-2024-49897 | Linux kernel AMD display driver null pointer dereference | 5.5v3.1 | 0.2% | 2024-10-21 | Fix |
| CVE-2024-49896 | Linux kernel AMD display driver null pointer dereference | 5.5v3.1 | 0.3% | 2024-10-21 | Fix |
| CVE-2024-49895 | Linux kernel AMD display driver DCN30 color management out-of-bounds write | 7.8v3.1 | 0.3% | 2024-10-21 | Fix |
| CVE-2024-49894 | Linux kernel AMD display driver degamma translation out-of-bounds write | 7.1CNA v3.1 | 0.3% | 2024-10-21 | Fix |
| CVE-2024-49893 | Linux kernel AMD display driver null pointer dereference | 5.5v3.1 | 0.2% | 2024-10-21 | Fix |
| CVE-2024-49892 | Linux kernel AMD display driver divide by zero | 5.5NVD v3.1 | 0.3% | 2024-10-21 | Fix |
| CVE-2024-49891 | Linux kernel lpfc SCSI driver hardware queue null pointer dereference | 5.5v3.1 | 0.2% | 2024-10-21 | Fix |
| CVE-2024-49890 | Linux kernel drm/amd/pm null pointer dereference | 5.5NVD v3.1 | 0.3% | 2024-10-21 | Fix |
| CVE-2024-49889 | Linux kernel ext4 extent debug logging use-after-free | 7.8CNA v3.1 | 0.3% | 2024-10-21 | Fix |
| CVE-2024-49888 | Linux kernel BPF signed division integer overflow | 5.5NVD v3.1 | 0.2% | 2024-10-21 | Fix |
| CVE-2024-49887 | Linux kernel F2FS segment allocation denial of service | 5.5v3.1 | 0.3% | 2024-10-21 | Fix |
| CVE-2024-49886 | In the Linux kernel, the following vulnerability has been resolved: platform/x86: ISST: Fix the KASAN report slab-out-of-bounds bug Attaching SST PCI device to VM causes "BUG: KASAN: slab-out-of-bounds". kasan report: [ 19.411889] ================================================================== | 7.8CNA v3.1 | 0.2% | 2024-10-21 | Fix |
| CVE-2024-49885 | Linux kernel SLUB allocator redzone handling vulnerability | 5.5NVD v3.1 | 0.2% | 2024-10-21 | Fix |
| CVE-2024-49884 | Linux kernel ext4 extent splitting use-after-free | 7.8CNA v3.1 | 0.3% | 2024-10-21 | Fix |
| CVE-2024-49883 | Linux kernel ext4 extent insertion use-after-free | 7.8CNA v3.1 | 0.3% | 2024-10-21 | Fix |
| CVE-2024-49882 | Linux kernel ext4 extents path double free | 7.8CNA v3.1 | 0.3% | 2024-10-21 | Exploit codeKCVFix |
| CVE-2024-49881 | Linux kernel ext4 extent lookup null pointer dereference | 5.5NVD v3.1 | 0.3% | 2024-10-21 | Fix |
| CVE-2024-49880 | Linux kernel ext4 filesystem resize off-by-one error | 7.8v3.1 | 0.2% | 2024-10-21 | Fix |
| CVE-2024-49879 | Linux kernel omapdrm null pointer dereference | 5.5v3.1 | 0.3% | 2024-10-21 | Fix |
| CVE-2024-49878 | Linux kernel CXL memory resource tracking vulnerability | 5.5v3.1 | 0.3% | 2024-10-21 | Fix |
| CVE-2024-49877 | Linux kernel OCFS2 filesystem null pointer dereference | 5.5v3.1 | 0.3% | 2024-10-21 | Fix |
| CVE-2024-49876 | Linux kernel Xe graphics driver queue teardown use-after-free | 7.8CNA v3.1 | 0.2% | 2024-10-21 | Fix |
| CVE-2024-49875 | Linux kernel nfsd improper integrity check validation | 7.5CNA v3.1 | 0.5% | 2024-10-21 | Fix |
| CVE-2024-49874 | Linux kernel SVC I3C master driver use-after-free | 7.8CNA v3.1 | 0.2% | 2024-10-21 | Fix |
| CVE-2024-49873 | Linux kernel filemap folio lookup null pointer dereference | 5.5v3.1 | 0.2% | 2024-10-21 | Fix |
| CVE-2024-49872 | Linux kernel memfd_pin_folios folio pinning race condition | 4.7v3.1 | 0.1% | 2024-10-21 | Fix |
| CVE-2024-49871 | Linux kernel adp5589-keys input driver null pointer dereference | 5.5v3.1 | 0.2% | 2024-10-21 | Fix |
| CVE-2024-49870 | Linux kernel cachefiles memory leak | 5.5v3.1 | 0.2% | 2024-10-21 | Fix |
| CVE-2024-49869 | Linux kernel Btrfs send name cache buffer overflow | 7.8v3.1 | 0.2% | 2024-10-21 | Fix |
| CVE-2024-49868 | Linux kernel Btrfs transaction start null pointer dereference | 5.5v3.1 | 0.3% | 2024-10-21 | Fix |
| CVE-2024-49867 | Linux kernel Btrfs cleaner kthread unmount handling use-after-free | 7.8CNA v3.1 | 0.3% | 2024-10-21 | Fix |
| CVE-2024-49866 | Linux kernel timerlat tracer CPU hotplug handling race condition | 7.8CNA v3.1 | 0.2% | 2024-10-21 | Fix |
| CVE-2024-49865 | Linux kernel Xe GPU driver VM ioctl use-after-free | 7.8CNA v3.1 | 0.2% | 2024-10-21 | Fix |
| CVE-2024-49864 | Linux kernel rxrpc socket setup race condition | 7.5CNA v3.1 | 0.4% | 2024-10-21 | Fix |
| CVE-2024-49863 | Linux kernel vhost-scsi driver null pointer dereference | 5.5v3.1 | 0.3% | 2024-10-21 | Fix |
| CVE-2024-49862 | Linux kernel intel_rapl powercap driver vulnerability | 7.1CNA v3.1 | 0.2% | 2024-10-21 | Fix |
| CVE-2024-49861 | Linux kernel BPF read-only map helper checks vulnerability | 7.8CNA v3.1 | 0.2% | 2024-10-21 | Fix |
| CVE-2024-49860 | Linux kernel ACPI sysfs _STR method handling type confusion | 7.3CNA v3.1 | 0.3% | 2024-10-21 | Fix |
| CVE-2024-49859 | Linux kernel f2fs ioctl interface race condition | 7.8CNA v3.1 | 0.2% | 2024-10-21 | Fix |
| CVE-2024-49858 | Linux kernel EFI stub TPM event log vulnerability | 5.5v3.1 | 0.2% | 2024-10-21 | Fix |
| CVE-2024-49857 | Linux kernel iwlwifi Wi-Fi driver null pointer dereference | 7.1CNA v3.1 | 0.2% | 2024-10-21 | Fix |
| CVE-2024-49856 | Linux kernel SGX EPC page allocation infinite loop | 5.5v3.1 | 0.2% | 2024-10-21 | Fix |
| CVE-2024-49855 | Linux kernel NBD driver use-after-free | 9.8CNA v3.1 | 0.5% | 2024-10-21 | Fix |
| CVE-2024-49854 | Linux kernel use-after-free | 7.8CNA v3.1 | 0.2% | 2024-10-21 | Fix |
| CVE-2024-49853 | Linux kernel SCMI OP-TEE transport driver double free | 7.8v3.1 | 0.2% | 2024-10-21 | Fix |
| CVE-2024-49852 | Linux kernel libefc use-after-free | 7.8v3.1 | 0.2% | 2024-10-21 | Fix |
| CVE-2024-49851 | Linux kernel TPM space cleanup vulnerability | 5.5NVD v3.1 | 0.2% | 2024-10-21 | Fix |
| CVE-2024-49850 | Linux kernel BPF CO-RE relocation handling null pointer dereference | 5.5v3.1 | 0.2% | 2024-10-21 | Fix |
| CVE-2024-49368 | 0xJacky nginx-ui unchecked logrotate settings lead to arbitrary command execution | 8.9CNA v4.0 | 27.7% | 2024-10-21 | Emerging ThreatsExploit codeFix |
| CVE-2024-49367 | 0xJacky nginx-ui nginx UI's log path can be controlled | 5.5CNA v4.0 | 0.6% | 2024-10-21 | Fix |
| CVE-2024-49366 | 0xJacky Nginx UI json field handling path traversal | 7.7CNA v4.0 | 0.6% | 2024-10-21 | Fix |
| CVE-2024-49321 | Simple Custom Post Order WordPress plugin broken access control | 4.3v3.1 | 0.3% | 2024-10-21 | Fix |
| CVE-2024-49293 | WP VR WordPress plugin broken access control | 5.4v3.1 | 0.3% | 2024-10-21 | Fix |
| CVE-2024-49273 | ProfileGrid WordPress plugin cross-site request forgery (CSRF) | 6.5v3.1 | 0.3% | 2024-10-21 | Fix |
| CVE-2024-48930 | secp256k1-node vulnerable to private key extraction over ECDH | 8.7CNA v4.0 | 0.4% | 2024-10-21 | Fix |
| CVE-2024-48709 | CodeAstro Membership Management System cross-site scripting | 5.4CISA ADP v3.1 | 0.3% | 2024-10-21 | |
| CVE-2024-48659 | Dcnetworks Dcme-320-l command injection | 9.8CISA ADP v3.1 | 1.1% | 2024-10-21 | |
| CVE-2024-48645 | Command Block IDE function files missing authorization | 7.5CNA v3.1 | 0.6% | 2024-10-21 | |
| CVE-2024-48597 | Angeljudesuarez Online Clinic Management System SQL injection | 8.1CISA ADP v3.1 | 0.5% | 2024-10-21 | |
| CVE-2024-48509 | Lang-learn-guy Learning With Texts SQL injection | 9.8v3.1 | 0.5% | 2024-10-21 | |
| CVE-2024-48231 | SQL injection in Funadmin | 7.2CISA ADP v3.1 | 0.5% | 2024-10-21 | |
| CVE-2024-47912 | Mitel MiCollab missing authentication | 8.2CISA ADP v3.1 | 0.4% | 2024-10-21 | Fix |
| CVE-2024-47825 | cilium CIDR deny policies may not take effect when a more narrow CIDR allow is present | 4.0CNA v3.1 | 0.4% | 2024-10-21 | Fix |
| CVE-2024-47757 | Linux kernel nilfs2 b-tree deletion out-of-bounds read | 7.1v3.1 | 0.2% | 2024-10-21 | Fix |
| CVE-2024-47756 | Linux kernel Keystone PCIe driver null pointer dereference | 5.5v3.1 | 0.2% | 2024-10-21 | Fix |
| CVE-2024-47754 | Linux kernel MediaTek H264 multi stateless video decoder null pointer dereference | 5.5v3.1 | 0.2% | 2024-10-21 | Fix |
| CVE-2024-47753 | Linux kernel MediaTek VP8 stateless video decoder null pointer dereference | 5.5v3.1 | 0.2% | 2024-10-21 | Fix |
| CVE-2024-47752 | Linux kernel MediaTek H264 stateless video decoder null pointer dereference | 5.5v3.1 | 0.2% | 2024-10-21 | Fix |
| CVE-2024-47751 | Linux kernel Kirin PCIe driver buffer overflow | 7.8v3.1 | 0.2% | 2024-10-21 | Fix |
| CVE-2024-47750 | Linux kernel HNS RDMA driver use-after-free | 7.8CNA v3.1 | 0.2% | 2024-10-21 | Fix |
| CVE-2024-47749 | Linux kernel cxgb4 RDMA driver null pointer dereference | 7.5CNA v3.1 | 0.6% | 2024-10-21 | Fix |
| CVE-2024-47748 | Linux kernel vhost-vdpa IRQ bypass producer use-after-free | 7.8CNA v3.1 | 0.2% | 2024-10-21 | Fix |
| CVE-2024-47747 | Linux kernel seeq use-after-free | 7.8CNA v3.1 | 0.2% | 2024-10-21 | Fix |
| CVE-2024-47746 | Linux kernel FUSE cache IO mode locking vulnerability | 5.5v3.1 | 0.2% | 2024-10-21 | Fix |
| CVE-2024-47745 | Linux kernel remap_file_pages syscall handler vulnerability | 7.8CNA v3.1 | 0.3% | 2024-10-21 | Fix |
| CVE-2024-47744 | Linux kernel KVM usage count locking deadlock | 5.5v3.1 | 0.2% | 2024-10-21 | Fix |
| CVE-2024-47743 | Linux kernel asymmetric key lookup null pointer dereference | 5.5v3.1 | 0.2% | 2024-10-21 | Fix |
| CVE-2024-47742 | Linux kernel firmware loader path traversal | 7.8CNA v3.1 | 0.3% | 2024-10-21 | Fix |
| CVE-2024-47741 | Linux kernel btrfs lseek handling race condition | 7.8CNA v3.1 | 0.2% | 2024-10-21 | Fix |
| CVE-2024-47740 | Linux kernel f2fs atomic write ioctls vulnerability | 7.1CNA v3.1 | 0.2% | 2024-10-21 | Fix |
| CVE-2024-47739 | Linux kernel padata framework deadlock | 7.5CNA v3.1 | 0.7% | 2024-10-21 | Fix |
| CVE-2024-47738 | Linux kernel mac80211 offchannel TX vulnerability | 3.3v3.1 | 0.2% | 2024-10-21 | Fix |
| CVE-2024-47737 | Linux kernel NFSD ID mapper cache null pointer dereference | 5.5NVD v3.1 | 0.3% | 2024-10-21 | Fix |
| CVE-2024-47736 | Linux kernel EROFS filesystem deadlock | 5.5NVD v3.1 | 0.2% | 2024-10-21 | Fix |
| CVE-2024-47735 | Linux kernel HNS RoCE driver improper locking | 5.5NVD v3.1 | 0.2% | 2024-10-21 | Fix |
| CVE-2024-47734 | Linux kernel bonding XDP redirect denial of service | 5.5v3.1 | 0.2% | 2024-10-21 | Fix |
| CVE-2024-47733 | Linux kernel netfs proc interface vulnerability | 5.5v3.1 | 0.2% | 2024-10-21 | Fix |
| CVE-2024-47732 | Linux kernel IAA crypto driver use-after-free | 7.0CNA v3.1 | 0.2% | 2024-10-21 | Fix |
| CVE-2024-47731 | Linux kernel Alibaba DRW PMU driver denial of service | 5.5v3.1 | 0.2% | 2024-10-21 | Fix |
| CVE-2024-47730 | Linux kernel HiSilicon QM accelerator driver use-after-free | 7.0CNA v3.1 | 0.3% | 2024-10-21 | Fix |
| CVE-2024-47729 | Linux kernel Xe GPU driver deadlock | 5.5v3.1 | 0.2% | 2024-10-21 | Fix |
| CVE-2024-47728 | Linux kernel BPF helper functions vulnerability | 5.5v3.1 | 0.2% | 2024-10-21 | Fix |
| CVE-2024-47727 | Linux kernel TDX MMIO handler vulnerability | 7.8CNA v3.1 | 0.2% | 2024-10-21 | Fix |
| CVE-2024-47726 | Linux kernel F2FS direct I/O vulnerability | 7.8CNA v3.1 | 0.7% | 2024-10-21 | Fix |
| CVE-2024-47724 | Linux kernel ath11k Wi-Fi driver improper locking | 8.8CNA v3.1 | 0.3% | 2024-10-21 | Fix |
| CVE-2024-47723 | Linux kernel JFS filesystem out-of-bounds read | 7.8CNA v3.1 | 0.3% | 2024-10-21 | Fix |
| CVE-2024-47721 | Linux kernel rtw89 Wi-Fi driver out-of-bounds read | 8.8CNA v3.1 | 0.3% | 2024-10-21 | Fix |
| CVE-2024-47720 | Linux kernel AMD display driver null pointer dereference | 5.5v3.1 | 0.2% | 2024-10-21 | Fix |
| CVE-2024-47719 | Linux kernel iommufd IOVA allocator out-of-bounds write | 7.8v3.1 | 0.2% | 2024-10-21 | Fix |
| CVE-2024-47718 | Linux kernel rtw88 Wi-Fi driver use-after-free | 7.8NVD v3.1 | 0.2% | 2024-10-21 | Fix |
| CVE-2024-47717 | Linux kernel RISC-V KVM PMU snapshot null pointer dereference | 5.5v3.1 | 0.2% | 2024-10-21 | Fix |
| CVE-2024-47716 | Linux kernel ARM VFP support denial of service | 5.5v3.1 | 0.2% | 2024-10-21 | Fix |
| CVE-2024-47715 | Linux kernel mt7915 Wi-Fi driver vulnerability | 5.5v3.1 | 0.2% | 2024-10-21 | Fix |
| CVE-2024-47714 | Linux kernel mt7996 Wi-Fi driver out-of-bounds write | 7.6CNA v3.1 | 0.3% | 2024-10-21 | Fix |
| CVE-2024-47713 | Linux kernel mac80211 Wi-Fi stack improper locking | 5.5NVD v3.1 | 0.3% | 2024-10-21 | Fix |
| CVE-2024-47712 | Linux kernel wilc1000 Wi-Fi driver null pointer dereference | 8.3CNA v3.1 | 0.4% | 2024-10-21 | Fix |
| CVE-2024-47711 | Linux kernel af_unix use-after-free | 7.8CNA v3.1 | 0.2% | 2024-10-21 | Fix |
| CVE-2024-47710 | Linux kernel socket hash map cleanup denial of service | 5.5NVD v3.1 | 0.2% | 2024-10-21 | Fix |
| CVE-2024-47709 | Linux kernel CAN broadcast manager proc entry cleanup vulnerability | 5.5NVD v3.1 | 0.2% | 2024-10-21 | Fix |
| CVE-2024-47708 | Linux kernel netkit BPF redirect driver null pointer dereference | 5.5v3.1 | 0.2% | 2024-10-21 | Fix |
| CVE-2024-47707 | Linux kernel IPv6 uncached route list null pointer dereference | 5.5NVD v3.1 | 0.2% | 2024-10-21 | Fix |
| CVE-2024-47706 | Linux kernel BFQ I/O scheduler queue merging use-after-free | 7.8CNA v3.1 | 0.2% | 2024-10-21 | Fix |
| CVE-2024-47705 | Linux kernel block partition handling null pointer dereference | 5.5NVD v3.1 | 0.2% | 2024-10-21 | Fix |
| CVE-2024-47704 | Linux kernel AMD display DP link encoder null pointer dereference | 5.5v3.1 | 0.2% | 2024-10-21 | Fix |
| CVE-2024-47703 | Linux kernel BPF LSM return value check denial of service | 7.8CNA v3.1 | 0.2% | 2024-10-21 | Fix |
| CVE-2024-47702 | Linux kernel BPF verifier vulnerability | 7.8CNA v3.1 | 0.2% | 2024-10-21 | Fix |
| CVE-2024-47701 | Linux kernel ext4 inline directory lookup use-after-free | 7.8CNA v3.1 | 0.2% | 2024-10-21 | Fix |
| CVE-2024-47700 | Linux kernel ext4 remount stripe size check divide by zero | 5.5v3.1 | 0.2% | 2024-10-21 | Fix |
| CVE-2024-47699 | Linux kernel nilfs2 b-tree null pointer dereference | 5.5NVD v3.1 | 0.3% | 2024-10-21 | Fix |
| CVE-2024-47698 | Linux kernel rtl2832 DVB frontend driver out-of-bounds write | 7.8CNA v3.1 | 0.3% | 2024-10-21 | Fix |
| CVE-2024-47697 | Linux kernel rtl2830 DVB frontend driver out-of-bounds write | 7.8CNA v3.1 | 0.3% | 2024-10-21 | Fix |
| CVE-2024-47696 | Linux kernel RDMA/iwcm use-after-free | 7.5CNA v3.1 | 0.7% | 2024-10-21 | Fix |
| CVE-2024-47695 | Linux kernel RTRS client connection init out-of-bounds write | 9.8CNA v3.1 | 0.7% | 2024-10-21 | Fix |
| CVE-2024-47694 | Linux kernel mlx5 UMR resource cleanup null pointer dereference | 5.5v3.1 | 0.2% | 2024-10-21 | Fix |
| CVE-2024-47693 | Linux kernel InfiniBand core cache setup vulnerability | 6.5v3.1 | 1.0% | 2024-10-21 | Fix |
| CVE-2024-47692 | Linux kernel NFSD client recovery null pointer dereference | 6.5NVD v3.1 | 1.2% | 2024-10-21 | Fix |
| CVE-2024-47691 | Linux kernel f2fs garbage collection thread use-after-free | 7.8v3.1 | 0.2% | 2024-10-21 | Fix |
| CVE-2024-47690 | Linux kernel f2fs directory repair vulnerability | 7.8CNA v3.1 | 0.2% | 2024-10-21 | Fix |
| CVE-2024-47689 | Linux kernel f2fs error handling race condition | 5.3v3.1 | 0.6% | 2024-10-21 | Fix |
| CVE-2024-47688 | Linux kernel driver core sysfs linking null pointer dereference | 5.5v3.1 | 0.2% | 2024-10-21 | Fix |
| CVE-2024-47687 | Linux kernel vdpa mlx5 driver vulnerability | 5.5v3.1 | 0.2% | 2024-10-21 | Fix |
| CVE-2024-47686 | Linux kernel ep93xx clock driver off-by-one error | 7.1v3.1 | 0.2% | 2024-10-21 | Fix |
| CVE-2024-47685 | Linux kernel netfilter IPv6 reject vulnerability | 9.1NVD v3.1 | 1.4% | 2024-10-21 | Fix |
| CVE-2024-47684 | Linux kernel tcp null pointer dereference | 5.5NVD v3.1 | 0.3% | 2024-10-21 | Fix |
| CVE-2024-47683 | Linux kernel AMD display DSC null pointer dereference | 5.5v3.1 | 0.2% | 2024-10-21 | Fix |
| CVE-2024-47682 | Linux kernel SCSI sd driver off-by-one error | 8.6CNA v3.1 | 0.5% | 2024-10-21 | Fix |
| CVE-2024-47681 | Linux kernel mt7996 Wi-Fi driver null pointer dereference | 5.5v3.1 | 0.2% | 2024-10-21 | Fix |
| CVE-2024-47680 | Linux kernel f2fs discard handling for zoned devices null pointer dereference | 5.5v3.1 | 0.2% | 2024-10-21 | Fix |
| CVE-2024-47679 | Linux kernel VFS inode eviction race condition | 7.8CNA v3.1 | 0.2% | 2024-10-21 | Fix |
| CVE-2024-47678 | Linux kernel ICMP rate limiting observable discrepancy | 9.4CNA v3.1 | 0.6% | 2024-10-21 | Fix |
| CVE-2024-47677 | Linux kernel exFAT upcase table memory leak | 5.5v3.1 | 0.2% | 2024-10-21 | Fix |
| CVE-2024-47676 | Linux kernel hugetlb fault handler use-after-free | 7.8CNA v3.1 | 0.2% | 2024-10-21 | Fix |
| CVE-2024-47675 | Linux kernel bpf uprobe multi-link attach use-after-free | 7.8CNA v3.1 | 0.2% | 2024-10-21 | Fix |
| CVE-2024-47328 | FunnelKit Automations WordPress plugin SQL command improper neutralization | 7.2v3.1 | 0.5% | 2024-10-21 | Fix |
| CVE-2024-47224 | Mitel MiCollab CRLF injection | 6.5CISA ADP v3.1 | 0.4% | 2024-10-21 | Fix |
| CVE-2024-47223 | Mitel MiCollab SQL injection | 9.4CISA ADP v3.1 | 0.5% | 2024-10-21 | Fix |
| CVE-2024-47189 | Mitel MiCollab SQL injection | 7.7CISA ADP v3.1 | 0.4% | 2024-10-21 | Fix |
| CVE-2024-46326 | Public Knowledge Project pkp-lib logout function open redirect | 6.1CISA ADP v3.1 | 0.5% | 2024-10-21 | |
| CVE-2024-46239 | PHPGurukul Hospital Management System cross-site scripting | 5.9CISA ADP v3.1 | 0.3% | 2024-10-21 | |
| CVE-2024-46238 | PHPGurukul Hospital Management System cross-site scripting | 5.9CISA ADP v3.1 | 0.3% | 2024-10-21 | |
| CVE-2024-46236 | CodeAstro Membership Management System cross-site scripting | 5.4CISA ADP v3.1 | 0.3% | 2024-10-21 | |
| CVE-2024-45309 | OneDev vulnerable to arbitrary file reading for unauthenticated user | 8.7CNA v4.0 | 24.5% | 2024-10-21 | NucleiMetasploitFix |
| CVE-2024-43945 | LatePoint WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.2% | 2024-10-21 | |
| CVE-2024-43689 | ELECOM WAB-I1750-PS stack-based buffer overflow | 9.8v3.1 | 0.9% | 2024-10-21 | Fix |
| CVE-2024-41714 | Mitel Mivoice Business Solution Virtual Instance code injection | 8.8CISA ADP v3.1 | 1.3% | 2024-10-21 | Fix |
| CVE-2024-41713 | Mitel MiCollab path traversal | 9.1NVD v3.1 | 97.2% | 2024-10-21 | KEVNucleiEmerging ThreatsExploit codeKCVFix |
| CVE-2024-41712 | Mitel MiCollab code injection | 6.6CISA ADP v3.1 | 0.5% | 2024-10-21 | Fix |
| CVE-2024-40746 | Extension Hikashop.com stored cross-site scripting vulnerability in HikaShop component for Joomla | 5.4NVD v3.1 | 0.3% | 2024-10-21 | |
| CVE-2024-40091 | Viloliving Vilo 5 missing authentication | 5.3CISA ADP v3.1 | 0.4% | 2024-10-21 | |
| CVE-2024-40090 | Viloliving Vilo 5 cleartext transmission of sensitive information | 4.3CISA ADP v3.1 | 0.3% | 2024-10-21 | |
| CVE-2024-40089 | Viloliving Vilo 5 command injection | 9.1CISA ADP v3.1 | 1.2% | 2024-10-21 | |
| CVE-2024-40088 | Viloliving Vilo 5 Boa webserver of Vilo path traversal | 5.3CISA ADP v3.1 | 0.7% | 2024-10-21 | |
| CVE-2024-40087 | Viloliving Vilo 5 missing authentication | 9.6CISA ADP v3.1 | 0.4% | 2024-10-21 | |
| CVE-2024-40086 | local_app_set_router_wifi_SSID_PWD function of Vilo buffer overflow | 9.6CISA ADP v3.1 | 0.6% | 2024-10-21 | |
| CVE-2024-40085 | local_app_set_router_wan function of Vilo buffer overflow | 9.6CISA ADP v3.1 | 0.6% | 2024-10-21 | |
| CVE-2024-40084 | Viloliving Vilo 5 Boa webserver of Vilo buffer overflow | 9.6CISA ADP v3.1 | 0.6% | 2024-10-21 | |
| CVE-2024-40083 | local_app_set_router_token function of Vilo buffer overflow | 9.6CISA ADP v3.1 | 0.4% | 2024-10-21 | |
| CVE-2024-35315 | Mitel Mivoice Business Solution Virtual Instance code injection | 5.6CISA ADP v3.1 | 0.8% | 2024-10-21 | Exploit codeFix |
| CVE-2024-35314 | Mitel Mivoice Business Solution Virtual Instance code injection | 9.8CISA ADP v3.1 | 1.8% | 2024-10-21 | Fix |
| CVE-2024-35287 | Mitel MiCollab incorrect default permissions | 6.7CISA ADP v3.1 | 0.2% | 2024-10-21 | Fix |
| CVE-2024-35286 | Mitel MiCollab SQL injection | 9.8CISA ADP v3.1 | 65.7% | 2024-10-21 | NucleiEmerging ThreatsFix |
| CVE-2024-35285 | Mitel MiCollab command injection | 9.8CISA ADP v3.1 | 1.3% | 2024-10-21 | Fix |
| CVE-2024-31007 | IrfanView buffer overflow | 5.5CISA ADP v3.1 | 0.2% | 2024-10-21 | |
| CVE-2024-30160 | Mitel MiCollab cross-site scripting | 4.8v3.1 | 0.3% | 2024-10-21 | Fix |
| CVE-2024-30159 | Mitel MiCollab cross-site scripting | 4.8v3.1 | 0.3% | 2024-10-21 | Fix |
| CVE-2024-30158 | Mitel MiCollab SQL injection | 7.2v3.1 | 0.4% | 2024-10-21 | Fix |
| CVE-2024-30157 | Mitel MiCollab SQL injection | 7.2v3.1 | 0.4% | 2024-10-21 | Fix |
| CVE-2024-10202 | WellChoose Administrative Management System OS command injection | 8.8CNA v3.1 | 1.1% | 2024-10-21 | Fix |
| CVE-2024-10201 | WellChoose Administrative Management System arbitrary file upload | 8.8CNA v3.1 | 0.6% | 2024-10-21 | Fix |
| CVE-2024-10200 | WellChoose Administrative Management System arbitrary file read through path traversal | 7.5CNA v3.1 | 0.7% | 2024-10-21 | Fix |
| CVE-2024-10199 | code-projects Pharmacy Management System manage_medicine.php cross-site scripting | 4.8v3.1 | 0.4% | 2024-10-21 | |
| CVE-2024-10198 | code-projects Pharmacy Management System manage_customer.php cross-site scripting | 4.8v3.1 | 0.4% | 2024-10-21 | |
| CVE-2024-10197 | code-projects Pharmacy Management System manage_supplier.php cross-site scripting | 4.8v3.1 | 0.4% | 2024-10-21 | |
| CVE-2024-10196 | code-projects Pharmacy Management System add_new_invoice.php SQL injection | 9.8v3.1 | 0.5% | 2024-10-21 | |
| CVE-2024-8625 | TS Poll Survey, Versus Poll, Image Poll, Video Poll WordPress plugin Admin+ SQL injection | 7.2NVD v3.1 | 2.3% | 2024-10-21 | NucleiFix |
| CVE-2024-8305 | MongoDB Server secondaries may crash due to forced index constraints | 6.5CNA v3.1 | 0.6% | 2024-10-21 | Fix |
| CVE-2024-6519 | QEMU LSI53C895A SCSI adapter emulation use-after-free | 8.2CNA v3.1 | 0.2% | 2024-10-21 | Fix |
| CVE-2024-49631 | Easy Addons for Elementor WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.2% | 2024-10-20 | Fix |
| CVE-2024-49630 | WP Education for Elementor WordPress plugin stored cross-site scripting (XSS) | 5.4v3.1 | 0.3% | 2024-10-20 | Fix |
| CVE-2024-49629 | Endless Posts Navigation WordPress plugin CSRF to stored XSS | 6.1NVD v3.1 | 0.2% | 2024-10-20 | Fix |
| CVE-2024-49628 | Most And Least Read Posts Widget WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.2% | 2024-10-20 | Fix |
| CVE-2024-49627 | WordPress Image SEO plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.2% | 2024-10-20 | |
| CVE-2024-49626 | Shipyaari Shipping Management WordPress plugin PHP object injection | 9.8v3.1 | 0.5% | 2024-10-20 | |
| CVE-2024-49625 | SiteBuilder Dynamic Components WordPress plugin PHP object injection | 9.8v3.1 | 0.5% | 2024-10-20 | |
| CVE-2024-49624 | Advanced Advertising System WordPress plugin PHP object injection | 9.8v3.1 | 0.6% | 2024-10-20 | |
| CVE-2024-49623 | Duplicate Title Validate WordPress plugin SQL injection | 8.8v3.1 | 0.4% | 2024-10-20 | Fix |
| CVE-2024-49622 | Apa Banner Slider WordPress plugin CSRF to SQL injection | 8.8v3.1 | 0.2% | 2024-10-20 | |
| CVE-2024-49621 | APA Register Newsletter Form WordPress plugin CSRF to SQL injection | 8.8v3.1 | 0.2% | 2024-10-20 | |
| CVE-2024-49620 | FERMA.ru.net WordPress plugin SQL injection | 8.8v3.1 | 0.4% | 2024-10-20 | |
| CVE-2024-49619 | Social Link Groups WordPress plugin SQL injection | 8.8v3.1 | 0.4% | 2024-10-20 | |
| CVE-2024-49618 | MyTweetLinks WordPress plugin SQL injection | 8.8v3.1 | 0.4% | 2024-10-20 | |
| CVE-2024-49617 | Back Link Tracker WordPress plugin CSRF to SQL injection | 8.8v3.1 | 0.2% | 2024-10-20 | |
| CVE-2024-49616 | Rate Own Post WordPress plugin SQL injection | 8.8v3.1 | 0.4% | 2024-10-20 | |
| CVE-2024-49615 | SafetyForms WordPress plugin CSRF to SQL injection | 8.8v3.1 | 0.2% | 2024-10-20 | |
| CVE-2024-49614 | SermonAudio Widgets WordPress plugin SQL injection | 8.8v3.1 | 0.4% | 2024-10-20 | |
| CVE-2024-49613 | Simple Code Insert Shortcode WordPress plugin SQL injection | 8.8v3.1 | 0.4% | 2024-10-20 | |
| CVE-2024-49612 | SW Contact Form WordPress plugin SQL injection | 8.8v3.1 | 0.4% | 2024-10-20 | |
| CVE-2024-49611 | Product Website Showcase WordPress plugin arbitrary file upload | 9.8v3.1 | 0.5% | 2024-10-20 | |
| CVE-2024-49610 | photokit WordPress plugin arbitrary file upload | 9.8v3.1 | 0.5% | 2024-10-20 | |
| CVE-2024-49609 | Author Discussion WordPress plugin SQL injection | 8.8v3.1 | 0.4% | 2024-10-20 | |
| CVE-2024-49608 | GERRYWORKS Post by Mail WordPress plugin privilege escalation | 8.8v3.1 | 0.4% | 2024-10-20 | |
| CVE-2024-49607 | WP Dropbox Dropins WordPress plugin arbitrary file upload | 9.8v3.1 | 1.0% | 2024-10-20 | Exploit code |
| CVE-2024-49606 | Google Map Locations WordPress plugin reflected cross-site scripting (XSS) | 6.1NVD v3.1 | 0.3% | 2024-10-20 | |
| CVE-2024-49605 | Community Lite Video Chat WordPress plugin CSRF to stored XSS | 6.1NVD v3.1 | 0.2% | 2024-10-20 | |
| CVE-2024-49604 | Simple User Registration WordPress plugin broken authentication | 9.8v3.1 | 0.5% | 2024-10-20 | Fix |
| CVE-2024-49335 | GoogleDrive folder list WordPress plugin CSRF to stored cross-site scripting (XSS) | 6.1NVD v3.1 | 0.2% | 2024-10-20 | |
| CVE-2024-49334 | jLayer Parallax Slider WordPress plugin reflected cross-site scripting (XSS) | 6.1NVD v3.1 | 0.3% | 2024-10-20 | |
| CVE-2024-49332 | Giveaway Boost WordPress plugin PHP object injection | 9.8v3.1 | 0.5% | 2024-10-20 | |
| CVE-2024-49331 | Property Lot Management System WordPress plugin arbitrary file upload | 8.8NVD v3.1 | 0.5% | 2024-10-20 | |
| CVE-2024-49330 | Nice Backgrounds WordPress plugin arbitrary file upload | 9.8v3.1 | 0.5% | 2024-10-20 | |
| CVE-2024-49329 | WP REST API FNS WordPress plugin arbitrary file upload | 9.8v3.1 | 0.5% | 2024-10-20 | |
| CVE-2024-49328 | WP REST API FNS WordPress plugin account takeover | 9.8v3.1 | 1.5% | 2024-10-20 | Exploit code |
| CVE-2024-49327 | Woostagram Connect WordPress plugin arbitrary file upload | 9.8v3.1 | 0.5% | 2024-10-20 | |
| CVE-2024-49326 | Affiliator WordPress plugin arbitrary file upload | 9.8v3.1 | 0.5% | 2024-10-20 | |
| CVE-2024-49325 | Photo Gallery Builder WordPress plugin broken access control to Notice Dismissal | 8.8v3.1 | 0.4% | 2024-10-20 | |
| CVE-2024-49324 | Sovratec Case Management WordPress plugin arbitrary file upload | 9.8v3.1 | 0.5% | 2024-10-20 | |
| CVE-2024-49323 | All in One Slider WordPress plugin reflected cross-site scripting (XSS) | 6.1NVD v3.1 | 0.3% | 2024-10-20 | |
| CVE-2024-49306 | WP Content Copy Protection and No Right Click WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.2% | 2024-10-20 | Fix |
| CVE-2024-49290 | Cooked Pro WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.2% | 2024-10-20 | Fix |
| CVE-2024-49286 | SSV Events WordPress plugin local file inclusion to RCE | 9.8v3.1 | 0.6% | 2024-10-20 | |
| CVE-2024-49275 | IdeaPush WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.2% | 2024-10-20 | Fix |
| CVE-2024-49274 | VOD Infomaniak WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.2% | 2024-10-20 | Fix |
| CVE-2024-49272 | Social Auto Poster WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.2% | 2024-10-20 | Fix |
| CVE-2024-49250 | Table of Contents Plus WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.2% | 2024-10-20 | Fix |
| CVE-2024-48049 | Mighty Builder WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.3% | 2024-10-20 | |
| CVE-2024-47634 | CartBounty WordPress plugin cross-site request forgery (CSRF) | 9.8v3.1 | 0.2% | 2024-10-20 | Fix |
| CVE-2024-47325 | Multiple Page Generator Plugin MPG WordPress plugin SQL injection | 8.8v3.1 | 0.5% | 2024-10-20 | Fix |
| CVE-2024-44061 | EU/UK VAT Manager for WooCommerce WordPress plugin CSRF to cross-site scripting (XSS) | 6.1NVD v3.1 | 0.3% | 2024-10-20 | Fix |
| CVE-2024-44000 | LiteSpeed Cache WordPress plugin unauthenticated account takeover via Cookie leak | 9.8v3.1 | 81.8% | 2024-10-20 | Reported exploitedNucleiMetasploitEmerging ThreatsExploit codeFix |
| CVE-2024-10195 | Tecno 4G Portable WiFi TR118 SMS Check goform_get_cmd_process SQL injection | 9.8v3.1 | 0.4% | 2024-10-20 | |
| CVE-2024-10194 | WAVLINK WN530H4 stack-based buffer overflow | 8.8v3.1 | 1.2% | 2024-10-20 | |
| CVE-2024-10193 | WAVLINK WN530H4/WN530HG4/WN572HG3 internet.cgi ping_ddns command injection | 7.2v3.1 | 15.5% | 2024-10-20 | |
| CVE-2024-10192 | PHPGurukul IFSC Code Finder Project search.php cross-site scripting | 5.4v3.1 | 0.4% | 2024-10-20 | |
| CVE-2024-10191 | PHPGurukul Boat Booking System Booking Details page book-details.php cross-site scripting | 4.8v3.1 | 0.4% | 2024-10-20 | |
| CVE-2024-10173 | didi DDMQ console module improper authentication | 7.5v3.1 | 0.7% | 2024-10-20 | |
| CVE-2024-10171 | code-projects Blood Bank System massage.php SQL injection | 4.9v3.1 | 0.5% | 2024-10-20 | |
| CVE-2024-10170 | code-projects Hospital Management System get_doctor.php SQL injection | 9.8v3.1 | 0.4% | 2024-10-20 | |
| CVE-2024-10169 | code-projects Hospital Management System change-password.php SQL injection | 8.8v3.1 | 0.6% | 2024-10-20 | |
| CVE-2024-10167 | Codezips Sales Management System deletecustind.php SQL injection | 9.8v3.1 | 0.6% | 2024-10-20 | |
| CVE-2024-10166 | Codezips Sales Management System checkuser.php SQL injection | 9.8v3.1 | 0.7% | 2024-10-20 | |
| CVE-2024-10165 | Codezips Sales Management System deletecustcom.php SQL injection | 9.8v3.1 | 0.7% | 2024-10-20 | |
| CVE-2024-10163 | SourceCodester Sentiment Based Movie Rating System movie_details.php SQL injection | 9.8v3.1 | 0.6% | 2024-10-20 | |
| CVE-2024-10162 | PHPGurukul Boat Booking System Edit Subdomain Details page edit-subadmin.php SQL injection | 7.2v3.1 | 0.5% | 2024-10-20 | |
| CVE-2024-10161 | PHPGurukul Boat Booking System Update Boat Image page change-image.php unrestricted upload | 8.8v3.1 | 0.6% | 2024-10-20 | |
| CVE-2024-10160 | PHPGurukul Boat Booking System BW Dates Report page bwdates-report-details.php SQL injection | 8.8v3.1 | 0.5% | 2024-10-20 | |
| CVE-2024-10159 | PHPGurukul Boat Booking System My Profile page profile.php SQL injection | 7.2v3.1 | 0.6% | 2024-10-20 | |
| CVE-2024-21536 | Denial of service in http-proxy-middleware | 7.5v3.1 | 1.0% | 2024-10-19 | Fix |
| CVE-2024-10158 | PHPGurukul Boat Booking System session_start session fixiation | 8.8v3.1 | 0.7% | 2024-10-19 | |
| CVE-2024-10157 | PHPGurukul Boat Booking System Reset Your Password page password-recovery.php SQL injection | 9.8v3.1 | 0.7% | 2024-10-19 | |
| CVE-2024-10156 | PHPGurukul Boat Booking System Sign in page index.php SQL injection | 9.8v3.1 | 0.7% | 2024-10-19 | |
| CVE-2024-10155 | PHPGurukul Boat Booking System Book a Boat page book-boat.php cross-site scripting | 6.1v3.1 | 0.4% | 2024-10-19 | |
| CVE-2024-10154 | PHPGurukul Boat Booking System Check Booking Status page status.php SQL injection | 9.8v3.1 | 0.6% | 2024-10-19 | |
| CVE-2024-10153 | PHPGurukul Boat Booking System Book a Boat page book-boat.php SQL injection | 9.8v3.1 | 0.7% | 2024-10-19 | |
| CVE-2024-10142 | code-projects Blood Bank System viewrequest.php cross-site scripting | 5.4v3.1 | 0.5% | 2024-10-19 | |
| CVE-2024-10141 | jsbroks COCO Annotator Session predictable state | 8.1v3.1 | 0.8% | 2024-10-19 | |
| CVE-2024-10140 | code-projects Pharmacy Management System manage_supplier.php SQL injection | 9.8v3.1 | 1.4% | 2024-10-19 | Exploit code |
| CVE-2024-10139 | code-projects Pharmacy Management System add_new_supplier.php SQL injection | 9.8v3.1 | 0.5% | 2024-10-19 | |
| CVE-2024-10138 | code-projects Pharmacy Management System add_new_purchase.php SQL injection | 9.8v3.1 | 0.5% | 2024-10-19 | |
| CVE-2024-10137 | code-projects Pharmacy Management System manage_medicine.php SQL injection | 9.8v3.1 | 0.5% | 2024-10-19 | |
| CVE-2024-10136 | code-projects Pharmacy Management System manage_invoice.php SQL injection | 9.8v3.1 | 0.5% | 2024-10-19 | |
| CVE-2024-10135 | ESAFENET CDG NetSecConfigService.java actionDelNetSecConfig SQL injection | 8.8v3.1 | 0.6% | 2024-10-19 | |
| CVE-2024-10134 | ESAFENET CDG MultiServerAjax.java connectLogout SQL injection | 8.8v3.1 | 0.6% | 2024-10-19 | |
| CVE-2024-10133 | ESAFENET CDG NetSecPolicyAjax.java updateNetSecPolicyPriority SQL injection | 8.8v3.1 | 0.5% | 2024-10-19 | |
| CVE-2024-10131 | Remote code execution in infiniflow/ragflow | 8.8v3.1 | 1.1% | 2024-10-19 | |
| CVE-2024-9897 | StreamWeasels Twitch Integration WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.3% | 2024-10-19 | Fix |
| CVE-2024-9889 | ElementInvader Addons for Elementor WordPress plugin information exposure | 4.3CNA v3.1 | 0.3% | 2024-10-19 | Fix |
| CVE-2024-9219 | WordPress Social Share Buttons plugin reflected cross-site scripting | 6.1CNA v3.1 | 0.4% | 2024-10-19 | Fix |
| CVE-2024-49361 | torinriley ACON input handling functions remote code execution | 8.1CNA v4.0 | 0.7% | 2024-10-18 | |
| CVE-2024-49243 | Dynamic Elementor Addons WordPress plugin local file inclusion | 8.8v3.1 | 0.5% | 2024-10-18 | |
| CVE-2024-49241 | Tito WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.3% | 2024-10-18 | |
| CVE-2024-49240 | AB Categories Search Widget WordPress plugin reflected cross-site scripting (XSS) | 6.1NVD v3.1 | 0.3% | 2024-10-18 | |
| CVE-2024-49239 | Nikhil Vaghela Add Categories Post Footer reflected cross-site scripting | 6.1NVD v3.1 | 0.3% | 2024-10-18 | |
| CVE-2024-49238 | ADIF Log Search Widget WordPress plugin reflected cross-site scripting (XSS) | 6.1NVD v3.1 | 0.3% | 2024-10-18 | |
| CVE-2024-49236 | Crazy Call To Action Box WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.2% | 2024-10-18 | |
| CVE-2024-49234 | Plexx Elementor Extension WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.3% | 2024-10-18 | Fix |
| CVE-2024-49233 | MAS Elementor WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.3% | 2024-10-18 | Fix |
| CVE-2024-49232 | El mejor Cluster WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.2% | 2024-10-18 | Fix |
| CVE-2024-49231 | WordPress Video plugin cross-site scripting (XSS) | 5.4v3.1 | 0.3% | 2024-10-18 | |
| CVE-2024-49230 | Ajax Custom CSS/JS WordPress plugin reflected cross-site scripting (XSS) | 6.1v3.1 | 0.3% | 2024-10-18 | |
| CVE-2024-49228 | bVerse Convert WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.2% | 2024-10-18 | |
| CVE-2024-49225 | wpPricing Builder WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.3% | 2024-10-18 | |
| CVE-2024-49224 | Mitm Bug Tracker WordPress plugin reflected cross-site scripting (XSS) | 6.1NVD v3.1 | 0.3% | 2024-10-18 | |
| CVE-2024-48016 | Dell Secure Connect Gateway (SCG) weak cryptographic algorithm | 4.6CNA v3.1 | 0.2% | 2024-10-18 | Fix |
| CVE-2024-47793 | Kajitori Exment stored cross-site scripting | 5.4v3.1 | 0.3% | 2024-10-18 | Fix |
| CVE-2024-47487 | Hikvision HikCentral Professional some SQL injection | 7.2CNA v4.0 | 0.5% | 2024-10-18 | Fix |
| CVE-2024-47486 | Hikvision HikCentral Master Lite some cross-site scripting | 2.1CNA v4.0 | 0.3% | 2024-10-18 | Fix |
| CVE-2024-47485 | Hikvision HikCentral Master Lite some CSV injection | 5.5CNA v4.0 | 0.6% | 2024-10-18 | Fix |
| CVE-2024-47241 | Dell Secure Connect Gateway (SCG) improper certificate validation | 5.5CNA v3.1 | 0.2% | 2024-10-18 | Fix |
| CVE-2024-47240 | Dell Secure Connect Gateway (SCG) incorrect default permissions | 5.5CNA v3.1 | 0.2% | 2024-10-18 | Fix |
| CVE-2024-46897 | Kajitori Exment incorrect permission assignment | 3.8v3.1 | 0.4% | 2024-10-18 | Fix |
| CVE-2024-45944 | J2eeFAST arbitrary code execution | 9.8CISA ADP v3.1 | 0.9% | 2024-10-18 | |
| CVE-2024-43577 | Microsoft Edge (Chromium-based) spoofing | 4.3CNA v3.1 | 0.5% | 2024-10-18 | Fix |
| CVE-2024-43300 | Movie Database WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.3% | 2024-10-18 | |
| CVE-2024-42508 | HPE OneView information disclosure | 5.5v3.1 | 0.2% | 2024-10-18 | Fix |
| CVE-2024-38820 | Spring Framework DataBinder Case Sensitive Match Exception | 3.1CNA v3.1 | 0.6% | 2024-10-18 | Fix |
| CVE-2024-37404 | Ivanti Connect Secure admin portal improper input validation | 8.8NVD v3.1 | 71.0% | 2024-10-18 | MetasploitEmerging ThreatsExploit codeFix |
| CVE-2024-29821 | Ivanti DSM incorrect authorization | 7.8CNA v3.0 | 0.2% | 2024-10-18 | Fix |
| CVE-2024-29213 | Ivanti DSM incorrect authorization | 7.8CNA v3.0 | 0.2% | 2024-10-18 | Fix |
| CVE-2024-10130 | Tenda AC8 SetSysAutoRebbotCfg formSetRebootTimer stack-based overflow | 8.8v3.1 | 1.0% | 2024-10-18 | |
| CVE-2024-10129 | HFO4 shudong-share Share create_share.php SQL injection | 6.5v3.1 | 0.5% | 2024-10-18 | |
| CVE-2024-10128 | Topdata Inner Rep Plus WebServer td.js.gz risky encryption | 4.9v3.1 | 0.4% | 2024-10-18 | |
| CVE-2024-10123 | Tenda AC8 saveParentControlInfo compare_parentcontrol_time stack-based overflow | 8.8v3.1 | 1.0% | 2024-10-18 | |
| CVE-2024-10122 | Topdata Inner Rep Plus WebServer Operator Details Form vulnerability | 4.9v3.1 | 0.5% | 2024-10-18 | |
| CVE-2024-10121 | wfh45678 Radar Interface Handler insecure direct object reference | 9.8v3.1 | 0.7% | 2024-10-18 | |
| CVE-2024-10120 | wfh45678 Radar upload unrestricted upload | 9.8v3.1 | 0.7% | 2024-10-18 | |
| CVE-2024-10119 | SECOM WRTM326 OS command injection | 9.8CNA v3.1 | 1.0% | 2024-10-18 | Fix |
| CVE-2024-10118 | SECOM WRTR-304GN-304TW-UPSC OS command injection | 9.8CNA v3.1 | 0.9% | 2024-10-18 | |
| CVE-2024-10080 | WP Easy Post Types WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.3% | 2024-10-18 | |
| CVE-2024-10079 | WP Easy Post Types WordPress plugin authenticated (Subscriber+) PHP object injection | 8.8CNA v3.1 | 0.8% | 2024-10-18 | |
| CVE-2024-10078 | WP Easy Post Types WordPress plugin missing authorization | 5.4NVD v3.1 | 0.4% | 2024-10-18 | |
| CVE-2024-10057 | RSS Feed Widget WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.3% | 2024-10-18 | Fix |
| CVE-2024-10055 | Click to Chat WP Support All-in-One Floating Widget WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.3% | 2024-10-18 | Fix |
| CVE-2024-10049 | Edit WooCommerce Templates WordPress plugin reflected cross-site scripting via page | 6.1CNA v3.1 | 0.3% | 2024-10-18 | |
| CVE-2024-10040 | Infinite-Scroll WordPress plugin cross-site request forgery to plugin settings update | 4.3v3.1 | 0.2% | 2024-10-18 | |
| CVE-2024-10014 | Flat UI Button WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.3% | 2024-10-18 | |
| CVE-2024-9892 | The Add Widget After Content plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 2.4.6 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level permi | 4.8v3.1 | 0.3% | 2024-10-18 | Fix |
| CVE-2024-9848 | Product Customizer Light WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.3% | 2024-10-18 | |
| CVE-2024-9703 | Arconix Shortcodes WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.3% | 2024-10-18 | Fix |
| CVE-2024-9674 | Debrandify · Remove or Replace WordPress Branding plugin stored cross-site scripting | 5.4v3.1 | 0.3% | 2024-10-18 | Fix |
| CVE-2024-9593 | Time Clock plugin and Time Clock Pro WordPress plugin remote code execution | 8.3v3.1 | 12.4% | 2024-10-18 | NucleiExploit codeFix |
| CVE-2024-9537 | ScienceLogic SL1 vulnerability | 9.8v3.1 | 3.8% | 2024-10-18 | KEVFix |
| CVE-2024-9452 | Branding WordPress plugin authenticated (Author+) stored cross-site scripting via SVG file upload | 5.4v3.1 | 0.3% | 2024-10-18 | |
| CVE-2024-9425 | Advanced Category and Custom Taxonomy Image WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.3% | 2024-10-18 | Fix |
| CVE-2024-9383 | Parcel Pro WordPress plugin reflected cross-site scripting | 6.1CNA v3.1 | 0.4% | 2024-10-18 | Fix |
| CVE-2024-9382 | Gantry 4 Framework WordPress plugin reflected cross-site scripting | 6.1CNA v3.1 | 0.3% | 2024-10-18 | |
| CVE-2024-9373 | Elemenda WordPress plugin authenticated (Author+) stored cross-site scripting via SVG file upload | 5.4v3.1 | 0.3% | 2024-10-18 | Fix |
| CVE-2024-9366 | Easy Menu Manager WPZest WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.3% | 2024-10-18 | Fix |
| CVE-2024-9364 | SendGrid for WordPress plugin missing authorization to authenticated (Subscriber+) Log deletion | 4.3CNA v3.1 | 0.4% | 2024-10-18 | |
| CVE-2024-9361 | Bulk images optimizer: Resize WordPress plugin unauthorized access | 4.3CNA v3.1 | 0.3% | 2024-10-18 | |
| CVE-2024-9350 | DPD Baltic Shipping WordPress plugin reflected cross-site scripting | 6.1CNA v3.1 | 0.4% | 2024-10-18 | Fix |
| CVE-2024-9264 | Grafana SQL Expressions allow for remote code execution | 9.4CNA v4.0 | 97.1% | 2024-10-18 | NucleiMetasploitEmerging ThreatsExploit codeFix |
| CVE-2024-9206 | MAS Companies For WP Job Manager WordPress plugin reflected cross-site scripting | 6.1CNA v3.1 | 0.4% | 2024-10-18 | Fix |
| CVE-2024-8916 | Suki Sites Import WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.3% | 2024-10-18 | |
| CVE-2024-8790 | Social Share With Floating Bar WordPress plugin reflected cross-site scripting | 6.1CNA v3.1 | 0.3% | 2024-10-18 | |
| CVE-2024-8740 | GetResponse Forms by Optin Cat WordPress plugin reflected cross-site scripting | 6.1CNA v3.1 | 0.4% | 2024-10-18 | Fix |
| CVE-2024-4740 | MXsecurity use of hard-coded credentials | 5.3CNA v3.1 | 0.3% | 2024-10-18 | Fix |
| CVE-2024-4739 | MXsecurity License Generation Function Disclosure | 5.3CNA v3.1 | 0.4% | 2024-10-18 | Fix |
| CVE-2024-49593 | WP Engine Advanced Custom Fields Field Group editor stored cross-site scripting | 5.3CISA ADP v3.1 | 0.5% | 2024-10-17 | Fix |
| CVE-2024-49580 | JetBrains Ktor information disclosure | 5.3CNA v3.1 | 0.4% | 2024-10-17 | Fix |
| CVE-2024-49579 | JetBrains YouTrack improper verification of communication source | 8.1CNA v3.1 | 0.4% | 2024-10-17 | Fix |
| CVE-2024-49400 | Meta Tacquito command authorization matching improper authorization | 9.8CISA ADP v3.1 | 0.5% | 2024-10-17 | |
| CVE-2024-49399 | Missing authentication for critical function in Elvaco M-Bus Metering Gateway CMe3100 | 8.7CNA v4.0 | 0.4% | 2024-10-17 | Fix |
| CVE-2024-49398 | Unrestricted upload of file with dangerous type in Elvaco M-Bus Metering Gateway CMe3100 | 8.8CNA v4.0 | 0.5% | 2024-10-17 | Fix |
| CVE-2024-49397 | Cross-site scripting in Elvaco M-Bus Metering Gateway CMe3100 | 9.2CNA v4.0 | 0.4% | 2024-10-17 | Fix |
| CVE-2024-49396 | Insufficiently protected credentials in Elvaco M-Bus Metering Gateway CMe3100 | 8.7CNA v4.0 | 0.4% | 2024-10-17 | Fix |
| CVE-2024-49392 | Acronis Cyber Files cross-site scripting | 5.7CNA v3.0 | 0.2% | 2024-10-17 | Fix |
| CVE-2024-49391 | Acronis Cyber Files uncontrolled search path | 6.7CNA v3.0 | 0.1% | 2024-10-17 | Fix |
| CVE-2024-49390 | Acronis Cyber Files uncontrolled search path | 7.3CNA v3.0 | 0.2% | 2024-10-17 | Fix |
| CVE-2024-49389 | Acronis Cyber Files incorrect default permissions | 7.8CNA v3.0 | 0.1% | 2024-10-17 | Fix |
| CVE-2024-49386 | Acronis Cyber Files personal information exposure | 5.7CNA v3.0 | 0.2% | 2024-10-17 | Fix |
| CVE-2024-49322 | Job Board Manager for WordPress plugin privilege escalation | 9.8CNA v3.1 | 0.5% | 2024-10-17 | |
| CVE-2024-49320 | Encyclopedia / Glossary / Wiki WordPress plugin cross-site scripting (XSS) | 7.1CNA v3.1 | 0.3% | 2024-10-17 | Fix |
| CVE-2024-49319 | Awesome Contact Form7 for Elementor WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.3% | 2024-10-17 | Fix |
| CVE-2024-49318 | My Reading Library WordPress plugin PHP object injection | 9.8CNA v3.1 | 0.5% | 2024-10-17 | |
| CVE-2024-49317 | Point Maker WordPress plugin local file inclusion | 7.5CNA v3.1 | 0.6% | 2024-10-17 | Fix |
| CVE-2024-49316 | Akismet htaccess writer WordPress plugin cross-site scripting (XSS) | 7.1CNA v3.1 | 0.3% | 2024-10-17 | |
| CVE-2024-49315 | CodeFlock Free Download Manager path traversal | 8.6CNA v3.1 | 0.6% | 2024-10-17 | |
| CVE-2024-49314 | JiangQie Free Mini Program WordPress plugin arbitrary file upload | 10.0CNA v3.1 | 0.5% | 2024-10-17 | |
| CVE-2024-49313 | VKontakte Wall Post WordPress plugin cross-site scripting (XSS) | 7.1CNA v3.1 | 0.2% | 2024-10-17 | |
| CVE-2024-49312 | Edwiser Bridge WordPress plugin server side request forgery (SSRF) | 8.6v3.1 | 0.2% | 2024-10-17 | Fix |
| CVE-2024-49311 | Edwiser Bridge WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.3% | 2024-10-17 | Fix |
| CVE-2024-49310 | Themesflat Addons For Elementor WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.3% | 2024-10-17 | Fix |
| CVE-2024-49309 | Digitally WordPress theme reflected cross-site scripting (XSS) | 7.1CNA v3.1 | 0.3% | 2024-10-17 | |
| CVE-2024-49308 | Animator Scroll Triggered Animations WordPress plugin reflected cross-site scripting (XSS) | 7.1CNA v3.1 | 0.3% | 2024-10-17 | Fix |
| CVE-2024-49307 | Admin Management Xtended WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.3% | 2024-10-17 | Fix |
| CVE-2024-49305 | Email Verification for WooCommerce WordPress plugin SQL command improper neutralization | 9.3CNA v3.1 | 0.4% | 2024-10-17 | Fix |
| CVE-2024-49304 | Pinpoint Booking System WordPress plugin CSRF to stored cross-site scripting (XSS) | 5.4CNA v3.1 | 0.2% | 2024-10-17 | Fix |
| CVE-2024-49302 | WordPress Portfolio Builder Portfolio Gallery plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.3% | 2024-10-17 | |
| CVE-2024-49301 | G Meta Keywords WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.3% | 2024-10-17 | |
| CVE-2024-49299 | Surfer WordPress plugin SQL injection | 7.6CNA v3.1 | 0.4% | 2024-10-17 | Fix |
| CVE-2024-49298 | PeproDev Ultimate Invoice WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.3% | 2024-10-17 | Fix |
| CVE-2024-49297 | Zoho CRM Lead Magnet WordPress plugin SQL injection | 8.5CNA v3.1 | 0.4% | 2024-10-17 | Fix |
| CVE-2024-49296 | Custom Add to Cart Button Label and Link WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.3% | 2024-10-17 | Fix |
| CVE-2024-49295 | Simple Testimonials Showcase WordPress plugin cross-site scripting (XSS) | 5.9CNA v3.1 | 0.3% | 2024-10-17 | |
| CVE-2024-49292 | Exclusive Addons for Elementor WordPress plugin cross-site scripting | 5.4v3.1 | 0.2% | 2024-10-17 | Fix |
| CVE-2024-49291 | Cooked Pro WordPress plugin unauthenticated arbitrary file upload | 10.0CNA v3.1 | 0.5% | 2024-10-17 | Fix |
| CVE-2024-49289 | Cooked Pro WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.3% | 2024-10-17 | Fix |
| CVE-2024-49288 | Email Template Customizer for WooCommerce WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.3% | 2024-10-17 | Fix |
| CVE-2024-49287 | PDF-Rechnungsverwaltung WordPress plugin local file inclusion | 7.5CNA v3.1 | 0.7% | 2024-10-17 | |
| CVE-2024-49285 | SSV MailChimp WordPress plugin local file inclusion | 7.5CNA v3.1 | 0.6% | 2024-10-17 | |
| CVE-2024-49284 | WP SendFox WordPress plugin sensitive data exposure | 5.3CNA v3.1 | 0.4% | 2024-10-17 | |
| CVE-2024-49283 | CURCY WordPress plugin reflected cross-site scripting (XSS) | 7.1CNA v3.1 | 0.3% | 2024-10-17 | Fix |
| CVE-2024-49282 | Responsive Lightbox and Gallery WordPress plugin cross-site scripting (XSS) | 5.9CNA v3.1 | 0.3% | 2024-10-17 | Fix |
| CVE-2024-49281 | Click to Chat WP Support All-in-One Floating Widget WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.5% | 2024-10-17 | Fix |
| CVE-2024-49280 | Lightbox slider -- Responsive Lightbox Gallery WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.3% | 2024-10-17 | |
| CVE-2024-49279 | Hyperlink Group Block WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.3% | 2024-10-17 | Fix |
| CVE-2024-49278 | Omnipress WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.3% | 2024-10-17 | Fix |
| CVE-2024-49277 | UltraAddons Elementor Addons WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.3% | 2024-10-17 | |
| CVE-2024-49276 | Clio Grow WordPress plugin reflected cross-site scripting (XSS) | 7.1CNA v3.1 | 0.3% | 2024-10-17 | Fix |
| CVE-2024-49264 | Events Addon for Elementor WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.2% | 2024-10-17 | Fix |
| CVE-2024-49263 | My Favorites WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.3% | 2024-10-17 | Fix |
| CVE-2024-49262 | Country Flags for Elementor WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.3% | 2024-10-17 | |
| CVE-2024-49261 | Arkhe Blocks WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.3% | 2024-10-17 | Fix |
| CVE-2024-49259 | Primary Addon for Elementor WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.3% | 2024-10-17 | Fix |
| CVE-2024-49255 | Da Reactions WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.3% | 2024-10-17 | Fix |
| CVE-2024-49248 | Ad Inserter WordPress plugin reflected cross-site scripting (XSS) | 7.1CNA v3.1 | 0.4% | 2024-10-17 | Fix |
| CVE-2024-49246 | Ajax Rating with Custom Login WordPress plugin SQL injection | 9.3CNA v3.1 | 0.4% | 2024-10-17 | |
| CVE-2024-49244 | SV Product Import Export for WooCommerce WordPress plugin SQL injection | 8.5CNA v3.1 | 0.4% | 2024-10-17 | |
| CVE-2024-49237 | Ahmeti Wp Timeline WordPress plugin CSRF to stored XSS | 6.1NVD v3.1 | 0.2% | 2024-10-17 | |
| CVE-2024-49235 | Contact Forms, Live Support, CRM, Video Messages WordPress plugin sensitive data exposure | 7.5CNA v3.1 | 0.4% | 2024-10-17 | Fix |
| CVE-2024-49229 | Better Author Bio WordPress plugin CSRF to cross-site scripting (XSS) | 6.1NVD v3.1 | 0.3% | 2024-10-17 | |
| CVE-2024-49223 | CJ Change Howdy WordPress plugin CSRF to stored XSS | 6.1NVD v3.1 | 0.2% | 2024-10-17 | |
| CVE-2024-49221 | cSlider WordPress plugin CSRF to stored XSS | 6.1NVD v3.1 | 0.2% | 2024-10-17 | |
| CVE-2024-49220 | Cookie Scanner WordPress plugin CSRF to stored XSS | 6.1NVD v3.1 | 0.2% | 2024-10-17 | |
| CVE-2024-49219 | RS-Members WordPress plugin privilege escalation | 8.8v3.1 | 0.4% | 2024-10-17 | |
| CVE-2024-49217 | Adding drop down roles in registration WordPress plugin privilege escalation | 9.8v3.1 | 0.5% | 2024-10-17 | |
| CVE-2024-49023 | Microsoft Edge (Chromium-based) remote code execution | 5.9CNA v3.1 | 0.5% | 2024-10-17 | Fix |
| CVE-2024-48924 | MessagePack-CSharp deserialization denial of service | 8.7CNA v4.0 | 0.4% | 2024-10-17 | Fix |
| CVE-2024-48920 | PutongOJ: Unprivileged users can escalate privileges by constructing requests | 9.1CNA v3.1 | 0.5% | 2024-10-17 | Fix |
| CVE-2024-48638 | D-Link DIR-878 OS command injection | 8.0CISA ADP v3.1 | 2.2% | 2024-10-17 | |
| CVE-2024-48637 | D-Link DIR-878 OS command injection | 8.0CISA ADP v3.1 | 2.2% | 2024-10-17 | |
| CVE-2024-48636 | D-Link DIR-878 OS command injection | 8.0CISA ADP v3.1 | 2.2% | 2024-10-17 | |
| CVE-2024-48635 | D-Link DIR-878 OS command injection | 8.0CISA ADP v3.1 | 2.2% | 2024-10-17 | |
| CVE-2024-48634 | D-Link DIR-878 OS command injection | 8.0CISA ADP v3.1 | 17.6% | 2024-10-17 | Emerging Threats |
| CVE-2024-48633 | D-Link DIR-878 OS command injection | 8.0CISA ADP v3.1 | 2.1% | 2024-10-17 | |
| CVE-2024-48632 | D-Link DIR-878 OS command injection | 8.0CISA ADP v3.1 | 2.1% | 2024-10-17 | |
| CVE-2024-48631 | D-Link DIR-878 OS command injection | 8.0CISA ADP v3.1 | 2.1% | 2024-10-17 | |
| CVE-2024-48630 | D-Link DIR-878 OS command injection | 8.0CISA ADP v3.1 | 2.1% | 2024-10-17 | |
| CVE-2024-48629 | D-Link DIR-878 OS command injection | 8.0CISA ADP v3.1 | 2.2% | 2024-10-17 | |
| CVE-2024-48192 | Tenda G3 hard-coded credentials | 8.0CISA ADP v3.1 | 0.4% | 2024-10-17 | |
| CVE-2024-48048 | Wsify Widget WordPress plugin CSRF to stored XSS | 7.1CNA v3.1 | 0.2% | 2024-10-17 | |
| CVE-2024-48047 | Linked Variation for WooCommerce WordPress plugin cross-site request forgery (CSRF) | 4.3CNA v3.1 | 0.2% | 2024-10-17 | Fix |
| CVE-2024-48046 | Contact Form by Supsystic WordPress plugin cross-site scripting (XSS) | 5.9CNA v3.1 | 0.3% | 2024-10-17 | Fix |
| CVE-2024-48043 | ShortPixel Image Optimizer WordPress plugin SQL injection | 7.6CNA v3.1 | 0.4% | 2024-10-17 | Fix |
| CVE-2024-48038 | wp-Monalisa WordPress plugin cross-site request forgery (CSRF) | 4.3CNA v3.1 | 0.2% | 2024-10-17 | Fix |
| CVE-2024-48037 | Contact Form Widget WordPress plugin CSRF | 5.4CNA v3.1 | 0.2% | 2024-10-17 | Fix |
| CVE-2024-48036 | SKT Blocks WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.2% | 2024-10-17 | Fix |
| CVE-2024-48032 | Featured Posts with Multiple Custom Groups WordPress plugin reflected cross-site scripting | 7.1CNA v3.1 | 0.3% | 2024-10-17 | |
| CVE-2024-48031 | Featured Posts with Multiple Custom Groups WordPress plugin cross-site request forgery | 6.5CNA v3.1 | 0.2% | 2024-10-17 | |
| CVE-2024-48025 | Simple Baseball Scoreboard WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.3% | 2024-10-17 | |
| CVE-2024-48024 | Keep Backup Daily WordPress plugin sensitive data exposure | 7.5CNA v3.1 | 0.4% | 2024-10-17 | Fix |
| CVE-2024-48023 | Restaurant Reservations Widget WordPress plugin reflected cross-site scripting (XSS) | 7.1CNA v3.1 | 0.3% | 2024-10-17 | |
| CVE-2024-48022 | Shortcode For Elementor Templates WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.3% | 2024-10-17 | |
| CVE-2024-48021 | Contact Form 7 PayPal and Stripe Add-on WordPress plugin reflected cross-site scripting (XSS) | 7.1CNA v3.1 | 0.3% | 2024-10-17 | Fix |
| CVE-2024-47459 | Adobe Substance3D Sampler null pointer dereference | 5.5CNA v3.1 | 0.2% | 2024-10-17 | Fix |
| CVE-2024-47312 | Classic Editor and Classic Widgets WordPress plugin SQL injection | 8.5CNA v3.1 | 0.4% | 2024-10-17 | Fix |
| CVE-2024-47304 | Fluent Support WordPress plugin SQL injection | 8.5CNA v3.1 | 0.4% | 2024-10-17 | Fix |
| CVE-2024-45767 | Dell OpenManage Enterprise SQL injection | 4.3CNA v3.1 | 0.3% | 2024-10-17 | Fix |
| CVE-2024-45766 | Dell OpenManage Enterprise code injection | 8.0CNA v3.1 | 0.6% | 2024-10-17 | Fix |
| CVE-2024-45713 | SolarWinds Kiwi CatTools sensitive information disclosure | 5.1CNA v3.1 | 0.4% | 2024-10-17 | Fix |
| CVE-2024-43997 | EasyJobs reflected cross-site scripting | 7.1CNA v3.1 | 0.4% | 2024-10-17 | Fix |
| CVE-2024-43596 | Microsoft Edge (Chromium-based) remote code execution | 6.5CNA v3.1 | 1.0% | 2024-10-17 | Fix |
| CVE-2024-43595 | Microsoft Edge (Chromium-based) remote code execution | 6.5CNA v3.1 | 1.0% | 2024-10-17 | Fix |
| CVE-2024-43587 | Microsoft Edge (Chromium-based) remote code execution | 5.9CNA v3.1 | 0.9% | 2024-10-17 | Fix |
| CVE-2024-43580 | Microsoft Edge (Chromium-based) spoofing | 5.4CNA v3.1 | 0.4% | 2024-10-17 | Fix |
| CVE-2024-43579 | Microsoft Edge (Chromium-based) remote code execution | 7.6CNA v3.1 | 0.8% | 2024-10-17 | Fix |
| CVE-2024-43578 | Microsoft Edge (Chromium-based) remote code execution | 7.6CNA v3.1 | 0.8% | 2024-10-17 | Fix |
| CVE-2024-43566 | Microsoft Edge (Chromium-based) remote code execution | 7.5CNA v3.1 | 1.1% | 2024-10-17 | Fix |
| CVE-2024-33453 | espressif esp-idf buffer overflow | 8.1CISA ADP v3.1 | 1.0% | 2024-10-17 | Exploit code |
| CVE-2024-30875 | JavaScript Library jquery-ui v.1.13.1 cross-site scripting | 7.1CISA ADP v3.1 | 0.9% | 2024-10-17 | |
| CVE-2024-27766 | MariaDB code injection | 5.7CISA ADP v3.1 | 1.3% | 2024-10-17 | Exploit codeFix |
| CVE-2024-10101 | Stored XSS in binary-husky/gpt_academic | 5.4CNA v3.0 | 0.4% | 2024-10-17 | |
| CVE-2024-10100 | Path traversal in binary-husky/gpt_academic | 7.5v3.1 | 0.6% | 2024-10-17 | |
| CVE-2024-10099 | Stored XSS in comfyanonymous/ComfyUI | 6.1v3.1 | 0.4% | 2024-10-17 | |
| CVE-2024-10093 | VSO ConvertXtoDvd ConvertXtoDvd.exe uncontrolled search path | 7.8v3.1 | 0.2% | 2024-10-17 | |
| CVE-2024-10073 | flairNLP flair Mode File Loader clustering.py ClusteringModel code injection | 7.5v3.1 | 0.6% | 2024-10-17 | Fix |
| CVE-2024-10072 | ESAFENET CDG EncryptPolicyService.java actionAddEncryptPolicyGroup SQL injection | 8.8v3.1 | 0.5% | 2024-10-17 | |
| CVE-2024-10071 | ESAFENET CDG EncryptPolicyService.java actionUpdateEncryptPolicyEdit SQL injection | 8.8v3.1 | 0.5% | 2024-10-17 | |
| CVE-2024-10070 | ESAFENET CDG PolicyPushControlAction.java actionPolicyPush SQL injection | 8.8v3.1 | 0.5% | 2024-10-17 | |
| CVE-2024-10069 | ESAFENET CDG MailDecryptApplicationService.java actionPassMainApplication SQL injection | 8.8v3.1 | 0.5% | 2024-10-17 | |
| CVE-2024-10068 | OpenSight Software FlashFXP FlashFXP.exe uncontrolled search path | 8.5CNA v4.0 | 0.2% | 2024-10-17 | |
| CVE-2024-10025 | SICK CLV6xx, Lector6xx and RFx6xx .sdd configuration file hard-coded credentials | 9.1CNA v3.1 | 0.8% | 2024-10-17 | Fix |
| CVE-2024-9951 | Wordpress Photo Album Plus plugin reflected cross-site scripting | 6.1CNA v3.1 | 0.3% | 2024-10-17 | Fix |
| CVE-2024-9940 | Calculated Fields Form WordPress plugin HTML injection | 4.3v3.1 | 0.4% | 2024-10-17 | Fix |
| CVE-2024-9898 | Parallax Image WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.4% | 2024-10-17 | Fix |
| CVE-2024-9863 | Miniorange OTP Verification with Firebase WordPress plugin privilege escalation | 9.8CNA v3.1 | 0.6% | 2024-10-17 | Fix |
| CVE-2024-9862 | miniOrange OTP Verification with Firebase password change insecure direct object reference | 9.8v3.1 | 0.6% | 2024-10-17 | Fix |
| CVE-2024-9861 | Miniorange OTP Verification with Firebase WordPress plugin authentication bypass | 8.1v3.1 | 0.6% | 2024-10-17 | Fix |
| CVE-2024-9683 | Quay: Quay allows successful authentication with trucated version of the password | 4.8CNA v3.1 | 0.3% | 2024-10-17 | |
| CVE-2024-9414 | Cross-site scripting vulnerability in LCDS LAquis SCADA | 7.0CNA v4.0 | 0.7% | 2024-10-17 | Fix |
| CVE-2024-9352 | Forminator Forms WordPress plugin cross-site request forgery | 4.3CNA v3.1 | 0.2% | 2024-10-17 | Fix |
| CVE-2024-9351 | Forminator Forms WordPress plugin cross-site request forgery | 4.3CNA v3.1 | 0.2% | 2024-10-17 | Fix |
| CVE-2024-9347 | The Ultimate WordPress Toolkit WP Extended plugin reflected cross-site scripting | 6.1CNA v3.1 | 0.5% | 2024-10-17 | Fix |
| CVE-2024-9263 | Arraytics Timetics password reset function insecure direct object reference | 9.8CNA v3.1 | 1.1% | 2024-10-17 | Fix |
| CVE-2024-9240 | ReDi Restaurant Reservation WordPress plugin reflected cross-site scripting | 6.1CNA v3.1 | 0.4% | 2024-10-17 | Fix |
| CVE-2024-9215 | PublishPress Authors author account editor insecure direct object reference | 8.8CNA v3.1 | 0.5% | 2024-10-17 | Fix |
| CVE-2024-9213 | Persian WooCommerce SMS WordPress plugin reflected cross-site scripting | 6.1CNA v3.1 | 0.4% | 2024-10-17 | Fix |
| CVE-2024-9184 | SendPulse Free Web Push WordPress plugin unauthenticated stored cross-site scripting | 7.2CNA v3.1 | 0.5% | 2024-10-17 | Fix |
| CVE-2024-8920 | Fonto Custom Web Fonts Manager WordPress plugin stored cross-site scripting | 6.4CNA v3.1 | 0.4% | 2024-10-17 | Fix |
| CVE-2024-8719 | Flexmls® IDX WordPress plugin reflected cross-site scripting | 6.1CNA v3.1 | 0.3% | 2024-10-17 | Fix |
| CVE-2024-7755 | HMS Networks EWON FLEXY 202 insufficiently protected credentials | 7.1CNA v4.0 | 0.3% | 2024-10-17 | Fix |
| CVE-2024-7417 | Royal Elementor Addons and Templates WordPress plugin Private post disclosure | 4.3CNA v3.1 | 0.4% | 2024-10-17 | Fix |
| CVE-2024-7316 | Denial of service (DoS) vulnerability in Mitsubishi Electric CNC Series | 5.9CNA v3.1 | 0.6% | 2024-10-17 | Fix |
| CVE-2024-6333 | Authenticated remote code execution in Altalink, Versalink and WorkCentre Products | 7.2CNA v3.1 | 1.2% | 2024-10-17 | Exploit code |
| CVE-2024-5429 | Logo Slider WordPress plugin Contributor+ stored XSS | 7.6CISA ADP v3.1 | 0.5% | 2024-10-17 | Fix |
| CVE-2024-3187 | Embedthis GoAhead double free | 5.9CNA v3.1 | 0.5% | 2024-10-17 | |
| CVE-2024-3186 | Embedthis GoAhead evalExpr function null pointer dereference | 5.3CNA v3.1 | 0.5% | 2024-10-17 | |
| CVE-2024-3184 | Embedthis GoAhead null pointer dereference | 5.9CNA v3.1 | 0.5% | 2024-10-17 | |
| CVE-2024-49340 | IBM Watson Studio Local cross-site request forgery | 4.3CNA v3.1 | 0.2% | 2024-10-16 | Fix |
| CVE-2024-49271 | Unlimited Elements For Elementor WordPress plugin remote code execution | 7.2NVD v3.1 | 1.1% | 2024-10-16 | Fix |
| CVE-2024-49270 | Smart Blocks WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.3% | 2024-10-16 | Fix |
| CVE-2024-49268 | disconnected WordPress theme reflected cross-site scripting (XSS) | 6.1NVD v3.1 | 0.3% | 2024-10-16 | |
| CVE-2024-49267 | Unlimited Addon For Elementor WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.3% | 2024-10-16 | |
| CVE-2024-49266 | WP-Spreadplugin WordPress plugin cross-site scripting (XSS) | 5.9CNA v3.1 | 0.3% | 2024-10-16 | |
| CVE-2024-49265 | Booking.com Banner Creator WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.2% | 2024-10-16 | |
| CVE-2024-49260 | Limb Gallery WordPress plugin arbitrary file upload | 9.9CNA v3.1 | 0.5% | 2024-10-16 | |
| CVE-2024-49258 | Limb Gallery WordPress plugin arbitrary file download | 6.5CNA v3.1 | 0.5% | 2024-10-16 | |
| CVE-2024-49257 | Azz Anonim Posting WordPress plugin arbitrary file upload | 10.0CNA v3.1 | 0.5% | 2024-10-16 | |
| CVE-2024-49254 | ajax-extend WordPress plugin remote code execution (RCE) | 10.0CNA v3.1 | 0.6% | 2024-10-16 | |
| CVE-2024-49253 | Analyse Uploads WordPress plugin arbitrary file deletion | 8.6CNA v3.1 | 0.6% | 2024-10-16 | |
| CVE-2024-49252 | leyka WordPress plugin broken access control | 5.3CNA v3.1 | 0.4% | 2024-10-16 | Fix |
| CVE-2024-49251 | Maan Addons For Elementor WordPress plugin local file inclusion | 7.5CNA v3.1 | 0.6% | 2024-10-16 | |
| CVE-2024-49247 | BuddyPress Better Registration WordPress plugin broken authentication | 9.8CNA v3.1 | 0.5% | 2024-10-16 | |
| CVE-2024-49245 | Ahime Image Printer WordPress plugin arbitrary file download | 7.5CNA v3.1 | 0.6% | 2024-10-16 | |
| CVE-2024-49242 | Digital Lottery WordPress plugin arbitrary file upload | 10.0CNA v3.1 | 0.5% | 2024-10-16 | |
| CVE-2024-49227 | Foter Free Stock Photos Foter insecure deserialization | 8.8CNA v3.1 | 0.5% | 2024-10-16 | |
| CVE-2024-49226 | TAKETIN To WP Membership WordPress plugin PHP object injection | 8.8CNA v3.1 | 0.5% | 2024-10-16 | |
| CVE-2024-49218 | Recently WordPress plugin PHP object injection | 9.8CNA v3.1 | 0.5% | 2024-10-16 | |
| CVE-2024-49216 | Feed Comments Number WordPress plugin arbitrary file upload | 10.0CNA v3.1 | 0.5% | 2024-10-16 | |
| CVE-2024-48918 | RDSaiPlatforms RDS Light main.py input handling improper input validation | 8.1CNA v4.0 | 0.4% | 2024-10-16 | Fix |
| CVE-2024-48758 | Timgreen Dingfanzu Cms cross-site request forgery | 6.1CISA ADP v3.1 | 0.3% | 2024-10-16 | |
| CVE-2024-48744 | PHPGurukul Teachers Record Management System code injection | 6.1CISA ADP v3.1 | 0.4% | 2024-10-16 | |
| CVE-2024-48180 | ClassCMS unrestricted file upload | 9.8CISA ADP v3.1 | 0.6% | 2024-10-16 | |
| CVE-2024-48042 | Contact Form by Supsystic WordPress plugin remote code execution (RCE) | 9.1CNA v3.1 | 1.1% | 2024-10-16 | Fix |
| CVE-2024-48035 | ACF Images Search And Insert WordPress plugin arbitrary file upload | 9.9CNA v3.1 | 0.5% | 2024-10-16 | |
| CVE-2024-48034 | Creates 3D Flipbook, PDF Flipbook WordPress plugin arbitrary file upload | 9.9CNA v3.1 | 0.5% | 2024-10-16 | |
| CVE-2024-48030 | Telecash Ricaricaweb WordPress plugin PHP object injection | 9.8CNA v3.1 | 0.5% | 2024-10-16 | |
| CVE-2024-48029 | SB Random Posts Widget WordPress plugin local file inclusion | 7.5CNA v3.1 | 0.6% | 2024-10-16 | Fix |
| CVE-2024-48028 | IP Loc8 WordPress plugin PHP object injection | 9.8CNA v3.1 | 0.5% | 2024-10-16 | |
| CVE-2024-48027 | External featured image from bing WordPress plugin remote code execution (RCE) | 9.9CNA v3.1 | 0.5% | 2024-10-16 | |
| CVE-2024-48026 | Disc Golf Manager WordPress plugin PHP object injection | 9.8CNA v3.1 | 0.5% | 2024-10-16 | |
| CVE-2024-47889 | rails action Mailer has possible ReDoS vulnerability in block_format | 6.6CNA v4.0 | 0.9% | 2024-10-16 | Fix |
| CVE-2024-47888 | rails action Text has possible ReDoS vulnerability in plain_text_for_blockquote_node | 6.6CNA v4.0 | 1.0% | 2024-10-16 | Fix |
| CVE-2024-47887 | rails action controller has possible ReDoS vulnerability in HTTP Token authentication | 6.6CNA v4.0 | 1.0% | 2024-10-16 | Fix |
| CVE-2024-47836 | Admidio vulnerable to HTML injection in the Messages Section | 3.5CNA v3.1 | 0.5% | 2024-10-16 | Fix |
| CVE-2024-47649 | Iconize WordPress plugin remote code execution (RCE) | 9.1CNA v3.1 | 0.5% | 2024-10-16 | |
| CVE-2024-47645 | Top Bar WordPress plugin path traversal | 7.5CNA v3.1 | 0.5% | 2024-10-16 | Fix |
| CVE-2024-47637 | LiteSpeed Cache WordPress plugin path traversal | 8.8v3.1 | 0.7% | 2024-10-16 | Fix |
| CVE-2024-47522 | Suricata ja4: Invalid alpn leads to panic | 7.5CNA v3.1 | 0.6% | 2024-10-16 | Fix |
| CVE-2024-47351 | MaxSlider WordPress plugin local file inclusion | 7.5CNA v3.1 | 0.5% | 2024-10-16 | Fix |
| CVE-2024-47188 | Suricata HTTP/byte-ranges: Missing hashtable random seed leads to potential DoS | 7.5CNA v3.1 | 0.3% | 2024-10-16 | Fix |
| CVE-2024-47187 | Suricata datasets: Missing hashtable random seed leads to potential DoS | 7.5CNA v3.1 | 0.3% | 2024-10-16 | Fix |
| CVE-2024-47139 | F5 BIG-IQ undisclosed page of the stored cross-site scripting | 4.8CNA v4.0 | 0.6% | 2024-10-16 | Fix |
| CVE-2024-46606 | Piwigo component /admin.php?page=photo cross-site scripting | 5.4CISA ADP v3.1 | 0.4% | 2024-10-16 | |
| CVE-2024-46605 | Piwigo component /admin.php?page=album cross-site scripting | 6.1CISA ADP v3.1 | 0.4% | 2024-10-16 | |
| CVE-2024-46213 | redaxo remote code execution | 7.2CISA ADP v3.1 | 1.0% | 2024-10-16 | |
| CVE-2024-46212 | Path traversal in redaxo | 4.9CISA ADP v3.1 | 0.9% | 2024-10-16 | |
| CVE-2024-45844 | F5 BIG-IP monitor functionality missing authentication | 8.6CNA v4.0 | 10.6% | 2024-10-16 | Fix |
| CVE-2024-45797 | LibHTP's unbounded header handling leads to denial service | 7.5CNA v3.1 | 0.7% | 2024-10-16 | Fix |
| CVE-2024-45796 | Suricata defrag: Off by one can lead to policy bypass | 5.3CNA v3.1 | 0.5% | 2024-10-16 | Fix |
| CVE-2024-45795 | Suricata detect/datasets: Reachable assertion with unimplemented rule option | 7.5CNA v3.1 | 0.5% | 2024-10-16 | Fix |
| CVE-2024-45715 | SolarWinds Platform Edit function cross-site scripting | 7.1CNA v3.1 | 0.3% | 2024-10-16 | Fix |
| CVE-2024-45714 | SolarWinds Serv-U stored XSS | 4.8CNA v3.1 | 0.9% | 2024-10-16 | Fix |
| CVE-2024-45711 | SolarWinds Serv-U FTP service directory traversal remote code execution | 7.5CNA v3.1 | 6.3% | 2024-10-16 | Fix |
| CVE-2024-45710 | SolarWinds Platform uncontrolled search path element local privilege escalation | 7.8CNA v3.1 | 0.3% | 2024-10-16 | Fix |
| CVE-2024-45693 | Apache CloudStack: Request origin validation bypass makes account takeover possible | 8.0CNA v3.1 | 0.6% | 2024-10-16 | Fix |
| CVE-2024-45462 | Apache CloudStack: Incomplete session invalidation on web interface logout | 6.3CNA v3.1 | 0.4% | 2024-10-16 | Fix |
| CVE-2024-45461 | Apache CloudStack Quota plugin: Access checks not enforced in Quota | 5.7CNA v3.1 | 0.8% | 2024-10-16 | Fix |
| CVE-2024-45219 | Apache CloudStack KVM template and volume improper input validation | 8.5CNA v3.1 | 1.2% | 2024-10-16 | Fix |
| CVE-2024-45217 | Apache Solr: ConfigSets created during a backup restore command are trusted implicitly | 8.1CISA ADP v3.1 | 0.7% | 2024-10-16 | Fix |
| CVE-2024-45216 | Apache Solr: Authentication bypass possible using a fake URL Path ending | 9.8CISA ADP v3.1 | 92.7% | 2024-10-16 | Reported exploitedNucleiExploit codeFix |
| CVE-2024-45072 | IBM WebSphere Application Server XML external entity injection | 5.5CNA v3.1 | 0.4% | 2024-10-16 | Fix |
| CVE-2024-45071 | IBM WebSphere Application Server cross-site scripting | 5.5CNA v3.1 | 0.2% | 2024-10-16 | Fix |
| CVE-2024-44762 | Webmin Usermin information disclosure through error messages | 5.3CISA ADP v3.1 | 2.6% | 2024-10-16 | NucleiExploit code |
| CVE-2024-41128 | rails action Dispatch has possible ReDoS vulnerability in query parameter filtering | 6.6CNA v4.0 | 1.1% | 2024-10-16 | Fix |
| CVE-2024-38814 | VMware HCX authenticated SQL injection | 8.8CNA v3.1 | 15.4% | 2024-10-16 | Fix |
| CVE-2024-29155 | Denial of service on Microchip RN4870 devices | 4.3CNA v3.1 | 0.2% | 2024-10-16 | Fix |
| CVE-2024-22034 | Attackers could put the special files in .osc into the actual package sources (e.g. _apiurl). This allows the attacker to change the configuration of osc for the victim | 5.5CNA v3.1 | 0.2% | 2024-10-16 | Fix |
| CVE-2024-22033 | SUSE Package Hub 15 SP5 obs-service-download_url is vulnerable to argument injection | 5.1CNA v4.0 | 0.9% | 2024-10-16 | Fix |
| CVE-2024-22032 | Rancher's RKE1 Encryption Config kept in plain-text within cluster AppliedSpec | 7.1CNA v4.0 | 0.4% | 2024-10-16 | Fix |
| CVE-2024-22030 | Rancher agents can be hijacked by taking over the Rancher Server URL | 8.0CNA v3.1 | 0.4% | 2024-10-16 | Fix |
| CVE-2024-22029 | SUSE Container suse/manager/5.0/x86_64/server:5.0.0-beta1.2.122 insecure permissions | 7.8CNA v3.1 | 0.2% | 2024-10-16 | Fix |
| CVE-2024-20512 | Cisco Unified Contact Center Management Portal reflected cross-site scripting | 6.1CNA v3.1 | 0.3% | 2024-10-16 | Fix |
| CVE-2024-20463 | Cisco ATA 190 Series Analog Telephone Adapter Firmware command injection and denial of service | 5.4CNA v3.1 | 0.4% | 2024-10-16 | Fix |
| CVE-2024-20462 | Cisco ATA 190 Series Analog Telephone Adapter Muliplatform Firmware information disclosure | 5.5CNA v3.1 | 0.2% | 2024-10-16 | Fix |
| CVE-2024-20461 | Cisco ATA 190 Series Analog Telephone Adapter Firmware command injection | 6.0CNA v3.1 | 0.2% | 2024-10-16 | Fix |
| CVE-2024-20460 | Cisco ATA 190 Series Analog Telephone Adapter Firmware reflected cross-site scripting | 6.1CNA v3.1 | 0.3% | 2024-10-16 | Fix |
| CVE-2024-20459 | Cisco ATA 190 Series Analog Telephone Adapter Muliplatform Firmware command injection | 6.5CNA v3.1 | 0.7% | 2024-10-16 | Fix |
| CVE-2024-20458 | Cisco ATA 190 Series Analog Telephone Adapter Software vulnerabilities | 8.2CNA v3.1 | 0.7% | 2024-10-16 | Fix |
| CVE-2024-20421 | Cisco ATA 190 Series Analog Telephone Adapter Firmware cross-site request forgery | 7.1CNA v3.1 | 0.2% | 2024-10-16 | Fix |
| CVE-2024-20420 | Cisco ATA 190 Series Analog Telephone Adapter Firmware privilege escalation | 5.4CNA v3.1 | 0.4% | 2024-10-16 | Fix |
| CVE-2024-20280 | Cisco UCS Central Software Configuration Backup Static Key vulnerability | 6.3CNA v3.1 | 0.1% | 2024-10-16 | Fix |
| CVE-2024-10033 | Red Hat Ansible Automation Platform Aap-gateway: Xss on aap-gateway | 6.1CNA v3.1 | 0.4% | 2024-10-16 | Fix |
| CVE-2024-10024 | code-projects Pharmacy Management System manage_medicine_stock.php SQL injection | 8.8v3.1 | 0.6% | 2024-10-16 | |
| CVE-2024-10023 | code-projects Pharmacy Management System add_new_medicine.php SQL injection | 8.8v3.1 | 0.5% | 2024-10-16 | |
| CVE-2024-10022 | code-projects Pharmacy Management System manage_supplier.php SQL injection | 9.8v3.1 | 0.6% | 2024-10-16 | |
| CVE-2024-10021 | code-projects Pharmacy Management System manage_purchase.php SQL injection | 9.8v3.1 | 0.6% | 2024-10-16 | |
| CVE-2024-10018 | TECNO com.transsion.aivoiceassistant mobile application improper permissions | 9.8CISA ADP v3.1 | 0.5% | 2024-10-16 | Fix |
| CVE-2024-9937 | Woo Manage Fraud Orders WordPress plugin reflected cross-site scripting | 6.1CNA v3.1 | 0.4% | 2024-10-16 | |
| CVE-2024-9893 | Nextend Social Login Pro WordPress plugin authentication bypass via WordPress.com OAuth provider | 9.8CNA v3.1 | 0.7% | 2024-10-16 | Fix |
| CVE-2024-9891 | MultiLine Files for Contact Form 7 plugin deactivation missing authorization | 4.3CNA v3.1 | 0.3% | 2024-10-16 | Fix |
| CVE-2024-9888 | ElementInvader Addons for Elementor WordPress plugin stored cross-site scripting | 5.4CNA v3.1 | 0.3% | 2024-10-16 | Fix |
| CVE-2024-9873 | Community by PeepSo WordPress plugin authenticated (Subscriber+) stored cross-site scripting | 5.4CNA v3.1 | 0.3% | 2024-10-16 | Fix |
| CVE-2024-9858 | Insecure user permissions in Google Cloud Migrate to Containers for Windows | 5.9CNA v4.0 | 0.1% | 2024-10-16 | Fix |
| CVE-2024-9652 | Locatoraid Store Locator WordPress plugin reflected cross-site scripting | 6.1CNA v3.1 | 0.4% | 2024-10-16 | Fix |
| CVE-2024-9649 | WP ULike WordPress plugin cross-site request forgery to Statistic deletion | 4.3CNA v3.1 | 0.2% | 2024-10-16 | Fix |
| CVE-2024-9647 | Kama SpamBlock WordPress plugin reflected cross-site scripting | 6.1CNA v3.1 | 0.4% | 2024-10-16 | Fix |
| CVE-2024-9634 | GiveWP WordPress plugin PHP object injection | 9.8CNA v3.1 | 1.4% | 2024-10-16 | Fix |
| CVE-2024-9582 | Accordion Slider WordPress plugin Authenticted stored cross-site scripting | 5.4v3.1 | 0.3% | 2024-10-16 | Fix |
| CVE-2024-9540 | Sina Extension for Elementor WordPress plugin sensitive information exposure | 4.3v3.1 | 0.4% | 2024-10-16 | Fix |
| CVE-2024-9521 | SEO Manager WordPress plugin authenticated (Contributor+) stored cross-site scripting via post Meta | 6.4CNA v3.1 | 0.3% | 2024-10-16 | |
| CVE-2024-9444 | ElementsReady Addons for Elementor WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.3% | 2024-10-16 | Fix |
| CVE-2024-9348 | Docker Desktop allows RCE via unsanitized GitHub source link in Build view | 8.9CNA v4.0 | 0.5% | 2024-10-16 | Fix |
| CVE-2024-9305 | AppPresser Mobile App Framework WordPress plugin privilege escalation and account takeover | 9.8v3.1 | 0.7% | 2024-10-16 | Fix |
| CVE-2024-9143 | OpenSSL low-level invalid GF(2^m) parameters lead to OOB memory access | 4.3CISA ADP v3.1 | 5.8% | 2024-10-16 | Fix |
| CVE-2024-9105 | UltimateAI WordPress plugin authentication bypass | 9.8CNA v3.1 | 0.6% | 2024-10-16 | |
| CVE-2024-9104 | UltimateAI WordPress plugin authentication bypass | 5.6CNA v3.1 | 0.3% | 2024-10-16 | |
| CVE-2024-9061 | themehunk WP Popup Builder shortcode AJAX action code injection | 9.8v3.1 | 51.3% | 2024-10-16 | NucleiExploit codeFix |
| CVE-2024-8921 | Zita Elementor Site Library WordPress plugin stored cross-site scripting | 6.4CNA v3.1 | 0.4% | 2024-10-16 | Fix |
| CVE-2024-8918 | File Manager Pro WordPress plugin unauthenticated limited JavaScript file upload | 5.4NVD v3.1 | 0.3% | 2024-10-16 | Fix |
| CVE-2024-8787 | Smart Online Order for Clover WordPress plugin reflected cross-site scripting | 6.1CNA v3.1 | 0.4% | 2024-10-16 | Fix |
| CVE-2024-8746 | File Manager Pro WordPress plugin unauthenticated Backup file download and upload | 8.8v3.1 | 0.6% | 2024-10-16 | Fix |
| CVE-2024-8541 | Discount Rules for WooCommerce WordPress plugin reflected cross-site scripting | 6.1v3.1 | 0.4% | 2024-10-16 | Fix |
| CVE-2024-8507 | File Manager Pro WordPress plugin cross-site request forgery to arbitrary file upload | 8.8CNA v3.1 | 0.3% | 2024-10-16 | Fix |
| CVE-2024-8040 | Dassault Systèmes 3DSwymer insecure direct object reference | 7.7CNA v3.1 | 0.3% | 2024-10-16 | |
| CVE-2024-7994 | Stack-based buffer overflow vulnerability in Autodesk Revit | 7.8CNA v3.1 | 0.2% | 2024-10-16 | Fix |
| CVE-2024-7993 | Out-of-bounds write vulnerability in Autodesk Revit | 7.8CNA v3.1 | 0.2% | 2024-10-16 | Fix |
| CVE-2024-6380 | Dassault Systèmes ENOVIA Collaborative Industry Innovator reflected cross-site scripting | 8.7CNA v3.1 | 0.3% | 2024-10-16 | |
| CVE-2024-4692 | OpenText Application Automation Tools multiple missing permission checks | 1.8CNA v4.0 | 0.3% | 2024-10-16 | Fix |
| CVE-2024-4690 | OpenText Application Automation Tools XML external entity injection | 5.1CNA v4.0 | 0.4% | 2024-10-16 | Fix |
| CVE-2024-4211 | OpenText Application Automation Tools multiple missing permission checks | 1.8CNA v4.0 | 0.3% | 2024-10-16 | Fix |
| CVE-2024-4189 | Multiple XXE sinks in Run LoadRunner script step in OpenText Application Automation Tools | 5.9CNA v4.0 | 0.5% | 2024-10-16 | Fix |
| CVE-2024-4184 | Multiple XXE sinks in ALM archive post-build step in OpenText Application Automation Tools | 5.9CNA v4.0 | 0.5% | 2024-10-16 | Fix |
| CVE-2024-49388 | Acronis Cyber Protect 16 insecure direct object reference | 3.1CNA v3.0 | 0.3% | 2024-10-15 | Fix |
| CVE-2024-49387 | Acronis Cyber Protect 16 acep-collector service cleartext transmission of sensitive information | 5.4CNA v3.0 | 0.2% | 2024-10-15 | Fix |
| CVE-2024-49384 | Acronis Cyber Protect 16 acep-collector service vulnerability | 3.5CNA v3.0 | 0.2% | 2024-10-15 | Fix |
| CVE-2024-49383 | Acronis Cyber Protect 16 acep-importer service vulnerability | 3.5CNA v3.0 | 0.2% | 2024-10-15 | Fix |
| CVE-2024-49382 | Acronis Cyber Protect archive-server service vulnerability | 3.5CNA v3.0 | 0.2% | 2024-10-15 | Fix |
| CVE-2024-49195 | TrustedFirmware Mbed TLS out-of-bounds write | 9.8CISA ADP v3.1 | 0.6% | 2024-10-15 | Fix |
| CVE-2024-48948 | Valid ECDSA signatures erroneously rejected in Elliptic | 4.8CISA ADP v3.1 | 0.6% | 2024-10-15 | Fix |
| CVE-2024-48915 | AstroxNetwork agent_dart agent Dart missing certificate verification checks | 8.7CNA v4.0 | 0.4% | 2024-10-15 | Fix |
| CVE-2024-48914 | Vendure asset server plugin path traversal | 9.1CNA v3.1 | 60.4% | 2024-10-15 | NucleiExploit codeFix |
| CVE-2024-48913 | Hono vulnerable to bypass of CSRF Middleware by a request without Content-Type header | 5.9CNA v3.1 | 0.3% | 2024-10-15 | Fix |
| CVE-2024-48783 | Ruijie Nbr3000d-e insecure storage of sensitive information | 7.5v3.1 | 0.4% | 2024-10-15 | |
| CVE-2024-48782 | DYCMS Open-Source Version v2.0.9.41 file upload | 9.8CISA ADP v3.1 | 0.8% | 2024-10-15 | |
| CVE-2024-48781 | An issue in Wanxing Technology Yitu Project Management Kirin Edition 2.3.6 allows a remote attacker to execute arbitrary code via a specially constructed so file/opt/EdrawProj-2/plugins/imageformat. | 9.8CISA ADP v3.1 | 0.8% | 2024-10-15 | |
| CVE-2024-48779 | Wanxing Technology Yitu Project Management Software Qt plugin loading arbitrary code execution | 9.8CISA ADP v3.1 | 0.8% | 2024-10-15 | |
| CVE-2024-48714 | TP-Link Tl-wdr7660 buffer overflow | 6.5CISA ADP v3.1 | 0.4% | 2024-10-15 | |
| CVE-2024-48713 | TP-Link Tl-wdr7660 buffer overflow | 6.5CISA ADP v3.1 | 0.4% | 2024-10-15 | |
| CVE-2024-48712 | TP-Link Tl-wdr7660 buffer overflow | 6.5CISA ADP v3.1 | 0.4% | 2024-10-15 | |
| CVE-2024-48710 | TP-Link Tl-wdr7660 buffer overflow | 6.5CISA ADP v3.1 | 0.4% | 2024-10-15 | |
| CVE-2024-48624 | DomainMOD cross-site scripting | 5.3CISA ADP v3.1 | 0.2% | 2024-10-15 | |
| CVE-2024-48623 | DomainMOD cross-site scripting | 5.3CISA ADP v3.1 | 0.2% | 2024-10-15 | |
| CVE-2024-48622 | DomainMOD cross-site scripting | 6.6CISA ADP v3.1 | 0.3% | 2024-10-15 | |
| CVE-2024-48411 | Mayuri K Online Tours and Travels Management System SQL injection | 9.8CISA ADP v3.1 | 0.5% | 2024-10-15 | |
| CVE-2024-48283 | PHPGurukul User Registration and Login and User Management System SQL injection | 9.8CISA ADP v3.1 | 0.6% | 2024-10-15 | |
| CVE-2024-48282 | PHPGurukul User Registration and Login and User Management System SQL injection | 7.6CISA ADP v3.1 | 0.4% | 2024-10-15 | |
| CVE-2024-48280 | PHPGurukul User Registration and Login and User Management System SQL injection | 7.6CISA ADP v3.1 | 0.5% | 2024-10-15 | |
| CVE-2024-48279 | PHPGurukul User Registration and Login and User Management System code injection | 7.6CISA ADP v3.1 | 0.6% | 2024-10-15 | |
| CVE-2024-48278 | PHPGurukul User Registration and Login and User Management System cross-site request forgery | 5.5CISA ADP v3.1 | 0.2% | 2024-10-15 | |
| CVE-2024-47945 | RITTAL GmbH & Co. KG IoT Interface and CMC III Processing Unit predictable session ID | 9.8v3.1 | 0.9% | 2024-10-15 | Fix |
| CVE-2024-47944 | Missing Protection Mechanism for Alternate Hardware Interface | 6.8CISA ADP v3.1 | 0.4% | 2024-10-15 | Fix |
| CVE-2024-47943 | Rittal IoT Interface and CMC III Processing Unit firmware upgrade improper signature verification | 9.8CISA ADP v3.1 | 0.6% | 2024-10-15 | Fix |
| CVE-2024-47876 | Sakai: Kernel users created with type roleview can login as a normal user | 8.7CNA v4.0 | 0.6% | 2024-10-15 | Fix |
| CVE-2024-47874 | Starlette denial of service (DoS) via multipart/form-data | 8.7CNA v4.0 | 0.7% | 2024-10-15 | Fix |
| CVE-2024-47824 | Matrix.org matrix-react-sdk room invite key sharing information disclosure | 8.7CNA v4.0 | 0.7% | 2024-10-15 | Fix |
| CVE-2024-47779 | Element Web authenticated media information disclosure | 7.0CNA v4.0 | 0.4% | 2024-10-15 | Fix |
| CVE-2024-47771 | Element Desktop authenticated media information disclosure | 7.0CNA v4.0 | 0.6% | 2024-10-15 | Fix |
| CVE-2024-47674 | Linux kernel memory-mapping error path incomplete cleanup | 7.8CNA v3.1 | 0.2% | 2024-10-15 | Fix |
| CVE-2024-47080 | Matrix.org matrix-js-sdk shared history key sharing information disclosure | 8.7CNA v4.0 | 0.7% | 2024-10-15 | Fix |
| CVE-2024-46898 | SHIRASAGI path traversal | 7.5v3.1 | 1.0% | 2024-10-15 | Fix |
| CVE-2024-45276 | MB connect line/Helmholz: Tmp directory exposed via webservice | 7.5CNA v3.1 | 0.6% | 2024-10-15 | Fix |
| CVE-2024-45275 | MB connect line/Helmholz: Hard-coded user accounts with hard-coded passwords | 9.8v3.1 | 0.8% | 2024-10-15 | Fix |
| CVE-2024-45274 | MB connect line/Helmholz: Remote code execution via confnet service | 9.8CNA v3.1 | 1.5% | 2024-10-15 | Fix |
| CVE-2024-45273 | MB connect line/Helmholz: Weak encryption of configuration file | 7.8v3.1 | 0.1% | 2024-10-15 | Fix |
| CVE-2024-45272 | MB connect line/Helmholz: Generation of weak passwords | 7.5CNA v3.1 | 0.6% | 2024-10-15 | Fix |
| CVE-2024-45271 | MB connect line/Helmholz: Remote code execution due to improper input validation | 7.8v3.1 | 0.3% | 2024-10-15 | Fix |
| CVE-2024-45085 | IBM WebSphere Application Server denial of service | 5.9CNA v3.1 | 0.6% | 2024-10-15 | Fix |
| CVE-2024-44775 | Davidepianca98 Kmqtt HTTP request smuggling | 7.5CISA ADP v3.1 | 0.5% | 2024-10-15 | |
| CVE-2024-44337 | Infinite loop in github.com/gomarkdown/markdown | 5.1CISA ADP v3.1 | 0.5% | 2024-10-15 | Exploit codeFix |
| CVE-2024-41344 | Codeigniter A cross-site request forgery | 7.5CISA ADP v3.1 | 0.2% | 2024-10-15 | |
| CVE-2024-41311 | struktur libheif out-of-bounds read | 8.1v3.1 | 0.8% | 2024-10-15 | Fix |
| CVE-2024-38204 | Microsoft Azure Functions imagine Cup site information disclosure | 7.5CNA v3.1 | 0.9% | 2024-10-15 | Fix |
| CVE-2024-38190 | Power Platform information disclosure | 8.6CNA v3.1 | 1.1% | 2024-10-15 | Fix |
| CVE-2024-38139 | Microsoft Dataverse elevation of privilege | 8.7CNA v3.1 | 0.8% | 2024-10-15 | Fix |
| CVE-2024-35584 | OS4ED Opensis SQL injection | 8.8CISA ADP v3.1 | 5.9% | 2024-10-15 | NucleiExploit code |
| CVE-2024-31955 | Samsung eMMC RPMB write protection vulnerability | 4.9CNA v3.1 | 0.2% | 2024-10-15 | |
| CVE-2024-21535 | Cross-site scripting in markdown-to-jsx | 6.1v3.1 | 0.5% | 2024-10-15 | Fix |
| CVE-2024-21286 | Oracle PeopleSoft Enterprise ELM Enterprise Learning Management unauthorized data modification | 5.4CNA v3.1 | 0.3% | 2024-10-15 | Fix |
| CVE-2024-21285 | Oracle Financial Services Applications Banking Liquidity Management Reports component takeover | 7.1CNA v3.1 | 0.4% | 2024-10-15 | Fix |
| CVE-2024-21284 | Oracle Financial Services Applications Banking Liquidity Management Reports component takeover | 7.1CNA v3.1 | 0.4% | 2024-10-15 | Fix |
| CVE-2024-21283 | Oracle PeopleSoft Enterprise HCM Global Payroll Core unauthorized data access | 8.1CNA v3.1 | 0.4% | 2024-10-15 | Fix |
| CVE-2024-21282 | Oracle E-Business Suite Financials Common components component unauthorized data access | 8.1CNA v3.1 | 0.4% | 2024-10-15 | Fix |
| CVE-2024-21281 | Oracle Financial Services Applications Banking Liquidity Management unauthorized data modification | 5.3CNA v3.1 | 0.3% | 2024-10-15 | Fix |
| CVE-2024-21280 | Oracle E-Business Suite Service Contracts Authoring component unauthorized data access | 8.1CNA v3.1 | 0.4% | 2024-10-15 | Fix |
| CVE-2024-21279 | Oracle E-Business Suite Sourcing Auctions component unauthorized data access | 8.1CNA v3.1 | 0.4% | 2024-10-15 | Fix |
| CVE-2024-21278 | Oracle Contract Lifecycle Management for Public Sector unauthorized data access | 8.1CNA v3.1 | 0.4% | 2024-10-15 | Fix |
| CVE-2024-21277 | Oracle MES for Process Manufacturing Device Integration component unauthorized data access | 8.1CNA v3.1 | 0.4% | 2024-10-15 | Fix |
| CVE-2024-21276 | Oracle E-Business Suite Work in Process messages component unauthorized data access | 8.1CNA v3.1 | 0.4% | 2024-10-15 | Fix |
| CVE-2024-21275 | Oracle E-Business Suite Quoting User interface component unauthorized data access | 8.1CNA v3.1 | 0.4% | 2024-10-15 | Fix |
| CVE-2024-21274 | Oracle WebLogic Server console component denial of service | 7.5CNA v3.1 | 0.7% | 2024-10-15 | Fix |
| CVE-2024-21273 | Oracle VM VirtualBox Core component unauthorized data access | 6.0CNA v3.1 | 0.4% | 2024-10-15 | Fix |
| CVE-2024-21272 | Oracle MySQL Connector/Python connector takeover | 7.5CNA v3.1 | 0.5% | 2024-10-15 | Fix |
| CVE-2024-21271 | Oracle E-Business Suite Field Service unauthorized data access | 8.1CNA v3.1 | 0.4% | 2024-10-15 | Fix |
| CVE-2024-21270 | Oracle E-Business Suite Common Applications Calendar Tasks component unauthorized data access | 8.1CNA v3.1 | 0.4% | 2024-10-15 | Fix |
| CVE-2024-21269 | Oracle E-Business Suite Incentive Compensation Plan component unauthorized data access | 8.1CNA v3.1 | 0.4% | 2024-10-15 | Fix |
| CVE-2024-21268 | Oracle E-Business Suite Applications Manager Diagnostics component unauthorized data access | 8.1CNA v3.1 | 0.4% | 2024-10-15 | Fix |
| CVE-2024-21267 | Oracle E-Business Suite Cost Management Cost Planning component unauthorized data access | 8.1CNA v3.1 | 0.4% | 2024-10-15 | Fix |
| CVE-2024-21266 | Oracle E-Business Suite Advanced Pricing Price List component unauthorized data access | 8.1CNA v3.1 | 0.4% | 2024-10-15 | Fix |
| CVE-2024-21265 | Oracle E-Business Suite Site Hub Site Hierarchy Flows component unauthorized data access | 8.1CNA v3.1 | 0.4% | 2024-10-15 | Fix |
| CVE-2024-21264 | Oracle PeopleSoft Enterprise CC Common Application Objects unauthorized data modification | 5.4CNA v3.1 | 0.3% | 2024-10-15 | Fix |
| CVE-2024-21263 | Oracle VM VirtualBox Core component denial of service | 6.1CNA v3.1 | 0.3% | 2024-10-15 | Fix |
| CVE-2024-21262 | Oracle MySQL Connectors Connector/ODBC component unauthorized data modification | 6.5CNA v3.1 | 0.6% | 2024-10-15 | Exploit codeFix |
| CVE-2024-21261 | Vulnerability in Oracle Application Express (component: General). Supported versions that are affected are 23.2 and 24.1. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Application Express. While the vulnerability is in Oracle A | 4.9CNA v3.1 | 0.3% | 2024-10-15 | Fix |
| CVE-2024-21260 | Oracle WebLogic Server Core component denial of service | 7.5CNA v3.1 | 0.7% | 2024-10-15 | Fix |
| CVE-2024-21259 | Oracle VM VirtualBox Core component takeover | 7.5CNA v3.1 | 0.3% | 2024-10-15 | Fix |
| CVE-2024-21258 | Oracle E-Business Suite Installed Base User interface component information disclosure | 5.3CNA v3.1 | 0.5% | 2024-10-15 | Fix |
| CVE-2024-21257 | Oracle Hyperion BI+ UI and Visualization component information disclosure | 3.0CNA v3.1 | 0.4% | 2024-10-15 | Fix |
| CVE-2024-21255 | Oracle PeopleSoft Enterprise PeopleTools XMLPublisher component takeover | 8.8CNA v3.1 | 0.6% | 2024-10-15 | Fix |
| CVE-2024-21254 | Oracle BI Publisher Web Server component takeover | 8.8CNA v3.1 | 0.5% | 2024-10-15 | Fix |
| CVE-2024-21253 | Oracle VM VirtualBox Core component denial of service | 2.3CNA v3.1 | 0.3% | 2024-10-15 | Fix |
| CVE-2024-21252 | Oracle E-Business Suite Product Hub Item Catalog component unauthorized data access | 8.1CNA v3.1 | 0.4% | 2024-10-15 | Fix |
| CVE-2024-21251 | Oracle Database Server observable discrepancy | 3.1CNA v3.1 | 0.4% | 2024-10-15 | Fix |
| CVE-2024-21250 | Oracle Process Manufacturing Product Development unauthorized data access | 8.1CNA v3.1 | 0.4% | 2024-10-15 | Fix |
| CVE-2024-21249 | Oracle PeopleSoft Enterprise FIN Expenses information disclosure | 4.3CNA v3.1 | 0.4% | 2024-10-15 | Fix |
| CVE-2024-21248 | Oracle VM VirtualBox Core component unauthorized data modification | 5.3CNA v3.1 | 0.2% | 2024-10-15 | Fix |
| CVE-2024-21247 | Oracle MySQL Client mysqldump component unauthorized data modification | 3.8CNA v3.1 | 0.6% | 2024-10-15 | Fix |
| CVE-2024-21246 | Oracle Service Bus OSB Core Functionality component unauthorized data access | 7.5CNA v3.1 | 0.7% | 2024-10-15 | Fix |
| CVE-2024-21244 | Oracle MySQL Server Telemetry component information disclosure | 2.2CNA v3.1 | 0.7% | 2024-10-15 | Fix |
| CVE-2024-21243 | Oracle MySQL Server Telemetry component information disclosure | 2.2CNA v3.1 | 0.7% | 2024-10-15 | Fix |
| CVE-2024-21242 | Oracle Database XML Database denial of service | 3.5CNA v3.1 | 0.5% | 2024-10-15 | Fix |
| CVE-2024-21241 | Oracle MySQL Server Optimizer component denial of service | 4.9CNA v3.1 | 0.9% | 2024-10-15 | Fix |
| CVE-2024-21239 | Oracle MySQL Server InnoDB component denial of service | 4.9CNA v3.1 | 1.0% | 2024-10-15 | Fix |
| CVE-2024-21238 | Oracle MySQL Server Thread Pooling component denial of service | 5.3CNA v3.1 | 0.9% | 2024-10-15 | Fix |
| CVE-2024-21237 | Oracle MySQL Server Group Replication GCS component denial of service | 2.2CNA v3.1 | 0.7% | 2024-10-15 | Fix |
| CVE-2024-21236 | Oracle MySQL Server InnoDB component denial of service | 4.9CNA v3.1 | 1.1% | 2024-10-15 | Fix |
| CVE-2024-21235 | Oracle Java SE Hotspot vulnerability | 4.8CNA v3.1 | 0.9% | 2024-10-15 | Fix |
| CVE-2024-21234 | Oracle WebLogic Server Core component unauthorized data access | 7.5CNA v3.1 | 0.7% | 2024-10-15 | Fix |
| CVE-2024-21233 | Oracle Database Server observable discrepancy | 4.3CNA v3.1 | 0.4% | 2024-10-15 | Fix |
| CVE-2024-21232 | Oracle MySQL Server components services component denial of service | 2.2CNA v3.1 | 0.8% | 2024-10-15 | Fix |
| CVE-2024-21231 | Oracle MySQL Server client programs component denial of service | 3.1CNA v3.1 | 0.9% | 2024-10-15 | Fix |
| CVE-2024-21230 | Oracle MySQL Server Optimizer component denial of service | 6.5CNA v3.1 | 0.9% | 2024-10-15 | Fix |
| CVE-2024-21219 | Oracle MySQL Server DML component denial of service | 4.9CNA v3.1 | 1.0% | 2024-10-15 | Fix |
| CVE-2024-21218 | Oracle MySQL Server InnoDB component denial of service | 4.9CNA v3.1 | 1.0% | 2024-10-15 | Fix |
| CVE-2024-21217 | Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition denial of service | 3.7CNA v3.1 | 1.1% | 2024-10-15 | Fix |
| CVE-2024-21216 | Oracle WebLogic Server Core component takeover | 9.8CNA v3.1 | 0.7% | 2024-10-15 | Fix |
| CVE-2024-21215 | Oracle WebLogic Server Core component denial of service | 7.5CNA v3.1 | 0.6% | 2024-10-15 | Fix |
| CVE-2024-21214 | Oracle PeopleSoft Enterprise PeopleTools Query component unauthorized data access | 8.1CNA v3.1 | 0.5% | 2024-10-15 | Fix |
| CVE-2024-21213 | Oracle MySQL Server InnoDB component denial of service | 4.2CNA v3.1 | 0.3% | 2024-10-15 | Fix |
| CVE-2024-21212 | Oracle MySQL Server Health Monitor component denial of service | 4.4CNA v3.1 | 0.9% | 2024-10-15 | Fix |
| CVE-2024-21211 | Oracle GraalVM insecure storage of sensitive information | 3.7CNA v3.1 | 0.7% | 2024-10-15 | Fix |
| CVE-2024-21210 | Oracle Java SE observable discrepancy | 3.7CNA v3.1 | 0.8% | 2024-10-15 | Fix |
| CVE-2024-21209 | Oracle MySQL Client mysqldump component information disclosure | 2.0CNA v3.1 | 0.6% | 2024-10-15 | Fix |
| CVE-2024-21208 | Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition denial of service | 3.7CNA v3.1 | 1.0% | 2024-10-15 | Fix |
| CVE-2024-21207 | Oracle MySQL Server InnoDB component denial of service | 4.9CNA v3.1 | 0.9% | 2024-10-15 | Fix |
| CVE-2024-21206 | Oracle Enterprise Command Center Framework Diagnostics component information disclosure | 4.3CNA v3.1 | 0.4% | 2024-10-15 | Fix |
| CVE-2024-21205 | Oracle Service Bus OSB Core Functionality component unauthorized data access | 6.5CNA v3.1 | 0.6% | 2024-10-15 | Fix |
| CVE-2024-21204 | Oracle MySQL Server PS component denial of service | 4.9CNA v3.1 | 0.9% | 2024-10-15 | Fix |
| CVE-2024-21203 | Oracle MySQL Server FTS component denial of service | 4.9CNA v3.1 | 0.9% | 2024-10-15 | Fix |
| CVE-2024-21202 | Oracle PeopleSoft Enterprise PeopleTools unauthorized data modification | 6.1CNA v3.1 | 0.2% | 2024-10-15 | Fix |
| CVE-2024-21201 | Oracle MySQL Server Optimizer component denial of service | 4.9CNA v3.1 | 0.9% | 2024-10-15 | Fix |
| CVE-2024-21200 | Oracle MySQL Server Optimizer component denial of service | 4.9CNA v3.1 | 0.9% | 2024-10-15 | Fix |
| CVE-2024-21199 | Oracle MySQL Server InnoDB component denial of service | 4.9CNA v3.1 | 0.9% | 2024-10-15 | Fix |
| CVE-2024-21198 | Oracle MySQL Server DDL component denial of service | 4.9CNA v3.1 | 0.9% | 2024-10-15 | Fix |
| CVE-2024-21197 | Oracle MySQL Server Information Schema component denial of service | 4.9CNA v3.1 | 0.9% | 2024-10-15 | Fix |
| CVE-2024-21196 | Oracle MySQL Server X plugin component denial of service | 6.5CNA v3.1 | 0.9% | 2024-10-15 | Fix |
| CVE-2024-21195 | Oracle BI Publisher Layout templates component unauthorized data access | 7.6CNA v3.1 | 0.4% | 2024-10-15 | Fix |
| CVE-2024-21194 | Oracle MySQL Server InnoDB component denial of service | 4.9CNA v3.1 | 0.9% | 2024-10-15 | Fix |
| CVE-2024-21193 | Oracle MySQL Server PS component denial of service | 4.9CNA v3.1 | 0.9% | 2024-10-15 | Fix |
| CVE-2024-21192 | Oracle Enterprise Manager for Fusion Middleware WebLogic Mgmt component unauthorized data access | 4.4CNA v3.1 | 0.2% | 2024-10-15 | Fix |
| CVE-2024-21191 | Oracle Enterprise Manager Fusion Middleware Control unauthorized data access | 7.6CNA v3.1 | 0.4% | 2024-10-15 | Fix |
| CVE-2024-21190 | Oracle Global Lifecycle Management FMW Installer Cloning component unauthorized data modification | 7.5CNA v3.1 | 0.5% | 2024-10-15 | Fix |
| CVE-2024-21172 | Oracle Hospitality OPERA 5 Opera Servlet component takeover | 9.0CNA v3.1 | 0.5% | 2024-10-15 | Fix |
| CVE-2024-10004 | Mozilla Firefox clickjacking | 9.1CISA ADP v3.1 | 0.4% | 2024-10-15 | Fix |
| CVE-2024-9986 | code-projects Blood Bank Management System member_register.php SQL injection | 9.8v3.1 | 0.8% | 2024-10-15 | |
| CVE-2024-9985 | Ragic Enterprise Cloud Database arbitrary file upload | 9.8v3.1 | 0.6% | 2024-10-15 | Fix |
| CVE-2024-9984 | Ragic Enterprise Cloud Database missing authentication | 9.8v3.1 | 0.6% | 2024-10-15 | Fix |
| CVE-2024-9983 | Ragic Enterprise Cloud Database arbitrary file read through path traversal | 7.5CNA v3.1 | 0.7% | 2024-10-15 | Fix |
| CVE-2024-9982 | ESi Technology AIM LINE Marketing Platform SQL injection | 9.8CNA v3.1 | 0.7% | 2024-10-15 | Fix |
| CVE-2024-9981 | FormosaSoft ee-class local file inclusion | 8.8v3.1 | 0.8% | 2024-10-15 | Fix |
| CVE-2024-9980 | FormosaSoft ee-class SQL injection | 8.8CNA v3.1 | 0.6% | 2024-10-15 | Fix |
| CVE-2024-9979 | PyO3 weak reference borrowing use-after-free | 5.3CNA v3.1 | 0.2% | 2024-10-15 | Fix |
| CVE-2024-9977 | MitraStar GPT-2541GNAC Firewall settings page settings-firewall.cgi os command injection | 5.1CNA v4.0 | 22.9% | 2024-10-15 | |
| CVE-2024-9976 | code-projects Pharmacy Management System manage_customer.php SQL injection | 9.8v3.1 | 0.5% | 2024-10-15 | |
| CVE-2024-9975 | SourceCodester Drag and Drop Image Upload upload.php unrestricted upload | 8.8v3.1 | 0.6% | 2024-10-15 | |
| CVE-2024-9974 | SourceCodester Online Eyewear Shop POST Request Master.php SQL injection | 9.8v3.1 | 0.6% | 2024-10-15 | |
| CVE-2024-9973 | SourceCodester Online Eyewear Shop Report Viewing page page SQL injection | 9.8v3.1 | 0.5% | 2024-10-15 | |
| CVE-2024-9972 | ChanGate Property Management System SQL injection | 9.8CNA v3.1 | 0.7% | 2024-10-15 | Fix |
| CVE-2024-9971 | NewType FlowMaster BPM Plus SQL injection | 8.8CNA v3.1 | 0.6% | 2024-10-15 | Fix |
| CVE-2024-9970 | NewType FlowMaster BPM Plus privilege escalation | 8.8CNA v3.1 | 0.6% | 2024-10-15 | Fix |
| CVE-2024-9969 | NewType WebEIP reflected XSS | 5.4CNA v3.1 | 0.3% | 2024-10-15 | |
| CVE-2024-9968 | NewType WebEIP SQL injection | 8.8v3.1 | 0.6% | 2024-10-15 | |
| CVE-2024-9966 | Google Chrome Navigations inappropriate implementation | 5.3v3.1 | 0.4% | 2024-10-15 | Fix |
| CVE-2024-9965 | Google Chrome DevTools improper input validation | 8.8v3.1 | 0.5% | 2024-10-15 | Fix |
| CVE-2024-9964 | Google Chrome Payments inappropriate implementation | 4.3v3.1 | 0.3% | 2024-10-15 | Fix |
| CVE-2024-9963 | Google Chrome Downloads improper input validation | 4.3v3.1 | 0.3% | 2024-10-15 | Fix |