CVE-2024 records published in October 2024
Page three of four: records 2,001 to 3,000 of the 3,350 published in October 2024, newest first. The first page carries the figures for October 2024.
| CVE | Summary | CVSS | EPSS | Published | Signals |
|---|---|---|---|---|---|
| CVE-2024-9962 | Google Chrome Permissions inappropriate implementation | 4.3v3.1 | 0.3% | 2024-10-15 | Fix |
| CVE-2024-9961 | Google Chrome ParcelTracking use-after-free | 8.8v3.1 | 0.4% | 2024-10-15 | Fix |
| CVE-2024-9960 | Google Chrome Dawn use-after-free | 7.5v3.1 | 0.4% | 2024-10-15 | Fix |
| CVE-2024-9959 | Google Chrome DevTools use-after-free | 8.8v3.1 | 0.4% | 2024-10-15 | Fix |
| CVE-2024-9958 | Google Chrome PictureInPicture inappropriate implementation | 4.3v3.1 | 0.3% | 2024-10-15 | Fix |
| CVE-2024-9957 | Google Chrome UI use-after-free | 8.8v3.1 | 0.4% | 2024-10-15 | Fix |
| CVE-2024-9956 | Google Chrome WebAuthentication inappropriate implementation | 7.8v3.1 | 0.4% | 2024-10-15 | Fix |
| CVE-2024-9955 | Google Chrome WebAuthentication use-after-free | 8.8v3.1 | 0.9% | 2024-10-15 | Fix |
| CVE-2024-9954 | Google Chrome AI use-after-free | 8.8v3.1 | 4.9% | 2024-10-15 | Fix |
| CVE-2024-9952 | SourceCodester Online Eyewear Shop Contact Information page contact_info cross-site scripting | 4.8v3.1 | 0.4% | 2024-10-15 | |
| CVE-2024-9944 | WooCommerce WordPress plugin unauthenticated HTML injection | 6.1v3.1 | 0.6% | 2024-10-15 | Fix |
| CVE-2024-9925 | SQL injection in QPLANT by TAI Smart Factory | 9.8v3.1 | 0.5% | 2024-10-15 | Fix |
| CVE-2024-9895 | Smart Online Order for Clover WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.3% | 2024-10-15 | Fix |
| CVE-2024-9837 | AADMY WordPress plugin code injection | 7.3CNA v3.1 | 0.6% | 2024-10-15 | Fix |
| CVE-2024-9820 | WP 2FA with Telegram WordPress plugin Two-Factor authentication bypass | 7.5v3.1 | 0.4% | 2024-10-15 | Fix |
| CVE-2024-9687 | WP 2FA with Telegram WordPress plugin authenticated (Subscriber+) authentication bypass | 8.8CNA v3.1 | 0.5% | 2024-10-15 | Fix |
| CVE-2024-9676 | Red Hat Enterprise Linux 8 path traversal | 6.5CNA v3.1 | 1.3% | 2024-10-15 | Fix |
| CVE-2024-9594 | VM images built with Image Builder with some providers use default credentials during builds | 6.3CNA v3.1 | 1.7% | 2024-10-15 | Fix |
| CVE-2024-9548 | Slimstat Analytics WordPress plugin unauthenticated stored cross-site scripting | 6.1NVD v3.1 | 0.5% | 2024-10-15 | Fix |
| CVE-2024-9546 | WPIDE WordPress plugin unauthenticated full path Dislcosure | 5.3CNA v3.1 | 0.5% | 2024-10-15 | Fix |
| CVE-2024-9506 | vue regular expression denial of service (ReDoS) | 3.7CNA v3.1 | 0.5% | 2024-10-15 | Fix |
| CVE-2024-9486 | VM images built with Image Builder and Proxmox provider use default credentials | 9.8CNA v3.1 | 2.2% | 2024-10-15 | Fix |
| CVE-2024-6757 | Elementor WordPress plugin Basic information exposure | 4.3CNA v3.1 | 0.4% | 2024-10-15 | Fix |
| CVE-2024-5749 | HP DesignJet SMTP credentials missing authentication | 7.5CNA v3.1 | 1.2% | 2024-10-15 | Fix |
| CVE-2024-0129 | NVIDIA NeMo path traversal | 6.3CNA v3.1 | 0.2% | 2024-10-15 | Fix |
| CVE-2024-49214 | HAProxy QUIC 0-RTT session handling vulnerability | 5.3CNA v3.1 | 0.5% | 2024-10-14 | Fix |
| CVE-2024-48911 | OpenCanary Executes commands from Potentially Writable Config file | 5.8CNA v4.0 | 0.2% | 2024-10-14 | Fix |
| CVE-2024-48909 | AuthZed SpiceDB LookupResources2 API incorrect authorization | 2.0CNA v3.1 | 0.3% | 2024-10-14 | Fix |
| CVE-2024-48824 | Automatic Systems Maintenance SlimLane download-file.php information disclosure | 7.5CISA ADP v3.1 | 0.5% | 2024-10-14 | |
| CVE-2024-48823 | Automatic Systems Maintenance SlimLane local file inclusion | 9.8CISA ADP v3.1 | 0.5% | 2024-10-14 | |
| CVE-2024-48822 | Automatic Systems Maintenance SlimLane privilege escalation | 8.8CISA ADP v3.1 | 0.5% | 2024-10-14 | |
| CVE-2024-48821 | Automatic Systems Maintenance SlimLane cross-site scripting | 6.1CISA ADP v3.1 | 0.3% | 2024-10-14 | |
| CVE-2024-48799 | An issue in LOREX TECHNOLOGY INC com.lorexcorp.lorexping 1.4.22 allows a remote attacker to obtain sensitive information via the firmware update process. | 7.5CISA ADP v3.1 | 0.5% | 2024-10-14 | |
| CVE-2024-48798 | An issue in Hubble Connected (com.hubbleconnected.vervelife) 2.00.81 allows a remote attacker to obtain sensitive information via the firmware update process. | 7.5CISA ADP v3.1 | 0.5% | 2024-10-14 | |
| CVE-2024-48797 | PCS Engineering Preston Cinema app firmware update process information disclosure | 7.5CISA ADP v3.1 | 0.5% | 2024-10-14 | |
| CVE-2024-48796 | Eques Plug app firmware update process information disclosure | 7.5CISA ADP v3.1 | 0.5% | 2024-10-14 | |
| CVE-2024-48795 | An issue in Creative Labs Pte Ltd com.creative.apps.xficonnect 2.00.02 allows a remote attacker to obtain sensitive information via the firmware update process. | 5.3CISA ADP v3.1 | 0.3% | 2024-10-14 | |
| CVE-2024-48793 | Inatronic BMW app firmware update process information disclosure | 5.9CISA ADP v3.1 | 0.3% | 2024-10-14 | |
| CVE-2024-48792 | An issue in Hideez com.hideez 2.7.8.3 allows a remote attacker to obtain sensitive information via the firmware update process. | 7.5CISA ADP v3.1 | 0.5% | 2024-10-14 | |
| CVE-2024-48791 | Plug n Play Camera camera app firmware update process missing authentication | 7.5CISA ADP v3.1 | 0.5% | 2024-10-14 | |
| CVE-2024-48790 | iLife Home app firmware update process information disclosure | 5.3CISA ADP v3.1 | 0.3% | 2024-10-14 | |
| CVE-2024-48789 | Inatronic DriveDeck Home app firmware update process information disclosure | 7.5CISA ADP v3.1 | 0.5% | 2024-10-14 | |
| CVE-2024-48259 | Magicbug Cloudlog SQL injection | 7.3CISA ADP v3.1 | 0.9% | 2024-10-14 | Nuclei |
| CVE-2024-48257 | wavelog SQL injection | 9.8v3.1 | 0.7% | 2024-10-14 | |
| CVE-2024-48255 | Magicbug Cloudlog SQL injection | 9.8v3.1 | 0.4% | 2024-10-14 | |
| CVE-2024-48253 | Magicbug Cloudlog SQL injection | 9.8v3.1 | 0.4% | 2024-10-14 | |
| CVE-2024-48251 | wavelog SQL injection | 9.8v3.1 | 0.6% | 2024-10-14 | |
| CVE-2024-48249 | wavelog SQL injection | 7.3CISA ADP v3.1 | 0.4% | 2024-10-14 | |
| CVE-2024-48168 | D-Link DCS-960L sub_402280 function of the HNAP service stack-based buffer overflow | 9.8CISA ADP v3.1 | 1.0% | 2024-10-14 | |
| CVE-2024-48153 | DrayTek Vigor3900 command injection | 9.8CISA ADP v3.1 | 0.7% | 2024-10-14 | |
| CVE-2024-48150 | D-Link DIR-820L buffer overflow | 9.8CISA ADP v3.1 | 0.7% | 2024-10-14 | |
| CVE-2024-48120 | X2ENGINE X2CRM cross-site scripting | 5.4v3.1 | 0.6% | 2024-10-14 | Exploit code |
| CVE-2024-48119 | Vtiger CRM cross-site scripting | 5.4v3.1 | 0.3% | 2024-10-14 | |
| CVE-2024-47885 | Astro's client-side router has DOM Clobbering Gadget that leads to XSS | 5.9CNA v3.1 | 0.4% | 2024-10-14 | Fix |
| CVE-2024-47831 | Next.js image optimization has denial of service condition | 5.9CNA v3.1 | 0.7% | 2024-10-14 | Fix |
| CVE-2024-47826 | eLabFTW vulnerable to HTML injection in extended search error message | 3.5CNA v3.1 | 0.3% | 2024-10-14 | Fix |
| CVE-2024-47767 | Tuleap lists trackers in the quick add actions of the backlog without any permissions check | 4.3CNA v3.1 | 0.4% | 2024-10-14 | Fix |
| CVE-2024-47766 | Enalean Tuleap cross tracker search widget vulnerability | 4.9CNA v3.1 | 0.5% | 2024-10-14 | Fix |
| CVE-2024-46988 | Tuleap does not properly check permissions for email notifications in trackers | 4.8CNA v3.1 | 0.4% | 2024-10-14 | Fix |
| CVE-2024-46980 | Tuleap vulnerable to XSS in the HTML mail content of the cross reference field | 4.8CNA v3.1 | 0.4% | 2024-10-14 | Fix |
| CVE-2024-46911 | Apache Roller: Weakness in CSRF protection allows privilege escalation | 4.7CISA ADP v3.1 | 0.4% | 2024-10-14 | Fix |
| CVE-2024-46535 | ketr JEPaaS SQL injection | 9.8CISA ADP v3.1 | 0.5% | 2024-10-14 | |
| CVE-2024-46528 | KubeSphere An insecure direct object reference | 4.3CISA ADP v3.1 | 1.6% | 2024-10-14 | Exploit codeFix |
| CVE-2024-45741 | Persistent cross-site scripting (XSS) via props.conf on Splunk Enterprise | 5.4v3.1 | 14.8% | 2024-10-14 | Fix |
| CVE-2024-45740 | Persistent cross-site scripting (XSS) through Scheduled Views on Splunk Enterprise | 5.4v3.1 | 0.3% | 2024-10-14 | Fix |
| CVE-2024-45739 | Splunk Enterprise sensitive information disclosure in AdminManager logging channel | 4.9v3.1 | 0.5% | 2024-10-14 | Fix |
| CVE-2024-45738 | Splunk Enterprise sensitive information disclosure in REST_Calls logging channel | 4.9v3.1 | 0.5% | 2024-10-14 | Fix |
| CVE-2024-45737 | Splunk Enterprise App Key Value Store maintenance mode cross-site request forgery | 3.5NVD v3.1 | 0.2% | 2024-10-14 | Fix |
| CVE-2024-45736 | Improperly Formatted INGEST_EVAL parameter crashes Splunk daemon | 6.5v3.1 | 0.5% | 2024-10-14 | Fix |
| CVE-2024-45735 | Improper access control for low-privileged user in Splunk Secure Gateway App | 4.3v3.1 | 0.3% | 2024-10-14 | Fix |
| CVE-2024-45734 | Splunk Enterprise classic dashboard PDF export information disclosure | 4.3v3.1 | 0.3% | 2024-10-14 | Fix |
| CVE-2024-45733 | Remote code execution due to insecure session storage configuration in Splunk Enterprise on Windows | 8.8v3.1 | 1.1% | 2024-10-14 | Fix |
| CVE-2024-45732 | Splunk Enterprise low-privileged user could run search as nobody in SplunkDeploymentServerConfig app | 6.5NVD v3.1 | 0.4% | 2024-10-14 | Fix |
| CVE-2024-45731 | Splunk Enterprise Windows installation path handling vulnerability | 8.0v3.1 | 0.5% | 2024-10-14 | Fix |
| CVE-2024-43701 | GPU DDK PowerVR: TLB invalidate UAF of dma_buf imported into multiple GPU devices | 7.8CISA ADP v3.1 | 0.1% | 2024-10-14 | Fix |
| CVE-2024-41997 | An issue was discovered in version of Warp Terminal prior to 2024.07.18 (v0.2024.07.16.08.02). A command injection vulnerability exists in the Docker integration functionality. An attacker can create a specially crafted hyperlink using the `warp://action/docker/open_subshell` intent that when clicke | 6.6CISA ADP v3.1 | 1.2% | 2024-10-14 | Exploit code |
| CVE-2024-38863 | Checkmk CSRF token leaked in URL parameters | 2.0CNA v4.0 | 0.4% | 2024-10-14 | Fix |
| CVE-2024-38862 | Checkmk SNMP and IMPI secrets written to audit log | 5.1CNA v4.0 | 0.3% | 2024-10-14 | Fix |
| CVE-2024-35520 | NETGEAR R7000 command injection | 6.8NVD v3.1 | 9.6% | 2024-10-14 | |
| CVE-2024-35519 | NETGEAR EX3700 command injection | 6.8NVD v3.1 | 1.0% | 2024-10-14 | |
| CVE-2024-35518 | NETGEAR EX6120 command injection | 6.8NVD v3.1 | 1.0% | 2024-10-14 | |
| CVE-2024-30117 | HCL BigFix Platform is affected by a DLL Hijack vulnerability | 2.5CNA v3.1 | 0.2% | 2024-10-14 | Fix |
| CVE-2024-9953 | Potential DoS vulnerability in CERT VINCE software before | 4.9v3.1 | 0.4% | 2024-10-14 | Fix |
| CVE-2024-9936 | Mozilla Firefox race condition | 6.5CISA ADP v3.1 | 0.3% | 2024-10-14 | Fix |
| CVE-2024-9924 | HGiga OAKlouds arbitrary file read and Delete | 9.8CNA v3.1 | 0.8% | 2024-10-14 | Fix |
| CVE-2024-9923 | TEAMPLUS TECHNOLOGY Team+ arbitrary File Move through path traversal | 4.9CNA v3.1 | 0.6% | 2024-10-14 | Fix |
| CVE-2024-9922 | TEAMPLUS TECHNOLOGY Team+ arbitrary file read through path traversal | 7.5CNA v3.1 | 0.7% | 2024-10-14 | Fix |
| CVE-2024-9921 | TEAMPLUS TECHNOLOGY Team+ SQL injection | 9.8CNA v3.1 | 0.7% | 2024-10-14 | Fix |
| CVE-2024-9823 | Jetty DOS vulnerability on DosFilter | 5.3CNA v3.1 | 0.9% | 2024-10-14 | Fix |
| CVE-2024-9139 | Moxa EDR-8010 Series OS command injection in Restricted command | 8.6CNA v4.0 | 1.4% | 2024-10-14 | Fix |
| CVE-2024-9137 | Moxa service missing authentication for critical function | 8.8CNA v4.0 | 0.5% | 2024-10-14 | Fix |
| CVE-2024-8602 | XML Eternal Entity Attack in the software Library taxstatement.jar | 6.3CNA v4.0 | 0.4% | 2024-10-14 | |
| CVE-2024-8184 | Jetty ThreadLimitHandler.getRemote vulnerable to remote DoS attacks | 5.9CNA v3.1 | 1.0% | 2024-10-14 | Fix |
| CVE-2024-7847 | RSLogix™ 5 and RSLogix 500® remote code execution via VBA Embedded script | 8.8CNA v4.0 | 0.2% | 2024-10-14 | |
| CVE-2024-6763 | Jetty URI parsing of invalid authority | 3.7CNA v3.1 | 1.0% | 2024-10-14 | Fix |
| CVE-2024-6762 | Jetty PushSessionCacheFilter can cause remote DoS attacks | 3.1CNA v3.1 | 0.9% | 2024-10-14 | Fix |
| CVE-2024-6207 | Rockwell Automation ControlLogix® 5580 improper input validation | 8.7CNA v4.0 | 0.6% | 2024-10-14 | Fix |
| CVE-2024-9918 | HuangDou UTCMS sql.php RunSql SQL injection | 7.2v3.1 | 0.6% | 2024-10-13 | |
| CVE-2024-9917 | HuangDou UTCMS template_creat.php deserialization | 4.9v3.1 | 8.8% | 2024-10-13 | |
| CVE-2024-9916 | HuangDou UTCMS cli.php os command injection | 9.8v3.1 | 73.6% | 2024-10-13 | Nuclei |
| CVE-2024-9915 | D-Link DIR-619L B1 formVirtualServ buffer overflow | 8.8v3.1 | 1.8% | 2024-10-13 | |
| CVE-2024-9914 | D-Link DIR-619L B1 formSetWizardSelectMode buffer overflow | 8.8v3.1 | 1.7% | 2024-10-13 | |
| CVE-2024-9913 | D-Link DIR-619L B1 formSetRoute buffer overflow | 8.8v3.1 | 1.7% | 2024-10-13 | |
| CVE-2024-9912 | D-Link DIR-619L B1 formSetQoS buffer overflow | 8.8v3.1 | 1.6% | 2024-10-13 | |
| CVE-2024-9911 | D-Link DIR-619L B1 formSetPortTr buffer overflow | 8.8v3.1 | 1.6% | 2024-10-13 | |
| CVE-2024-9910 | D-Link DIR-619L B1 formSetPassword buffer overflow | 8.8v3.1 | 1.6% | 2024-10-13 | |
| CVE-2024-9909 | D-Link DIR-619L B1 formSetMuti buffer overflow | 8.8v3.1 | 2.2% | 2024-10-13 | |
| CVE-2024-9908 | D-Link DIR-619L B1 formSetMACFilter buffer overflow | 8.8v3.1 | 2.6% | 2024-10-13 | |
| CVE-2024-9907 | QileCMS Verification Code Forget.php sendEmail password recovery | 6.3CNA v4.0 | 0.4% | 2024-10-13 | |
| CVE-2024-9906 | SourceCodester Online Eyewear Shop cross-site scripting | 5.4v3.1 | 0.4% | 2024-10-13 | |
| CVE-2024-9905 | SourceCodester Online Eyewear Shop SQL injection | 8.8v3.1 | 0.5% | 2024-10-13 | |
| CVE-2024-9904 | 07FLYCMS/07FLY-CMS/07FlyCRM pictureUpload unrestricted upload | 7.2v3.1 | 0.6% | 2024-10-13 | |
| CVE-2024-8070 | Schneider Electric EVlink Home Smart cleartext storage of sensitive information | 8.5CNA v3.1 | 0.1% | 2024-10-13 | Fix |
| CVE-2024-7099 | SQL injection in netease-youdao/Qanything | 9.8CNA v3.0 | 0.6% | 2024-10-13 | Fix |
| CVE-2024-6959 | Denial of service (DOS) in multipart boundary while uploading file in parisneo/lollms-webui | 7.1v3.1 | 0.2% | 2024-10-13 | |
| CVE-2024-49193 | Zendesk support ticket email handling vulnerability | 7.5CISA ADP v3.1 | 0.7% | 2024-10-12 | |
| CVE-2024-9903 | 07FLYCMS/07FLY-CMS/07FlyCRM fileUpload unrestricted upload | 7.2v3.1 | 0.6% | 2024-10-12 | |
| CVE-2024-9894 | code-projects Blood Bank System reset.php SQL injection | 8.8v3.1 | 0.5% | 2024-10-12 | |
| CVE-2024-9860 | Bridge Core WordPress plugin missing authorization to authenticated (Subscriber+) Demo import | 5.4CNA v3.1 | 0.3% | 2024-10-12 | Fix |
| CVE-2024-9824 | ImagePress WordPress plugin unauthorized access | 4.3CNA v3.1 | 0.3% | 2024-10-12 | Fix |
| CVE-2024-9821 | Bot for Telegram on WooCommerce WordPress plugin information disclosure | 8.8CNA v3.1 | 1.2% | 2024-10-12 | Exploit code |
| CVE-2024-9778 | ImagePress Image Gallery WordPress plugin cross-site request forgery to plugin settings update | 4.3v3.1 | 0.2% | 2024-10-12 | Fix |
| CVE-2024-9776 | ImagePress - Image Gallery WordPress plugin stored cross-site scripting | 4.8v3.1 | 0.3% | 2024-10-12 | Fix |
| CVE-2024-9756 | Order Attachments for WooCommerce attachment upload handler missing authorization | 4.3CNA v3.1 | 0.9% | 2024-10-12 | Exploit codeFix |
| CVE-2024-9704 | Social Sharing (by Danny) WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.2% | 2024-10-12 | Fix |
| CVE-2024-9696 | Rescue Shortcodes WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.2% | 2024-10-12 | Fix |
| CVE-2024-9670 | 2D Tag Cloud WordPress plugin reflected cross-site scripting via add_query_arg parameter | 6.1CNA v3.1 | 0.4% | 2024-10-12 | |
| CVE-2024-9656 | Mynx Page Builder WordPress plugin stored cross-site scripting | 6.4CNA v3.1 | 0.3% | 2024-10-12 | |
| CVE-2024-9595 | TablePress WordPress plugin authenticated (Author+) stored cross-site scripting | 5.4v3.1 | 0.3% | 2024-10-12 | Fix |
| CVE-2024-9592 | Easy PayPal Gift Certificate WordPress plugin cross-site request forgery | 6.1CNA v3.1 | 0.1% | 2024-10-12 | |
| CVE-2024-9187 | Read more By Adam WordPress plugin missing authorization authenticated read More Button deletion | 4.3CNA v3.1 | 0.3% | 2024-10-12 | |
| CVE-2024-9047 | WordPress File Upload WordPress plugin path traversal | 9.8CNA v3.1 | 93.3% | 2024-10-12 | NucleiExploit codeFix |
| CVE-2024-8915 | Category Icon WordPress plugin stored cross-site scripting | 6.4CNA v3.1 | 0.3% | 2024-10-12 | Fix |
| CVE-2024-8902 | Elementor Addon Elements WordPress plugin sensitive information exposure | 4.3v3.1 | 0.4% | 2024-10-12 | Fix |
| CVE-2024-8760 | Stackable Page Builder Gutenberg Blocks WordPress plugin unauthenticated CSS injection | 5.3CNA v3.1 | 0.4% | 2024-10-12 | Fix |
| CVE-2024-8757 | Boost Your Blog's Engagement with WP Post Author WordPress plugin SQL injection | 7.2CNA v3.1 | 0.5% | 2024-10-12 | Fix |
| CVE-2024-7489 | Forms for Mailchimp by Optin Cat WordPress plugin stored cross-site scripting | 4.4CNA v3.1 | 0.3% | 2024-10-12 | Fix |
| CVE-2024-48987 | Snipe-IT remote code execution | 6.6CISA ADP v3.1 | 1.0% | 2024-10-11 | Fix |
| CVE-2024-48938 | Znuny regular expression denial of service | 7.5v3.1 | 0.6% | 2024-10-11 | Fix |
| CVE-2024-48937 | Znuny cross-site scripting | 6.1v3.1 | 0.4% | 2024-10-11 | Fix |
| CVE-2024-48827 | Sbond Watcharr insufficient session expiration | 8.8CISA ADP v3.1 | 2.8% | 2024-10-11 | Exploit codeFix |
| CVE-2024-48813 | employee-management-system-php-and-mysql-free-download.html taskmatic SQL injection | 8.8CISA ADP v3.1 | 0.7% | 2024-10-11 | |
| CVE-2024-48788 | YesCam app firmware update process cleartext transmission of sensitive information | 7.5CISA ADP v3.1 | 0.6% | 2024-10-11 | |
| CVE-2024-48787 | Revic Optics Revic Ops app firmware update process incorrect authorization | 9.1CISA ADP v3.1 | 0.5% | 2024-10-11 | |
| CVE-2024-48786 | SwitchBot app firmware update process incorrect authorization | 9.1CISA ADP v3.1 | 0.5% | 2024-10-11 | |
| CVE-2024-48784 | SAMPMAX com.sampmax.homemax Incorrect improper access control | 9.8CISA ADP v3.1 | 0.5% | 2024-10-11 | |
| CVE-2024-48778 | Giant Manufacturing RideLink app firmware update process incorrect authorization | 9.1CISA ADP v3.1 | 0.4% | 2024-10-11 | |
| CVE-2024-48777 | LEDVANCE com.ledvance.smartplus.eu 2.1.10 allows a remote attacker to obtain sensitive information via the firmware update process. | 7.5CISA ADP v3.1 | 0.4% | 2024-10-11 | |
| CVE-2024-48776 | Shelly app firmware update process missing authentication | 7.5CISA ADP v3.1 | 0.4% | 2024-10-11 | |
| CVE-2024-48775 | Plug n Play Camera camera app firmware update process missing authentication | 7.5CISA ADP v3.1 | 0.4% | 2024-10-11 | |
| CVE-2024-48774 | Fermax Asia Pacific Vida app firmware update process missing authentication | 7.5CISA ADP v3.1 | 0.4% | 2024-10-11 | |
| CVE-2024-48773 | WoFit app firmware update process missing authentication | 7.5CISA ADP v3.1 | 0.4% | 2024-10-11 | |
| CVE-2024-48772 | C-CHIP app firmware update process incorrect authorization | 9.1CISA ADP v3.1 | 0.4% | 2024-10-11 | |
| CVE-2024-48771 | almando GmbH Almando Play app firmware update process missing authentication | 7.5CISA ADP v3.1 | 0.4% | 2024-10-11 | |
| CVE-2024-48770 | Plug n Play Camera camera app firmware update process insecure storage of sensitive information | 8.2CISA ADP v3.1 | 0.4% | 2024-10-11 | |
| CVE-2024-48769 | BURG-WCHTER KG KeyApp firmware update process incorrect authorization | 9.1CISA ADP v3.1 | 0.4% | 2024-10-11 | |
| CVE-2024-48768 | almaodo GmbH Almando Control app firmware update process missing authentication | 7.5CISA ADP v3.1 | 0.5% | 2024-10-11 | |
| CVE-2024-48041 | CM Tooltip Glossary WordPress plugin stored cross-site scripting | 6.5CNA v3.1 | 0.3% | 2024-10-11 | Fix |
| CVE-2024-48040 | Tainacan WordPress plugin SQL injection | 6.5NVD v3.1 | 0.5% | 2024-10-11 | Fix |
| CVE-2024-48033 | Talkback WordPress plugin PHP object injection | 9.8CNA v3.1 | 0.6% | 2024-10-11 | |
| CVE-2024-48020 | Backup and Staging by WP Time Capsule WordPress plugin SQL injection | 8.5CNA v3.1 | 0.5% | 2024-10-11 | Fix |
| CVE-2024-47884 | Insecure temporary file in `foxmarks` | 2.4CNA v4.0 | 0.2% | 2024-10-11 | Fix |
| CVE-2024-47877 | codeclysm Extract archive extraction path traversal | 6.9CNA v4.0 | 0.5% | 2024-10-11 | Fix |
| CVE-2024-47875 | cure53 DOMPurify cross-site scripting | 10.0CNA v3.1 | 1.1% | 2024-10-11 | Exploit codeFix |
| CVE-2024-47830 | Plane allows server side request forgery via /_next/image endpoint | 9.3CNA v3.1 | 0.6% | 2024-10-11 | Fix |
| CVE-2024-47509 | Juniper Networks Junos OS Evolved PFE management daemon resource exhaustion | 7.1CNA v4.0 | 0.4% | 2024-10-11 | Fix |
| CVE-2024-47508 | Juniper Networks Junos OS Evolved PFE management daemon resource exhaustion | 7.1CNA v4.0 | 0.4% | 2024-10-11 | Fix |
| CVE-2024-47507 | Juniper Networks Junos OS routing protocol daemon improper check for exceptional conditions | 6.9CNA v4.0 | 0.3% | 2024-10-11 | Fix |
| CVE-2024-47506 | Junos OS: SRX Series: A large amount of traffic being processed by ATP Cloud can lead to a PFE crash | 8.2CNA v4.0 | 0.3% | 2024-10-11 | Fix |
| CVE-2024-47505 | Juniper Networks Junos OS Evolved PFE management daemon resource exhaustion | 7.1CNA v4.0 | 0.4% | 2024-10-11 | Fix |
| CVE-2024-47504 | Junos OS: SRX5000 Series: Receipt of a specific malformed packet will cause a flowd crash | 8.7CNA v4.0 | 0.6% | 2024-10-11 | Fix |
| CVE-2024-47503 | Junos OS: SRX4600 and SRX5000 Series: Sequence of specific PIM packets causes a flowd crash | 7.1CNA v4.0 | 0.3% | 2024-10-11 | Fix |
| CVE-2024-47502 | Junos OS Evolved: TCP session state is not always cleared on the Routing Engine leading to DoS | 8.7CNA v4.0 | 0.6% | 2024-10-11 | Fix |
| CVE-2024-47501 | Juniper Networks Junos OS packet forwarding engine null pointer dereference | 6.8CNA v4.0 | 0.2% | 2024-10-11 | Fix |
| CVE-2024-47499 | Juniper Networks Junos OS routing protocol daemon improper check for exceptional conditions | 8.7CNA v4.0 | 0.6% | 2024-10-11 | Fix |
| CVE-2024-47498 | Junos OS Evolved: QFX5000 Series: Configured MAC learning and move limits are not in effect | 7.1CNA v4.0 | 0.3% | 2024-10-11 | Fix |
| CVE-2024-47497 | Juniper Networks Junos OS http daemon resource exhaustion | 8.7CNA v4.0 | 0.6% | 2024-10-11 | Fix |
| CVE-2024-47496 | Junos OS: MX Series: The PFE will crash on running specific command | 6.8CNA v4.0 | 0.2% | 2024-10-11 | Fix |
| CVE-2024-47495 | Juniper Networks Junos OS Evolved insecure direct object reference | 8.4CNA v4.0 | 0.2% | 2024-10-11 | Fix |
| CVE-2024-47494 | Junos OS: Due to a race condition AgentD process causes a memory corruption and FPC reset | 8.2CNA v4.0 | 0.4% | 2024-10-11 | Fix |
| CVE-2024-47493 | Junos OS: MX Series: Trio-based FPCs: Continuous physical interface flaps causes local FPC to crash | 7.1CNA v4.0 | 0.4% | 2024-10-11 | Fix |
| CVE-2024-47491 | Juniper Networks Junos OS Routing protocol daemon improper exception handling | 8.2CNA v4.0 | 0.6% | 2024-10-11 | Fix |
| CVE-2024-47490 | Juniper Networks Junos OS Evolved Packet Forwarding Engine improper channel restriction | 7.7CNA v4.0 | 0.6% | 2024-10-11 | Fix |
| CVE-2024-47489 | Juniper Networks Junos OS Evolved Packet Forwarding Engine improper exception handling | 6.9CNA v4.0 | 0.7% | 2024-10-11 | Fix |
| CVE-2024-47353 | ElementsReady Addons for Elementor WordPress plugin open redirection | 6.1v3.1 | 0.2% | 2024-10-11 | Fix |
| CVE-2024-47331 | Multi Step for Contact Form WordPress plugin unauthenticated SQL injection | 9.8v3.1 | 0.6% | 2024-10-11 | Fix |
| CVE-2024-47074 | Dataease PostgreSQL Data Source JDBC Connection parameters not Verified leads to deserialization | 9.3CNA v4.0 | 0.6% | 2024-10-11 | Fix |
| CVE-2024-46532 | OpenHIS v.1.0 SQL injection | 9.8CISA ADP v3.1 | 1.0% | 2024-10-11 | Exploit code |
| CVE-2024-46468 | jpress A server-side request forgery | 7.5CISA ADP v3.1 | 0.4% | 2024-10-11 | |
| CVE-2024-46215 | A vulnerability was discovered in KM08-708H-v1.1, There is a buffer overflow in the sub_445BDC() function within the /usr/sbin/goahead program; The strcpy function is executed without checking the length of the string, leading to a buffer overflow. | 6.5CISA ADP v3.1 | 3.0% | 2024-10-11 | |
| CVE-2024-46088 | Entersoft Customer Resource Management System unrestricted file upload | 9.8CISA ADP v3.1 | 0.6% | 2024-10-11 | |
| CVE-2024-45754 | Centreon BI Server reporting jobs listing SQL injection | 7.2CISA ADP v3.1 | 0.5% | 2024-10-11 | |
| CVE-2024-45403 | H2O assertion failure when HTTP/3 requests are cancelled | 3.7CNA v3.1 | 0.7% | 2024-10-11 | Fix |
| CVE-2024-45402 | h2o picotls TLS handshake parsing double free | 8.6CNA v3.1 | 0.5% | 2024-10-11 | Fix |
| CVE-2024-45397 | H2O alllows bypassing address-based access control with 0-RTT | 5.9CNA v3.1 | 0.4% | 2024-10-11 | Fix |
| CVE-2024-45396 | h2o quicly denial of service | 7.5CNA v3.1 | 0.6% | 2024-10-11 | Fix |
| CVE-2024-45317 | SonicWall SMA1000 server-side request forgery | 7.5CISA ADP v3.1 | 0.6% | 2024-10-11 | Fix |
| CVE-2024-45316 | SonicWall Connect Tunnel link following | 7.8CISA ADP v3.1 | 0.3% | 2024-10-11 | Fix |
| CVE-2024-45315 | SonicWall Connect Tunnel link following | 5.5CISA ADP v3.1 | 0.2% | 2024-10-11 | Fix |
| CVE-2024-45184 | Samsung Exynos 9820 buffer overflow | 6.2CISA ADP v3.1 | 0.2% | 2024-10-11 | Fix |
| CVE-2024-44807 | baserCMS plugin in D-ZERO CO directory listing | 5.3CISA ADP v3.1 | 0.5% | 2024-10-11 | |
| CVE-2024-44734 | MiroTalk roomAction request handling origin validation error | 7.5CISA ADP v3.1 | 0.4% | 2024-10-11 | |
| CVE-2024-44731 | MiroTalk chat messaging cross-site scripting | 4.7CISA ADP v3.1 | 0.4% | 2024-10-11 | |
| CVE-2024-44730 | MiroTalk chat message handling vulnerability | 9.1CISA ADP v3.1 | 0.4% | 2024-10-11 | |
| CVE-2024-44729 | MiroTalk server.js vulnerability | 7.5CISA ADP v3.1 | 0.7% | 2024-10-11 | |
| CVE-2024-44415 | DI-8200 dbsrv.asp buffer overflow | 6.5CISA ADP v3.1 | 0.4% | 2024-10-11 | |
| CVE-2024-44414 | FBM_292W msp_info.htm command injection | 8.8CISA ADP v3.1 | 1.5% | 2024-10-11 | Emerging Threats |
| CVE-2024-44413 | DI-8200 upgrade_filter.asp command injection | 8.8CISA ADP v3.1 | 3.1% | 2024-10-11 | |
| CVE-2024-44157 | Apple TV buffer overflow | 5.5v3.1 | 0.2% | 2024-10-11 | Fix |
| CVE-2024-42640 | Angular-base64-upload vulnerable to unauthenticated remote code execution | 9.8CISA ADP v3.1 | 40.0% | 2024-10-11 | NucleiExploit codeFix |
| CVE-2024-42018 | Atos Eviden SMC xScale node initialization configuration insecure storage of sensitive information | 7.7CISA ADP v3.1 | 0.4% | 2024-10-11 | |
| CVE-2024-39563 | Junos Space: Remote command execution (RCE) vulnerability in web application | 6.9CNA v4.0 | 1.3% | 2024-10-11 | Fix |
| CVE-2024-39547 | Junos OS and Junos OS Evolved: CRPD: Receipt of crafted TCP traffic can trigger high CPU utilization | 8.7CNA v4.0 | 1.0% | 2024-10-11 | Fix |
| CVE-2024-39544 | Junos OS Evolved: Low privileged local user able to view NETCONF traceoptions files | 5.1CNA v4.0 | 0.2% | 2024-10-11 | Fix |
| CVE-2024-39534 | Junos OS Evolved: Connections to the network and broadcast address accepted | 5.3CNA v4.0 | 0.7% | 2024-10-11 | Fix |
| CVE-2024-39527 | Junos OS: SRX Series: Low privileged user able to access sensitive information on file system | 6.8CNA v4.0 | 0.2% | 2024-10-11 | Fix |
| CVE-2024-39526 | Juniper Networks Junos OS packet processing improper exception handling | 7.1CNA v4.0 | 0.4% | 2024-10-11 | Fix |
| CVE-2024-38365 | btcd did not correctly re-implement Bitcoin Core's FindAndDelete functionality | 7.4CNA v3.1 | 1.0% | 2024-10-11 | Fix |
| CVE-2024-35522 | NETGEAR EX3700 command injection | 7.2v3.1 | 1.9% | 2024-10-11 | |
| CVE-2024-35517 | NETGEAR XR1000 command injection | 7.2v3.1 | 14.1% | 2024-10-11 | |
| CVE-2024-33582 | Lenovo Service Framework uncontrolled search path | 7.8CNA v3.1 | 0.2% | 2024-10-11 | Fix |
| CVE-2024-33581 | Lenovo PC Manager AI intelligent scenario uncontrolled search path | 7.8CNA v3.1 | 0.2% | 2024-10-11 | Fix |
| CVE-2024-33580 | Lenovo Personal Cloud uncontrolled search path | 7.8CNA v3.1 | 0.2% | 2024-10-11 | Fix |
| CVE-2024-33579 | Lenovo Baiying uncontrolled search path | 7.8CNA v3.1 | 0.2% | 2024-10-11 | Fix |
| CVE-2024-33578 | Lenovo Leyun uncontrolled search path | 7.8CNA v3.1 | 0.2% | 2024-10-11 | Fix |
| CVE-2024-25622 | H2O ignores headers configuration directives | 3.1CNA v3.1 | 0.5% | 2024-10-11 | |
| CVE-2024-21534 | jsonpath-plus JSONPath Plus remote code execution (RCE) | 9.8CNA v3.1 | 9.0% | 2024-10-11 | Exploit codeFix |
| CVE-2024-9859 | Google Chrome WebAssembly type confusion | 8.8v3.1 | 0.4% | 2024-10-11 | Fix |
| CVE-2024-9856 | 07FLYCMS/07FLY-CMS/07FlyCRM System settings page cross-site scripting | 4.8v3.1 | 0.4% | 2024-10-11 | |
| CVE-2024-9855 | 07FLYCMS/07FLY-CMS/07FlyCRM module Plug-In sysmodule_1 uploadFile unrestricted upload | 7.2v3.1 | 0.6% | 2024-10-11 | |
| CVE-2024-9822 | Pedalo Connector WordPress plugin authentication bypass to Administrator | 9.8CNA v3.1 | 0.9% | 2024-10-11 | Exploit code |
| CVE-2024-9707 | ThemeHunk Hunk Companion plugin REST API endpoint missing authorization | 9.8CNA v3.1 | 9.1% | 2024-10-11 | Reported exploitedNucleiExploit codeFix |
| CVE-2024-9616 | BlockMeister Block Pattern Builder WordPress plugin reflected cross-site scripting | 6.1CNA v3.1 | 0.4% | 2024-10-11 | Fix |
| CVE-2024-9611 | The Increase upload file size & Maximum Execution Time limit plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg without appropriate escaping on the URL in all versions up to, and including, 2.0. This makes it possible for unauthenticated attackers to | 6.1CNA v3.1 | 0.4% | 2024-10-11 | Fix |
| CVE-2024-9610 | Language Switcher WordPress plugin reflected cross-site scripting | 6.1CNA v3.1 | 0.4% | 2024-10-11 | Fix |
| CVE-2024-9587 | Linkz.ai WordPress plugin missing authorization authenticated plugin settings update | 4.3v3.1 | 0.4% | 2024-10-11 | Fix |
| CVE-2024-9586 | Linkz.ai WordPress plugin missing authorization to unauthenticated plugin settings update | 5.3v3.1 | 0.4% | 2024-10-11 | Fix |
| CVE-2024-9543 | Powerpress WordPress plugin stored cross-site scripting | 6.4CNA v3.1 | 0.3% | 2024-10-11 | Fix |
| CVE-2024-9539 | GitHub Enterprise Server information disclosure | 5.7CNA v4.0 | 0.6% | 2024-10-11 | Fix |
| CVE-2024-9538 | ShopLentor WordPress plugin sensitive information exposure | 6.5v3.1 | 0.4% | 2024-10-11 | Fix |
| CVE-2024-9507 | Contact Form by Bit Form: Multi Step Form WordPress plugin arbitrary file read | 4.9CNA v3.1 | 0.5% | 2024-10-11 | Fix |
| CVE-2024-9436 | PublishPress Revisions: Duplicate Posts WordPress plugin reflected cross-site scripting | 6.1CNA v3.1 | 0.4% | 2024-10-11 | Fix |
| CVE-2024-9346 | Embed videos and respect privacy WordPress plugin reflected cross-site scripting | 6.1CNA v3.1 | 0.4% | 2024-10-11 | Fix |
| CVE-2024-9234 | GutenKit WordPress plugin unauthenticated arbitrary file upload | 9.8CNA v3.1 | 10.4% | 2024-10-11 | NucleiExploit codeFix |
| CVE-2024-9232 | Download Plugins and Themes in ZIP from Dashboard WordPress plugin reflected cross-site scripting | 6.1CNA v3.1 | 0.4% | 2024-10-11 | Fix |
| CVE-2024-9221 | Tainacan WordPress plugin reflected cross-site scripting | 6.1CNA v3.1 | 0.4% | 2024-10-11 | Fix |
| CVE-2024-9211 | FULL Cliente WordPress plugin reflected cross-site scripting | 6.1CNA v3.1 | 0.4% | 2024-10-11 | Fix |
| CVE-2024-9164 | Missing authentication for critical function in GitLab | 9.6CNA v3.1 | 1.0% | 2024-10-11 | Fix |
| CVE-2024-9051 | WP Ultimate Post Grid WordPress plugin stored cross-site scripting | 6.4CNA v3.1 | 0.3% | 2024-10-11 | Fix |
| CVE-2024-9046 | Lenovo stARstudio uncontrolled search path | 7.8CNA v3.1 | 0.2% | 2024-10-11 | Fix |
| CVE-2024-9002 | Schneider Electric Easergy Studio improper privilege management | 7.8CNA v3.1 | 0.2% | 2024-10-11 | Fix |
| CVE-2024-8970 | Incorrect authorization in GitLab | 8.2CNA v3.1 | 0.6% | 2024-10-11 | Fix |
| CVE-2024-8913 | The Plus Addons for Elementor WordPress plugin information disclosure | 4.3CNA v3.1 | 0.4% | 2024-10-11 | Fix |
| CVE-2024-8912 | Google HTTP request smuggling in Looker | 8.9CNA v4.0 | 0.2% | 2024-10-11 | Fix |
| CVE-2024-8755 | Progress LoadMaster OS command injection | 8.4CNA v3.1 | 1.2% | 2024-10-11 | Fix |
| CVE-2024-8531 | Schneider Electric Data Center Expert improper signature verification | 7.2CNA v3.1 | 0.5% | 2024-10-11 | Fix |
| CVE-2024-8530 | Schneider Electric Data Center Expert missing authentication | 5.9CNA v3.1 | 0.5% | 2024-10-11 | Fix |
| CVE-2024-8376 | Eclipse Foundation Mosquitto memory leak | 7.2CNA v4.0 | 0.7% | 2024-10-11 | Fix |
| CVE-2024-7514 | WordPress Comments Import and Export plugin arbitrary file read | 6.5CNA v3.1 | 1.1% | 2024-10-11 | Exploit codeFix |
| CVE-2024-6985 | Path traversal in API open_personality_folder in parisneo/lollms-webui | 4.4v3.1 | 0.4% | 2024-10-11 | Fix |
| CVE-2024-6971 | Path traversal in parisneo/lollms-webui | 4.4v3.1 | 0.3% | 2024-10-11 | |
| CVE-2024-6657 | BLE peripheral DoS after few cycles of connect/disconnects | 6.5CNA v3.1 | 0.2% | 2024-10-11 | |
| CVE-2024-5474 | Lenovo Dolby Vision Provisioning software incorrect default permissions | 5.5CNA v3.1 | 0.1% | 2024-10-11 | Fix |
| CVE-2024-5005 | Incorrect provision of specified functionality in GitLab | 4.3CNA v3.1 | 0.4% | 2024-10-11 | Fix |
| CVE-2024-4132 | Lenovo Lock Screen uncontrolled search path | 7.8CNA v3.1 | 0.2% | 2024-10-11 | Fix |
| CVE-2024-4131 | Lenovo Emulator uncontrolled search path | 7.8CNA v3.1 | 0.2% | 2024-10-11 | Fix |
| CVE-2024-4130 | Lenovo App Store uncontrolled search path | 7.8CNA v3.1 | 0.2% | 2024-10-11 | Fix |
| CVE-2024-4089 | Lenovo SuperFile uncontrolled search path | 7.8CNA v3.1 | 0.2% | 2024-10-11 | Fix |
| CVE-2024-48958 | libarchive out-of-bounds read | 7.8v3.1 | 0.6% | 2024-10-10 | Fix |
| CVE-2024-48957 | libarchive out-of-bounds read | 7.8v3.1 | 0.5% | 2024-10-10 | Fix |
| CVE-2024-48949 | Elliptic's verify function omits uniqueness validation | 9.1v3.1 | 0.5% | 2024-10-10 | Fix |
| CVE-2024-48942 | syracom Secure Login improper interaction frequency control | 5.9NVD v3.1 | 0.5% | 2024-10-10 | Fix |
| CVE-2024-48941 | syracom Secure Login incorrect privilege assignment | 5.4NVD v3.1 | 0.3% | 2024-10-10 | Fix |
| CVE-2024-48902 | JetBrains YouTrack missing authorization | 5.4CNA v3.1 | 0.4% | 2024-10-10 | Fix |
| CVE-2024-47966 | Delta Electronics CNCSoft-G2 uninitialized variable use | 7.8v3.1 | 0.2% | 2024-10-10 | Fix |
| CVE-2024-47965 | Out-of-bounds read vulnerability in Delta Electronics CNCSoft-G2 | 7.8v3.1 | 0.2% | 2024-10-10 | Fix |
| CVE-2024-47964 | Heap-based buffer overflow vulnerability in Delta Electronics CNCSoft-G2 | 7.8v3.1 | 0.3% | 2024-10-10 | Fix |
| CVE-2024-47963 | Out-of-bounds write vulnerability in Delta Electronics CNCSoft-G2 | 7.8v3.1 | 0.3% | 2024-10-10 | Fix |
| CVE-2024-47962 | Stack-based buffer overflow vulnerability in Delta Electronics CNCSoft-G2 | 7.8v3.1 | 3.4% | 2024-10-10 | Fix |
| CVE-2024-47872 | Cross-site scripting on Gradio server via upload of HTML files, JS files, or SVG files | 6.9CNA v4.0 | 0.3% | 2024-10-10 | Fix |
| CVE-2024-47871 | Insecure communication between the FRP client and server in Gradio | 8.2CNA v4.0 | 0.2% | 2024-10-10 | Fix |
| CVE-2024-47870 | Race condition in update_root_in_config may redirect user traffic in Gradio | 7.1CNA v4.0 | 0.4% | 2024-10-10 | Fix |
| CVE-2024-47869 | Non-constant-time comparison when comparing hashes in Gradio | 2.3CNA v4.0 | 0.3% | 2024-10-10 | Fix |
| CVE-2024-47868 | Several components’ post-process steps may allow arbitrary file leaks in Gradio | 6.3CNA v4.0 | 0.8% | 2024-10-10 | Fix |
| CVE-2024-47867 | Lack of integrity check on the downloaded FRP client in Gradio | 2.1CNA v4.0 | 0.2% | 2024-10-10 | Fix |
| CVE-2024-47648 | EventPrime WordPress plugin open redirection | 6.1v3.1 | 0.3% | 2024-10-10 | Fix |
| CVE-2024-47636 | WP JobSearch WordPress plugin PHP object injection | 9.8v3.1 | 0.6% | 2024-10-10 | Fix |
| CVE-2024-47354 | Simple Membership After Login Redirection WordPress plugin open redirection | 4.7CNA v3.1 | 0.3% | 2024-10-10 | Fix |
| CVE-2024-47168 | The `enable_monitoring` flag set to `False` does not disable monitoring in Gradio | 2.3CNA v4.0 | 0.3% | 2024-10-10 | Fix |
| CVE-2024-47167 | SSRF in the path parameter of /queue/join in Gradio | 6.9CNA v4.0 | 0.5% | 2024-10-10 | Fix |
| CVE-2024-47166 | One-level read path traversal in `/custom_component` in Gradio | 2.3CNA v4.0 | 0.4% | 2024-10-10 | Fix |
| CVE-2024-47165 | CORS origin validation accepts the null origin in Gradio | 6.9CNA v4.0 | 0.3% | 2024-10-10 | Fix |
| CVE-2024-47164 | The `is_in_or_equal` function may be bypassed in Gradio | 2.3CNA v4.0 | 0.7% | 2024-10-10 | Fix |
| CVE-2024-47084 | CORS origin validation is not performed when the request has a cookie in Gradio | 6.9CNA v4.0 | 0.5% | 2024-10-10 | Fix |
| CVE-2024-45149 | Adobe Commerce improper access control | 2.7CNA v3.1 | 0.5% | 2024-10-10 | Fix |
| CVE-2024-45148 | Adobe Commerce improper authentication | 8.8CNA v3.1 | 0.7% | 2024-10-10 | Fix |
| CVE-2024-45135 | Adobe Commerce improper access control | 2.7CNA v3.1 | 0.6% | 2024-10-10 | Fix |
| CVE-2024-45134 | Adobe Commerce information exposure | 2.7CNA v3.1 | 0.6% | 2024-10-10 | Fix |
| CVE-2024-45133 | Adobe Commerce improper access control | 2.7CNA v3.1 | 0.6% | 2024-10-10 | Fix |
| CVE-2024-45132 | Adobe Commerce incorrect authorization | 6.5CNA v3.1 | 0.7% | 2024-10-10 | Fix |
| CVE-2024-45131 | Adobe Commerce incorrect authorization | 5.4CNA v3.1 | 0.5% | 2024-10-10 | Fix |
| CVE-2024-45130 | Adobe Commerce improper access control | 4.3CNA v3.1 | 0.5% | 2024-10-10 | Fix |
| CVE-2024-45129 | Adobe Commerce improper access control | 4.3CNA v3.1 | 0.5% | 2024-10-10 | Fix |
| CVE-2024-45128 | Adobe Commerce incorrect authorization | 5.4CNA v3.1 | 0.6% | 2024-10-10 | Fix |
| CVE-2024-45127 | Adobe Commerce cross-site scripting (stored XSS) | 4.8CNA v3.1 | 0.5% | 2024-10-10 | Fix |
| CVE-2024-45125 | Adobe Commerce incorrect authorization | 4.3CNA v3.1 | 0.5% | 2024-10-10 | Fix |
| CVE-2024-45124 | Adobe Commerce improper access control | 5.3CNA v3.1 | 0.6% | 2024-10-10 | Fix |
| CVE-2024-45123 | Adobe Commerce cross-site scripting (reflected XSS) | 6.1CNA v3.1 | 0.5% | 2024-10-10 | Fix |
| CVE-2024-45122 | Adobe Commerce improper access control | 4.3CNA v3.1 | 0.6% | 2024-10-10 | Fix |
| CVE-2024-45121 | Adobe Commerce improper access control | 4.3CNA v3.1 | 0.5% | 2024-10-10 | Fix |
| CVE-2024-45120 | Adobe Commerce time-of-check time-of-use (TOCTOU) race condition | 3.1CNA v3.1 | 0.4% | 2024-10-10 | Fix |
| CVE-2024-45119 | Adobe Commerce server-side request forgery (SSRF) | 4.9CNA v3.1 | 0.9% | 2024-10-10 | Fix |
| CVE-2024-45118 | Adobe Commerce improper access control | 6.5CNA v3.1 | 0.6% | 2024-10-10 | Fix |
| CVE-2024-45117 | Adobe Commerce improper input validation | 7.6CNA v3.1 | 0.8% | 2024-10-10 | Fix |
| CVE-2024-45116 | Adobe Commerce cross-site scripting (XSS) | 8.1CNA v3.1 | 0.9% | 2024-10-10 | Fix |
| CVE-2024-45115 | Adobe Commerce improper authentication | 9.8CNA v3.1 | 1.3% | 2024-10-10 | Fix |
| CVE-2024-35202 | Bitcoin Core resource exhaustion | 7.5CISA ADP v3.1 | 0.9% | 2024-10-10 | Fix |
| CVE-2024-22068 | Weak password vulnerability in ZTE ZSR V2 Intelligent Multi Service Router | 6.0CNA v3.1 | 0.2% | 2024-10-10 | Fix |
| CVE-2024-9818 | SourceCodester Online Veterinary Appointment System manage_category.php SQL injection | 9.8v3.1 | 0.6% | 2024-10-10 | |
| CVE-2024-9817 | code-projects Blood Bank System update.php SQL injection | 8.8v3.1 | 0.5% | 2024-10-10 | |
| CVE-2024-9816 | Codezips Tourist Management System change-image.php unrestricted upload | 7.2v3.1 | 0.6% | 2024-10-10 | |
| CVE-2024-9815 | Codezips Tourist Management System create-package.php unrestricted upload | 7.2v3.1 | 0.6% | 2024-10-10 | |
| CVE-2024-9814 | Codezips Pharmacy Management System update.php SQL injection | 9.8v3.1 | 0.7% | 2024-10-10 | |
| CVE-2024-9813 | Codezips Pharmacy Management System register.php SQL injection | 9.8v3.1 | 0.7% | 2024-10-10 | |
| CVE-2024-9812 | code-projects Crud Operation System delete.php SQL injection | 9.8v3.1 | 0.7% | 2024-10-10 | |
| CVE-2024-9811 | code-projects Restaurant Reservation System filter3.php SQL injection | 9.8v3.1 | 0.7% | 2024-10-10 | |
| CVE-2024-9810 | SourceCodester Record Management System sort2_user.php cross-site scripting | 6.1v3.1 | 0.5% | 2024-10-10 | |
| CVE-2024-9809 | SourceCodester Online Eyewear Shop Master.php delete_product SQL injection | 6.5v3.1 | 0.4% | 2024-10-10 | |
| CVE-2024-9808 | SourceCodester Online Eyewear Shop SQL injection | 6.5v3.1 | 0.4% | 2024-10-10 | |
| CVE-2024-9807 | Craig Rodway Classroombookings Session page sessions cross-site scripting | 4.8v3.1 | 0.5% | 2024-10-10 | |
| CVE-2024-9806 | Craig Rodway Classroombookings Room page fields cross-site scripting | 4.8v3.1 | 0.5% | 2024-10-10 | |
| CVE-2024-9805 | code-projects Blood Bank System campsdetails.php cross-site scripting | 5.4v3.1 | 0.4% | 2024-10-10 | |
| CVE-2024-9804 | code-projects Blood Bank System campsdetails.php SQL injection | 4.9v3.1 | 0.5% | 2024-10-10 | |
| CVE-2024-9803 | code-projects Blood Bank Management System blooddetails.php cross-site scripting | 5.4v3.1 | 0.5% | 2024-10-10 | |
| CVE-2024-9802 | Zowe API Mediation Layer conformance validation endpoint information disclosure | 5.3CNA v3.1 | 0.2% | 2024-10-10 | Fix |
| CVE-2024-9799 | SourceCodester Profile Registration without Reload Refresh add.php cross-site scripting | 6.1v3.1 | 0.5% | 2024-10-10 | |
| CVE-2024-9798 | Zowe API Mediation Layer health endpoint information disclosure | 5.3CNA v3.1 | 0.2% | 2024-10-10 | Fix |
| CVE-2024-9797 | code-projects Blood Bank System register.php SQL injection | 7.5v3.1 | 0.6% | 2024-10-10 | |
| CVE-2024-9796 | WP-Advanced-Search WordPress plugin unauthenticated SQL injection | 9.8NVD v3.1 | 3.0% | 2024-10-10 | NucleiExploit codeFix |
| CVE-2024-9794 | Codezips Online Shopping Portal update-image1.php unrestricted upload | 9.8v3.1 | 0.7% | 2024-10-10 | |
| CVE-2024-9793 | Tenda AC1206 ate ate_ifconfig_set command injection | 9.8v3.1 | 23.1% | 2024-10-10 | |
| CVE-2024-9792 | D-Link DSL-2750U Port Forwarding page cross-site scripting | 6.1v3.1 | 0.7% | 2024-10-10 | |
| CVE-2024-9790 | LyLme_spage sou.php SQL injection | 7.2v3.1 | 0.6% | 2024-10-10 | |
| CVE-2024-9789 | LyLme_spage apply.php SQL injection | 7.2v3.1 | 0.6% | 2024-10-10 | |
| CVE-2024-9788 | LyLme_spage tag.php SQL injection | 7.2v3.1 | 0.6% | 2024-10-10 | |
| CVE-2024-9787 | Contemporary Control System BASrouter BACnet BASRT-B UDP Packet denial of service | 5.3v3.1 | 0.6% | 2024-10-10 | |
| CVE-2024-9786 | D-Link DIR-619L B1 formSetLog buffer overflow | 8.8v3.1 | 1.6% | 2024-10-10 | |
| CVE-2024-9785 | D-Link DIR-619L B1 formSetDDNS buffer overflow | 8.8v3.1 | 1.5% | 2024-10-10 | |
| CVE-2024-9784 | D-Link DIR-619L B1 formResetStatistic buffer overflow | 8.8v3.1 | 1.0% | 2024-10-10 | |
| CVE-2024-9783 | D-Link DIR-619L B1 formLogDnsquery buffer overflow | 8.8v3.1 | 1.0% | 2024-10-10 | |
| CVE-2024-9782 | D-Link DIR-619L B1 formEasySetupWWConfig buffer overflow | 8.8v3.1 | 1.1% | 2024-10-10 | |
| CVE-2024-9781 | Improper Handling of Missing Values in Wireshark | 7.8CNA v3.1 | 0.3% | 2024-10-10 | Fix |
| CVE-2024-9780 | Missing Initialization of a variable in Wireshark | 7.8CNA v3.1 | 0.2% | 2024-10-10 | Fix |
| CVE-2024-9685 | Notification for Telegram missing authorization | 4.3v3.1 | 0.3% | 2024-10-10 | Fix |
| CVE-2024-9623 | Incorrect authorization in GitLab | 4.9CNA v3.1 | 0.3% | 2024-10-10 | Fix |
| CVE-2024-9596 | Inclusion of sensitive information in source code in GitLab | 3.7CNA v3.1 | 0.3% | 2024-10-10 | Fix |
| CVE-2024-9581 | Shortcodes AnyWhere WordPress plugin unauthenticated arbitrary shortcode execution | 7.3CNA v3.1 | 0.5% | 2024-10-10 | |
| CVE-2024-9522 | WP Users Masquerade WordPress plugin authenticated (Subscriber+) authentication bypass | 8.8CNA v3.1 | 0.5% | 2024-10-10 | |
| CVE-2024-9520 | UserPlus WordPress plugin missing authorization via Multiple Functions | 5.4v3.1 | 0.3% | 2024-10-10 | |
| CVE-2024-9519 | UserPlus WordPress plugin authenticated (Editor+) Registration form update to privilege escalation | 7.2CNA v3.1 | 0.5% | 2024-10-10 | |
| CVE-2024-9518 | UserPlus WordPress plugin unauthenticated privilege escalation | 9.8CNA v3.1 | 0.5% | 2024-10-10 | |
| CVE-2024-9487 | GitHub Enterprise Server SAML SSO improper signature verification | 9.5CNA v4.0 | 25.6% | 2024-10-10 | NucleiEmerging ThreatsFix |
| CVE-2024-9457 | WP Builder WordPress plugin authenticated (Author+) stored cross-site scripting via SVG file upload | 5.4v3.1 | 0.3% | 2024-10-10 | |
| CVE-2024-9377 | Products, Order and Customers Export for WooCommerce WordPress plugin reflected cross-site scripting | 6.1CNA v3.1 | 0.4% | 2024-10-10 | Fix |
| CVE-2024-9312 | Authd allows attacker-controlled usernames to yield controllable UIDs | 7.5CNA v3.1 | 0.3% | 2024-10-10 | Fix |
| CVE-2024-9205 | Maximum Products per User for WooCommerce WordPress plugin reflected cross-site scripting | 6.1CNA v3.1 | 0.4% | 2024-10-10 | Fix |
| CVE-2024-9201 | SQL injection vulnerability in Seur plugin | 9.8v3.1 | 0.5% | 2024-10-10 | Fix |
| CVE-2024-9180 | Vault Operators in Root Namespace may Elevate their Privileges | 7.2CNA v3.1 | 0.5% | 2024-10-10 | Fix |
| CVE-2024-9156 | TI WooCommerce Wishlist WordPress plugin unauthenticated SQL injection via lang parameters | 7.5NVD v3.1 | 0.4% | 2024-10-10 | Fix |
| CVE-2024-9074 | Advanced Blocks Pro WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.2% | 2024-10-10 | |
| CVE-2024-9072 | GDPR-Extensions-com Consent Manager WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.3% | 2024-10-10 | Fix |
| CVE-2024-9067 | Youzify WordPress plugin unauthorized access | 4.3CNA v3.1 | 0.3% | 2024-10-10 | Fix |
| CVE-2024-9066 | Marketing and SEO Booster WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.2% | 2024-10-10 | Fix |
| CVE-2024-9065 | WP Helper Premium WordPress plugin missing authorization in whp_smtp_send_mail_test | 5.3CNA v3.1 | 0.4% | 2024-10-10 | Fix |
| CVE-2024-9064 | Elementor Inline SVG WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.3% | 2024-10-10 | Fix |
| CVE-2024-9057 | Curator.io feed_id attribute stored cross-site scripting | 5.4v3.1 | 0.3% | 2024-10-10 | Fix |
| CVE-2024-9022 | TS Poll Survey, Versus Poll, Image Poll, Video Poll WordPress plugin SQL injection | 7.2CNA v3.1 | 1.0% | 2024-10-10 | Fix |
| CVE-2024-8987 | Youzify WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.3% | 2024-10-10 | Fix |
| CVE-2024-8977 | Server-side request forgery (SSRF) in GitLab | 8.2CNA v3.1 | 0.6% | 2024-10-10 | Fix |
| CVE-2024-8729 | Easy Social Share Buttons WordPress plugin reflected cross-site scripting | 6.1v3.1 | 0.3% | 2024-10-10 | |
| CVE-2024-8513 | QA Analytics WordPress plugin missing authorization to unauthenticated settings update | 5.3CNA v3.1 | 0.4% | 2024-10-10 | Fix |
| CVE-2024-8477 | Newsletter WordPress plugin cross-site request forgery | 4.3CNA v3.1 | 0.2% | 2024-10-10 | Fix |
| CVE-2024-7048 | IDOR in open-webui/open-webui | 5.4v3.1 | 0.4% | 2024-10-10 | |
| CVE-2024-6747 | Checkmk information leak in mknotifyd | 5.3CNA v3.1 | 0.4% | 2024-10-10 | Fix |
| CVE-2024-6530 | Improper neutralization of input during web page generation (cross-site scripting) in GitLab | 7.3CNA v3.1 | 2.2% | 2024-10-10 | Fix |
| CVE-2024-6157 | ABB RobotWare 6 null pointer dereference | 5.1CNA v3.1 | 0.2% | 2024-10-10 | |
| CVE-2024-4658 | SQLi in TE Informatics' Nova CMS | 6.9CNA v4.0 | 0.4% | 2024-10-10 | Fix |
| CVE-2024-48933 | lemonldap-ng Lemonldap cross-site scripting | 6.1v3.1 | 0.3% | 2024-10-09 | Fix |
| CVE-2024-47833 | Session Cookie without Secure and HTTPOnly flags in taipy | 6.3CNA v4.0 | 0.3% | 2024-10-09 | Fix |
| CVE-2024-47832 | XML Signature Bypass via differential XML parsing in ssoready | 9.3CNA v4.0 | 0.4% | 2024-10-09 | Fix |
| CVE-2024-47828 | Cross-site request forgery in ampache | 5.3CNA v3.1 | 0.3% | 2024-10-09 | |
| CVE-2024-47816 | Users can impersonate import requesters if their actor IDs coincide in ImportDump | 6.4CNA v3.1 | 0.3% | 2024-10-09 | |
| CVE-2024-47815 | Cross-site scripting in IncidentReporting | 6.0CNA v3.1 | 0.4% | 2024-10-09 | |
| CVE-2024-47813 | Wasmtime race condition could lead to WebAssembly control-flow integrity and type safety violations | 2.9CNA v3.1 | 0.2% | 2024-10-09 | Fix |
| CVE-2024-47812 | Cross-site scripting (XSS) on Special:RequestImportQueue when displaying request date in ImportDump | 6.0CNA v3.1 | 0.4% | 2024-10-09 | |
| CVE-2024-47763 | Wasmtime runtime crash when combining tail calls with trapping imports | 5.5CNA v3.1 | 0.2% | 2024-10-09 | Fix |
| CVE-2024-47673 | Linux kernel iwlwifi mvm driver vulnerability | 5.5v3.1 | 0.2% | 2024-10-09 | Fix |
| CVE-2024-47671 | Linux kernel usbtmc driver information disclosure | 5.5v3.1 | 0.2% | 2024-10-09 | Fix |
| CVE-2024-47670 | Linux kernel ocfs2 extended attributes out-of-bounds write | 7.8CNA v3.1 | 0.2% | 2024-10-09 | Fix |
| CVE-2024-47669 | Linux kernel nilfs2 log writer denial of service | 7.3CNA v3.1 | 0.2% | 2024-10-09 | Fix |
| CVE-2024-47668 | Linux kernel generic radix tree race condition | 7.8CNA v3.1 | 0.2% | 2024-10-09 | Fix |
| CVE-2024-47667 | Linux kernel PCI Keystone driver denial of service | 7.3CNA v3.1 | 0.2% | 2024-10-09 | Fix |
| CVE-2024-47666 | Linux kernel pm80xx crash | 5.5v3.1 | 0.2% | 2024-10-09 | Fix |
| CVE-2024-47665 | Linux kernel MIPI I3C HCI driver denial of service | 5.5v3.1 | 0.2% | 2024-10-09 | Fix |
| CVE-2024-47664 | Linux kernel hisi-kunpeng divide by zero | 5.5v3.1 | 0.2% | 2024-10-09 | Fix |
| CVE-2024-47663 | Linux kernel AD9834 DDS driver divide by zero | 5.5v3.1 | 0.2% | 2024-10-09 | Fix |
| CVE-2024-47662 | Linux kernel DCN35 DMCUB diagnostics vulnerability | 5.5v3.1 | 0.2% | 2024-10-09 | Fix |
| CVE-2024-47661 | Linux kernel AMD display driver integer overflow | 5.5NVD v3.1 | 0.2% | 2024-10-09 | Fix |
| CVE-2024-47660 | Linux kernel fsnotify directory watch race condition | 4.7NVD v3.1 | 0.2% | 2024-10-09 | Fix |
| CVE-2024-47659 | Linux kernel Smack security module vulnerability | 9.1CNA v3.1 | 0.8% | 2024-10-09 | Fix |
| CVE-2024-47658 | Linux kernel STM32 crypto driver vulnerability | 7.5CNA v3.1 | 0.5% | 2024-10-09 | Fix |
| CVE-2024-47425 | Adobe FrameMaker integer underflow (wrap or wraparound) | 7.8CNA v3.1 | 0.3% | 2024-10-09 | Fix |
| CVE-2024-47424 | Adobe FrameMaker integer overflow or wraparound | 7.8CNA v3.1 | 0.3% | 2024-10-09 | Fix |
| CVE-2024-47423 | Adobe FrameMaker unrestricted upload of file with dangerous type | 7.8CNA v3.1 | 0.3% | 2024-10-09 | Fix |
| CVE-2024-47422 | Adobe FrameMaker untrusted search path | 7.8CNA v3.1 | 0.4% | 2024-10-09 | Fix |
| CVE-2024-47421 | Adobe FrameMaker out-of-bounds read | 7.8CNA v3.1 | 0.4% | 2024-10-09 | Fix |
| CVE-2024-47420 | Adobe Animate out-of-bounds read | 5.5CNA v3.1 | 0.3% | 2024-10-09 | Fix |
| CVE-2024-47419 | Adobe Animate out-of-bounds read | 5.5CNA v3.1 | 0.3% | 2024-10-09 | Fix |
| CVE-2024-47418 | Adobe Animate use-after-free | 7.8CNA v3.1 | 0.4% | 2024-10-09 | Fix |
| CVE-2024-47417 | Adobe Animate heap-based buffer overflow | 7.8CNA v3.1 | 0.4% | 2024-10-09 | Fix |
| CVE-2024-47416 | Adobe Animate integer overflow or wraparound | 7.8CNA v3.1 | 0.4% | 2024-10-09 | Fix |
| CVE-2024-47415 | Adobe Animate use-after-free | 7.8CNA v3.1 | 0.4% | 2024-10-09 | Fix |
| CVE-2024-47414 | Adobe Animate use-after-free | 7.8CNA v3.1 | 0.4% | 2024-10-09 | Fix |
| CVE-2024-47413 | Adobe Animate use-after-free | 7.8CNA v3.1 | 0.4% | 2024-10-09 | Fix |
| CVE-2024-47412 | Adobe Animate use-after-free | 7.8CNA v3.1 | 0.4% | 2024-10-09 | Fix |
| CVE-2024-47411 | Adobe Animate access of uninitialized pointer | 7.8CNA v3.1 | 0.4% | 2024-10-09 | Fix |
| CVE-2024-47410 | Adobe Animate stack-based buffer overflow | 7.8CNA v3.1 | 0.4% | 2024-10-09 | Fix |
| CVE-2024-47334 | Zoho Flow for WordPress plugin SQL injection | 7.6CNA v3.1 | 0.4% | 2024-10-09 | Fix |
| CVE-2024-47191 | oath-toolkit pam_oath.so usersfile handling privilege escalation | 7.1CISA ADP v3.1 | 0.3% | 2024-10-09 | Fix |
| CVE-2024-46871 | Linux kernel AMD display DMUB notifications vulnerability | 7.8v3.1 | 0.2% | 2024-10-09 | Fix |
| CVE-2024-46870 | Linux kernel AMD display DMCUB race condition | 4.7v3.1 | 0.1% | 2024-10-09 | Fix |
| CVE-2024-46316 | DrayTek Vigor3900 OS command injection | 8.0CISA ADP v3.1 | 1.1% | 2024-10-09 | |
| CVE-2024-46307 | SparkShop improper workflow enforcement | 7.5v3.1 | 0.5% | 2024-10-09 | |
| CVE-2024-46304 | libcoap v4.3.5-rc2 and below null pointer dereference | 7.5CISA ADP v3.1 | 0.6% | 2024-10-09 | Fix |
| CVE-2024-46292 | Trustwave ModSecurity buffer overflow | 7.5CISA ADP v3.1 | 0.8% | 2024-10-09 | Fix |
| CVE-2024-46237 | PHPGurukul Hospital Management System cross-site scripting | 5.4v3.1 | 0.3% | 2024-10-09 | |
| CVE-2024-45746 | Trusted Firmware-M mailbox message argument validation out-of-bounds write | 9.8CISA ADP v3.1 | 0.8% | 2024-10-09 | |
| CVE-2024-45720 | Apache Subversion: Command line argument injection on Windows platforms | 8.2CNA v3.1 | 0.6% | 2024-10-09 | Fix |
| CVE-2024-45179 | C-mor Video Surveillance improper equivalence validation | 7.2CISA ADP v3.1 | 2.6% | 2024-10-09 | |
| CVE-2024-45160 | LemonLDAP::NG OAuth2 client authentication authentication bypass | 9.1CISA ADP v3.1 | 0.5% | 2024-10-09 | Fix |
| CVE-2024-45152 | Adobe Substance3D Stager out-of-bounds write | 7.8CNA v3.1 | 0.3% | 2024-10-09 | Fix |
| CVE-2024-45150 | Adobe Dimension out-of-bounds write | 7.8CNA v3.1 | 0.3% | 2024-10-09 | Fix |
| CVE-2024-45146 | Adobe Dimension use-after-free | 7.8CNA v3.1 | 0.4% | 2024-10-09 | Fix |
| CVE-2024-45145 | Adobe Lightroom Desktop out-of-bounds read | 5.5CNA v3.1 | 0.2% | 2024-10-09 | Fix |
| CVE-2024-45144 | Adobe Substance3D Stager out-of-bounds write | 7.8CNA v3.1 | 0.3% | 2024-10-09 | Fix |
| CVE-2024-45143 | Adobe Substance3D Stager heap-based buffer overflow | 7.8CNA v3.1 | 0.3% | 2024-10-09 | Fix |
| CVE-2024-45142 | Adobe Substance3D Stager write-what-where condition | 7.8CNA v3.1 | 0.3% | 2024-10-09 | Fix |
| CVE-2024-45141 | Adobe Substance3D Stager out-of-bounds write | 7.8CNA v3.1 | 0.3% | 2024-10-09 | Fix |
| CVE-2024-45140 | Adobe Substance3D Stager out-of-bounds write | 7.8CNA v3.1 | 0.3% | 2024-10-09 | Fix |
| CVE-2024-45139 | Adobe Substance3D Stager heap-based buffer overflow | 7.8CNA v3.1 | 0.3% | 2024-10-09 | Fix |
| CVE-2024-45138 | Adobe Substance3D Stager use-after-free | 7.8CNA v3.1 | 0.4% | 2024-10-09 | Fix |
| CVE-2024-45137 | Adobe InDesign Desktop unrestricted upload of file with dangerous type | 7.8CNA v3.1 | 0.3% | 2024-10-09 | Fix |
| CVE-2024-45136 | Adobe InCopy unrestricted upload of file with dangerous type | 7.8CNA v3.1 | 0.3% | 2024-10-09 | Fix |
| CVE-2024-43610 | Copilot Studio information disclosure | 7.4CNA v3.1 | 1.1% | 2024-10-09 | Fix |
| CVE-2024-42988 | CTFd ChallengeSolves API vulnerability | 4.3CISA ADP v3.1 | 0.3% | 2024-10-09 | |
| CVE-2024-42934 | OpenIPMI ipmi_sim simulator vulnerability | 5.0CISA ADP v3.1 | 0.4% | 2024-10-09 | Fix |
| CVE-2024-39586 | Dell AppSync XML external entity injection | 2.9CNA v3.1 | 0.2% | 2024-10-09 | Fix |
| CVE-2024-39525 | Juniper Networks Junos OS routing protocol daemon improper exception handling | 8.7CNA v4.0 | 0.4% | 2024-10-09 | Fix |
| CVE-2024-39516 | Juniper Networks Junos OS routing protocol daemon out-of-bounds read | 8.7CNA v4.0 | 0.4% | 2024-10-09 | Fix |
| CVE-2024-39515 | Juniper Networks Junos OS routing protocol daemon BGP handling denial of service | 8.7CNA v4.0 | 0.5% | 2024-10-09 | Fix |
| CVE-2024-39440 | UNISOC chipsets DRM service crash | 6.2CNA v3.1 | 0.1% | 2024-10-09 | Fix |
| CVE-2024-39439 | UNISOC chipsets DRM service out-of-bounds write | 6.2CNA v3.1 | 0.1% | 2024-10-09 | Fix |
| CVE-2024-39438 | UNISOC chipsets linkturbonative service command injection | 6.5CNA v3.1 | 0.3% | 2024-10-09 | Fix |
| CVE-2024-39437 | UNISOC chipsets linkturbonative service command injection | 6.5CNA v3.1 | 0.3% | 2024-10-09 | Fix |
| CVE-2024-39436 | UNISOC chipsets linkturbonative service command injection | 6.5CNA v3.1 | 0.3% | 2024-10-09 | Fix |
| CVE-2024-38818 | VMware NSX, VMware Cloud Foundation improper privilege management | 6.7CNA v3.1 | 0.3% | 2024-10-09 | Fix |
| CVE-2024-38817 | VMware NSX, VMware Cloud Foundation command injection | 6.7CNA v3.1 | 0.5% | 2024-10-09 | Fix |
| CVE-2024-38815 | VMware NSX, VMware Cloud Foundation cross-site scripting | 4.3CNA v3.1 | 0.3% | 2024-10-09 | Fix |
| CVE-2024-35288 | Nitro PDF Pro MSI installer repair mode privilege escalation | 7.8CISA ADP v3.1 | 0.3% | 2024-10-09 | |
| CVE-2024-32608 | HDFGroup hdf5 out-of-bounds write | 9.8v3.1 | 0.7% | 2024-10-09 | Fix |
| CVE-2024-30118 | HCL Connections is susceptible to a sensitive information disclosure | 3.5CNA v3.1 | 0.3% | 2024-10-09 | Fix |
| CVE-2024-28168 | Apache XML Graphics FOP: XML external entity (XXE) Processing | 7.5CISA ADP v3.1 | 1.0% | 2024-10-09 | Fix |
| CVE-2024-25825 | FydeOS root account vulnerability | 9.8CISA ADP v3.1 | 0.5% | 2024-10-09 | |
| CVE-2024-20787 | Adobe Substance3D Painter out-of-bounds read | 5.5CNA v3.1 | 0.2% | 2024-10-09 | Fix |
| CVE-2024-9680 | Mozilla Firefox use-after-free | 9.8NVD v3.1 | 23.2% | 2024-10-09 | KEVExploit codeKCVFix |
| CVE-2024-9675 | Buildah cache mount path validation path traversal | 7.8CNA v3.1 | 0.4% | 2024-10-09 | Fix |
| CVE-2024-9671 | Red Hat 3scale API Management Platform developer invoice PDF endpoint missing authorization | 5.3CNA v3.1 | 0.3% | 2024-10-09 | |
| CVE-2024-9575 | rami.io pretix Widget WordPress plugin local file inclusion in pretix-widget WordPress plugin | 8.5CNA v4.0 | 0.5% | 2024-10-09 | Fix |
| CVE-2024-9473 | GlobalProtect App: Local privilege escalation (PE) | 5.2CNA v4.0 | 0.3% | 2024-10-09 | Fix |
| CVE-2024-9471 | PAN-OS: Privilege escalation (PE) vulnerability in XML API | 5.1CNA v4.0 | 0.3% | 2024-10-09 | Fix |
| CVE-2024-9470 | Cortex XSOAR: Information disclosure | 5.3CNA v4.0 | 0.4% | 2024-10-09 | Fix |
| CVE-2024-9469 | Cortex XDR Agent: Local Windows User can Disable the Agent | 5.7CNA v4.0 | 0.2% | 2024-10-09 | Fix |
| CVE-2024-9468 | PAN-OS: Firewall denial of service (DoS) via a Maliciously Crafted Packet | 8.2CNA v4.0 | 0.4% | 2024-10-09 | Fix |
| CVE-2024-9467 | Expedition: Reflected cross-site scripting vulnerability leads to Expedition session disclosure | 7.0CNA v4.0 | 0.7% | 2024-10-09 | Fix |
| CVE-2024-9466 | Expedition: Cleartext storage of Information leads to Firewall Admin credential disclosure | 8.2CNA v4.0 | 13.6% | 2024-10-09 | Exploit codeFix |
| CVE-2024-9465 | Palo Alto Networks Expedition SQL injection | 9.2CNA v4.0 | 99.6% | 2024-10-09 | KEVNucleiEmerging ThreatsExploit codeFix |
| CVE-2024-9464 | Palo Alto Networks Expedition An OS command injection | 9.3CNA v4.0 | 82.6% | 2024-10-09 | Emerging ThreatsExploit codeKCVFix |
| CVE-2024-9463 | Palo Alto Networks Expedition OS command injection | 9.9CNA v4.0 | 98.5% | 2024-10-09 | KEVNucleiEmerging ThreatsExploit codeFix |
| CVE-2024-9451 | Embed PDF Viewer WordPress plugin stored cross-site scripting | 6.4CNA v3.1 | 0.4% | 2024-10-09 | Fix |
| CVE-2024-9449 | Auto iFrame WordPress plugin authenticated (Author+) stored cross-site scripting via tag parameter | 6.4CNA v3.1 | 0.3% | 2024-10-09 | Fix |
| CVE-2024-9286 | SQLi in TRtek Software's Distant Education Platform | 8.8CNA v4.0 | 0.4% | 2024-10-09 | Fix |
| CVE-2024-8264 | Fortra Robot Schedule Enterprise agent log file information disclosure | 5.5CNA v3.1 | 0.2% | 2024-10-09 | Fix |
| CVE-2024-8048 | Telerik Reporting Insecure Expression Evaluation | 7.8CNA v3.1 | 0.2% | 2024-10-09 | Fix |
| CVE-2024-8015 | Telerik Report Server Insecure Type Resolution | 9.1CNA v3.1 | 0.8% | 2024-10-09 | Fix |
| CVE-2024-8014 | Telerik Reporting EntityDataSource Insecure Type Resolution | 8.8CNA v3.1 | 0.6% | 2024-10-09 | Fix |
| CVE-2024-7963 | CMSMasters Content Composer WordPress plugin stored cross-site scripting | 6.4CNA v3.1 | 0.3% | 2024-10-09 | Fix |
| CVE-2024-7840 | Progress Software Telerik Reporting improper neutralization special element in hyperlinks | 7.8CNA v3.1 | 0.7% | 2024-10-09 | Fix |
| CVE-2024-7294 | Progress Software Telerik Report Server uncontrolled resource consumption of anonymous endpoints | 7.5CNA v3.1 | 0.3% | 2024-10-09 | Fix |
| CVE-2024-7293 | Progress Software Telerik Report Server password policy for new users is not strong enough | 7.5CNA v3.1 | 0.3% | 2024-10-09 | Fix |
| CVE-2024-7292 | Progress Software Telerik Report Server account controller allows high count of login attempts | 7.5CNA v3.1 | 0.3% | 2024-10-09 | Fix |
| CVE-2024-7041 | IDOR in open-webui/open-webui | 6.5CNA v3.0 | 0.4% | 2024-10-09 | Fix |
| CVE-2024-5968 | Photo Gallery by 10Web for WordPress Admin+ stored XSS | 4.8CISA ADP v3.1 | 0.4% | 2024-10-09 | Fix |
| CVE-2024-3656 | Keycloak's admin API allows low privilege users to use administrative functions | 8.1CNA v3.1 | 2.9% | 2024-10-09 | NucleiExploit codeFix |
| CVE-2024-47951 | JetBrains TeamCity cross-site scripting | 3.5CNA v3.1 | 1.4% | 2024-10-08 | Fix |
| CVE-2024-47950 | JetBrains TeamCity cross-site scripting | 3.5CNA v3.1 | 1.4% | 2024-10-08 | Fix |
| CVE-2024-47949 | JetBrains TeamCity relative path traversal | 4.9CNA v3.1 | 23.5% | 2024-10-08 | Fix |
| CVE-2024-47948 | JetBrains TeamCity relative path traversal | 4.9CNA v3.1 | 0.5% | 2024-10-08 | Fix |
| CVE-2024-47823 | Livewire remote code execution (RCE) on File Uploads | 7.7CNA v4.0 | 0.8% | 2024-10-08 | Fix |
| CVE-2024-47822 | Directus inserts access token from query string into logs | 4.2CNA v3.1 | 0.3% | 2024-10-08 | Fix |
| CVE-2024-47780 | Information disclosure in TYPO3 Page Tree | 3.1CNA v3.1 | 0.3% | 2024-10-08 | Fix |
| CVE-2024-47773 | Anonymous cache poisoning via XHR requests in Discourse | 8.2CNA v3.1 | 1.7% | 2024-10-08 | Exploit codeFix |
| CVE-2024-47594 | Cross-site scripting (XSS) vulnerability in SAP NetWeaver Enterprise Portal (KMC) | 5.4CNA v3.1 | 0.3% | 2024-10-08 | Fix |
| CVE-2024-47565 | Siemens SINEC Security Monitor permissive allowlist | 5.3CNA v4.0 | 0.4% | 2024-10-08 | Fix |
| CVE-2024-47563 | Siemens SINEC Security Monitor path traversal | 6.9CNA v4.0 | 0.5% | 2024-10-08 | Fix |
| CVE-2024-47562 | Siemens SINEC Security Monitor command injection | 9.3CNA v4.0 | 0.3% | 2024-10-08 | Fix |
| CVE-2024-47553 | Siemens SINEC Security Monitor argument injection | 9.4CNA v4.0 | 0.8% | 2024-10-08 | Fix |
| CVE-2024-47196 | Siemens ModelSim uncontrolled search path | 5.4CNA v4.0 | 0.2% | 2024-10-08 | Fix |
| CVE-2024-47195 | Siemens ModelSim uncontrolled search path | 5.4CNA v4.0 | 0.2% | 2024-10-08 | Fix |
| CVE-2024-47194 | Siemens ModelSim uncontrolled search path | 5.4CNA v4.0 | 0.2% | 2024-10-08 | Fix |
| CVE-2024-47161 | JetBrains TeamCity insufficiently protected credentials | 4.3CNA v3.1 | 0.3% | 2024-10-08 | Fix |
| CVE-2024-47095 | Reflected cross-site scripting in Follet School Solutions Destiny | 5.1CNA v4.0 | 0.5% | 2024-10-08 | Fix |
| CVE-2024-47046 | Siemens Simcenter Femap V2306 memory corruption | 7.3CNA v4.0 | 0.2% | 2024-10-08 | Fix |
| CVE-2024-47011 | Ivanti Avalanche path traversal | 7.5CNA v3.1 | 56.3% | 2024-10-08 | Fix |
| CVE-2024-47010 | Ivanti Avalanche path traversal | 7.3CNA v3.1 | 37.8% | 2024-10-08 | Fix |
| CVE-2024-47009 | Ivanti Avalanche path traversal | 7.3CNA v3.1 | 1.7% | 2024-10-08 | Fix |
| CVE-2024-47008 | Ivanti Avalanche server-side request forgery | 7.5CNA v3.1 | 47.1% | 2024-10-08 | Fix |
| CVE-2024-47007 | Ivanti Avalanche WL null pointer dereference | 7.5CNA v3.1 | 1.7% | 2024-10-08 | Fix |
| CVE-2024-46887 | Siemens SIMATIC Drive Controller CPU 1504D TF authentication bypass | 6.9CNA v4.0 | 0.6% | 2024-10-08 | Fix |
| CVE-2024-46886 | Siemens SIMATIC Drive Controller CPU 1504D TF open redirect | 5.1CNA v4.0 | 0.4% | 2024-10-08 | Fix |
| CVE-2024-46539 | Bluetooth Low Energy insecure permissions | 8.2CISA ADP v3.1 | 0.2% | 2024-10-08 | |
| CVE-2024-46410 | PublicCMS cross-site scripting | 4.8CISA ADP v3.1 | 0.3% | 2024-10-08 | |
| CVE-2024-45918 | Fujian Kelixin Communication Command and Dispatch Platform get_gis_fence.php SQL injection | 9.8CISA ADP v3.1 | 0.4% | 2024-10-08 | |
| CVE-2024-45880 | Motorola CX2L router firmware SetStationSettings function OS command injection | 8.0CISA ADP v3.1 | 0.9% | 2024-10-08 | |
| CVE-2024-45476 | Siemens Teamcenter Visualization null pointer dereference | 4.8CNA v4.0 | 0.2% | 2024-10-08 | Fix |
| CVE-2024-45475 | Siemens Teamcenter Visualization memory corruption | 7.3CNA v4.0 | 0.2% | 2024-10-08 | Fix |
| CVE-2024-45474 | Siemens Teamcenter Visualization memory corruption | 7.3CNA v4.0 | 0.2% | 2024-10-08 | Fix |
| CVE-2024-45473 | Siemens Teamcenter Visualization memory corruption | 7.3CNA v4.0 | 0.2% | 2024-10-08 | Fix |
| CVE-2024-45472 | Siemens Teamcenter Visualization memory corruption | 7.3CNA v4.0 | 0.2% | 2024-10-08 | Fix |
| CVE-2024-45471 | Siemens Teamcenter Visualization out-of-bounds write | 7.3CNA v4.0 | 0.3% | 2024-10-08 | Fix |
| CVE-2024-45470 | Siemens Teamcenter Visualization out-of-bounds write | 7.3CNA v4.0 | 0.2% | 2024-10-08 | Fix |
| CVE-2024-45469 | Siemens Teamcenter Visualization out-of-bounds write | 7.3CNA v4.0 | 0.3% | 2024-10-08 | Fix |
| CVE-2024-45468 | Siemens Teamcenter Visualization memory corruption | 7.3CNA v4.0 | 0.2% | 2024-10-08 | Fix |
| CVE-2024-45467 | Siemens Teamcenter Visualization memory corruption | 7.3CNA v4.0 | 0.2% | 2024-10-08 | Fix |
| CVE-2024-45466 | Siemens Teamcenter Visualization out-of-bounds read | 7.3CNA v4.0 | 0.2% | 2024-10-08 | Fix |
| CVE-2024-45465 | Siemens Teamcenter Visualization out-of-bounds read | 7.3CNA v4.0 | 0.2% | 2024-10-08 | Fix |
| CVE-2024-45464 | Siemens Teamcenter Visualization out-of-bounds read | 7.3CNA v4.0 | 0.2% | 2024-10-08 | Fix |
| CVE-2024-45463 | Siemens Teamcenter Visualization out-of-bounds read | 7.3CNA v4.0 | 0.3% | 2024-10-08 | Fix |
| CVE-2024-45382 | OpenHarmony liteos_a has an out-of-bounds write | 3.3CNA v3.1 | 0.1% | 2024-10-08 | |
| CVE-2024-45330 | Fortinet FortiAnalyzer format string | 6.8CNA v3.1 | 0.6% | 2024-10-08 | Fix |
| CVE-2024-45282 | HTTP Verb tampering in SAP S/4 Hana(Manage Bank Statements) | 4.3CNA v3.1 | 0.3% | 2024-10-08 | Fix |
| CVE-2024-45278 | Cross-site scripting (XSS) vulnerability in SAP Commerce Backoffice | 5.4CNA v3.1 | 0.3% | 2024-10-08 | Fix |
| CVE-2024-45277 | Prototype pollution vulnerability in SAP HANA Client | 4.3CNA v3.1 | 0.6% | 2024-10-08 | Fix |
| CVE-2024-45231 | Django allows enumeration of user e-mail addresses | 5.3v3.1 | 0.8% | 2024-10-08 | Fix |
| CVE-2024-45230 | Django vulnerable to denial of service attack via the urlize and urlizetrunc template filters | 7.5v3.1 | 25.3% | 2024-10-08 | Fix |
| CVE-2024-44349 | login portal in AnteeoWMS SQL injection | 9.8CISA ADP v3.1 | 5.8% | 2024-10-08 | NucleiExploit code |
| CVE-2024-43697 | OpenHarmony liteos_a has an improper input validation | 3.3CNA v3.1 | 0.1% | 2024-10-08 | |
| CVE-2024-43696 | OpenHarmony liteos_a has an memory leak | 3.3CNA v3.1 | 0.1% | 2024-10-08 | |
| CVE-2024-43616 | Microsoft Office remote code execution | 7.8CNA v3.1 | 0.8% | 2024-10-08 | Fix |
| CVE-2024-43615 | Microsoft OpenSSH for Windows remote code execution | 7.1CNA v3.1 | 1.2% | 2024-10-08 | Fix |
| CVE-2024-43614 | Microsoft Defender For Endpoint for Linux spoofing | 5.5CNA v3.1 | 0.6% | 2024-10-08 | Fix |
| CVE-2024-43612 | Microsoft Power BI Report Server spoofing | 6.9CNA v3.1 | 0.7% | 2024-10-08 | Fix |
| CVE-2024-43611 | Microsoft Windows Routing and Remote Access Service (RRAS) remote code execution | 8.8CNA v3.1 | 1.8% | 2024-10-08 | Fix |
| CVE-2024-43609 | Microsoft Office spoofing | 6.5CNA v3.1 | 2.1% | 2024-10-08 | Fix |
| CVE-2024-43608 | Microsoft Windows Routing and Remote Access Service (RRAS) remote code execution | 8.8CNA v3.1 | 1.4% | 2024-10-08 | Fix |
| CVE-2024-43607 | Microsoft Windows Routing and Remote Access Service (RRAS) remote code execution | 8.8CNA v3.1 | 1.4% | 2024-10-08 | Fix |
| CVE-2024-43604 | Outlook for Android elevation of privilege | 5.7CNA v3.1 | 1.2% | 2024-10-08 | Fix |
| CVE-2024-43603 | Visual Studio Collector service denial of service | 5.5CNA v3.1 | 0.8% | 2024-10-08 | Fix |
| CVE-2024-43601 | Microsoft Visual Studio Code for Linux remote code execution | 7.8CNA v3.1 | 1.1% | 2024-10-08 | Fix |
| CVE-2024-43599 | Microsoft Windows remote Desktop client remote code execution | 8.8CNA v3.1 | 1.4% | 2024-10-08 | Fix |
| CVE-2024-43593 | Microsoft Windows Routing and Remote Access Service (RRAS) remote code execution | 8.8CNA v3.1 | 1.7% | 2024-10-08 | Fix |
| CVE-2024-43592 | Microsoft Windows Routing and Remote Access Service (RRAS) remote code execution | 8.8CNA v3.1 | 1.7% | 2024-10-08 | Fix |
| CVE-2024-43591 | Microsoft Azure Command Line Integration (CLI) elevation of privilege | 8.7CNA v3.1 | 1.6% | 2024-10-08 | Fix |
| CVE-2024-43590 | Microsoft Visual C++ Redistributable Installer elevation of privilege | 7.8CNA v3.1 | 0.4% | 2024-10-08 | Fix |
| CVE-2024-43589 | Microsoft Windows Routing and Remote Access Service (RRAS) remote code execution | 8.8CNA v3.1 | 1.5% | 2024-10-08 | Fix |
| CVE-2024-43585 | Microsoft Windows code Integrity Guard security feature bypass | 5.5CNA v3.1 | 0.5% | 2024-10-08 | Fix |
| CVE-2024-43584 | Microsoft Windows Scripting Engine security feature bypass | 7.7CNA v3.1 | 0.5% | 2024-10-08 | Fix |
| CVE-2024-43583 | Microsoft Windows winlogon elevation of privilege | 7.8CNA v3.1 | 1.3% | 2024-10-08 | Exploit codeFix |
| CVE-2024-43582 | Microsoft Windows remote Desktop Protocol Server remote code execution | 8.1CNA v3.1 | 3.2% | 2024-10-08 | Fix |
| CVE-2024-43581 | Microsoft OpenSSH for Windows remote code execution | 7.1CNA v3.1 | 1.4% | 2024-10-08 | Fix |
| CVE-2024-43576 | Microsoft Office remote code execution | 7.8CNA v3.1 | 0.5% | 2024-10-08 | Fix |
| CVE-2024-43575 | Microsoft Windows Hyper-V denial of service | 7.5CNA v3.1 | 2.3% | 2024-10-08 | Fix |
| CVE-2024-43574 | Microsoft Speech Application Programming Interface (SAPI) remote code execution | 8.3CNA v3.1 | 1.2% | 2024-10-08 | Fix |
| CVE-2024-43573 | Microsoft Windows MSHTML Platform spoofing | 6.5CNA v3.1 | 46.1% | 2024-10-08 | KEVFix |
| CVE-2024-43572 | Microsoft Windows Management console remote code execution | 7.8CNA v3.1 | 66.7% | 2024-10-08 | KEVFix |
| CVE-2024-43571 | Microsoft Sudo for Windows spoofing | 5.6CNA v3.1 | 0.6% | 2024-10-08 | Fix |
| CVE-2024-43570 | Microsoft Windows Kernel elevation of privilege | 6.4CNA v3.1 | 0.5% | 2024-10-08 | Fix |
| CVE-2024-43567 | Microsoft Windows Hyper-V denial of service | 7.5CNA v3.1 | 2.3% | 2024-10-08 | Fix |
| CVE-2024-43565 | Microsoft Windows Network Address Translation (NAT) denial of service | 7.5CNA v3.1 | 2.2% | 2024-10-08 | Fix |
| CVE-2024-43564 | Microsoft Windows Routing and Remote Access Service (RRAS) remote code execution | 8.8CNA v3.1 | 1.4% | 2024-10-08 | Fix |
| CVE-2024-43563 | Microsoft Windows Ancillary function driver for WinSock elevation of privilege | 7.8CNA v3.1 | 0.5% | 2024-10-08 | Fix |
| CVE-2024-43562 | Microsoft Windows Network Address Translation (NAT) denial of service | 7.5CNA v3.1 | 2.2% | 2024-10-08 | Fix |
| CVE-2024-43561 | Microsoft Windows Mobile Broadband driver denial of service | 6.5CNA v3.1 | 0.8% | 2024-10-08 | Fix |
| CVE-2024-43560 | Microsoft Windows Storage Port driver elevation of privilege | 7.8CNA v3.1 | 3.6% | 2024-10-08 | Fix |
| CVE-2024-43559 | Microsoft Windows Mobile Broadband driver denial of service | 6.5CNA v3.1 | 0.8% | 2024-10-08 | Fix |
| CVE-2024-43558 | Microsoft Windows Mobile Broadband driver denial of service | 6.5CNA v3.1 | 0.8% | 2024-10-08 | Fix |
| CVE-2024-43557 | Microsoft Windows Mobile Broadband driver denial of service | 6.5CNA v3.1 | 0.8% | 2024-10-08 | Fix |
| CVE-2024-43556 | Microsoft Windows Graphics component elevation of privilege | 7.8CNA v3.1 | 0.7% | 2024-10-08 | Fix |
| CVE-2024-43555 | Microsoft Windows Mobile Broadband driver denial of service | 6.5CNA v3.1 | 0.8% | 2024-10-08 | Fix |
| CVE-2024-43554 | Microsoft Windows Kernel-Mode driver information disclosure | 5.5CNA v3.1 | 0.6% | 2024-10-08 | Fix |
| CVE-2024-43553 | Microsoft Windows NT OS Kernel elevation of privilege | 7.4CNA v3.1 | 0.5% | 2024-10-08 | Fix |
| CVE-2024-43552 | Microsoft Windows Shell remote code execution | 7.3CNA v3.1 | 0.8% | 2024-10-08 | Fix |
| CVE-2024-43551 | Microsoft Windows Storage elevation of privilege | 7.8CNA v3.1 | 0.6% | 2024-10-08 | Fix |
| CVE-2024-43550 | Microsoft Windows Secure Channel spoofing | 7.4CNA v3.1 | 1.1% | 2024-10-08 | Fix |
| CVE-2024-43549 | Microsoft Windows Routing and Remote Access Service (RRAS) remote code execution | 8.8CNA v3.1 | 1.4% | 2024-10-08 | Fix |
| CVE-2024-43547 | Microsoft Windows Kerberos information disclosure | 6.5CNA v3.1 | 0.7% | 2024-10-08 | Fix |
| CVE-2024-43546 | Microsoft Windows Cryptographic information disclosure | 5.6CNA v3.1 | 0.6% | 2024-10-08 | Fix |
| CVE-2024-43545 | Microsoft Windows Online Certificate Status Protocol (OCSP) server denial of service | 7.5CNA v3.1 | 2.2% | 2024-10-08 | Fix |
| CVE-2024-43544 | Microsoft Simple Certificate Enrollment protocol denial of service | 7.5CNA v3.1 | 2.2% | 2024-10-08 | Fix |
| CVE-2024-43543 | Microsoft Windows Mobile Broadband driver remote code execution | 6.8CNA v3.1 | 0.6% | 2024-10-08 | Fix |
| CVE-2024-43542 | Microsoft Windows Mobile Broadband driver denial of service | 6.5CNA v3.1 | 0.8% | 2024-10-08 | Fix |
| CVE-2024-43541 | Microsoft Simple Certificate Enrollment protocol denial of service | 7.5CNA v3.1 | 2.3% | 2024-10-08 | Fix |
| CVE-2024-43540 | Microsoft Windows Mobile Broadband driver denial of service | 6.5CNA v3.1 | 0.8% | 2024-10-08 | Fix |
| CVE-2024-43538 | Microsoft Windows Mobile Broadband driver denial of service | 6.5CNA v3.1 | 0.8% | 2024-10-08 | Fix |
| CVE-2024-43537 | Microsoft Windows Mobile Broadband driver denial of service | 6.5CNA v3.1 | 0.8% | 2024-10-08 | Fix |
| CVE-2024-43536 | Microsoft Windows Mobile Broadband driver remote code execution | 6.8CNA v3.1 | 0.6% | 2024-10-08 | Fix |
| CVE-2024-43535 | Microsoft Windows Kernel-Mode driver elevation of privilege | 7.0CNA v3.1 | 0.5% | 2024-10-08 | Exploit codeFix |
| CVE-2024-43534 | Microsoft Windows Graphics component information disclosure | 6.5CNA v3.1 | 1.8% | 2024-10-08 | Fix |
| CVE-2024-43533 | Microsoft Remote Desktop client remote code execution | 8.8CNA v3.1 | 1.6% | 2024-10-08 | Fix |
| CVE-2024-43532 | Microsoft Windows remote Registry service elevation of privilege | 8.8CNA v3.1 | 12.0% | 2024-10-08 | Fix |
| CVE-2024-43529 | Microsoft Windows Print Spooler elevation of privilege | 7.3CNA v3.1 | 0.8% | 2024-10-08 | Fix |
| CVE-2024-43528 | Microsoft Windows Secure Kernel Mode elevation of privilege | 7.8CNA v3.1 | 0.5% | 2024-10-08 | Fix |
| CVE-2024-43527 | Microsoft Windows Kernel elevation of privilege | 7.8CNA v3.1 | 0.6% | 2024-10-08 | Fix |
| CVE-2024-43526 | Microsoft Windows Mobile Broadband driver remote code execution | 6.8CNA v3.1 | 0.7% | 2024-10-08 | Fix |
| CVE-2024-43525 | Microsoft Windows Mobile Broadband driver remote code execution | 6.8CNA v3.1 | 0.7% | 2024-10-08 | Fix |
| CVE-2024-43524 | Microsoft Windows Mobile Broadband driver remote code execution | 6.8CNA v3.1 | 0.7% | 2024-10-08 | Fix |
| CVE-2024-43523 | Microsoft Windows Mobile Broadband driver remote code execution | 6.8CNA v3.1 | 0.7% | 2024-10-08 | Fix |
| CVE-2024-43522 | Microsoft Windows Local Security Authority (LSA) elevation of privilege | 7.0CNA v3.1 | 0.5% | 2024-10-08 | Fix |
| CVE-2024-43521 | Microsoft Windows Hyper-V denial of service | 7.5CNA v3.1 | 2.4% | 2024-10-08 | Fix |
| CVE-2024-43520 | Microsoft Windows Kernel denial of service | 5.0CNA v3.1 | 1.0% | 2024-10-08 | Fix |
| CVE-2024-43519 | Microsoft WDAC OLE DB provider for SQL server remote code execution | 8.8CNA v3.1 | 1.5% | 2024-10-08 | Fix |
| CVE-2024-43518 | Microsoft Windows Telephony Server remote code execution | 8.8CNA v3.1 | 1.0% | 2024-10-08 | Fix |
| CVE-2024-43517 | Microsoft ActiveX Data Objects remote code execution | 8.8CNA v3.1 | 1.4% | 2024-10-08 | Fix |
| CVE-2024-43516 | Microsoft Windows Secure Kernel Mode elevation of privilege | 7.8CNA v3.1 | 0.6% | 2024-10-08 | Fix |
| CVE-2024-43515 | Microsoft Windows internet Small Computer Systems interface (iSCSI) denial of service | 7.5CNA v3.1 | 2.3% | 2024-10-08 | Fix |
| CVE-2024-43514 | Microsoft Windows Resilient File System (ReFS) elevation of privilege | 7.8CNA v3.1 | 0.6% | 2024-10-08 | Fix |
| CVE-2024-43513 | Microsoft Windows BitLocker security feature bypass | 6.4CNA v3.1 | 0.6% | 2024-10-08 | Fix |
| CVE-2024-43512 | Microsoft Windows Standards-Based Storage Management service denial of service | 6.5CNA v3.1 | 2.1% | 2024-10-08 | Fix |
| CVE-2024-43511 | Microsoft Windows Kernel elevation of privilege | 7.0CNA v3.1 | 0.4% | 2024-10-08 | Fix |
| CVE-2024-43509 | Microsoft Windows Graphics component elevation of privilege | 7.8CNA v3.1 | 0.6% | 2024-10-08 | Fix |
| CVE-2024-43508 | Microsoft Windows Graphics component information disclosure | 5.5CNA v3.1 | 0.6% | 2024-10-08 | Fix |
| CVE-2024-43506 | Microsoft Windows BranchCache denial of service | 7.5CNA v3.1 | 2.3% | 2024-10-08 | Fix |
| CVE-2024-43505 | Microsoft Office Visio remote code execution | 7.8CNA v3.1 | 0.7% | 2024-10-08 | Fix |
| CVE-2024-43504 | Microsoft Excel remote code execution | 7.8CNA v3.1 | 6.5% | 2024-10-08 | Fix |
| CVE-2024-43503 | Microsoft SharePoint elevation of privilege | 7.8CNA v3.1 | 0.7% | 2024-10-08 | Fix |
| CVE-2024-43502 | Microsoft Windows Kernel elevation of privilege | 7.1CNA v3.1 | 6.3% | 2024-10-08 | Fix |
| CVE-2024-43501 | Microsoft Windows Common Log File System driver elevation of privilege | 7.8CNA v3.1 | 0.7% | 2024-10-08 | Fix |
| CVE-2024-43500 | Microsoft Windows Resilient File System (ReFS) information disclosure | 5.5CNA v3.1 | 0.6% | 2024-10-08 | Fix |
| CVE-2024-43497 | Microsoft DeepSpeed remote code execution | 8.4CNA v3.1 | 0.7% | 2024-10-08 | Fix |
| CVE-2024-43488 | Microsoft Visual Studio Code extension for Arduino remote code execution | 8.8CNA v3.1 | 1.2% | 2024-10-08 | Fix |
| CVE-2024-43485 | Microsoft .NET and Visual Studio denial of service | 7.5CNA v3.1 | 3.1% | 2024-10-08 | Fix |
| CVE-2024-43484 | Microsoft .NET, .NET Framework, and Visual Studio denial of service | 7.5CNA v3.1 | 3.0% | 2024-10-08 | Fix |
| CVE-2024-43483 | Microsoft .NET, .NET Framework, and Visual Studio denial of service | 7.5CNA v3.1 | 2.9% | 2024-10-08 | Fix |
| CVE-2024-43481 | Microsoft Power BI Report Server spoofing | 6.5CNA v3.1 | 1.8% | 2024-10-08 | Fix |
| CVE-2024-43480 | Microsoft Azure Service Fabric for Linux remote code execution | 6.6CNA v3.1 | 1.1% | 2024-10-08 | Fix |
| CVE-2024-43468 | Microsoft Configuration Manager SQL injection | 9.8CNA v3.1 | 80.9% | 2024-10-08 | KEVEmerging ThreatsExploit codeFix |
| CVE-2024-43456 | Microsoft Windows Remote Desktop services tampering | 4.8CNA v3.1 | 0.7% | 2024-10-08 | Fix |
| CVE-2024-43453 | Microsoft Windows Routing and Remote Access Service (RRAS) remote code execution | 8.8CNA v3.1 | 1.5% | 2024-10-08 | Fix |
| CVE-2024-41981 | Siemens Simcenter Femap V2306 heap-based buffer overflow | 7.3CNA v4.0 | 0.2% | 2024-10-08 | Fix |
| CVE-2024-41902 | Siemens JT2Go stack-based buffer overflow | 7.3CNA v4.0 | 0.2% | 2024-10-08 | Fix |
| CVE-2024-41798 | Siemens SENTRON 7KM PAC3200 improper authentication | 9.3CNA v4.0 | 0.5% | 2024-10-08 | |
| CVE-2024-39831 | OpenHarmony AccessTokenManager has an use-after-free | 4.4CNA v3.1 | 0.2% | 2024-10-08 | |
| CVE-2024-39806 | OpenHarmony liteos_a has an out-of-bounds read | 5.5CNA v3.1 | 0.2% | 2024-10-08 | |
| CVE-2024-38265 | Microsoft Windows Routing and Remote Access Service (RRAS) remote code execution | 8.8CNA v3.1 | 1.4% | 2024-10-08 | Fix |
| CVE-2024-38262 | Microsoft Windows Remote Desktop Licensing service remote code execution | 7.5CNA v3.1 | 1.1% | 2024-10-08 | Fix |
| CVE-2024-38261 | Microsoft Windows Routing and Remote Access Service (RRAS) remote code execution | 7.8CNA v3.1 | 0.9% | 2024-10-08 | Fix |
| CVE-2024-38229 | Microsoft .NET and Visual Studio remote code execution | 8.1CNA v3.1 | 2.1% | 2024-10-08 | Fix |
| CVE-2024-38212 | Microsoft Windows Routing and Remote Access Service (RRAS) remote code execution | 8.8CNA v3.1 | 1.4% | 2024-10-08 | Fix |
| CVE-2024-38179 | Microsoft Azure Stack Hyperconverged Infrastructure (HCI) elevation of privilege | 8.8CNA v3.1 | 0.4% | 2024-10-08 | Fix |
| CVE-2024-38149 | Microsoft Windows BranchCache denial of service | 7.5CNA v3.1 | 2.2% | 2024-10-08 | Fix |
| CVE-2024-38129 | Microsoft Windows Kerberos elevation of privilege | 7.5CNA v3.1 | 1.3% | 2024-10-08 | Fix |
| CVE-2024-38124 | Microsoft Windows Netlogon elevation of privilege | 9.0CNA v3.1 | 1.2% | 2024-10-08 | Fix |
| CVE-2024-38097 | Microsoft Azure Monitor Agent elevation of privilege | 7.1CNA v3.1 | 0.6% | 2024-10-08 | Fix |
| CVE-2024-38029 | Microsoft OpenSSH for Windows remote code execution | 7.5CNA v3.1 | 1.4% | 2024-10-08 | Fix |
| CVE-2024-37983 | Microsoft Windows Resume Extensible firmware interface security feature bypass | 6.7CNA v3.1 | 0.6% | 2024-10-08 | Fix |
| CVE-2024-37982 | Microsoft Windows Resume Extensible firmware interface security feature bypass | 6.7CNA v3.1 | 0.6% | 2024-10-08 | Fix |
| CVE-2024-37979 | Microsoft Windows Kernel elevation of privilege | 6.7CNA v3.1 | 0.6% | 2024-10-08 | Fix |
| CVE-2024-37976 | Microsoft Windows Resume Extensible firmware interface security feature bypass | 6.7CNA v3.1 | 0.6% | 2024-10-08 | Fix |
| CVE-2024-37179 | Insecure File Operations vulnerability in SAP BusinessObjects Business Intelligence Platform | 7.7CNA v3.1 | 0.4% | 2024-10-08 | Fix |
| CVE-2024-36814 | Adguard Home arbitrary file read | 4.9CISA ADP v3.1 | 0.8% | 2024-10-08 | Fix |
| CVE-2024-35215 | BlackBerry QNX Software Development Platform (SDP) null pointer dereference | 6.2CNA v3.1 | 0.2% | 2024-10-08 | Fix |
| CVE-2024-34672 | Samsung Mobile Samsung Video Player improper input validation | 5.5CNA v3.1 | 0.2% | 2024-10-08 | Fix |
| CVE-2024-34671 | Samsung Mobile Samsung Internet translation혻in implicit intent for sensitive communication | 3.3CNA v3.1 | 0.2% | 2024-10-08 | Fix |
| CVE-2024-34670 | Samsung Mobile Sound Assistant implicit intent for sensitive communication | 4.0CNA v3.1 | 0.1% | 2024-10-08 | Fix |
| CVE-2024-34669 | Samsung Mobile Devices parsing h.263+ format in librtppayload.so out-of-bounds write | 7.5CNA v3.1 | 0.6% | 2024-10-08 | Fix |
| CVE-2024-34668 | Samsung Mobile Devices parsing h.263 format in librtppayload.so out-of-bounds write | 7.5CNA v3.1 | 0.6% | 2024-10-08 | Fix |
| CVE-2024-34667 | Samsung Mobile Devices parsing h.265 format in librtppayload.so out-of-bounds write | 7.5CNA v3.1 | 0.6% | 2024-10-08 | Fix |
| CVE-2024-34666 | Samsung Mobile Devices out-of-bounds write | 7.5CNA v3.1 | 0.6% | 2024-10-08 | Fix |
| CVE-2024-34665 | Samsung Mobile Devices parsing h.264 format in librtppayload.so out-of-bounds write | 7.5CNA v3.1 | 0.6% | 2024-10-08 | Fix |
| CVE-2024-34664 | Samsung Mobile Devices improper check for exceptional conditions | 4.1CNA v3.1 | 0.1% | 2024-10-08 | Fix |
| CVE-2024-34663 | Samsung Mobile Devices libSEF.quram.so integer overflow | 5.3CNA v3.1 | 0.1% | 2024-10-08 | Fix |
| CVE-2024-34662 | Samsung Mobile Devices ActivityManager improper access control | 6.2CNA v3.1 | 0.1% | 2024-10-08 | Fix |
| CVE-2024-33506 | Fortinet FortiManager information disclosure | 3.1CNA v3.1 | 0.4% | 2024-10-08 | Fix |
| CVE-2024-30092 | Microsoft Windows Hyper-V remote code execution | 8.0CNA v3.1 | 0.7% | 2024-10-08 | Fix |
| CVE-2024-27457 | Intel(R) TDX Module firmware improper check for exceptional conditions | 1.8CNA v4.0 | 0.1% | 2024-10-08 | Fix |
| CVE-2024-25885 | Xhtml2pdf denial of service via crafted string | 7.5CISA ADP v3.1 | 0.6% | 2024-10-08 | Fix |
| CVE-2024-21533 | ggit is vulnerable to arbitrary argument injection via the clone API | 6.5CNA v3.1 | 0.6% | 2024-10-08 | Exploit code |
| CVE-2024-21532 | ggit is vulnerable to command injection via the fetchTags(branch) API | 7.3CNA v3.1 | 1.3% | 2024-10-08 | Exploit code |
| CVE-2024-20659 | Microsoft Windows Hyper-V security feature bypass | 7.1CNA v3.1 | 0.9% | 2024-10-08 | Fix |
| CVE-2024-9622 | Red Hat JBoss Data Grid 7 HTTP request smuggling leading to Client Timeouts in resteasy-netty4 | 5.3CNA v3.1 | 0.6% | 2024-10-08 | Fix |
| CVE-2024-9621 | Red Hat Build of Apache Camel quarkus CXF logs passwords and other secrets | 5.3CNA v3.1 | 0.5% | 2024-10-08 | Fix |
| CVE-2024-9620 | Red Hat Ansible Automation Platform cleartext transmission of sensitive information | 5.3CNA v3.1 | 0.2% | 2024-10-08 | |
| CVE-2024-9603 | Google Chrome V8 type confusion | 8.8v3.1 | 0.5% | 2024-10-08 | Fix |
| CVE-2024-9602 | Google Chrome V8 type confusion | 8.8v3.1 | 0.8% | 2024-10-08 | Fix |
| CVE-2024-9412 | Improper authorization vulnerability in Rockwell Automation Verve® Asset Manager | 8.4CNA v4.0 | 0.4% | 2024-10-08 | Fix |
| CVE-2024-9381 | Ivanti CSA (Cloud Services Appliance) path traversal | 7.2CNA v3.1 | 15.6% | 2024-10-08 | Reported exploitedFix |
| CVE-2024-9380 | Ivanti Cloud Services Appliance (CSA) OS command injection | 7.2CNA v3.1 | 59.7% | 2024-10-08 | KEVEmerging ThreatsKCVFix |
| CVE-2024-9379 | Ivanti Cloud Services Appliance (CSA) SQL injection | 6.5CNA v3.1 | 43.8% | 2024-10-08 | KEVKCVFix |
| CVE-2024-9292 | Bridge Core WordPress plugin authenticated (Contributor+) stored cross-site scripting via shortcode | 6.4CNA v3.1 | 0.3% | 2024-10-08 | Fix |
| CVE-2024-9207 | BuddyPress Docs WordPress plugin reflected cross-site scripting | 6.1CNA v3.1 | 0.4% | 2024-10-08 | Fix |
| CVE-2024-9167 | Ivanti Velocity License Server incorrect default permissions | 7.8CNA v3.1 | 0.2% | 2024-10-08 | Fix |
| CVE-2024-9124 | Rockwell Automation PowerFlex 6000T CIP security denial of service | 8.2CNA v4.0 | 0.5% | 2024-10-08 | Fix |
| CVE-2024-9026 | PHP PHP-FPM logs from children may be altered | 3.3CNA v3.1 | 0.5% | 2024-10-08 | Fix |
| CVE-2024-9021 | Relevanssi WordPress plugin Contributor+ stored XSS | 5.4CISA ADP v3.1 | 0.5% | 2024-10-08 | Fix |
| CVE-2024-9005 | Schneider Electric EcoStruxure™ Power Monitoring Expert (PME) deserialization of untrusted data | 7.3CNA v4.0 | 0.3% | 2024-10-08 | Fix |
| CVE-2024-8983 | Custom Twitter Feeds WordPress plugin Admin+ stored XSS | 4.8CISA ADP v3.1 | 0.4% | 2024-10-08 | Fix |
| CVE-2024-8964 | Image Optimizer, Resizer and CDN Sirv WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.3% | 2024-10-08 | Fix |
| CVE-2024-8943 | LatePoint WordPress plugin authentication bypass | 9.8CNA v3.1 | 3.1% | 2024-10-08 | NucleiFix |
| CVE-2024-8927 | PHP cgi.force_redirect configuration is bypassable due to the environment variable collision | 7.5CNA v3.1 | 1.1% | 2024-10-08 | Fix |
| CVE-2024-8926 | PHP CGI parameter injection vulnerability ( bypass) | 8.1CNA v3.1 | 3.7% | 2024-10-08 | Fix |
| CVE-2024-8925 | PHP erroneous parsing of multipart form data | 3.1CNA v3.1 | 0.9% | 2024-10-08 | Fix |
| CVE-2024-8911 | LatePoint WordPress plugin unauthenticated arbitrary user password Change via SQL injection | 9.8CNA v3.1 | 2.9% | 2024-10-08 | NucleiFix |
| CVE-2024-8884 | Schneider Electric Harmony and Pro-face Industrial PC information disclosure | 9.8CNA v3.1 | 0.6% | 2024-10-08 | Fix |
| CVE-2024-8629 | WooCommerce Multilingual and Multicurrency with WPML WordPress plugin reflected cross-site scripting | 6.1CNA v3.1 | 0.4% | 2024-10-08 | Fix |
| CVE-2024-8626 | Logix Controllers vulnerable to denial of service | 8.7CNA v4.0 | 0.5% | 2024-10-08 | Fix |
| CVE-2024-8518 | Schneider Electric Zelio Soft 2 improper input validation | 3.3CNA v3.1 | 0.2% | 2024-10-08 | Fix |
| CVE-2024-8488 | Survey Maker WordPress plugin stored cross-site scripting | 4.8v3.1 | 0.3% | 2024-10-08 | Fix |
| CVE-2024-8482 | Royal Elementor Addons and Templates WordPress plugin stored cross-site scripting | 6.4CNA v3.1 | 0.4% | 2024-10-08 | Fix |
| CVE-2024-8433 | Easy Mega Menu Plugin for WordPress ThemeHunk stored cross-site scripting | 6.4CNA v3.1 | 0.3% | 2024-10-08 | Fix |
| CVE-2024-8431 | Photo Gallery WordPress plugin unauthorized access | 4.3CNA v3.1 | 0.4% | 2024-10-08 | Fix |
| CVE-2024-8422 | Schneider Electric Zelio Soft 2 use-after-free | 7.8CNA v3.1 | 0.2% | 2024-10-08 | Fix |
| CVE-2024-8215 | Payara Platform Payara Server Payload injection Attack via Management REST interface | 8.7CNA v4.0 | 0.5% | 2024-10-08 | Fix |
| CVE-2024-7612 | Ivanti Endpoint Manager Mobile insecure permissions | 8.8CNA v3.1 | 0.2% | 2024-10-08 | Fix |
| CVE-2024-7206 | eWeLink Zigbee Bridge Pro firmware extraction and Hardware SSL Pinning Bypass | 7.0CNA v4.0 | 0.2% | 2024-10-08 | |
| CVE-2024-3506 | Milestone Systems XProtect VMS camera driver possible buffer overflow | 7.3CNA v4.0 | 0.2% | 2024-10-08 | Fix |
| CVE-2024-3057 | Pure Storage FlashArray improper privilege management | 9.8CNA v3.1 | 0.4% | 2024-10-08 | |
| CVE-2024-47976 | Solidigm DC P4510 unauthorized access | 6.7CNA v3.1 | 0.2% | 2024-10-07 | |
| CVE-2024-47975 | Solidigm D7-P5500 firmware of some improper access control | 7.0CNA v3.1 | 0.2% | 2024-10-07 | |
| CVE-2024-47974 | Solidigm D7-P5510 some race condition | 4.4CNA v3.1 | 0.1% | 2024-10-07 | |
| CVE-2024-47973 | Solidigm D7-P5520 information disclosure | 5.1CNA v3.1 | 0.1% | 2024-10-07 | |
| CVE-2024-47972 | Solidigm D7-P5510 improper resource release | 4.0CNA v3.1 | 0.2% | 2024-10-07 | |
| CVE-2024-47971 | Solidigm D5-P5316 improper error handling | 6.5CNA v3.1 | 0.2% | 2024-10-07 | |
| CVE-2024-47969 | Solidigm DC P4510 resource exhaustion | 6.2CNA v3.1 | 0.2% | 2024-10-07 | |
| CVE-2024-47968 | Solidigm DC P4510 race condition | 4.4CNA v3.1 | 0.1% | 2024-10-07 | |
| CVE-2024-47967 | Solidigm D7-P5510 resource exhaustion | 4.4CNA v3.1 | 0.2% | 2024-10-07 | |
| CVE-2024-47818 | Logged-in users with any role can delete arbitrary files in @saltcorn/server | 6.5CNA v3.1 | 0.8% | 2024-10-07 | Fix |
| CVE-2024-47817 | Unvalidated paragraph widget values can be used for cross-site scripting in lara-zeus | 5.3CNA v4.0 | 0.4% | 2024-10-07 | Fix |
| CVE-2024-47814 | Vim buffer close autocommand handling use-after-free | 3.9CNA v3.1 | 0.3% | 2024-10-07 | Fix |
| CVE-2024-47782 | Cross-site scripting (XSS) in Special:WikiDiscover when displaying wiki information in WikiDiscover | 7.6CNA v3.1 | 0.3% | 2024-10-07 | Fix |
| CVE-2024-47781 | Cross-site scripting (XSS) in Special:RequestWikiQueue when displaying sitename in CreateWiki | 5.3CNA v4.0 | 0.3% | 2024-10-07 | Fix |
| CVE-2024-47772 | Discourse chat excerpts cross-site scripting | 6.5CNA v3.1 | 0.3% | 2024-10-07 | Fix |
| CVE-2024-47610 | InvenTree stored cross-site scripting vulnerability in Markdown Editor | 7.3CNA v3.1 | 0.3% | 2024-10-07 | Fix |
| CVE-2024-47559 | Xerox FreeFlow Core authenticated RCE via path traversal | 7.6CNA v3.1 | 0.5% | 2024-10-07 | Fix |
| CVE-2024-47558 | Xerox FreeFlow Core authenticated RCE via path traversal | 7.6CNA v3.1 | 0.5% | 2024-10-07 | Fix |
| CVE-2024-47557 | Xerox FreeFlow Core Pre-Auth RCE via path traversal | 8.3CNA v3.1 | 0.5% | 2024-10-07 | Fix |
| CVE-2024-47556 | Xerox FreeFlow Core Pre-Auth RCE via path traversal | 8.3CNA v3.1 | 0.5% | 2024-10-07 | Fix |
| CVE-2024-47555 | Xerox FreeFlow Core missing authentication User and System Configuration | 8.3CNA v3.1 | 0.2% | 2024-10-07 | Fix |
| CVE-2024-47344 | uListing WordPress plugin sensitive data exposure | 5.3CNA v3.1 | 0.4% | 2024-10-07 | Fix |
| CVE-2024-47335 | Bit Form WordPress plugin SQL injection | 7.6CNA v3.1 | 0.4% | 2024-10-07 | Fix |
| CVE-2024-47079 | Meshtastic Firmware remote hardware module insufficient verification of data authenticity | 6.4CNA v3.1 | 0.2% | 2024-10-07 | Fix |
| CVE-2024-46446 | Mecha-cms Mecha path traversal | 9.8v3.1 | 1.4% | 2024-10-07 | |
| CVE-2024-46325 | TP-Link WR740N stack-based buffer overflow | 5.5CISA ADP v3.1 | 0.2% | 2024-10-07 | |
| CVE-2024-46300 | Angeljudesuarez Placement Management System cross-site scripting | 6.1v3.1 | 0.4% | 2024-10-07 | |
| CVE-2024-46278 | Sismics Teedy cross-site scripting | 8.4CISA ADP v3.1 | 2.8% | 2024-10-07 | Exploit code |
| CVE-2024-46076 | RuoYi code injection | 9.8CISA ADP v3.1 | 0.5% | 2024-10-07 | |
| CVE-2024-46041 | IoT Haat Smart Plug IH-IN-16A-S authentication authentication bypass by replay | 8.8CISA ADP v3.1 | 0.3% | 2024-10-07 | |
| CVE-2024-46040 | IoT Haat Smart Plug IH-IN-16A-S access point pairing insufficient session expiration | 6.5CISA ADP v3.1 | 0.3% | 2024-10-07 | |
| CVE-2024-45933 | OnlineNewsSite post edit endpoint cross-site scripting | 6.6CISA ADP v3.1 | 0.2% | 2024-10-07 | |
| CVE-2024-45932 | Krayin CRM vulnerable to cross-site scripting (XSS) via the organization name | 4.8NVD v3.1 | 0.4% | 2024-10-07 | |
| CVE-2024-45919 | Solvait improper privilege management | 6.5CISA ADP v3.1 | 0.3% | 2024-10-07 | |
| CVE-2024-45894 | Bluecms files accessible to external parties | 4.9CISA ADP v3.1 | 0.3% | 2024-10-07 | |
| CVE-2024-45874 | VegaBird Vooki DLL hijacking | 9.8CISA ADP v3.1 | 0.7% | 2024-10-07 | |
| CVE-2024-45873 | VegaBird Yaazhini DLL hijacking | 9.8CISA ADP v3.1 | 0.7% | 2024-10-07 | |
| CVE-2024-45297 | Discourse hidden tag filtering improper privilege management | 5.3CNA v3.1 | 0.3% | 2024-10-07 | Fix |
| CVE-2024-45293 | XML external entity Reference (XXE) in PHPSpreadsheet's XLSX reader | 7.5CNA v3.1 | 2.8% | 2024-10-07 | NucleiFix |
| CVE-2024-45292 | PhpSpreadsheet HTML writer is vulnerable to cross-site scripting via JavaScript hyperlinks | 5.4CNA v3.1 | 0.3% | 2024-10-07 | Fix |
| CVE-2024-45291 | PHPOffice PhpSpreadsheet HTML writer image embedding path traversal | 6.3CNA v3.1 | 0.9% | 2024-10-07 | Fix |
| CVE-2024-45290 | Path traversal and server-side request forgery when opening XLSX files in PHPSpreadsheet | 7.7CNA v3.1 | 0.6% | 2024-10-07 | Fix |
| CVE-2024-45153 | Adobe Experience Manager cross-site scripting (stored XSS) | 5.4CNA v3.1 | 0.4% | 2024-10-07 | Fix |
| CVE-2024-45060 | Unauthenticated cross-site-scripting (XSS) in sample file in PHPSpreadsheet | 7.1CNA v3.1 | 0.5% | 2024-10-07 | Fix |
| CVE-2024-45051 | Bypass of email address validation via encoded email addresses in Discourse | 8.2CNA v3.1 | 0.4% | 2024-10-07 | Fix |
| CVE-2024-44674 | D-Link Covr-2600r stack-based buffer overflow | 5.7CISA ADP v3.1 | 4.2% | 2024-10-07 | |
| CVE-2024-44068 | Samsung Exynos 9820 use-after-free | 8.1CISA ADP v3.1 | 1.0% | 2024-10-07 | Fix |
| CVE-2024-43789 | Denial of service by the absence of restrictions on replies to posts in Discourse | 7.5CNA v3.1 | 0.5% | 2024-10-07 | Fix |
| CVE-2024-43365 | Stored cross-site scripting (XSS) when creating external links in Cacti | 5.7CNA v3.1 | 25.1% | 2024-10-07 | Fix |
| CVE-2024-43364 | Stored cross-site scripting (XSS) when creating external links in Cacti | 5.7CNA v3.1 | 37.9% | 2024-10-07 | Emerging ThreatsFix |
| CVE-2024-43363 | Remote code execution via Log Poisoning in Cacti | 7.2CNA v3.1 | 35.6% | 2024-10-07 | Exploit codeFix |
| CVE-2024-43362 | Stored cross-site scripting (XSS) when creating external links in Cacti | 7.3CNA v3.1 | 38.6% | 2024-10-07 | Emerging ThreatsFix |
| CVE-2024-43047 | Qualcomm Multiple Chipsets use-after-free | 7.8CNA v3.1 | 0.7% | 2024-10-07 | KEVFix |
| CVE-2024-42831 | Elaine's Realtime CRM Automation v6.18.17 reflected cross-site scripting | 6.1CISA ADP v3.1 | 0.8% | 2024-10-07 | Exploit code |
| CVE-2024-42027 | RocketChat Mobile weak credentials | 6.7CISA ADP v3.1 | 0.5% | 2024-10-07 | Fix |
| CVE-2024-38425 | Qualcomm Snapdragon improper authorization in Performance | 6.1CNA v3.1 | 0.1% | 2024-10-07 | Fix |
| CVE-2024-38399 | Qualcomm Snapdragon use-after-free in Graphics | 8.4CNA v3.1 | 0.1% | 2024-10-07 | Exploit codeFix |
| CVE-2024-38397 | Qualcomm Snapdragon buffer over-read in WLAN Host Communication | 7.5CNA v3.1 | 0.3% | 2024-10-07 | Fix |
| CVE-2024-33073 | Qualcomm Snapdragon buffer over-read in WLAN Host Communication | 8.2CNA v3.1 | 0.3% | 2024-10-07 | Fix |
| CVE-2024-33071 | Qualcomm Snapdragon buffer over-read in WLAN Host Communication | 7.5CNA v3.1 | 0.3% | 2024-10-07 | Fix |
| CVE-2024-33070 | Qualcomm Snapdragon buffer over-read in WLAN Host Communication | 7.5CNA v3.1 | 0.3% | 2024-10-07 | Fix |
| CVE-2024-33069 | Qualcomm Snapdragon use-after-free in WLAN host | 7.5CNA v3.1 | 0.4% | 2024-10-07 | Fix |
| CVE-2024-33066 | Qualcomm Snapdragon improper input validation in WLAN Resource Manager | 9.8CNA v3.1 | 0.6% | 2024-10-07 | Fix |
| CVE-2024-33065 | Qualcomm Snapdragon improper input validation in Camera | 8.4CNA v3.1 | 0.1% | 2024-10-07 | Fix |
| CVE-2024-33064 | Qualcomm Snapdragon buffer over-read in WLAN Host Communication | 8.2CNA v3.1 | 0.4% | 2024-10-07 | Fix |
| CVE-2024-33049 | Qualcomm Snapdragon buffer over-read in WLAN Host Communication | 7.5CNA v3.1 | 0.3% | 2024-10-07 | Fix |
| CVE-2024-31449 | Lua library commands may lead to stack overflow and RCE in Redis | 7.0CNA v3.1 | 4.5% | 2024-10-07 | Emerging ThreatsFix |
| CVE-2024-31228 | Denial of service due to unbounded pattern matching in Redis | 5.5CNA v3.1 | 1.0% | 2024-10-07 | Fix |
| CVE-2024-31227 | Denial of service due to malformed ACL selectors in Redis | 4.4CNA v3.1 | 0.4% | 2024-10-07 | Fix |
| CVE-2024-28710 | LimeSurvey cross-site scripting | 6.1v3.1 | 0.5% | 2024-10-07 | Fix |
| CVE-2024-28709 | LimeSurvey cross-site scripting | 6.1v3.1 | 0.5% | 2024-10-07 | Fix |
| CVE-2024-27458 | HP Hotkey Support escalation of privilege | 8.8CNA v3.1 | 0.2% | 2024-10-07 | |
| CVE-2024-23379 | Qualcomm Snapdragon double free in DSP services | 6.7CNA v3.1 | 0.1% | 2024-10-07 | Fix |
| CVE-2024-23378 | Qualcomm Snapdragon buffer copy without checking size of input (`Classic buffer overflow`) in Audio | 6.7CNA v3.1 | 0.1% | 2024-10-07 | Fix |
| CVE-2024-23376 | Qualcomm Snapdragon use-after-free in ComputerVision | 6.7CNA v3.1 | 0.1% | 2024-10-07 | Fix |
| CVE-2024-23375 | Qualcomm Snapdragon buffer copy without checking size of input (`Classic buffer overflow`) in RIL | 6.7CNA v3.1 | 0.1% | 2024-10-07 | Fix |
| CVE-2024-23374 | Qualcomm Snapdragon stack-based buffer overflow in Power Management IC | 6.7CNA v3.1 | 0.1% | 2024-10-07 | Fix |
| CVE-2024-23370 | Qualcomm Snapdragon use-after-free in Automotive Multimedia | 6.7CNA v3.1 | 0.1% | 2024-10-07 | Fix |
| CVE-2024-23369 | Qualcomm Snapdragon improper restriction of operations within the bounds of a memory buffer in HLOS | 7.8CNA v3.1 | 0.1% | 2024-10-07 | Fix |
| CVE-2024-21455 | Qualcomm Snapdragon untrusted pointer dereference in DSP service | 7.8CNA v3.1 | 0.2% | 2024-10-07 | Fix |
| CVE-2024-20103 | MediaTek chipsets out-of-bounds write in wlan | 9.8CISA ADP v3.1 | 0.3% | 2024-10-07 | Fix |
| CVE-2024-20102 | MediaTek chipsets out-of-bounds read in wlan | 4.9v3.1 | 0.3% | 2024-10-07 | Fix |
| CVE-2024-20101 | MediaTek chipsets out-of-bounds write in wlan | 9.8CISA ADP v3.1 | 0.3% | 2024-10-07 | Fix |
| CVE-2024-20100 | MediaTek chipsets out-of-bounds write in wlan | 9.8CISA ADP v3.1 | 0.3% | 2024-10-07 | Fix |
| CVE-2024-20099 | MediaTek chipsets out-of-bounds write in power | 6.7CISA ADP v3.1 | 0.1% | 2024-10-07 | Fix |
| CVE-2024-20098 | MediaTek chipsets out-of-bounds write in power | 6.7CISA ADP v3.1 | 0.1% | 2024-10-07 | Fix |
| CVE-2024-20097 | MediaTek chipsets out-of-bounds read in vdec | 4.4v3.1 | 0.1% | 2024-10-07 | Fix |
| CVE-2024-20096 | MediaTek chipsets out-of-bounds read in m4u | 4.4v3.1 | 0.1% | 2024-10-07 | Fix |
| CVE-2024-20095 | MediaTek chipsets out-of-bounds read in m4u | 4.4v3.1 | 0.1% | 2024-10-07 | Fix |
| CVE-2024-20094 | MediaTek chipsets reachable assertion in Modem | 7.5CISA ADP v3.1 | 0.8% | 2024-10-07 | Fix |
| CVE-2024-20093 | MediaTek chipsets out-of-bounds read in vdec | 4.4v3.1 | 0.1% | 2024-10-07 | Fix |
| CVE-2024-20092 | MediaTek chipsets out-of-bounds write in vdec | 7.8CISA ADP v3.1 | 0.1% | 2024-10-07 | Fix |
| CVE-2024-20091 | MediaTek chipsets out-of-bounds read in vdec | 4.4v3.1 | 0.1% | 2024-10-07 | Fix |
| CVE-2024-20090 | MediaTek chipsets out-of-bounds write in vdec | 6.7CISA ADP v3.1 | 0.1% | 2024-10-07 | Fix |
| CVE-2024-9576 | Improper access control in Linux Workbooth Distro | 7.8v3.1 | 0.1% | 2024-10-07 | |
| CVE-2024-9574 | SQL injection vulnerability in SOPlanning | 6.5NVD v3.1 | 0.5% | 2024-10-07 | Fix |
| CVE-2024-9573 | SQL injection vulnerability in SOPlanning | 6.5v3.1 | 0.3% | 2024-10-07 | Fix |
| CVE-2024-9572 | Cross-site scripting vulnerability in SOPlanning | 5.4v3.1 | 0.3% | 2024-10-07 | Fix |
| CVE-2024-9571 | Cross-site scripting vulnerability in SOPlanning | 5.4v3.1 | 0.3% | 2024-10-07 | Fix |
| CVE-2024-9570 | D-Link DIR-619L B1 formEasySetTimezone buffer overflow | 8.8v3.1 | 2.9% | 2024-10-07 | Exploit code |
| CVE-2024-9569 | D-Link DIR-619L B1 formEasySetPassword buffer overflow | 8.8v3.1 | 1.3% | 2024-10-07 | |
| CVE-2024-9568 | D-Link DIR-619L B1 formAdvNetwork buffer overflow | 8.8v3.1 | 1.3% | 2024-10-07 | |
| CVE-2024-9567 | D-Link DIR-619L B1 formAdvFirewall buffer overflow | 8.8v3.1 | 1.3% | 2024-10-07 | |
| CVE-2024-9566 | D-Link DIR-619L B1 formDeviceReboot buffer overflow | 8.8v3.1 | 1.8% | 2024-10-07 | |
| CVE-2024-9565 | D-Link DIR-605L formSetPassword buffer overflow | 8.8v3.1 | 2.0% | 2024-10-07 | |
| CVE-2024-9564 | D-Link DIR-605L formWlanWizardSetup buffer overflow | 8.8v3.1 | 1.9% | 2024-10-07 | |
| CVE-2024-9563 | D-Link DIR-605L formWlanSetup_Wizard buffer overflow | 8.8v3.1 | 1.4% | 2024-10-07 | |
| CVE-2024-47650 | WP-WebAuthn WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.3% | 2024-10-06 | Fix |
| CVE-2024-47368 | Premium Blocks WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.3% | 2024-10-06 | Fix |
| CVE-2024-47367 | YITH WooCommerce Product Add-Ons WordPress plugin reflected cross-site scripting (XSS) | 7.1CNA v3.1 | 0.3% | 2024-10-06 | Fix |
| CVE-2024-47366 | Elementor Addon Elements WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.2% | 2024-10-06 | Fix |
| CVE-2024-47365 | Automatically Hierarchic Categories in Menu WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.3% | 2024-10-06 | Fix |
| CVE-2024-47364 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in moveaddons Move Addons for Elementor move-addons allows Stored XSS.This issue affects Move Addons for Elementor: from n/a through <= 1.3.4. | 5.4v3.1 | 0.2% | 2024-10-06 | Fix |
| CVE-2024-47363 | Blockspare WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.3% | 2024-10-06 | Fix |
| CVE-2024-47360 | BA Book Everything WordPress plugin reflected cross-site scripting (XSS) | 6.1NVD v3.1 | 0.3% | 2024-10-06 | Fix |
| CVE-2024-47357 | Happy Addons for Elementor WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.2% | 2024-10-06 | Fix |
| CVE-2024-47356 | Create WordPress theme cross-site scripting (XSS) | 5.9v3.1 | 0.2% | 2024-10-06 | Fix |
| CVE-2024-47355 | Cozy Blocks WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.3% | 2024-10-06 | Fix |
| CVE-2024-47352 | WP Bulk Delete WordPress plugin cross-site scripting (XSS) | 7.1CNA v3.1 | 0.3% | 2024-10-06 | Fix |
| CVE-2024-47350 | YITH WooCommerce Ajax Search WordPress plugin SQL injection | 9.3CNA v3.1 | 0.4% | 2024-10-06 | Fix |
| CVE-2024-47349 | WPMobile.App WordPress plugin reflected cross-site scripting (XSS) | 7.1CNA v3.1 | 0.3% | 2024-10-06 | Fix |
| CVE-2024-47348 | Visual CSS Style Editor WordPress plugin reflected cross-site scripting (XSS) | 7.1CNA v3.1 | 0.3% | 2024-10-06 | Fix |
| CVE-2024-47347 | Chartify WordPress plugin reflected cross-site scripting (XSS) | 7.1CNA v3.1 | 0.3% | 2024-10-06 | Fix |
| CVE-2024-47346 | Newsletters WordPress plugin reflected cross-site scripting (XSS) | 7.1CNA v3.1 | 0.3% | 2024-10-06 | Fix |
| CVE-2024-47345 | Starter Templates WordPress plugin cross-site scripting (XSS) | 5.9CNA v3.1 | 0.3% | 2024-10-06 | Fix |
| CVE-2024-47343 | Mega Elements Addons for Elementor WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.3% | 2024-10-06 | Fix |
| CVE-2024-47342 | Accordion WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.3% | 2024-10-06 | Fix |
| CVE-2024-47341 | WP-DownloadManager WordPress plugin reflected cross-site scripting (XSS) | 7.1CNA v3.1 | 0.3% | 2024-10-06 | Fix |
| CVE-2024-47340 | PickPlugins Post Grid and Gutenberg Blocks stored cross-site scripting | 6.5CNA v3.1 | 0.3% | 2024-10-06 | Fix |
| CVE-2024-47339 | WP Mail Catcher WordPress plugin reflected cross-site scripting (XSS) | 7.1CNA v3.1 | 0.3% | 2024-10-06 | Fix |
| CVE-2024-47338 | WPExperts Square For GiveWP WordPress plugin SQL injection | 8.5CNA v3.1 | 0.4% | 2024-10-06 | Fix |
| CVE-2024-47336 | Terms Descriptions WordPress plugin cross-site scripting (XSS) | 5.9CNA v3.1 | 0.3% | 2024-10-06 | Fix |
| CVE-2024-47333 | Loops and Logic WordPress plugin reflected cross-site scripting (XSS) | 7.1CNA v3.1 | 0.3% | 2024-10-06 | Fix |
| CVE-2024-47332 | Sky Addons for Elementor WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.3% | 2024-10-06 | Fix |
| CVE-2024-47329 | ElementsReady Addons for Elementor WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.3% | 2024-10-06 | Fix |
| CVE-2024-47327 | GEO my WP WordPress plugin reflected cross-site scripting (XSS) | 7.1CNA v3.1 | 0.3% | 2024-10-06 | Fix |
| CVE-2024-47326 | Share This Image WordPress plugin reflected cross-site scripting (XSS) | 7.1CNA v3.1 | 0.3% | 2024-10-06 | Fix |
| CVE-2024-47322 | WP Timeline WordPress plugin reflected cross-site scripting (XSS) | 7.1CNA v3.1 | 0.3% | 2024-10-06 | Fix |
| CVE-2024-47320 | WS Form LITE WordPress plugin cross-site scripting (XSS) | 7.1CNA v3.1 | 0.3% | 2024-10-06 | Fix |
| CVE-2024-47313 | Catch Base WordPress theme cross-site scripting (XSS) | 4.8v3.1 | 0.2% | 2024-10-06 | Fix |
| CVE-2024-47310 | ARI Fancy Lightbox -- Popup for WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.3% | 2024-10-06 | Fix |
| CVE-2024-47307 | Meta Slider and Carousel with Lightbox WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.3% | 2024-10-06 | Fix |
| CVE-2024-47306 | Secure Copy Content Protection and Content Locking WordPress plugin cross-site scripting (XSS) | 7.1CNA v3.1 | 0.3% | 2024-10-06 | Fix |
| CVE-2024-47301 | Bit Form WordPress plugin cross-site scripting (XSS) | 7.1CNA v3.1 | 0.3% | 2024-10-06 | Fix |
| CVE-2024-47300 | CubeWP Forms WordPress plugin cross-site scripting (XSS) | 7.1CNA v3.1 | 0.3% | 2024-10-06 | Fix |
| CVE-2024-47299 | WordPress Website Builder by SeedProd plugin cross-site scripting (XSS) | 5.9CNA v3.1 | 0.3% | 2024-10-06 | Fix |
| CVE-2024-47298 | Bold Page Builder WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.3% | 2024-10-06 | Fix |
| CVE-2024-47297 | Polls CP WordPress plugin reflected cross-site scripting (XSS) | 7.1CNA v3.1 | 0.3% | 2024-10-06 | Fix |
| CVE-2024-45454 | Unlimited Elements for Elementor WordPress plugin reflected cross-site scripting (XSS) | 6.1NVD v3.1 | 0.3% | 2024-10-06 | Fix |
| CVE-2024-45252 | Elsight improper neutralization of special elements used in an OS command (OS command injection) | 9.8CNA v3.1 | 1.0% | 2024-10-06 | Fix |
| CVE-2024-45251 | Elsight improper neutralization of special elements used in an OS command (OS command injection) | 9.8CNA v3.1 | 1.0% | 2024-10-06 | Fix |
| CVE-2024-45250 | ZKteco CWE 200 exposure of sensitive information to an unauthorized actor | 4.3CNA v3.1 | 0.3% | 2024-10-06 | |
| CVE-2024-45249 | Cavok improper neutralization of special elements used in an SQL command (SQL injection) | 9.8v3.1 | 0.4% | 2024-10-06 | Fix |
| CVE-2024-45248 | Multi-DNC path traversal: .../...// | 7.5CNA v3.1 | 0.5% | 2024-10-06 | Fix |
| CVE-2024-45247 | Sonarr URL redirection to untrusted site (open redirect) | 6.1CNA v3.1 | 0.2% | 2024-10-06 | Fix |
| CVE-2024-45246 | Diebold Nixdorf uncontrolled search path element | 7.3CNA v3.1 | 0.2% | 2024-10-06 | Fix |
| CVE-2024-45245 | Diebold Nixdorf exposure of sensitive information to an unauthorized actor | 7.8CNA v3.1 | 0.2% | 2024-10-06 | Fix |
| CVE-2024-44046 | Themify WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.3% | 2024-10-06 | Fix |
| CVE-2024-44045 | WP Abstracts WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.3% | 2024-10-06 | Fix |
| CVE-2024-44043 | Photo Gallery by 10Web WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.3% | 2024-10-06 | Fix |
| CVE-2024-44042 | WP Datepicker WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.3% | 2024-10-06 | Fix |
| CVE-2024-44041 | IdeaPush WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.3% | 2024-10-06 | Fix |
| CVE-2024-44040 | ShiftController Employee Shift Scheduling WordPress plugin cross-site scripting (XSS) | 5.9CNA v3.1 | 0.3% | 2024-10-06 | Fix |
| CVE-2024-44039 | WP Travel WordPress plugin cross-site scripting (XSS) | 5.9CNA v3.1 | 0.3% | 2024-10-06 | Fix |
| CVE-2024-44037 | Multipurpose Ticket Booking Manager WordPress plugin cross-site scripting (XSS) | 5.9CNA v3.1 | 0.3% | 2024-10-06 | Fix |
| CVE-2024-44036 | Kodex Posts likes WordPress plugin cross-site scripting (XSS) | 5.9CNA v3.1 | 0.3% | 2024-10-06 | |
| CVE-2024-44035 | Gum Elementor Addon WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.3% | 2024-10-06 | Fix |
| CVE-2024-44033 | Primary Addon for Elementor WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.3% | 2024-10-06 | Fix |
| CVE-2024-44032 | Restaurant and Cafe Addon for Elementor WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.3% | 2024-10-06 | Fix |
| CVE-2024-44029 | Viala WordPress theme reflected cross-site scripting (XSS) | 7.1CNA v3.1 | 0.3% | 2024-10-06 | |
| CVE-2024-44028 | NiceJob WordPress plugin CSRF to stored cross-site scripting (XSS) | 7.1CNA v3.1 | 0.2% | 2024-10-06 | Fix |
| CVE-2024-44027 | Gum Elementor Addon WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.3% | 2024-10-06 | Fix |
| CVE-2024-44026 | Charity Addon for Elementor WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.3% | 2024-10-06 | Fix |
| CVE-2024-44025 | NiceJob WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.3% | 2024-10-06 | Fix |
| CVE-2024-44024 | Medical Addon for Elementor WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.3% | 2024-10-06 | |
| CVE-2024-44022 | Review and testimonial widgets WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.3% | 2024-10-06 | Fix |
| CVE-2024-44010 | Full frame WordPress theme cross-site scripting (XSS) | 5.1CNA v3.1 | 0.2% | 2024-10-06 | Fix |
| CVE-2024-9562 | D-Link DIR-605L formSetWizard2 buffer overflow | 8.8v3.1 | 1.4% | 2024-10-06 | |
| CVE-2024-9561 | D-Link DIR-605L formSetWAN_Wizard52 buffer overflow | 8.8v3.1 | 1.4% | 2024-10-06 | |
| CVE-2024-9560 | ESAFENET CDG Catelogs;logindojojs delCatelogs SQL injection | 8.8v3.1 | 0.7% | 2024-10-06 | |
| CVE-2024-9559 | D-Link DIR-605L formWlanSetup buffer overflow | 8.8v3.1 | 1.4% | 2024-10-06 | |
| CVE-2024-9558 | D-Link DIR-605L formSetWanPPTP buffer overflow | 8.8v3.1 | 1.4% | 2024-10-06 | |
| CVE-2024-9557 | D-Link DIR-605L formSetWanPPPoE buffer overflow | 8.8v3.1 | 1.4% | 2024-10-06 | |
| CVE-2024-9556 | D-Link DIR-605L formSetEnableWizard buffer overflow | 8.8v3.1 | 1.4% | 2024-10-06 | |
| CVE-2024-9555 | D-Link DIR-605L formSetEasy_Wizard buffer overflow | 8.8v3.1 | 1.4% | 2024-10-06 | |
| CVE-2024-9554 | Sovell Smart Canteen System Password Reset suanfa.py Check_ET_CheckPwdz201 authorization | 6.3CNA v4.0 | 0.4% | 2024-10-06 | |
| CVE-2024-9553 | D-Link DIR-605L formdumpeasysetup buffer overflow | 8.8v3.1 | 1.4% | 2024-10-06 | |
| CVE-2024-9552 | D-Link DIR-605L formSetWanNonLogin buffer overflow | 8.8v3.1 | 1.4% | 2024-10-06 | |
| CVE-2024-9551 | D-Link DIR-605L formSetWanL2TP buffer overflow | 8.8v3.1 | 1.4% | 2024-10-06 | |
| CVE-2024-9550 | D-Link DIR-605L formLogDnsquery buffer overflow | 8.8v3.1 | 1.5% | 2024-10-06 | |
| CVE-2024-9549 | D-Link DIR-605L formEasySetupWizard formEasySetupWizard2 buffer overflow | 8.8v3.1 | 1.5% | 2024-10-06 | |
| CVE-2024-47849 | The Wikimedia Foundation Mediawiki backticks can allow the usage of not-allowed SQL functions | 8.8CNA v4.0 | 0.6% | 2024-10-05 | Fix |
| CVE-2024-47848 | The Wikimedia Foundation Mediawiki user can review/unreview articles while blocked | 6.9CNA v4.0 | 0.5% | 2024-10-05 | Fix |
| CVE-2024-47847 | Mediawiki Cargo extension vulnerable to cross-site scripting | 6.9CNA v4.0 | 0.4% | 2024-10-05 | Fix |
| CVE-2024-47846 | The Wikimedia Foundation Mediawiki cross-site request forgery | 6.9CNA v4.0 | 0.3% | 2024-10-05 | Fix |
| CVE-2024-47845 | The Wikimedia Foundation Mediawiki CSS sanitizer used incorrectly, and is easily bypassed | 6.9CNA v4.0 | 0.4% | 2024-10-05 | Fix |
| CVE-2024-47841 | The Wikimedia Foundation Mediawiki path traversal when loading stylesheets | 6.9CNA v4.0 | 34.6% | 2024-10-05 | Fix |
| CVE-2024-47840 | Stored XSS through sidebar in Apex skin | 6.9CNA v4.0 | 0.3% | 2024-10-05 | Fix |
| CVE-2024-47647 | FAQ / Accordion / Docs Helpie WordPress FAQ Accordion plugin cross-site scripting (XSS) | 5.9CNA v3.1 | 0.3% | 2024-10-05 | Fix |
| CVE-2024-47646 | Payflex Payment Gateway WordPress plugin open redirection | 4.7CNA v3.1 | 0.3% | 2024-10-05 | Fix |
| CVE-2024-47644 | Copyscape Premium WordPress plugin CSRF to stored cross-site scripting | 7.1CNA v3.1 | 0.3% | 2024-10-05 | Fix |
| CVE-2024-47643 | Include Fussball.de Widgets WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.3% | 2024-10-05 | |
| CVE-2024-47642 | Keap Official Opt-in Forms WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.3% | 2024-10-05 | |
| CVE-2024-47639 | VdoCipher WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.3% | 2024-10-05 | Fix |
| CVE-2024-47638 | Online Booking and Scheduling Calendar for WordPress plugin reflected cross-site scripting (XSS) | 6.1NVD v3.1 | 0.3% | 2024-10-05 | Fix |
| CVE-2024-47635 | TinyPNG WordPress plugin cross-site request forgery (CSRF) | 5.4CNA v3.1 | 0.2% | 2024-10-05 | Fix |
| CVE-2024-47633 | Zoho forms WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.3% | 2024-10-05 | Fix |
| CVE-2024-47632 | DethemeKit For Elementor WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.2% | 2024-10-05 | Fix |
| CVE-2024-47631 | Logo Carousel Clients logo carousel for WP WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.3% | 2024-10-05 | Fix |
| CVE-2024-47630 | ElementInvader Addons for Elementor WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.2% | 2024-10-05 | Fix |
| CVE-2024-47629 | Ultimate Store Kit Elementor Addons WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.3% | 2024-10-05 | Fix |
| CVE-2024-47628 | LA-Studio Element Kit for Elementor WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.3% | 2024-10-05 | Fix |
| CVE-2024-47627 | WP Travel Gutenberg Blocks WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.3% | 2024-10-05 | Fix |
| CVE-2024-47626 | RTMKit WordPress plugin cross-site scripting | 6.5CNA v3.1 | 0.3% | 2024-10-05 | Fix |
| CVE-2024-47625 | Enter Addons Ultimate Template Builder for Elementor WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.2% | 2024-10-05 | Fix |
| CVE-2024-47624 | BSK Forms Blacklist WordPress plugin reflected cross-site scripting (XSS) | 7.1CNA v3.1 | 0.3% | 2024-10-05 | Fix |
| CVE-2024-47623 | Gallery Lightbox WordPress plugin cross-site scripting (XSS) | 5.9CNA v3.1 | 0.3% | 2024-10-05 | Fix |
| CVE-2024-47622 | Advanced Woo Labels WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.3% | 2024-10-05 | Fix |
| CVE-2024-47621 | Zotpress WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.3% | 2024-10-05 | Fix |
| CVE-2024-47395 | Robokassa payment gateway for Woocommerce WordPress plugin reflected cross-site scripting (XSS) | 7.1CNA v3.1 | 0.3% | 2024-10-05 | Fix |
| CVE-2024-47394 | WP JobSearch WordPress plugin reflected cross-site scripting (XSS) | 7.1CNA v3.1 | 0.3% | 2024-10-05 | Fix |
| CVE-2024-47393 | Quill Forms WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.3% | 2024-10-05 | Fix |
| CVE-2024-47392 | Element Pack Elementor Addons WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.2% | 2024-10-05 | Fix |
| CVE-2024-47391 | Bold Page Builder WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.3% | 2024-10-05 | Fix |
| CVE-2024-47390 | Jeg Elementor Kit WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.2% | 2024-10-05 | Fix |
| CVE-2024-47389 | NEX-Forms WordPress plugin reflected cross-site scripting (XSS) | 6.1NVD v3.1 | 0.3% | 2024-10-05 | Fix |
| CVE-2024-47388 | SliceWP Affiliates WordPress plugin reflected cross-site scripting (XSS) | 7.1CNA v3.1 | 0.3% | 2024-10-05 | Fix |
| CVE-2024-47387 | Search Atlas SEO WordPress plugin cross-site scripting (XSS) | 5.9CNA v3.1 | 0.3% | 2024-10-05 | Fix |
| CVE-2024-47386 | WP Extended The Ultimate WordPress Toolkit reflected cross-site scripting | 7.1CNA v3.1 | 0.3% | 2024-10-05 | Fix |
| CVE-2024-47385 | Essential Blocks WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.2% | 2024-10-05 | Fix |
| CVE-2024-47384 | WP Compress WordPress plugin reflected cross-site scripting (XSS) | 6.1NVD v3.1 | 0.3% | 2024-10-05 | Fix |
| CVE-2024-47383 | The Pack Elementor addons WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.2% | 2024-10-05 | Fix |
| CVE-2024-47382 | Page-list WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.3% | 2024-10-05 | Fix |
| CVE-2024-47381 | Slider and Popup Builder by Depicter WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.3% | 2024-10-05 | Fix |
| CVE-2024-47380 | WP-Lister Lite for eBay WordPress plugin reflected cross-site scripting (XSS) | 7.1CNA v3.1 | 0.3% | 2024-10-05 | Fix |
| CVE-2024-47379 | Web Directory Free WordPress plugin reflected cross-site scripting (XSS) | 7.1CNA v3.1 | 0.3% | 2024-10-05 | Fix |
| CVE-2024-47378 | WPCOM Member WordPress plugin reflected cross-site scripting (XSS) | 6.1NVD v3.1 | 0.3% | 2024-10-05 | Fix |
| CVE-2024-47377 | BuddyForms WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.3% | 2024-10-05 | Fix |
| CVE-2024-47376 | Slideshow Gallery LITE WordPress plugin cross-site scripting (XSS) | 5.9CNA v3.1 | 0.3% | 2024-10-05 | Fix |
| CVE-2024-47375 | XLTab Accordions and Tabs for Elementor Page Builder WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.3% | 2024-10-05 | Fix |
| CVE-2024-47374 | LiteSpeed Cache WordPress plugin cross-site scripting (XSS) | 6.1NVD v3.1 | 1.4% | 2024-10-05 | NucleiFix |
| CVE-2024-47373 | LiteSpeed Cache WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.2% | 2024-10-05 | Fix |
| CVE-2024-47372 | TNC PDF viewer WordPress plugin cross-site scripting (XSS) | 5.9CNA v3.1 | 0.3% | 2024-10-05 | Fix |
| CVE-2024-47371 | WP MyLinks WordPress plugin cross-site scripting (XSS) | 5.9CNA v3.1 | 0.3% | 2024-10-05 | Fix |
| CVE-2024-47370 | Author Avatars List/Block WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.3% | 2024-10-05 | Fix |
| CVE-2024-47369 | Social Auto Poster WordPress plugin reflected cross-site scripting (XSS) | 6.1NVD v3.1 | 0.3% | 2024-10-05 | Fix |
| CVE-2024-47324 | WP Timeline WordPress plugin local file inclusion | 7.5CNA v3.1 | 0.5% | 2024-10-05 | Fix |
| CVE-2024-47323 | WP Timeline WordPress plugin local file inclusion | 8.1CNA v3.1 | 0.6% | 2024-10-05 | Fix |
| CVE-2024-47319 | Bit Form WordPress plugin arbitrary file upload | 8.0CNA v3.1 | 0.4% | 2024-10-05 | Fix |
| CVE-2024-47316 | Salon Booking Wordpress plugin insecure direct object references (IDOR) | 8.8v3.1 | 0.3% | 2024-10-05 | Fix |
| CVE-2024-47309 | Cities Shipping Zones for WooCommerce WordPress plugin local file inclusion | 6.6CNA v3.1 | 0.6% | 2024-10-05 | Fix |
| CVE-2024-44034 | WPSPX WordPress plugin local file inclusion | 7.5CNA v3.1 | 0.6% | 2024-10-05 | |
| CVE-2024-44023 | ABCApp Creator WordPress plugin local file inclusion | 8.1CNA v3.1 | 0.6% | 2024-10-05 | |
| CVE-2024-44018 | Instant Chat WP WordPress plugin local file inclusion | 7.5CNA v3.1 | 0.6% | 2024-10-05 | |
| CVE-2024-44016 | Podiant WordPress plugin local file inclusion | 7.5CNA v3.1 | 0.6% | 2024-10-05 | |
| CVE-2024-44015 | Users Control WordPress plugin local file inclusion | 7.5CNA v3.1 | 0.6% | 2024-10-05 | |
| CVE-2024-44014 | Vmax Project Manager WordPress plugin local file inclusion to RCE | 9.6CNA v3.1 | 0.6% | 2024-10-05 | |
| CVE-2024-44013 | VR Calendar WordPress plugin local file inclusion | 7.5CNA v3.1 | 0.6% | 2024-10-05 | Fix |
| CVE-2024-44012 | WP Newsletter Subscription WordPress plugin local file inclusion | 7.5CNA v3.1 | 0.6% | 2024-10-05 | |
| CVE-2024-44011 | ExpressTech Systems WP Ticket Ultra Help Desk and Support Plugin path traversal | 7.5CNA v3.1 | 0.6% | 2024-10-05 | |
| CVE-2024-9536 | ESAFENET CDG MultiServerBackService SQL injection | 9.8v3.1 | 0.6% | 2024-10-05 | |
| CVE-2024-9535 | D-Link DIR-605L formEasySetupWWConfig buffer overflow | 8.8v3.1 | 1.6% | 2024-10-05 | |
| CVE-2024-9534 | D-Link DIR-605L formEasySetPassword buffer overflow | 8.8v3.1 | 1.5% | 2024-10-05 | |
| CVE-2024-9533 | D-Link DIR-605L formDeviceReboot buffer overflow | 8.8v3.1 | 1.5% | 2024-10-05 | |
| CVE-2024-9532 | D-Link DIR-605L formAdvanceSetup buffer overflow | 8.8v3.1 | 1.5% | 2024-10-05 |