CVE-2024 records published in October 2024
Page four of four: records 3,001 to 3,350 of the 3,350 published in October 2024, newest first. The first page carries the figures for October 2024.
| CVE | Summary | CVSS | EPSS | Published | Signals |
|---|---|---|---|---|---|
| CVE-2024-9528 | Contact Form Plugin by Fluent Forms for Quiz WordPress plugin stored cross-site scripting | 4.8v3.1 | 0.4% | 2024-10-05 | Fix |
| CVE-2024-9455 | WP Cleanup and Basic Functions WordPress plugin stored cross-site scripting | 6.4CNA v3.1 | 0.3% | 2024-10-05 | |
| CVE-2024-9417 | Hash Form - Drag and Drop Form Builder WordPress plugin unauthenticated limited file upload | 6.1CNA v3.1 | 0.4% | 2024-10-05 | Fix |
| CVE-2024-9385 | Themify Builder WordPress plugin reflected cross-site scripting | 6.1v3.1 | 0.4% | 2024-10-05 | Fix |
| CVE-2024-9314 | Rank Math SEO AI SEO Tools to Dominate SEO Rankings WordPress plugin PHP object injection | 7.2CNA v3.1 | 0.8% | 2024-10-05 | Fix |
| CVE-2024-9161 | Rank Math SEO WordPress plugin unauthorized access | 6.5CNA v3.1 | 2.1% | 2024-10-05 | NucleiFix |
| CVE-2024-9146 | CSS JS Files WordPress plugin directory traversal to file read | 4.9CNA v3.1 | 0.6% | 2024-10-05 | Fix |
| CVE-2024-8743 | Bit File Manager WordPress plugin file upload | 6.8CNA v3.1 | 0.8% | 2024-10-05 | Exploit codeFix |
| CVE-2024-8486 | Shortcodes and extra features for Phlox WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.4% | 2024-10-05 | Fix |
| CVE-2024-47913 | Improper permissions handling in MediaWiki AbuseFilter | 5.3CISA ADP v3.1 | 0.5% | 2024-10-04 | Fix |
| CVE-2024-47911 | SonarSource SonarQube SQL injection | 7.2v3.1 | 0.5% | 2024-10-04 | |
| CVE-2024-47910 | SonarSource SonarQube GitHub integration configuration vulnerability | 7.2CISA ADP v3.1 | 0.5% | 2024-10-04 | |
| CVE-2024-47855 | JSON-lib mishandles an unbalanced comment string | 5.3CISA ADP v3.1 | 17.6% | 2024-10-04 | Fix |
| CVE-2024-47854 | Veritas Data Insight cross-site scripting | 6.1v3.1 | 0.7% | 2024-10-04 | Fix |
| CVE-2024-47850 | CUPS cups-browsed denial of service | 7.5CISA ADP v3.1 | 0.9% | 2024-10-04 | Fix |
| CVE-2024-47790 | D3D Security IP Camera D8801 missing authorization | 8.7CNA v4.0 | 0.5% | 2024-10-04 | |
| CVE-2024-47789 | D3D Security IP Camera D8801 credential leakage | 8.7CNA v4.0 | 0.4% | 2024-10-04 | |
| CVE-2024-47769 | Idurar has a path traversal (unauthenticated user can read sensitive data) | 7.5CNA v3.1 | 0.8% | 2024-10-04 | |
| CVE-2024-47768 | Lif Authentication Server has no Auth Check when Updating Password in Account Recovery | 6.9CNA v4.0 | 0.5% | 2024-10-04 | Fix |
| CVE-2024-47765 | jgniecki MinecraftMotdParser minecraft MOTD Parser's HtmlGenerator vulnerable to XSS | 6.9CNA v4.0 | 0.4% | 2024-10-04 | Fix |
| CVE-2024-47764 | cookie accepts cookie name, path, and domain with out-of-bounds characters | 6.9CNA v4.0 | 0.7% | 2024-10-04 | Fix |
| CVE-2024-47657 | Shilpi Computers Net Back Office improper access control | 6.5NVD v3.1 | 0.4% | 2024-10-04 | Fix |
| CVE-2024-47656 | Shilpi Computers Client Dashboard user Enumeration vulnerability | 9.8v3.1 | 0.5% | 2024-10-04 | Fix |
| CVE-2024-47655 | Shilpi Computers Client Dashboard unrestricted file upload | 8.8v3.1 | 0.7% | 2024-10-04 | Fix |
| CVE-2024-47654 | Shilpi Computers Client Dashboard no Rate Limiting vulnerability | 7.5v3.1 | 0.5% | 2024-10-04 | Fix |
| CVE-2024-47653 | Shilpi Computers Client Dashboard missing authorization | 6.5NVD v3.1 | 0.3% | 2024-10-04 | Fix |
| CVE-2024-47652 | Shilpi Computers Client Dashboard insecure Authentication vulnerability | 8.1v3.1 | 0.4% | 2024-10-04 | Fix |
| CVE-2024-47651 | Shilpi Computers Client Dashboard parameter Pollution vulnerability | 6.5NVD v3.1 | 0.4% | 2024-10-04 | Fix |
| CVE-2024-47211 | OpenStack Ironic fails to verify checksums of supplied image_source URLs | 5.3CISA ADP v3.1 | 0.7% | 2024-10-04 | Fix |
| CVE-2024-47183 | parse-community parse-server parse Server's custom object ID allows to acquire role privileges | 8.1CNA v3.1 | 0.4% | 2024-10-04 | Fix |
| CVE-2024-46486 | TP-Link Tl-wdr5620 OS command injection | 8.0CISA ADP v3.1 | 0.8% | 2024-10-04 | |
| CVE-2024-46409 | Seeddms A stored cross-site scripting | 5.4CISA ADP v3.1 | 0.3% | 2024-10-04 | |
| CVE-2024-46078 | Adonesevangelista Sports Management System SQL injection | 7.5CISA ADP v3.1 | 0.3% | 2024-10-04 | |
| CVE-2024-46077 | Mayuri K Online Tours And Travels Management System cross-site scripting | 5.4CISA ADP v3.1 | 0.3% | 2024-10-04 | |
| CVE-2024-44439 | An issue in Shanghai Zhouma Network Technology CO., Ltd IMS Intelligent Manufacturing Collaborative Internet of Things System v.1.9.1 allows a remote attacker to escalate privileges via the open port. | 5.9CISA ADP v3.1 | 0.2% | 2024-10-04 | |
| CVE-2024-44207 | Apple iOS and iPadOS Messages audio recording vulnerability | 4.3v3.1 | 9.0% | 2024-10-04 | Fix |
| CVE-2024-44204 | Apple iOS and iPadOS logic flaw | 5.5v3.1 | 5.1% | 2024-10-04 | Fix |
| CVE-2024-43687 | XSS vulnerability in bannerconfig endpoint in TimeProvider 4100 | 7.7CNA v4.0 | 0.8% | 2024-10-04 | Exploit codeFix |
| CVE-2024-43686 | Reflected XSS in TimeProvider 4100 chart component | 5.4CNA v4.0 | 13.0% | 2024-10-04 | Fix |
| CVE-2024-43685 | Session token fixation in TimeProvider 4100 | 8.7CNA v4.0 | 0.4% | 2024-10-04 | Fix |
| CVE-2024-43684 | Cross-site request forgery vulnerability in TimeProvider 4100 | 8.7CNA v4.0 | 0.2% | 2024-10-04 | Fix |
| CVE-2024-43683 | Improper verification of the host header in TimeProvider 4100 | 8.7CNA v4.0 | 0.2% | 2024-10-04 | Fix |
| CVE-2024-41516 | 4pace Cadclick "ccHandler.aspx" reflected cross-site scripting | 5.4CISA ADP v3.1 | 0.4% | 2024-10-04 | |
| CVE-2024-41515 | 4pace Cadclick "ccHandlerResource.ashx" reflected cross-site scripting | 5.4CISA ADP v3.1 | 0.4% | 2024-10-04 | |
| CVE-2024-41514 | 4pace Cadclick "PrevPgGroup.aspx" reflected cross-site scripting | 5.4CISA ADP v3.1 | 0.4% | 2024-10-04 | |
| CVE-2024-41513 | 4pace Cadclick "Artikel.aspx" reflected cross-site scripting | 5.4CISA ADP v3.1 | 0.4% | 2024-10-04 | |
| CVE-2024-41512 | 4pace Cadclick "ccHandler.aspx" in all versions SQL injection | 8.8CISA ADP v3.1 | 0.7% | 2024-10-04 | |
| CVE-2024-41511 | 4pace Cadclick "BinaryFileRedirector.ashx" path traversal | 3.9CISA ADP v3.1 | 0.9% | 2024-10-04 | |
| CVE-2024-38040 | Bug-000167984 Portal for ArcGIS has a local file inclusion (LFI) | 7.5CNA v3.1 | 0.5% | 2024-10-04 | Fix |
| CVE-2024-38039 | Bug-000161683 HTML injection vulnerability in Portal for ArcGIS | 5.4CNA v3.1 | 0.3% | 2024-10-04 | Fix |
| CVE-2024-38038 | Bug-000165732 reflected XSS in Portal for ArcGIS | 6.1CNA v3.1 | 0.3% | 2024-10-04 | Fix |
| CVE-2024-38037 | Bug-000167983 unvalidated redirect in Portal for ArcGIS | 6.1CNA v3.1 | 0.3% | 2024-10-04 | Fix |
| CVE-2024-38036 | Bug-000154827 reflected XSS in ArcGIS Experience Builder | 5.4CNA v3.1 | 0.6% | 2024-10-04 | Fix |
| CVE-2024-37869 | Emiloimagtolis Online Discussion Forum Itsourcecode file upload | 8.8v3.1 | 1.1% | 2024-10-04 | |
| CVE-2024-37868 | Emiloimagtolis Online Discussion Forum Itsourcecode file upload | 8.8v3.1 | 1.1% | 2024-10-04 | |
| CVE-2024-25707 | Bug-000160241 reflected XSS in Portal for ArcGIS | 4.8CNA v3.1 | 0.4% | 2024-10-04 | Fix |
| CVE-2024-25702 | Bug-000160599 stored XSS in Portal for ArcGIS Web App Builder | 4.8CNA v3.1 | 0.3% | 2024-10-04 | Fix |
| CVE-2024-25701 | Bug-000160765 stored XSS in ArcGIS Experience Builder | 4.8CNA v3.1 | 0.3% | 2024-10-04 | Fix |
| CVE-2024-25694 | Bug-000163019 stored XSS in Portal for ArcGIS | 4.8CNA v3.1 | 0.3% | 2024-10-04 | Fix |
| CVE-2024-25691 | Bug-000165286 reflected XSS in Portal for ArcGIS | 6.1CNA v3.1 | 0.3% | 2024-10-04 | Fix |
| CVE-2024-9515 | D-Link DIR-605L formSetQoS buffer overflow | 8.8v3.1 | 1.4% | 2024-10-04 | |
| CVE-2024-9514 | D-Link DIR-605L formSetDomainFilter buffer overflow | 8.8v3.1 | 1.5% | 2024-10-04 | |
| CVE-2024-9513 | Netadmin Software NetAdmin IAM HTTP POST Request ReturnUserQuestionsFilled information exposure | 3.7NVD v3.1 | 1.7% | 2024-10-04 | Exploit code |
| CVE-2024-9484 | AVG/Avast Antivirus null pointer dereference | 5.5v3.1 | 0.1% | 2024-10-04 | Fix |
| CVE-2024-9483 | Avast Antivirus signature verification module null pointer dereference | 5.5v3.1 | 0.1% | 2024-10-04 | Fix |
| CVE-2024-9482 | AVG/Avast Antivirus out-of-bounds write on scan of malformed Mach-O file may crash the application | 5.5v3.1 | 0.1% | 2024-10-04 | Fix |
| CVE-2024-9481 | AVG/Avast Antivirus out-of-bounds write on scan of malformed eml file may crash the application | 5.5v3.1 | 0.1% | 2024-10-04 | Fix |
| CVE-2024-9445 | Display Medium Posts WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.3% | 2024-10-04 | |
| CVE-2024-9435 | ShiftController Employee Shift Scheduling WordPress plugin reflected cross-site scripting | 6.1CNA v3.1 | 0.4% | 2024-10-04 | Fix |
| CVE-2024-9421 | Login Logout Shortcode WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.3% | 2024-10-04 | |
| CVE-2024-9410 | Ada.cx SSRF via Sentry Misconfiguration | 5.3NVD v3.1 | 0.3% | 2024-10-04 | Fix |
| CVE-2024-9384 | WPFactory Quantity Dynamic Pricing and Bulk Discounts for WooCommerce reflected cross-site scripting | 6.1CNA v3.1 | 0.4% | 2024-10-04 | Fix |
| CVE-2024-9375 | WordPress Captcha Plugin by Captcha Bank reflected cross-site scripting | 6.1CNA v3.1 | 0.3% | 2024-10-04 | |
| CVE-2024-9372 | WP Blocks Hub WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.2% | 2024-10-04 | |
| CVE-2024-9368 | Aggregator Advanced Settings WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.2% | 2024-10-04 | |
| CVE-2024-9353 | Popularis Extra WordPress plugin reflected cross-site scripting | 6.1CNA v3.1 | 0.4% | 2024-10-04 | Fix |
| CVE-2024-9349 | Auto Amazon Links Amazon Associates Affiliate WordPress plugin reflected cross-site scripting | 6.1CNA v3.1 | 0.4% | 2024-10-04 | Fix |
| CVE-2024-9345 | Product Delivery Date for WooCommerce Lite WordPress plugin reflected cross-site scripting | 6.1CNA v3.1 | 0.4% | 2024-10-04 | Fix |
| CVE-2024-9306 | WP Booking Calendar WordPress plugin authenticated (Admin+) stored cross-site scripting | 4.8v3.1 | 0.3% | 2024-10-04 | Fix |
| CVE-2024-9271 | Re:WP WordPress plugin authenticated (Author+) stored cross-site scripting via SVG file upload | 5.4v3.1 | 0.3% | 2024-10-04 | Fix |
| CVE-2024-9242 | Memberful Membership WordPress plugin authenticated (contributor+) stored cross-site scripting | 5.4v3.1 | 0.3% | 2024-10-04 | Fix |
| CVE-2024-9237 | Fish and Ships WordPress plugin reflected cross-site scripting | 6.1CNA v3.1 | 0.4% | 2024-10-04 | Fix |
| CVE-2024-9204 | Smart Custom 404 Error Page WordPress plugin reflected cross-site scripting | 6.1CNA v3.1 | 0.5% | 2024-10-04 | Fix |
| CVE-2024-9071 | Easy Demo Importer WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.3% | 2024-10-04 | Fix |
| CVE-2024-9054 | Microchip TimeProvider 4100 remote code execution inTimeProvider® 4100 | 8.5CNA v4.0 | 15.6% | 2024-10-04 | Exploit codeFix |
| CVE-2024-8804 | Code Embed WordPress plugin authenticated (Contributor+) stored cross-site scripting | 5.4v3.1 | 0.2% | 2024-10-04 | Fix |
| CVE-2024-8802 | Clio Grow WordPress plugin reflected cross-site scripting | 6.1CNA v3.1 | 0.4% | 2024-10-04 | Fix |
| CVE-2024-8520 | Ultimate Member WordPress plugin cross-site request forgery to Membership Status Change | 4.3v3.1 | 0.3% | 2024-10-04 | Fix |
| CVE-2024-8519 | Ultimate Member WordPress plugin authenticated (Contributor+) stored cross-site scripting | 5.4v3.1 | 0.4% | 2024-10-04 | Fix |
| CVE-2024-8499 | Checkout Field Editor for WooCommerce WordPress plugin reflected cross-site scripting | 6.1v3.1 | 0.4% | 2024-10-04 | Fix |
| CVE-2024-8149 | Bug-000168624 unvalidated redirect in Portal for ArcGIS | 4.6CNA v3.1 | 0.4% | 2024-10-04 | Fix |
| CVE-2024-8148 | Bug-000168624 unvalidated redirect in Portal for ArcGIS. (,,. and) | 6.1CNA v3.1 | 0.3% | 2024-10-04 | Fix |
| CVE-2024-7801 | SQL injection in get_chart_data in TimeProvider 4100 | 6.3CNA v4.0 | 0.8% | 2024-10-04 | Exploit codeFix |
| CVE-2024-6444 | zephyrproject-rtos Zephyr bluetooth: Ots: Missing buffer length check | 6.3CNA v3.1 | 0.3% | 2024-10-04 | Fix |
| CVE-2024-6443 | Zephyr: Out-of-bound read in utf8_trunc | 6.3CNA v3.1 | 0.6% | 2024-10-04 | |
| CVE-2024-6442 | zephyrproject-rtos Zephyr bluetooth: ASCS Unchecked tailroom of the response buffer | 6.3CNA v3.1 | 0.3% | 2024-10-04 | Fix |
| CVE-2024-6400 | Cleartext storage of Username and Password in Finrota's Netahsilat | 7.5v3.1 | 0.6% | 2024-10-04 | |
| CVE-2024-47762 | Unexpected visibility of environment variable configurations in @backstage/plugin-app-backend | 5.8CNA v3.1 | 0.4% | 2024-10-03 | Fix |
| CVE-2024-47618 | Sulu vulnerable to XSS via uploaded SVG | 5.1CNA v4.0 | 0.3% | 2024-10-03 | Fix |
| CVE-2024-47617 | Reflected XSS vulnerability in Sulu Media Bundle | 6.1CNA v3.1 | 0.4% | 2024-10-03 | Fix |
| CVE-2024-47614 | async-graphql directive handling denial of service | 7.5CNA v3.1 | 0.6% | 2024-10-03 | Fix |
| CVE-2024-47561 | Apache Avro Java SDK: Arbitrary code execution when reading Avro schema (Java SDK) | 9.2CNA v4.0 | 3.3% | 2024-10-03 | Fix |
| CVE-2024-47554 | Apache Commons IO: Possible denial of service attack on untrusted input to XmlStreamReader | 4.3CISA ADP v3.1 | 1.3% | 2024-10-03 | Fix |
| CVE-2024-47136 | JTEKT ELECTRONICS Kostac PLC Programming Software out-of-bounds read | 7.8v3.1 | 0.3% | 2024-10-03 | Fix |
| CVE-2024-47135 | JTEKT ELECTRONICS Kostac PLC Programming Software stack-based buffer overflow | 7.8v3.1 | 0.3% | 2024-10-03 | Fix |
| CVE-2024-47134 | JTEKT ELECTRONICS Kostac PLC Programming Software out-of-bounds write | 7.8v3.1 | 0.3% | 2024-10-03 | Fix |
| CVE-2024-46658 | Syrotech SY-GOPON-8OLT-L3 command injection | 8.0CISA ADP v3.1 | 24.4% | 2024-10-03 | Emerging ThreatsExploit code |
| CVE-2024-45872 | bandisoft Bandiview heap-based buffer overflow | 6.3CISA ADP v3.1 | 0.4% | 2024-10-03 | |
| CVE-2024-45871 | bandisoft Bandiview denial of service | 6.3CISA ADP v3.1 | 0.4% | 2024-10-03 | |
| CVE-2024-45870 | bandisoft Bandiview improper access control | 6.5CISA ADP v3.1 | 0.5% | 2024-10-03 | Exploit code |
| CVE-2024-45367 | Optigo Networks ONS-S8 Spectra Aggregation Switch weak authentication | 9.3CNA v4.0 | 0.5% | 2024-10-03 | |
| CVE-2024-43699 | Delta Electronics DIAEnergie SQL injection | 9.8v3.1 | 0.5% | 2024-10-03 | Fix |
| CVE-2024-42504 | HPE IceWall Agent products, cross-site request forgery (CSRF) | 4.3CNA v3.1 | 0.2% | 2024-10-03 | Fix |
| CVE-2024-42417 | Delta Electronics DIAEnergie SQL injection | 8.8v3.1 | 7.0% | 2024-10-03 | Fix |
| CVE-2024-42415 | GNOME Project G Structured File Library (libgsf) integer overflow | 7.8v3.1 | 0.5% | 2024-10-03 | Fix |
| CVE-2024-41988 | Missing authentication for critical function vulnerability in TEM Opera Plus FM Family Transmitter | 9.3CNA v4.0 | 0.6% | 2024-10-03 | |
| CVE-2024-41987 | Cross-site request forgery (CSRF) vulnerability in TEM Opera Plus FM Family Transmitter | 8.6CNA v4.0 | 0.2% | 2024-10-03 | |
| CVE-2024-41925 | Optigo Networks ONS-S8 Spectra Aggregation Switch PHP remote file inclusion | 9.3CNA v4.0 | 0.7% | 2024-10-03 | |
| CVE-2024-41922 | Veertu Anka Build log files download functionality path traversal | 7.5CNA v3.1 | 8.1% | 2024-10-03 | |
| CVE-2024-41596 | DrayTek Vigor1000B buffer overflow | 8.0CISA ADP v3.1 | 0.3% | 2024-10-03 | Fix |
| CVE-2024-41595 | DrayTek Vigor3910 out-of-bounds read | 8.0CISA ADP v3.1 | 0.3% | 2024-10-03 | |
| CVE-2024-41594 | DrayTek Vigor1000B inadequate encryption strength | 7.5v3.1 | 0.3% | 2024-10-03 | |
| CVE-2024-41593 | DrayTek Vigor1000B out-of-bounds write | 9.8v3.1 | 0.9% | 2024-10-03 | |
| CVE-2024-41592 | DrayTek Vigor3910 stack-based buffer overflow | 8.0CISA ADP v3.1 | 1.4% | 2024-10-03 | KCV |
| CVE-2024-41591 | DrayTek Vigor3910 cross-site scripting | 6.1v3.1 | 0.3% | 2024-10-03 | |
| CVE-2024-41590 | DrayTek Vigor1000B stack-based buffer overflow | 8.0CISA ADP v3.1 | 0.3% | 2024-10-03 | |
| CVE-2024-41589 | DrayTek Vigor3910 improper authentication | 8.8CISA ADP v3.1 | 0.3% | 2024-10-03 | |
| CVE-2024-41588 | DrayTek Vigor3910 buffer overflow | 8.0CISA ADP v3.1 | 0.3% | 2024-10-03 | |
| CVE-2024-41587 | DrayTek Vigor1000B cross-site scripting | 5.4v3.1 | 0.2% | 2024-10-03 | |
| CVE-2024-41586 | DrayTek Vigor3910 stack-based buffer overflow | 8.0CISA ADP v3.1 | 0.5% | 2024-10-03 | |
| CVE-2024-41585 | DrayTek Vigor3910 OS command injection | 6.8CISA ADP v3.1 | 0.8% | 2024-10-03 | Emerging ThreatsKCV |
| CVE-2024-41584 | DrayTek Vigor3910 cross-site scripting | 4.7CISA ADP v3.1 | 0.3% | 2024-10-03 | |
| CVE-2024-41583 | DrayTek Vigor3910 cross-site scripting | 4.7CISA ADP v3.1 | 0.3% | 2024-10-03 | Fix |
| CVE-2024-41163 | Veertu Anka Build archive functionality path traversal | 7.5CNA v3.1 | 52.5% | 2024-10-03 | |
| CVE-2024-39755 | Veertu Anka Build node update functionality privilege escalation | 7.8CNA v3.1 | 0.4% | 2024-10-03 | |
| CVE-2024-36474 | GNOME Project G Structured File Library (libgsf) integer overflow | 7.8v3.1 | 0.4% | 2024-10-03 | Fix |
| CVE-2024-34535 | Joinmastodon mastodon HTTP request smuggling | 5.9CISA ADP v3.1 | 0.4% | 2024-10-03 | Fix |
| CVE-2024-25590 | Crafted responses can lead to a denial of service due to cache inefficiencies in the Recursor | 7.5CNA v3.1 | 0.7% | 2024-10-03 | Fix |
| CVE-2024-9460 | Codezips Online Shopping Portal index.php SQL injection | 9.8v3.1 | 0.7% | 2024-10-03 | |
| CVE-2024-9313 | Canonical authd PAM module may allow accessing with the credentials of another user | 8.8CNA v3.1 | 0.6% | 2024-10-03 | Fix |
| CVE-2024-9266 | expressjs express open redirect | 4.7CNA v3.1 | 0.5% | 2024-10-03 | Fix |
| CVE-2024-9100 | ManageEngine Analytics Plus local file inclusion | 6.5CNA v3.1 | 0.5% | 2024-10-03 | Fix |
| CVE-2024-8508 | NLnet Labs Unbound unbounded name compression could lead to denial of service | 5.3CNA v3.1 | 0.8% | 2024-10-03 | Fix |
| CVE-2024-8352 | Social Web Suite WordPress plugin path traversal | 7.5CNA v3.1 | 1.0% | 2024-10-03 | Fix |
| CVE-2024-8159 | Faronics DeepFreeze deep Freeze out-of-bounds read | 6.4CNA v3.1 | 0.2% | 2024-10-03 | |
| CVE-2024-7826 | Webroot SecureAnywhere improper check for exceptional conditions | 9.8v3.1 | 0.4% | 2024-10-03 | Fix |
| CVE-2024-7825 | Webroot SecureAnywhere type confusion | 9.8v3.1 | 0.4% | 2024-10-03 | Fix |
| CVE-2024-7824 | Webroot SecureAnywhere type confusion | 9.8v3.1 | 0.4% | 2024-10-03 | Fix |
| CVE-2024-5803 | AVG/Avast Antivirus local privelage escalation via COM hijacking | 7.5CNA v3.1 | 0.1% | 2024-10-03 | Fix |
| CVE-2024-0125 | NVIDIA CUDA Toolkit null pointer dereference | 3.3CNA v3.1 | 0.2% | 2024-10-03 | Fix |
| CVE-2024-0124 | NVIDIA CUDA Toolkit use-after-free | 3.3CNA v3.1 | 0.2% | 2024-10-03 | Fix |
| CVE-2024-0123 | NVIDIA CUDA Toolkit improper index validation | 3.3CNA v3.1 | 0.2% | 2024-10-03 | Fix |
| CVE-2024-47807 | Jenkins OpenId Connect Authentication Plugin lacks issuer claim validation | 8.1CISA ADP v3.1 | 0.6% | 2024-10-02 | Fix |
| CVE-2024-47806 | Jenkins OpenId Connect Authentication Plugin lacks audience claim validation | 8.1CISA ADP v3.1 | 0.6% | 2024-10-02 | Fix |
| CVE-2024-47805 | Jenkins Credentials Plugin insufficiently protected credentials | 7.5v3.1 | 0.6% | 2024-10-02 | Fix |
| CVE-2024-47804 | Jenkins item creation restriction bypass vulnerability | 4.3v3.1 | 0.7% | 2024-10-02 | Fix |
| CVE-2024-47803 | Jenkins exposes multi-line secrets through error messages | 4.3v3.1 | 0.8% | 2024-10-02 | Fix |
| CVE-2024-47616 | Pomerium's service account access token may grant unintended access to databroker API | 6.8CNA v3.1 | 0.6% | 2024-10-02 | Fix |
| CVE-2024-47612 | XSS in Special:DataDump when displaying dump status | 3.5CNA v3.1 | 0.3% | 2024-10-02 | |
| CVE-2024-47611 | XZ Utils on Microsoft Windows platform are vulnerable to argument injection | 6.3CNA v4.0 | 0.8% | 2024-10-02 | Fix |
| CVE-2024-47529 | OpenC3 COSMOS uses clear text storage of password/token (`GHSL-2024-129`) | 4.8CNA v4.0 | 0.4% | 2024-10-02 | Fix |
| CVE-2024-46977 | OpenC3 COSMOS allows a path traversal via screen controller (`GHSL-2024-127`) | 5.3CNA v4.0 | 0.9% | 2024-10-02 | Fix |
| CVE-2024-46626 | OS4ED Opensis SQL injection | 8.8CISA ADP v3.1 | 0.9% | 2024-10-02 | Exploit code |
| CVE-2024-45965 | contao unrestricted file upload | 5.4v3.1 | 0.3% | 2024-10-02 | Fix |
| CVE-2024-45964 | Zenario cross-site scripting in the Image library | 4.8CISA ADP v3.1 | 0.4% | 2024-10-02 | |
| CVE-2024-45962 | October allows an admin account to upload PDF containing malicious JavaScript | 4.7CISA ADP v3.1 | 0.5% | 2024-10-02 | |
| CVE-2024-45960 | Zenario allows authenticated admin users to upload PDF files containing malicious code | 4.8CISA ADP v3.1 | 0.4% | 2024-10-02 | |
| CVE-2024-45519 | Synacor Zimbra Collaboration Suite (ZCS) command execution | 9.8NVD v3.1 | 99.9% | 2024-10-02 | KEVNucleiEmerging ThreatsExploit codeFix |
| CVE-2024-45186 | FileSender server-side template injection | 9.8CISA ADP v3.1 | 0.6% | 2024-10-02 | |
| CVE-2024-44193 | Apple iTunes improper preservation of permissions | 7.8v3.1 | 0.4% | 2024-10-02 | Exploit codeFix |
| CVE-2024-44097 | Google Android improper privilege management | 9.8CISA ADP v3.1 | 0.2% | 2024-10-02 | Fix |
| CVE-2024-44030 | Checkout Mestres WP WordPress plugin local file inclusion | 7.2CNA v3.1 | 0.6% | 2024-10-02 | Fix |
| CVE-2024-44017 | MH Board WordPress plugin local file inclusion | 7.5CNA v3.1 | 0.6% | 2024-10-02 | |
| CVE-2024-43795 | OpenC3 COSMOS vulnerable to cross-site scripting in Login functionality (`GHSL-2024-128`) | 5.1CNA v4.0 | 0.5% | 2024-10-02 | Fix |
| CVE-2024-41290 | FlatPress cookie authentication vulnerability | 8.1CISA ADP v3.1 | 0.4% | 2024-10-02 | |
| CVE-2024-35294 | Schneider Elektronik Series 700 prone to missing authentication for traffic capture function | 6.5CNA v3.1 | 0.5% | 2024-10-02 | Fix |
| CVE-2024-35293 | Schneider Elektronik Series 700 prone to missing authentication for critical reset function | 9.1CNA v3.1 | 0.6% | 2024-10-02 | Fix |
| CVE-2024-33662 | Portainer improperly uses an encryption algorithm in the AesEncrypt function | 7.5CISA ADP v3.1 | 0.3% | 2024-10-02 | Fix |
| CVE-2024-33210 | FlatPress cross-site scripting | 5.4CISA ADP v3.1 | 0.7% | 2024-10-02 | Exploit code |
| CVE-2024-33209 | FlatPress cross-site scripting | 5.4v3.1 | 0.8% | 2024-10-02 | Exploit code |
| CVE-2024-28888 | Foxit Reader way use-after-free | 8.8CNA v3.1 | 2.1% | 2024-10-02 | Fix |
| CVE-2024-24122 | Wondershare Edraw remote code execution | 3.3NVD v3.1 | 0.7% | 2024-10-02 | |
| CVE-2024-24117 | Ruijie RG-NBS2009G-P insecure permissions | 9.8v3.1 | 0.7% | 2024-10-02 | |
| CVE-2024-24116 | Ruijie RG-NBS2009G-P improper handling of insufficient permissions | 9.8v3.1 | 28.2% | 2024-10-02 | Nuclei |
| CVE-2024-21530 | cocoon sequential calls of encryption API (`encrypt`, `wrap`, and `dump`) result in nonce reuse | 4.5CNA v3.1 | 0.1% | 2024-10-02 | Fix |
| CVE-2024-20524 | Cisco Small Business RV042, RV042G, RV320, and RV325 denial of service | 6.8CNA v3.1 | 0.5% | 2024-10-02 | |
| CVE-2024-20523 | Cisco Small Business RV042, RV042G, RV320, and RV325 denial of service | 6.8CNA v3.1 | 0.5% | 2024-10-02 | |
| CVE-2024-20522 | Cisco Small Business RV042, RV042G, RV320, and RV325 denial of service | 6.5CNA v3.1 | 0.5% | 2024-10-02 | |
| CVE-2024-20521 | Cisco Small Business RV042, RV042G, RV320, and RV325 remote command execution | 6.5CNA v3.1 | 0.7% | 2024-10-02 | |
| CVE-2024-20520 | Cisco Small Business RV042, RV042G, RV320, and RV325 remote command execution | 6.5CNA v3.1 | 0.6% | 2024-10-02 | |
| CVE-2024-20519 | Cisco Small Business RV042, RV042G, RV320, and RV325 remote command execution | 6.5CNA v3.1 | 0.6% | 2024-10-02 | |
| CVE-2024-20518 | Cisco Small Business RV042, RV042G, RV320, and RV325 remote command execution | 6.5CNA v3.1 | 0.6% | 2024-10-02 | |
| CVE-2024-20517 | Cisco Small Business RV042, RV042G, RV320, and RV325 denial of service | 6.8CNA v3.1 | 0.4% | 2024-10-02 | |
| CVE-2024-20516 | Cisco Small Business RV042, RV042G, RV320, and RV325 denial of service | 6.8CNA v3.1 | 0.4% | 2024-10-02 | |
| CVE-2024-20515 | Cisco Identity Services Engine information disclosure | 6.5CNA v3.1 | 0.3% | 2024-10-02 | Fix |
| CVE-2024-20513 | Cisco Meraki MX Firmware insecure direct object reference | 5.8CNA v3.1 | 0.5% | 2024-10-02 | Fix |
| CVE-2024-20509 | Cisco Meraki MX Firmware race condition | 5.8CNA v3.1 | 0.4% | 2024-10-02 | Fix |
| CVE-2024-20502 | Cisco Meraki MX Firmware denial of service | 5.8CNA v3.1 | 0.5% | 2024-10-02 | Fix |
| CVE-2024-20501 | Cisco Meraki MX Firmware out-of-bounds write | 8.6CNA v3.1 | 0.5% | 2024-10-02 | Fix |
| CVE-2024-20500 | Cisco Meraki MX Firmware denial of service | 5.8CNA v3.1 | 0.6% | 2024-10-02 | Fix |
| CVE-2024-20499 | Cisco Meraki MX Firmware out-of-bounds write | 8.6CNA v3.1 | 0.5% | 2024-10-02 | Fix |
| CVE-2024-20498 | Cisco Meraki MX Firmware double free | 8.6CNA v3.1 | 0.5% | 2024-10-02 | Fix |
| CVE-2024-20492 | Cisco Expressway Series privilege escalation | 6.0CNA v3.1 | 0.6% | 2024-10-02 | Fix |
| CVE-2024-20491 | Cisco Nexus Dashboard Insights information disclosure | 6.3CNA v3.1 | 0.3% | 2024-10-02 | Fix |
| CVE-2024-20490 | Cisco Nexus Dashboard Fabric Controller and Nexus Dashboard Orchestrator information disclosure | 6.3CNA v3.1 | 0.3% | 2024-10-02 | Fix |
| CVE-2024-20477 | Cisco Nexus Dashboard Fabric Controller Unauthorized REST API endpoint vulnerability | 5.4CNA v3.1 | 0.5% | 2024-10-02 | Fix |
| CVE-2024-20470 | Cisco RV340, RV340W, RV345, and RV345P Dual WAN Gigabit VPN Routers remote code execution | 7.2v3.1 | 0.6% | 2024-10-02 | |
| CVE-2024-20449 | Cisco Nexus Dashboard Fabric Controller remote code execution | 8.8CNA v3.1 | 0.9% | 2024-10-02 | Fix |
| CVE-2024-20448 | Cisco Nexus Dashboard Fabric Controller Credential information disclosure | 6.3CNA v3.1 | 0.1% | 2024-10-02 | Fix |
| CVE-2024-20444 | Cisco Nexus Dashboard Fabric Controller REST API command injection | 5.5CNA v3.1 | 0.8% | 2024-10-02 | Fix |
| CVE-2024-20442 | Cisco Nexus Dashboard Unauthorized API endpoints vulnerability | 5.4CNA v3.1 | 0.4% | 2024-10-02 | Fix |
| CVE-2024-20441 | Cisco Nexus Dashboard Fabric Controller Unauthorized API endpoint vulnerability | 5.7CNA v3.1 | 0.5% | 2024-10-02 | Fix |
| CVE-2024-20438 | Cisco Nexus Dashboard Fabric Controller Unauthorized REST API vulnerability | 6.3CNA v3.1 | 0.4% | 2024-10-02 | Fix |
| CVE-2024-20432 | Cisco Nexus Dashboard Fabric Controller Web UI command injection | 9.9CNA v3.1 | 1.1% | 2024-10-02 | Fix |
| CVE-2024-20393 | Cisco RV340, RV340W, RV345, and RV345P Dual WAN Gigabit VPN Routers privilege escalation | 8.8CNA v3.1 | 0.6% | 2024-10-02 | |
| CVE-2024-20385 | Cisco Nexus Dashboard Orchestrator SSL Certificate Validation vulnerability | 5.9CNA v3.1 | 0.3% | 2024-10-02 | Fix |
| CVE-2024-20365 | Cisco Integrated Management Controller Redfish command injection | 6.5CNA v3.1 | 0.9% | 2024-10-02 | Fix |
| CVE-2024-9441 | Linear eMerge e3-Series Forgot Password command injection | 9.8CNA v3.1 | 53.5% | 2024-10-02 | Exploit code |
| CVE-2024-9440 | Slim SELECT createOption text XSS | 6.1v3.1 | 0.4% | 2024-10-02 | Fix |
| CVE-2024-9429 | code-projects Restaurant Reservation System filter2.php SQL injection | 9.8v3.1 | 0.6% | 2024-10-02 | |
| CVE-2024-9423 | Certain HP LaserJet Printers potential denial of service | 5.3CNA v3.1 | 0.6% | 2024-10-02 | Fix |
| CVE-2024-9378 | YML for Yandex Market WordPress plugin reflected cross-site scripting | 6.1CNA v3.1 | 0.4% | 2024-10-02 | Fix |
| CVE-2024-9344 | BerqWP WordPress plugin reflected cross-site scripting | 6.1v3.1 | 0.4% | 2024-10-02 | Fix |
| CVE-2024-9333 | Permission bypass in M-Files Connector for Copilot | 5.3CNA v4.0 | 0.4% | 2024-10-02 | Fix |
| CVE-2024-9225 | SEOPress On-site SEO WordPress plugin reflected cross-site scripting | 6.1CNA v3.1 | 0.5% | 2024-10-02 | Fix |
| CVE-2024-9222 | Paid Membership Subscriptions WordPress plugin reflected cross-site scripting | 6.1CNA v3.1 | 0.4% | 2024-10-02 | Fix |
| CVE-2024-9218 | Magazine Blocks WordPress plugin reflected cross-site scripting | 6.1CNA v3.1 | 0.4% | 2024-10-02 | Fix |
| CVE-2024-9210 | MC4WP: Mailchimp Top Bar WordPress plugin reflected cross-site scripting | 6.1CNA v3.1 | 0.4% | 2024-10-02 | Fix |
| CVE-2024-9174 | Stored HTML injection in Hubshare social module | 6.9CNA v4.0 | 0.3% | 2024-10-02 | Fix |
| CVE-2024-9172 | Demo Importer Plus WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.3% | 2024-10-02 | Fix |
| CVE-2024-8967 | PWA easy way to Progressive Web App WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.3% | 2024-10-02 | Fix |
| CVE-2024-8885 | Sophos Intercept X A local privilege escalation | 8.8CNA v3.1 | 0.1% | 2024-10-02 | Fix |
| CVE-2024-8800 | RabbitLoader WordPress plugin reflected cross-site scripting | 6.1CNA v3.1 | 0.4% | 2024-10-02 | Fix |
| CVE-2024-8733 | HP One Agent Software potential privilege escalation | 8.0CNA v3.1 | 0.2% | 2024-10-02 | |
| CVE-2024-8505 | WordPress Infinite Scroll - Ajax Load More plugin stored cross-site scripting | 5.4v3.1 | 0.4% | 2024-10-02 | Fix |
| CVE-2024-8282 | Ibtana WordPress Website Builder plugin stored cross-site scripting | 5.4v3.1 | 0.3% | 2024-10-02 | Fix |
| CVE-2024-8254 | Icegram Email Subscribers and Newsletters shortcode handler code injection | 6.3v3.1 | 0.5% | 2024-10-02 | Fix |
| CVE-2024-8038 | Vulnerable Juju introspection abstract UNIX domain socket | 7.9CNA v3.1 | 0.2% | 2024-10-02 | Fix |
| CVE-2024-8037 | Vulnerable Juju hook tool abstract UNIX domain socket | 6.5CNA v3.1 | 0.2% | 2024-10-02 | Fix |
| CVE-2024-7855 | WP Hotel Booking WordPress plugin authenticated (Subscriber+) arbitrary file upload | 8.8CNA v3.1 | 17.7% | 2024-10-02 | Fix |
| CVE-2024-7558 | Canonical Juju JUJU_CONTEXT_ID is a predictable authentication secret | 8.7CNA v3.1 | 0.5% | 2024-10-02 | Fix |
| CVE-2024-7315 | Migration, Backup, Staging WPvivid WordPress plugin unauthenticated sensitive data exposure | 7.5CISA ADP v3.1 | 0.6% | 2024-10-02 | Fix |
| CVE-2024-6360 | OpenText Vertica incorrect permission assignment | 6.9CNA v4.0 | 0.3% | 2024-10-02 | Fix |
| CVE-2024-47609 | Remotely exploitable DoS in Tonic `` | 6.9CNA v4.0 | 0.6% | 2024-10-01 | Fix |
| CVE-2024-47608 | DefinetlyNotAI Logicytics command injection | 6.9CNA v4.0 | 0.7% | 2024-10-01 | Fix |
| CVE-2024-47604 | XSS vulnerability in NuGetGallery HTML attributes handling | 8.2CNA v3.1 | 0.8% | 2024-10-01 | Fix |
| CVE-2024-47560 | J’s Communication RevoWorks Cloud Client incorrect authorization | 7.8CNA v3.0 | 0.2% | 2024-10-01 | |
| CVE-2024-47534 | Incorrect delegation lookups can make go-tuf download the wrong artifact | 8.2CNA v4.0 | 0.5% | 2024-10-01 | Fix |
| CVE-2024-47528 | LibreNMS Contains a stored XSS via file upload | 4.6CNA v4.0 | 0.4% | 2024-10-01 | Fix |
| CVE-2024-47527 | LibreNMS has a stored XSS in librenms/includes/html/pages/device-dependencies.inc.php | 7.5CNA v3.1 | 0.5% | 2024-10-01 | Fix |
| CVE-2024-47526 | LibreNMS has a Self-XSS in librenms/includes/html/modal/alert_template.inc.php | 3.5CNA v3.1 | 0.5% | 2024-10-01 | Fix |
| CVE-2024-47525 | Stored XSS (cross-site scripting) in librenms/includes/html/print-alert-rules.php | 7.5CNA v3.1 | 29.6% | 2024-10-01 | Fix |
| CVE-2024-47524 | LibreNMS has stored cross-site scripting vulnerability in Device Group Name | 7.2CNA v3.1 | 0.5% | 2024-10-01 | Fix |
| CVE-2024-47523 | LibreNMS has stored cross-site scripting vulnerability in Alert Transports feature | 7.5CNA v3.1 | 0.6% | 2024-10-01 | Fix |
| CVE-2024-47396 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in moveaddons Move Addons for Elementor move-addons allows Stored XSS.This issue affects Move Addons for Elementor: from n/a through <= 1.3.3. | 5.4v3.1 | 0.3% | 2024-10-01 | Fix |
| CVE-2024-47295 | SEIKO EPSON Web Config insecure default initialization | 8.1CISA ADP v3.1 | 0.8% | 2024-10-01 | |
| CVE-2024-47071 | FreePBX endpointman OSS Endpoint Manager allows unauthorized access to read system files | 6.8CNA v3.1 | 0.5% | 2024-10-01 | Fix |
| CVE-2024-46276 | Randygaul Cute PNG out-of-bounds write | 7.8v3.1 | 0.5% | 2024-10-01 | |
| CVE-2024-46274 | Randygaul Cute PNG out-of-bounds write | 7.8v3.1 | 0.5% | 2024-10-01 | |
| CVE-2024-46267 | Randygaul Cute PNG out-of-bounds write | 7.8v3.1 | 0.5% | 2024-10-01 | |
| CVE-2024-46264 | Randygaul Cute PNG heap-based buffer overflow | 7.8v3.1 | 0.5% | 2024-10-01 | |
| CVE-2024-46263 | Randygaul Cute PNG out-of-bounds write | 7.8v3.1 | 0.5% | 2024-10-01 | |
| CVE-2024-46261 | Randygaul Cute PNG out-of-bounds write | 7.8v3.1 | 0.4% | 2024-10-01 | |
| CVE-2024-46259 | Randygaul Cute PNG out-of-bounds write | 7.8v3.1 | 0.5% | 2024-10-01 | |
| CVE-2024-46258 | Randygaul Cute PNG out-of-bounds write | 7.8v3.1 | 0.4% | 2024-10-01 | |
| CVE-2024-46084 | Scriptcase command injection | 8.0CISA ADP v3.1 | 0.8% | 2024-10-01 | |
| CVE-2024-46083 | Scriptcase cross-site scripting | 5.4CISA ADP v3.1 | 0.3% | 2024-10-01 | |
| CVE-2024-46082 | Scriptcase cross-site scripting | 5.4CISA ADP v3.1 | 0.3% | 2024-10-01 | |
| CVE-2024-46081 | Scriptcase cross-site scripting | 5.4CISA ADP v3.1 | 0.3% | 2024-10-01 | |
| CVE-2024-46080 | Scriptcase code injection | 8.0CISA ADP v3.1 | 0.8% | 2024-10-01 | |
| CVE-2024-46079 | Scriptcase cross-site scripting | 6.1CISA ADP v3.1 | 0.3% | 2024-10-01 | |
| CVE-2024-45999 | Magicbug Cloudlog SQL injection | 9.8v3.1 | 0.4% | 2024-10-01 | |
| CVE-2024-45967 | Pagekit cross-site scripting | 4.7CISA ADP v3.1 | 0.4% | 2024-10-01 | |
| CVE-2024-45408 | eLabFTW contains a direct and indirect information disclosure | 7.5CNA v3.1 | 0.4% | 2024-10-01 | Fix |
| CVE-2024-44744 | Malwarebytes Premium Security code injection | 5.7CISA ADP v3.1 | 0.4% | 2024-10-01 | |
| CVE-2024-44610 | PCAN-Ethernet Gateway processing.php command injection | 5.6CISA ADP v3.1 | 1.0% | 2024-10-01 | Exploit code |
| CVE-2024-42514 | Mitel Micontact Center Business unauthorized access | 8.1CISA ADP v3.1 | 0.4% | 2024-10-01 | Fix |
| CVE-2024-41673 | Decidim has a cross-site scripting vulnerability in the version control page | 7.1CNA v3.1 | 0.4% | 2024-10-01 | Fix |
| CVE-2024-41276 | Kaiten PIN code authentication vulnerability | 9.8CISA ADP v3.1 | 1.1% | 2024-10-01 | Exploit code |
| CVE-2024-31835 | FlatPress cross-site scripting | 4.8NVD v3.1 | 1.1% | 2024-10-01 | |
| CVE-2024-30132 | Missing default HTTP security headers affect HCL Nomad server on Domino | 3.7CNA v3.1 | 0.3% | 2024-10-01 | Fix |
| CVE-2024-25661 | Nokia Transcend Network Management System cleartext storage of sensitive information | 7.7CISA ADP v3.1 | 0.1% | 2024-10-01 | |
| CVE-2024-25660 | Nokia Transcend Network Management System incorrect privilege assignment | 9.0CISA ADP v3.1 | 0.6% | 2024-10-01 | |
| CVE-2024-25659 | Nokia Transcend Network Management System path traversal | 7.2CISA ADP v3.1 | 0.7% | 2024-10-01 | |
| CVE-2024-25658 | Nokia Transcend Network Management System Infinera TNMS cleartext storage of sensitive information | 6.5CISA ADP v3.1 | 0.2% | 2024-10-01 | |
| CVE-2024-25632 | eLabFTW team administrator privilege assignment privilege escalation | 8.6CNA v3.1 | 0.4% | 2024-10-01 | Fix |
| CVE-2024-21531 | git-shallow-clone argument injection | 5.3CNA v3.1 | 0.9% | 2024-10-01 | |
| CVE-2024-21489 | uPlot prototype pollution | 8.8CNA v4.0 | 0.7% | 2024-10-01 | Fix |
| CVE-2024-9411 | OFCMS add.json add cross-site scripting | 5.3CNA v4.0 | 0.4% | 2024-10-01 | |
| CVE-2024-9407 | Red Hat Enterprise Linux 8 improper input validation in Buildah and Podman | 4.7CNA v3.1 | 0.3% | 2024-10-01 | Fix |
| CVE-2024-9405 | Pluck CMS relative path traversal | 5.3CNA v3.1 | 0.5% | 2024-10-01 | |
| CVE-2024-9403 | Mozilla Firefox memory safety bugs | 7.3CISA ADP v3.1 | 0.4% | 2024-10-01 | Fix |
| CVE-2024-9402 | Mozilla Firefox memory safety bugs | 9.8CISA ADP v3.1 | 0.6% | 2024-10-01 | Fix |
| CVE-2024-9401 | Mozilla Firefox memory safety bugs | 9.8CISA ADP v3.1 | 0.7% | 2024-10-01 | Fix |
| CVE-2024-9400 | Mozilla Firefox memory corruption | 8.8CISA ADP v3.1 | 0.5% | 2024-10-01 | Fix |
| CVE-2024-9399 | Mozilla Firefox improper resource release | 7.5v3.1 | 0.5% | 2024-10-01 | Fix |
| CVE-2024-9398 | Mozilla Firefox observable discrepancy | 5.3NVD v3.1 | 0.6% | 2024-10-01 | Fix |
| CVE-2024-9397 | Mozilla Firefox clickjacking | 6.1v3.1 | 0.4% | 2024-10-01 | Fix |
| CVE-2024-9396 | Mozilla Firefox memory corruption | 8.8CISA ADP v3.1 | 0.6% | 2024-10-01 | Fix |
| CVE-2024-9395 | A specially crafted filename containing a large number of spaces could obscure the file's extension when displayed in the download dialog. *This bug only affects Firefox for Android. Other versions of Firefox are unaffected.* This vulnerability affects Firefox < 131. | 5.3CISA ADP v3.1 | 0.3% | 2024-10-01 | Fix |
| CVE-2024-9394 | Mozilla Firefox cross-site scripting | 7.5v3.1 | 0.5% | 2024-10-01 | Fix |
| CVE-2024-9393 | Mozilla Firefox origin validation error | 7.5v3.1 | 0.4% | 2024-10-01 | Fix |
| CVE-2024-9392 | Mozilla Firefox origin validation error | 9.8CISA ADP v3.1 | 0.5% | 2024-10-01 | Fix |
| CVE-2024-9391 | Mozilla Firefox authentication bypass by spoofing | 6.5CISA ADP v3.1 | 0.3% | 2024-10-01 | Fix |
| CVE-2024-9360 | code-projects Restaurant Reservation System updatebal.php SQL injection | 9.8v3.1 | 0.8% | 2024-10-01 | |
| CVE-2024-9359 | code-projects Restaurant Reservation System addcompany.php SQL injection | 9.8v3.1 | 0.8% | 2024-10-01 | |
| CVE-2024-9358 | ThingsBoard HTTP RPC API resource consumption | 5.9v3.1 | 0.8% | 2024-10-01 | |
| CVE-2024-9355 | Red Hat Enterprise Linux 7 Extended Lifecycle Support golang-fips: Golang fips zeroed buffer | 6.5CNA v3.1 | 0.3% | 2024-10-01 | Fix |
| CVE-2024-9341 | Podman: Buildah: Cri-o: Fips crypto-policy directory mounting issue in containers/common go library | 5.4CNA v3.1 | 1.0% | 2024-10-01 | Fix |
| CVE-2024-9304 | LocateAndFilter WordPress plugin stored cross-site scripting | 6.4CNA v3.1 | 0.3% | 2024-10-01 | Fix |
| CVE-2024-9289 | WordPress and WooCommerce Affiliate Program WordPress plugin authentication bypass | 9.8CNA v3.1 | 0.6% | 2024-10-01 | Fix |
| CVE-2024-9274 | Elastik Page Builder WordPress plugin stored cross-site scripting | 6.4CNA v3.1 | 0.3% | 2024-10-01 | |
| CVE-2024-9272 | R Animated Icon WordPress plugin stored cross-site scripting | 6.4CNA v3.1 | 0.3% | 2024-10-01 | |
| CVE-2024-9269 | Relogo WordPress plugin authenticated (Author+) stored cross-site scripting via SVG file upload | 6.4CNA v3.1 | 0.3% | 2024-10-01 | |
| CVE-2024-9267 | Easy WordPress Subscribe Optin Hound plugin reflected cross-site scripting | 6.1CNA v3.1 | 0.4% | 2024-10-01 | |
| CVE-2024-9265 | Echo RSS Feed Post Generator WordPress plugin unauthenticated privilege escalation | 9.8CNA v3.1 | 0.6% | 2024-10-01 | Fix |
| CVE-2024-9241 | PDF Image Generator WordPress plugin reflected cross-site scripting | 6.1CNA v3.1 | 0.3% | 2024-10-01 | |
| CVE-2024-9228 | Loggedin Limit Active Logins WordPress plugin reflected cross-site scripting | 6.1CNA v3.1 | 0.4% | 2024-10-01 | Fix |
| CVE-2024-9224 | Hello World WordPress plugin authenticated (Subscriber+) arbitrary file read | 6.5CNA v3.1 | 1.5% | 2024-10-01 | Exploit codeFix |
| CVE-2024-9220 | LH Copy Media File WordPress plugin reflected cross-site scripting | 6.1CNA v3.1 | 0.4% | 2024-10-01 | Fix |
| CVE-2024-9209 | WP Search Analytics WordPress plugin reflected cross-site scripting | 6.1CNA v3.1 | 0.4% | 2024-10-01 | Fix |
| CVE-2024-9145 | Local command injection in Wiz Code Visual Studio Code extension | 7.1CNA v4.0 | 0.8% | 2024-10-01 | |
| CVE-2024-9119 | SVG Complete WordPress plugin stored cross-site scripting | 6.4CNA v3.1 | 0.3% | 2024-10-01 | |
| CVE-2024-9118 | QS Dark Mode WordPress plugin stored cross-site scripting | 6.4CNA v3.1 | 0.3% | 2024-10-01 | Fix |
| CVE-2024-9108 | Wechat Social login WordPress plugin unauthenticated arbitrary file upload | 9.8CNA v3.1 | 0.9% | 2024-10-01 | |
| CVE-2024-9106 | Wechat Social login WordPress plugin authentication bypass | 9.8CNA v3.1 | 1.7% | 2024-10-01 | Exploit code |
| CVE-2024-9060 | AVIF and SVG Uploader WordPress plugin stored cross-site scripting | 6.4CNA v3.1 | 0.4% | 2024-10-01 | Fix |
| CVE-2024-9018 | WP Easy Gallery WordPress plugin authenticated (Contributor+) SQL injection via key parameter | 8.8CNA v3.1 | 0.5% | 2024-10-01 | |
| CVE-2024-8990 | Geo Mashup WordPress plugin stored cross-site scripting | 6.4CNA v3.1 | 0.4% | 2024-10-01 | Fix |
| CVE-2024-8989 | Stars Testimonials WordPress plugin stored cross-site scripting | 6.4CNA v3.1 | 0.3% | 2024-10-01 | Fix |
| CVE-2024-8981 | Broken Link Checker WordPress plugin reflected cross-site scripting | 7.1CNA v3.1 | 0.5% | 2024-10-01 | Fix |
| CVE-2024-8799 | Custom Banners WordPress plugin reflected cross-site scripting | 6.1CNA v3.1 | 0.3% | 2024-10-01 | |
| CVE-2024-8793 | Store Exporter for WooCommerce WordPress plugin reflected cross-site scripting | 6.1CNA v3.1 | 0.4% | 2024-10-01 | Fix |
| CVE-2024-8786 | Auto Featured Image from Title WordPress plugin reflected cross-site scripting | 6.1CNA v3.1 | 0.4% | 2024-10-01 | Fix |
| CVE-2024-8728 | Easy Load More WordPress plugin reflected cross-site scripting | 6.1CNA v3.1 | 0.3% | 2024-10-01 | |
| CVE-2024-8727 | DK PDF WordPress plugin reflected cross-site scripting | 6.1CNA v3.1 | 0.4% | 2024-10-01 | Fix |
| CVE-2024-8720 | RumbleTalk Live Group Chat HTML5 WordPress plugin stored cross-site scripting | 6.4CNA v3.1 | 0.3% | 2024-10-01 | Fix |
| CVE-2024-8718 | Gravity Forms Toolbar WordPress plugin reflected cross-site scripting | 6.1CNA v3.1 | 0.4% | 2024-10-01 | |
| CVE-2024-8675 | Soumettre.fr WordPress plugin missing authorization | 4.3CNA v3.1 | 0.3% | 2024-10-01 | Fix |
| CVE-2024-8632 | KB Support WordPress plugin unauthorized access | 6.5CNA v3.1 | 0.3% | 2024-10-01 | Fix |
| CVE-2024-8548 | KB Support WordPress plugin unauthorized access | 8.1CNA v3.1 | 0.4% | 2024-10-01 | Fix |
| CVE-2024-8430 | Spice Starter Sites WordPress plugin missing authorization to unauthenticated Demo content import | 5.3CNA v3.1 | 0.3% | 2024-10-01 | |
| CVE-2024-8324 | XO Slider WordPress plugin authenticated (Contributor+) stored cross-site scripting | 6.4CNA v3.1 | 0.3% | 2024-10-01 | |
| CVE-2024-8288 | Guten Post Layout WordPress plugin stored cross-site scripting | 6.4CNA v3.1 | 0.3% | 2024-10-01 | Fix |
| CVE-2024-8107 | Slider Revolution WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.3% | 2024-10-01 | Fix |
| CVE-2024-7869 | 123.chat - Video Chat WordPress plugin unauthenticated stored cross-site scripting | 7.2CNA v3.1 | 0.4% | 2024-10-01 | |
| CVE-2024-7434 | UltraPress WordPress theme authenticated (Contributor+) PHP object injection | 8.8CNA v3.1 | 0.6% | 2024-10-01 | |
| CVE-2024-7433 | Empowerment WordPress theme authenticated (Contributor+) PHP object injection | 8.8CNA v3.1 | 0.6% | 2024-10-01 | |
| CVE-2024-7432 | Unseen Blog WordPress theme authenticated (Contributor+) PHP object injection | 8.8CNA v3.1 | 0.6% | 2024-10-01 | |
| CVE-2024-0116 | NVIDIA Triton Inference Server out-of-bounds read | 4.9CNA v3.1 | 0.5% | 2024-10-01 | Fix |