CVE-2024 records published in November 2024
This page lists the 3,750 CVE-2024 records published in November 2024, newest first, 1,000 to a page. The Cybersecurity and Infrastructure Security Agency's Known Exploited Vulnerabilities (KEV) catalog lists 16 of them. Each CVE opens on cve-security.com with its sources, detection content and vendor fixes, and the search on the CVE-2024 list filters these records by severity or signal.
- Critical
- 45612.2% of these records
- Listed in CISA KEV
- 160.4% of these records
- Reported exploited
- 30.1% of these records
- Detection signal
- 481.3% of these records
- Exploit code
- 1123.0% of these records
- Actionable vendor fix
- 2,34162.4% of these records
Figures as of 2026-10-24 13:18 UTC. Records published in November 2024 have had from about 23 months to about 24 months to collect KEV listings, exploitation reports, detection content and exploit code. Records published more recently have had less time, which can hold their shares down.
| CVE | Summary | CVSS | EPSS | Published | Signals |
|---|---|---|---|---|---|
| CVE-2024-53788 | WordPress Portfolio Builder Portfolio Gallery plugin cross-site scripting (XSS) | 5.9CNA v3.1 | 0.3% | 2024-11-30 | |
| CVE-2024-53787 | Random Banner WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.3% | 2024-11-30 | |
| CVE-2024-53786 | Cowidgets Elementor Addons WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.3% | 2024-11-30 | |
| CVE-2024-53783 | Ni WooCommerce Cost Of Goods WordPress plugin SQL injection | 7.6CNA v3.1 | 0.5% | 2024-11-30 | Fix |
| CVE-2024-53778 | Essential Breadcrumbs WordPress plugin CSRF to stored cross-site scripting (XSS) | 7.1CNA v3.1 | 0.2% | 2024-11-30 | |
| CVE-2024-53774 | Sparkle Elementor Kit WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.3% | 2024-11-30 | |
| CVE-2024-53773 | Znajdź Pracę z Praca.pl WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.3% | 2024-11-30 | |
| CVE-2024-53772 | Mail Picker WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.3% | 2024-11-30 | Fix |
| CVE-2024-53771 | SimpleSchema WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.3% | 2024-11-30 | |
| CVE-2024-53768 | Content Audit Exporter WordPress plugin sensitive data exposure | 5.3CNA v3.1 | 0.4% | 2024-11-30 | |
| CVE-2024-53767 | Pixobe Cartography WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.3% | 2024-11-30 | |
| CVE-2024-53766 | Devnex Addons For Elementor WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.3% | 2024-11-30 | |
| CVE-2024-53764 | Softtemplates For Elementor WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.3% | 2024-11-30 | |
| CVE-2024-53763 | Best Addons for Elementor WordPress plugin stored cross-site scripting (XSS) | 6.5CNA v3.1 | 0.3% | 2024-11-30 | |
| CVE-2024-53760 | Capitalize My Title WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.3% | 2024-11-30 | |
| CVE-2024-53758 | WP MathJax WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.3% | 2024-11-30 | |
| CVE-2024-53757 | WP Find Your Nearest WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.3% | 2024-11-30 | |
| CVE-2024-53756 | Vertical Carousel WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.3% | 2024-11-30 | |
| CVE-2024-53739 | Cryptocurrency Widgets For Elementor WordPress plugin local file inclusion | 9.8v3.1 | 0.6% | 2024-11-30 | Fix |
| CVE-2024-53738 | Asset CleanUp: Page Speed Booster WordPress plugin server side request forgery (SSRF) | 4.4CNA v3.1 | 0.3% | 2024-11-30 | Fix |
| CVE-2024-43703 | GPU DDK Duplicate calls to RGXCreateFreeList on the same reservation leads to GPU UAF | 8.1CISA ADP v3.1 | 0.4% | 2024-11-30 | Fix |
| CVE-2024-43702 | GPU DDK MLIST/PM render state buffers writable allowing arbitrary writes to kernel memory pages | 8.1CISA ADP v3.1 | 0.3% | 2024-11-30 | Fix |
| CVE-2024-12002 | Tenda FH451/FH1201/FH1202/FH1206 GetIPTV websReadEvent null pointer dereference | 6.5v3.1 | 0.8% | 2024-11-30 | |
| CVE-2024-12001 | code-projects Wazifa System setting updatesettings.php cross-site scripting | 5.4v3.1 | 0.4% | 2024-11-30 | |
| CVE-2024-12000 | code-projects Blood Bank System setting updatesettings.php cross-site scripting | 5.4v3.1 | 0.4% | 2024-11-30 | |
| CVE-2024-11998 | code-projects Farmacia visualizer-forneccedor.chp SQL injection | 7.5v3.1 | 0.4% | 2024-11-30 | |
| CVE-2024-11997 | code-projects Farmacia vendas.php cross-site scripting | 5.4v3.1 | 0.4% | 2024-11-30 | |
| CVE-2024-11996 | code-projects Farmacia editar-fornecedor.php cross-site scripting | 5.4v3.1 | 0.4% | 2024-11-30 | |
| CVE-2024-11252 | Social Sharing Plugin Sassy Social Share WordPress plugin reflected cross-site scripting | 6.1CNA v3.1 | 0.9% | 2024-11-30 | Fix |
| CVE-2024-54159 | stalld through 1.19.7 allows local users to cause a denial of service (file overwrite) via a /tmp/rtthrottle symlink attack. | 4.1CNA v3.1 | 0.2% | 2024-11-29 | Fix |
| CVE-2024-54124 | Click Studios Passwordstate edit folder screen vulnerability | 8.8CISA ADP v3.1 | 0.4% | 2024-11-29 | |
| CVE-2024-54123 | Backdrop Cms cross-site scripting | 6.1CISA ADP v3.1 | 0.3% | 2024-11-29 | Fix |
| CVE-2024-53983 | Server-side request forgery in Backstage Scaffolder plugin | 5.4CNA v3.1 | 0.4% | 2024-11-29 | Fix |
| CVE-2024-53980 | RIOT-OS RIOT spoofed length byte traps CC2538 in endless loop | 6.9CNA v4.0 | 0.8% | 2024-11-29 | |
| CVE-2024-53979 | zhmcclient zhmc-ansible-modules cleartext storage of sensitive information | 8.3CNA v3.1 | 0.1% | 2024-11-29 | Fix |
| CVE-2024-53865 | Python package zhmcclient has passwords in clear text in its HMC and API logs | 8.3CNA v3.1 | 0.1% | 2024-11-29 | Fix |
| CVE-2024-53864 | Cross-site scripting in a field that is used in the Content name pattern in ibexa/admin-ui | 5.3CNA v4.0 | 0.5% | 2024-11-29 | Fix |
| CVE-2024-53861 | Issuer field partial matches allowed in pyjwt | 2.2CNA v3.1 | 0.8% | 2024-11-29 | Fix |
| CVE-2024-53848 | python-jsonschema check-jsonschema remote schema cache vulnerability | 7.1CNA v3.1 | 0.1% | 2024-11-29 | Fix |
| CVE-2024-53701 | FCNT arrows N F-51C missing authentication | 3.1CNA v3.0 | 0.2% | 2024-11-29 | |
| CVE-2024-53623 | TP-Link Archer C7 l_0_0.xml configuration endpoint missing authentication | 7.5CISA ADP v3.1 | 0.4% | 2024-11-29 | |
| CVE-2024-53507 | b3log siyuan SQL injection | 9.8CISA ADP v3.1 | 0.6% | 2024-11-29 | |
| CVE-2024-53506 | b3log siyuan SQL injection | 9.8CISA ADP v3.1 | 0.5% | 2024-11-29 | |
| CVE-2024-53505 | b3log siyuan SQL injection | 9.8CISA ADP v3.1 | 0.5% | 2024-11-29 | |
| CVE-2024-53504 | b3log siyuan SQL injection | 9.8CISA ADP v3.1 | 0.6% | 2024-11-29 | |
| CVE-2024-52810 | Prototype pollution in @intlify/shared | 6.9CNA v4.0 | 0.8% | 2024-11-29 | Fix |
| CVE-2024-52809 | Cross-site scripting vulnerability with prototype pollution in vue-i18n | 5.3CNA v4.0 | 0.7% | 2024-11-29 | Fix |
| CVE-2024-52801 | Brute force takeover of OpenID Connect session cookies in sftpgo | 5.3CNA v4.0 | 0.4% | 2024-11-29 | Fix |
| CVE-2024-52800 | Potential XXE (XML external entity injection) vulnerability in veraPDF CLI | 2.3CNA v4.0 | 1.1% | 2024-11-29 | Exploit codeFix |
| CVE-2024-52782 | Dcnetworks Dcme-320-l remote code execution | 9.8CISA ADP v3.1 | 0.7% | 2024-11-29 | |
| CVE-2024-52781 | Dcnetworks Dcme-320-l remote code execution | 9.8CISA ADP v3.1 | 0.7% | 2024-11-29 | |
| CVE-2024-52780 | Dcnetworks Dcme-320-l remote code execution | 9.8CISA ADP v3.1 | 0.7% | 2024-11-29 | |
| CVE-2024-52779 | Dcnetworks Dcme-320-l remote code execution | 9.8CISA ADP v3.1 | 0.7% | 2024-11-29 | |
| CVE-2024-52778 | Dcnetworks Dcme-320-l remote code execution | 9.8CISA ADP v3.1 | 0.7% | 2024-11-29 | |
| CVE-2024-52777 | Dcnetworks Dcme-320-l remote code execution | 9.8CISA ADP v3.1 | 0.8% | 2024-11-29 | |
| CVE-2024-52003 | X-Forwarded-Prefix header still allows for open redirect in traefik | 6.3CNA v4.0 | 0.4% | 2024-11-29 | Fix |
| CVE-2024-50357 | Century Systems FutureNet NXR-G110 series incorrect behavior | 9.8CNA v3.0 | 0.6% | 2024-11-29 | |
| CVE-2024-49806 | IBM Security Verify Access Appliance hard coded credentials | 9.4CNA v3.1 | 0.3% | 2024-11-29 | Fix |
| CVE-2024-49805 | IBM Security Verify Access Appliance hard coded credentials | 9.4CNA v3.1 | 0.3% | 2024-11-29 | Fix |
| CVE-2024-49804 | IBM Security Verify Access Appliance privilege escalation | 7.8CNA v3.1 | 0.2% | 2024-11-29 | Fix |
| CVE-2024-49803 | IBM Security Verify Access Appliance command execution | 9.8CNA v3.1 | 0.8% | 2024-11-29 | Fix |
| CVE-2024-49360 | Path traversal in Sandboxie | 9.2CNA v3.1 | 0.5% | 2024-11-29 | |
| CVE-2024-48651 | ProFTPD mod_sql supplemental groups incorrect authorization | 7.5CISA ADP v3.1 | 2.2% | 2024-11-29 | NucleiFix |
| CVE-2024-48406 | SunBK201 umicat buffer overflow | 9.8CISA ADP v3.1 | 0.9% | 2024-11-29 | |
| CVE-2024-47193 | WithSecure Elements Agent and Client Security for Mac denial of service | 5.5CISA ADP v3.1 | 0.2% | 2024-11-29 | |
| CVE-2024-47094 | Checkmk logging of sitesecret to automations log | 5.7CNA v4.0 | 0.2% | 2024-11-29 | Fix |
| CVE-2024-45495 | MSA FieldServer Gateway WebSocket vulnerability | 4.3CISA ADP v3.1 | 0.2% | 2024-11-29 | |
| CVE-2024-39162 | Pyspider cross-site scripting | 6.1CISA ADP v3.1 | 0.4% | 2024-11-29 | |
| CVE-2024-36671 | nodemcu struct.c getnum function integer overflow | 9.8CISA ADP v3.1 | 0.8% | 2024-11-29 | |
| CVE-2024-36626 | PrestaShop null pointer dereference | 5.3CISA ADP v3.1 | 0.7% | 2024-11-29 | |
| CVE-2024-36625 | zulip cross-site scripting | 6.1CISA ADP v3.1 | 0.4% | 2024-11-29 | |
| CVE-2024-36624 | zulip cross-site scripting | 6.1CISA ADP v3.1 | 0.4% | 2024-11-29 | |
| CVE-2024-36623 | Mobyproject moby race condition | 8.1CISA ADP v3.1 | 0.6% | 2024-11-29 | Fix |
| CVE-2024-36622 | raspap-webgui code injection | 9.8CISA ADP v3.1 | 2.8% | 2024-11-29 | |
| CVE-2024-36621 | Mobyproject moby race condition | 6.5CISA ADP v3.1 | 0.6% | 2024-11-29 | Fix |
| CVE-2024-36620 | Null pointer dereference on moby image history | 6.5CISA ADP v3.1 | 0.8% | 2024-11-29 | Fix |
| CVE-2024-36619 | FFmpeg integer overflow | 5.3CISA ADP v3.1 | 0.7% | 2024-11-29 | Fix |
| CVE-2024-36618 | FFmpeg integer overflow | 6.2CISA ADP v3.1 | 0.2% | 2024-11-29 | Fix |
| CVE-2024-36617 | FFmpeg integer overflow | 6.2CISA ADP v3.1 | 0.2% | 2024-11-29 | Fix |
| CVE-2024-36616 | FFmpeg component /libavformat/westwood_vqa.c integer overflow | 6.5CISA ADP v3.1 | 0.6% | 2024-11-29 | Fix |
| CVE-2024-36615 | FFmpeg race condition | 5.9CISA ADP v3.1 | 0.4% | 2024-11-29 | Fix |
| CVE-2024-36612 | Zulip Server out-of-bounds read | 7.5CISA ADP v3.1 | 0.6% | 2024-11-29 | |
| CVE-2024-36611 | Symfony FormLoginAuthenticator incorrect authorization | 7.5CISA ADP v3.1 | 0.8% | 2024-11-29 | Fix |
| CVE-2024-35451 | LinkStack server-side request forgery | 4.8CISA ADP v3.1 | 0.3% | 2024-11-29 | |
| CVE-2024-35371 | Ant-Media-Server vulnerable to improper output neutralization for logs | 7.5CISA ADP v3.1 | 0.5% | 2024-11-29 | Fix |
| CVE-2024-35369 | FFmpeg integer overflow | 5.5CISA ADP v3.1 | 0.2% | 2024-11-29 | Fix |
| CVE-2024-35368 | FFmpeg RKMPP decoder double free | 9.8CISA ADP v3.1 | 0.7% | 2024-11-29 | Fix |
| CVE-2024-35367 | FFmpeg out-of-bounds read | 9.1CISA ADP v3.1 | 0.7% | 2024-11-29 | Fix |
| CVE-2024-35366 | FFmpeg integer overflow | 9.1CISA ADP v3.1 | 0.6% | 2024-11-29 | Fix |
| CVE-2024-11995 | code-projects Farmacia pagamento.php cross-site scripting | 6.1v3.1 | 0.4% | 2024-11-29 | |
| CVE-2024-11992 | Path traversal vulnerability in Quick.CMS | 9.1CNA v3.1 | 0.8% | 2024-11-29 | |
| CVE-2024-11990 | Cross-site scripting (XSS) en SurgeMail de NetWin | 4.6CNA v3.1 | 0.3% | 2024-11-29 | |
| CVE-2024-11983 | Billion Electric router OS command injection | 7.2CNA v3.1 | 1.1% | 2024-11-29 | Fix |
| CVE-2024-11982 | Billion Electric router plaintext storage of a password | 7.2CNA v3.1 | 0.6% | 2024-11-29 | Fix |
| CVE-2024-11981 | Billion Electric router authentication bypass | 7.5CNA v3.1 | 0.5% | 2024-11-29 | Fix |
| CVE-2024-11980 | Billion Electric router missing authentication | 8.6CNA v3.1 | 0.5% | 2024-11-29 | Fix |
| CVE-2024-11979 | Interinfo DreamMaker unrestricted file upload through path traversal | 9.8CNA v3.1 | 0.8% | 2024-11-29 | Fix |
| CVE-2024-11978 | Interinfo DreamMaker arbitrary file reading through path traversal | 7.5CNA v3.1 | 0.8% | 2024-11-29 | Fix |
| CVE-2024-11482 | Trellix Enterprise Security Manager (ESM) OS command injection | 9.8CNA v3.1 | 2.5% | 2024-11-29 | |
| CVE-2024-11481 | Trellix Enterprise Security Manager (ESM) path traversal | 8.2CNA v3.1 | 0.4% | 2024-11-29 | |
| CVE-2024-11014 | NEC UNIVERGE IX NEC Corporation cross-site request forgery | 4.3CNA v3.1 | 0.2% | 2024-11-29 | |
| CVE-2024-11013 | NEC UNIVERGE IX NEC Corporation command injection | 7.2CNA v3.1 | 1.1% | 2024-11-29 | |
| CVE-2024-10980 | Element Pack Elementor Addons WordPress plugin Contributor+ stored XSS | 5.4CISA ADP v3.1 | 0.4% | 2024-11-29 | Fix |
| CVE-2024-10704 | Photo Gallery by 10Web WordPress plugin Admin+ stored XSS | 4.8CISA ADP v3.1 | 0.4% | 2024-11-29 | Fix |
| CVE-2024-9044 | XML external entity (XXE) vulnerability in EasyTax | 4.6CNA v4.0 | 0.2% | 2024-11-29 | |
| CVE-2024-53737 | WP Mailster WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.3% | 2024-11-28 | Fix |
| CVE-2024-53736 | Custom Shortcode Sidebars WordPress plugin CSRF to stored XSS | 7.1CNA v3.1 | 0.2% | 2024-11-28 | |
| CVE-2024-53734 | Idealien Category Enhancements WordPress plugin CSRF to stored XSS | 7.1CNA v3.1 | 0.2% | 2024-11-28 | |
| CVE-2024-53733 | Fence URL WordPress plugin CSRF to stored XSS | 7.1CNA v3.1 | 0.3% | 2024-11-28 | |
| CVE-2024-53732 | Footer Flyout Widget WordPress plugin CSRF to stored XSS | 7.1CNA v3.1 | 0.2% | 2024-11-28 | |
| CVE-2024-53731 | Fintelligence Calculator WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.3% | 2024-11-28 | |
| CVE-2024-53008 | HAProxy HTTP request smuggling | 5.3CNA v3.0 | 1.0% | 2024-11-28 | Fix |
| CVE-2024-52501 | Office Locator WordPress plugin local file inclusion | 7.5CNA v3.1 | 0.7% | 2024-11-28 | |
| CVE-2024-52499 | Pricing table addon for elementor WordPress plugin local file inclusion | 7.5CNA v3.1 | 0.7% | 2024-11-28 | |
| CVE-2024-52498 | SP Blog Designer WordPress plugin local file inclusion | 7.5CNA v3.1 | 0.6% | 2024-11-28 | |
| CVE-2024-52497 | Shopready WordPress plugin local file inclusion | 7.5CNA v3.1 | 0.7% | 2024-11-28 | |
| CVE-2024-52496 | Absolute Addons For Elementor WordPress plugin local file inclusion | 7.5CNA v3.1 | 0.7% | 2024-11-28 | |
| CVE-2024-52495 | Distance Based Shipping Calculator WordPress plugin SQL injection | 8.5CNA v3.1 | 0.4% | 2024-11-28 | Fix |
| CVE-2024-52490 | Pathomation WordPress plugin arbitrary file upload | 10.0CNA v3.1 | 0.6% | 2024-11-28 | |
| CVE-2024-52481 | Jobify WordPress theme unauthenticated arbitrary file read | 7.5v3.1 | 0.7% | 2024-11-28 | Fix |
| CVE-2024-52475 | Wawp WordPress plugin account takeover | 9.8CNA v3.1 | 1.9% | 2024-11-28 | Exploit codeFix |
| CVE-2024-52474 | Express Payments WordPress plugin SQL injection | 9.3CNA v3.1 | 0.5% | 2024-11-28 | Fix |
| CVE-2024-52338 | Apache Arrow R package: Arbitrary code execution when loading a malicious data file | 9.8CISA ADP v3.1 | 2.3% | 2024-11-28 | Fix |
| CVE-2024-52283 | SUSE hackweek cross-site scripting | 5.7CNA v3.1 | 0.4% | 2024-11-28 | |
| CVE-2024-49503 | SUSE Manager Setup Wizard organization credentials page reflected cross-site scripting | 4.6CNA v4.0 | 0.3% | 2024-11-28 | Fix |
| CVE-2024-49502 | SUSE Manager Setup Wizard HTTP proxy credentials pane reflected cross-site scripting | 4.6CNA v4.0 | 0.3% | 2024-11-28 | Fix |
| CVE-2024-46939 | Game Extension Engine path traversal | 2.4CNA v4.0 | 0.2% | 2024-11-28 | |
| CVE-2024-38658 | FUJI ELECTRIC CO., LTD. and Hakko Electronics V-Server There is an out-of-bounds read | 7.8CISA ADP v3.1 | 0.2% | 2024-11-28 | |
| CVE-2024-38389 | FUJI ELECTRIC CO., LTD. and Hakko Electronics TELLUS There is an out-of-bounds read | 7.8CISA ADP v3.1 | 0.2% | 2024-11-28 | |
| CVE-2024-38309 | FUJI ELECTRIC CO., LTD. and Hakko Electronics V-SFT There are multiple stack-based buffer overflow | 7.8CISA ADP v3.1 | 0.2% | 2024-11-28 | |
| CVE-2024-36466 | Unauthenticated Zabbix frontend takeover when SSO is being used | 8.8CNA v3.1 | 0.7% | 2024-11-28 | Fix |
| CVE-2024-22038 | SUSE openSUSE Factory link following | 6.8CNA v4.0 | 0.2% | 2024-11-28 | Fix |
| CVE-2024-22037 | SUSE Manager Server database password leaked by systemd uyuni-server-attestation service | 5.7CNA v4.0 | 0.2% | 2024-11-28 | Fix |
| CVE-2024-11971 | Guizhou Xiaoma Technology Jpress Avatar upload cross-site scripting | 5.4v3.1 | 0.5% | 2024-11-28 | |
| CVE-2024-11970 | code-projects Concert Ticket Ordering System tour(cor).php SQL injection | 9.8v3.1 | 0.8% | 2024-11-28 | |
| CVE-2024-11969 | Incorrect default permissions in Cradlepoint NetCloud Exchange | 8.8CNA v3.1 | 0.2% | 2024-11-28 | |
| CVE-2024-11968 | code-projects Farmacia pagamento.php SQL injection | 7.5v3.1 | 0.6% | 2024-11-28 | |
| CVE-2024-11967 | PHPGurukul Complaint Management System reset-password.php SQL injection | 9.8v3.1 | 0.7% | 2024-11-28 | |
| CVE-2024-11966 | PHPGurukul Complaint Management System index.php SQL injection | 9.8v3.1 | 0.9% | 2024-11-28 | |
| CVE-2024-11965 | PHPGurukul Complaint Management System reset-password.php SQL injection | 9.8v3.1 | 0.9% | 2024-11-28 | |
| CVE-2024-11964 | PHPGurukul Complaint Management System index.php SQL injection | 9.8v3.1 | 0.9% | 2024-11-28 | |
| CVE-2024-11963 | code-projects Responsive Hotel Site room.php SQL injection | 8.8v3.1 | 0.7% | 2024-11-28 | |
| CVE-2024-11962 | code-projects Simple Car Rental System login.php SQL injection | 9.8v3.1 | 0.9% | 2024-11-28 | |
| CVE-2024-11961 | Guangzhou Huayi Intelligent Technology Jeewms WmOmNoticeHController information disclosure | 7.5v3.1 | 0.9% | 2024-11-28 | |
| CVE-2024-11960 | D-Link DIR-605L formSetPortTr buffer overflow | 8.8v3.1 | 1.8% | 2024-11-28 | |
| CVE-2024-11959 | D-Link DIR-605L formResetStatistic buffer overflow | 8.8v3.1 | 1.8% | 2024-11-28 | |
| CVE-2024-11933 | Fuji Electric Monitouch V-SFT X1 File Parsing heap-based buffer overflow remote code execution | 7.8v3.1 | 0.3% | 2024-11-28 | |
| CVE-2024-11925 | WP JobSearch WordPress plugin authentication bypass to account takeover and privilege escalation | 9.8CNA v3.1 | 0.7% | 2024-11-28 | Fix |
| CVE-2024-11918 | Image Alt Text WordPress plugin missing authorization authenticated Image Alt Text update | 4.3CNA v3.1 | 0.3% | 2024-11-28 | Fix |
| CVE-2024-11803 | Fuji Electric Tellus Lite V-Simulator 5 V8 File Parsing out-of-bounds write remote code execution | 7.8v3.1 | 0.3% | 2024-11-28 | Fix |
| CVE-2024-11802 | Fuji Electric Tellus Lite V-Simulator V8 file parser stack-based buffer overflow | 7.8v3.1 | 0.3% | 2024-11-28 | Fix |
| CVE-2024-11801 | Fuji Electric Tellus Lite V-Simulator 5 V8 File Parsing out-of-bounds write remote code execution | 7.8v3.1 | 0.3% | 2024-11-28 | |
| CVE-2024-11800 | Fuji Electric Tellus Lite V-Simulator V8 file parser stack-based buffer overflow | 7.8v3.1 | 0.3% | 2024-11-28 | |
| CVE-2024-11799 | Fuji Electric Tellus Lite V-Simulator V8 file parser stack-based buffer overflow | 7.8v3.1 | 0.3% | 2024-11-28 | |
| CVE-2024-11798 | Fuji Electric Monitouch V-SFT X1 File Parsing out-of-bounds write remote code execution | 7.8v3.1 | 0.3% | 2024-11-28 | |
| CVE-2024-11797 | Fuji Electric Monitouch V-SFT V8 File Parsing out-of-bounds write remote code execution | 7.8v3.1 | 0.3% | 2024-11-28 | Fix |
| CVE-2024-11796 | Fuji Electric Monitouch V-SFT V9C File Parsing out-of-bounds write remote code execution | 7.8v3.1 | 0.3% | 2024-11-28 | Fix |
| CVE-2024-11795 | Fuji Electric Monitouch V-SFT V8 File Parsing stack-based buffer overflow remote code execution | 7.8v3.1 | 0.3% | 2024-11-28 | Fix |
| CVE-2024-11794 | Fuji Electric Monitouch V-SFT V10 File Parsing out-of-bounds write remote code execution | 7.8v3.1 | 0.3% | 2024-11-28 | Fix |
| CVE-2024-11793 | Fuji Electric Monitouch V-SFT V9C File Parsing out-of-bounds write remote code execution | 7.8v3.1 | 0.3% | 2024-11-28 | Fix |
| CVE-2024-11792 | Fuji Electric Monitouch V-SFT V8 File Parsing stack-based buffer overflow remote code execution | 7.8v3.1 | 0.3% | 2024-11-28 | Fix |
| CVE-2024-11791 | Fuji Electric Monitouch V-SFT V8C File Parsing stack-based buffer overflow remote code execution | 7.8v3.1 | 0.3% | 2024-11-28 | Fix |
| CVE-2024-11790 | Fuji Electric Monitouch V-SFT V10 File Parsing stack-based buffer overflow remote code execution | 7.8v3.1 | 0.3% | 2024-11-28 | Fix |
| CVE-2024-11789 | Fuji Electric Monitouch V-SFT V10 File Parsing stack-based buffer overflow remote code execution | 7.8v3.1 | 0.3% | 2024-11-28 | Fix |
| CVE-2024-11788 | StreamWeasels YouTube Integration WordPress plugin stored cross-site scripting | 6.4CNA v3.1 | 0.4% | 2024-11-28 | Fix |
| CVE-2024-11787 | Fuji Electric Monitouch V-SFT V10 File Parsing stack-based buffer overflow remote code execution | 7.8v3.1 | 0.3% | 2024-11-28 | Fix |
| CVE-2024-11786 | Login with Vipps and MobilePay WordPress plugin stored cross-site scripting | 6.4CNA v3.1 | 0.4% | 2024-11-28 | Fix |
| CVE-2024-11761 | LegalWeb Cloud WordPress plugin authenticated (Contributor+) stored cross-site scripting | 6.4CNA v3.1 | 0.3% | 2024-11-28 | Fix |
| CVE-2024-11685 | `Kudos Donations WordPress plugin reflected cross-site scripting | 6.1CNA v3.1 | 0.3% | 2024-11-28 | Fix |
| CVE-2024-11684 | Kudos Donations WordPress plugin reflected cross-site scripting | 6.1CNA v3.1 | 0.4% | 2024-11-28 | Fix |
| CVE-2024-11620 | Rank Math SEO WordPress plugin arbitrary .htaccess Overwrite to remote code execution (RCE) | 7.2CNA v3.1 | 0.7% | 2024-11-28 | Fix |
| CVE-2024-11599 | Mattermost Domain Restriction Bypass on Registration | 8.2CNA v3.1 | 0.5% | 2024-11-28 | Fix |
| CVE-2024-11458 | FAQ Builder AYS WordPress plugin reflected cross-site scripting | 6.1CNA v3.1 | 0.5% | 2024-11-28 | Fix |
| CVE-2024-11431 | Ragic Shortcode WordPress plugin authenticated (Contributor+) stored cross-site scripting | 6.4CNA v3.1 | 0.4% | 2024-11-28 | Fix |
| CVE-2024-11402 | Block Editor Bootstrap Blocks WordPress plugin reflected cross-site scripting (XSS) | 7.1CNA v3.1 | 0.3% | 2024-11-28 | Fix |
| CVE-2024-11366 | SEO Landing Page Generator WordPress plugin reflected cross-site scripting | 6.1CNA v3.1 | 0.4% | 2024-11-28 | Fix |
| CVE-2024-11333 | HLS Player WordPress plugin authenticated (Contributor+) stored cross-site scripting | 6.4CNA v3.1 | 0.3% | 2024-11-28 | Fix |
| CVE-2024-11203 | EmbedPress WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.4% | 2024-11-28 | Fix |
| CVE-2024-11103 | Contest Gallery WordPress plugin privilege escalation | 9.8CNA v3.1 | 0.8% | 2024-11-28 | Fix |
| CVE-2024-11082 | Tumult Hype Animations WordPress plugin arbitrary file upload | 9.9CNA v3.1 | 1.2% | 2024-11-28 | Fix |
| CVE-2024-10896 | Logo Slider WordPress plugin Contributor+ stored XSS | 5.4CISA ADP v3.1 | 0.4% | 2024-11-28 | Fix |
| CVE-2024-10798 | Royal Elementor Addons and Templates WordPress plugin authenticated (Contributor+) post disclosure | 4.3CNA v3.1 | 0.4% | 2024-11-28 | Fix |
| CVE-2024-10780 | Restaurant and Cafe Addon for Elementor WordPress plugin post disclosure | 4.3CNA v3.1 | 0.4% | 2024-11-28 | Fix |
| CVE-2024-10670 | Primary Addon for Elementor WordPress plugin authenticated (Contributor+) post disclosure | 4.3CNA v3.1 | 0.4% | 2024-11-28 | Fix |
| CVE-2024-10510 | adBuddy+ (AdBlocker Detection) by NetfunkDesign WordPress plugin Admin+ stored XSS | 4.8CISA ADP v3.1 | 0.4% | 2024-11-28 | |
| CVE-2024-10493 | Element Pack Elementor Addons WordPress plugin Contributor+ stored XSS | 5.4CISA ADP v3.1 | 0.4% | 2024-11-28 | Fix |
| CVE-2024-10473 | Logo Slider WordPress plugin Author+ stored XSS | 5.4CISA ADP v3.1 | 0.4% | 2024-11-28 | Fix |
| CVE-2024-9852 | Mitsubishi Electric GENESIS64 uncontrolled search path | 7.8CNA v3.1 | 0.2% | 2024-11-28 | Fix |
| CVE-2024-9669 | File Manager Pro Filester WordPress plugin local JavaScript file inclusion | 7.2CNA v3.1 | 1.0% | 2024-11-28 | Fix |
| CVE-2024-8672 | Widget Options The #1 WordPress Widget and Block Control plugin remote code execution | 9.9CNA v3.1 | 45.4% | 2024-11-28 | Exploit codeFix |
| CVE-2024-8308 | Siempelkamp: SQL injection due to improper handling of HTTP request input data | 6.5CNA v3.1 | 0.6% | 2024-11-28 | Fix |
| CVE-2024-8300 | Malicious code execution vulnerability in GENESIS64 and ICONICS Suite | 7.0CNA v3.1 | 0.2% | 2024-11-28 | Fix |
| CVE-2024-8299 | Mitsubishi Electric GENESIS64 uncontrolled search path | 7.8CNA v3.1 | 0.2% | 2024-11-28 | Fix |
| CVE-2024-8066 | File Manager Pro Filester WordPress plugin authenticated (Subscriber+) arbitrary file upload | 8.8v3.1 | 1.1% | 2024-11-28 | Fix |
| CVE-2024-7747 | Wallet for WooCommerce WordPress plugin incorrect conversion between numeric types | 6.5CNA v3.1 | 0.5% | 2024-11-28 | Fix |
| CVE-2024-54004 | Jenkins Filesystem List Parameter Plugin has path traversal | 4.3CISA ADP v3.1 | 0.8% | 2024-11-27 | Fix |
| CVE-2024-54003 | Jenkins Simple Queue Plugin has stored cross-site scripting (XSS) | 8.0CISA ADP v3.1 | 79.6% | 2024-11-27 | Fix |
| CVE-2024-53920 | GNU Emacs code injection | 7.8CISA ADP v3.1 | 0.6% | 2024-11-27 | Fix |
| CVE-2024-53860 | Spencer14420 SPEmailHandler-PHP Potential Abuse for Sending arbitrary Emails in sp-php-email-handler | 8.6CNA v3.1 | 0.5% | 2024-11-27 | Fix |
| CVE-2024-53859 | go-gh `auth.TokenForHost` violates GitHub host security boundary within a codespace | 6.5CNA v3.1 | 0.5% | 2024-11-27 | Fix |
| CVE-2024-53858 | cli recursive repository cloning can leak authentication tokens to non-GitHub submodule hosts | 6.5CNA v3.1 | 0.3% | 2024-11-27 | Fix |
| CVE-2024-53855 | User can view tickets from organizations they're not apart of in centurion_erp | 1.9CNA v3.1 | 0.4% | 2024-11-27 | Fix |
| CVE-2024-53849 | Several stack buffer overflows and pointer overflows in editorconfig-core-c | 4.8CNA v4.0 | 0.2% | 2024-11-27 | Fix |
| CVE-2024-53676 | HPE Insight Remote Support Hewlett Packard Enterprise path traversal | 9.8CNA v3.1 | 56.3% | 2024-11-27 | Fix |
| CVE-2024-53635 | PHPGurukul COVID19 Testing Management System cross-site scripting | 4.8CISA ADP v3.1 | 0.5% | 2024-11-27 | |
| CVE-2024-53604 | PHPGurukul COVID19 Testing Management System code injection | 9.8CISA ADP v3.1 | 1.0% | 2024-11-27 | |
| CVE-2024-53603 | PHPGurukul COVID19 Testing Management System SQL injection | 7.3CISA ADP v3.1 | 0.7% | 2024-11-27 | |
| CVE-2024-53264 | Open redirect vulnerability in Loading page in bunkerweb | 5.1CNA v4.0 | 0.8% | 2024-11-27 | Fix |
| CVE-2024-53260 | Course Roster vulnerable to CSV injection in Autolab | 6.8CNA v3.1 | 0.5% | 2024-11-27 | Fix |
| CVE-2024-52959 | Iota C.ai Conversational Platform improper control of generation of code (code injection) | 7.2NVD v3.1 | 0.6% | 2024-11-27 | |
| CVE-2024-52958 | Iota C.ai Conversational Platform improper verification of cryptographic signature | 7.2NVD v3.1 | 0.3% | 2024-11-27 | |
| CVE-2024-52951 | Omada Identity Access Request History stored cross-site scripting | 8.0CISA ADP v3.1 | 1.1% | 2024-11-27 | |
| CVE-2024-52323 | ManageEngine Analytics Plus sensitive data exposure | 8.1CNA v3.1 | 1.5% | 2024-11-27 | Fix |
| CVE-2024-51228 | CX-A3002RU, CX-N150RT, CX-N300RT and CX-N302RE /boafrm/formSysCmd OS command injection | 6.8CISA ADP v3.1 | 3.9% | 2024-11-27 | Nuclei |
| CVE-2024-47181 | Unaligned memory access in RPL option processing in Contiki-NG | 7.5CNA v3.1 | 0.6% | 2024-11-27 | Fix |
| CVE-2024-46055 | Davidguva Openvidreview cross-site scripting | 4.8CISA ADP v3.1 | 0.4% | 2024-11-27 | |
| CVE-2024-46054 | Davidguva Openvidreview incorrect default permissions | 9.8CISA ADP v3.1 | 0.8% | 2024-11-27 | |
| CVE-2024-42333 | Zabbix heap buffer over-read | 2.7CNA v3.1 | 0.6% | 2024-11-27 | Fix |
| CVE-2024-42332 | New line injection in Zabbix SNMP traps | 3.7CNA v3.1 | 0.6% | 2024-11-27 | Fix |
| CVE-2024-42331 | Zabbix use-after-free in browser_push_error | 3.3CNA v3.1 | 0.3% | 2024-11-27 | Fix |
| CVE-2024-42330 | Zabbix JS Internal strings in HTTP headers | 9.1CNA v3.1 | 0.9% | 2024-11-27 | Fix |
| CVE-2024-42329 | Zabbix JS crash on unexpected HTTP server response | 3.3CNA v3.1 | 0.2% | 2024-11-27 | Fix |
| CVE-2024-42328 | Zabbix JS crash on empty HTTP server response | 3.3CNA v3.1 | 0.2% | 2024-11-27 | Fix |
| CVE-2024-42327 | Zabbix SQL injection in user.get API | 9.9CNA v3.1 | 79.1% | 2024-11-27 | Emerging ThreatsExploit codeFix |
| CVE-2024-42326 | Zabbix use-after-free vulnerability in browser.c | 4.4CNA v3.1 | 0.2% | 2024-11-27 | Fix |
| CVE-2024-41126 | Out-of-bounds read when decoding SNMP messages in Contiki-NG | 8.4CNA v3.1 | 0.3% | 2024-11-27 | Fix |
| CVE-2024-41125 | Out-of-bounds read in SNMP when decoding a string in Contiki-NG | 8.4CNA v3.1 | 0.3% | 2024-11-27 | Fix |
| CVE-2024-37816 | Quectel EC25-EUX buffer overflow | 4.2CISA ADP v3.1 | 0.2% | 2024-11-27 | |
| CVE-2024-36468 | Zabbix stack buffer overflow in zbx_snmp_cache_handle_engineid | 3.0CNA v3.1 | 0.5% | 2024-11-27 | Fix |
| CVE-2024-36467 | Zabbix authentication privilege escalation via user groups due to missing authorization checks | 7.5CNA v3.1 | 0.7% | 2024-11-27 | Fix |
| CVE-2024-36464 | Zabbix media Types: Office365, SMTP passwords are unencrypted and visible in plaintext when exported | 2.7CNA v3.1 | 0.6% | 2024-11-27 | Fix |
| CVE-2024-31976 | Engeniustech Ews356-fir OS command injection | 8.0CISA ADP v3.1 | 1.0% | 2024-11-27 | |
| CVE-2024-21703 | Atlassian Confluence Data Center incorrect permission assignment | 6.4CISA ADP v3.1 | 0.2% | 2024-11-27 | Fix |
| CVE-2024-11862 | Devolutions XTS.NET Devolutions.XTS.NET vulnerable to Timing Attack on GF Multiplications | 5.1CNA v4.0 | 0.1% | 2024-11-27 | Fix |
| CVE-2024-11860 | SourceCodester Best House Rental Management System POST request ajax.php improper authorization | 6.5v3.1 | 0.9% | 2024-11-27 | |
| CVE-2024-11820 | code-projects Crud Operation System add.php cross-site scripting | 5.4v3.1 | 0.4% | 2024-11-27 | |
| CVE-2024-11819 | 1000 Projects Portfolio Management System MCA forgot_password_process.php SQL injection | 9.8v3.1 | 0.6% | 2024-11-27 | |
| CVE-2024-11818 | PHPGurukul User Registration and Login and User Management System signup.php SQL injection | 9.8v3.1 | 0.6% | 2024-11-27 | |
| CVE-2024-11667 | Zyxel Multiple Firewalls path traversal | 7.5CNA v3.1 | 2.9% | 2024-11-27 | KEVFix |
| CVE-2024-11219 | Otter Blocks WordPress plugin path traversal | 7.5v3.1 | 0.5% | 2024-11-27 | Fix |
| CVE-2024-11083 | ProfilePress WordPress plugin information disclosure | 5.3CNA v3.1 | 0.4% | 2024-11-27 | Fix |
| CVE-2024-11025 | SMA: SQL injection in Sunny Central UP | 5.4CNA v3.1 | 0.2% | 2024-11-27 | Fix |
| CVE-2024-11009 | Internal Linking for SEO traffic and Ranking Auto internal links WordPress plugin SQL injection | 4.9CNA v3.1 | 0.4% | 2024-11-27 | Fix |
| CVE-2024-10895 | Counter Up WordPress plugin stored cross-site scripting | 6.4CNA v3.1 | 0.2% | 2024-11-27 | Fix |
| CVE-2024-10580 | WPMU DEV Hustle missing authorization | 5.3CNA v3.1 | 0.4% | 2024-11-27 | Fix |
| CVE-2024-10521 | WordPress Contact Forms by Cimatti plugin cross-site request forgery | 4.3CNA v3.1 | 0.2% | 2024-11-27 | Fix |
| CVE-2024-10175 | Pricing Tables For WPBakery Page Builder WordPress plugin stored cross-site scripting | 6.4CNA v3.1 | 0.3% | 2024-11-27 | |
| CVE-2024-9369 | Google Chrome Mojo improper input validation | 9.6v3.1 | 0.7% | 2024-11-27 | Fix |
| CVE-2024-7025 | Google Chrome Layout integer overflow | 8.8v3.1 | 0.7% | 2024-11-27 | Fix |
| CVE-2024-5921 | GlobalProtect App: Insufficient certificate validation leads to privilege escalation | 6.0CNA v4.0 | 1.5% | 2024-11-27 | Fix |
| CVE-2024-53976 | Mozilla Firefox clickjacking | 5.4CISA ADP v3.1 | 0.3% | 2024-11-26 | Fix |
| CVE-2024-53975 | Accessing a non-secure HTTP site that uses a non-existent port may cause the SSL padlock icon in the location URL bar to, misleadingly, appear secure. This vulnerability affects Firefox for iOS < 133. | 5.4CISA ADP v3.1 | 0.3% | 2024-11-26 | Fix |
| CVE-2024-53844 | Improper limitation of a pathname to a restricted directory (path traversal) in labsai/eddi | 6.3CNA v3.1 | 0.4% | 2024-11-26 | Fix |
| CVE-2024-53843 | DapperDuckling keycloak-connector authentication flow reflected cross-site scripting | 8.1CNA v3.1 | 0.5% | 2024-11-26 | Fix |
| CVE-2024-53675 | HPE Insight Remote Support An XML external entity injection | 7.3CNA v3.1 | 83.6% | 2024-11-26 | Emerging ThreatsFix |
| CVE-2024-53674 | HPE Insight Remote Support An XML external entity injection | 7.3CNA v3.1 | 46.7% | 2024-11-26 | Fix |
| CVE-2024-53673 | HPE Insight Remote Support java deserialization of untrusted data | 8.1CNA v3.1 | 0.7% | 2024-11-26 | Fix |
| CVE-2024-53620 | SPIP Article module cross-site scripting | 4.8CISA ADP v3.1 | 0.4% | 2024-11-26 | |
| CVE-2024-53619 | SPIP Documents module arbitrary file upload | 6.3CISA ADP v3.1 | 0.6% | 2024-11-26 | |
| CVE-2024-53555 | Taiga v6.8.1 CSV injection | 8.8CISA ADP v3.1 | 0.7% | 2024-11-26 | |
| CVE-2024-53365 | PHPGurukul Vehicle Parking Management System cross-site scripting | 6.1CISA ADP v3.1 | 0.4% | 2024-11-26 | |
| CVE-2024-53278 | gqevu6bsiz WP Admin UI Customize cross-site scripting | 4.8CNA v3.0 | 0.4% | 2024-11-26 | Fix |
| CVE-2024-53267 | sigstore-java KeylessVerifier bundle improper signature verification | 5.5CNA v3.1 | 0.1% | 2024-11-26 | Fix |
| CVE-2024-52899 | IBM Data Virtualization Manager code execution | 8.5CNA v3.1 | 0.8% | 2024-11-26 | Fix |
| CVE-2024-52337 | Red Hat Fast Datapath for Red Hat Enterprise Linux 7 log spoofing | 5.5CNA v3.1 | 0.3% | 2024-11-26 | Fix |
| CVE-2024-52336 | Red Hat Tuned D-Bus script_pre and script_post options privilege escalation | 7.8CNA v3.1 | 0.3% | 2024-11-26 | Fix |
| CVE-2024-52008 | Password Policy Bypass vulnerability in Fides Webserver | 2.0CNA v4.0 | 0.6% | 2024-11-26 | Fix |
| CVE-2024-51569 | Apache NimBLE out-of-bounds read | 7.5CISA ADP v3.1 | 1.2% | 2024-11-26 | Fix |
| CVE-2024-51058 | TCPDF local file inclusion | 6.2CISA ADP v3.1 | 0.8% | 2024-11-26 | Fix |
| CVE-2024-50942 | qiwen-file v1.4.0 was discovered to contain a SQL injection vulnerability via the component /mapper/NoticeMapper.xml. | 9.8CISA ADP v3.1 | 0.5% | 2024-11-26 | |
| CVE-2024-50377 | Advantech EKI-6333AC-2G OS command injection | 6.5CNA v3.1 | 0.2% | 2024-11-26 | Fix |
| CVE-2024-50376 | Advantech EKI-6333AC-2G OS command injection | 5.2NVD v3.1 | 0.4% | 2024-11-26 | Fix |
| CVE-2024-50375 | Advantech EKI-6333AC-2G OS command injection | 9.8CNA v3.1 | 1.0% | 2024-11-26 | Fix |
| CVE-2024-50374 | Advantech EKI-6333AC-2G OS command injection | 9.8CNA v3.1 | 1.5% | 2024-11-26 | Fix |
| CVE-2024-50373 | Advantech EKI-6333AC-2G OS command injection | 9.8CNA v3.1 | 1.3% | 2024-11-26 | Fix |
| CVE-2024-50372 | Advantech EKI-6333AC-2G OS command injection | 9.8CNA v3.1 | 1.3% | 2024-11-26 | Fix |
| CVE-2024-50371 | Advantech EKI-6333AC-2G OS command injection | 9.8CNA v3.1 | 1.3% | 2024-11-26 | Fix |
| CVE-2024-50370 | Advantech EKI-6333AC-2G OS command injection | 9.8CNA v3.1 | 1.5% | 2024-11-26 | Fix |
| CVE-2024-50369 | Advantech EKI-6333AC-2G OS command injection | 7.2CNA v3.1 | 1.1% | 2024-11-26 | Fix |
| CVE-2024-50368 | Advantech EKI-6333AC-2G OS command injection | 7.2CNA v3.1 | 1.1% | 2024-11-26 | Fix |
| CVE-2024-50367 | Advantech EKI-6333AC-2G OS command injection | 7.2CNA v3.1 | 1.1% | 2024-11-26 | Fix |
| CVE-2024-50366 | Advantech EKI-6333AC-2G OS command injection | 7.2CNA v3.1 | 1.1% | 2024-11-26 | Fix |
| CVE-2024-50365 | Advantech EKI-6333AC-2G OS command injection | 7.2CNA v3.1 | 1.1% | 2024-11-26 | Fix |
| CVE-2024-50364 | Advantech EKI-6333AC-2G OS command injection | 7.2CNA v3.1 | 1.1% | 2024-11-26 | Fix |
| CVE-2024-50363 | Advantech EKI-6333AC-2G OS command injection | 7.2CNA v3.1 | 1.1% | 2024-11-26 | Fix |
| CVE-2024-50362 | Advantech EKI-6333AC-2G OS command injection | 7.2CNA v3.1 | 1.1% | 2024-11-26 | Fix |
| CVE-2024-50361 | Advantech EKI-6333AC-2G OS command injection | 7.2CNA v3.1 | 0.7% | 2024-11-26 | Fix |
| CVE-2024-50360 | Advantech EKI-6333AC-2G OS command injection | 7.2CNA v3.1 | 1.1% | 2024-11-26 | Fix |
| CVE-2024-50359 | Advantech EKI-6333AC-2G OS command injection | 7.2CNA v3.1 | 1.3% | 2024-11-26 | Fix |
| CVE-2024-50358 | Advantech EKI-6333AC-2G external control of a configuration setting | 7.2CNA v3.1 | 0.5% | 2024-11-26 | Fix |
| CVE-2024-49597 | Dell Wyse Management Suite missing brute-force protection | 7.6CNA v3.1 | 0.6% | 2024-11-26 | Fix |
| CVE-2024-49596 | Dell Wyse Management Suite missing authorization | 5.9CNA v3.1 | 0.4% | 2024-11-26 | Fix |
| CVE-2024-49595 | Dell Wyse Management Suite authentication bypass by replay | 7.6CNA v3.1 | 0.5% | 2024-11-26 | Fix |
| CVE-2024-49353 | IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data denial of service | 7.5CNA v3.1 | 0.3% | 2024-11-26 | Fix |
| CVE-2024-49351 | IBM Workload Scheduler information disclosure | 5.5CNA v3.1 | 0.1% | 2024-11-26 | Fix |
| CVE-2024-49053 | Microsoft Dynamics 365 Sales spoofing | 7.6CNA v3.1 | 0.6% | 2024-11-26 | Fix |
| CVE-2024-49052 | Microsoft Azure PolicyWatch elevation of privilege | 8.2CNA v3.1 | 0.7% | 2024-11-26 | Fix |
| CVE-2024-49038 | Microsoft Copilot Studio elevation of privilege | 9.3CNA v3.1 | 1.0% | 2024-11-26 | Fix |
| CVE-2024-49035 | Microsoft Partner Center improper access control | 8.7CNA v3.1 | 1.3% | 2024-11-26 | KEVFix |
| CVE-2024-47257 | Axis Communications AXIS Q6128-E PTZ Network Camera improper quantity validation | 7.5CNA v3.1 | 0.5% | 2024-11-26 | |
| CVE-2024-47250 | Apache NimBLE out-of-bounds read | 5.0CISA ADP v3.1 | 0.7% | 2024-11-26 | Fix |
| CVE-2024-47249 | Apache NimBLE improper array index validation | 5.0CISA ADP v3.1 | 0.6% | 2024-11-26 | Fix |
| CVE-2024-47248 | Apache NimBLE: Buffer overflow in NimBLE MESH Bluetooth stack | 6.3CISA ADP v3.1 | 0.7% | 2024-11-26 | Fix |
| CVE-2024-43784 | treeverse lakeFS user credential handling vulnerability | 5.7CNA v3.1 | 0.4% | 2024-11-26 | Fix |
| CVE-2024-38834 | VMware Aria Operations stored cross-site scripting vulnerability | 6.5CNA v3.1 | 0.3% | 2024-11-26 | Fix |
| CVE-2024-38833 | VMware Aria Operations stored cross-site scripting vulnerability | 6.8CNA v3.1 | 0.4% | 2024-11-26 | Fix |
| CVE-2024-38832 | VMware Aria Operations stored cross-site scripting vulnerability | 7.1CNA v3.1 | 0.4% | 2024-11-26 | Fix |
| CVE-2024-38831 | VMware Aria Operations local privilege escalation vulnerability | 7.8CNA v3.1 | 0.3% | 2024-11-26 | Fix |
| CVE-2024-38830 | VMware Aria Operations local privilege escalation | 7.8CNA v3.1 | 0.2% | 2024-11-26 | Fix |
| CVE-2024-36463 | Zabbix JS atob function vulnerability | 6.5CNA v3.1 | 0.8% | 2024-11-26 | Fix |
| CVE-2024-36254 | Toshiba Tec Multiple MFPs (multifunction printers) Sharp Corporation and out-of-bounds read | 7.5CNA v3.1 | 0.7% | 2024-11-26 | |
| CVE-2024-36251 | Sharp Multiple MFPs (multifunction printers) out-of-bounds read | 7.5CNA v3.1 | 3.5% | 2024-11-26 | |
| CVE-2024-36249 | Toshiba Tec Multiple MFPs (multifunction printers) Sharp Corporation and cross-site scripting | 7.4CNA v3.1 | 0.5% | 2024-11-26 | |
| CVE-2024-36248 | Sharp Multiple MFPs (multifunction printers) hard-coded credentials | 9.1CISA ADP v3.1 | 1.1% | 2024-11-26 | |
| CVE-2024-35244 | Sharp Multiple MFPs (multifunction printers) hard-coded credentials | 9.1CISA ADP v3.1 | 1.1% | 2024-11-26 | |
| CVE-2024-34162 | multifunction printers LDAP authentication vulnerability | 5.3CNA v3.1 | 0.8% | 2024-11-26 | |
| CVE-2024-33616 | Sharp Multiple MFPs (multifunction printers) missing authentication | 5.3CNA v3.1 | 0.9% | 2024-11-26 | |
| CVE-2024-33610 | Sharp Multiple MFPs (multifunction printers) authentication bypass | 9.1CNA v3.1 | 50.0% | 2024-11-26 | Nuclei |
| CVE-2024-33605 | Sharp Multiple MFPs (multifunction printers) path traversal | 7.5CNA v3.1 | 6.0% | 2024-11-26 | Nuclei |
| CVE-2024-32965 | SSRF vulnerability in lobe-chat | 8.1CNA v3.1 | 26.1% | 2024-11-26 | Fix |
| CVE-2024-32151 | Sharp Multiple MFPs (multifunction printers) recoverable password storage | 5.9CNA v3.1 | 1.3% | 2024-11-26 | |
| CVE-2024-29978 | Sharp Multiple MFPs (multifunction printers) plaintext password storage | 5.9CNA v3.1 | 1.3% | 2024-11-26 | |
| CVE-2024-29146 | Sharp Multiple MFPs (multifunction printers) cleartext storage of sensitive information | 5.9CNA v3.1 | 0.8% | 2024-11-26 | |
| CVE-2024-28955 | Sharp Multiple MFPs (multifunction printers) incorrect permission assignment | 5.9CNA v3.1 | 1.3% | 2024-11-26 | |
| CVE-2024-28038 | Sharp Multiple MFPs (multifunction printers) stack-based buffer overflow | 9.0CNA v3.1 | 2.6% | 2024-11-26 | |
| CVE-2024-22117 | Zabbix map element URL sequencing denial of service | 2.2CNA v3.1 | 0.5% | 2024-11-26 | Fix |
| CVE-2024-11828 | Inefficient algorithmic complexity in GitLab | 4.3CNA v3.1 | 0.6% | 2024-11-26 | Fix |
| CVE-2024-11817 | PHPGurukul User Registration and Login and User Management System index.php SQL injection | 9.8v3.1 | 0.6% | 2024-11-26 | |
| CVE-2024-11745 | Tenda AC8 SetStaticRouteCfg route_static_check stack-based overflow | 9.8v3.1 | 1.3% | 2024-11-26 | |
| CVE-2024-11744 | 1000 Projects Portfolio Management System MCA register.php SQL injection | 9.8v3.1 | 0.7% | 2024-11-26 | |
| CVE-2024-11743 | SourceCodester Best House Rental Management System POST request ajax.php cross-site request forgery | 4.3v3.1 | 0.3% | 2024-11-26 | |
| CVE-2024-11742 | SourceCodester Best House Rental Management System ajax.php cross-site scripting | 5.4v3.1 | 0.5% | 2024-11-26 | |
| CVE-2024-11708 | Mozilla Firefox race condition | 6.5CISA ADP v3.1 | 0.3% | 2024-11-26 | Fix |
| CVE-2024-11706 | Mozilla Firefox null pointer dereference | 6.5CISA ADP v3.1 | 0.5% | 2024-11-26 | Fix |
| CVE-2024-11705 | Mozilla Firefox null pointer dereference | 9.1CISA ADP v3.1 | 0.7% | 2024-11-26 | Fix |
| CVE-2024-11704 | Mozilla Firefox double free | 9.8CISA ADP v3.1 | 0.9% | 2024-11-26 | Fix |
| CVE-2024-11703 | Mozilla Firefox insufficiently protected credentials | 5.7CISA ADP v3.1 | 0.2% | 2024-11-26 | Fix |
| CVE-2024-11702 | Mozilla Firefox inappropriate encoding | 7.5CISA ADP v3.1 | 0.5% | 2024-11-26 | Fix |
| CVE-2024-11701 | Mozilla Firefox authentication bypass by spoofing | 4.3CISA ADP v3.1 | 0.4% | 2024-11-26 | Fix |
| CVE-2024-11700 | Mozilla Firefox clickjacking | 8.1CISA ADP v3.1 | 0.5% | 2024-11-26 | Fix |
| CVE-2024-11699 | Mozilla Firefox memory safety bugs | 8.8CISA ADP v3.1 | 0.7% | 2024-11-26 | Fix |
| CVE-2024-11698 | Mozilla Firefox fullscreen mode transition vulnerability | 9.8CISA ADP v3.1 | 0.7% | 2024-11-26 | Fix |
| CVE-2024-11697 | Mozilla Firefox code injection | 8.8CISA ADP v3.1 | 0.8% | 2024-11-26 | Fix |
| CVE-2024-11696 | Mozilla Firefox improper signature verification | 5.4CISA ADP v3.1 | 0.3% | 2024-11-26 | Fix |
| CVE-2024-11695 | Mozilla Firefox clickjacking | 5.4CISA ADP v3.1 | 0.4% | 2024-11-26 | Fix |
| CVE-2024-11694 | Mozilla Firefox cross-site scripting | 6.1CISA ADP v3.1 | 0.5% | 2024-11-26 | Fix |
| CVE-2024-11693 | Mozilla Firefox executable download warning vulnerability | 9.8CISA ADP v3.1 | 0.8% | 2024-11-26 | Fix |
| CVE-2024-11692 | Mozilla Firefox authentication bypass by spoofing | 4.3CISA ADP v3.1 | 0.5% | 2024-11-26 | Fix |
| CVE-2024-11691 | Mozilla Firefox out-of-bounds write | 8.8CISA ADP v3.1 | 0.7% | 2024-11-26 | Fix |
| CVE-2024-11680 | ProjectSend improper authentication | 9.8v3.1 | 91.7% | 2024-11-26 | KEVNucleiMetasploitEmerging ThreatsExploit codeFix |
| CVE-2024-11678 | CodeAstro Hospital Management System his_doc_register_patient.php cross-site scripting | 5.4v3.1 | 0.5% | 2024-11-26 | |
| CVE-2024-11677 | CodeAstro Hospital Management System Add Vendor Details page cross-site scripting | 5.4v3.1 | 0.5% | 2024-11-26 | |
| CVE-2024-11676 | CodeAstro Hospital Management System Add Laboratory Equipment page cross-site scripting | 5.4v3.1 | 0.5% | 2024-11-26 | |
| CVE-2024-11675 | CodeAstro Hospital Management System Add Patient Details page cross-site scripting | 5.4v3.1 | 0.5% | 2024-11-26 | |
| CVE-2024-11674 | CodeAstro Hospital Management System his_doc_update-account.php unrestricted upload | 8.8v3.1 | 0.6% | 2024-11-26 | |
| CVE-2024-11669 | Incorrect authorization in GitLab | 6.5CNA v3.1 | 0.5% | 2024-11-26 | Fix |
| CVE-2024-11668 | Insufficient session expiration in GitLab | 4.2CNA v3.1 | 0.3% | 2024-11-26 | Fix |
| CVE-2024-11622 | HPE Insight Remote Support An XML external entity injection | 7.3CNA v3.1 | 1.5% | 2024-11-26 | Fix |
| CVE-2024-11418 | Additional Order Filters for WooCommerce WordPress plugin reflected cross-site scripting | 6.1CNA v3.1 | 0.4% | 2024-11-26 | Fix |
| CVE-2024-11407 | Denial of service through Data corruption in gRPC-C++ | 6.9CNA v4.0 | 0.6% | 2024-11-26 | Fix |
| CVE-2024-11342 | Skt NURCaptcha WordPress plugin cross-site request forgery to stored cross-site scripting | 6.1CNA v3.1 | 0.2% | 2024-11-26 | Fix |
| CVE-2024-11202 | CreativeMindsSolutions CM plugins cminds_free_guide shortcode reflected cross-site scripting | 6.1CNA v3.1 | 0.6% | 2024-11-26 | Fix |
| CVE-2024-11192 | Spotify Play Button for WordPress plugin stored cross-site scripting | 6.4CNA v3.1 | 0.4% | 2024-11-26 | Fix |
| CVE-2024-11145 | Easy Folder Listing Pro deserialization | 9.8v3.1 | 1.0% | 2024-11-26 | Fix |
| CVE-2024-11119 | BNE Gallery Extended WordPress plugin stored cross-site scripting | 6.4CNA v3.1 | 0.4% | 2024-11-26 | Fix |
| CVE-2024-11091 | Support SVG Upload svg files in wordpress without hassle plugin stored cross-site scripting | 6.4CNA v3.1 | 0.4% | 2024-11-26 | Fix |
| CVE-2024-11032 | Parsi Date WordPress plugin reflected cross-site scripting | 6.1CNA v3.1 | 0.5% | 2024-11-26 | Fix |
| CVE-2024-11024 | AppPresser Mobile App Framework WordPress plugin unauthenticated privilege escalation | 9.8CNA v3.1 | 0.7% | 2024-11-26 | Fix |
| CVE-2024-11002 | realmag777 InPost Gallery code injection | 6.3CNA v3.1 | 0.6% | 2024-11-26 | Fix |
| CVE-2024-10878 | Sugar Calendar (Lite) WordPress plugin reflected cross-site scripting | 6.1CNA v3.1 | 0.5% | 2024-11-26 | Fix |
| CVE-2024-10857 | Product Input Fields for WooCommerce WordPress plugin arbitrary file read | 6.5CNA v3.1 | 0.8% | 2024-11-26 | Fix |
| CVE-2024-10781 | CleanTalk Spam Protection, Antispam, Firewall plugin installation function authorization bypass | 7.5v3.1 | 3.8% | 2024-11-26 | Fix |
| CVE-2024-10729 | Booking and Appointment Plugin for WooCommerce WordPress plugin arbitrary option update | 8.8CNA v3.1 | 0.5% | 2024-11-26 | Fix |
| CVE-2024-10579 | Hustle WordPress plugin unauthorized access | 4.3CNA v3.1 | 0.4% | 2024-11-26 | Fix |
| CVE-2024-10570 | Security and Malware scan by CleanTalk WordPress plugin authorization bypass | 7.5CNA v3.1 | 0.6% | 2024-11-26 | Fix |
| CVE-2024-10542 | Spam protection, Anti-Spam, FireWall by CleanTalk WordPress plugin authorization bypass | 7.5NVD v3.1 | 15.4% | 2024-11-26 | Exploit codeFix |
| CVE-2024-10471 | Everest Forms WordPress plugin Admin+ stored XSS | 4.8CISA ADP v3.1 | 0.4% | 2024-11-26 | Fix |
| CVE-2024-10308 | Jeg Elementor Kit WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.3% | 2024-11-26 | Fix |
| CVE-2024-10240 | Exposure of sensitive system information to an unauthorized control sphere in GitLab | 5.3CNA v3.1 | 0.6% | 2024-11-26 | Fix |
| CVE-2024-9929 | Hitachi Energy NSD570 Teleprotection Equipment system information disclosure | 4.3CNA v3.1 | 0.4% | 2024-11-26 | Fix |
| CVE-2024-9928 | Hitachi Energy NSD570 Teleprotection Equipment missing brute-force protection | 5.3CNA v3.1 | 0.4% | 2024-11-26 | Fix |
| CVE-2024-9504 | Booking calendar, Appointment Booking System WordPress plugin stored cross-site scripting | 7.2CNA v3.1 | 0.5% | 2024-11-26 | Fix |
| CVE-2024-9461 | Total Upkeep WordPress plugin remote code execution | 7.2CNA v3.1 | 1.0% | 2024-11-26 | Fix |
| CVE-2024-9170 | Booster for WooCommerce WordPress plugin stored cross-site scripting | 4.8v3.1 | 0.4% | 2024-11-26 | Fix |
| CVE-2024-8899 | Jeg Elementor Kit WordPress plugin sensitive information exposure | 4.3CNA v3.1 | 0.4% | 2024-11-26 | Fix |
| CVE-2024-8772 | Axis Communications AXIS OS improper syntax validation | 4.3CNA v3.1 | 0.4% | 2024-11-26 | Fix |
| CVE-2024-8676 | Red Hat CRI-O checkpoint restore improper authorization | 7.4CNA v3.1 | 0.8% | 2024-11-26 | Fix |
| CVE-2024-8237 | Inefficient algorithmic complexity in GitLab | 6.5CNA v3.1 | 0.6% | 2024-11-26 | Fix |
| CVE-2024-8236 | Elementor Website Builder More than Just a Page Builder WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.4% | 2024-11-26 | Fix |
| CVE-2024-8177 | Inefficient algorithmic complexity in GitLab | 5.3CNA v3.1 | 0.6% | 2024-11-26 | Fix |
| CVE-2024-8160 | Axis Communications AXIS OS improper syntax validation | 3.8CNA v3.1 | 0.6% | 2024-11-26 | Fix |
| CVE-2024-8114 | Missing authorization in GitLab | 8.2CNA v3.1 | 0.7% | 2024-11-26 | Fix |
| CVE-2024-6831 | Axis Communications AXIS Camera Station Pro client-side enforcement of server-side security | 4.4CNA v3.1 | 0.2% | 2024-11-26 | Fix |
| CVE-2024-6749 | Axis Communications AXIS Camera Station Pro insufficiently protected credentials | 6.3CNA v3.1 | 0.1% | 2024-11-26 | |
| CVE-2024-6476 | Axis Communications AXIS Camera Station Pro incorrect default permissions | 4.2CNA v3.1 | 0.1% | 2024-11-26 | Fix |
| CVE-2024-53930 | WikiDocs KaTeX parser stored cross-site scripting | 6.1CISA ADP v3.1 | 0.4% | 2024-11-25 | |
| CVE-2024-53916 | OpenStack Neutron can use an incorrect ID during policy enforcement | 7.5CISA ADP v3.1 | 0.7% | 2024-11-25 | Fix |
| CVE-2024-53599 | LafeLabs Chaos scroll.php endpoint cross-site scripting | 6.1CISA ADP v3.1 | 0.3% | 2024-11-25 | |
| CVE-2024-53597 | masterstack_imgcap submit endpoint SQL injection | 6.3CISA ADP v3.1 | 0.3% | 2024-11-25 | |
| CVE-2024-53556 | Taiga v6.8.1 An open redirect | 6.1CISA ADP v3.1 | 0.3% | 2024-11-25 | |
| CVE-2024-53554 | component /project/new/scrum of Taiga v Client-Side server-side template injection | 8.0CISA ADP v3.1 | 0.7% | 2024-11-25 | |
| CVE-2024-53268 | Lack of validation on openExternal allows 1 click remote code execution in joplin | 7.3CNA v3.1 | 0.7% | 2024-11-25 | Fix |
| CVE-2024-53262 | Unescaped error message included on error page in SvelteKit | 2.0CNA v4.0 | 0.5% | 2024-11-25 | Fix |
| CVE-2024-53261 | Cross-site scripting attack (XSS) on dev mode 404 page in SvelteKit | 2.0CNA v4.0 | 0.3% | 2024-11-25 | Fix |
| CVE-2024-53258 | Download_all_submissions allows student to download another student's submissions in Autolab | 7.1CNA v4.0 | 0.5% | 2024-11-25 | Fix |
| CVE-2024-53255 | Reflected cross-site scripting in /admin?page=media via file parameter in BoidCMS | 5.3CNA v4.0 | 0.9% | 2024-11-25 | Fix |
| CVE-2024-53101 | Linux kernel OCFS2 setattr vulnerability | 5.5NVD v3.1 | 0.2% | 2024-11-25 | Fix |
| CVE-2024-53100 | Linux kernel NVMe over TCP driver race condition | 7.8CNA v3.1 | 0.2% | 2024-11-25 | Fix |
| CVE-2024-53099 | Linux kernel BPF link fdinfo display out-of-bounds read | 7.1CNA v3.1 | 0.2% | 2024-11-25 | Fix |
| CVE-2024-53098 | Linux kernel drm/xe/ufence out-of-bounds write | 7.8v3.1 | 0.2% | 2024-11-25 | Fix |
| CVE-2024-53097 | Linux kernel krealloc spare memory zeroing vulnerability | 5.5v3.1 | 0.2% | 2024-11-25 | Fix |
| CVE-2024-53096 | Linux kernel mmap_region error path vulnerability | 7.8CNA v3.1 | 0.3% | 2024-11-25 | Fix |
| CVE-2024-52811 | Acks not validated before logged to qlog leads to buffer overflow in ngtcp2 | 8.2CNA v3.1 | 0.8% | 2024-11-25 | Fix |
| CVE-2024-52787 | Libre-chat path traversal | 9.1CISA ADP v3.1 | 0.8% | 2024-11-25 | |
| CVE-2024-52529 | Layer 7 policy enforcement may not occur in policies with wildcarded port ranges in Cilium | 5.8CNA v3.1 | 0.5% | 2024-11-25 | Fix |
| CVE-2024-51723 | Vulnerability in Management Console Impacts BlackBerry AtHoc | 4.6CNA v3.1 | 0.3% | 2024-11-25 | Fix |
| CVE-2024-50672 | Adapt Learning Adapt Authoring Tool password reset feature NoSQL injection | 9.8CISA ADP v3.1 | 1.6% | 2024-11-25 | Exploit code |
| CVE-2024-50671 | Adapt Learning Adapt Authoring Tool Get users feature incorrect authorization | 4.3CISA ADP v3.1 | 0.3% | 2024-11-25 | |
| CVE-2024-45756 | Centreon open-tickets ticket creation form SQL injection | 7.2CISA ADP v3.1 | 0.5% | 2024-11-25 | |
| CVE-2024-45755 | Centreon DSM Server DSM slots configuration form SQL injection | 7.2CISA ADP v3.1 | 0.5% | 2024-11-25 | |
| CVE-2024-32468 | denoland deno improper neutralization of input during web page generation in deno_doc HTML generator | 5.4CNA v3.1 | 0.3% | 2024-11-25 | Fix |
| CVE-2024-27134 | Excessive directory permissions in MLflow leads to local privilege escalation when using spark_udf | 7.0NVD v3.1 | 0.1% | 2024-11-25 | Fix |
| CVE-2024-11673 | 1000 Projects Bookstore Management System cross-site request forgery | 4.3v3.1 | 0.4% | 2024-11-25 | |
| CVE-2024-11672 | Devolutions Remote Desktop Manager add permission component incorrect authorization | 4.3CISA ADP v3.1 | 0.6% | 2024-11-25 | Fix |
| CVE-2024-11671 | Devolutions Remote Desktop Manager SQL data source MFA validation improper authentication | 5.4CISA ADP v3.1 | 0.5% | 2024-11-25 | Fix |
| CVE-2024-11670 | Devolutions Remote Desktop Manager permission validation component incorrect authorization | 5.4CISA ADP v3.1 | 0.7% | 2024-11-25 | |
| CVE-2024-11664 | eNMS TGZ file controller.py multiselect_filtering path traversal | 9.8v3.1 | 2.0% | 2024-11-25 | |
| CVE-2024-11663 | Codezips E-Commerce Site search.php SQL injection | 9.8v3.1 | 0.9% | 2024-11-25 | |
| CVE-2024-11662 | welliamcao OpsManage API endpoint deploy_api.py deploy_host_vars deserialization | 5.3CNA v4.0 | 0.6% | 2024-11-25 | |
| CVE-2024-11661 | Codezips Free Exam Hall Seating Management System Profile Image profile.php unrestricted upload | 9.8v3.1 | 0.8% | 2024-11-25 | |
| CVE-2024-11660 | code-projects Farmacia usuario.php cross-site scripting | 5.4v3.1 | 0.6% | 2024-11-25 | |
| CVE-2024-11659 | EnGenius ENH1350EXT/ENS500-AC/ENS620EXT diag_iperf command injection | 7.2v3.1 | 29.1% | 2024-11-25 | |
| CVE-2024-11658 | EnGenius ENH1350EXT/ENS500-AC/ENS620EXT ajax_getChannelList command injection | 7.2v3.1 | 29.1% | 2024-11-25 | |
| CVE-2024-11657 | EnGenius ENH1350EXT/ENS500-AC/ENS620EXT diag_nslookup command injection | 7.2v3.1 | 29.1% | 2024-11-25 | |
| CVE-2024-11656 | EnGenius ENH1350EXT/ENS500-AC/ENS620EXT diag_ping6 command injection | 7.2v3.1 | 28.8% | 2024-11-25 | |
| CVE-2024-11655 | EnGenius ENH1350EXT/ENS500-AC/ENS620EXT diag_pinginterface command injection | 7.2v3.1 | 28.8% | 2024-11-25 | |
| CVE-2024-11654 | EnGenius ENH1350EXT/ENS500-AC/ENS620EXT diag_traceroute6 command injection | 7.2v3.1 | 29.1% | 2024-11-25 | |
| CVE-2024-11653 | EnGenius ENH1350EXT/ENS500-AC/ENS620EXT diag_traceroute command injection | 7.2v3.1 | 29.1% | 2024-11-25 | |
| CVE-2024-11652 | EnGenius ENH1350EXT/ENS500-AC/ENS620EXT sn_https command injection | 7.2v3.1 | 30.2% | 2024-11-25 | |
| CVE-2024-11651 | EnGenius ENH1350EXT/ENS500-AC/ENS620EXT wifi_schedule command injection | 7.2v3.1 | 27.4% | 2024-11-25 | |
| CVE-2024-11650 | Tenda i9 GetIPTV websReadEvent null pointer dereference | 7.5v3.1 | 1.3% | 2024-11-25 | |
| CVE-2024-11649 | 1000 Projects Beauty Parlour Management System search-appointment.php SQL injection | 9.8v3.1 | 0.9% | 2024-11-25 | |
| CVE-2024-11648 | 1000 Projects Beauty Parlour Management System add-customer.php SQL injection | 9.8v3.1 | 0.9% | 2024-11-25 | |
| CVE-2024-11647 | 1000 Projects Beauty Parlour Management System view-appointment.php SQL injection | 9.8v3.1 | 0.9% | 2024-11-25 | |
| CVE-2024-11646 | 1000 Projects Beauty Parlour Management System edit-services.php SQL injection | 9.8v3.1 | 0.8% | 2024-11-25 | |
| CVE-2024-11498 | Resource exhaustion via stack overflow in libjxl | 6.9CNA v4.0 | 0.6% | 2024-11-25 | Fix |
| CVE-2024-11483 | Red Hat Ansible Automation Platform OAuth2 token scope handling privilege escalation | 5.0CNA v3.1 | 0.5% | 2024-11-25 | Fix |
| CVE-2024-11403 | Out-of-bounds Memory Read/Write in libjxl | 6.9CNA v4.0 | 0.6% | 2024-11-25 | Fix |
| CVE-2024-10710 | YaDisk Files WordPress plugin Admin+ stored XSS | 3.5CISA ADP v3.1 | 0.4% | 2024-11-25 | |
| CVE-2024-10709 | YaDisk Files WordPress plugin Contributor+ stored XSS via shortcode | 6.8CISA ADP v3.1 | 0.7% | 2024-11-25 | |
| CVE-2024-10492 | Keycloak-quarkus-server: Keycloak path trasversal | 2.7CNA v3.0 | 0.7% | 2024-11-25 | Fix |
| CVE-2024-10451 | Org.keycloak:keycloak-quarkus-server: Sensitive data exposure in keycloak build process | 5.9CNA v3.1 | 0.9% | 2024-11-25 | Fix |
| CVE-2024-10270 | Org.keycloak:keycloak-services: Keycloak denial of service | 6.5CNA v3.1 | 1.2% | 2024-11-25 | Fix |
| CVE-2024-9666 | Org.keycloak/keycloak-quarkus-server: Keycloak proxy header handling denial of service (DoS) | 4.7CNA v3.1 | 0.4% | 2024-11-25 | Fix |
| CVE-2024-8272 | MacOS Universal Audio (UAConnect) local privilege escalation | 7.8CNA v3.1 | 0.2% | 2024-11-25 | |
| CVE-2024-7915 | MacOS Sensei Mac Cleaner local privilege escalation via PID Reuse race condition Attack | 7.8CNA v3.1 | 0.2% | 2024-11-25 | |
| CVE-2024-7056 | WPForms WordPress plugin Admin+ stored XSS | 3.5CISA ADP v3.1 | 0.5% | 2024-11-25 | Fix |
| CVE-2024-6538 | Openshift-console: Openshift console: Server-side request forgery | 5.3CNA v3.1 | 0.6% | 2024-11-25 | Fix |
| CVE-2024-6393 | NextGEN Gallery WordPress plugin Admin+ stored XSS | 4.8CISA ADP v3.1 | 0.5% | 2024-11-25 | Fix |
| CVE-2024-53915 | Veritas Enterprise Vault deserialization of untrusted data | 9.8v3.1 | 0.9% | 2024-11-24 | Fix |
| CVE-2024-53914 | Veritas Enterprise Vault deserialization of untrusted data | 9.8v3.1 | 0.9% | 2024-11-24 | Fix |
| CVE-2024-53913 | Veritas Enterprise Vault deserialization of untrusted data | 9.8v3.1 | 0.9% | 2024-11-24 | Fix |
| CVE-2024-53912 | Veritas Enterprise Vault deserialization of untrusted data | 9.8v3.1 | 0.9% | 2024-11-24 | Fix |
| CVE-2024-53911 | Veritas Enterprise Vault deserialization of untrusted data | 9.8v3.1 | 0.9% | 2024-11-24 | Fix |
| CVE-2024-53910 | Veritas Enterprise Vault deserialization of untrusted data | 9.8v3.1 | 0.9% | 2024-11-24 | Fix |
| CVE-2024-53909 | Veritas Enterprise Vault deserialization of untrusted data | 9.8v3.1 | 0.9% | 2024-11-24 | Fix |
| CVE-2024-53901 | Tonycoz Imager buffer overflow | 5.5v3.1 | 0.4% | 2024-11-24 | Fix |
| CVE-2024-53899 | Virtualenv allows command injection through activation scripts for a virtual environment | 7.8v3.1 | 1.6% | 2024-11-24 | Fix |
| CVE-2024-11666 | Unauthenticated remote command injection in eCharge Salia PLCC | 9.8NVD v3.1 | 0.4% | 2024-11-24 | |
| CVE-2024-11665 | hardy-barth cph2_echarge_firmware unauthenticated remote command injection | 8.8NVD v3.1 | 1.3% | 2024-11-24 | |
| CVE-2024-11236 | PHP integer overflow in the firebird and dblib quoters causing OOB writes | 9.8CNA v3.1 | 2.1% | 2024-11-24 | Fix |
| CVE-2024-11234 | PHP configuring a proxy in a stream context might allow for CRLF injection in URIs | 4.8CNA v3.1 | 1.1% | 2024-11-24 | Fix |
| CVE-2024-11233 | PHP single byte overread with convert.quoted-printable-decode filter | 4.8CNA v3.1 | 1.6% | 2024-11-24 | Fix |
| CVE-2024-41761 | IBM Db2 denial of service | 5.3CNA v3.1 | 0.4% | 2024-11-23 | Fix |
| CVE-2024-35160 | IBM Watson Query and Db2 Big SQL on Cloud Pak for Data session management information disclosure | 4.3CNA v3.1 | 0.4% | 2024-11-23 | Fix |
| CVE-2024-11632 | code-projects Simple Car Rental System book_car.php SQL injection | 9.8v3.1 | 0.8% | 2024-11-23 | |
| CVE-2024-11631 | itsourcecode Tailoring Management System expedit.php SQL injection | 9.8v3.1 | 0.7% | 2024-11-23 | |
| CVE-2024-11586 | pulseaudio improper resource release | 4.0CNA v3.1 | 0.3% | 2024-11-23 | |
| CVE-2024-11463 | DeBounce Email Validator WordPress plugin reflected cross-site scripting | 6.1CNA v3.1 | 0.4% | 2024-11-23 | Fix |
| CVE-2024-11446 | Chessgame Shizzle WordPress plugin reflected cross-site scripting | 6.1CNA v3.1 | 0.4% | 2024-11-23 | Fix |
| CVE-2024-11426 | someguy9 AutoListicle auto-list-number shortcode stored cross-site scripting | 6.4CNA v3.1 | 0.4% | 2024-11-23 | Fix |
| CVE-2024-11415 | WP-Orphanage Extended WordPress plugin cross-site request forgery | 8.8CNA v3.1 | 0.3% | 2024-11-23 | Fix |
| CVE-2024-11408 | Slotti Ajanvaraus WordPress plugin authenticated (Contributor+) stored cross-site scripting | 6.4CNA v3.1 | 0.3% | 2024-11-23 | Fix |
| CVE-2024-11387 | Easy Liveblogs WordPress plugin authenticated (Contributor+) stored cross-site scripting | 6.4CNA v3.1 | 0.7% | 2024-11-23 | Fix |
| CVE-2024-11362 | PeachPay reflected cross-site scripting | 6.1CNA v3.1 | 0.4% | 2024-11-23 | Fix |
| CVE-2024-11361 | PDF Invoices and Packing Slips Generator for WooCommerce WordPress plugin cross-site scripting | 6.1CNA v3.1 | 0.4% | 2024-11-23 | Fix |
| CVE-2024-11332 | hipaatizer HIPAA Compliant Forms hipaatizer shortcode stored cross-site scripting | 6.4CNA v3.1 | 0.3% | 2024-11-23 | Fix |
| CVE-2024-11330 | Custom CSS, JS and PHP WordPress plugin reflected cross-site scripting | 6.1CNA v3.1 | 0.5% | 2024-11-23 | Fix |
| CVE-2024-11265 | codepopular EasyMedia image upload error messages information disclosure | 4.3CNA v3.1 | 0.6% | 2024-11-23 | Fix |
| CVE-2024-11231 | 우커머스 네이버페이 WordPress plugin stored cross-site scripting | 6.4CNA v3.1 | 0.4% | 2024-11-23 | Fix |
| CVE-2024-11229 | 코드엠샵 소셜톡 WordPress plugin stored cross-site scripting | 6.4CNA v3.1 | 0.5% | 2024-11-23 | Fix |
| CVE-2024-11228 | 워드프레스 결제 심플페이 WordPress plugin stored cross-site scripting | 6.4CNA v3.1 | 0.4% | 2024-11-23 | Fix |
| CVE-2024-11227 | Memberlite Shortcodes WordPress plugin stored cross-site scripting | 6.4CNA v3.1 | 0.5% | 2024-11-23 | Fix |
| CVE-2024-11199 | Rescue Shortcodes WordPress plugin stored cross-site scripting | 5.4v3.1 | 1.0% | 2024-11-23 | Fix |
| CVE-2024-11188 | Formidable Forms WordPress plugin reflected cross-site scripting | 6.1CNA v3.1 | 0.4% | 2024-11-23 | Fix |
| CVE-2024-11034 | wpbean Request a Quote for WooCommerce and Elementor code injection | 7.3CNA v3.1 | 0.8% | 2024-11-23 | Fix |
| CVE-2024-10961 | Social Login WordPress plugin authentication bypass via Disqus OAuth provider | 9.8CNA v3.1 | 1.2% | 2024-11-23 | Fix |
| CVE-2024-10886 | Tribute Testimonials WordPress Testimonial Grid/Slider plugin stored cross-site scripting | 6.4CNA v3.1 | 0.3% | 2024-11-23 | |
| CVE-2024-10880 | JobBoardWP Job Board Listings and Submissions WordPress plugin reflected cross-site scripting | 6.1CNA v3.1 | 0.5% | 2024-11-23 | Fix |
| CVE-2024-10874 | Quotes llama WordPress plugin authenticated (Contributor+) stored cross-site scripting | 6.4CNA v3.1 | 0.4% | 2024-11-23 | Fix |
| CVE-2024-10873 | LA-Studio Element Kit for Elementor WordPress plugin local file inclusion | 8.8CNA v3.1 | 1.1% | 2024-11-23 | Fix |
| CVE-2024-10869 | GuardGiant Brute Force Protection WordPress plugin reflected cross-site scripting | 6.1CNA v3.1 | 0.5% | 2024-11-23 | |
| CVE-2024-10868 | Enter Addons Ultimate Template Builder for Elementor WordPress plugin post disclosure | 4.3CNA v3.1 | 0.4% | 2024-11-23 | Fix |
| CVE-2024-10813 | Product Table for WooCommerce by CodeAstrology WordPress plugin information exposure | 7.5v3.1 | 0.6% | 2024-11-23 | Fix |
| CVE-2024-10803 | MP3 Sticky Player WordPress plugin unauthenticated arbitrary file read/Download | 7.5CNA v3.1 | 0.9% | 2024-11-23 | Fix |
| CVE-2024-10606 | WP Travel Engine WordPress plugin missing authorization authenticated plugin settings update | 4.3CNA v3.1 | 0.3% | 2024-11-23 | Fix |
| CVE-2024-10537 | WP User Manager WordPress plugin unauthorized access | 4.3CNA v3.1 | 0.4% | 2024-11-23 | Fix |
| CVE-2024-10519 | Wishlist for WooCommerce: Multi Wishlists Per Customer PRO - reflected cross-site scripting | 6.1CNA v3.1 | 0.5% | 2024-11-23 | Fix |
| CVE-2024-10216 | WP User Manager WordPress plugin unauthorized access | 4.3CNA v3.1 | 0.4% | 2024-11-23 | Fix |
| CVE-2024-10116 | Twitter Follow Button WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.4% | 2024-11-23 | Fix |
| CVE-2024-9942 | WPGYM WordPress plugin unauthenticated arbitrary file upload | 9.8CNA v3.1 | 1.2% | 2024-11-23 | Fix |
| CVE-2024-9941 | WPGYM WordPress plugin missing authorization to authenticated (Subscriber+) privilege escalation | 8.8CNA v3.1 | 0.6% | 2024-11-23 | Fix |
| CVE-2024-9660 | School Management WordPress plugin authenticated (Student+) arbitrary file upload | 8.8CNA v3.1 | 1.1% | 2024-11-23 | Fix |
| CVE-2024-9659 | School Management WordPress plugin unauthenticated arbitrary file upload | 9.8CNA v3.1 | 1.7% | 2024-11-23 | Fix |
| CVE-2024-9635 | Checkout with Cash App on WooCommerce WordPress plugin reflected cross-site scripting | 6.1CNA v3.1 | 0.5% | 2024-11-23 | Fix |
| CVE-2024-9511 | FluentSMTP WordPress plugin PHP object injection | 9.8CNA v3.1 | 1.2% | 2024-11-23 | Fix |
| CVE-2024-9223 | WPDash Notes WordPress plugin missing authorization authenticated sensitive information exposure | 4.3CNA v3.1 | 0.4% | 2024-11-23 | |
| CVE-2024-0138 | NVIDIA Base Command Manager missing authorization | 9.8CNA v3.1 | 0.9% | 2024-11-23 | Fix |
| CVE-2024-0122 | NVIDIA DLS component of NVIDIA License System missing authorization | 7.6CNA v3.1 | 0.3% | 2024-11-23 | Fix |
| CVE-2024-53438 | ChurchCRM SQL injection | 9.8v3.1 | 0.5% | 2024-11-22 | |
| CVE-2024-53253 | Sentry's improper error handling leaks Application Integration Client Secret | 5.3CNA v3.1 | 0.7% | 2024-11-22 | Fix |
| CVE-2024-52998 | Adobe Substance3D Stager out-of-bounds read | 5.5CNA v3.1 | 0.3% | 2024-11-22 | Fix |
| CVE-2024-52814 | argoproj argo-helm Helm lacks Granularity in Workflow Role | 2.8CNA v3.1 | 0.2% | 2024-11-22 | Fix |
| CVE-2024-52804 | Tornado has HTTP cookie parsing DoS | 7.5CNA v3.1 | 1.0% | 2024-11-22 | Fix |
| CVE-2024-52802 | RIOT-OS missing dhcpv6_opt_t minimum header length check | 7.5CNA v3.1 | 0.8% | 2024-11-22 | |
| CVE-2024-52793 | XSS vulnerability in serveDir API of @std/HTTP/file-server on POSIX systems | 5.1CNA v4.0 | 0.6% | 2024-11-22 | Fix |
| CVE-2024-52726 | CRMEB out-of-bounds read | 7.5CISA ADP v3.1 | 1.7% | 2024-11-22 | |
| CVE-2024-52723 | TOTOLINK X6000R OS command injection | 9.8v3.1 | 1.0% | 2024-11-22 | |
| CVE-2024-52034 | mySCADA myPRO OS command injection | 10.0CNA v4.0 | 1.7% | 2024-11-22 | Fix |
| CVE-2024-51766 | HPE NonStop DISK UTIL, local denial of service | 6.5CNA v3.1 | 0.2% | 2024-11-22 | Fix |
| CVE-2024-51074 | Kia Seltos instrument cluster vulnerability | 6.7CISA ADP v3.1 | 0.3% | 2024-11-22 | |
| CVE-2024-51073 | Kia Seltos instrument cluster CAN communication vulnerability | 6.7CISA ADP v3.1 | 0.3% | 2024-11-22 | |
| CVE-2024-51072 | Kia Seltos instrument cluster origin validation error | 5.3CISA ADP v3.1 | 0.2% | 2024-11-22 | |
| CVE-2024-50965 | Public Knowledge Project OJS, OMP and OPS cross-site scripting | 5.4CISA ADP v3.1 | 0.4% | 2024-11-22 | |
| CVE-2024-50657 | ownCloud Android app passcode lock privilege escalation | 6.8CISA ADP v3.1 | 0.4% | 2024-11-22 | |
| CVE-2024-50401 | QNAP QTS and QuTS hero format string | 2.1CNA v4.0 | 0.6% | 2024-11-22 | Fix |
| CVE-2024-50400 | QNAP QTS and QuTS hero format string | 2.1CNA v4.0 | 0.6% | 2024-11-22 | Fix |
| CVE-2024-50399 | QNAP QTS and QuTS hero format string | 2.1CNA v4.0 | 0.6% | 2024-11-22 | Fix |
| CVE-2024-50398 | QNAP QTS and QuTS hero format string | 2.1CNA v4.0 | 0.6% | 2024-11-22 | Fix |
| CVE-2024-50397 | QNAP QTS and QuTS hero format string | 7.7CNA v4.0 | 0.6% | 2024-11-22 | Fix |
| CVE-2024-50396 | QNAP QTS and QuTS hero format string | 7.7CNA v4.0 | 0.6% | 2024-11-22 | Fix |
| CVE-2024-50395 | QNAP Media Streaming add-on insecure direct object reference | 6.9CNA v4.0 | 1.4% | 2024-11-22 | Exploit codeFix |
| CVE-2024-50054 | mySCADA myPRO path traversal | 8.7CNA v4.0 | 0.7% | 2024-11-22 | Fix |
| CVE-2024-49054 | Microsoft Edge (Chromium-based) spoofing | 4.3CNA v3.1 | 0.6% | 2024-11-22 | Fix |
| CVE-2024-48862 | QNAP Systems QuLog Center link following | 8.7CNA v4.0 | 0.9% | 2024-11-22 | Fix |
| CVE-2024-48861 | QNAP QuRouter OS command injection | 7.3CNA v4.0 | 0.8% | 2024-11-22 | Fix |
| CVE-2024-48860 | QNAP QuRouter OS command injection | 9.5CNA v4.0 | 1.5% | 2024-11-22 | Fix |
| CVE-2024-47863 | Centreon Web contact name field stored cross-site scripting | 6.2CISA ADP v3.1 | 0.6% | 2024-11-22 | |
| CVE-2024-47407 | mySCADA myPRO OS command injection | 10.0CNA v4.0 | 63.8% | 2024-11-22 | MetasploitExploit codeFix |
| CVE-2024-47142 | AIPHONE IXG-2C7 insufficiently protected credentials | 5.5CNA v3.0 | 0.3% | 2024-11-22 | |
| CVE-2024-47138 | mySCADA myPRO missing authentication for critical function | 9.3CNA v4.0 | 0.8% | 2024-11-22 | Fix |
| CVE-2024-45837 | AIPHONE IX-MV hard-coded cryptographic key | 5.4CNA v3.0 | 0.3% | 2024-11-22 | |
| CVE-2024-45719 | Apache Answer: Predictable Authorization Token using UUIDv1 | 2.6CISA ADP v3.1 | 0.2% | 2024-11-22 | Fix |
| CVE-2024-45369 | mySCADA myPRO improper authentication | 9.2CNA v4.0 | 0.6% | 2024-11-22 | Fix |
| CVE-2024-44786 | Meabilis CMS address book improper access control | 7.5CISA ADP v3.1 | 0.5% | 2024-11-22 | |
| CVE-2024-41781 | IBM PowerVM Hypervisor information disclosure | 5.1CNA v3.1 | 0.3% | 2024-11-22 | Fix |
| CVE-2024-41779 | IBM Engineering Systems Design Rhapsody Model Manager | 9.8CNA v3.1 | 0.8% | 2024-11-22 | Fix |
| CVE-2024-39290 | AIPHONE IX-MV insufficiently protected credentials | 6.5CNA v3.0 | 0.4% | 2024-11-22 | |
| CVE-2024-38647 | QNAP AI Core information disclosure | 7.9CNA v4.0 | 0.7% | 2024-11-22 | Fix |
| CVE-2024-38646 | QNAP Notes Station 3 incorrect permission assignment | 8.4CNA v4.0 | 0.2% | 2024-11-22 | Fix |
| CVE-2024-38645 | QNAP Notes Station 3 server-side request forgery | 9.4CNA v4.0 | 0.6% | 2024-11-22 | Fix |
| CVE-2024-38644 | QNAP Notes Station 3 command injection | 8.7CNA v4.0 | 1.6% | 2024-11-22 | Fix |
| CVE-2024-38643 | QNAP Notes Station 3 missing authentication | 9.3CNA v4.0 | 0.9% | 2024-11-22 | Fix |
| CVE-2024-38296 | Dell Edge Gateway 5200 information disclosure | 6.7CNA v3.1 | 0.2% | 2024-11-22 | Fix |
| CVE-2024-37783 | Gladinet CentreStack v13.12.9934.54690 reflected cross-site scripting | 6.1CISA ADP v3.1 | 0.4% | 2024-11-22 | |
| CVE-2024-37782 | Gladinet CentreStack login page LDAP injection | 9.8CISA ADP v3.1 | 1.0% | 2024-11-22 | |
| CVE-2024-37050 | QNAP QTS and QuTS hero buffer overflow | 5.1CNA v4.0 | 0.8% | 2024-11-22 | Fix |
| CVE-2024-37049 | QNAP QTS and QuTS hero buffer overflow | 5.1CNA v4.0 | 0.8% | 2024-11-22 | Fix |
| CVE-2024-37048 | QNAP QTS and QuTS hero null pointer dereference | 5.1CNA v4.0 | 0.6% | 2024-11-22 | Fix |
| CVE-2024-37047 | QNAP QTS and QuTS hero buffer overflow | 5.1CNA v4.0 | 0.8% | 2024-11-22 | Fix |
| CVE-2024-37046 | QNAP QTS and QuTS hero path traversal | 2.1CNA v4.0 | 0.7% | 2024-11-22 | Fix |
| CVE-2024-37045 | QNAP QTS and QuTS hero null pointer dereference | 5.1CNA v4.0 | 0.6% | 2024-11-22 | Fix |
| CVE-2024-37044 | QNAP QTS and QuTS hero buffer overflow | 5.1CNA v4.0 | 0.9% | 2024-11-22 | Fix |
| CVE-2024-37043 | QNAP QTS and QuTS hero path traversal | 5.1CNA v4.0 | 0.7% | 2024-11-22 | Fix |
| CVE-2024-37042 | QNAP QTS and QuTS hero null pointer dereference | 5.1CNA v4.0 | 0.6% | 2024-11-22 | Fix |
| CVE-2024-37041 | QNAP QTS and QuTS hero buffer overflow | 5.1CNA v4.0 | 0.9% | 2024-11-22 | Fix |
| CVE-2024-32770 | QNAP Photo Station cross-site scripting | 6.3CNA v3.1 | 0.4% | 2024-11-22 | Fix |
| CVE-2024-32769 | QNAP Photo Station cross-site scripting | 6.3CNA v3.1 | 0.4% | 2024-11-22 | Fix |
| CVE-2024-32768 | QNAP Photo Station cross-site scripting | 6.3CNA v3.1 | 0.4% | 2024-11-22 | Fix |
| CVE-2024-32767 | QNAP Photo Station cross-site scripting | 6.3CNA v3.1 | 0.4% | 2024-11-22 | Fix |
| CVE-2024-31408 | AIPHONE IX-MV OS command injection | 8.0CNA v3.0 | 1.1% | 2024-11-22 | |
| CVE-2024-30377 | G DATA Total Security Scan Server link following local privilege escalation | 7.8v3.1 | 0.4% | 2024-11-22 | |
| CVE-2024-30376 | Famatech Advanced IP Scanner uncontrolled search path element local privilege escalation | 7.3v3.1 | 0.4% | 2024-11-22 | |
| CVE-2024-30372 | Allegra getLinkText server-side template injection remote code execution | 6.3NVD v3.1 | 1.2% | 2024-11-22 | Fix |
| CVE-2024-11630 | E-Lins H685/H685f/H700/H720/H750/H820/H820Q/H820Q0/H900 OEM Backend hard-coded credentials | 6.9CNA v4.0 | 0.6% | 2024-11-22 | |
| CVE-2024-11619 | macrozheng mall JWT Token default key | 8.1v3.1 | 0.7% | 2024-11-22 | |
| CVE-2024-11618 | IPC Unigy Management System HTTP request server-side request forgery | 6.9CNA v4.0 | 0.6% | 2024-11-22 | |
| CVE-2024-11612 | 7-Zip CopyCoder infinite loop denial of service | 6.5CNA v3.0 | 1.8% | 2024-11-22 | Fix |
| CVE-2024-11601 | Sky Addons for Elementor WordPress plugin cross-site request forgery | 8.1CNA v3.1 | 0.3% | 2024-11-22 | Fix |
| CVE-2024-11581 | Luxion KeyShot JT File Parsing out-of-bounds read remote code execution | 7.8v3.1 | 0.3% | 2024-11-22 | Fix |
| CVE-2024-11580 | Luxion KeyShot ABC File Parsing heap-based buffer overflow remote code execution | 7.8v3.1 | 0.4% | 2024-11-22 | Fix |
| CVE-2024-11579 | Luxion KeyShot OBJ File Parsing out-of-bounds write remote code execution | 7.8v3.1 | 0.3% | 2024-11-22 | Fix |
| CVE-2024-11578 | Luxion KeyShot 3DS File Parsing stack-based buffer overflow remote code execution | 7.8v3.1 | 0.4% | 2024-11-22 | Fix |
| CVE-2024-11577 | Luxion KeyShot SKP File Parsing out-of-bounds write remote code execution | 7.8v3.1 | 0.3% | 2024-11-22 | Fix |
| CVE-2024-11576 | Luxion KeyShot 3DS File Parsing heap-based buffer overflow remote code execution | 7.8v3.1 | 0.4% | 2024-11-22 | Fix |
| CVE-2024-11575 | IrfanView DXF File Parsing memory corruption remote code execution | 7.8v3.1 | 0.3% | 2024-11-22 | |
| CVE-2024-11574 | IrfanView DXF File Parsing memory corruption remote code execution | 7.8v3.1 | 0.3% | 2024-11-22 | |
| CVE-2024-11573 | IrfanView DXF File Parsing memory corruption remote code execution | 7.8v3.1 | 0.4% | 2024-11-22 | |
| CVE-2024-11572 | IrfanView DXF File Parsing memory corruption remote code execution | 7.8v3.1 | 0.4% | 2024-11-22 | |
| CVE-2024-11571 | IrfanView DXF File Parsing out-of-bounds read remote code execution | 7.8v3.1 | 0.3% | 2024-11-22 | |
| CVE-2024-11570 | IrfanView DXF File Parsing use-after-free remote code execution | 7.8v3.1 | 0.4% | 2024-11-22 | |
| CVE-2024-11569 | IrfanView DXF File Parsing out-of-bounds read remote code execution | 7.8v3.1 | 0.4% | 2024-11-22 | |
| CVE-2024-11568 | IrfanView DXF File Parsing out-of-bounds read remote code execution | 7.8v3.1 | 0.4% | 2024-11-22 | |
| CVE-2024-11567 | IrfanView DXF File Parsing out-of-bounds read remote code execution | 7.8v3.1 | 0.4% | 2024-11-22 | |
| CVE-2024-11566 | IrfanView DXF File Parsing out-of-bounds read remote code execution | 7.8v3.1 | 0.4% | 2024-11-22 | |
| CVE-2024-11565 | IrfanView CGM File Parsing out-of-bounds read remote code execution | 7.8v3.1 | 0.4% | 2024-11-22 | |
| CVE-2024-11564 | IrfanView DWG File Parsing memory corruption remote code execution | 7.8v3.1 | 0.4% | 2024-11-22 | |
| CVE-2024-11563 | IrfanView DXF File Parsing out-of-bounds read remote code execution | 7.8v3.1 | 0.4% | 2024-11-22 | |
| CVE-2024-11562 | IrfanView CGM File Parsing out-of-bounds read remote code execution | 7.8v3.1 | 0.4% | 2024-11-22 | |
| CVE-2024-11561 | IrfanView DXF File Parsing out-of-bounds read remote code execution | 7.8v3.1 | 0.4% | 2024-11-22 | |
| CVE-2024-11560 | IrfanView DXF File Parsing memory corruption remote code execution | 7.8v3.1 | 0.4% | 2024-11-22 | |
| CVE-2024-11559 | IrfanView DXF File Parsing out-of-bounds write remote code execution | 7.8v3.1 | 0.4% | 2024-11-22 | |
| CVE-2024-11558 | IrfanView DXF File Parsing memory corruption remote code execution | 7.8v3.1 | 0.4% | 2024-11-22 | |
| CVE-2024-11557 | IrfanView DXF File Parsing memory corruption remote code execution | 7.8v3.1 | 0.4% | 2024-11-22 | |
| CVE-2024-11556 | IrfanView DXF File Parsing memory corruption remote code execution | 7.8v3.1 | 0.4% | 2024-11-22 | |
| CVE-2024-11555 | IrfanView DXF File Parsing out-of-bounds write remote code execution | 7.8v3.1 | 0.4% | 2024-11-22 | |
| CVE-2024-11554 | IrfanView DWG File Parsing out-of-bounds write remote code execution | 7.8v3.1 | 0.4% | 2024-11-22 | |
| CVE-2024-11553 | IrfanView DXF File Parsing memory corruption remote code execution | 7.8v3.1 | 0.4% | 2024-11-22 | |
| CVE-2024-11552 | IrfanView DXF File Parsing memory corruption remote code execution | 7.8v3.1 | 0.4% | 2024-11-22 | |
| CVE-2024-11551 | IrfanView DXF File Parsing memory corruption remote code execution | 7.8v3.1 | 0.4% | 2024-11-22 | |
| CVE-2024-11550 | IrfanView DXF File Parsing out-of-bounds write remote code execution | 7.8v3.1 | 0.4% | 2024-11-22 | |
| CVE-2024-11549 | IrfanView DXF File Parsing out-of-bounds write remote code execution | 7.8v3.1 | 0.4% | 2024-11-22 | |
| CVE-2024-11548 | IrfanView DWG File Parsing out-of-bounds write remote code execution | 7.8v3.1 | 0.4% | 2024-11-22 | |
| CVE-2024-11547 | IrfanView DWG File Parsing memory corruption remote code execution | 7.8v3.1 | 0.4% | 2024-11-22 | |
| CVE-2024-11546 | IrfanView DXF File Parsing out-of-bounds write remote code execution | 7.8v3.1 | 0.4% | 2024-11-22 | |
| CVE-2024-11545 | IrfanView DXF File Parsing use-after-free remote code execution | 7.8v3.1 | 0.4% | 2024-11-22 | |
| CVE-2024-11544 | IrfanView DXF File Parsing memory corruption remote code execution | 7.8v3.1 | 0.4% | 2024-11-22 | |
| CVE-2024-11543 | IrfanView DXF File Parsing memory corruption remote code execution | 7.8v3.1 | 0.4% | 2024-11-22 | |
| CVE-2024-11542 | IrfanView DXF File Parsing memory corruption remote code execution | 7.8v3.1 | 0.4% | 2024-11-22 | |
| CVE-2024-11541 | IrfanView DXF File Parsing memory corruption remote code execution | 7.8v3.1 | 0.4% | 2024-11-22 | |
| CVE-2024-11540 | IrfanView DXF File Parsing out-of-bounds read remote code execution | 7.8v3.1 | 0.4% | 2024-11-22 | |
| CVE-2024-11539 | IrfanView DXF File Parsing memory corruption remote code execution | 7.8v3.1 | 0.4% | 2024-11-22 | |
| CVE-2024-11538 | IrfanView DXF File Parsing memory corruption remote code execution | 7.8v3.1 | 0.4% | 2024-11-22 | |
| CVE-2024-11537 | IrfanView DXF File Parsing out-of-bounds read remote code execution | 7.8v3.1 | 0.4% | 2024-11-22 | |
| CVE-2024-11536 | IrfanView DXF File Parsing out-of-bounds read remote code execution | 7.8v3.1 | 0.4% | 2024-11-22 | |
| CVE-2024-11535 | IrfanView DXF File Parsing out-of-bounds read remote code execution | 7.8v3.1 | 0.4% | 2024-11-22 | |
| CVE-2024-11534 | IrfanView DXF File Parsing out-of-bounds read remote code execution | 7.8v3.1 | 0.4% | 2024-11-22 | |
| CVE-2024-11533 | IrfanView DXF File Parsing out-of-bounds write remote code execution | 7.8v3.1 | 0.4% | 2024-11-22 | |
| CVE-2024-11532 | IrfanView DXF File Parsing out-of-bounds write remote code execution | 7.8v3.1 | 0.4% | 2024-11-22 | |
| CVE-2024-11531 | IrfanView CGM File Parsing out-of-bounds read remote code execution | 7.8v3.1 | 0.4% | 2024-11-22 | |
| CVE-2024-11530 | IrfanView CGM File Parsing memory corruption remote code execution | 7.8v3.1 | 0.4% | 2024-11-22 | |
| CVE-2024-11529 | IrfanView DWG File Parsing out-of-bounds read remote code execution | 7.8v3.1 | 0.4% | 2024-11-22 | |
| CVE-2024-11528 | IrfanView DXF File Parsing memory corruption remote code execution | 7.8v3.1 | 0.4% | 2024-11-22 | |
| CVE-2024-11527 | IrfanView DWG File Parsing memory corruption remote code execution | 7.8v3.1 | 0.4% | 2024-11-22 | |
| CVE-2024-11526 | IrfanView CGM File Parsing out-of-bounds read remote code execution | 7.8v3.1 | 0.4% | 2024-11-22 | |
| CVE-2024-11525 | IrfanView DXF File Parsing use-after-free remote code execution | 7.8v3.1 | 0.4% | 2024-11-22 | |
| CVE-2024-11524 | IrfanView DXF File Parsing memory corruption remote code execution | 7.8v3.1 | 0.4% | 2024-11-22 | |
| CVE-2024-11523 | IrfanView DXF File Parsing memory corruption remote code execution | 7.8v3.1 | 0.4% | 2024-11-22 | |
| CVE-2024-11522 | IrfanView DXF File Parsing memory corruption remote code execution | 7.8v3.1 | 0.4% | 2024-11-22 | |
| CVE-2024-11521 | IrfanView DJVU File Parsing use-after-free remote code execution | 7.8v3.1 | 0.4% | 2024-11-22 | |
| CVE-2024-11520 | IrfanView ARW File Parsing out-of-bounds write remote code execution | 7.8v3.1 | 0.4% | 2024-11-22 | |
| CVE-2024-11519 | IrfanView RLE File Parsing memory corruption remote code execution | 7.8v3.1 | 0.4% | 2024-11-22 | |
| CVE-2024-11518 | IrfanView RLE File Parsing heap-based buffer overflow remote code execution | 7.8v3.1 | 0.4% | 2024-11-22 | |
| CVE-2024-11517 | IrfanView JPM File Parsing out-of-bounds write remote code execution | 7.8v3.1 | 0.4% | 2024-11-22 | |
| CVE-2024-11516 | IrfanView JPM File Parsing heap-based buffer overflow remote code execution | 7.8v3.1 | 0.4% | 2024-11-22 | |
| CVE-2024-11515 | IrfanView JPM File Parsing out-of-bounds write remote code execution | 7.8v3.1 | 0.4% | 2024-11-22 | |
| CVE-2024-11514 | IrfanView ECW File Parsing heap-based buffer overflow remote code execution | 7.8v3.1 | 0.4% | 2024-11-22 | |
| CVE-2024-11513 | IrfanView ECW File Parsing heap-based buffer overflow remote code execution | 7.8v3.1 | 0.4% | 2024-11-22 | |
| CVE-2024-11512 | IrfanView WBZ Plugin WB1 File Parsing out-of-bounds write remote code execution | 7.8v3.1 | 0.4% | 2024-11-22 | |
| CVE-2024-11511 | IrfanView XCF Plugin XCF File Parsing heap-based buffer overflow remote code execution | 7.8v3.1 | 0.4% | 2024-11-22 | |
| CVE-2024-11510 | IrfanView WBZ plugin WB1 File Parsing stack-based buffer overflow remote code execution | 7.8v3.1 | 0.4% | 2024-11-22 | |
| CVE-2024-11509 | IrfanView SVG File Parsing heap-based buffer overflow remote code execution | 7.8v3.1 | 0.4% | 2024-11-22 | |
| CVE-2024-11508 | IrfanView DXF File Parsing type confusion remote code execution | 7.8v3.1 | 0.4% | 2024-11-22 | |
| CVE-2024-11507 | IrfanView DXF File Parsing type confusion remote code execution | 7.8v3.1 | 0.4% | 2024-11-22 | |
| CVE-2024-11506 | IrfanView DWG File Parsing out-of-bounds read remote code execution | 7.8v3.1 | 0.4% | 2024-11-22 | |
| CVE-2024-11477 | 7-Zip Zstandard Decompression integer underflow remote code execution | 7.8NVD v3.1 | 22.4% | 2024-11-22 | Fix |
| CVE-2024-11394 | Hugging Face Transformers Trax Model deserialization of untrusted data remote code execution | 8.8v3.1 | 2.6% | 2024-11-22 | Exploit codeFix |
| CVE-2024-11393 | Hugging Face Transformers MaskFormer Model deserialization of untrusted data remote code execution | 8.8v3.1 | 3.1% | 2024-11-22 | Exploit codeFix |
| CVE-2024-11392 | Hugging Face Transformers MobileViTV2 deserialization of untrusted data remote code execution | 8.8v3.1 | 7.1% | 2024-11-22 | Exploit codeFix |
| CVE-2024-11381 | Control horas WordPress plugin authenticated (Contributor+) stored cross-site scripting | 6.4CNA v3.1 | 0.8% | 2024-11-22 | |
| CVE-2024-11355 | Ultimate YouTube Video and Shorts Player With Vimeo WordPress plugin unauthorized access | 4.3CNA v3.1 | 0.5% | 2024-11-22 | |
| CVE-2024-11225 | Premium Packages Sell Digital Products Securely WordPress plugin reflected cross-site scripting | 6.1CNA v3.1 | 0.5% | 2024-11-22 | Fix |
| CVE-2024-11104 | Sky Addons for Elementor WordPress plugin unauthorized access | 8.1CNA v3.1 | 0.7% | 2024-11-22 | Fix |
| CVE-2024-10863 | OpenText Secure Content Manager client-side audit exclusion vulnerability | 5.1CNA v4.0 | 0.5% | 2024-11-22 | Fix |
| CVE-2024-10666 | Easy Twitter Feed Twitter feeds plugin for WP WordPress plugin post exposure | 4.3CNA v3.1 | 0.4% | 2024-11-22 | Fix |
| CVE-2024-10220 | Kubernetes kubelet arbitrary command execution through gitRepo volume | 8.1CNA v3.1 | 3.0% | 2024-11-22 | Exploit codeFix |
| CVE-2024-10034 | Gallery Blocks with Lightbox. Image Gallery WordPress plugin stored cross-site scripting | 5.5CNA v3.1 | 0.4% | 2024-11-22 | Fix |
| CVE-2024-9767 | IrfanView SID File Parsing out-of-bounds read remote code execution | 7.8v3.1 | 0.4% | 2024-11-22 | |
| CVE-2024-9766 | Wacom Center WTabletServicePro link following local privilege escalation | 7.8v3.1 | 0.3% | 2024-11-22 | |
| CVE-2024-9764 | Tungsten Automation Power PDF PDF File Parsing use-after-free remote code execution | 7.8v3.1 | 0.3% | 2024-11-22 | |
| CVE-2024-9763 | Tungsten Automation Power PDF PDF File Parsing out-of-bounds read information disclosure | 3.3v3.1 | 0.3% | 2024-11-22 | |
| CVE-2024-9762 | Tungsten Automation Power PDF OXPS File Parsing out-of-bounds read information disclosure | 3.3v3.1 | 0.3% | 2024-11-22 | |
| CVE-2024-9761 | Tungsten Automation Power PDF PDF File Parsing out-of-bounds read information disclosure | 3.3v3.1 | 0.3% | 2024-11-22 | |
| CVE-2024-9760 | Tungsten Automation Power PDF PNG File Parsing out-of-bounds read information disclosure | 3.3v3.1 | 0.3% | 2024-11-22 | |
| CVE-2024-9759 | Tungsten Automation Power PDF GIF File Parsing out-of-bounds read information disclosure | 3.3v3.1 | 0.3% | 2024-11-22 | |
| CVE-2024-9758 | Tungsten Automation Power PDF AcroForm Annotation out-of-bounds read information disclosure | 4.3v3.1 | 0.5% | 2024-11-22 | |
| CVE-2024-9757 | Tungsten Automation Power PDF JP2 File Parsing out-of-bounds read information disclosure | 3.3v3.1 | 0.3% | 2024-11-22 | |
| CVE-2024-9755 | Tungsten Automation Power PDF JP2 File Parsing out-of-bounds read remote code execution | 7.8v3.1 | 0.3% | 2024-11-22 | |
| CVE-2024-9754 | Tungsten Automation Power PDF PDF File Parsing out-of-bounds read information disclosure | 3.3v3.1 | 0.3% | 2024-11-22 | |
| CVE-2024-9753 | Tungsten Automation Power PDF PDF File Parsing out-of-bounds read information disclosure | 3.3v3.1 | 0.3% | 2024-11-22 | |
| CVE-2024-9752 | Tungsten Automation Power PDF JPG File Parsing out-of-bounds read information disclosure | 3.3v3.1 | 0.3% | 2024-11-22 | |
| CVE-2024-9751 | Tungsten Automation Power PDF JP2 File Parsing out-of-bounds read remote code execution | 7.8v3.1 | 0.3% | 2024-11-22 | |
| CVE-2024-9750 | Tungsten Automation Power PDF PNG File Parsing out-of-bounds read remote code execution | 7.8v3.1 | 0.3% | 2024-11-22 | |
| CVE-2024-9749 | Tungsten Automation Power PDF PDF File Parsing out-of-bounds read information disclosure | 3.3v3.1 | 0.3% | 2024-11-22 | |
| CVE-2024-9748 | Tungsten Automation Power PDF XPS File Parsing use-after-free remote code execution | 7.8v3.1 | 0.3% | 2024-11-22 | |
| CVE-2024-9747 | Tungsten Automation Power PDF PSD File Parsing out-of-bounds write remote code execution | 7.8v3.1 | 0.3% | 2024-11-22 | |
| CVE-2024-9746 | Tungsten Automation Power PDF TGA File Parsing out-of-bounds write remote code execution | 7.8v3.1 | 0.3% | 2024-11-22 | |
| CVE-2024-9745 | Tungsten Automation Power PDF TIF File Parsing stack-based buffer overflow remote code execution | 7.8v3.1 | 0.3% | 2024-11-22 | |
| CVE-2024-9744 | Tungsten Automation Power PDF JP2 File Parsing out-of-bounds write remote code execution | 7.8v3.1 | 0.3% | 2024-11-22 | |
| CVE-2024-9743 | Tungsten Automation Power PDF PDF File Parsing heap-based buffer overflow remote code execution | 7.8v3.1 | 0.3% | 2024-11-22 | |
| CVE-2024-9742 | Tungsten Automation Power PDF PSD File Parsing heap-based buffer overflow remote code execution | 7.8v3.1 | 0.3% | 2024-11-22 | |
| CVE-2024-9741 | Tungsten Automation Power PDF PDF File Parsing heap-based buffer overflow remote code execution | 7.8v3.1 | 0.3% | 2024-11-22 | |
| CVE-2024-9740 | Tungsten Automation Power PDF BMP File Parsing out-of-bounds write remote code execution | 7.8v3.1 | 0.3% | 2024-11-22 | |
| CVE-2024-9739 | Tungsten Automation Power PDF PDF File Parsing memory corruption remote code execution | 7.8v3.1 | 0.3% | 2024-11-22 | |
| CVE-2024-9738 | Tungsten Automation Power PDF PDF File Parsing memory corruption remote code execution | 7.8v3.1 | 0.3% | 2024-11-22 | |
| CVE-2024-9737 | Tungsten Automation Power PDF PDF File Parsing out-of-bounds write remote code execution | 7.8v3.1 | 0.3% | 2024-11-22 | |
| CVE-2024-9736 | Tungsten Automation Power PDF PDF File Parsing out-of-bounds write remote code execution | 7.8v3.1 | 0.3% | 2024-11-22 | |
| CVE-2024-9735 | Tungsten Automation Power PDF JPF File Parsing out-of-bounds write remote code execution | 7.8v3.1 | 0.3% | 2024-11-22 | |
| CVE-2024-9734 | Tungsten Automation Power PDF PDF File Parsing heap-based buffer overflow remote code execution | 7.8v3.1 | 0.3% | 2024-11-22 | |
| CVE-2024-9733 | Tungsten Automation Power PDF PDF File Parsing out-of-bounds write remote code execution | 7.8v3.1 | 0.3% | 2024-11-22 | |
| CVE-2024-9732 | Tungsten Automation Power PDF XPS File Parsing use-after-free remote code execution | 7.8v3.1 | 0.3% | 2024-11-22 | |
| CVE-2024-9731 | Trimble SketchUp Viewer SKP File Parsing memory corruption remote code execution | 7.8v3.1 | 0.3% | 2024-11-22 | |
| CVE-2024-9730 | Trimble SketchUp Viewer SKP File Parsing memory corruption remote code execution | 7.8v3.1 | 0.3% | 2024-11-22 | |
| CVE-2024-9729 | Trimble SketchUp Viewer SKP File Parsing use-after-free remote code execution | 7.8v3.1 | 0.3% | 2024-11-22 | |
| CVE-2024-9728 | Trimble SketchUp Viewer SKP File Parsing use-after-free remote code execution | 7.8v3.1 | 0.3% | 2024-11-22 | |
| CVE-2024-9727 | Trimble SketchUp Viewer SKP File Parsing use-after-free remote code execution | 7.8v3.1 | 0.3% | 2024-11-22 | |
| CVE-2024-9726 | Trimble SketchUp Viewer SKP File Parsing stack-based buffer overflow remote code execution | 7.8v3.1 | 0.3% | 2024-11-22 | |
| CVE-2024-9725 | Trimble SketchUp Viewer SKP File Parsing use-after-free remote code execution | 7.8v3.1 | 0.3% | 2024-11-22 | |
| CVE-2024-9724 | Trimble SketchUp Viewer SKP File Parsing use-after-free remote code execution | 7.8v3.1 | 0.3% | 2024-11-22 | |
| CVE-2024-9723 | Trimble SketchUp Viewer SKP File Parsing use-after-free remote code execution | 7.8v3.1 | 0.4% | 2024-11-22 | |
| CVE-2024-9722 | Trimble SketchUp Viewer SKP File Parsing use-after-free remote code execution | 7.8v3.1 | 0.3% | 2024-11-22 | |
| CVE-2024-9721 | Trimble SketchUp Viewer SKP File Parsing use-after-free remote code execution | 7.8v3.1 | 0.4% | 2024-11-22 | |
| CVE-2024-9720 | Trimble SketchUp Viewer SKP File Parsing out-of-bounds read remote code execution | 7.8v3.1 | 0.3% | 2024-11-22 | |
| CVE-2024-9719 | Trimble SketchUp Viewer SKP File Parsing use-after-free remote code execution | 7.8v3.1 | 0.3% | 2024-11-22 | |
| CVE-2024-9718 | Trimble SketchUp Viewer SKP File Parsing out-of-bounds read remote code execution | 7.8v3.1 | 0.3% | 2024-11-22 | |
| CVE-2024-9717 | Trimble SketchUp Viewer SKP File Parsing uninitialized variable remote code execution | 7.8v3.1 | 0.3% | 2024-11-22 | |
| CVE-2024-9716 | Trimble SketchUp Viewer SKP File Parsing use-after-free remote code execution | 7.8v3.1 | 0.3% | 2024-11-22 | |
| CVE-2024-9715 | Trimble SketchUp Viewer SKP File Parsing use-after-free remote code execution | 7.8v3.1 | 0.3% | 2024-11-22 | |
| CVE-2024-9714 | Trimble SketchUp Viewer SKP File Parsing use-after-free remote code execution | 7.8v3.1 | 0.4% | 2024-11-22 | |
| CVE-2024-9713 | Trimble SketchUp Pro SKP File Parsing use-after-free remote code execution | 7.8v3.1 | 0.4% | 2024-11-22 | |
| CVE-2024-9712 | Trimble SketchUp SKP File Parsing use-after-free remote code execution | 7.8v3.1 | 0.4% | 2024-11-22 | |
| CVE-2024-9710 | PostHog database_schema server-side request forgery information disclosure | 8.3v3.1 | 0.7% | 2024-11-22 | |
| CVE-2024-9665 | Zimbra GraphQL cross-site request forgery information disclosure | 6.5v3.1 | 0.5% | 2024-11-22 | Fix |
| CVE-2024-9422 | GEO My WordPress plugin Admin+ arbitrary file upload | 6.6CISA ADP v3.1 | 0.8% | 2024-11-22 | Fix |
| CVE-2024-9261 | IrfanView SID File Parsing stack-based buffer overflow remote code execution | 7.8v3.1 | 0.4% | 2024-11-22 | |
| CVE-2024-9260 | IrfanView SID File Parsing out-of-bounds write remote code execution | 7.8v3.1 | 0.3% | 2024-11-22 | |
| CVE-2024-9259 | IrfanView SID File Parsing out-of-bounds write remote code execution | 7.8v3.1 | 0.3% | 2024-11-22 | |
| CVE-2024-9258 | IrfanView SID File Parsing uninitialized pointer remote code execution | 7.8v3.1 | 0.4% | 2024-11-22 | |
| CVE-2024-9257 | Logsign Unified SecOps Platform delete_gsuite_key_file input validation arbitrary file deletion | 6.5v3.1 | 0.6% | 2024-11-22 | Fix |
| CVE-2024-9256 | Foxit PDF Reader AcroForm out-of-bounds read information disclosure | 7.1v3.1 | 0.4% | 2024-11-22 | Fix |
| CVE-2024-9255 | Foxit PDF Reader Annotation use-after-free remote code execution | 7.8v3.1 | 0.6% | 2024-11-22 | Fix |
| CVE-2024-9254 | Foxit PDF Reader Annotation use-after-free remote code execution | 8.8v3.1 | 0.9% | 2024-11-22 | Fix |
| CVE-2024-9253 | Foxit PDF Reader AcroForm out-of-bounds read information disclosure | 7.1v3.1 | 0.4% | 2024-11-22 | Fix |
| CVE-2024-9252 | Foxit PDF Reader AcroForm use-after-free information disclosure | 7.8v3.1 | 0.4% | 2024-11-22 | Fix |
| CVE-2024-9251 | Foxit PDF Reader Annotation use-after-free information disclosure | 7.8v3.1 | 0.4% | 2024-11-22 | Fix |
| CVE-2024-9250 | Foxit PDF Reader AcroForm use-after-free remote code execution | 7.8v3.1 | 0.6% | 2024-11-22 | Fix |
| CVE-2024-9249 | Foxit PDF Reader PDF File Parsing out-of-bounds read remote code execution | 7.1v3.1 | 0.6% | 2024-11-22 | Fix |
| CVE-2024-9248 | Foxit PDF Reader PDF File Parsing out-of-bounds write remote code execution | 7.8v3.1 | 0.6% | 2024-11-22 | Fix |
| CVE-2024-9247 | Foxit PDF Reader Annotation out-of-bounds write remote code execution | 7.8v3.1 | 0.4% | 2024-11-22 | Fix |
| CVE-2024-9246 | Foxit PDF Reader Annotation out-of-bounds read information disclosure | 7.1v3.1 | 0.5% | 2024-11-22 | Fix |
| CVE-2024-9245 | Foxit PDF Reader Update service incorrect permission assignment local privilege escalation | 7.8v3.1 | 0.3% | 2024-11-22 | Fix |
| CVE-2024-9244 | Foxit PDF Reader Update service incorrect permission assignment local privilege escalation | 7.8v3.1 | 0.3% | 2024-11-22 | Fix |
| CVE-2024-9243 | Foxit PDF Reader AcroForm Doc use-after-free remote code execution | 7.8v3.1 | 0.4% | 2024-11-22 | Fix |
| CVE-2024-9114 | FastStone Image Viewer GIF File Parsing out-of-bounds write remote code execution | 7.8v3.1 | 0.4% | 2024-11-22 | |
| CVE-2024-9113 | FastStone Image Viewer TGA File Parsing out-of-bounds write remote code execution | 7.8v3.1 | 0.3% | 2024-11-22 | |
| CVE-2024-9112 | FastStone Image Viewer PSD File Parsing out-of-bounds write remote code execution | 7.8v3.1 | 0.3% | 2024-11-22 | |
| CVE-2024-8932 | PHP OOB access in ldap_escape | 9.8CNA v3.1 | 1.3% | 2024-11-22 | Fix |
| CVE-2024-8929 | PHP leak partial content of the heap through heap buffer over-read in mysqlnd | 5.8CNA v3.1 | 2.2% | 2024-11-22 | Fix |
| CVE-2024-8849 | PDF-XChange Editor AcroForm out-of-bounds read information disclosure | 5.5v3.1 | 0.3% | 2024-11-22 | |
| CVE-2024-8848 | PDF-XChange Editor AcroForm out-of-bounds read information disclosure | 5.5v3.1 | 0.3% | 2024-11-22 | |
| CVE-2024-8847 | PDF-XChange Editor Doc object out-of-bounds read remote code execution | 7.8v3.1 | 0.3% | 2024-11-22 | |
| CVE-2024-8846 | PDF-XChange Editor TIF File Parsing out-of-bounds read information disclosure | 5.5v3.1 | 0.3% | 2024-11-22 | |
| CVE-2024-8845 | PDF-XChange Editor PDF File Parsing out-of-bounds read information disclosure | 5.5v3.1 | 0.4% | 2024-11-22 | |
| CVE-2024-8844 | PDF-XChange Editor PDF File Parsing out-of-bounds read information disclosure | 5.5v3.1 | 0.4% | 2024-11-22 | |
| CVE-2024-8843 | PDF-XChange Editor JB2 File Parsing out-of-bounds read information disclosure | 5.5v3.1 | 0.4% | 2024-11-22 | |
| CVE-2024-8842 | PDF-XChange Editor RTF File Parsing uninitialized variable remote code execution | 7.8v3.1 | 0.4% | 2024-11-22 | |
| CVE-2024-8841 | PDF-XChange Editor PDF File Parsing out-of-bounds read information disclosure | 5.5v3.1 | 0.3% | 2024-11-22 | |
| CVE-2024-8840 | PDF-XChange Editor JB2 File Parsing out-of-bounds read remote code execution | 7.8v3.1 | 0.4% | 2024-11-22 | |
| CVE-2024-8839 | PDF-XChange Editor JB2 File Parsing out-of-bounds read information disclosure | 5.5v3.1 | 0.3% | 2024-11-22 | |
| CVE-2024-8838 | PDF-XChange Editor XPS File Parsing out-of-bounds read remote code execution | 7.8v3.1 | 0.4% | 2024-11-22 | |
| CVE-2024-8837 | PDF-XChange Editor XPS File Parsing out-of-bounds read remote code execution | 7.8v3.1 | 0.4% | 2024-11-22 | |
| CVE-2024-8836 | PDF-XChange Editor TIF File Parsing out-of-bounds read information disclosure | 5.5v3.1 | 0.4% | 2024-11-22 | |
| CVE-2024-8835 | PDF-XChange Editor JB2 File Parsing out-of-bounds read information disclosure | 5.5v3.1 | 0.3% | 2024-11-22 | |
| CVE-2024-8834 | PDF-XChange Editor TIF File Parsing out-of-bounds read information disclosure | 5.5v3.1 | 0.3% | 2024-11-22 | |
| CVE-2024-8833 | PDF-XChange Editor XPS File Parsing out-of-bounds read remote code execution | 7.8v3.1 | 0.3% | 2024-11-22 | |
| CVE-2024-8832 | PDF-XChange Editor EMF File Parsing out-of-bounds read information disclosure | 5.5v3.1 | 0.4% | 2024-11-22 | |
| CVE-2024-8831 | PDF-XChange Editor XPS File Parsing out-of-bounds read remote code execution | 7.8v3.1 | 0.4% | 2024-11-22 | |
| CVE-2024-8830 | PDF-XChange Editor XPS File Parsing out-of-bounds write remote code execution | 7.8v3.1 | 0.4% | 2024-11-22 | |
| CVE-2024-8829 | PDF-XChange Editor EMF File Parsing out-of-bounds read information disclosure | 5.5v3.1 | 0.3% | 2024-11-22 | |
| CVE-2024-8828 | PDF-XChange Editor EMF File Parsing out-of-bounds read information disclosure | 5.5v3.1 | 0.3% | 2024-11-22 | |
| CVE-2024-8827 | PDF-XChange Editor PPM File Parsing out-of-bounds write remote code execution | 7.8v3.1 | 0.4% | 2024-11-22 | |
| CVE-2024-8826 | PDF-XChange Editor XPS File Parsing out-of-bounds read remote code execution | 7.8v3.1 | 0.4% | 2024-11-22 | |
| CVE-2024-8825 | PDF-XChange Editor PDF File Parsing out-of-bounds read remote code execution | 7.8v3.1 | 0.4% | 2024-11-22 | |
| CVE-2024-8824 | PDF-XChange Editor JB2 File Parsing out-of-bounds read information disclosure | 5.5v3.1 | 0.3% | 2024-11-22 | |
| CVE-2024-8823 | PDF-XChange Editor JB2 File Parsing out-of-bounds read information disclosure | 5.5v3.1 | 0.3% | 2024-11-22 | |
| CVE-2024-8822 | PDF-XChange Editor U3D File Parsing out-of-bounds read information disclosure | 5.5v3.1 | 0.3% | 2024-11-22 | |
| CVE-2024-8821 | PDF-XChange Editor U3D File Parsing use-after-free information disclosure | 5.5v3.1 | 0.4% | 2024-11-22 | |
| CVE-2024-8820 | PDF-XChange Editor U3D File Parsing out-of-bounds read information disclosure | 5.5v3.1 | 0.3% | 2024-11-22 | |
| CVE-2024-8819 | PDF-XChange Editor U3D File Parsing out-of-bounds read information disclosure | 5.5v3.1 | 0.3% | 2024-11-22 | |
| CVE-2024-8818 | PDF-XChange Editor U3D File Parsing use-after-free remote code execution | 7.8v3.1 | 0.3% | 2024-11-22 | |
| CVE-2024-8817 | PDF-XChange Editor U3D File Parsing out-of-bounds write remote code execution | 7.8v3.1 | 0.3% | 2024-11-22 | |
| CVE-2024-8816 | PDF-XChange Editor U3D File Parsing use-after-free information disclosure | 5.5v3.1 | 0.3% | 2024-11-22 | |
| CVE-2024-8815 | PDF-XChange Editor U3D File Parsing memory corruption remote code execution | 7.8v3.1 | 0.3% | 2024-11-22 | |
| CVE-2024-8814 | PDF-XChange Editor U3D File Parsing out-of-bounds read remote code execution | 7.8v3.1 | 0.3% | 2024-11-22 | |
| CVE-2024-8813 | PDF-XChange Editor U3D File Parsing out-of-bounds write remote code execution | 7.8v3.1 | 0.3% | 2024-11-22 | |
| CVE-2024-8812 | PDF-XChange Editor U3D File Parsing out-of-bounds read remote code execution | 7.8v3.1 | 0.3% | 2024-11-22 | |
| CVE-2024-8811 | WinZip Computing WinZip archive extraction security feature bypass | 7.8v3.1 | 0.4% | 2024-11-22 | |
| CVE-2024-8809 | Cohesive Networks VNS3 command injection remote code execution | 8.8v3.1 | 1.6% | 2024-11-22 | Fix |
| CVE-2024-8808 | Cohesive Networks VNS3 command injection remote code execution | 8.8v3.1 | 1.6% | 2024-11-22 | Fix |
| CVE-2024-8807 | Cohesive Networks VNS3 command injection remote code execution | 9.8v3.1 | 1.7% | 2024-11-22 | Fix |
| CVE-2024-8806 | Cohesive Networks VNS3 command injection remote code execution | 9.8v3.1 | 1.7% | 2024-11-22 | Fix |
| CVE-2024-8805 | BlueZ HID over GATT Profile improper access control remote code execution | 8.8v3.1 | 2.0% | 2024-11-22 | Fix |
| CVE-2024-8735 | MailMunch Grow your Email List WordPress plugin reflected cross-site scripting | 6.1CNA v3.1 | 0.5% | 2024-11-22 | Fix |
| CVE-2024-8360 | Visteon Infotainment REFLASH_DDU_ExtractFile command injection remote code execution | 6.8v3.1 | 0.9% | 2024-11-22 | |
| CVE-2024-8359 | Visteon Infotainment REFLASH_DDU_FindFile command injection remote code execution | 6.8v3.1 | 0.9% | 2024-11-22 | |
| CVE-2024-8358 | Visteon Infotainment UPDATES_ExtractFile command injection remote code execution | 6.8v3.1 | 0.9% | 2024-11-22 | |
| CVE-2024-8357 | Visteon Infotainment App SoC Missing Immutable Root of Trust in Hardware local privilege escalation | 7.8v3.1 | 0.3% | 2024-11-22 | |
| CVE-2024-8356 | Visteon Infotainment VIP MCU firmware update process privilege escalation | 7.8v3.1 | 0.2% | 2024-11-22 | |
| CVE-2024-8355 | Visteon Infotainment System DeviceManager iAP Serial Number SQL injection | 6.8v3.1 | 0.6% | 2024-11-22 | |
| CVE-2024-8025 | Nikon NEF Codec Thumbnail Provider NRW File Parsing heap-based buffer overflow remote code execution | 7.8v3.1 | 0.3% | 2024-11-22 | Fix |
| CVE-2024-7882 | SQLi in Special Minds' e-Commerce | 6.5CNA v3.1 | 0.3% | 2024-11-22 | Fix |
| CVE-2024-7837 | SQLi in Firmanet Software's ERP | 8.2CNA v3.1 | 0.5% | 2024-11-22 | Fix |
| CVE-2024-7565 | SMARTBEAR SoapUI unpackageAll directory traversal remote code execution | 7.8v3.1 | 1.0% | 2024-11-22 | Fix |
| CVE-2024-7511 | Trimble SketchUp Pro SKP File Parsing out-of-bounds read information disclosure | 5.5v3.1 | 0.4% | 2024-11-22 | |
| CVE-2024-7510 | Trimble SketchUp SKP File Parsing use-after-free remote code execution | 7.8v3.1 | 0.5% | 2024-11-22 | |
| CVE-2024-7509 | Trimble SketchUp SKP File Parsing stack-based buffer overflow remote code execution | 7.8v3.1 | 0.4% | 2024-11-22 | |
| CVE-2024-7508 | Trimble SketchUp Viewer SKP File Parsing heap-based buffer overflow remote code execution | 7.8v3.1 | 0.4% | 2024-11-22 | |
| CVE-2024-7392 | ChargePoint Home Flex Bluetooth Low Energy denial of service | 6.5v3.1 | 0.6% | 2024-11-22 | |
| CVE-2024-7391 | ChargePoint Home Flex Bluetooth Low Energy information disclosure | 5.7v3.1 | 0.5% | 2024-11-22 | |
| CVE-2024-7352 | PDF-XChange Editor PDF File Parsing out-of-bounds write remote code execution | 7.8v3.1 | 0.4% | 2024-11-22 | |
| CVE-2024-7253 | NoMachine uncontrolled search path element local privilege escalation | 7.8v3.1 | 0.3% | 2024-11-22 | Fix |
| CVE-2024-7245 | Panda Security Dome VPN incorrect permission assignment local privilege escalation | 7.8v3.1 | 0.2% | 2024-11-22 | |
| CVE-2024-7244 | Panda Security Dome VPN DLL hijacking local privilege escalation | 7.8v3.1 | 0.3% | 2024-11-22 | |
| CVE-2024-7243 | Panda Security Dome link following local privilege escalation | 7.8v3.1 | 0.3% | 2024-11-22 | |
| CVE-2024-7242 | Panda Security Dome link following local privilege escalation | 7.8v3.1 | 0.3% | 2024-11-22 | |
| CVE-2024-7241 | Panda Security Dome link following local privilege escalation | 7.8v3.1 | 0.3% | 2024-11-22 | |
| CVE-2024-7240 | F-Secure Total link following local privilege escalation | 7.8v3.1 | 0.4% | 2024-11-22 | |
| CVE-2024-7239 | VIPRE Advanced Security link following local privilege escalation | 7.8v3.1 | 0.4% | 2024-11-22 | |
| CVE-2024-7238 | VIPRE Advanced Security SBAMSvc link following local privilege escalation | 7.8v3.1 | 0.4% | 2024-11-22 | |
| CVE-2024-7237 | AVG AntiVirus Free AVGSvc link following local privilege escalation | 7.8v3.1 | 0.3% | 2024-11-22 | |
| CVE-2024-7236 | AVG AntiVirus Free icarus arbitrary file creation denial of service | 5.5v3.1 | 0.3% | 2024-11-22 | |
| CVE-2024-7235 | AVG AntiVirus Free link following denial of service | 5.5v3.1 | 0.3% | 2024-11-22 | |
| CVE-2024-7234 | AVG AntiVirus Free AVGSvc link following local privilege escalation | 7.8v3.1 | 0.4% | 2024-11-22 | |
| CVE-2024-7233 | Avast Free Antivirus AvastSvc link following local privilege escalation | 7.8v3.1 | 0.4% | 2024-11-22 | |
| CVE-2024-7232 | Avast Free Antivirus AvastSvc link following local privilege escalation | 7.8v3.1 | 0.4% | 2024-11-22 | |
| CVE-2024-7231 | Avast Cleanup Premium link following local privilege escalation | 7.8v3.1 | 0.3% | 2024-11-22 | |
| CVE-2024-7230 | Avast Cleanup Premium link following local privilege escalation | 7.8v3.1 | 0.3% | 2024-11-22 | |
| CVE-2024-7229 | Avast Cleanup Premium link following local privilege escalation | 7.8v3.1 | 0.3% | 2024-11-22 | |
| CVE-2024-7228 | Avast Free Antivirus link following denial of service | 5.5v3.1 | 0.3% | 2024-11-22 | |
| CVE-2024-7227 | Avast Free Antivirus AvastSvc link following local privilege escalation | 7.8v3.1 | 0.4% | 2024-11-22 | |
| CVE-2024-6871 | G DATA Total Security incorrect permission assignment local privilege escalation | 7.8v3.1 | 0.2% | 2024-11-22 | |
| CVE-2024-6822 | IrfanView CIN File Parsing out-of-bounds write remote code execution | 7.8v3.1 | 0.5% | 2024-11-22 | |
| CVE-2024-6821 | IrfanView CIN File Parsing out-of-bounds write remote code execution | 7.8v3.1 | 0.5% | 2024-11-22 | |
| CVE-2024-6820 | IrfanView AWD File Parsing out-of-bounds write remote code execution | 7.8v3.1 | 0.5% | 2024-11-22 | |
| CVE-2024-6819 | IrfanView PSP File Parsing out-of-bounds write remote code execution | 7.8v3.1 | 0.5% | 2024-11-22 | |
| CVE-2024-6818 | IrfanView PSP File Parsing out-of-bounds write remote code execution | 7.8v3.1 | 0.5% | 2024-11-22 | |
| CVE-2024-6817 | IrfanView PSP File Parsing out-of-bounds write remote code execution | 7.8v3.1 | 0.6% | 2024-11-22 | |
| CVE-2024-6816 | IrfanView PSP File Parsing heap-based buffer overflow remote code execution | 7.8v3.1 | 0.6% | 2024-11-22 | |
| CVE-2024-6815 | IrfanView RLE File Parsing out-of-bounds write remote code execution | 7.8v3.1 | 0.6% | 2024-11-22 | |
| CVE-2024-6260 | Malwarebytes Antimalware link following local privilege escalation | 7.8v3.1 | 0.3% | 2024-11-22 | Fix |
| CVE-2024-6249 | Wyze Cam v3 TCP Traffic Handling stack-based buffer overflow remote code execution | 8.8CNA v3.0 | 1.3% | 2024-11-22 | Fix |
| CVE-2024-6248 | Wyze Cam v3 Cloud Infrastructure improper authentication remote code execution | 7.5CNA v3.0 | 1.2% | 2024-11-22 | Fix |
| CVE-2024-6247 | Wyze Cam v3 Wi-Fi SSID OS command injection remote code execution | 6.8CNA v3.0 | 2.2% | 2024-11-22 | Fix |
| CVE-2024-6246 | Wyze Cam v3 Realtek Wi-Fi driver heap-based buffer overflow remote code execution | 8.8NVD v3.1 | 1.0% | 2024-11-22 | |
| CVE-2024-6233 | Check Point ZoneAlarm Extreme Security Link Following Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Check Point ZoneAlarm Extreme Security. An attacker must first obtain the ability to execute low-privileged co | 7.8CNA v3.0 | 0.4% | 2024-11-22 | |
| CVE-2024-5877 | IrfanView PIC File Parsing out-of-bounds write remote code execution | 7.8CNA v3.0 | 0.5% | 2024-11-22 | |
| CVE-2024-5876 | IrfanView PSP File Parsing heap-based buffer overflow remote code execution | 7.8CNA v3.0 | 0.5% | 2024-11-22 | |
| CVE-2024-5875 | IrfanView SHP File Parsing out-of-bounds write remote code execution | 7.8CNA v3.0 | 0.5% | 2024-11-22 | |
| CVE-2024-5874 | IrfanView PNT File Parsing out-of-bounds write remote code execution | 7.8CNA v3.0 | 0.5% | 2024-11-22 | |
| CVE-2024-5722 | Logsign Unified SecOps Platform HTTP API hard-coded cryptographic key remote code execution | 8.8CNA v3.0 | 1.1% | 2024-11-22 | Fix |
| CVE-2024-5721 | Logsign Unified SecOps Platform missing authentication remote code execution | 8.1v3.1 | 5.8% | 2024-11-22 | MetasploitExploit codeFix |
| CVE-2024-5720 | Logsign Unified SecOps Platform command injection remote code execution | 8.8CNA v3.0 | 2.7% | 2024-11-22 | Fix |
| CVE-2024-5719 | Logsign Unified SecOps Platform command injection remote code execution | 8.8CNA v3.0 | 2.7% | 2024-11-22 | Fix |
| CVE-2024-5718 | Logsign Unified SecOps Platform missing authentication remote code execution | 8.1v3.1 | 1.5% | 2024-11-22 | Fix |
| CVE-2024-5717 | Logsign Unified SecOps Platform command injection remote code execution | 8.8CNA v3.0 | 3.0% | 2024-11-22 | Fix |
| CVE-2024-5716 | Logsign Unified SecOps Platform authentication bypass | 9.8v3.1 | 1.6% | 2024-11-22 | Fix |
| CVE-2024-5581 | Allegra unzipFile directory traversal remote code execution | 7.2CNA v3.0 | 2.4% | 2024-11-22 | Fix |
| CVE-2024-5580 | Allegra loadFieldMatch deserialization of untrusted data remote code execution | 7.2CNA v3.0 | 1.6% | 2024-11-22 | Fix |
| CVE-2024-5579 | Allegra renderFieldMatch deserialization of untrusted data remote code execution | 7.2CNA v3.0 | 1.6% | 2024-11-22 | Fix |
| CVE-2024-5513 | Kofax Power PDF JP2 File Parsing out-of-bounds write remote code execution | 7.8v3.1 | 0.5% | 2024-11-22 | |
| CVE-2024-5512 | Kofax Power PDF JP2 File Parsing out-of-bounds read information disclosure | 5.5v3.1 | 0.5% | 2024-11-22 | |
| CVE-2024-5511 | Kofax Power PDF JP2 File Parsing out-of-bounds read remote code execution | 7.8v3.1 | 0.5% | 2024-11-22 | |
| CVE-2024-5510 | Kofax Power PDF JP2 File Parsing out-of-bounds read remote code execution | 7.8v3.1 | 0.5% | 2024-11-22 | |
| CVE-2024-1868 | G DATA Total Security link following local privilege escalation | 7.8v3.1 | 0.4% | 2024-11-22 | |
| CVE-2024-1867 | G DATA Total Security link following local privilege escalation | 7.8v3.1 | 0.4% | 2024-11-22 | |
| CVE-2024-53432 | PCL PLY file parser vulnerability | 7.5CISA ADP v3.1 | 0.7% | 2024-11-21 | Fix |
| CVE-2024-53429 | open62541 binary decoder reachable assertion | 7.5CISA ADP v3.1 | 0.7% | 2024-11-21 | Fix |
| CVE-2024-53426 | A heap-buffer-overflow vulnerability has been identified in ntopng 6.2 in the Flow::dissectMDNS function. | 6.2CISA ADP v3.1 | 0.3% | 2024-11-21 | |
| CVE-2024-53425 | assimp buffer overflow | 6.2CISA ADP v3.1 | 0.3% | 2024-11-21 | Fix |
| CVE-2024-53335 | TOTOLINK A810R buffer overflow | 7.8CISA ADP v3.1 | 0.3% | 2024-11-21 | |
| CVE-2024-53334 | TOTOLINK A810R buffer overflow | 8.8CISA ADP v3.1 | 0.7% | 2024-11-21 | |
| CVE-2024-53333 | TOTOLINK EX200 command injection | 6.3CISA ADP v3.1 | 19.9% | 2024-11-21 | Emerging Threats |
| CVE-2024-53095 | Linux kernel SMB client network namespace handling use-after-free | 9.8CNA v3.1 | 0.6% | 2024-11-21 | Fix |
| CVE-2024-53094 | Linux kernel RDMA siw send page handling vulnerability | 9.8CNA v3.1 | 0.6% | 2024-11-21 | Fix |
| CVE-2024-53093 | Linux kernel NVMe multipath partition scanning deadlock | 7.5CNA v3.1 | 0.6% | 2024-11-21 | Fix |
| CVE-2024-53092 | Linux kernel virtio_pci admin virtqueue cleanup null pointer dereference | 8.4CNA v3.1 | 0.2% | 2024-11-21 | Fix |
| CVE-2024-53091 | Linux kernel TLS socket context lookup vulnerability | 7.8CNA v3.1 | 0.2% | 2024-11-21 | Fix |
| CVE-2024-53090 | Linux kernel AFS async call notification lock uncontrolled recursion | 7.5CNA v3.1 | 0.6% | 2024-11-21 | Fix |
| CVE-2024-53089 | Linux kernel LoongArch KVM hrtimer handling vulnerability | 5.5v3.1 | 0.2% | 2024-11-21 | Fix |
| CVE-2024-52803 | hiyouga LLaMA-Factory LLama Factory Remote OS command injection | 7.5CNA v3.1 | 2.3% | 2024-11-21 | Fix |
| CVE-2024-52799 | argoproj argo-helm Argo Workflows Chart: Excessive Privileges in Workflow Role | 8.3CNA v3.1 | 0.2% | 2024-11-21 | Fix |
| CVE-2024-52797 | Searching Opencast may cause a denial of service | 6.5CNA v3.1 | 0.9% | 2024-11-21 | Fix |
| CVE-2024-52755 | D-Link DI-8003 buffer overflow | 4.9v3.1 | 0.8% | 2024-11-21 | |
| CVE-2024-52616 | Red Hat Enterprise Linux 9 avahi: Avahi wide-area DNS predictable transaction ids | 5.3CNA v3.1 | 0.7% | 2024-11-21 | Fix |
| CVE-2024-52615 | Red Hat Enterprise Linux 10 avahi: Avahi wide-area DNS uses constant source port | 5.3CNA v3.1 | 0.6% | 2024-11-21 | Fix |
| CVE-2024-52309 | SFTPGo allows administrators to restrict command execution from the EventManager | 5.1CNA v4.0 | 0.6% | 2024-11-21 | Fix |
| CVE-2024-52307 | authentik allows a timing attack due to missing constant time comparison for metrics view | 6.3CNA v4.0 | 0.6% | 2024-11-21 | Fix |
| CVE-2024-52289 | authentik has an insecure default configuration for OAuth2 Redirect URIs | 7.9CNA v4.0 | 1.1% | 2024-11-21 | Fix |
| CVE-2024-52287 | authentik performs insufficient validation of OAuth scopes | 6.4CNA v4.0 | 0.6% | 2024-11-21 | Fix |
| CVE-2024-52067 | Apache NiFi: Potential Insertion of Sensitive Parameter Values in Debug Log | 6.9CNA v4.0 | 0.7% | 2024-11-21 | Fix |
| CVE-2024-52056 | Application Delete path traversal in Wowza Streaming Engine | 6.5NVD v3.1 | 0.7% | 2024-11-21 | Fix |
| CVE-2024-52055 | Application Copy path traversal in Wowza Streaming Engine | 4.9NVD v3.1 | 1.0% | 2024-11-21 | Fix |
| CVE-2024-52054 | Application Creation path traversal in Wowza Streaming Engine | 2.7NVD v3.1 | 0.7% | 2024-11-21 | Fix |
| CVE-2024-52053 | Stored cross-site scripting in Wowza Streaming Engine | 9.6NVD v3.1 | 0.7% | 2024-11-21 | Fix |
| CVE-2024-52052 | Stream Target remote code execution in Wowza Streaming Engine | 7.2NVD v3.1 | 0.5% | 2024-11-21 | Fix |
| CVE-2024-51367 | component \Users\username.BlackBoard of BlackBoard v2.0.0.2 An arbitrary file upload | 9.8CISA ADP v3.1 | 0.8% | 2024-11-21 | |
| CVE-2024-51366 | component \Roaming\Omega of OmegaT v6.0.1 An arbitrary file upload | 9.8CISA ADP v3.1 | 0.7% | 2024-11-21 | |
| CVE-2024-51364 | ModbusMechanic v3.0 arbitrary file upload | 8.8CISA ADP v3.1 | 0.7% | 2024-11-21 | |
| CVE-2024-51337 | gibbonedu gibbon cross-site scripting | 3.5CISA ADP v3.1 | 0.6% | 2024-11-21 | |
| CVE-2024-51151 | D-Link DI-8200 command injection | 9.8v3.1 | 31.2% | 2024-11-21 | |
| CVE-2024-49588 | Palantir Oracle sidecar SQL injection | 6.8CNA v3.1 | 0.3% | 2024-11-21 | Fix |
| CVE-2024-49529 | Adobe InDesign Desktop out-of-bounds read | 5.5CNA v3.1 | 0.3% | 2024-11-21 | Fix |
| CVE-2024-48747 | alist-tvbox atv-cli file command injection | 6.8CISA ADP v3.1 | 1.0% | 2024-11-21 | |
| CVE-2024-48288 | TP-Link Tl-ipc42c command injection | 8.0CISA ADP v3.1 | 10.9% | 2024-11-21 | |
| CVE-2024-48286 | Linksys E3000 command injection | 8.0CISA ADP v3.1 | 13.2% | 2024-11-21 | |
| CVE-2024-45663 | IBM Db2 denial of service | 6.5CNA v3.1 | 0.7% | 2024-11-21 | Fix |
| CVE-2024-45517 | Synacor Zimbra Collaboration Suite cross-site scripting | 6.1CISA ADP v3.1 | 0.5% | 2024-11-21 | Fix |
| CVE-2024-45514 | Synacor Zimbra Collaboration Suite cross-site scripting | 6.1CISA ADP v3.1 | 0.6% | 2024-11-21 | Fix |
| CVE-2024-45513 | Synacor Zimbra Collaboration Suite cross-site scripting | 4.8CISA ADP v3.1 | 0.4% | 2024-11-21 | Fix |
| CVE-2024-45512 | Synacor Zimbra Collaboration Suite cross-site scripting | 6.1CISA ADP v3.1 | 0.4% | 2024-11-21 | Fix |
| CVE-2024-45194 | Synacor Zimbra Collaboration Suite cross-site scripting | 4.8CISA ADP v3.1 | 0.5% | 2024-11-21 | Fix |
| CVE-2024-30896 | InfluxDB OSS operator token storage information disclosure | 9.1CISA ADP v3.1 | 5.4% | 2024-11-21 | Exploit code |
| CVE-2024-29224 | GoCast NAT parameter OS command injection | 9.8CNA v3.1 | 6.3% | 2024-11-21 | |
| CVE-2024-28892 | GoCast OS command injection | 9.8CNA v3.1 | 6.5% | 2024-11-21 | |
| CVE-2024-28027 | MC LR Router web interface I/O configuration functionality OS command injection | 7.2CNA v3.1 | 7.5% | 2024-11-21 | |
| CVE-2024-28026 | MC LR Router web interface I/O configuration functionality OS command injection | 7.2CNA v3.1 | 6.0% | 2024-11-21 | |
| CVE-2024-28025 | MC LR Router web interface I/O configuration functionality OS command injection | 7.2CNA v3.1 | 7.5% | 2024-11-21 | |
| CVE-2024-21855 | GoCast missing authentication | 9.8CNA v3.1 | 2.0% | 2024-11-21 | |
| CVE-2024-21786 | MC LR Router OS command injection | 7.2CNA v3.1 | 10.4% | 2024-11-21 | |
| CVE-2024-11596 | Buffer over-read in Wireshark | 7.8CNA v3.1 | 0.3% | 2024-11-21 | Fix |
| CVE-2024-11595 | Loop with unreachable exit condition (infinite loop) in Wireshark | 7.8CNA v3.1 | 0.3% | 2024-11-21 | Fix |
| CVE-2024-11592 | 1000 Projects Beauty Parlour Management System about-us.php SQL injection | 9.8v3.1 | 0.9% | 2024-11-21 | |
| CVE-2024-11591 | 1000 Projects Beauty Parlour Management System add-services.php SQL injection | 9.8v3.1 | 1.0% | 2024-11-21 | |
| CVE-2024-11590 | 1000 Projects Bookstore Management System forget_password_process.php SQL injection | 9.8v3.1 | 0.9% | 2024-11-21 | |
| CVE-2024-11589 | itsourcecode Tailoring Management System expcatedit.php SQL injection | 8.8v3.1 | 0.7% | 2024-11-21 | |
| CVE-2024-11588 | AVL-DiTEST-DiagDev libdoip DoIPConnection.cpp reactOnReceivedTcpMessage null pointer dereference | 7.5v3.1 | 0.8% | 2024-11-21 | |
| CVE-2024-11587 | idcCMS classProvCity.php GetCityOptionJs cross-site scripting | 6.1v3.1 | 0.9% | 2024-11-21 | Nuclei |
| CVE-2024-11456 | Run Contests, Raffles, and Giveaways with ContestsWP WordPress plugin reflected cross-site scripting | 6.1CNA v3.1 | 0.4% | 2024-11-21 | Fix |
| CVE-2024-11455 | Include Mastodon Feed WordPress plugin authenticated (Contributor+) stored cross-site scripting | 6.4CNA v3.1 | 0.4% | 2024-11-21 | Fix |
| CVE-2024-11447 | Community by PeepSo WordPress plugin reflected cross-site scripting | 6.1CNA v3.1 | 0.6% | 2024-11-21 | Fix |
| CVE-2024-11440 | Grey Owl Lightbox WordPress plugin authenticated (Contributor+) stored cross-site scripting | 6.4CNA v3.1 | 0.5% | 2024-11-21 | Fix |
| CVE-2024-11438 | StreamWeasels Online Status Bar WordPress plugin stored cross-site scripting | 6.4CNA v3.1 | 0.4% | 2024-11-21 | Fix |
| CVE-2024-11435 | salavat counter WordPress plugin reflected cross-site scripting | 6.1CNA v3.1 | 0.5% | 2024-11-21 | Fix |
| CVE-2024-11432 | SuevaFree Essential Kit WordPress plugin authenticated (Contributor+) stored cross-site scripting | 6.4CNA v3.1 | 1.2% | 2024-11-21 | Fix |
| CVE-2024-11428 | Lazy load videos and sticky control WordPress plugin stored cross-site scripting | 6.4CNA v3.1 | 1.1% | 2024-11-21 | |
| CVE-2024-11424 | Slick Sitemap WordPress plugin authenticated (Contributor+) stored cross-site scripting | 6.4CNA v3.1 | 0.5% | 2024-11-21 | |
| CVE-2024-11416 | WIP Incoming Lite WordPress plugin cross-site request forgery to stored cross-site scripting | 6.1CNA v3.1 | 0.3% | 2024-11-21 | Fix |
| CVE-2024-11414 | RecipePress Reloaded WordPress plugin authenticated (Contributor+) stored cross-site scripting | 6.4CNA v3.1 | 0.4% | 2024-11-21 | |
| CVE-2024-11412 | Shine PDF Embeder WordPress plugin authenticated (Contributor+) stored cross-site scripting | 6.4CNA v3.1 | 1.0% | 2024-11-21 | |
| CVE-2024-11409 | Grid View Gallery WordPress plugin authenticated (Editor+) PHP object injection | 7.2CNA v3.1 | 1.1% | 2024-11-21 | |
| CVE-2024-11388 | Dino Game Embed Google Chrome Dinosaur Game in WordPress plugin stored cross-site scripting | 5.4v3.1 | 1.1% | 2024-11-21 | Fix |
| CVE-2024-11385 | Pure CSS Circle Progress bar WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.4% | 2024-11-21 | |
| CVE-2024-11371 | Theater for WordPress plugin reflected cross-site scripting | 6.1CNA v3.1 | 0.6% | 2024-11-21 | Fix |
| CVE-2024-11370 | Subaccounts for WooCommerce WordPress plugin reflected cross-site scripting | 6.1CNA v3.1 | 0.6% | 2024-11-21 | Fix |
| CVE-2024-11365 | Crypto and DeFi Widgets WordPress plugin reflected cross-site scripting | 6.1CNA v3.1 | 0.6% | 2024-11-21 | |
| CVE-2024-11360 | Page Parts WordPress plugin reflected cross-site scripting | 6.1CNA v3.1 | 0.8% | 2024-11-21 | Fix |
| CVE-2024-11354 | Ultimate YouTube Video and Shorts Player With Vimeo WordPress plugin unauthorized access | 4.3CNA v3.1 | 0.6% | 2024-11-21 | |
| CVE-2024-11334 | My Contador lesr WordPress plugin missing authorization unauthenticated user Registration CSV export | 5.3v3.1 | 0.6% | 2024-11-21 | Fix |
| CVE-2024-11320 | Pandora FMS command injection leading to RCE via LDAP Misconfiguration | 6.9CNA v4.0 | 91.2% | 2024-11-21 | NucleiMetasploitExploit codeFix |
| CVE-2024-11197 | Lock User Account WordPress plugin user Lock bypass | 4.2CNA v3.1 | 0.4% | 2024-11-21 | |
| CVE-2024-11089 | Anonymous Restricted Content WordPress plugin information disclosure | 5.3CNA v3.1 | 0.6% | 2024-11-21 | Fix |
| CVE-2024-11088 | Simple Membership WordPress plugin exposure of private personal information to an unauthorized actor | 7.5v3.1 | 0.6% | 2024-11-21 | Fix |
| CVE-2024-10898 | Contact Form 7 Email Add on WordPress plugin authenticated (Contributor+) local file inclusion | 8.8v3.1 | 1.3% | 2024-11-21 | Fix |
| CVE-2024-10890 | WPAdverts Classifieds WordPress plugin reflected cross-site scripting | 6.1CNA v3.1 | 0.6% | 2024-11-21 | Fix |
| CVE-2024-10796 | If-So Dynamic Content Personalization WordPress plugin authenticated (Contributor+) post disclosure | 4.3CNA v3.1 | 0.5% | 2024-11-21 | Fix |
| CVE-2024-10792 | WPFunnels post_id parameter reflected cross-site scripting | 6.1CNA v3.1 | 0.6% | 2024-11-21 | Fix |
| CVE-2024-10788 | Activity Log WordPress plugin stored cross-site scripting | 7.2CNA v3.1 | 0.8% | 2024-11-21 | Fix |
| CVE-2024-10785 | Gutenberg Blocks with AI by Kadence WP WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.4% | 2024-11-21 | Fix |
| CVE-2024-10782 | Theme Builder For Elementor WordPress plugin authenticated (Contributor+) post disclosure | 4.3CNA v3.1 | 0.5% | 2024-11-21 | Fix |
| CVE-2024-10726 | Friendly Functions for Welcart WordPress plugin cross-site request forgery | 6.1CNA v3.1 | 0.3% | 2024-11-21 | Fix |
| CVE-2024-10696 | UltraAddons WordPress plugin insecure direct object reference | 4.3CNA v3.1 | 0.5% | 2024-11-21 | Fix |
| CVE-2024-10682 | Announcement and Notification Banner WordPress plugin reflected cross-site scripting | 6.1CNA v3.1 | 0.6% | 2024-11-21 | Fix |
| CVE-2024-10675 | affiliate-toolkit WordPress plugin reflected cross-site scripting | 6.1CNA v3.1 | 0.5% | 2024-11-21 | Fix |
| CVE-2024-10671 | Button Block Get fully customizable and multi-functional buttons WordPress plugin post disclosure | 6.5v3.1 | 0.5% | 2024-11-21 | Fix |
| CVE-2024-10623 | ForumEngine WordPress theme reflected cross-site scripting | 6.1CNA v3.1 | 0.5% | 2024-11-21 | Fix |
| CVE-2024-10532 | Bard Extra WordPress plugin missing authorization to authenticated (Subscriber+) Demo import | 4.3CNA v3.1 | 0.5% | 2024-11-21 | Fix |
| CVE-2024-10528 | Ultimate Member profile picture upload missing authorization | 4.3CNA v3.1 | 0.6% | 2024-11-21 | Fix |
| CVE-2024-10522 | Co-marquage service-public.fr WordPress plugin reflected cross-site scripting | 6.1CNA v3.1 | 0.6% | 2024-11-21 | Fix |
| CVE-2024-10482 | Media Library Tools WordPress plugin Author+ stored XSS via SVG | 5.4CISA ADP v3.1 | 0.4% | 2024-11-21 | Fix |
| CVE-2024-10403 | Brocade Fabric OS supportsave core dump information disclosure | 5.9CNA v4.0 | 0.7% | 2024-11-21 | Fix |
| CVE-2024-10400 | Tutor LMS WordPress plugin unauthenticated SQL injection via rating_filter | 7.5CNA v3.1 | 83.1% | 2024-11-21 | NucleiExploit codeFix |
| CVE-2024-10393 | Tutor LMS WordPress plugin user Registration setting bypass to unauthorized user Registration | 5.3CNA v3.1 | 0.6% | 2024-11-21 | Fix |
| CVE-2024-10316 | Stratum Elementor Widgets WordPress plugin sensitive information exposure | 4.3CNA v3.1 | 0.5% | 2024-11-21 | Fix |
| CVE-2024-10177 | Beds24 Online Booking WordPress plugin stored cross-site scripting | 6.4CNA v3.1 | 0.6% | 2024-11-21 | Fix |
| CVE-2024-10172 | WPBakery Visual Composer WHMCS Elements WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.5% | 2024-11-21 | Fix |
| CVE-2024-10164 | Premium Packages - Sell Digital Products Securely WordPress plugin stored cross-site scripting | 6.4CNA v3.1 | 0.6% | 2024-11-21 | Fix |
| CVE-2024-9875 | Adobe Okta Privileged Access server agent (SFTD) privilege escalation | 7.1CNA v3.1 | 0.2% | 2024-11-21 | Fix |
| CVE-2024-9851 | LSX Tour Operator WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.4% | 2024-11-21 | Fix |
| CVE-2024-9828 | Taskbuilder WordPress plugin Admin+ SQL injection | 4.1CISA ADP v3.1 | 0.5% | 2024-11-21 | Fix |
| CVE-2024-9768 | Formidable Forms WordPress plugin Admin+ stored XSS | 4.8NVD v3.1 | 0.4% | 2024-11-21 | Fix |
| CVE-2024-9600 | Ditty WordPress plugin Author+ stored XSS | 4.8CISA ADP v3.1 | 0.4% | 2024-11-21 | Fix |
| CVE-2024-9542 | Sky Addons for Elementor WordPress plugin sensitive information exposure | 4.3CNA v3.1 | 0.3% | 2024-11-21 | Fix |
| CVE-2024-9442 | F4 Improvements WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.4% | 2024-11-21 | |
| CVE-2024-9371 | Branda WordPress plugin reflected cross-site scripting | 6.1CNA v3.1 | 0.6% | 2024-11-21 | Fix |
| CVE-2024-9111 | Product Designer WordPress plugin stored cross-site scripting | 6.4CNA v3.1 | 0.5% | 2024-11-21 | Fix |
| CVE-2024-8526 | Automated Logic WebCTRL and Carrier i-Vu open redirect | 5.9CNA v4.0 | 0.7% | 2024-11-21 | Fix |
| CVE-2024-8525 | Automated Logic WebCTRL and Carrier i-Vu unrestricted file upload | 10.0CNA v4.0 | 1.4% | 2024-11-21 | Fix |
| CVE-2024-8157 | Alphabetical List WordPress plugin settings update via CSRF | 4.3CISA ADP v3.1 | 0.2% | 2024-11-21 | |
| CVE-2024-7517 | Brocade Fabric OS privileged escalation via crafted use of portcfg command | 8.5CNA v4.0 | 0.6% | 2024-11-21 | Fix |
| CVE-2024-7130 | Reflected XSS in Kion Computer's KION Exchange Programs Software | 5.5CNA v3.1 | 0.4% | 2024-11-21 | Fix |