CVE-2024 records published in November 2024
Page two of four: records 1,001 to 2,000 of the 3,750 published in November 2024, newest first. The first page carries the figures for November 2024.
| CVE | Summary | CVSS | EPSS | Published | Signals |
|---|---|---|---|---|---|
| CVE-2024-7026 | SQLi in Teknogis Informatics' Closed Circuit Vehicle Tracking Software | 7.5CNA v3.1 | 0.6% | 2024-11-21 | |
| CVE-2024-7016 | Stored XSS in Smarttek Informatics' Smart Doctor | 5.4NVD v3.1 | 0.4% | 2024-11-21 | |
| CVE-2024-5029 | CM Table Of Contents WordPress TOC plugin stored XSS via CSRF | 4.8CISA ADP v3.1 | 0.2% | 2024-11-21 | Fix |
| CVE-2024-52796 | pglombardo PasswordPusher password Pusher's rate limiter can be bypassed by forging proxy headers | 5.3CNA v3.1 | 0.5% | 2024-11-20 | Fix |
| CVE-2024-52771 | DedeBIZ path traversal | 9.1CISA ADP v3.1 | 0.7% | 2024-11-20 | |
| CVE-2024-52770 | DedeBIZ component /admin/file_manage_control arbitrary file upload | 9.8CISA ADP v3.1 | 0.8% | 2024-11-20 | |
| CVE-2024-52769 | DedeBIZ component /admin/friendlink_edit arbitrary file upload | 7.2CISA ADP v3.1 | 0.7% | 2024-11-20 | |
| CVE-2024-52765 | H3C GR-1800AX code injection | 9.8v3.1 | 11.2% | 2024-11-20 | |
| CVE-2024-52757 | D-Link DI-8003 buffer overflow | 4.9v3.1 | 0.6% | 2024-11-20 | |
| CVE-2024-52754 | D-Link DI-8003 buffer overflow | 4.9v3.1 | 0.6% | 2024-11-20 | |
| CVE-2024-52739 | D-Link DI-8400 command injection | 8.0CISA ADP v3.1 | 9.7% | 2024-11-20 | |
| CVE-2024-52725 | SEMCMS SQL injection | 4.9CISA ADP v3.1 | 0.6% | 2024-11-20 | |
| CVE-2024-52702 | mybb component install\index.php stored cross-site scripting | 6.1CISA ADP v3.1 | 0.3% | 2024-11-20 | |
| CVE-2024-52701 | Piwigo Configuration page stored cross-site scripting | 5.4CISA ADP v3.1 | 0.3% | 2024-11-20 | |
| CVE-2024-52677 | HkCms unrestricted file upload | 9.8v3.1 | 0.6% | 2024-11-20 | |
| CVE-2024-52614 | EPARK Kura Sushi Official App Produced by EPARK hard-coded cryptographic key | 4.0CNA v3.0 | 0.2% | 2024-11-20 | |
| CVE-2024-52598 | Bubka 2FAuth two-factor account icon preview server-side request forgery | 7.5CNA v3.1 | 0.6% | 2024-11-20 | Fix |
| CVE-2024-52597 | 2FAuth vulnerable to stored cross-site scripting via SVG upload and direct access render | 6.1CNA v3.1 | 0.4% | 2024-11-20 | Fix |
| CVE-2024-52581 | Litestar allows unbounded resource consumption (DoS vulnerability) | 8.2CNA v4.0 | 0.8% | 2024-11-20 | Fix |
| CVE-2024-52473 | HTML5 Lyrics Karaoke Player WordPress plugin reflected cross-site scripting (XSS) | 7.1CNA v3.1 | 0.3% | 2024-11-20 | |
| CVE-2024-52472 | Weather Atlas Widget WordPress plugin cross-site scripting (XSS) | 7.1CNA v3.1 | 0.3% | 2024-11-20 | Fix |
| CVE-2024-52471 | Extensions for Elementor WordPress plugin reflected cross-site scripting (XSS) | 6.1NVD v3.1 | 0.3% | 2024-11-20 | |
| CVE-2024-52470 | Dynamic URL SEO WordPress plugin cross-site scripting (XSS) | 7.1CNA v3.1 | 0.3% | 2024-11-20 | Fix |
| CVE-2024-52451 | Post Ideas WordPress plugin CSRF to SQL injection | 8.2CNA v3.1 | 0.2% | 2024-11-20 | |
| CVE-2024-52450 | nBlocks WordPress plugin local file inclusion | 7.5CNA v3.1 | 0.6% | 2024-11-20 | |
| CVE-2024-52449 | WordPress Bootscraper plugin local file inclusion | 7.5CNA v3.1 | 0.5% | 2024-11-20 | Fix |
| CVE-2024-52448 | Ultimate Classified Listings WordPress plugin local file inclusion | 7.5CNA v3.1 | 0.6% | 2024-11-20 | Fix |
| CVE-2024-52447 | Contact Page With Google Map WordPress plugin arbitrary file deletion | 8.6CNA v3.1 | 0.6% | 2024-11-20 | |
| CVE-2024-52446 | Buying Buddy IDX CRM WordPress plugin CSRF to PHP object injection | 8.8CNA v3.1 | 0.2% | 2024-11-20 | Fix |
| CVE-2024-52445 | QRMenu Restaurant QR Menu Lite WordPress plugin PHP object injection | 8.8CNA v3.1 | 0.5% | 2024-11-20 | |
| CVE-2024-52444 | Opal Woo Custom Product Variation WordPress plugin arbitrary file deletion | 7.5CNA v3.1 | 0.6% | 2024-11-20 | Fix |
| CVE-2024-52443 | Geolocator WordPress plugin PHP object injection | 9.8CNA v3.1 | 0.6% | 2024-11-20 | |
| CVE-2024-52442 | UserPlus WordPress plugin privilege escalation | 9.8CNA v3.1 | 0.5% | 2024-11-20 | |
| CVE-2024-52441 | Quick Learn WordPress plugin PHP object injection | 9.8CNA v3.1 | 0.6% | 2024-11-20 | |
| CVE-2024-52440 | Xpresslane Fast Checkout WordPress plugin PHP object injection | 9.8CNA v3.1 | 0.6% | 2024-11-20 | |
| CVE-2024-52439 | Team Rosters WordPress plugin PHP object injection | 9.8CNA v3.1 | 0.6% | 2024-11-20 | |
| CVE-2024-52438 | de:branding WordPress plugin privilege escalation | 8.8CNA v3.1 | 0.5% | 2024-11-20 | |
| CVE-2024-52437 | Banner System WordPress plugin privilege escalation | 8.8CNA v3.1 | 0.5% | 2024-11-20 | |
| CVE-2024-52033 | Rakuten Mobile Rakuten Turbo 5G system information disclosure | 5.3CNA v3.1 | 0.4% | 2024-11-20 | |
| CVE-2024-51209 | PHPGurukul Client Management System Anuj Kumar's cross-site scripting | 6.1CISA ADP v3.1 | 0.3% | 2024-11-20 | |
| CVE-2024-51208 | PHPGurukul Boat Booking System change-image.php in Anuj Kumar's file upload | 7.2v3.1 | 0.4% | 2024-11-20 | |
| CVE-2024-51163 | Vegam Solutions Vegam local file inclusion | 7.5CISA ADP v3.1 | 0.5% | 2024-11-20 | |
| CVE-2024-51162 | Audimex EE offline client privilege escalation | 8.8CISA ADP v3.1 | 0.6% | 2024-11-20 | |
| CVE-2024-49203 | Querydsl vulnerable to HQL injection through orderBy | – | 0.4% | 2024-11-20 | Fix |
| CVE-2024-48986 | Arm mbed buffer overflow | 7.5v3.1 | 0.5% | 2024-11-20 | |
| CVE-2024-48985 | Arm mbed buffer overflow | 7.5v3.1 | 0.4% | 2024-11-20 | |
| CVE-2024-48984 | Arm Mbed OS buffer overflow | 9.8CISA ADP v3.1 | 0.5% | 2024-11-20 | |
| CVE-2024-48983 | Arm mbed integer overflow | 7.5v3.1 | 0.5% | 2024-11-20 | |
| CVE-2024-48982 | Arm mbed buffer overflow | 7.5v3.1 | 0.5% | 2024-11-20 | |
| CVE-2024-48981 | Arm mbed buffer overflow | 7.5v3.1 | 0.4% | 2024-11-20 | |
| CVE-2024-48899 | Moodle: Idor when accessing list of course badges | 4.3CISA ADP v3.1 | 0.3% | 2024-11-20 | Fix |
| CVE-2024-48895 | Rakuten Mobile Rakuten Turbo 5G OS command improper neutralization | 8.8CNA v3.1 | 1.0% | 2024-11-20 | |
| CVE-2024-48536 | Esoft Planner cross-site scripting | 7.5CISA ADP v3.1 | 0.5% | 2024-11-20 | |
| CVE-2024-48535 | Esoft Planner stored cross-site scripting | 6.1CISA ADP v3.1 | 0.3% | 2024-11-20 | |
| CVE-2024-48534 | Esoft Planner cross-site scripting | 6.1CISA ADP v3.1 | 0.4% | 2024-11-20 | |
| CVE-2024-48533 | Esoft Planner incorrect default permissions | 5.3CISA ADP v3.1 | 0.4% | 2024-11-20 | |
| CVE-2024-48531 | Esoft Planner cross-site scripting | 6.1CISA ADP v3.1 | 0.4% | 2024-11-20 | |
| CVE-2024-48530 | Esoft Planner resource exhaustion | 7.5CISA ADP v3.1 | 0.6% | 2024-11-20 | |
| CVE-2024-47865 | Rakuten Mobile Rakuten Turbo 5G missing authentication | 5.3CNA v3.1 | 0.4% | 2024-11-20 | |
| CVE-2024-45691 | Moodle: Lesson activity password bypass through PHP loose comparison | 5.4CISA ADP v3.1 | 0.4% | 2024-11-20 | Fix |
| CVE-2024-45690 | Moodle: Idor when deleting oauth2 linked accounts | 7.5CISA ADP v3.1 | 0.4% | 2024-11-20 | Fix |
| CVE-2024-45689 | Moodle: Unprotected access to sensitive information via dynamic tables | 6.5CISA ADP v3.1 | 0.4% | 2024-11-20 | Fix |
| CVE-2024-45511 | Synacor Zimbra Collaboration Suite cross-site scripting | 6.1CISA ADP v3.1 | 0.3% | 2024-11-20 | Fix |
| CVE-2024-45510 | Synacor Zimbra Collaboration Suite cross-site scripting | 6.1CISA ADP v3.1 | 0.3% | 2024-11-20 | Fix |
| CVE-2024-44309 | Apple Multiple Products cross-site scripting (XSS) | 6.3v3.1 | 22.6% | 2024-11-20 | KEVFix |
| CVE-2024-44308 | Apple Multiple Products code execution | 8.8v3.1 | 10.2% | 2024-11-20 | KEVExploit codeFix |
| CVE-2024-44307 | Apple macOS buffer overflow | 7.8v3.1 | 0.2% | 2024-11-20 | Fix |
| CVE-2024-44306 | Apple macOS buffer overflow | 7.8v3.1 | 0.2% | 2024-11-20 | Fix |
| CVE-2024-33439 | Kasda LinkSmart Router KW5515 CGI parameters command injection | 9.1CISA ADP v3.1 | 0.6% | 2024-11-20 | |
| CVE-2024-29292 | Kasda LinkSmart Router KW6512 command injection | 9.1CISA ADP v3.1 | 1.0% | 2024-11-20 | |
| CVE-2024-11495 | Buffer overflow in OllyDbg | 7.8v3.1 | 0.1% | 2024-11-20 | |
| CVE-2024-11494 | Zyxel P-6101C firmware improper authentication | 7.5CNA v3.1 | 0.7% | 2024-11-20 | |
| CVE-2024-11493 | 115cms pageAE.html cross-site scripting | 6.1v3.1 | 0.4% | 2024-11-20 | |
| CVE-2024-11492 | 115cms appurladd.html cross-site scripting | 6.1v3.1 | 0.4% | 2024-11-20 | |
| CVE-2024-11491 | 115cms useradmin.html cross-site scripting | 5.4v3.1 | 0.3% | 2024-11-20 | |
| CVE-2024-11490 | 115cms set.html cross-site scripting | 6.1v3.1 | 0.3% | 2024-11-20 | |
| CVE-2024-11489 | 115cms file.html cross-site scripting | 6.1v3.1 | 0.3% | 2024-11-20 | |
| CVE-2024-11488 | 115cms web_user.html cross-site scripting | 6.1v3.1 | 0.3% | 2024-11-20 | |
| CVE-2024-11487 | Code4Berry Decoration Management System Between Dates Reports btndates_report.php SQL injection | 8.8v3.1 | 0.4% | 2024-11-20 | |
| CVE-2024-11486 | Code4Berry Decoration Management System User Permission user_permission.php | 4.3v3.1 | 0.3% | 2024-11-20 | |
| CVE-2024-11485 | Code4Berry Decoration Management System User userregister.php permission | 8.1v3.1 | 0.3% | 2024-11-20 | |
| CVE-2024-11484 | Code4Berry Decoration Management System User Image update_image.php access control | 8.8v3.1 | 0.4% | 2024-11-20 | |
| CVE-2024-11406 | Stored XSS in django CMS Attributes Fields | 6.9CNA v3.1 | 0.5% | 2024-11-20 | Fix |
| CVE-2024-11404 | File upload Bypass in django Filer | 5.5CNA v3.1 | 0.4% | 2024-11-20 | Fix |
| CVE-2024-11278 | GD bbPress Attachments WordPress plugin reflected cross-site scripting | 6.1CNA v3.1 | 0.4% | 2024-11-20 | Fix |
| CVE-2024-11277 | 404 Solution WordPress plugin reflected cross-site scripting | 6.1CNA v3.1 | 0.3% | 2024-11-20 | Fix |
| CVE-2024-11179 | MStore API WordPress plugin authenticated (Subscriber+) SQL injection | 6.5CNA v3.1 | 0.5% | 2024-11-20 | Fix |
| CVE-2024-11176 | Incorrect evaluation of effective permissions in M-Files Aino | 5.3CNA v4.0 | 0.4% | 2024-11-20 | Fix |
| CVE-2024-11154 | PublishPress Revisions: Duplicate Posts WordPress plugin information disclosure | 4.3CNA v3.1 | 0.4% | 2024-11-20 | Fix |
| CVE-2024-10913 | Clone WordPress plugin unauthenticated PHP object injection via recursive_unserialized_replace | 8.8CNA v3.1 | 0.7% | 2024-11-20 | Fix |
| CVE-2024-10900 | ProfileGrid WordPress plugin unauthorized access | 8.1v3.1 | 0.5% | 2024-11-20 | Fix |
| CVE-2024-10899 | WC Product Table WooCommerce Product Table Lite code injection | 7.3CNA v3.1 | 0.6% | 2024-11-20 | Fix |
| CVE-2024-10891 | Save as PDF Plugin by Pdfcrowd WordPress plugin stored cross-site scripting | 6.4CNA v3.1 | 0.3% | 2024-11-20 | Fix |
| CVE-2024-10872 | Getwid Gutenberg Blocks WordPress plugin authenticated (Contributor+) stored cross-site scripting | 5.4v3.1 | 0.3% | 2024-11-20 | Fix |
| CVE-2024-10855 | Image Optimizer, Resizer and CDN WordPress plugin unauthorized access | 8.1CNA v3.1 | 0.5% | 2024-11-20 | Fix |
| CVE-2024-10665 | Yaad Sarig Payment Gateway For WC WordPress plugin unauthorized access | 5.4CNA v3.1 | 0.3% | 2024-11-20 | Fix |
| CVE-2024-10520 | WP Project Manager WordPress plugin unauthorized access | 5.3CNA v3.1 | 0.3% | 2024-11-20 | Fix |
| CVE-2024-10515 | SEO Plugin by Squirrly SEO WordPress plugin Editor+ stored XSS | 3.5CISA ADP v3.1 | 0.3% | 2024-11-20 | Fix |
| CVE-2024-10382 | Google arbitrary code execution in Car App Android Jetpack library | 7.3CNA v4.0 | 0.2% | 2024-11-20 | Fix |
| CVE-2024-10365 | The Plus Addons for Elementor WordPress plugin information disclosure | 4.3CNA v3.1 | 0.3% | 2024-11-20 | Fix |
| CVE-2024-10127 | Support for authentication bypass condition in M-Files LDAP authentication | 9.2CNA v4.0 | 0.6% | 2024-11-20 | Fix |
| CVE-2024-10126 | Local file inclusion vulnerability in M-Files Server | 5.3CNA v4.0 | 0.4% | 2024-11-20 | Fix |
| CVE-2024-10094 | Pegasystems Pega Infinity code injection | 9.1CNA v3.1 | 0.5% | 2024-11-20 | Fix |
| CVE-2024-9653 | Restaurant Menu WordPress plugin reflected cross-site scripting | 6.1CNA v3.1 | 0.3% | 2024-11-20 | Fix |
| CVE-2024-9479 | upKeeper Solutions upKeeper Instant Privilege Access improper privilege management | 10.0CNA v4.0 | 0.4% | 2024-11-20 | Fix |
| CVE-2024-9478 | upKeeper Solutions upKeeper Instant Privilege Access improper privilege management | 10.0CNA v4.0 | 0.4% | 2024-11-20 | Fix |
| CVE-2024-9239 | Booster for WooCommerce WordPress plugin reflected cross-site scripting | 6.1CNA v3.1 | 0.4% | 2024-11-20 | Fix |
| CVE-2024-8726 | MailChimp Forms by MailMunch WordPress plugin reflected cross-site scripting | 6.1CNA v3.1 | 0.3% | 2024-11-20 | Fix |
| CVE-2024-53088 | Linux kernel i40e MAC and VLAN filter sync race condition | 7.8CNA v3.1 | 0.2% | 2024-11-19 | Fix |
| CVE-2024-53087 | Linux kernel Xe driver exec IOCTL memory leak | 5.5v3.1 | 0.2% | 2024-11-19 | Fix |
| CVE-2024-53086 | Linux kernel Xe driver exec IOCTL lock handling vulnerability | 5.5v3.1 | 0.1% | 2024-11-19 | Fix |
| CVE-2024-53085 | Linux kernel TPM suspend and resume handling race condition | 5.5v3.1 | 0.2% | 2024-11-19 | Fix |
| CVE-2024-53084 | Linux kernel Imagination DRM VM mapping cleanup memory leak | 5.5v3.1 | 0.2% | 2024-11-19 | Fix |
| CVE-2024-53083 | Linux kernel qcom-pmic USB Type-C driver vulnerability | 5.5v3.1 | 0.2% | 2024-11-19 | Fix |
| CVE-2024-53082 | Linux kernel virtio_net hash key validation out-of-bounds read | 8.4CNA v3.1 | 0.2% | 2024-11-19 | Fix |
| CVE-2024-53081 | Linux kernel ar0521 PLL value check integer underflow | 5.5v3.1 | 0.2% | 2024-11-19 | Fix |
| CVE-2024-53080 | Linux kernel Panthor VM XArray lookup race condition | 7.8CNA v3.1 | 0.2% | 2024-11-19 | Fix |
| CVE-2024-53079 | Linux kernel THP deferred split queue race condition | 7.8CNA v3.1 | 0.2% | 2024-11-19 | Fix |
| CVE-2024-53078 | Linux kernel Tegra DRM probe vulnerability | 5.5v3.1 | 0.2% | 2024-11-19 | Fix |
| CVE-2024-53077 | Linux kernel rpcrdma device xarray memory leak | 5.5v3.1 | 0.2% | 2024-11-19 | Fix |
| CVE-2024-53076 | Linux kernel IIO gts-helper scale table builder memory leak | 7.8CNA v3.1 | 0.2% | 2024-11-19 | Fix |
| CVE-2024-53075 | Linux kernel RISC-V CPU device node lookup vulnerability | 5.5v3.1 | 0.2% | 2024-11-19 | Fix |
| CVE-2024-53074 | Linux kernel iwlwifi MLD link management on AP removal vulnerability | 5.5v3.1 | 0.2% | 2024-11-19 | Fix |
| CVE-2024-53073 | Linux kernel NFSD asynchronous copy offload vulnerability | 7.5CNA v3.1 | 0.5% | 2024-11-19 | Fix |
| CVE-2024-53072 | Linux kernel AMD PMC STB debug interface vulnerability | 5.5v3.1 | 0.2% | 2024-11-19 | Fix |
| CVE-2024-53071 | Linux kernel Panthor GPU MMIO mapping vulnerability | 5.5v3.1 | 0.2% | 2024-11-19 | Fix |
| CVE-2024-53070 | Linux kernel dwc3 USB controller suspend and resume denial of service | 5.5v3.1 | 0.2% | 2024-11-19 | Fix |
| CVE-2024-53069 | Linux kernel scm null pointer dereference | 5.5v3.1 | 0.2% | 2024-11-19 | Fix |
| CVE-2024-53068 | Linux kernel SCMI bus notifier use-after-free | 7.8v3.1 | 0.2% | 2024-11-19 | Fix |
| CVE-2024-53067 | Linux kernel UFS RTC update work vulnerability | 5.5v3.1 | 0.2% | 2024-11-19 | Fix |
| CVE-2024-53066 | Linux kernel nfs uninitialized resource use | 9.8CNA v3.1 | 0.7% | 2024-11-19 | Fix |
| CVE-2024-53065 | Linux kernel kmem_buckets_create slab cache creation vulnerability | 5.5v3.1 | 0.2% | 2024-11-19 | Fix |
| CVE-2024-53064 | Linux kernel idpf control queue mailbox init null pointer dereference | 5.5v3.1 | 0.2% | 2024-11-19 | Fix |
| CVE-2024-53063 | Linux kernel DVB device minor allocation vulnerability | 7.8CNA v3.1 | 0.3% | 2024-11-19 | Fix |
| CVE-2024-53062 | Linux kernel mgb4 frequency range sysfs interface vulnerability | 7.1v3.1 | 0.2% | 2024-11-19 | Fix |
| CVE-2024-53061 | Linux kernel s5p-jpeg driver vulnerability | 7.3CNA v3.1 | 0.3% | 2024-11-19 | Fix |
| CVE-2024-53060 | Linux kernel amdgpu ATIF ACPI interface null pointer dereference | 5.5v3.1 | 0.3% | 2024-11-19 | Fix |
| CVE-2024-53059 | Linux kernel iwlwifi recovery command response handling memory leak | 7.1CNA v3.1 | 0.4% | 2024-11-19 | Fix |
| CVE-2024-53058 | Linux kernel stmmac TSO DMA mapping vulnerability | 9.4CNA v3.1 | 0.6% | 2024-11-19 | Fix |
| CVE-2024-53057 | Linux kernel net/sched use-after-free | 7.8CNA v3.1 | 0.3% | 2024-11-19 | Fix |
| CVE-2024-53056 | Linux kernel MediaTek DRM CRTC teardown null pointer dereference | 5.5NVD v3.1 | 0.2% | 2024-11-19 | Fix |
| CVE-2024-53055 | Linux kernel iwlwifi 6 GHz scan construction infinite loop | 5.5v3.1 | 0.3% | 2024-11-19 | Fix |
| CVE-2024-53053 | Linux kernel UFS RTC update deadlock | 5.5v3.1 | 0.2% | 2024-11-19 | Fix |
| CVE-2024-53052 | Linux kernel io_uring direct I/O writes deadlock | 4.4v3.1 | 0.2% | 2024-11-19 | Fix |
| CVE-2024-53051 | Linux kernel i915 HDCP driver null pointer dereference | 5.5NVD v3.1 | 0.3% | 2024-11-19 | Fix |
| CVE-2024-53050 | Linux kernel i915 HDCP driver null pointer dereference | 5.5v3.1 | 0.2% | 2024-11-19 | Fix |
| CVE-2024-53049 | Linux kernel SLUB KUnit test vulnerability | 5.5v3.1 | 0.2% | 2024-11-19 | Fix |
| CVE-2024-53048 | Linux kernel ice driver DPLL support denial of service | 5.5v3.1 | 0.2% | 2024-11-19 | Fix |
| CVE-2024-53047 | Linux kernel MPTCP scheduler initialization improper locking | 5.5v3.1 | 0.2% | 2024-11-19 | Fix |
| CVE-2024-53046 | Linux kernel imx8ulp FlexSPI controller vulnerability | 5.5v3.1 | 0.3% | 2024-11-19 | Fix |
| CVE-2024-53045 | Linux kernel ASoC DAPM widget list vulnerability | 5.5v3.1 | 0.2% | 2024-11-19 | Fix |
| CVE-2024-53044 | In the Linux kernel, the following vulnerability has been resolved: net/sched: sch_api: fix xa_insert() error path in tcf_block_get_ext() This command: $ tc qdisc replace dev eth0 ingress_block 1 egress_block 1 clsact Error: block dev insert failed: -EBUSY. fails because user space requests the | 7.8CNA v3.1 | 0.2% | 2024-11-19 | Fix |
| CVE-2024-53043 | Linux kernel MCTP I2C driver null pointer dereference | 5.5v3.1 | 0.2% | 2024-11-19 | Fix |
| CVE-2024-53042 | Linux kernel IPv4 IP tunnel driver improper locking | 5.5NVD v3.1 | 0.3% | 2024-11-19 | Fix |
| CVE-2024-52789 | Tenda W30E hard-coded credentials | 8.0CISA ADP v3.1 | 0.4% | 2024-11-19 | |
| CVE-2024-52788 | Tenda W9 hard-coded credentials | 8.0CISA ADP v3.1 | 0.4% | 2024-11-19 | |
| CVE-2024-52763 | Ganglia-web component /graph_all_periods.php cross-site scripting | 5.4v3.1 | 0.6% | 2024-11-19 | Nuclei |
| CVE-2024-52762 | Ganglia-web component /master/header.php cross-site scripting | 5.4v3.1 | 0.7% | 2024-11-19 | Nuclei |
| CVE-2024-52759 | D-Link DI-8003 buffer overflow | 9.8v3.1 | 5.6% | 2024-11-19 | |
| CVE-2024-52714 | Tenda AC6 buffer overflow | 9.8v3.1 | 0.6% | 2024-11-19 | |
| CVE-2024-52711 | D-Link DI-8100 buffer overflow | 5.7CISA ADP v3.1 | 0.6% | 2024-11-19 | Exploit code |
| CVE-2024-52675 | oretnom23 Sentiment Based Movie Rating System SQL injection | 9.8CISA ADP v3.1 | 0.5% | 2024-11-19 | |
| CVE-2024-52600 | Statamic CMS has path traversal in Asset upload | 5.3CNA v3.1 | 0.6% | 2024-11-19 | Fix |
| CVE-2024-52595 | Fedoralovespython lxml_html_clean HTML cleaner parser cross-site scripting | 7.7CNA v3.1 | 0.5% | 2024-11-19 | Fix |
| CVE-2024-52582 | cachi2 allows traceback prints locals | 4.7CNA v3.1 | 0.2% | 2024-11-19 | Fix |
| CVE-2024-52421 | WP Popup Window Maker WordPress plugin CSRF to stored XSS | 7.1CNA v3.1 | 0.2% | 2024-11-19 | Fix |
| CVE-2024-52420 | Themeisle Disable Admin Notices Individually plugin cross-site request forgery | 4.3CNA v3.1 | 0.2% | 2024-11-19 | Fix |
| CVE-2024-52402 | Exclusive Content Password Protect WordPress plugin CSRF to arbitrary file upload | 9.6CNA v3.1 | 0.8% | 2024-11-19 | Exploit code |
| CVE-2024-52401 | Hacklog DownloadManager WordPress plugin CSRF to arbitrary file upload | 9.6CNA v3.1 | 0.3% | 2024-11-19 | |
| CVE-2024-52395 | Floating Buttons for WooCommerce WordPress plugin broken access control | 5.3CNA v3.1 | 0.4% | 2024-11-19 | Fix |
| CVE-2024-52392 | W3SPEEDSTER WordPress plugin cross-site request forgery (CSRF) | 6.5v3.1 | 0.2% | 2024-11-19 | Fix |
| CVE-2024-52388 | Hebrew Date WordPress plugin CSRF to stored XSS | 7.1CNA v3.1 | 0.2% | 2024-11-19 | Fix |
| CVE-2024-52360 | IBM Concert Software SQL injection | 7.6CNA v3.1 | 0.5% | 2024-11-19 | Fix |
| CVE-2024-52359 | IBM Concert Software improper access controls | 4.3CNA v3.1 | 0.3% | 2024-11-19 | Fix |
| CVE-2024-51938 | Charity Addon for Elementor WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.3% | 2024-11-19 | Fix |
| CVE-2024-51937 | IA Map Analytics Basic WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.3% | 2024-11-19 | |
| CVE-2024-51936 | ESB Testimonials WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.2% | 2024-11-19 | |
| CVE-2024-51935 | Fast Video and Image Display WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.2% | 2024-11-19 | |
| CVE-2024-51934 | Ekiline Block Collection WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.2% | 2024-11-19 | Fix |
| CVE-2024-51933 | Cookie Nonsense for YT WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.2% | 2024-11-19 | |
| CVE-2024-51932 | Kings Tab Slider WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.3% | 2024-11-19 | |
| CVE-2024-51931 | AzonBox WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.2% | 2024-11-19 | |
| CVE-2024-51930 | Custom URL Shortener WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.2% | 2024-11-19 | |
| CVE-2024-51929 | Icon Widget WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.3% | 2024-11-19 | |
| CVE-2024-51928 | Blocks Post Grid WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.3% | 2024-11-19 | |
| CVE-2024-51927 | Rig Elements For Elementor WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.3% | 2024-11-19 | |
| CVE-2024-51926 | GreenCon WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.3% | 2024-11-19 | |
| CVE-2024-51925 | Testimonial Slider Shortcode WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.3% | 2024-11-19 | |
| CVE-2024-51924 | WP Agenda WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.3% | 2024-11-19 | |
| CVE-2024-51923 | Websand Subscription Form WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.3% | 2024-11-19 | |
| CVE-2024-51922 | VP Sitemap WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.3% | 2024-11-19 | |
| CVE-2024-51921 | scrollup WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.3% | 2024-11-19 | |
| CVE-2024-51920 | Map Store Locator WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.3% | 2024-11-19 | |
| CVE-2024-51918 | Pay With Stripe WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.3% | 2024-11-19 | |
| CVE-2024-51917 | Multiple Votes in one page WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.3% | 2024-11-19 | |
| CVE-2024-51916 | Multifox Plus WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.3% | 2024-11-19 | |
| CVE-2024-51914 | gopiplus Drop In Image Slideshow Gallery DOM-based cross-site scripting | 6.5CNA v3.1 | 0.3% | 2024-11-19 | |
| CVE-2024-51913 | Mapme WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.3% | 2024-11-19 | |
| CVE-2024-51912 | IntelliWidget Elements WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.3% | 2024-11-19 | |
| CVE-2024-51911 | Featured product by category name WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.3% | 2024-11-19 | |
| CVE-2024-51910 | Assist24 Help Desk WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.3% | 2024-11-19 | |
| CVE-2024-51909 | audioCase WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.3% | 2024-11-19 | |
| CVE-2024-51908 | Adventure Bucket List WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.3% | 2024-11-19 | |
| CVE-2024-51907 | WP Virtual Room Configurator WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.3% | 2024-11-19 | |
| CVE-2024-51906 | RSV 360 View WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.3% | 2024-11-19 | |
| CVE-2024-51905 | RSV PDF Preview WordPress plugin stored cross-site scripting (XSS) | 6.5CNA v3.1 | 0.3% | 2024-11-19 | |
| CVE-2024-51904 | Embed documents shortcode WordPress plugin stored cross-site scripting (XSS) | 6.5CNA v3.1 | 0.3% | 2024-11-19 | |
| CVE-2024-51903 | WP Listings Pro WordPress plugin stored cross-site scripting (XSS) | 6.5CNA v3.1 | 0.3% | 2024-11-19 | |
| CVE-2024-51902 | TinyCode WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.3% | 2024-11-19 | |
| CVE-2024-51901 | Smooth Maps WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.3% | 2024-11-19 | |
| CVE-2024-51899 | Simple Pricing Table WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.3% | 2024-11-19 | |
| CVE-2024-51898 | Semantic Shortcode WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.3% | 2024-11-19 | |
| CVE-2024-51897 | News Articles WordPress plugin stored cross-site scripting (XSS) | 6.5CNA v3.1 | 0.3% | 2024-11-19 | |
| CVE-2024-51896 | Magic Slider WordPress plugin stored cross-site scripting (XSS) | 6.5CNA v3.1 | 0.3% | 2024-11-19 | |
| CVE-2024-51895 | Minical Hotel Booking WordPress plugin stored cross-site scripting (XSS) | 6.5CNA v3.1 | 0.3% | 2024-11-19 | |
| CVE-2024-51894 | Topbar ID for Elementor WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.3% | 2024-11-19 | |
| CVE-2024-51893 | Postify: Post Layout For Elementor WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.3% | 2024-11-19 | |
| CVE-2024-51892 | Sell Media File with Stripe WordPress plugin stored cross-site scripting (XSS) | 6.5CNA v3.1 | 0.3% | 2024-11-19 | |
| CVE-2024-51891 | Official SalesWizard CRM WordPress plugin stored cross-site scripting (XSS) | 6.5CNA v3.1 | 0.3% | 2024-11-19 | Fix |
| CVE-2024-51890 | Geoportail Shortcode WordPress plugin stored cross-site scripting (XSS) | 6.5CNA v3.1 | 0.3% | 2024-11-19 | |
| CVE-2024-51889 | Fancy User List WordPress plugin stored cross-site scripting (XSS) | 6.5CNA v3.1 | 0.3% | 2024-11-19 | |
| CVE-2024-51887 | NV Slider WordPress plugin stored cross-site scripting (XSS) | 6.5CNA v3.1 | 0.3% | 2024-11-19 | |
| CVE-2024-51886 | Posts Filter WordPress plugin stored cross-site scripting (XSS) | 6.5CNA v3.1 | 0.3% | 2024-11-19 | |
| CVE-2024-51885 | Browsing History WordPress plugin stored cross-site scripting (XSS) | 6.5CNA v3.1 | 0.3% | 2024-11-19 | |
| CVE-2024-51884 | Posts Search WordPress plugin stored cross-site scripting (XSS) | 6.5CNA v3.1 | 0.3% | 2024-11-19 | |
| CVE-2024-51883 | I Plant A Tree WordPress plugin stored cross-site scripting (XSS) | 6.5CNA v3.1 | 0.3% | 2024-11-19 | |
| CVE-2024-51881 | Be Shortcodes WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.3% | 2024-11-19 | |
| CVE-2024-51880 | BeBetter Social Icons WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.3% | 2024-11-19 | |
| CVE-2024-51879 | Text Advertisements WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.3% | 2024-11-19 | |
| CVE-2024-51878 | AchillesTheme-shortcodes WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.3% | 2024-11-19 | |
| CVE-2024-51877 | SV Forms WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.3% | 2024-11-19 | |
| CVE-2024-51876 | wp_automatic_widget WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.3% | 2024-11-19 | |
| CVE-2024-51875 | MDC YouTube Downloader WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.3% | 2024-11-19 | |
| CVE-2024-51874 | ParOne Feeds WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.3% | 2024-11-19 | Fix |
| CVE-2024-51873 | Multi-day Booking Calendar WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.3% | 2024-11-19 | |
| CVE-2024-51872 | Luzuk Testimonials WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.3% | 2024-11-19 | |
| CVE-2024-51871 | Luzuk Team WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.3% | 2024-11-19 | |
| CVE-2024-51870 | Ultimate Flipbox Addon for Elementor WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.3% | 2024-11-19 | Fix |
| CVE-2024-51869 | Gutenium Blocks WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.3% | 2024-11-19 | |
| CVE-2024-51868 | DuoGeek Blocks WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.3% | 2024-11-19 | |
| CVE-2024-51867 | Simpul Events by Esotech WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.3% | 2024-11-19 | |
| CVE-2024-51866 | Social button WordPress plugin stored cross-site scripting (XSS) | 6.5CNA v3.1 | 0.3% | 2024-11-19 | |
| CVE-2024-51865 | Simple Social Share Block WordPress plugin stored cross-site scripting (XSS) | 6.5CNA v3.1 | 0.3% | 2024-11-19 | |
| CVE-2024-51864 | Shortcode Collection WordPress plugin stored cross-site scripting (XSS) | 6.5CNA v3.1 | 0.3% | 2024-11-19 | |
| CVE-2024-51863 | PF Timer WordPress plugin stored cross-site scripting (XSS) | 6.5CNA v3.1 | 0.3% | 2024-11-19 | |
| CVE-2024-51862 | Google Visualization Charts WordPress plugin stored cross-site scripting (XSS) | 6.5CNA v3.1 | 0.3% | 2024-11-19 | |
| CVE-2024-51861 | EventPress WordPress plugin stored cross-site scripting (XSS) | 6.5CNA v3.1 | 0.3% | 2024-11-19 | |
| CVE-2024-51860 | Custom Dashboard Widget WordPress plugin stored cross-site scripting (XSS) | 6.5CNA v3.1 | 0.3% | 2024-11-19 | |
| CVE-2024-51859 | Bamboo Enquiries WordPress plugin stored cross-site scripting (XSS) | 6.5CNA v3.1 | 0.3% | 2024-11-19 | |
| CVE-2024-51858 | Social Locker WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.4% | 2024-11-19 | |
| CVE-2024-51857 | Olympus Shortcodes WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.4% | 2024-11-19 | |
| CVE-2024-51856 | Moose Elementor Kit WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.4% | 2024-11-19 | Fix |
| CVE-2024-51855 | Redirecter WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.4% | 2024-11-19 | |
| CVE-2024-51854 | Hola Free Video Player WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.4% | 2024-11-19 | |
| CVE-2024-51853 | Faltu Testimonial Rotator WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.4% | 2024-11-19 | |
| CVE-2024-51852 | Dynamic Post Grid Elementor Addon WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.4% | 2024-11-19 | Fix |
| CVE-2024-51851 | best bootstrap widgets for elementor WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.4% | 2024-11-19 | |
| CVE-2024-51850 | WoW Guild Armory Roster WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.4% | 2024-11-19 | |
| CVE-2024-51849 | My Restaurant Menu WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.4% | 2024-11-19 | |
| CVE-2024-51848 | Parallaxer WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.4% | 2024-11-19 | |
| CVE-2024-51847 | WP PagSeguro Payments WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.4% | 2024-11-19 | |
| CVE-2024-51846 | Community Yard Sale WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.4% | 2024-11-19 | |
| CVE-2024-51844 | Location Click Map WordPress plugin stored cross-site scripting (XSS) | 6.5CNA v3.1 | 0.4% | 2024-11-19 | |
| CVE-2024-51842 | Image Carousel Shortcode WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.4% | 2024-11-19 | |
| CVE-2024-51841 | File Select Control For Elementor WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.4% | 2024-11-19 | |
| CVE-2024-51840 | Wd-image-magnifier-xoss WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.4% | 2024-11-19 | |
| CVE-2024-51839 | Utech Spinning Earth WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.4% | 2024-11-19 | |
| CVE-2024-51838 | Pull This WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.4% | 2024-11-19 | |
| CVE-2024-51836 | Wezido WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.4% | 2024-11-19 | |
| CVE-2024-51835 | OpenCart Product Display WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.4% | 2024-11-19 | |
| CVE-2024-51834 | Luzuk Slider WordPress plugin stored cross-site scripting (XSS) | 6.5CNA v3.1 | 0.4% | 2024-11-19 | |
| CVE-2024-51833 | Easy Social Sharebar WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.4% | 2024-11-19 | |
| CVE-2024-51832 | Plenigo WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.4% | 2024-11-19 | |
| CVE-2024-51831 | Persian Nested Show/Hide Text WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.4% | 2024-11-19 | |
| CVE-2024-51830 | News Ticker WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.4% | 2024-11-19 | |
| CVE-2024-51829 | Mobile Kiosk WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.4% | 2024-11-19 | |
| CVE-2024-51828 | Beacon For Help Scout WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.4% | 2024-11-19 | |
| CVE-2024-51827 | Boombox Shortcode WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.4% | 2024-11-19 | |
| CVE-2024-51826 | Bitcoin Payments WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.4% | 2024-11-19 | |
| CVE-2024-51825 | Alert Me! WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.4% | 2024-11-19 | |
| CVE-2024-51824 | Advanced Video Player with Analytics WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.4% | 2024-11-19 | |
| CVE-2024-51823 | SherkSpear Add Ribbon Shortcode DOM-based cross-site scripting | 6.5CNA v3.1 | 0.4% | 2024-11-19 | |
| CVE-2024-51822 | Creative Blocks WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.4% | 2024-11-19 | |
| CVE-2024-51821 | WE Client Logo Carousel WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.4% | 2024-11-19 | |
| CVE-2024-51819 | Tigris Flexplatform WordPress plugin stored cross-site scripting (XSS) | 6.5CNA v3.1 | 0.4% | 2024-11-19 | |
| CVE-2024-51817 | Combo WP Rewrite Slugs WordPress plugin settings Change vulnerability | 5.4CNA v3.1 | 0.5% | 2024-11-19 | |
| CVE-2024-51816 | Banner System WordPress plugin stored cross-site scripting (XSS) | 6.5CNA v3.1 | 0.4% | 2024-11-19 | |
| CVE-2024-51814 | 活动链接推广插件 WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.4% | 2024-11-19 | Fix |
| CVE-2024-51813 | Anant Addons for Elementor WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.4% | 2024-11-19 | Fix |
| CVE-2024-51812 | Pro Addons For Elementor WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.4% | 2024-11-19 | Fix |
| CVE-2024-51811 | Popup Image WordPress plugin stored cross-site scripting (XSS) | 6.5CNA v3.1 | 0.4% | 2024-11-19 | |
| CVE-2024-51810 | Lewe Bootstrap Visuals WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.4% | 2024-11-19 | |
| CVE-2024-51809 | Keymaster Chord Notation Free WordPress plugin stored cross-site scripting (XSS) | 6.5CNA v3.1 | 0.4% | 2024-11-19 | |
| CVE-2024-51808 | codeSnips WordPress plugin stored cross-site scripting (XSS) | 6.5CNA v3.1 | 0.4% | 2024-11-19 | |
| CVE-2024-51807 | AgendaPress WordPress plugin stored cross-site scripting (XSS) | 6.5CNA v3.1 | 0.4% | 2024-11-19 | |
| CVE-2024-51806 | Awesome Fitness Testimonials WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.4% | 2024-11-19 | |
| CVE-2024-51805 | yPHPlista WordPress plugin stored cross-site scripting (XSS) | 6.5CNA v3.1 | 0.4% | 2024-11-19 | |
| CVE-2024-51804 | Moka Get Posts Shortcode WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.4% | 2024-11-19 | |
| CVE-2024-51803 | Inline Click To Tweet WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.4% | 2024-11-19 | |
| CVE-2024-51802 | Bread and Butter WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.4% | 2024-11-19 | Fix |
| CVE-2024-51801 | Brand my Footer WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.4% | 2024-11-19 | |
| CVE-2024-51799 | Bg Patriarchia BU WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.4% | 2024-11-19 | |
| CVE-2024-51798 | Surbma Font Awesome WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.4% | 2024-11-19 | Fix |
| CVE-2024-51797 | Ultimate Accordion WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.4% | 2024-11-19 | |
| CVE-2024-51796 | Trendy Restaurant Menu WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.4% | 2024-11-19 | |
| CVE-2024-51795 | Pdf Embedder Fay WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.4% | 2024-11-19 | |
| CVE-2024-51794 | Storely WordPress theme cross-site scripting (XSS) | 6.5CNA v3.1 | 0.4% | 2024-11-19 | |
| CVE-2024-51686 | Manage User Columns WordPress plugin cross-site request forgery (CSRF) | 4.3CNA v3.1 | 0.2% | 2024-11-19 | Fix |
| CVE-2024-51671 | Otter Blocks WordPress plugin broken access control | 2.7CNA v3.1 | 0.5% | 2024-11-19 | Fix |
| CVE-2024-51669 | Dynamic Widgets WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.2% | 2024-11-19 | Fix |
| CVE-2024-51660 | Easy Accordion Gutenberg Block WordPress plugin broken access control | 4.3CNA v3.1 | 0.4% | 2024-11-19 | Fix |
| CVE-2024-51657 | SmartLink Dynamic URLs WordPress plugin CSRF to stored XSS | 7.1CNA v3.1 | 0.2% | 2024-11-19 | Fix |
| CVE-2024-51656 | Flash Show And Hide Box WordPress plugin CSRF to stored cross-site scripting (XSS) | 7.1CNA v3.1 | 0.2% | 2024-11-19 | |
| CVE-2024-51655 | Custom Author URL WordPress plugin CSRF to stored cross-site scripting (XSS) | 7.1CNA v3.1 | 0.2% | 2024-11-19 | |
| CVE-2024-51654 | APK Downloader WordPress plugin CSRF to stored cross-site scripting (XSS) | 7.1CNA v3.1 | 0.2% | 2024-11-19 | |
| CVE-2024-51653 | akira1891 Update Notifications cross-site request forgery | 7.1CNA v3.1 | 0.2% | 2024-11-19 | |
| CVE-2024-51652 | marckocher Skip To cross-site request forgery | 7.1CNA v3.1 | 0.2% | 2024-11-19 | |
| CVE-2024-51650 | Random Featured Post WordPress plugin CSRF to stored cross-site scripting (XSS) | 7.1CNA v3.1 | 0.2% | 2024-11-19 | |
| CVE-2024-51649 | Mobilize WordPress plugin CSRF to stored cross-site scripting (XSS) | 7.1CNA v3.1 | 0.2% | 2024-11-19 | |
| CVE-2024-51648 | e-shops WordPress plugin CSRF to reflected cross-site scripting (XSS) | 7.1CNA v3.1 | 0.2% | 2024-11-19 | Fix |
| CVE-2024-51645 | ThemeFuse Maintenance Mode WordPress plugin CSRF to stored XSS | 7.1CNA v3.1 | 0.2% | 2024-11-19 | |
| CVE-2024-51644 | Addressbook WordPress plugin CSRF to stored XSS | 7.1CNA v3.1 | 0.2% | 2024-11-19 | |
| CVE-2024-51643 | Amazon Associate Filter WordPress plugin CSRF to stored XSS | 7.1CNA v3.1 | 0.2% | 2024-11-19 | |
| CVE-2024-51642 | Seo Free WordPress plugin CSRF to stored XSS | 7.1CNA v3.1 | 0.2% | 2024-11-19 | |
| CVE-2024-51641 | Advanced PDF Generator WordPress plugin CSRF to stored XSS | 7.1CNA v3.1 | 0.2% | 2024-11-19 | |
| CVE-2024-51640 | MDR Webmaster Tools WordPress plugin CSRF to stored XSS | 7.1CNA v3.1 | 0.2% | 2024-11-19 | |
| CVE-2024-51639 | Naver Blog WordPress plugin CSRF to stored XSS | 7.1CNA v3.1 | 0.2% | 2024-11-19 | |
| CVE-2024-51638 | Awesome Shortcodes For Genesis WordPress plugin cross-site scripting (XSS) | 7.1CNA v3.1 | 0.2% | 2024-11-19 | |
| CVE-2024-51637 | Admin SMS Alert WordPress plugin CSRF to stored cross-site scripting (XSS) | 7.1CNA v3.1 | 0.2% | 2024-11-19 | |
| CVE-2024-51636 | Plugin Name: GMO Social Connection WordPress plugin CSRF to stored cross-site scripting (XSS) | 7.1CNA v3.1 | 0.2% | 2024-11-19 | |
| CVE-2024-51635 | While Loading WordPress plugin CSRF to stored cross-site scripting (XSS) | 7.1CNA v3.1 | 0.2% | 2024-11-19 | |
| CVE-2024-51634 | Webriti Custom Login WordPress plugin CSRF to reflected cross-site scripting (XSS) | 7.1CNA v3.1 | 0.2% | 2024-11-19 | |
| CVE-2024-51633 | Simple Page Specific Sidebars WordPress plugin CSRF to stored cross-site scripting (XSS) | 7.1CNA v3.1 | 0.2% | 2024-11-19 | |
| CVE-2024-51632 | SH Slideshow WordPress plugin CSRF to stored cross-site scripting (XSS) | 7.1CNA v3.1 | 0.2% | 2024-11-19 | |
| CVE-2024-51631 | Sticky Social Bar WordPress plugin CSRF to stored cross-site scripting (XSS) | 7.1CNA v3.1 | 0.2% | 2024-11-19 | |
| CVE-2024-51617 | Clyp WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.3% | 2024-11-19 | |
| CVE-2024-51503 | Trend Micro Deep Security OS command injection | 8.0CNA v3.1 | 4.0% | 2024-11-19 | Fix |
| CVE-2024-50803 | Redaxo Core CMS cross-site scripting (XSS) | 6.1CISA ADP v3.1 | 0.5% | 2024-11-19 | Exploit codeFix |
| CVE-2024-50556 | WM Zoom WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.4% | 2024-11-19 | |
| CVE-2024-50554 | Sided WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.4% | 2024-11-19 | Fix |
| CVE-2024-50553 | Classy Addons for Elementor WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.4% | 2024-11-19 | |
| CVE-2024-50552 | Hover Video Preview WordPress plugin stored cross-site scripting (XSS) | 6.5CNA v3.1 | 0.4% | 2024-11-19 | |
| CVE-2024-50551 | EndomondoWP WordPress plugin stored cross-site scripting (XSS) | 6.5CNA v3.1 | 0.4% | 2024-11-19 | |
| CVE-2024-50549 | Bonway Static Block Editor WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.4% | 2024-11-19 | |
| CVE-2024-50548 | Awesome Progress Bar WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.3% | 2024-11-19 | Fix |
| CVE-2024-50547 | Themedy Toolbox WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.3% | 2024-11-19 | |
| CVE-2024-50546 | MyOrderDesk WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.4% | 2024-11-19 | Fix |
| CVE-2024-50545 | DataMentor WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.3% | 2024-11-19 | Fix |
| CVE-2024-50543 | amazing neo icon font for elementor WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.3% | 2024-11-19 | |
| CVE-2024-50542 | RLM Elementor Widgets Pack WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.4% | 2024-11-19 | Fix |
| CVE-2024-50541 | Advanced Control Manager WordPress plugin stored cross-site scripting (XSS) | 6.5CNA v3.1 | 0.4% | 2024-11-19 | |
| CVE-2024-50540 | (dp) AddThis WordPress plugin stored cross-site scripting (XSS) | 6.5CNA v3.1 | 0.3% | 2024-11-19 | |
| CVE-2024-50538 | Show Visitor IP Address WordPress plugin stored cross-site scripting (XSS) | 6.5CNA v3.1 | 0.4% | 2024-11-19 | |
| CVE-2024-50537 | Smart Mockups WordPress plugin stored cross-site scripting (XSS) | 6.5CNA v3.1 | 0.4% | 2024-11-19 | |
| CVE-2024-50536 | GDReseller WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.3% | 2024-11-19 | |
| CVE-2024-50535 | Step by Step WordPress plugin stored cross-site scripting (XSS) | 6.5CNA v3.1 | 0.4% | 2024-11-19 | |
| CVE-2024-50534 | World Prayer Time WordPress plugin CSRF to reflected cross-site scripting (XSS) | 7.1CNA v3.1 | 0.2% | 2024-11-19 | |
| CVE-2024-50533 | Domain Sharding WordPress plugin CSRF to stored cross-site scripting (XSS) | 7.1CNA v3.1 | 0.2% | 2024-11-19 | |
| CVE-2024-50532 | Events Manager Pro extended WordPress plugin CSRF to reflected cross-site scripting (XSS) | 7.1CNA v3.1 | 0.4% | 2024-11-19 | |
| CVE-2024-50522 | WeChat Subscribers Lite WordPress plugin reflected cross-site scripting (XSS) | 7.1CNA v3.1 | 0.4% | 2024-11-19 | |
| CVE-2024-50521 | Alley Elementor Widget WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.4% | 2024-11-19 | |
| CVE-2024-50520 | Ancient World Linked Data WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.4% | 2024-11-19 | |
| CVE-2024-50519 | Jigoshop Store Exporter WordPress plugin reflected cross-site scripting (XSS) | 7.1CNA v3.1 | 0.4% | 2024-11-19 | |
| CVE-2024-50518 | Pricer Ninja WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.4% | 2024-11-19 | |
| CVE-2024-50517 | ID-SK Toolkit WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.3% | 2024-11-19 | Fix |
| CVE-2024-50516 | Countdown and Clock WordPress plugin cross-site scripting (XSS) | 5.9CNA v3.1 | 0.4% | 2024-11-19 | |
| CVE-2024-50515 | Ninja Forms The Contact Form Builder That Grows With You WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.4% | 2024-11-19 | Fix |
| CVE-2024-50514 | Ninja Forms The Contact Form Builder That Grows With You WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.4% | 2024-11-19 | Fix |
| CVE-2024-50513 | PostX WordPress plugin cross-site scripting (XSS) | 5.9CNA v3.1 | 0.4% | 2024-11-19 | Fix |
| CVE-2024-50430 | Beaver Builder WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.3% | 2024-11-19 | Fix |
| CVE-2024-50417 | Bold Page Builder WordPress plugin broken access control | 8.8v3.1 | 1.9% | 2024-11-19 | Fix |
| CVE-2024-50304 | Linux kernel IPv4 tunnel lookup improper locking | 5.5v3.1 | 0.2% | 2024-11-19 | Fix |
| CVE-2024-50303 | Linux kernel kexec system RAM resource walking denial of service | 5.5v3.1 | 0.2% | 2024-11-19 | Fix |
| CVE-2024-50302 | Linux Kernel use of uninitialized resource | 5.5NVD v3.1 | 0.8% | 2024-11-19 | KEVKCVFix |
| CVE-2024-50301 | Linux kernel key permission checking out-of-bounds read | 7.8CNA v3.1 | 0.3% | 2024-11-19 | Fix |
| CVE-2024-50300 | Linux kernel rtq2208 regulator driver vulnerability | 7.8CNA v3.1 | 0.2% | 2024-11-19 | Fix |
| CVE-2024-50299 | Linux kernel sctp crash | 8.2CNA v3.1 | 0.6% | 2024-11-19 | Fix |
| CVE-2024-50298 | Linux kernel ENETC PF driver VF handling null pointer dereference | 5.5NVD v3.1 | 0.2% | 2024-11-19 | Fix |
| CVE-2024-50297 | Linux kernel axienet race condition | 7.5CNA v3.1 | 0.3% | 2024-11-19 | Fix |
| CVE-2024-50296 | Linux kernel HNS3 SR-IOV driver null pointer dereference | 5.5v3.1 | 0.3% | 2024-11-19 | Fix |
| CVE-2024-50295 | In the Linux kernel, the following vulnerability has been resolved: net: arc: fix the device for dma_map_single/dma_unmap_single The ndev->dev and pdev->dev aren't the same device, use ndev->dev.parent which has dma_mask, ndev->dev.parent is just pdev->dev. Or it would cause the following issue: | 5.5v3.1 | 0.2% | 2024-11-19 | Fix |
| CVE-2024-50294 | Linux kernel rxrpc call handling improper locking | 7.8CNA v3.1 | 0.2% | 2024-11-19 | Fix |
| CVE-2024-50293 | Linux kernel SMC socket creation use-after-free | 7.8CNA v3.1 | 0.2% | 2024-11-19 | Fix |
| CVE-2024-50292 | Linux kernel STM32 SPDIFRX audio driver null pointer dereference | 5.5v3.1 | 0.2% | 2024-11-19 | Fix |
| CVE-2024-50291 | Linux kernel DVB core buffer handling improper array index validation | 7.8CNA v3.1 | 0.2% | 2024-11-19 | Fix |
| CVE-2024-50290 | Linux kernel cx24116 integer underflow | 5.5v3.1 | 0.3% | 2024-11-19 | Fix |
| CVE-2024-50289 | In the Linux kernel, the following vulnerability has been resolved: media: av7110: fix a spectre vulnerability As warned by smatch: drivers/staging/media/av7110/av7110_ca.c:270 dvb_ca_ioctl() warn: potential spectre issue 'av7110->ci_slot' [w] (local cap) There is a spectre-related vulnerability | 5.5NVD v3.1 | 0.2% | 2024-11-19 | Fix |
| CVE-2024-50288 | Linux kernel vivid video capture driver out-of-bounds write | 7.8CNA v3.1 | 0.2% | 2024-11-19 | Fix |
| CVE-2024-50287 | Linux kernel v4l2-tpg divide by zero | 5.5v3.1 | 0.3% | 2024-11-19 | Fix |
| CVE-2024-50286 | Linux kernel ksmbd session handling use-after-free | 9.8CNA v3.1 | 0.7% | 2024-11-19 | Fix |
| CVE-2024-50285 | Linux kernel ksmbd SMB server resource exhaustion | 7.5CNA v3.1 | 0.6% | 2024-11-19 | Fix |
| CVE-2024-50284 | Linux kernel ksmbd improper check for exceptional conditions | 7.5CNA v3.1 | 0.5% | 2024-11-19 | Fix |
| CVE-2024-50283 | Linux kernel ksmbd SMB3 preauthentication hash use-after-free | 9.8CNA v3.1 | 0.6% | 2024-11-19 | Fix |
| CVE-2024-50282 | Linux kernel drm/amdgpu buffer overflow | 7.8CNA v3.1 | 0.3% | 2024-11-19 | Fix |
| CVE-2024-50281 | Linux kernel trusted keys DCP AEAD cipher operation null pointer dereference | 7.8CNA v3.1 | 0.2% | 2024-11-19 | Fix |
| CVE-2024-50280 | Linux kernel dm-cache constructor error path use-after-free | 7.8CISA ADP v3.1 | 0.3% | 2024-11-19 | Fix |
| CVE-2024-50279 | Linux kernel dm-cache dirty bitset resizing out-of-bounds read | 7.1v3.1 | 0.3% | 2024-11-19 | Fix |
| CVE-2024-50278 | Linux kernel out-of-bounds access | 7.1v3.1 | 0.3% | 2024-11-19 | Fix |
| CVE-2024-50277 | Linux kernel device mapper core cleanup null pointer dereference | 4.7v3.1 | 0.2% | 2024-11-19 | Fix |
| CVE-2024-50276 | Linux kernel mse102x double free | 9.8CNA v3.1 | 0.7% | 2024-11-19 | Fix |
| CVE-2024-50275 | Linux kernel arm64 SVE trap handling race condition | 7.3CNA v3.1 | 0.2% | 2024-11-19 | Fix |
| CVE-2024-50274 | Linux kernel idpf driver link settings query use-after-free | 7.8v3.1 | 0.2% | 2024-11-19 | Fix |
| CVE-2024-50273 | Linux kernel btrfs delayed reference list vulnerability | 7.8CNA v3.1 | 0.3% | 2024-11-19 | Fix |
| CVE-2024-50272 | Linux kernel filemap_read bounds checking infinite loop | 5.5v3.1 | 0.3% | 2024-11-19 | Fix |
| CVE-2024-50271 | Linux kernel signal queue rlimit override resource exhaustion | 5.5v3.1 | 0.2% | 2024-11-19 | Fix |
| CVE-2024-50270 | Linux kernel DAMON feedback loop integer overflow | 5.5v3.1 | 0.2% | 2024-11-19 | Fix |
| CVE-2024-50269 | Linux kernel musb sunxi USB PHY handling use-after-free | 7.8v3.1 | 0.3% | 2024-11-19 | Fix |
| CVE-2024-50268 | Linux kernel UCSI CCG USB Type-C driver out-of-bounds read | 7.8CNA v3.1 | 0.3% | 2024-11-19 | Fix |
| CVE-2024-50267 | Linux kernel io_edgeport USB serial driver debug logging use-after-free | 7.8CNA v3.1 | 0.3% | 2024-11-19 | Fix |
| CVE-2024-50266 | Linux kernel video codec clock controller GDSCs vulnerability | 5.5v3.1 | 0.2% | 2024-11-19 | Fix |
| CVE-2024-50265 | Linux kernel ocfs2 null pointer dereference | 5.5v3.1 | 0.3% | 2024-11-19 | Fix |
| CVE-2024-50264 | Linux kernel vsock virtio loopback transport use-after-free | 7.8CNA v3.1 | 0.4% | 2024-11-19 | Fix |
| CVE-2024-49697 | Sunshine Photo Cart WordPress plugin broken access control | 4.3v3.1 | 0.4% | 2024-11-19 | Fix |
| CVE-2024-49689 | HD Quiz Save Results Light WordPress plugin broken access control | 5.4CNA v3.1 | 0.5% | 2024-11-19 | Fix |
| CVE-2024-49680 | WP VR WordPress plugin broken access control | 4.3CNA v3.1 | 0.4% | 2024-11-19 | Fix |
| CVE-2024-48992 | needrestart uncontrolled search path | 7.8CNA v3.1 | 7.9% | 2024-11-19 | Fix |
| CVE-2024-48991 | needrestart race condition | 7.8CNA v3.1 | 6.0% | 2024-11-19 | Fix |
| CVE-2024-48990 | needrestart uncontrolled search path | 7.8CNA v3.1 | 21.3% | 2024-11-19 | Exploit codeFix |
| CVE-2024-48694 | Daxi Information Technology OfficeWeb365 savedraw component code injection | 9.8CISA ADP v3.1 | 1.1% | 2024-11-19 | |
| CVE-2024-48072 | Weaver e-cology SQL injection | 9.8CISA ADP v3.1 | 0.4% | 2024-11-19 | |
| CVE-2024-48071 | Weaver e-cology path traversal | 6.5CISA ADP v3.1 | 0.9% | 2024-11-19 | |
| CVE-2024-48070 | Weaver e-cology code injection | 9.8CISA ADP v3.1 | 0.7% | 2024-11-19 | |
| CVE-2024-48069 | Weaver e-cology race condition | 9.8CISA ADP v3.1 | 0.4% | 2024-11-19 | |
| CVE-2024-45422 | Zoom Apps improper input validation | 6.5CNA v3.1 | 0.6% | 2024-11-19 | Fix |
| CVE-2024-45420 | Zoom Apps uncontrolled resource consumption | 4.3CNA v3.1 | 0.5% | 2024-11-19 | Fix |
| CVE-2024-45419 | Zoom Apps improper input validation | 8.1CNA v3.1 | 0.5% | 2024-11-19 | Fix |
| CVE-2024-43338 | Crowdsignal Polls and Ratings WordPress plugin cross-site request forgery (CSRF) | 4.3CNA v3.1 | 0.2% | 2024-11-19 | Fix |
| CVE-2024-42450 | Versa Director hard-coded credentials | 10.0CISA ADP v3.1 | 0.6% | 2024-11-19 | Fix |
| CVE-2024-37070 | IBM Concert Software information disclosure | 4.3CNA v3.1 | 0.3% | 2024-11-19 | Fix |
| CVE-2024-31141 | Apache Kafka Clients: Privilege escalation to filesystem read-access via automatic ConfigProvider | 6.5CISA ADP v3.1 | 1.2% | 2024-11-19 | Fix |
| CVE-2024-30424 | Beaver Builder Addons by WPZOOM WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.2% | 2024-11-19 | Fix |
| CVE-2024-21697 | Atlassian Sourcetree remote code execution | 8.8CNA v3.0 | 0.7% | 2024-11-19 | Fix |
| CVE-2024-21539 | Regular expression denial of service (ReDoS) in @eslint/plugin-kit | 8.7CNA v4.0 | 0.5% | 2024-11-19 | Fix |
| CVE-2024-11400 | HUSKY Products Filter for WooCommerce WordPress plugin reflected cross-site scripting | 6.1CNA v3.1 | 0.3% | 2024-11-19 | Fix |
| CVE-2024-11395 | Google Chrome V8 type confusion | 8.8CISA ADP v3.1 | 0.4% | 2024-11-19 | Fix |
| CVE-2024-11224 | Parallax Image WordPress plugin stored cross-site scripting | 6.4CNA v3.1 | 0.4% | 2024-11-19 | Fix |
| CVE-2024-11198 | GD Rating System WordPress plugin stored cross-site scripting | 6.4CNA v3.1 | 0.4% | 2024-11-19 | Fix |
| CVE-2024-11195 | Email Subscription Popup WordPress plugin stored cross-site scripting | 6.4CNA v3.1 | 0.4% | 2024-11-19 | Fix |
| CVE-2024-11194 | Classified Listing WordPress plugin unauthorized access | 8.8CNA v3.1 | 0.6% | 2024-11-19 | Fix |
| CVE-2024-11098 | SVG Block WordPress plugin stored cross-site scripting | 5.5CNA v3.1 | 0.4% | 2024-11-19 | Fix |
| CVE-2024-11075 | SICK Incoming Goods Suite privilege escalation | 8.8CNA v3.1 | 0.2% | 2024-11-19 | Fix |
| CVE-2024-11069 | WordPress GDPR plugin missing authorization to unauthenticated arbitrary user deletion | 9.1v3.1 | 0.4% | 2024-11-19 | Fix |
| CVE-2024-11038 | wpbean WPB Popup for Contact Form 7 code injection | 7.3CNA v3.1 | 0.6% | 2024-11-19 | Fix |
| CVE-2024-11036 | rubengc GamiPress code injection | 9.8v3.1 | 0.7% | 2024-11-19 | Fix |
| CVE-2024-11003 | needrestart OS command injection | 7.8CNA v3.1 | 11.9% | 2024-11-19 | Exploit codeKCVFix |
| CVE-2024-10524 | GNU Wget is vulnerable to an SSRF attack when accessing partially-user-controlled shorthand URLs | 6.5CNA v3.1 | 1.1% | 2024-11-19 | Fix |
| CVE-2024-10388 | WordPress GDPR plugin unauthenticated stored cross-site scripting | 6.1NVD v3.1 | 0.3% | 2024-11-19 | Fix |
| CVE-2024-10268 | MP3 Audio Player WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.3% | 2024-11-19 | Fix |
| CVE-2024-10224 | Module::ScanDeps OS command injection | 7.8NVD v3.1 | 9.0% | 2024-11-19 | KCVFix |
| CVE-2024-10204 | Dassault Systèmes eDrawings X_B and SAT file reading procedure heap-based buffer overflow | 7.8CNA v3.1 | 0.2% | 2024-11-19 | |
| CVE-2024-10103 | MailPoet WordPress plugin Admin+ stored XSS | 6.1CISA ADP v3.1 | 0.3% | 2024-11-19 | Fix |
| CVE-2024-9830 | Bard WordPress theme reflected cross-site scripting via add_query_arg parameter | 6.1CNA v3.1 | 0.4% | 2024-11-19 | Fix |
| CVE-2024-9777 | Ashe WordPress theme reflected cross-site scripting via add_query_arg parameter | 6.1CNA v3.1 | 0.4% | 2024-11-19 | Fix |
| CVE-2024-8403 | Mitsubishi Electric MELSEC iQ-F Series FX5-ENET improper type validation | 7.5CNA v3.1 | 0.7% | 2024-11-19 | Fix |
| CVE-2024-52947 | LemonLDAP::NG cross-site scripting | 6.1CISA ADP v3.1 | 0.3% | 2024-11-18 | Fix |
| CVE-2024-52946 | LemonLDAP::NG session refresh vulnerability | 8.8CISA ADP v3.1 | 0.5% | 2024-11-18 | Fix |
| CVE-2024-52945 | Veritas NetBackup code injection | 7.8v3.1 | 0.2% | 2024-11-18 | Fix |
| CVE-2024-52944 | Veritas Enterprise Vault cross-site scripting | 5.4v3.1 | 0.4% | 2024-11-18 | Fix |
| CVE-2024-52943 | Veritas Enterprise Vault cross-site scripting | 5.4v3.1 | 1.1% | 2024-11-18 | Fix |
| CVE-2024-52942 | Veritas Enterprise Vault cross-site scripting | 5.4v3.1 | 0.4% | 2024-11-18 | Fix |
| CVE-2024-52941 | Veritas Enterprise Vault archived content viewer cross-site scripting | 5.4CNA v3.1 | 0.3% | 2024-11-18 | |
| CVE-2024-52940 | AnyDesk Allow Direct Connections feature information disclosure | 7.5CISA ADP v3.1 | 1.2% | 2024-11-18 | Exploit code |
| CVE-2024-52926 | Delinea Privilege Manager improper privilege management | 6.5CNA v3.1 | 0.2% | 2024-11-18 | Fix |
| CVE-2024-52922 | Bitcoin Core peer-to-peer block download denial of service | 6.5CISA ADP v3.1 | 0.3% | 2024-11-18 | Fix |
| CVE-2024-52921 | Bitcoin Core missing authorization | 5.3CISA ADP v3.1 | 0.4% | 2024-11-18 | Fix |
| CVE-2024-52920 | Bitcoin Core resource exhaustion | 7.5CISA ADP v3.1 | 0.6% | 2024-11-18 | Fix |
| CVE-2024-52919 | Bitcoin Core integer overflow | 6.5CISA ADP v3.1 | 0.3% | 2024-11-18 | Fix |
| CVE-2024-52918 | Bitcoin-Qt in Bitcoin Core before 0.20.0 allows remote attackers to cause a denial of service (memory consumption and application crash) via a BIP21 r parameter for a URL that has a large file. | 6.5CISA ADP v3.1 | 0.5% | 2024-11-18 | |
| CVE-2024-52917 | Bitcoin Core resource exhaustion | 6.5CISA ADP v3.1 | 0.3% | 2024-11-18 | Fix |
| CVE-2024-52916 | Bitcoin Core resource exhaustion | 7.5CISA ADP v3.1 | 0.5% | 2024-11-18 | Fix |
| CVE-2024-52915 | Bitcoin Core resource exhaustion | 7.5CISA ADP v3.1 | 0.6% | 2024-11-18 | Fix |
| CVE-2024-52914 | Bitcoin Core resource exhaustion | 7.5CISA ADP v3.1 | 0.5% | 2024-11-18 | Fix |
| CVE-2024-52913 | Bitcoin Core resource exhaustion | 5.3CISA ADP v3.1 | 0.4% | 2024-11-18 | Fix |
| CVE-2024-52912 | Bitcoin Core integer overflow | 7.5CISA ADP v3.1 | 0.5% | 2024-11-18 | Fix |
| CVE-2024-52587 | Harden-Runner has command injection weaknesses in `setup.ts` and `arc-runner.ts` | 2.7CNA v4.0 | 2.8% | 2024-11-18 | Fix |
| CVE-2024-52585 | Autolab has HTML injection | 1.2CNA v4.0 | 0.3% | 2024-11-18 | Fix |
| CVE-2024-52584 | Autolab submission grading endpoints incorrect authorization | 4.9CNA v4.0 | 0.3% | 2024-11-18 | Fix |
| CVE-2024-52583 | WesHacks code includes links to Leostop tracking spyware infested files | 8.2CNA v3.1 | 0.2% | 2024-11-18 | Fix |
| CVE-2024-52574 | Siemens Teamcenter Visualization out-of-bounds read | 7.3CNA v4.0 | 0.2% | 2024-11-18 | Fix |
| CVE-2024-52573 | Siemens Teamcenter Visualization out-of-bounds write | 7.3CNA v4.0 | 0.3% | 2024-11-18 | Fix |
| CVE-2024-52572 | Siemens Teamcenter Visualization stack-based buffer overflow | 7.3CNA v4.0 | 0.2% | 2024-11-18 | Fix |
| CVE-2024-52571 | Siemens Teamcenter Visualization out-of-bounds write | 7.3CNA v4.0 | 0.2% | 2024-11-18 | Fix |
| CVE-2024-52570 | Siemens Teamcenter Visualization out-of-bounds write | 7.3CNA v4.0 | 0.2% | 2024-11-18 | Fix |
| CVE-2024-52569 | Siemens Teamcenter Visualization out-of-bounds write | 7.3CNA v4.0 | 0.3% | 2024-11-18 | Fix |
| CVE-2024-52568 | Siemens Teamcenter Visualization use-after-free | 7.3CNA v4.0 | 0.2% | 2024-11-18 | Fix |
| CVE-2024-52567 | Siemens Teamcenter Visualization out-of-bounds read | 7.3CNA v4.0 | 0.3% | 2024-11-18 | Fix |
| CVE-2024-52566 | Siemens Teamcenter Visualization out-of-bounds write | 7.3CNA v4.0 | 0.2% | 2024-11-18 | Fix |
| CVE-2024-52565 | Siemens Teamcenter Visualization out-of-bounds write | 7.3CNA v4.0 | 0.2% | 2024-11-18 | Fix |
| CVE-2024-52506 | Graylog can leak other users' reports via concurrent PDF report rendering | 7.1CNA v4.0 | 0.6% | 2024-11-18 | Fix |
| CVE-2024-52436 | Post SMTP WordPress plugin SQL injection | 7.2v3.1 | 0.5% | 2024-11-18 | Fix |
| CVE-2024-52435 | Premium Packages Sell Digital Products Securely WordPress plugin SQL injection | 7.2v3.1 | 0.5% | 2024-11-18 | Fix |
| CVE-2024-52434 | Popup by Supsystic WordPress plugin remote code execution (RCE) | 9.1v3.1 | 1.1% | 2024-11-18 | Fix |
| CVE-2024-52433 | My Geo Posts Free WordPress plugin PHP object injection | 9.8NVD v3.1 | 3.1% | 2024-11-18 | Nuclei |
| CVE-2024-52432 | NIX Anti-Spam Light WordPress plugin PHP object injection | 9.8v3.1 | 0.5% | 2024-11-18 | |
| CVE-2024-52431 | WP Video Robot WordPress plugin SQL injection | 9.8v3.1 | 0.5% | 2024-11-18 | |
| CVE-2024-52430 | Lis Video Gallery WordPress plugin PHP object injection | 9.8v3.1 | 1.1% | 2024-11-18 | Exploit code |
| CVE-2024-52429 | WP Quick Setup WordPress plugin arbitrary plugin and theme installation to remote code execution | 8.8NVD v3.1 | 0.9% | 2024-11-18 | Exploit code |
| CVE-2024-52428 | Ads Booster by Ads Pro WordPress plugin local file inclusion | 9.8v3.1 | 0.5% | 2024-11-18 | |
| CVE-2024-52427 | Event Tickets with Ticket Scanner WordPress plugin remote code execution (RCE) | 8.8NVD v3.1 | 0.7% | 2024-11-18 | Fix |
| CVE-2024-52426 | Linear WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.2% | 2024-11-18 | Fix |
| CVE-2024-52425 | Drozd Addons for Elementor WordPress plugin stored cross-site scripting (XSS) | 5.4v3.1 | 0.2% | 2024-11-18 | |
| CVE-2024-52424 | wp-login customizer WordPress plugin cross-site scripting (XSS) | 6.1NVD v3.1 | 0.2% | 2024-11-18 | |
| CVE-2024-52423 | Themify Builder WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.2% | 2024-11-18 | Fix |
| CVE-2024-52422 | WP Githuber MD WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.2% | 2024-11-18 | |
| CVE-2024-52419 | Copy Anything to Clipboard WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.2% | 2024-11-18 | Fix |
| CVE-2024-52418 | Gameplan WordPress theme reflected cross-site scripting (XSS) | 7.1CNA v3.1 | 0.3% | 2024-11-18 | |
| CVE-2024-52417 | ReConstruction WordPress theme reflected cross-site scripting (XSS) | 7.1CNA v3.1 | 0.3% | 2024-11-18 | |
| CVE-2024-52394 | Print PDF Generator and Publisher WordPress plugin stored cross-site scripting (XSS) | 6.5CNA v3.1 | 0.2% | 2024-11-18 | Fix |
| CVE-2024-52390 | CYAN Backup WordPress plugin arbitrary file download | 4.9CNA v3.1 | 0.5% | 2024-11-18 | Fix |
| CVE-2024-52389 | WP Job Portal WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.3% | 2024-11-18 | Fix |
| CVE-2024-52349 | Awesome Tool Tip WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.2% | 2024-11-18 | |
| CVE-2024-52348 | AA Audio Player WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.2% | 2024-11-18 | |
| CVE-2024-52347 | wpwebsitecreator Website Remote Install plugin stored cross-site scripting | 6.5CNA v3.1 | 0.2% | 2024-11-18 | |
| CVE-2024-52346 | SimpleGMaps WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.2% | 2024-11-18 | |
| CVE-2024-52345 | ra_qrcode WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.2% | 2024-11-18 | |
| CVE-2024-52344 | Provide Forex Signals WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.2% | 2024-11-18 | |
| CVE-2024-52343 | OS Pricing Tables WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.2% | 2024-11-18 | |
| CVE-2024-52342 | OS BXSlider WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.2% | 2024-11-18 | |
| CVE-2024-52341 | OS Our Team WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.2% | 2024-11-18 | |
| CVE-2024-52340 | Photographer Connections WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.2% | 2024-11-18 | |
| CVE-2024-52339 | Mage Front End Forms WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.2% | 2024-11-18 | |
| CVE-2024-52318 | Apache Tomcat: Incorrect JSP tag recycling leads to XSS | 6.1CISA ADP v3.1 | 1.7% | 2024-11-18 | Exploit codeFix |
| CVE-2024-52317 | Apache Tomcat: Request/response mix-up with HTTP/2 | 6.5CISA ADP v3.1 | 2.1% | 2024-11-18 | Exploit codeFix |
| CVE-2024-52316 | Apache Tomcat: Authentication bypass when using Jakarta Authentication API | 9.8CISA ADP v3.1 | 6.2% | 2024-11-18 | Exploit codeFix |
| CVE-2024-52304 | Aiohttp vulnerable to request smuggling due to incorrect parsing of chunk extensions | 6.3CNA v4.0 | 0.6% | 2024-11-18 | Fix |
| CVE-2024-52303 | Aiohttp memory leak when middleware is enabled when requesting a resource with a non-allowed method | 8.7CNA v4.0 | 0.6% | 2024-11-18 | Fix |
| CVE-2024-51940 | WP Responsive Video WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.2% | 2024-11-18 | |
| CVE-2024-51939 | Stylish Internal Links WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.2% | 2024-11-18 | |
| CVE-2024-51743 | MarkUsProject Markus arbitrary file write leading up to remote code execution (instructor accounts) | 7.1CNA v4.0 | 0.7% | 2024-11-18 | Fix |
| CVE-2024-51499 | MarkUs arbitrary file write leading up to remote code execution (student accounts) | 7.1CNA v4.0 | 0.7% | 2024-11-18 | Fix |
| CVE-2024-51053 | component /main/fileupload.php of AVSCMS v8.2.0 An arbitrary file upload | 9.8CISA ADP v3.1 | 0.7% | 2024-11-18 | |
| CVE-2024-51051 | AVSCMS administrator account default credentials | 9.8CISA ADP v3.1 | 0.5% | 2024-11-18 | |
| CVE-2024-50919 | jpress code injection | 9.8CISA ADP v3.1 | 1.2% | 2024-11-18 | |
| CVE-2024-50849 | Rws Worldserver "Rules" functionality stored cross-site scripting | 4.8CISA ADP v3.1 | 0.5% | 2024-11-18 | |
| CVE-2024-50848 | Rws Worldserver XML external entity injection | 6.5CISA ADP v3.1 | 1.2% | 2024-11-18 | |
| CVE-2024-50804 | Micro-star International MSI Center Pro insecure permissions | 7.8CISA ADP v3.1 | 0.6% | 2024-11-18 | Exploit code |
| CVE-2024-49574 | ManageEngine ADAudit Plus SQL injection | 8.3CNA v3.1 | 3.6% | 2024-11-18 | Fix |
| CVE-2024-48962 | Apache OFBiz code injection | 8.9CNA v4.0 | 0.6% | 2024-11-18 | Fix |
| CVE-2024-48917 | XXE in PHPSpreadsheet's XLSX reader | 7.5CNA v3.1 | 0.7% | 2024-11-18 | Fix |
| CVE-2024-48901 | Moodle: Idor when fetching report schedules | 4.3NVD v3.1 | 0.3% | 2024-11-18 | Fix |
| CVE-2024-48898 | Moodle: Some users can delete audiences of other reports | 4.3NVD v3.1 | 0.3% | 2024-11-18 | Fix |
| CVE-2024-48897 | Moodle: Idor in edit/delete rss feed | 4.3NVD v3.1 | 0.3% | 2024-11-18 | Fix |
| CVE-2024-48896 | Moodle: Users' names returned in messaging error message | 4.3NVD v3.1 | 0.4% | 2024-11-18 | Fix |
| CVE-2024-48294 | Wondershare PDF Reader libPdfCore.dll null pointer dereference | 5.5CISA ADP v3.1 | 0.2% | 2024-11-18 | |
| CVE-2024-48293 | Incorrect access control in QuickHeal Antivirus Pro 24.1.0.182 and earlier allows authenticated attackers with low-level privileges to arbitrarily modify antivirus settings. | 6.5CISA ADP v3.1 | 0.3% | 2024-11-18 | |
| CVE-2024-48292 | Quick Heal Antivirus Pro and Total Security wssrvc.exe service privilege escalation | 8.8CISA ADP v3.1 | 0.4% | 2024-11-18 | |
| CVE-2024-47873 | PhpSpreadsheet XmlScanner bypass leads to XXE | 7.5CNA v3.1 | 0.7% | 2024-11-18 | Fix |
| CVE-2024-47820 | MarkUs vulnerable to path traversal | 5.7CNA v3.1 | 0.7% | 2024-11-18 | Fix |
| CVE-2024-47533 | Cobbler allows anyone to connect to cobbler XML-RPC server with a known password and make changes | 9.8CNA v3.1 | 4.0% | 2024-11-18 | NucleiExploit codeFix |
| CVE-2024-47208 | Apache OFBiz: URLs allowing remote use of Groovy expressions, leading to RCE | 9.8CISA ADP v3.1 | 1.6% | 2024-11-18 | Fix |
| CVE-2024-45791 | Apache HertzBeat: Exposure sensitive token via HTTP GET method with query string | 7.5CISA ADP v3.1 | 0.8% | 2024-11-18 | Fix |
| CVE-2024-45505 | Apache HertzBeat: Exists Native Deser RCE and file writing | 8.8CISA ADP v3.1 | 2.2% | 2024-11-18 | Fix |
| CVE-2024-44757 | Nuserp Nus-m9 Erp component /Basics/DownloadInpFile arbitrary file read | 7.5CISA ADP v3.1 | 0.4% | 2024-11-18 | |
| CVE-2024-44756 | Nuserp Nus-m9 Erp SQL injection | 9.8CISA ADP v3.1 | 0.5% | 2024-11-18 | |
| CVE-2024-43704 | Imagination Technologies Graphics DDK resource exposure | 8.4CISA ADP v3.1 | 0.2% | 2024-11-18 | Fix |
| CVE-2024-43416 | GLPI vulnerable to enumeration of users' email addresses by unauthenticated user | 7.5CNA v3.1 | 1.2% | 2024-11-18 | Fix |
| CVE-2024-42392 | Improper neutralization of Delimiters in Mongoose Web Server library | 7.5NVD v3.1 | 0.2% | 2024-11-18 | Fix |
| CVE-2024-42391 | Cesanta Mongoose Web Server out-of-range pointer offset | 5.3NVD v3.1 | 0.3% | 2024-11-18 | Fix |
| CVE-2024-42390 | Cesanta Mongoose Web Server out-of-range pointer offset | 5.3NVD v3.1 | 0.3% | 2024-11-18 | |
| CVE-2024-42389 | Cesanta Mongoose Web Server out-of-range pointer offset | 5.3NVD v3.1 | 0.3% | 2024-11-18 | |
| CVE-2024-42388 | Cesanta Mongoose Web Server out-of-range pointer offset | 5.3NVD v3.1 | 0.3% | 2024-11-18 | |
| CVE-2024-42387 | Cesanta Mongoose Web Server out-of-range pointer offset | 5.3NVD v3.1 | 0.3% | 2024-11-18 | |
| CVE-2024-42386 | Cesanta Mongoose Web Server out-of-range pointer offset | 7.5NVD v3.1 | 0.4% | 2024-11-18 | Fix |
| CVE-2024-42385 | Improper neutralization of Delimiters in Mongoose Web Server library | 7.0NVD v3.1 | 0.1% | 2024-11-18 | Fix |
| CVE-2024-42384 | Integer overflow or wraparound in Mongoose Web Server library | 7.5NVD v3.1 | 0.5% | 2024-11-18 | Fix |
| CVE-2024-42383 | Cesanta Mongoose Web Server out-of-range pointer offset | 9.8NVD v3.1 | 0.3% | 2024-11-18 | |
| CVE-2024-41974 | WAGO: BACNet Service Property Modification due to Permission Misconfiguration in multiple Devices | 7.1CISA ADP v3.1 | 0.4% | 2024-11-18 | Fix |
| CVE-2024-41973 | WAGO: Remote arbitrary file write with Root Privileges in multiple Devices | 8.1CISA ADP v3.1 | 0.6% | 2024-11-18 | Fix |
| CVE-2024-41972 | WAGO: Arbitrary file overwrite leading to Privileged File Read in multiple Devices | 6.5CISA ADP v3.1 | 0.6% | 2024-11-18 | Fix |
| CVE-2024-41971 | WAGO: Arbitrary file overwrite in multiple Devices | 8.1CISA ADP v3.1 | 0.6% | 2024-11-18 | Fix |
| CVE-2024-41970 | WAGO: Unauthorized Diagnostic data exposure in multiple Devices | 5.7CISA ADP v3.1 | 0.3% | 2024-11-18 | Fix |
| CVE-2024-41969 | WAGO: CODESYS V3 Configuration authentication bypass in multiple Devices | 8.8CNA v3.1 | 0.5% | 2024-11-18 | Fix |
| CVE-2024-41968 | WAGO: Docker Settings Manipulation in multiple Devices | 6.5CISA ADP v3.1 | 0.3% | 2024-11-18 | Fix |
| CVE-2024-41967 | WAGO: Boot Mode Manipulation in multiple Devices | 8.1CISA ADP v3.1 | 0.4% | 2024-11-18 | Fix |
| CVE-2024-41151 | Apache HertzBeat: RCE by notice template injection | 8.8CISA ADP v3.1 | 1.0% | 2024-11-18 | Fix |
| CVE-2024-38828 | DoS via Spring MVC controller method with byte[] parameter | 5.3CNA v3.1 | 0.7% | 2024-11-18 | Exploit codeFix |
| CVE-2024-37155 | OpenCTI may Bypass Introspection Restriction | 6.5CNA v3.1 | 0.5% | 2024-11-18 | Fix |
| CVE-2024-33231 | Ferozo Email version cross-site scripting | 6.1CISA ADP v3.1 | 0.4% | 2024-11-18 | Exploit code |
| CVE-2024-28058 | RSA NetWitness Platform session management vulnerability | 7.5CISA ADP v3.1 | 0.4% | 2024-11-18 | |
| CVE-2024-22067 | ZTE NH8091 product has an improper permission control | 6.8CNA v3.1 | 0.7% | 2024-11-18 | Fix |
| CVE-2024-21287 | Oracle Agile Product Lifecycle Management (PLM) incorrect authorization | 7.5CNA v3.1 | 1.7% | 2024-11-18 | KEVFix |
| CVE-2024-11319 | Stored XSS in Open Source Project django-cms | 4.8v3.1 | 0.5% | 2024-11-18 | Fix |
| CVE-2024-11318 | IDOR vulnerability in AbsysNet | 7.5CNA v3.1 | 0.9% | 2024-11-18 | Exploit code |
| CVE-2024-11315 | TRCore DVC arbitrary file upload through path traversal | 9.8CNA v3.1 | 1.4% | 2024-11-18 | Fix |
| CVE-2024-11314 | TRCore DVC arbitrary file upload through path traversal | 9.8CNA v3.1 | 1.4% | 2024-11-18 | Fix |
| CVE-2024-11313 | TRCore DVC arbitrary file upload through path traversal | 9.8CNA v3.1 | 1.4% | 2024-11-18 | Fix |
| CVE-2024-11312 | TRCore DVC arbitrary file upload through path traversal | 9.8CNA v3.1 | 1.4% | 2024-11-18 | Fix |
| CVE-2024-11311 | TRCore DVC arbitrary file upload through path traversal | 9.8CNA v3.1 | 1.4% | 2024-11-18 | Fix |
| CVE-2024-11310 | TRCore DVC arbitrary file read through path traversal | 7.5CNA v3.1 | 0.7% | 2024-11-18 | Fix |
| CVE-2024-11309 | TRCore DVC arbitrary file read through path traversal | 7.5CNA v3.1 | 0.7% | 2024-11-18 | Fix |
| CVE-2024-11308 | TRCore DVC use of hard-coded cryptographic key | 5.5v3.1 | 0.2% | 2024-11-18 | Fix |
| CVE-2024-11306 | Altenergy Power Control Software database improper authorization | 6.9CNA v4.0 | 0.5% | 2024-11-18 | |
| CVE-2024-11305 | Altenergy Power Control Software status_zigbee get_status_zigbee SQL injection | 5.3CNA v4.0 | 3.7% | 2024-11-18 | Nuclei |
| CVE-2024-11304 | SEH Computertechnik utnserver Pro multiple stored cross-site scripting | 5.1CNA v4.0 | 0.5% | 2024-11-18 | |
| CVE-2024-11303 | Korenix JetPort 5601 path traversal | 8.7CNA v4.0 | 1.8% | 2024-11-18 | Nuclei |
| CVE-2024-11023 | Session hijacking in Firebase JavaScript SDK | 5.2CNA v4.0 | 0.1% | 2024-11-18 | Fix |
| CVE-2024-10486 | Google for WooCommerce WordPress plugin information disclosure via Publicly Accessible PHP Info file | 5.3CNA v3.1 | 0.9% | 2024-11-18 | NucleiFix |
| CVE-2024-10390 | Elfsight Telegram Chat CC WordPress plugin unauthorized access | 6.4CNA v3.1 | 0.2% | 2024-11-18 | |
| CVE-2024-9526 | Stored XSS in Kubeflow Pipeline View | 5.4NVD v3.1 | 0.2% | 2024-11-18 | |
| CVE-2024-9474 | Palo Alto Networks PAN-OS Management interface OS command injection | 6.9CNA v4.0 | 94.8% | 2024-11-18 | KEVNucleiMetasploitEmerging ThreatsExploit codeKCVFix |
| CVE-2024-8781 | Container Escape vulnerability in TR7's Application Security Platform (ASP) | 8.7CNA v4.0 | 0.2% | 2024-11-18 | |
| CVE-2024-5030 | CM Table Of Contents WordPress TOC plugin settings reset via CSRF | 3.8CISA ADP v3.1 | 0.2% | 2024-11-18 | Fix |
| CVE-2024-3370 | SQLi in Egebilgi Software's Website Template | 8.6CISA ADP v3.1 | 0.3% | 2024-11-18 | Fix |
| CVE-2024-0012 | Palo Alto Networks PAN-OS Management interface authentication bypass | 9.3CNA v4.0 | 99.9% | 2024-11-18 | KEVNucleiMetasploitEmerging ThreatsExploit codeKCVFix |
| CVE-2024-52876 | Holy Stone Remote ID Module HSRID01 ASTM Remote ID GATT characteristic out-of-bounds read | 7.5CISA ADP v3.1 | 0.5% | 2024-11-17 | |
| CVE-2024-52872 | Flagsmith get_document endpoint vulnerability | 7.5CISA ADP v3.1 | 0.4% | 2024-11-17 | |
| CVE-2024-52871 | Flagsmith registration invite setting vulnerability | 7.5CISA ADP v3.1 | 0.4% | 2024-11-17 | |
| CVE-2024-52867 | GNU Guix guix-daemon privilege escalation | 8.1CNA v3.1 | 0.2% | 2024-11-17 | Fix |
| CVE-2024-0793 | Red Hat OpenShift Container Platform kube-controller-manager HPA manifest handling denial of service | 7.7CNA v3.1 | 0.6% | 2024-11-17 | Fix |
| CVE-2024-52416 | Debug Tool WordPress plugin remote code execution | 10.0CNA v3.1 | 0.5% | 2024-11-16 | |
| CVE-2024-52415 | SK WP Settings Backup WordPress plugin CSRF to PHP object injection | 8.8CNA v3.1 | 0.2% | 2024-11-16 | |
| CVE-2024-52414 | WDES Responsive Mobile Menu WordPress plugin PHP object injection | 9.8CNA v3.1 | 0.5% | 2024-11-16 | |
| CVE-2024-52413 | Airin Blog WordPress theme PHP object injection | 9.8CNA v3.1 | 0.7% | 2024-11-16 | Fix |
| CVE-2024-52412 | Xin WordPress theme PHP object injection | 9.8CNA v3.1 | 0.5% | 2024-11-16 | |
| CVE-2024-52411 | Advanced Personalization WordPress plugin PHP object injection | 9.8CNA v3.1 | 0.5% | 2024-11-16 | |
| CVE-2024-52410 | Referrer Detector WordPress plugin PHP object injection | 9.8CNA v3.1 | 0.5% | 2024-11-16 | |
| CVE-2024-52409 | AJAX Random Posts WordPress plugin PHP object injection | 9.8CNA v3.1 | 0.5% | 2024-11-16 | |
| CVE-2024-52408 | Push Notifications for WordPress by PushAssist plugin arbitrary file upload | 9.9CNA v3.1 | 0.5% | 2024-11-16 | |
| CVE-2024-52407 | BasePress Migration Tools WordPress plugin arbitrary file upload | 9.9CNA v3.1 | 0.5% | 2024-11-16 | |
| CVE-2024-52406 | CSV to html WordPress plugin arbitrary file upload | 9.9CNA v3.1 | 0.5% | 2024-11-16 | Fix |
| CVE-2024-52405 | B-Banner Slider WordPress plugin arbitrary file upload | 9.9CNA v3.1 | 0.5% | 2024-11-16 | |
| CVE-2024-52404 | CF7 Reply Manager WordPress plugin arbitrary file upload | 9.9CNA v3.1 | 0.5% | 2024-11-16 | |
| CVE-2024-52403 | User Management WordPress plugin arbitrary file upload | 9.9CNA v3.1 | 0.5% | 2024-11-16 | Fix |
| CVE-2024-52400 | Gallerio WordPress plugin arbitrary file upload | 9.9CNA v3.1 | 0.5% | 2024-11-16 | |
| CVE-2024-52399 | Writer Helper WordPress plugin arbitrary file upload | 9.9CNA v3.1 | 0.5% | 2024-11-16 | |
| CVE-2024-52398 | CDI WordPress plugin arbitrary file upload | 9.1CNA v3.1 | 0.5% | 2024-11-16 | Fix |
| CVE-2024-52397 | Davor Zeljkovic Convert Docx2post plugin unrestricted file upload | 9.1CNA v3.1 | 0.5% | 2024-11-16 | |
| CVE-2024-52386 | Classified Listing WordPress plugin local file inclusion | 5.3CNA v3.1 | 0.5% | 2024-11-16 | Fix |
| CVE-2024-11118 | 404 Error Monitor WordPress plugin cross-site request forgery to plugin settings update | 5.3CNA v3.1 | 0.3% | 2024-11-16 | |
| CVE-2024-11094 | 404 Solution WordPress plugin missing authentication to sensitive information exposure | 5.3CNA v3.1 | 0.4% | 2024-11-16 | Fix |
| CVE-2024-11092 | SVGPlus WordPress plugin authenticated (Author+) stored cross-site scripting via SVG file upload | 6.4CNA v3.1 | 0.3% | 2024-11-16 | |
| CVE-2024-11085 | WP Log Viewer WordPress plugin missing authorization | 5.4CNA v3.1 | 0.3% | 2024-11-16 | |
| CVE-2024-10884 | SimpleForm Contact Form Submissions WordPress plugin reflected cross-site scripting | 6.1CNA v3.1 | 0.4% | 2024-11-16 | |
| CVE-2024-10883 | SimpleForm Contact form made simple WordPress plugin reflected cross-site scripting | 6.1CNA v3.1 | 0.4% | 2024-11-16 | |
| CVE-2024-10875 | Gallery Manager WordPress plugin reflected cross-site scripting | 6.1CNA v3.1 | 0.4% | 2024-11-16 | |
| CVE-2024-10861 | Popup Box WordPress plugin unauthorized access | 5.3CNA v3.1 | 0.4% | 2024-11-16 | Fix |
| CVE-2024-10795 | Popularis Extra WordPress plugin authenticated (Contributor+) post disclosure | 4.3CNA v3.1 | 0.3% | 2024-11-16 | Fix |
| CVE-2024-10786 | Simple Local Avatars WordPress plugin missing authorization authenticated user Cache Clearing | 4.3CNA v3.1 | 0.3% | 2024-11-16 | Fix |
| CVE-2024-10728 | PostX WordPress plugin missing authorization to arbitrary plugin Installation/Activation | 8.8CNA v3.1 | 39.1% | 2024-11-16 | Exploit codeFix |
| CVE-2024-10645 | Blogger 301 Redirect WordPress plugin unauthenticated SQL injection via br | 7.5CNA v3.1 | 0.5% | 2024-11-16 | |
| CVE-2024-10614 | Customer Reviews for WooCommerce WordPress plugin unauthorized access | 4.3CNA v3.1 | 0.3% | 2024-11-16 | Fix |
| CVE-2024-10592 | Mapster WP Maps WordPress plugin authenticated (Contributor+) stored cross-site scripting | 6.4CNA v3.1 | 0.8% | 2024-11-16 | Fix |
| CVE-2024-10533 | WP Chat App WordPress plugin missing authorization authenticated Filebird plugin installation | 4.3CNA v3.1 | 0.5% | 2024-11-16 | Fix |
| CVE-2024-10262 | stevehenty Drop Shadow Boxes do_shortcode action code injection | 6.3CNA v3.1 | 0.6% | 2024-11-16 | Fix |
| CVE-2024-10147 | Steel WordPress plugin authenticated (Contributor+) stored cross-site scripting via btn shortcode | 6.4CNA v3.1 | 0.3% | 2024-11-16 | |
| CVE-2024-10017 | PJW Mime Config WordPress plugin stored cross-site scripting | 6.4CNA v3.1 | 0.3% | 2024-11-16 | |
| CVE-2024-10015 | ConvertCalculator for WordPress plugin stored cross-site scripting | 6.4CNA v3.1 | 0.8% | 2024-11-16 | Fix |
| CVE-2024-9938 | Bounce Handler MailPoet 3 WordPress plugin reflected cross-site scripting | 6.1CNA v3.1 | 0.4% | 2024-11-16 | |
| CVE-2024-9935 | PDF Generator Addon for Elementor Page Builder WordPress plugin path traversal | 7.5CNA v3.1 | 7.5% | 2024-11-16 | NucleiExploit codeFix |
| CVE-2024-9887 | Login using WordPress Users ( WP as SAML IDP ) plugin authenticated (Administrator+) SQL injection | 7.2CNA v3.1 | 0.5% | 2024-11-16 | Fix |
| CVE-2024-9850 | SVG Case Study WordPress plugin stored cross-site scripting | 6.4CNA v3.1 | 0.3% | 2024-11-16 | |
| CVE-2024-9849 | Real3D Flipbook Lite 3D FlipBook, PDF Viewer, PDF Embedder WordPress plugin arbitrary file upload | 8.8CNA v3.1 | 1.2% | 2024-11-16 | Fix |
| CVE-2024-9839 | Uix Slideshow WordPress plugin unauthenticated arbitrary shortcode execution | 7.3CNA v3.1 | 0.6% | 2024-11-16 | Fix |
| CVE-2024-9615 | BulkPress WordPress plugin reflected cross-site scripting | 6.1CNA v3.1 | 0.4% | 2024-11-16 | |
| CVE-2024-9386 | Exclusive Divi WordPress plugin stored cross-site scripting | 6.4CNA v3.1 | 0.4% | 2024-11-16 | |
| CVE-2024-9192 | WP Video Robot WordPress plugin privilege escalation | 8.8CNA v3.1 | 0.6% | 2024-11-16 | |
| CVE-2024-8873 | PeproDev WooCommerce Receipt Uploader WordPress plugin reflected cross-site scripting | 6.1CNA v3.1 | 0.5% | 2024-11-16 | Fix |
| CVE-2024-8856 | Backup and Staging by WP Time Capsule WordPress plugin unauthenticated arbitrary file upload | 9.8CNA v3.1 | 94.1% | 2024-11-16 | NucleiMetasploitExploit codeFix |
| CVE-2024-6628 | EleForms WordPress plugin cross-site request forgery | 4.3CNA v3.1 | 0.2% | 2024-11-16 | Fix |
| CVE-2024-52555 | JetBrains WebStorm acceptance of untrusted data | 6.3CNA v3.1 | 0.1% | 2024-11-15 | Fix |
| CVE-2024-52528 | BudgetControl Gateway auth Token can be passed dummy or wrong the middleware response is 200 OK | 9.3CNA v4.0 | 0.6% | 2024-11-15 | Fix |
| CVE-2024-52526 | LibreNMS has a stored XSS in librenms/includes/html/pages/device/services.inc.php | 4.8CNA v3.1 | 0.5% | 2024-11-15 | Fix |
| CVE-2024-52525 | Nextcloud Server User password is available in memory of the PHP process | 1.8CNA v3.1 | 0.3% | 2024-11-15 | Fix |
| CVE-2024-52523 | Nextcloud Server Custom defined credentials of external storages are sent back to the frontend | 4.6CNA v3.1 | 0.6% | 2024-11-15 | Fix |
| CVE-2024-52522 | Rclone improper permission and Ownership Handling on Symlink Targets with --links and --metadata | 5.4CNA v4.0 | 0.2% | 2024-11-15 | Fix |
| CVE-2024-52521 | Nextcloud Server has a potential hash collision for background jobs could skip queuing them | 2.6CNA v3.1 | 0.4% | 2024-11-15 | Fix |
| CVE-2024-52520 | Nextcloud Server link reference provider resource exhaustion | 5.7CNA v3.1 | 0.8% | 2024-11-15 | Fix |
| CVE-2024-52519 | Nextcloud Server's OAuth2 client secrets were stored in a recoverable way | 2.7CNA v3.1 | 0.5% | 2024-11-15 | Fix |
| CVE-2024-52518 | Nextcloud Server is missing password confirmation when changing external storage options | 4.4CNA v3.1 | 0.5% | 2024-11-15 | Fix |
| CVE-2024-52517 | Nextcloud Server's global credentials of external storages are sent back to the frontend | 4.6CNA v3.1 | 0.6% | 2024-11-15 | Fix |
| CVE-2024-52516 | Nextcloud Server group-limited sharing privilege escalation | 3.0CNA v3.1 | 0.4% | 2024-11-15 | Fix |
| CVE-2024-52515 | Nextcloud Server has incomplete sanitization of SVG files allows to embed other images into previews | 5.7CNA v3.1 | 0.7% | 2024-11-15 | Fix |
| CVE-2024-52514 | Nextcloud Server files improper access control | 4.1CNA v3.1 | 0.5% | 2024-11-15 | Fix |
| CVE-2024-52513 | Nextcloud Server Text app attachments folder information disclosure | 2.6CNA v3.1 | 0.5% | 2024-11-15 | Fix |
| CVE-2024-52512 | Nextcloud User OIDC has an open redirection when logging in with User OIDC | 3.3CNA v3.1 | 0.4% | 2024-11-15 | Fix |
| CVE-2024-52511 | Nextcloud Tables has an authorization bypass through user-controlled key in Tables | 6.3CNA v3.1 | 0.5% | 2024-11-15 | Fix |
| CVE-2024-52510 | Nextcloud Desktop client behaves incorrectly if the initial end-to-end-encryption signature is empty | 4.2CNA v3.1 | 0.7% | 2024-11-15 | Exploit codeFix |
| CVE-2024-52509 | Nextcloud Mail app does not respect download permissions in shares | 3.5CNA v3.1 | 0.5% | 2024-11-15 | Fix |
| CVE-2024-52508 | Nextcloud Mail auto configurator can be tricked into sending account information to wrong servers | 8.2CNA v3.1 | 0.7% | 2024-11-15 | Fix |
| CVE-2024-52507 | Share information of the Nextcloud Tables app is not limited to affected users | 3.5CNA v3.1 | 0.4% | 2024-11-15 | Fix |
| CVE-2024-51765 | HPE Cray System Management Software incorrect default permissions | 5.5CISA ADP v3.1 | 0.1% | 2024-11-15 | Fix |
| CVE-2024-51764 | HPE SGI CXFS incorrect default permissions | 5.5CISA ADP v3.1 | 0.1% | 2024-11-15 | Fix |
| CVE-2024-51497 | LibreNMS has a stored XSS (cross-site scripting) in librenms/includes/html/print-customoid.php | 4.8CNA v3.1 | 0.4% | 2024-11-15 | Fix |
| CVE-2024-51496 | LibreNMS has a reflected XSS (cross-site scripting) in librenms/includes/html/pages/wireless.inc.php | 4.8CNA v3.1 | 0.4% | 2024-11-15 | Fix |
| CVE-2024-51495 | LibreNMS has a stored XSS (cross-site scripting) in librenms/includes/html/dev-overview-data.inc.php | 4.8CNA v3.1 | 0.4% | 2024-11-15 | Fix |
| CVE-2024-51494 | LibreNMS has a stored XSS in librenms/app/Http/Controllers/Table/EditPortsController.php | 4.8CNA v3.1 | 0.4% | 2024-11-15 | Fix |
| CVE-2024-51330 | Ultimaker Cura code injection | 5.1v3.1 | 0.2% | 2024-11-15 | |
| CVE-2024-51164 | ketr JEPaaS parameters have SQL injection | 9.1CISA ADP v3.1 | 0.7% | 2024-11-15 | |
| CVE-2024-51142 | chamilo-lms cross-site scripting | 6.1CISA ADP v3.1 | 0.3% | 2024-11-15 | |
| CVE-2024-51141 | TOTOLINK A6000UB improper integrity check validation | 7.8CISA ADP v3.1 | 0.2% | 2024-11-15 | |
| CVE-2024-51037 | kodcloud kodbox origin validation error | 5.3CISA ADP v3.1 | 0.3% | 2024-11-15 | |
| CVE-2024-50986 | Clementine-player Clementine untrusted search path | 7.3CISA ADP v3.1 | 1.0% | 2024-11-15 | Exploit code |
| CVE-2024-50983 | Getflightpath Flightpath cross-site scripting | 6.1CISA ADP v3.1 | 0.3% | 2024-11-15 | |
| CVE-2024-50800 | M2000 Smart4Web cross-site scripting | 6.1CISA ADP v3.1 | 0.4% | 2024-11-15 | |
| CVE-2024-50724 | KASO editcard.jsp SQL injection | 9.8CISA ADP v3.1 | 0.4% | 2024-11-15 | |
| CVE-2024-50655 | emlog cross-site scripting | 5.4v3.1 | 0.4% | 2024-11-15 | |
| CVE-2024-50654 | PickMall lilishop origin validation error | 7.5v3.1 | 1.6% | 2024-11-15 | |
| CVE-2024-50653 | CRMEB improper access control | 7.5v3.1 | 0.5% | 2024-11-15 | |
| CVE-2024-50652 | Geeeeeeeek Java Shop file upload | 4.3v3.1 | 0.3% | 2024-11-15 | |
| CVE-2024-50651 | Geeeeeeeek Java Shop insecure direct object reference | 6.5v3.1 | 0.5% | 2024-11-15 | |
| CVE-2024-50650 | Timgreen Python Book incorrect authorization | 7.5CISA ADP v3.1 | 0.6% | 2024-11-15 | |
| CVE-2024-50649 | Timgreen Python Book path traversal | 9.8CISA ADP v3.1 | 1.0% | 2024-11-15 | |
| CVE-2024-50648 | guchengwuyue yshopmall path traversal | 9.8CISA ADP v3.1 | 1.0% | 2024-11-15 | |
| CVE-2024-50647 | python_food ordering system user information endpoint vulnerability | 7.5CISA ADP v3.1 | 0.5% | 2024-11-15 | |
| CVE-2024-50355 | LibreNMS has a persistent XSS from Insecure Input Sanitization affects multiple endpoints | 4.8CNA v3.1 | 0.3% | 2024-11-15 | Fix |
| CVE-2024-50352 | LibreNMS has a stored XSS in librenms/includes/html/pages/device/overview/services.inc.php | 4.8CNA v3.1 | 41.4% | 2024-11-15 | Fix |
| CVE-2024-50351 | LibreNMS has a reflected XSS (cross-site scripting) in librenms/includes/functions.php | 4.8CNA v3.1 | 0.4% | 2024-11-15 | Fix |
| CVE-2024-50350 | LibreNMS has a stored XSS in librenms/app/Http/Controllers/Table/EditPortsController.php | 4.8CNA v3.1 | 0.4% | 2024-11-15 | Fix |
| CVE-2024-49764 | LibreNMS has a stored XSS in librenms/includes/html/pages/device/capture.inc.php | 4.8CNA v3.1 | 0.4% | 2024-11-15 | Fix |
| CVE-2024-49759 | LibreNMS has a stored XSS (cross-site scripting) in librenms/includes/html/pages/edituser.inc.php | 4.8CNA v3.1 | 0.4% | 2024-11-15 | Fix |
| CVE-2024-49758 | LibreNMS has a stored XSS in ExamplePlugin with Device's Notes | 4.8CNA v3.1 | 0.3% | 2024-11-15 | Fix |
| CVE-2024-49754 | LibreNMS has a stored XSS (cross-site scripting) in librenms/includes/html/pages/api-access.inc.php | 7.5CNA v3.1 | 73.9% | 2024-11-15 | Fix |
| CVE-2024-49592 | McAfee Total Protection trial installer privilege escalation | 6.7CISA ADP v3.1 | 0.2% | 2024-11-15 | |
| CVE-2024-49536 | Adobe Audition out-of-bounds read | 5.5CNA v3.1 | 0.2% | 2024-11-15 | Fix |
| CVE-2024-49060 | Microsoft Azure Stack HCI elevation of privilege | 8.8CNA v3.1 | 0.4% | 2024-11-15 | Fix |
| CVE-2024-48068 | Shenzhen Landray Software Co cross-site scripting | 6.1CISA ADP v3.1 | 0.3% | 2024-11-15 | |
| CVE-2024-47759 | GLPI has a stored XSS via document upload | 6.7CNA v4.0 | 0.4% | 2024-11-15 | Fix |
| CVE-2024-46467 | ZONEPOINT incorrect default permissions | 7.8CISA ADP v3.1 | 0.2% | 2024-11-15 | |
| CVE-2024-46466 | ZONECENTRAL incorrect default permissions | 7.8CISA ADP v3.1 | 0.2% | 2024-11-15 | |
| CVE-2024-46465 | Primx Cryhod incorrect default permissions | 7.8CISA ADP v3.1 | 0.2% | 2024-11-15 | Fix |
| CVE-2024-46463 | ORIZON incorrect default permissions | 7.8CISA ADP v3.1 | 0.2% | 2024-11-15 | |
| CVE-2024-46462 | ZEDMAIL for Windows incorrect default permissions | 7.8CISA ADP v3.1 | 0.2% | 2024-11-15 | |
| CVE-2024-46383 | Hathway Skyworth CM5100-511 router cleartext storage of sensitive information | 2.4CISA ADP v3.1 | 0.3% | 2024-11-15 | |
| CVE-2024-45971 | MZ Automation libiec61850 buffer overflow | 9.8CISA ADP v3.1 | 0.6% | 2024-11-15 | |
| CVE-2024-45970 | MZ Automation libiec61850 buffer overflow | 9.8CISA ADP v3.1 | 0.6% | 2024-11-15 | |
| CVE-2024-45969 | MZ Automation LibIEC1850 MMS client null pointer dereference | 7.5CISA ADP v3.1 | 0.5% | 2024-11-15 | |
| CVE-2024-45784 | Apache Airflow: Sensitive configuration values are not masked in the logs by default | 7.5CISA ADP v3.1 | 1.3% | 2024-11-15 | Fix |
| CVE-2024-45611 | GLPI has a stored XSS at src/RSSFeed.php | 5.7CNA v3.1 | 0.3% | 2024-11-15 | Fix |
| CVE-2024-45610 | GLPI has a reflected XSS in ajax/cable.php | 6.5CNA v3.1 | 0.3% | 2024-11-15 | Fix |
| CVE-2024-45609 | GLPI has a reflected XSS in /front/stat.graph.php | 6.5CNA v3.1 | 0.3% | 2024-11-15 | Fix |
| CVE-2024-45608 | GLPI has an authenticated SQL injection | 6.5CNA v3.1 | 0.5% | 2024-11-15 | Fix |
| CVE-2024-44759 | Nuserp Nus-m9 Erp component /Doc/DownloadFile arbitrary file read | 7.5CISA ADP v3.1 | 0.4% | 2024-11-15 | |
| CVE-2024-44758 | Nuserp Nus-m9 Erp component /Production/UploadFile arbitrary file upload | 9.8CISA ADP v3.1 | 0.7% | 2024-11-15 | |
| CVE-2024-44625 | Remote code execution in Gogs | 8.8v3.1 | 16.1% | 2024-11-15 | Exploit codeFix |
| CVE-2024-43418 | GLPI has multiple reflected XSS | 6.5CNA v3.1 | 0.4% | 2024-11-15 | Fix |
| CVE-2024-43417 | glpi reflected XSS in software form | 6.5CNA v3.1 | 0.4% | 2024-11-15 | Fix |
| CVE-2024-43189 | IBM Concert Software information disclosure | 5.9CNA v3.1 | 0.3% | 2024-11-15 | Fix |
| CVE-2024-42499 | FitNesse path traversal | 5.3CISA ADP v3.1 | 0.7% | 2024-11-15 | Fix |
| CVE-2024-41785 | IBM Concert cross-site scripting | 6.1CNA v3.1 | 0.3% | 2024-11-15 | Fix |
| CVE-2024-41784 | IBM Sterling Secure Proxy directory traversal | 7.5CNA v3.1 | 0.7% | 2024-11-15 | Fix |
| CVE-2024-41679 | GLPI ticket form SQL injection | 6.5CNA v3.1 | 0.5% | 2024-11-15 | Fix |
| CVE-2024-41678 | GLPI has multiple reflected XSS | 6.5CNA v3.1 | 0.5% | 2024-11-15 | Fix |
| CVE-2024-40638 | GLPI allows account takeover via SQL injection in AJAX scripts | 8.1CNA v3.1 | 38.3% | 2024-11-15 | Emerging ThreatsFix |
| CVE-2024-39726 | IBM Engineering Insights XML external entity injection | 8.2CNA v3.1 | 0.7% | 2024-11-15 | Fix |
| CVE-2024-39610 | FitNesse cross-site scripting | 6.1v3.1 | 0.4% | 2024-11-15 | Fix |
| CVE-2024-38370 | GLPI allows API document download without rights | 5.3CNA v3.1 | 0.4% | 2024-11-15 | Fix |
| CVE-2024-24459 | HPE Athonet Core out-of-bounds read | 5.9CNA v3.1 | 0.4% | 2024-11-15 | |
| CVE-2024-24458 | HPE Athonet Core out-of-bounds read | 5.9CNA v3.1 | 0.4% | 2024-11-15 | |
| CVE-2024-24457 | HPE Athonet Core out-of-bounds read | 5.9CNA v3.1 | 0.4% | 2024-11-15 | |
| CVE-2024-24455 | HPE Athonet Core out-of-bounds read | 5.9CNA v3.1 | 0.4% | 2024-11-15 | |
| CVE-2024-24454 | HPE Athonet Core out-of-bounds read | 5.9CNA v3.1 | 0.4% | 2024-11-15 | |
| CVE-2024-24453 | HPE Athonet Core out-of-bounds read | 5.9CNA v3.1 | 0.4% | 2024-11-15 | |
| CVE-2024-24452 | HPE Athonet Core out-of-bounds read | 7.5CISA ADP v3.1 | 0.4% | 2024-11-15 | |
| CVE-2024-24450 | OpenAirInterface CN5G AMF PDU session resource setup response handler buffer overflow | 5.3CISA ADP v3.1 | 1.5% | 2024-11-15 | Exploit code |
| CVE-2024-24449 | An uninitialized pointer dereference in the NasPdu::NasPdu component of OpenAirInterface CN5G AMF up to v2.0.0 allows attackers to cause a Denial of Service (DoS) via a crafted InitialUEMessage message sent to the AMF. | 6.5CISA ADP v3.1 | 0.4% | 2024-11-15 | |
| CVE-2024-24447 | CN5G AMF PDU session resource setup response handler buffer overflow | 5.3CISA ADP v3.1 | 0.5% | 2024-11-15 | |
| CVE-2024-24446 | An uninitialized pointer dereference in OpenAirInterface CN5G AMF up to v2.0.0 allows attackers to cause a Denial of Service (DoS) via a crafted InitialContextSetupResponse message sent to the AMF. | 6.5CISA ADP v3.1 | 0.3% | 2024-11-15 | |
| CVE-2024-24431 | Open5GS ogs_nas_emm_decode function reachable assertion | 7.5CISA ADP v3.1 | 0.6% | 2024-11-15 | |
| CVE-2024-24426 | Reachable assertions in the NGAP_FIND_PROTOCOLIE_BY_ID function of OpenAirInterface Magma v1.8.0 and OAI EPC Federation v1.2.0 allow attackers to cause a Denial of Service (DoS) via a crafted NGAP packet. | 7.5CISA ADP v3.1 | 0.5% | 2024-11-15 | |
| CVE-2024-24425 | Magma AMF establish request handler out-of-bounds read | 6.5CISA ADP v3.1 | 0.5% | 2024-11-15 | |
| CVE-2024-23169 | RSA NetWitness Reports screen Where field cross-site scripting | 4.6CISA ADP v3.1 | 0.3% | 2024-11-15 | |
| CVE-2024-20373 | Cisco IOS and Cisco IOS XE SNMP Extended ACL Bypass vulnerability | 5.3CNA v3.1 | 0.5% | 2024-11-15 | Fix |
| CVE-2024-11263 | zephyrproject-rtos Zephyr arch: Riscv: Userspace: Potential security risk when CONFIG_RISCV_GP=y | 9.4CNA v3.1 | 0.2% | 2024-11-15 | Fix |
| CVE-2024-11262 | SourceCodester Student Record Management System View All Student Marks main stack-based overflow | 7.8v3.1 | 0.4% | 2024-11-15 | |
| CVE-2024-11261 | SourceCodester Student Record Management System Number of Students menu memory corruption | 6.1v3.1 | 0.3% | 2024-11-15 | |
| CVE-2024-11259 | code-projects Farmacia fornecedores.php cross-site scripting | 6.1v3.1 | 0.4% | 2024-11-15 | |
| CVE-2024-11258 | 1000 Projects Beauty Parlour Management System index.php SQL injection | 9.8v3.1 | 0.8% | 2024-11-15 | |
| CVE-2024-11257 | 1000 Projects Beauty Parlour Management System forgot-password.php SQL injection | 9.8v3.1 | 0.7% | 2024-11-15 | |
| CVE-2024-11256 | 1000 Projects Portfolio Management System MCA login.php SQL injection | 9.8v3.1 | 0.7% | 2024-11-15 | |
| CVE-2024-11251 | erzhongxmu Jeewms AuthInterceptor cgReportController.do SQL injection | 8.8v3.1 | 0.5% | 2024-11-15 | |
| CVE-2024-11250 | code-projects Inventory Management editProduct.php SQL injection | 9.8v3.1 | 0.7% | 2024-11-15 | |
| CVE-2024-11248 | Tenda AC10 SetSysAutoRebbotCfg formSetRebootTimer stack-based overflow | 8.8v3.1 | 1.3% | 2024-11-15 | |
| CVE-2024-11247 | SourceCodester Online Eyewear Shop Inventory Page Master.php cross-site scripting | 5.4v3.1 | 0.5% | 2024-11-15 | |
| CVE-2024-11246 | code-projects Farmacia adicionar-cliente.php cross-site scripting | 5.4v3.1 | 0.5% | 2024-11-15 | |
| CVE-2024-11245 | code-projects Farmacia editar-produto.php SQL injection | 7.5v3.1 | 0.6% | 2024-11-15 | |
| CVE-2024-11244 | code-projects Farmacia editar-cliente.php SQL injection | 9.8v3.1 | 0.7% | 2024-11-15 | |
| CVE-2024-11243 | code-projects Online Shop Store signup.php cross-site scripting | 6.1v3.1 | 0.6% | 2024-11-15 | |
| CVE-2024-11242 | ZZCMS Keyword Filtering ad_list.php SQL injection | 7.2v3.1 | 0.6% | 2024-11-15 | |
| CVE-2024-11241 | code-projects Job Recruitment reset.php SQL injection | 7.5v3.1 | 0.6% | 2024-11-15 | |
| CVE-2024-11240 | IBPhoenix ibWebAdmin Banco de Dados Tab database.php cross-site scripting | 6.1v3.1 | 0.4% | 2024-11-15 | |
| CVE-2024-11239 | Landray EKP API interface import.do deleteFile path traversal | 4.3v3.1 | 1.5% | 2024-11-15 | |
| CVE-2024-11238 | Landray EKP sysUiComponent.do delPreviewFile path traversal | 5.3v3.1 | 5.7% | 2024-11-15 | Nuclei |
| CVE-2024-11237 | TP-Link VN020 F3v(T) DHCP DISCOVER Packet Parser TP-Thumper stack-based overflow | 9.8v3.1 | 5.3% | 2024-11-15 | Exploit code |
| CVE-2024-11217 | Red Hat OpenShift Container Platform OAuth server vulnerability | 4.9CNA v3.1 | 0.4% | 2024-11-15 | |
| CVE-2024-11182 | MDaemon Email Server cross-site scripting (XSS) | 6.1NVD v3.1 | 33.3% | 2024-11-15 | KEVFix |
| CVE-2024-11120 | GeoVision Devices OS command injection | 9.8v3.1 | 28.4% | 2024-11-15 | KEVEmerging Threats |
| CVE-2024-10934 | OpenBSD NFS double free | 9.2CNA v4.0 | 0.4% | 2024-11-15 | Fix |
| CVE-2024-10924 | Really Simple Security (Free, Pro, and Pro Multisite) - authentication bypass | 9.8v3.1 | 81.7% | 2024-11-15 | NucleiMetasploitExploit codeFix |
| CVE-2024-10897 | Themeum Tutor LMS Elementor Addons missing authorization | 4.3CNA v3.1 | 0.3% | 2024-11-15 | Fix |
| CVE-2024-10825 | Hide My WP Ghost Security and Firewall WordPress plugin reflected cross-site scripting via URL | 6.1v3.1 | 0.3% | 2024-11-15 | Fix |
| CVE-2024-10793 | WP Activity Log WordPress plugin unauthenticated stored cross-site scripting via User_id parameter | 6.1NVD v3.1 | 1.4% | 2024-11-15 | Exploit codeFix |
| CVE-2024-10582 | Music Player for Elementor WordPress plugin unauthorized access | 4.3CNA v3.1 | 0.3% | 2024-11-15 | Fix |
| CVE-2024-10534 | Improper access control in Dataprom Informatics' PACS-ACSS | 9.8v3.1 | 0.4% | 2024-11-15 | Fix |
| CVE-2024-10443 | Synology BeePhotos OS command improper neutralization | 9.8CNA v3.1 | 28.0% | 2024-11-15 | NucleiFix |
| CVE-2024-10311 | External Database Based Actions WordPress plugin authenticated (Subscriber+) authentication bypass | 8.8v3.1 | 0.4% | 2024-11-15 | |
| CVE-2024-10260 | Tripetto WordPress plugin Unauthentiated stored cross-site scripting via form file upload | 6.1NVD v3.1 | 0.4% | 2024-11-15 | |
| CVE-2024-10113 | WP AdCenter Ad Manager and Adsense Ads WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.4% | 2024-11-15 | Fix |
| CVE-2024-10104 | Jobs for WordPress plugin Contributor+ stored XSS | 5.9CISA ADP v3.1 | 0.4% | 2024-11-15 | Fix |
| CVE-2024-9609 | LearnPress Export Import WordPress extension for LearnPress plugin reflected cross-site scripting | 6.1CNA v3.1 | 0.4% | 2024-11-15 | Fix |
| CVE-2024-9529 | Secure Custom Fields WordPress plugin Admin+ remote code execution | 6.6CISA ADP v3.1 | 0.4% | 2024-11-15 | Fix |
| CVE-2024-9500 | Autodesk ADP Desktop SDK privilege escalation | 7.8CNA v3.1 | 0.2% | 2024-11-15 | Fix |
| CVE-2024-9356 | Yotpo: Product and Photo Reviews for WooCommerce WordPress plugin reflected cross-site scripting | 6.1CNA v3.1 | 0.5% | 2024-11-15 | Fix |
| CVE-2024-8979 | Essential Addons for Elementor WordPress plugin information disclosure | 5.7NVD v3.1 | 0.5% | 2024-11-15 | Fix |
| CVE-2024-8978 | Essential Addons for Elementor WordPress plugin information disclosure | 5.7CNA v3.1 | 0.5% | 2024-11-15 | Fix |
| CVE-2024-8961 | Essential Addons for Elementor WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.3% | 2024-11-15 | Fix |
| CVE-2024-3334 | USB security feature bypass in Digital Guardian Windows Agent Prior to | 4.3CNA v3.1 | 0.1% | 2024-11-15 | Fix |
| CVE-2024-1240 | Open redirection in pyload/pyload | 6.1v3.1 | 0.3% | 2024-11-15 | Fix |
| CVE-2024-1097 | Stored XSS in craigk5n/WebCalendar | 5.4NVD v3.1 | 0.3% | 2024-11-15 | |
| CVE-2024-0875 | Stored XSS in openemr/openemr | 4.8NVD v3.1 | 0.4% | 2024-11-15 | Fix |
| CVE-2024-0787 | Improper restriction of excessive authentication attempts in phpipam/phpipam | 5.9v3.1 | 0.5% | 2024-11-15 | Fix |
| CVE-2024-52613 | justdan96 tsMuxer heap-based buffer under-read | 5.5v3.1 | 0.2% | 2024-11-14 | |
| CVE-2024-52524 | ReDoS in Giskard Scan text perturbation | 6.9CNA v4.0 | 0.8% | 2024-11-14 | Fix |
| CVE-2024-52505 | matrix-appservice-irc allows IRC command injection in provisioning API | 5.4CNA v3.1 | 0.4% | 2024-11-14 | Fix |
| CVE-2024-52396 | WOLF WordPress plugin CSV limited path traversal | 8.8v3.1 | 0.6% | 2024-11-14 | Fix |
| CVE-2024-52393 | Podlove Podcast Publisher WordPress plugin Admin+ remote code execution (RCE) | 7.2NVD v3.1 | 0.5% | 2024-11-14 | Fix |
| CVE-2024-52384 | Sage AI: Chatbots WordPress plugin wpmonks unrestricted file upload | 9.9CNA v3.1 | 0.5% | 2024-11-14 | |
| CVE-2024-52383 | Ai Auto Tool Content Writing Assistant WordPress plugin broken access control | 7.5CNA v3.1 | 0.5% | 2024-11-14 | Fix |
| CVE-2024-52382 | Matix Popup Builder WordPress plugin arbitrary option update to privilege escalation | 9.8CNA v3.1 | 1.0% | 2024-11-14 | Exploit code |
| CVE-2024-52381 | ZIJ KART WordPress plugin local file inclusion | 8.1CNA v3.1 | 0.6% | 2024-11-14 | |
| CVE-2024-52380 | Picsmize WordPress plugin arbitrary file upload | 10.0CNA v3.1 | 1.6% | 2024-11-14 | Exploit code |
| CVE-2024-52379 | kineticPay for WooCommerce WordPress plugin arbitrary file upload | 10.0CNA v3.1 | 0.5% | 2024-11-14 | Fix |
| CVE-2024-52378 | DigiPass WordPress plugin arbitrary file download | 7.5CNA v3.1 | 0.6% | 2024-11-14 | |
| CVE-2024-52377 | Instant Image Generator WordPress plugin arbitrary file upload | 10.0CNA v3.1 | 0.5% | 2024-11-14 | Fix |
| CVE-2024-52376 | Boat Rental Plugin for WordPress arbitrary file upload | 10.0CNA v3.1 | 0.5% | 2024-11-14 | |
| CVE-2024-52375 | Datasets Manager by Arttia Creative WordPress plugin arbitrary file upload | 10.0CNA v3.1 | 1.4% | 2024-11-14 | Exploit code |
| CVE-2024-52374 | Do That Task WordPress plugin arbitrary file upload | 10.0CNA v3.1 | 0.5% | 2024-11-14 | |
| CVE-2024-52373 | Devexhub Gallery WordPress plugin arbitrary file upload | 10.0CNA v3.1 | 0.5% | 2024-11-14 | |
| CVE-2024-52372 | Easy CSV Importer WordPress plugin arbitrary file upload | 10.0CNA v3.1 | 0.5% | 2024-11-14 | |
| CVE-2024-52371 | Global Gateway e4 WordPress plugin arbitrary file deletion | 8.6CNA v3.1 | 0.6% | 2024-11-14 | |
| CVE-2024-52370 | Hive Support WordPress plugin unrestricted file upload | 9.9CNA v3.1 | 0.5% | 2024-11-14 | Fix |
| CVE-2024-52369 | KBucket WordPress plugin arbitrary file upload | 9.9CNA v3.1 | 0.5% | 2024-11-14 | Fix |
| CVE-2024-52308 | Connecting to a malicious Codespaces via GH CLI could allow command execution on the user's computer | 8.0CNA v3.1 | 0.9% | 2024-11-14 | Fix |
| CVE-2024-52302 | OsamaTaher common-user-management profile picture upload endpoint unrestricted file upload | 8.7CNA v4.0 | 3.4% | 2024-11-14 | Exploit code |
| CVE-2024-51688 | FraudLabs Pro SMS Verification WordPress plugin CSRF to stored XSS | 7.1CNA v3.1 | 0.2% | 2024-11-14 | Fix |
| CVE-2024-51687 | Platform.ly Official WordPress plugin CSRF to stored XSS | 7.1CNA v3.1 | 0.2% | 2024-11-14 | Fix |
| CVE-2024-51684 | W3P SEO WordPress plugin CSRF to stored XSS | 7.1CNA v3.1 | 0.2% | 2024-11-14 | Fix |
| CVE-2024-51679 | Appointmind WordPress plugin CSRF to stored XSS | 6.1NVD v3.1 | 0.2% | 2024-11-14 | Fix |
| CVE-2024-51659 | Twitter @Anywhere Plus WordPress plugin CSRF to stored XSS | 7.1CNA v3.1 | 0.2% | 2024-11-14 | |
| CVE-2024-51658 | WP Course Manager WordPress plugin CSRF to stored XSS | 7.1CNA v3.1 | 0.2% | 2024-11-14 | |
| CVE-2024-51156 | 07FLY-CMS cross-site request forgery | 4.7CISA ADP v3.1 | 0.2% | 2024-11-14 | |
| CVE-2024-50968 | Adonesevangelista Agri-Trading Online Shopping System logic flaw | 7.5v3.1 | 0.9% | 2024-11-14 | Exploit code |
| CVE-2024-50843 | PHPGurukul User Registration and Login and User Management System directory listing | 5.3CISA ADP v3.1 | 0.6% | 2024-11-14 | |
| CVE-2024-50842 | Lopalopa E-learning Management System cross-site scripting | 5.4CISA ADP v3.1 | 0.4% | 2024-11-14 | |
| CVE-2024-50841 | Lopalopa E-learning Management System cross-site scripting | 5.4CISA ADP v3.1 | 0.4% | 2024-11-14 | |
| CVE-2024-50840 | Lopalopa E-learning Management System buffer overflow | 5.4CISA ADP v3.1 | 0.4% | 2024-11-14 | |
| CVE-2024-50839 | Lopalopa E-learning Management System buffer overflow | 5.4CISA ADP v3.1 | 0.4% | 2024-11-14 | |
| CVE-2024-50838 | Lopalopa E-learning Management System buffer overflow | 5.4CISA ADP v3.1 | 0.5% | 2024-11-14 | |
| CVE-2024-50837 | Lopalopa E-learning Management System cross-site scripting | 5.4CISA ADP v3.1 | 0.5% | 2024-11-14 | |
| CVE-2024-50836 | Lopalopa E-learning Management System cross-site scripting | 4.8v3.1 | 0.6% | 2024-11-14 | |
| CVE-2024-50835 | Lopalopa E-learning Management System SQL injection | 7.2v3.1 | 0.6% | 2024-11-14 | |
| CVE-2024-50834 | Lopalopa E-learning Management System /admin/teachers.php in KASHIPARA SQL injection | 7.2v3.1 | 0.6% | 2024-11-14 | |
| CVE-2024-50833 | Lopalopa E-learning Management System SQL injection | 9.8v3.1 | 0.6% | 2024-11-14 | |
| CVE-2024-50832 | Lopalopa E-learning Management System SQL injection | 7.2v3.1 | 0.6% | 2024-11-14 | |
| CVE-2024-50831 | Lopalopa E-learning Management System /admin/admin_user.php in kashipara SQL injection | 7.2v3.1 | 0.4% | 2024-11-14 | |
| CVE-2024-50830 | Lopalopa E-learning Management System SQL injection | 7.2v3.1 | 0.4% | 2024-11-14 | |
| CVE-2024-50829 | Lopalopa E-learning Management System SQL injection | 7.2v3.1 | 0.4% | 2024-11-14 | |
| CVE-2024-50828 | Lopalopa E-learning Management System SQL injection | 7.2v3.1 | 0.4% | 2024-11-14 | |
| CVE-2024-50827 | Lopalopa E-learning Management System SQL injection | 7.2v3.1 | 0.4% | 2024-11-14 | |
| CVE-2024-50826 | Lopalopa E-learning Management System SQL injection | 7.2v3.1 | 0.4% | 2024-11-14 | |
| CVE-2024-50825 | Lopalopa E-learning Management System SQL injection | 7.2v3.1 | 0.4% | 2024-11-14 | |
| CVE-2024-50824 | Lopalopa E-learning Management System SQL injection | 7.2v3.1 | 0.5% | 2024-11-14 | |
| CVE-2024-50823 | Lopalopa E-learning Management System SQL injection | 9.8v3.1 | 0.5% | 2024-11-14 | |
| CVE-2024-50306 | Apache Traffic Server: Server process can fail to drop privilege | 9.1CISA ADP v3.1 | 1.6% | 2024-11-14 | Fix |
| CVE-2024-50305 | Apache Traffic Server: Valid host field value can cause crashes | 7.5CISA ADP v3.1 | 0.9% | 2024-11-14 | Fix |
| CVE-2024-49778 | justdan96 tsMuxer heap-based buffer overflow | 8.8CISA ADP v3.1 | 0.7% | 2024-11-14 | |
| CVE-2024-49777 | justdan96 tsMuxer heap-based buffer overflow | 8.8CISA ADP v3.1 | 0.7% | 2024-11-14 | |
| CVE-2024-49776 | justdan96 tsMuxer incorrect buffer size calculation | 6.5CISA ADP v3.1 | 0.4% | 2024-11-14 | |
| CVE-2024-49362 | Joplin markdown preview link rendering remote code execution | 7.7CNA v3.1 | 1.0% | 2024-11-14 | Fix |
| CVE-2024-49025 | Microsoft Edge (Chromium-based) information disclosure | 5.4CNA v3.1 | 0.5% | 2024-11-14 | Fix |
| CVE-2024-48974 | Life2000 Ventilator does not perform proper file integrity checks when adopting firmware updates | 9.3CNA v3.1 | 0.2% | 2024-11-14 | Fix |
| CVE-2024-48973 | Debug port on Life2000 Ventilator serial interface is enabled by default | 9.3CNA v3.1 | 0.2% | 2024-11-14 | Fix |
| CVE-2024-48971 | Clinician Password and Serial Number Clinician Password are hard-coded in Life2000 Ventilator | 9.3CNA v3.1 | 0.2% | 2024-11-14 | Fix |
| CVE-2024-48970 | Life2000 Ventilator microcontroller lacks memory protection | 9.3CNA v3.1 | 0.2% | 2024-11-14 | Fix |
| CVE-2024-48967 | Life2000 ventilator and Service PC lack sufficient audit logging capabilities | 10.0CNA v3.1 | 0.6% | 2024-11-14 | Fix |
| CVE-2024-48966 | Life2000 service tools for test and calibration do not support user authentication | 10.0CNA v3.1 | 0.7% | 2024-11-14 | Fix |
| CVE-2024-48284 | PHPGurukul User Registration and Login and User Management System cross-site scripting | 4.8v3.1 | 0.5% | 2024-11-14 | |
| CVE-2024-47916 | Boa web server improper limitation of a pathname to a restricted directory (path traversal) | 7.5CNA v3.1 | 0.5% | 2024-11-14 | |
| CVE-2024-47915 | VaeMendis exposure of sensitive information to an unauthorized actor | 7.5CNA v3.1 | 0.4% | 2024-11-14 | Fix |
| CVE-2024-47914 | VaeMendis cross-site request forgery (CSRF) | 4.5CNA v3.1 | 0.2% | 2024-11-14 | Fix |
| CVE-2024-45670 | IBM Security Soar weak password recovery mechanism | 5.6CNA v3.1 | 0.3% | 2024-11-14 | Fix |
| CVE-2024-45642 | IBM Security ReaQta information disclosure | 5.3CNA v3.1 | 0.5% | 2024-11-14 | Fix |
| CVE-2024-45254 | VaeMendis improper neutralization of input during web page generation (cross-site scripting) | 7.5CNA v3.1 | 0.4% | 2024-11-14 | Fix |
| CVE-2024-45253 | Avigilon improper limitation of a pathname to a restricted directory (path traversal) | 7.5CNA v3.1 | 0.5% | 2024-11-14 | |
| CVE-2024-45099 | IBM Security ReaQta cross-site scripting | 3.1CNA v3.1 | 0.2% | 2024-11-14 | Fix |
| CVE-2024-42188 | HCL Connections is vulnerable to a broken access control | 3.7CNA v3.1 | 0.2% | 2024-11-14 | Fix |
| CVE-2024-41217 | justdan96 tsMuxer heap-based buffer overflow | 6.5CISA ADP v3.1 | 0.4% | 2024-11-14 | |
| CVE-2024-41209 | justdan96 tsMuxer heap-based buffer overflow | 8.8CISA ADP v3.1 | 0.6% | 2024-11-14 | |
| CVE-2024-41206 | justdan96 tsMuxer stack-based buffer over-read | 6.5CISA ADP v3.1 | 0.4% | 2024-11-14 | |
| CVE-2024-40579 | Virtuozzo Hybrid Server for WHMCS hostname parameter cross-site scripting | 6.1CISA ADP v3.1 | 0.4% | 2024-11-14 | |
| CVE-2024-39707 | Insyde IHISI function 0x49 can restore factory defaults for certain UEFI variables without further authentication by default, which could lead to a possible roll-back attack in certain platforms. This is fixed in: kernel 5.2, version 05.29.19; kernel 5.3, version 05.38.19; kernel 5.4, version 05.46. | 5.3CISA ADP v3.1 | 0.2% | 2024-11-14 | |
| CVE-2024-38479 | Apache Traffic Server: Cache key plugin is vulnerable to cache poisoning attack | 7.5CISA ADP v3.1 | 0.8% | 2024-11-14 | Fix |
| CVE-2024-37285 | Kibana arbitrary code execution via YAML deserialization | 9.1CNA v3.1 | 1.2% | 2024-11-14 | Fix |
| CVE-2024-31695 | Binance app fingerprint authentication authentication bypass | 9.8CISA ADP v3.1 | 0.7% | 2024-11-14 | |
| CVE-2024-11215 | Path traversal vulnerability in EasyPHP | 6.5CNA v3.1 | 0.8% | 2024-11-14 | |
| CVE-2024-11214 | SourceCodester Best Employee Management System profile.php unrestricted upload | 7.2v3.1 | 0.7% | 2024-11-14 | |
| CVE-2024-11213 | SourceCodester Best Employee Management System edit_role.php SQL injection | 7.2v3.1 | 0.5% | 2024-11-14 | |
| CVE-2024-11212 | SourceCodester Best Employee Management System fetch_product_details.php SQL injection | 8.8v3.1 | 0.7% | 2024-11-14 | |
| CVE-2024-11211 | EyouCMS Website Logo unrestricted upload | 7.2v3.1 | 0.6% | 2024-11-14 | |
| CVE-2024-11210 | EyouCMS FilemanagerLogic.php editFile path traversal | 5.4v3.1 | 0.6% | 2024-11-14 | |
| CVE-2024-11209 | Apereo CAS 2FA login improper authentication | 9.8v3.1 | 0.6% | 2024-11-14 | |
| CVE-2024-11208 | Apereo CAS login session expiration | 8.1v3.1 | 0.8% | 2024-11-14 | |
| CVE-2024-11207 | Apereo CAS login endpoint open redirect | 5.4v3.1 | 0.4% | 2024-11-14 | |
| CVE-2024-11206 | TECNO com.transsion.phoenix mobile application unauthorized access | 7.5CISA ADP v3.1 | 0.4% | 2024-11-14 | Fix |
| CVE-2024-11136 | Arbitrary file removal via path traversal in TCL Camera | 8.2CNA v4.0 | 0.3% | 2024-11-14 | |
| CVE-2024-10979 | PostgreSQL PL/Perl environment variable changes execute arbitrary code | 8.8CNA v3.1 | 4.4% | 2024-11-14 | Fix |
| CVE-2024-10978 | PostgreSQL SET ROLE, SET SESSION authorization reset to wrong user ID | 4.2CNA v3.1 | 0.7% | 2024-11-14 | Fix |
| CVE-2024-10977 | PostgreSQL libpq retains an error message from man-in-the-middle | 3.1CNA v3.1 | 0.4% | 2024-11-14 | Fix |
| CVE-2024-10976 | PostgreSQL row security below e.g. subqueries disregards user ID changes | 4.2CNA v3.1 | 0.8% | 2024-11-14 | Fix |
| CVE-2024-10962 | Migration, Backup, Staging WPvivid WordPress plugin unauthenticated PHP object injection | 8.8CNA v3.1 | 0.7% | 2024-11-14 | Fix |
| CVE-2024-10921 | Improper neutralization of null bytes may lead to buffer over-reads in MongoDB Server | 6.8CNA v3.1 | 0.6% | 2024-11-14 | Fix |
| CVE-2024-10571 | Chartify WordPress Chart plugin unauthenticated local file inclusion via source | 9.8CNA v3.1 | 4.8% | 2024-11-14 | NucleiExploit codeFix |
| CVE-2024-10397 | The OpenAFS Foundation OpenAFS preallocated buffer overflows in XDR responses | 7.8NVD v3.1 | 0.4% | 2024-11-14 | Fix |
| CVE-2024-10396 | The OpenAFS Foundation OpenAFS fileserver crash and possible information leak on StoreACL/FetchACL | 6.5NVD v3.1 | 0.6% | 2024-11-14 | Fix |
| CVE-2024-10394 | The OpenAFS Foundation OpenAFS theft of credentials in Unix client PAGs | 7.8NVD v3.1 | 0.2% | 2024-11-14 | Fix |
| CVE-2024-10146 | Simple File List WordPress plugin reflected cross-site scripting | 5.4CISA ADP v3.1 | 0.6% | 2024-11-14 | NucleiFix |
| CVE-2024-9834 | Improper data protection on Life2000 ventilator serial interface | 9.3CNA v3.1 | 0.1% | 2024-11-14 | Fix |
| CVE-2024-9832 | Baxter Life2000 Ventilation System clinician password login vulnerability | 9.3CNA v3.1 | 0.2% | 2024-11-14 | Fix |
| CVE-2024-9693 | Incorrect authorization in GitLab | 8.5CNA v3.1 | 0.6% | 2024-11-14 | Fix |
| CVE-2024-9633 | Incorrect Ownership Assignment in GitLab | 3.1CNA v3.1 | 0.5% | 2024-11-14 | Fix |
| CVE-2024-9472 | PAN-OS: Firewall denial of service (DoS) using Specially Crafted Traffic | 8.7CNA v4.0 | 0.4% | 2024-11-14 | Fix |
| CVE-2024-9186 | FunnelKit Automations bwfan-track-id parameter SQL injection | 8.6CISA ADP v3.1 | 2.3% | 2024-11-14 | NucleiFix |
| CVE-2024-8648 | Improper neutralization of input during web page generation (cross-site scripting) in GitLab | 6.1CNA v3.1 | 0.4% | 2024-11-14 | Fix |
| CVE-2024-8180 | Improper neutralization of input during web page generation (cross-site scripting) in GitLab | 5.4CNA v3.1 | 0.4% | 2024-11-14 | Fix |
| CVE-2024-7787 | Reflected XSS in ITG Computer Technology's vSRM Supplier Relationship Management System | 5.1CNA v4.0 | 0.4% | 2024-11-14 | Fix |
| CVE-2024-7730 | QEMU Qemu-kvm: Virtio-snd: Heap buffer overflow in virtio_snd_pcm_in_cb | 7.8NVD v3.1 | 0.3% | 2024-11-14 | Fix |
| CVE-2024-7404 | Improper restriction of rendered UI layers or frames in GitLab | 6.8CNA v3.1 | 0.5% | 2024-11-14 | Fix |
| CVE-2024-7124 | Reflected XSS in DInGO dLibra | 5.3CNA v4.0 | 1.1% | 2024-11-14 | Exploit codeFix |
| CVE-2024-6068 | Input validation vulnerability exists in Arena® Input Analyzer | 7.0CNA v4.0 | 0.2% | 2024-11-14 | Fix |
| CVE-2024-5920 | Palo Alto Networks PAN-OS cross-site scripting | 4.6CNA v4.0 | 0.3% | 2024-11-14 | Fix |
| CVE-2024-5919 | PAN-OS: Authenticated XML external entities (XXE) injection | 5.1CNA v4.0 | 0.3% | 2024-11-14 | Fix |
| CVE-2024-5918 | PAN-OS: Improper certificate validation enables Impersonation of a Legitimate GlobalProtect User | 5.3CNA v4.0 | 0.2% | 2024-11-14 | Fix |
| CVE-2024-5917 | PAN-OS: Server-side request forgery in WildFire | 2.1CNA v4.0 | 0.5% | 2024-11-14 | Fix |
| CVE-2024-5125 | XSS and open redirect via SVG file upload in parisneo/lollms-webui | 7.3CISA ADP v3.1 | 0.3% | 2024-11-14 | Fix |
| CVE-2024-5083 | Nexus Repository 2 stored XSS | 5.1CNA v4.0 | 0.4% | 2024-11-14 | Exploit codeFix |
| CVE-2024-5082 | Nexus Repository 2 remote code execution | 7.1CNA v4.0 | 2.7% | 2024-11-14 | NucleiExploit codeFix |
| CVE-2024-4343 | Python command injection in imartinez/PrivateGPT | 9.8CISA ADP v3.1 | 2.7% | 2024-11-14 | Fix |
| CVE-2024-4311 | Lack of login attempt rate-limiting in zenml-io/ZenML | 5.4CISA ADP v3.1 | 0.5% | 2024-11-14 | Fix |
| CVE-2024-3760 | lunary-ai Lunary password reset requests resource exhaustion | 7.5v3.1 | 0.5% | 2024-11-14 | Fix |
| CVE-2024-3502 | Exposure of sensitive information in lunary-ai/Lunary | 8.1NVD v3.1 | 0.4% | 2024-11-14 | Fix |
| CVE-2024-3501 | Exposure of sensitive information in lunary-ai/Lunary | 8.1NVD v3.1 | 0.4% | 2024-11-14 | Fix |
| CVE-2024-3447 | Qemu: Sdhci: Heap buffer overflow in sdhci_write_dataport | 6.0CNA v3.1 | 0.6% | 2024-11-14 | Fix |
| CVE-2024-3379 | Incorrect authorization in lunary-ai/Lunary | 8.1NVD v3.1 | 0.4% | 2024-11-14 | Fix |
| CVE-2024-2552 | PAN-OS: Arbitrary file delete vulnerability in the Command Line Interface (CLI) | 6.8CNA v4.0 | 0.5% | 2024-11-14 | Fix |
| CVE-2024-2551 | PAN-OS: Firewall denial of service (DoS) using a Specially Crafted Packet | 8.7CNA v4.0 | 0.5% | 2024-11-14 | Fix |
| CVE-2024-2550 | PAN-OS: Firewall denial of service (DoS) in GlobalProtect Gateway using a Specially Crafted Packet | 8.7CNA v4.0 | 0.5% | 2024-11-14 | Fix |
| CVE-2024-1682 | Unclaimed S3 Bucket Reference in psf/requests Documentation | 4.3CISA ADP v3.1 | 0.4% | 2024-11-14 | |
| CVE-2024-52554 | Script security bypass vulnerability in Jenkins Shared Library Version Override plugin | 8.8CISA ADP v3.1 | 0.5% | 2024-11-13 | Fix |
| CVE-2024-52553 | Session fixation vulnerability in Jenkins OpenId Connect Authentication Plugin | 8.8CISA ADP v3.1 | 0.6% | 2024-11-13 | Fix |
| CVE-2024-52552 | Stored XSS vulnerability in Jenkins Authorize Project Plugin | 8.0CISA ADP v3.1 | 0.7% | 2024-11-13 | Fix |
| CVE-2024-52551 | Restarting a run with revoked script approval allowed by Jenkins Pipeline: Declarative Plugin | 8.0CISA ADP v3.1 | 0.6% | 2024-11-13 | Fix |
| CVE-2024-52550 | Rebuilding a run with revoked script approval allowed by Jenkins Pipeline: Groovy Plugin | 8.0CISA ADP v3.1 | 0.4% | 2024-11-13 | Exploit codeFix |
| CVE-2024-52549 | Missing permission check in Jenkins Script Security Plugin | 4.3CISA ADP v3.1 | 0.4% | 2024-11-13 | Fix |
| CVE-2024-52306 | FileManager deserialization of untrusted data | 7.7CNA v3.1 | 0.6% | 2024-11-13 | Fix |
| CVE-2024-52305 | UnoPim stored XSS: Cookie hijacking through Create User function | 6.5CNA v3.1 | 0.2% | 2024-11-13 | Fix |
| CVE-2024-52300 | macro-pdfviewer has a XSS through the width parameter | 9.1CNA v3.1 | 0.4% | 2024-11-13 | Fix |
| CVE-2024-52299 | The PDF viewer macro allows accessing any attachment without access right checks | 7.5CNA v3.1 | 0.5% | 2024-11-13 | Fix |
| CVE-2024-52298 | Macro-pdfviewer's preview in WYSIWYG editor allows accessing any PDF document as the last author | 7.5CNA v3.1 | 0.7% | 2024-11-13 | Fix |
| CVE-2024-52295 | DataEase has a forged JWT token vulnerability | 9.3CNA v4.0 | 0.9% | 2024-11-13 | Fix |
| CVE-2024-52293 | Craft has a Potential remote code execution via missing path normalization and Twig SSTI | 7.2CNA v3.1 | 1.4% | 2024-11-13 | Fix |
| CVE-2024-52292 | Craft allows Attackers to Read arbitrary System files | 7.7CNA v3.1 | 0.7% | 2024-11-13 | Fix |
| CVE-2024-52291 | Craft CMS local file system validation path traversal | 8.5CNA v3.1 | 1.2% | 2024-11-13 | Fix |
| CVE-2024-52268 | Vektor VK All in One Expansion Unit cross-site scripting | 4.8v3.1 | 0.3% | 2024-11-13 | Fix |
| CVE-2024-51996 | symfony symphony has an authentication bypass via RememberMe | 7.5CNA v3.1 | 0.6% | 2024-11-13 | Exploit codeFix |
| CVE-2024-51027 | Ruijie NBR800G gateway networksafe.php command injection | 6.5CISA ADP v3.1 | 7.1% | 2024-11-13 | |
| CVE-2024-50972 | Angeljudesuarez Construction Management System printtool.php of Itsourcecode SQL injection | 7.2v3.1 | 0.7% | 2024-11-13 | Exploit code |
| CVE-2024-50971 | Angeljudesuarez Construction Management System print.php of Itsourcecode SQL injection | 7.2v3.1 | 0.7% | 2024-11-13 | Exploit code |
| CVE-2024-50970 | Nikoarroyocuraza Online Furniture Shopping Project orderview1.php of Itsourcecode SQL injection | 8.8v3.1 | 0.5% | 2024-11-13 | Exploit code |
| CVE-2024-50969 | Anisha Jonnys Liquor browse.php of Code-projects reflected cross-site scripting | 6.1v3.1 | 0.5% | 2024-11-13 | Exploit code |
| CVE-2024-50956 | RecvSocketData function of Inovance HCPLC_AM401-CPU1608TPTN buffer overflow | 6.5CISA ADP v3.1 | 0.3% | 2024-11-13 | |
| CVE-2024-50955 | XINJE XD5E-24R and XL5E-16T TCP message handling resource exhaustion | 7.5CISA ADP v3.1 | 0.4% | 2024-11-13 | |
| CVE-2024-50854 | Tendacn G3 out-of-bounds write | 8.8v3.1 | 0.6% | 2024-11-13 | |
| CVE-2024-50853 | Tendacn G3 command injection | 8.8v3.1 | 1.7% | 2024-11-13 | |
| CVE-2024-50852 | Tendacn G3 command injection | 8.8v3.1 | 1.7% | 2024-11-13 | |
| CVE-2024-49506 | openSUSE Tumbleweed fixed temporary file path in aeon-checks allows fixing of disk encryption key | 7.3CNA v4.0 | 0.1% | 2024-11-13 | Fix |
| CVE-2024-49505 | XSS vulnerability found in OpenSuse MirrorCache | 5.3CNA v4.0 | 0.3% | 2024-11-13 | Fix |
| CVE-2024-49504 | SUSE openSUSE Tumbleweed grub2 allows bypassing TPM-bound disk encryption on SL(E)M encrypted Images | 7.0CNA v4.0 | 0.3% | 2024-11-13 | Fix |
| CVE-2024-49379 | Remote code execution (RCE) via cross-site scripting (XSS) in Umbrel | 5.3CNA v4.0 | 1.3% | 2024-11-13 | Exploit codeFix |
| CVE-2024-48989 | Bosch Rexroth IndraDrive FWA-INDRV*-MP* denial of service | 7.5CNA v3.1 | 0.5% | 2024-11-13 | Fix |
| CVE-2024-48900 | Moodle: Idor when accessing list of badge recipients | 4.3CISA ADP v3.1 | 0.4% | 2024-11-13 | Fix |
| CVE-2024-48510 | Dotnetzip.semverd DotNetZip directory traversal | 9.8v3.1 | 2.0% | 2024-11-13 | Exploit codeFix |
| CVE-2024-47574 | Fortinet FortiClientWindows authentication bypass | 7.4CNA v3.1 | 0.5% | 2024-11-13 | Fix |
| CVE-2024-45879 | baltic-it TOPqw Webportal QWKalkulation file upload function cross-site scripting | 6.1CISA ADP v3.1 | 0.3% | 2024-11-13 | |
| CVE-2024-45878 | baltic-it TOPqw Webportal Stammdaten menu persistent cross-site scripting | 6.1CISA ADP v3.1 | 0.3% | 2024-11-13 | |
| CVE-2024-45877 | baltic-it TOPqw Webportal user management function incorrect authorization | 6.5CISA ADP v3.1 | 0.4% | 2024-11-13 | |
| CVE-2024-45876 | baltic-it TOPqw Webportal login form SQL injection | 6.5CISA ADP v3.1 | 0.3% | 2024-11-13 | |
| CVE-2024-45875 | baltic-it TOPqw Webportal user creation function SQL injection | 5.4CISA ADP v3.1 | 0.3% | 2024-11-13 | |
| CVE-2024-45594 | Decidim allows cross-site scripting (XSS) in the online or hybrid meeting embeds | 7.7CNA v3.1 | 0.2% | 2024-11-13 | Fix |
| CVE-2024-43093 | Android Framework privilege escalation | 7.3v3.1 | 0.7% | 2024-11-13 | KEVFix |
| CVE-2024-43091 | Google Android SkEmbossMaskFilter.cpp out-of-bounds write | 9.8v3.1 | 0.5% | 2024-11-13 | Fix |
| CVE-2024-43090 | Google Android multiple locations information disclosure | 5.0v3.1 | 0.2% | 2024-11-13 | Fix |
| CVE-2024-43089 | Google Android MediaProvider.java privilege escalation | 7.8v3.1 | 0.1% | 2024-11-13 | Fix |
| CVE-2024-43088 | Google Android AppInfoBase.java privilege escalation | 7.8v3.1 | 0.2% | 2024-11-13 | Fix |
| CVE-2024-43087 | Google Android AccessibilitySettings.java privilege escalation | 7.8v3.1 | 0.1% | 2024-11-13 | Fix |
| CVE-2024-43086 | Google Android AccountManagerService.java information disclosure | 5.5v3.1 | 0.1% | 2024-11-13 | Fix |
| CVE-2024-43085 | Google Android UsbDeviceManager.java privilege escalation | 7.8v3.1 | 0.1% | 2024-11-13 | Fix |
| CVE-2024-43084 | Google Android multiple files information disclosure | 5.5v3.1 | 0.1% | 2024-11-13 | Fix |
| CVE-2024-43083 | Google Android WifiConfigurationUtil.java denial of service | 5.5v3.1 | 0.1% | 2024-11-13 | Fix |
| CVE-2024-43082 | Google Android EditUserPhotoController.java information disclosure | 5.5v3.1 | 0.1% | 2024-11-13 | Fix |
| CVE-2024-43081 | Google Android InstallPackageHelper.java privilege escalation | 7.8v3.1 | 0.1% | 2024-11-13 | Fix |
| CVE-2024-43080 | Google Android AppRestrictionsFragment.java privilege escalation | 7.8v3.1 | 0.1% | 2024-11-13 | Fix |