CVE-2024 list

CVE-2024 records published in November 2024

Page three of four: records 2,001 to 3,000 of the 3,750 published in November 2024, newest first. The first page carries the figures for November 2024.

CVE-2024 records published in November 2024, newest first: records 2,001 to 3,000 of 3,750
CVE Summary CVSS EPSS Published Signals
CVE-2024-42834Incognito Service Activation Center UI Create Customer API stored cross-site scripting6.1CISA ADP v3.10.5%2024-11-13
CVE-2024-41167Intel(R) Server Board M10JNP2SB Family UEFI firmware in some improper input validation8.7CNA v4.00.2%2024-11-13Fix
CVE-2024-40885Intel(R) Server M20NTP BIOS UEFI firmware of some use-after-free8.7CNA v4.00.1%2024-11-13Fix
CVE-2024-40671Google Android devicemem_server.c arbitrary code execution7.8v3.10.1%2024-11-13Fix
CVE-2024-40661Google Android AdminRestrictedPermissionsUtils.java privilege escalation7.8v3.10.1%2024-11-13Fix
CVE-2024-40660Google Android SurfaceFlinger.cpp privilege escalation7.8v3.10.1%2024-11-13Fix
CVE-2024-40443oretnom23 Computer Laboratory Management System SQL injection4.3CISA ADP v3.10.8%2024-11-13Exploit code
CVE-2024-40410Cybelesoft Thinfinity Workspace hard-coded credentials4.8CISA ADP v3.10.1%2024-11-13Fix
CVE-2024-40408Cybelesoft Thinfinity Workspace missing authentication7.3CISA ADP v3.10.3%2024-11-13Fix
CVE-2024-40407Cybelesoft Thinfinity Workspace Cybele software information disclosure7.5CISA ADP v3.10.4%2024-11-13Fix
CVE-2024-40405Cybelesoft Thinfinity Workspace missing authentication8.1CISA ADP v3.10.5%2024-11-13Fix
CVE-2024-40404Cybelesoft Thinfinity Workspace missing authentication9.8CISA ADP v3.10.5%2024-11-13Fix
CVE-2024-39811Intel(R) Server M20NTP Family UEFI firmware for some improper input validation5.3CNA v4.00.2%2024-11-13Fix
CVE-2024-39766Intel(R) Neural Compressor software SQL command in some improper neutralization7.3CNA v4.00.2%2024-11-13Fix
CVE-2024-39712Ivanti Connect Secure argument injection9.1CNA v3.01.7%2024-11-13Fix
CVE-2024-39711Ivanti Connect Secure argument injection9.1CNA v3.01.7%2024-11-13Fix
CVE-2024-39710Ivanti Connect Secure argument injection9.1CNA v3.01.9%2024-11-13Fix
CVE-2024-39709Ivanti Connect Secure incorrect permission assignment7.8CISA ADP v3.10.3%2024-11-13Fix
CVE-2024-39609Intel(R) Server Board M70KLP UEFI firmware for some improper access control8.7CNA v4.00.1%2024-11-13Fix
CVE-2024-39368Intel(R) Neural Compressor software SQL command improper neutralization8.6CNA v4.00.3%2024-11-13Fix
CVE-2024-39285Intel(R) Server M20NTP Family UEFI firmware in some improper access control5.6CNA v4.00.1%2024-11-13Fix
CVE-2024-38668Intel(R) Quartus(R) Prime Standard Edition software uncontrolled search path5.4CNA v4.00.2%2024-11-13Fix
CVE-2024-38665Intel(R) Graphics Drivers some out-of-bounds write6.9CNA v4.00.2%2024-11-13Fix
CVE-2024-38660Intel(R) Xeon(R) processor family (E-Core) protection mechanism failure2.0CNA v4.00.2%2024-11-13Fix
CVE-2024-38656Ivanti Connect Secure argument injection9.1CISA ADP v3.11.7%2024-11-13Fix
CVE-2024-38655Ivanti Connect Secure argument injection7.2NVD v3.11.7%2024-11-13Fix
CVE-2024-38654Ivanti Secure Access Client out-of-bounds read4.4CNA v3.00.3%2024-11-13Fix
CVE-2024-38649Ivanti Connect Secure IPsec out-of-bounds write7.5v3.11.9%2024-11-13Fix
CVE-2024-38387Intel(R) Graphics Driver installers uncontrolled search path5.4CNA v4.00.2%2024-11-13
CVE-2024-38383Intel(R) Quartus(R) Prime Pro Edition software uncontrolled search path5.4CNA v4.00.2%2024-11-13Fix
CVE-2024-37400Ivanti Connect Secure out-of-bounds read7.5CNA v3.02.1%2024-11-13Fix
CVE-2024-37398Ivanti Secure Access Client privilege escalation7.8v3.10.3%2024-11-13Fix
CVE-2024-37376Ivanti Endpoint Manager SQL injection7.2v3.13.2%2024-11-13Fix
CVE-2024-37027Intel(R) VTune(TM) Profiler software some improper input validation5.2CNA v4.00.2%2024-11-13Fix
CVE-2024-37025Intel(R) Advanced Link Analyzer Standard Edition software installer privilege escalation5.4CNA v4.00.2%2024-11-13Fix
CVE-2024-37024ACAT software maintained by Intel(R) uncontrolled search path5.4CNA v4.00.2%2024-11-13Fix
CVE-2024-36488Intel(R) DSA some improper access control5.4CNA v4.00.2%2024-11-13Fix
CVE-2024-36482Intel(R) CIP software some improper input validation7.1CNA v4.00.2%2024-11-13Fix
CVE-2024-36294Intel(R) DSA software insecure inherited permissions5.4CNA v4.00.1%2024-11-13Fix
CVE-2024-36284Intel(R) Neural Compressor software some improper input validation5.1CNA v4.00.3%2024-11-13Fix
CVE-2024-36282Intel(R) Server Board S2600ST Family BIOS and Firmware Update software improper input validation7.1CNA v4.00.2%2024-11-13
CVE-2024-36276Intel(R) CIP software insecure inherited permissions5.4CNA v4.00.1%2024-11-13Fix
CVE-2024-36275Intel(R) Optane(TM) PMem Management software some null pointer dereference5.8CNA v4.00.2%2024-11-13Fix
CVE-2024-36253Intel(R) SDP Tool uncontrolled search path5.4CNA v4.00.2%2024-11-13
CVE-2024-36245Intel(R) VTune(TM) Profiler software some uncontrolled search path5.4CNA v4.00.2%2024-11-13Fix
CVE-2024-36242Intel(R) Processors SPP for some protection mechanism failure7.3CNA v4.00.2%2024-11-13Fix
CVE-2024-35245Intel(R) PROSet/Wireless WiFi Software some uncontrolled search path5.4CNA v4.00.2%2024-11-13Fix
CVE-2024-35201Intel(R) SDP Tool incorrect default permissions5.4CNA v4.00.1%2024-11-13
CVE-2024-34787Ivanti Endpoint Manager path traversal7.8v3.117.9%2024-11-13Fix
CVE-2024-34784Ivanti Endpoint Manager SQL injection7.2v3.11.7%2024-11-13Fix
CVE-2024-34782Ivanti Endpoint Manager SQL injection7.2v3.11.7%2024-11-13Fix
CVE-2024-34781Ivanti Endpoint Manager SQL injection7.2v3.167.7%2024-11-13Fix
CVE-2024-34780Ivanti Endpoint Manager SQL injection7.2v3.11.7%2024-11-13Fix
CVE-2024-34776Intel(R) SGX SDK software some out-of-bounds write2.0CNA v4.00.1%2024-11-13Fix
CVE-2024-34747Google Android devicemem_server.c use-after-free7.8v3.10.1%2024-11-13Fix
CVE-2024-34729Google Android multiple locations arbitrary code execution7.8v3.10.1%2024-11-13Fix
CVE-2024-34719Google Android multiple locations insecure permissions7.8v3.10.1%2024-11-13Fix
CVE-2024-34170Intel(R) Graphics Drivers denial of service6.9CNA v4.00.2%2024-11-13Fix
CVE-2024-34167Intel(R) Server Board S2600ST Family BIOS and Firmware Update software uncontrolled search path5.4CNA v4.00.2%2024-11-13
CVE-2024-34165Intel(R) oneAPI DPC++/C++ Compiler some uncontrolled search path5.4CNA v4.00.2%2024-11-13Fix
CVE-2024-34164Intel(R) MAS software some uncontrolled search path5.4CNA v4.00.2%2024-11-13Fix
CVE-2024-34028Intel(R) Graphics Offline Compiler for OpenCL(TM) Code software some uncontrolled search path5.4CNA v4.00.2%2024-11-13Fix
CVE-2024-34023Intel(R) Graphics Drivers some untrusted pointer dereference6.9CNA v4.00.2%2024-11-13Fix
CVE-2024-34022Thunderbolt(TM) Share software some improper access control5.4CNA v4.00.2%2024-11-13Fix
CVE-2024-33624Intel(R) PROSet/Wireless WiFi Software improper input validation5.3CNA v4.00.3%2024-11-13Fix
CVE-2024-33617Intel(R) QAT Engine for OpenSSL software some insufficient control flow management8.2CNA v4.00.5%2024-11-13Fix
CVE-2024-33611Intel(R) PROSet/Wireless WiFi Software improper input validation4.6CNA v4.00.2%2024-11-13Fix
CVE-2024-32847Ivanti Endpoint Manager SQL injection7.2v3.13.2%2024-11-13Fix
CVE-2024-32844Ivanti Endpoint Manager SQL injection7.2CISA ADP v3.11.7%2024-11-13Fix
CVE-2024-32841Ivanti Endpoint Manager SQL injection7.2v3.13.4%2024-11-13Fix
CVE-2024-32839Ivanti Endpoint Manager SQL injection7.2v3.13.4%2024-11-13Fix
CVE-2024-32667OpenCL(TM) software out-of-bounds read2.4CNA v4.00.2%2024-11-13Fix
CVE-2024-32485Intel(R) VROC software some improper input validation2.4CNA v4.00.2%2024-11-13Fix
CVE-2024-32483Intel(R) EMA software improper access control7.0CNA v4.00.2%2024-11-13Fix
CVE-2024-32048Intel(R) Distribution of OpenVINO(TM) Model Server software improper input validation6.0CNA v4.00.3%2024-11-13Fix
CVE-2024-32044Intel(R) Arc(TM) Pro Graphics improper access control5.4CNA v4.00.2%2024-11-13Fix
CVE-2024-31407Intel High Level Synthesis Compiler for Quartus Prime Pro Edition privilege escalation5.4CNA v4.00.2%2024-11-13Fix
CVE-2024-31337Google Android rgxta3d.c arbitrary code execution7.8v3.10.1%2024-11-13Fix
CVE-2024-31158Intel(R) Server Board S2600BP Family UEFI firmware in some improper input validation8.7CNA v4.00.2%2024-11-13Fix
CVE-2024-31154Intel(R) Server S2600BPBR UEFI firmware for some improper input validation8.7CNA v4.00.2%2024-11-13Fix
CVE-2024-31074Intel(R) QAT Engine for OpenSSL software some timing side channel8.2CNA v4.00.5%2024-11-13Fix
CVE-2024-29211Ivanti Secure Access Client race condition4.7NVD v3.10.3%2024-11-13Fix
CVE-2024-29085BigDL software maintained by Intel(R) improper access control5.1CNA v4.00.2%2024-11-13Fix
CVE-2024-29083Intel(R) Distribution for Python software some incorrect default permissions5.4CNA v4.00.2%2024-11-13Fix
CVE-2024-29079Intel(R) VROC software some insufficient control flow management6.9CNA v4.00.2%2024-11-13Fix
CVE-2024-29077JAM STAPL Player software some improper access control5.4CNA v4.00.2%2024-11-13Fix
CVE-2024-29076Intel(R) CST software uncaught exception6.8CNA v4.00.2%2024-11-13Fix
CVE-2024-28952Intel(R) IPP software uncontrolled search path5.4CNA v4.00.2%2024-11-13Fix
CVE-2024-28950Intel(R) oneAPI Math Kernel Library software uncontrolled search path5.4CNA v4.00.2%2024-11-13Fix
CVE-2024-28885Intel(R) QAT Engine for OpenSSL software some observable discrepancy8.2CNA v4.00.4%2024-11-13Fix
CVE-2024-28881Intel(R) Fortran Compiler Classic software uncontrolled search path5.4CNA v4.00.2%2024-11-13Fix
CVE-2024-28169BigDL software maintained by Intel(R) cleartext transmission of sensitive information4.3CNA v4.00.1%2024-11-13Fix
CVE-2024-28051Intel(R) VPL software some out-of-bounds read1.0CNA v4.00.2%2024-11-13Fix
CVE-2024-28049Intel PROSet/Wireless and Killer Wi-Fi firmware denial of service6.8CNA v4.00.2%2024-11-13Fix
CVE-2024-28030Intel(R) VPL software some null pointer dereference1.0CNA v4.00.2%2024-11-13Fix
CVE-2024-28028Intel(R) Neural Compressor software some improper input validation7.7CNA v4.00.3%2024-11-13Fix
CVE-2024-27200Intel(R) Granulate(TM) software some improper access control4.8CNA v4.00.2%2024-11-13Fix
CVE-2024-26017Intel(R) Rendering Toolkit software some uncontrolled search path5.4CNA v4.00.2%2024-11-13Fix
CVE-2024-25647Intel(R) Binary Configuration Tool software incorrect default permissions5.4CNA v4.00.1%2024-11-13Fix
CVE-2024-25565Intel(R) Xeon(R) Processors UEFI firmware for some insufficient control flow management4.8CNA v4.00.2%2024-11-13Fix
CVE-2024-25563Intel(R) PROSet/Wireless Software and Intel(R) Killer(TM) Wi-Fi improper initialization4.6CNA v4.00.2%2024-11-13Fix
CVE-2024-24985Intel(R) processors with Intel(R) ACTM some Intel(R) processors resource exposure8.5CNA v4.00.2%2024-11-13Fix
CVE-2024-24984Intel(R) Wireless Bluetooth(R) products improper input validation6.8CNA v4.00.3%2024-11-13Fix
CVE-2024-23919Intel(R) Graphics software privilege escalation4.8CNA v4.00.2%2024-11-13Fix
CVE-2024-23918Intel Xeon processor memory controller configuration with SGX vulnerability8.8CNA v4.00.3%2024-11-13Fix
CVE-2024-23715Google Android pmr.c out-of-bounds write7.8v3.10.1%2024-11-13Fix
CVE-2024-23312Intel(R) Binary Configuration Tool software uncontrolled search path5.4CNA v4.00.2%2024-11-13Fix
CVE-2024-23198Intel(R) PROSet/Wireless Software and Intel(R) Killer(TM) Wi-Fi products improper input validation6.8CNA v4.00.2%2024-11-13Fix
CVE-2024-22185Intel(R) processors with Intel(R) ACTM time-of-check time-of-use race condition8.5CNA v4.00.1%2024-11-13Fix
CVE-2024-218534th and 5th Generation Intel(R) Xeon(R) Processors denial of service5.7CNA v4.00.2%2024-11-13Fix
CVE-2024-21850Intel(R) TDX Seamldr module software sensitive information not cleared before reuse8.3CNA v4.00.2%2024-11-13Fix
CVE-2024-21820Intel Xeon processors SGX memory controller configuration privilege escalation8.5CNA v4.00.2%2024-11-13Fix
CVE-2024-21808Intel(R) VPL software privilege escalation1.0CNA v4.00.2%2024-11-13Fix
CVE-2024-21799Intel(R) Extension for Transformers software path traversal6.9CNA v4.00.7%2024-11-13Fix
CVE-2024-21783Intel(R) VPL software integer overflow2.4CNA v4.00.2%2024-11-13Fix
CVE-2024-21541dom-iterator code execution9.8v3.11.1%2024-11-13Fix
CVE-2024-11193YugabyteDB Anywhere Yugabyte Anywhere information disclosure5.0CNA v4.00.3%2024-11-13Fix
CVE-2024-11175Public CMS Voting Management save cross-site scripting4.8v3.10.5%2024-11-13
CVE-2024-11165YugabyteDB Anywhere information disclosure5.7CNA v4.00.1%2024-11-13Fix
CVE-2024-11159Mozilla Thunderbird cleartext storage of sensitive information4.3v3.10.3%2024-11-13Fix
CVE-2024-11150WordPress User Extra Fields plugin unauthenticated arbitrary file deletion9.8CNA v3.11.4%2024-11-13Fix
CVE-2024-11143Kognetiks Chatbot for WordPress WordPress plugin cross-site request forgery4.3CNA v3.10.2%2024-11-13Fix
CVE-2024-11028MultiManager WP Manage All Your WordPress Sites Easily plugin authentication bypass9.8CNA v3.11.3%2024-11-13Fix
CVE-2024-10887NiceJob WordPress plugin authenticated (Contributor+) stored cross-site scripting6.4CNA v3.10.5%2024-11-13Fix
CVE-2024-10882Product Delivery Date for WooCommerce - Lite WordPress plugin reflected cross-site scripting6.1CNA v3.10.5%2024-11-13Fix
CVE-2024-10877AFI The Easiest Integration WordPress plugin reflected cross-site scripting6.1CNA v3.10.6%2024-11-13Fix
CVE-2024-10854Buy one click WooCommerce WordPress plugin missing authorization authenticated settings import4.3CNA v3.10.4%2024-11-13Fix
CVE-2024-10853Buy one click WooCommerce WordPress plugin missing authorization authenticated order deletion4.3v3.10.4%2024-11-13Fix
CVE-2024-10852Buy one click WooCommerce WordPress plugin missing authorization authenticated settings export4.3CNA v3.10.4%2024-11-13Fix
CVE-2024-10851Razorpay Payment Button WordPress plugin reflected cross-site scripting6.1CNA v3.10.5%2024-11-13Fix
CVE-2024-10850Razorpay Payment Button for Elementor WordPress plugin reflected cross-site scripting6.1CNA v3.10.5%2024-11-13Fix
CVE-2024-10828Advanced Order Export For WooCommerce WordPress plugin unauthenticated PHP object injection9.8v3.11.4%2024-11-13Fix
CVE-2024-10820WooCommerce Upload Files WordPress plugin unauthenticated arbitrary file upload9.8v3.11.2%2024-11-13Fix
CVE-2024-10816LUNA RADIO PLAYER WordPress plugin unauthenticated arbitrary file read7.5CNA v3.11.1%2024-11-13Fix
CVE-2024-10802Hash Elements WordPress plugin missing authorization to unauthenticated Draft post Title exposure5.3CNA v3.10.6%2024-11-13Fix
CVE-2024-10800WordPress User Extra Fields plugin missing authorization authenticated privilege escalation8.8CNA v3.10.8%2024-11-13Fix
CVE-2024-10794Boostify Header Footer Builder for Elementor WordPress plugin post disclosure4.3CNA v3.10.5%2024-11-13Fix
CVE-2024-10778BuddyPress Builder for Elementor BuddyBuilder WordPress plugin post disclosure4.3CNA v3.10.5%2024-11-13Fix
CVE-2024-10717Styler for Ninja Forms WordPress plugin arbitrary option deletion via deactivate_license6.5CNA v3.10.4%2024-11-13
CVE-2024-10684Kognetiks Chatbot for WordPress plugin reflected cross-site scripting6.1CNA v3.10.4%2024-11-13Fix
CVE-2024-10629GPX Viewer WordPress plugin authenticated (Subscriber+) arbitrary file creation8.8CNA v3.11.7%2024-11-13Exploit codeFix
CVE-2024-10593WPForms Easy Form Builder for WordPress plugin cross-site request forgery to Plugin's Log deletion4.3CNA v3.10.3%2024-11-13Fix
CVE-2024-10577Fat Rat Collect WordPress plugin reflected cross-site scripting6.1CNA v3.10.5%2024-11-13Fix
CVE-2024-10575Schneider Electric EcoStruxure IT Gateway missing authorization10.0CNA v4.00.6%2024-11-13Fix
CVE-2024-10531Kognetiks Chatbot for WordPress plugin missing authorization authenticated Assistant update4.3v3.10.5%2024-11-13Fix
CVE-2024-10530Kognetiks Chatbot for WordPress plugin missing authorization authenticated Assistant Addition4.3CNA v3.10.5%2024-11-13Fix
CVE-2024-10529Kognetiks Chatbot for WordPress plugin missing authorization authenticated Assistant deletion5.3CNA v3.10.5%2024-11-13Fix
CVE-2024-10174WP Project Manager WordPress plugin insecure direct object reference7.3CNA v3.10.7%2024-11-13Fix
CVE-2024-10038WP-Strava WordPress plugin authenticated (Administrator+) stored cross-site scripting6.1CNA v3.10.4%2024-11-13
CVE-2024-10013Progress UI for WinForms format provider unsafe deserialization7.8CNA v3.10.2%2024-11-13Fix
CVE-2024-10012Progress UI for WPF format provider unsafe deserialization7.8CNA v3.10.2%2024-11-13Fix
CVE-2024-9682Royal Elementor Addons and Templates WordPress plugin DOM-based stored cross-site scripting5.4v3.10.4%2024-11-13Fix
CVE-2024-9668Royal Elementor Addons and Templates WordPress plugin stored cross-site scripting5.4v3.10.4%2024-11-13Fix
CVE-2024-9614Constant Contact Forms by MailMunch WordPress plugin reflected cross-site scripting6.1CNA v3.10.5%2024-11-13Fix
CVE-2024-9578Hide Links WordPress plugin unauthenticated shortcode execution5.3CNA v3.10.6%2024-11-13
CVE-2024-9477XSS in AirTies' AIR4443 Firmware6.1v3.10.2%2024-11-13
CVE-2024-9476Privilege escalation vulnerability for Organizations in Grafana5.1CNA v4.00.2%2024-11-13Fix
CVE-2024-9426Aqua SVG Sprite WordPress plugin stored cross-site scripting6.4CNA v3.10.3%2024-11-13
CVE-2024-9413Arm SCP-Firmware improper exception handling8.0CISA ADP v3.10.4%2024-11-13Fix
CVE-2024-9409Schneider Electric PowerLogic PM5320 resource exhaustion8.7CNA v4.00.8%2024-11-13Fix
CVE-2024-9059Royal Elementor Addons and Template WordPress plugin DOM-based stored cross-site scripting5.4v3.10.4%2024-11-13Fix
CVE-2024-8985Social Proof (Testimonials) Slider WordPress plugin stored cross-site scripting6.4CNA v3.10.4%2024-11-13
CVE-2024-8938Schneider Electric Modicon M340 CPU man-in-the-middle9.2CNA v4.00.5%2024-11-13Fix
CVE-2024-8937Schneider Electric Modicon M340 CPU man-in-the-middle8.3CNA v4.00.6%2024-11-13Fix
CVE-2024-8936Schneider Electric Modicon M340 CPU improper input validation8.3CNA v4.00.5%2024-11-13Fix
CVE-2024-8935Schneider Electric Modicon M340 CPU authentication bypass by spoofing7.7CNA v4.00.5%2024-11-13Fix
CVE-2024-8933Schneider Electric Modicon M340 CPU improper message integrity enforcement7.5CNA v4.00.3%2024-11-13Fix
CVE-2024-8874kaminskym AJAX Login and Registration modal popup + inline form reflected cross-site scripting6.1CNA v3.10.5%2024-11-13Fix
CVE-2024-8049Telerik Document Processing Improper Handling of Memory Resources6.5CNA v3.10.4%2024-11-13Fix
CVE-2024-8001VIWIS LMS print handler missing authorization4.3v3.10.8%2024-11-13
CVE-2024-7295Progress Telerik Report Server local asset encryption hard-coded credentials7.1CNA v3.10.1%2024-11-13Fix
CVE-2024-4741OpenSSL use-after-free with SSL_free_buffers7.5CISA ADP v3.12.9%2024-11-13Fix
CVE-2024-52301Laravel allows environment manipulation via query string8.7CNA v4.044.8%2024-11-12Exploit codeFix
CVE-2024-52297Tolgee's configuration all configuration properties leaked in public configuration DTO9.8CNA v3.10.6%2024-11-12Fix
CVE-2024-52296libosdp has a null pointer deref in osdp_reply_name6.5CNA v3.10.3%2024-11-12Fix
CVE-2024-52010Zoraxy has an authenticated command injection in the Web SSH feature8.6CNA v4.01.5%2024-11-12Exploit codeFix
CVE-2024-51750Element Web message rendering vulnerability5.0CNA v3.10.5%2024-11-12Fix
CVE-2024-51749Element Web attachment thumbnails UI misrepresentation3.5CNA v3.10.3%2024-11-12Fix
CVE-2024-51722Vulnerabilities in SecuSUITE Server Components Impact SecuSUITE6.4CNA v3.10.1%2024-11-12
CVE-2024-51721Vulnerabilities in SecuSUITE Server Components Impact SecuSUITE7.3CNA v3.10.2%2024-11-12
CVE-2024-51720Vulnerabilities in SecuSUITE Server Components Impact SecuSUITE4.8CNA v3.10.3%2024-11-12
CVE-2024-51566FreeBSD bhyve(8) NVMe driver to guest-induced infinite loops6.5CISA ADP v3.10.4%2024-11-12Fix
CVE-2024-51565FreeBSD bhyve(8) hda driver buffer over-read6.5CISA ADP v3.10.4%2024-11-12Fix
CVE-2024-51564FreeBSD bhyve(8) infinite loop in the hda audio driver7.5CISA ADP v3.10.5%2024-11-12Fix
CVE-2024-51563FreeBSD bhyve(8) virtio_vq_recordon time-of-check to time-of-use race6.5CISA ADP v3.10.3%2024-11-12Fix
CVE-2024-51562FreeBSD bhyve(8) nvme_opc_get_log_page buffer over-read6.5CISA ADP v3.10.4%2024-11-12Fix
CVE-2024-51179Open5GS improper resource release7.5CISA ADP v3.11.1%2024-11-12Exploit code
CVE-2024-51094snipeitapp Snipe-IT CSV injection8.0CISA ADP v3.10.4%2024-11-12
CVE-2024-51093Cross-site scripting vulnerability in Snipe-IT8.7v3.10.4%2024-11-12
CVE-2024-50572Siemens RUGGEDCOM RM1224 LTE(4G) EU injection8.6CNA v4.00.7%2024-11-12Fix
CVE-2024-50561Siemens RUGGEDCOM RM1224 LTE(4G) EU cross-site scripting5.1CNA v4.00.3%2024-11-12Fix
CVE-2024-50560Siemens RUGGEDCOM RM1224 LTE(4G) EU improper input validation2.3CNA v4.00.3%2024-11-12Fix
CVE-2024-50559Siemens RUGGEDCOM RM1224 LTE(4G) EU path traversal5.1CNA v4.00.3%2024-11-12Fix
CVE-2024-50558Siemens RUGGEDCOM RM1224 LTE(4G) EU improper access control5.3CNA v4.00.3%2024-11-12Fix
CVE-2024-50557Siemens RUGGEDCOM RM1224 LTE(4G) EU improper input validation8.6CNA v4.00.9%2024-11-12Fix
CVE-2024-50386Apache CloudStack: Directly downloaded templates can be used to abuse KVM-based infrastructure8.5CNA v3.11.5%2024-11-12Fix
CVE-2024-50336matrix-js-sdk has insufficient MXC URI validation which allows client-side path traversal5.3CNA v4.00.8%2024-11-12Fix
CVE-2024-50331Ivanti Avalanche out-of-bounds read7.5CNA v3.11.1%2024-11-12Fix
CVE-2024-50330Ivanti Endpoint Manager SQL injection9.8CNA v3.140.3%2024-11-12Exploit codeFix
CVE-2024-50329Ivanti Endpoint Manager path traversal8.8CNA v3.11.7%2024-11-12Fix
CVE-2024-50328Ivanti Endpoint Manager SQL injection7.2CNA v3.11.8%2024-11-12Fix
CVE-2024-50327Ivanti Endpoint Manager SQL injection7.2CNA v3.11.1%2024-11-12Fix
CVE-2024-50326Ivanti Endpoint Manager SQL injection7.2CNA v3.126.5%2024-11-12Fix
CVE-2024-50324Ivanti Endpoint Manager path traversal7.2CNA v3.118.7%2024-11-12Fix
CVE-2024-50323Ivanti Endpoint Manager SQL injection7.8CNA v3.10.7%2024-11-12Fix
CVE-2024-50322Ivanti Endpoint Manager path traversal7.8CNA v3.16.0%2024-11-12Fix
CVE-2024-50321Ivanti Avalanche infinite loop7.5CNA v3.11.2%2024-11-12Fix
CVE-2024-50320Ivanti Avalanche infinite loop7.5CNA v3.139.6%2024-11-12Fix
CVE-2024-50319Ivanti Avalanche infinite loop7.5CNA v3.11.2%2024-11-12Fix
CVE-2024-50318Ivanti Avalanche null pointer dereference7.5CNA v3.11.2%2024-11-12Fix
CVE-2024-50317Ivanti Avalanche null pointer dereference7.5CNA v3.11.2%2024-11-12Fix
CVE-2024-50313Siemens Mendix Runtime V10 race condition6.9CNA v4.00.3%2024-11-12Fix
CVE-2024-50310Siemens SIMATIC CP 1543-1 incorrect authorization8.7CNA v4.00.5%2024-11-12Fix
CVE-2024-49560Dell SmartFabric OS10 Software command injection7.8CNA v3.10.8%2024-11-12Fix
CVE-2024-49558Dell SmartFabric OS10 Software improper privilege management7.8CNA v3.10.1%2024-11-12Fix
CVE-2024-49557Dell SmartFabric OS10 Software command injection7.8CNA v3.10.7%2024-11-12Fix
CVE-2024-49528Adobe Animate out-of-bounds write7.8CNA v3.10.3%2024-11-12Fix
CVE-2024-49527Adobe Animate out-of-bounds read5.5CNA v3.10.3%2024-11-12Fix
CVE-2024-49526Adobe Animate use-after-free7.8CNA v3.10.4%2024-11-12Fix
CVE-2024-49525Adobe Substance3D Painter heap-based buffer overflow7.8CNA v3.10.3%2024-11-12Fix
CVE-2024-49521Adobe Commerce server-side request forgery (SSRF)7.7CNA v3.10.7%2024-11-12Fix
CVE-2024-49520Adobe Substance3D Painter out-of-bounds write7.8CNA v3.10.3%2024-11-12Fix
CVE-2024-49519Adobe Substance3D Painter out-of-bounds write7.8CNA v3.10.3%2024-11-12Fix
CVE-2024-49518Adobe Substance3D Painter out-of-bounds write7.8CNA v3.10.3%2024-11-12Fix
CVE-2024-49517Adobe Substance3D Painter heap-based buffer overflow7.8CNA v3.10.3%2024-11-12Fix
CVE-2024-49516Adobe Substance3D Painter out-of-bounds write7.8CNA v3.10.3%2024-11-12Fix
CVE-2024-49515Adobe Substance3D Painter untrusted search path7.8CNA v3.10.3%2024-11-12Fix
CVE-2024-49514Adobe Photoshop Desktop integer underflow (wrap or wraparound)7.8CNA v3.10.3%2024-11-12Fix
CVE-2024-49512Adobe InDesign Desktop out-of-bounds read5.5CNA v3.10.3%2024-11-12Fix
CVE-2024-49511Adobe InDesign Desktop out-of-bounds read5.5CNA v3.10.3%2024-11-12Fix
CVE-2024-49510Adobe InDesign Desktop out-of-bounds read5.5CNA v3.10.3%2024-11-12Fix
CVE-2024-49509Adobe InDesign Desktop heap-based buffer overflow7.8CNA v3.10.5%2024-11-12Fix
CVE-2024-49508Adobe InDesign Desktop heap-based buffer overflow7.8CNA v3.10.5%2024-11-12Fix
CVE-2024-49507Adobe InDesign Desktop heap-based buffer overflow7.8CNA v3.10.5%2024-11-12Fix
CVE-2024-49395Mutt: Neomutt: Bcc email header field is indirectly leaked by cryptographic info block5.3CNA v3.10.3%2024-11-12
CVE-2024-49394Mutt: Neomutt: In-reply-to email header field it not protected by cryptograpic signing5.3CNA v3.10.3%2024-11-12Fix
CVE-2024-49393Mutt: Neomutt: To and cc email header fields are not protected by cryptographic signing5.9NVD v3.10.3%2024-11-12Fix
CVE-2024-49369Icinga 2 has a TLS certificate validation bypass for JSON-RPC and HTTP API Connections9.8CNA v3.12.9%2024-11-12Exploit codeFix
CVE-2024-49056Airlift.Microsoft.com elevation of privilege7.3CNA v3.11.0%2024-11-12Fix
CVE-2024-49051Microsoft PC Manager elevation of privilege7.8CNA v3.10.6%2024-11-12Fix
CVE-2024-49050Microsoft Visual Studio Code Python extension remote code execution8.8CNA v3.11.2%2024-11-12Fix
CVE-2024-49049Microsoft Visual Studio Code Remote extension elevation of privilege7.1CNA v3.10.4%2024-11-12Fix
CVE-2024-49048TorchGeo remote code execution8.1CNA v3.11.2%2024-11-12Fix
CVE-2024-49046Microsoft Windows Win32 Kernel subsystem elevation of privilege7.8CNA v3.10.4%2024-11-12Fix
CVE-2024-49044Visual Studio elevation of privilege6.7CNA v3.10.8%2024-11-12Fix
CVE-2024-49043Microsoft SQL Server 2017 (GDR) Microsoft.SqlServer.XEvent.Configuration.dll remote code execution7.8CNA v3.10.6%2024-11-12Fix
CVE-2024-49042Microsoft Azure Database for PostgreSQL Flexible Server extension elevation of privilege7.2CNA v3.11.2%2024-11-12Fix
CVE-2024-49040Microsoft Exchange Server spoofing7.5CNA v3.18.5%2024-11-12Fix
CVE-2024-49039Microsoft Windows Task Scheduler privilege escalation8.8CNA v3.114.2%2024-11-12KEVExploit codeKCVFix
CVE-2024-49033Microsoft Word security feature bypass7.5CNA v3.12.1%2024-11-12Fix
CVE-2024-49032Microsoft Office Graphics remote code execution7.8CNA v3.10.9%2024-11-12Fix
CVE-2024-49031Microsoft Office Graphics remote code execution7.8CNA v3.10.8%2024-11-12Fix
CVE-2024-49030Microsoft Excel remote code execution7.8CNA v3.10.8%2024-11-12Fix
CVE-2024-49029Microsoft Excel remote code execution7.8CNA v3.10.8%2024-11-12Fix
CVE-2024-49028Microsoft Excel remote code execution7.8CNA v3.10.8%2024-11-12Fix
CVE-2024-49027Microsoft Excel remote code execution7.8CNA v3.10.8%2024-11-12Fix
CVE-2024-49026Microsoft Excel remote code execution7.8CNA v3.11.0%2024-11-12Fix
CVE-2024-49021Microsoft SQL server remote code execution7.8CNA v3.10.8%2024-11-12Fix
CVE-2024-49019Microsoft Windows active Directory Certificate services elevation of privilege7.8CNA v3.12.0%2024-11-12Fix
CVE-2024-49018SQL Server Native client remote code execution8.8CNA v3.11.5%2024-11-12Fix
CVE-2024-49017SQL Server Native client remote code execution8.8CNA v3.11.4%2024-11-12Fix
CVE-2024-49016SQL Server Native client remote code execution8.8CNA v3.11.4%2024-11-12Fix
CVE-2024-49015SQL Server Native client remote code execution8.8CNA v3.11.4%2024-11-12Fix
CVE-2024-49014SQL Server Native client remote code execution8.8CNA v3.11.4%2024-11-12Fix
CVE-2024-49013SQL Server Native client remote code execution8.8CNA v3.11.4%2024-11-12Fix
CVE-2024-49012SQL Server Native client remote code execution8.8CNA v3.11.4%2024-11-12Fix
CVE-2024-49011SQL Server Native client remote code execution8.8CNA v3.11.4%2024-11-12Fix
CVE-2024-49010SQL Server Native client remote code execution8.8CNA v3.11.4%2024-11-12Fix
CVE-2024-49009SQL Server Native client remote code execution8.8CNA v3.11.4%2024-11-12Fix
CVE-2024-49008SQL Server Native client remote code execution8.8CNA v3.11.4%2024-11-12Fix
CVE-2024-49007SQL Server Native client remote code execution8.8CNA v3.11.4%2024-11-12Fix
CVE-2024-49006SQL Server Native client remote code execution8.8CNA v3.11.4%2024-11-12Fix
CVE-2024-49005SQL Server Native client remote code execution8.8CNA v3.11.5%2024-11-12Fix
CVE-2024-49004SQL Server Native client remote code execution8.8CNA v3.11.5%2024-11-12Fix
CVE-2024-49003SQL Server Native client remote code execution8.8CNA v3.11.5%2024-11-12Fix
CVE-2024-49002SQL Server Native client remote code execution8.8CNA v3.11.5%2024-11-12Fix
CVE-2024-49001SQL Server Native client remote code execution8.8CNA v3.11.5%2024-11-12Fix
CVE-2024-49000SQL Server Native client remote code execution8.8CNA v3.11.5%2024-11-12Fix
CVE-2024-48999SQL Server Native client remote code execution8.8CNA v3.11.4%2024-11-12Fix
CVE-2024-48998SQL Server Native client remote code execution8.8CNA v3.11.4%2024-11-12Fix
CVE-2024-48997SQL Server Native client remote code execution8.8CNA v3.11.4%2024-11-12Fix
CVE-2024-48996SQL Server Native client remote code execution8.8CNA v3.11.6%2024-11-12Fix
CVE-2024-48995SQL Server Native client remote code execution8.8CNA v3.11.6%2024-11-12Fix
CVE-2024-48994SQL Server Native client remote code execution8.8CNA v3.11.6%2024-11-12Fix
CVE-2024-48993SQL Server Native client remote code execution8.8CNA v3.11.6%2024-11-12Fix
CVE-2024-48838Dell SmartFabric OS10 Software files accessible to external parties3.3CNA v3.10.2%2024-11-12Fix
CVE-2024-48837Dell SmartFabric OS10 Software execution with unnecessary privileges7.8CNA v3.10.2%2024-11-12Fix
CVE-2024-48075Real Time Logic SharkSSL TLS handshake buffer overflow5.3CISA ADP v3.10.6%2024-11-12
CVE-2024-47942Siemens Solid Edge SE2024 uncontrolled search path7.0CNA v4.00.2%2024-11-12Fix
CVE-2024-47941Siemens Solid Edge SE2024 out-of-bounds read7.3CNA v4.00.2%2024-11-12Fix
CVE-2024-47940Siemens Solid Edge SE2024 out-of-bounds read7.3CNA v4.00.2%2024-11-12Fix
CVE-2024-47909Ivanti Connect Secure stack-based buffer overflow4.9CNA v3.11.1%2024-11-12Fix
CVE-2024-47907Ivanti Connect Secure IPsec stack-based buffer overflow7.5CNA v3.11.6%2024-11-12Fix
CVE-2024-47906Ivanti Connect Secure unsafe privilege definition7.8CNA v3.10.2%2024-11-12Fix
CVE-2024-47905Ivanti Connect Secure stack-based buffer overflow4.9CNA v3.11.1%2024-11-12Fix
CVE-2024-47808Siemens SINEC NMS incorrect permission assignment8.3CNA v4.00.1%2024-11-12Fix
CVE-2024-47799SoftBank Mesh Wi-Fi router RP562B system information disclosure3.5CNA v3.10.2%2024-11-12
CVE-2024-47783Siemens SIPORT incorrect permission assignment8.5CNA v4.00.1%2024-11-12Fix
CVE-2024-47595Local privilege escalation in SAP Host Agent6.3CNA v3.10.1%2024-11-12Fix
CVE-2024-47593Information disclosure vulnerability in SAP NetWeaver Application Server for ABAP and ABAP Platform4.3CNA v3.10.4%2024-11-12Fix
CVE-2024-47592Information disclosure vulnerability in SAP NetWeaver Application Server Java (Logon Application)5.3CNA v3.10.3%2024-11-12Fix
CVE-2024-47590Cross-site scripting (XSS) vulnerability in SAP Web Dispatcher8.8CNA v3.10.8%2024-11-12Fix
CVE-2024-47588Information disclosure vulnerability in SAP NetWeaver Java (Software Update Manager)4.7CNA v3.10.1%2024-11-12Fix
CVE-2024-47587Missing authorization check in SAP Cash Management (Cash Operations)3.5CNA v3.10.2%2024-11-12Fix
CVE-2024-47586SAP NetWeaver Application Server for ABAP ABAP kernel null pointer dereference5.3CNA v3.13.5%2024-11-12Fix
CVE-2024-47535Denial of service attack on windows app using Netty5.5CNA v3.10.4%2024-11-12Fix
CVE-2024-47458Adobe Bridge null pointer dereference5.5CNA v3.10.2%2024-11-12Fix
CVE-2024-47457Adobe Illustrator null pointer dereference5.5CNA v3.10.2%2024-11-12Fix
CVE-2024-47456Adobe Illustrator out-of-bounds read5.5CNA v3.10.2%2024-11-12Fix
CVE-2024-47455Adobe Illustrator out-of-bounds read5.5CNA v3.10.2%2024-11-12Fix
CVE-2024-47454Adobe Illustrator out-of-bounds read5.5CNA v3.10.2%2024-11-12Fix
CVE-2024-47453Adobe Illustrator out-of-bounds read5.5CNA v3.10.2%2024-11-12Fix
CVE-2024-47452Adobe Illustrator out-of-bounds write7.8CNA v3.10.3%2024-11-12Fix
CVE-2024-47451Adobe Illustrator out-of-bounds write7.8CNA v3.10.3%2024-11-12Fix
CVE-2024-47450Adobe Illustrator heap-based buffer overflow7.8CNA v3.10.3%2024-11-12Fix
CVE-2024-47449Adobe Audition out-of-bounds read5.5CNA v3.10.2%2024-11-12Fix
CVE-2024-47446Adobe After Effects out-of-bounds read5.5CNA v3.10.3%2024-11-12Fix
CVE-2024-47445Adobe After Effects out-of-bounds read5.5CNA v3.10.3%2024-11-12Fix
CVE-2024-47444Adobe After Effects out-of-bounds read5.5CNA v3.10.3%2024-11-12Fix
CVE-2024-47443Adobe After Effects out-of-bounds write7.8CNA v3.10.3%2024-11-12Fix
CVE-2024-47442Adobe After Effects out-of-bounds write7.8CNA v3.10.3%2024-11-12Fix
CVE-2024-47441Adobe After Effects out-of-bounds write7.8CNA v3.10.3%2024-11-12Fix
CVE-2024-47440Adobe Substance3D Painter out-of-bounds read5.5CNA v3.10.2%2024-11-12Fix
CVE-2024-47439Adobe Substance3D Painter null pointer dereference5.5CNA v3.10.2%2024-11-12Fix
CVE-2024-47438Adobe Substance3D Painter write-what-where condition5.5CNA v3.10.2%2024-11-12Fix
CVE-2024-47437Adobe Substance3D Painter out-of-bounds read5.5CNA v3.10.2%2024-11-12Fix
CVE-2024-47436Adobe Substance3D Painter out-of-bounds read5.5CNA v3.10.2%2024-11-12Fix
CVE-2024-47435Adobe Substance3D Painter out-of-bounds read5.5CNA v3.10.2%2024-11-12Fix
CVE-2024-47434Adobe Substance3D Painter out-of-bounds write7.8CNA v3.10.3%2024-11-12Fix
CVE-2024-47433Adobe Substance3D Painter out-of-bounds write7.8CNA v3.10.3%2024-11-12Fix
CVE-2024-47432Adobe Substance3D Painter out-of-bounds write7.8CNA v3.10.3%2024-11-12Fix
CVE-2024-47431Adobe Substance3D Painter heap-based buffer overflow7.8CNA v3.10.3%2024-11-12Fix
CVE-2024-47430Adobe Substance3D Painter out-of-bounds write7.8CNA v3.10.3%2024-11-12Fix
CVE-2024-47429Adobe Substance3D Painter out-of-bounds write7.8CNA v3.10.3%2024-11-12Fix
CVE-2024-47428Adobe Substance3D Painter out-of-bounds write7.8CNA v3.10.3%2024-11-12Fix
CVE-2024-47427Adobe Substance3D Painter out-of-bounds write7.8CNA v3.10.3%2024-11-12Fix
CVE-2024-47426Adobe Substance3D Painter double free7.8CNA v3.10.3%2024-11-12Fix
CVE-2024-46894Siemens SINEC INS information disclosure5.3CNA v4.00.3%2024-11-12Fix
CVE-2024-46892Siemens SINEC INS insufficient session expiration6.9CNA v4.00.3%2024-11-12Fix
CVE-2024-46891Siemens SINEC INS denial of service6.9CNA v4.00.5%2024-11-12Fix
CVE-2024-46890Siemens SINEC INS OS command injection9.4CNA v4.00.7%2024-11-12Fix
CVE-2024-46889Siemens SINEC INS hard-coded cryptographic key6.9CNA v4.00.3%2024-11-12Fix
CVE-2024-46888Siemens SINEC INS path traversal9.4CNA v4.00.9%2024-11-12Fix
CVE-2024-45827SoftBank Mesh Wi-Fi router RP562B OS command improper neutralization8.0CNA v3.11.6%2024-11-12
CVE-2024-45289FreeBSD Unbounded allocation in ctl(4) CAM Target Layer7.5CISA ADP v3.10.3%2024-11-12Fix
CVE-2024-45147Adobe Bridge out-of-bounds read5.5CNA v3.10.3%2024-11-12Fix
CVE-2024-45114Adobe Illustrator out-of-bounds write7.8CNA v3.10.3%2024-11-12Fix
CVE-2024-44102Siemens PP TeleControl Server Basic 1000 to 5000 deserialization of untrusted data10.0CNA v4.01.0%2024-11-12Fix
CVE-2024-43646Microsoft Windows Secure Kernel Mode elevation of privilege6.7CNA v3.10.5%2024-11-12Fix
CVE-2024-43645Microsoft Windows Defender Application Control (WDAC) security feature bypass6.7CNA v3.10.5%2024-11-12Fix
CVE-2024-43644Microsoft Windows Client-Side Caching elevation of privilege7.8CNA v3.10.5%2024-11-12Fix
CVE-2024-43643Microsoft Windows USB Video Class System driver elevation of privilege6.8CNA v3.10.7%2024-11-12Fix
CVE-2024-43642Microsoft Windows SMB denial of service7.5CNA v3.163.1%2024-11-12Fix
CVE-2024-43641Microsoft Windows Registry elevation of privilege7.8CNA v3.10.7%2024-11-12Fix
CVE-2024-43640Microsoft Windows Kernel-Mode driver elevation of privilege7.8CNA v3.10.6%2024-11-12Fix
CVE-2024-43639Microsoft Windows KDC Proxy remote code execution9.8CNA v3.18.9%2024-11-12Fix
CVE-2024-43638Microsoft Windows USB Video Class System driver elevation of privilege6.8CNA v3.10.7%2024-11-12Fix
CVE-2024-43637Microsoft Windows USB Video Class System driver elevation of privilege6.8CNA v3.10.7%2024-11-12Fix
CVE-2024-43636Microsoft Windows win32k elevation of privilege7.8CNA v3.10.7%2024-11-12Fix
CVE-2024-43635Microsoft Windows Telephony service remote code execution8.8CNA v3.11.6%2024-11-12Fix
CVE-2024-43634Microsoft Windows USB Video Class System driver elevation of privilege6.8CNA v3.10.7%2024-11-12Fix
CVE-2024-43633Microsoft Windows Hyper-V denial of service6.5CNA v3.10.6%2024-11-12Fix
CVE-2024-43631Microsoft Windows Secure Kernel Mode elevation of privilege6.7CNA v3.10.5%2024-11-12Fix
CVE-2024-43630Microsoft Windows Kernel elevation of privilege7.8CNA v3.13.8%2024-11-12Exploit codeFix
CVE-2024-43629Microsoft Windows DWM Core library elevation of privilege7.8CNA v3.14.4%2024-11-12Fix
CVE-2024-43628Microsoft Windows Telephony service remote code execution8.8CNA v3.11.6%2024-11-12Fix
CVE-2024-43627Microsoft Windows Telephony service remote code execution8.8CNA v3.11.6%2024-11-12Fix
CVE-2024-43626Microsoft Windows Telephony service elevation of privilege7.8CNA v3.10.7%2024-11-12Fix
CVE-2024-43625Microsoft Windows VMSwitch elevation of privilege8.1CNA v3.10.7%2024-11-12Fix
CVE-2024-43624Microsoft Windows Hyper-V Shared Virtual Disk elevation of privilege8.8CNA v3.11.8%2024-11-12Fix
CVE-2024-43623Microsoft Windows NT OS Kernel elevation of privilege7.8CNA v3.14.5%2024-11-12Fix
CVE-2024-43622Microsoft Windows Telephony service remote code execution8.8CNA v3.11.6%2024-11-12Fix
CVE-2024-43621Microsoft Windows Telephony service remote code execution8.8CNA v3.11.6%2024-11-12Fix
CVE-2024-43620Microsoft Windows Telephony service remote code execution8.8CNA v3.11.6%2024-11-12Fix
CVE-2024-43613Microsoft Azure Database for PostgreSQL Flexible Server extension elevation of privilege7.2CNA v3.11.2%2024-11-12Fix
CVE-2024-43602Microsoft Azure CycleCloud remote code execution9.9CNA v3.12.3%2024-11-12Fix
CVE-2024-43598Microsoft LightGBM remote code execution8.1CNA v3.11.4%2024-11-12Fix
CVE-2024-43530Microsoft Windows Update Stack elevation of privilege7.8CNA v3.10.5%2024-11-12Fix
CVE-2024-43499NET and Visual Studio denial of service7.5CNA v3.12.6%2024-11-12Fix
CVE-2024-43498NET and Visual Studio remote code execution9.8CNA v3.13.6%2024-11-12Fix
CVE-2024-43462SQL Server Native client remote code execution8.8CNA v3.11.6%2024-11-12Fix
CVE-2024-43459SQL Server Native client remote code execution8.8CNA v3.11.6%2024-11-12Fix
CVE-2024-43452Microsoft Windows Registry elevation of privilege7.5CNA v3.130.2%2024-11-12Fix
CVE-2024-43451Microsoft Windows NTLMv2 hash disclosure spoofing6.5CNA v3.184.3%2024-11-12KEVEmerging ThreatsExploit codeFix
CVE-2024-43450Microsoft Windows DNS spoofing7.5CNA v3.10.6%2024-11-12Fix
CVE-2024-43449Microsoft Windows USB Video Class System driver elevation of privilege6.8CNA v3.10.7%2024-11-12Fix
CVE-2024-43447Microsoft Windows SMBv3 server remote code execution8.1CNA v3.11.5%2024-11-12Fix
CVE-2024-43415decidim-ice decidim-module-decidim_awesome Decidim-Awesome: SQL injection in AdminAccountability9.0CNA v3.10.7%2024-11-12Fix
CVE-2024-42442AMI AptioV Runtime Service Access outside SMRAM7.2CNA v3.10.8%2024-11-12Fix
CVE-2024-42372Missing authorization check in SAP NetWeaver AS Java (System Landscape Directory)6.5CNA v3.10.3%2024-11-12Fix
CVE-2024-40592Fortinet FortiClientMac improper signature verification6.8CNA v3.10.1%2024-11-12Fix
CVE-2024-39281FreeBSD Unbounded allocation in ctl(4) CAM Target Layer5.3CISA ADP v3.10.5%2024-11-12Fix
CVE-2024-38264Microsoft Virtual Hard Disk (VHDX) denial of service5.9CNA v3.11.3%2024-11-12Fix
CVE-2024-38255SQL Server Native client remote code execution8.8CNA v3.11.6%2024-11-12Fix
CVE-2024-38203Microsoft Windows Package Library Manager information disclosure6.2CNA v3.10.7%2024-11-12Fix
CVE-2024-37365FactoryTalk View ME remote code execution vulnerability via Project Save Path7.0CNA v4.00.2%2024-11-12Fix
CVE-2024-36513Fortinet FortiClient Lua auto patch scripts privilege escalation7.4CNA v3.10.2%2024-11-12Fix
CVE-2024-36509Fortinet FortiWeb system information disclosure3.8CNA v3.10.2%2024-11-12Fix
CVE-2024-36507Fortinet FortiClientWindows untrusted search path6.7CNA v3.10.3%2024-11-12Fix
CVE-2024-36140Siemens OZW672 cross-site scripting8.2CNA v4.00.3%2024-11-12Fix
CVE-2024-35274Fortinet FortiAnalyzer relative path traversal2.2CNA v3.10.2%2024-11-12Fix
CVE-2024-33660AMI AptioV potential firmware update without integrity check5.2CNA v4.00.2%2024-11-12Fix
CVE-2024-33658AMI AptioV buffer overflow vulnerability in OFBD4.4CNA v4.00.2%2024-11-12Fix
CVE-2024-33510Fortinet FortiOS An improper neutralization3.6CNA v3.10.6%2024-11-12Fix
CVE-2024-33505Fortinet FortiAnalyzer heap-based buffer overflow5.3CNA v3.10.5%2024-11-12Fix
CVE-2024-32118Fortinet FortiAnalyzer OS command injection6.3CNA v3.10.6%2024-11-12Fix
CVE-2024-32117Fortinet FortiManager path traversal4.7CNA v3.10.9%2024-11-12Fix
CVE-2024-32116Fortinet FortiAnalyzer relative path traversal4.8CNA v3.10.2%2024-11-12Fix
CVE-2024-31496Fortinet FortiManager stack-based buffer overflow6.3CNA v3.10.2%2024-11-12Fix
CVE-2024-30133HCL Traveler for Microsoft Outlook (HTMO) is susceptible to a control flow vulnerability5.3CNA v3.10.3%2024-11-12Fix
CVE-2024-29119Siemens Spectrum Power 7 incorrect privilege assignment8.5CNA v4.00.1%2024-11-12Fix
CVE-2024-29075SoftBank Mesh Wi-Fi router RP562B active debug code4.6CNA v3.10.2%2024-11-12
CVE-2024-28731D-Link Dwr-2000m cross-site request forgery4.3NVD v3.10.2%2024-11-12
CVE-2024-28730D-Link Dwr-2000m cross-site scripting5.4v3.10.3%2024-11-12
CVE-2024-28729D-Link Dwr-2000m command injection9.8v3.10.6%2024-11-12
CVE-2024-28728DLink DWR cross-site scripting6.6CISA ADP v3.10.5%2024-11-12
CVE-2024-28726DWR-2000M 5G CPE Diagnostics function command injection8.0CISA ADP v3.18.6%2024-11-12
CVE-2024-26011Fortinet FortiManager missing authentication5.2CNA v3.10.6%2024-11-12Fix
CVE-2024-23666Fortinet FortiAnalyzer-BigData client-side enforcement of server-side security7.1CNA v3.12.7%2024-11-12Exploit codeFix
CVE-2024-21976AMD Ryzen™ AI Software NPU driver improper input validation8.8CNA v3.10.3%2024-11-12Fix
CVE-2024-21975AMD Ryzen™ AI Software NPU driver improper input validation8.8CNA v3.10.3%2024-11-12Fix
CVE-2024-21974AMD Ryzen™ AI Software NPU driver improper input validation8.8CNA v3.10.3%2024-11-12Fix
CVE-2024-21958AMD Provisioning Console (APC) Software incorrect default permissions7.3CNA v3.10.3%2024-11-12Fix
CVE-2024-21957AMD Management Console incorrect default permissions7.3CNA v3.10.3%2024-11-12Fix
CVE-2024-21949AMD Ryzen™ AI Software NPU driver improper input validation5.5CNA v3.10.2%2024-11-12Fix
CVE-2024-21946AMD Ryzen Master Utility for Overclocking Control incorrect default permissions7.3CNA v3.10.2%2024-11-12Fix
CVE-2024-21945AMD Ryzen™ Master Monitoring SDK incorrect default permissions7.3CNA v3.10.2%2024-11-12Fix
CVE-2024-21939AMD Cloud Manageability Service Software incorrect default permissions7.3CNA v3.10.2%2024-11-12Fix
CVE-2024-21938AMD Management Plug-In for SCCM incorrect default permissions7.3CNA v3.10.2%2024-11-12Fix
CVE-2024-21937AMD Software: PRO Edition incorrect default permissions7.3CNA v3.10.3%2024-11-12Fix
CVE-2024-11168Python CPython improper validation of IPv6 and IPvFuture addresses6.3CNA v4.00.7%2024-11-12Fix
CVE-2024-11138DedeCMS friendlink_add.php unrestricted upload9.8v3.12.6%2024-11-12
CVE-2024-11130ZZCMS msg.php cross-site scripting4.8v3.10.3%2024-11-12
CVE-2024-11127code-projects Job Recruitment admin.php SQL injection8.8v3.10.5%2024-11-12
CVE-2024-11126Digistar AG-30 Plus Login page excessive authentication2.3CNA v4.00.3%2024-11-12
CVE-2024-11125GetSimpleCMS profile.php cross-site request forgery4.3v3.10.4%2024-11-12
CVE-2024-11124TimGeyssens UIOMatic uioMaticObject.r SQL injection7.2v3.10.4%2024-11-12
CVE-2024-11123上海灵当信息科技有限公司 Lingdang CRM pdf.php path traversal7.5v3.11.0%2024-11-12
CVE-2024-11122上海灵当信息科技有限公司 Lingdang CRM index.php unrestricted upload9.8v3.10.6%2024-11-12
CVE-2024-11121上海灵当信息科技有限公司 Lingdang CRM index.php SQL injection9.8v3.10.6%2024-11-12
CVE-2024-11117Google Chrome FileSystem inappropriate implementation4.3v3.10.3%2024-11-12Fix
CVE-2024-11116Google Chrome Blink inappropriate implementation4.3v3.10.4%2024-11-12Fix
CVE-2024-11115Google Chrome Navigation insufficient policy enforcement8.8v3.10.4%2024-11-12Fix
CVE-2024-11114Google Chrome Views inappropriate implementation8.3v3.10.4%2024-11-12Fix
CVE-2024-11113Google Chrome Accessibility use-after-free8.8v3.10.4%2024-11-12Fix
CVE-2024-11112Google Chrome Media use-after-free8.8v3.10.4%2024-11-12Fix
CVE-2024-11111Google Chrome Autofill inappropriate implementation4.3v3.10.4%2024-11-12Fix
CVE-2024-11110Google Chrome extensions inappropriate implementation6.5v3.10.4%2024-11-12Fix
CVE-2024-11102SourceCodester Hospital Management System edit-doc.php cross-site scripting4.8v3.10.4%2024-11-12
CVE-2024-111011000 Projects Beauty Parlour Management System search-invoices.php SQL injection9.8v3.10.5%2024-11-12
CVE-2024-111001000 Projects Beauty Parlour Management System index.php SQL injection9.8v3.10.6%2024-11-12
CVE-2024-11099code-projects Job Recruitment login.php SQL injection9.8v3.10.6%2024-11-12
CVE-2024-11097SourceCodester Student Record Management System Main menu infinite loop5.5v3.10.3%2024-11-12
CVE-2024-11096code-projects Task Manager newProject.php SQL injection6.5v3.10.5%2024-11-12
CVE-2024-11079Red Hat Ansible Automation Platform ansible-core hostvars object vulnerability5.5CNA v3.10.5%2024-11-12Fix
CVE-2024-11007Ivanti Connect Secure command injection9.1CNA v3.11.6%2024-11-12Fix
CVE-2024-11006Ivanti Connect Secure command injection9.1CNA v3.11.6%2024-11-12Fix
CVE-2024-11005Ivanti Connect Secure command injection9.1CNA v3.11.6%2024-11-12Fix
CVE-2024-11004Ivanti Connect Secure reflected cross-site scripting6.1CNA v3.10.9%2024-11-12Fix
CVE-2024-10971DVLS (Devolutions Server) Password History feature improper access control4.3CISA ADP v3.10.5%2024-11-12Fix
CVE-2024-10945FactoryTalk® Updater local privilege escalation7.0CNA v4.00.2%2024-11-12Fix
CVE-2024-10944FactoryTalk® Updater remote code execution7.1CNA v4.00.5%2024-11-12Fix
CVE-2024-10943FactoryTalk® Updater authentication bypass9.1CNA v4.00.5%2024-11-12Fix
CVE-2024-10923Improper neutralization vulnerability has been discovered in OpenText™ ALM Octane Management8.6CNA v4.00.3%2024-11-12
CVE-2024-10790Admin and Site Enhancements (ASE) WordPress plugin authenticated stored cross-site scripting via SVG5.4CNA v3.10.3%2024-11-12Fix
CVE-2024-10695Futurio Extra WordPress plugin authenticated (Contributor+) post disclosure4.3CNA v3.10.3%2024-11-12Fix
CVE-2024-10685Contact Form 7 Redirect and Thank You Page WordPress plugin reflected cross-site scripting6.1CNA v3.10.3%2024-11-12Fix
CVE-2024-10672Multiple Page Generator Plugin MPG WordPress plugin directory traversal to limited file deletion2.7CNA v3.10.5%2024-11-12Fix
CVE-2024-10538Happy Addons for Elementor WordPress plugin stored cross-site scripting5.4v3.10.2%2024-11-12Fix
CVE-2024-10323JetWidgets For Elementor WordPress plugin stored cross-site scripting5.4v3.10.3%2024-11-12Fix
CVE-2024-10245Relais 2FA WordPress plugin authentication bypass9.8CNA v3.11.2%2024-11-12Exploit code
CVE-2024-10218TIBCO Hawk mar.jar cross-site scripting9.2CNA v4.00.5%2024-11-12Fix
CVE-2024-10217TIBCO Hawk Stored-XSS9.2CNA v4.00.5%2024-11-12Fix
CVE-2024-10179Slickstream: Engagement and Conversions WordPress plugin stored cross-site scripting6.4CNA v3.10.3%2024-11-12Fix
CVE-2024-9999Multi-Factor authentication bypass in Progress WS_FTP Server6.5CNA v3.10.4%2024-11-12Fix
CVE-2024-9843Ivanti Secure Access Client buffer over-read5.0CNA v3.10.3%2024-11-12Fix
CVE-2024-9842Ivanti Secure Access Client insecure permissions7.3CNA v3.10.2%2024-11-12Fix
CVE-2024-9836RSS Feed Widget WordPress plugin Contributor+ stored XSS5.9CISA ADP v3.10.3%2024-11-12Fix
CVE-2024-9835RSS Feed Widget WordPress plugin reflected XSS4.8CISA ADP v3.10.3%2024-11-12Fix
CVE-2024-9420Ivanti Connect Secure use-after-free8.8v3.11.4%2024-11-12Fix
CVE-2024-9357xili-tidy-tags WordPress plugin reflected cross-site scripting6.1CNA v3.10.4%2024-11-12Fix
CVE-2024-8882Zyxel GS1900-48 firmware CGI program in the Zyxel buffer overflow4.5CNA v3.10.2%2024-11-12Fix
CVE-2024-8881Zyxel GS1900-48 firmware CGI program in the Zyxel command injection6.8CNA v3.10.7%2024-11-12Fix
CVE-2024-8539Ivanti Secure Access Client improper authorization7.1CNA v3.10.2%2024-11-12Fix
CVE-2024-8535NetScaler ADC authenticated user can access unintended user capabilities5.8CNA v4.00.4%2024-11-12Fix
CVE-2024-8534NetScaler ADC and Gateway RDP proxy memory corruption8.4CNA v4.00.6%2024-11-12Fix
CVE-2024-8495Ivanti Connect Secure null pointer dereference7.5CNA v3.11.4%2024-11-12Fix
CVE-2024-8074Sensetive data exposure in Nomysoft Informatics' Nomysem9.3CNA v4.00.4%2024-11-12Fix
CVE-2024-8069Citrix Session Recording deserialization of untrusted data5.1CNA v4.014.6%2024-11-12KEVEmerging ThreatsExploit codeFix
CVE-2024-8068Citrix Session Recording improper privilege management5.1CNA v4.03.5%2024-11-12KEVExploit codeFix
CVE-2024-7571Ivanti Secure Access Client insecure permissions7.8CNA v3.10.3%2024-11-12Fix
CVE-2024-7516Brocade Fabric OS does not enforce strict host key checking7.0CNA v4.00.3%2024-11-12Fix
CVE-2024-2315AMI AptioV SMM arbitrary code execution in Overclock6.8CNA v4.00.1%2024-11-12Fix
CVE-2024-2208Sound Research SECOMN64 escalation of privilege8.8CNA v3.10.2%2024-11-12
CVE-2024-2207Sound Research SECOMN64 escalation of privilege6.0CNA v3.10.1%2024-11-12
CVE-2024-52533GNOME GLib buffer overflow9.8CISA ADP v3.11.5%2024-11-11Fix
CVE-2024-52532GNOME libsoup infinite loop7.5CISA ADP v3.10.9%2024-11-11Fix
CVE-2024-52531GNOME libsoup out-of-bounds write8.4CISA ADP v3.10.7%2024-11-11Fix
CVE-2024-52530GNOME libsoup HTTP request smuggling7.5CISA ADP v3.10.8%2024-11-11Fix
CVE-2024-52358Responsive Addons for Elementor WordPress plugin cross-site scripting (XSS)5.4v3.10.3%2024-11-11Fix
CVE-2024-52357LIQUID BLOCKS WordPress plugin cross-site scripting (XSS)5.4v3.10.2%2024-11-11Fix
CVE-2024-52356The Pack Elementor addons WordPress plugin cross-site scripting (XSS)5.4v3.10.3%2024-11-11Fix
CVE-2024-52355OSM OpenStreetMap WordPress plugin cross-site scripting (XSS)5.4v3.10.3%2024-11-11Fix
CVE-2024-52354Web Stories Widgets For Elementor WordPress plugin cross-site scripting (XSS)5.4v3.10.3%2024-11-11Fix
CVE-2024-52353Christian Science Bible Lesson Subjects WordPress plugin cross-site scripting (XSS)5.4v3.10.3%2024-11-11Fix
CVE-2024-52352Postcasa Shortcode WordPress plugin cross-site scripting (XSS)5.4v3.10.2%2024-11-11
CVE-2024-52351BU Slideshow WordPress plugin cross-site scripting (XSS)5.4v3.10.3%2024-11-11
CVE-2024-52350CRM 2go WordPress plugin cross-site scripting (XSS)5.4v3.10.2%2024-11-11
CVE-2024-52288RMAC revert to the beginning of the session in libosdp5.1CNA v3.10.1%2024-11-11Fix
CVE-2024-52286Self cross-site scripting (XSS) in Merge Functionality in Stirling-PDF2.0CNA v4.00.5%2024-11-11Fix
CVE-2024-51992orchidsoftware platform Method Exposure vulnerability in Modals in orchid/platform4.1CNA v3.10.3%2024-11-11Fix
CVE-2024-51882Gboy Custom Google Map WordPress plugin SQL injection6.5NVD v3.10.4%2024-11-11
CVE-2024-51845Share Buttons Social Media WordPress plugin SQL injection8.5CNA v3.10.4%2024-11-11
CVE-2024-51843Horsemanager WordPress plugin SQL injection6.5NVD v3.10.4%2024-11-11
CVE-2024-51837WP Contest WordPress plugin SQL injection6.5NVD v3.10.4%2024-11-11
CVE-2024-51820L Squared Hub WP WordPress plugin SQL injection6.5NVD v3.10.4%2024-11-11
CVE-2024-51793RepairBuddy WordPress plugin arbitrary file upload9.8v3.11.8%2024-11-11Exploit codeFix
CVE-2024-51792Audio Record WordPress plugin arbitrary file upload10.0CNA v3.10.6%2024-11-11
CVE-2024-51791Forms WordPress plugin arbitrary file upload10.0CNA v3.10.6%2024-11-11Exploit codeFix
CVE-2024-51790HB AUDIO GALLERY WordPress plugin arbitrary file upload10.0CNA v3.10.5%2024-11-11
CVE-2024-51789Image Classify WordPress plugin arbitrary file upload10.0CNA v3.10.6%2024-11-11
CVE-2024-51788The Novel Design Store Directory WordPress plugin arbitrary file upload10.0CNA v3.11.5%2024-11-11Exploit code
CVE-2024-51748Remote code execution through language setting in kanboard9.1CNA v3.10.9%2024-11-11Fix
CVE-2024-51747Arbitrary file read and Delete in kanboard9.1CNA v3.10.8%2024-11-11Fix
CVE-2024-51575Extender All In One For Elementor WordPress plugin stored cross-site scripting (XSS)6.5CNA v3.10.3%2024-11-11
CVE-2024-51574Simple Goods WordPress plugin stored cross-site scripting (XSS)6.5CNA v3.10.3%2024-11-11
CVE-2024-51573ML Responsive Audio WordPress plugin stored cross-site scripting (XSS)6.5CNA v3.10.3%2024-11-11
CVE-2024-51572LH QR Codes WordPress plugin stored cross-site scripting (XSS)6.5CNA v3.10.3%2024-11-11
CVE-2024-51571MasterBip para Elementor WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.3%2024-11-11
CVE-2024-51490Stored cross-site scripting in Ampache5.5CNA v3.10.5%2024-11-11Fix
CVE-2024-51489Insufficient Message Token Validation in Ampache5.3CNA v4.00.3%2024-11-11Fix
CVE-2024-51488Insufficient Validation in Delete message in Ampache5.3CNA v4.00.3%2024-11-11Fix
CVE-2024-51487Insufficient Validation in Catalog (Activation/Deactivation) in Ampache5.3CNA v4.00.3%2024-11-11Fix
CVE-2024-51486Stored cross-site scripting in Ampache5.5CNA v3.10.5%2024-11-11Fix
CVE-2024-51485Insufficient Validation in Plugins (Activation/Deactivation) in Ampache5.3CNA v4.00.3%2024-11-11Fix
CVE-2024-51484Insufficient Validation in Controllers (Activation/Deactivation) in Ampache5.3CNA v4.00.3%2024-11-11Fix
CVE-2024-51213Online Shop Store v.1.0 cross-site scripting6.1CISA ADP v3.10.4%2024-11-11
CVE-2024-51190TRENDnet TEW-652BRP cross-site scripting4.8CISA ADP v3.10.4%2024-11-11
CVE-2024-51189TRENDnet TEW-652BRP cross-site scripting4.8CISA ADP v3.10.4%2024-11-11
CVE-2024-51188TRENDnet TEW-652BRP cross-site scripting4.8CISA ADP v3.10.4%2024-11-11
CVE-2024-51187TRENDnet TEW-652BRP cross-site scripting4.8CISA ADP v3.10.4%2024-11-11
CVE-2024-51186D-Link DIR-820L command injection8.0CISA ADP v3.10.9%2024-11-11
CVE-2024-51135Powertac-server XML external entity9.8CISA ADP v3.11.0%2024-11-11
CVE-2024-51054PHPGurukul Online Marriage Registration System cross-site scripting4.8CISA ADP v3.10.4%2024-11-11
CVE-2024-51026NetAdmin IAM system BalloonSave.ashx endpoint cross-site scripting5.4CISA ADP v3.10.4%2024-11-11
CVE-2024-50991PHPGurukul User Management System cross-site scripting4.8CISA ADP v3.10.4%2024-11-11
CVE-2024-50990PHPGurukul Online Marriage Registration System cross-site scripting6.1CISA ADP v3.10.4%2024-11-11
CVE-2024-50989PHPGurukul Online Marriage Registration System /omrs/admin/search.php SQL injection9.8CISA ADP v3.10.5%2024-11-11
CVE-2024-50667TRENDnet Tew-820ap buffer overflow9.8CISA ADP v3.16.7%2024-11-11
CVE-2024-50636PyMOL Run Script function code injection9.8CISA ADP v3.11.2%2024-11-11
CVE-2024-50601Axigen Mail Server cross-site scripting6.1CISA ADP v3.10.2%2024-11-11
CVE-2024-50263Linux kernel fork khugepaged and KSM hooks vulnerability7.8CNA v3.10.2%2024-11-11Fix
CVE-2024-48939Paxton Net2 REST API license validation information disclosure7.5CISA ADP v3.10.7%2024-11-11
CVE-2024-48322Run.codes password reset race condition8.1CISA ADP v3.10.9%2024-11-11Exploit code
CVE-2024-47131Delta Electronics DIAScreen stack-based buffer overflow7.8v3.10.3%2024-11-11Fix
CVE-2024-46966Ikhgur Video Downloader Pro and Browser MainActivity code injection8.1CISA ADP v3.10.3%2024-11-11
CVE-2024-46965DS Fast Video Downloader DefaultBrowserActivity code injection5.4CISA ADP v3.10.2%2024-11-11
CVE-2024-46964All Video Downloader StartActivity code injection8.1CISA ADP v3.10.3%2024-11-11
CVE-2024-46963Super Unlimited Video Downloader BrowserMainActivity code injection8.1CISA ADP v3.10.3%2024-11-11
CVE-2024-46962SYQ Master Video Downloader SpeedMainAct code injection9.1CISA ADP v3.10.4%2024-11-11
CVE-2024-45088IBM Maximo Asset Management cross-site scripting6.4CNA v3.10.2%2024-11-11Fix
CVE-2024-45087IBM WebSphere Application Server cross-site scripting4.8CNA v3.10.2%2024-11-11Fix
CVE-2024-44546PowerJob SQL injection9.8CISA ADP v3.10.4%2024-11-11
CVE-2024-43439Moodle: Reflected XSS via h5p error message6.1NVD v3.10.4%2024-11-11Fix
CVE-2024-43437Moodle: Xss risk when restoring malicious course backup file6.1NVD v3.10.3%2024-11-11Fix
CVE-2024-43435Moodle: Can create global glossary without being admin5.3NVD v3.10.3%2024-11-11Fix
CVE-2024-43433Moodle: Matrix user/power level management not always working as expected with suspended users5.3NVD v3.10.3%2024-11-11Fix
CVE-2024-43432Moodle: Authorization headers preserved between emulated redirects5.3NVD v3.10.3%2024-11-11Fix
CVE-2024-43430Moodle: Lack of access control when using external methods for quiz overrides5.3NVD v3.10.3%2024-11-11Fix
CVE-2024-43429Moodle: User information visibility control issues in gradebook reports5.3NVD v3.10.3%2024-11-11Fix
CVE-2024-43427Moodle: Admin presets export tool includes some secrets that should not be exported3.7NVD v3.10.3%2024-11-11Fix
CVE-2024-41992Wi-Fi Alliance Wi-Fi Test Suite OS command injection8.8CISA ADP v3.12.5%2024-11-11Exploit code
CVE-2024-39605Delta Electronics DIAScreen stack-based buffer overflow7.8v3.12.9%2024-11-11Fix
CVE-2024-39354Delta Electronics DIAScreen stack-based buffer overflow7.8v3.10.3%2024-11-11Fix
CVE-2024-38826Cloud Foundry cloud controller denial of service Attack5.3CNA v4.00.4%2024-11-11
CVE-2024-36061Engeniustech Ews356-fit OS command injection9.8CISA ADP v3.11.1%2024-11-11
CVE-2024-34015Acronis Backup plugin for cPanel and WHM symlink following3.3CNA v3.00.2%2024-11-11Fix
CVE-2024-34014Acronis Backup plugin for cPanel and WHM symlink following5.5CNA v3.00.2%2024-11-11Fix
CVE-2024-25255Sublime Text New Build System module command injection9.8CISA ADP v3.11.5%2024-11-11
CVE-2024-25254McAfee Superscan buffer overflow9.8CISA ADP v3.10.5%2024-11-11
CVE-2024-25253Driver Booster Customize proxy module buffer overflow7.5CISA ADP v3.10.4%2024-11-11
CVE-2024-23983Access rules for PingAccess may be circumvented with URL-encoded characters5.8CNA v4.00.4%2024-11-11Fix
CVE-2024-11078code-projects Job Recruitment register.php cross-site scripting5.4v3.10.4%2024-11-11
CVE-2024-11077code-projects Job Recruitment index.php SQL injection9.8v3.10.7%2024-11-11
CVE-2024-11076code-projects Job Recruitment activation.php SQL injection9.8v3.10.6%2024-11-11
CVE-2024-11074itsourcecode Tailoring Management System incadd.php SQL injection9.8v3.10.6%2024-11-11
CVE-2024-11073SourceCodester Hospital Management System delete-account.php improper authorization8.1v3.10.6%2024-11-11
CVE-2024-11070Sanluan PublicCMS Tag Type save cross-site scripting5.4v3.10.4%2024-11-11
CVE-2024-11068D-Link DSL6740C incorrect use of privileged apis9.8CNA v3.11.2%2024-11-11
CVE-2024-11067D-Link DSL6740C arbitrary file reading through path traversal7.5CNA v3.11.3%2024-11-11
CVE-2024-11066D-Link DSL6740C OS command injection7.2CNA v3.11.8%2024-11-11
CVE-2024-11065D-Link DSL6740C OS command injection7.2CNA v3.11.4%2024-11-11
CVE-2024-11064D-Link DSL6740C OS command injection7.2CNA v3.11.4%2024-11-11
CVE-2024-11063D-Link DSL6740C OS command injection7.2CNA v3.11.4%2024-11-11
CVE-2024-11062D-Link DSL6740C OS command injection7.2NVD v3.11.4%2024-11-11
CVE-2024-11061Tenda AC10 fast_setting_wifi_set FUN_0044db3c stack-based overflow8.8v3.11.2%2024-11-11
CVE-2024-11060Jinher Network Collaborative Management Platform 金和数字化智能办公平台 AcceptShow.aspx SQL injection5.3CNA v4.00.3%2024-11-11
CVE-2024-11059Project Worlds Free Download Online Shopping System success.php SQL injection9.8v3.10.5%2024-11-11
CVE-2024-11021Grand Vice info Webopac stored XSS5.4CNA v3.10.3%2024-11-11Fix
CVE-2024-11020Grand Vice info Webopac7 SQL injection9.8CNA v3.10.5%2024-11-11Fix
CVE-2024-11019Grand Vice info Webopac7 reflected XSS6.1CNA v3.10.3%2024-11-11Fix
CVE-2024-11018Grand Vice info Webopac arbitrary file upload9.8CNA v3.10.8%2024-11-11Fix
CVE-2024-11017Grand Vice info Webopac arbitrary file upload8.8CNA v3.10.8%2024-11-11Fix
CVE-2024-11016Grand Vice info Webopac SQL injection9.8CNA v3.10.6%2024-11-11Fix
CVE-2024-10917Eclipse OpenJ9 might return an incorrect value in JNI function GetStringUTFLength3.7CNA v3.10.4%2024-11-11Fix
CVE-2024-10345Helix Core unauthenticated denial of service via Shutdown function8.7CNA v4.00.5%2024-11-11Fix
CVE-2024-10344Helix Core unauthenticated denial of service via Refuse function8.7CNA v4.00.5%2024-11-11Fix
CVE-2024-10315Gliffy Online permissive cross-domain policy6.9CNA v4.00.3%2024-11-11Fix
CVE-2024-10314Helix Core unauthenticated denial of service via Auto Generation function8.7CNA v4.00.5%2024-11-11Fix
CVE-2024-51584Marquee Elementor with Posts WordPress plugin cross-site scripting (XSS)5.4v3.10.2%2024-11-10
CVE-2024-51583Kento Ads Rotator WordPress plugin cross-site scripting (XSS)5.4v3.10.2%2024-11-10
CVE-2024-51581Restaurant and Cafe Addon for Elementor WordPress plugin cross-site scripting (XSS)5.4v3.10.3%2024-11-10Fix
CVE-2024-51580Clever Addons for Elementor WordPress plugin cross-site scripting (XSS)5.4v3.10.2%2024-11-10
CVE-2024-515783D Presentation WordPress plugin cross-site scripting (XSS)5.4v3.10.2%2024-11-10
CVE-2024-51577bpmn.io WordPress plugin stored cross-site scripting (XSS)5.4v3.10.2%2024-11-10
CVE-2024-51576AMP Img Shortcode WordPress plugin stored cross-site scripting (XSS)5.4v3.10.2%2024-11-10
CVE-2024-46956Artifex Ghostscript out-of-bounds read7.8v3.10.4%2024-11-10Fix
CVE-2024-46955Artifex Ghostscript out-of-bounds read5.5v3.10.3%2024-11-10Fix
CVE-2024-46954Artifex Ghostscript path traversal7.8v3.10.6%2024-11-10Fix
CVE-2024-46953Artifex Ghostscript integer overflow7.8v3.10.4%2024-11-10Fix
CVE-2024-46952Artifex Ghostscript buffer overflow7.8v3.10.3%2024-11-10Fix
CVE-2024-46951Artifex Ghostscript uninitialized pointer access7.8v3.10.4%2024-11-10Fix
CVE-2024-46613weechat integer overflow9.8v3.10.5%2024-11-10Fix
CVE-2024-11058CodeAstro Real Estate Management System About Us page aboutedit.php SQL injection7.2v3.10.5%2024-11-10
CVE-2024-11057Codezips Hospital Appointment System removeBranchResult.php SQL injection9.8v3.10.6%2024-11-10
CVE-2024-11056Tenda AC10 WifiExtraSet FUN_0046AC38 stack-based overflow8.8v3.11.1%2024-11-10
CVE-2024-110551000 Projects Beauty Parlour Management System admin-profile.php SQL injection9.8v3.10.6%2024-11-10
CVE-2024-11054SourceCodester Simple Music Cloud Community System ajax.php unrestricted upload9.8v3.10.5%2024-11-10
CVE-2024-11051AMTT Hotel Broadband Operation System online_status.php SQL injection8.8v3.10.5%2024-11-10
CVE-2024-11050AMTT Hotel Broadband Operation System language.php cross-site scripting5.4v3.10.4%2024-11-10
CVE-2024-11049ZKTeco ZKBio Time Image file photo direct request3.7NVD v3.10.4%2024-11-10
CVE-2024-11048D-Link DI-8003 dbsrv.asp dbsrv_asp stack-based overflow9.8v3.11.2%2024-11-10
CVE-2024-11047D-Link DI-8003 upgrade_filter.asp upgrade_filter_asp stack-based overflow9.8v3.11.2%2024-11-10
CVE-2024-11046D-Link DI-8003 upgrade_filter.asp upgrade_filter_asp os command injection9.8v3.14.4%2024-11-10
CVE-2024-10958opajaap WP Photo Album Plus code injection7.3CNA v3.11.6%2024-11-10Exploit codeFix
CVE-2024-10265Form Maker by 10Web WordPress plugin reflected cross-site scripting6.1CNA v3.10.4%2024-11-10Fix
CVE-2024-52314data.all admin user may access potentially sensitive data stored by producers via logs6.9CNA v4.00.4%2024-11-09Fix
CVE-2024-52313data.all authenticated users can obtain incorrect object level authorizations5.3CNA v4.00.3%2024-11-09Fix
CVE-2024-52312data.all authenticated users can perform restricted operations against DataSets and Environments5.3CNA v4.00.3%2024-11-09Fix
CVE-2024-52311data.all does not invalidate authentication token upon user logout5.3CNA v4.00.5%2024-11-09Fix
CVE-2024-52032Mattermost private channel names leaking when Elasticsearch is enabled4.3CNA v3.10.3%2024-11-09Fix
CVE-2024-51787ElementsReady Addons for Elementor WordPress plugin cross-site scripting (XSS)5.4v3.10.2%2024-11-09Fix
CVE-2024-51786Realty by BestWebSoft WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.3%2024-11-09Fix
CVE-2024-51785Responsive Filterable Portfolio WordPress plugin server side request forgery (SSRF)4.4CNA v3.10.2%2024-11-09Fix
CVE-2024-51784FriendStore for WooCommerce WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.3%2024-11-09Fix
CVE-2024-51783Forms: 3rd-Party Post Again WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.3%2024-11-09
CVE-2024-51782Loginplus WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.3%2024-11-09
CVE-2024-51781Firework Shoppable Live Video WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.3%2024-11-09
CVE-2024-51780eewee admin custom WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.3%2024-11-09
CVE-2024-51779Jason Coleman Don't Break The Code reflected cross-site scripting7.1CNA v3.10.3%2024-11-09
CVE-2024-51778Satisfaction Reports from Help Scout WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.3%2024-11-09
CVE-2024-51776Daily Image WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.3%2024-11-09
CVE-2024-51763Team Showcase and Slider WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.3%2024-11-09
CVE-2024-51762PropertyShift WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.3%2024-11-09
CVE-2024-51761WPHelpful WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.3%2024-11-09
CVE-2024-51760Dashing Memberships WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.3%2024-11-09
CVE-2024-51759SVT Simple WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.3%2024-11-09
CVE-2024-51719Simplistic SEO WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.3%2024-11-09
CVE-2024-51718Simple Modal WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.3%2024-11-09
CVE-2024-51717Ajax Content Filter WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.3%2024-11-09
CVE-2024-51716Twitter real time search scrolling WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.3%2024-11-09
CVE-2024-51714User Password Reset WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.3%2024-11-09
CVE-2024-51713HQ60 Fidelity Card WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.3%2024-11-09
CVE-2024-51712Jigoshop WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.3%2024-11-09
CVE-2024-51711Saragna WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.3%2024-11-09
CVE-2024-51710Responsive Data Table WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.3%2024-11-09
CVE-2024-51709TeleAdmin WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.3%2024-11-09
CVE-2024-51708Narnoo Commerce Manager WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.3%2024-11-09
CVE-2024-51707WP Visual Adverts WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.3%2024-11-09
CVE-2024-51706UW Freelancer WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.3%2024-11-09
CVE-2024-51705WP MMenu Lite WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.3%2024-11-09
CVE-2024-51704imPress WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.3%2024-11-09
CVE-2024-51703WP-Basics WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.3%2024-11-09
CVE-2024-51702SrcSet Responsive Images for WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.3%2024-11-09
CVE-2024-51701MG Post Contributors WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.3%2024-11-09
CVE-2024-51699Buooy Sticky Header WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.3%2024-11-09
CVE-2024-51698Master Bar WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.3%2024-11-09
CVE-2024-51697Doofinder WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.3%2024-11-09
CVE-2024-51696Content Syndication Toolkit Reader WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.3%2024-11-09
CVE-2024-51695Fabrica Synced Pattern Instances WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.3%2024-11-09Fix
CVE-2024-51694Geotagged Media WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.3%2024-11-09
CVE-2024-51693Search order by product SKU for WooCommerce WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.3%2024-11-09
CVE-2024-51692Bing Search API Integration WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.3%2024-11-09
CVE-2024-51691Admin Amplify WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.3%2024-11-09
CVE-2024-51690Wp Slide Categorywise WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.3%2024-11-09
CVE-2024-51689CF7 WOW Styler WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.3%2024-11-09Fix
CVE-2024-51676Delisho WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2024-11-09Fix
CVE-2024-51675aThemes Addons for Elementor WordPress plugin cross-site scripting (XSS)5.4v3.10.2%2024-11-09Fix
CVE-2024-51674Sastra Essential Addons for Elementor WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.3%2024-11-09Fix
CVE-2024-51673HT Politic WordPress plugin cross-site scripting (XSS)5.4v3.10.2%2024-11-09Fix
CVE-2024-51670JS Help Desk WordPress plugin stored cross-site scripting (XSS)4.8v3.10.3%2024-11-09Fix
CVE-2024-51668MyCurator Content Curation WordPress plugin cross-site scripting (XSS)4.8v3.10.3%2024-11-09Fix
CVE-2024-51664Beds24 Online Booking WordPress plugin cross-site scripting (XSS)4.8v3.10.3%2024-11-09Fix
CVE-2024-51663Bricksable for Bricks Builder WordPress plugin cross-site scripting (XSS)4.8v3.10.3%2024-11-09Fix
CVE-2024-51662Black Widgets For Elementor WordPress plugin cross-site scripting (XSS)5.4v3.10.3%2024-11-09Fix
CVE-2024-51647Featured Posts Scroll WordPress plugin CSRF to stored cross-site scripting (XSS)7.1CNA v3.10.2%2024-11-09
CVE-2024-51630Responsive Flickr Gallery WordPress plugin CSRF to stored XSS7.1CNA v3.10.2%2024-11-09
CVE-2024-51629Header Footer Composer for Elementor WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.3%2024-11-09
CVE-2024-51628EzyOnlineBookings Online Booking System Widget WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.3%2024-11-09
CVE-2024-51627Audio Comparison Lite WordPress plugin stored cross-site scripting (XSS)6.5CNA v3.10.3%2024-11-09Fix
CVE-2024-51625Quran Shortcode WordPress plugin SQL injection8.5CNA v3.10.4%2024-11-09
CVE-2024-51623WP EIS WordPress plugin SQL injection8.5CNA v3.10.4%2024-11-09
CVE-2024-51622WP EASY RECIPE WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.3%2024-11-09
CVE-2024-51621Download-Mirror-Counter WordPress plugin SQL injection8.5CNA v3.10.4%2024-11-09
CVE-2024-51620Porsline WordPress plugin SQL injection8.5CNA v3.10.4%2024-11-09Fix
CVE-2024-51619Market 360 Viewer WordPress plugin SQL injection8.5CNA v3.10.4%2024-11-09
CVE-2024-51618Custom Admin Menu WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2024-11-09
CVE-2024-51616AwesomePress WordPress plugin stored cross-site scripting (XSS)6.5CNA v3.10.2%2024-11-09
CVE-2024-51614Aajoda Testimonials WordPress plugin stored cross-site scripting (XSS)6.5CNA v3.10.2%2024-11-09
CVE-2024-51613TradeMe widgets WordPress plugin stored cross-site scripting (XSS)6.5CNA v3.10.3%2024-11-09
CVE-2024-51612Reftagger Shortcode WordPress plugin stored cross-site scripting (XSS)6.5CNA v3.10.2%2024-11-09
CVE-2024-51611WP Feature Box WordPress plugin stored cross-site scripting (XSS)6.5CNA v3.10.3%2024-11-09
CVE-2024-51610Display Terms Shortcode WordPress plugin cross-site scripting (XSS)5.4v3.10.2%2024-11-09
CVE-2024-51609Emoji Shortcode WordPress plugin cross-site scripting (XSS)5.4v3.10.2%2024-11-09
CVE-2024-51608AmaDiscount WordPress plugin SQL injection8.8v3.10.5%2024-11-09
CVE-2024-51607Golf Tracker WordPress plugin SQL injection8.5CNA v3.10.4%2024-11-09
CVE-2024-51606Blrt WP Embed WordPress plugin SQL injection8.8v3.10.5%2024-11-09
CVE-2024-51605Genoo WordPress plugin cross-site scripting (XSS)5.4v3.10.2%2024-11-09Fix
CVE-2024-51604Media Modal WordPress plugin cross-site scripting (XSS)5.4v3.10.2%2024-11-09
CVE-2024-51603NMR Strava activities WordPress plugin cross-site scripting (XSS)5.4v3.10.3%2024-11-09Fix
CVE-2024-51602Simple Job Manager WordPress plugin SQL injection8.5CNA v3.10.4%2024-11-09
CVE-2024-51601Website price calculator WordPress plugin SQL injection8.5CNA v3.10.4%2024-11-09
CVE-2024-51599Simple Business Manager WordPress plugin cross-site scripting (XSS)5.4v3.10.3%2024-11-09
CVE-2024-51598Selar.co Widget WordPress plugin cross-site scripting (XSS)5.4v3.10.2%2024-11-09
CVE-2024-51597ThemeShark Templates and Widgets for Elementor WordPress plugin stored cross-site scripting (XSS)5.4v3.10.3%2024-11-09
CVE-2024-51596Business WordPress plugin cross-site scripting (XSS)5.4v3.10.2%2024-11-09
CVE-2024-51595SKSDEV Toolkit WordPress plugin stored cross-site scripting (XSS)5.4v3.10.2%2024-11-09
CVE-2024-51594Gmap Point List WordPress plugin stored cross-site scripting (XSS)5.4v3.10.2%2024-11-09
CVE-2024-51593Курс валют UAH WordPress plugin stored cross-site scripting (XSS)5.4v3.10.3%2024-11-09
CVE-2024-51592Meta Store Elements WordPress plugin cross-site scripting (XSS)5.4v3.10.2%2024-11-09
CVE-2024-51591Slicko WordPress plugin cross-site scripting (XSS)5.4v3.10.3%2024-11-09
CVE-2024-51590Hoo Addons for Elementor WordPress plugin cross-site scripting (XSS)5.4v3.10.2%2024-11-09
CVE-2024-51589Bigmart Elements WordPress plugin cross-site scripting (XSS)5.4v3.10.2%2024-11-09
CVE-2024-51588Super Addons for Elementor WordPress plugin cross-site scripting (XSS)5.4v3.10.3%2024-11-09
CVE-2024-51587Definitive Addons for Elementor WordPress plugin stored cross-site scripting (XSS)5.4v3.10.2%2024-11-09
CVE-2024-51586Elementary Addons WordPress plugin stored cross-site scripting (XSS)5.4v3.10.2%2024-11-09
CVE-2024-51585Sales Page Addon WordPress plugin stored cross-site scripting (XSS)5.4v3.10.3%2024-11-09
CVE-2024-515795 Stars Rating Funnel WordPress plugin SQL injection8.5CNA v3.10.4%2024-11-09
CVE-2024-51570Easy Gallery WordPress plugin SQL injection8.5CNA v3.10.4%2024-11-09
CVE-2024-50544RSVP ME WordPress plugin SQL injection8.5CNA v3.10.4%2024-11-09
CVE-2024-50539Lodgix.com Vacation Rental Website Builder WordPress plugin SQL injection8.5CNA v3.10.4%2024-11-09
CVE-2024-50524Administrator Z WordPress plugin SQL injection8.5CNA v3.10.4%2024-11-09Fix
CVE-2024-50262Linux kernel bpf out-of-bounds write7.8CNA v3.10.3%2024-11-09Fix
CVE-2024-50261Linux kernel macsec offload packet transmission use-after-free7.8CNA v3.10.2%2024-11-09Fix
CVE-2024-50260Linux kernel sockmap program link updates null pointer dereference4.7v3.10.2%2024-11-09Fix
CVE-2024-50259Linux kernel netdevsim nexthop bucket activity out-of-bounds read5.5v3.10.2%2024-11-09Fix
CVE-2024-50258Linux kernel net crash5.5v3.10.2%2024-11-09Fix
CVE-2024-50257Linux kernel netfilter ip6tables getsockopt handler use-after-free7.0CNA v3.10.3%2024-11-09Fix
CVE-2024-50256Linux kernel IPv6 netfilter reset packet vulnerability7.5CNA v3.10.5%2024-11-09Fix
CVE-2024-50255Linux kernel Bluetooth HCI supported codecs null pointer dereference5.5v3.10.2%2024-11-09Fix
CVE-2024-50254Linux kernel BPF bits iterator memory leak5.5v3.10.2%2024-11-09Fix
CVE-2024-50253Linux kernel BPF bits iterator vulnerability7.8CNA v3.10.2%2024-11-09Fix
CVE-2024-50252Linux kernel mlxsw Spectrum IPIP driver memory leak5.5v3.10.2%2024-11-09Fix
CVE-2024-50251Linux kernel netfilter payload expression vulnerability6.2NVD v3.10.5%2024-11-09Exploit codeFix
CVE-2024-50250Linux kernel fsdax file unsharing vulnerability7.8CNA v3.10.2%2024-11-09Fix
CVE-2024-50249Linux kernel ACPI CPPC lock improper locking5.5v3.10.2%2024-11-09Fix
CVE-2024-50248Linux kernel NTFS3 attribute enumeration memory corruption7.1CNA v3.10.2%2024-11-09Fix
CVE-2024-50247Linux kernel NTFS3 decompression out-of-bounds read7.3CNA v3.10.2%2024-11-09Fix
CVE-2024-50246Linux kernel NTFS3 attribute allocation size check vulnerability7.8CNA v3.10.2%2024-11-09Fix
CVE-2024-50245Linux kernel fs/ntfs3 deadlock5.5v3.10.2%2024-11-09Fix
CVE-2024-50244Linux kernel NTFS3 inode clear vulnerability5.5v3.10.2%2024-11-09Fix
CVE-2024-50243Linux kernel NTFS3 inode creation rollback vulnerability5.5v3.10.2%2024-11-09Fix
CVE-2024-50242Linux kernel NTFS3 file release vulnerability7.8v3.10.2%2024-11-09Fix
CVE-2024-50241Linux kernel NFSD copy operation vulnerability7.5CNA v3.10.5%2024-11-09Fix
CVE-2024-50240Linux kernel qmp-usb null pointer dereference5.5v3.10.2%2024-11-09Fix
CVE-2024-50239Linux kernel qmp-usb-legacy null pointer dereference5.5v3.10.2%2024-11-09Fix
CVE-2024-50238Linux kernel qmp-usbc null pointer dereference5.5v3.10.2%2024-11-09Fix
CVE-2024-50237Linux kernel mac80211 uninitialized resource use7.8CNA v3.10.3%2024-11-09Fix
CVE-2024-50236Linux kernel ath10k Wi-Fi driver memory leak5.5v3.10.3%2024-11-09Fix
CVE-2024-50235Linux kernel cfg80211 CQM configuration double free7.8CNA v3.10.2%2024-11-09Fix
CVE-2024-50234Linux kernel iwlegacy Wi-Fi driver resume handling race condition7.0v3.10.2%2024-11-09Fix
CVE-2024-50233Linux kernel ad9832 frequency synthesizer driver divide by zero5.5v3.10.3%2024-11-09Fix
CVE-2024-50232Linux kernel ad7124 ADC driver divide by zero5.5v3.10.2%2024-11-09Fix
CVE-2024-50231Linux kernel IIO gain-time-scale helper memory leak5.5v3.10.2%2024-11-09Fix
CVE-2024-50230Linux kernel nilfs2 directory page cache handling out-of-bounds write7.8CNA v3.10.3%2024-11-09Fix
CVE-2024-50229Linux kernel nilfs2 symlink creation deadlock5.5v3.10.2%2024-11-09Fix
CVE-2024-50227Linux kernel Thunderbolt retimer scanning out-of-bounds read7.1v3.10.2%2024-11-09Fix
CVE-2024-50226Linux kernel CXL port decoder shutdown use-after-free7.8v3.10.2%2024-11-09Fix
CVE-2024-50225Linux kernel Btrfs split bio error handling null pointer dereference7.8CNA v3.10.2%2024-11-09Fix
CVE-2024-50224Linux kernel fsl-dspi SPI driver null pointer dereference5.5v3.10.2%2024-11-09Fix
CVE-2024-50223Linux kernel NUMA task scheduling null pointer dereference5.5v3.10.2%2024-11-09Fix
CVE-2024-50222Linux kernel iov_iter page copy denial of service7.0CNA v3.10.2%2024-11-09Fix
CVE-2024-50221Linux kernel Vangogh GPU power management driver out-of-bounds write7.8CNA v3.10.2%2024-11-09Fix
CVE-2024-50220Linux kernel fork time-of-check time-of-use race condition4.7v3.10.2%2024-11-09Fix
CVE-2024-50218Linux kernel OCFS2 inline data truncation vulnerability5.5v3.10.3%2024-11-09Fix
CVE-2024-50217Linux kernel Btrfs device scanning use-after-free7.8CNA v3.10.3%2024-11-09Fix
CVE-2024-50216In the Linux kernel, the following vulnerability has been resolved: xfs: fix finding a last resort AG in xfs_filestream_pick_ag When the main loop in xfs_filestream_pick_ag fails to find a suitable AG it tries to just pick the online AG. But the loop for that uses args->pag as loop iterator while5.5v3.10.2%2024-11-09Fix
CVE-2024-50215Linux kernel nvmet-auth double free8.1CNA v3.10.6%2024-11-09Fix
CVE-2024-50214Linux kernel DRM HDMI connector helper memory leak5.5v3.10.2%2024-11-09Fix
CVE-2024-50213Linux kernel DRM HDMI mode helper memory leak5.5v3.10.2%2024-11-09Fix
CVE-2024-50212Linux kernel allocation tag tracking memory leak5.5v3.10.2%2024-11-09Fix
CVE-2024-42000Mattermost unauthorized access to view channels' details2.7CNA v3.10.3%2024-11-09Fix
CVE-2024-36250Mattermost MFA Code Replay3.1CNA v3.10.2%2024-11-09Fix
CVE-2024-10953Amazon data.all incorrect authorization5.3CNA v4.00.3%2024-11-09Fix
CVE-2024-10876Charitable WordPress plugin reflected cross-site scripting6.1CNA v3.10.4%2024-11-09Fix
CVE-2024-10871Category Ajax Filter WordPress plugin unauthenticated local file inclusion9.8CNA v3.10.8%2024-11-09Fix
CVE-2024-10837SysBasics Customize My Account for WooCommerce WordPress plugin reflected cross-site scripting6.1CNA v3.10.4%2024-11-09Fix
CVE-2024-10814Code Embed WordPress plugin authenticated (Contributor+) server-side request forgery6.4CNA v3.10.3%2024-11-09Fix
CVE-2024-10801WordPress User Extra Fields plugin unauthenticated arbitrary file upload9.8CNA v3.10.9%2024-11-09Fix
CVE-2024-10779Cowidgets Elementor Addons WordPress plugin authenticated (Contributor+) post disclosure4.3v3.10.3%2024-11-09
CVE-2024-10770Envo Extra WordPress plugin authenticated (Contributor+) post disclosure4.3CNA v3.10.3%2024-11-09Fix
CVE-2024-10693SKT Addons for Elementor WordPress plugin authenticated (Contributor+) post disclosure4.3CNA v3.10.3%2024-11-09Fix
CVE-2024-10688Attesa Extra WordPress plugin authenticated (Contributor+) post disclosure4.3CNA v3.10.3%2024-11-09Fix
CVE-2024-10683Contact Form 7 - PayPal and Stripe Add-on WordPress plugin reflected cross-site scripting6.1CNA v3.10.4%2024-11-09Fix
CVE-2024-10676Conversion Helper WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.3%2024-11-09
CVE-2024-10674Th Shop Mania WordPress theme authenticated (Subscriber+) arbitrary plugin Installation/Activation8.8CNA v3.11.7%2024-11-09Exploit codeFix
CVE-2024-10673Top Store WordPress theme authenticated (Subscriber+) arbitrary plugin Installation/Activation8.8CNA v3.11.2%2024-11-09Exploit codeFix
CVE-2024-10669Countdown Timer block Display the event's date into a timer. WordPress plugin post disclosure4.3CNA v3.10.3%2024-11-09Fix
CVE-2024-10667Content Slider Block WordPress plugin information disclosure4.3CNA v3.10.3%2024-11-09Fix
CVE-2024-10640realmag777 FOX code injection7.3CNA v3.10.5%2024-11-09Fix
CVE-2024-10627WooCommerce Support Ticket System WordPress plugin unauthenticated arbitrary file upload9.8CNA v3.10.9%2024-11-09Fix
CVE-2024-10626WooCommerce Support Ticket System WordPress plugin arbitrary file deletion8.1v3.10.9%2024-11-09Fix
CVE-2024-10625WooCommerce Support Ticket System WordPress plugin unauthenticated arbitrary file deletion9.1v3.11.0%2024-11-09Fix
CVE-2024-10589Leopard WordPress plugin missing authorization authenticated arbitrary options update9.8CNA v3.10.5%2024-11-09Fix
CVE-2024-10588Debug Tool WordPress plugin missing authorization to information exposure4.3CNA v3.10.3%2024-11-09
CVE-2024-10586Debug Tool WordPress plugin unauthenticated arbitrary file creation9.8CNA v3.12.1%2024-11-09Exploit code
CVE-2024-10547WP Membership WordPress plugin unauthenticated arbitrary file upload9.8CNA v3.10.9%2024-11-09Fix
CVE-2024-10508RegistrationMagic WordPress plugin privilege escalation9.8CNA v3.11.5%2024-11-09Exploit codeFix
CVE-2024-10470WPLMS Learning Management System for WordPress, WordPress LMS WordPress theme arbitrary file read9.8CNA v3.134.8%2024-11-09Emerging ThreatsExploit codeFix
CVE-2024-10352Magical Addons For Elementor WordPress plugin sensitive information exposure4.3CNA v3.10.3%2024-11-09Fix
CVE-2024-10294CE21 Suite WordPress plugin missing authorization to unauthenticated plugin settings Change7.5v3.10.3%2024-11-09
CVE-2024-10285CE21 Suite WordPress plugin JWT token disclosure7.5NVD v3.10.6%2024-11-09
CVE-2024-10284CE21 Suite WordPress plugin authentication bypass9.8v3.10.4%2024-11-09Fix
CVE-2024-10261cozmoslabs Paid Membership Subscriptions do_shortcode action code injection7.3CNA v3.10.5%2024-11-09Fix
CVE-2024-9874WordPress Poll Maker plugin authenticated (Administrator+) time-based SQL injection7.2v3.10.7%2024-11-09Fix
CVE-2024-9775Anih - Creative Agency WordPress theme authenticated (Administrator+) stored cross-site scripting4.8v3.10.3%2024-11-09
CVE-2024-9270Lenxel Core for Lenxel(LNX) LMS WordPress plugin stored cross-site scripting6.4CNA v3.10.3%2024-11-09Fix
CVE-2024-9262User Meta WordPress plugin insecure direct object reference6.5CNA v3.10.4%2024-11-09Fix
CVE-2024-9226Landing Page Cat WordPress plugin reflected cross-site scripting6.1CNA v3.10.4%2024-11-09Fix
CVE-2024-8960Cowidgets Elementor Addons WordPress plugin stored cross-site scripting5.4v3.10.3%2024-11-09Fix
CVE-2024-8756Quform - WordPress Form Builder plugin unauthenticated sensitive information exposure5.3CNA v3.10.4%2024-11-09Fix
CVE-2024-52009Git credentials are exposed in atlantis logs8.5CNA v4.00.7%2024-11-08Fix
CVE-2024-52007XXE vulnerability in XSLT parsing in `org.hl7.fhir.core`8.6CNA v3.10.9%2024-11-08Fix
CVE-2024-52004Remote code execution vulnerabilities in MediaCMS8.7CNA v4.00.7%2024-11-08Fix
CVE-2024-52002Cross-site request forgery (CSRF) in several iTop pages7.6CNA v3.00.7%2024-11-08Exploit codeFix
CVE-2024-52001Portal user is able to access forbidden services information in Combodo iTop4.3CNA v3.00.3%2024-11-08Fix
CVE-2024-52000Reflected cross-site scripting exploit in Combodo iTop8.1CNA v3.00.4%2024-11-08Fix
CVE-2024-51998Path traversal using file URI scheme without supplying hostname in changedetection.io8.6CNA v3.10.7%2024-11-08Fix
CVE-2024-51997The Attestation Results Token can be arbitrarily modified without being detected in Trustee8.1CNA v3.10.3%2024-11-08Fix
CVE-2024-51987DuendeSoftware Duende.AccessTokenManagement HTTP client uses incorrect token after refresh5.4CNA v3.10.2%2024-11-08Fix
CVE-2024-51211OS4ED Opensis SQL injection9.8CISA ADP v3.12.3%2024-11-08Nuclei
CVE-2024-5115707FLY-CMS cross-site request forgery4.7CISA ADP v3.10.2%2024-11-08
CVE-2024-51152Alexstack Laravel Cms file upload7.2v3.11.0%2024-11-08
CVE-2024-51055Hoosk cross-site scripting6.5CISA ADP v3.10.6%2024-11-08
CVE-2024-51032oretnom23 Toll Tax Management System manage_recipient.php of Sourcecodester cross-site scripting5.4v3.10.4%2024-11-08Exploit code
CVE-2024-51031oretnom23 Cab Management System manage_account.php in Sourcecodester cross-site scripting5.4v3.10.4%2024-11-08Exploit code
CVE-2024-51030oretnom23 Cab Management System SQL injection6.5v3.10.7%2024-11-08Exploit code
CVE-2024-50966Timgreen Dingfanzu Cms cross-site request forgery9.3CISA ADP v3.10.3%2024-11-08
CVE-2024-50811hopetree izone lts active push function server-side request forgery9.1CISA ADP v3.10.4%2024-11-08
CVE-2024-50810hopetree izone lts article comment function cross-site scripting5.4CISA ADP v3.10.2%2024-11-08
CVE-2024-50809SDCMS theme.php command injection8.8CISA ADP v3.10.7%2024-11-08
CVE-2024-50808Seacms code injection8.8CISA ADP v3.10.6%2024-11-08
CVE-2024-50634Sbond Watcharr cleartext transmission of sensitive information8.8v3.10.4%2024-11-08
CVE-2024-50593HASOMED Elefant Hard-coded Service Password7.8CISA ADP v3.10.2%2024-11-08Fix
CVE-2024-50592HASOMED Elefant Software Updater local privilege escalation via race condition7.0CISA ADP v3.10.2%2024-11-08Fix
CVE-2024-50591HASOMED Elefant Software Updater local privilege escalation via command injection7.8CISA ADP v3.12.0%2024-11-08Fix
CVE-2024-50590HASOMED Elefant local privilege escalation via Weak Service Binary Permissions7.8CISA ADP v3.10.2%2024-11-08Fix
CVE-2024-50589HASOMED Elefant unprotected FHIR API7.5CISA ADP v3.10.6%2024-11-08Fix
CVE-2024-50588HASOMED Elefant Unprotected Exposed Firebird Database with default credentials9.8CISA ADP v3.10.7%2024-11-08Fix
CVE-2024-50378Apache Airflow: Secrets not masked in UI when sensitive variables are set via Airflow cli4.9CISA ADP v3.11.2%2024-11-08Fix
CVE-2024-50211Linux kernel UDF filesystem inode block mapping vulnerability7.8CNA v3.10.2%2024-11-08Fix
CVE-2024-50210Linux kernel posix clock improper locking5.5NVD v3.10.2%2024-11-08Fix
CVE-2024-50209Linux kernel bnxt_re RDMA driver vulnerability7.8v3.10.2%2024-11-08Fix
CVE-2024-50208Linux kernel bnxt_re RDMA driver out-of-bounds read7.8CNA v3.10.2%2024-11-08Fix
CVE-2024-50207Linux kernel ring buffer subbuffer order change vulnerability7.8CNA v3.10.1%2024-11-08Fix
CVE-2024-50206Linux kernel mtk_eth_soc DMA initialization out-of-bounds write9.8CNA v3.10.4%2024-11-08Fix
CVE-2024-50205Linux kernel FireWire audio PCM constraints divide by zero5.5NVD v3.10.2%2024-11-08Fix
CVE-2024-50204In the Linux kernel, the following vulnerability has been resolved: fs: don't try and remove empty rbtree node When copying a namespace we won't have added the new copy into the namespace rbtree until after the copy succeeded. Calling free_mnt_ns() will try to remove the copy from the rbtree which5.5v3.10.2%2024-11-08Fix
CVE-2024-50203Linux kernel heap-based buffer overflow7.8CNA v3.10.2%2024-11-08Fix
CVE-2024-50202Linux kernel nilfs2 directory lookup denial of service5.5v3.10.2%2024-11-08Fix
CVE-2024-50201Linux kernel Radeon encoder clone configuration vulnerability5.5v3.10.2%2024-11-08Fix
CVE-2024-50200Linux kernel maple tree spanning store vulnerability7.8CNA v3.10.2%2024-11-08Fix
CVE-2024-50199Linux kernel HugeTLB swapoff handling memory leak5.5v3.10.2%2024-11-08Fix
CVE-2024-50198Linux kernel VEML6030 light sensor driver null pointer dereference5.5v3.10.2%2024-11-08Fix
CVE-2024-50197Linux kernel Intel pin controller platform driver memory leak5.5v3.10.2%2024-11-08Fix
CVE-2024-50196Linux kernel Ocelot pin controller interrupt handling denial of service5.5v3.10.2%2024-11-08Fix
CVE-2024-50195Linux kernel PTP clock settime handling vulnerability7.1CNA v3.10.2%2024-11-08Fix
CVE-2024-50194Linux kernel arm64 uprobes vulnerability5.5v3.10.2%2024-11-08Fix
CVE-2024-50193Linux kernel x86 NMI return path vulnerability7.1v3.10.2%2024-11-08Fix
CVE-2024-50192Linux kernel GICv4 VPE affinity migration race condition4.7v3.10.2%2024-11-08Fix
CVE-2024-50191Linux kernel ext4 error handling vulnerability5.5v3.10.2%2024-11-08Fix
CVE-2024-50190Linux kernel ice driver Tx topology configuration memory leak5.5v3.10.2%2024-11-08Fix
CVE-2024-50189Linux kernel amd_sfh HID driver vulnerability7.8CNA v3.10.2%2024-11-08Fix
CVE-2024-50188Linux kernel DP83869 PHY driver vulnerability7.8CNA v3.10.2%2024-11-08Fix
CVE-2024-50187Linux kernel VC4 performance monitor vulnerability7.8CNA v3.10.2%2024-11-08Fix
CVE-2024-50186Linux kernel socket creation error path use-after-free7.8CNA v3.10.2%2024-11-08Fix
CVE-2024-50185Linux kernel MPTCP DSS option handling vulnerability8.2CNA v3.10.6%2024-11-08Fix
CVE-2024-50184Linux kernel virtio_pmem driver denial of service5.5v3.10.2%2024-11-08Fix
CVE-2024-50183Linux kernel lpfc NPIV instance teardown race condition4.7v3.10.2%2024-11-08Fix
CVE-2024-50182Linux kernel memfd_secret direct-map protection vulnerability7.1CNA v3.10.2%2024-11-08Fix
CVE-2024-50180Linux kernel sisfb out-of-bounds write7.8v3.10.3%2024-11-08Fix
CVE-2024-50179Linux kernel Ceph client dirty page handling vulnerability5.5v3.10.2%2024-11-08Fix
CVE-2024-50178Linux kernel Loongson3 cpufreq driver vulnerability5.5v3.10.2%2024-11-08Fix
CVE-2024-50177Linux kernel AMD display DML2.1 integer overflow5.5v3.10.2%2024-11-08Fix
CVE-2024-50176Linux kernel k3-r5 remote processor driver improper error handling5.5v3.10.2%2024-11-08Fix
CVE-2024-50175In the Linux kernel, the following vulnerability has been resolved: media: qcom: camss: Remove use_count guard in stop_streaming The use_count check was introduced so that multiple concurrent Raw Data Interfaces RDIs could be driven by different virtual channels VCs on the CSIPHY input driving the7.8CNA v3.10.2%2024-11-08Fix
CVE-2024-50174Linux kernel Panthor GPU group handle lookup race condition7.8CNA v3.10.2%2024-11-08Fix
CVE-2024-50173Linux kernel Panthor GPU scheduler vulnerability7.8CNA v3.10.2%2024-11-08Fix
CVE-2024-48073Sunniwell HT3300 update program command injection9.8CISA ADP v3.11.2%2024-11-08
CVE-2024-48011Dell PowerProtect DD information disclosure3.1CNA v3.10.3%2024-11-08Fix
CVE-2024-48010Dell PowerProtect DD improper access control6.5CNA v3.10.4%2024-11-08Fix
CVE-2024-47190Northern.tech Hosted Mender server-side request forgery2.7CISA ADP v3.10.3%2024-11-08
CVE-2024-47072XStream binary stream driver denial of service7.5CNA v3.12.0%2024-11-08Fix
CVE-2024-46948Northern.tech Mender improper access control4.3v3.10.3%2024-11-08Fix
CVE-2024-46947Northern.tech Mender server-side request forgery6.5CISA ADP v3.10.4%2024-11-08
CVE-2024-45765Dell Enterprise SONiC OS OS command injection9.1CNA v3.11.4%2024-11-08Fix
CVE-2024-45764Dell Enterprise SONiC OS missing authentication step9.0CNA v3.10.5%2024-11-08Fix
CVE-2024-45763Dell Enterprise SONiC OS OS command injection9.1CNA v3.11.4%2024-11-08Fix
CVE-2024-45759Dell PowerProtect DD incorrect privilege assignment6.8CNA v3.10.1%2024-11-08Fix
CVE-2024-44765MGT-COMMERCE CloudPanel incorrect authorization6.5CISA ADP v3.10.7%2024-11-08
CVE-2024-40240Homeserve incorrect improper access control6.8v3.10.3%2024-11-08
CVE-2024-40239Hitbytes Life incorrect improper access control6.8v3.10.3%2024-11-08
CVE-2024-35427Lonelycoder Vmir improper check for exceptional conditions5.5CISA ADP v3.10.2%2024-11-08
CVE-2024-35426Lonelycoder Vmir buffer overflow9.8CISA ADP v3.10.6%2024-11-08
CVE-2024-35425Lonelycoder Vmir improper isolation5.5CISA ADP v3.10.2%2024-11-08
CVE-2024-35424Lonelycoder Vmir improper check for exceptional conditions5.5CISA ADP v3.10.2%2024-11-08
CVE-2024-35423Lonelycoder Vmir out-of-bounds read7.8CISA ADP v3.10.3%2024-11-08
CVE-2024-35422Lonelycoder Vmir buffer overflow7.8CISA ADP v3.10.3%2024-11-08
CVE-2024-35421Lonelycoder Vmir improper check for exceptional conditions5.5CISA ADP v3.10.2%2024-11-08
CVE-2024-35420Kanaka Wac buffer overflow6.2CISA ADP v3.10.2%2024-11-08
CVE-2024-35419Kanaka Wac buffer overflow5.5CISA ADP v3.10.2%2024-11-08
CVE-2024-35418Kanaka Wac buffer overflow6.2CISA ADP v3.10.2%2024-11-08
CVE-2024-35410Kanaka Wac buffer overflow6.2CISA ADP v3.10.3%2024-11-08
CVE-2024-27532bytecodealliance Webassembly Micro Runtime null pointer dereference7.5CISA ADP v3.10.5%2024-11-08Fix
CVE-2024-27530wasm3 pywasm3 contains a use-after-free in ForEachModule8.4CISA ADP v3.10.2%2024-11-08
CVE-2024-27529wasm3 uncontrolled memory allocation vulnerability8.4CISA ADP v3.10.3%2024-11-08
CVE-2024-27528wasm3 pywasm3 has an Invalid Memory Read, leading to DoS and potential code execution8.4CISA ADP v3.10.2%2024-11-08
CVE-2024-27527wasm3 improper resource release7.5CISA ADP v3.10.5%2024-11-08
CVE-2024-25431bytecodealliance Webassembly Micro Runtime out-of-bounds read7.8v3.10.6%2024-11-08Fix
CVE-2024-24409ManageEngine ADManager Plus privilege escalation8.8CNA v3.16.2%2024-11-08Exploit codeFix
CVE-2024-21994Denial of service vulnerability in StorageGRID (formerly StorageGRID Webscale)4.3CNA v3.10.4%2024-11-08Fix
CVE-2024-21538Regular expression denial of service (ReDoS) in cross-spawn8.7CNA v4.00.9%2024-11-08Fix
CVE-2024-11026Intelligent Apps Freenow App Keystore SSL.java hard-coded password7.4v3.10.6%2024-11-08
CVE-2024-11000CodeAstro Real Estate Management System About Us page aboutedit.php unrestricted upload7.2v3.10.6%2024-11-08
CVE-2024-10999CodeAstro Real Estate Management System About Us page aboutadd.php unrestricted upload7.2v3.10.6%2024-11-08
CVE-2024-109981000 Projects Bookstore Management System process_category_add.php SQL injection9.8v3.10.7%2024-11-08
CVE-2024-109971000 Projects Bookstore Management System book_list.php SQL injection9.8v3.10.6%2024-11-08
CVE-2024-109961000 Projects Bookstore Management System process_category_edit.php SQL injection9.8v3.10.7%2024-11-08
CVE-2024-10995Codezips Hospital Appointment System removeDoctorResult.php SQL injection9.8v3.10.7%2024-11-08
CVE-2024-10994Codezips Online Institute Management System edit_user.php unrestricted upload8.8v3.10.7%2024-11-08
CVE-2024-10993Codezips Online Institute Management System manage_website.php unrestricted upload8.8v3.10.7%2024-11-08
CVE-2024-10991Codezips Hospital Appointment System editBranchResult.php SQL injection9.8v3.10.7%2024-11-08
CVE-2024-10990SourceCodester Online Veterinary Appointment System view_service.php SQL injection8.8v3.10.5%2024-11-08
CVE-2024-10989code-projects E-Health Care System detail.php SQL injection6.5v3.10.4%2024-11-08
CVE-2024-10988code-projects E-Health Care System doctor_login.php SQL injection9.1v3.10.6%2024-11-08
CVE-2024-10987code-projects E-Health Care System user_appointment.php SQL injection6.5v3.10.4%2024-11-08
CVE-2024-10839ManageEngine SharePoint Manager Plus XML external entity8.5CNA v3.12.4%2024-11-08Fix
CVE-2024-10621Simple Shortcode for Google Maps WordPress plugin stored cross-site scripting6.4CNA v3.10.3%2024-11-08Fix
CVE-2024-10325Elementor Header and Footer Builder WordPress plugin stored cross-site scripting5.4v3.10.3%2024-11-08Fix
CVE-2024-10269Easy SVG Support WordPress plugin stored cross-site scripting5.4v3.10.3%2024-11-08Fix
CVE-2024-10187myCred WordPress plugin stored cross-site scripting5.4v3.10.3%2024-11-08Fix
CVE-2024-9841OpenText ArcSight Management Center and ArcSight Platform stored XSS7.0CNA v4.00.2%2024-11-08Fix
CVE-2024-7982Registrations for The Events Calendar WordPress plugin unauthenticated stored XSS9.6CISA ADP v3.10.7%2024-11-08Fix
CVE-2024-51995Logic bug in ajax.render.php allows for bypass of backOffice access control in Combodo iTop7.1CNA v3.00.4%2024-11-07Fix
CVE-2024-51994Cross-site scripting in portal picture upload in Combodo iTop7.1CNA v3.00.3%2024-11-07Fix
CVE-2024-51993Password is stored in clear in the database in Combodo iTop3.4CNA v3.00.1%2024-11-07Fix
CVE-2024-51990Path traversal via crafted Git repositories in jj9.3CNA v4.00.6%2024-11-07Fix
CVE-2024-51989Cross-site scripting (XSS) vulnerability in PasswordPusher7.1CNA v3.10.3%2024-11-07
CVE-2024-51758Exported files stored in default (`public`) filesystem if not reconfigured in filament2.3CNA v4.00.6%2024-11-07Fix
CVE-2024-51504Apache ZooKeeper: Authentication bypass with IP-based authentication in Admin Server9.1CISA ADP v3.10.9%2024-11-07Fix
CVE-2024-51434Froala WYSIWYG editor allows cross-site scripting (XSS)6.1CISA ADP v3.10.4%2024-11-07
CVE-2024-51428espressif esp-idf resource exhaustion7.5CISA ADP v3.10.5%2024-11-07Exploit code
CVE-2024-50766oretnom23 Survey Application System SQL injection9.8CISA ADP v3.10.5%2024-11-07
CVE-2024-50599Synacor Zimbra Collaboration Suite cross-site scripting6.1CISA ADP v3.163.6%2024-11-07Fix
CVE-2024-50172Linux kernel bnxt_re RDMA driver memory leak5.5v3.10.2%2024-11-07Fix
CVE-2024-50171Linux kernel systemport memory leak5.5v3.10.2%2024-11-07Fix
CVE-2024-50170Linux kernel bcmasp memory leak7.5CNA v3.10.5%2024-11-07Fix
CVE-2024-50169Linux kernel vsock read_skb accounting vulnerability5.5v3.10.2%2024-11-07Fix
CVE-2024-50168Linux kernel net/sun3_82586 memory leak5.5v3.10.2%2024-11-07Fix
CVE-2024-50167Linux kernel be2net memory leak5.5v3.10.3%2024-11-07Fix
CVE-2024-50166Linux kernel fsl fman device driver vulnerability5.5v3.10.2%2024-11-07Fix
CVE-2024-50165Linux kernel BPF mount option parsing memory leak7.8CNA v3.10.2%2024-11-07Fix
CVE-2024-50164Linux kernel BPF memory access verifier vulnerability7.8CNA v3.10.2%2024-11-07Fix
CVE-2024-50163Linux kernel BPF redirect flag handling denial of service5.5v3.10.2%2024-11-07Fix
CVE-2024-50162Linux kernel BPF devmap redirect null pointer dereference9.8CNA v3.10.5%2024-11-07Fix
CVE-2024-50161Linux kernel BPF BTF field parsing improper array index validation7.8CNA v3.10.2%2024-11-07Fix
CVE-2024-50160Linux kernel hda/cs8409 null pointer dereference5.5v3.10.2%2024-11-07Fix
CVE-2024-50159Linux kernel ARM SCMI firmware driver double free7.0CNA v3.10.2%2024-11-07Fix
CVE-2024-50158Linux kernel bnxt_re RDMA driver out-of-bounds read7.8CNA v3.10.2%2024-11-07Fix
CVE-2024-50157Linux kernel bnxt_re RDMA driver pacing denial of service5.5v3.10.2%2024-11-07Fix
CVE-2024-50156Linux kernel MSM display register dump null pointer dereference5.5v3.10.2%2024-11-07Fix
CVE-2024-50155Linux kernel netdevsim trap report worker vulnerability7.8v3.10.2%2024-11-07Fix
CVE-2024-50154Linux kernel TCP/DCCP request socket queue use-after-free9.8CNA v3.10.6%2024-11-07Fix
CVE-2024-50153Linux kernel SCSI target core device allocation null pointer dereference5.5NVD v3.10.3%2024-11-07Fix
CVE-2024-50152Linux kernel smb client double free9.8CNA v3.10.5%2024-11-07Fix
CVE-2024-50151Linux kernel SMB client SMB2 IOCTL handling out-of-bounds write7.8CNA v3.10.3%2024-11-07Fix
CVE-2024-50150Linux kernel USB Type-C alternate mode use-after-free7.8CNA v3.10.2%2024-11-07Fix
CVE-2024-50149Linux kernel Xe GPU job scheduler use-after-free7.8CNA v3.10.2%2024-11-07Fix
CVE-2024-50148Linux kernel Bluetooth BNEP vulnerability5.5NVD v3.10.3%2024-11-07Fix
CVE-2024-50147Linux kernel mlx5 command interface null pointer dereference5.5v3.10.2%2024-11-07Fix
CVE-2024-50146Linux kernel mlx5e netdev profile rollback null pointer dereference5.5v3.10.2%2024-11-07Fix
CVE-2024-50145Linux kernel octeon_ep Rx queue driver null pointer dereference7.5CNA v3.10.6%2024-11-07Fix
CVE-2024-50144In the Linux kernel, the following vulnerability has been resolved: drm/xe: fix unbalanced rpm put() with fence_fini() Currently we can call fence_fini() twice if something goes wrong when sending the GuC CT for the tlb request, since we signal the fence and return an error, leading to the caller5.5v3.10.2%2024-11-07Fix
CVE-2024-50143Linux kernel UDF filesystem vulnerability7.8CNA v3.10.3%2024-11-07Fix
CVE-2024-50142Linux kernel XFRM state validation vulnerability5.5NVD v3.10.3%2024-11-07Fix
CVE-2024-50141In the Linux kernel, the following vulnerability has been resolved: ACPI: PRM: Find EFI_MEMORY_RUNTIME block for PRM handler and context PRMT needs to find the correct type of block to translate the PA-VA mapping for EFI runtime services. The issue arises because the PRMT is finding a block of ty7.8CNA v3.10.3%2024-11-07Fix
CVE-2024-50140In the Linux kernel, the following vulnerability has been resolved: sched/core: Disable page allocation in task_tick_mm_cid() With KASAN and PREEMPT_RT enabled, calling task_work_add() in task_tick_mm_cid() may cause the following splat. [ 63.696416] BUG: sleeping function called from invalid c5.5v3.10.2%2024-11-07Fix
CVE-2024-50139Linux kernel KVM arm64 register reset vulnerability7.9CNA v3.10.2%2024-11-07Fix
CVE-2024-49524Adobe Experience Manager cross-site scripting (DOM-based XSS)5.4CNA v3.10.4%2024-11-07Fix
CVE-2024-49523Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.3%2024-11-07Fix