CVE-2024 records published in November 2024
Page four of four: records 3,001 to 3,750 of the 3,750 published in November 2024, newest first. The first page carries the figures for November 2024.
| CVE | Summary | CVSS | EPSS | Published | Signals |
|---|---|---|---|---|---|
| CVE-2024-48954 | Logpoint SIEM OS command injection | 6.4CISA ADP v3.1 | 0.4% | 2024-11-07 | Fix |
| CVE-2024-48953 | Logpoint SIEM missing authentication | 7.5CISA ADP v3.1 | 0.3% | 2024-11-07 | Fix |
| CVE-2024-48952 | Logpoint Soar missing authentication | 6.4CISA ADP v3.1 | 0.3% | 2024-11-07 | Fix |
| CVE-2024-48951 | Logpoint SIEM server-side request forgery | 7.5CISA ADP v3.1 | 0.3% | 2024-11-07 | Fix |
| CVE-2024-48950 | Logpoint SIEM missing authentication | 7.5CISA ADP v3.1 | 0.3% | 2024-11-07 | Fix |
| CVE-2024-48290 | Realtek RTL8762E BLE SDK Bluetooth Low Energy implementation denial of service | 4.3CISA ADP v3.1 | 0.2% | 2024-11-07 | |
| CVE-2024-47073 | DataEase JWT authentication improper signature verification | 9.3CNA v4.0 | 1.3% | 2024-11-07 | NucleiFix |
| CVE-2024-46961 | Inshot Video Downloader PrivateMainActivity code injection | 8.1CISA ADP v3.1 | 0.4% | 2024-11-07 | |
| CVE-2024-46960 | ASD HD Video Downloader All Format MainBrowserActivity code injection | 8.8CISA ADP v3.1 | 0.5% | 2024-11-07 | |
| CVE-2024-45794 | SQL injection in CreateUser API in Devtron | 8.3CNA v3.1 | 0.7% | 2024-11-07 | Fix |
| CVE-2024-43440 | Moodle: Lfi vulnerability when restoring malformed block backups | 7.5NVD v3.1 | 0.6% | 2024-11-07 | Fix |
| CVE-2024-43438 | Moodle: Idor in feedback non-respondents report allows messaging arbitrary site users | 7.5CNA v3.1 | 0.5% | 2024-11-07 | Fix |
| CVE-2024-43436 | Moodle: Site administration SQL injection via xmldb editor | 7.2CNA v3.1 | 0.8% | 2024-11-07 | Fix |
| CVE-2024-43434 | Moodle: Csrf risk in feedback non-respondents report | 8.1NVD v3.1 | 0.6% | 2024-11-07 | Fix |
| CVE-2024-43431 | Moodle: Idor in badges allows deletion of arbitrary badges | 7.5NVD v3.1 | 0.5% | 2024-11-07 | Fix |
| CVE-2024-43428 | Moodle: Cache poisoning via injection into storage | 7.1NVD v3.1 | 0.2% | 2024-11-07 | Fix |
| CVE-2024-43426 | Moodle: Arbitrary file read risk through pdftex | 7.5CNA v3.1 | 0.7% | 2024-11-07 | Fix |
| CVE-2024-43425 | Moodle: Remote code execution via calculated question types | 8.1NVD v3.1 | 87.5% | 2024-11-07 | NucleiExploit codeFix |
| CVE-2024-40715 | Veeam Enterprise Manager authentication bypass by replay | 7.7CNA v3.0 | 0.6% | 2024-11-07 | Fix |
| CVE-2024-38286 | Apache Tomcat: Denial of service | 8.6CNA v3.1 | 1.7% | 2024-11-07 | Fix |
| CVE-2024-36064 | NLL ACR Phone DialerActivity component vulnerability | 6.2CISA ADP v3.1 | 0.2% | 2024-11-07 | |
| CVE-2024-36063 | Goodwy Right Dialer DialerActivity component vulnerability | 7.5CISA ADP v3.1 | 0.3% | 2024-11-07 | |
| CVE-2024-36062 | AI Call Assistant and Screener InCallActivity component vulnerability | 4.0CISA ADP v3.1 | 0.2% | 2024-11-07 | |
| CVE-2024-30142 | HCL BigFix Compliance is affected by a missing secure flag on a cookie | 3.8CNA v3.1 | 0.1% | 2024-11-07 | Fix |
| CVE-2024-30141 | HCL BigFix Compliance information disclosure | 4.7CNA v3.1 | 0.3% | 2024-11-07 | Fix |
| CVE-2024-30140 | HCL BigFix Compliance is affected by unvalidated redirects and forwards | 5.4CNA v3.1 | 0.2% | 2024-11-07 | Fix |
| CVE-2024-24914 | Authenticated Gaia users can inject code or commands by global variables through special HTTP requests. A Security fix that mitigates this vulnerability is available. | 8.0CNA v3.1 | 0.4% | 2024-11-07 | Fix |
| CVE-2024-10975 | Nomad vulnerable to Cross-Namespace Volume Creation Abusing CSI Write Permission | 7.7CNA v3.1 | 0.5% | 2024-11-07 | Fix |
| CVE-2024-10969 | 1000 Projects Bookstore Management System Login login_process.php SQL injection | 9.8v3.1 | 0.7% | 2024-11-07 | |
| CVE-2024-10968 | 1000 Projects Bookstore Management System contact_process.php SQL injection | 9.8v3.1 | 0.7% | 2024-11-07 | |
| CVE-2024-10967 | code-projects E-Health Care System delete_user_appointment_request.php SQL injection | 7.5v3.1 | 0.8% | 2024-11-07 | |
| CVE-2024-10966 | TOTOLINK X18 cstecgi.cgi os command injection | 8.8v3.1 | 3.2% | 2024-11-07 | |
| CVE-2024-10965 | emqx neuron JSON file schema information disclosure | 6.5v3.1 | 0.5% | 2024-11-07 | |
| CVE-2024-10964 | emqx neuron plugin_handle.c handle_add_plugin buffer overflow | 9.8v3.1 | 0.7% | 2024-11-07 | |
| CVE-2024-10963 | Red Hat Enterprise Linux pam_access module vulnerability | 7.4CNA v3.1 | 0.8% | 2024-11-07 | Fix |
| CVE-2024-10947 | Guangzhou Tuchuang Interlib Library Cluster Automation Management System BatchOrder SQL injection | 7.2v3.1 | 0.6% | 2024-11-07 | |
| CVE-2024-10946 | Guangzhou Tuchuang Interlib Library Cluster Automation Management System SysLib SQL injection | 7.2v3.1 | 0.6% | 2024-11-07 | |
| CVE-2024-10824 | GitHub Enterprise Server secret scanning alerts missing authorization | 6.0CNA v4.0 | 0.3% | 2024-11-07 | Fix |
| CVE-2024-10668 | Google Nearby Auth Bypass in Quickshare | 5.9CNA v4.0 | 0.4% | 2024-11-07 | Fix |
| CVE-2024-10526 | Rapid7 Velociraptor local privilege escalation in Windows Velociraptor service | 8.6CNA v4.0 | 0.2% | 2024-11-07 | Fix |
| CVE-2024-10203 | ManageEngine Endpoint Central agent arbitrary file deletion | 7.0CNA v3.1 | 0.4% | 2024-11-07 | Fix |
| CVE-2024-10027 | WP Booking Calendar WordPress plugin Admin+ stored XSS | 4.8CISA ADP v3.1 | 0.4% | 2024-11-07 | Fix |
| CVE-2024-10007 | GitHub Enterprise Server ghe-firejail privilege escalation | 8.7CNA v4.0 | 0.8% | 2024-11-07 | Fix |
| CVE-2024-9926 | Jetpack WordPress plugin Subscriber+ arbitrary Feedback access | 4.3CISA ADP v3.1 | 1.3% | 2024-11-07 | Exploit codeFix |
| CVE-2024-8810 | GitHub Enterprise Server GitHub Apps permission approval privilege escalation | 8.7CNA v4.0 | 0.4% | 2024-11-07 | Fix |
| CVE-2024-8442 | Prime Slider WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.3% | 2024-11-07 | Fix |
| CVE-2024-8424 | WatchGuard Panda Dome improper privilege management | 8.5CNA v4.0 | 0.2% | 2024-11-07 | Fix |
| CVE-2024-8378 | Safe SVG WordPress plugin Author+ SVG Sanitisation bypass | 4.8CISA ADP v3.1 | 0.3% | 2024-11-07 | Fix |
| CVE-2024-52043 | HumHub GmbH & Co. KG HumHub user enumeration in HubHub | 5.3v3.1 | 0.4% | 2024-11-06 | |
| CVE-2024-51988 | RabbitMQ HTTP API's queue deletion endpoint does not verify that the user has a required permission | 6.5CNA v3.1 | 0.4% | 2024-11-06 | Fix |
| CVE-2024-51757 | happy-dom script tag execution code injection | 9.3CNA v4.0 | 0.8% | 2024-11-06 | Fix |
| CVE-2024-51755 | Unguarded calls to __isset and to array-accesses when the sandbox is enabled in Twig | 2.2CNA v3.1 | 0.4% | 2024-11-06 | Fix |
| CVE-2024-51754 | Unguarded calls to __toString when nesting an object into an array in Twig | 2.2CNA v3.1 | 0.4% | 2024-11-06 | Fix |
| CVE-2024-51751 | Arbitrary file read with file and UploadButton components in Gradio | 6.5CNA v3.1 | 0.7% | 2024-11-06 | Fix |
| CVE-2024-51736 | Command execution hijack on Windows with Process class in symfony/process | 0.0CNA v3.1 | 0.4% | 2024-11-06 | Fix |
| CVE-2024-51409 | Tenda O3 buffer overflow | 6.5CISA ADP v3.1 | 0.4% | 2024-11-06 | |
| CVE-2024-50637 | UnoPim cross-site scripting | 5.4CISA ADP v3.1 | 0.4% | 2024-11-06 | Fix |
| CVE-2024-50345 | Open redirect via browser-sanitized URLs in symfony/http-foundation | 3.1CNA v3.1 | 0.6% | 2024-11-06 | Fix |
| CVE-2024-50343 | Incorrect response from Validator when input ends with `\n` in symfony/validator | 3.1CNA v3.1 | 0.5% | 2024-11-06 | Fix |
| CVE-2024-50342 | Internal address and port enumeration allowed by NoPrivateNetworkHttpClient in symfony/http-client | 3.1CNA v3.1 | 0.5% | 2024-11-06 | Fix |
| CVE-2024-50341 | Security::login does not take into account custom user_checker in symfony/security-bundle | 3.1CNA v3.1 | 0.3% | 2024-11-06 | Fix |
| CVE-2024-50340 | Ability to change environment from query in symfony/runtime | 7.3CNA v3.1 | 64.8% | 2024-11-06 | Reported exploitedNucleiEmerging ThreatsExploit codeFix |
| CVE-2024-49409 | Samsung Mobile Devices Battery Full Capacity node out-of-bounds write | 6.4CNA v3.1 | 0.1% | 2024-11-06 | Fix |
| CVE-2024-49408 | Samsung Mobile Devices usb driver out-of-bounds write | 6.4CNA v3.1 | 0.1% | 2024-11-06 | Fix |
| CVE-2024-49407 | Samsung Mobile Samsung Flow improper access control | 4.6CNA v3.1 | 0.2% | 2024-11-06 | Fix |
| CVE-2024-49406 | Samsung Mobile Blockchain Keystore improper integrity check validation | 6.7CNA v3.1 | 0.1% | 2024-11-06 | Fix |
| CVE-2024-49405 | Samsung Mobile Samsung Pass Private Info improper authentication | 5.3CNA v3.1 | 0.2% | 2024-11-06 | Fix |
| CVE-2024-49404 | Samsung Mobile Samsung Video Player improper access control | 5.5CNA v3.1 | 0.2% | 2024-11-06 | Fix |
| CVE-2024-49403 | Samsung Mobile Samsung Voice Recorder improper access control | 4.6CNA v3.1 | 0.2% | 2024-11-06 | Fix |
| CVE-2024-49402 | Samsung Mobile Devices Dressroom improper input validation | 4.6CNA v3.1 | 0.2% | 2024-11-06 | Fix |
| CVE-2024-49401 | Samsung Mobile Devices Settings Suggestions improper input validation | 5.1CNA v3.1 | 0.2% | 2024-11-06 | Fix |
| CVE-2024-48325 | Portabilis i-Educar SQL injection | 8.1CISA ADP v3.1 | 1.0% | 2024-11-06 | |
| CVE-2024-35146 | IBM Maximo Application Suite cross-site scripting | 5.4CNA v3.1 | 0.3% | 2024-11-06 | Fix |
| CVE-2024-34682 | Samsung Mobile Devices settings improper authorization | 2.4CNA v3.1 | 0.2% | 2024-11-06 | Fix |
| CVE-2024-34681 | Samsung Mobile Devices BluetoothAdapter improper input validation | 6.6CNA v3.1 | 0.1% | 2024-11-06 | |
| CVE-2024-34680 | Samsung Mobile Devices WlanTest implicit intent for sensitive communication | 4.0CNA v3.1 | 0.1% | 2024-11-06 | Fix |
| CVE-2024-34679 | Samsung Mobile Devices Crane incorrect default permissions | 4.0CNA v3.1 | 0.1% | 2024-11-06 | Fix |
| CVE-2024-34678 | Samsung Mobile Devices libsapeextractor.so out-of-bounds write | 5.9CNA v3.1 | 0.2% | 2024-11-06 | Fix |
| CVE-2024-34677 | Samsung Mobile Devices System UI information disclosure | 4.0CNA v3.1 | 0.1% | 2024-11-06 | Fix |
| CVE-2024-34676 | Samsung Mobile Devices parsing subtitle file in libsubextractor.so out-of-bounds write | 4.4CNA v3.1 | 0.2% | 2024-11-06 | Fix |
| CVE-2024-34675 | Samsung Mobile Devices Dex Mode improper access control | 2.4CNA v3.1 | 0.2% | 2024-11-06 | Fix |
| CVE-2024-34674 | Samsung Mobile Devices Contacts improper access control | 4.6CNA v3.1 | 0.2% | 2024-11-06 | Fix |
| CVE-2024-34673 | Samsung Mobile Devices IpcProtocol in Modem improper input validation | 4.1CNA v3.1 | 0.1% | 2024-11-06 | Fix |
| CVE-2024-20540 | Cisco Unified Contact Center Management Portal stored cross-site scripting | 5.4CNA v3.1 | 0.3% | 2024-11-06 | Fix |
| CVE-2024-20539 | Cisco Identity Services Engine stored cross-site scripting | 4.8CNA v3.1 | 0.3% | 2024-11-06 | Fix |
| CVE-2024-20538 | Cisco Identity Services Engine cross-site scripting | 6.1CNA v3.1 | 0.3% | 2024-11-06 | Fix |
| CVE-2024-20537 | Cisco Identity Services Engine authorization bypass | 6.5CNA v3.1 | 0.5% | 2024-11-06 | Fix |
| CVE-2024-20536 | Cisco Nexus Dashboard Fabric Controller SQL injection | 8.8CNA v3.1 | 0.8% | 2024-11-06 | Fix |
| CVE-2024-20534 | Cisco IP Phones with Multiplatform Firmware web UI stored cross-site scripting | 4.8CNA v3.1 | 0.3% | 2024-11-06 | Fix |
| CVE-2024-20533 | Cisco IP Phones with Multiplatform Firmware web UI stored cross-site scripting | 4.8CNA v3.1 | 0.3% | 2024-11-06 | Fix |
| CVE-2024-20532 | Cisco Identity Services Engine arbitrary file read and Delete | 5.5CNA v3.1 | 0.5% | 2024-11-06 | Fix |
| CVE-2024-20531 | Cisco Identity Services Engine XML external entity injection | 5.5CNA v3.1 | 0.4% | 2024-11-06 | Fix |
| CVE-2024-20530 | Cisco Identity Services Engine reflected cross-site scripting | 6.1CNA v3.1 | 0.3% | 2024-11-06 | Fix |
| CVE-2024-20529 | Cisco Identity Services Engine arbitrary file read and Delete | 5.5CNA v3.1 | 0.5% | 2024-11-06 | Fix |
| CVE-2024-20528 | Cisco Identity Services Engine path traversal | 3.8CNA v3.1 | 0.6% | 2024-11-06 | Fix |
| CVE-2024-20527 | Cisco Identity Services Engine arbitrary file read and Delete | 5.5CNA v3.1 | 0.5% | 2024-11-06 | Fix |
| CVE-2024-20525 | Cisco Identity Services Engine reflected cross-site scripting | 6.1CNA v3.1 | 0.3% | 2024-11-06 | Fix |
| CVE-2024-20514 | Cisco Evolved Programmable Network Manager and Prime Infrastructure stored cross-site scripting | 5.4CNA v3.1 | 0.3% | 2024-11-06 | Fix |
| CVE-2024-20511 | Cisco Unified Communications Manager cross-site scripting | 6.1CNA v3.1 | 0.3% | 2024-11-06 | Fix |
| CVE-2024-20507 | Cisco Meeting Management information disclosure | 4.3CNA v3.1 | 0.4% | 2024-11-06 | Fix |
| CVE-2024-20504 | Cisco Secure Email cross-site scripting | 5.4CNA v3.1 | 0.3% | 2024-11-06 | Fix |
| CVE-2024-20487 | Cisco Identity Services Engine stored cross-site scripting Vulnerabiliy | 4.3CNA v3.1 | 0.3% | 2024-11-06 | Fix |
| CVE-2024-20484 | Cisco Enterprise Chat And Email denial of service | 7.5CNA v3.1 | 0.6% | 2024-11-06 | Fix |
| CVE-2024-20476 | Cisco Identity Services Engine authorization bypass | 4.3CNA v3.1 | 0.4% | 2024-11-06 | Fix |
| CVE-2024-20457 | Cisco Unified Communications Manager IM and Presence Service information disclosure | 6.5CNA v3.1 | 0.4% | 2024-11-06 | Fix |
| CVE-2024-20445 | Cisco IP Phone 7800, 8800, and 9800 Series information disclosure | 5.3CNA v3.1 | 0.4% | 2024-11-06 | Fix |
| CVE-2024-20418 | Cisco Ultra-Reliable Wireless Backhaul Software command injection | 10.0CNA v3.1 | 3.1% | 2024-11-06 | Fix |
| CVE-2024-20371 | Cisco Nexus 3550-F Switches Access Control List Programming vulnerability | 5.3CNA v3.1 | 0.5% | 2024-11-06 | Fix |
| CVE-2024-10941 | Mozilla Firefox cross-site scripting | 6.5v3.1 | 0.4% | 2024-11-06 | Fix |
| CVE-2024-10928 | MonoCMS Posts page opensaved.php cross-site scripting | 6.1v3.1 | 0.4% | 2024-11-06 | |
| CVE-2024-10927 | MonoCMS Account Information page account.php cross-site scripting | 6.1v3.1 | 0.4% | 2024-11-06 | |
| CVE-2024-10926 | IBPhoenix ibWebAdmin Tabelas Section toggle_fold_panel.php cross-site scripting | 5.3CNA v4.0 | 0.3% | 2024-11-06 | |
| CVE-2024-10920 | travels-java-api JWT authentication filter hard-coded cryptographic key | 3.7v3.1 | 0.5% | 2024-11-06 | |
| CVE-2024-10919 | didi Super-Jacoco triggerUnitCover os command injection | 9.8v3.1 | 5.1% | 2024-11-06 | |
| CVE-2024-10916 | D-Link DNS-320/DNS-320LW/DNS-325/DNS-340L HTTP GET request info.xml information disclosure | 5.3v3.1 | 1.5% | 2024-11-06 | |
| CVE-2024-10915 | D-Link DNS-320/DNS-320LW/DNS-325/DNS-340L account_mgr.cgi cgi_user_add os command injection | 9.8v3.1 | 79.6% | 2024-11-06 | Reported exploitedNucleiEmerging Threats |
| CVE-2024-10914 | D-Link DNS-320/DNS-320LW/DNS-325/DNS-340L account_mgr.cgi cgi_user_add os command injection | 9.8NVD v3.1 | 96.3% | 2024-11-06 | Reported exploitedNucleiEmerging ThreatsExploit code |
| CVE-2024-10827 | Google Chrome Serial use-after-free | 8.8v3.1 | 0.6% | 2024-11-06 | Fix |
| CVE-2024-10826 | Google Chrome Family Experiences use-after-free | 8.8v3.1 | 0.6% | 2024-11-06 | Fix |
| CVE-2024-10715 | MapPress Maps for WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.3% | 2024-11-06 | Fix |
| CVE-2024-10647 | WS Form LITE Drag and Drop Contact Form Builder for WordPress plugin reflected cross-site scripting | 6.1CNA v3.1 | 0.3% | 2024-11-06 | Fix |
| CVE-2024-10543 | Tumult Hype Animations WordPress plugin missing authorization | 4.3CNA v3.1 | 0.3% | 2024-11-06 | Fix |
| CVE-2024-10535 | Video Gallery for WooCommerce WordPress plugin unauthorized access | 5.3CNA v3.1 | 0.4% | 2024-11-06 | Fix |
| CVE-2024-10318 | F5 NGINX OpenID Connect A session fixation | 5.1CNA v4.0 | 0.3% | 2024-11-06 | Fix |
| CVE-2024-10186 | Event Post WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.3% | 2024-11-06 | Fix |
| CVE-2024-10168 | realmag777 Active Products Tables for WooCommerce woot_button shortcode stored cross-site scripting | 5.4v3.1 | 0.3% | 2024-11-06 | Fix |
| CVE-2024-10082 | Ericsson CodeChecker authentication bypass | 8.7CNA v3.1 | 0.5% | 2024-11-06 | Fix |
| CVE-2024-10081 | CodeChecker vulnerable to authentication bypass when using specifically crafted URLs | 10.0CNA v3.1 | 39.9% | 2024-11-06 | NucleiFix |
| CVE-2024-10028 | Everest Backup WordPress plugin information disclosure | 7.5CNA v3.1 | 0.5% | 2024-11-06 | Fix |
| CVE-2024-10020 | Heateor Social Login WordPress plugin authentication bypass via Disqus OAuth provider | 8.1v3.1 | 0.5% | 2024-11-06 | Fix |
| CVE-2024-9946 | Social Share, Social Login and Social Comments Plugin WordPress plugin authentication bypass | 8.1v3.1 | 0.6% | 2024-11-06 | Fix |
| CVE-2024-9934 | WP Image Zoom reflected cross-site scripting | 6.1CISA ADP v3.1 | 0.3% | 2024-11-06 | |
| CVE-2024-9902 | Red Hat Ansible Automation Platform Execution Environments ansible-core incorrect authorization | 6.3CNA v3.1 | 0.3% | 2024-11-06 | Fix |
| CVE-2024-9681 | curl HSTS subdomain overwrites parent cache entry | 6.5v3.1 | 2.0% | 2024-11-06 | Fix |
| CVE-2024-9307 | mFolio Lite WordPress plugin missing authorization authenticated file upload | 8.8NVD v3.1 | 1.0% | 2024-11-06 | Fix |
| CVE-2024-8615 | WP JobSearch WordPress plugin unauthenticated arbitrary file upload | 9.8v3.1 | 0.9% | 2024-11-06 | Fix |
| CVE-2024-8614 | WP JobSearch WordPress plugin authenticated (Subscriber+) arbitrary file upload | 8.8NVD v3.1 | 0.8% | 2024-11-06 | Fix |
| CVE-2024-8323 | Pricing Tables WordPress Plugin Easy Pricing Tables stored cross-site scripting | 5.4v3.1 | 0.3% | 2024-11-06 | Fix |
| CVE-2024-7879 | WP ULike WordPress plugin Admin+ stored XSS via Widgets | 4.8CISA ADP v3.1 | 0.3% | 2024-11-06 | Fix |
| CVE-2024-6861 | Red Hat Satellite foreman: Foreman: Oauth secret exposure | 7.5CNA v3.1 | 0.7% | 2024-11-06 | Fix |
| CVE-2024-6626 | EleForms WordPress plugin unauthorized access | 5.3CNA v3.1 | 0.4% | 2024-11-06 | |
| CVE-2024-52030 | NETGEAR R7000P buffer overflow | 5.7CISA ADP v3.1 | 0.3% | 2024-11-05 | Fix |
| CVE-2024-52029 | NETGEAR R7000P buffer overflow | 5.7CISA ADP v3.1 | 0.3% | 2024-11-05 | Fix |
| CVE-2024-52028 | NETGEAR R7000P buffer overflow | 5.7CISA ADP v3.1 | 0.3% | 2024-11-05 | Fix |
| CVE-2024-52026 | NETGEAR R6400v2 buffer overflow | 5.7CISA ADP v3.1 | 0.3% | 2024-11-05 | Fix |
| CVE-2024-52025 | NETGEAR R6400v2 buffer overflow | 5.7CISA ADP v3.1 | 0.3% | 2024-11-05 | Fix |
| CVE-2024-52024 | NETGEAR R6400v2 buffer overflow | 5.7CISA ADP v3.1 | 0.3% | 2024-11-05 | Fix |
| CVE-2024-52023 | NETGEAR R6400v2 buffer overflow | 5.7CISA ADP v3.1 | 0.3% | 2024-11-05 | Fix |
| CVE-2024-52022 | NETGEAR R6400v2 command injection | 8.0CISA ADP v3.1 | 1.0% | 2024-11-05 | Fix |
| CVE-2024-52021 | NETGEAR R8500 OS command injection | 8.0CISA ADP v3.1 | 1.0% | 2024-11-05 | Fix |
| CVE-2024-52020 | NETGEAR R8500 OS command injection | 8.0CISA ADP v3.1 | 1.0% | 2024-11-05 | Fix |
| CVE-2024-52019 | NETGEAR R8500 OS command injection | 8.0CISA ADP v3.1 | 1.6% | 2024-11-05 | Fix |
| CVE-2024-52018 | NETGEAR XR300 OS command injection | 8.0CISA ADP v3.1 | 1.6% | 2024-11-05 | Fix |
| CVE-2024-52017 | NETGEAR XR300 buffer overflow | 5.7CISA ADP v3.1 | 0.4% | 2024-11-05 | Fix |
| CVE-2024-52016 | NETGEAR R6400v2 buffer overflow | 5.7CISA ADP v3.1 | 0.4% | 2024-11-05 | Fix |
| CVE-2024-52015 | NETGEAR R6400v2 buffer overflow | 5.7CISA ADP v3.1 | 0.3% | 2024-11-05 | Fix |
| CVE-2024-52014 | NETGEAR R6400v2 buffer overflow | 5.7CISA ADP v3.1 | 0.3% | 2024-11-05 | Fix |
| CVE-2024-52013 | NETGEAR R6400v2 buffer overflow | 5.7CISA ADP v3.1 | 0.3% | 2024-11-05 | Fix |
| CVE-2024-51756 | cap-std doesn't fully sandbox all the Windows device filenames | 2.3CNA v4.0 | 0.6% | 2024-11-05 | Fix |
| CVE-2024-51753 | Refresh tokens are logged when the debug flag is enabled in @workos-inc/authkit-remix | 2.1CNA v4.0 | 0.2% | 2024-11-05 | Fix |
| CVE-2024-51752 | Refresh tokens are logged when the debug flag is enabled in @workos-inc/authkit-nextjs | 2.1CNA v4.0 | 0.2% | 2024-11-05 | Fix |
| CVE-2024-51746 | gitsign may use incorrect Rekor entries during verification | 1.8CNA v4.0 | 0.1% | 2024-11-05 | Fix |
| CVE-2024-51745 | Wasmtime doesn't fully sandbox all the Windows device filenames | 2.3CNA v4.0 | 0.8% | 2024-11-05 | Fix |
| CVE-2024-51740 | SSRF through arbitrary PHP class instantiation in the user portal in Combodo iTop | 4.3CNA v3.1 | 0.5% | 2024-11-05 | Fix |
| CVE-2024-51739 | Users enumeration allowed through Rest API in Combodo iTop | 7.5CNA v3.1 | 1.2% | 2024-11-05 | NucleiFix |
| CVE-2024-51735 | Stored cross-site scripting to RCE on Osmedeus Web Server | 8.7CNA v4.0 | 0.5% | 2024-11-05 | |
| CVE-2024-51530 | Huawei HarmonyOS LaunchAnywhere vulnerability in the account module | 6.6CNA v3.1 | 0.1% | 2024-11-05 | Fix |
| CVE-2024-51529 | Huawei HarmonyOS data verification vulnerability in the battery module | 5.5CNA v3.1 | 0.1% | 2024-11-05 | Fix |
| CVE-2024-51528 | Huawei HarmonyOS vulnerability of improper log printing in the Super Home Screen module | 4.0CNA v3.1 | 0.1% | 2024-11-05 | Fix |
| CVE-2024-51527 | Huawei HarmonyOS permission control vulnerability in the Gallery app | 5.1CNA v3.1 | 0.1% | 2024-11-05 | Fix |
| CVE-2024-51526 | Huawei HarmonyOS permission control vulnerability in the hidebug module | 8.2CNA v3.1 | 0.1% | 2024-11-05 | Fix |
| CVE-2024-51525 | Huawei HarmonyOS permission control vulnerability in the clipboard module | 6.2CNA v3.1 | 0.1% | 2024-11-05 | Fix |
| CVE-2024-51524 | Huawei HarmonyOS permission control vulnerability in the Wi-Fi module | 4.0CNA v3.1 | 0.1% | 2024-11-05 | Fix |
| CVE-2024-51523 | Huawei HarmonyOS information management vulnerability in the Gallery module | 7.1CNA v3.1 | 0.2% | 2024-11-05 | Fix |
| CVE-2024-51522 | Huawei HarmonyOS denial of service | 6.2CNA v3.1 | 0.1% | 2024-11-05 | Fix |
| CVE-2024-51521 | Huawei HarmonyOS input parameter verification vulnerability in the background service module | 5.7CNA v3.1 | 0.1% | 2024-11-05 | Fix |
| CVE-2024-51520 | Huawei HarmonyOS vulnerability of input parameters not being verified in the HDC module | 5.5CNA v3.1 | 0.1% | 2024-11-05 | Fix |
| CVE-2024-51519 | Huawei HarmonyOS vulnerability of input parameters not being verified in the HDC module | 5.0CNA v3.1 | 0.1% | 2024-11-05 | Fix |
| CVE-2024-51518 | Huawei HarmonyOS vulnerability of message types not being verified in the advanced messaging module | 5.3CNA v3.1 | 0.3% | 2024-11-05 | Fix |
| CVE-2024-51517 | Huawei HarmonyOS vulnerability of improper memory access in the phone service module | 5.1CNA v3.1 | 0.1% | 2024-11-05 | Fix |
| CVE-2024-51516 | Huawei HarmonyOS permission control vulnerability in the ability module | 6.2CNA v3.1 | 0.1% | 2024-11-05 | Fix |
| CVE-2024-51515 | Huawei HarmonyOS race condition vulnerability in the kernel network module | 6.2CNA v3.1 | 0.1% | 2024-11-05 | Fix |
| CVE-2024-51514 | Huawei HarmonyOS vulnerability of pop-up windows belonging to no app in the VPN module | 5.3CNA v3.1 | 0.1% | 2024-11-05 | Fix |
| CVE-2024-51513 | Huawei HarmonyOS vulnerability of processes not being fully terminated in the VPN module | 5.5CNA v3.1 | 0.1% | 2024-11-05 | Fix |
| CVE-2024-51512 | Huawei HarmonyOS vulnerability of parameter type not being verified in the WantAgent module | 6.2CNA v3.1 | 0.1% | 2024-11-05 | Fix |
| CVE-2024-51511 | Huawei HarmonyOS vulnerability of parameter type not being verified in the WantAgent module | 6.2CNA v3.1 | 0.1% | 2024-11-05 | Fix |
| CVE-2024-51510 | Huawei HarmonyOS out-of-bounds access vulnerability in the logo module | 7.6CNA v3.1 | 0.1% | 2024-11-05 | Fix |
| CVE-2024-51498 | imputnet cobalt cross-site scripting when downloading picker image from malicious instance | 6.0CNA v4.0 | 0.5% | 2024-11-05 | Fix |
| CVE-2024-51493 | API key access in settings without reauthentication in OctoPrint | 5.3CNA v3.1 | 0.3% | 2024-11-05 | Fix |
| CVE-2024-51382 | JATOS cross-site request forgery | 8.4CISA ADP v3.1 | 0.2% | 2024-11-05 | |
| CVE-2024-51381 | JATOS cross-site request forgery | 8.4CISA ADP v3.1 | 0.2% | 2024-11-05 | |
| CVE-2024-51380 | JATOS cross-site scripting | 8.4CISA ADP v3.1 | 0.5% | 2024-11-05 | |
| CVE-2024-51379 | JATOS cross-site scripting | 8.4CISA ADP v3.1 | 0.6% | 2024-11-05 | |
| CVE-2024-51362 | LSC Smart Connect Indoor IP Camera RTSP service missing authentication | 6.5CISA ADP v3.1 | 0.3% | 2024-11-05 | |
| CVE-2024-51358 | Heimdall Add new application feature remote code execution | 9.8CISA ADP v3.1 | 1.0% | 2024-11-05 | |
| CVE-2024-51240 | An issue in the luci-mod-rpc package in OpenWRT Luci LTS allows for privilege escalation from an admin account to root via the JSON-RPC-API, which is exposed by the luci-mod-rpc package | 8.0CISA ADP v3.1 | 0.3% | 2024-11-05 | |
| CVE-2024-51132 | HAPI FHIR XML external entity (XXE) | 9.8CISA ADP v3.1 | 1.9% | 2024-11-05 | Exploit codeFix |
| CVE-2024-51116 | Tenda AC6 buffer overflow | 8.8CISA ADP v3.1 | 0.4% | 2024-11-05 | |
| CVE-2024-51115 | Dcnetworks DCME-320 command injection | 9.8CISA ADP v3.1 | 1.7% | 2024-11-05 | |
| CVE-2024-51024 | D-Link DIR-823G OS command injection | 8.0CISA ADP v3.1 | 1.4% | 2024-11-05 | |
| CVE-2024-51023 | D-Link DIR-823G OS command injection | 8.8CISA ADP v3.1 | 1.5% | 2024-11-05 | |
| CVE-2024-51022 | NETGEAR XR300 buffer overflow | 5.7CISA ADP v3.1 | 0.3% | 2024-11-05 | Fix |
| CVE-2024-51021 | NETGEAR R6400v2 OS command injection | 8.0CISA ADP v3.1 | 0.8% | 2024-11-05 | Fix |
| CVE-2024-51020 | NETGEAR R7000P buffer overflow | 5.7CISA ADP v3.1 | 0.3% | 2024-11-05 | Fix |
| CVE-2024-51019 | NETGEAR R7000P buffer overflow | 5.7CISA ADP v3.1 | 0.3% | 2024-11-05 | Fix |
| CVE-2024-51018 | NETGEAR R7000P buffer overflow | 5.7CISA ADP v3.1 | 0.3% | 2024-11-05 | Fix |
| CVE-2024-51017 | NETGEAR R7000P buffer overflow | 5.7CISA ADP v3.1 | 0.3% | 2024-11-05 | Fix |
| CVE-2024-51016 | NETGEAR XR300 buffer overflow | 5.7CISA ADP v3.1 | 0.3% | 2024-11-05 | Fix |
| CVE-2024-51015 | NETGEAR R7000P buffer overflow | 5.7CISA ADP v3.1 | 0.6% | 2024-11-05 | Fix |
| CVE-2024-51014 | NETGEAR XR300 buffer overflow | 5.7CISA ADP v3.1 | 0.3% | 2024-11-05 | Fix |
| CVE-2024-51013 | NETGEAR R7000P buffer overflow | 5.7CISA ADP v3.1 | 0.3% | 2024-11-05 | Fix |
| CVE-2024-51012 | NETGEAR R8500 buffer overflow | 5.7CISA ADP v3.1 | 0.3% | 2024-11-05 | Fix |
| CVE-2024-51011 | NETGEAR R6400v2 buffer overflow | 5.7CISA ADP v3.1 | 0.3% | 2024-11-05 | Fix |
| CVE-2024-51010 | NETGEAR R6400v2 OS command injection | 8.0CISA ADP v3.1 | 1.0% | 2024-11-05 | Fix |
| CVE-2024-51009 | NETGEAR R8500 OS command injection | 8.0CISA ADP v3.1 | 1.0% | 2024-11-05 | Fix |
| CVE-2024-51008 | NETGEAR XR300 OS command injection | 8.0CISA ADP v3.1 | 1.0% | 2024-11-05 | Fix |
| CVE-2024-51007 | NETGEAR XR300 buffer overflow | 5.7CISA ADP v3.1 | 0.3% | 2024-11-05 | Fix |
| CVE-2024-51006 | NETGEAR R8500 buffer overflow | 5.7CISA ADP v3.1 | 0.3% | 2024-11-05 | Fix |
| CVE-2024-51005 | NETGEAR R8500 OS command injection | 8.0CISA ADP v3.1 | 0.8% | 2024-11-05 | Fix |
| CVE-2024-51004 | NETGEAR R7000P buffer overflow | 5.7CISA ADP v3.1 | 0.3% | 2024-11-05 | Fix |
| CVE-2024-51003 | NETGEAR R6400v2 buffer overflow | 5.7CISA ADP v3.1 | 0.3% | 2024-11-05 | Fix |
| CVE-2024-51002 | NETGEAR R6400v2 buffer overflow | 5.7CISA ADP v3.1 | 0.3% | 2024-11-05 | Fix |
| CVE-2024-51001 | NETGEAR R8500 buffer overflow | 5.7CISA ADP v3.1 | 0.3% | 2024-11-05 | Fix |
| CVE-2024-51000 | NETGEAR R8500 buffer overflow | 5.7CISA ADP v3.1 | 0.3% | 2024-11-05 | Fix |
| CVE-2024-50999 | NETGEAR R8500 buffer overflow | 5.7CISA ADP v3.1 | 0.7% | 2024-11-05 | Fix |
| CVE-2024-50998 | NETGEAR R8500 buffer overflow | 5.7CISA ADP v3.1 | 0.3% | 2024-11-05 | Fix |
| CVE-2024-50997 | NETGEAR R6400v2 buffer overflow | 5.7CISA ADP v3.1 | 0.4% | 2024-11-05 | Fix |
| CVE-2024-50996 | NETGEAR R6400v2 buffer overflow | 5.7CISA ADP v3.1 | 0.4% | 2024-11-05 | Fix |
| CVE-2024-50995 | NETGEAR R8500 buffer overflow | 5.7CISA ADP v3.1 | 0.3% | 2024-11-05 | Fix |
| CVE-2024-50994 | NETGEAR R8500 buffer overflow | 5.7CISA ADP v3.1 | 0.3% | 2024-11-05 | Fix |
| CVE-2024-50993 | NETGEAR R8500 OS command injection | 8.0CISA ADP v3.1 | 1.0% | 2024-11-05 | Fix |
| CVE-2024-50346 | WebFeed HTML injection | 5.1CNA v4.0 | 0.6% | 2024-11-05 | Fix |
| CVE-2024-50335 | Authenticated XSS in Publish Key field allowing Unauthorized Administrator User Creation in SuiteCRM | 4.9CNA v3.1 | 0.3% | 2024-11-05 | Exploit codeFix |
| CVE-2024-50333 | RCE in ModuleBuilder in SuiteCRM | 6.6CNA v3.1 | 0.4% | 2024-11-05 | Fix |
| CVE-2024-50332 | Authenticated blind SQL injection in DeleteRelationShip in SuiteCRM | 8.8CNA v3.1 | 0.4% | 2024-11-05 | Fix |
| CVE-2024-50138 | In the Linux kernel, the following vulnerability has been resolved: bpf: Use raw_spinlock_t in ringbuf The function __bpf_ringbuf_reserve is invoked from a tracepoint, which disables preemption. Using spinlock_t in this context can lead to a "sleep in atomic" warning in the RT variant. This issue | 5.5v3.1 | 0.2% | 2024-11-05 | Fix |
| CVE-2024-50137 | Linux kernel StarFive JH7110 reset driver vulnerability | 5.5v3.1 | 0.2% | 2024-11-05 | Fix |
| CVE-2024-50136 | Linux kernel mlx5 eswitch driver vulnerability | 5.5v3.1 | 0.2% | 2024-11-05 | Fix |
| CVE-2024-50135 | Linux kernel NVMe PCI driver race condition | 4.7v3.1 | 0.2% | 2024-11-05 | Fix |
| CVE-2024-50134 | In the Linux kernel, the following vulnerability has been resolved: drm/vboxvideo: Replace fake VLA at end of vbva_mouse_pointer_shape with real VLA Replace the fake VLA at end of the vbva_mouse_pointer_shape shape with a real VLA to fix a "memcpy: detected field-spanning write error" warning: [ | 5.5NVD v3.1 | 0.3% | 2024-11-05 | Fix |
| CVE-2024-50133 | Linux kernel LoongArch vDSO handling null pointer dereference | 5.5v3.1 | 0.2% | 2024-11-05 | Fix |
| CVE-2024-50132 | Linux kernel tracing probe argument handling null pointer dereference | 7.8CNA v3.1 | 0.2% | 2024-11-05 | Fix |
| CVE-2024-50131 | Linux kernel tracing event length validation buffer overflow | 7.3CNA v3.1 | 0.2% | 2024-11-05 | Fix |
| CVE-2024-50130 | Linux kernel netfilter BPF link use-after-free | 7.8CNA v3.1 | 0.2% | 2024-11-05 | Fix |
| CVE-2024-50129 | Linux kernel pse-pd out-of-bounds access | 7.8v3.1 | 0.2% | 2024-11-05 | Fix |
| CVE-2024-50128 | Linux kernel WWAN rtnetlink driver out-of-bounds read | 7.8CNA v3.1 | 0.2% | 2024-11-05 | Fix |
| CVE-2024-50127 | Linux kernel taprio traffic scheduler use-after-free | 7.8CNA v3.1 | 0.2% | 2024-11-05 | Fix |
| CVE-2024-50126 | Linux kernel taprio traffic scheduler use-after-free | 7.8CNA v3.1 | 0.2% | 2024-11-05 | Fix |
| CVE-2024-50125 | Linux kernel Bluetooth SCO socket use-after-free | 8.0CNA v3.1 | 0.3% | 2024-11-05 | Fix |
| CVE-2024-50124 | Linux kernel Bluetooth ISO socket use-after-free | 8.0CNA v3.1 | 0.3% | 2024-11-05 | Fix |
| CVE-2024-50123 | Linux kernel BPF sockmap link out-of-bounds read | 7.1CNA v3.1 | 0.2% | 2024-11-05 | Fix |
| CVE-2024-50122 | Linux kernel PCI rescan locking null pointer dereference | 5.5v3.1 | 0.2% | 2024-11-05 | Fix |
| CVE-2024-50121 | Linux kernel NFSD client shutdown use-after-free | 7.8NVD v3.1 | 0.2% | 2024-11-05 | Fix |
| CVE-2024-50120 | Linux kernel SMB client password handling vulnerability | 5.5v3.1 | 0.2% | 2024-11-05 | Fix |
| CVE-2024-50119 | Linux kernel CIFS client request pool vulnerability | 7.0CNA v3.1 | 0.2% | 2024-11-05 | Fix |
| CVE-2024-50118 | Linux kernel btrfs crash | 5.5v3.1 | 0.2% | 2024-11-05 | Fix |
| CVE-2024-50117 | Linux kernel AMD ATIF ACPI handling null pointer dereference | 7.3CNA v3.1 | 0.3% | 2024-11-05 | Fix |
| CVE-2024-50116 | Linux kernel nilfs2 buffer handling denial of service | 5.5v3.1 | 0.2% | 2024-11-05 | Fix |
| CVE-2024-50115 | Linux kernel nSVM out-of-bounds read | 8.4CNA v3.1 | 0.2% | 2024-11-05 | Fix |
| CVE-2024-50114 | Linux kernel arm64 use-after-free | 7.8CNA v3.1 | 0.2% | 2024-11-05 | Fix |
| CVE-2024-50113 | Linux kernel FireWire core self ID handling vulnerability | 8.8CNA v3.1 | 0.3% | 2024-11-05 | Fix |
| CVE-2024-50112 | Linux kernel Linear Address Masking vulnerability | 7.8v3.1 | 0.3% | 2024-11-05 | Fix |
| CVE-2024-50111 | Linux kernel LoongArch unaligned access handler vulnerability | 5.5v3.1 | 0.2% | 2024-11-05 | Fix |
| CVE-2024-50110 | Linux kernel xfrm state dumping information disclosure | 5.5v3.1 | 0.3% | 2024-11-05 | Fix |
| CVE-2024-50109 | Linux kernel RAID10 driver null pointer dereference | 5.5v3.1 | 0.2% | 2024-11-05 | Fix |
| CVE-2024-50108 | Linux kernel AMD display driver vulnerability | 5.5v3.1 | 0.2% | 2024-11-05 | Fix |
| CVE-2024-50107 | Linux kernel Intel PMC core driver vulnerability | 5.5v3.1 | 0.2% | 2024-11-05 | Fix |
| CVE-2024-50106 | Linux kernel NFSD state laundromat use-after-free | 9.8CNA v3.1 | 0.5% | 2024-11-05 | Fix |
| CVE-2024-50105 | Linux kernel SC7280 SoundWire audio driver null pointer dereference | 5.5v3.1 | 0.2% | 2024-11-05 | Fix |
| CVE-2024-50104 | Linux kernel SDM845 SoundWire audio driver null pointer dereference | 5.5v3.1 | 0.2% | 2024-11-05 | Fix |
| CVE-2024-50103 | Linux kernel qcom null pointer dereference | 5.5v3.1 | 0.2% | 2024-11-05 | Fix |
| CVE-2024-50102 | Linux kernel user address masking information disclosure | 5.5v3.1 | 0.2% | 2024-11-05 | Fix |
| CVE-2024-50101 | In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Fix incorrect pci_for_each_dma_alias() for non-PCI devices Previously, the domain_context_clear() function incorrectly called pci_for_each_dma_alias() to set up context entries for non-PCI devices. This could lead to k | 7.8CNA v3.1 | 0.2% | 2024-11-05 | Fix |
| CVE-2024-50100 | Linux kernel dummy-hcd USB gadget driver vulnerability | 5.5v3.1 | 0.2% | 2024-11-05 | Fix |
| CVE-2024-50099 | Linux kernel arm64 uprobe literal load handling denial of service | 7.3CNA v3.1 | 0.3% | 2024-11-05 | Fix |
| CVE-2024-50098 | Linux kernel UFS shutdown handling deadlock | 5.5v3.1 | 0.2% | 2024-11-05 | Fix |
| CVE-2024-50097 | Linux kernel FEC PTP driver vulnerability | 5.5v3.1 | 0.2% | 2024-11-05 | Fix |
| CVE-2024-50096 | Linux kernel Nouveau device memory migration vulnerability | 7.3CNA v3.1 | 0.2% | 2024-11-05 | Fix |
| CVE-2024-50095 | Linux kernel RDMA MAD agent timeout handling denial of service | 7.5CNA v3.1 | 0.7% | 2024-11-05 | Fix |
| CVE-2024-50094 | Linux kernel sfc XDP netpoll handling vulnerability | 7.5CNA v3.1 | 0.5% | 2024-11-05 | Fix |
| CVE-2024-50093 | Linux kernel int340x thermal driver vulnerability | 5.5v3.1 | 0.2% | 2024-11-05 | Fix |
| CVE-2024-50092 | Linux kernel netconsole vulnerability | 3.3v3.1 | 0.2% | 2024-11-05 | Fix |
| CVE-2024-50091 | In the Linux kernel, the following vulnerability has been resolved: dm vdo: don't refer to dedupe_context after releasing it Clear the dedupe_context pointer in a data_vio whenever ownership of the context is lost, so that vdo can't examine it accidentally. | 7.8CNA v3.1 | 0.2% | 2024-11-05 | Fix |
| CVE-2024-50090 | Linux kernel Xe GPU OA batch buffer buffer overflow | 7.8CNA v3.1 | 0.2% | 2024-11-05 | Fix |
| CVE-2024-49774 | SalesAgility SuiteCRM ModuleScanner improper input validation | 7.2CNA v3.1 | 0.5% | 2024-11-05 | Fix |
| CVE-2024-49773 | Improper neutralization of special elements used in an SQL command (SQL injection) in SuiteCRM | 5.3CNA v3.1 | 0.3% | 2024-11-05 | Fix |
| CVE-2024-49772 | Authenticated SQL injection in AM_ProjectTemplates controller in SuiteCRM | 8.8CNA v3.1 | 0.4% | 2024-11-05 | Fix |
| CVE-2024-49522 | Adobe Substance3D Painter out-of-bounds write | 7.8CNA v3.1 | 0.3% | 2024-11-05 | Fix |
| CVE-2024-49377 | Jinja2 templates are vulnerable to XSS attacks due to their configuration in OctoPrint | 5.5CNA v3.1 | 0.3% | 2024-11-05 | Fix |
| CVE-2024-48746 | Lens visual for Power BI natural language processing component command injection | 9.8CISA ADP v3.1 | 0.8% | 2024-11-05 | |
| CVE-2024-48312 | WebLaudos login page cross-site scripting | 5.4CISA ADP v3.1 | 0.3% | 2024-11-05 | |
| CVE-2024-48176 | LyLme_spage incorrect authorization | 9.8CISA ADP v3.1 | 0.5% | 2024-11-05 | |
| CVE-2024-47797 | OpenHarmony liteos_a has an out-of-bounds write | 8.4CNA v3.1 | 0.2% | 2024-11-05 | Fix |
| CVE-2024-47464 | Authenticated path traversal vulnerability leads to a remote unauthorized access to files | 6.8CNA v3.1 | 0.9% | 2024-11-05 | |
| CVE-2024-47463 | HPE Aruba Networking Access Points arbitrary file write | 7.2CNA v3.1 | 1.2% | 2024-11-05 | |
| CVE-2024-47462 | HPE Aruba Networking Access Points arbitrary file write | 7.2CNA v3.1 | 1.2% | 2024-11-05 | |
| CVE-2024-47461 | HPE Aruba Networking Access Points authenticated command injection | 7.2CNA v3.1 | 1.7% | 2024-11-05 | |
| CVE-2024-47460 | HPE Aruba Networking Access Points underlying CLI service command injection | 9.0CNA v3.1 | 1.4% | 2024-11-05 | |
| CVE-2024-47404 | OpenHarmony liteos_a has a double free | 8.4CNA v3.1 | 0.2% | 2024-11-05 | Fix |
| CVE-2024-47402 | OpenHarmony liteos_a has an out-of-bounds read | 3.3CNA v3.1 | 0.2% | 2024-11-05 | Fix |
| CVE-2024-47255 | 2N Access Commander improper integrity check validation | 4.7CNA v3.1 | 0.1% | 2024-11-05 | Fix |
| CVE-2024-47254 | 2N Access Commander reliance on untrusted input in a security decision | 6.3CNA v3.1 | 0.4% | 2024-11-05 | Fix |
| CVE-2024-47253 | 2N Access Commander path traversal | 7.2CNA v3.1 | 1.0% | 2024-11-05 | Fix |
| CVE-2024-47137 | OpenHarmony liteos_a has an out-of-bounds write | 8.4CNA v3.1 | 0.2% | 2024-11-05 | Fix |
| CVE-2024-42509 | HPE Aruba Networking Access Points underlying CLI service command injection | 9.8CNA v3.1 | 2.0% | 2024-11-05 | |
| CVE-2024-32870 | iTop hub connector information disclosure | 5.8CNA v3.1 | 0.8% | 2024-11-05 | NucleiFix |
| CVE-2024-31998 | CSRF security issue on CSV import in Combodo iTop | 8.8CNA v3.1 | 0.2% | 2024-11-05 | Fix |
| CVE-2024-31448 | Cross-site scripting vulnerability in link CSV import in Combodo iTop | 8.8CNA v3.1 | 0.3% | 2024-11-05 | Fix |
| CVE-2024-10845 | 1000 Projects Bookstore Management System book_detail.php SQL injection | 9.8v3.1 | 0.9% | 2024-11-05 | |
| CVE-2024-10844 | 1000 Projects Bookstore Management System search.php SQL injection | 9.8v3.1 | 0.9% | 2024-11-05 | |
| CVE-2024-10842 | romadebrian WEB-Sekolah Backend Proses_Edit_Akun.php cross-site scripting | 4.8v3.1 | 0.4% | 2024-11-05 | |
| CVE-2024-10841 | romadebrian WEB-Sekolah Mail Proses_Kirim.php SQL injection | 8.0v3.1 | 0.4% | 2024-11-05 | |
| CVE-2024-10840 | romadebrian WEB-Sekolah Backend akun_edit.php cross-site scripting | 4.8v3.1 | 0.4% | 2024-11-05 | |
| CVE-2024-10810 | code-projects E-Health Care System app_request.php SQL injection | 7.5v3.1 | 0.5% | 2024-11-05 | |
| CVE-2024-10809 | code-projects E-Health Care System chat.php SQL injection | 7.5v3.1 | 0.5% | 2024-11-05 | |
| CVE-2024-10808 | code-projects E-Health Care System req_detail.php SQL injection | 7.5v3.1 | 0.5% | 2024-11-05 | |
| CVE-2024-10807 | PHPGurukul Hospital Management System search.php cross-site scripting | 4.8v3.1 | 0.4% | 2024-11-05 | |
| CVE-2024-10806 | PHPGurukul Hospital Management System betweendates-detailsreports.php cross-site scripting | 4.8v3.1 | 0.4% | 2024-11-05 | |
| CVE-2024-10711 | WooCommerce Report WordPress plugin cross-site request forgery to arbitrary options update | 8.8v3.1 | 0.3% | 2024-11-05 | Fix |
| CVE-2024-10687 | Photos WordPress plugin SQL injection | 9.8CNA v3.1 | 0.6% | 2024-11-05 | Fix |
| CVE-2024-10340 | Shortcodes Blocks Creator Ultimate WordPress plugin stored cross-site scripting | 6.4CNA v3.1 | 0.3% | 2024-11-05 | Fix |
| CVE-2024-10329 | Ultimate Bootstrap Elements for Elementor WordPress plugin sensitive information exposure | 4.3CNA v3.1 | 0.4% | 2024-11-05 | Fix |
| CVE-2024-10319 | 140+ Widgets WordPress plugin information disclosure | 4.3CNA v3.1 | 0.3% | 2024-11-05 | Fix |
| CVE-2024-10263 | Tickera WordPress Event Ticketing plugin unauthenticated arbitrary shortcode execution | 7.3CNA v3.1 | 0.5% | 2024-11-05 | Fix |
| CVE-2024-10114 | Social Login - WordPress / WooCommerce plugin authentication bypass via WordPress.com OAuth provider | 8.1CNA v3.1 | 0.5% | 2024-11-05 | Fix |
| CVE-2024-10097 | Loginizer Security and Loginizer WordPress plugin authentication bypass | 8.1v3.1 | 0.7% | 2024-11-05 | Fix |
| CVE-2024-10084 | Contact Form 7 Dynamic Text Extension WordPress plugin information disclosure via shortcode | 4.3CNA v3.1 | 0.4% | 2024-11-05 | Fix |
| CVE-2024-9883 | Pods WordPress plugin Admin+ stored XSS | 4.8NVD v3.1 | 0.4% | 2024-11-05 | Fix |
| CVE-2024-9878 | Photo Gallery by 10Web WordPress plugin authenticated (Administrator+) stored cross-site scripting | 4.8v3.1 | 0.4% | 2024-11-05 | Fix |
| CVE-2024-9867 | Element Pack Elementor Addons WordPress plugin stored cross-site scripting | 5.4CNA v3.1 | 0.3% | 2024-11-05 | Fix |
| CVE-2024-9689 | Post From Frontend WordPress plugin post deletion via CSRF | 4.3NVD v3.1 | 0.2% | 2024-11-05 | |
| CVE-2024-9667 | Seriously Simple Podcasting WordPress plugin reflected cross-site scripting | 6.1CNA v3.1 | 0.4% | 2024-11-05 | Fix |
| CVE-2024-9657 | Element Pack Elementor Addons WordPress plugin DOM-based stored cross-site scripting | 5.4v3.1 | 0.3% | 2024-11-05 | Fix |
| CVE-2024-9579 | Certain Poly Video Conference Devices potential remote code execution | 7.5CNA v3.1 | 0.4% | 2024-11-05 | Fix |
| CVE-2024-9459 | ManageEngine Exchange Reporter Plus SQL injection | 8.3CNA v3.1 | 4.5% | 2024-11-05 | Fix |
| CVE-2024-9443 | Basticom Framework WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.3% | 2024-11-05 | Fix |
| CVE-2024-9178 | XT Floating Cart for WooCommerce WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.3% | 2024-11-05 | Fix |
| CVE-2024-7995 | Autodesk Vred Design privilege escalation | 7.8CNA v3.1 | 0.2% | 2024-11-05 | Fix |
| CVE-2024-7877 | Appointment Booking Calendar WordPress plugin Admin+ stored XSS | 4.8NVD v3.1 | 0.4% | 2024-11-05 | Fix |
| CVE-2024-7876 | Appointment Booking Calendar WordPress plugin Admin+ stored XSS | 4.8NVD v3.1 | 0.4% | 2024-11-05 | Fix |
| CVE-2024-7429 | Zotpress WordPress plugin missing authorization | 4.3CNA v3.1 | 0.4% | 2024-11-05 | Fix |
| CVE-2024-7059 | Genetec Security Center unsafe reflection | 8.9CNA v4.0 | 0.6% | 2024-11-05 | Fix |
| CVE-2024-5578 | Table of Contents Plus WordPress plugin Editor+ stored XSS | 4.8NVD v3.1 | 0.4% | 2024-11-05 | Fix |
| CVE-2024-0134 | NVIDIA Container Toolkit symlink following | 4.1CNA v3.1 | 0.4% | 2024-11-05 | Fix |
| CVE-2024-51744 | jwt ParseWithClaims function improper error handling | 3.1CNA v3.1 | 0.5% | 2024-11-04 | Fix |
| CVE-2024-51734 | zopefoundation AccessControl user data deletion by anoynmous users in Zope | 8.7CNA v4.0 | 0.4% | 2024-11-04 | Fix |
| CVE-2024-51685 | Accordion title for Elementor WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.2% | 2024-11-04 | Fix |
| CVE-2024-51683 | Custom post type templates for Elementor WordPress plugin stored cross-site scripting (XSS) | 5.4v3.1 | 0.2% | 2024-11-04 | Fix |
| CVE-2024-51682 | HT Builder WordPress Theme Builder for Elementor plugin stored cross-site scripting (XSS) | 5.4v3.1 | 0.2% | 2024-11-04 | Fix |
| CVE-2024-51681 | WP Pocket URLs WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.3% | 2024-11-04 | Fix |
| CVE-2024-51680 | Cresta Addons for Elementor WordPress plugin stored cross-site scripting (XSS) | 5.4v3.1 | 0.2% | 2024-11-04 | Fix |
| CVE-2024-51678 | Elo Rating Shortcode WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.2% | 2024-11-04 | Fix |
| CVE-2024-51677 | Knowledge Base WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.2% | 2024-11-04 | Fix |
| CVE-2024-51672 | BetterLinks WordPress plugin SQL injection | 7.2v3.1 | 0.5% | 2024-11-04 | Fix |
| CVE-2024-51665 | Magical Addons For Elementor WordPress plugin server side request forgery (SSRF) | 4.3v3.1 | 0.6% | 2024-11-04 | Exploit codeFix |
| CVE-2024-51661 | Media Library Assistant WordPress plugin remote code execution (RCE) | 7.2NVD v3.1 | 1.1% | 2024-11-04 | Fix |
| CVE-2024-51626 | Woocommerce Quote Calculator WordPress plugin SQL injection | 8.8v3.1 | 0.4% | 2024-11-04 | |
| CVE-2024-51582 | WP Hotel Booking WordPress plugin local file inclusion | 8.8v3.1 | 0.5% | 2024-11-04 | Fix |
| CVE-2024-51561 | Authentication bypass vulnerability in Aero | 7.5NVD v3.1 | 0.5% | 2024-11-04 | Fix |
| CVE-2024-51560 | Improper error handling vulnerability in Wave | 4.3NVD v3.1 | 0.4% | 2024-11-04 | Fix |
| CVE-2024-51559 | Improper access control vulnerability in Wave | 6.5NVD v3.1 | 0.3% | 2024-11-04 | Fix |
| CVE-2024-51558 | Brute force Attack vulnerability in Wave | 9.8v3.1 | 0.6% | 2024-11-04 | Fix |
| CVE-2024-51557 | 63moons Wave OTP request endpoint vulnerability | 6.5NVD v3.1 | 0.5% | 2024-11-04 | Fix |
| CVE-2024-51556 | Sensitive information disclosure vulnerability in Wave | 6.5NVD v3.1 | 0.2% | 2024-11-04 | Fix |
| CVE-2024-51502 | bearcove loona panic vulnerability in loona-hpack | 5.1CNA v4.0 | 0.5% | 2024-11-04 | Fix |
| CVE-2024-51501 | CRLF injection in Refit's [Header], [HeaderCollection] and [Authorize] attributes | 10.0CNA v4.0 | 0.6% | 2024-11-04 | Fix |
| CVE-2024-51500 | Meshtastic firmware broadcast packet handling vulnerability | 5.3CNA v3.1 | 0.4% | 2024-11-04 | Fix |
| CVE-2024-51408 | Appsmith server-side request forgery | 6.5NVD v3.1 | 0.5% | 2024-11-04 | Fix |
| CVE-2024-51329 | Idrsdev Agile-board host header injection | 8.8v3.1 | 0.6% | 2024-11-04 | |
| CVE-2024-51328 | Projectworlds Travel Management System addcategory.php in projectworld's cross-site scripting | 6.1CISA ADP v3.1 | 0.4% | 2024-11-04 | |
| CVE-2024-51327 | Projectworlds Travel Management System loginform.php in ProjectWorld's SQL injection | 9.8v3.1 | 0.8% | 2024-11-04 | |
| CVE-2024-51326 | Projectworlds Travel Management System SQL injection | 7.5v3.1 | 0.9% | 2024-11-04 | |
| CVE-2024-51253 | DrayTek Vigor3900 OS command injection | 8.0CISA ADP v3.1 | 0.7% | 2024-11-04 | |
| CVE-2024-51251 | DrayTek Vigor3900 OS command injection | 8.0CISA ADP v3.1 | 0.7% | 2024-11-04 | |
| CVE-2024-51249 | DrayTek Vigor3900 OS command injection | 8.0CISA ADP v3.1 | 0.7% | 2024-11-04 | |
| CVE-2024-51246 | DrayTek Vigor3900 OS command injection | 8.0CISA ADP v3.1 | 0.4% | 2024-11-04 | |
| CVE-2024-51136 | Openimaj Dmoz2CSV XML external entity injection | 9.8v3.1 | 1.2% | 2024-11-04 | |
| CVE-2024-51127 | Hornetq vulnerable to file overwrite, sensitive information disclosure | 7.1NVD v3.1 | 0.7% | 2024-11-04 | Fix |
| CVE-2024-50531 | RSVPMaker for Toastmasters WordPress plugin arbitrary file upload | 9.8v3.1 | 0.5% | 2024-11-04 | Fix |
| CVE-2024-50530 | Stars SMTP Mailer WordPress plugin arbitrary file upload | 8.8NVD v3.1 | 0.5% | 2024-11-04 | Fix |
| CVE-2024-50529 | Training Courses WordPress plugin arbitrary file upload | 8.8NVD v3.1 | 0.5% | 2024-11-04 | |
| CVE-2024-50528 | Stacks Mobile App Builder WordPress plugin sensitive data exposure | 7.5v3.1 | 0.4% | 2024-11-04 | |
| CVE-2024-50527 | Stacks Mobile App Builder WordPress plugin arbitrary file upload | 9.8v3.1 | 0.5% | 2024-11-04 | |
| CVE-2024-50526 | Multi Purpose Mail Form WordPress plugin arbitrary file upload | 9.8v3.1 | 0.6% | 2024-11-04 | Exploit code |
| CVE-2024-50525 | Helloprint WordPress plugin arbitrary file upload | 9.8v3.1 | 0.5% | 2024-11-04 | Fix |
| CVE-2024-50523 | All Post Contact Form WordPress plugin arbitrary file upload | 9.8v3.1 | 0.5% | 2024-11-04 | Fix |
| CVE-2024-48878 | ManageEngine ADManager Plus SQL injection | 8.3CNA v3.1 | 3.2% | 2024-11-04 | Fix |
| CVE-2024-48809 | Opennetworking Sdran-in-a-box resource exhaustion | 7.5v3.1 | 0.6% | 2024-11-04 | |
| CVE-2024-48463 | usebruno bruno open redirect | 6.5CISA ADP v3.1 | 0.6% | 2024-11-04 | Fix |
| CVE-2024-48336 | Magisk ProviderInstaller privilege escalation | 8.4CISA ADP v3.1 | 0.5% | 2024-11-04 | Exploit code |
| CVE-2024-48061 | Langflow vulnerable to remote code execution | 9.8CISA ADP v3.1 | 1.5% | 2024-11-04 | Exploit code |
| CVE-2024-48059 | gaizhenbiao ChuanhuChatGPT cross-site scripting | 6.1CISA ADP v3.1 | 0.3% | 2024-11-04 | |
| CVE-2024-48057 | LocalAI cross-site scripting | 6.1CISA ADP v3.1 | 0.2% | 2024-11-04 | |
| CVE-2024-48052 | Gradio server side request forgery | 6.5CISA ADP v3.1 | 0.5% | 2024-11-04 | |
| CVE-2024-48050 | modelscope agentscope code injection | 9.8CISA ADP v3.1 | 0.8% | 2024-11-04 | Fix |
| CVE-2024-45893 | DrayTek Vigor3900 OS command injection | 8.0CISA ADP v3.1 | 1.6% | 2024-11-04 | |
| CVE-2024-45891 | DrayTek Vigor3900 OS command injection | 8.0CISA ADP v3.1 | 1.3% | 2024-11-04 | |
| CVE-2024-45890 | DrayTek Vigor3900 OS command injection | 8.0CISA ADP v3.1 | 2.1% | 2024-11-04 | |
| CVE-2024-45889 | DrayTek Vigor3900 OS command injection | 8.0CISA ADP v3.1 | 1.6% | 2024-11-04 | |
| CVE-2024-45888 | DrayTek Vigor3900 OS command injection | 8.0CISA ADP v3.1 | 2.0% | 2024-11-04 | |
| CVE-2024-45887 | DrayTek Vigor3900 OS command injection | 8.0CISA ADP v3.1 | 2.1% | 2024-11-04 | |
| CVE-2024-45885 | DrayTek Vigor3900 OS command injection | 8.0CISA ADP v3.1 | 1.3% | 2024-11-04 | |
| CVE-2024-45884 | DrayTek Vigor3900 OS command injection | 8.0CISA ADP v3.1 | 2.1% | 2024-11-04 | |
| CVE-2024-45882 | DrayTek Vigor3900 OS command injection | 8.0CISA ADP v3.1 | 1.6% | 2024-11-04 | |
| CVE-2024-45185 | Samsung Exynos 1080 firmware out-of-bounds write | 5.1CISA ADP v3.1 | 0.2% | 2024-11-04 | Fix |
| CVE-2024-45164 | Akamai Secure Internet Access Enterprise Threatavert incorrect permission assignment | 7.1v3.1 | 0.3% | 2024-11-04 | |
| CVE-2024-45086 | IBM WebSphere Application Server XML external entity injection | 5.5CNA v3.1 | 0.4% | 2024-11-04 | Fix |
| CVE-2024-38424 | Qualcomm Snapdragon use-after-free in GPS | 7.8CNA v3.1 | 0.1% | 2024-11-04 | Fix |
| CVE-2024-38423 | Qualcomm Snapdragon buffer copy without checking size of input in Graphics Linux | 7.8CNA v3.1 | 0.1% | 2024-11-04 | Fix |
| CVE-2024-38422 | Qualcomm Snapdragon integer overflow to buffer overflow in Audio | 7.8CNA v3.1 | 0.1% | 2024-11-04 | Fix |
| CVE-2024-38421 | Qualcomm Snapdragon use-after-free in Graphics Linux | 7.8CNA v3.1 | 0.1% | 2024-11-04 | Fix |
| CVE-2024-38419 | Qualcomm Snapdragon use-after-free in Automotive GPU | 7.8CNA v3.1 | 0.1% | 2024-11-04 | Fix |
| CVE-2024-38415 | Qualcomm Snapdragon use-after-free in Computer Vision | 7.8CNA v3.1 | 0.1% | 2024-11-04 | Fix |
| CVE-2024-38410 | Qualcomm Snapdragon stack-based buffer overflow in WLAN Windows host | 7.8CNA v3.1 | 0.1% | 2024-11-04 | Fix |
| CVE-2024-38409 | Qualcomm Snapdragon buffer copy without checking size of input in WLAN Windows host | 7.8CNA v3.1 | 0.1% | 2024-11-04 | Fix |
| CVE-2024-38408 | Qualcomm Snapdragon cryptographic weakness | 8.2CNA v3.1 | 0.1% | 2024-11-04 | Fix |
| CVE-2024-38407 | Qualcomm Snapdragon time-of-check time-of-use (TOCTOU) race condition in Camera | 7.8CNA v3.1 | 0.1% | 2024-11-04 | Fix |
| CVE-2024-38406 | Qualcomm Snapdragon time-of-check time-of-use (TOCTOU) race condition in Camera | 7.8CNA v3.1 | 0.1% | 2024-11-04 | Fix |
| CVE-2024-38405 | Qualcomm Snapdragon buffer over-read in WLAN host | 7.5CNA v3.1 | 0.3% | 2024-11-04 | Fix |
| CVE-2024-38403 | Qualcomm Snapdragon buffer over-read in WLAN firmware | 7.5CNA v3.1 | 0.3% | 2024-11-04 | Fix |
| CVE-2024-36485 | ManageEngine ADAudit Plus SQL injection | 8.3CNA v3.1 | 3.2% | 2024-11-04 | Fix |
| CVE-2024-34891 | Bitrix24 DAV server settings in insufficiently protected credentials | 6.8CISA ADP v3.1 | 0.3% | 2024-11-04 | |
| CVE-2024-34887 | Bitrix24 AD/LDAP server settings in insufficiently protected credentials | 4.9v3.1 | 0.3% | 2024-11-04 | |
| CVE-2024-34885 | Bitrix24 SMTP server settings in insufficiently protected credentials | 6.8CISA ADP v3.1 | 0.4% | 2024-11-04 | |
| CVE-2024-34883 | Bitrix24 DAV server settings in insufficiently protected credentials | 4.9v3.1 | 0.4% | 2024-11-04 | |
| CVE-2024-34882 | Bitrix24 SMTP server settings in insufficiently protected credentials | 4.9v3.1 | 0.3% | 2024-11-04 | |
| CVE-2024-33068 | Qualcomm Snapdragon use-after-free in WLAN Host Communication | 7.5CNA v3.1 | 0.3% | 2024-11-04 | Fix |
| CVE-2024-33033 | Qualcomm Snapdragon use-after-free in ComputerVision | 6.7CNA v3.1 | 0.1% | 2024-11-04 | Fix |
| CVE-2024-33032 | Qualcomm Snapdragon improper validation of array index in Camera_Linux | 6.7CNA v3.1 | 0.1% | 2024-11-04 | Fix |
| CVE-2024-33031 | Qualcomm Snapdragon improper input validation in RIL | 6.7CNA v3.1 | 0.1% | 2024-11-04 | Fix |
| CVE-2024-33030 | Qualcomm Snapdragon buffer copy without checking size of input in Performance | 6.7CNA v3.1 | 0.1% | 2024-11-04 | Fix |
| CVE-2024-33029 | Qualcomm Snapdragon use-after-free in DSP services | 6.7CNA v3.1 | 0.1% | 2024-11-04 | Fix |
| CVE-2024-30619 | Chamilo LMS message and online-user count endpoints vulnerability | 7.5CISA ADP v3.1 | 0.4% | 2024-11-04 | |
| CVE-2024-30618 | chamilo-lms stored cross-site scripting | 6.1CISA ADP v3.1 | 0.4% | 2024-11-04 | |
| CVE-2024-30617 | chamilo-lms cross-site request forgery | 5.4CISA ADP v3.1 | 0.2% | 2024-11-04 | |
| CVE-2024-30616 | chamilo-lms incorrect authorization | 8.8CISA ADP v3.1 | 0.6% | 2024-11-04 | |
| CVE-2024-23590 | Apache Kylin: Session fixation in web interface | 9.1CISA ADP v3.1 | 0.7% | 2024-11-04 | Fix |
| CVE-2024-23386 | Qualcomm Snapdragon improper input validation in Video | 6.7CNA v3.1 | 0.1% | 2024-11-04 | Fix |
| CVE-2024-23385 | Qualcomm Snapdragon reachable assertion in Modem | 7.5CNA v3.1 | 0.3% | 2024-11-04 | Fix |
| CVE-2024-23377 | Qualcomm Snapdragon use of out-of-range pointer offset in ComputerVision | 6.7CNA v3.1 | 0.1% | 2024-11-04 | Fix |
| CVE-2024-20124 | MediaTek chipsets out-of-bounds read in vdec | 4.4CISA ADP v3.1 | 0.1% | 2024-11-04 | Fix |
| CVE-2024-20123 | MediaTek chipsets out-of-bounds read in vdec | 4.4CISA ADP v3.1 | 0.1% | 2024-11-04 | Fix |
| CVE-2024-20122 | MediaTek chipsets out-of-bounds read in vdec | 4.4CISA ADP v3.1 | 0.1% | 2024-11-04 | Fix |
| CVE-2024-20121 | MediaTek chipsets out-of-bounds write in KeyInstall | 6.7CISA ADP v3.1 | 0.1% | 2024-11-04 | Fix |
| CVE-2024-20120 | MediaTek chipsets out-of-bounds write in KeyInstall | 6.7CISA ADP v3.1 | 0.1% | 2024-11-04 | Fix |
| CVE-2024-20119 | MediaTek chipsets write-what-where condition in mms | 6.7CISA ADP v3.1 | 0.1% | 2024-11-04 | Fix |
| CVE-2024-20118 | MediaTek chipsets write-what-where condition in mms | 6.7CISA ADP v3.1 | 0.1% | 2024-11-04 | Fix |
| CVE-2024-20117 | MediaTek chipsets out-of-bounds read in vdec | 4.4CISA ADP v3.1 | 0.1% | 2024-11-04 | Fix |
| CVE-2024-20115 | MediaTek chipsets out-of-bounds write in ccu | 6.7CISA ADP v3.1 | 0.1% | 2024-11-04 | Fix |
| CVE-2024-20114 | MediaTek chipsets out-of-bounds write in ccu | 6.7v3.1 | 0.1% | 2024-11-04 | Fix |
| CVE-2024-20113 | MediaTek chipsets out-of-bounds write in ccu | 6.7CISA ADP v3.1 | 0.1% | 2024-11-04 | Fix |
| CVE-2024-20112 | MediaTek chipsets out-of-bounds read in isp | 4.4CISA ADP v3.1 | 0.1% | 2024-11-04 | Fix |
| CVE-2024-20111 | MediaTek chipsets out-of-bounds write in ccu | 6.7v3.1 | 0.1% | 2024-11-04 | Fix |
| CVE-2024-20110 | MediaTek chipsets out-of-bounds write in ccu | 6.7CISA ADP v3.1 | 0.1% | 2024-11-04 | Fix |
| CVE-2024-20109 | MediaTek chipsets out-of-bounds write in ccu | 6.7CISA ADP v3.1 | 0.1% | 2024-11-04 | Fix |
| CVE-2024-20108 | MediaTek chipsets out-of-bounds write in atci | 6.7CISA ADP v3.1 | 0.1% | 2024-11-04 | Fix |
| CVE-2024-20107 | MediaTek chipsets out-of-bounds read in DA | 6.2CISA ADP v3.1 | 0.1% | 2024-11-04 | Fix |
| CVE-2024-20106 | MediaTek chipsets type confusion in m4u | 6.7CISA ADP v3.1 | 0.1% | 2024-11-04 | Fix |
| CVE-2024-20104 | MediaTek chipsets out-of-bounds write in DA | 8.4CISA ADP v3.1 | 0.1% | 2024-11-04 | Fix |
| CVE-2024-10805 | code-projects University Event Management System doedit.php SQL injection | 8.8v3.1 | 0.5% | 2024-11-04 | |
| CVE-2024-10791 | Codezips Hospital Appointment System doctorAction.php SQL injection | 9.8v3.1 | 0.6% | 2024-11-04 | |
| CVE-2024-10768 | PHPGurukul Online Shopping Portal two_tables.php cross-site scripting | 5.4v3.1 | 0.4% | 2024-11-04 | |
| CVE-2024-10766 | Codezips Free Exam Hall Seating Management System save_user.php unrestricted upload | 9.8v3.1 | 0.5% | 2024-11-04 | |
| CVE-2024-10765 | Codezips Online Institute Management System profile.php unrestricted upload | 9.8v3.1 | 0.5% | 2024-11-04 | |
| CVE-2024-10764 | Codezips Online Institute Management System save_user.php unrestricted upload | 9.8v3.1 | 0.5% | 2024-11-04 | |
| CVE-2024-10761 | Umbraco CMS Dashboard frame cross-site scripting | 5.4NVD v3.1 | 0.6% | 2024-11-04 | Fix |
| CVE-2024-10760 | code-projects University Event Management System dodelete.php SQL injection | 7.5v3.1 | 0.5% | 2024-11-04 | |
| CVE-2024-10759 | itsourcecode Farm Management System edit-pig.php SQL injection | 8.8v3.1 | 0.5% | 2024-11-04 | |
| CVE-2024-10758 | Code-projects/anirbandutta9 Content Management System/News-Buzz index.php SQL injection | 9.8v3.1 | 1.4% | 2024-11-04 | Exploit code |
| CVE-2024-10757 | PHPGurukul Online Shopping Portal js_data.php cross-site scripting | 6.1v3.1 | 0.4% | 2024-11-04 | |
| CVE-2024-10756 | PHPGurukul Online Shopping Portal html_table.php cross-site scripting | 6.1v3.1 | 0.4% | 2024-11-04 | |
| CVE-2024-10755 | PHPGurukul Online Shopping Portal empty_table.php cross-site scripting | 6.1v3.1 | 0.4% | 2024-11-04 | |
| CVE-2024-10754 | PHPGurukul Online Shopping Portal dymanic_table.php cross-site scripting | 6.1v3.1 | 0.4% | 2024-11-04 | |
| CVE-2024-10753 | PHPGurukul Online Shopping Portal dom_data_two_headers.php cross-site scripting | 5.4v3.1 | 0.4% | 2024-11-04 | |
| CVE-2024-10752 | Codezips Pet Shop Management System productsadd.php SQL injection | 9.8v3.1 | 0.6% | 2024-11-04 | |
| CVE-2024-10751 | Codezips ISP Management System pay.php SQL injection | 9.8v3.1 | 0.6% | 2024-11-04 | |
| CVE-2024-10750 | Tenda i22 SysToo websReadEvent null pointer dereference | 6.5NVD v3.1 | 0.9% | 2024-11-04 | |
| CVE-2024-10749 | ThinkAdmin Plugs.php script deserialization | 8.1v3.1 | 0.5% | 2024-11-04 | |
| CVE-2024-10748 | Cosmote Greece What's Up App Realm Database RealmDB.java default key | 4.7v3.1 | 0.3% | 2024-11-04 | |
| CVE-2024-10747 | PHPGurukul Online Shopping Portal dom_data_th.php cross-site scripting | 6.1v3.1 | 0.4% | 2024-11-04 | |
| CVE-2024-10746 | PHPGurukul Online Shopping Portal dom_data.php cross-site scripting | 6.1v3.1 | 0.4% | 2024-11-04 | |
| CVE-2024-10523 | Information disclosure vulnerability in TP-Link IoT Smart Hub | 4.6v3.1 | 0.1% | 2024-11-04 | Fix |
| CVE-2024-10389 | Google path traversal in Safearchive | 5.9CNA v4.0 | 0.2% | 2024-11-04 | Fix |
| CVE-2024-10035 | Code injection in BG-TEK's CoslatV3 | 9.8v3.1 | 0.8% | 2024-11-04 | |
| CVE-2024-9147 | HTML injection in Bna Informatics' PosPratik | 6.1v3.1 | 0.2% | 2024-11-04 | Fix |
| CVE-2024-10745 | PHPGurukul Online Shopping Portal deferred_table.php cross-site scripting | 6.1v3.1 | 0.4% | 2024-11-03 | |
| CVE-2024-10744 | PHPGurukul Online Shopping Portal complex_header_2.php cross-site scripting | 6.1v3.1 | 0.4% | 2024-11-03 | |
| CVE-2024-10743 | PHPGurukul Online Shopping Portal editable_ajax.php cross-site scripting | 6.1v3.1 | 0.4% | 2024-11-03 | |
| CVE-2024-10742 | code-projects Wazifa System control.php SQL injection | 7.5v3.1 | 0.4% | 2024-11-03 | |
| CVE-2024-10741 | code-projects E-Health Care System registration.php SQL injection | 9.8v3.1 | 0.7% | 2024-11-03 | |
| CVE-2024-10740 | code-projects E-Health Care System consulting_detail.php SQL injection | 9.8v3.1 | 0.6% | 2024-11-03 | |
| CVE-2024-10739 | code-projects E-Health Care System adminlogin.php SQL injection | 9.8v3.1 | 0.7% | 2024-11-03 | |
| CVE-2024-10738 | itsourcecode Farm Management System manage-breed.php SQL injection | 9.8v3.1 | 0.5% | 2024-11-03 | |
| CVE-2024-10737 | Codezips Free Exam Hall Seating Management System teacher.php SQL injection | 9.8v3.1 | 0.6% | 2024-11-03 | |
| CVE-2024-10736 | Codezips Free Exam Hall Seating Management System student.php SQL injection | 9.8v3.1 | 0.6% | 2024-11-03 | |
| CVE-2024-10735 | Project Worlds Life Insurance Management System editNominee.php SQL injection | 9.8v3.1 | 0.5% | 2024-11-03 | |
| CVE-2024-10734 | Project Worlds Life Insurance Management System editPayment.php SQL injection | 9.8v3.1 | 0.5% | 2024-11-03 | |
| CVE-2024-10733 | code-projects Restaurant Order System login.php SQL injection | 9.8v3.1 | 0.7% | 2024-11-03 | |
| CVE-2024-10732 | Tongda OA 2017 index.php SQL injection | 9.8v3.1 | 0.5% | 2024-11-03 | |
| CVE-2024-10731 | Tongda OA check_seal.php SQL injection | 9.8v3.1 | 0.5% | 2024-11-03 | |
| CVE-2024-10730 | Tongda OA web_show.php SQL injection | 9.8v3.1 | 0.5% | 2024-11-03 | |
| CVE-2024-51774 | qBittorrent improper certificate validation | 8.1v3.1 | 3.3% | 2024-11-02 | Exploit codeFix |
| CVE-2024-10702 | code-projects Simple Car Rental System signup.php SQL injection | 9.8v3.1 | 0.6% | 2024-11-02 | |
| CVE-2024-10701 | PHPGurukul Car Rental Portal search.php cross-site scripting | 6.1v3.1 | 0.4% | 2024-11-02 | |
| CVE-2024-10700 | code-projects University Event Management System submit.php SQL injection | 9.8v3.1 | 0.6% | 2024-11-02 | |
| CVE-2024-10699 | code-projects Wazifa System logincontrol.php SQL injection | 9.8v3.1 | 0.7% | 2024-11-02 | |
| CVE-2024-10698 | Tenda AC6 SetOnlineDevName formSetDeviceName stack-based overflow | 9.8v3.1 | 1.3% | 2024-11-02 | |
| CVE-2024-10697 | Tenda AC6 API Endpoint WriteFacMac formWriteFacMac command injection | 9.8v3.1 | 26.2% | 2024-11-02 | |
| CVE-2024-10540 | Appointment Booking Calendar Plugin and Scheduling Plugin WordPress plugin SQL injection | 6.5v3.1 | 0.6% | 2024-11-02 | Fix |
| CVE-2024-10310 | Element Pack Elementor Addons WordPress plugin DOM-based stored cross-site scripting | 5.4v3.1 | 0.2% | 2024-11-02 | Fix |
| CVE-2024-9896 | BBP Core WordPress plugin reflected cross-site scripting | 6.1CNA v3.1 | 0.4% | 2024-11-02 | Fix |
| CVE-2024-9868 | Element Pack Elementor Addons WordPress plugin stored cross-site scripting | 5.4CNA v3.1 | 0.3% | 2024-11-02 | Fix |
| CVE-2024-8739 | ReCaptcha Integration for WordPress plugin reflected cross-site scripting | 6.1CNA v3.1 | 0.4% | 2024-11-02 | Fix |
| CVE-2024-51492 | Zusam vulnerable to stored XSS, allowing token theft via crafted SVG | 8.8CNA v3.1 | 0.5% | 2024-11-01 | Fix |
| CVE-2024-51483 | changedetection.io path traversal | 6.9CNA v4.0 | 2.3% | 2024-11-01 | NucleiFix |
| CVE-2024-51432 | FiberHome HG6544C RP2743 cross-site scripting | 4.8CISA ADP v3.1 | 0.3% | 2024-11-01 | |
| CVE-2024-51431 | LB-LINK Bl-wr1300h hard-coded credentials | 9.8v3.1 | 0.6% | 2024-11-01 | |
| CVE-2024-51407 | Project Floodlight Floodlight OpenFlow broadcast port handling vulnerability | 6.2CISA ADP v3.1 | 0.2% | 2024-11-01 | |
| CVE-2024-51406 | projectfloodlight Open Sdn Controller authentication bypass by spoofing | 6.2CISA ADP v3.1 | 0.2% | 2024-11-01 | |
| CVE-2024-51399 | Altai Technologies Ltd Altai IX500 Indoor 22 802.11ac Wave 2 AP After login, there are file reads in the background, and attackers can obtain sensitive information such as user credentials, system configuration, and database connection strings, which can lead to data breaches and identity theft. | 5.7CISA ADP v3.1 | 0.2% | 2024-11-01 | |
| CVE-2024-51398 | Altai Technologies X500 Indoor AP web management interface weak password requirements | 6.5CISA ADP v3.1 | 0.2% | 2024-11-01 | |
| CVE-2024-51377 | Ladybirdweb Faveo Helpdesk cross-site scripting | 5.4NVD v3.1 | 0.5% | 2024-11-01 | |
| CVE-2024-51252 | DrayTek Vigor3900 OS command injection | 9.8v3.1 | 0.8% | 2024-11-01 | |
| CVE-2024-51248 | DrayTek Vigor3900 OS command injection | 8.8v3.1 | 0.8% | 2024-11-01 | |
| CVE-2024-51247 | DrayTek Vigor3900 OS command injection | 8.8v3.1 | 0.8% | 2024-11-01 | |
| CVE-2024-51245 | DrayTek Vigor3900 OS command injection | 8.8v3.1 | 0.8% | 2024-11-01 | |
| CVE-2024-51244 | DrayTek Vigor3900 OS command injection | 8.8v3.1 | 0.8% | 2024-11-01 | |
| CVE-2024-49770 | oak's path traversal allows transfer of hidden files within the served root directory | 7.7CNA v4.0 | 0.7% | 2024-11-01 | Fix |
| CVE-2024-49501 | OMRON SYSMAC-SE2[][][] incorrect authorization | 5.7CNA v3.0 | 0.2% | 2024-11-01 | |
| CVE-2024-49256 | Htaccess File Editor WordPress plugin broken access control | 8.8v3.1 | 0.4% | 2024-11-01 | Fix |
| CVE-2024-48410 | Camtrace v.9.16.2.1 cross-site scripting | 6.1CISA ADP v3.1 | 0.4% | 2024-11-01 | |
| CVE-2024-48353 | Yealink Meeting Server insecure storage of sensitive information | 7.5v3.1 | 0.4% | 2024-11-01 | Fix |
| CVE-2024-48352 | Yealink Meeting Server insecure storage of sensitive information | 7.5v3.1 | 0.5% | 2024-11-01 | Fix |
| CVE-2024-48289 | Cypress Bluetooth SDK Bluetooth Low Energy implementation denial of service | 6.5CISA ADP v3.1 | 0.3% | 2024-11-01 | |
| CVE-2024-48270 | misstt123 oasys information disclosure | 7.5CISA ADP v3.1 | 0.5% | 2024-11-01 | |
| CVE-2024-48217 | dashboard of SiSMART v7.4.0 An insecure direct object reference | 8.8CISA ADP v3.1 | 0.7% | 2024-11-01 | Exploit code |
| CVE-2024-48045 | Happy Elementor Addons WordPress plugin broken access control | 8.8v3.1 | 0.4% | 2024-11-01 | Fix |
| CVE-2024-48044 | ShortPixel Image Optimizer WordPress plugin broken access control | 8.8v3.1 | 0.4% | 2024-11-01 | Fix |
| CVE-2024-48039 | CubeWP Framework WordPress plugin broken access control | 8.8v3.1 | 0.3% | 2024-11-01 | Fix |
| CVE-2024-47939 | Ricoh Multiple laser printers and MFPs which implement Web Image Monitor stack-based buffer overflow | 7.7CNA v3.0 | 0.7% | 2024-11-01 | |
| CVE-2024-47362 | Strong Testimonials WordPress plugin broken access control | 8.8v3.1 | 0.4% | 2024-11-01 | Fix |
| CVE-2024-47361 | Elementor Addon Elements WordPress plugin broken access control | 8.8v3.1 | 0.4% | 2024-11-01 | Fix |
| CVE-2024-47359 | Depicter WordPress plugin broken access control | 9.8v3.1 | 0.3% | 2024-11-01 | Fix |
| CVE-2024-47358 | Popup Maker WordPress plugin broken access control | 9.8v3.1 | 0.4% | 2024-11-01 | Fix |
| CVE-2024-47321 | WP Datepicker WordPress plugin broken access control | 9.8v3.1 | 0.4% | 2024-11-01 | Fix |
| CVE-2024-47318 | PWA for WP and AMP WordPress plugin broken access control | 8.8v3.1 | 0.3% | 2024-11-01 | Fix |
| CVE-2024-47317 | Ads by WPQuads WordPress plugin broken access control | 8.8v3.1 | 0.4% | 2024-11-01 | Fix |
| CVE-2024-47314 | Sunshine Photo Cart WordPress plugin broken access control | 8.8v3.1 | 0.4% | 2024-11-01 | Fix |
| CVE-2024-47311 | Wheel of Life WordPress plugin broken access control | 9.8v3.1 | 0.4% | 2024-11-01 | Fix |
| CVE-2024-47308 | Templately WordPress plugin broken access control | 9.8v3.1 | 1.7% | 2024-11-01 | NucleiFix |
| CVE-2024-47302 | Fluent Support WordPress plugin broken access control on email verification | 9.8v3.1 | 0.4% | 2024-11-01 | Fix |
| CVE-2024-44234 | Apple macOS buffer overflow | 5.5v3.1 | 0.3% | 2024-11-01 | Fix |
| CVE-2024-44233 | Apple macOS buffer overflow | 5.5v3.1 | 0.3% | 2024-11-01 | Fix |
| CVE-2024-44232 | Apple macOS buffer overflow | 5.5v3.1 | 0.3% | 2024-11-01 | Fix |
| CVE-2024-44052 | HelloAsso WordPress plugin broken access control | 8.8v3.1 | 0.3% | 2024-11-01 | Fix |
| CVE-2024-44038 | Sunshine Photo Cart WordPress plugin broken access control | 9.8v3.1 | 0.4% | 2024-11-01 | Fix |
| CVE-2024-44031 | JoomSport WordPress plugin broken access control | 8.8v3.1 | 0.4% | 2024-11-01 | Fix |
| CVE-2024-44021 | Truepush WordPress plugin broken access control | 8.8v3.1 | 0.4% | 2024-11-01 | |
| CVE-2024-44020 | WP Free SSL WordPress plugin broken access control | 8.8v3.1 | 0.2% | 2024-11-01 | Fix |
| CVE-2024-44019 | Contact Form 7 Campaign Monitor Extension WordPress plugin arbitrary file deletion | 9.8v3.1 | 0.4% | 2024-11-01 | |
| CVE-2024-44006 | WooCommerce Multilingual and Multicurrency WordPress plugin broken access control | 8.8v3.1 | 0.4% | 2024-11-01 | Fix |
| CVE-2024-43998 | Blogpoet WordPress theme broken access control | 9.8NVD v3.1 | 1.5% | 2024-11-01 | Exploit codeFix |
| CVE-2024-43982 | Login As Users WordPress plugin broken access control to account takeover | 8.8v3.1 | 0.4% | 2024-11-01 | Fix |
| CVE-2024-43981 | GeoDirectory WordPress plugin broken access control | 8.8v3.1 | 0.4% | 2024-11-01 | Fix |
| CVE-2024-43980 | CozyThemes Fota WP missing authorization | 9.8v3.1 | 0.5% | 2024-11-01 | Fix |
| CVE-2024-43979 | Blockbooster WordPress theme broken access control | 9.8v3.1 | 0.5% | 2024-11-01 | Fix |
| CVE-2024-43974 | ReviveNews WordPress theme broken access control | 9.8v3.1 | 0.5% | 2024-11-01 | Fix |
| CVE-2024-43973 | GetPaid WordPress plugin broken access control | 8.8v3.1 | 0.5% | 2024-11-01 | Fix |
| CVE-2024-43968 | Newspack WordPress plugin broken access control | 8.8v3.1 | 0.5% | 2024-11-01 | Fix |
| CVE-2024-43962 | LWS Affiliation WordPress plugin broken access control | 8.8v3.1 | 0.5% | 2024-11-01 | Fix |
| CVE-2024-43956 | MemberPress WordPress plugin broken access control | 9.8v3.1 | 0.4% | 2024-11-01 | Fix |
| CVE-2024-43937 | WP Crowdfunding WordPress plugin settings Change vulnerability | 4.3v3.1 | 0.4% | 2024-11-01 | Fix |
| CVE-2024-43932 | The Plus Addons for Elementor WordPress plugin broken access control | 8.8v3.1 | 0.6% | 2024-11-01 | Fix |
| CVE-2024-43929 | JobSearch WP Job Board WordPress plugin broken access control | 9.8v3.1 | 0.4% | 2024-11-01 | Fix |
| CVE-2024-43928 | JobSearch WP Job Board WordPress plugin broken access control | 8.8v3.1 | 0.4% | 2024-11-01 | Fix |
| CVE-2024-43925 | Envira Gallery Lite WordPress plugin broken access control | 8.8v3.1 | 0.5% | 2024-11-01 | Fix |
| CVE-2024-43923 | Timetics WordPress plugin broken access control | 9.8v3.1 | 0.5% | 2024-11-01 | Fix |
| CVE-2024-43919 | Yet Another Related Posts Plugin (YARPP) WordPress plugin broken access control | 9.8v3.1 | 44.9% | 2024-11-01 | NucleiExploit codeFix |
| CVE-2024-43355 | JoomSport WordPress plugin broken access control | 8.8v3.1 | 0.4% | 2024-11-01 | Fix |
| CVE-2024-43343 | Order Tracking WordPress Status Tracking plugin broken access control | 8.8v3.1 | 0.5% | 2024-11-01 | Fix |
| CVE-2024-43341 | Hello Agency WordPress theme broken access control | 9.8v3.1 | 0.5% | 2024-11-01 | Fix |
| CVE-2024-43332 | Photo Engine WordPress plugin broken access control | 8.8v3.1 | 0.5% | 2024-11-01 | Fix |
| CVE-2024-43323 | ReviewX WordPress plugin broken access control | 9.8v3.1 | 0.5% | 2024-11-01 | Fix |
| CVE-2024-43314 | Asset CleanUp: Page Speed Booster WordPress plugin broken access control | 8.8v3.1 | 0.4% | 2024-11-01 | Fix |
| CVE-2024-43312 | WPC Frequently Bought Together for WooCommerce WordPress plugin broken access control | 8.8v3.1 | 0.4% | 2024-11-01 | Fix |
| CVE-2024-43310 | UkrSolution Print Barcode Labels for your WooCommerce products/orders missing authorization | 8.8v3.1 | 0.5% | 2024-11-01 | Fix |
| CVE-2024-43302 | Fonts WordPress plugin broken access control | 8.8v3.1 | 0.4% | 2024-11-01 | Fix |
| CVE-2024-43298 | Clone WordPress plugin broken access control | 8.8v3.1 | 0.4% | 2024-11-01 | Fix |
| CVE-2024-43297 | Clone WordPress plugin broken access control | 8.8v3.1 | 0.4% | 2024-11-01 | Fix |
| CVE-2024-43296 | HTML5 Video Player WordPress plugin broken access control | 8.8v3.1 | 0.4% | 2024-11-01 | Fix |
| CVE-2024-43293 | Recipe Card Blocks for Gutenberg and Elementor WordPress plugin broken access control | 8.8v3.1 | 0.4% | 2024-11-01 | Fix |
| CVE-2024-43290 | Atarim WordPress plugin broken access control | 5.3CNA v3.1 | 0.4% | 2024-11-01 | Fix |
| CVE-2024-43285 | Presto Player WordPress plugin broken access control | 6.3CNA v3.1 | 0.4% | 2024-11-01 | Fix |
| CVE-2024-43277 | UsersWP WordPress plugin broken access control | 5.3CNA v3.1 | 0.4% | 2024-11-01 | Fix |
| CVE-2024-43274 | JS Help Desk The Ultimate Help Desk WordPress plugin broken access control | 9.8v3.1 | 0.4% | 2024-11-01 | Fix |
| CVE-2024-43273 | Icegram Collect WordPress plugin broken access control | 5.4CNA v3.1 | 0.4% | 2024-11-01 | Fix |
| CVE-2024-43270 | Backup and Restore WordPress plugin unauthenticated broken access control | 5.3CNA v3.1 | 0.4% | 2024-11-01 | Fix |
| CVE-2024-43268 | Backup and Restore WordPress plugin broken access control | 5.4CNA v3.1 | 0.3% | 2024-11-01 | Fix |
| CVE-2024-43260 | Clearfy Cache WordPress plugin broken access control | 5.4CNA v3.1 | 0.3% | 2024-11-01 | Fix |
| CVE-2024-43254 | Smart Online Order for Clover WordPress plugin broken access control | 8.8v3.1 | 0.4% | 2024-11-01 | Fix |
| CVE-2024-43253 | Smart Online Order for Clover WordPress plugin broken access control | 9.8v3.1 | 0.6% | 2024-11-01 | Fix |
| CVE-2024-43235 | Meta Box WordPress plugin broken access control | 7.1CNA v3.1 | 0.5% | 2024-11-01 | Fix |
| CVE-2024-43229 | WP Search Analytics WordPress plugin broken access control | 4.3CNA v3.1 | 0.4% | 2024-11-01 | Fix |
| CVE-2024-43223 | EventPrime WordPress plugin broken access control | 8.8v3.1 | 0.4% | 2024-11-01 | Fix |
| CVE-2024-43219 | Persian WooCommerce WordPress plugin broken access control | 5.3CNA v3.1 | 0.4% | 2024-11-01 | Fix |
| CVE-2024-43215 | Social Slider Feed WordPress plugin broken access control | 4.3CNA v3.1 | 0.4% | 2024-11-01 | Fix |
| CVE-2024-43212 | WpTravelly WordPress plugin broken access control | 7.5CNA v3.1 | 0.6% | 2024-11-01 | Fix |
| CVE-2024-43211 | MailChimp Subscribe Form WordPress plugin stored cross-site scripting | 5.9CNA v3.1 | 0.3% | 2024-11-01 | Fix |
| CVE-2024-43209 | Bitly's WordPress plugin broken access control | 6.5CNA v3.1 | 0.4% | 2024-11-01 | Fix |
| CVE-2024-43208 | Send Emails with Mandrill WordPress plugin broken access control | 4.3CNA v3.1 | 0.4% | 2024-11-01 | Fix |
| CVE-2024-43162 | Easy Digital Downloads WordPress plugin broken access control | 8.8v3.1 | 0.5% | 2024-11-01 | Fix |
| CVE-2024-43159 | Masteriyo LMS WordPress plugin broken access control | 5.3v3.1 | 0.4% | 2024-11-01 | Fix |
| CVE-2024-43158 | Masteriyo LMS WordPress plugin broken access control | 7.5v3.1 | 0.5% | 2024-11-01 | Fix |
| CVE-2024-43157 | FormCraft WordPress plugin broken access control | 4.3CNA v3.1 | 0.4% | 2024-11-01 | Fix |
| CVE-2024-43154 | Advanced Cron Manager debug and control WordPress plugin broken access control | 4.3CNA v3.1 | 0.4% | 2024-11-01 | Fix |
| CVE-2024-43146 | AMP for WP WordPress plugin Ahmed Kaludi missing authorization | 6.3CNA v3.1 | 0.4% | 2024-11-01 | Fix |
| CVE-2024-43143 | Registrations for the Events Calendar WordPress plugin broken access control | 6.4CNA v3.1 | 0.4% | 2024-11-01 | Fix |
| CVE-2024-43142 | Tutor LMS WordPress plugin broken access control | 8.8v3.1 | 0.4% | 2024-11-01 | Fix |
| CVE-2024-43136 | Sunshine Photo Cart WordPress plugin broken access control | 8.8v3.1 | 0.4% | 2024-11-01 | Fix |
| CVE-2024-43134 | Waitlist Woocommerce WordPress plugin broken access control | 4.3CNA v3.1 | 0.3% | 2024-11-01 | Fix |
| CVE-2024-43122 | Robin image optimizer WordPress plugin broken access control | 6.5CNA v3.1 | 0.5% | 2024-11-01 | Fix |
| CVE-2024-43120 | TypeSquare Webfonts WordPress plugin broken access control | 5.3CNA v3.1 | 0.4% | 2024-11-01 | Fix |
| CVE-2024-43119 | Aruba HiSpeed Cache WordPress plugin broken access control | 4.3CNA v3.1 | 0.5% | 2024-11-01 | Fix |
| CVE-2024-43118 | Hummingbird WordPress plugin broken access control | 8.8v3.1 | 0.6% | 2024-11-01 | Fix |
| CVE-2024-41745 | IBM CICS TX Standard cross-site scripting | 6.1CNA v3.1 | 0.3% | 2024-11-01 | Fix |
| CVE-2024-41744 | IBM CICS TX Standard cross-site request forgery | 6.5CNA v3.1 | 0.2% | 2024-11-01 | Fix |
| CVE-2024-41741 | IBM TXSeries for Multiplatforms information disclosure | 5.3CNA v3.1 | 0.3% | 2024-11-01 | Fix |
| CVE-2024-41738 | IBM TXSeries for Multiplatforms information disclosure | 5.9CNA v3.1 | 0.3% | 2024-11-01 | Fix |
| CVE-2024-40490 | Sourcebans++ Forgot Password function information disclosure | 7.5CISA ADP v3.1 | 0.5% | 2024-11-01 | |
| CVE-2024-39664 | Filter and Grids WordPress plugin broken authentication | 7.3CNA v3.1 | 0.4% | 2024-11-01 | Fix |
| CVE-2024-39654 | Sign-up Sheets WordPress plugin broken access control | 5.3CNA v3.1 | 0.4% | 2024-11-01 | Fix |
| CVE-2024-39650 | WooCommerce PDF Vouchers WordPress plugin unauthenticated Multiple vulnerabilities | 9.8v3.1 | 0.5% | 2024-11-01 | Fix |
| CVE-2024-39640 | Social Feed Gallery WordPress plugin broken access control | 6.5CNA v3.1 | 0.4% | 2024-11-01 | Fix |
| CVE-2024-39639 | File Upload WordPress plugin broken access control + CSRF | 3.5NVD v3.1 | 0.3% | 2024-11-01 | Fix |
| CVE-2024-39635 | Youzify WordPress plugin broken access control | 8.8v3.1 | 0.4% | 2024-11-01 | Fix |
| CVE-2024-39625 | Icegram Engage WordPress plugin unauthenticated Message Duplication vulnerability | 5.3CNA v3.1 | 0.4% | 2024-11-01 | Fix |
| CVE-2024-38794 | Custom Query Blocks WordPress plugin broken access control | 5.3CNA v3.1 | 0.4% | 2024-11-01 | Fix |
| CVE-2024-38792 | ConveyThis Translate WordPress plugin Non-arbitrary options update vulnerability | 5.3CNA v3.1 | 0.4% | 2024-11-01 | Fix |
| CVE-2024-38783 | Arconix FAQ WordPress plugin broken access control | 5.3v3.1 | 0.4% | 2024-11-01 | Fix |
| CVE-2024-38777 | Titan Anti-spam and Security WordPress plugin broken access control | 6.5CNA v3.1 | 0.5% | 2024-11-01 | Fix |
| CVE-2024-38774 | Security Optimizer WordPress plugin broken access control | 5.4CNA v3.1 | 0.4% | 2024-11-01 | Fix |
| CVE-2024-38771 | Atarim WordPress plugin broken access control | 6.5CNA v3.1 | 0.4% | 2024-11-01 | Fix |
| CVE-2024-38769 | Arconix Shortcodes WordPress plugin broken access control | 5.3v3.1 | 0.4% | 2024-11-01 | Fix |
| CVE-2024-38748 | EleForms WordPress plugin broken access control | 9.8v3.1 | 0.5% | 2024-11-01 | |
| CVE-2024-38745 | Wholesale Suite WordPress plugin broken access control | 5.3CNA v3.1 | 0.5% | 2024-11-01 | Fix |
| CVE-2024-38744 | Plum: Spin Wheel and Email Pop-up WordPress plugin broken access control to Unauth stored XSS | 8.3CNA v3.1 | 0.3% | 2024-11-01 | |
| CVE-2024-38743 | Plum: Spin Wheel and Email Pop-up WordPress plugin broken access control | 5.3CNA v3.1 | 0.4% | 2024-11-01 | |
| CVE-2024-38740 | Packlink PRO shipping module WordPress plugin broken access control | 5.4CNA v3.1 | 0.4% | 2024-11-01 | Fix |
| CVE-2024-38737 | ReDi Restaurant Reservation WordPress plugin broken access control | 5.4CNA v3.1 | 0.3% | 2024-11-01 | Fix |
| CVE-2024-38733 | Meks Video Importer WordPress plugin broken access control | 5.4CNA v3.1 | 0.4% | 2024-11-01 | Fix |
| CVE-2024-38727 | Seraphinite Post .DOCX Source WordPress plugin broken access control | 4.3CNA v3.1 | 0.4% | 2024-11-01 | Fix |
| CVE-2024-38726 | Product Designer WordPress plugin arbitrary content deletion vulnerability | 7.5CNA v3.1 | 0.5% | 2024-11-01 | Fix |
| CVE-2024-38721 | EazyDocs WordPress plugin broken access control | 7.1CNA v3.1 | 0.4% | 2024-11-01 | Fix |
| CVE-2024-38719 | Auto Featured Image WordPress plugin broken access control | 4.3CNA v3.1 | 0.4% | 2024-11-01 | Fix |
| CVE-2024-38714 | WordPress WP Fast Total Search plugin broken access control | 4.3CNA v3.1 | 0.4% | 2024-11-01 | Fix |
| CVE-2024-38707 | EmbedPress WordPress plugin broken access control | 8.8v3.1 | 0.4% | 2024-11-01 | Fix |
| CVE-2024-38702 | Product Delivery Date for WooCommerce Lite WordPress plugin broken access control | 5.3CNA v3.1 | 0.5% | 2024-11-01 | Fix |
| CVE-2024-38695 | WP GoToWebinar WordPress plugin broken access control | 4.3CNA v3.1 | 0.4% | 2024-11-01 | Fix |
| CVE-2024-38690 | iPanorama 360 WordPress plugin broken access control | 5.3CNA v3.1 | 0.4% | 2024-11-01 | Fix |
| CVE-2024-37929 | User Activity Log Pro WordPress plugin Subscriber+ Multiple broken access control | 6.3CNA v3.1 | 0.4% | 2024-11-01 | |
| CVE-2024-37926 | WP Accessibility Helper (WAH) WordPress plugin broken access control | 5.3CNA v3.1 | 0.4% | 2024-11-01 | Fix |
| CVE-2024-37921 | Chained Quiz WordPress plugin broken access control | 5.3CNA v3.1 | 0.4% | 2024-11-01 | Fix |
| CVE-2024-37517 | Spectra WordPress plugin broken access control | 8.8v3.1 | 0.4% | 2024-11-01 | Fix |
| CVE-2024-37516 | Featured Image from URL (FIFU) WordPress plugin broken access control | 6.3CNA v3.1 | 0.4% | 2024-11-01 | Fix |
| CVE-2024-37510 | Donation Forms by Charitable WordPress plugin broken access control | 6.5CNA v3.1 | 0.5% | 2024-11-01 | Fix |
| CVE-2024-37506 | Donation Forms by Charitable WordPress plugin broken access control | 5.3CNA v3.1 | 0.4% | 2024-11-01 | Fix |
| CVE-2024-37505 | Business One Page WordPress theme broken access control on Notice Dismissal | 5.4v3.1 | 0.3% | 2024-11-01 | Fix |
| CVE-2024-37483 | The Post Grid WordPress plugin broken access control | 5.4CNA v3.1 | 0.3% | 2024-11-01 | Fix |
| CVE-2024-37482 | The Post Grid WordPress plugin broken access control | 4.3CNA v3.1 | 0.4% | 2024-11-01 | Fix |
| CVE-2024-37481 | The Post Grid WordPress plugin broken access control | 6.5CNA v3.1 | 0.3% | 2024-11-01 | Fix |
| CVE-2024-37477 | Newspack Content Converter WordPress plugin broken access control | 6.5CNA v3.1 | 0.4% | 2024-11-01 | Fix |
| CVE-2024-37475 | Newspack Newsletters WordPress plugin broken access control | 5.3CNA v3.1 | 0.4% | 2024-11-01 | Fix |
| CVE-2024-37470 | Woffice Core WordPress plugin unauthenticated broken access control | 9.8v3.1 | 0.5% | 2024-11-01 | Fix |
| CVE-2024-37468 | Newsmatic WordPress theme broken access control | 5.3CNA v3.1 | 0.4% | 2024-11-01 | Fix |
| CVE-2024-37463 | CRM Perks Forms WordPress plugin broken access control | 9.8v3.1 | 0.5% | 2024-11-01 | Fix |
| CVE-2024-37456 | Simple Newsletter Plugin Noptin WordPress plugin broken access control | 5.3CNA v3.1 | 0.4% | 2024-11-01 | Fix |
| CVE-2024-37453 | ProfileGrid User Profiles, Groups and Communities WordPress plugin broken access control | 8.8v3.1 | 0.4% | 2024-11-01 | Fix |
| CVE-2024-37444 | Defender WordPress plugin broken access control | 9.8v3.1 | 0.5% | 2024-11-01 | Fix |
| CVE-2024-37443 | WP Job Manager WordPress plugin broken access control | 4.3CNA v3.1 | 0.3% | 2024-11-01 | Fix |
| CVE-2024-37440 | Church Admin WordPress plugin broken access control | 4.3CNA v3.1 | 0.3% | 2024-11-01 | Fix |
| CVE-2024-37439 | Uncanny Toolkit Pro for LearnDash WordPress plugin arbitrary Post/Page Duplication vulnerability | 5.4CNA v3.1 | 0.4% | 2024-11-01 | Fix |
| CVE-2024-37427 | Timetics WordPress plugin broken access control | 5.3CNA v3.1 | 0.3% | 2024-11-01 | Fix |
| CVE-2024-37425 | Newspack Blocks WordPress plugin broken access control | 5.4CNA v3.1 | 0.4% | 2024-11-01 | Fix |
| CVE-2024-37423 | Newspack Blocks WordPress plugin Contributor+ arbitrary directory deletion vulnerability | 8.5CNA v3.1 | 0.5% | 2024-11-01 | Fix |
| CVE-2024-37415 | E2Pdf WordPress plugin broken access control | 5.4CNA v3.1 | 0.3% | 2024-11-01 | Fix |
| CVE-2024-37411 | Progress Planner WordPress plugin broken access control | 5.3CNA v3.1 | 0.4% | 2024-11-01 | Fix |
| CVE-2024-37277 | Paid Memberships Pro WordPress plugin insecure direct object references (IDOR) | 9.8v3.1 | 0.7% | 2024-11-01 | Fix |
| CVE-2024-37276 | Featured Image from URL (FIFU) WordPress plugin broken access control | 5.3CNA v3.1 | 0.4% | 2024-11-01 | Fix |
| CVE-2024-37269 | Masterstudy Elementor Widgets WordPress plugin unauthenticated broken access control | 5.3CNA v3.1 | 0.4% | 2024-11-01 | Fix |
| CVE-2024-37255 | ElementsKit Lite WordPress plugin unauthenticated broken access control | 5.3v3.1 | 0.4% | 2024-11-01 | Fix |
| CVE-2024-37254 | WP File Manager WordPress plugin broken access control | 4.3CNA v3.1 | 0.3% | 2024-11-01 | Fix |
| CVE-2024-37250 | Advanced Custom Fields Pro WordPress plugin Subscriber+ broken access control | 5.4CNA v3.1 | 0.3% | 2024-11-01 | Fix |
| CVE-2024-37249 | Advanced Custom Fields Pro WordPress plugin Contributor+ broken access control | 4.3CNA v3.1 | 0.3% | 2024-11-01 | Fix |
| CVE-2024-37232 | Hercules Core WordPress plugin Subscriber+ arbitrary settings Change/Access vulnerability | 8.8CNA v3.1 | 0.4% | 2024-11-01 | Fix |
| CVE-2024-37226 | Kanban Boards for WordPress plugin broken access control | 5.3CNA v3.1 | 0.4% | 2024-11-01 | |
| CVE-2024-37220 | Optinly WordPress plugin broken access control | 5.3CNA v3.1 | 0.4% | 2024-11-01 | Fix |
| CVE-2024-37218 | WordPress Page Builder Sandwich plugin broken access control | 4.3CNA v3.1 | 0.3% | 2024-11-01 | |
| CVE-2024-37214 | AliExpress Dropshipping with AliNext Lite WordPress plugin broken access control to XSS | 6.5CNA v3.1 | 0.3% | 2024-11-01 | Fix |
| CVE-2024-37209 | User Rights Access Manager WordPress plugin broken access control | 6.5CNA v3.1 | 0.5% | 2024-11-01 | |
| CVE-2024-37207 | Demo Awesome WordPress plugin broken access control | 5.4CNA v3.1 | 0.4% | 2024-11-01 | Fix |
| CVE-2024-37204 | PropertyHive WordPress plugin broken access control | 4.3v3.1 | 0.4% | 2024-11-01 | Fix |
| CVE-2024-37203 | Laybuy Payment Extension for WooCommerce WordPress plugin broken access control | 4.3CNA v3.1 | 0.3% | 2024-11-01 | |
| CVE-2024-37201 | Woocommerce Customers Order History WordPress plugin broken access control | 4.3CNA v3.1 | 0.3% | 2024-11-01 | |
| CVE-2024-37123 | Ibtana WordPress Website Builder plugin broken access control | 5.3CNA v3.1 | 0.4% | 2024-11-01 | Fix |
| CVE-2024-37119 | Uncanny Automator Pro WordPress plugin unauthenticated License settings reset vulnerability | 9.8v3.1 | 0.5% | 2024-11-01 | Fix |
| CVE-2024-37108 | WishList Member X WordPress plugin authenticated arbitrary file deletion | 7.7CNA v3.1 | 0.6% | 2024-11-01 | Fix |
| CVE-2024-37106 | WishList Member X WordPress plugin Unautenticated plugin settings Change Leading to stored XSS | 8.2CNA v3.1 | 0.4% | 2024-11-01 | Fix |
| CVE-2024-37096 | Popup box WordPress plugin broken access control | 4.3CNA v3.1 | 0.3% | 2024-11-01 | Fix |
| CVE-2024-37095 | Envira Photo Gallery WordPress plugin CSRF leading to notice dismissal | 4.3CNA v3.1 | 0.4% | 2024-11-01 | Fix |
| CVE-2024-37094 | MasterStudy LMS WordPress plugin broken access control | 9.8v3.1 | 0.4% | 2024-11-01 | Fix |
| CVE-2024-28265 | IBOS incomplete cleanup | 9.1CISA ADP v3.1 | 0.5% | 2024-11-01 | |
| CVE-2024-27525 | chamilo-lms cross-site scripting | 4.6CISA ADP v3.1 | 0.4% | 2024-11-01 | |
| CVE-2024-27524 | chamilo-lms cross-site scripting | 7.1CISA ADP v3.1 | 0.7% | 2024-11-01 | |
| CVE-2024-22733 | TP-Link MR200 null pointer dereference | 7.5v3.1 | 0.6% | 2024-11-01 | |
| CVE-2024-21510 | Sinatra vulnerable to reliance on untrusted inputs in a security decision | 5.4CNA v3.1 | 0.5% | 2024-11-01 | Fix |
| CVE-2024-10662 | Tenda AC15 SetOnlineDevName formSetDeviceName stack-based overflow | 8.8v3.1 | 1.3% | 2024-11-01 | |
| CVE-2024-10661 | Tenda AC15 SetDlnaCfg stack-based overflow | 8.8v3.1 | 1.2% | 2024-11-01 | |
| CVE-2024-10660 | ESAFENET CDG HookService.java deleteHook SQL injection | 9.8v3.1 | 5.3% | 2024-11-01 | |
| CVE-2024-10659 | ESAFENET CDG CDGAuthoriseTempletService.java delSystemEncryptPolicy SQL injection | 9.8v3.1 | 0.6% | 2024-11-01 | |
| CVE-2024-10658 | Tongda OA check_seal.php SQL injection | 9.8v3.1 | 0.7% | 2024-11-01 | |
| CVE-2024-10657 | Tongda OA prcs_info.php SQL injection | 9.8v3.1 | 0.7% | 2024-11-01 | |
| CVE-2024-10656 | Tongda OA 2017 apply.php SQL injection | 9.8v3.1 | 0.7% | 2024-11-01 | |
| CVE-2024-10655 | Tongda OA 2017 new.php SQL injection | 9.8v3.1 | 0.6% | 2024-11-01 | |
| CVE-2024-10654 | TOTOLINK LR350 formLoginAuth.htm authorization | 9.1v3.1 | 1.6% | 2024-11-01 | Exploit codeFix |
| CVE-2024-10653 | CHANGING Information Technology IDExpert OS command injection | 7.2CNA v3.1 | 0.6% | 2024-11-01 | Fix |
| CVE-2024-10652 | CHANGING Information Technology IDExpert reflected XSS | 6.1CNA v3.1 | 0.3% | 2024-11-01 | Fix |
| CVE-2024-10651 | CHANGING Information Technology IDExpert arbitrary file read through path traversal | 4.9CNA v3.1 | 0.6% | 2024-11-01 | Fix |
| CVE-2024-10620 | knightliao Disconf Configuration Center list improper authentication | 6.9CNA v4.0 | 0.5% | 2024-11-01 | |
| CVE-2024-10619 | Tongda OA 2017 next_detail.php SQL injection | 9.8v3.1 | 0.6% | 2024-11-01 | |
| CVE-2024-10618 | Tongda OA 2017 record_detail.php SQL injection | 9.8v3.1 | 0.6% | 2024-11-01 | |
| CVE-2024-10617 | Tongda OA check_seal.php SQL injection | 9.8v3.1 | 0.6% | 2024-11-01 | |
| CVE-2024-10616 | Tongda OA webSignSubmit.php SQL injection | 9.8v3.1 | 0.6% | 2024-11-01 | |
| CVE-2024-10615 | Tongda OA 2017 delete_data_attach.php SQL injection | 9.8v3.1 | 0.6% | 2024-11-01 | |
| CVE-2024-10613 | ESAFENET CDG SystemEncryptPolicyService.java delSystemEncryptPolicy SQL injection | 8.8v3.1 | 0.6% | 2024-11-01 | |
| CVE-2024-10612 | ESAFENET CDG HookInvalidCourseService.java removeHookInvalidCourse SQL injection | 8.8v3.1 | 0.6% | 2024-11-01 | |
| CVE-2024-10611 | ESAFENET CDG PrintScreenListService.java delProtocol SQL injection | 8.8v3.1 | 0.6% | 2024-11-01 | |
| CVE-2024-10610 | ESAFENET CDG ProtocolService.java delProtocol SQL injection | 8.8v3.1 | 0.5% | 2024-11-01 | |
| CVE-2024-10609 | itsourcecode Tailoring Management System Project typeadd.php SQL injection | 9.8v3.1 | 0.6% | 2024-11-01 | |
| CVE-2024-10608 | code-projects Courier Management System login.php SQL injection | 9.8v3.1 | 0.7% | 2024-11-01 | |
| CVE-2024-10607 | code-projects Courier Management System track-result.php SQL injection | 9.8v3.1 | 0.7% | 2024-11-01 | |
| CVE-2024-10605 | code-projects Blood Bank Management System request.php cross-site request forgery | 6.5v3.1 | 0.4% | 2024-11-01 | |
| CVE-2024-10602 | Tongda OA 2017 data_picker_link.php SQL injection | 9.8v3.1 | 0.6% | 2024-11-01 | |
| CVE-2024-10367 | Otter Blocks WordPress plugin stored cross-site scripting | 6.4CNA v3.1 | 0.4% | 2024-11-01 | Fix |
| CVE-2024-10232 | AtomChat WordPress plugin stored cross-site scripting | 6.4CNA v3.1 | 0.3% | 2024-11-01 | Fix |
| CVE-2024-9655 | Gutenberg Blocks with AI by Kadence WP WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.3% | 2024-11-01 | Fix |
| CVE-2024-9191 | Okta Verify incorrect default permissions | 7.1CNA v3.1 | 0.2% | 2024-11-01 | Fix |
| CVE-2024-7456 | SQL injection in lunary-ai/Lunary | 9.8v3.1 | 1.4% | 2024-11-01 | Exploit codeFix |
| CVE-2024-7424 | Multiple Page Generator Plugin MPG WordPress plugin missing authorization | 5.4CNA v3.1 | 0.3% | 2024-11-01 | Fix |
| CVE-2024-0106 | NVIDIA BlueField 1 improper handling of insufficient privileges | 8.7CNA v3.1 | 0.2% | 2024-11-01 | Fix |
| CVE-2024-0105 | NVIDIA ConnectX-4 improper handling of insufficient privileges | 8.9CNA v3.1 | 0.3% | 2024-11-01 | Fix |